/rubyslippers

Raspberry pi ssh call home

Primary LanguageShellGNU General Public License v3.0GPL-3.0

rubyslippers

Raspberry pi autossh bash auto-ssh script utilizing google spreadsheets.

No outside ports are needed to be forwarded to remote client raspberry pi on remote network.

External facing open network ports are vulerability risks. Review your home network security policy.

Remote shell callback with Rasbian and google sheets. Use at own risk. no warrenty no takebacks. Work in progress. Not for enterprise use.

BsidesDFW 2019

Dependencies:

  • Google sheet form
  • app dependencies: autossh
  • provided file dependencies: urlencode.sed and urldecode.sed
  • confiuration files:
  • /opt/share/callhome.cfg (google specific formIDs)
  • /opt/share/callhome.homenet (local raspberry pi information)
  • connection to https://www.ip-adress.com/what-is-my-ip-address for parsing outside network information

Minimum requirements:

  • Home router assign static IP raspberry pi.
  • Home router port forward ssh to raspberry pi
  • Raspberry pi with Rasbian Buster Lite image from raspberrypi.org
  • developed on rpi1b
  1. Follow initial basic setup raspberry prefrences and configuration. raspi-config
  • Set Locale Language
  • Set timezone
  • Set Keyboard
  • Under Interfacing Options select ssh
  • change the default pi password with #> passwd
  1. Configure home router to staticly assign raspberry IP address. Use the mac address of raspberry pi to boot up with the same IP address. many how-to videos.
  1. security risk assesment here Configure home router port forward outside network to raspberry pi IP address. (reference your specific manufacture/brand and choose a non-standard number of obfuscation)
isServer=yes
sshinport=10686
vpsuser=pi
  1. Choose your virtual loopback ssh starting port. Begins at 2200 and increments +1 for each unique hawrdware ID raspi remote client not found in google sheet online.
vloopstart=2200
  1. Login to Google Sheets to create a sheet for database of your pi inventory.
  • example: piConnectBack
  • goto Tools menu, select Create form

Create with 8 short answer text, all required questions in specified order.

  • Hostname
  • HardwareID
  • IPlocal
  • OutsideIP
  • Release
  • SysArch
  • RpiModel
  • Kernel
  • Homenet
  • ISPname

In your google sheet goto Form and copy url key.

gliveformurl="https://docs.google.com/forms/d/e/GOOGLELIVEFORMKEY/viewform"
  • File - > publish to Web
  • Link section
  • Entire document - Tab-seperated values (.tsv)
  • Expand Published Contents & settings
  • Put a checkbox in entire document
glivetsvurl="https://docs.google.com/spreadsheets/d/e/GOOGLETSVOUTPUTKEY/pub?output=tsv"

Program help

  rubyslippers.sh: (options) 
    installfiles)   # copy files in /usr/local/bin  must be root
    setupServer)    # initial server setup must be root
    setupClient)    # initial setup must be root
    callhomefirst)  # callhome first to test ssh call home
    showconnected)  # show machies connected to server
    tapshoes)       # no place like home
    logged)         # All machines output logged to google tsv to screen
    lsshids)        # list sshid port
    join)           # join network $1 $2 $3 $4 $5  (server side only)
    myinfo)         # last cpuinfo info
    mysshid)        # cpuinfo and sshid
    cleantmp)       # cleantmpfiles
    heartbeat)      # find anything changed and submit to google form

Server side setup Edit rubyslippers.sh

  • inbound ssh port needed
  • Google web publish url
  • Google live form url
  • add root crontab heartbeat
30 1,19   *  *   *     /usr/local/bin/rubyslippers.sh heartbeat

Distribute rubyslippers to each raspberry client

  • add client crontab tapshoes
1  2,18   *  *   *     /user/local/bin/rubyslippers.sh tapshoes

Credits: