HOW TO SECURE A RASPBERRY PI 4 SERVER ON YOUR NETWORK - EPISODE 4

Подписаться 3,4 тыс.

Просмотров 11 тыс.

50% 1

Today we are going to show you how to secure a Raspberry Pi 4 server on your network. We will look to limit the common attack surface by making some important security changes.
==========Resources==========
►All Commands Can Be Found For Episode 4 On Our Website's Blog:
www.addictedto...
►Check out our full Raspberry Pi Series on our website: www.addictedto...
🌐For help and support head over to our forum forum.addicted...
==========Support The Channel==========
🌐Make A Paypal Donation: www.addictedto...
🌐Become a Patreon: / addicted2techuk
==========Social Media Links==========
🌐Facebook: / addicted2techuk
🐦Twitter: / addicted2techuk
🎥 RU-vid: www.addictedto...
Please Like our videos and Subscribe to our channel and click the notification bell so you are instantly notified of any new content.
==========Disclosure==========
Just so you know, we may collect a share of sales or other compensation from the links on this page.
As an Amazon Associate, I earn from qualifying purchases.
The Amazon Affiliate link recommendations come at no extra cost to you.
We hope you love the products we recommend! Thank you if you use our links, we really appreciate it!
==========Raspberry Pi 4 Models=========
►Raspberry Pi 4 4GB
🌐Amazon USA Link: amzn.to/3m4qxM9
🌐Amazon UK Link: amzn.to/3zeymY1
►Raspberry Pi 4 8GB
🌐Amazon USA Link: amzn.to/3wbZEuE
🌐Amazon UK Link: amzn.to/3PyC2Jo
==========Recommend Parts (Compatible with Pi 4)=========
►Raspberry Pi 4 Case - GeeekPi Argon One Raspberry Pi 4 Aluminum Case with Fan.
🌐Amazon USA Link: amzn.to/3wc3Kmj
🌐Amazon UK Link: amzn.to/3RMogVE
►Micro SD Card 32gb
🌐Amazon USA Link: amzn.to/39sdMpM
🌐Amazon UK Link amzn.to/3oanrbg
►Official Raspberry Pi 4 USB-C Power Supply.
🌐Amazon USA Link: amzn.to/31tdSsM
🌐Amazon UK Link: amzn.to/3Oiq7yl
►SATA 3 to USB Cable - USB 3.0 to 2.5” Hard Drive Adapter
🌐Amazon USA Link: amzn.to/3rxXSQY
🌐Amazon UK Link: amzn.to/3ySxRBD
►Crucial BX500 120GB SATA SSD (Optional)
🌐Amazon USA Link: amzn.to/3waQzCb
🌐Amazon UK Link: amzn.to/3Pg8LDB
►WD My Passport 1 TB Portable Hard Drive (For all data storage needs)
🌐Amazon USA Link: amzn.to/3ua1DgT
🌐Amazon UK Link: amzn.to/3zbuHdt
►UGREEN USB 3.0 Hub with 1M Long Cable ( Confirmed works with Raspberry Pi 4)
🌐Amazon USA Link: amzn.to/3uTOlZ2
🌐Amazon UK Link: amzn.to/3Pj9UKr
=========Best SSD Drives For The Raspberry Pi 4=========
►Crucial BX500 120 GB
🌐Amazon USA Link: amzn.to/31tQ8EL
🌐Amazon UK Link: amzn.to/3oe3wZ2
►SanDisk SSD PLUS 120 GB
🌐Amazon USA Link: amzn.to/3sCwAtN
🌐Amazon UK Link: amzn.to/3zfnjxE
=========Best USB 3 Flash Drives For the Raspberry Pi 4=========
►SanDisk Extreme Go USB 3.1 128 GB Flash Drive
🌐Amazon USA Link: amzn.to/3frkmR2
🌐Amazon UK Link: amzn.to/3o9uMbc
=========Best Networking Cable For The Raspberry Pi 4=========
►10ft/3M BLACK Cat5e Ethernet RJ45 High-Speed Network Cable
🌐Amazon USA Link: amzn.to/3m2qMr8
🌐Amazon UK Link: amzn.to/3PrSrzk
==========Other Affiliate Links==========
Get A Domain Name Today With Namecheap :)
🌐Namecheap: www.addictedto...
🌐The Best Hosting Company For Wordpress By A Mile - Cloudways!. Check them out. vrlps.co/x5D1g...
►Get 1 month for free - Unlimited Magazine Reading - All Tech Magazines Including The Mag Pi - Get The Readly App - www.addictedto...

Опубликовано:

15 сен 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 29

@allanlorriman2016 3 года назад

Hi, great video. You have covered lots of points I have not seen on youtube before. Wel done.

@addicted2techuk 3 года назад

Thank you for your feedback. I am glad you got value from it..😃

@markspc1 3 года назад

Great tutorial. Would you consider using a larger command line screen and a larger font, thanks.

@addicted2techuk 3 года назад

Yes good point I will zoom in more going forward. Thank you for your feedback.😃

@MarkAlterBridge 2 года назад

Thank you for these tutorials! They are so much more robust than anything else I've seen on the raspberry pi. I've been reading up on the commands being used so I've a good understanding and just happened to read this in the manual for AllowUsers "This keyword can be followed by a list of user name patterns, separated by spaces." In the video you mentioned comma separated so just wanted to put that out there in-case someone has an issue (if it even is)

@khaledFadouchi 3 года назад

Thanks a lot for all videos ! very well explained thanks a lot for your effors !!

@sekander1253 3 года назад

Absolutely useful tutorial. Thank you very much indeed.

@SeanCannon_ph 3 года назад

Good video. Note that when adding multiple users to Allowusers in sshd_config @12:33, do not use a comma in between user names, but use a space instead; so user1 user2 etc. It's a good tip you have to leave a working window open while testing a change - that saved my bacon.

@addicted2techuk 3 года назад

Thanks for adding that. Well spotted 😃

@robertfichtinger Год назад

Your video's have been an absolute bless, really wonderful! They actually persuaded me to do lots more with the Raspberry than I could have ever foreseen. In the video you are talking about extra layers of security (SSH keys and password authentication). Do you have practical suggestions how best to achieve those? Personally I would love to be able to access the Raspberry Pi from outside.

@billgross3579 2 года назад

These are great tutorials! I'm glad I found you. But please, please make the window and the text of what you're demonstrating as large as possible. Many of us watch on phones. I cannot read what's in your putty window.

@addicted2techuk 2 года назад

Thank you for the feedback Bill. I will do my best.

@carlosescalona5838 2 года назад

Hello and thank you for this series of videos. I have a question about the part of locking the pi account, because i am following the tutorials but i'm using ubuntu server, so i wonder if in my situation i can completely erase the 'ubuntu' account, thanks in advance.

@Ret_af_vet_2019 Год назад

Greetings! Thanks for these great videos! Can't wait to get started....I have RPI 4 with 4gb ram...are we able to perform all these installations in this series on one raspberry pi? Will it have enough resources? Sorry for the beginner question!!

@addicted2techuk Год назад

Yes and enjoy. 😀

@indigowyrm 3 года назад

Thanks - great tutorials ! but when I add a new user and add to groups when I try to login with new user the password doesn't work. I already have OMV installed and have changed the hostname but still normally login with the pi@192.x.x.x. and new user shows in admin and sudo groups and in omv dashboard any ideas pleaee? cheers

@glyndavies 3 года назад

I've created a user (newpi) and added groups adm and sudo. The first sudo command I issue (e.g. 'sudo hostname ') I am prompted to input the password for newpi. Thereafter, I can sudo as normal but every time I start a new session or reboot I have to provide newpi's password the first time I sudo. You don't appear to mention this behaviour in your tutorial: is this how it's supposed to work? It's a pain and severely limits the usefulness of a non-pi user.

@addicted2techuk 3 года назад

Yes it is normal and is a security feature built into Linux. 😃

@glyndavies 3 года назад

@@addicted2techuk Thanks for the reply. Not sure if that's just a nuisance or if it makes it a showstopper for me. I'll ponder.

@davidschulze1009 3 года назад

Do: sudo visudo Add under "#includedir /etc/sudoers.d": username ALL=(ALL) NOPASSWD:ALL and you are fine.

@glyndavies 3 года назад

@@davidschulze1009 THanks for that! I'll check it out later today.

@glyndavies 3 года назад

@@davidschulze1009 That worked a treat. Thank you for your suggestion, which I followed. Before I did, I learned a lot about groups, adduser and moduser , and how to set my text editor to be vi permanently - so it's all been good. I can now go ahead and finish securing my NAS. Your suggestion was a BIG help.

@TechEtrix 2 года назад

I renamed the pi account in the Pi Imager and therefore did not change the user, since no default pi user exists for me. Is this somehow problematic?

@addicted2techuk 2 года назад

No the default pi account should still be there. Changing the username in the imager should create a new user account.

@TechEtrix 2 года назад

@@addicted2techuk I have listed all existing user accounts and groups using "cat /etc/passwd", which did not show any remainders of a Pi user account.

@addicted2techuk 2 года назад

OK that makes sense. If you run the install script it should work fine. It will create the pi account if it is needed.