summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--continuous_integration/debian_stretch_setup.mdwn39
1 files changed, 30 insertions, 9 deletions
diff --git a/continuous_integration/debian_stretch_setup.mdwn b/continuous_integration/debian_stretch_setup.mdwn
index 961e8af..bfbc50e 100644
--- a/continuous_integration/debian_stretch_setup.mdwn
+++ b/continuous_integration/debian_stretch_setup.mdwn
@@ -66,6 +66,15 @@ edit \etc\hostname to contain nsciworker17
edit \etc\hosts to set loopback name resolution
+ 127.0.1.1 nsciworker17
+ 127.0.0.1 localhost
+ ::1 localhost ip6-localhost ip6-loopback
+ ff02::1 ip6-allnodes
+ ff02::2 ip6-allrouters
+
+ 192.168.211.1 ci.netsurf-browser.org
+ 93.93.129.191 vpn.netsurf-browser.org
+
`adduser netsurf`
ensure netsurf user has ssh key installed
@@ -74,19 +83,24 @@ edit /etc/group to add netsurf to sudo group
edit /etc/apt/sources/list to be stretch
-`apt-get update`
-
-`apt-get dist-upgrade`
-
-`apt-get clean`
-
-`halt`
+ # apt-get update
+ # apt-get dist-upgrade
+ # apt-get clean
+ # halt
use dashboard power toggle to force a hard reboot
login as netsurf and use `sudo -i` to get root terminal
-edit /etc/ssh/sshd_config to disable password login
+something in the update appears to break journalctl
+
+ # mkdir -p /var/log/journal
+ # rm /etc/machine-id
+ # systemd-machine-id-setup
+ # systemd-tmpfiles --create --prefix /var/log/journal
+ # service systemd-journald restart
+
+edit /etc/ssh/sshd_config to disable password login. ensure you can login using certificates *before* you do this!
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
@@ -163,11 +177,18 @@ edit /etc/network/interfaces and add
auto tap_netsurf
iface tap_netsurf inet dhcp
-mkdir /etc/openvpn/netsurf-keys
+`mkdir /etc/openvpn/netsurf-keys`
copy openvpn keys from master node into /etc/openvpn/netsurf-keys
+edit /etc/default/openvpn to have
+
+ AUTOSTART="netsurf"
+reload config and restart openvpn
+ # systemctl daemon-reload
+ # service restart openvpn
+ # systemctl status openvpn@netsurf.service
### Banana Pi