From 901979c7717b529654513404f45d2b385bb759dd Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Fri, 14 Oct 2016 16:13:58 +0100 Subject: [PATCH] Deprecate VirtualBox support It's a mostly but not entirely free system which according to the Debian wiki requires a non-free compiler to build. VirtualBox also isn't available on Parabola. If it becomes a fully free system at some time in future then this patch can be reverted. --- doc/EN/installation.org | 10 +-- man/freedombone-image.1.gz | Bin 3554 -> 3364 bytes src/freedombone-image | 7 +- src/freedombone-image-customise | 5 -- src/freedombone-image-make | 5 -- src/freedombone-image-makefile | 49 ------------ website/EN/installation.html | 131 ++++++++++++++------------------ 7 files changed, 62 insertions(+), 145 deletions(-) diff --git a/doc/EN/installation.org b/doc/EN/installation.org index c63c445c..be2b4577 100644 --- a/doc/EN/installation.org +++ b/doc/EN/installation.org @@ -62,12 +62,6 @@ If you prefer an advanced installation with all of the options available then us freedombone-image -t beaglebone -s 8G --minimal no #+END_SRC -To build a 64bit Virtualbox image: - -#+BEGIN_SRC bash -freedombone-image -t virtualbox-amd64 -s 8G -#+END_SRC - To build a 64bit Qemu image: #+BEGIN_SRC bash @@ -158,14 +152,12 @@ Using the password 'freedombone'. Take a note of the new login password and then ** As a Virtual Machine -Virtualbox and Qemu are supported. You can run a 64 bit Qemu image with: +Qemu is currently supported, since it's s fully free software system. You can run a 64 bit Qemu image with: #+BEGIN_SRC bash qemu-system-x86_64 -m 1G filename.img #+END_SRC -If you are using Virtualbox then add a new VM and select the Freedombone *vdi* image. - The default login will be username 'fbone' and password 'freedombone'. Take a note of the new login password and then you can proceed through the rest of the installation. * Social Key Management - the 'Unforgettable Key' diff --git a/man/freedombone-image.1.gz b/man/freedombone-image.1.gz index a46ca8a10a7c8bd36a877427dcb3b4ec04c43f65..d576dc8fd30566b652fd27c8b369ddd9a0627b29 100644 GIT binary patch literal 3364 zcmV+<4cqb`iwFR`^Z-}@1GQOUbK5o&{mx&3(HCEDEU9tZOq#jeRCXLkbGGcUD#d*%o!i+e!%stvpO^N7z)7`E#q>tVEUT1r{$*vGT2 z7sErNYT;kgQsbV9`!~9BwRk<73!JybchejH?nK>#QiRp=G(EVQ-2?w ziF>#T{(hhbJH68NzQnrt6Gg+vq})`}v9Yo+%Jqy5A%A^7Kf9gYET-49L9*CrC(^Hg z(XP@pVF(D4Ff6U?{Iy7Bm5su-)7gA6xxAeCeP63mnM|2fW8V~8E>%RL%EV6Bo0mx< z@Xu#pH*~6Q%5aw?!QqJLjjZI-=2BeD?#7qeG#~!#`!akH?zeb;`$+U*2@?6yN0nxC961Ap3Y>1e@1bu(ZSJ>M| zxQ%V{Ok{LJgchEYB9~=tO94k_%019u3z=?kLGd>|QX^q(&0F0yoEHZ?E>e&iFuGGt(HOC@tmKuM> z)lR|>b=9N~aNEhZLz@$vw6Vh+?)}`elgAI)*khr;d+{8vitPFK_+Qx^i{Dkz4ExUQ5e|`QvLb>XKC6>xJ&iM%foslnBl`R72jl``g zfHr{)6KQUpA|D$AE&}%r683S7kttorF4oE<#s-=)vZM@?$i(62t zZRA!7Vg(APhMgTVjs$(b;tI&Q&MA#@#Ob2Ff0z?MN2otViF{0m5H`}Rd3hybW$qG= z+z5ZwM0K9H_&i@Lc{`W~{%b%6ZvcwGi~$35{)(dgQx6Rz9|$Oc6a14T?+C}VcYFF# zZ}kxyMzH4Un%I($j=btTrv@XKHq=TsdCh0{Dlx4JA0YPEybD9N#Z3+*F)vGG!&c!{ zR0ch|F`DKRFRvkZByq*DE%nV6G<`;QgH_n`N$3*a4*JoWGAT-NP3tl?6(sv_Xa5 z16&`$a>w*W!cA~U4&?0&RW9da&G_TY0@B&T1bgwI_Rd$b5W$#Uf64*4^*)M2LPW7| zK@j+1*b9k(9O+3hV-d(Inx9#7gsKOf#Tnu$sSBtz-uRByp6b4lcpt!^q|*cdUo1bj zwoi4O*r=4aSsgP(WGLu%{lpD^r^L%Ab}F0mhsUIx-Gu*s3Z<)cLWu{hKormL0V|Ra zaU+51pK>i{>6GRTAyAthioI%~67K-bJh!{A78rjXvh?v)AH{64B2EA3A|Z;dSvvK5 z13d)yQ$kR7zy>UH0eTSRZPI3e{J9pcq1!-e$AWXs=>njKaMA8TG_}rw@u)b@ZqK1M zXBT2J6GzuG=+5Ew?DGAQm|n5On;I{gQXJ|+a_v2~aGk0lX%v!vsUU}l4JZ>RV4z^N zL(upd@za*PDQK0=J32k+WCBU~RJBAJJJLi%V~+PLRke|&qbnFMIzux9A8hEx0F|rZ zXmTG|exsMV_Q7Y2K;B5;!+42D=5>-RVBH+(S8gTOEh`fGr9o`JMDS zkUAaPxUN3oK)*-FL0c{Hh{5M;vGU|WKB9NDPhl(e)s}=Y5w(Br;! z?OmJq9P(k_g5SWlbO!C{3kWX>CFD3troX0F{2s(aZTGS`znz>drazyH(8&xEDupuJ zN=V==NcdJ(Deo$O3xBUz_K_V_M5@d~0g8O*U6Fyb9F{wgfvkf-?lWU#oq#J3&XG9X zxAl-7hf;_|{&d$Wf(KQ$Y8-cI3Xv<+z?d-e^Rv6#>EgY&jNRh`LdY&(<^p;PG&-U7 zJZW!YJ?S+#rLxpYH9oz)KO$R@m;Ft>yot|)2vEkMIQQU3o(@`o6`-!DW6OArVIq)3w(#l10q6ZE*tI^gA28b z=TJ~q`U4yj1J)H&G0BkQ4#%oCVx)lK0*|ewqCIo@aZe=CfEqv@h05BzVxI)u=uYQ3 z-yHO06AoKEB3uRnU9VLN5z4kxQEgc@UU>QNLl{KB9@2eKNNkIbqIbHnOPj$6oLkWo zU$Ztg&pd2vu&nZWgD!B;4gv`8hNMi}>~|eWaFonwS_O8?8xS#x9(?Sb+DbRoQ`<)EgwBYn;au_wvxs*9IIr6K zMjGf|T3fp?^6J}QKloR5CCjL0zBz% zDqi10hfw?{{uCZO}QN^OMABtEiy+(0%RTC8Y!;UG< z70D3A3IpGVD})Vq-2X(TW=43d7rnQAW8S;gm#|HQ7$f3WCt+TF2wn<0iR^;IpL<52t3@I$JQ4u@+h zwmQfv9^g`}893dvfk95!h!P@4(HCEDEU9tZOq#jeRDOx0Ia~Hva(g*n zrvs6Ygqj2xf|R08fBZeW07%Mi()7b+I%&igV6pq`v(GL^i+5sGDV5n`X^k4{Lavo~ zAqFR3i<#YuldoTVHxL8-_qKaV+&fhrIdLsbBlAI$jOOpeU^cnF7$naZ`|nVkRZ7;% z2`MtQ)Y1rl$2Gc^%Up?-t%NqNmU*ttT3AzC;r6apg$s+%-_LGt=hOKgZ7{6GLoKVd zs(%*4Mm#jI&d5UHS1BG!>DcB3+%VWd(&Hg??gPzRccN4>}Dz+aDAoMO$7t25i6aO znNB(a&Ck3*{T+%DVA*7Ry=HF1s9VqhLtKU zo~Z1vDy_v@;|z4AsdC&c#6yTip{oiJ@Rx0W2mgRI`M!UZJ+hLi5)Zpvny<&IPQ5)k z6Ay3|{QXE5c6z1jeTnDdFN%hbNx7+{JQN{OoReyO`e02FYThok+g` zM!QPagdreE;$UfI=jS4oRW=ICPG|GQ7;EH55hKtKBXmoj~X1<{p@_qWrt$(6XDPcD)A6C>0|S(MluX~Wi2Bq$6X zy8hg|jZQbw*G-vQnR&x$vo_htl+xD9)Eb8Dgcpe%PnyHCfb#s+eo zE2b>u*sDvpxP}wxVDb^bu?763>95w?Yy`c3%qCDg+{QL}CNi=RD1_ss$l*I%3dB59 z?vegk$P~U+;%|DSM#9*dm+D!dYp3$nS0iy_Qu+k~O)Yt=R(>CHNovbI?mdSu&dadI znps9K7Gz!Z(VULCW=G9BwDzcZ~;(ujx+{53{-|Sro&wWru6K?W9KfZeT%gb*$q1t$gWupzV&ZcR04W{i#o&Uk01FwpdsW#YF!)H^sRDpRe!>5_b&A4Z444&6K1etW zF^sNMsb1|nrV5!8sg|DpEd=7tged9ry9W@7M7U6-%N<5gXbGBxshjcm0ZM^d^m zVp64>aZ5|!93-8PTe;Cl0Qg7Nt=Te7spyfmyH01|?h9>1IUL zvfB(!gtx?S9?ZvML)sugc~C9O#MOM9#oJ_~I=< z5y&%Ofc9Tew14QKVdMh=U2}pzN%9lnnAUE0Kk7Yw#0Mi-vsOrK$y-P2b)I&^A(&az zN;Y}Td-rq&Jr!O+>~DA#hHQ(Q97tm7mdJ*!!mX%tdW_1;a1zRv`6A9V6*MK*mQ2>f z>%5+!(m-V$Z#1q(GWrF4ej&(MlD$vG&xs*NT0Vh5l3Q>& zAR6HHohX}Su2Y-?NYi;Ns2tNhe34S+pkzuL=#4$V^&5!rnC?ipNl@*~?9Nbeb3WFL zKh7*5ojpvj7msT1e6b4=jOq2K9005LQR)&RihT=$zz@S-NCd=HPgoj@KvwbinKef! zj8Ki7A)b=DfLh}Z-?7?r6+05|0~nNangHPI=^s7Yr#en-6jNAMx3VKc&A01kZtyE5 zUJSBR`8c24CgtoV{P$BRU9A&JJje;6c!m#Hk+g~%2?&Ig%RLLhG;auj+VoKDg$=0y z2WaNG-F>kJ`SXyaPfdLiv&o7&lqZISD7t3p)Q1L=3GR<-5NE(+E4E#6iuyjU_6Sxv%3pu=h>y0%*4^n3@UnfGrM|!B&OG_0;k67 zsuY{LkX(C@Etpd^q@F_3FBKFMu>oZQ1q>9db_g1q5npY|o29JHJ32k+%K}OHRJBAJ zJCaRAV~*D=Rke|&BNL3*rJ*&04>n{mK;@v7Q*s|zexsMV_Q7Y2KmkeM!*~@)$LmyE zz`8k*xZE~jH!7&GalH`>TOEh`fF%kg`JVJrk@_~r;!?U~JM4tXQ;rM#=W72d8`_K_V_M5@d~ z0iu29U6Fyb93FQf16cd9_B4q8sr2Y=!)obYv&NMYo~ z+fuLBB$e6&Qw9R@1>QsD0TEFb+i*h}T&P{#hk~-wAK{o7u&$VjNroJE*jBX>BLxf> zcx){dt(nW;_Cyj5r~%YbsI1K^_DR5v?sT5>%|TB#VY9^(!et6V8eJi@+Yu3i*nTKr+mQ`MFkO2oBBanat&|U%k zN%CBg{(lq+j!Q=!;OIk@oqYG*i|@tRi?{i2qtR&ar226_{W!f_+)u8=_2lf`bapWx z5S6ijlidAzcYV(0UXK{(0t*&*zCP(Xyv)yehqR9u;>D#1UG(TfYIjiK@B1e8Uh%V|-bzRnWLnPGjLxZ}C1RzDp)2FBhDC6Kk zA4H$sWu;bV(vgl~)ppLJ46ayHDCQ7G#!u6?(?Oh~JsK1Mukk%!P&t+PP6GdH8%Bgn zO5QTJ`!MX&q)tc*>9ipML?cTP2Abla!-rwRgC3{wLW5okKw|N&x{_rSf?plN zvnL6{cs+`NzvRQ-biPw<9P+cP>BVd@7h`chKNaV9kZ=_LiGMB4H4ey0yf1aiWsbEe z-HiDZwE(E2|8c1szXycS2Ivpc$C0=)N#cE-{=xOAE zQ5#8L5LljcsYld9LsiuORC;;m?5ZXx^yfrVn%dGq6pJ&wA4~`f?znY~MUENasnqt~ z_A`y1S)ao;)sh$y|8x>QTpWUzf=+$O@!?=5s^-A5zB%Fw0(7-V#3F9f)TA=KH)8)z zc%``D0Ycs90QB6@rvSR402kDhQRKY`sUE`NnskZ|ij>FW6l(@fH>mLy31&p~6$bLA z-zA0NJe`>{Go8WH>e*;Q%Mj3aT~gRA3ZsI{f^bO)sa zWkVGTJ~b&G(Wq0QLjY;2uoE}Y{;UyZids)9;nWOLtI~OfnKmX$q~c?$j+)bo16#I3 z`sV=iunZFncW^xRNjM|55}{gkEd&5hJE~s);74*iUCXxG(WJm@9pPya3KO`gw0r!^ z_=vkjfTaDAVf)pu`$WPJ=YCGm3zd$;?50#I~a8?gu<+Qrg!I+;(;{MZ6Cc7Aa> zoy-KyG6wCZI4+fu#oOtWAL%nY@zFz3iM8XHkV2yf;+dMd8lQQ`p@TY@wSm5MXw&;7 z=syh}epB#i>_gOjn2m+KwsdFTJKp^z82L`|Aa~iUVNFes&^H73dOTi(oSNkbz8f#4 z+f?be7qhW;u4x&6a=&KajZq-DkF_3$M9so4~#+aI%4^=@-z|Fg(kdG`1(r5Cok cS8jgAZ~df}uj5CK!@ZLK0U*$ITDl+r00AlgQUCw| diff --git a/src/freedombone-image b/src/freedombone-image index b364e2a1..c72000e3 100755 --- a/src/freedombone-image +++ b/src/freedombone-image @@ -503,9 +503,6 @@ EXPECTED_EXTENSION='xz' if [[ $IMAGE_TYPE == "qemu"* ]]; then EXPECTED_EXTENSION='qcow2' fi -if [[ $IMAGE_TYPE == "virtualbox"* ]]; then - EXPECTED_EXTENSION='vdi' -fi shopt -s nullglob imgfiles=(build/${PROJECT_NAME}*.${EXPECTED_EXTENSION}) @@ -537,7 +534,7 @@ Image was created. You will be able to log into it with: " - if [[ $IMAGE_TYPE != "virtualbox"* && $IMAGE_TYPE != "qemu"* ]]; then + if [[ $IMAGE_TYPE != "qemu"* ]]; then echo $" ssh $USERNAME@$DEFAULT_DOMAIN_NAME -p $SSH_PORT Password: $PASSWORD @@ -577,7 +574,7 @@ echo $"Username: $USERNAME Password: $PASSWORD" > ${CURR_DIR}/${PROJECT_NAME}_login_credentials.txt chmod 600 ${CURR_DIR}/${PROJECT_NAME}_login_credentials.txt -if [[ $IMAGE_TYPE != "virtualbox"* && $IMAGE_TYPE != "qemu"* ]]; then +if [[ $IMAGE_TYPE != "qemu"* ]]; then echo '' if [[ $VARIANT != 'meshclient' && $VARIANT != 'meshusb' ]]; then echo $'You can copy the image to a microSD card with:' diff --git a/src/freedombone-image-customise b/src/freedombone-image-customise index a68dc516..e20d39dc 100755 --- a/src/freedombone-image-customise +++ b/src/freedombone-image-customise @@ -965,11 +965,6 @@ echo $username:$password | chroot "$rootdir" /usr/sbin/chpasswd chroot "$rootdir" adduser $username sudo case "$MACHINE" in - virtualbox) - # hide irrelevant console keyboard messages. - echo "echo \"4 4 1 7\" > /proc/sys/kernel/printk" \ - >> /etc/init.d/rc.local - ;; qemu) # hide irrelevant console keyboard messages. echo "echo \"4 4 1 7\" > /proc/sys/kernel/printk" \ diff --git a/src/freedombone-image-make b/src/freedombone-image-make index 6a1be29f..8861f9d4 100755 --- a/src/freedombone-image-make +++ b/src/freedombone-image-make @@ -126,11 +126,6 @@ case "$MACHINE" in --roottype btrfs \ " ;; - virtualbox) - extra_opts="\ - --grub \ - --roottype btrfs \ -" ;; qemu) extra_opts="\ --grub \ diff --git a/src/freedombone-image-makefile b/src/freedombone-image-makefile index cd5920da..57d4d188 100755 --- a/src/freedombone-image-makefile +++ b/src/freedombone-image-makefile @@ -188,55 +188,6 @@ apu: prep $(SIGN) @echo "Build complete." -# build a virtualbox image -virtualbox: virtualbox-i386 - -virtualbox-i386: prep - $(eval ARCHITECTURE = i386) - $(eval MACHINE = virtualbox) - $(MAKE_IMAGE) - # Convert image to vdi hard drive - VBoxManage convertdd $(NAME).img $(NAME).vdi - @rm -f $(ARCHIVE) - $(XZ) $(IMAGE) - @echo "" - $(SIGN) - @echo "Build complete." - -virtualbox-amd64: prep - $(eval ARCHITECTURE = amd64) - $(eval MACHINE = virtualbox) - $(MAKE_IMAGE) - # Convert image to vdi hard drive - VBoxManage convertdd $(NAME).img $(NAME).vdi - @rm -f $(ARCHIVE) - $(XZ) $(IMAGE) - @echo "" - $(SIGN) - @echo "Build complete." - -test: test-virtualbox - -test-virtualbox: virtualbox - $(eval VM_NAME = $(PROJECT_NAME)-test) - VBoxManage createvm --name $(VM_NAME) --ostype "Debian" --register - VBoxManage storagectl $(VM_NAME) --name "SATA Controller" --add sata \ - --controller IntelAHCI - VBoxManage storageattach $(VM_NAME) --storagectl "SATA Controller" \ - --port 0 --device 0 --type hdd --medium $(NAME).vdi - VBoxManage modifyvm $(VM_NAME) --pae on --memory 1024 --vram 128 \ - --nic1 nat --natpf1 ,tcp,,$(TEST_SSH_PORT),,22 - VBoxManage startvm $(VM_NAME) --type headless - sleep $(TEST_FIRSTRUN_WAIT_TIME) # wait for first-run to complete - echo frdm |sshpass -p frdm ssh -o UserKnownHostsFile=/dev/null \ - -o StrictHostKeyChecking=no -t -t \ - -p $(TEST_SSH_PORT) fbx@127.0.0.1 \ - "sudo plinth --diagnose" \ - |tee build/$(VM_NAME)-results_$(TODAY).log - VBoxManage controlvm $(VM_NAME) poweroff - VBoxManage modifyvm $(VM_NAME) --hda none - VBoxManage unregistervm $(VM_NAME) --delete - # build a qemu image qemu: qemu-i386 diff --git a/website/EN/installation.html b/website/EN/installation.html index 1c043898..913b0311 100644 --- a/website/EN/installation.html +++ b/website/EN/installation.html @@ -3,7 +3,7 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> - + @@ -255,11 +255,11 @@ for the JavaScript code in this tag. -Building an image for a Single Board Computer or Virtual Machine +Building an image for a Single Board Computer or Virtual Machine -Checklist +Checklist @@ -267,34 +267,34 @@ for the JavaScript code in this tag. -Installation +Installation -Social Key Management - the 'Unforgettable Key' +Social Key Management - the 'Unforgettable Key' -Final Setup +Final Setup -Keydrives +Keydrives -On Client Machines +On Client Machines -Administering the system +Administering the system -
-

Building an image for a Single Board Computer or Virtual Machine

-
+
+

Building an image for a Single Board Computer or Virtual Machine

+

You don't have to trust images downloaded from random internet locations signed with untrusted keys. You can build one from scratch yourself, and this is the recommended procedure for maximum security. For guidance on how to build images see the manpage for the freedombone-image command.

@@ -347,15 +347,6 @@ If you prefer an advanced installation with all of the options available then us
-

-To build a 64bit Virtualbox image: -

- -
-
freedombone-image -t virtualbox-amd64 -s 8G
-
-
-

To build a 64bit Qemu image:

@@ -380,9 +371,9 @@ If the image build fails with an error such as "Error reading from server. Re
-
-

Checklist

-
+
+

Checklist

+

Before installing Freedombone you will need a few things.

@@ -396,17 +387,17 @@ Before installing Freedombone you will need a few things.
-
-

Installation

-
+
+

Installation

+

There are three install options: Laptop/Desktop/Netbook, SBC and Virtual Machine.

-
-

On a Laptop, Netbook or Desktop machine

-
+
+

On a Laptop, Netbook or Desktop machine

+

If you have an existing system, such as an old laptop or netbook which you can leave running as a server, then install a new version of Debian Jessie onto it. During the Debian install you won't need the print server or the desktop environment, and unchecking those will reduce the attack surface. Once Debian enter the following commands:

@@ -424,9 +415,9 @@ freedombone menuconfig
-
-

On a single board computer (SBC)

-
+
+

On a single board computer (SBC)

+

Currently the following boards are supported:

@@ -504,11 +495,11 @@ Using the password 'freedombone'. Take a note of the new login password and then
-
-

As a Virtual Machine

-
+
+

As a Virtual Machine

+

-Virtualbox and Qemu are supported. You can run a 64 bit Qemu image with: +Qemu is currently supported, since it's s fully free software system. You can run a 64 bit Qemu image with:

@@ -516,10 +507,6 @@ Virtualbox and Qemu are supported. You can run a 64 bit Qemu image with:
-

-If you are using Virtualbox then add a new VM and select the Freedombone vdi image. -

-

The default login will be username 'fbone' and password 'freedombone'. Take a note of the new login password and then you can proceed through the rest of the installation.

@@ -527,42 +514,42 @@ The default login will be username 'fbone' and password 'freedombone'. Take a no
-
-

Social Key Management - the 'Unforgettable Key'

-
+
+

Social Key Management - the 'Unforgettable Key'

+

During the install procedure you will be asked if you wish to import GPG keys. If you don't already possess GPG keys then just select "Ok" and they will be generated during the install. If you do already have GPG keys then there are a few possibilities

-
-

You have the gnupg keyring on an encrypted USB drive

-
+
+

You have the gnupg keyring on an encrypted USB drive

+

If you previously made a master keydrive containing the full keyring (the .gnupg directory). This is the most straightforward case, but not as secure as splitting the key into fragments.

-
-

You have a number of key fragments on USB drives retrieved from friends

-
+
+

You have a number of key fragments on USB drives retrieved from friends

+

-If you previously made some USB drives containing key fragments then retrieve them from your friends and plug them in one after the other. After the last drive has been read then remove it and just select "Ok". The system will then try to reconstruct the key. For this to work you will need to have previously made three or more Keydrives. +If you previously made some USB drives containing key fragments then retrieve them from your friends and plug them in one after the other. After the last drive has been read then remove it and just select "Ok". The system will then try to reconstruct the key. For this to work you will need to have previously made three or more Keydrives.

-
-

You can specify some ssh login details for friends servers containing key fragments

-
+
+

You can specify some ssh login details for friends servers containing key fragments

+

Enter three or more sets of login details and the installer will try to retrieve key fragments and then assemble them into the full key. This only works if you previously were using remote backups and had social key management enabled.

-
-

Final Setup

-
+
+

Final Setup

+

Any manual post-installation setup instructions or passwords can be found in /home/username/README. You should remove any passwords from that file and store them within a password manager such as KeepassX.

@@ -680,16 +667,16 @@ On your internet router, typically under firewall settings, open the following p
-
-

Keydrives

-
+
+

Keydrives

+

After installing for the first time it's a good idea to create some keydrives. These will store your gpg key so that if all else fails you will still be able to restore from backup. There are two ways to do this:

-
-

Master Keydrive

-
+
+

Master Keydrive

+

This is the traditional security model in which you carry your full keyring on an encrypted USB drive. To make a master keydrive first format a USB drive as a LUKS encrypted drive. In Ubuntu this can be done from the Disk Utility application. Then plug it into the Freedombone system, then from your local machine run:

@@ -704,9 +691,9 @@ Select Administrator controls then Backup and Restore then Back

-
-

Fragment keydrives

-
+
+

Fragment keydrives

+

This breaks your GPG key into a number of fragments and randomly selects one to add to the USB drive. First format a USB drive as a LUKS encrypted drive. In Ubuntu this can be done from the Disk Utility application. Plug it into the Freedombone system then from your local machine run the following commands:

@@ -726,9 +713,9 @@ Fragments are randomly assigned and so you will need at least three or four keyd
-
-

On Client Machines

-
+
+

On Client Machines

+

You can configure laptops or desktop machines which connect to the Freedombone server in the following way. This alters encryption settings to improve overall security.

@@ -745,9 +732,9 @@ freedombone-client
-
-

Administering the system

-
+
+

Administering the system

+

To administer the system after installation log in via ssh, become the root user and then launch the control panel.