Contents
In the following example we shall follow instructions to setup sumotsu.debian.net as unofficial, all DD accessible, porterbox.
(optional) Add machine info to Debian LDAP
See howto setup Debian.net domains
- See example below, contact DSA for them to add needed LDAP entry.
(optional) Make it accessible to all DD
Install userdir-ldap -- db.d.o has packages.
- Make sure machine resolves 'db' at db.debian.org (add search debian.org to DNS resolver)
Make sure hostname -f resolves the right FQDN, if not fix /etc/hosts entries.
- Once you can run ud-replicate successfully,
- put it into a 15 minute cron or so
- adopt /etc/nsswitch.conf to have the following entries:
passwd: compat db group: db compat shadow: compat db
set ?AuthorizedKeysFile in sshdconfig to
AuthorizedKeysFile /var/lib/misc/userkeys/%u
Note that this will make ~/.ssh/authorized_keys files be ignored. If you want to keep those, add that to the list.
Setup porterbox
package installation
Install zsh if it is not installed.
bin files
/usr/local/sbin/{setup-all-dchroots, setup-dchroot}
/usr/local/bin/{dd-schroot-cmd,schroot-list-sessions}
etc files
create cron jobs
/etc/cron.d/ud-replicate
# crontab for the fallback replicate operation, should be handled by the daemon @weekly root if [ -x /usr/bin/ud-replicate ]; then /usr/bin/ud-replicate; fi
/etc/cron.d/puppet-update-dchroots
0 15 * * 0 root PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/sbin:/usr/local/bin setup-all-dchroots '''
Example LDAP entry
# sumotsu, hosts, debian.org dn: host=sumotsu,ou=hosts,dc=debian,dc=org host: sumotsu hostname: sumotsu.debian.net objectClass: top objectClass: debianServer description: sh4 porter box distribution: Debian GNU/Linux access: public (non-DSA-machine) architecture: sh4 machine: Renesas SH purpose: porterbox exportOptions: NOPASSWD exportOptions: NOMARKERS ipHostNumber: 60.32.100.60 admin: sh4-porterbox-admin@superh.org sshRSAHostKey: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgybHqW0EV+4oo5UpAURyAzAYGAOcdbsme0UL5mJSEwXVZ25b8vH+z1SbZIDvN8Zjz07qas2l51bnV2WsM6GRn6CMW7Yx/ds128AsIsq5Ux1YZWZ6CqRuw8XQMZwEeMT+5GeJY4MgnCiUkHWyEcelHP4SFs8qOL07pKPZY/aZfeWbHLq3RJ4I98D5LrQNVolCz3bMt8uIlcAewgSkVZuBPScQ2WwP58oCvmGfUfwrNrpQZT7JleX6aueyLHWjwFuUx0JgPu+oKKGcq3FaZebDJp7eeZu6zNpE5iUSLg+/rf4/sUS8QIp/5WAOusdWyuMpMYZocOxkaqdVnr/+lKGMB root@sumotsu allowedGroups: Debian