iterate on new-machine-hetzner-robot.mdwn

tsa/howto/new-machine-hetzner-robot.mdwn

@@ -112,6 +112,8 @@ which we'll use below.
             --password "$ROOTPASSWORD" \
             --remove-configs --defaultinterfaces
 
+        umount /target/run/udev /target/run
+
  4. Once the bootstrapping is complete, you still need to make sure
     the system can boot as, the above doesn't (unfortunately)
     configure everything for you. First, make a reasonable etc/fstab:
@@ -129,25 +131,25 @@ which we'll use below.
     repository.
     cd /target && bash /root/tsa-misc/scripts/tor-install-luks-setup
 
- 5. Review the crypto configuration:
+ 6. Review the crypto configuration:
 
         cat /target/etc/crypttab
 
- 6. mount the helper filesystems once more
+ 7. mount the helper filesystems once more
 
         for fs in dev proc run sys  ; do
           mount -o bind /$fs "/target/$fs";
         done
 
- 7. Do the same with the RAID configuration, probably with something like:
+ 8. Do the same with the RAID configuration, probably with something like:
 
         chroot /target sh -c "/usr/share/mdadm/mkconf > /etc/mdadm/mdadm.conf"
 
- 8. install grub on any secondary disk, for instance
+ 9. install grub on any secondary disk, for instance
 
         chroot /target grub-install /dev/nvme1n1
 
- 9. Review the network configuration:
+ 10. Review the network configuration:
 
         cat /target/etc/network/interfaces
 
@@ -158,19 +160,19 @@ which we'll use below.
         allow-hotplug eth0
         iface eth0 inet dhcp
 
- 10. Copy paste your key into the root's authorized keys, just to make
+ 11. Copy paste your key into the root's authorized keys, just to make
     sure you can login:
 
         mkdir -p /target/root/.ssh/ &&
         cp /root/.ssh/authorized_keys /target/root/.ssh/authorized_keys
 
- 11. If any of those latter things changed, you need to regenerate the
+ 12. If any of those latter things changed, you need to regenerate the
     initramfs:
 
         chroot /target update-initramfs -u
         chroot /target update-grub
 
- 12. umount things
+ 13. umount things
         umount /target/run/udev
         for fs in dev proc run sys  ; do
             umount /target/$fs
@@ -178,15 +180,15 @@ which we'll use below.
         umount /target/boot
         cd / && umount /target
 
- 13. close things
+ 14. close things
 
         vgchange -a n
         cryptsetup luksClose cpv_nvme
         for i in /dev/md/*; do mdadm --stop $i; done
 
- 14. Document the LUKS passphrase and root password in `tor-passwords`
+ 15. Document the LUKS passphrase and root password in `tor-passwords`
 
- 15. Cross fingers and reboot:
+ 16. Cross fingers and reboot:
 
         reboot