Changes between Version 59 and Version 60 of SettingUpBuildslave
- Timestamp:
- 09/23/16 08:30:33 (8 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
SettingUpBuildslave
v59 v60 11 11 12 12 '''NOTE:''' The buildslave needs root access to be able to connect to the t_client.sh test servers using OpenVPN. Moreover, anyone who controls the buildmaster can do whatever he wants on the buildslaves by simply modifying the build procedure. For this reason you should only run buildslaves on expendable virtual machines. That said, you can grant limited ''sudo'' privileges to a normal user to run buildbot as a normal user: see section "Running builtbot as non-root user" for details. 13 14 = Making sure OpenVPN builds correctly = 15 16 The first step is to ensure you can build OpenVPN on your buildslave VM. On Debian/Ubuntu this takes care of most of the dependencies (from [https://github.com/Puppet-Finland/openvpn/blob/master/manifests/params.pp here]): 17 18 {{{ 19 $ apt-get update 20 $ apt-get install liblzo2-dev libssl-dev libpam-dev libpkcs11-helper-dev libtool autoconf make cmake 21 }}} 22 23 On Fedora you'd do 24 25 {{{ 26 $ dnf install lzo-devel openssl-devel pam-devel pkcs11-helper-devel gnutls-devel autoconf libtool make cmake 27 }}} 28 29 And on !RedHat/CentOS/Scientific Linux you'd do 30 31 {{{ 32 $ yum install lzo-devel openssl-devel pam-devel pkcs11-helper-devel gnutls-devel autoconf libtool make cmake 33 }}} 34 35 On top of this you need to build and install [https://tls.mbed.org/ mbedTLS]. As mbedTLS's OpenVPN tends to follow mbedTLS's rapidly changing APIs, installing the latest version is usually the best choice. Follow the instructions in the release package on how to build mbedTLS on your system. 13 36 14 37 = Setting up the VPN connection = … … 202 225 203 226 Finally you need to ensure that buildslave starts at boot-time; see "Starting the buildslave at boot-time" section, above, for details. 204 205 == Installing OpenSSL/PolarSSL development files ==206 207 We test building OpenVPN with both OpenSSL and PolarSSL backends, so you need to both of them installed on your buildslave:208 209 * For OpenSSL you can typically use whatever development package (e.g. ''libssl-dev'') you operating system provides, because it's APIs are fairly stable.210 * With PolarSSL the best bet is to get latest stable version from the [https://polarssl.org/ PolarSSL homepage], because the APIs change quite often and OpenVPN tends to track the latest one.211 227 212 228 == Configuring the buildslave for connectivity tests ==