Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
Wiki Replica
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Container Registry
Model registry
Operate
Environments
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
The Tor Project
TPA
Wiki Replica
Commits
015df496
Verified
Commit
015df496
authored
5 years ago
by
anarcat
Browse files
Options
Downloads
Patches
Plain Diff
forcibly set the hostname in the beginning
We were assuming the disk setup would, which is counter intuitive.
parent
48362654
No related branches found
Branches containing commit
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
tsa/howto/new-machine-hetzner-robot.mdwn
+14
-10
14 additions, 10 deletions
tsa/howto/new-machine-hetzner-robot.mdwn
with
14 additions
and
10 deletions
tsa/howto/new-machine-hetzner-robot.mdwn
+
14
−
10
View file @
015df496
...
...
@@ -56,7 +56,11 @@ which we'll use below.
perl -MMIME::Base64 -e '$h = unpack("H*", decode_base64(<>)); $h =~ s/(..)(?=.)/\1:/g; print $h, "\n"'
2. Partition disks. This might vary wildly between hosts, but in
2. Set a hostname (short version, not the FQDN):
echo -n 'New hostname: ' && read hn && hostname "$hn" && exec bash
3. Partition disks. This might vary wildly between hosts, but in
general, we want:
* GPT partitionning, with space for a 8MB grub partition and
...
...
@@ -77,7 +81,7 @@ which we'll use below.
Check that the master hash matches what you expect
`(cd tsa-misc && git show-ref master)`.
3
. Install the system. This can be done with `grml-debootstrap` which
4
. Install the system. This can be done with `grml-debootstrap` which
will also configure grub, a root password and so on. This should
get you started, assuming the formatted root disk is mounted on
`/target`:
...
...
@@ -114,7 +118,7 @@ which we'll use below.
umount /target/run/udev /target/run
4
. Once the bootstrapping is complete, you still need to make sure
5
. Once the bootstrapping is complete, you still need to make sure
the system can boot as, the above doesn't (unfortunately)
configure everything for you. First, make a reasonable etc/fstab:
...
...
@@ -132,23 +136,23 @@ which we'll use below.
cd /target && bash /root/tsa-misc/installer/tor-install-luks-setup
6
. Review the crypto configuration:
8
. Review the crypto configuration:
cat /target/etc/crypttab
If the backing device is *NOT* an SSD, remove the `,discard` option.
7
. mount the helper filesystems once more
9
. mount the helper filesystems once more
for fs in dev proc run sys ; do
mount -o bind /$fs "/target/$fs";
done
8
. Do the same with the RAID configuration, probably with something like:
10
. Do the same with the RAID configuration, probably with something like:
chroot /target sh -c "/usr/share/mdadm/mkconf > /etc/mdadm/mdadm.conf"
9
. install grub on any secondary disk, for instance
11
. install grub on any secondary disk, for instance
chroot /target grub-install /dev/nvme1n1
...
...
@@ -183,15 +187,15 @@ which we'll use below.
umount /target/boot
cd / && umount /target
1
4
. close things
1
5
. close things
vgchange -a n
cryptsetup luksClose cpv_nvme
for i in /dev/md/*; do mdadm --stop $i; done
1
5
. Document the LUKS passphrase and root password in `tor-passwords`
1
6
. Document the LUKS passphrase and root password in `tor-passwords`
1
6
. Cross fingers and reboot:
1
7
. Cross fingers and reboot:
reboot
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment