fedora-docs-l10n/iot/master/pages/fdo-installing-configuring-and-running-the-owner-server — English @ Fedora Weblate: service_info: initial_user: username: admin sshkeys: - "ssh-rsa AAAA...." diskencryption_clevis:

Zen

Source string Source string

English

service_info:
  initial_user:
    username: admin
    sshkeys:
      - "ssh-rsa AAAA...."
  diskencryption_clevis:
    - disk_label: /dev/vda3
      binding:
        pin: tpm2
        config: "{}"
      reencrypt: true
bind: "0.0.0.0:{ServiceInfoServerPort}"
device_specific_store_driver:
  Directory:
    path: /etc/fdo/stores/serviceinfo_api_devices
service_info_auth_token: Kpt5P/5flBkaiNSvDYS3cEdBQXJn2Zv9n1D50431/lo=
admin_auth_token: zJNoErq7aa0RusJ1w0tkTjdITdMCWYkndzVv7F0V42Q=

Needs editing

The string is read only.

Skip

	English	Actions
	Installing, configuring, and running the Owner server
	Install the `fdo-owner-cli` and `fdo-owner-onboarding-server` RPM package to enable the systems to receive the voucher generated by the Manufacturing server during the first device boot. The Rendezvous server then matches the device UUID with the target platform or cloud and informs the device about which Owner server endpoint the device must use.
	Prerequisites
	The device where the server will be deployed has a Trusted Platform Module (TPM) device to encrypt the disk. If not, you will get an error when booting the Fedora IoT device.
	You created the `device_ca_cert.pem`, `owner_key.der`, and `owner_cert.pem` with keys and certificates and copied them into the `/etc/fdo/keys` directory.
	Procedure
	Install the required RPMs in this server:
	# dnf install -y fdo-owner-cli fdo-owner-onboarding-server
	Prepare the `owner-onboarding-server.yml` configuration file and save it to the `/etc/fdo/` directory. Include the path to the certificates you already copied and information about where to publish the Owner server service in this file.
	The following is an example available in `/usr/share/doc/fdo/owner-onboarding-server.yml`. You can find references to the Service Info API, such as the URL or the authentication token.
	---
	ownership_voucher_store_driver: Directory: path: /etc/fdo/stores/owner_vouchers session_store_driver: Directory: path: /etc/fdo/stores/owner_onboarding_sessions trusted_device_keys_path: /etc/fdo/keys/device_ca_cert.pem owner_private_key_path: /etc/fdo/keys/owner_key.der owner_public_key_path: /etc/fdo/keys/owner_cert.pem bind: "0.0.0.0:{OwnerOnboardingServerPort}" service_info_api_url: "http://{ServiceInfoServerIP}:{ServiceInfoServerPort}/device_info" service_info_api_authentication: BearerToken: token: Kpt5P/5flBkaiNSvDYS3cEdBQXJn2Zv9n1D50431/lo= owner_addresses: - transport: http addresses: - ip_address: {OwnerOnboardingServerIP} port: {OwnerOnboardingServerPort}
	Create and configure the Service Info API.
	Add the automated information for onboarding, such as user creation, files to be copied or created, commands to be executed, disk to be encrypted, and so on. Use the Service Info API configuration file example in `/usr/share/doc/fdo/serviceinfo-api-server.yml` as a template to create the configuration file under `/etc/fdo/`.
	service_info: initial_user: username: admin sshkeys: - "ssh-rsa AAAA...." diskencryption_clevis: - disk_label: /dev/vda3 binding: pin: tpm2 config: "{}" reencrypt: true bind: "0.0.0.0:{ServiceInfoServerPort}" device_specific_store_driver: Directory: path: /etc/fdo/stores/serviceinfo_api_devices service_info_auth_token: Kpt5P/5flBkaiNSvDYS3cEdBQXJn2Zv9n1D50431/lo= admin_auth_token: zJNoErq7aa0RusJ1w0tkTjdITdMCWYkndzVv7F0V42Q=
	Check the status of the systemd units:
	# systemctl list-unit-files \| grep fdo fdo-owner-onboarding-server.service disabled disabled fdo-serviceinfo-api-server.service disabled disabled
	If the service is stopped and disabled, enable and start it:
	# systemctl enable --now fdo-owner-onboarding-server.service # systemctl enable --now fdo-serviceinfo-api-server.service
	You must restart the `systemd` services every time you change the configuration files.
	Check that the server is listening on the default configured port 8083:
	# ss -ltn
	Open the port if you have a firewall configured on this server:
	# firewall-cmd --add-port={OwnerOnboardingServerPort}/tcp --permanent # firewall-cmd --add-port={ServiceInfoServerPort}/tcp --permanent # systemctl restart firewalld

Loading…

None

String added in the repository

English

service_info:
initial_user:
username: admin
sshkeys:
- "ssh-rsa AAAA...."
diskencryption_clevis:
- disk_label: /dev/vda3
binding:
pin: tpm2
config: "{}"
reencrypt: true
bind: "0.0.0.0:{ServiceInfoServerPort}"
device_specific_store_driver:
Directory:
path: /etc/fdo/stores/serviceinfo_api_devices
service_info_auth_token: Kpt5P/5flBkaiNSvDYS3cEdBQXJn2Zv9n1D50431/lo=
admin_auth_token: zJNoErq7aa0RusJ1w0tkTjdITdMCWYkndzVv7F0V42Q=

English 485 characters edited Current translation Read only

8 months ago

Browse all string changes

Things to check

Ellipsis

The string uses three dots (...) instead of an ellipsis character (…)

Reset

Glossary

English	English
No related strings found in the glossary.

17574280 String information

Source string description

type: delimited block -

Flags

no-wrap, read-only

Source string location

./pages/fdo-installing-configuring-and-running-the-owner-server.adoc:88

String age

8 months ago

Last updated

8 months ago

Source string age

8 months ago

Translation file

pot/master/pages/fdo-installing-configuring-and-running-the-owner-server.pot, string 15

Shortcut	Action
`?`	Open available keyboard shortcuts.
`Alt` + `Home`	Navigate to the first translation in the current search.
`Alt` + `End`	Navigate to the last translation in the current search.
`Alt` + `PageUp` or `Ctrl` + `↑` or `Alt` + `↑` or `Cmd` + `↑` or	Navigate to the last translation in the current search.
`Alt` + `PageDown` or `Ctrl` + `↓` or `Alt` + `↓` or `Cmd` + `↓` or	Navigate to the next translation in the current search.
`Ctrl` + `Enter` or `Cmd` + `Enter`	Submit current form; this works the same as pressing Save and continue while editing translation.
`Ctrl` + `Shift` + `Enter` or `Cmd` + `Shift` +`Enter`	Unmark translation as Needing edit and submit it.
`Alt` + `Enter` or `Option` + `Enter`	Submit the string as a suggestion; this works the same as pressing Suggest while editing translation.
`Ctrl` + `E` or `Cmd` + `E`	Focus on translation editor.
`Ctrl` + `U` or `Cmd` + `U`	Focus on comment editor.
`Ctrl` + `M` or `Cmd` + `M`	Shows Automatic suggestions tab.
`Ctrl` + `1` to `Ctrl` + `9` or `Cmd` + `1` to `Cmd` + `9`	Copies placeable of a given number from source string.
`Ctrl` + `M` followed by `1` to `9` or `Cmd` + `M` followed by `1` to `9`	Copy the machine translation of a given number to current translation.
`Ctrl` + `I` followed by `1` to `9` or `Cmd` + `I` followed by `1` to `9`	Ignore one item in the list of failing checks.
`Ctrl` + `J` or `Cmd` + `J`	Shows the Nearby strings tab.
`Ctrl` + `S` or `Cmd` + `S`	Focus on search field.
`Ctrl` + `O` or `Cmd` + `O`	Copy the source string.
`Ctrl` + `Y` or `Cmd` + `Y`	Toggle the Needs editing checkbox.
`→`	Browse the next translation string.
`←`	Browse the previous translation string.