<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Hamed,<div class=""><br class=""></div><div class="">We already have software probes that you can install if you wish. The hardware probes we supply currently run on a customised version of OpenWRT, we’re looking to see if some alignment can be had (less customisation).</div><div class=""><br class=""></div><div class="">There is some balance that needs to be struck between supplying validated packages and the number of platforms to maintain, but I’m sure this can be resolved.</div><div class=""><br class=""></div><div class="">Thoughts from any are welcome, as always!</div><div class=""><br class=""></div><div class="">Cheers,</div><div class=""><br class=""></div><div class="">Michel<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 20 Sep 2022, at 11:53, Hamed Khoramyar <<a href="mailto:hamed.khoramyar@aivivid.com" class="">hamed.khoramyar@aivivid.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="font-family: Arial; font-size: 14px;" class=""><span class="">Guys, </span><div class=""> </div><div class="">This is a great effort, and one that is really really needed. Thanks!<br class=""></div><div class=""><br class=""></div><div class="">But
if this can be done in a way that doesn't need a dedicated
raspberry-pi, it would be fantastic. Many of us have a raspberry pi in
our networks as pi-holes, yacy servers, etc. and it would be great if we
can install the probe on the same OS that is running other stuff as
well. I don't think it needs as much resource as a dedicated pi.</div><div class=""><br class=""></div><div class="">Your thoughts?<br class=""></div><div class=""><br class=""></div><span class="">Cheers;</span><br class=""></div><div style="font-family: Arial; font-size: 14px;" class=""><br class=""></div>
<div class="protonmail_signature_block" style="font-family: Arial; font-size: 14px;">
<div class="protonmail_signature_block-user">
<pre class="moz-signature">-- <br class=""><br class=""><b class="">Hamed Khoramyar</b><br class=""><a href="https://aivivid.com/" rel="noopener noreferrer" target="_blank" class="">Aivivid.com</a> / IT Infrastructure and Cybersecurity services.<br class="">Managing Director<br class="">Office: +46-8-121-44-227<br class="">Mobile / Signal: +46-76-309-2020<br class="">Twitter: @khoramyar / @aivivid<br class="">EU VAT Number: SE559113506501<br class="">SnailMail: Box 1456, 11674 Stockholm, Sweden</pre><div style="font-family:arial;font-size:14px;" class=""><br class=""></div>
</div>
<div class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
<div style="font-family: Arial; font-size: 14px;" class=""><br class=""></div><div class="protonmail_quote">
------- Original Message -------<br class="">
On Monday, September 19th, 2022 at 2:58 PM, Michel Stam <<a href="mailto:mstam@ripe.net" class="">mstam@ripe.net</a>> wrote:<br class=""><br class="">
<blockquote class="protonmail_quote" type="cite">
<div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto">Hi Rodolfo,<div class=""><br class=""></div><div class="">I am not familiar with Packer, but from a quick glance on <a class="" href="http://packer.io/" rel="noreferrer nofollow noopener" target="_blank">packer.io</a> it seems to generate machine images, correct?</div><div class=""><br class=""></div><div class="">I’ve taken a look at your suggestion, and I agree that mentioning backup and restore of the keys of the software probe is a good idea. Going forward we’ll have a critical look to see if this cannot be done differently (without clobbering keys).</div><div class=""><br class=""></div><div class="">Thanks for the idea!</div><div class=""><br class=""></div><div class="">Cheers,</div><div class=""><br class=""></div><div class="">Michel</div><div class=""><br class=""></div><div class="">Looking at your instructions, I’ll discuss them internally and get back to you.</div><div class=""><div class=""><blockquote class="" type="cite"><div class="">On 5 Sep 2022, at 00:12, Rodolfo García Peñas (kix) <<a class="" href="mailto:kix@kix.es" rel="noreferrer nofollow noopener" target="_blank">kix@kix.es</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="" style="font-family: Arial; font-size: 14px;"><span class="">Hello,</span><div class=""><br class=""></div><div class=""><span class="">I did a method to make Raspberry PI images for Atlas SW probes using Packer.</span></div><div class=""><br class=""></div><div class=""><span class=""><a class="" href="https://github.com/thekix/ripe-atlas-sw-probe-packer" rel="noreferrer nofollow noopener" target="_blank">https://github.com/thekix/ripe-atlas-sw-probe-packer</a></span></div><div class=""><br class=""></div><div class=""><span class="">After create this method, I have two comments:</span></div><div class=""><div class=""><br class=""></div><ul class=""><li class=""><span class="">The Raspberry PI image uses Debian. When the Debian package is installed, it launches the Atlas service. The atlas service creates the public and private keys. For this reason I can create the Debian package in the image creation with Packer, but I cannot install it. I am using an script in the first boot to install the package.</span></li><li class=""><span class="">As I pointed in the previous comment, the keys are created when the package is installed. This is a good idea if the package is created for first time or if the user is updating the package. But if the user is moving the installation to a new device, when the package is installed, a new key-pair is created. Therefore, probably the user wants to replace the new keys with the previous and these keys will left unused (but registered).</span></li></ul></div><div class=""><br class=""></div><div class=""><span class="">For these reasons, probably split the package installation and the service startup could be an idea. Then, the user can install the package, if the user has previous keys copy them to the keys folder and then launch the service.</span></div><div class=""><br class=""></div><div class=""><span class="">These steps (<a class="" href="https://github.com/RIPE-NCC/ripe-atlas-software-probe/blob/master/INSTALL.rst" rel="noreferrer nofollow noopener" target="_blank">https://github.com/RIPE-NCC/ripe-atlas-software-probe/blob/master/INSTALL.rst</a>) will change from:</span></div><div class=""><br class=""></div><div class=""><ul class=""><li class=""><span class=""> Install this .deb file: sudo dpkg -i atlasswprobe-??????.deb</span></li><li class=""><span class=""> The public key is stored in /var/atlas-probe/etc/probe_key.pub</span></li><li class=""><span class=""> Then register your probe at <a class="" href="https://atlas.ripe.net/apply/swprobe/" rel="noreferrer nofollow noopener" target="_blank">https://atlas.ripe.net/apply/swprobe/</a></span></li></ul></div><div class=""><br class=""></div><div class=""><span class="">To </span></div><div class=""><br class=""></div><div class=""><ul class=""><li class=""><span class=""> Install this .deb file: sudo dpkg -i atlasswprobe-??????.deb</span></li><li class=""><span class=""> If you have previous keys, from other SW probe, copy them to /var/atlas-probe/etc/</span></li><li class=""><span class=""> Launch the service: sudo sytemctl start atlas</span></li><li class=""><span class=""> If you are using a new atlas probe, then:</span></li><ul class="" style="list-style-type: circle;"><li class=""><span class="">The public key is stored in /var/atlas-probe/etc/probe_key.pub</span></li><li class=""><span class="">Then register your probe at <a class="" href="https://atlas.ripe.net/apply/swprobe/" rel="noreferrer nofollow noopener" target="_blank">https://atlas.ripe.net/apply/swprobe/</a></span></li></ul></ul></div><div class=""><br class=""></div><div class=""><span class="">What do you think?</span></div><div class=""><br class=""></div><div class=""><span class="">Best regards,</span></div><span class="">kix</span><br class=""></div>
<div style="font-family: Arial; font-size: 14px;" class="protonmail_signature_block">
<div class="protonmail_signature_block-user">
<div class="">--<br class=""></div><div class="">Rodolfo García Peñas (kix)<br class=""></div><br class=""><div class="">"I asked him once how to change the key bindings and Dave said 'You use the Change Configuration command. On Unix it is abbreviated as cc.' Dave Conroy and Lawrence Stewart.<br class=""></div>
</div>
<div class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
-- <br class="">atlas-sw-probes mailing list<br class=""><a class="" href="mailto:atlas-sw-probes@ripe.net" rel="noreferrer nofollow noopener" target="_blank">atlas-sw-probes@ripe.net</a><br class=""><a href="https://mailman.ripe.net/" class="">https://mailman.ripe.net/</a><br class=""></div></blockquote></div><br class=""></div></div></div>
</blockquote><br class="">
</div><span id="cid:852DDF14-E9F1-47B2-B3DE-A3DADA010BD0"><publickey - <a href="mailto:hamed.khoramyar@aivivid.com" class="">hamed.khoramyar@aivivid.com</a> - 0x2E4AF0D4.asc></span></div></blockquote></div><br class=""></div></body></html>