diff options
author | Christian Grothoff <christian@grothoff.org> | 2021-01-03 23:05:00 +0100 |
---|---|---|
committer | Christian Grothoff <christian@grothoff.org> | 2021-01-03 23:05:00 +0100 |
commit | 2a1fcffe436f6e2cfec28e25123e2c6485816ba1 (patch) | |
tree | 9cfd710997ec6be172b2a25cc0c861f4449343d7 | |
parent | 3b866c6ca19ebdd6a4354b7c0774bd6481afe59a (diff) | |
download | docs-2a1fcffe436f6e2cfec28e25123e2c6485816ba1.tar.gz docs-2a1fcffe436f6e2cfec28e25123e2c6485816ba1.tar.bz2 docs-2a1fcffe436f6e2cfec28e25123e2c6485816ba1.zip |
Debian package instructions
-rw-r--r-- | frags/installing-debian.rst | 52 | ||||
-rw-r--r-- | taler-auditor-manual.rst | 35 | ||||
-rw-r--r-- | taler-exchange-manual.rst | 26 | ||||
-rw-r--r-- | taler-merchant-manual.rst | 27 |
4 files changed, 135 insertions, 5 deletions
diff --git a/frags/installing-debian.rst b/frags/installing-debian.rst new file mode 100644 index 00000000..1842ca5d --- /dev/null +++ b/frags/installing-debian.rst @@ -0,0 +1,52 @@ +To install the GNU Taler Debian packages, you must first ensure to have +the right Debian distribution. At this time, the packages are build for +Sid, which means you should use a system which at least includes +unstable packages in its source list. We recommend using APT pinning +to limit unstable packages to those explicitly requested. To do this, +set your ``/etc/apt/preferences`` as follows: + +.. code-block:: + + Package: * + Pin: release a=stable + Pin-Priority: 700 + + Package: * + Pin: release a=testing + Pin-Priority: 650 + + Package: * + Pin: release a=unstable + Pin-Priority: 600 + + Package: * + Pin: release l=Debian-Security + Pin-Priority: 1000 + +A typical ``/etc/apt/sources.list`` file for this setup +would look like this: + +.. code-block:: + + deb http://ftp.ch.debian.org/debian/ buster main + deb http://security.debian.org/debian-security buster/updates main + deb http://ftp.ch.debian.org/debian/ testing main + deb http://ftp.ch.debian.org/debian/ unstable main + deb https://deb.taler.net/apt/debian sid main + +The last line is crucial, as it adds the GNU Taler packages. + +Next, you must import the Taler Systems SA public package signing key +into your keyring and update the package lists: + +.. code-block:: console + + # wget -O - https://taler.net/taler-systems.gpg.key | apt-sign add - + # apt update + +.. note:: + + You may want to verify the correctness of the Taler Systems key out-of-band. + +Now your system is ready to install the official GNU Taler binary packages +using apt. diff --git a/taler-auditor-manual.rst b/taler-auditor-manual.rst index 5a5e6120..9eac6f9a 100644 --- a/taler-auditor-manual.rst +++ b/taler-auditor-manual.rst @@ -177,6 +177,9 @@ components: Installation ============ +Installing from source +---------------------- + Please install the following packages before proceeding with the exchange compilation. @@ -197,6 +200,38 @@ the exchange (which includes the code for the auditor). .. include:: frags/installing-taler-exchange.rst +Installing the GNU Taler binary packages on Debian +-------------------------------------------------- + +.. include:: frags/installing-debian.rst + +To install the Taler auditor, you can now simply run: + +.. code-block:: console + + # apt install taler-exchange + +Note that Taler auditor is part of the ``taler-exchange`` package. +The package sets up the various users and the systemd service scripts +for an exchange, which will not be needed for an auditor. Simply do not +enable the taler-exchange-httpd service and this should be harmless. + +.. note:: + + In the future, we plan to split the package and have a separate + ``taler-auditor`` package. + +For the auditor, you must manually configure access to the exchange database, +the HTTP reverse proxy (typically with TLS certificates) and offline signing. + +.. note:: + + The current package does not setup a user for the ``taler-auditor-httpd`` + and includes no provisions for the reverse proxy configuration. + This should change in a future release. + + + Configuration ============= diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst index 0faa3ac9..5505cf53 100644 --- a/taler-exchange-manual.rst +++ b/taler-exchange-manual.rst @@ -287,13 +287,37 @@ Except for the last two, these are available in most GNU/Linux distributions and should just be installed using the respective package manager. + +Installing from source +---------------------- + The following instructions will show how to install libgnunetutil and -the GNU Taler exchange. +the GNU Taler exchange from source. .. include:: frags/installing-gnunet.rst .. include:: frags/installing-taler-exchange.rst + +Installing the GNU Taler binary packages on Debian +-------------------------------------------------- + +.. include:: frags/installing-debian.rst + +To install the Taler exchange, you can now simply run: + +.. code-block:: console + + # apt install taler-exchange + +Note that the package does not perform any configuration work except for +setting up the various users and the systemd service scripts. You still must +configure at least the database, HTTP reverse proxy (typically with TLS +certificates), denomination and fee structure, bank account, auditor(s), +offline signing and the terms of service. + + + Configuration ============= diff --git a/taler-merchant-manual.rst b/taler-merchant-manual.rst index fd64fadc..56fe9c32 100644 --- a/taler-merchant-manual.rst +++ b/taler-merchant-manual.rst @@ -264,8 +264,8 @@ This chapter describes how to install the GNU Taler merchant backend. .. _Generic-instructions: -Generic instructions --------------------- +Generic instructions for installation from source +------------------------------------------------- This section provides generic instructions for the merchant backend installation independent of any particular operating system. Operating @@ -375,10 +375,29 @@ find the installed libraries and launching the Taler merchant backend would then fail. +Installing the GNU Taler binary packages on Debian +-------------------------------------------------- + +.. include:: frags/installing-debian.rst + +To install the Taler merchant backend, you can now simply run: + +.. code-block:: console + + # apt install taler-merchant + +Note that the package does not complete the integration of the backend with +the HTTP reverse proxy (typically with TLS certificates). A configuration +fragment for Nginx or Apache will be placed in +``/etc/{apache,nginx}/conf-available/taler-merchant.conf``. You must +furthermore still configure the instances, and may need to extend the fragment +with access control restrictions for non-default instances. + + .. _Installing-Taler-on-Debian-GNU_002fLinux: -Installing Taler on Debian GNU/Linux ------------------------------------- +Installing Taler on Debian GNU/Linux from source +------------------------------------------------ .. index:: Wheezy .. index:: Jessie |