aboutsummaryrefslogtreecommitdiff
path: root/doc/quickstart/xenial-rp.md
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2016-08-09 12:27:48 -0400
committerRob Austein <sra@hactrn.net>2016-08-09 12:27:48 -0400
commitb2eee832ae27af6ea82f412ee304a778b0910851 (patch)
tree9d8db8579d325f312adc5fb6050f7017aaf51b18 /doc/quickstart/xenial-rp.md
parent154547823805f6588d27fcd7d3e78d37b0cf6ef1 (diff)
Jessie comments; spelling/typo/trailing-whitespace cleanup.
Randy accidently pushed a bunch of unsigned commits. I reviewed them before signing this one. Randy's knuckles have been whacked.
Diffstat (limited to 'doc/quickstart/xenial-rp.md')
-rw-r--r--doc/quickstart/xenial-rp.md30
1 files changed, 15 insertions, 15 deletions
diff --git a/doc/quickstart/xenial-rp.md b/doc/quickstart/xenial-rp.md
index 0e9fd1ef..f071d6d5 100644
--- a/doc/quickstart/xenial-rp.md
+++ b/doc/quickstart/xenial-rp.md
@@ -8,22 +8,22 @@ minutes.
I built the following:
* 32GB of hard disk, enough to leave headroom unless you plan a LOT of
- certificates, as in thousands;
- * 1GB or RAM, as it still is a bit of a RAM hog; and
- * One CPU should be enough to start.
+ certificates, as in thousands;
+ * 1GB or RAM, as it still is a bit of a RAM hog; and
+ * One CPU should be enough to start.
* The server must not have an AAAA DNS RR unless it has working IPv6
- connectivity.
+ connectivity.
## Ingredients
You can start with the following:
* [16.04 Ubuntu Xenial LTS 64-bit server](http://releases.ubuntu.com/16.04/ubuntu-16.04-server-amd64.iso)
- * I do a fairly basic install, OpenSSH, basic utilities, and grub
- * apt update and apt dist-upgrade of course
+ * I do a fairly basic install, OpenSSH, basic utilities, and grub
+ * apt update and apt dist-upgrade of course
* I install automatic updates, emacs-nox, ntp, ... with ansible. Note
that ansible requires python2 and xenial installs python3. So I had to
- install python2.7
+ install python2.7
I am lazy and log in as root as pretty much everything I do is going to
require being root. If you like sudo, then just prefix a lot with it.
@@ -35,19 +35,19 @@ machine.
Add the GPG public key for this repository (optional, but APT will whine
unless you do this):
-
+
# wget -q -O /etc/apt/trusted.gpg.d/rpki.asc https://download.rpki.net/APTng/apt-gpg-key.asc
-
+
Configure APT to use this repository (for Ubuntu Xenial):
# wget -q -O /etc/apt/sources.list.d/rpki.list https://download.rpki.net/APTng/rpki.xenial.list
-
+
Update available packages:
-
+
# apt update
Install the software:
-
+
# apt install rpki-rp
## Minimal Configuration
@@ -70,7 +70,7 @@ place.
The rcynic web page is likely not yet populated because the cron job to
populate is generated for a socially polite cache which fetches once an
hour.
-
+
# crontab -l -u rpki
MAILTO=root
42 * * * * exec /usr/bin/rcynic-cron
@@ -98,9 +98,9 @@ pre [RFC 6810](http://www.rfc-editor.org/rfc/rfc6810.txt).
EOF
If you have to change it, remember to
-
+
# systemctl restart xinetd
-
+
The configuration for rcynic is in `/etc/rpki.conf`. Note that it says
to use the trust anchors in the directory `/etc/rpki/trust-anchors`. You
may want to change the set of trust anchors if you have unusual