Re: ssh-ing in inside private network

From	<tomas@tuxteam.de>
Newsgroups	linux.debian.user
Subject	Re: ssh-ing in inside private network
Date	2016-03-31 16:20 +0200
Message-ID	<riLC2-6ib-13@gated-at.bofh.it> (permalink)
References	<riJgS-4jD-23@gated-at.bofh.it> <riJAd-4KT-11@gated-at.bofh.it> <riK3g-531-13@gated-at.bofh.it> <riKFY-5Dh-23@gated-at.bofh.it> <riL90-5Qv-39@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, Mar 31, 2016 at 02:40:58PM +0100, Brian wrote:
> On Thu 31 Mar 2016 at 14:38:05 +0200, tomas@tuxteam.de wrote:
> 
> > On Thu, Mar 31, 2016 at 01:32:05PM +0100, Brian wrote:
> > 
> > [...]
> > 
> > > There is also dropbear as a lightweight SSH2 server and client. Using
> > > it in preference to openssh is useful for resource constrained machines.
> > 
> > Yes, there are nifty tricks like embedding dropbear in the initrd, so
> > you can, e.g. enter the LUKS encryption passphrase to a server over the
> > 'net.
> > 
> > But I'd consider all of that "advanced usage" :-)
> 
> Indeed it is.
> 
> I had in mind a machine with 1GB of disk space; every MB of usage
> counts.

Nah -- 1GB is luxury: the whole openssh server is less than 0.8 MB.
Now with 4MB we're talking (one of my customers has a small embedded
Linux thing with 4MB flash and 4GB RAM; besides it's some 486 without
floating point: there we have to tread carefully :-)

But the openssh server from "back then" was smaller too...

> openssh-server takes six times as much space as dropbear; and
> that is without taking its dependencies into account! If all the
> features of openssh are not needed dropbear is as simple to install and
> use. Most people would not notice any difference.

But yes, basically agreed. If I had to redo the thing above, I'd
consider dropbear; that said, a re-doing would mean some raspi-like
hardware, which will be a "supercomputer" compared to what's installed
there now :-)

regards
- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlb9KLgACgkQBcgs9XrR2kZDKgCfbqipMdGpiu0SSIPqr5IzwUbh
XMYAni35beWnv3zny3DViFB2qlpTcsTk
=niKY
-----END PGP SIGNATURE-----

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-03-31 13:50 +0200
  Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 14:10 +0200
    Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-03-31 14:30 +0200
      Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 15:10 +0200
        Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-03-31 20:20 +0200
      Re: ssh-ing in inside private network Brian <ad44@cityscape.co.uk> - 2016-03-31 16:10 +0200
        Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-31 21:40 +0200
          Re: ssh-ing in inside private network John Hasler <jhasler@newsguy.com> - 2016-05-31 22:10 +0200
          Re: ssh-ing in inside private network Joe <joe@jretrading.com> - 2016-05-31 23:00 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 00:30 +0200
              Re: ssh-ing in inside private network Joe <joe@jretrading.com> - 2016-06-01 09:50 +0200
          Re: ssh-ing in inside private network Stephen Powell <zlinuxman@fastmail.com> - 2016-06-01 01:00 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 01:30 +0200
              Re: ssh-ing in inside private network Stephen Powell <zlinuxman@fastmail.com> - 2016-06-01 01:50 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 02:20 +0200
                Re: ssh-ing in inside private network John Hasler <jhasler@newsguy.com> - 2016-06-01 02:30 +0200
                Re: ssh-ing in inside private network Richard Hector <richard@walnut.gen.nz> - 2016-06-01 09:50 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 12:30 +0200
          Re: ssh-ing in inside private network Richard Hector <richard@walnut.gen.nz> - 2016-06-01 01:00 +0200
            Re: ssh-ing in inside private network John Hasler <jhasler@newsguy.com> - 2016-06-01 01:20 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 01:20 +0200
              Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-01 14:20 +0200
                Re: ssh-ing in inside private network Mark Fletcher <mark27q1@gmail.com> - 2016-06-01 15:50 +0200
                Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-01 17:00 +0200
                Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-06-01 20:00 +0200
                Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-02 22:20 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:10 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:10 +0200
                Running without X was: Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:30 +0200
                Re: Running without X was: Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-03 15:50 +0200
                Re: Running without X was: Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-06-03 16:40 +0200
                Re: Running without X was: Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 18:40 +0200
          Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-06-02 00:10 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:00 +0200
              Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:40 +0200
      Re: ssh-ing in inside private network Bob Bernstein <poobah@ruptured-duck.com> - 2016-03-31 19:50 +0200
    Re: ssh-ing in inside private network Brian <ad44@cityscape.co.uk> - 2016-03-31 14:40 +0200
      Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 15:20 +0200
        Re: ssh-ing in inside private network Brian <ad44@cityscape.co.uk> - 2016-03-31 15:50 +0200
          Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 16:20 +0200

csiph-web