feat: add ssh-image/ — key-only Dropbear SSH injection for Spike 2 SD images

Browse Source

enable-ssh.sh turns a factory raw SD image (King Kong LE 0.97) into an
SSH-enabled one: injects the static dropbear/dropbearkey/sftp-server
binaries, the SysV init script (/etc/init.d/sshd), the S30sshd boot
symlink and the caller-supplied public key into the ext3 rootfs
partition with debugfs (no mounting). The input image is never
modified, the output path must be explicit and distinct, and every
byte outside p2 is verified identical afterwards. The public key is an
explicit -k argument — nothing is baked in and private keys are
rejected. --dry-run supported; --force for non-standard p2 geometry.

bin/ is byte-identical to the deployed king_kong_le-0_97_0.ssh image.
validate-image.sh functionally proves a result (boots the image's own
init script under qemu, real ssh pubkey login, password auth refused,
sftp round-trip); build-binaries.sh rebuilds bin/ in Docker.

Co-Authored-By: Claude Code <noreply@anthropic.com>

...

This commit is contained in:

mattlqx

2026-10-13 09:02:32 -04:00

co-authored by Claude Code

parent e8f812ba4a

commit cbdbe75f00

8 changed files with 812 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

ssh-image/bin/dropbear

Executable

BIN

Binary file not shown.

ssh-image/bin/dropbearkey

Executable

BIN

Binary file not shown.

ssh-image/bin/sftp-server

Executable

BIN

Binary file not shown.