<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 20, 2022 at 3:23 PM Hamed Khoramyar <<a href="mailto:hamed.khoramyar@aivivid.com">hamed.khoramyar@aivivid.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="font-family:Arial;font-size:14px"><span>Guys, </span><div> </div><div>This is a great effort, and one that is really really needed. Thanks!<br></div><div><br></div><div>But
if this can be done in a way that doesn't need a dedicated
raspberry-pi, it would be fantastic. Many of us have a raspberry pi in
our networks as pi-holes, yacy servers, etc. and it would be great if we
can install the probe on the same OS that is running other stuff as
well. I don't think it needs as much resource as a dedicated pi.</div><div><br></div><div>Your thoughts?<br></div></div></blockquote><div><br></div><div><div class="gmail_default" style="font-family:georgia,serif">Hello Hamed, </div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">There have been docker images[1] created by the community available for sometime now. </div><br></div><div><div class="gmail_default" style="font-family:georgia,serif">Since you want to utilise a Raspberry pi that you already have lying around, using docker can also be a option which can co-exist with pi-hole etc</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif"><br></div></div><div><span style="font-family:georgia,serif">[1]: <a href="https://atlas.ripe.net/docs/howtos/software-probes.html">https://atlas.ripe.net/docs/howtos/software-probes.html</a></span></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="font-family:Arial;font-size:14px"><div></div><div><br></div><span>Cheers;</span><br></div><div style="font-family:Arial;font-size:14px"><br></div>
<div style="font-family:Arial;font-size:14px">
<div>
<pre>-- <br><br><b>Hamed Khoramyar</b><br><a href="https://aivivid.com" rel="noopener noreferrer" target="_blank">Aivivid.com</a> / IT Infrastructure and Cybersecurity services.<br>Managing Director<br>Office: +46-8-121-44-227<br>Mobile / Signal: +46-76-309-2020<br>Twitter: @khoramyar / @aivivid<br>EU VAT Number: SE559113506501<br>SnailMail: Box 1456, 11674 Stockholm, Sweden</pre><div style="font-family:arial;font-size:14px"><br></div>
</div>
<div>
</div>
</div>
<div style="font-family:Arial;font-size:14px"><br></div><div>
------- Original Message -------<br>
On Monday, September 19th, 2022 at 2:58 PM, Michel Stam <<a href="mailto:mstam@ripe.net" target="_blank">mstam@ripe.net</a>> wrote:<br><br>
<blockquote type="cite">
<div style="overflow-wrap: break-word;" dir="auto"><div style="overflow-wrap: break-word;" dir="auto">Hi Rodolfo,<div><br></div><div>I am not familiar with Packer, but from a quick glance on <a href="http://packer.io/" rel="noreferrer nofollow noopener" target="_blank">packer.io</a> it seems to generate machine images, correct?</div><div><br></div><div>I’ve taken a look at your suggestion, and I agree that mentioning backup and restore of the keys of the software probe is a good idea. Going forward we’ll have a critical look to see if this cannot be done differently (without clobbering keys).</div><div><br></div><div>Thanks for the idea!</div><div><br></div><div>Cheers,</div><div><br></div><div>Michel</div><div><br></div><div>Looking at your instructions, I’ll discuss them internally and get back to you.</div><div><div><blockquote type="cite"><div>On 5 Sep 2022, at 00:12, Rodolfo García Peñas (kix) <<a href="mailto:kix@kix.es" rel="noreferrer nofollow noopener" target="_blank">kix@kix.es</a>> wrote:</div><br><div><div style="font-family:Arial;font-size:14px"><span>Hello,</span><div><br></div><div><span>I did a method to make Raspberry PI images for Atlas SW probes using Packer.</span></div><div><br></div><div><span><a href="https://github.com/thekix/ripe-atlas-sw-probe-packer" rel="noreferrer nofollow noopener" target="_blank">https://github.com/thekix/ripe-atlas-sw-probe-packer</a></span></div><div><br></div><div><span>After create this method, I have two comments:</span></div><div><div><br></div><ul><li><span>The Raspberry PI image uses Debian. When the Debian package is installed, it launches the Atlas service. The atlas service creates the public and private keys. For this reason I can create the Debian package in the image creation with Packer, but I cannot install it. I am using an script in the first boot to install the package.</span></li><li><span>As I pointed in the previous comment, the keys are created when the package is installed. This is a good idea if the package is created for first time or if the user is updating the package. But if the user is moving the installation to a new device, when the package is installed, a new key-pair is created. Therefore, probably the user wants to replace the new keys with the previous and these keys will left unused (but registered).</span></li></ul></div><div><br></div><div><span>For these reasons, probably split the package installation and the service startup could be an idea. Then, the user can install the package, if the user has previous keys copy them to the keys folder and then launch the service.</span></div><div><br></div><div><span>These steps (<a href="https://github.com/RIPE-NCC/ripe-atlas-software-probe/blob/master/INSTALL.rst" rel="noreferrer nofollow noopener" target="_blank">https://github.com/RIPE-NCC/ripe-atlas-software-probe/blob/master/INSTALL.rst</a>) will change from:</span></div><div><br></div><div><ul><li><span> Install this .deb file: sudo dpkg -i atlasswprobe-??????.deb</span></li><li><span> The public key is stored in /var/atlas-probe/etc/probe_key.pub</span></li><li><span> Then register your probe at <a href="https://atlas.ripe.net/apply/swprobe/" rel="noreferrer nofollow noopener" target="_blank">https://atlas.ripe.net/apply/swprobe/</a></span></li></ul></div><div><br></div><div><span>To </span></div><div><br></div><div><ul><li><span> Install this .deb file: sudo dpkg -i atlasswprobe-??????.deb</span></li><li><span> If you have previous keys, from other SW probe, copy them to /var/atlas-probe/etc/</span></li><li><span> Launch the service: sudo sytemctl start atlas</span></li><li><span> If you are using a new atlas probe, then:</span></li><ul style="list-style-type:circle"><li><span>The public key is stored in /var/atlas-probe/etc/probe_key.pub</span></li><li><span>Then register your probe at <a href="https://atlas.ripe.net/apply/swprobe/" rel="noreferrer nofollow noopener" target="_blank">https://atlas.ripe.net/apply/swprobe/</a></span></li></ul></ul></div><div><br></div><div><span>What do you think?</span></div><div><br></div><div><span>Best regards,</span></div><span>kix</span><br></div>
<div style="font-family:Arial;font-size:14px">
<div>
<div>--<br></div><div>Rodolfo García Peñas (kix)<br></div><br><div>"I asked him once how to change the key bindings and Dave said 'You use the Change Configuration command. On Unix it is abbreviated as cc.' Dave Conroy and Lawrence Stewart.<br></div>
</div>
<div>
</div>
</div>
-- <br>atlas-sw-probes mailing list<br><a href="mailto:atlas-sw-probes@ripe.net" rel="noreferrer nofollow noopener" target="_blank">atlas-sw-probes@ripe.net</a><br><a href="https://mailman.ripe.net/" target="_blank">https://mailman.ripe.net/</a><br></div></blockquote></div><br></div></div></div>
</blockquote><br>
</div>-- <br>
atlas-sw-probes mailing list<br>
<a href="mailto:atlas-sw-probes@ripe.net" target="_blank">atlas-sw-probes@ripe.net</a><br>
<a href="https://mailman.ripe.net/" rel="noreferrer" target="_blank">https://mailman.ripe.net/</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><font face="georgia, serif"><span style="font-size:small">Best, </span><br></font></div><div style="font-size:small"><font face="georgia, serif">Swapneel</font></div><a href="https://brainattic.in/blog" target="_blank">https://brainattic.in/blog</a></div></div></div></div></div></div></div>