Mix Installation (Debian and Ubuntu)

From JonDonym Wiki
Jump to: navigation, search

En2.png De2.png    <- prev | Content | next ->

Contents

HowTo install the mix software using DEB packages

For Debian and Ubuntu servers we provide packages to simplify the installation. First, add the following line to /etc/apt/sources.list. Replace DISTRI by the name of your distribution. At the moment squeeze, wheezy, sid, lucid, maverick, natty, oneiric dnd precise are supported.

 deb http://debian.anonymous-proxy-servers.net DISTRI mix

The repository ist signed with the OpenPGP key 0xF1305880. Download the key, verify the fingerprint and add it to your apt keyring. The command apt-key finger shows all fingerprints of you apt keyring.

# apt-key adv --recv-keys --keyserver pool.sks-keyservers.net F1305880
# apt-key finger
 ...
 pub   1024D/F1305880 2007-08-29
   Key fingerprint = 1866 F973 8C97 A3D6 56A4  E142 F510 0840 F130 5880
 uid                  JonDos GmbH.... 
 ...

Afterwards you can install the mix package you need:

 aptitude install mix-free-entry
 aptitude install mix-free-exit
 aptitude install mix-premium
 aptitude install mix-premium-exit

The installation of the packages will do the following steps:

  • install the stable source code of the mix software in /usr/src/mix
  • compile and install the mix software
  • create a system user mix
  • create the log directory /var/log/mix and set save permissions
  • install the start script /etc/init.d/mix

For exit mixes the squid installation and configuration will be done by installation of the mix package:

  • install the squid proxy
  • install an optimized configuration for squid and the block list /etc/squid/squid-block.acl
  • replace the error messages of squid
  • create cache directories for squid and restart squid

If you want to extend the blocklist for your exit mix, please use the file /etc/squid/squid-block.acl.local. This blocklist will not be overwritten by updates.


For premium mixes a PostgreSQL database server will be installed with client libraries but no configuration is done.

For premium mixes NOT all steps will be done by DEB package installation. After mix installation you have to do:


Optional Squid configurations for exit mixes

If you extended the squid-blocklist.acl for your mix, please use the file /etc/squid/squid-blocklist.acl.local. It will not be overwritten by updates of the JonDonym blocklist.

For high traffic exit mixes it is recommended to increase the max. open filedescriptors for Squid. Please edit the file /etc/default/squid and set a more suiteable limit:

SQUID_MAXFD=1024


Start the mix server

By default the mix configuration file is expected at /etc/mix/config.xml. You may use an other location of your mix configuration file to place your configuration file in an encrypted diskspace. This is highly recommeded, because the configuration file contains your certificates and privat keys.

Edit the value of $MIXCONF in /etc/default/mix to point to your config.xml and set the $MAXFILEDESCRIPTORS to the value used in your mix configuration.

MIXCONF=/path/to/config.xml
MAXFILEDESCRIPTORS=32768

Now you can start or stop the mix with the init.d script:

invoke-rc.d mix start
invoke-rc.d mix stop
invoke-rc.d mix status

If your mix certificate is secured by password, the init.d script will NOT work. You will not see an input promt for the password. You have to start and stop the mix by self.

 start:   ulimit -SHn 32768
          mix -c /path/to/config.xml
 stop:    killall mix

killall ist part of the Debian package psmisc.


Upates

You will get all updates (mix code, JonDonym blocklist...) by:

apt-get update && apt-get upgrade
Personal tools