eyedeekay/i2p-ssh-config repository overview

⁠i2p-ssh-config

Requires: i2pd 2.21⁠ and genmkfile⁠

Optionally can be used with: samcatd⁠ and java-i2p⁠, but compatibility is momentarily limited due to the current shortcomings of samcatd.

Proof-of-Concept for an apt-installable ssh-over-i2p configuration using i2pd's new tunnels.conf.d folder. It consists of an alternate set of configuration files for OpenSSH and i2pd that automatically configures the sshd with fresh, i2p-only keys, only on the localhost, on port 7622. Then it forwards that new SSH service to the i2p network. All automatically. It doesn't have all the features I want it to yet, but it should work. I have not tested the systemd units yet.

The larger point is that with the use of /etc/i2pd/tunnels.conf.d instead of a single monolithic tunnels.conf file, it becomes possible to express the configuration of a service that you wish to forward to i2p as an easy-to-install and easy-to create package. In this case it's OpenSSH sshd, but it could be any service that could benefit from being routed using sshd.

⁠Getting genmkfile from Whonix

genmkfile is pretty awesome for deterministically encapsulating configuration.

1. Add Whonix's Signing Key⁠.

    sudo apt-key --keyring /etc/apt/trusted.gpg.d/whonix.gpg adv --keyserver hkp://ipv4.pool.sks-keyservers.net:80 --recv-keys 916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA

1. Add Whonix's APT repository.

echo "deb http://deb.whonix.org stretch main" | sudo tee /etc/apt/sources.list.d/whonix.list

1. Update your package lists.

sudo apt-get update

1. Install genmkfile.

sudo apt-get install genmkfile

⁠Building the package yourself

If you have debuild and make installed, you can build the experimental package by running

make deb