As a good crypto nerd, I usually use an entirely encrypted linux FS: / but also
/boot using grub LUKS support. It's a good setup but it's not perfect, the BIOS and
the bootloader are not protected.
I recently got a USBArmory and I wanted to apply the same (or a better) setup.
I found some useful links but no clear howto. So this is my setup.
Let's say you have a Bash shell script, and you need to run a series of operations on another system (such as via ssh). There are a couple of ways to do this.
First, you can stage a child script on the remote system, then call it, passing along appropriate parameters. The problem with this is you will need to manually keep the remote script updated whenever you change it -- could be a bit of a challenge when you have something to execute on a number of remote servers (i.e., you have a backup script running on a central host, and it needs to put remote databases in hot backup mode before backing them up).
Another option is to embed the commands you want to run remotely within the ssh command line. But then you run into issues with escaping special characters, quoting, etc. This is ok if you only have a couple commands to run, but if it is a complex piece of Bash code, it can get a bit unwieldy.
So, to solve this, you can use a technique called rpcsh -- rpc in shell script, as follows:
First, place th
| #!/usr/bin/python | |
| # rtorrent_xmlrpc | |
| # (c) 2011 Roger Que <alerante@bellsouth.net> | |
| # | |
| # Python module for interacting with rtorrent's XML-RPC interface | |
| # directly over SCGI, instead of through an HTTP server intermediary. | |
| # Inspired by Glenn Washburn's xmlrpc2scgi.py [1], but subclasses the | |
| # built-in xmlrpclib classes so that it is compatible with features | |
| # such as MultiCall objects. |