Notices by Miakoda (hellomiakoda@pdx.social)

@JSCybersec Yeah, I did know keys can have a password to decrypt the key.
See, I thought there was some master list of pub keys in the server. I didn't realize it was under ~/.ssh.
So if a key is compramised, that's where I remove it from. Ooooh, is that why the keys have user@client in them?! So I can find which one is what?!

@curiousicae Tried that.

When I bookmark a page, it asks what folder. However, whatever folders in the list I had expanded the last time stay expanded. Anybody know any way to make LibreWolf/FireFox collapse those damn folders when I'm done picking where to put my bookmark? It's really irritating. That whole "where to put the book mark" dialog is my biggest gripe with this browser.

@heysteve I found that one, and made sure it's a match. Thanks though. My installation is HAOS on bare.

@JSCybersec Thank you very much, by the way. Whatever was different about your answers, it finally made it click for me. Now I understand that I can either have a different key for each of my computers, OR move 1 key between them.
For now, I have a different key on each, and I generated a separate extra key I copied in to my password manager that I can use if I lock myself out.

I don't get this... If I run the shell command in a #HomeAssistant script, it returns "Host Key Validation Failure". If I run that exact same command from HA's terminal, it works without error.
I have gone and checked everything in known_hosts. I have searched all over to see if there's some other known_hosts file I missed.
The script works fine with that exact same ssh command IF it's pointed at a different computer. I cannot figure out what the issue is.

@JSCybersec Yeah, I just copied my key in to authorized keys myself, and it worked. Ok, this makes more sense now!

Which means I could easily put my keys in my password manager if I want.

Reminder:
Trump is in the Epstein files!

They are not 'America first', no matter who you are!
NEVER FORGET!

I've compiled relevant videos here:
https://www.youtube.com/playlist?list=PLnQpzSIOd8EkTTNh2DWCn1D3di9TNIFtY

207 days until the midterm elections.

"Low voltage detected"
Yes, pi. I know. It's less than 100k volts, and therefor you'll whine it's low. *eye roll*

@JSCybersec If I'm understanding correctly...
If my friend wanted to give me ssh access to her server, I could safely give her my pub key. She can add that to authorized_keys. But that file would NOT give HER access to my machines that use that key pair. Yeah? I have that right?

I still need to see if it runs on time by itself, but aside from that, copying the scripts and binaries to a fresh Pi OS Lite card worked nearly flawlessly (a few perm issues to correct). Ah, only one thing appears to have not worked - I didn't realize the program I was using depended on another that I would have needed to copy. It does appear to be in the repository this time

Ok. Need to stop reacting to things when no coffee and dehydrated. lol. They don't call it disregulation for nuthin!

Coffee made brain work better. I write a fresh Pi OS lite card, and copied my scripts and the binaries to it. That should work.
If there's barely anything on it, copying that barely on to a fresh one is the way to go.

☕ Sweet! My coffee is ready!!!

Writing another sd card. I suppose I should see if coincidentally, the hardware died at that exact moment. I seriously doubt it, but hey, why not, right?

I hate everything right now! I hate it all!
It took HOURS to get that slow ass fucking pi to update and install the couple little pieces of software I needed on it! FUCKING HOURS!
At least I was smart enough to back up my scripts.

All that work I did getting this little pi 3 to sync some text files to my gopher host, all useless now. 😭
None of it works now.
Somehow, PasswordAuthentication no
made ethernet not work, and putting it back didn't make it work again. Not an iota of an understanding of how this is even possible. At worst, that option could break ssh. How the actual fuck is ethernet dead?! It's got a link light, no IP.

@JSCybersec I'm trying to set it up for local machines that don't really need the extra security, so that I can learn and understand this overlooked section of Linux knowledge

This #Linux issue makes no sense. I copied an ssh key to my rasp pi 3, that went fine, logged in without needing a password. I disabled password login. Well, now it can't see ethernet.
No, I don't mean I can't connect to it and I've assumed it's offline. Sitting at a keyboard at the pi, it has self assigned 12.0.0.1 and no ping.
So I reverted the last thing I did. Rebooted. No change.
No fucking idea how disabling passwords for SSH made networking go away.

@juanrloaiza Also trying to grok the whole ssh agent in KeePassXC as an option. Last time I messed with it, I broke shit. BUT... the instructions I'm looking at have a step I don't remember seeing last time, so maybe that's why.
Also last time I also attempted to use SecretService... and I'm wondering if THAT is actually what broke shit

@juanrloaiza Ok, so that does work the way I'd thought.
Then... is there good reason not to sync ~/.ssh between my laptops?

I have what I fear may be a stupid #Linux question...
If I set up an ssh key, upload it to the server, and then disable password login...
When I want to ssh from another machine? How would I then upload that key to the server?