diff options
Diffstat (limited to 'doc/handbook/chapters/installation.texi')
-rw-r--r-- | doc/handbook/chapters/installation.texi | 27 |
1 files changed, 14 insertions, 13 deletions
diff --git a/doc/handbook/chapters/installation.texi b/doc/handbook/chapters/installation.texi index 40a23e738..24431e20f 100644 --- a/doc/handbook/chapters/installation.texi +++ b/doc/handbook/chapters/installation.texi | |||
@@ -171,7 +171,7 @@ group. In addition the group @code{gnunetdns} may be needed (see below). | |||
171 | 171 | ||
172 | Create user @code{gnunet} who is member of the group @code{gnunet} | 172 | Create user @code{gnunet} who is member of the group @code{gnunet} |
173 | (automatically created) and specify a home directory where the GNUnet | 173 | (automatically created) and specify a home directory where the GNUnet |
174 | services will store persistant data such as information about peers. | 174 | services will store persistent data such as information about peers. |
175 | @example | 175 | @example |
176 | $ sudo useradd --system --home-dir /var/lib/gnunet --create-home gnunet | 176 | $ sudo useradd --system --home-dir /var/lib/gnunet --create-home gnunet |
177 | @end example | 177 | @end example |
@@ -431,7 +431,7 @@ For the @emph{multi-user setup} first the system services need to be started | |||
431 | as the system user, i.e. the user @code{gnunet} needs to execute | 431 | as the system user, i.e. the user @code{gnunet} needs to execute |
432 | @code{gnunet-arm -s}. This should be done by the system's init system. | 432 | @code{gnunet-arm -s}. This should be done by the system's init system. |
433 | Then the user who wants to start GNUnet applications has to run | 433 | Then the user who wants to start GNUnet applications has to run |
434 | @code{gnunet-arm -s} too. It is recommented to automate this, e.g. using | 434 | @code{gnunet-arm -s} too. It is recommended to automate this, e.g. using |
435 | the user's crontab. | 435 | the user's crontab. |
436 | 436 | ||
437 | @node gnunet-gtk | 437 | @node gnunet-gtk |
@@ -1355,7 +1355,7 @@ The interface channel depends on the wlan network that the card is | |||
1355 | connected to. If no connection has been made since the start of the | 1355 | connected to. If no connection has been made since the start of the |
1356 | computer, it is usually the first channel of the card. | 1356 | computer, it is usually the first channel of the card. |
1357 | Peers will only find each other and communicate if they are on the same | 1357 | Peers will only find each other and communicate if they are on the same |
1358 | channel. Channels must be set manually, i.e. using: | 1358 | channel. Channels must be set manually, e.g. by using: |
1359 | 1359 | ||
1360 | @example | 1360 | @example |
1361 | iwconfig wlan0 channel 1 | 1361 | iwconfig wlan0 channel 1 |
@@ -1369,7 +1369,7 @@ proxy forwards the HTTP request he receives with a certain URL to another | |||
1369 | webserver, here a GNUnet peer. | 1369 | webserver, here a GNUnet peer. |
1370 | 1370 | ||
1371 | So if you have a running Apache or nginx webserver you can configure it to | 1371 | So if you have a running Apache or nginx webserver you can configure it to |
1372 | be a GNUnet reverse proxy. Especially if you have a well-known webiste | 1372 | be a GNUnet reverse proxy. Especially if you have a well-known website |
1373 | this improves censorship resistance since it looks as normal surfing | 1373 | this improves censorship resistance since it looks as normal surfing |
1374 | behaviour. | 1374 | behaviour. |
1375 | 1375 | ||
@@ -1944,12 +1944,13 @@ Python installation and its dependencies. | |||
1944 | 1944 | ||
1945 | Another way to install Ascension on Debian is to install the python3-ascension | 1945 | Another way to install Ascension on Debian is to install the python3-ascension |
1946 | package. It can be found within the above mentioned Ascension git repository. | 1946 | package. It can be found within the above mentioned Ascension git repository. |
1947 | This also adds a system user ascension and runs a GNUnet peer in the | 1947 | This also adds a system user called ascension and runs a GNUnet peer in the |
1948 | background. Attention: This only works if a recent version of GNUnet is | 1948 | background. Please note: This only works if a recent version of GNUnet is |
1949 | installed on your system. The version number of Ascension is chosen according | 1949 | installed on your system. The version number of Ascension is chosen according |
1950 | to the required feature level of GNUnet. I.e. Ascension 0.11.5 is only | 1950 | to the required feature level of GNUnet: Ascension 0.11.5 is only |
1951 | compatible with GNUnet 0.11.5 and upwards. As Debian's packages for GNUnet are | 1951 | compatible with GNUnet 0.11.5 or later and so on. |
1952 | outdated even in experimental, you will need to install GNUnet manually | 1952 | As Debian's packages for GNUnet are outdated even in experimental, |
1953 | you will need to install GNUnet manually | ||
1953 | @xref{Installing GNUnet}. | 1954 | @xref{Installing GNUnet}. |
1954 | 1955 | ||
1955 | Please check @xref{Migrating an existing DNS zone into GNS}, for usage manual | 1956 | Please check @xref{Migrating an existing DNS zone into GNS}, for usage manual |
@@ -2034,11 +2035,11 @@ Furthermore, you can serve as a DNS, IPv4 or IPv6 exit to the Internet. | |||
2034 | Being a DNS exit is usually pretty harmless. However, enabling IPv4 or | 2035 | Being a DNS exit is usually pretty harmless. However, enabling IPv4 or |
2035 | IPv6-exit without further precautions may enable adversaries to access | 2036 | IPv6-exit without further precautions may enable adversaries to access |
2036 | your local network, send spam, attack other systems from your Internet | 2037 | your local network, send spam, attack other systems from your Internet |
2037 | connection and to other mischief that will appear to come from your | 2038 | connection and do other mischiefs that will appear to come from your |
2038 | machine. This may or may not get you into legal trouble. | 2039 | machine. This may or may not get you into legal trouble. |
2039 | If you want to allow IPv4 or IPv6-exit functionality, you should strongly | 2040 | If you want to allow IPv4 or IPv6-exit functionality, you should strongly |
2040 | consider adding additional firewall rules manually to protect your local | 2041 | consider adding additional firewall rules manually to protect your local |
2041 | network and to restrict outgoing TCP traffic (i.e. by not allowing access | 2042 | network and to restrict outgoing TCP traffic (e.g. by not allowing access |
2042 | to port 25). While we plan to improve exit-filtering in the future, | 2043 | to port 25). While we plan to improve exit-filtering in the future, |
2043 | you're currently on your own here. | 2044 | you're currently on your own here. |
2044 | Essentially, be prepared for any kind of IP-traffic to exit the respective | 2045 | Essentially, be prepared for any kind of IP-traffic to exit the respective |
@@ -2159,7 +2160,7 @@ run as use "gnunet" (and with option "-c /etc/gnunet.conf" so that it | |||
2159 | modifies the system configuration). As always, gnunet-setup should be run | 2160 | modifies the system configuration). As always, gnunet-setup should be run |
2160 | after the GNUnet peer was stopped using "gnunet-arm -e". Distributors | 2161 | after the GNUnet peer was stopped using "gnunet-arm -e". Distributors |
2161 | might want to include a wrapper for gnunet-setup that allows the | 2162 | might want to include a wrapper for gnunet-setup that allows the |
2162 | desktop-user to "sudo" (i.e. using gtksudo) to the "gnunet" user account | 2163 | desktop-user to "sudo" (e.g. using gtksudo) to the "gnunet" user account |
2163 | and then runs "gnunet-arm -e", "gnunet-setup" and "gnunet-arm -s" in | 2164 | and then runs "gnunet-arm -e", "gnunet-setup" and "gnunet-arm -s" in |
2164 | sequence. | 2165 | sequence. |
2165 | 2166 | ||
@@ -2175,7 +2176,7 @@ Sane defaults should exist in your | |||
2175 | you could simply start without any configuration. If you want to | 2176 | you could simply start without any configuration. If you want to |
2176 | configure your peer later, you need to stop it before invoking the | 2177 | configure your peer later, you need to stop it before invoking the |
2177 | @code{gnunet-setup} tool to customize further and to test your | 2178 | @code{gnunet-setup} tool to customize further and to test your |
2178 | configuration (@code{gnunet-setup} has build-in test functions). | 2179 | configuration (@code{gnunet-setup} has built-in test functions). |
2179 | 2180 | ||
2180 | The most important option you might have to still set by hand is in | 2181 | The most important option you might have to still set by hand is in |
2181 | [PATHS]. Here, you use the option "GNUNET_HOME" to specify the path where | 2182 | [PATHS]. Here, you use the option "GNUNET_HOME" to specify the path where |