Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Mount the EBS volume
    Check the 100GB disk NAME

    Code Block
    lsblk 


    Use the EBS disk name that is not mounted

    Code Block
    sudo mkfs -t ext4 /dev/nvme1n1
    Code Block
    
    sudo mkdir /var/tmp/Roost
    Code Block
    
    sudo mount /dev/nvme1n1 /var/tmp/Roost
    sudo chown `id -u`:`id -g` /var/tmp/Roost/
    if [ ! -d /var/tmp/Roost ]; then
      sudo mkdir /var/tmp/Roost
    Code Block
    
      sudo chown `id -u`:`id -g` /var/tmp/Roost/
    fi
    mkdir /var/tmp/Roost/certs;
    
    cd /var/tmp/Roost/certs
    # Copy your organisation SSL certs here 
    # OR generate SSL certs 

Steps - Install SSL Certs

  1. Get the SSL_certs.key and SSL_certs.crt file for your organisation domain and put it under a folder that will be accessible to the current user. Preferred to be kept under /var/tmp/Roost/certs

  2. It is possible to use a self generated certificate (not recommended though)

  3. You can generate a self-signed certificate using command given below

  4. The “root.cer” will have to be installed to the certificate authority on all Roost user systems as a trusted certificate. Article with steps for all OS is mentioned here Install the Certificate Authority

  5. Instructions for generating the self-signed certs is given below.

    Code Block
    if [ ! -d /var/tmp/Roost ]; then
      sudo mkdir /var/tmp/Roost
      sudo chown `id -u`:`id -g` /var/tmp/Roost/
    fi
    mkdir certs;
    cd /var/tmp/Roost/certs
    curl -L https://remote-roostprod.s3.us-west-1.amazonaws.com/get-cert.sh -o get-cert.sh
    chmod +x get-cert.sh
    # Follow the instructions displayed after executing this script
    ./get-cert.sh

...