Skip to content

Commit

Permalink
Replace references to the Tails Installer with Tails Cloner
Browse files Browse the repository at this point in the history
  • Loading branch information
nathandyer committed Jan 5, 2024
1 parent 4ae52eb commit f7b6b1b
Show file tree
Hide file tree
Showing 2 changed files with 17 additions and 23 deletions.
38 changes: 16 additions & 22 deletions docs/admin/deployment/onboarding_admins.rst
Original file line number Diff line number Diff line change
Expand Up @@ -38,42 +38,36 @@ To set up AW2, follow these steps:
(You will need to on-board the new admin's 2FA device to complete this step.
If this is not possible yet, you can defer it until later.)
4. Insert the empty AW2 USB drive.
5. Launch the Tails installer (**Applications ▸ Tails ▸ Tails Installer**).
5. Launch the Tails Cloner (**Applications ▸ Tails ▸ Tails Cloner**).
Select the option to **Clone the current Tails.** This will delete all data on the AW2 USB drive.
6. Check the box marked **Clone the current Persistent Storage.**
7. Click **Install**.
8. Choose a unique passphrase for AW2 and record it securely.
9. Shut down AW1.
10. Boot AW2, set an Admin password on the welcome screen, unlock the Persistent Storage, and
enable all the options in the Persistent Storage settings.
11. Record the new passphrase for AW2 securely.
10. Boot AW2 and unlock the Persistent Storage.
11. Open the KeePassXC database, remove any unneeded credentials from AW1, and store
the new account credentials you created in step 3.
12. Generate a new keypair on AW2 using the following command:

``ssh-keygen -t rsa -b 4096``

When prompted, store the keypair in the default location.
13. Run the command ``./securedrop-admin tailsconfig`` in ``~/Persistent/securedrop``.
12. Run the command ``./securedrop-admin tailsconfig`` in ``~/Persistent/securedrop``.

This will set up desktop shortcuts and SSH access.
14. Insert AW1. It should show up in the list of storage devices in the file manager under
a label like "7.0 GB Encrypted". Click the label and enter the drive
password when prompted to unlock it.
15. In a terminal, type the following commands to authorize the newly created SSH keypair
13. In a terminal, type the following commands to authorize the newly created SSH keypair
on your servers:
``ssh-add``
``ssh-add /media/amnesia/TailsData/openssh-client/id_rsa``
``ssh-copy-id app``
``ssh-copy-id mon``
``ssh-add -D``
16. Confirm that you are able to access ``mon`` and ``app`` via SSH (``ssh app`` and ``ssh mon``).
17. Confirm that you are able to access the *Source Interface* and the *Journalist

* ``ssh-add``
* ``ssh-add /media/amnesia/TailsData/openssh-client/id_rsa``
* ``ssh-copy-id app``
* ``ssh-copy-id mon``
* ``ssh-add -D``
14. Confirm that you are able to access ``mon`` and ``app`` via SSH (``ssh app`` and ``ssh mon``).
15. Confirm that you are able to access the *Source Interface* and the *Journalist
Interface* using the desktop shortcuts.
18. :ref:`Initialize a passphrase database <keepassxc_setup>` on AW2.
Store the admin account details using KeePassXC, and other account
information this admin will need in the course of administering this
system.
19. Shut down AW2.
20. :doc:`Back up AW2 <../maintenance/backup_workstations>`.
16. Shut down AW2.
17. :doc:`Back up AW2 <../maintenance/backup_workstations>`.

You can now provide AW2 to the new administrator. Ensure that they store the
disk encryption passphrase in a secure manner: in most configurations, it is the
Expand Down
2 changes: 1 addition & 1 deletion docs/admin/deployment/remote.rst
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,7 @@ To create the new SVS USB:
When you see the welcome dialog, unlock the persistent storage
volume.
2. Insert the new (empty) SVS USB.
3. Launch the Tails installer (**Applications ▸ Tails ▸ Tails Installer**).
3. Launch the Tails Cloner (**Applications ▸ Tails ▸ Tails Cloner**).
Select the option to **Clone the current Tails**.
This will delete any data on the new SVS drive.
4. Check the box marked **Clone the current Persistent Storage**.
Expand Down

0 comments on commit f7b6b1b

Please sign in to comment.