git_admin/obsidian-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[2026-06-01] docs: add OpenWrt SSH access via docker in truenas-access.md

Browse Source
This commit is contained in:
Alexey Martemyanov
2026-06-01 13:50:24 +06:00
parent b7845b4d10
commit ac6f814e9a
4 changed files with 261 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
family/how-to/truenas-access.md
+21 -1
View File
@@ -20,6 +20,26 @@
ssh -i ~/.ssh/id_rsa truenas_admin@mallexxx.duckdns.org
```
## OpenWrt — доступ с TrueNAS
**SSH на роутер:**
```bash
# через docker-контейнер с sshpass
docker run --rm alpine sh -c 'apk add -q openssh sshpass && sshpass -p 1316261 ssh -o StrictHostKeyChecking=no root@192.168.2.2 "команда"'
```
**Проверка правил форвардинга портов:**
```bash
docker run --rm alpine sh -c 'apk add -q openssh sshpass && sshpass -p 1316261 ssh -o StrictHostKeyChecking=no root@192.168.2.2 "uci show firewall | grep redirect"'
```
**Добавление правила порт-форвардинга:**
```bash
docker run --rm alpine sh -c 'apk add -q openssh sshpass && sshpass -p 1316261 ssh -o StrictHostKeyChecking=no root@192.168.2.2 "uci add firewall redirect && uci set firewall.@redirect[-1].name=ИМЯ && uci set firewall.@redirect[-1].proto=tcpudp && uci set firewall.@redirect[-1].src=wan && uci set firewall.@redirect[-1].src_dport=ПОРТ && uci set firewall.@redirect[-1].dest=lan && uci set firewall.@redirect[-1].dest_ip=192.168.2.197 && uci set firewall.@redirect[-1].dest_port=ПОРТ && uci set firewall.@redirect[-1].target=DNAT && uci commit firewall && /etc/init.d/firewall reload"'
```
**Пароль root:** `1316261`
## Пул и датасеты
Пул: RED_2TB (ZFS)
@@ -44,4 +64,4 @@ ssh -i ~/.ssh/id_rsa truenas_admin@mallexxx.duckdns.org
Типичные жертвы:
- SSH authorized_keys в /home
- Cron jobs, написанные в /etc
- Любые файлы вне /mnt/RED_2TB/
- Любые файлы вне /mnt/RED_2TB/