1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
# lrpb
Means "last resort primitive backdoor".
For when you can't log in via ssh but something's still alive...
## Requirements
- bash 4+
- GNU tar
- curl or wget
- signify from openbsd
- rsync
- ssh
## Installation
make install
## Client side usage
First, create a pair of keys:
signify -G -p myname.pub -s myname.sec
Then write a script you want to be launched on remote side:
#!/bin/sh
touch ~/helloworld-it-works
Write lrpb client config to `client.conf`:
# ssh config
upload_host=mydomain.org
upload_port=22
upload_user=user
upload_path=/home/user/www/lrpb
name=myname
signify_path=/bin/signify
seckey_path=./myname.sec
Finally, sign and upload it to some remote server you control:
lrpb upload -c ./client.conf -f ./script.sh
On remote server, set up some http server (nginx, lighttpd, apache, whatever) that serves directory you upload to.
The script will upload archive name `myname.tar.gz` and it must be accessible by http.
## Server side usage
Copy public key to `/etc/lrpb.pub` on the server (or anywhere you
want, just make sure to set correct path in the config).
Write lrpb server config and save it to `/etc/lrpb.conf`:
url=https://mydomain.org/lrpb/
pubkey_path=/etc/lrpb.pub
name=myname
signify_path=/usr/bin/signify-openbsd
cwd=/var/lrpbfsq
cache_file=/var/lrpbfs/cache
> Optionally, make `/var/lrpbfs` a tmpfs mountpoint. Add to `/etc/fstab`:
>
> ```
> tmpfs /var/lrpbfs tmpfs size=1M,mode=1755,uid=1000,gid=1000 0 0
> ```
>
> Then mount it:
> ```
> mount /var/lrpbfs
> ```
Test that it works:
lrpb exec
Add cron task (`crontab -e`):
0,30 * * * * /usr/local/bin/lrpb exec >/dev/null
## License
BSD-2c
|
