From 1daa8be315a0ff88077747c504f82af99843d705 Mon Sep 17 00:00:00 2001 From: Vincent Sanders Date: Mon, 29 May 2017 14:34:02 +0100 Subject: extend scaleway instructions --- continuous_integration/debian_stretch_setup.mdwn | 39 ++++++++++++++++++------ 1 file changed, 30 insertions(+), 9 deletions(-) (limited to 'continuous_integration') diff --git a/continuous_integration/debian_stretch_setup.mdwn b/continuous_integration/debian_stretch_setup.mdwn index 961e8af..bfbc50e 100644 --- a/continuous_integration/debian_stretch_setup.mdwn +++ b/continuous_integration/debian_stretch_setup.mdwn @@ -66,6 +66,15 @@ edit \etc\hostname to contain nsciworker17 edit \etc\hosts to set loopback name resolution + 127.0.1.1 nsciworker17 + 127.0.0.1 localhost + ::1 localhost ip6-localhost ip6-loopback + ff02::1 ip6-allnodes + ff02::2 ip6-allrouters + + 192.168.211.1 ci.netsurf-browser.org + 93.93.129.191 vpn.netsurf-browser.org + `adduser netsurf` ensure netsurf user has ssh key installed @@ -74,19 +83,24 @@ edit /etc/group to add netsurf to sudo group edit /etc/apt/sources/list to be stretch -`apt-get update` - -`apt-get dist-upgrade` - -`apt-get clean` - -`halt` + # apt-get update + # apt-get dist-upgrade + # apt-get clean + # halt use dashboard power toggle to force a hard reboot login as netsurf and use `sudo -i` to get root terminal -edit /etc/ssh/sshd_config to disable password login +something in the update appears to break journalctl + + # mkdir -p /var/log/journal + # rm /etc/machine-id + # systemd-machine-id-setup + # systemd-tmpfiles --create --prefix /var/log/journal + # service systemd-journald restart + +edit /etc/ssh/sshd_config to disable password login. ensure you can login using certificates *before* you do this! # To disable tunneled clear text passwords, change to no here! PasswordAuthentication no @@ -163,11 +177,18 @@ edit /etc/network/interfaces and add auto tap_netsurf iface tap_netsurf inet dhcp -mkdir /etc/openvpn/netsurf-keys +`mkdir /etc/openvpn/netsurf-keys` copy openvpn keys from master node into /etc/openvpn/netsurf-keys +edit /etc/default/openvpn to have + + AUTOSTART="netsurf" +reload config and restart openvpn + # systemctl daemon-reload + # service restart openvpn + # systemctl status openvpn@netsurf.service ### Banana Pi -- cgit v1.2.3