Browse Source

Create warning emails from daily tests

Bob Mottram 7 years ago
parent
commit
d855ff6942
5 changed files with 444 additions and 7 deletions
  1. 1
    1
      doc/EN/index.org
  2. 68
    0
      doc/EN/release3.org
  3. 8
    1
      src/freedombone-utils-cron
  4. 3
    5
      website/EN/index.html
  5. 364
    0
      website/EN/release3.html

+ 1
- 1
doc/EN/index.org View File

@@ -17,7 +17,7 @@
17 17
 #+end_quote
18 18
 
19 19
 #+BEGIN_CENTER
20
-[[file:images/beaglebone_logo.jpg]]
20
+[[./release3.html][New version 3 (Stretch)]]
21 21
 #+END_CENTER
22 22
 
23 23
 So you want to run your own internet services? Email, chat, VoIP, web sites, file synchronisation, wikis, blogs, social networks, media hosting, backups. Freedombone enables you to do all of that in a self-hosted way, where you keep control of your data and it resides in your own home.

+ 68
- 0
doc/EN/release3.org View File

@@ -0,0 +1,68 @@
1
+#+TITLE:
2
+#+AUTHOR: Bob Mottram
3
+#+EMAIL: bob@freedombone.net
4
+#+KEYWORDS: freedombone
5
+#+DESCRIPTION: Version 3
6
+#+OPTIONS: ^:nil toc:nil
7
+#+HTML_HEAD: <link rel="stylesheet" type="text/css" href="freedombone.css" />
8
+
9
+#+BEGIN_CENTER
10
+[[file:images/logo.png]]
11
+#+END_CENTER
12
+
13
+#+BEGIN_EXPORT html
14
+<center>
15
+<h1>Version 3: Building an internet run by the users, for the users</h1>
16
+</center>
17
+#+END_EXPORT
18
+
19
+The internet may still be mostly in the clutches of a few giant megacorporations and dubious governments with sketchy agendas, but it doesn't have to remain that way. With the third version of the Freedombone system there is now more scope than before to take back your privacy, have ownership of personal data and run your own online communities without unnecessary or unwelcome intermediaries.
20
+
21
+Freedombone version 3 is based on Debian 9 (Stretch). It was released in July 2017 and includes:
22
+
23
+ * Faster initial setup
24
+ * More [[./apps.html][installable apps]] than the previous release, including CryptPad, Koel, NextCloud, PostActiv, Friendica and Matrix/RiotWeb
25
+ * Automated [[https://github.com/hardenedlinux/STIG-4-Debian][security tests]]
26
+ * Improved XMPP configuration to support all of the XEPs needed by the [[https://conversations.im][Conversations]] app
27
+ * Improved account and domain blocking controls for GNU Social and PostActiv for a better federated network experience
28
+ * Uses [[https://en.wikipedia.org/wiki/EdDSA][elliptic curve]] based GPG keys by default for better performance on low power single board computers
29
+ * Pre-downloaded repos distributed within images for faster and more autonomous app installs
30
+
31
+* Installation
32
+
33
+The simplest way to install is from a pre-made disk image. Images can be [[https://freedombone.net/downloads/v3][downloaded here]]. You will need to have previously obtained a domain name and have a dynamic DNS account somewhere.
34
+
35
+Copy the image to a microSD card or USB thumb drive, replacing sdX with the identifier of the USB thumb drive. Don't include any numbers (so for example use sdc instead of sdc1).
36
+
37
+#+BEGIN_SRC bash
38
+dd bs=1M if=myimagefile.img of=/dev/sdX conv=fdatasync
39
+#+END_SRC
40
+
41
+And wait. It will take a while to copy over. When that's done plug the microSD or USB drive into the target hardware which you want to use as a server and power on. If you're using an old laptop or netbook as the server then you will need to set the BIOS to boot from USB.
42
+
43
+As the system boots for the first time the login is:
44
+
45
+#+BEGIN_SRC bash
46
+username: fbone
47
+password: freedombone
48
+#+END_SRC
49
+
50
+If you're installing from a microSD card on a single board computer without a screen and keyboard attached then you can ssh into it with:
51
+
52
+#+BEGIN_SRC bash
53
+ssh fbone@freedombone.local -p 2222
54
+#+END_SRC
55
+
56
+Using the initial password "freedombone". If you have trouble accessing the server then make sure you have Avahi installed and [[https://en.wikipedia.org/wiki/Multicast_DNS][mDNS]] enabled.
57
+
58
+You will then be shown a new randomly generated password. It's very important that you write this down somewhere or transfer it to a password manager before going further, because you'll need this to log in later.
59
+
60
+* Upgrading from a previous install
61
+
62
+To upgrade from the Debian Jessie version first create a master keydrive. Go to the *Administrator control panel* and select *Backup and restore* then *Backup GPG key to USB (master keydrive)*. Insert a LUKS encrypted USB drive. When that is done Create a full backup by selecting *Backup data to USB drive* and using another LUKS encrypted USB drive.
63
+
64
+Follow the installation infstructions for the new Freedombone version, as described in the previous section. When the new system starts installing it will ask if you want to restore your GPG keys. Select *yes* and plug in your master keydrive.
65
+
66
+When the initial setup is complete go to the *Administrator control panel* and select *Backup and restore* then *Restore data from USB drive* followed by *all*. Insert the backup USB drive which you made previously. This will restore the base system, including any emails.
67
+
68
+You can now go to *Add/Remove apps* on the *Administrator control panel* and add the apps you want. Once they're installed you can recover their content and settings from *Backup and Restore*.

+ 8
- 1
src/freedombone-utils-cron View File

@@ -79,9 +79,16 @@ function randomize_cron {
79 79
 
80 80
 function schedule_stig_tests {
81 81
     echo '#!/bin/bash' > /etc/cron.daily/stig_tests
82
+    echo "ADMIN_EMAIL_ADDRESS=${MY_USERNAME}@\${HOSTNAME}" >> /etc/cron.daily/stig_tests
82 83
     echo "pkill ${PROJECT_NAME}-tests" >> /etc/cron.daily/stig_tests
83 84
     echo 'rm -rf /tmp/*' >> /etc/cron.daily/stig_tests
84
-    echo "${PROJECT_NAME}-tests --stig yes" >> /etc/cron.daily/stig_tests
85
+    echo "${PROJECT_NAME}-tests --stig yes 2> /tmp/daily-stig-tests" >> /etc/cron.daily/stig_tests
86
+    echo 'if [ ! "$?" = "0" ]; then' >> /etc/cron.daily/stig_tests
87
+    echo "    echo \"\$(cat /tmp/daily-stig-tests)\" | mail -s \"${PROJECT_NAME} STIG test failures\" \$ADMIN_EMAIL_ADDRESS" >> /etc/cron.daily/stig_tests
88
+    echo 'fi' >> /etc/cron.daily/stig_tests
89
+    echo 'if [ -f /tmp/daily-stig-tests ]; then' >> /etc/cron.daily/stig_tests
90
+    echo '  rm /tmp/daily-stig-tests' >> /etc/cron.daily/stig_tests
91
+    echo 'fi' >> /etc/cron.daily/stig_tests
85 92
     chmod +x /etc/cron.daily/stig_tests
86 93
 }
87 94
 

+ 3
- 5
website/EN/index.html View File

@@ -3,7 +3,7 @@
3 3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4 4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 5
 <head>
6
-<!-- 2017-06-27 Tue 13:17 -->
6
+<!-- 2017-06-30 Fri 10:02 -->
7 7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8 8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9 9
 <title></title>
@@ -255,12 +255,10 @@ for the JavaScript code in this tag.
255 255
 </blockquote>
256 256
 
257 257
 <div class="org-center">
258
-
259
-<div class="figure">
260
-<p><img src="images/beaglebone_logo.jpg" alt="beaglebone_logo.jpg" />
258
+<p>
259
+<a href="./release3.html">New version 3 (Stretch)</a>
261 260
 </p>
262 261
 </div>
263
-</div>
264 262
 
265 263
 <p>
266 264
 So you want to run your own internet services? Email, chat, VoIP, web sites, file synchronisation, wikis, blogs, social networks, media hosting, backups. Freedombone enables you to do all of that in a self-hosted way, where you keep control of your data and it resides in your own home.

+ 364
- 0
website/EN/release3.html View File

@@ -0,0 +1,364 @@
1
+<?xml version="1.0" encoding="utf-8"?>
2
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
3
+"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
+<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
+<head>
6
+<!-- 2017-06-30 Fri 13:57 -->
7
+<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
+<meta name="viewport" content="width=device-width, initial-scale=1" />
9
+<title></title>
10
+<meta name="generator" content="Org mode" />
11
+<meta name="author" content="Bob Mottram" />
12
+<meta name="description" content="Version 3"
13
+ />
14
+<meta name="keywords" content="freedombone" />
15
+<style type="text/css">
16
+ <!--/*--><![CDATA[/*><!--*/
17
+  .title  { text-align: center;
18
+             margin-bottom: .2em; }
19
+  .subtitle { text-align: center;
20
+              font-size: medium;
21
+              font-weight: bold;
22
+              margin-top:0; }
23
+  .todo   { font-family: monospace; color: red; }
24
+  .done   { font-family: monospace; color: green; }
25
+  .priority { font-family: monospace; color: orange; }
26
+  .tag    { background-color: #eee; font-family: monospace;
27
+            padding: 2px; font-size: 80%; font-weight: normal; }
28
+  .timestamp { color: #bebebe; }
29
+  .timestamp-kwd { color: #5f9ea0; }
30
+  .org-right  { margin-left: auto; margin-right: 0px;  text-align: right; }
31
+  .org-left   { margin-left: 0px;  margin-right: auto; text-align: left; }
32
+  .org-center { margin-left: auto; margin-right: auto; text-align: center; }
33
+  .underline { text-decoration: underline; }
34
+  #postamble p, #preamble p { font-size: 90%; margin: .2em; }
35
+  p.verse { margin-left: 3%; }
36
+  pre {
37
+    border: 1px solid #ccc;
38
+    box-shadow: 3px 3px 3px #eee;
39
+    padding: 8pt;
40
+    font-family: monospace;
41
+    overflow: auto;
42
+    margin: 1.2em;
43
+  }
44
+  pre.src {
45
+    position: relative;
46
+    overflow: visible;
47
+    padding-top: 1.2em;
48
+  }
49
+  pre.src:before {
50
+    display: none;
51
+    position: absolute;
52
+    background-color: white;
53
+    top: -10px;
54
+    right: 10px;
55
+    padding: 3px;
56
+    border: 1px solid black;
57
+  }
58
+  pre.src:hover:before { display: inline;}
59
+  /* Languages per Org manual */
60
+  pre.src-asymptote:before { content: 'Asymptote'; }
61
+  pre.src-awk:before { content: 'Awk'; }
62
+  pre.src-C:before { content: 'C'; }
63
+  /* pre.src-C++ doesn't work in CSS */
64
+  pre.src-clojure:before { content: 'Clojure'; }
65
+  pre.src-css:before { content: 'CSS'; }
66
+  pre.src-D:before { content: 'D'; }
67
+  pre.src-ditaa:before { content: 'ditaa'; }
68
+  pre.src-dot:before { content: 'Graphviz'; }
69
+  pre.src-calc:before { content: 'Emacs Calc'; }
70
+  pre.src-emacs-lisp:before { content: 'Emacs Lisp'; }
71
+  pre.src-fortran:before { content: 'Fortran'; }
72
+  pre.src-gnuplot:before { content: 'gnuplot'; }
73
+  pre.src-haskell:before { content: 'Haskell'; }
74
+  pre.src-hledger:before { content: 'hledger'; }
75
+  pre.src-java:before { content: 'Java'; }
76
+  pre.src-js:before { content: 'Javascript'; }
77
+  pre.src-latex:before { content: 'LaTeX'; }
78
+  pre.src-ledger:before { content: 'Ledger'; }
79
+  pre.src-lisp:before { content: 'Lisp'; }
80
+  pre.src-lilypond:before { content: 'Lilypond'; }
81
+  pre.src-lua:before { content: 'Lua'; }
82
+  pre.src-matlab:before { content: 'MATLAB'; }
83
+  pre.src-mscgen:before { content: 'Mscgen'; }
84
+  pre.src-ocaml:before { content: 'Objective Caml'; }
85
+  pre.src-octave:before { content: 'Octave'; }
86
+  pre.src-org:before { content: 'Org mode'; }
87
+  pre.src-oz:before { content: 'OZ'; }
88
+  pre.src-plantuml:before { content: 'Plantuml'; }
89
+  pre.src-processing:before { content: 'Processing.js'; }
90
+  pre.src-python:before { content: 'Python'; }
91
+  pre.src-R:before { content: 'R'; }
92
+  pre.src-ruby:before { content: 'Ruby'; }
93
+  pre.src-sass:before { content: 'Sass'; }
94
+  pre.src-scheme:before { content: 'Scheme'; }
95
+  pre.src-screen:before { content: 'Gnu Screen'; }
96
+  pre.src-sed:before { content: 'Sed'; }
97
+  pre.src-sh:before { content: 'shell'; }
98
+  pre.src-sql:before { content: 'SQL'; }
99
+  pre.src-sqlite:before { content: 'SQLite'; }
100
+  /* additional languages in org.el's org-babel-load-languages alist */
101
+  pre.src-forth:before { content: 'Forth'; }
102
+  pre.src-io:before { content: 'IO'; }
103
+  pre.src-J:before { content: 'J'; }
104
+  pre.src-makefile:before { content: 'Makefile'; }
105
+  pre.src-maxima:before { content: 'Maxima'; }
106
+  pre.src-perl:before { content: 'Perl'; }
107
+  pre.src-picolisp:before { content: 'Pico Lisp'; }
108
+  pre.src-scala:before { content: 'Scala'; }
109
+  pre.src-shell:before { content: 'Shell Script'; }
110
+  pre.src-ebnf2ps:before { content: 'ebfn2ps'; }
111
+  /* additional language identifiers per "defun org-babel-execute"
112
+       in ob-*.el */
113
+  pre.src-cpp:before  { content: 'C++'; }
114
+  pre.src-abc:before  { content: 'ABC'; }
115
+  pre.src-coq:before  { content: 'Coq'; }
116
+  pre.src-groovy:before  { content: 'Groovy'; }
117
+  /* additional language identifiers from org-babel-shell-names in
118
+     ob-shell.el: ob-shell is the only babel language using a lambda to put
119
+     the execution function name together. */
120
+  pre.src-bash:before  { content: 'bash'; }
121
+  pre.src-csh:before  { content: 'csh'; }
122
+  pre.src-ash:before  { content: 'ash'; }
123
+  pre.src-dash:before  { content: 'dash'; }
124
+  pre.src-ksh:before  { content: 'ksh'; }
125
+  pre.src-mksh:before  { content: 'mksh'; }
126
+  pre.src-posh:before  { content: 'posh'; }
127
+  /* Additional Emacs modes also supported by the LaTeX listings package */
128
+  pre.src-ada:before { content: 'Ada'; }
129
+  pre.src-asm:before { content: 'Assembler'; }
130
+  pre.src-caml:before { content: 'Caml'; }
131
+  pre.src-delphi:before { content: 'Delphi'; }
132
+  pre.src-html:before { content: 'HTML'; }
133
+  pre.src-idl:before { content: 'IDL'; }
134
+  pre.src-mercury:before { content: 'Mercury'; }
135
+  pre.src-metapost:before { content: 'MetaPost'; }
136
+  pre.src-modula-2:before { content: 'Modula-2'; }
137
+  pre.src-pascal:before { content: 'Pascal'; }
138
+  pre.src-ps:before { content: 'PostScript'; }
139
+  pre.src-prolog:before { content: 'Prolog'; }
140
+  pre.src-simula:before { content: 'Simula'; }
141
+  pre.src-tcl:before { content: 'tcl'; }
142
+  pre.src-tex:before { content: 'TeX'; }
143
+  pre.src-plain-tex:before { content: 'Plain TeX'; }
144
+  pre.src-verilog:before { content: 'Verilog'; }
145
+  pre.src-vhdl:before { content: 'VHDL'; }
146
+  pre.src-xml:before { content: 'XML'; }
147
+  pre.src-nxml:before { content: 'XML'; }
148
+  /* add a generic configuration mode; LaTeX export needs an additional
149
+     (add-to-list 'org-latex-listings-langs '(conf " ")) in .emacs */
150
+  pre.src-conf:before { content: 'Configuration File'; }
151
+
152
+  table { border-collapse:collapse; }
153
+  caption.t-above { caption-side: top; }
154
+  caption.t-bottom { caption-side: bottom; }
155
+  td, th { vertical-align:top;  }
156
+  th.org-right  { text-align: center;  }
157
+  th.org-left   { text-align: center;   }
158
+  th.org-center { text-align: center; }
159
+  td.org-right  { text-align: right;  }
160
+  td.org-left   { text-align: left;   }
161
+  td.org-center { text-align: center; }
162
+  dt { font-weight: bold; }
163
+  .footpara { display: inline; }
164
+  .footdef  { margin-bottom: 1em; }
165
+  .figure { padding: 1em; }
166
+  .figure p { text-align: center; }
167
+  .inlinetask {
168
+    padding: 10px;
169
+    border: 2px solid gray;
170
+    margin: 10px;
171
+    background: #ffffcc;
172
+  }
173
+  #org-div-home-and-up
174
+   { text-align: right; font-size: 70%; white-space: nowrap; }
175
+  textarea { overflow-x: auto; }
176
+  .linenr { font-size: smaller }
177
+  .code-highlighted { background-color: #ffff00; }
178
+  .org-info-js_info-navigation { border-style: none; }
179
+  #org-info-js_console-label
180
+    { font-size: 10px; font-weight: bold; white-space: nowrap; }
181
+  .org-info-js_search-highlight
182
+    { background-color: #ffff00; color: #000000; font-weight: bold; }
183
+  .org-svg { width: 90%; }
184
+  /*]]>*/-->
185
+</style>
186
+<link rel="stylesheet" type="text/css" href="freedombone.css" />
187
+<script type="text/javascript">
188
+/*
189
+@licstart  The following is the entire license notice for the
190
+JavaScript code in this tag.
191
+
192
+Copyright (C) 2012-2017 Free Software Foundation, Inc.
193
+
194
+The JavaScript code in this tag is free software: you can
195
+redistribute it and/or modify it under the terms of the GNU
196
+General Public License (GNU GPL) as published by the Free Software
197
+Foundation, either version 3 of the License, or (at your option)
198
+any later version.  The code is distributed WITHOUT ANY WARRANTY;
199
+without even the implied warranty of MERCHANTABILITY or FITNESS
200
+FOR A PARTICULAR PURPOSE.  See the GNU GPL for more details.
201
+
202
+As additional permission under GNU GPL version 3 section 7, you
203
+may distribute non-source (e.g., minimized or compacted) forms of
204
+that code without the copy of the GNU GPL normally required by
205
+section 4, provided you include this license notice and a URL
206
+through which recipients can access the Corresponding Source.
207
+
208
+
209
+@licend  The above is the entire license notice
210
+for the JavaScript code in this tag.
211
+*/
212
+<!--/*--><![CDATA[/*><!--*/
213
+ function CodeHighlightOn(elem, id)
214
+ {
215
+   var target = document.getElementById(id);
216
+   if(null != target) {
217
+     elem.cacheClassElem = elem.className;
218
+     elem.cacheClassTarget = target.className;
219
+     target.className = "code-highlighted";
220
+     elem.className   = "code-highlighted";
221
+   }
222
+ }
223
+ function CodeHighlightOff(elem, id)
224
+ {
225
+   var target = document.getElementById(id);
226
+   if(elem.cacheClassElem)
227
+     elem.className = elem.cacheClassElem;
228
+   if(elem.cacheClassTarget)
229
+     target.className = elem.cacheClassTarget;
230
+ }
231
+/*]]>*///-->
232
+</script>
233
+</head>
234
+<body>
235
+<div id="preamble" class="status">
236
+<a name="top" id="top"></a>
237
+</div>
238
+<div id="content">
239
+<div class="org-center">
240
+
241
+<div class="figure">
242
+<p><img src="images/logo.png" alt="logo.png" />
243
+</p>
244
+</div>
245
+</div>
246
+
247
+<center>
248
+<h1>Version 3: Building an internet run by the users, for the users</h1>
249
+</center>
250
+
251
+<p>
252
+The internet may still be mostly in the clutches of a few giant megacorporations and dubious governments with sketchy agendas, but it doesn't have to remain that way. With the third version of the Freedombone system there is now more scope than before to take back your privacy, have ownership of personal data and run your own online communities without unnecessary or unwelcome intermediaries.
253
+</p>
254
+
255
+<p>
256
+Freedombone version 3 is based on Debian 9 (Stretch). It was released in July 2017 and includes:
257
+</p>
258
+
259
+<ul class="org-ul">
260
+<li>Faster initial setup</li>
261
+<li>More <a href="./apps.html">installable apps</a> than the previous release, including CryptPad, Koel, NextCloud, PostActiv, Friendica and Matrix/RiotWeb</li>
262
+<li>Automated <a href="https://github.com/hardenedlinux/STIG-4-Debian">security tests</a></li>
263
+<li>Improved XMPP configuration to support all of the XEPs needed by the <a href="https://conversations.im">Conversations</a> app</li>
264
+<li>Improved account and domain blocking controls for GNU Social and PostActiv for a better federated network experience</li>
265
+<li>Uses <a href="https://en.wikipedia.org/wiki/EdDSA">elliptic curve</a> based GPG keys by default for better performance on low power single board computers</li>
266
+<li>Pre-downloaded repos distributed within images for faster and more autonomous app installs</li>
267
+</ul>
268
+
269
+<div id="outline-container-orgcc70622" class="outline-2">
270
+<h2 id="orgcc70622">Installation</h2>
271
+<div class="outline-text-2" id="text-orgcc70622">
272
+<p>
273
+The simplest way to install is from a pre-made disk image. Images can be <a href="https://freedombone.net/downloads/v3">downloaded here</a>. You will need to have previously obtained a domain name and have a dynamic DNS account somewhere.
274
+</p>
275
+
276
+<p>
277
+Copy the image to a microSD card or USB thumb drive, replacing sdX with the identifier of the USB thumb drive. Don't include any numbers (so for example use sdc instead of sdc1).
278
+</p>
279
+
280
+<div class="org-src-container">
281
+<pre><code class="src src-bash">dd <span class="org-variable-name">bs</span>=1M <span class="org-variable-name">if</span>=myimagefile.img <span class="org-variable-name">of</span>=/dev/sdX <span class="org-variable-name">conv</span>=fdatasync
282
+</code></pre>
283
+</div>
284
+
285
+<p>
286
+And wait. It will take a while to copy over. When that's done plug the microSD or USB drive into the target hardware which you want to use as a server and power on. If you're using an old laptop or netbook as the server then you will need to set the BIOS to boot from USB.
287
+</p>
288
+
289
+<p>
290
+As the system boots for the first time the login is:
291
+</p>
292
+
293
+<div class="org-src-container">
294
+<pre><code class="src src-bash">username: fbone
295
+password: freedombone
296
+</code></pre>
297
+</div>
298
+
299
+<p>
300
+If you're installing from a microSD card on a single board computer without a screen and keyboard attached then you can ssh into it with:
301
+</p>
302
+
303
+<div class="org-src-container">
304
+<pre><code class="src src-bash">ssh fbone@freedombone.local -p 2222
305
+</code></pre>
306
+</div>
307
+
308
+<p>
309
+Using the initial password "freedombone". If you have trouble accessing the server then make sure you have Avahi installed and <a href="https://en.wikipedia.org/wiki/Multicast_DNS">mDNS</a> enabled.
310
+</p>
311
+
312
+<p>
313
+You will then be shown a new randomly generated password. It's very important that you write this down somewhere or transfer it to a password manager before going further, because you'll need this to log in later.
314
+</p>
315
+</div>
316
+</div>
317
+
318
+<div id="outline-container-org48b12d2" class="outline-2">
319
+<h2 id="org48b12d2">Upgrading from a previous install</h2>
320
+<div class="outline-text-2" id="text-org48b12d2">
321
+<p>
322
+To upgrade from the Debian Jessie version first create a master keydrive. Go to the <b>Administrator control panel</b> and select <b>Backup and restore</b> then <b>Backup GPG key to USB (master keydrive)</b>. Insert a LUKS encrypted USB drive. When that is done Create a full backup by selecting <b>Backup data to USB drive</b> and using another LUKS encrypted USB drive.
323
+</p>
324
+
325
+<p>
326
+Follow the installation infstructions for the new Freedombone version, as described in the previous section. When the new system starts installing it will ask if you want to restore your GPG keys. Select <b>yes</b> and plug in your master keydrive.
327
+</p>
328
+
329
+<p>
330
+When the initial setup is complete go to the <b>Administrator control panel</b> and select <b>Backup and restore</b> then <b>Restore data from USB drive</b> followed by <b>all</b>. Insert the backup USB drive which you made previously. This will restore the base system, including any emails.
331
+</p>
332
+
333
+<p>
334
+You can now go to <b>Add/Remove apps</b> on the <b>Administrator control panel</b> and add the apps you want. Once they're installed you can recover their content and settings from <b>Backup and Restore</b>.
335
+</p>
336
+</div>
337
+</div>
338
+</div>
339
+<div id="postamble" class="status">
340
+
341
+<style type="text/css">
342
+.back-to-top {
343
+    position: fixed;
344
+    bottom: 2em;
345
+    right: 0px;
346
+    text-decoration: none;
347
+    color: #000000;
348
+    background-color: rgba(235, 235, 235, 0.80);
349
+    font-size: 12px;
350
+    padding: 1em;
351
+    display: none;
352
+}
353
+
354
+.back-to-top:hover {
355
+    background-color: rgba(135, 135, 135, 0.50);
356
+}
357
+</style>
358
+
359
+<div class="back-to-top">
360
+<a href="#top">Back to top</a> | <a href="mailto:bob@freedombone.net">E-mail me</a>
361
+</div>
362
+</div>
363
+</body>
364
+</html>