Verified Commit 58393dc8 authored by anarcat's avatar anarcat 💥
Browse files

review pre-requisites again 

tsa-misc is not exactly a pre-requisite: none of the installers
currently deploy it, and it might eventually go away if we go the
"remote bootstrap" way.
parent b01038e4

tsa/howto/new-machine.mdwn

+21 −12
Original line number Diff line number Diff line
@@ -39,35 +39,44 @@ The following sites are not documented yet: 
Post-install configuration

--------------------------



The post-install configuration takes care of bootstrapping Puppet,

basically, and everything else follows from there.

The post-install configuration mostly takes care of bootstrapping

Puppet and everything else follows from there. There are, however,

still some unrelated manual steps but those should eventually all be

automated (see [ticket #31239](https://trac.torproject.org/projects/tor/ticket/31239) for details of that work).



### Pre-requisites



It assumes the following steps have already been taken by the above

installer:

The procedure below assumes the following steps have already been

taken by the installer:



 1. a hostname has been set, picked from the [[doc/naming-scheme]]

 0. partitions have been correctly setup, including some (>=1GB) swap

    space (or at least a swap file) and a `tmpfs` in `/tmp`



 2. a public IP address has been set and the host is available over

 1. a minimal Debian install has been booted



 2. a hostname has been set, picked from the [[doc/naming-scheme]]



 3. a public IP address has been set and the host is available over

    SSH on that IP address



 3. the machine has a short hostname (e.g. `test`) which resolves to a

 4. the machine has a short hostname (e.g. `test`) which resolves to a

    fully qualified domain name (e.g. `test.torproject.org`) in the

    `torproject.org` domain (i.e. `/etc/hosts` is correctly configured)



 4. DNS works on the machine (i.e. `/etc/resolv.conf` is correctly

 5. DNS works on the machine (i.e. `/etc/resolv.conf` is correctly

    configured)



 5. the `tsa-misc` git repository is available on the machine



### Main procedure



All commands to be run as root unless otherwise noted.



 2. allocate and document the machine in the [Nextcloud

 1. allocate and document the machine in the [Nextcloud

    spreadsheet](https://nc.torproject.net/apps/onlyoffice/5395), and the [services page](https://trac.torproject.org/projects/tor/wiki/org/operations/services), if it's a new service



 2. clone the `tsa-misc` git repository on the machine:

 

        git clone https://git.torproject.org/admin/tsa-misc.git



 3. set new root password, and document it



 5. add to ldap on `alberti` using: