Tasks for administrators

• Set up a debusine server
  • Introduction
  • Initial setup
  • Debusine server commands
  • Testing sending emails
  • Configuration for sending emails
  • Configuration with Nginx
  • Configure Nginx with an HTTPS certificate
    • Configure Nginx with an HTTPS certificate for a local development setup
  • What the package does on installation
• Set up a debusine worker
  • Introduction
  • Initial setup
  • Managing debusine-worker
  • Troubleshooting
  • What the package does on installation
• Set up a debusine signing worker
  • Introduction
  • Notes for production deployments
  • Initial setup
  • Managing debusine-signing
  • Troubleshooting
  • What the package does on installation
• Set up Incus for Debusine Task Execution
  • Install Incus
  • Initialize Incus
  • Create a Debusine network bridge
  • Create a Debusine profile
  • Grant Debusine Worker access to Incus
  • Verify Virtualization
  • Enable Virtualization
    • Packages to install for Virtualization
    • Nested Container Virtualisation
• Add a new worker
  • Enable a new worker on the server based on the worker’s name
  • Enable a new worker on the server based on the token
  • Enable a signing worker
• Add a new user
  • With debusine-admin
  • Automatic creation with Single Sign On support
• Configure and manage a worker
  • Configure the accepted tasks
    • With an allow list
    • With a deny list
  • Configure the list of compatible architectures
• Enable logins with GitLab accounts
  • Introduction
  • Set up
    • Configure the provider in your Debusine instance
    • Create the application in GitLab
    • Restart debusine
  • User mapping
  • Settings
    • SIGNON_PROVIDERS
    • GitlabProvider.restrict
• Enable notifications for work requests
  • Pre-requisites
  • Setting up an email-based notification channel
  • Configuring a work request with a notification
• Set up APT mirroring
  • Introduction
  • Create the target collection
  • Run the mirror task
• Generate signing keys
• Configure an HSM for use with debusine
  • Install packages needed to use the YubiHSM 2
  • Decide on a key policy
  • Configure debusine-signing to use the HSM
  • Register a UEFI signing key stored in the HSM