Bladeren bron

Improve setup description

Bob Mottram 8 jaren geleden
bovenliggende
commit
dbb84df2cd
1 gewijzigde bestanden met toevoegingen van 30 en 9 verwijderingen
  1. 30
    9
      website/EN/homeserver.html

+ 30
- 9
website/EN/homeserver.html Bestand weergeven

3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
 <head>
5
 <head>
6
-<!-- 2016-11-23 Wed 17:36 -->
6
+<!-- 2016-11-23 Wed 18:01 -->
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9
 <title></title>
9
 <title></title>
358
 </p>
358
 </p>
359
 
359
 
360
 <div class="org-src-container">
360
 <div class="org-src-container">
361
-<pre class="src src-bash">freedombone-client
362
-ssh fbone@freedombone.local -p 2222
361
+<pre class="src src-bash">ssh fbone@freedombone.local -p 2222
363
 </pre>
362
 </pre>
364
 </div>
363
 </div>
365
 
364
 
372
 </p>
371
 </p>
373
 
372
 
374
 <p>
373
 <p>
375
-You'll be asked to set a username and a "real" name (or nickname), then the rest of the installation will be automatic. Again, it takes a while, so go and do something less boring instead.
374
+You'll be asked to set a username and a "real" name (or nickname), then the rest of the installation will be automatic. Again, it takes a while, so go and do something less boring instead. At the end of the base install you can also choose to install specific apps, but if you want to do that later then just press Enter.
376
 </p>
375
 </p>
377
 
376
 
378
 <p>
377
 <p>
379
-When it's installed on your local system open a terminal and run:
378
+When it's installed on your local system open a terminal and verify the ssh server key hash with:
380
 </p>
379
 </p>
381
 
380
 
382
 <div class="org-src-container">
381
 <div class="org-src-container">
383
-<pre class="src src-bash">ssh myusername@freedombone.local -p 2222
382
+<pre class="src src-bash">freedombone-client --verify
383
+</pre>
384
+</div>
385
+
386
+<p>
387
+This will show the hash code for the public ssh key of the Freedombone system. Open another terminal window then run:
388
+</p>
389
+
390
+<div class="org-src-container">
391
+<pre class="src src-bash">freedombone-client
392
+ssh myusername@freedombone.local -p 2222
384
 </pre>
393
 </pre>
385
 </div>
394
 </div>
386
 
395
 
387
 <p>
396
 <p>
388
-Use the password you wrote down earlier to log in.
397
+Use the password you wrote down earlier to log in. Select the <b>administrator control panel</b> with up and down cursor keys, space bar and enter key. You should see something like this, and you might need to re-enter your password.
389
 </p>
398
 </p>
390
 
399
 
391
 <div class="org-center">
400
 <div class="org-center">
397
 </div>
406
 </div>
398
 
407
 
399
 <p>
408
 <p>
400
-Select the <b>administrator control panel</b> with up and down cursor keys, space bar and enter key. You might need to re-enter your password. Then select <b>About</b>. You'll see a list of sites and their onion addresses.
409
+Then select <b>About</b>. You'll see a list of sites and their onion addresses.
401
 </p>
410
 </p>
402
 
411
 
403
 <div class="org-center">
412
 <div class="org-center">
409
 </div>
418
 </div>
410
 
419
 
411
 <p>
420
 <p>
412
-On your local system open a <b>Tor compatible browser</b> and enter your blog's onion address. If it's all working then you should see your new blog.
421
+The About screen contains the ssh server public key hashes and you can compare the relevant one with the previous terminal window to verify that they're the same. If they're not then you might have a <i>machine-in-the-middle</i> snooping on you.
422
+</p>
423
+
424
+<p>
425
+You have now confirmed a secure connection. Probably. If you're still sceptical then you can power off the system, remove the microSD card and manually check the public keys within the /etc/ssh directory on the drive.
426
+</p>
427
+
428
+<p>
429
+Press any key to exit from the About screen. You can then select <b>Add/Remove apps</b> and add whatever applications you wish to run. Note that some apps will only run on x86 systems, but most will install and run on ARM single board computers.
430
+</p>
431
+
432
+<p>
433
+Once your apps have installed you can go back to the About screen, pick an onion address and try it within a Tor compatible browser.
413
 </p>
434
 </p>
414
 
435
 
415
 <p>
436
 <p>