Differential D25007 Diff 23 src/docs/user/userguide/drydock_hosts.diviner

Changeset View

Standalone View

src/docs/user/userguide/drydock_hosts.diviner

	Show All 35 Lines
	General Considerations			General Considerations
	======================			======================

	You must install software on hosts. Drydock does not currently handle			You must install software on hosts. Drydock does not currently handle
	installing software on hosts. You'll need to make sure any hosts are configured			installing software on hosts. You'll need to make sure any hosts are configured
	properly with any software you need, and have tools like `git`, `hg` or `svn`			properly with any software you need, and have tools like `git`, `hg` or `svn`
	that may be required to interact with working copies.			that may be required to interact with working copies.

	You do not need to install PHP, arcanist, or Phabricator on the			You do not need to install PHP, arcanist, or Phorge on the
	hosts unless you are specifically running `arc` commands.			hosts unless you are specifically running `arc` commands.

	You must configure authentication. Drydock also does not handle credentials			You must configure authentication. Drydock also does not handle credentials
	for VCS operations. If you're interacting with repositories hosted on			for VCS operations. If you're interacting with repositories hosted on
	Phabricator, the simplest way to set this up is something like this:			Phorge, the simplest way to set this up is something like this:

	- Create a new bot user in Phabricator.			- Create a new bot user in Phorge.
	- In {nav Settings > SSH Public Keys}, add a public key or generate a			- In {nav Settings > SSH Public Keys}, add a public key or generate a
	keypair.			keypair.
	- Put the private key on your build hosts as `~/.ssh/id_rsa` for whatever			- Put the private key on your build hosts as `~/.ssh/id_rsa` for whatever
	user you're connecting with.			user you're connecting with.

	This will let processes on the host access Phabricator as the bot user, and			This will let processes on the host access Phorge as the bot user, and
	use the bot user's permissions to pull and push changes.			use the bot user's permissions to pull and push changes.

	If you're using hosted repositories from an external service, you can follow			If you're using hosted repositories from an external service, you can follow
	similar steps for that service.			similar steps for that service.

	Note that any processes running under the given user account will have access			Note that any processes running under the given user account will have access
	to the private key, so you should give the bot the smallest acceptable level of			to the private key, so you should give the bot the smallest acceptable level of
	permissions if you're running semi-trusted or untrusted code like unit tests.			permissions if you're running semi-trusted or untrusted code like unit tests.
	▲ Show 20 Lines • Show All 61 Lines • Show Last 20 Lines