My Router - Part 6
Tang, OpenSSH, VLMCSD, Peanut
Tang
Running a Tang server on OpenWrt allows you to set up Network-Bound Disk Encryption (NBDE) using a lightweight router instead of a full Linux server. Let’s install and configure Tang:
1
2
3
4
apk add tang
uci set tang.config.enabled='1'
uci commit
service tang restart
That’s all you need for the server side. For client side instructions, I suggest reading Network Bound Disk Encryption with clevis and tang on OpenWRT, as that website is very helpful.
Replace DropBear with OpenSSH
Peanut
Peanut is a bash script that sorts the IP address:port combos by ports for all services that are listening via TCP. Here is a screenshot of the output of the script, which lists the services running on my router at this point in time: 
If you don’t have the XPtsp repository installed, go here and add it before executing this next command. Let’s install it:
1
apk add peanut
VLMCSD
Not gonna elaborate. Do your research. Nuff said. Let’s install and configure it:
1
2
3
4
apk add vlmcsd
uci add_list dhcp.@dnsmasq[0].srv_host='_vlmcs._tcp.lan,OpenWrt.lan,1688,0,100'
uci commit
service dnsmasq restart