1<\/code> \u306b\u306a\u3063\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u8d77\u52d5\u3068USB\u8d77\u52d5\u3092\u8a66\u3059\u3088\u3046\u306b\u308a\u307e\u3059\uff0e\u3053\u306e\u72b6\u614b\u3067 microSD \u8d77\u52d5\u3092\u8a66\u3059\u3068\u3053\u308c\u3082\u5927\u4e08\u592b\u3067\u3057\u305f\uff0e(\u512a\u5148\u5ea6\u306f microSD > USB\uff0cNetwork\u306f\u672a\u78ba\u8a8d)<\/p>\nUSB\u30e1\u30e2\u30ea\u304b\u3089\u306e\u8d77\u52d5<\/h2>\n
\u3053\u306e\u72b6\u614b\u3067 shutdown \u3057\uff0cmicroSD \u3092\u53d6\u308a\u51fa\u3057\u3066 Debian \u306e\u5c0e\u5165\u3057\u305f USB \u30e1\u30e2\u30ea\u3092\u63a5\u7d9a\u3057\u3066\u8d77\u52d5\u3067\u8d77\u52d5\u3057\u307e\u3057\u305f\uff0e(USB\u8d77\u52d5\u306e\u5834\u5408\u306a\u304b\u306a\u304b\u8d77\u52d5\u304c\u59cb\u307e\u3089\u305a\u7126\u3063\u305f\u3051\u306930\u79d2\u307b\u3069\u5f85\u3064\u3068UART\u306b\u30ed\u30b0\u304c\u51fa\u306f\u3058\u3081\u308b\uff0eHDMI\u306e\u51fa\u529b\u306f\u672a\u78ba\u8a8d)<\/p>\n
login \u306f root:raspberry<\/strong>
\n\u3061\u3083\u3093\u3068 64bit \u3067\u3059 :)<\/p>\nroot@rpi3:~# uname -a\r\nLinux rpi3 4.19.0-2-arm64 #1 SMP Debian 4.19.16-1 (2019-01-17) aarch64 GNU\/Linux\r\n<\/code><\/pre>\n\u7d30\u3005\u3068\u3057\u305f\u8a2d\u5b9a(\u307b\u307c\u4f59\u9332)<\/h2>\n
\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u66f4\u65b0<\/p>\n
root@rpi3:~# apt update && apt upgrade\r\n<\/code><\/pre>\n\u4e00\u822c\u30e6\u30fc\u30b6\u306e\u8ffd\u52a0<\/p>\n
root@rpi3:~# useradd -m matoken\r\nroot@rpi3:~# passwd matoken\r\nEnter new UNIX password: \r\nRetype new UNIX password: \r\npasswd: password updated successfully\r\nroot@rpi3:~# chsh matoken -s \/bin\/bash\r\n<\/code><\/pre>\nOpenSSH \u306e\u8a2d\u5b9a\u5909\u66f4<\/p>\n
root@rpi3:~# diff -u \/etc\/ssh\/sshd_config.old \/etc\/ssh\/sshd_config\r\n--- \/etc\/ssh\/sshd_config.old 2019-02-06 15:15:46.940904823 +0000\r\n+++ \/etc\/ssh\/sshd_config 2019-02-16 13:17:17.076873278 +0000\r\n@@ -29,7 +29,7 @@\r\n # Authentication:\r\n\r\n #LoginGraceTime 2m\r\n-PermitRootLogin yes\r\n+PermitRootLogin prohibit-password\r\n #StrictModes yes\r\n #MaxAuthTries 6\r\n #MaxSessions 10\r\n@@ -53,7 +53,7 @@\r\n #IgnoreRhosts yes\r\n\r\n # To disable tunneled clear text passwords, change to no here!\r\n-#PasswordAuthentication yes\r\n+PasswordAuthentication no\r\n #PermitEmptyPasswords no\r\n\r\n # Change to yes to enable challenge-response passwords (beware issues with\r\n@@ -119,3 +119,5 @@\r\n # AllowTcpForwarding no\r\n # PermitTTY no\r\n # ForceCommand cvs server\r\n+\r\n+AllowGroups sshusers\r\n<\/code><\/pre>\nsshusers<\/code> \u30b0\u30eb\u30fc\u30d7\u3092\u4f5c\u6210\u3057\u3066 ssh login \u51fa\u6765\u308b\u30e6\u30fc\u30b6\u3092\u767b\u9332<\/p>\nroot@rpi3:~# sudo groupadd sshusers\r\nroot@rpi3:~# sudo usermod -a -G sshusers matoken\r\n<\/code><\/pre>\n\u77ed\u3044modulus \u3092\u524a\u9664\u3059\u308b<\/p>\n
root@rpi3:~# awk '$5>=3071' \/etc\/ssh\/moduli | tee \/etc\/ssh\/moduli.tmp\r\nroot@rpi3:~# wc -l \/etc\/ssh\/moduli \/etc\/ssh\/moduli.tmp\r\n 427 \/etc\/ssh\/moduli\r\n 368 \/etc\/ssh\/moduli.tmp\r\n 795 total\r\nroot@rpi3:~# sudo mv \/etc\/ssh\/moduli.tmp \/etc\/ssh\/moduli\r\n<\/code><\/pre>\nhostpc\u304b\u3089ssh\u516c\u958b\u9375\u3092cp\u3057\u3066\u304a\u304f<\/p>\n
$ ssh-copy-id -i ~\/.ssh\/id_ed25519_pi.pub matoken@rpi3\r\n<\/code><\/pre>\nssh\u9375\u30da\u30a2\u3092\u4f5c\u3063\u3066\u304a\u304f<\/p>\n
root@rpi3:~# sudo -u matoken ssh-keygen -t ed25519\r\n<\/code><\/pre>\nsshd \u306e\u518d\u8d77\u52d5<\/p>\n
root@rpi3:~# systemctl restart ssh\r\n<\/code><\/pre>\nssh login\u6642\u306b\u901a\u77e5\u3092\u98db\u3070\u3059\u3088\u3046\u306b\u3057\u3066\u304a\u304f<\/p>\n
root@rpi3:~# vi \/etc\/ssh\/sshrc\r\nroot@rpi3:~# chmod +x \/etc\/ssh\/sshrc\r\nroot@rpi3:~# cat \/etc\/ssh\/sshrc\r\n#!\/bin\/sh\r\n\r\n\/home\/matoken\/bin\/telegram.sh sshrc:${USER}@`hostname`:${SSH_CONNECTION}\r\n\/home\/matoken\/bin\/sms.sh sshrc:${USER}@`hostname`:${SSH_CONNECTION}\r\n<\/code><\/pre>\nssh \u3067\u30d1\u30b9\u30ef\u30fc\u30c9\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u305a\uff0c\u9375\u8a8d\u8a3c\u3067\u30ed\u30b0\u30a4\u30f3\u304c\u51fa\u6765\u308b&\u901a\u77e5\u304c\u98db\u3076\u306e\u3092\u78ba\u8a8d<\/p>\n
root@rpi3:~# ssh root@localhost -o PasswordAuthentication=yes\r\nroot@rpi3:~# ssh matoken@localhost -o PasswordAuthentication=yes\r\nroot@rpi3:~# ssh matoken@localhost -i ~\/.ssh\/id_ed25519\r\n<\/code><\/pre>\n\u81ea\u5206\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u5408\u308f\u305b\u3066 \/etc\/iptables\/rules.v4, \/etc\/iptables\/rules.v6<\/code> \u3092\u5909\u66f4\uff0e<\/p>\nroot@rpi3:~# grep -v ^# \/etc\/iptables\/rules.v4\r\n*filter\r\n:INPUT ACCEPT [0:0]\r\n:FORWARD ACCEPT [0:0]\r\n:OUTPUT ACCEPT [0:0]\r\n-A INPUT -s 127.0.0.0\/8 -m comment --comment "RFC3330 loopback" -j ACCEPT\r\n-A INPUT -s 192.168.1.0\/24 -m comment --comment "RFC1918 reserved" -j ACCEPT\r\n-A INPUT -p tcp -m tcp --dport 22 -m comment --comment SSH -j REJECT --reject-with icmp-port-unreachable\r\nCOMMIT\r\nroot@rpi3:~# grep -v ^# \/etc\/iptables\/rules.v6\r\n*filter\r\n:INPUT ACCEPT [0:0]\r\n:FORWARD ACCEPT [0:0]\r\n:OUTPUT ACCEPT [0:0]\r\n-A INPUT -s ::1\/128 -m comment --comment "RFC3513 loopback" -j ACCEPT\r\n-A INPUT -p tcp -m tcp --dport 22 -m comment --comment SSH -j REJECT --reject-with icmp6-port-unreachable\r\nCOMMIT\r\n<\/code><\/pre>\nsudo \u3092\u5c0e\u5165\u3057\u3066\u8a2d\u5b9a<\/p>\n
root@rpi3:~# apt install sudo\r\n<\/code><\/pre>\nsudo group\u306b\u30e6\u30fc\u30b6\u3092\u767b\u9332<\/p>\n
root@rpi3:~# usermod -a -G sudo matoken\r\n<\/code><\/pre>\nsudo \u304c\u5229\u7528\u3067\u304d\u308b\u306e\u3092\u78ba\u8a8d<\/p>\n
matoken@rpi3:~$ sudo grep ^root: \/etc\/shadow\r\nsudo: unable to resolve host rpi3: Name or service not known\r\nroot:!..VyaTFxP8kT6:17933:0:99999:7:::\r\n<\/code><\/pre>\nroot\u30e6\u30fc\u30b6\u3092\u30ed\u30c3\u30af<\/p>\n
$ sudo passwd -l root \r\nsudo: unable to resolve host rpi3: Name or service not known\r\npasswd: password expiry information changed.\r\nmatoken@rpi3:~$ sudo passwd -S root\r\nsudo: unable to resolve host rpi3: Name or service not known\r\nroot L 02\/06\/2019 0 99999 7 -1\r\n<\/code><\/pre>\nsudo\u6642\u306a\u3069\u306b\u300csudo: unable to resolve host rpi3: Name or service not known<\/code>\u300d\u3068\u8a00\u308f\u308c\u308b\u306e\u3067 hosts \u306e localhost \u306b rpi3 \u3092\u8ffd\u52a0<\/p>\nmatoken@rpi3:~$ sudo vi \/etc\/hosts\r\n127.0.0.1 localhost rpi3\r\n<\/code><\/pre>\n\u3053\u3053\u3067\u518d\u8d77\u52d5\u3059\u308b\u3068 rootfs \u304c\u898b\u3064\u304b\u3089\u306a\u3044\u3068\u8a00\u308f\u308c\u8d77\u52d5\u3057\u306a\u3044\uff0e<\/p>\n
(initramfs) Gave up waiting for root file system device. Common problems:\r\n- Boot args (cat \/proc\/cmdline)\r\n- Check rootdelay= (did the system wait long enough?)\r\n- Missing modules (cat \/proc\/modules; ls \/dev)\r\nALERT! \/dev\/mmcblk0p2 does not exist. Dropping to a shell!\r\n\r\n\r\nBusyBox v1.27.2 (Debian 1:1.27.2-3) built-in shell (ash)\r\nEnter 'help' for a list of built-in commands.\r\n<\/code><\/pre>\ncmdline \u3067\u306f \/dev\/mmcblkp2 \u304b\u3089\u8d77\u52d5\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u304c\uff0c \/dev\/sda2 \u304b\u3089\u8d77\u52d5\u3057\u305f\u3044<\/p>\n
(initramfs) ls \/dev\r\nblock tty12 tty47\r\nbsg tty13 tty48\r\nbus tty14 tty49\r\nchar tty15 tty5\r\nconsole tty16 tty50\r\ncore tty17 tty51\r\ncpu_dma_latency tty18 tty52\r\ndisk tty19 tty53\r\nfb0 tty2 tty54\r\nfd tty20 tty55\r\nfull tty21 tty56\r\ngpiochip0 tty22 tty57\r\ngpiochip1 tty23 tty58\r\ninput tty24 tty59\r\nkmsg tty25 tty6\r\nkvm tty26 tty60\r\nmem tty27 tty61\r\nmemory_bandwidth tty28 tty62\r\nnetwork_latency tty29 tty63\r\nnetwork_throughput tty3 tty7\r\nnull tty30 tty8\r\nport tty31 tty9\r\npsaux tty32 ttyAMA0\r\nptmx tty33 ttyS0\r\npts tty34 ttyS1\r\nrandom tty35 ttyS2\r\nsda tty36 ttyS3\r\nsda1 tty37 urandom\r\nsda2 tty38 vcs\r\nsnapshot tty39 vcs1\r\nstderr tty4 vcsa\r\nstdin tty40 vcsa1\r\nstdout tty41 vcsu\r\ntty tty42 vcsu1\r\ntty0 tty43 vga_arbiter\r\ntty1 tty44 zero\r\ntty10 tty45\r\ntty11 tty46\r\n(initramfs) cat \/proc\/cmdline\r\nbcm2708_fb.fbwidth=656 bcm2708_fb.fbheight=416 bcm2708_fb.fbswap=1 dma.dmachans=0x7f35 bcm2709.boardrev=0xa02082 bcm2709.serial=0xfaf144 bcm2709.uart_clock=48000000 smsc95xx.macaddr=B8:27:EB:FA:F1:44 vc_mem.mem_base=0x3ec00000 vc_mem.mem_size=0x40000000 console=tty0 console=ttyS1,115200 root=\/dev\/mmcblk0p2 rw elevator=deadline fsck.repair=yes net.ifnames=0 cma=64M rootwait\r\n<\/code><\/pre>\n\/boot \u3092 mount \u3057\u3066\u66f8\u304d\u63db\u3048\u3088\u3046\u3068\u601d\u3063\u305f\u3051\u3069\u3046\u307e\u304f mount \u51fa\u6765\u306a\u3044?<\/p>\n
(initramfs) mkdir \/tmp\/boot\r\n(initramfs) mount \/dev\/sda1 \/tmp\/boot\r\nmount: mounting \/dev\/sda1 on \/tmp\/boot failed: Invalid argument\r\n(initramfs) ls -la \/dev\/sda1 \/tmp\/boot\r\nbrw------- 1 0 0 8, 1 Jan 1 00:00 \/dev\/sda1\r\n\r\n\/tmp\/boot:\r\ntotal 0\r\ndrwxr-xr-x 2 0 0 0 Jan 1 00:10 .\r\ndrwxr-xr-x 3 0 0 0 Jan 1 00:10 ..\r\n(initramfs) mount -t vfat \/dev\/sda1 \/tmp\/boot\r\nmount: mounting \/dev\/sda1 on \/tmp\/boot failed: No such device\r\n(initramfs) mkdir \/tmp\/root\r\n(initramfs) modprobe ext4\r\n(initramfs) mount \/dev\/sda2 \/tmp\/root\r\n[ 2144.515323] EXT4-fs (sda2): mounted filesystem with ordered data mode. Opts: (null)\r\n(initramfs) find \/tmp\/root -name "vfat.ko"\r\n\/tmp\/root\/usr\/lib\/modules\/4.19.0-2-arm64\/kernel\/fs\/fat\/vfat.ko\r\n(initramfs) modprobe -v \/tmp\/root\/usr\/lib\/modules\/4.19.0-2-arm64\/kernel\/fs\/fat\/vfat.ko\r\n(initramfs) lsmod|grep fat\r\n(initramfs) mount -t vfat \/dev\/sda1 \/tmp\/boot\r\nmount: mounting \/dev\/sda1 on \/tmp\/boot failed: No such device\r\n(initramfs) lsmod|grep fat\r\n<\/code><\/pre>\n\u4e00\u65e6\u96fb\u6e90\u3092\u5207\u3063\u3066 \/boot\/cmdline.txt \u306e root=\/dev\/mmcblk0p2 \u3092 root=\/dev\/sda2 \u306b\u66f8\u304d\u63db\u3048\u3066\u8d77\u52d5\u3059\u308b\u3088\u3046\u306b\u306a\u3063\u305f\uff0e(LABEL\u6307\u5b9a\u306b\u5909\u3048\u305f\u307b\u3046\u304c\u3044\u3044\u304b\u306a)<\/p>\n
$ cat \/boot\/firmware\/cmdline.txt \r\nconsole=tty0 console=ttyS1,115200 root=\/dev\/sda2 rw elevator=deadline fsck.repair=yes net.ifnames=0 cma=64M rootwait\r\n<\/code><\/pre>\n\u203braspi3-firmware<\/em> \u3042\u305f\u308a\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u639b\u304b\u308b\u3068\u4e0a\u66f8\u304d\u3055\u308c\u308b\u3088\u3046\uff0e<\/p>\n
![\"IMG-20190208-184136\"\/](\"https:\/\/i.postimg.cc\/zVprWrR8\/IMG-20190208-184136.jpg\")
<\/a>![\"IMG-20190208-185154\"\/](\"https:\/\/i.postimg.cc\/xX4Vx3RZ\/IMG-20190208-185154.jpg\")
<\/a>![\"IMG-20190208-185222\"\/](\"https:\/\/i.postimg.cc\/sMXR4NpS\/IMG-20190208-185222.jpg\")
<\/a>![\"IMG-20190213-212056\"\/](\"https:\/\/i.postimg.cc\/XGMS3Ntc\/IMG-20190213-212056.jpg\")
<\/a><\/p>\n