tinysshnoneauthd(8)

πŸ“¦
this version Β· 2 versions
, in debian bookworm, debian trixie, opensuse-leap 16.0, ubuntu noble, ubuntu questing, ubuntu resolute

✨ tinysshnoneauthd ✨

okay so bestie, welcome to tinysshnoneauthd β€” that's the TinySSH daemon, but with the 'none' auth method enabled πŸ’…. It lives in the System Manager's Manual, section 8, and it's genuinely so underrated.


🌸 NAME 🌸

tinysshnoneauthd β€” Tiny SSH daemon with 'none' auth. enabled πŸ¦‹


πŸŽ€ SYNOPSIS πŸŽ€

tinysshnoneauthd [ options ] keydir

πŸ’– DESCRIPTION πŸ’–

tinysshnoneauthd creates an encrypted (but not authenticated) SSH connection. no cap, that's the whole bit πŸ”₯

So like… why would you want that? It's for protecting older protocols β€” think telnet and friends β€” that are out here vibing completely unencrypted. You wrap them in this, they get encryption, and the auth part is just… not the point. It's giving "encrypted tunnel, no questions asked" 😭


✨ OPTIONS ✨

  • -q β€” no error messages. shhh 🀫 the errors simply do not get spoken
  • -Q β€” print error messages (this is the default, bestie, so it's already on unless you said otherwise)
  • -v β€” print extra information. more words, more lore πŸ”
  • -l β€” use syslog instead of standard error output. lowkey a lifesaver when you're running from inetd
  • -L β€” don't use syslog, use standard error output (the default, so this is your "put it back" button)
  • -e command β€” execute the given command instead of spawning the shell. > heads up: this disables exec/subsystem channel requests, fr fr, so don't come for it later
  • keydir β€” the directory containing TinySSH keys, typically /etc/tinyssh/sshkeydir πŸ”‘

🌈 EXAMPLES 🌈

TCPSERVER

okay this is the whole setup, character for character, no edits:

useradd tinysshnoneauth
mkdir -p /home/tinysshnoneauth/
tinysshd-makekey /home/tinysshnoneauth/sshkeydir
chown -R tinysshnoneauth /home/tinysshnoneauth/sshkeydir
envuidgid tinysshnoneauth tcpserver -UHRDl0 0 2222 /usr/sbin/tinysshnoneauthd -vv -e 'cat /etc/motd' /home/tinysshnoneauth/sshkeydir

like… make a user, make the dir, make the key, give the user the key, then let tcpserver on port 2222 hand it off to /usr/sbin/tinysshnoneauthd with double verbose and a cat /etc/motd instead of a shell. that last line is the main character of this whole page πŸ‘‘


πŸ‘€ SEE ALSO πŸ‘€


and that's the page, bestie 🫢 this little love letter to tinysshnoneauthd came out of the System Manager's Manual, page tinysshnoneauthd(8) β€” the date on it is giving mysterious, so we're just gonna say "whenever this dropped, it slayed." iykyk πŸ’œ