/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release
179 by Teddy Hogeborn
* INSTALL: New file.
1
-*- org -*-
2
3
* Prerequisites
4
  
5
  Debian 5.0 "lenny" or Ubuntu 8.04 "Hardy Heron".
6
  
7
  The following libraries and packages are needed.  (It is possible
8
  that it might work with older versions of some of these, but these
9
  versions are confirmed to work.  Newer versions are almost certainly
10
  OK.)
11
  
12
** Documentation
13
   These are required to build the manual pages for both the server
14
   and client:
15
   
16
   + DocBook 4.5          http://www.docbook.org/
17
   + DocBook XSL stylesheets 1.71.0
18
                   http://wiki.docbook.org/topic/DocBookXslStylesheets
19
  
20
** Mandos Server
21
   + GnuTLS 2.4           http://www.gnu.org/software/gnutls/
22
   + Avahi 0.6.16         http://www.avahi.org/
23
   + Python 2.4           http://www.python.org/
24
   + Python-GnuTLS 1.1.5  http://pypi.python.org/pypi/python-gnutls/
25
   + dbus-python 0.82.4   http://dbus.freedesktop.org/doc/dbus-python/
26
   + python-ctypes 1.0.0  http://pypi.python.org/pypi/ctypes
27
   
28
   Strongly recommended:
29
   + fping 2.4b2-to-ipv6  http://www.fping.com/
30
  
31
** Mandos Client
32
   + initramfs-tools 0.85i
33
                  http://packages.qa.debian.org/i/initramfs-tools.html
34
   + GnuTLS 2.4           http://www.gnu.org/software/gnutls/
35
   + Avahi 0.6.16         http://www.avahi.org/
36
   + GnuPG 1.4.9          http://www.gnupg.org/
37
   + GPGME 1.1.6          http://www.gnupg.org/related_software/gpgme/
38
39
* Installing the Mandos server
40
  
41
  + Do "make doc".
42
  
43
  + On the computer to run as a Mandos server, run the following
44
    command: "sudo make install-server".
45
    
46
    (This creates a configuration without any clients configured; we
47
    need an actually configured client to do that; see below.)
48
49
* Installing the Mandos client.
50
  
51
  + Do "make all doc".
52
  
53
  + On the computer to run as a Mandos server, run the following
54
    command: "sudo make install-client".  This will also create an
55
    OpenPGP key, which will take some time and entropy, so either wait
56
    patiently or frob your mouse until it's done.
57
  
58
  + Run "mandos-keygen --password".  When prompted, enter the
59
    password/passphrase for the encrypted root file system on this
60
    client computer.  It will output a section of text, starting with
61
    a [section header].  Copy and paste this into the
62
    "/etc/mandos/clients.conf" file *on the server computer*.
63
  
64
  + On the server computer, start the server by running the command
65
    "invoke-rc.d mandos start".
66
67
* Further customizations
68
  
69
  You may want to tighten or loosen the timeouts in the server
70
  configuration files; see mandos.conf(5) and mandos-clients.conf(5).
71
  Is IPsec is not used, it is suggested that a more cryptographically
72
  secure checker program is used and configured, since without IPsec
73
  ping packets can be faked.