SSH in to recovery

I had a few issues installing Fedora 40, which I however managed to fix. (pull request for the manipulator is on its way). However this led to me wondering about this:

Is it actually possible to SSH in to system when it has booted from the recovery firmware?

To make SSH accessible, you will need to add a firewall rule to allow it, or stop the firewall completely.

Recovery is just a OpenWrt environment with no persistent storage, so the same techniques as OpenWrt apply.

The “good” way:

uci set firewall.allowssh=rule
uci set firewall.allowssh.name='Allow-SSH'
uci set firewall.allowssh.src=wan
uci set firewall.allowssh.dest_port=22
uci set firewall.allowssh.proto=tcp
uci set firewall.allowssh.target=ACCEPT
/etc/init.d/firewall reload

The “quick” way:

/etc/init.d/firewall stop

Besides the security implications of the above method, the firewall will be reloaded if the WAN interface changes state, so adding the firewall rule is better if you need to make multiple connections over a long time period.

Like normal OpenWrt installs, logins without a password are allowed for root@ until the password is set. If that is a concern, make sure the root password is set before exposing SSH.