Skip to content

Commit 8ce17fe

Browse files
dougtakeutiscottleibrand
authored andcommitted
Adding warnings about disabling password login to rpi.md (openaps#180)
* Update rpi.md * Update rpi.md * Update rpi.md
1 parent 99ebe22 commit 8ce17fe

File tree

1 file changed

+17
-7
lines changed
  • docs/docs/walkthrough/phase-0

1 file changed

+17
-7
lines changed

docs/docs/walkthrough/phase-0/rpi.md

Lines changed: 17 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -167,11 +167,11 @@ Run
167167

168168
`sudo raspi-config`
169169

170-
to expand filesystem, change user password and set timezone (in internationalization options). This will take effect on the next reboot, so go ahead and reboot if prompted, or run `sudo reboot` when you're ready.
170+
Here you can expand filesystem to maximize memory, change user password and set timezone (in internationalization options). This will take effect on the next reboot, so go ahead and reboot if prompted, or run `sudo reboot` when you're ready.
171171

172-
## Setup Password-less Login [optional]
172+
## Setting up an SSH key for Password-less Login [optional]
173173

174-
We will now setup a public/private key identity, and configure your local computer and the Raspberry Pi to automatically use it, in order to allow convenient future ssh access to the Pi without requiring a password.
174+
You can setup a public/private key identity, and configure your local computer and the Raspberry Pi to automatically use it. This will allow SSH access to the Pi without requiring a password. Some people find this feature very convenient.
175175

176176
### Windows
177177

@@ -203,12 +203,22 @@ Instead of appending it to the list of authorized keys, you may simply copy your
203203

204204
Finally, `ssh [email protected]` to make sure you can log in without a password.
205205

206-
### Disabling password login [optional]
207-
To secure the Pi, you should either set a password (using `sudo raspi-config` above, or with `sudo passwd`), or disable password login completely. If you want to disable password login (so you can only log in with your ssh key), open the `sshd_config` file in nano text editor on the Pi as follows
206+
### Disabling password login [optional - WARNING: THIS COULD POTENTIALLY LOCK YOU OUT OF YOUR RASPBERRY PI]
207+
Make sure you fully understand this feature before proceeding. It is completely optional. There are two ways of securing the Pi:
208+
209+
1) Setting a password:
210+
211+
a) use `sudo raspi-config` as described above, or
212+
213+
b) `sudo passwd`
214+
215+
2) Disabling password login completely. In this case, you can ONLY log in with your SSH key. Be careful here.
216+
217+
a) Open the `sshd_config` file in nano text editor on the Pi as follows
208218

209219
`sudo nano /etc/ssh/sshd_config`
210220

211-
Change the following
221+
b) Change the following
212222

213223
```
214224
PermitRootLogin yes
@@ -224,7 +234,7 @@ PasswordAuthentication no
224234

225235
Note that the second line was previously commented out.
226236

227-
From now on you will be able to SSH in with your private SSH key only.
237+
From now on you will be able to SSH in with your private SSH key ONLY.
228238

229239
## Wifi reliability tweaks [optional]
230240

0 commit comments

Comments
 (0)