|
|
@@ -3,7 +3,7 @@
|
|
3
|
3
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
|
4
|
4
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
|
5
|
5
|
<head>
|
|
6
|
|
-<!-- 2016-11-23 Wed 17:36 -->
|
|
|
6
|
+<!-- 2016-11-23 Wed 18:01 -->
|
|
7
|
7
|
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
|
8
|
8
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
9
|
9
|
<title></title>
|
|
|
@@ -358,8 +358,7 @@ If you're installing from a microSD card on a single board computer without a sc
|
|
358
|
358
|
</p>
|
|
359
|
359
|
|
|
360
|
360
|
<div class="org-src-container">
|
|
361
|
|
-<pre class="src src-bash">freedombone-client
|
|
362
|
|
-ssh fbone@freedombone.local -p 2222
|
|
|
361
|
+<pre class="src src-bash">ssh fbone@freedombone.local -p 2222
|
|
363
|
362
|
</pre>
|
|
364
|
363
|
</div>
|
|
365
|
364
|
|
|
|
@@ -372,20 +371,30 @@ You will then be shown a new randomly generated password. It's <b>very important
|
|
372
|
371
|
</p>
|
|
373
|
372
|
|
|
374
|
373
|
<p>
|
|
375
|
|
-You'll be asked to set a username and a "real" name (or nickname), then the rest of the installation will be automatic. Again, it takes a while, so go and do something less boring instead.
|
|
|
374
|
+You'll be asked to set a username and a "real" name (or nickname), then the rest of the installation will be automatic. Again, it takes a while, so go and do something less boring instead. At the end of the base install you can also choose to install specific apps, but if you want to do that later then just press Enter.
|
|
376
|
375
|
</p>
|
|
377
|
376
|
|
|
378
|
377
|
<p>
|
|
379
|
|
-When it's installed on your local system open a terminal and run:
|
|
|
378
|
+When it's installed on your local system open a terminal and verify the ssh server key hash with:
|
|
380
|
379
|
</p>
|
|
381
|
380
|
|
|
382
|
381
|
<div class="org-src-container">
|
|
383
|
|
-<pre class="src src-bash">ssh myusername@freedombone.local -p 2222
|
|
|
382
|
+<pre class="src src-bash">freedombone-client --verify
|
|
|
383
|
+</pre>
|
|
|
384
|
+</div>
|
|
|
385
|
+
|
|
|
386
|
+<p>
|
|
|
387
|
+This will show the hash code for the public ssh key of the Freedombone system. Open another terminal window then run:
|
|
|
388
|
+</p>
|
|
|
389
|
+
|
|
|
390
|
+<div class="org-src-container">
|
|
|
391
|
+<pre class="src src-bash">freedombone-client
|
|
|
392
|
+ssh myusername@freedombone.local -p 2222
|
|
384
|
393
|
</pre>
|
|
385
|
394
|
</div>
|
|
386
|
395
|
|
|
387
|
396
|
<p>
|
|
388
|
|
-Use the password you wrote down earlier to log in.
|
|
|
397
|
+Use the password you wrote down earlier to log in. Select the <b>administrator control panel</b> with up and down cursor keys, space bar and enter key. You should see something like this, and you might need to re-enter your password.
|
|
389
|
398
|
</p>
|
|
390
|
399
|
|
|
391
|
400
|
<div class="org-center">
|
|
|
@@ -397,7 +406,7 @@ Use the password you wrote down earlier to log in.
|
|
397
|
406
|
</div>
|
|
398
|
407
|
|
|
399
|
408
|
<p>
|
|
400
|
|
-Select the <b>administrator control panel</b> with up and down cursor keys, space bar and enter key. You might need to re-enter your password. Then select <b>About</b>. You'll see a list of sites and their onion addresses.
|
|
|
409
|
+Then select <b>About</b>. You'll see a list of sites and their onion addresses.
|
|
401
|
410
|
</p>
|
|
402
|
411
|
|
|
403
|
412
|
<div class="org-center">
|
|
|
@@ -409,7 +418,19 @@ Select the <b>administrator control panel</b> with up and down cursor keys, spac
|
|
409
|
418
|
</div>
|
|
410
|
419
|
|
|
411
|
420
|
<p>
|
|
412
|
|
-On your local system open a <b>Tor compatible browser</b> and enter your blog's onion address. If it's all working then you should see your new blog.
|
|
|
421
|
+The About screen contains the ssh server public key hashes and you can compare the relevant one with the previous terminal window to verify that they're the same. If they're not then you might have a <i>machine-in-the-middle</i> snooping on you.
|
|
|
422
|
+</p>
|
|
|
423
|
+
|
|
|
424
|
+<p>
|
|
|
425
|
+You have now confirmed a secure connection. Probably. If you're still sceptical then you can power off the system, remove the microSD card and manually check the public keys within the /etc/ssh directory on the drive.
|
|
|
426
|
+</p>
|
|
|
427
|
+
|
|
|
428
|
+<p>
|
|
|
429
|
+Press any key to exit from the About screen. You can then select <b>Add/Remove apps</b> and add whatever applications you wish to run. Note that some apps will only run on x86 systems, but most will install and run on ARM single board computers.
|
|
|
430
|
+</p>
|
|
|
431
|
+
|
|
|
432
|
+<p>
|
|
|
433
|
+Once your apps have installed you can go back to the About screen, pick an onion address and try it within a Tor compatible browser.
|
|
413
|
434
|
</p>
|
|
414
|
435
|
|
|
415
|
436
|
<p>
|
Bob Mottram
8 years ago