Install SSH

From AwkwardTV
Revision as of 21:39, 9 September 2007 by XvnJ6r (talk | contribs)
Jump to: navigation, search
tell me why did fly away gradina kiera sky www bronte it v535 motorola kitai fornello a gas 4 fuochi vendita articolo sportivi verremo a te street blow jobs mauma heyduk adolf midi ro terry winter guarda video quattrocchi canzoni per chitarra breve amore stricker der dissipatore per notebook gigi proietti mp3 scanner hp scanjet 2400 soy cubano feltrinelli international la bella e la bestia film dvd guiding la porta murata breath control milano traduzione i don t wanna know mario winans la battaglia di okinawa video incesti mila e shiro il movimento operaio in germania dalle origini alla prima guerra mondiale lupi harness mango frutto kirstens giuseppe zanotti calzature di ultimo la sfida file midi solo disco suoneria catoon nokia biene maja stock jeans maraya carrey lacey angels care honda hornet s nokia 60 gold is a girl jampi ozone dragostea din tei dj ross mix mp3 google en espanol key free xtv lg micro hi fi video de chocolate hilary putnam rum zacapa il cav costante nicosia demoniaco ovvero dracula in brianza lotus esprit sport 300 traviata filmato esecuzione fabrizio quattrocchi bobby valentino occasione sony dvd rom il futurismo in arte gomma firenze ventilatori vortice luce eberhart richard hp laser 3550 moulinex mixer tesine scolastiche sul volontariato comune piacenz nuova seat altea diesel auto nuove kit pioneer achat dvd vierge www kobierno pl sasa tin i kedzo zen 5gb esame di sato mezzanotte di fuoco scaldabagni metano wwo hip hop valentino 5358 canzoni disney finelco serbia bed breakfast milano telecomando 6 den harrow mad desire english schools in england aliens vs predator 2 falsetas de el barrio foto di spiagge nudiste usb 4 gb discoteche dell isola d ischia akai lettore dvd divx r9 bestie boys woofer jbl segnaletica aziendale house of the rising sun animals la regina dei fiori cheap cipro cheap lotrel cheap zyban effexor cheap fluoxetine free cool ringtones used bmw auto alprazolam buy paxil free cellular ringtones texas holdem poker didrex online hydrocodone online cheap lorazepam order zoloft free t-mobile ringtones cheap tamiflu free techno ringtones country ringtones cheap ativan free cingular ringtones pantech ringtones cheap albuterol free samsung ringtones cheap amitriptyline home mortgage loans cheap actos buy phentermine cheap pharmacy online continentalairlines buy diovan didrex cheap rivotril mobile ringtones free qwest ringtones cheap fioricet buy xanax cheap flonase phendimetrazine online tenuate order celexa sharp ringtones clomid online mono ringtones venlafaxine online cheap wellbutrin free free ringtones alcatel ringtones cellphone ringtones sony ringtones health insurance indiana free sagem ringtones wellbutrin online buy phentermine lg ringtones viagra online philips ringtones cricket ringtones cheap norco free sony ericsson ringtones cheap levitra free tv ringtones cheap venlafaxine wwe ringtones free tracfone ringtones cheap xenical dianabol cheap xenical flexeril online free animal ringtones polyphonic ringtones dianabol cheap lortab cheap ultram meridia lortab online cellphone ringtones cheap adderall propecia order vigrx online vardenafil cheap hoodia toques ringtones cheap ativan cheap meridia real ringtones cheap ionamin free talking ringtones cheap prozac jetblueairlines bmw car fly ringtones buy fioricet free wwe ringtones adderall cheap levitra free funny ringtones cheap tramadol free rap ringtones student loan



These instructions are for installing ssh on the Apple TV from an Intel Mac. If you don't have an Intel Mac, you can extract an sshd from one of the recent OS X security updates or from the OS X 10.4.9 update, which you can download from Apple's web site.

To find the sshd in an update, mount the .dmg image, right-click on the .pkg install package, select 'Show Package Contents', find the Archive.pax.gz file, extract it using OpenUp, and you will find the the sshd daemon in Archive_X/usr/sbin/. Verify that it's an x386 executable by using file sshd.

Without an Intel Mac, though, you won't be able to get the Kerberos framework, and you'll be stuck with ssh v1. You can NOT use the sshd or Kerberos framework from a PPC Mac (G3, G4, or G5).

  • Changed 2007-06-01: You also can use ssh v2 now. (This was formerly a problem)
  • Changed 2007-06-02: Fixed up the rest of the page a bunch. Eliminated significant errors in first half of last section. Now shows how to connect without having to provide either the password or the username.
  • Changed 2007-06-10: Fixed up the Kerberos stuff (see #Notes for some history).

For the following steps you need to remove the Apple TV's hard drive and mount it using some sort of firewire or usb enclosure, or use a USB-to-PATA adapter such as the one sold by OWC. Perform these steps, and then reinstall the drive. It is not necessary to disable the firewall (see Disable Firewall).

How to install SSHD


Make sure that your AppleTV drive is mounted on your Intel Mac (or whatever machine you're using to do this). It should be in your filesystem at /Volumes/OSBoot. If it's not, you'll need to modify the instructions below accordingly.

Copy the SSHD Binary

Copy sshd from your Mac to your AppleTV. For example:

cp -p /usr/sbin/sshd /Volumes/OSBoot/usr/sbin/

The "-p" preserves permissions while copying sshd; if you forgot it, mark the copy as executable:

chmod  x /Volumes/OSBoot/usr/sbin/sshd

Creating an automatic startup file

Make sshd start automatically on boot. If you have the AppleTV disk mounted on a Mac, it's easy. Make sure SSH is enabled, on your Mac (Preferences, Sharing, Services, Remote Login) this will create startupfile ssh.plist then do:

cp -p /System/Library/LaunchDaemons/ssh.plist /Volumes/OSBoot/System/Library/LaunchDaemons/
defaults delete /Volumes/OSBoot/System/Library/LaunchDaemons/ssh Disabled

Otherwise, create a text file /Volumes/OSBoot/System/Library/LaunchDaemons/ssh.plist containing:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "">
<plist version="1.0">

Installing the Kerberos framework (optional)

  • This step is not possible if you do not use an Intel machine.

Copy over the Kerberos framework, so sshd will be able to use the ssh v2 protocol (without this step, you're limited to v1).

mkdir /Volumes/OSBoot/System/Library/Frameworks/OSXFrames
cp -pr /System/Library/Frameworks/Kerberos.framework /Volumes/OSBoot/System/Library/Frameworks/OSXFrames/.
cd /Volumes/OSBoot/usr/libexec/
sudo sed -i"" -e 's;^exec;DYLD_FRAMEWORK_PATH="/System/Library/Frameworks/OSXFrames" exec;' sshd-keygen-wrapper

(The effect of that ugly sed line is to add DYLD_FRAMEWORK_PATH="/System/Library/Frameworks/OSXFrames" to the beginning of the last line of sshd-keygen-wrapper. Using pico or vi is another possibility.)

Logging in

The basics are done and you can now put the disk back in the AppleTV, restart it, and log in. If you installed the Kerberos framework, the command is:

ssh frontrow@appletv.local

Otherwise use the command below which forces ssh to use the v1 protocol.

ssh -1 frontrow@appletv.local

The password, as shipped from Apple, is frontrow. If your box doesn't support Bonjour (that's most machines that aren't Macs, though you can install it on Windows, Linux, etc.), you'll have to connect to it by IP address, or put it in your local DNS or your /etc/hosts file (or analogue). In that case, figure out its IP address, and use that instead of "appletv.local".

The first time you try to SSH into the AppleTV, it will generate host keys. This takes a long time (at least compared to modern machines). If you try to connect right after rebooting it, you may have to wait as long as a couple of minutes for it to work. Be patient, and just try ssh again if it times out.

Other misc. notes:

  • If you are on a windows machine, use Putty or other ssh clients to connect.
  • The user "frontrow" has complete sudo privileges. To be root, do sudo -s and put in the password again (frontrow by default, remember?).

Logging in without a username or password

The previous contents of this section were terribly confusing. They recommended taking the ATV's private host key and using it as your personal key on your Mac (or perhaps as the host key on your Mac, it wasn't clear). Someone else later provided an "Alternate Method" which was correct, and this is mostly a light edit of that.

Everything here is done on your Mac, unless explicitly stated otherwise.

Checking for an existing identity

First, check to see if you have an identity already; if not, make one:

cd ; ls .ssh/id_rsa

If you see a file called id_rsa, then you already have an identity, and you can skip the next step.

Creating a new identity

Do this step only if you have no id_rsa file. (Don't worry if you have other files in .ssh- they don't matter, and we won't disturb them.)

To create a new identity file, type:


It'll ask for input three times, with lines that begin with "Enter". Just hit return each time. (You can use a passphrase if you're comfortable that you know what you're doing. Leave the filename alone.) It'll look like this, though the username and fingerprint will be different:

Generating public/private rsa key pair.
Enter file in which to save the key (/Users/alexis/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /Users/alexis/.ssh/id_rsa.
Your public key has been saved in /Users/alexis/.ssh/
The key fingerprint is:
ef:3a:22:12:30:8e:37:7f:b5:0e:47:d4:e8:2f:9b:e9 alexis@alexis

Make SSH use username "frontrow" automatically

Do this on your Mac. It will only affect connections from your Mac to the AppleTV:

cat >>.ssh/config
Host appletv.local
 User frontrow

"^D" means you must hit the Control and D button synchronously.

Once this is done, you can just do "ssh appletv.local" instead of "ssh frontrow@appletv.local". Or, if you're really lazy (like me), this (instead of the above) will let you do just "ssh atv" to connect!

cat >>.ssh/config
Host appletv.local atv
 HostName appletv.local
 User frontrow

Installing the ssh key on the AppleTV

  • Copy your public key to your AppleTV. You'll need to enter the password, but you no longer need to specify a username:
scp .ssh/ appletv.local:~/
  • ssh to your AppleTV (still using password "frontrow", but you no longer have to give a username):
ssh appletv.local
  • Now, while still connected to the AppleTV, make an .ssh directory on your AppleTV, create an "authorized_keys" file and move your public key into it.
mkdir .ssh
mv .ssh/authorized_keys

You're done. Exit the ssh session, and try it again. This time, you can connect to the AppleTV without having to enter a password (or by using your passphrase, if you chose to use one).

For more information, see the man pages for ssh, ssh-keygen, and sshd.


  • The old Step 5 described how to make ssh keys. You won't have to create those, as OS X will create them the first time you connect to its sshd if they don't already exist. Thus, this section was removed.
  • The previous author of this page suggested getting sources for OpenSSL and OpenSSH, if you don't have an Intel Mac handy. This method might be easier if you don't know how to extract files from packages such as the OS or Security updates.)
  • Old instructions were replacing the Kerberos.framework file of the AppleTV. This is causing some problems. In particular, mount_afp fails with "Illegal instruction". If you're running a hacked kernel with SSE3 emulation, this probably won't affect you, but otherwise, it's a major issue. If you followed these previous instructions and overwrote your Kerberos.framework, I'm sorry. :-( The good news is that it's not so hard to recover- just mount the recovery partition, open the DMG, and extract the stub.