aboutsummaryrefslogtreecommitdiff
path: root/doc/handbook/chapters/installation.texi
diff options
context:
space:
mode:
Diffstat (limited to 'doc/handbook/chapters/installation.texi')
-rw-r--r--doc/handbook/chapters/installation.texi27
1 files changed, 14 insertions, 13 deletions
diff --git a/doc/handbook/chapters/installation.texi b/doc/handbook/chapters/installation.texi
index 40a23e738..24431e20f 100644
--- a/doc/handbook/chapters/installation.texi
+++ b/doc/handbook/chapters/installation.texi
@@ -171,7 +171,7 @@ group. In addition the group @code{gnunetdns} may be needed (see below).
171 171
172Create user @code{gnunet} who is member of the group @code{gnunet} 172Create user @code{gnunet} who is member of the group @code{gnunet}
173(automatically created) and specify a home directory where the GNUnet 173(automatically created) and specify a home directory where the GNUnet
174services will store persistant data such as information about peers. 174services will store persistent data such as information about peers.
175@example 175@example
176$ sudo useradd --system --home-dir /var/lib/gnunet --create-home gnunet 176$ sudo useradd --system --home-dir /var/lib/gnunet --create-home gnunet
177@end example 177@end example
@@ -431,7 +431,7 @@ For the @emph{multi-user setup} first the system services need to be started
431as the system user, i.e. the user @code{gnunet} needs to execute 431as the system user, i.e. the user @code{gnunet} needs to execute
432@code{gnunet-arm -s}. This should be done by the system's init system. 432@code{gnunet-arm -s}. This should be done by the system's init system.
433Then the user who wants to start GNUnet applications has to run 433Then the user who wants to start GNUnet applications has to run
434@code{gnunet-arm -s} too. It is recommented to automate this, e.g. using 434@code{gnunet-arm -s} too. It is recommended to automate this, e.g. using
435the user's crontab. 435the user's crontab.
436 436
437@node gnunet-gtk 437@node gnunet-gtk
@@ -1355,7 +1355,7 @@ The interface channel depends on the wlan network that the card is
1355connected to. If no connection has been made since the start of the 1355connected to. If no connection has been made since the start of the
1356computer, it is usually the first channel of the card. 1356computer, it is usually the first channel of the card.
1357Peers will only find each other and communicate if they are on the same 1357Peers will only find each other and communicate if they are on the same
1358channel. Channels must be set manually, i.e. using: 1358channel. Channels must be set manually, e.g. by using:
1359 1359
1360@example 1360@example
1361iwconfig wlan0 channel 1 1361iwconfig wlan0 channel 1
@@ -1369,7 +1369,7 @@ proxy forwards the HTTP request he receives with a certain URL to another
1369webserver, here a GNUnet peer. 1369webserver, here a GNUnet peer.
1370 1370
1371So if you have a running Apache or nginx webserver you can configure it to 1371So if you have a running Apache or nginx webserver you can configure it to
1372be a GNUnet reverse proxy. Especially if you have a well-known webiste 1372be a GNUnet reverse proxy. Especially if you have a well-known website
1373this improves censorship resistance since it looks as normal surfing 1373this improves censorship resistance since it looks as normal surfing
1374behaviour. 1374behaviour.
1375 1375
@@ -1944,12 +1944,13 @@ Python installation and its dependencies.
1944 1944
1945Another way to install Ascension on Debian is to install the python3-ascension 1945Another way to install Ascension on Debian is to install the python3-ascension
1946package. It can be found within the above mentioned Ascension git repository. 1946package. It can be found within the above mentioned Ascension git repository.
1947This also adds a system user ascension and runs a GNUnet peer in the 1947This also adds a system user called ascension and runs a GNUnet peer in the
1948background. Attention: This only works if a recent version of GNUnet is 1948background. Please note: This only works if a recent version of GNUnet is
1949installed on your system. The version number of Ascension is chosen according 1949installed on your system. The version number of Ascension is chosen according
1950to the required feature level of GNUnet. I.e. Ascension 0.11.5 is only 1950to the required feature level of GNUnet: Ascension 0.11.5 is only
1951compatible with GNUnet 0.11.5 and upwards. As Debian's packages for GNUnet are 1951compatible with GNUnet 0.11.5 or later and so on.
1952outdated even in experimental, you will need to install GNUnet manually 1952As Debian's packages for GNUnet are outdated even in experimental,
1953you will need to install GNUnet manually
1953@xref{Installing GNUnet}. 1954@xref{Installing GNUnet}.
1954 1955
1955Please check @xref{Migrating an existing DNS zone into GNS}, for usage manual 1956Please check @xref{Migrating an existing DNS zone into GNS}, for usage manual
@@ -2034,11 +2035,11 @@ Furthermore, you can serve as a DNS, IPv4 or IPv6 exit to the Internet.
2034Being a DNS exit is usually pretty harmless. However, enabling IPv4 or 2035Being a DNS exit is usually pretty harmless. However, enabling IPv4 or
2035IPv6-exit without further precautions may enable adversaries to access 2036IPv6-exit without further precautions may enable adversaries to access
2036your local network, send spam, attack other systems from your Internet 2037your local network, send spam, attack other systems from your Internet
2037connection and to other mischief that will appear to come from your 2038connection and do other mischiefs that will appear to come from your
2038machine. This may or may not get you into legal trouble. 2039machine. This may or may not get you into legal trouble.
2039If you want to allow IPv4 or IPv6-exit functionality, you should strongly 2040If you want to allow IPv4 or IPv6-exit functionality, you should strongly
2040consider adding additional firewall rules manually to protect your local 2041consider adding additional firewall rules manually to protect your local
2041network and to restrict outgoing TCP traffic (i.e. by not allowing access 2042network and to restrict outgoing TCP traffic (e.g. by not allowing access
2042to port 25). While we plan to improve exit-filtering in the future, 2043to port 25). While we plan to improve exit-filtering in the future,
2043you're currently on your own here. 2044you're currently on your own here.
2044Essentially, be prepared for any kind of IP-traffic to exit the respective 2045Essentially, be prepared for any kind of IP-traffic to exit the respective
@@ -2159,7 +2160,7 @@ run as use "gnunet" (and with option "-c /etc/gnunet.conf" so that it
2159modifies the system configuration). As always, gnunet-setup should be run 2160modifies the system configuration). As always, gnunet-setup should be run
2160after the GNUnet peer was stopped using "gnunet-arm -e". Distributors 2161after the GNUnet peer was stopped using "gnunet-arm -e". Distributors
2161might want to include a wrapper for gnunet-setup that allows the 2162might want to include a wrapper for gnunet-setup that allows the
2162desktop-user to "sudo" (i.e. using gtksudo) to the "gnunet" user account 2163desktop-user to "sudo" (e.g. using gtksudo) to the "gnunet" user account
2163and then runs "gnunet-arm -e", "gnunet-setup" and "gnunet-arm -s" in 2164and then runs "gnunet-arm -e", "gnunet-setup" and "gnunet-arm -s" in
2164sequence. 2165sequence.
2165 2166
@@ -2175,7 +2176,7 @@ Sane defaults should exist in your
2175you could simply start without any configuration. If you want to 2176you could simply start without any configuration. If you want to
2176configure your peer later, you need to stop it before invoking the 2177configure your peer later, you need to stop it before invoking the
2177@code{gnunet-setup} tool to customize further and to test your 2178@code{gnunet-setup} tool to customize further and to test your
2178configuration (@code{gnunet-setup} has build-in test functions). 2179configuration (@code{gnunet-setup} has built-in test functions).
2179 2180
2180The most important option you might have to still set by hand is in 2181The most important option you might have to still set by hand is in
2181[PATHS]. Here, you use the option "GNUNET_HOME" to specify the path where 2182[PATHS]. Here, you use the option "GNUNET_HOME" to specify the path where