aboutsummaryrefslogtreecommitdiff
path: root/doc/08.RPKI.RP.RunningUnderCron.md
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2016-08-08 17:30:58 -0400
committerRob Austein <sra@hactrn.net>2016-08-08 17:30:58 -0400
commit1f75ecd9bc47c12a3c1596497dfaa621a2d16103 (patch)
treef52166c947154730db2723263bb3bdc845ad1249 /doc/08.RPKI.RP.RunningUnderCron.md
parent7be7c02b6d2f1cec295ebacac49b01c75b6038a4 (diff)
Move old manual to doc/manual, to make it easier to find other documentation.
Diffstat (limited to 'doc/08.RPKI.RP.RunningUnderCron.md')
-rw-r--r--doc/08.RPKI.RP.RunningUnderCron.md61
1 files changed, 0 insertions, 61 deletions
diff --git a/doc/08.RPKI.RP.RunningUnderCron.md b/doc/08.RPKI.RP.RunningUnderCron.md
deleted file mode 100644
index bea2e4dc..00000000
--- a/doc/08.RPKI.RP.RunningUnderCron.md
+++ /dev/null
@@ -1,61 +0,0 @@
-# Running relying party tools under cron
-
-rcynic is the primary relying party tool, and it's designed to run under the
-cron daemon. Consequently, most of the other tools are also designed to run
-under the cron daemon, so that they can make use of rcynic's output
-immediately after rcynic finishes a validation run.
-
-[rcynic-cron][RP] runs the basic set of relying party tools (`rcynic`, `rcynic-
-html`, and `rpki-rtr cronjob`); if this suffices for your purposes, you don't
-need to do anything else. This section is a discussion of alternative
-approaches.
-
-Which tools you want to run depends on how you intend to use the relying party
-tools. Here we assume a typical case in which you want to gather and validate
-RPKI data and feed the results to routers using the rpki-rtr protocol. We also
-assume that everything has been installed in the default locations.
-
-The exact sequence for invoking rcynic itself varies depending both on whether
-you're using a chroot jail or not and on the platform on which you're running
-rcynic, as the chroot utilities on different platforms behave slightly
-differently. Using a chroot jail used to be the default for rcynic, but it
-turned out that many users found the setup involved to be too complex.
-
-If you're not using rcynic-cron, it's probably simplest to generate a short
-shell script which calls the tools you want in the correct order, so that's
-what we show here.
-
-Once you've written this script, install it in your crontab, running at some
-appropriate interval: perhaps hourly, or perhaps every six hours, depending on
-your needs. You should run it at least once per day, and probably should not
-run it more frequently than once per hour unless you really know what you are
-doing. Please do _NOT_ just arrange for the script to run on the hour, instead
-pick some random minute value within the hour as the start time for your
-script, to help spread the load on the repository servers.
-
-On FreeBSD or MacOSX, this script might look like this:
-
- #!/bin/sh -
- /usr/sbin/chroot -u rcynic -g rcynic /var/rcynic /bin/rcynic -c /etc/rcynic.conf || exit
- /var/rcynic/bin/rcynic-html /var/rcynic/data/rcynic.xml /usr/local/www/data/rcynic
- /usr/bin/su -m rcynic -c '/usr/local/bin/rpki-rtr cronjob /var/rcynic/data/authenticated /var/rcynic/rpki-rtr'
-
-This assumes that you have done
-
- mkdir /var/rcynic/rpki-rtr
- chown rcynic /var/rcynic/rpki-rtr
-
-On GNU/Linux systems, the script might look like this if you use the chrootuid
-program:
-
- #!/bin/sh -
- /usr/bin/chrootuid /var/rcynic rcynic /bin/rcynic -c /etc/rcynic.conf || exit
- /var/rcynic/bin/rcynic-html /var/rcynic/data/rcynic.xml /var/www/rcynic
- /usr/bin/su -m rcynic -c '/usr/local/bin/rpki-rtr cronjob /var/rcynic/data/authenticated /var/rcynic/rpki-rtr'
-
-If you use the chroot program instead of chrootuid, change the line that
-invokes rcynic to:
-
- /usr/sbin/chroot --userspec rcynic:rcynic /var/rcynic /bin/rcynic -c /etc/rcynic.conf || exit
-
-[RP]: 05.RPKI.RP.md