Mirror pool¶
First, make sure you read https://tails.net/contribute/design/mirrors/.
We have 1 pool of mirrors: a server-side HTTP redirector.
See the "Updating" page below for instructions about how to update this pool.
HTTP redirector¶
- Maintained using Mirrorbits and configured via Puppet.
Technical background¶
Mirror configuration¶
Mirror admins are requested to configure their mirror using the instructions on https://tails.net/contribute/how/mirror/.
rsync chain¶
- the one who prepares the final ISO image pushes to
rsync.tails.net (a VM on mtl-libvirt-01, managed by the
tails::rsyncPuppet class):- over SSH
- files stored in
/srv/rsync/tails/tails - filesystem ACLs are setup to help, but beware of the permissions
and ownership of files put into there: the
rsync_tailsgroup must have read-only access
- all mirrors pull from our public rsync server every hour + a random time (manimum 40 minutes)