6.9 KiB
SSH through Tor from Linux
On a RaspiBlitz:
- since v1.4 there is a script to create a hidden service on your blitz:
./config.scripts/internet.hiddenservice.sh ssh 22 22 - get the Hidden Service address to connect to with:
sudo cat /mnt/hdd/tor/ssh/hostname
On the Debian based Linux Desktop (Ubuntu, Debian, MX Linux etc.):
-
needs Tor running on your desktop:
sudo apt install tor -
might need to add:
sudo apt install torsocks -
edit the Tor config file:
sudo nano /etc/tor/torrc -
add:
# Hidden Service for ssh
HiddenServiceDir /var/lib/tor/ssh
HiddenServiceVersion 3
HiddenServicePort 22 127.0.0.1:22
- Restart Tor:
sudo systemctl restart tor - get the Hidden Service address to connect to with:
sudo cat /mnt/hdd/tor/ssh/hostname
Use with torify:
torify admin@HiddenServiceAddress.onion
Run the Yield Generator with torify (remote RPC connection to a full node)
-
To solve the error when running
$ torify python yg-privacyenhanced.py wallet.jmdat[INFO] starting yield generator [INFO] Listening on port 27183 [INFO] Starting transaction monitor in walletservice 1580214062 WARNING torsocks[28563]: [connect] Connection to a local address are denied since it might be a TCP DNS query to a local DNS server. Rejecting it for safety reasons. (in tsocks_connect() at connect.c:192) -
Edit the
torsocks.confand activate the optionAllowOutboundLocalhost 1:
$ sudo nano /etc/tor/torsocks.conf# Set Torsocks to allow outbound connections to the loopback interface. # If set to 1, connect() will be allowed to be used to the loopback interface # bypassing Tor. If set to 2, in addition to TCP connect(), UDP operations to # the loopback interface will also be allowed, bypassing Tor. This option # should not be used by most users. (Default: 0) AllowOutboundLocalhost 1 -
Restart Tor:
sudo systemctl restart tor
Set up Armbian on the Hardkernel Odroid XU4
-
Download the SDcard image
https://dl.armbian.com/odroidxu4/Buster_legacy -
Verify
https://docs.armbian.com/User-Guide_Getting-Started/#how-to-check-download-authenticity$ gpg --verify Armbian_20.02.0-rc0_Odroidxu4_buster_legacy_4.14.165.img.asc gpg: assuming signed data in 'Armbian_20.02.0-rc0_Odroidxu4_buster_legacy_4.14.165.img' gpg: Signature made Mon 20 Jan 2020 05:23:20 GMT gpg: using RSA key DF00FAF1C577104B50BF1D0093D6889F9F0E78D5 gpg: Good signature from "Igor Pecovnik <igor@armbian.com>" [unknown] gpg: aka "Igor Pecovnik (Ljubljana, Slovenia) <igor.pecovnik@gmail.com>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: DF00 FAF1 C577 104B 50BF 1D00 93D6 889F 9F0E 78D5 -
Preparation
Make sure you have a good & reliable SD card and a proper power supply. Archives can be uncompressed with 7-Zip on Windows, Keka on OS X and 7z on Linux (apt-get install p7zip-full). RAW images can be written with Etcher (all OS). -
Boot
Insert the SD card into the slot, connect a cable to your network if possible or a display and power your board. (First) boot (with DHCP) takes up to 35 seconds with a class 10 SD Card. -
Login
Log in as: root Password: 1234. Then you are prompted to change this password (US-Keyboard setting). When done, you are asked to create a normal user-account for your everyday tasks. -
Change the password.
-
Create a new user called
joinmarketand set the password.
Keep pressing [ENTER] to use the default user information.
Download and verify Raspbian SDcard image for a Raspberry Pi
To be able to open the JoinMarket-QT GUI on the dekstop from the RPI need to use the Raspberry Pi OS (32-bit) with desktop inage
-
Download image:
https://downloads.raspberrypi.org/raspios_armhf/images/raspios_armhf-2020-05-28/2020-05-27-raspios-buster-armhf.zip -
Download signature:
https://downloads.raspberrypi.org/raspios_armhf/images/raspios_armhf-2020-05-28/2020-05-27-raspios-buster-armhf.zip.sig -
Import PGP pubkey:
wget https://www.raspberrypi.org/raspberrypi_downloads.gpg.key | gpg --import -
Verify the image:
gpg --verify 2020-05-27-raspios-buster-armhf.zip.sig -
Flash the image to an SDcard, can use the Raspberry Pi Imager
-
put a file called simply:
sshto the root of the sdcard.
Read more on how to gain ssh access here. -
boot up the RPi and log in with ssh to:
pi@LAN_IP_ADDRESS
The default password is:raspberry
Log in through SSH using a hardware wallet
-
See the official pages for:
-
Linux client for TREZOR One, TREZOR Model T, Keepkey, and Ledger Nano S:
-
Windows client for Trezor and Keepkey:
-
paste the generated SSH pubkey to:
$ nano /home/joinmarket/.ssh/authorized_keys
Activate the bitcoind wallet on a RaspiBlitz
-
Edit the bitcoin.conf:
$ sudo nano /mnt/hdd/bitcoin/bitcoin.conf -
Change the disablewallet option to 0:
disablewallet=0 -
Restart bitcoind:
$ sudo systemctl restart bitcoind
Error when connecting to a full node remotely through Tor
- Getting the error:
socket.gaierror: [Errno -2] Name or service not known - Remember to use
torifywith the python scripts when connecting remotely through Tor. Example:
torify wallet-tool.py wallet.jmdat
Nuke the joinmarket user and the /home/joinmarket folder
sudo userdel -r joinmarket
Sample bitcoin.conf for a remote node accepting RPC connections through LAN
# bitcoind configuration
# mainnet/testnet
testnet=0
# Bitcoind options
server=1
daemon=1
txindex=1
disablewallet=0
# Connection settings
rpcuser=REDACTED
rpcpassword=REDACTED
rpcport=8332
#rpcallowip=127.0.0.1
#main.rpcbind=127.0.0.1:8332
# SET THE LOCAL SUBNET
rpcallowip=192.168.1.0/24
main.rpcbind=0.0.0.0
zmqpubrawblock=tcp://127.0.0.1:28332
zmqpubrawtx=tcp://127.0.0.1:28333
# SBC optimizations
dbcache=1512
maxorphantx=10
maxmempool=300
maxconnections=40
maxuploadtarget=5000
datadir=/mnt/hdd/bitcoin
onlynet=onion
proxy=127.0.0.1:9050
main.bind=127.0.0.1
test.bind=127.0.0.1
main.addnode=fno4aakpl6sg6y47.onion
main.addnode=toguvy5upyuctudx.onion
main.addnode=ndndword5lpb7eex.onion
main.addnode=6m2iqgnqjxh7ulyk.onion
main.addnode=5tuxetn7tar3q5kp.onion
dnsseed=0
dns=0
# for Bisq
peerbloomfilters=1