IRC chat logs for #ltsp on irc.libera.chat (webchat)
Channel log from 15 October 2020 (all times are UTC)
| 00:52 | danboid has left IRC (danboid!~ISDADS\sg@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net, Quit: Leaving) | |
| 04:15 | quinox has left IRC (quinox!~quinox@ghost.qtea.nl, Quit: WeeChat 2.8) | |
| 04:19 | quinox has joined IRC (quinox!~quinox@ghost.qtea.nl) | |
| 04:22 | <alkisg> !cheap-client
| |
| 04:22 | <ltspbot> cheap-client: https://www.gearbest.com/tv-box-c_11262/?attr=2081-1279
| |
| 06:04 | RaphGro has joined IRC (RaphGro!~raphgro@fedora/raphgro) | |
| 08:39 | xagapiou has joined IRC (xagapiou!51ba6079@81.186.96.121) | |
| 09:01 | xagapiou has left IRC (xagapiou!51ba6079@81.186.96.121, Remote host closed the connection) | |
| 10:58 | fafler has joined IRC (fafler!bcb70c27@188-183-12-39-dynamic.dk.customer.tdc.net) | |
| 11:01 | <fafler> Hi. I'm working on a LTSP setup, but I need the SSH server to run on the clients, and also need root login via SSH. How do I do that?
| |
| 11:06 | <alkisg> !ssh
| |
| 11:06 | <ltspbot> I do not know about 'ssh', but I do know about these similar topics: 'sshd'
| |
| 11:06 | <alkisg> !sshd
| |
| 11:06 | <ltspbot> sshd: Exposing sshd host keys over NFS is unsafe, so it's disabled by default and !epoptes is recommended instead. If you insist on running sshd in LTSP clients, read https://github.com/ltsp/community/issues/161#issuecomment-694123543
| |
| 11:06 | <alkisg> fafler: ^
| |
| 11:07 | <fafler> !epoptes
| |
| 11:07 | <ltspbot> epoptes: Epoptes is a computer lab administration and monitoring tool. It works on Ubuntu and Debian based labs with LTSP or non-LTSP servers, thin and fat clients, standalone workstations, NX clients etc. More info: https://epoptes.org
| |
| 11:07 | <alkisg> !install
| |
| 11:07 | <ltspbot> install: To install LTSP: https://ltsp.org/docs/installation/
| |
| 11:07 | <alkisg> This installation page also includes instructions for epoptes
| |
| 11:07 | <fafler> Ohhh... seems like that is what I should be doing. Thanks :-D
| |
| 11:08 | <alkisg> Maybe you already have epoptes ? If you followed the wiki page...
| |
| 11:08 | *the installation page...
| |
| 11:08 | <fafler> Yeah, it was in the install guide, but I didn't look into it, because I usually just use SSH
| |
| 11:24 | danboid has joined IRC (danboid!~ISDADS\sg@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net) | |
| 11:25 | <danboid> alkisg: I have worked out the minimum set of ports required to be open on a software firewall for an LTSP server bar one rule, something like this:
| |
| 11:26 | ufw allow 30000:65535/tcp
| |
| 11:26 | What is the lower bound of that range that needs to be open?
| |
| 11:26 | Maybe its 32XXX?
| |
| 11:27 | 30000 might be a bit too low?
| |
| 11:28 | I've definitely seen it use ports in the 3XXXX range but maybe it goes lower
| |
| 11:28 | I want this running so that we can use fail2ban
| |
| 11:28 | which requires an enabled software firewall
| |
| 11:31 | Oh actually, its probably 32768 to 60999
| |
| 11:32 | https://en.wikipedia.org/wiki/Ephemeral_port says "Many Linux kernels use the port range 32768 to 60999"
| |
| 11:32 | That sounds like a match to me
| |
| 11:45 | I will update the wiki security article with the list of ports shortly
| |
| 13:05 | TatankaT has joined IRC (TatankaT!~tim@syslogin-ae.oma.be) | |
| 13:31 | lucascastro has left IRC (lucascastro!~lucascast@177-185-139-15.dynamic.isotelco.net.br, Ping timeout: 272 seconds) | |
| 13:42 | lucascastro has joined IRC (lucascastro!~lucascast@177-185-131-230.corp.isotelco.net.br) | |
| 13:43 | danboid has left IRC (danboid!~ISDADS\sg@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net, Quit: Leaving) | |
| 14:38 | lucascastro has left IRC (lucascastro!~lucascast@177-185-131-230.corp.isotelco.net.br, Ping timeout: 246 seconds) | |
| 14:40 | <quinox> that's a lot of ports
| |
| 14:42 | you can also make the default ACCEPT + fail2ban
| |
| 15:28 | woernie has left IRC (woernie!~werner@p5ddec4e7.dip0.t-ipconnect.de, Ping timeout: 256 seconds) | |
| 15:29 | woernie has joined IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de) | |
| 15:58 | woernie_ has joined IRC (woernie_!~werner@p5ddec4e7.dip0.t-ipconnect.de) | |
| 15:58 | woernie has left IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de, Ping timeout: 272 seconds) | |
| 18:26 | lucascastro has joined IRC (lucascastro!~lucascast@186.193.183.202.jupiter.com.br) | |
| 20:13 | lucascastro has left IRC (lucascastro!~lucascast@186.193.183.202.jupiter.com.br, Ping timeout: 260 seconds) | |
| 21:06 | lucascastro has joined IRC (lucascastro!~lucascast@186.249.210.29) | |
| 21:39 | lucascastro has left IRC (lucascastro!~lucascast@186.249.210.29, Ping timeout: 260 seconds) | |
| 22:40 | lucascastro has joined IRC (lucascastro!~lucascast@186.249.210.29) | |