Archboot - Arch Linux ARM ISO 2024.03 released for aarch64

[ufo6000]

Thanks for providing Archboot!

Since German hetzner and netcup now offers virtual arm64 root server, I thought I give Archboot a try.
E.g. netcup is only providing Debian and Ubuntu right now...

I uploaded archboot-2023.12.26-10.26-6.2.10-1-aarch64-ARCH-aarch64.iso to netcup, so the root server can boot the iso.

Boot was successful and I landed in the "GNU screen", which is accessible via VNC console and ssh.

The later is my problem: After booting the iso, the root server is accessible by public IPv4, sshd on port 22, as root, with no password.
So it's open for everyone... and for IPv4 + port 22 it's a matter of minutes until someone finds the open system...

What is the proposed secure way to use Archboot for installing arch on a remote root server ?

Thanks!

[tpowa]

You need to set the root password with passwd and all is safe.
Other option would be to use the local image that is not remotely accessible.

[ufo6000]

Yes, but until then, the system is open and I have to hope I'm the first one on it?

Think of a case, I will newly install arch or have to do some repair on an existing system with Archboot: I set boot to this iso, then the reboot hangs a little or suddenly something comes up (e.g. my children or the pets requires immediate attention) and I have to leave the room, or my internet connection is going down for a few minutes... which will happen for sure according Murphy's law.

local image:
according to your website this is also with
"LAN support" and "During boot, all ethernet network interfaces will try to obtain an IP address through DHCP."

but here the empty root account will not work via ssh ?

[tpowa]

Local image will not obtain an IP address until you explicitly enable the online mode. If you can access your root server through a KVM interface you don't need ssh and network functionality on the host. Updated the homepage accordingly now.

[ufo6000]

Thanks!
I retested with archboot-2023.12.30-08.41-6.2.10-1-aarch64-ARCH-local-aarch64.iso
and yes, no remote ssh access is possible

But I didn't manage to get the system fully to work, it hangs here:

tty1: Generating container in /archboot... 40%
tty11: Updating Arch Linux keyring...

Then in tty3 I set a password for root, created a .network file, started systemd-networkd and brought up enox device with dhcp. networkctl was green. But then ssh systemd unit won't start. I didn't investigate further, because the netcup KVM VNC console is not nice to use for much typing...

[tpowa]

Fixed your issue with images from today. keyring needed a workaround.

[tpowa]

Hi
New 2024.02 images uploaded.

Highlights:
- kernel 6.7.6
- added automatic GeoIP mirror selection on -latest ISOs/UKIs

Have fun,
greetings
tpowa

[tpowa]

Hi
New 2024.03 images uploaded.

Highlights:
- kernel 6.8.x
- pacman release 6.1
- mkinitcpio release v38
- plasma release 6

Have fun,
greetings
tpowa