View source for OpenBSD Post Install Steps

[[Category:OpenBSD]]

== Introduction ==

Everything on this page needs to be done as root, unless specified, so login as root, or su to root.

 su -

=== Vultr.com ===

Vultr.com doesn't install ssh keys, you will need to log-in as root with the autogenerated password, then install your ssh key.

 # As root
 echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJnkro8LT0TS+NTOIB787wfqIwv2VTmXXYsnsoVk71UE aram@horizon.local' >> /root/.ssh/authorized_keys
 echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC8dcfsqZJWTNTCfATbD6WiZyWoK3AiihynONRjCrtMw aram@oceanic.local' >> /root/.ssh/authorized_keys
 echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRc0UWKrFpCv/EOUo2jpEQt+C/pa0tc1rUWKgjbKTp7 aram@edengate.local' >> /root/.ssh/authorized_keys

Change the autogenerated password:
 usermod -p `jot -r -c 30 a z | rs -g0 0 30 | encrypt -b a` root

== Set the hostname ==

 echo 'freedom.mgk.ro' > /etc/myname

== Update the software ==

 echo 'https://cdn.openbsd.org/pub/OpenBSD' > /etc/installurl
 syspatch

== Install basic software ==

 pkg_add bash rsync

== Create a user ==

This will create a user with a random password that can do passwordless doas:

 useradd -m -g staff -L staff -G wheel -c 'Aram Hăvărneanu' -s /bin/ksh -p `jot -r -c 30 a z | rs -g0 0 30 | encrypt -b a` aram

Enable passwordless doas for the staff group:

 cat <<EOF > /etc/doas.conf
 permit nopass :staff
 permit nopass keepenv root
 EOF

=== SSH ===

For ssh access, use su to switch from root to the user and then add ssh keys.

 su - aram
 # as a user
 mkdir -p .ssh
 echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJnkro8LT0TS+NTOIB787wfqIwv2VTmXXYsnsoVk71UE aram@horizon.local' >> .ssh/authorized_keys
 echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC8dcfsqZJWTNTCfATbD6WiZyWoK3AiihynONRjCrtMw aram@oceanic.local' >> .ssh/authorized_keys
 echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRc0UWKrFpCv/EOUo2jpEQt+C/pa0tc1rUWKgjbKTp7 aram@edengate.local' >> .ssh/authorized_keys
 chmod 700 .ssh
 chmod 644 .ssh/authorized_keys