<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><br class=""><blockquote type="cite" class="">On Dec 17, 2018, at 22:51, Mirimir <<a href="mailto:mirimir@riseup.net" class="">mirimir@riseup.net</a>> wrote:<br class=""><br class="">And sure, I could setup .onion SSH for everything, and that'd arguably<br class="">be more secure. But sometimes I'm just too lazy for that.<br class=""></blockquote><br class=""><div class="">I'm pretty frickin' lazy, but I do this with all my servers. Here's the recipe for Linux/Debian provisioning:</div><div class=""><br class=""></div><div class="">-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-</div><div class=""><br class=""></div><div class=""><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># cat >>/etc/apt/sources.list</code></p><pre style="overflow: auto; font-size: 14.4px; line-height: 1.45; border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="margin-top: 12px;" class="">deb <a href="https://deb.torproject.org/torproject.org" class="">https://deb.torproject.org/torproject.org</a> stretch main
deb-src <a href="https://deb.torproject.org/torproject.org" class="">https://deb.torproject.org/torproject.org</a> stretch main
</code></pre><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># apt install gnupg2 dirmngr</code></p><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># gpg2 --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89</code></p><ul style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><li style="margin-top: 12px;" class="">I've had gpg2 fail, in which case this should work:</li></ul><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># gpg --keyserver <a href="hkp://pool.sks-keyservers.net" class="">hkp://pool.sks-keyservers.net</a> --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89</code></p><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># gpg2 --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add -</code></p><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># apt update</code></p><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># apt install tor <a href="http://deb.torproject.org" class="">deb.torproject.org</a>-keyring</code></p><ul style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><li style="margin-top: 12px;" class="">edit <code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class="">/etc/tor/torrc</code>, the "hidden services" section, to add:</li></ul><pre style="overflow: auto; font-size: 14.4px; line-height: 1.45; border-top-left-radius: 3px; border-top-right-radius: 3px; border-bottom-right-radius: 3px; border-bottom-left-radius: 3px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="margin-top: 12px;" class="">HiddenServiceDir /var/lib/tor/control/
HiddenServicePort 22 127.0.0.1:22
</code></pre><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># service tor restart</code></p><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class=""><code style="padding: 2px 4px; font-size: 14.4px; color: rgb(199, 37, 78); background-color: rgb(249, 242, 244); border-radius: 4px; margin-top: 12px;" class=""># cat /var/lib/tor/control/hostname</code></p><p style="font-family: sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class="">Record the onion address for posterity</p><div class=""><br class=""></div></div><div class="">-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-.,,.-*"*-</div><div class=""><br class=""></div><div class="">The SSH sessions to the .onion address seem pretty darned solid.</div><div class=""><br class=""></div><div class="">--Ron</div></body></html>