How To Replace Dead USB Key

How to replace a dead USB key

• DD to new key (note: pool of already ~5 dd'ed keys HAVE TO be ready for quick replacement, so if you pick one, add one). Download the disk image from http://community.slapos.org/download.
• Revoke/ask new certificates from slapos.org for this server
• Mount USB to your machine, and run the following commands:
  • cd [MOUNT_POINT_OF_USB_KEY]/etc/opt/slapos/
  • wget http://git.erp5.org/gitweb/slapos.core.git/blob_plain/HEAD:/slapos.cfg.example -O slapos.cfg; edit it for computer_id, partition_amount (20 by default), create_tap (true), interface_name (br0).
  • cd ssl
  • Put certificate/key to computer.key and computer.crt
• Boot machine with new key. Warning: if using a DS61 machine, put the key in front port, otherwise it won't survive a reboot. Login is "root", password is "linux".

• Run "slapprepare", keep default for everything except "no" for "register to slapos.org". Use http://www.nexedi.org/static/ssh_key/slapos_team for ssh key.

• If machine is used by someone not in the ssh key list, add his key to .ssh/authorized_keys.

• Check in screen output or in logs (/opt/slapos/log/slapos-node-format.log) that slapformat correctly sent informations to slapos master.

• Run the following script to fix permissions (won't be needed in next upgrade):

  for i  in {1..200} ; do
    chown -R slapuser$i:slapuser$i /srv/slapgrid/slappart$i
  done;
  chown -R slapsoft:slapsoft /opt/slapgrid
  

• Reboot the machine so that /var/log mount point is properly used. Warning: at this point, root password has been changed, so be sure to be able to login from ssh before rebooting.