SSH connection refused on Mark1 after enabling SSH login via button/knob

jrwarwick · December 4, 2017, 6:04pm

Mark1 is connected via wired ethernet, confirmed by successful home.mycroft.ai registration and successful answers to some questions, and I get ping replies from the unit. I’m also pretty confident that I am attempting SSH connection from a client with an IP address on the same IP subnet.

However, after following procedure to enable SSH logins, (and Mycroft gave the audible confirmation that “SSH logins are now allowed”) followed by reboot, SSH connections are still refused by Mycroft. I’ve also tried a power-cycle.

Have I missed something? Suggestions for something else to try most welcome.

KathyReid · December 5, 2017, 1:58am

Thanks for flagging this, @jrwarwick - are you able to paste the output of your terminal so we can debug further? Which SSH client are you using / which operating system are you on?

Kind regards,
Kathy

jrwarwick · December 5, 2017, 4:03pm

Thanks for getting back to me, Kathy. This is a pretty vanilla Ubuntu on x86 situation. Details and ssh output below:

jrw@katana:~$ cat /etc/issue ; uname -a
Ubuntu 13.10 \n \l

Linux katana 3.11.0-26-generic #45-Ubuntu SMP Tue Jul 15 04:04:15 UTC 2014 i686 i686 i686 GNU/Linux
jrw@katana:~$ ssh -V
OpenSSH_6.2p2 Ubuntu-6ubuntu0.5, OpenSSL 1.0.1e 11 Feb 2013
jrw@katana:~$  ip addr show eth2
2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether f0:4d:a2:2f:02:20 brd ff:ff:ff:ff:ff:ff
    inet 10.199.4.75/23 brd 10.199.5.255 scope global eth2
       valid_lft forever preferred_lft forever
jrw@katana:~$ ping -c 2 mark1.local
PING mark1.local (10.199.4.191) 56(84) bytes of data.
64 bytes from mark1.local (10.199.4.191): icmp_seq=1 ttl=64 time=0.277 ms
64 bytes from mark1.local (10.199.4.191): icmp_seq=2 ttl=64 time=0.285 ms

--- mark1.local ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 0.277/0.281/0.285/0.004 ms
jrw@katana:~$ sudo nmap -sS mark1.local

Starting Nmap 6.40 ( http://nmap.org ) at 2017-12-05 07:47 PST
Nmap scan report for mark1.local (10.199.4.191)
Host is up (0.00027s latency).
Not shown: 999 filtered ports
PORT   STATE  SERVICE
22/tcp closed ssh
MAC Address: B8:27:EB:56:C8:EC (Raspberry Pi Foundation)

Nmap done: 1 IP address (1 host up) scanned in 5.08 seconds
jrw@katana:~$ ssh -v pi@mark1.local
OpenSSH_6.2p2 Ubuntu-6ubuntu0.5, OpenSSL 1.0.1e 11 Feb 2013
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to mark1.local [10.199.4.191] port 22.
debug1: connect to address 10.199.4.191 port 22: Connection refused
ssh: connect to host mark1.local port 22: Connection refused

Less detailed, but similar results from a separate Windows 10 client using PuTTY ssh client.

2017-12-05 08:01:50	Connecting to 10.199.4.191 port 22
2017-12-05 08:01:50	We claim version: SSH-2.0-PuTTY_Release_0.70
2017-12-05 08:01:53	Failed to connect to 10.199.4.191: Network error: Connection refused
2017-12-05 08:01:53	Network error: Connection refused

Does Mycroft have a preference for Wi-Fi? I have not configured that (and would prefer not to, if I have the option).

KathyReid · December 6, 2017, 11:49am

Thanks @jrwarwick for that extra information.

ssh on my Mark 1 is enabled, and when I run an nmap this is what I get:

Starting Nmap 7.01 ( https://nmap.org ) at 2017-12-06 22:46 AEDT
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.03 seconds
kathyreid@kathyreid-N76VZ:~$ nmap -Pn 192.168.0.2

Starting Nmap 7.01 ( https://nmap.org ) at 2017-12-06 22:47 AEDT
Nmap scan report for 192.168.0.2
Host is up (0.0075s latency).
Not shown: 999 filtered ports
PORT   STATE SERVICE
22/tcp open  ssh

If you run nmap is the port open?

Is your modem/router port filtering on port 22 at all?

(I’m on Ubuntu 16.04 here so comparable)

Best, Kathy

jrwarwick · December 6, 2017, 4:54pm

According to nmap, it appears that the port is closed:

jrw@katana:~$ sudo nmap -Pn mark1.local  | sed 's/^/    /'

Starting Nmap 6.40 ( http://nmap.org ) at 2017-12-06 08:41 PST
Nmap scan report for mark1.local (10.199.4.191)
Host is up (0.00024s latency).
Not shown: 999 filtered ports
PORT   STATE  SERVICE
22/tcp closed ssh
MAC Address: B8:27:EB:56:C8:EC (Raspberry Pi Foundation)

Nmap done: 1 IP address (1 host up) scanned in 5.10 seconds

No router or other networking device in between the Mark 1 and the clients. Both the Linux and Windows client boxes are not only in the same IP subnet, but also on the same ethernet segment (just a little desktop 3com switch).

I decided to try a Reset (from the dial menu) and did the re-registration, and then re-enable SSH (and reboot). Alas, no difference; SSH still seems to be unavailable.

KathyReid · December 7, 2017, 9:54am

Thanks so much for that information @jrwarwick.

The code that enables SSH is found at;

github.com

MycroftAI/mycroft-wifi-setup/blob/dev/wifisetup/main.py#L566


#!/usr/bin/env python3
# Copyright 2017 Mycroft AI, Inc.
#
# This file is part of Mycroft Wifi Setup.
#
# Mycroft Core is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Mycroft Core is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Mycroft Core.  If not, see <http://www.gnu.org/licenses/>.


"""
This module implements a mechanism that allows the wifi connection of
a Linux system to be selected by end users.  This is achieved by:
* creating a websocket for communication between the pieces of this
  mechanism
* temporarilly creating a virtual access point
* directing the end user to connect to that access point with another device
  (phone or tablet or laptop)
* having them open a captive portal in that device's web browser
* selecting the desired wifi within that browser
* configuring this device based on that selection
"""
import sys
sys.path += ['.']  # noqa


import logging
from subprocess import call
from wifisetup.wifi_client import WifiClient
from wifisetup.util import trigger_event
from wifisetup import config


root = logging.getLogger()
root.setLevel(logging.DEBUG)


ch = logging.StreamHandler(sys.stderr)
ch.setLevel(logging.DEBUG)
formatter = logging.Formatter(
              '%(asctime)s - %(name)s - %(levelname)s - %(message)s')
ch.setFormatter(formatter)
root.addHandler(ch)


LOG = logging.getLogger(__name__)




WPA_SUPPLICANT = '''# p2p_start
ctrl_interface=/var/run/wpa_supplicant
driver_param=p2p_device=1
update_config=1
device_name=''' + config.device_name + '''
device_type=1-0050F204-1
p2p_go_intent=10
p2p_go_ht40=1


network={
  ssid="''' + config.ssid + '''"
  psk="''' + config.password + '''"
  proto=RSN
  key_mgmt=WPA-PSK
  pairwise=CCMP
  auth_alg=OPEN
  mode=3
  disabled=2
}
# p2p_end'''




def run_wifi(allow_timeout='True'):
  try:
      client = WifiClient(allow_timeout != 'False')
      client.join()
  except:
      LOG.exception('Error running wifi client')
      trigger_event('ap_error')




def reset_wifi():
  """Reset the unit to the factory defaults"""
  LOG.info("Resetting the WPA_SUPPLICANT File")
  call("echo '" + WPA_SUPPLICANT +
       "'> /etc/wpa_supplicant/wpa_supplicant.conf",
       shell=True)




def main():
  options = {
      'wifi.run': run_wifi,
      'wifi.reset': reset_wifi
  }


  def print_usage(*_):
      print('Usage:', sys.argv[0], list(options))
      sys.exit(1)


  action = sys.argv[1] if len(sys.argv) > 1 else 'wifi.run'
  try:
      options.get(action, print_usage)(*sys.argv[2:])
  except (SystemExit, KeyboardInterrupt):
      raise
  except:
      LOG.exception('Exception in ' + action)
      sys.exit(1)




if __name__ == "__main__":
  main()

Is there any way that you’re able to connect the Mark 1 to a HDMI-based monitor with a USB keyboard and then run

systemctl enable ssh.service
then
systemctl start ssh.service

If not let me know and I’ll see what else we can do.

Kind regards,
Kathy

jrwarwick · December 8, 2017, 1:37am

That worked perfectly. A real console as a fallback: I really like that!
Thanks so much for your help, Kathy. At this point, I’d say “issue resolved,” but if you would like me copy off any logs for determination of cause of failure for the knob-interface to turn on SSH, I’d be happy to do so. Just let me know what file paths and where to deposit them.

KathyReid · December 11, 2017, 12:22pm

Absolute pleasure, @jrwarwick, we’re here to help!

This is not a frequent error that we’ve seen - if we we see it again, or if it happens again we’ll get some logs, but for now I’m just very thankful of your willingness to assist us troubleshoot - thank you!

Pair-o-twos · May 15, 2018, 5:27pm

Just got a new Mark1 and am having the same problem. Is the only known solution still jacking into the device directly?

Thanks!

KathyReid · May 15, 2018, 5:36pm

Hi there @Pair-o-twos sorry to hear you’re encountering this issue as well. Enabling ssh via the button on the Mark 1 should work, if it doesn’t then check the following:

that you can ping the Device on your network;

kathyreid@kathyreid-N76VZ:~$ ping 192.168.0.2
PING 192.168.0.2 (192.168.0.2) 56(84) bytes of data.
64 bytes from 192.168.0.2: icmp_seq=1 ttl=64 time=7.27 ms
64 bytes from 192.168.0.2: icmp_seq=2 ttl=64 time=5.54 ms
64 bytes from 192.168.0.2: icmp_seq=3 ttl=64 time=5.29 ms

That you don’t have any configurations on your router or switch that would block port 22

If the above two things are OK, and it won’t enable via the button then unfortunately the only way to enable SSH is to jack in directly and follow the instructions above

Pair-o-twos · May 16, 2018, 1:18am

It is probably me! I googled for Mycroft SSH and found this thread, not realizing that A) documentation was provided for a reason, and B) it can be found online as well ( https://mycroft.ai/documentation/mark-1/ ). Long story short, I didn’t realize the button was a dial as well

KathyReid · May 16, 2018, 3:57am

All good, the main thing is you’re up and working!