Victron CCGX Root Access: How to Enable SSH

Key Takeaways

• Enabling root access gives full control over your GX device but carries significant risks, including potentially bricking the unit.
• Always set a strong root password with a minimum of 6 characters before enabling SSH access.
• Changes made to the root file system (rootfs) will be lost during a firmware update, and the root password will be reset.
• Consider using a Raspberry Pi for Venus OS experiments to avoid damaging your production GX device.

How do I enable root access and SSH on my Victron CCGX?

You enable root access and SSH on your Victron CCGX by navigating to the device's settings menu and activating the SSH on LAN option. This process involves setting a root password and, for older Venus OS versions, enabling Remote Support. Proceed with caution, as improper use of root access can lead to device malfunction.

Enabling SSH and Root Access on Your GX Device

Enabling root access via SSH allows advanced users to interact directly with the Venus OS running on their Victron GX device. This is useful for custom scripts or in-depth diagnostics.

Step-by-step guide to enable SSH:

1. Access the GX Device Interface: Navigate to the local user interface of your GX device (e.g., CCGX, Cerbo GX). This can typically be done via the device's display or through the Remote Console feature.
2. Set the Root Password:

• • Go to Settings -> General.
  • Select Set root password.
  • Enter a new password. The password must be a minimum of 6 characters. Remember this password, as it is required for SSH login.

3. Enable SSH on LAN:

• • Go to Settings -> General.
  • Find the SSH on LAN option and set it to Enabled.
  • For Venus OS versions before v2.40, you may need to enable Remote Support instead, which also activates sshd.

4. Enable Modifications (Optional, for advanced users):

• • If you plan to install custom scripts or make persistent changes, you might need to enable Modifications enabled in the settings. Be aware that changes to the root file system are lost during firmware updates.

5. Connect via SSH Client:

• • Once SSH is enabled, you can connect from a computer on the same local area network (LAN).
  • For Linux/Mac: Open a terminal and use the command ssh root@<IP_address_of_GX_device>. For example, ssh root@192.168.1.23.
  • For Windows: Download and use an SSH client like Putty. Enter the GX device's IP address and select SSH as the connection type.
  • When prompted, enter the root password you set in Step 2.

6. SSH Key Authentication (Advanced): For enhanced security, you can copy a public SSH key to ~/.ssh/authorized_keys on the GX device. This allows password-less login using your private key.

Configuration Settings for Root Access

Understanding SSH and Firmware Updates

SSH (Secure Shell) provides a secure way to access the command line of your GX device. When you enable SSH on LAN, you are activating a service that listens for incoming connections.

It is important to understand how firmware updates interact with root access:

• Root Password Reset: The root password will be reset by a firmware update. You will need to set it again after an update.
• Root File System Changes: By default, the root file system (rootfs) is mounted read-only. Any changes made to the rootfs will be lost in case of a firmware update. This means custom scripts or modifications to system files need to be re-applied or managed carefully after an update.

Safety: Risks of Root Access

Enabling root access on your Victron GX device carries significant risks. It is possible to brick your GX device if files crucial for the boot process are accidentally removed or corrupted. If a device becomes bricked, it may enter a state from which there is no documentation nor support on how to recover.

• Data Partition Issues: Problems on the data partition (e.g., full, invalid settings, custom scripts) can also cause issues, including the device failing to boot. While a factory reset procedure removes everything from the data partition except for factory-installed files, it will not recover from all possible mistakes made with root access.
• Experimentation: Victron Energy strongly recommends that you do Venus OS experiments on a Raspberry Pi rather than a real GX device. This allows you to re-image the SD card easily if something goes wrong, minimizing the risk to your operational system.

When to call a technician instead

If you are uncomfortable with command-line interfaces, file system navigation, or the potential risks of bricking your device, it is best to avoid enabling root access. Unauthorized modifications or attempts to recover a bricked device may void your warranty or incur significant repair costs. If your GX device is experiencing issues that you suspect require advanced diagnostics, contact a qualified Victron Energy installer or support technician. They have the tools and expertise to diagnose and resolve complex problems without risking device integrity.