Antitheft:Public Server: Difference between revisions

From OLPC
Jump to navigation Jump to search
Line 10: Line 10:


=Setup Public Server=
=Setup Public Server=

The recommended distribution is Fedora-11 or newer. At time of this writing, F-12 is available, and RHEL6 seems to be close to release -- it is advisable to install on F-12 and upgrade to RHEL6 or CentOS6 when they are available. RHEL/CentOS provide Long Term Support appropriate for the antitheft server role.

* Perform a minimal installation, using the kickstart file outlined in http://fedoraproject.org/wiki/Features/MinimalPlatform
* Configure hostname to match the domain name assigned
* Configure network to match IP address assigned -- it is strongly recommended to disable NetworkManager and use network-scripts instead. To do this, use chkconfig to turn NetworkManager off, and the "network" service on, and [http://docs.fedoraproject.org/deployment-guide/f12/en-US/html/ch-networkscripts.html configure the network interfaces in the usual way].
** Experimental: [http://fedoraproject.org/wiki/Features/NetworkManagerSystemConnections F-12 has improvements that allow NetworkManager to be used in a server role].


=Add packages from XS repository=
=Add packages from XS repository=

Revision as of 16:55, 26 February 2010

Setting up and running the public server for a deployment.

Pre-requisites

  • You have read and followed the Antitheft_HowTo page, and have a Master Signing Server (MSS) with your local private keys.
  • You have defined a domain name for your antitheft server -- for example antitheft.yourproject.foo.tld
  • XOs have been keyjected (or manufactured) with your public keys
  • XOs have an OS build that includes delegation support -- that is OS 8.2.2 or newer, and builds based on F11.
  • XOs have a localised OS build that sets the domain if your antitheft server.

Setup Public Server

The recommended distribution is Fedora-11 or newer. At time of this writing, F-12 is available, and RHEL6 seems to be close to release -- it is advisable to install on F-12 and upgrade to RHEL6 or CentOS6 when they are available. RHEL/CentOS provide Long Term Support appropriate for the antitheft server role.

Add packages from XS repository

Configure services

Monthly update of delegations

Usage and maintenance