<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[1.6 upgrade: &#x2F;etc&#x2F;exports overwritten, captures stuck in &#x2F;images&#x2F;dev (SSH on non-standard port)]]></title><description><![CDATA[<p dir="auto">The upgrade itself went smoothly, but two things broke afterward.</p>
<ol>
<li>The Kubuntu menu entry lost its NFS export. My Kubuntu entry boots the live ISO over NFS: the ISO is extracted to /srv/kubuntu, the kernel and initrd are served over HTTP, and the kernel line uses boot=casper netboot=nfs nfsroot=[fog server IP] :/srv/kubuntu. That needs its own line in /etc/exports:</li>
</ol>
<p dir="auto">/srv/kubuntu *(ro,sync,no_subtree_check,insecure,fsid=2)</p>
<p dir="auto">The 1.6 installer rewrote /etc/exports (it saved my original as /etc/exports.&lt;timestamp&gt;) and kept only the /images and /images/dev exports, so the Kubuntu entry broke. Re-adding the line and running exportfs -ra fixed it. The menu entry itself carried over fine.</p>
<p dir="auto">It would be nice if the installer preserved non-FOG lines in /etc/exports instead of replacing the file. Anyone else serving extra NFS shares from their FOG box will hit this on every update.</p>
<ol start="2">
<li>Captures stuck in /images/dev. After the upgrade, captures finished but never moved out of /images/dev/&lt;MAC&gt;. The Apache error log showed:</li>
</ol>
<p dir="auto">ssh2_connect(): Unable to connect to [fog server IP] on port 22</p>
<p dir="auto">1.6 now does the post-capture move over SSH, and my sshd runs on a non-standard port with key-only auth. Two fixes were needed:</p>
<p dir="auto">FOGSSH.php reads a FOG_SSH_PORT setting, but it didn’t exist in my database, so I (Claude) inserted it:</p>
<p dir="auto">sql</p>
<pre><code>INSERT INTO globalSettings (settingKey, settingDesc, settingValue, settingCategory)
VALUES ('FOG_SSH_PORT', 'SSH port FOG uses to reach storage nodes', 'custom port of ssh server', 'General Settings');
</code></pre>
<p dir="auto">FOG only authenticates with a password (auth_password), so I allowed password logins for the service account from the server itself only:</p>
<pre><code>Match User fogproject Address [fog server IP],127.0.0.1
    PasswordAuthentication yes
</code></pre>
<p dir="auto">Suggestions: expose FOG_SSH_PORT in FOG Settings by default, have the installer detect sshd’s port, and mention the SSH requirement in the upgrade notes, since FTP alone isn’t enough anymore.</p>
<p dir="auto">Question: is SSH key authentication on the roadmap for FOG’s storage node connections? Right now FOGSSH.php only uses auth_password, so I had to carve out a password-login exception for fogproject on a box that’s otherwise key-only. Supporting ssh2_auth_pubkey_file, with a key pair the installer generates for the service account, would let servers keep password authentication disabled entirely. Is that possible today through a setting I’m missing, or would it need a code change?</p>
<p dir="auto">Also - Claude the cheap $20 a month got all this sorted first try, I was all like, 1.6 bad. 1.5 good and it was all like here, do this, do that. <img src="http://forums.fogproject.org/assets/plugins/nodebb-plugin-emoji/emoji/android/1f602.png?v=7ddmg541643" class="not-responsive emoji emoji-android emoji--joy" style="height:23px;width:auto;vertical-align:middle" title=":joy:" alt="😂" /></p>
<p dir="auto">Thanks</p>
]]></description><link>http://forums.fogproject.org/topic/18303/1-6-upgrade-etc-exports-overwritten-captures-stuck-in-images-dev-ssh-on-non-standard-port</link><generator>RSS for Node</generator><lastBuildDate>Wed, 04 Nov 2026 03:48:14 GMT</lastBuildDate><atom:link href="http://forums.fogproject.org/topic/18303.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 04 Nov 2026 02:49:37 GMT</pubDate><ttl>60</ttl></channel></rss>