#FediHelp! #ssh key managers for Linux please, based on...

I'm setting up a #HomeLab including three #Proxmox nodes with various VMs and containers (Inc Docker), an OpenWrt router. Plus a cheap VPS for remote access using #Pangolin, but I don't know how it plays with #ssh yet. So maybe this is a dumb question?

Clients will be a Linux laptop and maybe a couple of Android phones with a terminal app.

Any advice about apps you have used yourself? 🙏

My small solution to bring a local script in a remote root directory:

read -sp "Remote sudo password: " SERVERPASSWD
rsync \
-e "ssh -i ${HOME}/.ssh/<KEYFILE>" \
-ztu \
--info=name2 \
--chmod=F755 \
--chown=root:root \
--rsync-path="echo '$SERVERPASSWD' | sudo -Sv &>/dev/null && sudo rsync" \
"${PWD}"/<SKRIPT> <HOST>:/usr/local/bin/

#linux #programming #coding #shell #bash #rsync #SSH #script

It has been ZERO days since I have had to compile a linux kernel...

#linux #zeroday #ssh

Been a while since I blogged, so it's time for the latest installment in "Edd massively over-complicates things with SSH certificates" This time, a post about how I got rid of the need to create a new sub account on my #Hetzner Storage Box every time I wanted to create a new VM and back it up with #Borg. Definitely easier ways to have achieved it, but it shows of the versatility of ssh certificates, and #StepCA that's powering them in my home lab.

https://i.am.eddmil.es/posts/sshcertsborg/

#Borgmatic #Homelab #ssh

Adapting Step CA's SSH user certificates to safely automate provisioning Borg backups on Hetzner Storage Boxes

Intro Over the Christmas break, I suffered a complete NAS failure, and thanks to QNAP’s custom extensions to the standard Linux software RAID, I wasn’t able to recover any data off it. Now, of course, I had backups; and everything I had backed up (except for my Bluesky PDS, which I barely use) restored absolutely fine. However, I was not backing everything up. This was because my backup setup for a new server in my home lab was largely a manual process, and there were a number of services I decided weren’t worth the effort. Having now had to spend the time rebuilding them all, I regret that decision, and so now I wanted to fix the issue, so the backups were automatically setup whenever I deployed a host. This post will explain how I achieved that using SSH Certificates, because I am an unapologetic SSH certificate fanboy.

I Am Edd Miles

Oh no, please don't tell me again that Linux is now insecure on the net?!

«Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users»

⛓️‍💥 https://www.phoronix.com/news/Linux-ssh-keysign-pwn
⛓️‍💥 https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn

#sshkeysignpwn #pwn #ssh #linux #0day #keysigning #sshkeys #itsecurity #itsec #itsecurity #zeroday

Linux's Latest Vulnerability Allows Reading Root-Owned Files By Unprivileged Users

Following Dirty Frag, Fragnesia, and other Linux kernel vulnerabilities making themselves known in recent days, the latest now is ssh-keysign-pwn.

🆕 New report from OHIIHO Research

Watcher-NetAI / skn — a Linux SSH botnet observed on two of our honeypot meshes. 10 MB Go scanner with intact DWARF: source tree, module name, capability map, all visible. The loader is hardened; the scanner is not.

→ Stage-2 C2 on connexionlost{net,zip} → 194[.]5[.]97[.]46

→ Non-root systemd-user persistence (hunting blind spot)

→ Ships YARA + 4 Sigma rules + 34 IOCs + KQL queries

Full report (Part 1/2):
https://research.ohiiho.com/reports/2026-05-watcher-netai-skn/

SOC brief (Part 2/2):
https://research.ohiiho.com/reports/2026-05-watcher-netai-skn-brief/

#ThreatIntel #Linux #SSH #Botnet #DetectionEngineering

Patchbin – A pastebin supercharged for Git collaboration

Patchbin은 간단한 셀프호스팅 Git 협업 도구로, 이메일 패치 기반 협업과 GitHub의 풀 리퀘스트 방식을 결합해 SSH를 통해 터미널 내에서 완전한 코드 리뷰와 패치 제출을 지원한다. 별도의 웹사이트 로그인이나 복잡한 인프라 없이 단일 Go 바이너리와 SSH 키만으로 외부 기여자와 협업할 수 있어 셋업과 사용이 매우 간편하다. 모든 리뷰와 변경 사항은 코드 커밋과 패치로 관리되며, 웹 인터페이스는 주로 탐색용으로 최소화되어 있다. 이는 로컬 개발 환경에서 코드 리뷰를 우선시하는 새로운 협업 워크플로우를 제안한다.

https://github.com/picosh/git-pr

#git #collaboration #selfhosted #ssh #patch

GitHub - picosh/git-pr: A pastebin supercharged for git collaboration

A pastebin supercharged for git collaboration. Contribute to picosh/git-pr development by creating an account on GitHub.

GitHub

Arch Linux: LUKS-voll-verschlüsseltes System beim Booten per SSH entsperren (mittels systemd und Dropbear)

https://www.codingblatt.de/arch-linux-luks-per-ssh-entsperren/

#archlinux #luks #ssh #systemd #dropbear #opensource

Arch Linux: LUKS-voll-verschlüsseltes System beim Booten per SSH entsperren (mittels systemd und Dropbear) - codingblatt.de

Entsperren eines mit LUKS voll-verschlüsselten Arch-Linux-Systems per SSH (ohne AUR-Pakete).

Por si alguien se ha instalado @forgejo y utiliza #Pangolin para acceder al servicio, si además quieres hacer un “git push” por #SSH en vez de #HTTPS, aquí hay un artículo que explica muy bien cómo crear un recurso #TCP: https://digitalquint.click/posts/accessing-forgejo-pangolin/. Pero es importante, que si en vuestro #Hosting tenéis un #Firewall (cortafuegos), abráis el puerto asignado al acceso SSH. (1/2)
Accessing Forgejo at home through Pangolin

Secured access to your Forgejo Git server on your homelab server.

DigitalQuint
Fragen zum WebDAV-Cache › Serverdienste und Dateifreigaben im Netzwerk › Fortgeschrittene Themen › Forum › ubuntuusers.de