apt install ansible openssl openjdk-8-jdk libbcprov-java

1. Generate family certificates:
   

   Code: Select all

       ./family-manager keygen

   Script will ask you for your family name, and create the following files:
   • keystore/family-<family_name>.ks
   • certificates/family/<family_name>.crt
   • .config
2. Edit .config file if you need to. Available settings:
   • BECOME, set to BECOME=yes if you use a regular user with sudo on a remote host
   • PYTHON2, set to PYTHON2=yes if remote host doesn't have python3 (e.g. Debian 8)
   • ANSIBLE_HOST_KEY_CHECKING, set to ANSIBLE_HOST_KEY_CHECKING=False, if you want to skip SSH fingerprints verification for every remote host
3. Deploy to remote hosts:
   
   There are two ways to specify remote hosts list:
   
   • As a comma separated list, like:
     

     Code: Select all

         ./family-manager deploy 123.4.5.6,some.hostname.com,other.host.name

   • As Ansible inventory file, which has special .ini syntax:
     

     Code: Select all

         ./family-manager deploy inventory.ini

     Example inventory.ini contents:
     

     Code: Select all

         [all]
         123.4.5.6
         some.hostname.com
         other.host.name
     

4. Update your nodes periodically:
   
   

   Code: Select all

       ./family-manager update 123.4.5.6,some.hostname.com,other.host.name

   
   or
   

   Code: Select all

       ./family-manager update inventory.ini

   Note: you can have one inventory file for maintaining your family, and use other temporary files when deploying new routers.

- name: Copy certificate
copy:
src: certificates/family/{{ family_name }}.crt
dest: /var/lib/i2p/i2p-config/certificates/family/{{ family_name }}.crt
owner: i2psvc
group: i2psvc
mode: 0600