[fedora-cookbook] master: here, have some newlines (6719498)
by Pete Travis
Repository : http://git.fedorahosted.org/cgit/docs/fedora-cookbook.git
On branch : master
>---------------------------------------------------------------
commit 6719498ae2e480e5f88b21d707b2b8a19d52fefe
Author: Pete Travis <immanetize(a)fedoraproject.org>
Date: Sun May 18 02:32:31 2014 -0600
here, have some newlines
>---------------------------------------------------------------
.../Access_To_libvirt_Without_root.xml | 9 ++++++---
1 files changed, 6 insertions(+), 3 deletions(-)
diff --git a/en-US/Virtualization/Access_To_libvirt_Without_root.xml b/en-US/Virtualization/Access_To_libvirt_Without_root.xml
index 4390eb9..bd44471 100644
--- a/en-US/Virtualization/Access_To_libvirt_Without_root.xml
+++ b/en-US/Virtualization/Access_To_libvirt_Without_root.xml
@@ -58,9 +58,12 @@ email: ignatenkobrain(a)fedoraproject.org
Paste in the rule below.
</para>
<screen>
- [libvirt group Management Access] Identity=unix-group:libvirt
- Action=org.libvirt.unix.manage ResultAny=yes ResultInactive=yes
- ResultActive=yes
+ [libvirt group Management Access]
+ Identity=unix-group:libvirt
+ Action=org.libvirt.unix.manage
+ ResultAny=yes
+ ResultInactive=yes
+ ResultActive=yes
</screen>
</listitem>
<listitem >
9 years, 10 months
[fedora-cookbook] master: polkit rules for libvirt from ignatenkobrain (9431973)
by Pete Travis
Repository : http://git.fedorahosted.org/cgit/docs/fedora-cookbook.git
On branch : master
>---------------------------------------------------------------
commit 9431973c090de3b069f35f4f1fbfb5b01eaaa305
Author: Igor Gnatenko <i.gnatenko.brain(a)gmail.com>
Date: Sun May 18 01:43:54 2014 -0600
polkit rules for libvirt from ignatenkobrain
>---------------------------------------------------------------
en-US/Virtualization.xml | 6 +-
.../Access_To_libvirt_Without_root.xml | 95 ++++++++++++++++++++
2 files changed, 98 insertions(+), 3 deletions(-)
diff --git a/en-US/Virtualization.xml b/en-US/Virtualization.xml
index 9078353..f4bdbb8 100644
--- a/en-US/Virtualization.xml
+++ b/en-US/Virtualization.xml
@@ -4,6 +4,6 @@
%BOOK_ENTITIES;
]>
<chapter id="Virtualization">
-<title>Virtualization</title>
-
-<para /> </chapter>
+ <title>Virtualization</title>
+ <xi:include href="Virtualization/Access_To_libvirt_Without_root.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
+ </chapter>
diff --git a/en-US/Virtualization/Access_To_libvirt_Without_root.xml b/en-US/Virtualization/Access_To_libvirt_Without_root.xml
new file mode 100644
index 0000000..4390eb9
--- /dev/null
+++ b/en-US/Virtualization/Access_To_libvirt_Without_root.xml
@@ -0,0 +1,95 @@
+<?xml version='1.0' encoding='utf-8' ?>
+ <!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
+ "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+ <!ENTITY % BOOK_ENTITIES SYSTEM "Fedora_Cookbook.ent">
+ %BOOK_ENTITIES;
+ ]>
+<!-- Do not edit above this line -->
+<!--
+name: Igor Gnatenko
+fas_id: ignatenkobrain
+email: ignatenkobrain(a)fedoraproject.org
+-->
+<section id="access-to-libvirt-without-root-privileges">
+ <title>Access to libvirt without root privileges</title>
+ <para>
+ By default, only root can administer virtual machines using libvirt. Use these instructions to create a special group whose members will be able to use libvirt.
+ </para>
+ <section id="required-ingredients">
+ <title>Required Ingredients</title>
+ <itemizedlist>
+ <listitem>
+ <para>
+ Package 'polkit'
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Package 'libvirt'
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
+ <section id="creating-a-name_of_article">
+ <title>Create polkit policy for libvirt</title>
+ <orderedlist >
+ <listitem>
+ <para>
+ Create polkit policy for libvirt:
+ </para>
+ <screen>
+ <command>
+ touch /etc/polkit-1/localauthority/50-local.d/50-org.libvirt-group-access.pkla
+ </command>
+ </screen>
+ </listitem>
+ <listitem>
+ <para>
+ Open the policy file in an editor.
+ </para>
+ <screen>
+ <command>
+ nano /etc/polkit-1/localauthority/50-local.d/50-org.libvirt-group-access.pkla
+ </command>
+ </screen>
+ </listitem>
+ <listitem >
+ <para>
+ Paste in the rule below.
+ </para>
+ <screen>
+ [libvirt group Management Access] Identity=unix-group:libvirt
+ Action=org.libvirt.unix.manage ResultAny=yes ResultInactive=yes
+ ResultActive=yes
+ </screen>
+ </listitem>
+ <listitem >
+ <para>
+ Create group for users that can access libvirt without
+ root privileges:
+ </para>
+ <screen>
+ groupadd libvirt
+ </screen>
+ </listitem>
+ <listitem >
+ <para>
+ Add your users to the special group:
+ </para>
+ <screen>
+ <command>usermod -a -G libvirt user_name</command>
+ </screen>
+ </listitem>
+ </orderedlist>
+ </section>
+ <section>
+ <title>References:</title>
+ <itemizedlist>
+ <listitem>
+ <para>
+ <ulink url="http://wiki.libvirt.org/page/SSHPolicyKitSetup#Configuration_for_group_ac...">Libvirt policykit documentation</ulink>
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
+</section>
9 years, 10 months
[fedora-cookbook] master: polkit rules for libvirt from ignatenkobrain (1d8528f)
by Pete Travis
Repository : http://git.fedorahosted.org/cgit/docs/fedora-cookbook.git
On branch : master
>---------------------------------------------------------------
commit 1d8528f88edd9d79e50fb0d8a0a7dfa69ce5d8d3
Author: Pete Travis <immanetize(a)fedoraproject.org>
Date: Sun May 18 01:43:54 2014 -0600
polkit rules for libvirt from ignatenkobrain
>---------------------------------------------------------------
en-US/Virtualization.xml | 6 +-
.../Access_To_libvirt_Without_root.xml | 95 ++++++++++++++++++++
2 files changed, 98 insertions(+), 3 deletions(-)
diff --git a/en-US/Virtualization.xml b/en-US/Virtualization.xml
index 9078353..f4bdbb8 100644
--- a/en-US/Virtualization.xml
+++ b/en-US/Virtualization.xml
@@ -4,6 +4,6 @@
%BOOK_ENTITIES;
]>
<chapter id="Virtualization">
-<title>Virtualization</title>
-
-<para /> </chapter>
+ <title>Virtualization</title>
+ <xi:include href="Virtualization/Access_To_libvirt_Without_root.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
+ </chapter>
diff --git a/en-US/Virtualization/Access_To_libvirt_Without_root.xml b/en-US/Virtualization/Access_To_libvirt_Without_root.xml
new file mode 100644
index 0000000..4390eb9
--- /dev/null
+++ b/en-US/Virtualization/Access_To_libvirt_Without_root.xml
@@ -0,0 +1,95 @@
+<?xml version='1.0' encoding='utf-8' ?>
+ <!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
+ "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+ <!ENTITY % BOOK_ENTITIES SYSTEM "Fedora_Cookbook.ent">
+ %BOOK_ENTITIES;
+ ]>
+<!-- Do not edit above this line -->
+<!--
+name: Igor Gnatenko
+fas_id: ignatenkobrain
+email: ignatenkobrain(a)fedoraproject.org
+-->
+<section id="access-to-libvirt-without-root-privileges">
+ <title>Access to libvirt without root privileges</title>
+ <para>
+ By default, only root can administer virtual machines using libvirt. Use these instructions to create a special group whose members will be able to use libvirt.
+ </para>
+ <section id="required-ingredients">
+ <title>Required Ingredients</title>
+ <itemizedlist>
+ <listitem>
+ <para>
+ Package 'polkit'
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Package 'libvirt'
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
+ <section id="creating-a-name_of_article">
+ <title>Create polkit policy for libvirt</title>
+ <orderedlist >
+ <listitem>
+ <para>
+ Create polkit policy for libvirt:
+ </para>
+ <screen>
+ <command>
+ touch /etc/polkit-1/localauthority/50-local.d/50-org.libvirt-group-access.pkla
+ </command>
+ </screen>
+ </listitem>
+ <listitem>
+ <para>
+ Open the policy file in an editor.
+ </para>
+ <screen>
+ <command>
+ nano /etc/polkit-1/localauthority/50-local.d/50-org.libvirt-group-access.pkla
+ </command>
+ </screen>
+ </listitem>
+ <listitem >
+ <para>
+ Paste in the rule below.
+ </para>
+ <screen>
+ [libvirt group Management Access] Identity=unix-group:libvirt
+ Action=org.libvirt.unix.manage ResultAny=yes ResultInactive=yes
+ ResultActive=yes
+ </screen>
+ </listitem>
+ <listitem >
+ <para>
+ Create group for users that can access libvirt without
+ root privileges:
+ </para>
+ <screen>
+ groupadd libvirt
+ </screen>
+ </listitem>
+ <listitem >
+ <para>
+ Add your users to the special group:
+ </para>
+ <screen>
+ <command>usermod -a -G libvirt user_name</command>
+ </screen>
+ </listitem>
+ </orderedlist>
+ </section>
+ <section>
+ <title>References:</title>
+ <itemizedlist>
+ <listitem>
+ <para>
+ <ulink url="http://wiki.libvirt.org/page/SSHPolicyKitSetup#Configuration_for_group_ac...">Libvirt policykit documentation</ulink>
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
+</section>
9 years, 10 months
[fedora-cookbook] master: updating entities (f09f40c)
by Pete Travis
Repository : http://git.fedorahosted.org/cgit/docs/fedora-cookbook.git
On branch : master
>---------------------------------------------------------------
commit f09f40cf450a49e287127eecede2d96d06283b14
Author: Pete Travis <immanetize(a)fedoraproject.org>
Date: Sun May 18 01:42:53 2014 -0600
updating entities
>---------------------------------------------------------------
en-US/Fedora_Cookbook.ent | 5 ++++-
1 files changed, 4 insertions(+), 1 deletions(-)
diff --git a/en-US/Fedora_Cookbook.ent b/en-US/Fedora_Cookbook.ent
index 1559ee1..a7d1053 100644
--- a/en-US/Fedora_Cookbook.ent
+++ b/en-US/Fedora_Cookbook.ent
@@ -1,4 +1,7 @@
-<!ENTITY PRODUCT "Documentation">
<!ENTITY BOOKID "Fedora_Cookbook">
<!ENTITY YEAR "2014">
<!ENTITY HOLDER "| You need to change the HOLDER entity in the en-US/Fedora_Cookbook.ent file |">
+<!ENTITY PRODUCT "Fedora Documentation">
+<!ENTITY BOOKID "cookbook">
+<!ENTITY BZURL "<ulink url='https://bugzilla.redhat.com/enter_bug.cgi?product=&PRODUCT;&component...;'>http://bugzilla.redhat.com/</ulink>">
+
9 years, 10 months
[fedora-cookbook] master: markup repair (6439126)
by Pete Travis
Repository : http://git.fedorahosted.org/cgit/docs/fedora-cookbook.git
On branch : master
>---------------------------------------------------------------
commit 6439126c141d2dddbcdacfb58882faa36383d113
Author: Pete Travis <immanetize(a)fedoraproject.org>
Date: Thu May 15 14:05:22 2014 -0600
markup repair
>---------------------------------------------------------------
en-US/Creating_GPG_Keys.xml | 15 +++++++--------
en-US/GPG.xml | 9 ++++-----
en-US/Security/ssh-proxy.xml | 12 ++++++------
en-US/git/secure-git-pull.xml | 19 +++++--------------
4 files changed, 22 insertions(+), 33 deletions(-)
diff --git a/en-US/Creating_GPG_Keys.xml b/en-US/Creating_GPG_Keys.xml
index bef0507..1a8eb9b 100644
--- a/en-US/Creating_GPG_Keys.xml
+++ b/en-US/Creating_GPG_Keys.xml
@@ -1,4 +1,3 @@
-
<?xml version='1.0' encoding='utf-8' ?>
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
@@ -35,23 +34,23 @@ What keysize do you want? (2048) 3072
Requested keysize is 3072 bits
Please specify how long the key should be valid.
0 = key does not expire
- <n> = key expires in n days
- <n>w = key expires in n weeks
- <n>m = key expires in n months
- <n>y = key expires in n years
+ <n> = key expires in n days
+ <n>w = key expires in n weeks
+ <n>m = key expires in n months
+ <n>y = key expires in n years
Key is valid for? (0) 1y
Key expires at Wed 15 Apr 2015 09:40:08 PM EDT
Is this correct? (y/N) y
You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form:
- "Heinrich Heine (Der Dichter) <heinrichh(a)duesseldorf.de>"
+ "Heinrich Heine (Der Dichter) <heinrichh(a)duesseldorf.de>"
Real name: Beefy
Email address: beefy(a)fedoraproject.org
Comment: FAKE
You selected this USER-ID:
- "Beefy (FAKE) <beefy(a)fedoraproject.org>"
+ "Beefy (FAKE) <beefy(a)fedoraproject.org>"
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
You need a Passphrase to protect your secret key.
@@ -83,7 +82,7 @@ gpg: depth: 2 valid: 8 signed: 16 trust: 8-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2014-09-09
pub 3072R/20EE698C 2014-04-16 [expires: 2015-04-16]
Key fingerprint = E6FE 3BF4 F307 00BD 6517 050F C159 309E 20EE 698C
-uid Beefy (FAKE) <beefy(a)fedoraproject.org>
+uid Beefy (FAKE) <beefy(a)fedoraproject.org>
sub 3072R/C68ACE5D 2014-04-16 [expires: 2015-04-16]
</screen>
</para>
diff --git a/en-US/GPG.xml b/en-US/GPG.xml
index 7670e32..603472b 100644
--- a/en-US/GPG.xml
+++ b/en-US/GPG.xml
@@ -1,6 +1,4 @@
-
-<?xml version='1.0' encoding='utf-8' ?>
- <!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
<!ENTITY % BOOK_ENTITIES SYSTEM "Fedora_Cookbook.ent">
%BOOK_ENTITIES;
@@ -18,8 +16,9 @@
<para>
<firstterm>GNU Privacy Guard</firstterm> or <firstterm>GnuPG</firstterm> or just plain <firstterm>GPG</firstterm> is an open source iteration of <firstterm>Pretty Good Privacy</firstterm> (PGP) and provides authentication and encryption for email and files based on asymmetric cryptography. Using GPG allows an individual or organization to help protect their coorespondances as they cross the Internet or other medium.
</para>
- <xi:include href="Creating_GPG_Keys.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
-
+ <!--
+ <xi:include href="Creating_GPG_Keys.xml" xmlns:xi="http://www.w3.org/2001/XInclude" />
+ -->
</section>
diff --git a/en-US/Security/ssh-proxy.xml b/en-US/Security/ssh-proxy.xml
index 550cb82..2a06d16 100644
--- a/en-US/Security/ssh-proxy.xml
+++ b/en-US/Security/ssh-proxy.xml
@@ -1,4 +1,3 @@
-
<?xml version='1.0' encoding='utf-8' ?>
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
@@ -38,9 +37,11 @@
The outside address for your internal network. Home users with dynamically assigned IP addresses should read <xref linkend="no-ip" />
</para></listitem>
<listitem><para>
- The address space for your internal network. On many home routers, this will be <systemitem class="ipaddress">192.168.1.*</systemitem> or <systemitem class="ipaddress">192.168.0.1>
+ The address space for your internal network. On many home routers, this will be <systemitem class="ipaddress">192.168.1.*</systemitem> or <systemitem class="ipaddress">192.168.0.1</systemitem>
</para>
- <warning>
+ </listitem>
+ </itemizedlist>
+ <warning>
<title>Address Space Reuse</title>
<para>
Adddresses like <systemitem class="ipaddress">192.168.1.0/24</systemitem> are reserved for use in private networks. Because the proxy rule is applied based on the address space of the target, you should configure your router to use a less common set of addresses.
@@ -49,8 +50,7 @@
If your router can give addresses in the <systemitem class="ipaddress">192.168.42.0/24</systemitem> network, for example, your proxy rule won't get in the way when connecting to machines on a different network that uses <systemitem class="ipaddress">192.168.1.0/24</systemitem> addresses.
</para>
</warning>
- </itemizedlist>
- </section>
+ </section>
<section id="ssh-proxy-directions">
<title>Directions</title>
<procedure>
@@ -62,7 +62,7 @@
Open the firewall on all machines to ssh traffic. This is the default on most systems. Use the graphical firewall application <application>firewall-config</application>, or issue the commands below as root.
<screen>
<command>firewall-cmd --permanent --add-service=ssh</command>
- <command>firewall-cmd --reload
+ <command>firewall-cmd --reload</command>
</screen>
</para></step>
<step><para>
diff --git a/en-US/git/secure-git-pull.xml b/en-US/git/secure-git-pull.xml
index c2d21f3..6d6cf0b 100644
--- a/en-US/git/secure-git-pull.xml
+++ b/en-US/git/secure-git-pull.xml
@@ -1,4 +1,3 @@
-
<?xml version='1.0' encoding='utf-8' ?>
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
@@ -31,9 +30,9 @@
</para></listitem>
<listitem><para>
A dedicated user account.
- </listitem></para>
+ </para></listitem>
<listitem><para>
- A dedicated <xref linkend="section-id">SSH authentication key</section>
+ A dedicated <xref linkend="ssh-keygen">SSH authentication key</xref>
</para></listitem>
</itemizedlist>
</section>
@@ -43,6 +42,7 @@
<title>Configuring the host</title>
<step><para>
Create and configure a new user account to use for the transfer. For security reasons, this account will only be allowed to interact with git.
+ </para></step>
<substeps>
<step>
<para>First, identify the path to your git repository. Store it in a shell variable, for convenience.</para>
@@ -100,7 +100,7 @@
You can add the ssh public key to your git repository to share it, or tell git to ignore they key with the instructions below.
<screen>
<command>pushd $repo_directory</command>
- <command>echo ".ssh/" >> .gitignore</command>
+ <command>echo ".ssh/" >> .gitignore</command>
<command>git add .gitignore</command>
<command>git commit -m "Ignore $repo_directory/.ssh"</command>
<command>popd</command>
@@ -113,16 +113,7 @@
<para>
Configure the remote host to use your repository
</para></step>
- <step>
- <para />
- </step>
- <step>
- <para />
- </step>
- <step>
- <para />
- </step>
- </procedure>
+ </procedure>
</section>
<section>
9 years, 10 months