Changes between Version 2 and Version 3 of User Guide/Disk Images

Timestamp:

Feb 21, 2019, 6:12:35 PM (6 years ago)

Author:

msherman

Comment:

—

User Guide/Disk Images

@@ -11 +11 @@
 The baseline image is a recommended starting point, as this provisioning tool does not currently work with standard .iso or similar files, instead using a custom compressed .ndz format.
 
-== Baseline Image
-The baseline image has two users, root and native. Remote logon as root is not enabled, and passwordless logon as native is enabled. By default, it will allow this only from private IP addresses.
+== Security and Access
+=== Images
 
-WARNING: For nodes that may be accessible externally, [mobile nodes, tunnels to an external subnet, etc] it is YOUR responsibility to set credentials to prevent remote login.
+Images you save are saved to the directory "/export/omf-images-5.4/"
+
+They have permissions to be writable by your user, and readable by your group, and all logged in users. You can customize this via the chmod and chown commands. For example, you may want to restrict the ablility to load your images to only members of a specific group.
+
+=== SSH
+
+**
+WARNING: For nodes that may be accessible externally, [mobile nodes, tunnels to an external subnet, etc] it is YOUR responsibility to set credentials to prevent remote login.**
 
 This can be done via the passwd command, and / or editing the file /etc/ssh/sshd_config
+The default baseline image allows passwordless based access as the user native, from RFC1918 private ip space: 10/8 172.16/12 192.168/16
+Root login is disabled
+
+Passwordless Sudo is enabled for the user native.
+
+You should set up your own accounts, or customize your image's ssh config if you need something different.
+
+== Baseline Image
+
+The baseline image is a very bare install of Ubuntu 18.04 Bionic
+
+You should customize it to you needs, and use that as a base for your experiments.
+
+After saving an image, it will NOT track changes to the baseline, it is a copy, not a delta.
+
+You may periodically want to re-create your experimental images when a new baseline has been relased, to support new hardware, or newer drivers, etc.