From f4231366ac83547d5e16d85fa9a4388dcadc0e6f Mon Sep 17 00:00:00 2001 From: Anton Livaja Date: Thu, 30 Jan 2025 03:29:12 -0500 Subject: [PATCH 1/2] add doc for exporting namespace mnemonic --- quorum-vault-system/src/SUMMARY.md | 1 + .../operator/export-namespace-mnemonic.md | 65 +++++++++++++++++++ 2 files changed, 66 insertions(+) create mode 100644 quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md diff --git a/quorum-vault-system/src/SUMMARY.md b/quorum-vault-system/src/SUMMARY.md index 190640f..19b7352 100644 --- a/quorum-vault-system/src/SUMMARY.md +++ b/quorum-vault-system/src/SUMMARY.md @@ -31,3 +31,4 @@ * [Namespace Entropy Ceremony](generated-documents/level-2/fixed-location/operator/namespace-entropy-ceremony.md) * [Ceremony SD Card Provisioning](generated-documents/level-2/fixed-location/operator/ceremony-sd-card-provisioning.md) * [SOL - Transfer Token](generated-documents/level-2/fixed-location/operator/coins/sol/transfer-token.md) + * [Export Namespace Mnemonic](generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md) diff --git a/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md new file mode 100644 index 0000000..06ff808 --- /dev/null +++ b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md @@ -0,0 +1,65 @@ +# Export Namespace Mnemonic + +## Requirements + +{{ #include ../../operator-requirements.md:requirements }} + +* [SD Card Pack](../procurer/procure-sd-card-pack.md) + +* [Ceremony SD Card](../operator/ceremony-sd-card-provisioning.md) + +* [High Visibility Storage](TODO): plastic container or bag that's used to keep items while not in use in a visible location like the middle of a desk. + +## Procedure + +1. Enter the designated location with the quorum of operators and all required equipment + +1. Lock access to the location - there should be no inflow or outflow of people during the ceremony + +1. Place Ceremony SD card in High Visibility Storage + +1. Retrieve sealed Air-Gapped bundle, polaroid of tamper evidence, and online laptop from locked storage + +{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}} + +1. Place all contents except for the laptop into High Visibility Storage + +1. Retrieve AirgapOS SD card and plug it into the air-gapped machine + +1. Boot the computer + +1. Unplug the AirgapOS SD card and place it in High Visibility Storage + +1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine + +1. Start Keyfork using the relevant Shardfile: + + * Use `lsblk` to find external media name + + * `keyfork recover shard --daemon /media//shard.asc` + + * The Shardfile may be named something else. Use `find /media/ -type f -name '*shard*.asc'` to list all files. + +1. Follow on screen prompts + +1. Export the mnemonic: + + * TODO add command + +1. Unplug the Ceremony SD card and place it in High Visibility Storage + +1. Unseal the SD Card Pack + +{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-unsealing}} + +1. Put the mnemonic on an SD card for transport or use `cat` command to output it in the terminal for entry into a hardware wallet or otherwise + +1. Shut down the air gapped machine + +1. Gather all the original items that were in the air-gapped bundle: + + * Air-gapped computer + + * AirgapOS SD card + +{{ #include ../../../../../../component-documents/tamper-evidence-methods.md:vsbwf-procedure-sealing}} \ No newline at end of file From 35b1d668c6b531708a39b30cd4da1206d45dd9ed Mon Sep 17 00:00:00 2001 From: Anton Livaja Date: Fri, 31 Jan 2025 00:14:21 -0500 Subject: [PATCH 2/2] fix command for exporting mnemonic --- .../operator/export-namespace-mnemonic.md | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md index 06ff808..f0625d7 100644 --- a/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md +++ b/quorum-vault-system/src/generated-documents/level-2/fixed-location/operator/export-namespace-mnemonic.md @@ -32,20 +32,14 @@ 1. Retrieve Ceremony SD card from High Visibility Storage and plug it into the air-gapped machine -1. Start Keyfork using the relevant Shardfile: +1. Recover the mnemonic from an existing shardfile - * Use `lsblk` to find external media name + * Use `lsblk` to find media name - * `keyfork recover shard --daemon /media//shard.asc` - - * The Shardfile may be named something else. Use `find /media/ -type f -name '*shard*.asc'` to list all files. + * `keyfork shard combine /media//shard.asc | keyfork-mnemonic-from-seed` 1. Follow on screen prompts -1. Export the mnemonic: - - * TODO add command - 1. Unplug the Ceremony SD card and place it in High Visibility Storage 1. Unseal the SD Card Pack