🆕[add-on] HassOS SSH port 22222 Configurator

adamoutler · December 19, 2022, 10:55pm

Pull the power cable out and then plug it in and turn it on.

cervelletto · December 20, 2022, 7:38am

already tried 2 times , not working

nickrout · December 20, 2022, 8:00am

Then run ssh with debugging and see what is up

ssh -v 127.0.0.1 -p22222

Increase the number of v’s until you get something that makes sense.

cervelletto · December 20, 2022, 8:52am

i have some trouble copy/paste from terminal addon to windows , can you give me some advice on how to do?

or maybe how to print the output to a file and then move it to my windows machine

thanks

cervelletto · December 20, 2022, 3:57pm

found a method

➜  ~ ssh -v 127.0.0.1 -p22222
OpenSSH_9.1p1, OpenSSL 3.0.7 1 Nov 2022
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to 127.0.0.1 [127.0.0.1] port 22222.
debug1: Connection established.
debug1: identity file /root/.ssh/id_rsa type 0
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa type -1
debug1: identity file /root/.ssh/id_ecdsa-cert type -1
debug1: identity file /root/.ssh/id_ecdsa_sk type -1
debug1: identity file /root/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /root/.ssh/id_ed25519 type -1
debug1: identity file /root/.ssh/id_ed25519-cert type -1
debug1: identity file /root/.ssh/id_ed25519_sk type -1
debug1: identity file /root/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /root/.ssh/id_xmss type -1
debug1: identity file /root/.ssh/id_xmss-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_9.1
debug1: Remote protocol version 2.0, remote software version dropbear_2020.81
debug1: compat_banner: no match: dropbear_2020.81
debug1: Authenticating to 127.0.0.1:22222 as 'root'
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ssh-ed25519
debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: SSH2_MSG_KEX_ECDH_REPLY received
debug1: Server host key: ssh-ed25519 SHA256:UEsEjWDVThNMdrN1sM08eVw9ZDDG7PUdHVrlpvk28DY
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: Host '[127.0.0.1]:22222' is known and matches the ED25519 host key.
debug1: Found key in /root/.ssh/known_hosts:3
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey in after 134217728 blocks
debug1: Will attempt key: /root/.ssh/id_rsa RSA SHA256:a6N3O5q2iNGCsx+1yZqTpn/aYPlRSvI9gQwLVEoNN+U
debug1: Will attempt key: /root/.ssh/id_ecdsa
debug1: Will attempt key: /root/.ssh/id_ecdsa_sk
debug1: Will attempt key: /root/.ssh/id_ed25519
debug1: Will attempt key: /root/.ssh/id_ed25519_sk
debug1: Will attempt key: /root/.ssh/id_xmss
debug1: Will attempt key: /root/.ssh/id_dsa
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,ssh-rsa>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /root/.ssh/id_rsa RSA SHA256:a6N3O5q2iNGCsx+1yZqTpn/aYPlRSvI9gQwLVEoNN+U
debug1: Authentications that can continue: publickey
debug1: Trying private key: /root/.ssh/id_ecdsa
debug1: Trying private key: /root/.ssh/id_ecdsa_sk
debug1: Trying private key: /root/.ssh/id_ed25519
debug1: Trying private key: /root/.ssh/id_ed25519_sk
debug1: Trying private key: /root/.ssh/id_xmss
debug1: Trying private key: /root/.ssh/id_dsa
debug1: No more authentication methods to try.
[email protected]: Permission denied (publickey).

adamoutler · December 20, 2022, 6:32pm

Generate a new key

ssh keygen<enter, enter, enter, enter>.
Then your public key will be in ~/.ssh/id_rsa.pub. copy that file contents into the addons settings, run it, reboot twice with power plug, and try again.

Some keys arent compatible. New ones using defaults work. Some public keys are not matched to the private key. Some copy the private instead of public. Try the above to eliminate possibilities.

cervelletto · December 21, 2022, 1:55pm

now it’s working

thanks mate

nielsdB97 · January 15, 2023, 5:05pm

Stumbled around with this for a while, getting the permission denied (publickey) error despite following all the steps. Turns out I forgot to login on the root account:

ssh [email protected] -p22222

Hope this helps solve your issue as well!

Tromperie · January 31, 2023, 9:57pm

Will this not work on x86 HAOS?

I hoped I could use it to mount a NAS samba share for some addons.

nickrout · January 31, 2023, 10:54pm

It should

"arch": ["amd64", "i386", "armhf", "armv7", "aarch64"],

github.com

adamoutler/HassOSConfigurator/blob/0d4887d3e02211afca3f1d2f96fd5550b7f0d03d/HassOsEnableSSH/config.json

{
  "name": "HassOS SSH port 22222 Configurator",
  "version": "0.9.1a",
  "slug": "hassos_ssh_configurator_addon",
  "description": "This enables the SSH HassOS Console on port 22222. Only for Home Assistant OS.",
  "arch": ["amd64", "i386", "armhf", "armv7", "aarch64"],
  "startup": "once",
  "boot": "manual",
  "url":"https://community.home-assistant.io/t/add-on-hassos-ssh-port-22222-configurator/264109",
  "apparmor": "true",
  "init": false,
  "ingress": "true",
  "stage": "experimental",
  "privileged": ["SYS_ADMIN"],
  "full_access": true,
  "options": {
    "SSHKey": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGTlRAfhm9BIV6l6sOubRgeCY0wRhYQVfB3QBWFl2ELpeAnTHwRYY+4pSP1Nu7FuZqAzDyZkssmFkbXHJGqi6EAnAkRLsKhzvDKo5WSXfEQdl2kSN5bgU/e37GfwqG4ChEfY56gwu+tdHtt4eIrzKpmUKqFZWJaGoeI9sHptQR9QNitEsm0krkOcK0VLFLTeau+HOO1A4plcLjBB9Y43SFjth/Ouke+DVGaBO2LYNc8U0S4EiHT6KdRXS4iIwYjXMw6SEsT7eP9IWQObQ4ZgyG0cHO/6ArxJ0fyOcAI29sLzM9466ID0mTaJWHriTRf6Lxhpdd/S30VTG0JMTdo/Fj root@HLAB-A17"
  },
  "schema": {
    "SSHKey": "str"

This file has been truncated. show original

Tromperie · January 31, 2023, 11:23pm

Thanks, I missed that, except it says it worked but doesn’t. Needs more investigation by me.

adamoutler · February 1, 2023, 12:04am

We’re discussing better instructions here. If you figure it out soon, feel free to mention what helps here. Replace the default pubkey with a clearly bogus key by SharkWipf · Pull Request #29 · adamoutler/HassOSConfigurator · GitHub

See my comment with 4 numbered items for common problems we hope to reduce.

Tromperie · February 3, 2023, 9:11pm

We are moving to Tasmania permanently next week, so no action from me for several weeks.
The bay is 30 metres from the front gate and it is a year round dog beach. The boys (pointers) will go nuts.

denveronly · February 17, 2023, 7:24pm

So i did a workaroundm i could not use Configurator with mac, just the keys did not match, but i got access to HOST os using portainer
You just need to install portainer as addon in homeassistant, then add a new container with the following options and you have the command line to host, you can update or rm docker, make prune etc
heres how to make a container to do that in docker

adamoutler · February 20, 2023, 12:22am

You can always transform the key or generate a new one. What was the key type? What did it start with?

denveronly · February 22, 2023, 2:43pm

well i made a key using Puttygen and used it after on my mac
using key generated on my mac didnt work for some reason, i used several tutorials and official docs to do that
all worked well, but it surely took some time to do that, had issues afterward using that ssh key to mount nas samba drive for frigate and got errors of Too open key, could not chmod that key because the file system is read only.

adamoutler · February 22, 2023, 6:40pm

Would you have found it useful if there was an additional switch in settings:

Disregard the above, generate a new key and print it in the logs.

This would go below the existing SSHKey box

As seen in this picture of my Active Cooling addon.

I’m trying to figure out how to make this process easier.

Kszys · March 31, 2023, 1:03pm

Hello there - wanted to edit config.txt on my Home Assistant Yellow - seemed like your addon should do the trick. But I cannot get to install it. I get whole list errors:

23-03-31 14:44:13 WARNING (SyncWorker_0) [supervisor.addons.validate] Add-on have full device access, and selective device access in the configuration. Please report this to the maintainer of DeskPi Pro Active Cooling
23-03-31 14:44:13 ERROR (MainThread) [aiohttp.server] Error handling request
Traceback (most recent call last):
  File "/usr/local/lib/python3.10/site-packages/aiohttp/web_protocol.py", line 433, in _handle_request
    resp = await request_handler(request)
  File "/usr/local/lib/python3.10/site-packages/aiohttp/web_app.py", line 504, in _handle
    resp = await handler(request)
  File "/usr/local/lib/python3.10/site-packages/aiohttp/web_middlewares.py", line 117, in impl
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 185, in block_bad_requests
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 201, in system_validation
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 268, in token_validation
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 280, in core_proxy
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/utils.py", line 62, in wrap_api
    answer = await method(api, *args, **kwargs)
  File "/usr/src/supervisor/supervisor/api/store.py", line 178, in store_info
    ATTR_ADDONS: [
  File "/usr/src/supervisor/supervisor/api/store.py", line 179, in <listcomp>
    self._generate_addon_information(self.sys_addons.store[addon])
  File "/usr/src/supervisor/supervisor/api/store.py", line 114, in _generate_addon_information
    ATTR_ADVANCED: addon.advanced,
  File "/usr/src/supervisor/supervisor/addons/model.py", line 227, in advanced
    return self.data[ATTR_ADVANCED]
  File "/usr/src/supervisor/supervisor/store/addon.py", line 19, in data
    return self.sys_store.data.addons[self.slug]
KeyError: 'a0d7b954_grocy'
23-03-31 14:44:13 WARNING (SyncWorker_3) [supervisor.addons.validate] Add-on have full device access, and selective device access in the configuration. Please report this to the maintainer of DeskPi Pro Active Cooling
23-03-31 14:44:13 ERROR (MainThread) [aiohttp.server] Error handling request
Traceback (most recent call last):
  File "/usr/local/lib/python3.10/site-packages/aiohttp/web_protocol.py", line 433, in _handle_request
    resp = await request_handler(request)
  File "/usr/local/lib/python3.10/site-packages/aiohttp/web_app.py", line 504, in _handle
    resp = await handler(request)
  File "/usr/local/lib/python3.10/site-packages/aiohttp/web_middlewares.py", line 117, in impl
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 185, in block_bad_requests
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 201, in system_validation
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 268, in token_validation
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/middleware/security.py", line 280, in core_proxy
    return await handler(request)
  File "/usr/src/supervisor/supervisor/api/utils.py", line 62, in wrap_api
    answer = await method(api, *args, **kwargs)
  File "/usr/src/supervisor/supervisor/api/store.py", line 178, in store_info
    ATTR_ADDONS: [
  File "/usr/src/supervisor/supervisor/api/store.py", line 179, in <listcomp>
    self._generate_addon_information(self.sys_addons.store[addon])
  File "/usr/src/supervisor/supervisor/api/store.py", line 114, in _generate_addon_information
    ATTR_ADVANCED: addon.advanced,
  File "/usr/src/supervisor/supervisor/addons/model.py", line 227, in advanced
    return self.data[ATTR_ADVANCED]
  File "/usr/src/supervisor/supervisor/store/addon.py", line 19, in data
    return self.sys_store.data.addons[self.slug]
KeyError: 'a0d7b954_emqx'

Not sure how to fix that… In the UI it only says: Failed to install addon - unknown error

adamoutler · April 1, 2023, 1:03pm

Disable protection mode.

henrya · April 1, 2023, 1:53pm

Hello @adamoutler ,

can i use you add-on with Virtualbox haos_ova-9.5.vdi.zip ?

My problem: - ssh connection - haos_ova-9.5.vdi -

Thank’s, i have solved my problem.