Initial Configuration

This section covers the first boot, initial SSH access, basic security hardening, and network setup for Lichee-Jack.

First Boot & SSH Login

On the first power-on, make sure the mode switch is set to mode 0 (debug).

Lichee-Jack exposes a USB CDC-NCM network interface to the host.

Default credentials:

• root password: toor
• debian password: licheejack

Connect via USB (CDC-NCM)

After plugging in the USB cable, your host should receive an IP automatically.

ssh root@10.42.0.1

(Optional) Copy your SSH public key:

ssh-copy-id root@10.42.0.1

Recommended: Always use SSH keys instead of password authentication.

Change Default Passwords (Strongly Recommended)

Leaving default credentials is a critical security risk.

Change root password

passwd

Change debian user password

su debian
passwd

Non-interactive method (for automation)

echo "debian:NEW_PASSWORD" | chpasswd

Wi-Fi Setup (Optional)

Lichee-Jack uses NetworkManager.

TUI (recommended)

nmtui

• Select Activate a connection
• Create or edit a Wi-Fi profile
• Connect and verify

CLI (manual)

nmcli device wifi list
nmcli device wifi connect "SSID_NAME" password "WIFI_PASSWORD"

Check status:

nmcli device status

System Update (⚠️ Read Carefully)

Update package lists:

apt update

Check available upgrades:

apt list --upgradable -a

Safe Upgrade Method

Manually upgrade userland packages only:

apt upgrade PACKAGE_NAME

Or explicitly hold kernel-related packages:

apt-mark hold linux-image-* linux-headers-* initramfs*