11 lines
702 B
Text
11 lines
702 B
Text
|
# The SSH server of the initramfs, through which the root disk's passphrase is typed at
|
||
|
|
# boot (ADR 0039, D20), as /etc/dropbear/initramfs/dropbear.conf on the instance's host
|
||
|
|
# at home. It waits on the home network alone (the tunnel to ramiel isn't up that
|
||
|
|
# early), on 2222, so its host key never clashes with sshd's in melchior's known_hosts.
|
||
|
|
#
|
||
|
|
# -p 2222 its port
|
||
|
|
# -s no passwords: melchior's key alone
|
||
|
|
# -j -k no forwarding of any kind
|
||
|
|
# -I 300 a connection idle for 5 minutes is closed
|
||
|
|
# -c cryptroot-unlock runs nothing but the unlock, whatever the client asks
|
||
|
|
DROPBEAR_OPTIONS="-p 2222 -s -j -k -I 300 -c cryptroot-unlock"
|