From a9a56853a27e1dbce3c48af327b0adff0e4c38e0 Mon Sep 17 00:00:00 2001 From: Micah Anderson Date: Wed, 18 Jun 2008 23:33:18 -0400 Subject: add george system changelog --- doc/george/changelog | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 doc/george/changelog (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog new file mode 100644 index 0000000..2442061 --- /dev/null +++ b/doc/george/changelog @@ -0,0 +1,19 @@ +****************************************************************************** +* * +* george system log * +* * +****************************************************************************** +* Please add new entries in reverse chronological order whenever you make * +* changes to this system * +****************************************************************************** + + +2008-06-18 - micah + * debootstrap'd debian etch install + * installed /etc/apt/sources.list with local proxy sources for etch, + testing, unstable, backports and volatile + * configured /etc/apt/preferences and apt.conf.d/local-conf to + pin etch, but make testing, sid and backports available + * added backports.org apt-key + * installed openssh-server and openssh-client packages + * added dkg, jrollins, mjgoins ssh public_keys to /root/.ssh/authorized_keys -- cgit v1.2.3 From fadd814ce4351c3869e49d91b31aa5b2efc68a01 Mon Sep 17 00:00:00 2001 From: Jameson Graef Rollins Date: Wed, 18 Jun 2008 23:58:01 -0400 Subject: update george changelog --- doc/george/changelog | 3 +++ 1 file changed, 3 insertions(+) (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog index 2442061..5d35355 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -7,6 +7,9 @@ * changes to this system * ****************************************************************************** +2008-06-18 - jrollins + * installed less, emacs; + * aptitude update && aptitude dist-upgrade 2008-06-18 - micah * debootstrap'd debian etch install -- cgit v1.2.3 From 70ee9836c30c3264660010156944d3b76e9300b2 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Thu, 19 Jun 2008 01:12:30 -0400 Subject: more notes on work on george. --- doc/george/changelog | 16 ++++++++++++++++ doc/george/policy | 1 + 2 files changed, 17 insertions(+) (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog index 5d35355..8eebe4b 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -7,6 +7,22 @@ * changes to this system * ****************************************************************************** +2008-06-19 - dkg + * removed etch sources, switched "testing" to "lenny", added + lenny/updates, removed all contrib and non-free. + + * removed testing pin in /etc/apt/preferences + * ran the upgrade + + * reset emacs22 to emacs22-nox (avoiding dependencies) + + * removed sysklog and klogd because of errors restarting klogd. + Installed syslog-ng in their stead, which still gives errors + related to /proc/kmsg unreadability, but the install completes :/ + + * added experimental, juggled pinning: + experimental: 1, unstable: 2 + 2008-06-18 - jrollins * installed less, emacs; * aptitude update && aptitude dist-upgrade diff --git a/doc/george/policy b/doc/george/policy index 6da08e9..a17a310 100644 --- a/doc/george/policy +++ b/doc/george/policy @@ -24,6 +24,7 @@ version numbers so we know what we're running. We will try to keep the installation as minimal as possible while still allowing for comfortable day-to-day administration. +We will use aptitude for package management where possible. Outstanding questions: -- cgit v1.2.3 From a5066c3a37a84bf47e1e1d6ff8ad755ad5fa9414 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Thu, 19 Jun 2008 03:17:01 -0400 Subject: added more documentation about george, and more TODO notes. --- doc/TODO | 25 +++++++++++++++++++++++-- doc/george/changelog | 14 ++++++++++++-- doc/george/user-id-configuration | 21 +++++++++++++++++++++ 3 files changed, 56 insertions(+), 4 deletions(-) create mode 100644 doc/george/user-id-configuration (limited to 'doc/george/changelog') diff --git a/doc/TODO b/doc/TODO index 3538fbf..e2fce0e 100644 --- a/doc/TODO +++ b/doc/TODO @@ -8,12 +8,33 @@ Detail advantages of monkeysphere: detail the race conditions in ssh, Determine how openssh handles multiple processes writing to known_hosts/authorized_keys files (lockfile, atomic appends?) -Handle unknown hosts in such a way that they're not always removed - from known_hosts file. Ask user to lsign the host key? +Handle unverified monkeysphere hosts in such a way that they're not + always removed from known_hosts file. Ask user to lsign the host + key? Handle multiple hostnames (multiple user IDs?) when generating host keys with gen-key. +Work out the details (and describe a full use case) for assigning a + REVOKER during monkeysphere-server gen_key -- how is this set? How + do we export it so it's available when a second-party revocation is + needed? + +Actually enable server hostkey publication. + +Streamline host key generation, publication, verification. See + doc/george/host-key-publication for what dkg went through on + 2008-06-19 + +Streamline authorized_user_ids setup (including question of where + authorized_user_ids files should go). See + doc/george/user-id-configuration for what dkg went through on + 2008-06-19 + +Ensure that authorized_user_ids are under as tight control as ssh + expects from authorized_keys: we don't want monkeysphere to be a + weak link in the filesystem. + Make sure alternate ports are handled for known_hosts. Script to import private key into ssh agent. diff --git a/doc/george/changelog b/doc/george/changelog index 8eebe4b..afea2d0 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -20,8 +20,18 @@ Installed syslog-ng in their stead, which still gives errors related to /proc/kmsg unreadability, but the install completes :/ - * added experimental, juggled pinning: - experimental: 1, unstable: 2 + * added experimental + * juggled pinning: experimental: 1, unstable: 2 + * added mathopd onak, tweaked /etc/mathopd.conf and /etc/onak.conf + + * installed monkeysphere v0.1-1, changed host key, published + them via the local keyserver (see host-key-publication) + + * added local unprivileged user accounts for everyone listed in + /usr/share/doc/monkeysphere/copyright + + * configured authorized_user_ids for every user account based on + my best guess at their OpenPGP User ID. 2008-06-18 - jrollins * installed less, emacs; diff --git a/doc/george/user-id-configuration b/doc/george/user-id-configuration new file mode 100644 index 0000000..d95279d --- /dev/null +++ b/doc/george/user-id-configuration @@ -0,0 +1,21 @@ +2008-06-19 03:00:58-0400 +------------------------ + +setting up authorized_user_id configuration on george was also more +cumbersome than it needs to be. Here's what i (dkg) did: + + GNUPGHOME=/etc/monkeysphere/gnupg gpg --keyserver subkeys.pgp.net --search dkg@fifthhorseman.net + GNUPGHOME=/etc/monkeysphere/gnupg gpg --fingerprint dkg@fifthhorseman.net + +set up the authorized_user_ids (why are these in /etc/ and not in +people's home directories?) + +echo 'Daniel Kahn Gillmor ' > /etc/monkeysphere/authorized_user_ids/dkg +echo 'Jameson Rollins ' > /etc/monkeysphere/authorized_user_ids/jrollins +echo 'Micah Anderson ' > /etc/monkeysphere/authorized_user_ids/micah +echo 'Matthew Goins ' > /etc/monkeysphere/authorized_user_ids/mjgoins +echo 'Ross Glover ' > /etc/monkeysphere/authorized_user_ids/ross +echo 'Jamie McClelland ' > /etc/monkeysphere/authorized_user_ids/jamie +echo 'mike castleman ' > /etc/monkeysphere/authorized_user_ids/mlcastle +echo 'Elliot Winard ' > /etc/monkeysphere/authorized_user_ids/enw +echo 'Greg Lyle ' > /etc/monkeysphere/authorized_user_ids/greg -- cgit v1.2.3 From 0e7b7f17fd635486371798a513067ba747dd47dc Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Thu, 19 Jun 2008 04:10:55 -0400 Subject: documented cronjob, and referred to user-id-configuration. --- doc/george/changelog | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog index afea2d0..381fa0f 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -31,7 +31,11 @@ /usr/share/doc/monkeysphere/copyright * configured authorized_user_ids for every user account based on - my best guess at their OpenPGP User ID. + my best guess at their OpenPGP User ID (see + user-id-configuration). + + * set up a cronjob (in /etc/crontab) to run "monkeysphere-server + update-users" at 26 minutes past the hour. 2008-06-18 - jrollins * installed less, emacs; -- cgit v1.2.3 From 2e817838052450ec7a8942f24c5190e51bbd31d0 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Thu, 19 Jun 2008 12:02:33 -0400 Subject: documenting addition of apt repo on george. --- doc/george/changelog | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog index 381fa0f..55d46bc 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -7,6 +7,13 @@ * changes to this system * ****************************************************************************** +2008-06-19 - dkg + * installed rsync (for maintaining a public apt repo) + + * configured mathopd to listen on port 80, serving /srv/www as / + and /srv/apt as /debian. We've got nothing in /srv/www at the + moment, though. + 2008-06-19 - dkg * removed etch sources, switched "testing" to "lenny", added lenny/updates, removed all contrib and non-free. -- cgit v1.2.3 From f95798d4fd83cb227b69c136b16b592d997303c6 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Thu, 19 Jun 2008 12:20:08 -0400 Subject: documenting george debugging steps. --- doc/george/changelog | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog index 55d46bc..6dc3a29 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -13,6 +13,11 @@ * configured mathopd to listen on port 80, serving /srv/www as / and /srv/apt as /debian. We've got nothing in /srv/www at the moment, though. + + * installed lsof and psmisc as sysadmin utilities. sorry for the + bloat! + + * installed strace to try to figure out why onak is segfaulting. 2008-06-19 - dkg * removed etch sources, switched "testing" to "lenny", added -- cgit v1.2.3 From c6a958a369c58ec78f380fc739d75ff465b61c6a Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Fri, 20 Jun 2008 14:00:42 -0400 Subject: touched /etc/environment on george. --- doc/george/changelog | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog index 6dc3a29..9992aae 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -7,6 +7,10 @@ * changes to this system * ****************************************************************************** +2008-06-20 - dkg + * touched /etc/environment to get rid of some spurious auth.log + entries. + 2008-06-19 - dkg * installed rsync (for maintaining a public apt repo) -- cgit v1.2.3 From 9efdaab59edb2ff4454082f6a36c9dc0d90b8885 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Fri, 20 Jun 2008 14:04:28 -0400 Subject: bumped up ssh logging on george. --- doc/george/changelog | 1 + 1 file changed, 1 insertion(+) (limited to 'doc/george/changelog') diff --git a/doc/george/changelog b/doc/george/changelog index 9992aae..c157cec 100644 --- a/doc/george/changelog +++ b/doc/george/changelog @@ -10,6 +10,7 @@ 2008-06-20 - dkg * touched /etc/environment to get rid of some spurious auth.log entries. + * turned up sshd's LogLevel from INFO to DEBUG 2008-06-19 - dkg * installed rsync (for maintaining a public apt repo) -- cgit v1.2.3