Upade install doc

pull/68/head
Raphaël Vinot 2018-07-23 11:48:31 +02:00 committed by GitHub
parent 7b5aa62edc
commit eca0eb534c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 24 additions and 10 deletions

View File

@ -88,7 +88,12 @@ file yields an unlimited number of "0x00" bytes.
Syncing disks. Syncing disks.
``` ```
* Edit shell_utils/basic_mount_image.sh to use the correct image path ($IMAGE) * Edit `shell_utils/basic_mount_image.sh` to use the correct image path ($IMAGE)
* Run the script
```
shell_utils/basic_mount_image.sh
```
Installing the dependencies Installing the dependencies
=========================== ===========================
@ -101,8 +106,11 @@ Installing the dependencies
the mounted image. the mounted image.
``` ```
sudo proot -q qemu-arm -0 -r /mnt/rpi-root -b /mnt/rpi-boot:/boot -b /etc/resolv.conf:/etc/resolv.conf \ sudo proot -q qemu-arm -0 -r /mnt/rpi-root -b /mnt/rpi-boot:/boot -b /etc/resolv.conf:/etc/resolv.conf \
-b /dev/:/dev/ -b /sys/:/sys/ -b /proc/:/proc/ -b/run/shm:/run/shm /bin/bash -b /dev/:/dev/ -b /sys/:/sys/ -b /proc/:/proc/ -b /run/shm:/run/shm /bin/bash
``` ```
**WARNING**: if you have a permission error, make sure the `/tmp` directory is mointed with the `exec` flag.
* Change your locales (remove "en_GB.UTF-8 UTF-8", add "en_US.UTF-8 UTF-8"). The * Change your locales (remove "en_GB.UTF-8 UTF-8", add "en_US.UTF-8 UTF-8"). The
arrow keys move the cursor, spacebar selects/deselects a locale, tab moves the cursor arrow keys move the cursor, spacebar selects/deselects a locale, tab moves the cursor
to a different context, and enter lets you select "ok". This step might take some time, to a different context, and enter lets you select "ok". This step might take some time,
@ -133,12 +141,13 @@ kernel 3.17 and apt will use /dev/urandom when it fails:
apt-get source -b p7zip-rar apt-get source -b p7zip-rar
dpkg -i ${path to p7zip-rar .deb file} dpkg -i ${path to p7zip-rar .deb file}
``` ```
* Install the Python dependencies for PyCIRCLean/filecheck.py. PyCIRCLean is 3.5+ * Install the Python dependencies for `PyCIRCLean/filecheck.py`. PyCIRCLean is 3.5+
compatible, so use pip -V to make sure you're using the right version of pip. You might compatible, so use `pip -V` to make sure you're using the right version of pip. You might
have to edit your PATH variable or use pip3 to get the correct pip. You also might want to have to edit your PATH variable or use pip3 to get the correct pip. You also might want to
verify that these dependencies are current by checking in the PyCIRCLean git repo. verify that these dependencies are current by checking in the PyCIRCLean git repo.
``` ```
pip3 install -U pip pip3 install -U pip
hash -r
pip3 install olefile oletools exifread Pillow pip3 install olefile oletools exifread Pillow
pip3 install git+https://github.com/Rafiot/officedissector.git pip3 install git+https://github.com/Rafiot/officedissector.git
pip3 install git+https://github.com/CIRCL/PyCIRCLean.git pip3 install git+https://github.com/CIRCL/PyCIRCLean.git
@ -148,19 +157,18 @@ verify that these dependencies are current by checking in the PyCIRCLean git rep
useradd -m kitten useradd -m kitten
chown -R kitten:kitten /home/kitten chown -R kitten:kitten /home/kitten
``` ```
* Symlinking /proc/mounts to /etc/mtab is necessary because /etc/mtab cannot be edited by * (if needed) Symlinking `/proc/mounts` to `/etc/mtab` is necessary because `/etc/mtab` cannot be edited by
pmount if root is read-only. /proc/mounts is maintained by the kernel and is guaranteed to `pmount` if root is read-only. `/proc/mounts` is maintained by the kernel and is guaranteed to
be accurate. be accurate.
``` ```
ln -s /proc/mounts /etc/mtab ln -s /proc/mounts /etc/mtab
``` ```
* Enable rc.local, which ensures that the code in /etc/rc.local is run on boot. * Enable `rc.local`, which ensures that the code in `/etc/rc.local` is run on boot.
This is what triggers CIRCLean to run. This is what triggers CIRCLean to run.
``` ```
systemctl enable rc-local.service systemctl enable rc-local.service
``` ```
* Turn off several networking related services. This speeds up boot and reduces the * Turn off several networking related services. This speeds up boot and reduces the attack surface:
attack surface:
``` ```
systemctl disable networking.service systemctl disable networking.service
systemctl disable bluetooth.service systemctl disable bluetooth.service
@ -184,6 +192,11 @@ manpage for more details. Make sure to include the trailing slashes on the paths
* If have an external hardware led and you're using the led functionality, copy * If have an external hardware led and you're using the led functionality, copy
the led files from diode_controller/ as well. the led files from diode_controller/ as well.
* Unmount the image
```
sudo umount /mnt/rpi-boot /mnt/rpi-root
```
Write the image on a SD card Write the image on a SD card
============================ ============================
@ -204,5 +217,6 @@ copying process:
``` ```
* Use fsck to verify the root partition: * Use fsck to verify the root partition:
``` ```
sudo e2fsck -f /dev/sd<letter>2 sudo fsck.vfat -f /dev/<partition>1
sudo e2fsck -f /dev/<partition>2
``` ```