Arch Linux

Panke

Member

Registered: 2014-12-05

Posts: 1

Unlocking looks device via dropbear at boot up only works from LAN

I've using dropbear and an mkinitcpio hook to unlock an looks device at boot. However I can only connect to the started dropbear daemon from the local network not from a machine somewhere on the Internet. The ports are forwarded correctly, because as soon as I am in my normal ArchLinux system, I can access both the dropbear and openssh server from the outside.

Any clues?

EscapedNull

Member

Registered: 2013-12-04

Posts: 129

Re: Unlocking looks device via dropbear at boot up only works from LAN

Is there a default gateway setup in early userspace? Is your DHCP server assigning a different IP address to early userspace than the main system? Are they configured with the same static IP? Can you ping the machine from the internet? And why would dropbear and openssh be running at the same time? Dropbear is supposed to stop after the passphrase is entered, before the root filesystem is mounted.

Just a heads up, the dropbear initrd hook is undergoing some substantial changes soon, so I wouldn't put too much time into it before then.

Evils

Member

Registered: 2015-05-01

Posts: 8

Re: Unlocking looks device via dropbear at boot up only works from LAN

I have exactly the same problem, though haven't found a solution yet.