Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
Wiki Replica
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Container Registry
Model registry
Operate
Environments
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
The Tor Project
TPA
Wiki Replica
Commits
eab16ad7
Unverified
Commit
eab16ad7
authored
4 years ago
by
anarcat
Browse files
Options
Downloads
Patches
Plain Diff
make fabric procedure the official robot proc
parent
92b2db85
No related branches found
Branches containing commit
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
tsa/howto/new-machine-hetzner-robot.mdwn
+48
-29
48 additions, 29 deletions
tsa/howto/new-machine-hetzner-robot.mdwn
with
48 additions
and
29 deletions
tsa/howto/new-machine-hetzner-robot.mdwn
+
48
−
29
View file @
eab16ad7
...
...
@@ -30,8 +30,54 @@ able to proceed with the install.
Ordering physical servers from Hetzner can be very fast: we've seen 2
minutes turn around times.
Install
-------
Semi-automated install
----------------------
At this point you should have received an email from Hetzner with a
subject like:
Subject: Your ordered SX62 server
It should contain the SSH fingerprint, and IP address of the new host
which we'll use below. The machine can be bootstrapped with a basic
Debian installer with the [[Fabric]] code in the `tsa-misc` git
repository. Here's an example of a commandline:
./install -H root@88.99.194.57 \
--fingerprint 0d:4a:c0:85:c4:e1:fe:03:15:e0:99:fe:7d:cc:34:f7 \
--verbose \
hetzner-robot \
--fqdn=HOSTNAME.torproject.org \
--fai-disk-config=installer/disk-config/gnt-fsn-NVMe \
--package-list=installer/packages \
--post-scripts-dir=installer/post-scripts/
Taking that apart:
* `-H root@88.99.194.57`: the IP address provided by Hetzner in the
confirmation email
* `--fingerprint`: the ed25519 MD5 fingerprint from the same email
* `--verbose`: important for now because otherwise the job is silent
except for errors, which could be confusing
* `hetzner-robot`: the install job type (only robot supported for now)
* `--fqdn=HOSTNAME.torproject.org`: the Fully Qualified Domain Name
to set on the machine, it is used in a few places, but the
`hostname` is correctly set to the `HOSTNAME` part only
* `--fai-disk-config=installer/disk-config/gnt-fsn-NVMe`: the disk
configuration, in [fai-setup-storage(8)](https://manpages.debian.org/setup-storage.8) format
* `--package-list=installer/packages`: the base packages to isntall
* `--post-scripts-dir=installer/post-scripts/`: post-install scripts,
magic glue that does everything
The last two are passed to `grml-debootstrap` and should rarely be
changed (although they could be coverted in to Fabric tasks
themselves).
See [[new-machine]] for post-install configuration steps, then follow
[[new-machine-mandos]] for setting up the mandos client on this host.
Manual install procedure
------------------------
At this point you should have received an email from Hetzner with a
subject like:
...
...
@@ -233,32 +279,5 @@ which we'll use below.
reboot
Semi-automated install
----------------------
The above procedure was automated using [[Fabric]] in the `tsa-misc`
git repository. This still remains to be documented better, but the
magic commandline for fsn-node-05 was:
./install -H root@88.99.194.57 --fingerprint 0d:4a:c0:85:c4:e1:fe:03:15:e0:99:fe:7d:cc:34:f7 --verbose hetzner-robot fsn-node-05.torproject.org installer/disk-config/gnt-fsn-NVMe installer/packages installer/post-scripts/
Taking that apart:
* `-H root@88.99.194.57`: that's the IP address provided by Hetzner
in the confirmation email
* `--fingerprint`: the ed25519 fingerprint from the same email
* `hetzner-robot`: the install job type
* `fsn-node-05.torproject.org`: the hostname to set on the machine
* `installer/disk-config/gnt-fsn-NVMe`: the disk configuration
* `installer/packages`: the base packages to isntall
* `isntaller/post-scripts/`: post-install scripts
The last two are passed to grml-debootstrap and should rarely be
changed (although they could be coverted in to Fabric tasks
themselves).
Configuration
-------------
See [[new-machine]] for post-install configuration steps, then
follow [[new-machine-mandos]] for setting up the mandos client on this host.
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment