Birchwood Abbey's cloister is a small institute campus. The ~campus~
role configures all campus machines to trust the institute's CA, sync
with the campus time server, and forward email to Core. The
-~cloister~ role additionally configures cloistered machines to use the
-cloister Apt cache, respond to Core's NAGIOS network monitor, and to
-install Emacs. There are also a few OS specific tasks, namely
+~abbey-cloister~ role additionally configures cloistered machines to
+use the cloister Apt cache, respond to Core's NAGIOS network monitor,
+and to install Emacs. There are also a few OS specific tasks, namely
configuration required on Raspberry Pi OS machines.
Wireless clients are issued keys for the cloister VPN by the ~./abbey
** Raspberry Pis
-The abbey's Raspberry Pis run Raspberry Pi OS, either the desktop
-(PIXEL) or the Lite version (for headless servers). The following was
-the installation process with a wireless desktop Raspberry Pi OS
-Bookworm (12) machine.
+The abbey's Raspberry Pi runs the Raspberry Pi OS desktop off an
+external, USB3.0 SSD. A fresh install should go something like this:
-- Write the disk image, =2023-10-10-raspios-bookworm-arm64.img.xz=, to
- a fast (U3 and/or A1) µSD card and insert it in the Pi.
+- Write the disk image, =2023-12-05-raspios-bookworm-arm64.img.xz=, to
+ the SSD and plug it into the Pi. Leave the µSD card socket empty.
- Attach an HDMI monitor, a USB keyboard/mouse, and the cloister
Ethernet, and power up.
- Answer first-boot installation questions:
With the new device's Ethernet MAC in hand, a stanza like the
following is added to the bottom of =private/core-dhcpd.conf=. The IP
-address must be unique. Typically the next host number after the
-last entry is chosen.
+address must be unique. Typically the next host number after the last
+entry is chosen.
#+BEGIN_SRC conf
host new {
hardware ethernet 08:00:27:f3:41:66; fixed-address 192.168.56.4; }
#+END_SRC
-The DHCP service is then /restarted/.
+The DHCP service is then restarted (not reloaded).
#+BEGIN_SRC sh
sudo systemctl restart isc-dhcp-server
- Create =/etc/apt/apt.conf.d/01proxy=.
: D=apt-cacher.small.private.
: echo "Acquire::http::Proxy \"http://$D:3142\";" \
- : > | sudo tee /etc/apt/apt.conf.d/01proxy
+ : | sudo tee /etc/apt/apt.conf.d/01proxy
- Update the system and reboot.
: sudo apt update
: sudo apt full-upgrade --autoremove