2008-06-19 09:35:37 +02:00
|
|
|
This is an EXPERIMENTAL version of CryptoNAS for Debian Live!
|
|
|
|
|
|
2008-07-04 07:33:24 +02:00
|
|
|
Read http://devel.cryptobox.org/wiki/DebianLiveBuild before
|
|
|
|
|
you do anything else.
|
2008-06-19 09:35:37 +02:00
|
|
|
|
|
|
|
|
|
2008-07-04 07:33:24 +02:00
|
|
|
It is recommended that you run "./rm-tmps.sh" after making configuration
|
|
|
|
|
changes using an editor but before starting a new build.
|
2008-06-19 09:35:37 +02:00
|
|
|
|
2008-07-04 07:33:24 +02:00
|
|
|
For the convenience of other developers, the debian-patched
|
|
|
|
|
live-helper scripts being used are located in
|
|
|
|
|
the "tools" folder. The version of live-helper distributed
|
|
|
|
|
with Ubuntu "Gutsy Gibbon" does NOT work for CryptoNAS.
|
2008-06-19 09:35:37 +02:00
|
|
|
|
2008-07-04 07:33:24 +02:00
|
|
|
You should add the following line to apt-cacher's source list
|
|
|
|
|
(for example, /etc/apt/sources.list) and run "aptitude update":
|
|
|
|
|
deb http://systemausfall.org/toolforge/debian unstable main
|
|
|
|
|
|
|
|
|
|
The only files and folders relevant to this version are:
|
|
|
|
|
tools/
|
|
|
|
|
rm-tmps.sh
|
|
|
|
|
config/
|
|
|
|
|
README.devel.
|
|
|
|
|
I'm keeping the folders from the legacy CryptoNAS build system around
|
|
|
|
|
until I'm sure we don't need them. Don't be confused by their continued
|
|
|
|
|
presence in the "deb-live" SVN branch.
|
|
|
|
|
|
2008-07-12 05:27:05 +02:00
|
|
|
config/chroot_local-includes/usr/lib/cryptobox-cd/etc.d/modules and
|
|
|
|
|
config/chroot_local-includes/usr/lib/cryptobox-cd/etc.d/network/interfaces
|
|
|
|
|
will now be used at boot time if they exist.
|
|
|
|
|
|
|
|
|
|
|
2008-08-02 09:35:05 +02:00
|
|
|
Source Code Info
|
|
|
|
|
----------------
|
|
|
|
|
The $LH_SOURCE feature of "live-helper" is not currently working with
|
|
|
|
|
CryptoNAS. Instead, for source code, do:
|
|
|
|
|
"svn checkout https://svn.systemausfall.org/svn/cryptobox"
|
|
|
|
|
|
|
|
|
|
The other source code used for CryptoNAS Live is located in the "Etch"
|
|
|
|
|
Debian release. A list of mirror sites (created using
|
|
|
|
|
"wget --no-host-directories --cut-dirs=1 --convert-links --page-requisites
|
|
|
|
|
http://www.debian.org/mirror/list") is included in the
|
|
|
|
|
CryptoNAS subversion repository in the "deb-live/Debian-Mirrors" folder.
|
|
|
|
|
A current list of mirrors is also located at
|
|
|
|
|
"http://www.debian.org/mirror/list".
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
TODO
|
|
|
|
|
----
|
2008-07-04 07:33:24 +02:00
|
|
|
check against validation scripts
|
|
|
|
|
check that "secure" build works
|
|
|
|
|
set up a firewall in the "secure" build
|
|
|
|
|
|
|
|
|
|
/etc/modules (make sure desired modules load at startup)
|
|
|
|
|
|
|
|
|
|
complete "cryptonas" name change
|
|
|
|
|
possibly move /usr/lib/cryptobox-cd to /usr/share/cryptonas-cd
|
|
|
|
|
get apt-secure working
|
|
|
|
|
enable apache2 DAV
|
|
|
|
|
integrate with cryptobox-server 4.0
|
|
|
|
|
for release version, try to isolate which parts of debian "standard" packages
|
|
|
|
|
are really needed to avoid errors and which are extraneous
|
|
|
|
|
|
2008-07-12 05:27:05 +02:00
|
|
|
custom splash screen for syslinux
|
|
|
|
|
stream music
|
|
|
|
|
check filesystems periodically
|
|
|
|
|
make drive identification more user-friendly (not just "/dev/foo")
|
|
|
|
|
"install to hard disk or similar device" function (not high priority)
|
|
|
|
|
get COW working
|
2008-07-04 07:33:24 +02:00
|
|
|
|
2008-07-12 05:27:05 +02:00
|
|
|
|
|
|
|
|
Short term goals:
|
2008-08-02 09:35:05 +02:00
|
|
|
----------------
|
2008-07-04 07:33:24 +02:00
|
|
|
add explanatory text to etc-scoreboard file
|
|
|
|
|
do any more files need copyright notices?
|
|
|
|
|
set up reasonable defaults in cnas-default-settings (use gedit with multiple separate windows)
|
|
|
|
|
/etc/network/interfaces
|
2008-08-02 09:35:05 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
Known Issues:
|
|
|
|
|
------------
|
|
|
|
|
Debian Live boot media shown in list of available disks
|
|
|
|
|
Mounted encrypted volumes shown twice in list of available disks (may have been fixed already)
|
|
|
|
|
*syslinux splash screen needs customization
|
|
|
|
|
*"secure"/minimal setup needs to be built and tested
|
|
|
|
|
*needs to be built using a *.deb based on SVN "head" to make sure that glaring English-language
|
|
|
|
|
issues were fixed since live-cd 3.1
|
|
|
|
|
*When NOT using a user-supplied /etc/network/interfaces (haven't tried it *with* user-supplied
|
|
|
|
|
"interfaces") and the user chooses a new IP address via the web interface, the old DHCP-assigned
|
|
|
|
|
address is still accessible
|
|
|
|
|
*Reading an encrypted live-cd image doesn't work using Etch as the build system
|
|
|
|
|
*LH_APT_SECURE must be set to "enabled" in Etch or else cdebootstrap fails
|
|
|
|
|
|
|
|
|
|
LH_SOURCE="enabled" doesn't work yet
|
