Coral, OPNSense SSH…

Another Coral TPU based on a mini pcie card has found its way into the frigate server. Its quite interesting to see, a tree to four times higher interference on the usb based coral compared to the pcie one. With this new config, the object detection is way better and faster then before 🙂

Since I started managing my OPNSense cluster via ansible at the same time, it was neccessary to configure ssh to use the publickeyauth on these systems. Unfortunely, there seems to be a bug, that removes the keys copied via ssh-copy-id after a reboot and installing as recommened via gui, doesnt allow to save. Since the keys are stored in the config.xml, you can use the following to circumvent the issue:

cp /conf/config.xml /conf/config.xml.bak

set PUBKEY = "ENTER YOUR FULL SSH-PUBKEY"
set B64KEY = `echo -n "$PUBKEY" | b64encode -r -`

sed -i '' "s|<authorizedkeys/>|<authorizedkeys>${B64KEY}</authorizedkeys>|" /conf/config.xml

/usr/local/opnsense/scripts/auth/sync_user.php -u root
service openssh restart
cat /root/.ssh/authorized_keys

This will convert the pubkey, put it in the configuration and reload the user config.