clean up docs
This commit is contained in:
parent
6723833a28
commit
241c45d390
|
@ -63,12 +63,8 @@ Some options include:
|
||||||
|
|
||||||
* NitroKey 3
|
* NitroKey 3
|
||||||
|
|
||||||
* Solo Key
|
|
||||||
|
|
||||||
* YubiKey 5
|
* YubiKey 5
|
||||||
|
|
||||||
* Librem Key
|
|
||||||
|
|
||||||
// ANCHOR_END: smart-cards
|
// ANCHOR_END: smart-cards
|
||||||
|
|
||||||
## Tamper Proofing
|
## Tamper Proofing
|
||||||
|
|
|
@ -0,0 +1,7 @@
|
||||||
|
/* ANCHOR: all */
|
||||||
|
# Linux Workstation (Online Machine)
|
||||||
|
// ANCHOR: content
|
||||||
|
* Linux Workstation (online machine)
|
||||||
|
* Any internet connected computer with a Linux shell will suffice
|
||||||
|
// ANCHOR_END: content
|
||||||
|
/* ANCHOR_END: all */
|
|
@ -10,15 +10,14 @@
|
||||||
* Provided by [AirGapped Bundle](../level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
* Provided by [AirGapped Bundle](../level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
||||||
* Alternative: Computer that can load AirgapOS ([compatibility reference](https://git.distrust.co/public/airgap#tested-models))
|
* Alternative: Computer that can load AirgapOS ([compatibility reference](https://git.distrust.co/public/airgap#tested-models))
|
||||||
|
|
||||||
* Linux Workstation
|
{{ #include ../../component-documents/linux-workstation.md:content }}
|
||||||
* Any internet connected Linux shell will suffice
|
|
||||||
|
|
||||||
* 1 New Smart Card
|
* 1+ Smart Card
|
||||||
* Nitrokey Pro 3+ or Yubikey 5+
|
* At least 1 primary smart card
|
||||||
|
* Any number of backup smart cards
|
||||||
|
|
||||||
* 1 Transfer SD card
|
* 1 Transfer SD card
|
||||||
* Document will assume volume label is TRANSFER
|
* Document will assume the card is labelled as "TRANSFER"
|
||||||
* Brand and size does not matter
|
|
||||||
|
|
||||||
## Process
|
## Process
|
||||||
|
|
||||||
|
|
|
@ -6,7 +6,7 @@
|
||||||
|
|
||||||
* [Personal PGP Keys](/key-types.html#personal-pgp-keypair)
|
* [Personal PGP Keys](/key-types.html#personal-pgp-keypair)
|
||||||
|
|
||||||
* Online computer
|
{{ #include ../../../../component-documents/linux-workstation.md:content }}
|
||||||
|
|
||||||
## Procedure
|
## Procedure
|
||||||
|
|
||||||
|
@ -14,7 +14,7 @@
|
||||||
|
|
||||||
1. Open the SD Card Pack
|
1. Open the SD Card Pack
|
||||||
|
|
||||||
{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
|
{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing }}
|
||||||
|
|
||||||
1. Plug in a fresh SD card into computer
|
1. Plug in a fresh SD card into computer
|
||||||
|
|
||||||
|
|
|
@ -4,7 +4,7 @@
|
||||||
|
|
||||||
{{ #include ../../../../operator-requirements.md:requirements }}
|
{{ #include ../../../../operator-requirements.md:requirements }}
|
||||||
|
|
||||||
* Online machine
|
{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
|
||||||
|
|
||||||
* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
|
* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
|
||||||
|
|
||||||
|
@ -149,7 +149,7 @@
|
||||||
|
|
||||||
* `export ICEPICK_CONFIG_FILE=<path_to_icepick_repositry>/icepick.toml`
|
* `export ICEPICK_CONFIG_FILE=<path_to_icepick_repositry>/icepick.toml`
|
||||||
|
|
||||||
* `icepick workflow sol generate-nonce-account --cluster <cluster> --authorization-address "$(cat $account_id.txt)" | jq -r .nonce_account > $account_id-na.txt`
|
* `icepick workflow sol generate-nonce-account --authorization-address "$(cat $account_id.txt)" | jq -r .nonce_account > $account_id-na.txt`
|
||||||
* [38 removes he need to use jq and cat](https://git.distrust.co/public/icepick/issues/38)
|
* [38 removes he need to use jq and cat](https://git.distrust.co/public/icepick/issues/38)
|
||||||
|
|
||||||
* Repeat command if returned message is "The transaction was possibly not received by the cluster."
|
* Repeat command if returned message is "The transaction was possibly not received by the cluster."
|
||||||
|
|
|
@ -50,9 +50,7 @@
|
||||||
|
|
||||||
* `export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
|
* `export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
|
||||||
|
|
||||||
1. Run the command: `icepick workflow sol broadcast --cluster <cluster> --nonce-address=$nonce_address`
|
1. Run the command: `icepick workflow sol broadcast --nonce-address=$nonce_address`
|
||||||
|
|
||||||
* Available clusters are `devnet`, `testnet` and `mainnet-beta`
|
|
||||||
|
|
||||||
* Await completion message before removing Ceremony SD card
|
* Await completion message before removing Ceremony SD card
|
||||||
|
|
||||||
|
|
|
@ -30,7 +30,7 @@ The proposer must combine these values into a JSON file, such as:
|
||||||
|
|
||||||
* The proposer should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the `vaults` repo
|
* The proposer should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the `vaults` repo
|
||||||
|
|
||||||
* Online Machine
|
{{ #include ../../../../component-documents/linux-workstation.md:content }}
|
||||||
|
|
||||||
* Clone the [Vaults Repository](../../../all-levels/create-vaults-repository.md) for your organization to the machine
|
* Clone the [Vaults Repository](../../../all-levels/create-vaults-repository.md) for your organization to the machine
|
||||||
|
|
||||||
|
|
|
@ -23,8 +23,6 @@
|
||||||
|
|
||||||
* Computers which are compatible which can be verified via [this guide](https://git.distrust.co/public/airgap#hardware-compatibility)
|
* Computers which are compatible which can be verified via [this guide](https://git.distrust.co/public/airgap#hardware-compatibility)
|
||||||
|
|
||||||
* Online Use: Chromebook or QubesOS laptop
|
|
||||||
|
|
||||||
// ANCHOR_END: computer-models
|
// ANCHOR_END: computer-models
|
||||||
|
|
||||||
## Digital Camera
|
## Digital Camera
|
||||||
|
|
|
@ -8,9 +8,15 @@
|
||||||
|
|
||||||
* The operators should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the "ceremonies" repo
|
* The operators should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the "ceremonies" repo
|
||||||
|
|
||||||
* [Air-gapped bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
* [AirgapOS SD card](/generated-documents/level-2/fixed-location/provisioner/provision-airgapos.md)
|
||||||
|
* Provided by [AirGapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
||||||
|
* Alternative: Create your own from documentation in [AirgapOS Repository](https://git.distrust.co/public/airgap)
|
||||||
|
|
||||||
* Minimum of 2 [Operators](/system-roles.md#operator)
|
* AirgapOS Laptop
|
||||||
|
* Provided by [AirGapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
||||||
|
* Alternative: Computer that can load AirgapOS ([compatibility reference](https://git.distrust.co/public/airgap#tested-models))
|
||||||
|
|
||||||
|
* Minimum of 1 [Operator](/system-roles.md#operator) and 1 [Witness](/system-roles.md#witness)
|
||||||
|
|
||||||
* [Personal PGP key pair](/key-types.md#personal-pgp-keypair) for each operator
|
* [Personal PGP key pair](/key-types.md#personal-pgp-keypair) for each operator
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue