clean up docs
This commit is contained in:
parent
6723833a28
commit
241c45d390
GPG Key ID:
44A86CFF1FDF0E85
|
|
@ -63,12 +63,8 @@ Some options include:
|
|||
|
||||
* NitroKey 3
|
||||
|
||||
* Solo Key
|
||||
|
||||
* YubiKey 5
|
||||
|
||||
* Librem Key
|
||||
|
||||
// ANCHOR_END: smart-cards
|
||||
|
||||
## Tamper Proofing
|
||||
|
|
|
|||
|
|
@ -0,0 +1,7 @@
|
|||
/* ANCHOR: all */
|
||||
# Linux Workstation (Online Machine)
|
||||
// ANCHOR: content
|
||||
* Linux Workstation (online machine)
|
||||
* Any internet connected computer with a Linux shell will suffice
|
||||
// ANCHOR_END: content
|
||||
/* ANCHOR_END: all */
|
||||
|
|
@ -10,15 +10,14 @@
|
|||
* Provided by [AirGapped Bundle](../level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
||||
* Alternative: Computer that can load AirgapOS ([compatibility reference](https://git.distrust.co/public/airgap#tested-models))
|
||||
|
||||
* Linux Workstation
|
||||
* Any internet connected Linux shell will suffice
|
||||
{{ #include ../../component-documents/linux-workstation.md:content }}
|
||||
|
||||
* 1 New Smart Card
|
||||
* Nitrokey Pro 3+ or Yubikey 5+
|
||||
* 1+ Smart Card
|
||||
* At least 1 primary smart card
|
||||
* Any number of backup smart cards
|
||||
|
||||
* 1 Transfer SD card
|
||||
* Document will assume volume label is TRANSFER
|
||||
* Brand and size does not matter
|
||||
* Document will assume the card is labelled as "TRANSFER"
|
||||
|
||||
## Process
|
||||
|
||||
|
|
|
|||
|
|
@ -6,7 +6,7 @@
|
|||
|
||||
* [Personal PGP Keys](/key-types.html#personal-pgp-keypair)
|
||||
|
||||
* Online computer
|
||||
{{ #include ../../../../component-documents/linux-workstation.md:content }}
|
||||
|
||||
## Procedure
|
||||
|
||||
|
|
@ -14,7 +14,7 @@
|
|||
|
||||
1. Open the SD Card Pack
|
||||
|
||||
{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}}
|
||||
{{ #include ../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing }}
|
||||
|
||||
1. Plug in a fresh SD card into computer
|
||||
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@
|
|||
|
||||
{{ #include ../../../../operator-requirements.md:requirements }}
|
||||
|
||||
* Online machine
|
||||
{{ #include ../../../../../../component-documents/linux-workstation.md:content }}
|
||||
|
||||
* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk.
|
||||
|
||||
|
|
@ -149,7 +149,7 @@
|
|||
|
||||
* `export ICEPICK_CONFIG_FILE=<path_to_icepick_repositry>/icepick.toml`
|
||||
|
||||
* `icepick workflow sol generate-nonce-account --cluster <cluster> --authorization-address "$(cat $account_id.txt)" | jq -r .nonce_account > $account_id-na.txt`
|
||||
* `icepick workflow sol generate-nonce-account --authorization-address "$(cat $account_id.txt)" | jq -r .nonce_account > $account_id-na.txt`
|
||||
* [38 removes he need to use jq and cat](https://git.distrust.co/public/icepick/issues/38)
|
||||
|
||||
* Repeat command if returned message is "The transaction was possibly not received by the cluster."
|
||||
|
|
|
|||
|
|
@ -50,9 +50,7 @@
|
|||
|
||||
* `export ICEPICK_CONFIG_FILE=<path_to_icepick_repo>/icepick.toml`
|
||||
|
||||
1. Run the command: `icepick workflow sol broadcast --cluster <cluster> --nonce-address=$nonce_address`
|
||||
|
||||
* Available clusters are `devnet`, `testnet` and `mainnet-beta`
|
||||
1. Run the command: `icepick workflow sol broadcast --nonce-address=$nonce_address`
|
||||
|
||||
* Await completion message before removing Ceremony SD card
|
||||
|
||||
|
|
|
|||
|
|
@ -30,7 +30,7 @@ The proposer must combine these values into a JSON file, such as:
|
|||
|
||||
* The proposer should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the `vaults` repo
|
||||
|
||||
* Online Machine
|
||||
{{ #include ../../../../component-documents/linux-workstation.md:content }}
|
||||
|
||||
* Clone the [Vaults Repository](../../../all-levels/create-vaults-repository.md) for your organization to the machine
|
||||
|
||||
|
|
|
|||
|
|
@ -23,8 +23,6 @@
|
|||
|
||||
* Computers which are compatible which can be verified via [this guide](https://git.distrust.co/public/airgap#hardware-compatibility)
|
||||
|
||||
* Online Use: Chromebook or QubesOS laptop
|
||||
|
||||
// ANCHOR_END: computer-models
|
||||
|
||||
## Digital Camera
|
||||
|
|
|
|||
|
|
@ -8,9 +8,15 @@
|
|||
|
||||
* The operators should verify the commit signatures of the photographs they are printing against a list of permitted PGP keys found in the "ceremonies" repo
|
||||
|
||||
* [Air-gapped bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
||||
* [AirgapOS SD card](/generated-documents/level-2/fixed-location/provisioner/provision-airgapos.md)
|
||||
* Provided by [AirGapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
||||
* Alternative: Create your own from documentation in [AirgapOS Repository](https://git.distrust.co/public/airgap)
|
||||
|
||||
* Minimum of 2 [Operators](/system-roles.md#operator)
|
||||
* AirgapOS Laptop
|
||||
* Provided by [AirGapped Bundle](/generated-documents/level-2/fixed-location/provisioner/air-gapped-bundle.md)
|
||||
* Alternative: Computer that can load AirgapOS ([compatibility reference](https://git.distrust.co/public/airgap#tested-models))
|
||||
|
||||
* Minimum of 1 [Operator](/system-roles.md#operator) and 1 [Witness](/system-roles.md#witness)
|
||||
|
||||
* [Personal PGP key pair](/key-types.md#personal-pgp-keypair) for each operator
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue