Magnet downloader
This application has just one purpose: download torrents and sftp them to another machine., (*1)
Install the application
You can CLI tool globally for your user, using composers global feature., (*2)
composer global install afk11/magnetdl
It can be upgraded using: composer global update, (*3)
NB: You need to add ~/.composer/bin to your $PATH for the application to be found., (*4)
echo "export PATH=~/.composer/vendor/bin:\$PATH" >> ~/.bashrc
source ~/.bashrc # this is done automatically when you log in
Commands:
-
magnetdl [magnet url]: Starts upload procedure
-
magnetdlconfig: Print a default config file to STDOUT
Install as a library
Add an entry to your composer.json, or run this in your proect directory:, (*5)
compose require afk11/magnetdl
Configuration:
You need to configure the software to run it. After installing globally run these:, (*6)
mkdir /home/you/.magnetdl
magnetdlconfig > /home/you/.magnetdl/config.json
nano /home/you/.magnetdl/config.json
Set up the config values and you're good to go!, (*7)
Setup Requirements
You will need:
- your local machine, running transmission-daemon with the RPC configured.
- remote machine with SSH (via keyfile authentication), with some folder you want to write to.
om o
Disclaimer:
The software expects an unencrypted private key as an identity file,
as we use exec() and can't provide an additional password.
If you're worried about compromising the remote machine, the following
instructions should help lock things down., (*8)
- Create a group for your user:
shared-jail
- Create a new user:
youruser, and add him to the shared-jail group: usermod -a -G shared-jail youruser
- Create an SSH key on your local system, and add the public key to the remote users
/home/youruser/.ssh/authorized_keys file.
- Check you can login via SSH from the remote machine: `ssh youruser@yourhost -i /path/to/privatekey
- Create a basic chroot skeleton, and expose the folder you want to upload to using
mount --bind /sharedfiles /chroot/sharedfiles. You may need a home directory, but it can be empty.
-
To auto-bind the shared files to the chroot on startup, add this to /etc/fstab., (*9)
/sharedfiles /chroot/sharedfiles none bind, (*10)
Be cautious with this one, errors can cause systems not to boot., (*11)
-
Add this to the very bottom of your sshd_config:, (*12)
Match Group shared-jail
ChrootDirectory %h
ForceCommand internal-sftp
AllowTcpForwarding no, (*13)
- Before you log out from the remote system, do
service ssh restart.
- Try log in over SSH, you should now get: 'This service allows SFTP connections only.'
-
Try log in over sftp: sftp youruser@yourhost -oIdentityFile=/path/to/privatekey and check you're in the chroot, and the folder is accessible., (*14)
TLDR: Someone with the key can log into the chroot only, and can do anything with the files depending on file permissions., (*15)
Wallogit.com
