{"id":233,"date":"2009-04-25T13:48:17","date_gmt":"2009-04-25T11:48:17","guid":{"rendered":"http:\/\/gcolpart.evolix.net\/blog21\/?p=233"},"modified":"2009-04-25T14:08:02","modified_gmt":"2009-04-25T12:08:02","slug":"chroot-ssh-et-pty-allocation-avec-debian-lenny","status":"publish","type":"post","link":"https:\/\/gcolpart.evolix.net\/blog21\/chroot-ssh-et-pty-allocation-avec-debian-lenny\/","title":{"rendered":"Chroot SSH et PTY allocation avec Debian Lenny"},"content":{"rendered":"<p>Pour mettre en place des serveurs de backup, j&#8217;utilise un script <a href=\"http:\/\/www.gcolpart.com\/hacks\/chroot-ssh.sh\">chroot-ssh.sh <\/a>qui permet la construction d&#8217;un chroot minimal pour faire tourner un serveur SSH et faire du rsync. Avec la mise-\u00e0-jour vers Lenny, l&#8217;allocation PTY r\u00e9alis\u00e9e par SSHD change : il ne semble plus possible de mettre en place un serveur SSH sans monter PROCFS et DEVPTS. Sans cela, on rencontre les erreurs suivantes c\u00f4t\u00e9 serveur SSH :<\/p>\n<pre>debug1: Allocating pty\r\nopenpty: No such file or directory\r\nsession_pty_req: session 0 alloc failed<\/pre>\n<p>Si uniquement DEVPTS est mont\u00e9, et pas PROCFS :<\/p>\n<pre>debug1: Allocating pty\r\nopenpty: returns device for which ttyname fails.<\/pre>\n<p>Voici donc les \u00e9tapes pour lancer le serveur SSH chroot\u00e9 avec Debian Lenny :<\/p>\n<pre>#\u00a0 chroot \/backup\/jails\/myserver mount -t proc proc-chroot \/proc\/\r\n#\u00a0 chroot \/backup\/jails\/myserver mount -t devpts devpts-chroot \/dev\/pts\/\r\n#\u00a0 chroot \/backup\/jails\/myserver \/usr\/sbin\/sshd &gt; \/dev\/null<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Pour mettre en place des serveurs de backup, j&#8217;utilise un script chroot-ssh.sh qui permet la construction d&#8217;un chroot minimal pour faire tourner un serveur SSH et faire du rsync. Avec la mise-\u00e0-jour vers Lenny, l&#8217;allocation PTY r\u00e9alis\u00e9e par SSHD change : il ne semble plus possible de mettre en place un serveur SSH sans monter [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,5,72,69],"tags":[85,148,84,20,87,86],"class_list":["post-233","post","type-post","status-publish","format-standard","hentry","category-debian-fr","category-evolix","category-french","category-planet-libre","tag-chroot","tag-debian","tag-lenny","tag-migration","tag-pty","tag-ssh"],"_links":{"self":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts\/233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/comments?post=233"}],"version-history":[{"count":5,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts\/233\/revisions"}],"predecessor-version":[{"id":238,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts\/233\/revisions\/238"}],"wp:attachment":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/media?parent=233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/categories?post=233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/tags?post=233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}