[taler-docs] branch master updated: Debian package instructions

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository docs.

The following commit(s) were added to refs/heads/master by this push:
     new 2a1fcff  Debian package instructions
2a1fcff is described below

commit 2a1fcffe436f6e2cfec28e25123e2c6485816ba1
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Sun Jan 3 23:05:00 2021 +0100

    Debian package instructions
---
 frags/installing-debian.rst | 52 +++++++++++++++++++++++++++++++++++++++++++++
 taler-auditor-manual.rst    | 35 ++++++++++++++++++++++++++++++
 taler-exchange-manual.rst   | 26 ++++++++++++++++++++++-
 taler-merchant-manual.rst   | 27 +++++++++++++++++++----
 4 files changed, 135 insertions(+), 5 deletions(-)

diff --git a/frags/installing-debian.rst b/frags/installing-debian.rst
new file mode 100644
index 0000000..1842ca5
--- /dev/null
+++ b/frags/installing-debian.rst
@@ -0,0 +1,52 @@
+To install the GNU Taler Debian packages, you must first ensure to have
+the right Debian distribution. At this time, the packages are build for
+Sid, which means you should use a system which at least includes
+unstable packages in its source list.  We recommend using APT pinning
+to limit unstable packages to those explicitly requested. To do this,
+set your ``/etc/apt/preferences`` as follows:
+
+.. code-block::
+
+   Package: *
+   Pin: release a=stable
+   Pin-Priority: 700
+
+   Package: *
+   Pin: release a=testing
+   Pin-Priority: 650
+
+   Package: *
+   Pin: release a=unstable
+   Pin-Priority: 600
+
+   Package: *
+   Pin: release l=Debian-Security
+   Pin-Priority: 1000
+
+A typical ``/etc/apt/sources.list`` file for this setup
+would look like this:
+
+.. code-block::
+
+   deb http://ftp.ch.debian.org/debian/ buster main
+   deb http://security.debian.org/debian-security buster/updates main
+   deb http://ftp.ch.debian.org/debian/ testing main
+   deb http://ftp.ch.debian.org/debian/ unstable main
+   deb https://deb.taler.net/apt/debian sid main
+
+The last line is crucial, as it adds the GNU Taler packages.
+
+Next, you must import the Taler Systems SA public package signing key
+into your keyring and update the package lists:
+
+.. code-block:: console
+
+   # wget -O - https://taler.net/taler-systems.gpg.key | apt-sign add -
+   # apt update
+
+.. note::
+
+   You may want to verify the correctness of the Taler Systems key out-of-band.
+
+Now your system is ready to install the official GNU Taler binary packages
+using apt.
diff --git a/taler-auditor-manual.rst b/taler-auditor-manual.rst
index 5a5e612..9eac6f9 100644
--- a/taler-auditor-manual.rst
+++ b/taler-auditor-manual.rst
@@ -177,6 +177,9 @@ components:
 Installation
 ============
 
+Installing from source
+----------------------
+
 Please install the following packages before proceeding with the
 exchange compilation.
 
@@ -197,6 +200,38 @@ the exchange (which includes the code for the auditor).
 .. include:: frags/installing-taler-exchange.rst
 
 
+Installing the GNU Taler binary packages on Debian
+--------------------------------------------------
+
+.. include:: frags/installing-debian.rst
+
+To install the Taler auditor, you can now simply run:
+
+.. code-block:: console
+
+   # apt install taler-exchange
+
+Note that Taler auditor is part of the ``taler-exchange`` package.
+The package sets up the various users and the systemd service scripts
+for an exchange, which will not be needed for an auditor. Simply do not
+enable the taler-exchange-httpd service and this should be harmless.
+
+.. note::
+
+   In the future, we plan to split the package and have a separate
+   ``taler-auditor`` package.
+
+For the auditor, you must manually configure access to the exchange database,
+the HTTP reverse proxy (typically with TLS certificates) and offline signing.
+
+.. note::
+
+   The current package does not setup a user for the ``taler-auditor-httpd``
+   and includes no provisions for the reverse proxy configuration.
+   This should change in a future release.
+
+
+
 Configuration
 =============
 
diff --git a/taler-exchange-manual.rst b/taler-exchange-manual.rst
index 0faa3ac..5505cf5 100644
--- a/taler-exchange-manual.rst
+++ b/taler-exchange-manual.rst
@@ -287,13 +287,37 @@ Except for the last two, these are available in most 
GNU/Linux
 distributions and should just be installed using the respective package
 manager.
 
+
+Installing from source
+----------------------
+
 The following instructions will show how to install libgnunetutil and
-the GNU Taler exchange.
+the GNU Taler exchange from source.
 
 .. include:: frags/installing-gnunet.rst
 
 .. include:: frags/installing-taler-exchange.rst
 
+
+Installing the GNU Taler binary packages on Debian
+--------------------------------------------------
+
+.. include:: frags/installing-debian.rst
+
+To install the Taler exchange, you can now simply run:
+
+.. code-block:: console
+
+   # apt install taler-exchange
+
+Note that the package does not perform any configuration work except for
+setting up the various users and the systemd service scripts. You still must
+configure at least the database, HTTP reverse proxy (typically with TLS
+certificates), denomination and fee structure, bank account, auditor(s),
+offline signing and the terms of service.
+
+
+
 Configuration
 =============
 
diff --git a/taler-merchant-manual.rst b/taler-merchant-manual.rst
index fd64fad..56fe9c3 100644
--- a/taler-merchant-manual.rst
+++ b/taler-merchant-manual.rst
@@ -264,8 +264,8 @@ This chapter describes how to install the GNU Taler 
merchant backend.
 
 .. _Generic-instructions:
 
-Generic instructions
---------------------
+Generic instructions for installation from source
+-------------------------------------------------
 
 This section provides generic instructions for the merchant backend
 installation independent of any particular operating system. Operating
@@ -375,10 +375,29 @@ find the installed libraries and launching the Taler 
merchant backend would
 then fail.
 
 
+Installing the GNU Taler binary packages on Debian
+--------------------------------------------------
+
+.. include:: frags/installing-debian.rst
+
+To install the Taler merchant backend, you can now simply run:
+
+.. code-block:: console
+
+   # apt install taler-merchant
+
+Note that the package does not complete the integration of the backend with
+the HTTP reverse proxy (typically with TLS certificates).  A configuration
+fragment for Nginx or Apache will be placed in
+``/etc/{apache,nginx}/conf-available/taler-merchant.conf``.  You must
+furthermore still configure the instances, and may need to extend the fragment
+with access control restrictions for non-default instances.
+
+
 .. _Installing-Taler-on-Debian-GNU_002fLinux:
 
-Installing Taler on Debian GNU/Linux
-------------------------------------
+Installing Taler on Debian GNU/Linux from source
+------------------------------------------------
 
 .. index:: Wheezy
 .. index:: Jessie

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.