Everything posted by 7hr08ik
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Agreed, If I understood anything about EOL in files, I could have got this working yesterday. But then again, it was only an issue because Unraid stopped printing the keyfile to root in the new update
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
So happy now.
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
YES!!!! YYYYYEEEEAAAAASSSHHHH!HH!!!!!!!! DID IT!!!!! F*%& Yeah!"!!! It was the EOL. Googlefu - https://unix.stackexchange.com/questions/254644/how-do-i-remove-newline-character-at-the-end-of-file Fix perl -pi -e 'chomp if eof' myfile Not a clue, but it worked. Started looking for ways to strip EOL from files, found this, it worked. Now to fight with android and ftp
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
OK so, we've figured out the server is receiving the keyfile. By adding "cp /boot/keyfile /root/keyfile" to the go file, and having the keyfile on the flash But she's telling me its the wrong encryption password. So, i remade the file in kate. No luck Remade in gnome text editor, no luck Remade using cat > keyfile, no luck Tested contents of file by copy pasting into webGUI, unlocks. Its not the passphrase, its not the file being in the wrong place, its the file itself. Don't know if its an option or not, but I know someone said they used a picture as their keyfile, and i know its possible to use seperate passphrase and keyfiles. So can it be done? Can i just setup the array to use something else as the keyfile? And unlock with either the random keyfile (a random file) OR the passphrase? Am i missing something when i make the keyfile? Saving the file as "keyfile" no extention or anything. Should i just give up?
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
To check, My keyfile, contents.....1 line that is only my passphrase. EOL - UNIX UTF-8
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Well, added that line to my go file, and have the keyfile on my flash drive. Now the server boots up with 'Wrong encryption key' error. We're getting somewhere. The keyfile is being accepted, but it's not the correct content to unlock the server
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
So, in your go file you added 'cp /boot/keyfile /root/keyfile' Then rebooted, and she booted up unlocked?
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
So how can i test the keyfile? Has the entire keyfile process changed, and not just writing it to /root? Very confused, gonna go cry in a corner and come back later
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Tried manually copying the keyfile to /root Rebooted No luck Because the keyfile that was there, is no longer there??? root@Hal-9000:~# cp /boot/keyfile /root/keyfile root@Hal-9000:~# ls keyfile mdcmd@ root@Hal-9000:~# Broadcast message from root@Hal-9000 (Sun Oct 27 14:23:05 2019): The system is going down for reboot NOW! Connection to 192.168.1.100 closed by remote host. Connection to 192.168.1.100 closed. rob@pop-os:~$ ssh [email protected] [email protected]'s password: Linux 5.3.7-Unraid. root@Hal-9000:~# ls mdcmd@ root@Hal-9000:~#
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
So the FTP can be sorted, once i know the keyfile is working. But there is no keyfile for me to copy. So i need to either find it, or make one. Apparently making one doesnt work. So how do i find it? How do i print it? How the hell does this work?
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Right, -Server started and unlocked using normal passphrase, through firefox -Phone given static IP on router -Edited go file exactly as shown Although unsure as to which ` ' im supposed to use around the password (tried both) Attempted all possible combinations of ` ' and without, IP address is correct, file path is correct (tried several different paths) -Logs don't show any attemp to access ftp let alone failed attempts for me to debug Screw it, i'll stick to passwords. This shouldn't be this damn difficult.
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Will setup FTP on my phone, and try the full routine from the video.
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Right, so far... Created keyfile in kate + nano Used webUI to select keyfile from desktop through Firefox. Copied keyfile to /root Checked 5 times passphrase in keyfile is definitely correct. End-of-line appears to be correct For some reason, stopping the array is not enough, need to reboot server each time, to test. I know this because entering the normal passphrase after failed login with keyfile, will fail. Surely there is a command in linux, to force print the currently used keyfile. I mean, up until 6.8.0-rc1 the keyfile was printed to /root/keyfile, and we were simply copying it to be used for this unlocking method. The new update stops emhttp from printing the file. So there`s got to be a command I can use in terminal and have the server print/create/write the keyfile it is currently using, on unlocked array, to disk so I can copy it?
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
I was just using the webGUI and selecting the keyfile from my desktop, to test before i setup all the ftp. Will give it a try now tho
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Tried `cat`, and the output is all on 1 line Also, vi is scary
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
No luck, Opened up terminal, pasted the passphrase, saved, exited Rebooted server, "Wrong Encryption Key" How do I make a keyfile, without an end-of-line?
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Hey, I understand that I need to NOT have eol. But I just dont know how to do it. All i did was paste my passphrase into the file, click save and close. I'll try with nano and see if that makes any difference
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Also, Random weirdness, after failing to unlock the array with the keyfile, I need to reboot in order for my passphrase to work. Yes im using ctrl+c/ctrl+v correctly from my password manager
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Ok, So, opened up kate, pasted in my passphrase, saved the file as `keyfile` Tried opening the array using the keyfile, and no dice. Won`t work I gonna guess its to do with the end-of-line. But not a clue about that.
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
? Nobody can check their keyfile and verify?
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Well, can someone check there keyfile and confirm. If all i have to do is make a file with the password in it, and call it `keyfile` then thats an easy fix. But seems too easy
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Yeah, we're editing the go file to bring the keyfile over from the FTP server. But in order to do that, I need the keyfile in the first place to put onto the FTP, and from what I see, the new build has been tweaked to NOT write the keyfile when unlocking the array (from the webGUI atleast) Is there another way to unlock the array? Through terminal perhaps, that would print the keyfile?
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
No problem. Maybe you had the file there from a previous use? I've never gone through this, so will be creating the file for the first time. I`m just trying to figure out if there`s a command to force print/write the currently used keyfile. As the new build seems setup to not write automatically
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Yes. Booted server > Opened firefox on desktop > logged in > Entered encryption password > unlocked array Then opened terminal from link in toolbar, and voila....problem
-
** VIDEO GUIDE ** How to securely autostart an encrypted unRAID array
Unlocking my array via firefox from desktop