summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFelix Richter <Felix.Richter@syntax-fehler.de>2011-05-28 22:39:09 +0200
committerFelix Richter <Felix.Richter@syntax-fehler.de>2011-05-28 22:39:09 +0200
commita7c3fb1800e94aed3ad8f7cd6656a38ac1e0fb21 (patch)
treef0b4b467cb6e67157c2f44c004dff098a7dcdcc3
parent03f8c7e0e3a535ea8cfee5f88f646bdc1c456ef5 (diff)
documented my odyssey to install tinc on dotcloud
the documentation contains what to do to install tinc on the dotcloud. i am not sure if it really works but it should help for installing on other user-only but public accessible hosts
-rw-r--r--modules/retiolum/doc/install_dotcloud85
1 files changed, 85 insertions, 0 deletions
diff --git a/modules/retiolum/doc/install_dotcloud b/modules/retiolum/doc/install_dotcloud
new file mode 100644
index 00000000..29a13604
--- /dev/null
+++ b/modules/retiolum/doc/install_dotcloud
@@ -0,0 +1,85 @@
+The Dotcloud provided by duostack.com is a application development platform
+for simple deployment of your stuff.
+
+It also provides an ssh-interface via:
+<code>
+ dotcloud ssh project.module
+</code>
+
+to be able to use it without the hassle of going through the api, you will
+need to create an own dsa-key for ssh to use and deploy this public key on
+the machine
+<code>
+ ssh-keygen -t dsa -f dotcloud_project.dss
+ cat dotcloud_project.dss.pub (copy the contents to the dotclouds
+ ~/.ssh/authorized_keys2)
+</code>
+find your dotcloud host ip via
+<code>
+ dotcloud info project.module
+</code>
+
+You will gain a user shell with
+<code>
+ ssh dotcloud@module.project -p 5960
+</code>
+we will need to build some stuff in order to get a working copy of tinc.
+Everything needs to be done in userspace.
+<code>
+mkdir build
+cd build
+curl http://www.openssl.org/source/openssl-1.0.0d.tar.gz | tar xz
+cd openssl-1.0.0d
+./config --prefix=$HOME/usr -fPIC
+make install
+cp lib* $HOME/usr/lib
+cd ..
+
+curl http://www.oberhumer.com/opensource/lzo/download/lzo-2.04.tar.gz | tar xz
+cd lzo-2.04
+./configure --prefix=$HOME/usr
+
+curl http://zlib.net/zlib-1.2.5.tar.gz | tar xz
+cd zlib-1.2.5/
+./configure --prefix=$HOME/usr
+make install
+</code>
+before building we need to patch the tinc daemon to run without the need
+for a tun device.
+
+tutorial is here:
+https://hackerspace.be/TincVPN
+<code>
+
+curl http://www.tinc-vpn.org/packages/tinc-1.0.14.tar.gz | tar xz
+cd tinc-1.0.14
+#apply patch here
+./configure --prefix=$HOME/usr --sysconfdir=$HOME/etc \
+--localstatedir=$HOME/var --with-openssl=`pwd`/../openssl-1.0.0d/ \
+--with-openssl-lib=`pwd`/../openssl-1.0.0d/ \
+--with-zlib-include=$HOME/usr/include --with-zlib-lib=$HOME/usr/lib
+make
+make install
+mkdir ~/etc
+mkdir ~/var
+cd ~/painload/modules/retiolum/scripts/tinc_setup
+./install cloudkrebs 10.7.7.221
+</code>
+
+be sure to fix the portnumber in the generated host file and add your own
+address in hosts/cloudkrebs:
+<code>
+Address = my.public.address
+Port = 1655
+
+PUBKEY
+</code>
+
+also write the right in tinc.conf:
+<code>
+Name = cloudkrebs
+
+Mode = switch
+#device = ...
+# no device :)
+</code>