blog/tags/freedombox/index.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
   2           "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
   3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
   4   <head>
   5     <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
   6     <title>Petter Reinholdtsen: Entries Tagged freedombox</title>
   7     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
   8     <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
   9     <link rel="alternate" title="RSS Feed" href="freedombox.rss" type="application/rss+xml" />
  10   </head>
  11   <body>
  12     <div class="title">
  13  <h1>
  14      <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
  15
  16  </h1>
  17
  18 </div>
  19
  20
  21     <h3>Entries tagged "freedombox".</h3>
  22
  23     <div class="entry">
  24       <div class="title">
  25         <a href="http://people.skolelinux.org/pere/blog/A_Debian_package_for_SMTP_via_Tor__aka_SMTorP__using_exim4.html">A Debian package for SMTP via Tor (aka SMTorP) using exim4</a>
  26       </div>
  27       <div class="date">
  28         10th November 2014
  29       </div>
  30       <div class="body">
  31         <p>The right to communicate with your friends and family in private,
  32 without anyone snooping, is a right every citicen have in a liberal
  33 democracy.  But this right is under serious attack these days.</p>
  34
  35 <p>A while back it occurred to me that one way to make the dragnet
  36 surveillance conducted by NSA, GCHQ, FRA and others (and confirmed by
  37 the whisleblower Snowden) more expensive for Internet email,
  38 is to deliver all email using SMTP via Tor.  Such SMTP option would be
  39 a nice addition to the FreedomBox project if we could send email
  40 between FreedomBox machines without leaking metadata about the emails
  41 to the people peeking on the wire.  I
  42 <a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2014-October/006493.html">proposed
  43 this on the FreedomBox project mailing list in October</a> and got a
  44 lot of useful feedback and suggestions.  It also became obvious to me
  45 that this was not a novel idea, as the same idea was tested and
  46 documented by Johannes Berg as early as 2006, and both
  47 <a href="https://github.com/pagekite/Mailpile/wiki/SMTorP">the
  48 Mailpile</a> and <a href="http://dee.su/cables">the Cables</a> systems
  49 propose a similar method / protocol to pass emails between users.</p>
  50
  51 <p>To implement such system one need to set up a Tor hidden service
  52 providing the SMTP protocol on port 25, and use email addresses
  53 looking like username@hidden-service-name.onion.  With such addresses
  54 the connections to port 25 on hidden-service-name.onion using Tor will
  55 go to the correct SMTP server.  To do this, one need to configure the
  56 Tor daemon to provide the hidden service and the mail server to accept
  57 emails for this .onion domain.  To learn more about Exim configuration
  58 in Debian and test the design provided by Johannes Berg in his FAQ, I
  59 set out yesterday to create a Debian package for making it trivial to
  60 set up such SMTP over Tor service based on Debian.  Getting it to work
  61 were fairly easy, and
  62 <a href="https://github.com/petterreinholdtsen/exim4-smtorp">the
  63 source code for the Debian package</a> is available from github.  I
  64 plan to move it into Debian if further testing prove this to be a
  65 useful approach.</p>
  66
  67 <p>If you want to test this, set up a blank Debian machine without any
  68 mail system installed (or run <tt>apt-get purge exim4-config</tt> to
  69 get rid of exim4).  Install tor, clone the git repository mentioned
  70 above, build the deb and install it on the machine.  Next, run
  71 <tt>/usr/lib/exim4-smtorp/setup-exim-hidden-service</tt> and follow
  72 the instructions to get the service up and running.  Restart tor and
  73 exim when it is done, and test mail delivery using swaks like
  74 this:</p>
  75
  76 <p><blockquote><pre>
  77 torsocks swaks --server dutlqrrmjhtfa3vp.onion \
  78   --to fbx@dutlqrrmjhtfa3vp.onion
  79 </pre></blockquote></p>
  80
  81 <p>This will test the SMTP delivery using tor.  Replace the email
  82 address with your own address to test your server. :)</p>
  83
  84 <p>The setup procedure is still to complex, and I hope it can be made
  85 easier and more automatic.  Especially the tor setup need more work.
  86 Also, the package include a tor-smtp tool written in C, but its task
  87 should probably be rewritten in some script language to make the deb
  88 architecture independent.  It would probably also make the code easier
  89 to review.  The tor-smtp tool currently need to listen on a socket for
  90 exim to talk to it and is started using xinetd.  It would be better if
  91 no daemon and no socket is needed.  I suspect it is possible to get
  92 exim to run a command line tool for delivery instead of talking to a
  93 socket, and hope to figure out how in a future version of this
  94 system.</p>
  95
  96 <p>Until I wipe my test machine, I can be reached using the
  97 <tt>fbx@dutlqrrmjhtfa3vp.onion</tt> mail address, deliverable over
  98 SMTorP. :)</p>
  99
 100       </div>
 101       <div class="tags">
 102
 103
 104         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>.
 105
 106
 107       </div>
 108     </div>
 109     <div class="padding"></div>
 110
 111     <div class="entry">
 112       <div class="title">
 113         <a href="http://people.skolelinux.org/pere/blog/FreedomBox_milestone___all_packages_now_in_Debian_Sid.html">FreedomBox milestone - all packages now in Debian Sid</a>
 114       </div>
 115       <div class="date">
 116         15th April 2014
 117       </div>
 118       <div class="body">
 119         <p>The <a href="https://wiki.debian.org/FreedomBox">Freedombox
 120 project</a> is working on providing the software and hardware to make
 121 it easy for non-technical people to host their data and communication
 122 at home, and being able to communicate with their friends and family
 123 encrypted and away from prying eyes.  It is still going strong, and
 124 today a major mile stone was reached.</p>
 125
 126 <p>Today, the last of the packages currently used by the project to
 127 created the system images were accepted into Debian Unstable.  It was
 128 the freedombox-setup package, which is used to configure the images
 129 during build and on the first boot.  Now all one need to get going is
 130 the build code from the freedom-maker git repository and packages from
 131 Debian.  And once the freedombox-setup package enter testing, we can
 132 build everything directly from Debian. :)</p>
 133
 134 <p>Some key packages used by Freedombox are
 135 <a href="http://packages.qa.debian.org/freedombox-setup">freedombox-setup</a>,
 136 <a href="http://packages.qa.debian.org/plinth">plinth</a>,
 137 <a href="http://packages.qa.debian.org/pagekite">pagekite</a>,
 138 <a href="http://packages.qa.debian.org/tor">tor</a>,
 139 <a href="http://packages.qa.debian.org/privoxy">privoxy</a>,
 140 <a href="http://packages.qa.debian.org/owncloud">owncloud</a> and
 141 <a href="http://packages.qa.debian.org/dnsmasq">dnsmasq</a>.  There
 142 are plans to integrate more packages into the setup.  User
 143 documentation is maintained on the Debian wiki.  Please
 144 <a href="https://wiki.debian.org/FreedomBox/Manual/Jessie">check out
 145 the manual</a> and help us improve it.</p>
 146
 147 <p>To test for yourself and create boot images with the FreedomBox
 148 setup, run this on a Debian machine using a user with sudo rights to
 149 become root:</p>
 150
 151 <p><pre>
 152 sudo apt-get install git vmdebootstrap mercurial python-docutils \
 153   mktorrent extlinux virtualbox qemu-user-static binfmt-support \
 154   u-boot-tools
 155 git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
 156   freedom-maker
 157 make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
 158 </pre></p>
 159
 160 <p>Root access is needed to run debootstrap and mount loopback
 161 devices.  See the README in the freedom-maker git repo for more
 162 details on the build.  If you do not want all three images, trim the
 163 make line.  Note that the virtualbox-image target is not really
 164 virtualbox specific.  It create a x86 image usable in kvm, qemu,
 165 vmware and any other x86 virtual machine environment.  You might need
 166 the version of vmdebootstrap in Jessie to get the build working, as it
 167 include fixes for a race condition with kpartx.</p>
 168
 169 <p>If you instead want to install using a Debian CD and the preseed
 170 method, boot a Debian Wheezy ISO and use this boot argument to load
 171 the preseed values:</p>
 172
 173 <p><pre>
 174 url=<a href="http://www.reinholdtsen.name/freedombox/preseed-jessie.dat">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat</a>
 175 </pre></p>
 176
 177 <p>I have not tested it myself the last few weeks, so I do not know if
 178 it still work.</p>
 179
 180 <p>If you wonder how to help, one task you could look at is using
 181 systemd as the boot system.  It will become the default for Linux in
 182 Jessie, so we need to make sure it is usable on the Freedombox.  I did
 183 a simple test a few weeks ago, and noticed dnsmasq failed to start
 184 during boot when using systemd.  I suspect there are other problems
 185 too. :) To detect problems, there is a test suite included, which can
 186 be run from the plinth web interface.</p>
 187
 188 <p>Give it a go and let us know how it goes on the mailing list, and help
 189 us get the new release published. :) Please join us on
 190 <a href="irc://irc.debian.org:6667/%23freedombox">IRC (#freedombox on
 191 irc.debian.org)</a> and
 192 <a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the
 193 mailing list</a> if you want to help make this vision come true.</p>
 194
 195       </div>
 196       <div class="tags">
 197
 198
 199         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
 200
 201
 202       </div>
 203     </div>
 204     <div class="padding"></div>
 205
 206     <div class="entry">
 207       <div class="title">
 208         <a href="http://people.skolelinux.org/pere/blog/Dokumentaren_om_Datalagringsdirektivet_sendes_endelig_p__NRK.html">Dokumentaren om Datalagringsdirektivet sendes endelig på NRK</a>
 209       </div>
 210       <div class="date">
 211         26th March 2014
 212       </div>
 213       <div class="body">
 214         <p><a href="http://www.nuug.no/">Foreningen NUUG</a> melder i natt at
 215 NRK nå har bestemt seg for
 216 <a href="http://www.nuug.no/news/NRK_viser_filmen_om_Datalagringsdirektivet_f_rste_gang_2014_03_31.shtml">når
 217 den norske dokumentarfilmen om datalagringsdirektivet skal
 218 sendes</a> (se <a href="http://www.imdb.com/title/tt2832844/">IMDB</a>
 219 for detaljer om filmen) . Første visning blir på NRK2 mandag
 220 2014-03-31 kl. 19:50, og deretter visninger onsdag 2014-04-02
 221 kl. 12:30, fredag 2014-04-04 kl. 19:40 og søndag 2014-04-06 kl. 15:10.
 222 Jeg har sett dokumentaren, og jeg anbefaler enhver å se den selv.  Som
 223 oppvarming mens vi venter anbefaler jeg Bjørn Stærks kronikk i
 224 Aftenposten fra i går,
 225 <a href="http://www.aftenposten.no/meninger/kronikker/Autoritar-gjokunge-7514915.html">Autoritær
 226 gjøkunge</a>, der han gir en grei skisse av hvor ille det står til med
 227 retten til privatliv og beskyttelsen av demokrati i Norge og resten
 228 verden, og helt riktig slår fast at det er vi i databransjen som
 229 sitter med nøkkelen til å gjøre noe med dette.  Jeg har involvert meg
 230 i prosjektene <a href="http://www.dugnadsnett.no/">dugnadsnett.no</a>
 231 og <a href="https://wiki.debian.org/FreedomBox">FreedomBox</a> for å
 232 forsøke å gjøre litt selv for å bedre situasjonen, men det er mye
 233 hardt arbeid fra mange flere enn meg som gjenstår før vi kan sies å ha
 234 gjenopprettet balansen.</p>
 235
 236 <p>Jeg regner med at nettutgaven dukker opp på
 237 <a href="http://tv.nrk.no/program/koid75005313/tema-dine-digitale-spor-datalagringsdirektivet">NRKs
 238 side om filmen om datalagringsdirektivet</a> om fem dager.  Hold et
 239 øye med siden, og tips venner og slekt om at de også bør se den.</p>
 240
 241       </div>
 242       <div class="tags">
 243
 244
 245         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/dld">dld</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network</a>, <a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk</a>, <a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>.
 246
 247
 248       </div>
 249     </div>
 250     <div class="padding"></div>
 251
 252     <div class="entry">
 253       <div class="title">
 254         <a href="http://people.skolelinux.org/pere/blog/Freedombox_on_Dreamplug__Raspberry_Pi_and_virtual_x86_machine.html">Freedombox on Dreamplug, Raspberry Pi and virtual x86 machine</a>
 255       </div>
 256       <div class="date">
 257         14th March 2014
 258       </div>
 259       <div class="body">
 260         <p>The <a href="https://wiki.debian.org/FreedomBox">Freedombox
 261 project</a> is working on providing the software and hardware for
 262 making it easy for non-technical people to host their data and
 263 communication at home, and being able to communicate with their
 264 friends and family encrypted and away from prying eyes.  It has been
 265 going on for a while, and is slowly progressing towards a new test
 266 release (0.2).</p>
 267
 268 <p>And what day could be better than the Pi day to announce that the
 269 new version will provide "hard drive" / SD card / USB stick images for
 270 Dreamplug, Raspberry Pi and VirtualBox (or any other virtualization
 271 system), and can also be installed using a Debian installer preseed
 272 file.  The Debian based Freedombox is now based on Debian Jessie,
 273 where most of the needed packages used are already present.  Only one,
 274 the freedombox-setup package, is missing.  To try to build your own
 275 boot image to test the current status, fetch the freedom-maker scripts
 276 and build using
 277 <a href="http://packages.qa.debian.org/vmdebootstrap">vmdebootstrap</a>
 278 with a user with sudo access to become root:
 279
 280 <pre>
 281 git clone http://anonscm.debian.org/git/freedombox/freedom-maker.git \
 282   freedom-maker
 283 sudo apt-get install git vmdebootstrap mercurial python-docutils \
 284   mktorrent extlinux virtualbox qemu-user-static binfmt-support \
 285   u-boot-tools
 286 make -C freedom-maker dreamplug-image raspberry-image virtualbox-image
 287 </pre>
 288
 289 <p>Root access is needed to run debootstrap and mount loopback
 290 devices.  See the README for more details on the build. If you do not
 291 want all three images, trim the make line.  But note that thanks to <a
 292 href="https://bugs.debian.org/741407">a race condition in
 293 vmdebootstrap</a>, the build might fail without the patch to the
 294 kpartx call.</p>
 295
 296 <p>If you instead want to install using a Debian CD and the preseed
 297 method, boot a Debian Wheezy ISO and use this boot argument to load
 298 the preseed values:</p>
 299
 300 <pre>
 301 url=<a href="http://www.reinholdtsen.name/freedombox/preseed-jessie.dat">http://www.reinholdtsen.name/freedombox/preseed-jessie.dat</a>
 302 </pre>
 303
 304 <p>But note that due to <a href="https://bugs.debian.org/740673">a
 305 recently introduced bug in apt in Jessie</a>, the installer will
 306 currently hang while setting up APT sources.  Killing the
 307 '<tt>apt-cdrom ident</tt>' process when it hang a few times during the
 308 installation will get the installation going.  This affect all
 309 installations in Jessie, and I expect it will be fixed soon.</p>
 310
 311 <p>Give it a go and let us know how it goes on the mailing list, and help
 312 us get the new release published. :) Please join us on
 313 <a href="irc://irc.debian.org:6667/%23freedombox">IRC (#freedombox on
 314 irc.debian.org)</a> and
 315 <a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the
 316 mailing list</a> if you want to help make this vision come true.</p>
 317
 318       </div>
 319       <div class="tags">
 320
 321
 322         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
 323
 324
 325       </div>
 326     </div>
 327     <div class="padding"></div>
 328
 329     <div class="entry">
 330       <div class="title">
 331         <a href="http://people.skolelinux.org/pere/blog/Teaching_vmdebootstrap_to_create_Raspberry_Pi_SD_card_images.html">Teaching vmdebootstrap to create Raspberry Pi SD card images</a>
 332       </div>
 333       <div class="date">
 334         27th October 2013
 335       </div>
 336       <div class="body">
 337         <p>The
 338 <a href="http://packages.qa.debian.org/v/vmdebootstrap.html">vmdebootstrap</a>
 339 program is a a very nice system to create virtual machine images.  It
 340 create a image file, add a partition table, mount it and run
 341 debootstrap in the mounted directory to create a Debian system on a
 342 stick.  Yesterday, I decided to try to teach it how to make images for
 343 <a href="https://wiki.debian.org/RaspberryPi">Raspberry Pi</a>, as part
 344 of a plan to simplify the build system for
 345 <a href="https://wiki.debian.org/FreedomBox">the FreedomBox
 346 project</a>.  The FreedomBox project already uses vmdebootstrap for
 347 the virtualbox images, but its current build system made multistrap
 348 based system for Dreamplug images, and it is lacking support for
 349 Raspberry Pi.</p>
 350
 351 <p>Armed with the knowledge on how to build "foreign" (aka non-native
 352 architecture) chroots for Raspberry Pi, I dived into the vmdebootstrap
 353 code and adjusted it to be able to build armel images on my amd64
 354 Debian laptop.  I ended up giving vmdebootstrap five new options,
 355 allowing me to replicate the image creation process I use to make
 356 <a href="http://people.skolelinux.org/pere/blog/A_Raspberry_Pi_based_batman_adv_Mesh_network_node.html">Debian
 357 Jessie based mesh node images for the Raspberry Pi</a>.  First, the
 358 <tt>--foreign /path/to/binfm_handler</tt> option tell vmdebootstrap to
 359 call debootstrap with --foreign and to copy the handler into the
 360 generated chroot before running the second stage.  This allow
 361 vmdebootstrap to create armel images on an amd64 host.  Next I added
 362 two new options <tt>--bootsize size</tt> and <tt>--boottype
 363 fstype</tt> to teach it to create a separate /boot/ partition with the
 364 given file system type, allowing me to create an image with a vfat
 365 partition for the /boot/ stuff.  I also added a <tt>--variant
 366 variant</tt> option to allow me to create smaller images without the
 367 Debian base system packages installed.  Finally, I added an option
 368 <tt>--no-extlinux</tt> to tell vmdebootstrap to not install extlinux
 369 as a boot loader.  It is not needed on the Raspberry Pi and probably
 370 most other non-x86 architectures.  The changes were accepted by the
 371 upstream author of vmdebootstrap yesterday and today, and is now
 372 available from
 373 <a href="http://git.liw.fi/cgi-bin/cgit/cgit.cgi/vmdebootstrap/">the
 374 upstream project page</a>.</p>
 375
 376 <p>To use it to build a Raspberry Pi image using Debian Jessie, first
 377 create a small script (the customize script) to add the non-free
 378 binary blob needed to boot the Raspberry Pi and the APT source
 379 list:</p>
 380
 381 <p><pre>
 382 #!/bin/sh
 383 set -e # Exit on first error
 384 rootdir="$1"
 385 cd "$rootdir"
 386 cat &lt;&lt;EOF > etc/apt/sources.list
 387 deb http://http.debian.net/debian/ jessie main contrib non-free
 388 EOF
 389 # Install non-free binary blob needed to boot Raspberry Pi.  This
 390 # install a kernel somewhere too.
 391 wget https://raw.github.com/Hexxeh/rpi-update/master/rpi-update \
 392     -O $rootdir/usr/bin/rpi-update
 393 chmod a+x $rootdir/usr/bin/rpi-update
 394 mkdir -p $rootdir/lib/modules
 395 touch $rootdir/boot/start.elf
 396 chroot $rootdir rpi-update
 397 </pre></p>
 398
 399 <p>Next, fetch the latest vmdebootstrap script and call it like this
 400 to build the image:</p>
 401
 402 <pre>
 403 sudo ./vmdebootstrap \
 404     --variant minbase \
 405     --arch armel \
 406     --distribution jessie \
 407     --mirror http://http.debian.net/debian \
 408     --image test.img \
 409     --size 600M \
 410     --bootsize 64M \
 411     --boottype vfat \
 412     --log-level debug \
 413     --verbose \
 414     --no-kernel \
 415     --no-extlinux \
 416     --root-password raspberry \
 417     --hostname raspberrypi \
 418     --foreign /usr/bin/qemu-arm-static \
 419     --customize `pwd`/customize \
 420     --package netbase \
 421     --package git-core \
 422     --package binutils \
 423     --package ca-certificates \
 424     --package wget \
 425     --package kmod
 426 </pre></p>
 427
 428 <p>The list of packages being installed are the ones needed by
 429 rpi-update to make the image bootable on the Raspberry Pi, with the
 430 exception of netbase, which is needed by debootstrap to find
 431 /etc/hosts with the minbase variant.  I really wish there was a way to
 432 set up an Raspberry Pi using only packages in the Debian archive, but
 433 that is not possible as far as I know, because it boots from the GPU
 434 using a non-free binary blob.</p>
 435
 436 <p>The build host need debootstrap, kpartx and qemu-user-static and
 437 probably a few others installed.  I have not checked the complete
 438 build dependency list.</p>
 439
 440 <p>The resulting image will not use the hardware floating point unit
 441 on the Raspberry PI, because the armel architecture in Debian is not
 442 optimized for that use.  So the images created will be a bit slower
 443 than <a href="http://www.raspbian.org/">Raspbian</a> based images.</p>
 444
 445       </div>
 446       <div class="tags">
 447
 448
 449         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network</a>.
 450
 451
 452       </div>
 453     </div>
 454     <div class="padding"></div>
 455
 456     <div class="entry">
 457       <div class="title">
 458         <a href="http://people.skolelinux.org/pere/blog/A_Raspberry_Pi_based_batman_adv_Mesh_network_node.html">A Raspberry Pi based batman-adv Mesh network node</a>
 459       </div>
 460       <div class="date">
 461         21st October 2013
 462       </div>
 463       <div class="body">
 464         <p>The last few days I have been experimenting with
 465 <a href="http://www.open-mesh.org/projects/batman-adv/wiki">the
 466 batman-adv mesh technology</a>.  I want to gain some experience to see
 467 if it will fit <a href="https://wiki.debian.org/FreedomBox">the
 468 Freedombox project</a>, and together with my neighbors try to build a
 469 mesh network around the park where I live.  Batman-adv is a layer 2
 470 mesh system ("ethernet" in other words), where the mesh network appear
 471 as if all the mesh clients are connected to the same switch.</p>
 472
 473 <p>My hardware of choice was the Linksys WRT54GL routers I had lying
 474 around, but I've been unable to get them working with batman-adv.  So
 475 instead, I started playing with a
 476 <a href="http://www.raspberrypi.org/">Raspberry Pi</a>, and tried to
 477 get it working as a mesh node.  My idea is to use it to create a mesh
 478 node which function as a switch port, where everything connected to
 479 the Raspberry Pi ethernet plug is connected (bridged) to the mesh
 480 network.  This allow me to hook a wifi base station like the Linksys
 481 WRT54GL to the mesh by plugging it into a Raspberry Pi, and allow
 482 non-mesh clients to hook up to the mesh.  This in turn is useful for
 483 Android phones using <a href="http://servalproject.org/">the Serval
 484 Project</a> voip client, allowing every one around the playground to
 485 phone and message each other for free.  The reason is that Android
 486 phones do not see ad-hoc wifi networks (they are filtered away from
 487 the GUI view), and can not join the mesh without being rooted.  But if
 488 they are connected using a normal wifi base station, they can talk to
 489 every client on the local network.</p>
 490
 491 <p>To get this working, I've created a debian package
 492 <a href="https://github.com/petterreinholdtsen/meshfx-node">meshfx-node</a>
 493 and a script
 494 <a href="https://github.com/petterreinholdtsen/meshfx-node/blob/master/build-rpi-mesh-node">build-rpi-mesh-node</a>
 495 to create the Raspberry Pi boot image.  I'm using Debian Jessie (and
 496 not Raspbian), to get more control over the packages available.
 497 Unfortunately a huge binary blob need to be inserted into the boot
 498 image to get it booting, but I'll ignore that for now.  Also, as
 499 Debian lack support for the CPU features available in the Raspberry
 500 Pi, the system do not use the hardware floating point unit.  I hope
 501 the routing performance isn't affected by the lack of hardware FPU
 502 support.</p>
 503
 504 <p>To create an image, run the following with a sudo enabled user
 505 after inserting the target SD card into the build machine:</p>
 506
 507 <p><pre>
 508 % wget -O build-rpi-mesh-node \
 509     https://raw.github.com/petterreinholdtsen/meshfx-node/master/build-rpi-mesh-node
 510 % sudo bash -x ./build-rpi-mesh-node > build.log 2>&1
 511 % dd if=/root/rpi/rpi_basic_jessie_$(date +%Y%m%d).img of=/dev/mmcblk0 bs=1M
 512 %
 513 </pre></p>
 514
 515 <p>Booting with the resulting SD card on a Raspberry PI with a USB
 516 wifi card inserted should give you a mesh node.  At least it does for
 517 me with a the wifi card I am using. The default mesh settings are the
 518 ones used by the Oslo mesh project at Hackeriet, as I mentioned in
 519 <a href="http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html">an
 520 earlier blog post about this mesh testing</a>.</p>
 521
 522 <p>The mesh node was not horribly expensive either.  I bought
 523 everything over the counter in shops nearby.  If I had ordered online
 524 from the lowest bidder, the price should be significantly lower:</p>
 525
 526 <p><table>
 527
 528 <tr><th>Supplier</th><th>Model</th><th>NOK</th></tr>
 529 <tr><td>Teknikkmagasinet</td><td>Raspberry Pi model B</td><td>349.90</td></tr>
 530 <tr><td>Teknikkmagasinet</td><td>Raspberry Pi type B case</td><td>99.90</td></tr>
 531 <tr><td>Lefdal</td><td>Jensen Air:Link 25150</td><td>295.-</td></tr>
 532 <tr><td>Clas Ohlson</td><td>Kingston 16 GB SD card</td><td>199.-</td></tr>
 533 <tr><td>Total cost</td><td></td><td>943.80</td></tr>
 534
 535 </table></p>
 536
 537 <p>Now my mesh network at home consist of one laptop in the basement
 538 connected to my production network, one Raspberry Pi node on the 1th
 539 floor that can be seen by my neighbor across the park, and one
 540 play-node I use to develop the image building script.  And some times
 541 I hook up my work horse laptop to the mesh to test it.  I look forward
 542 to figuring out what kind of latency the batman-adv setup will give,
 543 and how much packet loss we will experience around the park. :)</p>
 544
 545       </div>
 546       <div class="tags">
 547
 548
 549         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 550
 551
 552       </div>
 553     </div>
 554     <div class="padding"></div>
 555
 556     <div class="entry">
 557       <div class="title">
 558         <a href="http://people.skolelinux.org/pere/blog/Oslo_community_mesh_network___with_NUUG_and_Hackeriet_at_Hausmania.html">Oslo community mesh network - with NUUG and Hackeriet at Hausmania</a>
 559       </div>
 560       <div class="date">
 561         11th October 2013
 562       </div>
 563       <div class="body">
 564         <p>Wireless mesh networks are self organising and self healing
 565 networks that can be used to connect computers across small and large
 566 areas, depending on the radio technology used.  Normal wifi equipment
 567 can be used to create home made radio networks, and there are several
 568 successful examples like
 569 <a href="http://www.freifunk.net/">Freifunk</a> and
 570 <a href="http://www.awmn.net/">Athens Wireless Metropolitan Network</a>
 571 (see
 572 <a href="http://en.wikipedia.org/wiki/List_of_wireless_community_networks_by_region#Greece">wikipedia
 573 for a large list</a>) around the globe.  To give you an idea how it
 574 work, check out the nice overview of the Kiel Freifunk community which
 575 can be seen from their
 576 <a href="http://freifunk.in-kiel.de/ffmap/nodes.html">dynamically
 577 updated node graph and map</a>, where one can see how the mesh nodes
 578 automatically handle routing and recover from nodes disappearing.
 579 There is also a small community mesh network group in Oslo, Norway,
 580 and that is the main topic of this blog post.</p>
 581
 582 <p>I've wanted to check out mesh networks for a while now, and hoped
 583 to do it as part of my involvement with the <a
 584 href="http://www.nuug.no/">NUUG member organisation</a> community, and
 585 my recent involvement in
 586 <a href="https://wiki.debian.org/FreedomBox">the Freedombox project</a>
 587 finally lead me to give mesh networks some priority, as I suspect a
 588 Freedombox should use mesh networks to connect neighbours and family
 589 when possible, given that most communication between people are
 590 between those nearby (as shown for example by research on Facebook
 591 communication patterns).  It also allow people to communicate without
 592 any central hub to tap into for those that want to listen in on the
 593 private communication of citizens, which have become more and more
 594 important over the years.</p>
 595
 596 <p>So far I have only been able to find one group of people in Oslo
 597 working on community mesh networks, over at the hack space
 598 <a href="http://hackeriet.no/">Hackeriet</a> at Husmania.  They seem to
 599 have started with some Freifunk based effort using OLSR, called
 600 <a href="http://oslo.freifunk.net/index.php?title=Main_Page">the Oslo
 601 Freifunk project</a>, but that effort is now dead and the people
 602 behind it have moved on to a batman-adv based system called
 603 <a href="http://meshfx.org/trac">meshfx</a>.  Unfortunately the wiki
 604 site for the Oslo Freifunk project is no longer possible to update to
 605 reflect this fact, so the old project page can't be updated to point to
 606 the new project.  A while back, the people at Hackeriet invited people
 607 from the Freifunk community to Oslo to talk about mesh networks.  I
 608 came across this video where Hans Jørgen Lysglimt interview the
 609 speakers about this talk (from
 610 <a href="https://www.youtube.com/watch?v=N2Kd7CLkhSY">youtube</a>):</p>
 611
 612 <p><iframe width="420" height="315" src="https://www.youtube.com/embed/N2Kd7CLkhSY" frameborder="0" allowfullscreen></iframe></p>
 613
 614 <p>I mentioned OLSR and batman-adv, which are mesh routing protocols.
 615 There are heaps of different protocols, and I am still struggling to
 616 figure out which one would be "best" for some definitions of best, but
 617 given that the community mesh group in Oslo is so small, I believe it
 618 is best to hook up with the existing one instead of trying to create a
 619 completely different setup, and thus I have decided to focus on
 620 batman-adv for now.  It sure help me to  know that the very cool
 621 <a href="http://www.servalproject.org/">Serval project in Australia</a>
 622 is using batman-adv as their meshing technology when it create a self
 623 organizing and self healing telephony system for disaster areas and
 624 less industrialized communities.  Check out this cool video presenting
 625 that project (from
 626 <a href="https://www.youtube.com/watch?v=30qNfzJCQOA">youtube</a>):</p>
 627
 628 <p><iframe width="560" height="315" src="https://www.youtube.com/embed/30qNfzJCQOA" frameborder="0" allowfullscreen></iframe></p>
 629
 630 <p>According to the wikipedia page on
 631 <a href="http://en.wikipedia.org/wiki/Wireless_mesh_network">Wireless
 632 mesh network</a> there are around 70 competing schemes for routing
 633 packets across mesh networks, and OLSR, B.A.T.M.A.N. and
 634 B.A.T.M.A.N. advanced are protocols used by several free software
 635 based community mesh networks.</p>
 636
 637 <p>The batman-adv protocol is a bit special, as it provide layer 2
 638 (as in ethernet ) routing, allowing ipv4 and ipv6 to work on the same
 639 network.  One way to think about it is that it provide a mesh based
 640 vlan you can bridge to or handle like any other vlan connected to your
 641 computer.  The required drivers are already in the Linux kernel at
 642 least since Debian Wheezy, and it is fairly easy to set up.  A
 643 <a href="http://www.open-mesh.org/projects/batman-adv/wiki/Quick-start-guide">good
 644 introduction</a> is available from the Open Mesh project.  These are
 645 the key settings needed to join the Oslo meshfx network:</p>
 646
 647 <p><table>
 648 <tr><th>Setting</th><th>Value</th></tr>
 649 <tr><td>Protocol / kernel module</td><td>batman-adv</td></tr>
 650 <tr><td>ESSID</td><td>meshfx@hackeriet</td></tr>
 651 <td>Channel / Frequency</td><td>11 / 2462</td></tr>
 652 <td>Cell ID</td><td>02:BA:00:00:00:01</td>
 653 </table></p>
 654
 655 <p>The reason for setting ad-hoc wifi Cell ID is to work around bugs
 656 in firmware used in wifi card and wifi drivers.  (See a nice post from
 657 VillageTelco about
 658 "<a href="http://tiebing.blogspot.no/2009/12/ad-hoc-cell-splitting-re-post-original.html">Information
 659 about cell-id splitting, stuck beacons, and failed IBSS merges!</a>
 660 for details.)  When these settings are activated and you have some
 661 other mesh node nearby, your computer will be connected to the mesh
 662 network and can communicate with any mesh node that is connected to
 663 any of the nodes in your network of nodes. :)</p>
 664
 665 <p>My initial plan was to reuse my old Linksys WRT54GL as a mesh node,
 666 but that seem to be very hard, as I have not been able to locate a
 667 firmware supporting batman-adv.  If anyone know how to use that old
 668 wifi access point with batman-adv these days, please let me know.</p>
 669
 670 <p>If you find this project interesting and want to join, please join
 671 us on IRC, either channel
 672 <a href="irc://irc.freenode.net/#oslohackerspace">#oslohackerspace</a>
 673 or <a href="irc://irc.freenode.net/#nuug">#nuug</a> on
 674 irc.freenode.net.</p>
 675
 676 <p>While investigating mesh networks in Oslo, I came across an old
 677 research paper from the university of Stavanger and Telenor Research
 678 and Innovation called
 679 <a href="http://folk.uio.no/paalee/publications/netrel-egeland-iswcs-2008.pdf">The
 680 reliability of wireless backhaul mesh networks</a> and elsewhere
 681 learned that Telenor have been experimenting with mesh networks at
 682 Grünerløkka in Oslo.  So mesh networks are also interesting for
 683 commercial companies, even though Telenor discovered that it was hard
 684 to figure out a good business plan for mesh networking and as far as I
 685 know have closed down the experiment.  Perhaps Telenor or others would
 686 be interested in a cooperation?</p>
 687
 688 <p><strong>Update 2013-10-12</strong>: I was just
 689 <a href="http://lists.alioth.debian.org/pipermail/freedombox-discuss/2013-October/005900.html">told
 690 by the Serval project developers</a> that they no longer use
 691 batman-adv (but are compatible with it), but their own crypto based
 692 mesh system.</p>
 693
 694       </div>
 695       <div class="tags">
 696
 697
 698         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.
 699
 700
 701       </div>
 702     </div>
 703     <div class="padding"></div>
 704
 705     <div class="entry">
 706       <div class="title">
 707         <a href="http://people.skolelinux.org/pere/blog/Videos_about_the_Freedombox_project___for_inspiration_and_learning.html">Videos about the Freedombox project - for inspiration and learning</a>
 708       </div>
 709       <div class="date">
 710         27th September 2013
 711       </div>
 712       <div class="body">
 713         <p>The <a href="http://www.freedomboxfoundation.org/">Freedombox
 714 project</a> have been going on for a while, and have presented the
 715 vision, ideas and solution several places.  Here is a little
 716 collection of videos of talks and presentation of the project.</p>
 717
 718 <ul>
 719
 720 <li><a href="http://www.youtube.com/watch?v=ukvUz5taxvA">FreedomBox -
 721 2,5 minute marketing film</a> (Youtube)</li>
 722
 723 <li><a href="http://www.youtube.com/watch?v=SzW25QTVWsE">Eben Moglen
 724 discusses the Freedombox on CBS news 2011</a> (Youtube)</li>
 725
 726 <li><a href="http://www.youtube.com/watch?v=Ae8SZbxfE0g">Eben Moglen -
 727 Freedom in the Cloud - Software Freedom, Privacy and and Security for
 728 Web 2.0 and Cloud computing at ISOC-NY Public Meeting 2010</a>
 729 (Youtube)</li>
 730
 731 <li><a href="http://www.youtube.com/watch?v=vNaIji_3xBE">Fosdem 2011
 732 Keynote by Eben Moglen presenting the Freedombox</a> (Youtube)</li>
 733
 734 <li><a href="http://www.youtube.com/watch?v=9bDDUyJSQ9s">Presentation of
 735 the Freedombox by James Vasile at Elevate in Gratz 2011</a> (Youtube)</li>
 736
 737 <li><a href="http://www.youtube.com/watch?v=zQTmnk27g9s"> Freedombox -
 738 Discovery, Identity, and Trust by Nick Daly at Freedombox Hackfest New
 739 York City in 2012</a> (Youtube)</li>
 740
 741 <li><a href="http://www.youtube.com/watch?v=tkbSB4Ba7Ck">Introduction
 742 to the Freedombox at Freedombox Hackfest New York City in 2012</a>
 743 (Youtube)</li>
 744
 745 <li><a href="http://www.youtube.com/watch?v=z-P2Jaeg0aQ">Freedom, Out
 746 of the Box! by Bdale Garbee at linux.conf.au Ballarat, 2012</a> (Youtube) </li>
 747
 748 <li><a href="https://archive.fosdem.org/2013/schedule/event/freedombox/">Freedombox
 749 1.0 by Eben Moglen and Bdale Garbee at Fosdem 2013</a> (FOSDEM) </li>
 750
 751 <li><a href="http://www.youtube.com/watch?v=e1LpYX2zVYg">What is the
 752 FreedomBox today by Bdale Garbee at Debconf13 in Vaumarcus
 753 2013</a> (Youtube)</li>
 754
 755 </ul>
 756
 757 <p>A larger list is available from
 758 <a href="https://wiki.debian.org/FreedomBox/TalksAndPresentations">the
 759 Freedombox Wiki</a>.</p>
 760
 761 <p>On other news, I am happy to report that Freedombox based on Debian
 762 Jessie is coming along quite well, and soon both Owncloud and using
 763 Tor should be available for testers of the Freedombox solution. :) In
 764 a few weeks I hope everything needed to test it is included in Debian.
 765 The withsqlite package is already in Debian, and the plinth package is
 766 pending in NEW.  The third and vital part of that puzzle is the
 767 metapackage/setup framework, which is still pending an upload.  Join
 768 us on <a href="irc://irc.debian.org:6667/%23freedombox">IRC
 769 (#freedombox on irc.debian.org)</a> and
 770 <a href="http://lists.alioth.debian.org/mailman/listinfo/freedombox-discuss">the
 771 mailing list</a> if you want to help make this vision come true.</p>
 772
 773       </div>
 774       <div class="tags">
 775
 776
 777         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
 778
 779
 780       </div>
 781     </div>
 782     <div class="padding"></div>
 783
 784     <div class="entry">
 785       <div class="title">
 786         <a href="http://people.skolelinux.org/pere/blog/Recipe_to_test_the_Freedombox_project_on_amd64_or_Raspberry_Pi.html">Recipe to test the Freedombox project on amd64 or Raspberry Pi</a>
 787       </div>
 788       <div class="date">
 789         10th September 2013
 790       </div>
 791       <div class="body">
 792         <p>I was introduced to the
 793 <a href="http://www.freedomboxfoundation.org/">Freedombox project</a>
 794 in 2010, when Eben Moglen presented his vision about serving the need
 795 of non-technical people to keep their personal information private and
 796 within the legal protection of their own homes.  The idea is to give
 797 people back the power over their network and machines, and return
 798 Internet back to its intended peer-to-peer architecture.  Instead of
 799 depending on a central service, the Freedombox will give everyone
 800 control over their own basic infrastructure.</p>
 801
 802 <p>I've intended to join the effort since then, but other tasks have
 803 taken priority.  But this summers nasty news about the misuse of trust
 804 and privilege exercised by the "western" intelligence gathering
 805 communities increased my eagerness to contribute to a point where I
 806 actually started working on the project a while back.</p>
 807
 808 <p>The <a href="https://alioth.debian.org/projects/freedombox/">initial
 809 Debian initiative</a> based on the vision from Eben Moglen, is to
 810 create a simple and cheap Debian based appliance that anyone can hook
 811 up in their home and get access to secure and private services and
 812 communication.  The initial deployment platform have been the
 813 <a href="http://www.globalscaletechnologies.com/t-dreamplugdetails.aspx">Dreamplug</a>,
 814 which is a piece of hardware I do not own.  So to be able to test what
 815 the current Freedombox setup look like, I had to come up with a way to install
 816 it on some hardware I do have access to.  I have rewritten the
 817 <a href="https://github.com/NickDaly/freedom-maker">freedom-maker</a>
 818 image build framework to use .deb packages instead of only copying
 819 setup into the boot images, and thanks to this rewrite I am able to
 820 set up any machine supported by Debian Wheezy as a Freedombox, using
 821 the previously mentioned deb (and a few support debs for packages
 822 missing in Debian).</p>
 823
 824 <p>The current Freedombox setup consist of a set of bootstrapping
 825 scripts
 826 (<a href="https://github.com/petterreinholdtsen/freedombox-setup">freedombox-setup</a>),
 827 and a administrative web interface
 828 (<a href="https://github.com/NickDaly/Plinth">plinth</a> + exmachina +
 829 withsqlite), as well as a privacy enhancing proxy based on
 830 <a href="http://packages.qa.debian.org/privoxy">privoxy</a>
 831 (freedombox-privoxy).  There is also a web/javascript based XMPP
 832 client (<a href="http://packages.qa.debian.org/jwchat">jwchat</a>)
 833 trying (unsuccessfully so far) to talk to the XMPP server
 834 (<a href="http://packages.qa.debian.org/ejabberd">ejabberd</a>).  The
 835 web interface is pluggable, and the goal is to use it to enable OpenID
 836 services, mesh network connectivity, use of TOR, etc, etc.  Not much of
 837 this is really working yet, see
 838 <a href="https://github.com/NickDaly/freedombox-todos/blob/master/TODO">the
 839 project TODO</a> for links to GIT repositories.  Most of the code is
 840 on github at the moment.  The HTTP proxy is operational out of the
 841 box, and the admin web interface can be used to add/remove plinth
 842 users.  I've not been able to do anything else with it so far, but
 843 know there are several branches spread around github and other places
 844 with lots of half baked features.</p>
 845
 846 <p>Anyway, if you want to have a look at the current state, the
 847 following recipes should work to give you a test machine to poke
 848 at.</p>
 849
 850 <p><strong>Debian Wheezy amd64</strong></p>
 851
 852 <ol>
 853
 854 <li>Fetch normal Debian Wheezy installation ISO.</li>
 855 <li>Boot from it, either as CD or USB stick.</li>
 856 <li><p>Press [tab] on the boot prompt and add this as a boot argument
 857 to the Debian installer:<p>
 858 <pre>url=<a href="http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat">http://www.reinholdtsen.name/freedombox/preseed-wheezy.dat</a></pre></li>
 859
 860 <li>Answer the few language/region/password questions and pick disk to
 861 install on.</li>
 862
 863 <li>When the installation is finished and the machine have rebooted a
 864 few times, your Freedombox is ready for testing.</li>
 865
 866 </ol>
 867
 868 <p><strong>Raspberry Pi Raspbian</strong></p>
 869
 870 <ol>
 871
 872 <li>Fetch a Raspbian SD card image, create SD card.</li>
 873 <li>Boot from SD card, extend file system to fill the card completely.</li>
 874 <li><p>Log in and add this to /etc/sources.list:</p>
 875 <pre>
 876 deb <a href="http://www.reinholdtsen.name/freedombox/">http://www.reinholdtsen.name/freedombox</a> wheezy main
 877 </pre></li>
 878 <li><p>Run this as root:</p>
 879 <pre>
 880 wget -O - http://www.reinholdtsen.name/freedombox/BE1A583D.asc | \
 881    apt-key add -
 882 apt-get update
 883 apt-get install freedombox-setup
 884 /usr/lib/freedombox/setup
 885 </pre></li>
 886 <li>Reboot into your freshly created Freedombox.</li>
 887
 888 </ol>
 889
 890 <p>You can test it on other architectures too, but because the
 891 freedombox-privoxy package is binary, it will only work as intended on
 892 the architectures where I have had time to build the binary and put it
 893 in my APT repository.  But do not let this stop you.  It is only a
 894 short "<tt>apt-get source -b freedombox-privoxy</tt>" away. :)</p>
 895
 896 <p>Note that by default Freedombox is a DHCP server on the
 897 192.168.1.0/24 subnet, so if this is your subnet be careful and turn
 898 off the DHCP server by running "<tt>update-rc.d isc-dhcp-server
 899 disable</tt>" as root.</p>
 900
 901 <p>Please let me know if this works for you, or if you have any
 902 problems.  We gather on the IRC channel
 903 <a href="irc://irc.debian.org:6667/%23freedombox">#freedombox</a> on
 904 irc.debian.org and the
 905 <a href="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss">project
 906 mailing list</a>.</p>
 907
 908 <p>Once you get your freedombox operational, you can visit
 909 <tt>http://your-host-name:8001/</tt> to see the state of the plint
 910 welcome screen (dead end - do not be surprised if you are unable to
 911 get past it), and next visit <tt>http://your-host-name:8001/help/</tt>
 912 to look at the rest of plinth.  The default user is 'admin' and the
 913 default password is 'secret'.</p>
 914
 915       </div>
 916       <div class="tags">
 917
 918
 919         Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox</a>, <a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet</a>, <a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance</a>, <a href="http://people.skolelinux.org/pere/blog/tags/web">web</a>.
 920
 921
 922       </div>
 923     </div>
 924     <div class="padding"></div>
 925
 926     <p style="text-align: right;"><a href="freedombox.rss"><img src="http://people.skolelinux.org/pere/blog/xml.gif" alt="RSS Feed" width="36" height="14" /></a></p>
 927     <div id="sidebar">
 928
 929
 930
 931 <h2>Archive</h2>
 932 <ul>
 933
 934 <li>2018
 935 <ul>
 936
 937 <li><a href="http://people.skolelinux.org/pere/blog/archive/2018/01/">January (1)</a></li>
 938
 939 <li><a href="http://people.skolelinux.org/pere/blog/archive/2018/02/">February (3)</a></li>
 940
 941 </ul></li>
 942
 943 <li>2017
 944 <ul>
 945
 946 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/01/">January (4)</a></li>
 947
 948 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/02/">February (3)</a></li>
 949
 950 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/03/">March (5)</a></li>
 951
 952 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/04/">April (2)</a></li>
 953
 954 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/06/">June (5)</a></li>
 955
 956 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/07/">July (1)</a></li>
 957
 958 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/08/">August (1)</a></li>
 959
 960 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/09/">September (3)</a></li>
 961
 962 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/10/">October (5)</a></li>
 963
 964 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/11/">November (3)</a></li>
 965
 966 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/12/">December (4)</a></li>
 967
 968 </ul></li>
 969
 970 <li>2016
 971 <ul>
 972
 973 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/01/">January (3)</a></li>
 974
 975 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/02/">February (2)</a></li>
 976
 977 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/03/">March (3)</a></li>
 978
 979 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/04/">April (8)</a></li>
 980
 981 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/05/">May (8)</a></li>
 982
 983 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/06/">June (2)</a></li>
 984
 985 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/07/">July (2)</a></li>
 986
 987 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/08/">August (5)</a></li>
 988
 989 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/09/">September (2)</a></li>
 990
 991 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/10/">October (3)</a></li>
 992
 993 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/11/">November (8)</a></li>
 994
 995 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/12/">December (5)</a></li>
 996
 997 </ul></li>
 998
 999 <li>2015
1000 <ul>
1001
1002 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/01/">January (7)</a></li>
1003
1004 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/02/">February (6)</a></li>
1005
1006 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/03/">March (1)</a></li>
1007
1008 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/04/">April (4)</a></li>
1009
1010 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/05/">May (3)</a></li>
1011
1012 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/06/">June (4)</a></li>
1013
1014 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/07/">July (6)</a></li>
1015
1016 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/08/">August (2)</a></li>
1017
1018 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/09/">September (2)</a></li>
1019
1020 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/10/">October (9)</a></li>
1021
1022 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/11/">November (6)</a></li>
1023
1024 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/12/">December (3)</a></li>
1025
1026 </ul></li>
1027
1028 <li>2014
1029 <ul>
1030
1031 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
1032
1033 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
1034
1035 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
1036
1037 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (7)</a></li>
1038
1039 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/05/">May (1)</a></li>
1040
1041 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/06/">June (2)</a></li>
1042
1043 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/07/">July (2)</a></li>
1044
1045 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/08/">August (2)</a></li>
1046
1047 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/09/">September (5)</a></li>
1048
1049 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/10/">October (6)</a></li>
1050
1051 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/11/">November (3)</a></li>
1052
1053 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/12/">December (5)</a></li>
1054
1055 </ul></li>
1056
1057 <li>2013
1058 <ul>
1059
1060 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
1061
1062 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
1063
1064 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
1065
1066 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
1067
1068 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
1069
1070 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
1071
1072 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
1073
1074 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
1075
1076 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
1077
1078 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
1079
1080 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
1081
1082 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
1083
1084 </ul></li>
1085
1086 <li>2012
1087 <ul>
1088
1089 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
1090
1091 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
1092
1093 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
1094
1095 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
1096
1097 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
1098
1099 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
1100
1101 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
1102
1103 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
1104
1105 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
1106
1107 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
1108
1109 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
1110
1111 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
1112
1113 </ul></li>
1114
1115 <li>2011
1116 <ul>
1117
1118 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
1119
1120 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
1121
1122 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
1123
1124 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
1125
1126 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
1127
1128 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
1129
1130 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
1131
1132 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
1133
1134 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
1135
1136 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
1137
1138 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
1139
1140 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
1141
1142 </ul></li>
1143
1144 <li>2010
1145 <ul>
1146
1147 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
1148
1149 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
1150
1151 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
1152
1153 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
1154
1155 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
1156
1157 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
1158
1159 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
1160
1161 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
1162
1163 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
1164
1165 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
1166
1167 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
1168
1169 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
1170
1171 </ul></li>
1172
1173 <li>2009
1174 <ul>
1175
1176 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
1177
1178 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
1179
1180 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
1181
1182 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
1183
1184 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
1185
1186 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
1187
1188 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
1189
1190 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
1191
1192 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
1193
1194 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
1195
1196 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
1197
1198 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
1199
1200 </ul></li>
1201
1202 <li>2008
1203 <ul>
1204
1205 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
1206
1207 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
1208
1209 </ul></li>
1210
1211 </ul>
1212
1213
1214
1215 <h2>Tags</h2>
1216 <ul>
1217
1218  <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (16)</a></li>
1219
1220  <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
1221
1222  <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
1223
1224  <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
1225
1226  <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (9)</a></li>
1227
1228  <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (16)</a></li>
1229
1230  <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
1231
1232  <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
1233
1234  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (156)</a></li>
1235
1236  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (158)</a></li>
1237
1238  <li><a href="http://people.skolelinux.org/pere/blog/tags/debian-handbook">debian-handbook (4)</a></li>
1239
1240  <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
1241
1242  <li><a href="http://people.skolelinux.org/pere/blog/tags/dld">dld (17)</a></li>
1243
1244  <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (24)</a></li>
1245
1246  <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
1247
1248  <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (366)</a></li>
1249
1250  <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (23)</a></li>
1251
1252  <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (13)</a></li>
1253
1254  <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (32)</a></li>
1255
1256  <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (9)</a></li>
1257
1258  <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (18)</a></li>
1259
1260  <li><a href="http://people.skolelinux.org/pere/blog/tags/h264">h264 (20)</a></li>
1261
1262  <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (42)</a></li>
1263
1264  <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (15)</a></li>
1265
1266  <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (20)</a></li>
1267
1268  <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
1269
1270  <li><a href="http://people.skolelinux.org/pere/blog/tags/lego">lego (4)</a></li>
1271
1272  <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (8)</a></li>
1273
1274  <li><a href="http://people.skolelinux.org/pere/blog/tags/lsdvd">lsdvd (2)</a></li>
1275
1276  <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
1277
1278  <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
1279
1280  <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (39)</a></li>
1281
1282  <li><a href="http://people.skolelinux.org/pere/blog/tags/nice free software">nice free software (9)</a></li>
1283
1284  <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (295)</a></li>
1285
1286  <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (190)</a></li>
1287
1288  <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (33)</a></li>
1289
1290  <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
1291
1292  <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (71)</a></li>
1293
1294  <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (104)</a></li>
1295
1296  <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (2)</a></li>
1297
1298  <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
1299
1300  <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
1301
1302  <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (3)</a></li>
1303
1304  <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (10)</a></li>
1305
1306  <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
1307
1308  <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (5)</a></li>
1309
1310  <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
1311
1312  <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (53)</a></li>
1313
1314  <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
1315
1316  <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (5)</a></li>
1317
1318  <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (55)</a></li>
1319
1320  <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (6)</a></li>
1321
1322  <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (12)</a></li>
1323
1324  <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (53)</a></li>
1325
1326  <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (4)</a></li>
1327
1328  <li><a href="http://people.skolelinux.org/pere/blog/tags/usenix">usenix (2)</a></li>
1329
1330  <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (9)</a></li>
1331
1332  <li><a href="http://people.skolelinux.org/pere/blog/tags/verkidetfri">verkidetfri (10)</a></li>
1333
1334  <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (61)</a></li>
1335
1336  <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
1337
1338  <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (40)</a></li>
1339
1340 </ul>
1341
1342
1343     </div>
1344     <p style="text-align: right">
1345  Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
1346 </p>
1347
1348   </body>
1349 </html>