Remote disk unlocking: Difference between revisions
imported>Onny mNo edit summary |
imported>Fadenb syntaxHighlight a code block & fix HTML entities for double quotes that somehow showed up in the process |
||
| Line 87: | Line 87: | ||
Now that you have your 3 files, you have to script a bit, but it’s not too complicated. | Now that you have your 3 files, you have to script a bit, but it’s not too complicated. | ||
< | <syntaxhighlight lang="nix"># copy your onion folder | ||
boot.initrd.secrets = { | boot.initrd.secrets = { | ||
"/etc/tor/onion/bootup"; = /home/tony/tor/onion; # maybe find a better spot to store this. | |||
}; | }; | ||
| Line 99: | Line 99: | ||
# start tor during boot process | # start tor during boot process | ||
boot.initrd.network.postCommands = let | boot.initrd.network.postCommands = let | ||
torRc = (pkgs.writeText | torRc = (pkgs.writeText "tor.rc" '' | ||
DataDirectory /etc/tor | DataDirectory /etc/tor | ||
SOCKSPort 127.0.0.1:9050 IsolateDestAddr | SOCKSPort 127.0.0.1:9050 IsolateDestAddr | ||
| Line 107: | Line 107: | ||
''); | ''); | ||
in '' | in '' | ||
echo | echo "tor: preparing onion folder" | ||
# have to do this otherwise tor does not want to start | # have to do this otherwise tor does not want to start | ||
chmod -R 700 /etc/tor | chmod -R 700 /etc/tor | ||
echo | echo "make sure localhost is up" | ||
ip a a 127.0.0.1/8 dev lo | ip a a 127.0.0.1/8 dev lo | ||
ip link set lo up | ip link set lo up | ||
echo | echo "tor: starting tor" | ||
tor -f ${torRc} --verify-config | tor -f ${torRc} --verify-config | ||
tor -f ${torRc} & | tor -f ${torRc} & | ||
'';</ | '';</syntaxhighlight> | ||
That was it. Tor should be running during your boot process. | That was it. Tor should be running during your boot process. | ||
| Line 130: | Line 130: | ||
</pre> | </pre> | ||
Then use this snippet before <code>echo | Then use this snippet before <code>echo "tor: starting tor"</code> in your <code>boot.initrd.network.postCommands</code>. | ||
<pre> | <pre> | ||
echo "haveged: starting haveged" | echo "haveged: starting haveged" | ||
| Line 145: | Line 145: | ||
</pre> | </pre> | ||
Then use this snippet before <code>echo | Then use this snippet before <code>echo "tor: starting tor"</code> in your <code>boot.initrd.network.postCommands</code>. | ||
<pre> | <pre> | ||
echo "ntp: starting ntpdate" | echo "ntp: starting ntpdate" | ||