189 lines
8.5 KiB
HTML
189 lines
8.5 KiB
HTML
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
||
|
|
<head>
|
||
|
|
<title>CryptoBox</title>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<link rel="stylesheet" media="screen" href="../../../var/www/cryptobox.css" type="text/css" />
|
||
|
|
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
|
||
|
|
<div id="lang">
|
||
|
|
<a href="../en/CryptoBox.html">English</a><br/>
|
||
|
|
<a href="../de/CryptoBox.html">Deutsch</a><br/>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<div id="main">
|
||
|
|
<div id="head">
|
||
|
|
<h1>The CryptoBox</h1>
|
||
|
|
<h2>Privacy for the rest of us.</h2>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<div id="content">
|
||
|
|
<div id="menu">
|
||
|
|
<a href="CryptoBox.html">Overview</a>
|
||
|
|
<a href="CryptoBoxUser.html">User documentation</a>
|
||
|
|
<a href="CryptoBoxDev.html">Development</a>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<div id="doc">
|
||
|
|
|
||
|
|
<a id="top"></a>
|
||
|
|
<ol>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-adacf7a8271d3f6fe8bdfb9773ac3b1f4b050f9a">Preparations</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-61cec4152bb64ed5799ae7422f7150a4e3bc4860">Create a CryptoBox-LiveCD - step by step</a>
|
||
|
|
<ol>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-0ace019b2e7f624b4af95b328aa511a0453bd656">Build the base system</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-b12afd5dca3afd8290b311944f1dd1ab3d16fa6f">Configure the base image</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-22535d762de22b1c0b1be445d1ee560bc72a481f">Remove development features</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-09b84611139bf8f53380587b5b09588d97b4ff1c">Create an iso image</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-c78fdb473369885eacd6cb10fcfb00cad50f2670">Burn the CD</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
</ol>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-995d4701e181a853fd1d87811b76e802a1c61d96">Test the CryptoBox-LiveCD</a>
|
||
|
|
<ol>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-25203ae5362d0bbc82ec84b349fb463c1e615b48">Chroot: quick & dirty tests</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-2278b94f0a24871a501d80c4e6e0c53d1f5621ca">Qemu: nearly complete emulation</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
</ol>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-0692ec42b1a03fdbc5eb920dd05b86c5f04130e6">Debugging and merging</a>
|
||
|
|
<ol>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-b163acd694c2681db27c18414367513219cfc06f">Development on a running system</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
<li>
|
||
|
|
<a href="#head-4bfb5d81f79e604fd8a4eb20a6d709bc65562fe3">Uploading a new release</a>
|
||
|
|
</li>
|
||
|
|
|
||
|
|
</ol>
|
||
|
|
|
||
|
|
</li>
|
||
|
|
|
||
|
|
</ol>
|
||
|
|
<p> </p>
|
||
|
|
<hr>
|
||
|
|
<p> </p>
|
||
|
|
<p><em>back to <a href="CryptoBoxDev.html">CryptoBoxDev</a></em> </p>
|
||
|
|
|
||
|
|
<h2 id="head-adacf7a8271d3f6fe8bdfb9773ac3b1f4b050f9a">Preparations</h2>
|
||
|
|
|
||
|
|
<p>You should have completed the steps described in <a href="CryptoBoxDevPreparation.html">CryptoBoxDevPreparation</a>. </p>
|
||
|
|
|
||
|
|
<h2 id="head-61cec4152bb64ed5799ae7422f7150a4e3bc4860">Create a CryptoBox-LiveCD - step by step</h2>
|
||
|
|
|
||
|
|
<p>The following steps can be executed in the order of their appearance. </p>
|
||
|
|
<p>Usually there is no need to repeat the whole process, after you changed some parts of the <a href="CryptoBox.html">CryptoBox</a>. Especially the first step (building of the base system with <em>dfsbuild</em>) may usually be skipped. </p>
|
||
|
|
<p>Every step of the building process must be executed as <em>root</em>. </p>
|
||
|
|
|
||
|
|
<h3 id="head-0ace019b2e7f624b4af95b328aa511a0453bd656">Build the base system</h3>
|
||
|
|
|
||
|
|
<p>Run <tt>scripts/cbox-build.sh dfsbuild</tt> to create the base system for the LiveCD. </p>
|
||
|
|
<p>The result can be found in <em>_builddir/cd1/image</em>. </p>
|
||
|
|
<p>If you do not want to use the <em><a class="interwiki" title="DebianPackage" href="http://packages.debian.org/cgi-bin/search_packages.pl?searchon=names&subword=1&version=all&release=all&keywords=apt-cacher">apt-cacher</a></em> to save bandwidth and time, then you should modify the <em>mirror</em>-setting in <em>dfs-cbox.conf</em> (see <a href="CryptoBoxDevCustomBuild.html">CryptoBoxDevCustomBuild</a> for details). </p>
|
||
|
|
|
||
|
|
<h3 id="head-b12afd5dca3afd8290b311944f1dd1ab3d16fa6f">Configure the base image</h3>
|
||
|
|
|
||
|
|
<p>Run <tt>scripts/cbox-build.sh config</tt> to copy the <a href="CryptoBox.html">CryptoBox</a>-specific files to the base image. </p>
|
||
|
|
<p>TODO: link to cbox-build.sh-manpage </p>
|
||
|
|
|
||
|
|
<h3 id="head-22535d762de22b1c0b1be445d1ee560bc72a481f">Remove development features</h3>
|
||
|
|
|
||
|
|
<p>The original base system, that was created by <em>dfsbuild</em> contains a lot packages and some scripts, that are only useful during development. You should remove them, as they case severe security implications. </p>
|
||
|
|
<p>To reduce the <a href="CryptoBox.html">CryptoBox</a>-LiveCD to the usable minimum for operational use, you should run <tt>scripts/cbox-build.sh harden</tt>. </p>
|
||
|
|
|
||
|
|
<h3 id="head-09b84611139bf8f53380587b5b09588d97b4ff1c">Create an iso image</h3>
|
||
|
|
|
||
|
|
<p>To burn a <a href="CryptoBox.html">CryptoBox</a>-LiveCD, you need an bootable <em>iso9660</em>-image. </p>
|
||
|
|
<p>Create the <em>iso</em> image with <tt>scripts/cbox-build.sh iso</tt>. The resulting file can be found at <em>_builddir/cd1/cryptobox.iso</em>. </p>
|
||
|
|
|
||
|
|
<h3 id="head-c78fdb473369885eacd6cb10fcfb00cad50f2670">Burn the CD</h3>
|
||
|
|
|
||
|
|
<p>Do it manually: <tt>cdrecord -v dev=0,0,0 _builddir/cd1/cryptobox.iso</tt> (change the <em>dev</em> setting according to your setup). </p>
|
||
|
|
<p>Let the script do it for you: <tt>scripts/cbox-build.sh burn</tt> (maybe you have to change the <em>CDWRITER</em> setting in <em>cbox-dev.conf</em> - see <a href="CryptoBoxDevCustomBuild.html">CryptoBoxDevCustomBuild</a>). </p>
|
||
|
|
<p>Of course, it is not wise to use CD-R media. CD-RW consume less resources. </p>
|
||
|
|
|
||
|
|
<h2 id="head-995d4701e181a853fd1d87811b76e802a1c61d96">Test the CryptoBox-LiveCD</h2>
|
||
|
|
|
||
|
|
<p>This section is only useful for developers, who want to improve or change the <a href="CryptoBox.html">CryptoBox</a> system. </p>
|
||
|
|
|
||
|
|
<h3 id="head-25203ae5362d0bbc82ec84b349fb463c1e615b48">Chroot: quick & dirty tests</h3>
|
||
|
|
|
||
|
|
<p>If you modified the <em>perl</em>- or <em>shell</em>-scripts of the <a href="CryptoBox.html">CryptoBox</a>, then you can check for syntax errors by running them in a <em>chroot</em> environment. Be careful: you have access to all ressources of your computer, while you are working within a <em>chroot</em> environment - so you can easily repartition your real disk ... </p>
|
||
|
|
<p>To start a <em>chroot</em> environment, you can execute <tt>scripts/cbox-dev.sh chroot</tt>. </p>
|
||
|
|
<p>For more intensive tests, you may use <em>qemu</em> (see below) or burn real LiveCDs - of course this would take much more time. </p>
|
||
|
|
|
||
|
|
<h3 id="head-2278b94f0a24871a501d80c4e6e0c53d1f5621ca">Qemu: nearly complete emulation</h3>
|
||
|
|
|
||
|
|
<p>The processor emulator <a class="external" href="http://fabrice.bellard.free.fr/qemu">qemu</a> allows you test the <a href="CryptoBox.html">CryptoBox</a> in a virtual environment, that is completely separated from your real computer's resources. It is the tool of choice, if you do nat have a real computer around for testing. </p>
|
||
|
|
<p>Beware - there are some problems, when using <em>qemu</em>: </p>
|
||
|
|
<ul>
|
||
|
|
<li><p> <em>smbd</em> does not start (segfault) </p>
|
||
|
|
</li>
|
||
|
|
<li><p> ??? </p>
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
<p>To start a <em>qemu</em> emulation of the <em>iso</em> image, you may type: <tt>scripts/cbox-dev.sh qemu</tt>. </p>
|
||
|
|
|
||
|
|
<h2 id="head-0692ec42b1a03fdbc5eb920dd05b86c5f04130e6">Debugging and merging</h2>
|
||
|
|
|
||
|
|
<p>This section is only useful for developers, who want to develop on a running <a href="CryptoBox.html">CryptoBox</a> system (emulated or real). </p>
|
||
|
|
<p>You may access the <a href="CryptoBox.html">CryptoBox</a> directly or you can use <em>ssh</em> to open a remote session (<tt>./cbox-dev.sh ssh</tt>). </p>
|
||
|
|
|
||
|
|
<h3 id="head-b163acd694c2681db27c18414367513219cfc06f">Development on a running system</h3>
|
||
|
|
|
||
|
|
<p>When you run an emulation or test a real LiveCD, you may encounter problems and bugs. To test your fixes for these problems, it is convenient, to change the running test system. Afterwards you can merge these changes to your local development copy. </p>
|
||
|
|
<p>Type <tt>scripts/cbox-dev.sh diff</tt> to see the changes, you made on the running <a href="CryptoBox.html">CryptoBox</a> system. </p>
|
||
|
|
<p>Type <tt>scripts/cbox-dev.sh merge</tt> to merge these changes to your local working copy. </p>
|
||
|
|
|
||
|
|
<h3 id="head-4bfb5d81f79e604fd8a4eb20a6d709bc65562fe3">Uploading a new release</h3>
|
||
|
|
|
||
|
|
<p>Alternatively you may also upload a new version of your local working copy to the running <a href="CryptoBox.html">CryptoBox</a> system. </p>
|
||
|
|
<p>Type <tt>scripts/cbox-dev.sh upload</tt> - beware: all recent changes you made to the running <a href="CryptoBox.html">CryptoBox</a> system, are lost. </p>
|
||
|
|
|
||
|
|
</div><!-- end of 'words' -->
|
||
|
|
|
||
|
|
<div id="footer">
|
||
|
|
<a href="https://systemausfall.org/prj/cryptobox" title="Project page">CryptoBox-Home</a> The CryptoBox is a project of <a href="https://systemausfall.org/senselab" title="systemausfall.org">sense.lab</a>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
</body>
|
||
|
|
</html>
|
||
|
|
|