de
FreedomBox
Manual

/dev/sdg

     nmap -p 80 --open -sV 192.168.0.0/24
     Nmap scan report for 192.168.0.165
     Host is up (0.00088s latency).
     PORT   STATE SERVICE VERSION
     80/tcp open  http    Apache httpd 2.4.17 ((Debian))
$ gpg --keyserver x-hkp://pool.sks-keyservers.net --recv-keys 0x36C361440C9BC971
$ gpg --fingerprint 0x36C361440C9BC971
pub   4096R/0C9BC971 2011-11-12
      Key fingerprint = BCBE BD57 A11F 70B2 3782  BC57 36C3 6144 0C9B C971
uid                  Sunil Mohan Adapa <sunil@medhas.org>
sub   4096R/4C1D4B57 2011-11-12
.sig
$ gpg --verify freedombox-unstable-free_2015-12-13_cubietruck-armhf.img.xz.sig freedombox-unstable-free_2015-12-13_cubietruck-armhf.img.xz
gpg: Signature made Thursday 15 January 2015 09:27:50 AM IST using RSA key ID 0C9BC971
gpg: Good signature from "Sunil Mohan Adapa <sunil@medhas.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: BCBE BD57 A11F 70B2 3782  BC57 36C3 6144 0C9B C971
dmesg -w
[33299.023096] usb 4-6: new high-speed USB device number 12 using ehci-pci
[33299.157160] usb 4-6: New USB device found, idVendor=058f, idProduct=6361
[33299.157162] usb 4-6: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[33299.157164] usb 4-6: Product: Mass Storage Device
[33299.157165] usb 4-6: Manufacturer: Generic
[33299.157167] usb 4-6: SerialNumber: XXXXXXXXXXXX
[33299.157452] usb-storage 4-6:1.0: USB Mass Storage device detected
[33299.157683] scsi host13: usb-storage 4-6:1.0
[33300.155626] scsi 13:0:0:0: Direct-Access     Generic- Compact Flash    1.01 PQ: 0 ANSI: 0
[33300.156223] scsi 13:0:0:1: Direct-Access     Multiple Flash Reader     1.05 PQ: 0 ANSI: 0
[33300.157059] sd 13:0:0:0: Attached scsi generic sg4 type 0
[33300.157462] sd 13:0:0:1: Attached scsi generic sg5 type 0
[33300.462115] sd 13:0:0:1: [sdg] 30367744 512-byte logical blocks: (15.5 GB/14.4 GiB)
[33300.464144] sd 13:0:0:1: [sdg] Write Protect is off
[33300.464159] sd 13:0:0:1: [sdg] Mode Sense: 03 00 00 00
[33300.465896] sd 13:0:0:1: [sdg] No Caching mode page found
[33300.465912] sd 13:0:0:1: [sdg] Assuming drive cache: write through
[33300.470489] sd 13:0:0:0: [sdf] Attached SCSI removable disk
[33300.479493]  sdg: sdg1
[33300.483566] sd 13:0:0:1: [sdg] Attached SCSI removable disk
$ xz -d freedombox-unstable-free_2015-12-13_cubietruck-armhf.img.xz
$ cd build
$ dd bs=1M if=freedombox-unstable-free_2015-12-13_cubietruck-armhf.img of=/dev/sdf conv=fdatasync

$ cat freedombox-unstable-free_2015-12-13_cubietruck-armhf.img > /dev/sdf ; sync

https://<Name_meines_Freedomboxes>/calibre
turn_uris: [ "stun:myfreedombox.example.org:3478?transport=udp", "stun:myfreedombox.example.org:3478?transport=tcp", "turn:myfreedombox.example.org:3478?transport=udp", "turn:myfreedombox.example.org:3478?transport=tcp" ]
turn_shared_secret: "my-freedombox-provided-secret"
turn_user_lifetime: 86400000
turn_allow_guests: True
turn_shared_secret
static-auth-secret
/etc/coturn/freedombox.conf
https://<Ihre Freedombox>/deluge
https://<Name_meiner_Freedombox>/gitweb
.git/config
/ikiwiki
https://<Ihre FreedomBox>/plinth/apps/xmpp/jsxc/
@benutzername: domain
@ihr-Benutzername:ihre-Domain
cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1 | sed "s+^+registration_shared_secret: +" > /etc/matrix-synapse/conf.d/registration_shared_secret.yaml
chmod 600 /etc/matrix-synapse/conf.d/registration_shared_secret.yaml
chown matrix-synapse:nogroup /etc/matrix-synapse/conf.d/registration_shared_secret.yaml
systemctl restart matrix-synapse
register_new_matrix_user -c /etc/matrix-synapse/conf.d/registration_shared_secret.yaml
apt install sqlite3
echo 'select name from users' | sqlite3 /var/lib/matrix-synapse/homeserver.db  
benutzernamen
sudo apt install sqlite3
echo "UPDATE users SET admin=1 WHERE name='@benutzername:domainname'" | sudo sqlite3 /var/lib/matrix-synapse/homeserver.db  
https://<Ihre Freiheitsbox>/mldonkey
$ ssh -L 4001:localhost:4001 -N beispielbenutzer@beispiel.freedombox.rocks
sudo grep SuperUser /var/log/mumble-server/mumble-server.log
<W>2019-11-06 02:47:41.313 1 => Password for 'SuperUser' set to 'noo8Dahwiesh'
sudo su -
echo "newpassword" | su mumble-server -s /bin/sh -c "/usr/sbin/murmurd -ini /etc/mumble-server.ini --readsupw"
client
remote mybox.freedombox.rocks 1194
proto udp
proto udp6
proto udp
$ sudo apt install openvpn
$ sudo openvpn --config /path/to/<USER>.ovpn
$ sudo apt install network-manager-openvpn-gnome
$ sudo nmcli connection import type openvpn file /path/to/<USER>.ovpn
configuration error: invalid 1th argument to “proto” (line 5)
proto udp6
ip addr
tun0
traceroute freedombox.org
enable-edit-actions
/etc/privoxy/config
1
EDIT
http://config.privoxy.org/
irc://irc.debian.org/freedombox
Connect to Core
Add
Add Core Account
Account Name
Hostname
Port
4242
User
Password
Remember
OK
Add Core Account
Connect to Core
OK
Untrusted Security Certificate
Continue
Forever
Core Configuration Wizard
Next
Create Admin User
Remember password
Next
Select Storage Backend
SQLite
Commit
Quassel IRC
Next
Setup Identity
Next
Setup Network Connection
Edit
Server Info
6697
Use SSL
OK
Setup Network Connection
Save & Connect
All Chats
https://
/radicale/
https://
https://
.onion/radicale/
/
/
https://
.onion/radicale/
/
/
/
User1
User2
/etc/radicale/rights
[friends_calendar]
user: ^(User1|User2)$
collection: ^.*/calendar_of_my_friends.ics$
permission: rw

# Give write access to owners
[owner-write]
user: .+
collection: ^%(login)s/.+$
permission: rw
[friends_calendar]
[owner-write]
/etc/radicale/config
[rights]
[rights]
type = from_file
file = /etc/radicale/rights
apt dist-upgrade
sudo su -
apt hold radicale
apt dist-upgrade
apt unhold radicale
sudo su -
tar -cvzf /root/radicale_backup.tgz /var/lib/radicale/ /etc/radicale/ /etc/default/radicale
apt install -y python-radicale
python -m radicale --export-storage=/root/radicale-migration
cp -dpR /root/radicale-migration/collection-root /var/lib/radicale/collections/collection-root/
(remove this directory if it already exists. Or perhaps merge the contents.)
chown -R radicale:radicale /var/lib/radicale/collections/collection-root/
apt remove -y python-radicale
if [ -f /etc/radicale/config.dpkg-dist ] ; then cp /etc/radicale/config.dpkg-dist /etc/radicale/config ; fi
if [ -f /etc/default/radicale.dpkg-dist ] ; then cp /etc/default/radicale.dpkg-dist /etc/default/radicale ; fi
(After FreedomBox 19.1 is available, goto FreedomBox web interface and set your preference for calendar sharing again, if it is not the default option, as it will have been lost.)
--export-storage
https://<your freedombox>/roundcube
https://your_freedombox/share/content_name
all_proxy
$ all_proxy=socks5://localhost:9050 syncthing
https://<your freedombox>/transmission
example.org
example.org/~fbx/index.html
/home/fbx/public_html/index.html
freedombox SFTP server
ftp://freedombox.local
sftp://username@freedombox.local
home
public_html
public_html
username
freedombox.local
$ ssh username@freedombox.local
username@freedombox:~$
username@freedombox:~$ mkdir ~/public_html
sudo
username@freedombox:~$ sudo mkdir /home/<the_other_user>/public_html
username@freedombox:~$ sudo chown <the_other_user>:<the_other_user> /home/<the_other_user>/public_htm
username@freedombox:~$ ls -l /home/<the_other_user>
...
drwxr-xr-x  2 <the_other_user> <the_other_user>   4096 jan 29 17:39  public_html
...
public_html
drwxr-xr-x
username@freedombox:~$ exit
$ scp path/to/files username@freedombox.local:public_html/
$ man ssh
$ man scp
$ man sftp
# qrencode -t ansiutf8 < client.conf
127.0.0.1
https://192.168.0.10/_cockpit/
https://freedombox.local/_cockpit/
https://mybox.freedombox.rocks/_cockpit/
https://exampletorhs.onion/_cockpit/
external
internal
external
service firewalld stop
systemctl stop firewalld
service firewalld start
systemctl start firewalld
firewall-cmd --zone=<zone> --list-services
firewall-cmd --zone=internal --list-services
firewall-cmd --zone=<zone> --list-ports
firewall-cmd --zone=internal --list-ports
firewall-cmd --zone=<zone> --remove-service=<service>
firewall-cmd --permanent --zone=<zone> --remove-service=<interface>
firewall-cmd --zone=internal --remove-service=xmpp-bosh
firewall-cmd --permanent --zone=internal --remove-service=xmpp-bosh
firewall-cmd --zone=internal --remove-port=<port>/<protocol>
firewall-cmd --permanent --zone=internal --remove-port=<port>/<protocol>
firewall-cmd --zone=internal --remove-port=5353/udp
firewall-cmd --permanent --zone=internal --remove-port=5353/udp
firewall-cmd --zone=<zone> --add-service=<service>
firewall-cmd --permanent --zone=<zone> --add-service=<interface>
firewall-cmd --zone=internal --add-service=xmpp-bosh
firewall-cmd --permanent --zone=internal --add-service=xmpp-bosh
firewall-cmd --zone=internal --add-port=<port>/<protocol>
firewall-cmd --permanent --zone=internal --add-port=<port>/<protocol>
firewall-cmd --zone=internal --add-port=5353/udp
firewall-cmd --permanent --zone=internal --add-port=5353/udp
firewall-cmd --list-all-zones
firewall-cmd --zone=<zone> --remove-interface=<interface>
firewall-cmd --permanent --zone=<zone> --remove-interface=<interface>
firewall-cmd --zone=external --remove-interface=eth0
firewall-cmd --permanent --zone=external --remove-interface=eth0
firewall-cmd --zone=<zone> --add-interface=<interface>
firewall-cmd --permanent --zone=<zone> --add-interface=<interface>
firewall-cmd --zone=internal --add-interface=eth0
firewall-cmd --permanent --zone=internal --add-interface=eth0
MyWebName.com
https://MyWebName.com
internal
automatic
external
internal
shared
shared
shared
internal
shared
FreedomBox
freedombox123
shared
internal
shared
internal
internal
masquerade
Networks
Infrastructure
Access Point
IPv4 Addressing Method
Automatic (DHCP)
Shared
/etc/NetworkManager/NetworkManager.conf
wifi.scan-rand-mac-address=no
[device]
$ sudo nano /etc/NetworkManager/NetworkManager.conf
[device]
wifi.scan-rand-mac-address=no
internal
external
nmtui
nmcli device
nmcli connection
nmcli connection show '<connection_name>'
nmcli connection show '<connection_name>' | grep zone
firewall-cmd --zone=internal --list-all
firewall-cmd --zone=external --list-all
nmcli con add con-name "<connection_name>" ifname "<interface>" type ethernet
nmcli con modify "<connection_name>" connection.autoconnect TRUE
nmcli con modify "<connection_name>" connection.zone internal
nmcli con modify "<connection_name>" connection.zone "<internal|external>"
nmcli
openssh-server
Admin

sudo ./bin/passwd-in-image <image-file> fbx

$ ssh fbx@freedombox
fbx
freedombox
fbx
admin
root
fbx
admin
libpam-abl
libpam-abl
$ sudo apt-get install netcat-openbsd
$ nano ~/.ssh/config
Host *.onion
  user USERNAME
  port 22
  ProxyCommand nc -X 5 -x 127.0.0.1:9050 %h %p
admin
$ ssh USERNAME@ADDRESS.onion
admin
$ sudo apt-get install netcat-openbsd
$ nano ~/.ssh/config
Host *.pagekite.me
  CheckHostIP no
  ProxyCommand /bin/nc -X connect -x %h:443 %h %p
$ ssh USERNAME@KITENAME.pagekite.me
admin
$ sudo su
fbx
$ passwd
Error installing packages: E: dpkg was interrupted, you must manually run 'dpkg --configure -a' to correct the problem
$ sudo su -
Password: <enter user password here>
# dpkg --configure -a
# apt update
# apt -f install
# unattended-upgrade --debug
# apt install freedombox
# apt update
apt update
$ apt full-upgrade
apt-mark
freedombox
grub-pc
dpkg-reconfigure
grub
libgcc1
firewalld
mumble-server
radicale
roundcube-core
tt-rss
freedombox-setup
dpkg -l
apt source <package_name>
apt build-dep <package_name>
cd <source_directory>
 dpkg-buildpackage -rfakeroot -uc
 dpkg -i ../<built_package>.deb
 git clone https://salsa.debian.org/freedombox-team/freedombox.git
 cd freedombox
 apt build-dep .
 dpkg-buildpackage -rfakeroot -uc
 dpkg -i ../freedombox*.deb
apt install git git-buildpackage
git clone https://salsa.debian.org/freedombox-team/u-boot.git
cd u-boot
pbuilder create --distribution=buster
gbp buildpackage --git-pbuilder
mkdir temp
dpkg -x u-boot-suxi*.deb temp
unxz <lime2_image_built_with_freedom_maker>
dd if=temp/usr/lib/u-boot/A20-OLinuXino-Lime2/u-boot-sunxi-with-spl.bin of=<lime2.img> seek=8 bs=1k conv=notrunc
set -e  # Exit with code on error

IFACE="$1"
ACTION="$2"

if [[ "$IFACE" != "eth0" ]]; then
    exit 0
fi

case ${ACTION} in
    up)
        logger "Setting up $IFACE in 100Mbps mode"
        mii-tool eth0 -A 100BaseTx-FD
        ;;
    *)
        ;;
esac
$ sudo apt-get update
freedombox
$ sudo DEBIAN_FRONTEND=noninteractive apt-get install freedombox
/var/lib/plinth/firstboot-wizard-secret
/etc/network/interfaces
auto lo
iface lo inet loopback
/etc/network/interfaces
setup
internal
external
nmtui
sudo su
internal
automatic
 ssh -p 2222 fbx@localhost
macchanger
macchanger
$ dpkg --ignore-depends=freedombox-setup --remove macchanger 
/etc/network/if-prep-up/macchanger
/var/lib/dpkg/status
$ mkdir /tmp/vbox-img1 /tmp/vbox-root1
$ vdfuse -f freedombox-unstable_2013.0519_virtualbox-i386-hdd.vdi /tmp/vbox-img1/
$ sudo mount -o loop /tmp/vbox-img1/Partition1 /tmp/vbox-root1
$ cp /tmp/vbox-root1/home/fbx/freedom-maker/build/freedom*vdi ~/
$ sudo umount /tmp/vbox-root1
# $ sudo umount /tmp/vbox-img1 # corruption here.
ntp
'crontab -e'
*/15 * *   *   *     /etc/init.d/ntp restart
$ VBoxManage internalcommands sethduuid path/to/the/hd/vdi/file

sudo su [enter password]
cd /lib/firmware
wget https://www.thinkpenguin.com/files/ath9k-htc/version-1.4-beta/htc_9271.fw
wget https://www.thinkpenguin.com/files/ath9k_firmware_free-version/htc_7010.fw
version
https://domainname/
iqdisc
https://domainname/mediawiki/ArticleName

App/Feature	Support in Version	Notes
Avahi	-	no backup needed
Backups	-	no backup needed
Bind	0.41
Cockpit	-	no backup needed
Datetime	0.41
Deluge	0.41	does not include downloaded/seeding files
Diagnostics	-	no backup needed
Dynamic DNS	0.39
ejabberd	0.39	includes all data and configuration
Firewall	-	no backup needed
ikiwiki	0.39	includes all wikis/blogs and their content
infinoted	0.39	includes all data and keys
JSXC	-	no backup needed
Let's Encrypt	0.42
Matrix Synapse	0.39	includes media and uploads
MediaWiki	0.39	includes wiki pages and uploaded files
Minetest	0.39
MLDonkey	19.0
Monkeysphere	0.42
Mumble	0.40
Names	-	no backup needed
Networks	No	No plans currently to implement backup
OpenVPN	0.48	includes all user and server keys
Pagekite	0.40
Power	-	no backup needed
Privoxy	-	no backup needed
Quassel	0.40	includes users and logs
Radicale	0.39	includes calendar and cards data for all users
Roundcube	-	no backup needed
SearX	-	no backup needed
Secure Shell (SSH) Server	0.41	includes host keys
Security	0.41
Shadowsocks	0.40	only secrets
Sharing	0.40	does not include the data in the shared folders
Snapshot	0.41	only configuration, does not include snapshot data
Storage	-	no backup needed
Syncthing	0.48	does not include data in the shared folders
Tahoe-LAFS	0.42	includes all data and configuration
Tiny Tiny RSS	19.2	includes database containing feeds, stories, etc.
Tor	0.42	includes configuration and secrets such as onion service keys
Transmission	0.40	does not include downloaded/seeding files
Upgrades	0.42
Users	No	No plans currently to implement backup

Service	Port	External	Enabled by default	Status shown in FreedomBox	Managed by FreedomBox
Minetest	30000/udp
XMPP Client	5222/tcp
XMPP Server	5269/tcp
XMPP Bosh	5280/tcp
NTP	123/udp
FreedomBox Web Interface (Plinth)	443/tcp
Quassel	4242/tcp
SIP	5060/tcp
SIP	5060/udp
SIP-TLS	5061/tcp
SIP-TLS	5061/udp
RTP	1024-65535/udp
SSH	22/tcp
mDNS	5353/udp
Tor (Socks)	9050/tcp
Obfsproxy	<random>/tcp
OpenVPN	1194/udp
Mumble	64378/tcp
Mumble	64378/udp
Privoxy	8118/tcp
JSXC	80/tcp
JSXC	443/tcp
DNS	53/tcp
DNS	53/udp
DHCP	67/udp
Bootp	67/tcp
Bootp	67/udp
Bootp	68/tcp
Bootp	68/udp
LDAP	389/tcp
LDAPS	636/tcp

Field Name	Example Value	Explanation
Connection Name	Mesh Join - BATMAN	The name must end with 'BATMAN' (uppercase)
Physical Interface	wlan0	The Wi-Fi device you wish to use for joining the mesh network
Firewall Zone	External	Since you don't wish that participants in mesh network to use internal services of FreedomBox
SSID	ch1.freifunk.net	As provided to you by the operators of the mesh network. You should see this as a network in Nearby Wi-Fi Networks
Mode	Ad-hoc	Because this is a peer-to-peer network
Frequency Band	2.4Ghz	As provided to you by the operators of the mesh network
Channel	1	As provided to you by the operators of the mesh network
BSSID	12:CA:FF:EE:BA:BE	As provided to you by the operators of the mesh network
Authentication	Open	Leave this as open, unless you know your mesh network needs it be otherwise
Passphrase		Leave empty unless you know your mesh network requires one
IPv4 Addressing Method	Disabled	We don't want to request IP configuration information yet

Field Name	Example Value	Explanation
Connection Name	Mesh Connect	Any name to identify this connection
Physical Interface	bat0	This interface will only show up after you successfully activate the connection in first step
Firewall Zone	External	Since you don't wish that participants in mesh network to use internal services of FreedomBox
IPv4 Addressing Method	Auto	Mesh networks usually have a DHCP server somewhere that provide your machine with IP configuration. If not, consult the operator and configure IP address setting accordingly with Manual method

FreedomBox - Danube Edition (basierend auf Cubietruck)	BeagleBone Black	A20 OLinuXino Lime2	A20 OLinuXino MICRO	PC Engines APU
Debian	VirtualBox	.	.	.

-	Guest accessible from other machines	Guest accessible from host	Works without port forwarding	Works without host connected to network	Guest has internet access
Bridged
Host only
NAT
NAT and Host

deFreedomBoxManual

FreedomBox Einführung

1. Smart Router

2. Private Cloud

Schnelleinstieg

Hilfe Erhalten

1. Diskussionsforum

2. IRC #freedombox

3. Matrix

4. Email

5. Hilfe wiedergeben

Herunterladen und installieren

1. Herunterladen für Debian

2. Herunterladen für Hardware bzw. Virtuelle Maschinen

2.1. Gerät vorbereiten

2.2. Images Herunterladen

2.3. Heruntergeladene Images Überprüfen

2.4. Installation

Anwendungen (Apps)

1. Bepasty (Datei- und Ausschnittteilen)

1.1. Was ist Bepasty?

1.2. Bilschirmfoto

1.3. Passwörter und Erlaubnisse

1.4. Verteilung von Passwörte

1.5. Bepasty verwenden

1.6. Passwortverwaltung

1.7. Externe Links

2. Calibre (E-Book-Bibliothek)

2.1. Bibliothekenverwaltung

2.2. Zugriff

2.3. Externe Links

3. Coturn (VoIP-Helfer)

3.1. Wie funktioniert es

3.2. Einstellung von Matrix Synapse

3.3. Portweiterleitung

3.4. Externe Links

4. Deluge (Verteilte Dateifreigabe über BitTorrent)

4.1. Was ist Deluge?

4.2. Bildschirmfoto

4.3. Ersteinrichtung

4.4. Externe Links

5. Ejabberd (Unterhaltungsserver)

5.1. Was ist XMPP?

5.2. Privatsphäre

5.3. Festlegen des Domainnamens

5.4. Verwendung von Let's Encrypt-Zertifikat für ejabberd

5.5. Registrieren von FreedomBox-Benutzern zur Verwendung von XMPP

5.6. Port-Weiterleitung

5.7. Kompatible Clients

5.7.1. Mobile clients

5.7.1.1. Conversations (Android)

5.7.1.2. Movim (Android)

5.7.1.3. ChatSecure (iOS)

5.7.1.4. Monal (iOS)

5.7.1.5. Siskin (iOS)

5.7.2. Desktop-Clients

5.7.2.1. Gajim (Windows, MacOS, Linux)

5.7.2.2. Dino (Linux)

5.7.2.3. Movim (Linux)

5.7.2.4. Monal (MacOS)

5.8. Externe Links

6. GitWeb (einfältiges Git-Hosting)

6.1. Verwaltung von Quellcodebehälter

6.2. Zugriff

6.3. HTTP-Basisauthentifizierung

6.4. Spiegelnachbildung

6.5. Externe Links

7. I2P (Anonymitätnetzwerk)

7.1. Über I2P

7.2. Angebotene Dienste

7.3. Externe Links

8. Ikiwiki (Wiki und Blog)

8.1. Was ist Ikiwiki?

8.2. Schnellstart

8.3. Erstellen eines Wikis oder Blogs

8.4. Zugriff auf Ihr Wiki bzw. Blog

8.5. Benutzeranmeldung über Verinigte Anmeldung (SSO)

8.6. Hinzufügung von !FreedomBox-Benutzern als Wiki-Verwaltern

8.7. Externe Links

9. Infinoted (Kollaborative Textbearbeitung mit Gobby)

de
FreedomBox
Manual