comments-KennWhite-chromebook-jlh.md

Comments on Kenn's Secure Dev Chromebook post

(23-July-2017)

Kenn's post: https://gist.github.com/kennwhite/ddf7669a51a10c4ede1ac5557d470760

Great work, man! This is going to be awesome to try now that I have it running. Comments:

• In the instructions for cloud sync settings, do you recommend using your own passphrase or the google username and password for encrypting sync data? It's not clear what the trade-offs are here. Is this the master password password?

• You have to update the Chrome OS software (settings->about Chrome OS->Check for updates) after switching to beta channel, then restart before the Play Store will be enable-able in Settings.

• I had trouble getting Google Play to work... I had to ask my organizational administrator to allow access via: https://support.google.com/a/answer/7080240?hl=en But no dice, turns out managed accounts don't work with the play store in beta channel (or at least don't for my Acer Chromebook R11). I repeated the instructions with an unmanaged personal account. That worked.

• Was not able to register my device; there would be no devices in Play Store settings that would show up (I don't have another android device). Ah, but after installing termux in the Chrome store, that process seems to have registered my device and now it shows up in play store settings

• Have to install proot first to get termux-chroot before you can run it in your "Setup Termux Base" section of the instructions.

• Put "GitHub" after FireSSH in parentheses to distinguish that one is the code and the other is a link to the site.

• I was having quite a bit of trouble ssh'ing into the machine. On my machine, at least, I have to add the ssh key to the list of authorized keys kept in ~/.ssh/authorized_keys and the permissions have to be set right too. I cobbled the following together from this post from Oliver Schmidhauser "Run an SSH server on your Android with Termux"):

  $ touch ~/.ssh/authorized_keys
  $ chmod 600 ~/.ssh/authorized_keys
  $ chmod 700 ~/.ssh$ cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
  $ chmod 600 ~/.ssh/authorized_keys
  $ ssh localhost -p 8022
  Welcome to Termux!
  
  Online help:     https://termux.com/help
  Community forum: https://termux.com/community
  IRC channel:     #termux on freenode
  Gitter chat:     https://gitter.im/termux/termux
  Mailing list:    termux+subscribe@groups.io
  
  Search packages:   pkg search <query>
  Install a package: pkg install <package>
  Upgrade packages:  pkg upgrade
  Learn more:        pkg help
  -bash-4.4$
  

And this works in both and

ssh-chromebook-FireSSH.png

ssh-chromebook-Secure-Shell.png