Project

General

Profile

Feature #808

Autostart Reverse SSH Tunnel on Arch Linux

Added by Daniel Curtis over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Shell Scripts
Target version:
Start date:
05/12/2016
Due date:
% Done:

100%

Estimated time:
0.50 h
Spent time:

Description

This is a guide on how I setup an automatic reverse SSH tunnel that connects back to a server using Arch Linux.

  • Start by creating an SSH keypair; this guide uses the user bob (replace as necessary):
    ssh-keygen -t ed25519
    
  • Copy the key over to the server and add it to the ~/.ssh/authorized_keys file.
  • Create the systemd tunnel-home.service unit file:
    sudo vi /etc/systemd/system/tunnel-home.service
    
    • And add the following:
      [Unit]
      Description=Reverse SSH Tunnel Service
      ConditionPathExists=|/usr/bin
      After=network.target
      
      [Service]
      User=bob
      ExecStart=/usr/bin/ssh -NTC -o ServerAliveInterval=60 -o ExitOnForwardFailure=yes -o StrictHostKeyChecking=no -i %h/.ssh/id_ed25519 -p 10000 -R 12345:localhost:22 bob@server.example.com
      
      # Restart every >2 seconds to avoid StartLimitInterval failure
      RestartSec=3
      Restart=always
      
      [Install]
      WantedBy=multi-user.target
      

      NOTE: This connects to server.example.com as the user bob on port 10000, creating port 12345 on the remote server to connect back to.
  • Start and enable it at boot:
    sudo systemctl daemon-reload
    sudo systemctl enable tunnel-home.service
    sudo systemctl start tunnel-home.service
    

Resources

History

#1 Updated by Daniel Curtis over 1 year ago

  • Description updated (diff)
  • Status changed from New to Resolved
  • % Done changed from 0 to 100

#2 Updated by Daniel Curtis about 1 year ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF