Showing posts with label secure. Show all posts
Showing posts with label secure. Show all posts

Sunday, January 5, 2014

Howto build secure bitcoin system

Few steps to make good secure system

1. Download ubuntu-12.04 and make a bootable usb;
2. Pull out network cabel (or wifi)
3. Boot
4. After loading, switch to console Ctrl+Alt+F1:



5. Login as root with $ sudo su and mount another storage (for example microsd card or usb) with:
  • clearing script
  • fluxbox (or other light window manager you like)
  • bitcoin-qt and blockchain

6. Cut all not-needed processes with killall and rm

Here is simple clearing script doing this:

#!/bin/bash

rm /usr/sbin/atd
rm /usr/sbin/cron
rm /usr/sbin/acpid
rm /usr/sbin/cupsd
rm /usr/bin/whoopsie
rm /usr/bin/ibus-daemon
rm /usr/sbin/rsyslogd
rm /usr/sbin/bluetoothd
rm /usr/sbin/console-kit-daemon
rm /sbin/upstart-socket-bridge
rm /sbin/upstart-udev-bridge
rm /sbin/udevd
rm /bin/dbus-daemon

killall ibus-daemon
killall goa-daemon
killall jockey-backend
killall ubuntuone-login
killall geoclue-master
killall mission-control
killall bamfdaemon
killall gnome-keyring-daemon
killall unity-panel-ser
killall zeitgeist-daemon
killall zeitgeist-ft
killall whoopsie
killall modem-manager
killall cupsd
killall NetworkManager
killall bluetoothd
killall polkitd
killall console-kit-daemon
killall upowerd
killall pulseaudio
killall colord
killall dbus-daemon
killall atd
killall cron
killall rtkit-daemon
killall -9 compiz
killall upstart-socket-bridge
killall upstart-udev-bridge
killall rsyslogd
killall Xorg
killall irqbalance
killall udevd
killall acpid
sleep 2
killall Xorg

echo "nameserver 8.8.8.8" > /etc/resolv.conf
ifconfig eth0 192.168.1.2
route add default gw 192.168.1.1

Now pstree must show much less:



7. Pull in network cabel
8. install fluxbox
9. Switch to second console Ctrl+Alt+F2 and run it:  
$ xinit /usr/bin/fluxbox



10. Now you can start bitcoin-qt


Final processes should be:



For further information also check http://bitcoinsecurity.com/

Thank you for reading

Donations are accepted here: 1NvbfPUNhvTnJKw89yjDfZX4kr23v8fzHm

Please, leave a comment for any questions or improvements for this arcticle