SSH - Revision history

imported_>bad_habit: /* Server */

2011-12-01T22:08:01Z

Server

← Older revision		Revision as of 22:08, 1 December 2011
Line 46:		Line 46:

	Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])		Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])

			Wi-Fi power-management leads to annoying input lags and can be turned off using a long Settings applet dialog only. There is a dirty [http://talk.maemo.org/showthread.php?t=80529 workaround].

	=== SCP ===		=== SCP ===

imported_>sup: /* Extra security AND convenience */

2011-11-28T10:40:49Z

Extra security AND convenience

← Older revision		Revision as of 10:40, 28 November 2011
Line 96:		Line 96:
	ssh <user>@<hostname_or_ip_address>		ssh <user>@<hostname_or_ip_address>
	and you should just get a shell login. If usernames on local and remote machine match you can omit the <code>user@</code> part.		and you should just get a shell login. If usernames on local and remote machine match you can omit the <code>user@</code> part.

			A more step-by-step stupid-proof howto is here: http://talk.maemo.org/showthread.php?t=41547

	=== VPN, tunneling ===		=== VPN, tunneling ===

imported_>lkravovicz: /* Dropbear */ manually installing openssh-server's sftp-server with Dropbear

2011-07-24T15:35:08Z

Dropbear: manually installing openssh-server's sftp-server with Dropbear

← Older revision		Revision as of 15:35, 24 July 2011
Line 18:		Line 18:

	[http://maemo.org/packages/view/dropbear/ Dropbear] is an alternative ssh client/server package which uses less disk/memory.		[http://maemo.org/packages/view/dropbear/ Dropbear] is an alternative ssh client/server package which uses less disk/memory.

			If you need SFTP server functionality with Dropbear, slight manual installation work is needed. Dropbear doesn't come with an SFTP server, so we're going to use OpenSSH's. You cannot install both packages simultaneously, that's why we're doing it by hand.

			Find latest openssh-server armel package (Fremantle for N900) from http://maemo.org/packages/view/openssh-server, then fire up Terminal:

			$ root
			# wget http://repository.maemo.org/pool/maemo5.0/free/o/openssh/openssh-server_<latest-version-here>_armel.deb
			# dpkg-deb --extract openssh-server_<latest-version-here>_armel.deb ./openssh-server
			# cp -av ./openssh-server/usr/lib /usr
			# rm -rf ./openssh-server

	== On-device Usage ==		== On-device Usage ==

imported_>travla: /* Usage */

2010-10-31T11:45:43Z

Usage

← Older revision		Revision as of 11:45, 31 October 2010
Line 54:		Line 54:
	# If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save.		# If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save.
	# Press Open and enter the name of the user you wish to connect as when prompted. (<code>root</code> is commonly used)		# Press Open and enter the name of the user you wish to connect as when prompted. (<code>root</code> is commonly used)


	PuTTY may be downloaded from http://www.chiark.greenend.org.uk/~sgtatham/putty/.		PuTTY may be downloaded from http://www.chiark.greenend.org.uk/~sgtatham/putty/.

imported_>travla: /* Usage */

2010-10-31T11:45:25Z

Usage

← Older revision		Revision as of 11:45, 31 October 2010
Line 54:		Line 54:
	# If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save.		# If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save.
	# Press Open and enter the name of the user you wish to connect as when prompted. (<code>root</code> is commonly used)		# Press Open and enter the name of the user you wish to connect as when prompted. (<code>root</code> is commonly used)

			PuTTY may be downloaded from http://www.chiark.greenend.org.uk/~sgtatham/putty/.

	=== Extra security AND convenience ===		=== Extra security AND convenience ===

imported_>travla: /* PuTTY */

2010-10-31T11:43:47Z

PuTTY

← Older revision		Revision as of 11:43, 31 October 2010
Line 87:		Line 87:

	Please see howto [http://www.undeadly.org/cgi?action=article&sid=20090903183235 Tunneling out of corporate networks (Part 1)]. Alternatively, [[reverse ssh]] may be useful.		Please see howto [http://www.undeadly.org/cgi?action=article&sid=20090903183235 Tunneling out of corporate networks (Part 1)]. Alternatively, [[reverse ssh]] may be useful.

			== WinSCP ==

			WinSCP is an open source client (SCP, SFTP & FTP) for Windows. Its main function is the secure file transfer between a local and a remote computer. It uses Secure Shell (SSH) and supports, in addition to Secure FTP, also legacy SCP protocol.

			WinSCP simplifies file transfer between your desktop and N900 by providing a graphical frontend (similar to many FTP progams). Login via SSH is performed in exactly the same way as PuTTY.

			WinSCP may be downloaded from http://sourceforge.net/projects/winscp/.

	[[Category:Users]]		[[Category:Users]]
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:Power users]]		[[Category:Power users]]

imported_>amigadave: use `, wikify slightly`


2010-08-25T13:52:50Z
use <code>, wikify slightly

				
				
				
				
				
				← Older revision
				Revision as of 13:52, 25 August 2010
				
Line 3:
Line 3:
#Administrating remote computers such as servers by using the device over a secure connection instead of plain-text. #Administrating remote computers such as servers by using the device over a secure connection instead of plain-text.
#When performing console operations one may stumble upon limits such as text-input, battery life, raw horsepower, or available software. #When performing console operations one may stumble upon limits such as text-input, battery life, raw horsepower, or available software.
#Some applications require a better network connection than device provides. E.g. a colocated 100 mbit server running 24/7 is usually both faster as well as more reliable than a device on WiFi or 3G. #Some applications require a better network connection than device provides. E.g. a colocated 100 Mbit server running 24/7 is usually both faster as well as more reliable than a device on WiFi or 3G.
#Combined with a terminal emulator supporting detaching such as screen or dtach an application remains running after network connection is gone, device is unpowered. #Combined with a terminal emulator supporting detaching such as screen or dtach an application remains running after network connection is gone, device is unpowered.
#SSH protocol can be used for remote X11, forwarding, tunneling, [[:wikipedia:Virtual private network|VPN]], port knocking alternative. These are intermediate-advanced topics requiring sufficient background knowledge. #SSH protocol can be used for remote X11, forwarding, tunneling, [[:wikipedia:Virtual private network|VPN]], port knocking alternative. These are intermediate-advanced topics requiring sufficient background knowledge.



== Flavours to install on your device == == Flavours to install on your device ==

=== OpenSSH === === OpenSSH ===



Line 15:
Line 16:



=== Dropbear === === Dropbear ===

[http://maemo.org/packages/view/dropbear/ Dropbear] is an alternative ssh client/server package which uses less disk/memory. [http://maemo.org/packages/view/dropbear/ Dropbear] is an alternative ssh client/server package which uses less disk/memory.



Line 43:
Line 45:
== PuTTY == == PuTTY ==



PuTTY is a client for the SSH & [the abysmally insecure] Telnet protocols. It is a popular client for Microsoft Windows, *Nix Operating Systems with ports even existing for Symbian phones, Windows Mobile and even the internet tablet itself. It can be used to connect to a tablet running OpenSSH to get a remote shell. PuTTY is a client for the SSH and Telnet protocols. It is a popular client for Microsoft Windows, *Nix Operating Systems with ports even existing for Symbian phones, Windows Mobile and even the internet tablet itself. It can be used to connect to a tablet running OpenSSH to get a remote shell.



=== Usage === === Usage ===



# Load up PuTTY on the machine you want to connect to the tablet from. You should see the window titled "PuTTY Configuration" and the "Session" category selected. # Load up PuTTY on the machine you want to connect to the tablet from. You should see the window titled "PuTTY Configuration" and the "Session" category selected.
# Ensure "SSH" is selected as the "Connection type:" and enter <code>the tablet's ip</code> in the "Host Name (or IP address)" section. # Ensure "SSH" is selected as the "Connection type:" and enter the tablet's IP address in the "Host Name (or IP address)" section.
# ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required. # ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required.
# If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save. # If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save.
# Press Open and enter the name of the user you wish to connect as when prompted. (root is commonly used) # Press Open and enter the name of the user you wish to connect as when prompted. (<code>root</code> is commonly used)



=== Extra security AND convenience === === Extra security AND convenience ===

It is fairly easy to generate a secure key to allow key-based authentication to the device. Provided you keep the key secure this is more secure than using a UNIX password (PAM). It is fairly easy to generate a secure key to allow key-based authentication to the device. Provided you keep the key secure this is more secure than using a UNIX password (PAM).



Line 59:
Line 62:



On the device you need to create a directory in the appropriate users home directory: On the device you need to create a directory in the appropriate users home directory:
  cd  cd
  mkdir .ssh  mkdir .ssh
  chmod 700 .ssh  chmod 700 .ssh



Back on the remote *NIX computer run the following command: Back on the remote *NIX computer run the following command:
  ssh-keygen -t rsa  ssh-keygen -t rsa
You'll find a file in your home directory called .ssh/id_rsa.pub and .ssh/id_rsa You'll find a file in your home directory called <code>.ssh/id_rsa.pub</code> and <code>.ssh/id_rsa</code>. The .pub one is allowed out in public - you give it to other machines. The other one must be kept private.
The .pub one is allowed out in public - you give it to other machines. The other one must be kept private. 



In the case your private key is stolen (ie. device stolen) the perpetrator has access to your machine without requiring a password. It is therefore recommended to use a password when issuing ssh-keygen command. Note this password must [i]not[/i] be the same as your UNIX password. In the case your private key is stolen (ie. device stolen) the perpetrator has access to your machine without requiring a password. It is therefore recommended to use a password when issuing the <code>ssh-keygen</code> command. Note this password should ''not'' be the same as your UNIX password.



Then if you use OpenSSH: Then if you use OpenSSH:
  su -c "scp .ssh/id_rsa.pub <user>@<hostname_or_ip_address:/home/user/.ssh/authorized_keys2"   su -c "scp .ssh/id_rsa.pub <user>@<hostname_or_ip_address:/home/user/.ssh/authorized_keys2"
alternatively, use ssh-copy-id (it makes sure all permissions are correct on the receiving end): alternatively, use <code>ssh-copy-id</code> (it makes sure all permissions are correct on the receiving end):
  ssh-copy-id -i .ssh/id_rsa.pub <user>@<hostname_or_ip_address>   ssh-copy-id -i .ssh/id_rsa.pub <user>@<hostname_or_ip_address>
For dropbear: For dropbear:
Line 83:
Line 85:



=== VPN, tunneling === === VPN, tunneling ===

Please see howto [http://www.undeadly.org/cgi?action=article&sid=20090903183235 Tunneling out of corporate networks (Part 1)]. Alternatively, [[reverse ssh]] may be useful. Please see howto [http://www.undeadly.org/cgi?action=article&sid=20090903183235 Tunneling out of corporate networks (Part 1)]. Alternatively, [[reverse ssh]] may be useful.



imported_>amigadave: /* On-device Usage */ add scp
2010-06-28T10:31:28Z
On-device Usage:  add scp

				
				
				
				
				
				← Older revision
				Revision as of 10:31, 28 June 2010
				
Line 34:
Line 34:



Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug]) Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])

=== SCP ===

To copy a file from one host to another over an SSH connection, use [[:wikipedia:Secure_copy#SCP_program|scp]]:

 scp user@server-ip:/home/user/file /home/user/



== PuTTY == == PuTTY ==



imported_>amigadave: /* Usage */ reformat list
2010-06-28T10:23:47Z
Usage:  reformat list

				
				
				
				
				
				← Older revision
				Revision as of 10:23, 28 June 2010
				
Line 41:
Line 41:
=== Usage === === Usage ===



# Load up PuTTY on the machine you want to connect to the tablet from. # Load up PuTTY on the machine you want to connect to the tablet from. You should see the window titled "PuTTY Configuration" and the "Session" category selected.
## You should see the window titled "PuTTY Configuration" and the "Session" category selected. 
# Ensure "SSH" is selected as the "Connection type:" and enter <code>the tablet's ip</code> in the "Host Name (or IP address)" section. # Ensure "SSH" is selected as the "Connection type:" and enter <code>the tablet's ip</code> in the "Host Name (or IP address)" section.
# ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required. # ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required.



imported_>amigadave: /* On-device Usage */ reformat slightly
2010-06-28T10:22:26Z
On-device Usage:  reformat slightly

				
				
				
				
				
				← Older revision
				Revision as of 10:22, 28 June 2010
				
Line 20:
Line 20:



=== Client === === Client ===
To allow you to use your tablet/phone to connect to other machines. 



You can connect to a remote machine from the tablet by running <code>ssh ''user''@''server ip''</code>. This will give you a remote shell on the server machine. To allow you to use your tablet/phone to connect to other machines. You can connect to a remote machine from the tablet by running
 
 ssh user@server ip
 
which will give you a remote shell on the server machine.



=== Server === === Server ===
To allow other machines to connect to your tablet/phone. 



If you wish to access a shell on the tablet from a remote machine (to edit a local file with a real keyboard, perhaps), then all that you need to do is make sure OpenSSH server is installed on the tablet and <code>ssh root@''tablet ip''</code> To allow other machines to connect to your tablet/phone. If you wish to access a shell on the tablet from a remote machine (to edit a local file with a real keyboard, perhaps), then all that you need to do is make sure OpenSSH server is installed on the tablet and
 
 ssh root@tablet ip



Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug]) Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])

← Older revision		Revision as of 13:52, 25 August 2010
Line 3:		Line 3:
	#Administrating remote computers such as servers by using the device over a secure connection instead of plain-text.		#Administrating remote computers such as servers by using the device over a secure connection instead of plain-text.
	#When performing console operations one may stumble upon limits such as text-input, battery life, raw horsepower, or available software.		#When performing console operations one may stumble upon limits such as text-input, battery life, raw horsepower, or available software.
	#Some applications require a better network connection than device provides. E.g. a colocated 100 ~~mbit~~ server running 24/7 is usually both faster as well as more reliable than a device on WiFi or 3G.		#Some applications require a better network connection than device provides. E.g. a colocated 100 Mbit server running 24/7 is usually both faster as well as more reliable than a device on WiFi or 3G.
	#Combined with a terminal emulator supporting detaching such as screen or dtach an application remains running after network connection is gone, device is unpowered.		#Combined with a terminal emulator supporting detaching such as screen or dtach an application remains running after network connection is gone, device is unpowered.
	#SSH protocol can be used for remote X11, forwarding, tunneling, [[:wikipedia:Virtual private network\|VPN]], port knocking alternative. These are intermediate-advanced topics requiring sufficient background knowledge.		#SSH protocol can be used for remote X11, forwarding, tunneling, [[:wikipedia:Virtual private network\|VPN]], port knocking alternative. These are intermediate-advanced topics requiring sufficient background knowledge.

	== Flavours to install on your device ==		== Flavours to install on your device ==

	=== OpenSSH ===		=== OpenSSH ===

Line 15:		Line 16:

	=== Dropbear ===		=== Dropbear ===

	[http://maemo.org/packages/view/dropbear/ Dropbear] is an alternative ssh client/server package which uses less disk/memory.		[http://maemo.org/packages/view/dropbear/ Dropbear] is an alternative ssh client/server package which uses less disk/memory.

Line 43:		Line 45:
	== PuTTY ==		== PuTTY ==

	PuTTY is a client for the SSH ~~& [the abysmally insecure]~~ Telnet protocols. It is a popular client for Microsoft Windows, *Nix Operating Systems with ports even existing for Symbian phones, Windows Mobile and even the internet tablet itself. It can be used to connect to a tablet running OpenSSH to get a remote shell.		PuTTY is a client for the SSH and Telnet protocols. It is a popular client for Microsoft Windows, *Nix Operating Systems with ports even existing for Symbian phones, Windows Mobile and even the internet tablet itself. It can be used to connect to a tablet running OpenSSH to get a remote shell.

	=== Usage ===		=== Usage ===

	# Load up PuTTY on the machine you want to connect to the tablet from. You should see the window titled "PuTTY Configuration" and the "Session" category selected.		# Load up PuTTY on the machine you want to connect to the tablet from. You should see the window titled "PuTTY Configuration" and the "Session" category selected.
	# Ensure "SSH" is selected as the "Connection type:" and enter ~~<code>~~the tablet's ~~ip</code>~~ in the "Host Name (or IP address)" section.		# Ensure "SSH" is selected as the "Connection type:" and enter the tablet's IP address in the "Host Name (or IP address)" section.
	# ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required.		# ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required.
	# If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save.		# If you want to save these settings for future use to connect to the tablet quickly, add a name in "Saved Sessions" and press Save.
	# Press Open and enter the name of the user you wish to connect as when prompted. (root is commonly used)		# Press Open and enter the name of the user you wish to connect as when prompted. (<code>root</code> is commonly used)

	=== Extra security AND convenience ===		=== Extra security AND convenience ===

	It is fairly easy to generate a secure key to allow key-based authentication to the device. Provided you keep the key secure this is more secure than using a UNIX password (PAM).		It is fairly easy to generate a secure key to allow key-based authentication to the device. Provided you keep the key secure this is more secure than using a UNIX password (PAM).

Line 59:		Line 62:

	On the device you need to create a directory in the appropriate users home directory:		On the device you need to create a directory in the appropriate users home directory:
	cd		cd
	mkdir .ssh		mkdir .ssh
	chmod 700 .ssh		chmod 700 .ssh

	Back on the remote *NIX computer run the following command:		Back on the remote *NIX computer run the following command:
	ssh-keygen -t rsa		ssh-keygen -t rsa
	You'll find a file in your home directory called .ssh/id_rsa.pub and .ssh/id_rsa		You'll find a file in your home directory called <code>.ssh/id_rsa.pub</code> and <code>.ssh/id_rsa</code>. The .pub one is allowed out in public - you give it to other machines. The other one must be kept private.
	The .pub one is allowed out in public - you give it to other machines. The other one must be kept private.

	In the case your private key is stolen (ie. device stolen) the perpetrator has access to your machine without requiring a password. It is therefore recommended to use a password when issuing ssh-keygen command. Note this password ~~must [i]~~not~~[/i]~~ be the same as your UNIX password.		In the case your private key is stolen (ie. device stolen) the perpetrator has access to your machine without requiring a password. It is therefore recommended to use a password when issuing the <code>ssh-keygen</code> command. Note this password should ''not'' be the same as your UNIX password.

	Then if you use OpenSSH:		Then if you use OpenSSH:
	su -c "scp .ssh/id_rsa.pub <user>@<hostname_or_ip_address:/home/user/.ssh/authorized_keys2"		su -c "scp .ssh/id_rsa.pub <user>@<hostname_or_ip_address:/home/user/.ssh/authorized_keys2"
	alternatively, use ssh-copy-id (it makes sure all permissions are correct on the receiving end):		alternatively, use <code>ssh-copy-id</code> (it makes sure all permissions are correct on the receiving end):
	ssh-copy-id -i .ssh/id_rsa.pub <user>@<hostname_or_ip_address>		ssh-copy-id -i .ssh/id_rsa.pub <user>@<hostname_or_ip_address>
	For dropbear:		For dropbear:
Line 83:		Line 85:

	=== VPN, tunneling ===		=== VPN, tunneling ===

	Please see howto [http://www.undeadly.org/cgi?action=article&sid=20090903183235 Tunneling out of corporate networks (Part 1)]. Alternatively, [[reverse ssh]] may be useful.		Please see howto [http://www.undeadly.org/cgi?action=article&sid=20090903183235 Tunneling out of corporate networks (Part 1)]. Alternatively, [[reverse ssh]] may be useful.

← Older revision		Revision as of 10:31, 28 June 2010
Line 34:		Line 34:

	Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])		Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])

			=== SCP ===

			To copy a file from one host to another over an SSH connection, use [[:wikipedia:Secure_copy#SCP_program\|scp]]:

			scp user@server-ip:/home/user/file /home/user/

	== PuTTY ==		== PuTTY ==

← Older revision		Revision as of 10:23, 28 June 2010
Line 41:		Line 41:
	=== Usage ===		=== Usage ===

	# Load up PuTTY on the machine you want to connect to the tablet from.		# Load up PuTTY on the machine you want to connect to the tablet from. You should see the window titled "PuTTY Configuration" and the "Session" category selected.
	## You should see the window titled "PuTTY Configuration" and the "Session" category selected.
	# Ensure "SSH" is selected as the "Connection type:" and enter <code>the tablet's ip</code> in the "Host Name (or IP address)" section.		# Ensure "SSH" is selected as the "Connection type:" and enter <code>the tablet's ip</code> in the "Host Name (or IP address)" section.
	# ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required.		# ''If'' you need to change any other settings out of necessity or personal preference for example, go and change settings as required.

← Older revision		Revision as of 10:22, 28 June 2010
Line 20:		Line 20:

	=== Client ===		=== Client ===
	~~To allow you to use your tablet/phone to connect to other machines.~~

	You can connect to a remote machine from the tablet by running ~~<code>~~ssh ''user''@''server ip~~''</code>. This~~ will give you a remote shell on the server machine.		To allow you to use your tablet/phone to connect to other machines. You can connect to a remote machine from the tablet by running

			ssh user@server ip

			which will give you a remote shell on the server machine.

	=== Server ===		=== Server ===
	~~To allow other machines to connect to your tablet/phone.~~

	If you wish to access a shell on the tablet from a remote machine (to edit a local file with a real keyboard, perhaps), then all that you need to do is make sure OpenSSH server is installed on the tablet and ~~<code>~~ssh root@''tablet ip~~''</code>~~		To allow other machines to connect to your tablet/phone. If you wish to access a shell on the tablet from a remote machine (to edit a local file with a real keyboard, perhaps), then all that you need to do is make sure OpenSSH server is installed on the tablet and

			ssh root@tablet ip

	Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])		Note that N900's are called "Nokia-N900-41-10" if allocated an IP address via DHCP (see [https://bugs.maemo.org/show_bug.cgi?id=2758 this bug])

SSH - Revision history

imported_>bad_habit: /* Server */

imported_>sup: /* Extra security AND convenience */

imported_>lkravovicz: /* Dropbear */ manually installing openssh-server's sftp-server with Dropbear

imported_>travla: /* Usage */

imported_>travla: /* Usage */

imported_>travla: /* PuTTY */

imported_>amigadave: use , wikify slightly

imported_>amigadave: /* On-device Usage */ add scp

imported_>amigadave: /* Usage */ reformat list

imported_>amigadave: /* On-device Usage */ reformat slightly

imported_>amigadave: use `, wikify slightly`