summaryrefslogtreecommitdiff
path: root/docs/_locale/pt/installation.pot
diff options
context:
space:
mode:
Diffstat (limited to 'docs/_locale/pt/installation.pot')
-rw-r--r--docs/_locale/pt/installation.pot623
1 files changed, 433 insertions, 190 deletions
diff --git a/docs/_locale/pt/installation.pot b/docs/_locale/pt/installation.pot
index 04cbc68f..799ed5b5 100644
--- a/docs/_locale/pt/installation.pot
+++ b/docs/_locale/pt/installation.pot
@@ -28,7 +28,7 @@ msgstr "**Delete the VM** from the GNS3 project."
msgid "**Early Production Access**"
msgstr "**Early Production Access**"
-#: ../../installation/install.rst:541
+#: ../../installation/install.rst:542
msgid "**First** run a web server - you can use a simple one like `Python's SimpleHTTPServer`_ and start serving the `filesystem.squashfs` file. The file can be found inside the `/live` directory of the extracted contents of the ISO file."
msgstr "**First** run a web server - you can use a simple one like `Python's SimpleHTTPServer`_ and start serving the `filesystem.squashfs` file. The file can be found inside the `/live` directory of the extracted contents of the ISO file."
@@ -40,6 +40,10 @@ msgstr "**General settings** tab: Set the boot priority to **HDD**"
msgid "**Long-Term Support**"
msgstr "**Long-Term Support**"
+#: ../../installation/bare-metal.rst:436
+msgid "**NOTE:** This is the entry level platform. Other derivates exists with i3-N305 CPU and 2x 25GbE!"
+msgstr "**NOTE:** This is the entry level platform. Other derivates exists with i3-N305 CPU and 2x 25GbE!"
+
#: ../../installation/install.rst:21
msgid "**Nightly (Beta)**"
msgstr "**Nightly (Beta)**"
@@ -52,11 +56,11 @@ msgstr "**Nightly (Current)**"
msgid "**Release Candidate**"
msgstr "**Release Candidate**"
-#: ../../installation/install.rst:432
+#: ../../installation/install.rst:433
msgid "**Requirements**"
msgstr "**Requirements**"
-#: ../../installation/install.rst:546
+#: ../../installation/install.rst:547
msgid "**Second**, edit the configuration file of the :ref:`install_from_tftp` so that it shows the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``."
msgstr "**Second**, edit the configuration file of the :ref:`install_from_tftp` so that it shows the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``."
@@ -64,99 +68,115 @@ msgstr "**Second**, edit the configuration file of the :ref:`install_from_tftp`
msgid "**Snapshot**"
msgstr "**Snapshot**"
-#: ../../installation/install.rst:300
+#: ../../installation/install.rst:301
msgid "**Warning**: This will destroy all data on the USB drive!"
msgstr "**Warning**: This will destroy all data on the USB drive!"
-#: ../../installation/vyos-on-baremetal.rst:20
+#: ../../installation/bare-metal.rst:20
msgid "1x Crucial CT4G4DFS824A (4GB DDR4 RAM 2400 MT/s, PC4-19200)"
msgstr "1x Crucial CT4G4DFS824A (4GB DDR4 RAM 2400 MT/s, PC4-19200)"
-#: ../../installation/vyos-on-baremetal.rst:102
+#: ../../installation/bare-metal.rst:442
+msgid "1x Gowin GW-FN-1UR1-10G"
+msgstr "1x Gowin GW-FN-1UR1-10G"
+
+#: ../../installation/bare-metal.rst:449
+msgid "1x HP LT4120 Snapdragon X5 LTE WWAN module"
+msgstr "1x HP LT4120 Snapdragon X5 LTE WWAN module"
+
+#: ../../installation/bare-metal.rst:102
msgid "1x Kingston SUV500MS/120G"
msgstr "1x Kingston SUV500MS/120G"
-#: ../../installation/vyos-on-baremetal.rst:21
+#: ../../installation/bare-metal.rst:448
+msgid "1x MediaTek 7921E M.2 NGFF WIFI module (not tested as this currently leads to a Kernel crash)"
+msgstr "1x MediaTek 7921E M.2 NGFF WIFI module (not tested as this currently leads to a Kernel crash)"
+
+#: ../../installation/bare-metal.rst:21
msgid "1x SanDisk Ultra Fit 32GB (USB-A 3.0 SDCZ43-032G-G46 mass storage for OS)"
msgstr "1x SanDisk Ultra Fit 32GB (USB-A 3.0 SDCZ43-032G-G46 mass storage for OS)"
-#: ../../installation/vyos-on-baremetal.rst:18
+#: ../../installation/bare-metal.rst:18
msgid "1x Supermicro A2SDi-2C-HLN4F (Intel Atom C3338, 2C/2T, 4MB cache, Quad LAN with Intel C3000 SoC 1GbE)"
msgstr "1x Supermicro A2SDi-2C-HLN4F (Intel Atom C3338, 2C/2T, 4MB cache, Quad LAN with Intel C3000 SoC 1GbE)"
-#: ../../installation/vyos-on-baremetal.rst:16
+#: ../../installation/bare-metal.rst:16
msgid "1x Supermicro CSE-505-203B (19\" 1U chassis, inkl. 200W PSU)"
msgstr "1x Supermicro CSE-505-203B (19\" 1U chassis, inkl. 200W PSU)"
-#: ../../installation/vyos-on-baremetal.rst:30
+#: ../../installation/bare-metal.rst:30
msgid "1x Supermicro MCP-120-00063-0N (Riser Card Bracket)"
msgstr "1x Supermicro MCP-120-00063-0N (Riser Card Bracket)"
-#: ../../installation/vyos-on-baremetal.rst:17
+#: ../../installation/bare-metal.rst:17
msgid "1x Supermicro MCP-260-00085-0B (I/O Shield for A2SDi-2C-HLN4F)"
msgstr "1x Supermicro MCP-260-00085-0B (I/O Shield for A2SDi-2C-HLN4F)"
-#: ../../installation/vyos-on-baremetal.rst:22
+#: ../../installation/bare-metal.rst:22
msgid "1x Supermicro MCP-320-81302-0B (optional FAN tray)"
msgstr "1x Supermicro MCP-320-81302-0B (optional FAN tray)"
-#: ../../installation/vyos-on-baremetal.rst:29
+#: ../../installation/bare-metal.rst:29
msgid "1x Supermicro RSC-RR1U-E8 (Riser Card)"
msgstr "1x Supermicro RSC-RR1U-E8 (Riser Card)"
-#: ../../installation/vyos-on-baremetal.rst:103
+#: ../../installation/bare-metal.rst:103
msgid "1x VARIA Group Item 326745 19\" dual rack for APU4"
msgstr "1x VARIA Group Item 326745 19\" dual rack for APU4"
-#: ../../installation/vyos-on-baremetal.rst:101
+#: ../../installation/bare-metal.rst:101
msgid "1x apu4c4 = 4 i211AT LAN / AMD GX-412TC CPU / 4 GB DRAM / dual SIM"
msgstr "1x apu4c4 = 4 i211AT LAN / AMD GX-412TC CPU / 4 GB DRAM / dual SIM"
-#: ../../installation/vyos-on-baremetal.rst:91
+#: ../../installation/bare-metal.rst:91
msgid "2 miniPCI express (one with SIM socket for 3G modem)."
msgstr "2 miniPCI express (one with SIM socket for 3G modem)."
-#: ../../installation/vyos-on-baremetal.rst:89
+#: ../../installation/bare-metal.rst:443
+msgid "2x 128GB M.2 NVMe SSDs"
+msgstr "2x 128GB M.2 NVMe SSDs"
+
+#: ../../installation/bare-metal.rst:89
msgid "4 GB DDR3-1333 DRAM, with optional ECC support"
msgstr "4 GB DDR3-1333 DRAM, with optional ECC support"
-#: ../../installation/vyos-on-baremetal.rst:92
+#: ../../installation/bare-metal.rst:92
msgid "4 Gigabit Ethernet channels using Intel i211AT NICs"
msgstr "4 Gigabit Ethernet channels using Intel i211AT NICs"
-#: ../../installation/vyos-on-baremetal.rst:87
+#: ../../installation/bare-metal.rst:87
msgid "AMD Embedded G series GX-412TC, 1 GHz quad Jaguar core with 64 bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2MB L2 cache."
msgstr "AMD Embedded G series GX-412TC, 1 GHz quad Jaguar core with 64 bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2MB L2 cache."
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 custom VyOS powder coat"
msgstr "APU4 custom VyOS powder coat"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 desktop back"
msgstr "APU4 desktop back"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 desktop closed"
msgstr "APU4 desktop closed"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 rack closed"
msgstr "APU4 rack closed"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 rack front"
msgstr "APU4 rack front"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 rack module #1"
msgstr "APU4 rack module #1"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 rack module #2"
msgstr "APU4 rack module #2"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "APU4 rack module #3 with PSU"
msgstr "APU4 rack module #3 with PSU"
@@ -164,7 +184,7 @@ msgstr "APU4 rack module #3 with PSU"
msgid "A VyOS installation image (.iso file). You can find how to get it on the :ref:`installation` page"
msgstr "A VyOS installation image (.iso file). You can find how to get it on the :ref:`installation` page"
-#: ../../installation/install.rst:490
+#: ../../installation/install.rst:491
msgid "A directory named pxelinux.cfg which must contain the configuration file. We will use the configuration_ file shown below, which we named default_."
msgstr "A directory named pxelinux.cfg which must contain the configuration file. We will use the configuration_ file shown below, which we named default_."
@@ -172,15 +192,19 @@ msgstr "A directory named pxelinux.cfg which must contain the configuration file
msgid "A particularly stable release frozen from nightly each month after manual testing. Still contains experimental code."
msgstr "A particularly stable release frozen from nightly each month after manual testing. Still contains experimental code."
-#: ../../installation/install.rst:269
+#: ../../installation/install.rst:270
msgid "A permanent VyOS installation always requires to go first through a live installation."
msgstr "A permanent VyOS installation always requires to go first through a live installation."
+#: ../../installation/bare-metal.rst:428
+msgid "A platform utilizing an Intel Alder Lake-N100 CPU with 6M cache, TDP 6W. Onboard LPDDR5 16GB RAM and 128GB eMMC (can be used for image installation)."
+msgstr "A platform utilizing an Intel Alder Lake-N100 CPU with 6M cache, TDP 6W. Onboard LPDDR5 16GB RAM and 128GB eMMC (can be used for image installation)."
+
#: ../../installation/virtual/gns3.rst:22
msgid "A working GNS3 installation. For further information see the `GNS3 documentation <https://docs.gns3.com/>`__."
msgstr "A working GNS3 installation. For further information see the `GNS3 documentation <https://docs.gns3.com/>`__."
-#: ../../installation/vyos-on-baremetal.rst:90
+#: ../../installation/bare-metal.rst:90
msgid "About 6 to 10W of 12V DC power depending on CPU load"
msgstr "About 6 to 10W of 12V DC power depending on CPU load"
@@ -196,7 +220,7 @@ msgstr "Access to Images"
msgid "Access to Source"
msgstr "Access to Source"
-#: ../../installation/vyos-on-baremetal.rst:368
+#: ../../installation/bare-metal.rst:368
msgid "Acrosser AND-J190N1"
msgstr "Acrosser AND-J190N1"
@@ -216,7 +240,7 @@ msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. Firs
msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step."
msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step."
-#: ../../installation/vyos-on-baremetal.rst:394
+#: ../../installation/bare-metal.rst:394
msgid "Advanced > Serial Port Console Redirection > Console Redirection Settings:"
msgstr "Advanced > Serial Port Console Redirection > Console Redirection Settings:"
@@ -236,11 +260,15 @@ msgstr "After installation - exit from the console using the key combination ``C
msgid "After installation has completed, remove the installation iso using the GUI or ``qm set 200 --ide2 none``."
msgstr "After installation has completed, remove the installation iso using the GUI or ``qm set 200 --ide2 none``."
-#: ../../installation/update.rst:88
+#: ../../installation/update.rst:93
msgid "After reboot you might want to verify the version you are running with the :opcmd:`show version` command."
msgstr "After reboot you might want to verify the version you are running with the :opcmd:`show version` command."
-#: ../../installation/install.rst:413
+#: ../../installation/secure-boot.rst:155
+msgid "After the Kernel CI build completes, the generated key is discarded - meaning we can no londer sign additional modules with out key. Our Kernel configuration also contains the option ``CONFIG_MODULE_SIG_FORCE=y`` which means that we enforce all modules to be signed. If you try to load an unsigned module, it will be rejected with the following error:"
+msgstr "After the Kernel CI build completes, the generated key is discarded - meaning we can no londer sign additional modules with out key. Our Kernel configuration also contains the option ``CONFIG_MODULE_SIG_FORCE=y`` which means that we enforce all modules to be signed. If you try to load an unsigned module, it will be rejected with the following error:"
+
+#: ../../installation/install.rst:414
msgid "After the installation is completed, remove the live USB stick or CD."
msgstr "After the installation is completed, remove the live USB stick or CD."
@@ -256,15 +284,15 @@ msgstr "Amazon AWS"
msgid "Amazon CloudWatch Agent Usage"
msgstr "Amazon CloudWatch Agent Usage"
-#: ../../installation/install.rst:450
+#: ../../installation/install.rst:451
msgid "An IP address"
msgstr "An IP address"
-#: ../../installation/vyos-on-baremetal.rst:334
+#: ../../installation/bare-metal.rst:334
msgid "An external RS232 serial port is available, internally a GPIO header as well. It does have Realtek based audio on board for some reason, but you can disable that. Booting works on both USB2 and USB3 ports. Switching between serial BIOS mode and HDMI BIOS mode depends on what is connected at startup; it goes into serial mode if you disconnect HDMI and plug in serial, in all other cases it's HDMI mode."
msgstr "An external RS232 serial port is available, internally a GPIO header as well. It does have Realtek based audio on board for some reason, but you can disable that. Booting works on both USB2 and USB3 ports. Switching between serial BIOS mode and HDMI BIOS mode depends on what is connected at startup; it goes into serial mode if you disconnect HDMI and plug in serial, in all other cases it's HDMI mode."
-#: ../../installation/install.rst:554
+#: ../../installation/install.rst:555
msgid "And **third**, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart the service with ``sudo service tftpd-hpa restart``."
msgstr "And **third**, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart the service with ``sudo service tftpd-hpa restart``."
@@ -276,11 +304,15 @@ msgstr "Another issue of GPG is that it creates a /root/.gnupg directory just fo
msgid "Another point is that we are using RSA now, which requires absurdly large keys to be secure."
msgstr "Another point is that we are using RSA now, which requires absurdly large keys to be secure."
-#: ../../installation/vyos-on-baremetal.rst:201
+#: ../../installation/secure-boot.rst:33
+msgid "As our version of ``shim`` is not signed by Microsoft we need to enroll the previously generated :abbr:`MOK (Machine Owner Key)` to the system."
+msgstr "As our version of ``shim`` is not signed by Microsoft we need to enroll the previously generated :abbr:`MOK (Machine Owner Key)` to the system."
+
+#: ../../installation/bare-metal.rst:201
msgid "As the APU board itself still used a serial setting of 115200 8N1 it is strongly recommended that you change the VyOS serial interface settings after your first successful boot."
msgstr "As the APU board itself still used a serial setting of 115200 8N1 it is strongly recommended that you change the VyOS serial interface settings after your first successful boot."
-#: ../../installation/vyos-on-baremetal.rst:82
+#: ../../installation/bare-metal.rst:82
msgid "As this platform seems to be quite common in terms of noise, cost, power and performance it makes sense to write a small installation manual."
msgstr "As this platform seems to be quite common in terms of noise, cost, power and performance it makes sense to write a small installation manual."
@@ -320,15 +352,23 @@ msgstr "Azure does not allow you attach interface when the instance in the **Run
msgid "Azure has a way to access the serial console of a VM, but this needs to be configured on the VyOS. It's there by default, but keep it in mind if you are replacing config.boot and rebooting: ``set system console device ttyS0 speed '9600'``"
msgstr "Azure has a way to access the serial console of a VM, but this needs to be configured on the VyOS. It's there by default, but keep it in mind if you are replacing config.boot and rebooting: ``set system console device ttyS0 speed '9600'``"
-#: ../../installation/vyos-on-baremetal.rst:382
+#: ../../installation/bare-metal.rst:470
+msgid "BIOS Settings"
+msgstr "BIOS Settings"
+
+#: ../../installation/bare-metal.rst:382
msgid "BIOS Settings:"
msgstr "BIOS Settings:"
-#: ../../installation/install.rst:334
+#: ../../installation/bare-metal.rst:5
+msgid "Bare Metal Deployment"
+msgstr "Bare Metal Deployment"
+
+#: ../../installation/install.rst:335
msgid "Before a permanent installation, VyOS requires a :ref:`live_installation`."
msgstr "Before a permanent installation, VyOS requires a :ref:`live_installation`."
-#: ../../installation/vyos-on-baremetal.rst:358
+#: ../../installation/bare-metal.rst:358
msgid "Begin rapidly pressing delete on the keyboard. The boot prompt is very quick, but with a few tries you should be able to get into the BIOS."
msgstr "Begin rapidly pressing delete on the keyboard. The boot prompt is very quick, but with a few tries you should be able to get into the BIOS."
@@ -336,19 +376,19 @@ msgstr "Begin rapidly pressing delete on the keyboard. The boot prompt is very q
msgid "Being again at the **Preferences** window, having **Qemu VMs** selected and having our new VM selected, click the ``Edit`` button."
msgstr "Being again at the **Preferences** window, having **Qemu VMs** selected and having our new VM selected, click the ``Edit`` button."
-#: ../../installation/vyos-on-baremetal.rst:397
+#: ../../installation/bare-metal.rst:397
msgid "Bits per second : 9600"
msgstr "Bits per second : 9600"
-#: ../../installation/install.rst:583
+#: ../../installation/install.rst:584
msgid "Black screen on install"
msgstr "Black screen on install"
-#: ../../installation/vyos-on-baremetal.rst:362
+#: ../../installation/bare-metal.rst:362
msgid "Boot to the VyOS installer and install as usual."
msgstr "Boot to the VyOS installer and install as usual."
-#: ../../installation/vyos-on-baremetal.rst:236
+#: ../../installation/bare-metal.rst:236
msgid "Both device types operate without any moving parts and emit zero noise."
msgstr "Both device types operate without any moving parts and emit zero noise."
@@ -360,39 +400,39 @@ msgstr "Building from source"
msgid "CLI"
msgstr "CLI"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B Back"
msgstr "CSE-505-203B Back"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B Front"
msgstr "CSE-505-203B Front"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B Open 1"
msgstr "CSE-505-203B Open 1"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B Open 2"
msgstr "CSE-505-203B Open 2"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B Open 3"
msgstr "CSE-505-203B Open 3"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B w/ 10GE Open"
msgstr "CSE-505-203B w/ 10GE Open"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B w/ 10GE Open 1"
msgstr "CSE-505-203B w/ 10GE Open 1"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B w/ 10GE Open 2"
msgstr "CSE-505-203B w/ 10GE Open 2"
-#: ../../installation/vyos-on-baremetal.rst:-1
+#: ../../installation/bare-metal.rst:-1
msgid "CSE-505-203B w/ 10GE Open 3"
msgstr "CSE-505-203B w/ 10GE Open 3"
@@ -400,7 +440,7 @@ msgstr "CSE-505-203B w/ 10GE Open 3"
msgid "Change Deployment name/Zone/Machine type and click ``Deploy``"
msgstr "Change Deployment name/Zone/Machine type and click ``Deploy``"
-#: ../../installation/vyos-on-baremetal.rst:360
+#: ../../installation/bare-metal.rst:360
msgid "Chipset > South Bridge > USB Configuration: set XHCI to Disabled and USB 2.0 (EHCI) to Enabled. Without doing this, the USB drive won't boot."
msgstr "Chipset > South Bridge > USB Configuration: set XHCI to Disabled and USB 2.0 (EHCI) to Enabled. Without doing this, the USB drive won't boot."
@@ -457,11 +497,11 @@ msgstr "Click to ``Instances`` and ``Launch Instance``"
msgid "Click to your new vm and find out your Public IP address."
msgstr "Click to your new vm and find out your Public IP address."
-#: ../../installation/install.rst:565
+#: ../../installation/install.rst:566
msgid "Client Boot"
msgstr "Client Boot"
-#: ../../installation/install.rst:434
+#: ../../installation/install.rst:435
msgid "Clients (where VyOS is to be installed) with a PXE-enabled NIC"
msgstr "Clients (where VyOS is to be installed) with a PXE-enabled NIC"
@@ -477,15 +517,19 @@ msgstr "CloudWatchAgentServerRole is too permissive and should be used for singl
msgid "CloudWatch SSM Configuration creation"
msgstr "CloudWatch SSM Configuration creation"
+#: ../../installation/cloud/index.rst:3
+msgid "Cloud Environments"
+msgstr "Cloud Environments"
+
#: ../../installation/install.rst:12
msgid "Comparison of VyOS image releases"
msgstr "Comparison of VyOS image releases"
-#: ../../installation/vyos-on-baremetal.rst:117
+#: ../../installation/bare-metal.rst:117
msgid "Compex WLE900VX mini-PCIe WiFi module, only supported in mPCIe slot 1."
msgstr "Compex WLE900VX mini-PCIe WiFi module, only supported in mPCIe slot 1."
-#: ../../installation/install.rst:443
+#: ../../installation/install.rst:444
msgid "Configuration"
msgstr "Configuration"
@@ -493,11 +537,11 @@ msgstr "Configuration"
msgid "Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default)."
msgstr "Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default)."
-#: ../../installation/install.rst:448
+#: ../../installation/install.rst:449
msgid "Configure a DHCP server to provide the client with:"
msgstr "Configure a DHCP server to provide the client with:"
-#: ../../installation/install.rst:479
+#: ../../installation/install.rst:480
msgid "Configure a TFTP server so that it serves the following:"
msgstr "Configure a TFTP server so that it serves the following:"
@@ -505,7 +549,11 @@ msgstr "Configure a TFTP server so that it serves the following:"
msgid "Configure instance for your requirements. Select number of instances / network / subnet"
msgstr "Configure instance for your requirements. Select number of instances / network / subnet"
-#: ../../installation/vyos-on-baremetal.rst:142
+#: ../../installation/bare-metal.rst:509
+msgid "Connect serial port to a PC through a USB <-> RJ45 console cable. Set terminal emulator to 115200 8N1. You can also perform the installation using VGA or HDMI ports."
+msgstr "Connect serial port to a PC through a USB <-> RJ45 console cable. Set terminal emulator to 115200 8N1. You can also perform the installation using VGA or HDMI ports."
+
+#: ../../installation/bare-metal.rst:142
msgid "Connect serial port to a PC through null modem cable (RXD / TXD crossed over). Set terminal emulator to 115200 8N1."
msgstr "Connect serial port to a PC through null modem cable (RXD / TXD crossed over). Set terminal emulator to 115200 8N1."
@@ -517,7 +565,7 @@ msgstr "Connect to VM with command ``virsh console vyos_r1``"
msgid "Connect to VM with command ``virsh console vyos_r2``"
msgstr "Connect to VM with command ``virsh console vyos_r2``"
-#: ../../installation/vyos-on-baremetal.rst:391
+#: ../../installation/bare-metal.rst:391
msgid "Connect to serial (115200bps). Power on the appliance and press Del in the console when requested to enter BIOS settings."
msgstr "Connect to serial (115200bps). Power on the appliance and press Del in the console when requested to enter BIOS settings."
@@ -530,12 +578,16 @@ msgstr "Connect to the instance. SSH key was generated in the first step."
msgid "Connect to the instance by SSH key."
msgstr "Connect to the instance by SSH key."
-#: ../../installation/cloud/index.rst:7
-#: ../../installation/index.rst:7
+#: ../../installation/cloud/index.rst:5
+#: ../../installation/index.rst:5
#: ../../installation/virtual/index.rst:5
msgid "Content"
msgstr "Content"
+#: ../../installation/bare-metal.rst:463
+msgid "Cooling"
+msgstr "Cooling"
+
#: ../../installation/virtual/proxmox.rst:14
msgid "Copy the qcow2 image to a temporary directory on the Proxmox server."
msgstr "Copy the qcow2 image to a temporary directory on the Proxmox server."
@@ -548,11 +600,11 @@ msgstr "Create VM name ``vyos_r1``. You must specify the path to the ``ISO`` ima
msgid "Create VM with ``import`` qcow2 disk option."
msgstr "Create VM with ``import`` qcow2 disk option."
-#: ../../installation/vyos-on-baremetal.rst:412
+#: ../../installation/bare-metal.rst:412
msgid "Create a VyOS bootable USB key. I used the 64-bit ISO (VyOS 1.1.7) and `LinuxLive USB Creator <http://www.linuxliveusb.com/>`_."
msgstr "Create a VyOS bootable USB key. I used the 64-bit ISO (VyOS 1.1.7) and `LinuxLive USB Creator <http://www.linuxliveusb.com/>`_."
-#: ../../installation/vyos-on-baremetal.rst:140
+#: ../../installation/bare-metal.rst:140
msgid "Create a bootable USB pendrive using e.g. Rufus_ on a Windows machine."
msgstr "Create a bootable USB pendrive using e.g. Rufus_ on a Windows machine."
@@ -588,7 +640,7 @@ msgstr "Define network, subnet, Public IP. Or it will be created by default."
msgid "Delete no longer needed images from the system. You can specify an optional image name to delete, the image name can be retrieved via a list of available images can be shown using the :opcmd:`show system image`."
msgstr "Delete no longer needed images from the system. You can specify an optional image name to delete, the image name can be retrieved via a list of available images can be shown using the :opcmd:`show system image`."
-#: ../../installation/vyos-on-baremetal.rst:137
+#: ../../installation/bare-metal.rst:137
msgid "Depending on the VyOS versions you intend to install there is a difference in the serial port settings (:vytask:`T1327`)."
msgstr "Depending on the VyOS versions you intend to install there is a difference in the serial port settings (:vytask:`T1327`)."
@@ -632,7 +684,7 @@ msgstr "Deploy from qcow2"
msgid "Description"
msgstr "Description"
-#: ../../installation/vyos-on-baremetal.rst:270
+#: ../../installation/bare-metal.rst:270
msgid "Desktop / Bench Top"
msgstr "Desktop / Bench Top"
@@ -644,7 +696,11 @@ msgstr "Developing VyOS, testing new features, experimenting."
msgid "Developing and testing the latest major version under development."
msgstr "Developing and testing the latest major version under development."
-#: ../../installation/vyos-on-baremetal.rst:406
+#: ../../installation/secure-boot.rst:-1
+msgid "Disable UEFI secure boot"
+msgstr "Disable UEFI secure boot"
+
+#: ../../installation/bare-metal.rst:406
msgid "Disable XHCI"
msgstr "Disable XHCI"
@@ -652,7 +708,7 @@ msgstr "Disable XHCI"
msgid "Disk size"
msgstr "Disk size"
-#: ../../installation/install.rst:550
+#: ../../installation/install.rst:551
msgid "Do not change the name of the *filesystem.squashfs* file. If you are working with different versions, you can create different directories instead."
msgstr "Do not change the name of the *filesystem.squashfs* file. If you are working with different versions, you can create different directories instead."
@@ -688,10 +744,14 @@ msgstr "Download the rolling release iso from https://vyos.net/get/nightly-build
msgid "Drag the newly created VyOS VM into it."
msgstr "Drag the newly created VyOS VM into it."
-#: ../../installation/install.rst:256
+#: ../../installation/install.rst:257
msgid "During an image upgrade VyOS performas the following command:"
msgstr "During an image upgrade VyOS performas the following command:"
+#: ../../installation/secure-boot.rst:127
+msgid "During image installation you will install your :abbr:`MOK (Machine Owner Key)` into the UEFI variables to add trust to this key. After enabling secure boot support in UEFI again, you can only boot into your signed image."
+msgstr "During image installation you will install your :abbr:`MOK (Machine Owner Key)` into the UEFI variables to add trust to this key. After enabling secure boot support in UEFI again, you can only boot into your signed image."
+
#: ../../installation/virtual/vmware.rst:7
msgid "ESXi 5.5 or later"
msgstr "ESXi 5.5 or later"
@@ -704,7 +764,7 @@ msgstr "EVE-NG"
msgid "Edit /etc/docker/daemon.json to set the ``ipv6`` key to ``true`` and to specify the ``fixed-cidr-v6`` to your desired IPv6 subnet."
msgstr "Edit /etc/docker/daemon.json to set the ``ipv6`` key to ``true`` and to specify the ``fixed-cidr-v6`` to your desired IPv6 subnet."
-#: ../../installation/vyos-on-baremetal.rst:407
+#: ../../installation/bare-metal.rst:407
msgid "Enable USB 2.0 (EHCI) Support"
msgstr "Enable USB 2.0 (EHCI) Support"
@@ -725,7 +785,7 @@ msgstr "Every month until RC comes out"
msgid "Every night"
msgstr "Every night"
-#: ../../installation/install.rst:343
+#: ../../installation/install.rst:344
msgid "Every version is contained in its own squashfs image that is mounted in a union filesystem together with a directory for mutable data such as configurations, keys, or custom scripts."
msgstr "Every version is contained in its own squashfs image that is mounted in a union filesystem together with a directory for mutable data such as configurations, keys, or custom scripts."
@@ -750,23 +810,23 @@ msgstr "Example"
msgid "Example:"
msgstr "Example:"
-#: ../../installation/install.rst:522
+#: ../../installation/install.rst:523
msgid "Example of simple (no menu) configuration file:"
msgstr "Example of simple (no menu) configuration file:"
-#: ../../installation/install.rst:502
+#: ../../installation/install.rst:503
msgid "Example of the contents of the TFTP server:"
msgstr "Example of the contents of the TFTP server:"
-#: ../../installation/vyos-on-baremetal.rst:109
+#: ../../installation/bare-metal.rst:109
msgid "Extension Modules"
msgstr "Extension Modules"
-#: ../../installation/install.rst:439
+#: ../../installation/install.rst:440
msgid "Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_"
msgstr "Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_"
-#: ../../installation/install.rst:567
+#: ../../installation/install.rst:568
msgid "Finally, turn on your PXE-enabled client or clients. They will automatically get an IP address from the DHCP server and start booting into VyOS live from the files automatically taken from the TFTP and HTTP servers."
msgstr "Finally, turn on your PXE-enabled client or clients. They will automatically get an IP address from the DHCP server and start booting into VyOS live from the files automatically taken from the TFTP and HTTP servers."
@@ -774,7 +834,7 @@ msgstr "Finally, turn on your PXE-enabled client or clients. They will automatic
msgid "Finally, verify the authenticity of the downloaded image:"
msgstr "Finally, verify the authenticity of the downloaded image:"
-#: ../../installation/install.rst:285
+#: ../../installation/install.rst:286
msgid "Find out the device name of your USB drive (you can use the ``lsblk`` command)"
msgstr "Find out the device name of your USB drive (you can use the ``lsblk`` command)"
@@ -794,7 +854,15 @@ msgstr "First, a virtual machine (VM) for the VyOS installation must be created
msgid "First, install GPG or another OpenPGP implementation. On most GNU+Linux distributions it is installed by default as package managers use it to verify package signatures. If not pre-installed, it will need to be downloaded and installed."
msgstr "First, install GPG or another OpenPGP implementation. On most GNU+Linux distributions it is installed by default as package managers use it to verify package signatures. If not pre-installed, it will need to be downloaded and installed."
-#: ../../installation/vyos-on-baremetal.rst:384
+#: ../../installation/bare-metal.rst:481
+msgid "First Boot"
+msgstr "First Boot"
+
+#: ../../installation/secure-boot.rst:36
+msgid "First of all you will need to disable UEFI secure boot for the installation."
+msgstr "First of all you will need to disable UEFI secure boot for the installation."
+
+#: ../../installation/bare-metal.rst:384
msgid "First thing you want to do is getting a more user friendly console to configure BIOS. Default VT100 brings a lot of issues. Configure VT100+ instead."
msgstr "First thing you want to do is getting a more user friendly console to configure BIOS. Default VT100 brings a lot of issues. Configure VT100+ instead."
@@ -802,10 +870,18 @@ msgstr "First thing you want to do is getting a more user friendly console to co
msgid "For completion the key below corresponds to the key listed in the URL above."
msgstr "For completion the key below corresponds to the key listed in the URL above."
-#: ../../installation/vyos-on-baremetal.rst:387
+#: ../../installation/bare-metal.rst:678
+msgid "For more information please refer to chapter: :ref:`wwan-interface`"
+msgstr "For more information please refer to chapter: :ref:`wwan-interface`"
+
+#: ../../installation/bare-metal.rst:387
msgid "For practical issues change speed from 115200 to 9600. 9600 is the default speed at which both linux kernel and VyOS will reconfigure the serial port when loading."
msgstr "For practical issues change speed from 115200 to 9600. 9600 is the default speed at which both linux kernel and VyOS will reconfigure the serial port when loading."
+#: ../../installation/update.rst:84
+msgid "For updates to the Rolling Release for AMD64, the following URL may be used:"
+msgstr "For updates to the Rolling Release for AMD64, the following URL may be used:"
+
#: ../../installation/migrate-from-vyatta.rst:161
msgid "Future releases of VyOS will break the direct upgrade path from Vyatta core. Please upgrade through an intermediate VyOS version e.g. VyOS 1.2. After this you can continue upgrading to newer releases once you bootet into VyOS 1.2 once."
msgstr "Future releases of VyOS will break the direct upgrade path from Vyatta core. Please upgrade through an intermediate VyOS version e.g. VyOS 1.2. After this you can continue upgrading to newer releases once you bootet into VyOS 1.2 once."
@@ -814,7 +890,7 @@ msgstr "Future releases of VyOS will break the direct upgrade path from Vyatta c
msgid "GPG verification"
msgstr "GPG verification"
-#: ../../installation/install.rst:585
+#: ../../installation/install.rst:586
msgid "GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts. This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a black screen after selecting the `Live system` option from the installation image."
msgstr "GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts. This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a black screen after selecting the `Live system` option from the installation image."
@@ -838,11 +914,16 @@ msgstr "Go to the GNS3 **File** menu, click **New template** and choose select *
msgid "Google Cloud Platform"
msgstr "Google Cloud Platform"
+#: ../../installation/bare-metal.rst:426
+msgid "Gowin GW-FN-1UR1-10G"
+msgstr "Gowin GW-FN-1UR1-10G"
+
#: ../../installation/install.rst:37
msgid "Guaranteed to be stable and carefully maintained for several years after the release. No features are introduced but security updates are released in a timely manner."
msgstr "Guaranteed to be stable and carefully maintained for several years after the release. No features are introduced but security updates are released in a timely manner."
-#: ../../installation/vyos-on-baremetal.rst:304
+#: ../../installation/bare-metal.rst:304
+#: ../../installation/bare-metal.rst:608
msgid "Hardware"
msgstr "Hardware"
@@ -862,11 +943,11 @@ msgstr "Highly stable with no known bugs. Needs to be tested repeatedly under di
msgid "Home labs and simple networks that call for new features."
msgstr "Home labs and simple networks that call for new features."
-#: ../../installation/vyos-on-baremetal.rst:132
+#: ../../installation/bare-metal.rst:132
msgid "Huawei ME909u-521 miniPCIe card (LTE)"
msgstr "Huawei ME909u-521 miniPCIe card (LTE)"
-#: ../../installation/vyos-on-baremetal.rst:415
+#: ../../installation/bare-metal.rst:415
msgid "I'm not sure if it helps the process but I changed default option to live-serial (line “default xxxx”) on the USB key under syslinux/syslinux.cfg."
msgstr "I'm not sure if it helps the process but I changed default option to live-serial (line “default xxxx”) on the USB key under syslinux/syslinux.cfg."
@@ -874,15 +955,15 @@ msgstr "I'm not sure if it helps the process but I changed default option to liv
msgid "IPv6 Support for docker"
msgstr "IPv6 Support for docker"
-#: ../../installation/vyos-on-baremetal.rst:346
+#: ../../installation/bare-metal.rst:346
msgid "I believe this is actually the same hardware as the Protectli. I purchased it in June 2018. It came pre-loaded with pfSense."
msgstr "I believe this is actually the same hardware as the Protectli. I purchased it in June 2018. It came pre-loaded with pfSense."
-#: ../../installation/vyos-on-baremetal.rst:418
+#: ../../installation/bare-metal.rst:418
msgid "I connected the key to one black USB port on the back and powered on. The first VyOS screen has some readability issues. Press :kbd:`Enter` to continue."
msgstr "I connected the key to one black USB port on the back and powered on. The first VyOS screen has some readability issues. Press :kbd:`Enter` to continue."
-#: ../../installation/vyos-on-baremetal.rst:10
+#: ../../installation/bare-metal.rst:10
msgid "I opted to get one of the new Intel Atom C3000 CPUs to spawn VyOS on it. Running VyOS on an UEFI only device is supported as of VyOS release 1.2."
msgstr "I opted to get one of the new Intel Atom C3000 CPUs to spawn VyOS on it. Running VyOS on an UEFI only device is supported as of VyOS release 1.2."
@@ -902,11 +983,11 @@ msgstr "If using as a router, you will want your LAN interface to absorb some or
msgid "If you can not go to this screen"
msgstr "If you can not go to this screen"
-#: ../../installation/install.rst:319
+#: ../../installation/install.rst:320
msgid "If you find difficulties with this method, prefer to use a GUI program, or have a different operating system, there are other programs you can use to create a bootable USB drive, like balenaEtcher_ (for GNU/Linux, macOS and Windows), Rufus_ (for Windows) and `many others`_. You can follow their instructions to create a bootable USB drive from an .iso file."
msgstr "If you find difficulties with this method, prefer to use a GUI program, or have a different operating system, there are other programs you can use to create a bootable USB drive, like balenaEtcher_ (for GNU/Linux, macOS and Windows), Rufus_ (for Windows) and `many others`_. You can follow their instructions to create a bootable USB drive from an .iso file."
-#: ../../installation/install.rst:280
+#: ../../installation/install.rst:281
msgid "If you have a GNU+Linux system, you can create your VyOS bootable USB stick with with the ``dd`` command:"
msgstr "If you have a GNU+Linux system, you can create your VyOS bootable USB stick with with the ``dd`` command:"
@@ -926,7 +1007,7 @@ msgstr "If you need to rollback to a previous image, you can easily do so. First
msgid "If you want to create a new default route for VMs on the subnet, use **Address Prefix** ``0.0.0.0/0`` Also note that if you want to use this as a typical edge device, you'll want masquerade NAT for the ``WAN`` interface."
msgstr "If you want to create a new default route for VMs on the subnet, use **Address Prefix** ``0.0.0.0/0`` Also note that if you want to use this as a typical edge device, you'll want masquerade NAT for the ``WAN`` interface."
-#: ../../installation/vyos-on-baremetal.rst:26
+#: ../../installation/bare-metal.rst:26
msgid "If you want to get additional ethernet ports or even 10GE connectivity the following optional parts will be required:"
msgstr "If you want to get additional ethernet ports or even 10GE connectivity the following optional parts will be required:"
@@ -934,6 +1015,10 @@ msgstr "If you want to get additional ethernet ports or even 10GE connectivity t
msgid "Image Management"
msgstr "Image Management"
+#: ../../installation/secure-boot.rst:121
+msgid "Image Update"
+msgstr "Image Update"
+
#: ../../installation/virtual/gns3.rst:90
msgid "In **Category** select in which group you want to find your VM."
msgstr "In **Category** select in which group you want to find your VM."
@@ -942,11 +1027,23 @@ msgstr "In **Category** select in which group you want to find your VM."
msgid "In 2015, OpenBSD introduced signify. An alternative implementation of the same protocol is minisign, which is also available for Windows and macOS, and in most GNU/Linux distros it's in the repositories now."
msgstr "In 2015, OpenBSD introduced signify. An alternative implementation of the same protocol is minisign, which is also available for Windows and macOS, and in most GNU/Linux distros it's in the repositories now."
+#: ../../installation/bare-metal.rst:434
+msgid "In addition there is a Mellanox ConnectX-3 2* 10GbE SFP+ NIC available."
+msgstr "In addition there is a Mellanox ConnectX-3 2* 10GbE SFP+ NIC available."
+
+#: ../../installation/secure-boot.rst:169
+msgid "In most of the cases if something goes wrong you will see the following error message during system boot:"
+msgstr "In most of the cases if something goes wrong you will see the following error message during system boot:"
+
#: ../../installation/cloud/gcp.rst:20
msgid "In name \"vyos@mypc\" The first value must be \"**vyos**\". Because default user is vyos and google api uses this option."
msgstr "In name \"vyos@mypc\" The first value must be \"**vyos**\". Because default user is vyos and google api uses this option."
-#: ../../installation/install.rst:354
+#: ../../installation/secure-boot.rst:145
+msgid "In order to add an additional layer of security that can already be used in nonesecure boot images already is ephem,eral key signing of the Linux Kernel modules."
+msgstr "In order to add an additional layer of security that can already be used in nonesecure boot images already is ephem,eral key signing of the Linux Kernel modules."
+
+#: ../../installation/install.rst:355
msgid "In order to proceed with a permanent installation:"
msgstr "In order to proceed with a permanent installation:"
@@ -962,20 +1059,30 @@ msgstr "In the **General settings** tab of your **QEMU VM template configuration
msgid "In the **Network** tab, set **0** as the number of adapters, set the **Name format** to **eth{0}** and the **Type** to **Paravirtualized Network I/O (virtio-net-pci)**."
msgstr "In the **Network** tab, set **0** as the number of adapters, set the **Name format** to **eth{0}** and the **Type** to **Paravirtualized Network I/O (virtio-net-pci)**."
-#: ../../installation/install.rst:494
+#: ../../installation/install.rst:495
msgid "In the example we configured our existent VyOS as the TFTP server too:"
msgstr "In the example we configured our existent VyOS as the TFTP server too:"
-#: ../../installation/install.rst:454
+#: ../../installation/bare-metal.rst:512
+msgid "In this example I choose to install VyOS as RAID-1 on both NVMe drives. However, a previous installation on the 128GB eMMC storage worked without any issues, too."
+msgstr "In this example I choose to install VyOS as RAID-1 on both NVMe drives. However, a previous installation on the 128GB eMMC storage worked without any issues, too."
+
+#: ../../installation/install.rst:455
msgid "In this example we configured an existent VyOS as the DHCP server:"
msgstr "In this example we configured an existent VyOS as the DHCP server:"
-#: ../../installation/vyos-on-baremetal.rst:410
+#: ../../installation/secure-boot.rst:7
+msgid "Initial UEFI secure boot support is available (:vytask:`T861`). We utilize ``shim`` from Debian 12 (Bookworm) which is properly signed by the UEFI SecureBoot key from Microsoft."
+msgstr "Initial UEFI secure boot support is available (:vytask:`T861`). We utilize ``shim`` from Debian 12 (Bookworm) which is properly signed by the UEFI SecureBoot key from Microsoft."
+
+#: ../../installation/bare-metal.rst:410
msgid "Install VyOS:"
msgstr "Install VyOS:"
+#: ../../installation/bare-metal.rst:352
+#: ../../installation/bare-metal.rst:475
#: ../../installation/install.rst:5
-#: ../../installation/vyos-on-baremetal.rst:352
+#: ../../installation/secure-boot.rst:31
msgid "Installation"
msgstr "Installation"
@@ -983,15 +1090,15 @@ msgstr "Installation"
msgid "Installation and Image Management"
msgstr "Installation and Image Management"
-#: ../../installation/install.rst:597
+#: ../../installation/install.rst:598
msgid "Installation can then continue as outlined above."
msgstr "Installation can then continue as outlined above."
-#: ../../installation/vyos-on-baremetal.rst:224
+#: ../../installation/bare-metal.rst:224
msgid "Installing the rolling release on an APU2 board does not require any change on the serial console from your host side as :vytask:`T1327` was successfully implemented."
msgstr "Installing the rolling release on an APU2 board does not require any change on the serial console from your host side as :vytask:`T1327` was successfully implemented."
-#: ../../installation/vyos-on-baremetal.rst:118
+#: ../../installation/bare-metal.rst:118
msgid "Intel Corporation AX200 mini-PCIe WiFi module, only supported in mPCIe slot 1. (see :ref:`wireless-interface-intel-ax200`)"
msgstr "Intel Corporation AX200 mini-PCIe WiFi module, only supported in mPCIe slot 1. (see :ref:`wireless-interface-intel-ax200`)"
@@ -1015,11 +1122,15 @@ msgstr "It can be retrieved directly from a key server:"
msgid "It is advised that VyOS routers are configured in a resource group with adequate memory reservations so that ballooning is not inflicted on virtual VyOS guests."
msgstr "It is advised that VyOS routers are configured in a resource group with adequate memory reservations so that ballooning is not inflicted on virtual VyOS guests."
+#: ../../installation/secure-boot.rst:131
+msgid "It is no longer possible to boot into a CI generated rolling release as those are currently not signed by a trusted party (:vytask:`T861` work in progress). This also means that you need to sign all your successor builds you build on your own with the exact same key, otherwise you will see:"
+msgstr "It is no longer possible to boot into a CI generated rolling release as those are currently not signed by a trusted party (:vytask:`T861` work in progress). This also means that you need to sign all your successor builds you build on your own with the exact same key, otherwise you will see:"
+
#: ../../installation/install.rst:235
msgid "Its installed size (complete with libsodium) is less than that of GPG binary alone (not including libgcrypt and some other libs, which I think we only use for GPG). Since it uses elliptic curves, it gets away with much smaller keys, and it doesn't include as much metadata to begin with."
msgstr "Its installed size (complete with libsodium) is less than that of GPG binary alone (not including libgcrypt and some other libs, which I think we only use for GPG). Since it uses elliptic curves, it gets away with much smaller keys, and it doesn't include as much metadata to begin with."
-#: ../../installation/install.rst:578
+#: ../../installation/install.rst:579
msgid "Known Issues"
msgstr "Known Issues"
@@ -1035,7 +1146,7 @@ msgstr "Labs, small offices and non-critical production systems backed by a high
msgid "Large-scale enterprise networks, internet service providers, critical production environments that call for minimum downtime."
msgstr "Large-scale enterprise networks, internet service providers, critical production environments that call for minimum downtime."
-#: ../../installation/vyos-on-baremetal.rst:32
+#: ../../installation/bare-metal.rst:32
msgid "Latest VyOS rolling releases boot without any problem on this board. You also receive a nice IPMI interface realized with an ASPEED AST2400 BMC (no information about `OpenBMC <https://www.openbmc.org/>`_ so far on this motherboard)."
msgstr "Latest VyOS rolling releases boot without any problem on this board. You also receive a nice IPMI interface realized with an ASPEED AST2400 BMC (no information about `OpenBMC <https://www.openbmc.org/>`_ so far on this motherboard)."
@@ -1043,19 +1154,23 @@ msgstr "Latest VyOS rolling releases boot without any problem on this board. You
msgid "Libvirt is an open-source API, daemon and management tool for managing platform virtualization. There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI. In an example we will be use use 4 gigabytes of memory, 2 cores CPU and default network virbr0."
msgstr "Libvirt is an open-source API, daemon and management tool for managing platform virtualization. There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI. In an example we will be use use 4 gigabytes of memory, 2 cores CPU and default network virbr0."
+#: ../../installation/secure-boot.rst:143
+msgid "Linux Kernel"
+msgstr "Linux Kernel"
+
#: ../../installation/image.rst:33
msgid "List all available system images which can be booted on the current system."
msgstr "List all available system images which can be booted on the current system."
-#: ../../installation/install.rst:267
+#: ../../installation/install.rst:268
msgid "Live installation"
msgstr "Live installation"
-#: ../../installation/install.rst:356
+#: ../../installation/install.rst:357
msgid "Log into the VyOS live system (use the default credentials: vyos, vyos)"
msgstr "Log into the VyOS live system (use the default credentials: vyos, vyos)"
-#: ../../installation/install.rst:558
+#: ../../installation/install.rst:559
msgid "Make sure the available directories and files in both TFTP and HTTP server have the right permissions to be accessed from the booting clients."
msgstr "Make sure the available directories and files in both TFTP and HTTP server have the right permissions to be accessed from the booting clients."
@@ -1092,6 +1207,10 @@ msgstr "New system images can be added using the :opcmd:`add system image` comma
msgid "Next add the VyOS image."
msgstr "Next add the VyOS image."
+#: ../../installation/bare-metal.rst:472
+msgid "No settings needed to be altered, everything worked out of the box!"
+msgstr "No settings needed to be altered, everything worked out of the box!"
+
#: ../../installation/install.rst:33
msgid "Non-critical production environments, preparing for the LTS release."
msgstr "Non-critical production environments, preparing for the LTS release."
@@ -1100,15 +1219,23 @@ msgstr "Non-critical production environments, preparing for the LTS release."
msgid "Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available for everyone at https://github.com/vyos/vyos-build."
msgstr "Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available for everyone at https://github.com/vyos/vyos-build."
-#: ../../installation/vyos-on-baremetal.rst:166
+#: ../../installation/bare-metal.rst:166
msgid "Now boot from the ``USB MSC Drive Generic Flash Disk 8.07`` media by pressing ``2``, the VyOS boot menu will appear, just wait 10 seconds or press ``Enter`` to continue."
msgstr "Now boot from the ``USB MSC Drive Generic Flash Disk 8.07`` media by pressing ``2``, the VyOS boot menu will appear, just wait 10 seconds or press ``Enter`` to continue."
+#: ../../installation/secure-boot.rst:77
+msgid "Now reboot and re-enable UEFI secure boot."
+msgstr "Now reboot and re-enable UEFI secure boot."
+
#: ../../installation/virtual/gns3.rst:78
msgid "Now the VM settings have to be edited."
msgstr "Now the VM settings have to be edited."
-#: ../../installation/install.rst:347
+#: ../../installation/secure-boot.rst:72
+msgid "Now you will need the password previously defined"
+msgstr "Now you will need the password previously defined"
+
+#: ../../installation/install.rst:348
msgid "Older versions (prior to VyOS 1.1) used to support non-image installation (``install system`` command). Support for this has been removed from VyOS 1.2 and newer releases. Older releases can still be upgraded via the general ``add system image <image_path>`` upgrade command (consult :ref:`image-mgmt` for further information)."
msgstr "Older versions (prior to VyOS 1.1) used to support non-image installation (``install system`` command). Support for this has been removed from VyOS 1.2 and newer releases. Older releases can still be upgraded via the general ``add system image <image_path>`` upgrade command (consult :ref:`image-mgmt` for further information)."
@@ -1124,11 +1251,11 @@ msgstr "On the marketplace search \"VyOS\""
msgid "On the marketplace search ``VyOS`` and choose the appropriate subscription"
msgstr "On the marketplace search ``VyOS`` and choose the appropriate subscription"
-#: ../../installation/install.rst:315
+#: ../../installation/install.rst:316
msgid "Once VyOS is completely loaded, enter the default credentials (login: vyos, password: vyos)."
msgstr "Once VyOS is completely loaded, enter the default credentials (login: vyos, password: vyos)."
-#: ../../installation/install.rst:309
+#: ../../installation/install.rst:310
msgid "Once ``dd`` has finished, pull the USB drive out and plug it into the powered-off computer where you want to install (or test) VyOS."
msgstr "Once ``dd`` has finished, pull the USB drive out and plug it into the powered-off computer where you want to install (or test) VyOS."
@@ -1136,11 +1263,11 @@ msgstr "Once ``dd`` has finished, pull the USB drive out and plug it into the po
msgid "Once booted into the live system, type ``install image`` into the command line and follow the prompts to install VyOS to the virtual drive."
msgstr "Once booted into the live system, type ``install image`` into the command line and follow the prompts to install VyOS to the virtual drive."
-#: ../../installation/install.rst:572
+#: ../../installation/install.rst:573
msgid "Once finished you will be able to proceed with the ``install image`` command as in a regular VyOS installation."
msgstr "Once finished you will be able to proceed with the ``install image`` command as in a regular VyOS installation."
-#: ../../installation/vyos-on-baremetal.rst:211
+#: ../../installation/bare-metal.rst:211
msgid "Once you ``commit`` the above changes access to the serial interface is lost until you set your terminal emulator to 115200 8N1 again."
msgstr "Once you ``commit`` the above changes access to the serial interface is lost until you set your terminal emulator to 115200 8N1 again."
@@ -1165,14 +1292,18 @@ msgstr "Open a console. The console should show the system booting. It will ask
msgid "Open a secondary/parallel session and use this command to reboot the VM:"
msgstr "Open a secondary/parallel session and use this command to reboot the VM:"
-#: ../../installation/install.rst:283
+#: ../../installation/install.rst:284
msgid "Open your terminal emulator."
msgstr "Open your terminal emulator."
-#: ../../installation/vyos-on-baremetal.rst:25
+#: ../../installation/bare-metal.rst:25
msgid "Optional (10GE)"
msgstr "Optional (10GE)"
+#: ../../installation/bare-metal.rst:446
+msgid "Optional (WiFi + WWAN)"
+msgstr "Optional (WiFi + WWAN)"
+
#: ../../installation/virtual/proxmox.rst:24
msgid "Optionally, the user can attach a CDROM with an ISO as a cloud-init data source. The below command assumes the ISO has been uploaded to the `local` storage pool with the name `seed.iso`."
msgstr "Optionally, the user can attach a CDROM with an ISO as a cloud-init data source. The below command assumes the ISO has been uploaded to the `local` storage pool with the name `seed.iso`."
@@ -1189,28 +1320,37 @@ msgstr "Or it can be accessed via a web browser:"
msgid "Oracle"
msgstr "Oracle"
-#: ../../installation/vyos-on-baremetal.rst:80
+#: ../../installation/bare-metal.rst:80
msgid "PC Engines APU4"
msgstr "PC Engines APU4"
-#: ../../installation/install.rst:427
+#: ../../installation/install.rst:428
msgid "PXE Boot"
msgstr "PXE Boot"
-#: ../../installation/vyos-on-baremetal.rst:342
+#: ../../installation/bare-metal.rst:342
msgid "Partaker i5"
msgstr "Partaker i5"
-#: ../../installation/install.rst:332
+#: ../../installation/bare-metal.rst:521
+msgid "Perform Image installation using `install image` CLI command. This installation uses two 128GB NVMe disks setup as RAID1."
+msgstr "Perform Image installation using `install image` CLI command. This installation uses two 128GB NVMe disks setup as RAID1."
+
+#: ../../installation/install.rst:333
msgid "Permanent installation"
msgstr "Permanent installation"
-#: ../../installation/vyos-on-baremetal.rst:38
-#: ../../installation/vyos-on-baremetal.rst:234
+#: ../../installation/bare-metal.rst:38
+#: ../../installation/bare-metal.rst:234
+#: ../../installation/bare-metal.rst:452
msgid "Pictures"
msgstr "Pictures"
-#: ../../installation/vyos-on-baremetal.rst:355
+#: ../../installation/bare-metal.rst:483
+msgid "Please note that there is a weirdness on the network interface mapping. The interface <-> MAC mapping is going upwards but the NICs are placed somehow swapped on the mainboard/MACs programmed in a swapped order."
+msgstr "Please note that there is a weirdness on the network interface mapping. The interface <-> MAC mapping is going upwards but the NICs are placed somehow swapped on the mainboard/MACs programmed in a swapped order."
+
+#: ../../installation/bare-metal.rst:355
msgid "Plug in VGA, power, USB keyboard, and USB drive"
msgstr "Plug in VGA, power, USB keyboard, and USB drive"
@@ -1218,11 +1358,11 @@ msgstr "Plug in VGA, power, USB keyboard, and USB drive"
msgid "Popularity of GPG for release signing comes from the fact that many people already had it installed for email encryption/signing. Inside a VyOS image, signature checking is the only reason to have it installed. However, it still comes with all the features no one needs, such as support for multiple outdated cipher suits and ability to embed a photo in the key file. More importantly, web of trust, the basic premise of PGP, is never used in release signing context. Once you have a knowingly authentic image, authenticity of upgrades is checked using a key that comes in the image, and to get their first image people never rely on keyservers either."
msgstr "Popularity of GPG for release signing comes from the fact that many people already had it installed for email encryption/signing. Inside a VyOS image, signature checking is the only reason to have it installed. However, it still comes with all the features no one needs, such as support for multiple outdated cipher suits and ability to embed a photo in the key file. More importantly, web of trust, the basic premise of PGP, is never used in release signing context. Once you have a knowingly authentic image, authenticity of upgrades is checked using a key that comes in the image, and to get their first image people never rely on keyservers either."
-#: ../../installation/vyos-on-baremetal.rst:324
+#: ../../installation/bare-metal.rst:324
msgid "Power supply is a 12VDC barrel jack, and included switching power supply, which is why SATA power regulation is on-board. Internally it has a NUC-board-style on-board 12V input header as well, the molex locking style."
msgstr "Power supply is a 12VDC barrel jack, and included switching power supply, which is why SATA power regulation is on-board. Internally it has a NUC-board-style on-board 12V input header as well, the molex locking style."
-#: ../../installation/install.rst:312
+#: ../../installation/install.rst:313
msgid "Power the computer on, making sure it boots from the USB drive (you might need to select booting device or change booting settings)."
msgstr "Power the computer on, making sure it boots from the USB drive (you might need to select booting device or change booting settings)."
@@ -1234,19 +1374,23 @@ msgstr "Prepare VM for installation from ISO media. The commands below assume th
msgid "Preparing for the verification"
msgstr "Preparing for the verification"
-#: ../../installation/vyos-on-baremetal.rst:356
+#: ../../installation/bare-metal.rst:356
msgid "Press \"SW\" button on the front (this is the power button; I don't know what \"SW\" is supposed to mean)."
msgstr "Press \"SW\" button on the front (this is the power button; I don't know what \"SW\" is supposed to mean)."
+#: ../../installation/secure-boot.rst:41
+msgid "Proceed with the regular VyOS :ref:`installation <permanent_installation>` on your system, but instead of the final ``reboot`` we will enroll the :abbr:`MOK (Machine Owner Key)`."
+msgstr "Proceed with the regular VyOS :ref:`installation <permanent_installation>` on your system, but instead of the final ``reboot`` we will enroll the :abbr:`MOK (Machine Owner Key)`."
+
#: ../../installation/virtual/proxmox.rst:7
msgid "Proxmox is an open-source platform for virtualization. Please visit https://vyos.io to see how to get a qcow2 image that can be imported into Proxmox."
msgstr "Proxmox is an open-source platform for virtualization. Please visit https://vyos.io to see how to get a qcow2 image that can be imported into Proxmox."
-#: ../../installation/vyos-on-baremetal.rst:291
+#: ../../installation/bare-metal.rst:291
msgid "Qotom Q355G4"
msgstr "Qotom Q355G4"
-#: ../../installation/vyos-on-baremetal.rst:240
+#: ../../installation/bare-metal.rst:240
msgid "Rack Mount"
msgstr "Rack Mount"
@@ -1254,11 +1398,11 @@ msgstr "Rack Mount"
msgid "Rather stable. All development focuses on testing and hunting down remaining bugs following the feature freeze."
msgstr "Rather stable. All development focuses on testing and hunting down remaining bugs following the feature freeze."
-#: ../../installation/vyos-on-baremetal.rst:404
+#: ../../installation/bare-metal.rst:404
msgid "Reboot into BIOS, Chipset > South Bridge > USB Configuration:"
msgstr "Reboot into BIOS, Chipset > South Bridge > USB Configuration:"
-#: ../../installation/install.rst:416
+#: ../../installation/install.rst:417
msgid "Reboot the system."
msgstr "Reboot the system."
@@ -1266,11 +1410,11 @@ msgstr "Reboot the system."
msgid "Reboot the virtual machine using the GUI or ``qm reboot 200``."
msgstr "Reboot the virtual machine using the GUI or ``qm reboot 200``."
-#: ../../installation/vyos-on-baremetal.rst:114
+#: ../../installation/bare-metal.rst:114
msgid "Refer to :ref:`wireless-interface` for additional information, below listed modules have been tested successfully on this Hardware platform:"
msgstr "Refer to :ref:`wireless-interface` for additional information, below listed modules have been tested successfully on this Hardware platform:"
-#: ../../installation/vyos-on-baremetal.rst:124
+#: ../../installation/bare-metal.rst:124
msgid "Refer to :ref:`wwan-interface` for additional information, below listed modules have been tested successfully on this Hardware platform using VyOS 1.3 (equuleus):"
msgstr "Refer to :ref:`wwan-interface` for additional information, below listed modules have been tested successfully on this Hardware platform using VyOS 1.3 (equuleus):"
@@ -1327,7 +1471,7 @@ msgstr "Rolling releases contain all the latest enhancements and fixes. This mea
msgid "Run Cloudwatch configuration wizard."
msgstr "Run Cloudwatch configuration wizard."
-#: ../../installation/install.rst:359
+#: ../../installation/install.rst:360
msgid "Run the ``install image`` command and follow the wizard:"
msgstr "Run the ``install image`` command and follow the wizard:"
@@ -1363,10 +1507,18 @@ msgstr "Running on Proxmox"
msgid "Running on VMware ESXi"
msgstr "Running on VMware ESXi"
-#: ../../installation/vyos-on-baremetal.rst:399
+#: ../../installation/bare-metal.rst:399
msgid "Save, reboot and change serial speed to 9600 on your client."
msgstr "Save, reboot and change serial speed to 9600 on your client."
+#: ../../installation/secure-boot.rst:5
+msgid "Secure Boot"
+msgstr "Secure Boot"
+
+#: ../../installation/bare-metal.rst:487
+msgid "See interface description for more detailed mapping."
+msgstr "See interface description for more detailed mapping."
+
#: ../../installation/virtual/gns3.rst:55
msgid "Select **New image** for the base disk image of your VM and click ``Create``."
msgstr "Select **New image** for the base disk image of your VM and click ``Create``."
@@ -1387,6 +1539,10 @@ msgstr "Select **telnet** as your console type and click ``Next``."
msgid "Select SSH key pair and click ``Launch Instances``"
msgstr "Select SSH key pair and click ``Launch Instances``"
+#: ../../installation/secure-boot.rst:59
+msgid "Select ``Enroll MOK``"
+msgstr "Select ``Enroll MOK``"
+
#: ../../installation/image.rst:105
msgid "Select the default boot image which will be started on the next boot of the system."
msgstr "Select the default boot image which will be started on the next boot of the system."
@@ -1407,8 +1563,9 @@ msgstr "Set the disk size to 2000 MiB, and click ``Finish`` to end the **Quemu i
msgid "Set the number of required network adapters, for example **4**."
msgstr "Set the number of required network adapters, for example **4**."
-#: ../../installation/vyos-on-baremetal.rst:14
-#: ../../installation/vyos-on-baremetal.rst:99
+#: ../../installation/bare-metal.rst:14
+#: ../../installation/bare-metal.rst:99
+#: ../../installation/bare-metal.rst:440
msgid "Shopping Cart"
msgstr "Shopping Cart"
@@ -1416,27 +1573,27 @@ msgstr "Shopping Cart"
msgid "Show current system image version."
msgstr "Show current system image version."
-#: ../../installation/vyos-on-baremetal.rst:128
+#: ../../installation/bare-metal.rst:128
msgid "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)"
msgstr "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)"
-#: ../../installation/vyos-on-baremetal.rst:129
+#: ../../installation/bare-metal.rst:129
msgid "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)"
msgstr "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)"
-#: ../../installation/vyos-on-baremetal.rst:130
+#: ../../installation/bare-metal.rst:130
msgid "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)"
msgstr "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)"
-#: ../../installation/vyos-on-baremetal.rst:131
+#: ../../installation/bare-metal.rst:131
msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)"
msgstr "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)"
-#: ../../installation/vyos-on-baremetal.rst:228
+#: ../../installation/bare-metal.rst:228
msgid "Simply proceed with a regular image installation as described in :ref:`installation`."
msgstr "Simply proceed with a regular image installation as described in :ref:`installation`."
-#: ../../installation/vyos-on-baremetal.rst:401
+#: ../../installation/bare-metal.rst:401
msgid "Some options have to be changed for VyOS to boot correctly. With XHCI enabled the installer can’t access the USB key. Enable EHCI instead."
msgstr "Some options have to be changed for VyOS to boot correctly. With XHCI enabled the installer can’t access the USB key. Enable EHCI instead."
@@ -1460,15 +1617,15 @@ msgstr "Start the virtual machine in the proxmox GUI or CLI using ``qm start 200
msgid "Stayed in this stage. This is because the KVM console is chosen as the default boot option."
msgstr "Stayed in this stage. This is because the KVM console is chosen as the default boot option."
-#: ../../installation/install.rst:446
+#: ../../installation/install.rst:447
msgid "Step 1: DHCP"
msgstr "Step 1: DHCP"
-#: ../../installation/install.rst:477
+#: ../../installation/install.rst:478
msgid "Step 2: TFTP"
msgstr "Step 2: TFTP"
-#: ../../installation/install.rst:534
+#: ../../installation/install.rst:535
msgid "Step 3: HTTP"
msgstr "Step 3: HTTP"
@@ -1480,7 +1637,7 @@ msgstr "Store the key in a new text file and import it into GPG via: ``gpg --imp
msgid "Subscribers, contributors, non-profits, emergency services, academic institutions"
msgstr "Subscribers, contributors, non-profits, emergency services, academic institutions"
-#: ../../installation/vyos-on-baremetal.rst:8
+#: ../../installation/bare-metal.rst:8
msgid "Supermicro A2SDi (Atom C3000)"
msgstr "Supermicro A2SDi (Atom C3000)"
@@ -1488,7 +1645,7 @@ msgstr "Supermicro A2SDi (Atom C3000)"
msgid "System rollback"
msgstr "System rollback"
-#: ../../installation/vyos-on-baremetal.rst:396
+#: ../../installation/bare-metal.rst:396
msgid "Terminal Type : VT100+"
msgstr "Terminal Type : VT100+"
@@ -1496,27 +1653,31 @@ msgstr "Terminal Type : VT100+"
msgid "The *VyOS-hda.qcow2* file now contains a working VyOS image and can be used as a template. But it still needs some fixes before we can deploy VyOS in our labs."
msgstr "The *VyOS-hda.qcow2* file now contains a working VyOS image and can be used as a template. But it still needs some fixes before we can deploy VyOS in our labs."
-#: ../../installation/install.rst:452
+#: ../../installation/install.rst:453
msgid "The *bootfile name* (DHCP option 67), which is *pxelinux.0*"
msgstr "The *bootfile name* (DHCP option 67), which is *pxelinux.0*"
-#: ../../installation/install.rst:482
+#: ../../installation/install.rst:483
msgid "The *ldlinux.c32* file from the Syslinux distribution"
msgstr "The *ldlinux.c32* file from the Syslinux distribution"
-#: ../../installation/install.rst:481
+#: ../../installation/install.rst:482
msgid "The *pxelinux.0* file from the Syslinux distribution"
msgstr "The *pxelinux.0* file from the Syslinux distribution"
-#: ../../installation/vyos-on-baremetal.rst:105
+#: ../../installation/bare-metal.rst:105
msgid "The 19\" enclosure can accommodate up to two APU4 boards - there is a single and dual front cover."
msgstr "The 19\" enclosure can accommodate up to two APU4 boards - there is a single and dual front cover."
-#: ../../installation/vyos-on-baremetal.rst:187
+#: ../../installation/bare-metal.rst:187
msgid "The Kernel will now spin up using a different console setting. Set terminal emulator to 9600 8N1 and after a while your console will show:"
msgstr "The Kernel will now spin up using a different console setting. Set terminal emulator to 9600 8N1 and after a while your console will show:"
-#: ../../installation/install.rst:451
+#: ../../installation/bare-metal.rst:667
+msgid "The LTE module can be enabled as simple as this config snippet:"
+msgstr "The LTE module can be enabled as simple as this config snippet:"
+
+#: ../../installation/install.rst:452
msgid "The TFTP server address (DHCP option 66). Sometimes referred as *boot server*"
msgstr "The TFTP server address (DHCP option 66). Sometimes referred as *boot server*"
@@ -1540,11 +1701,15 @@ msgstr "The `add system image` command also supports installing new versions of
msgid "The amazon-cloudwatch-agent package is normally included in VyOS 1.3.3+ and 1.4+"
msgstr "The amazon-cloudwatch-agent package is normally included in VyOS 1.3.3+ and 1.4+"
-#: ../../installation/vyos-on-baremetal.rst:94
+#: ../../installation/bare-metal.rst:431
+msgid "The appliance comes with 2 * 2.5GbE Intel I226-V and 3 * 1GbE Intel I210 where one supports IEEE802.3at PoE+ (Typical 30W)."
+msgstr "The appliance comes with 2 * 2.5GbE Intel I226-V and 3 * 1GbE Intel I210 where one supports IEEE802.3at PoE+ (Typical 30W)."
+
+#: ../../installation/bare-metal.rst:94
msgid "The board can be powered via 12V from the front or via a 5V onboard connector."
msgstr "The board can be powered via 12V from the front or via a 5V onboard connector."
-#: ../../installation/vyos-on-baremetal.rst:314
+#: ../../installation/bare-metal.rst:314
msgid "The chassis is a U-shaped alu extrusion with removable I/O plates and removable bottom plate. Cooling is completely passive with a heatsink on the SoC with internal and external fins, a flat interface surface, thermal pad on top of that, which then directly attaches to the chassis, which has fins as well. It comes with mounting hardware and rubber feet, so you could place it like a desktop model or mount it on a VESA mount, or even wall mount it with the provided mounting plate. The closing plate doubles as internal 2.5\" mounting place for an HDD or SSD, and comes supplied with a small SATA cable and SATA power cable."
msgstr "The chassis is a U-shaped alu extrusion with removable I/O plates and removable bottom plate. Cooling is completely passive with a heatsink on the SoC with internal and external fins, a flat interface surface, thermal pad on top of that, which then directly attaches to the chassis, which has fins as well. It comes with mounting hardware and rubber feet, so you could place it like a desktop model or mount it on a VESA mount, or even wall mount it with the provided mounting plate. The closing plate doubles as internal 2.5\" mounting place for an HDD or SSD, and comes supplied with a small SATA cable and SATA power cable."
@@ -1556,10 +1721,14 @@ msgstr "The commands below assume that virtual machine ID 200 is unused and that
msgid "The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)` images is that they don't need to be installed. Download predefined VyOS.qcow2 image for ``KVM``"
msgstr "The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)` images is that they don't need to be installed. Download predefined VyOS.qcow2 image for ``KVM``"
-#: ../../installation/install.rst:326
+#: ../../installation/install.rst:327
msgid "The default username and password for the live system is *vyos*."
msgstr "The default username and password for the live system is *vyos*."
+#: ../../installation/bare-metal.rst:465
+msgid "The device itself is passivly cooled, whereas the power supply has an active fan. Even if the main processor is powered off, the power supply fan is operating and the entire chassis draws 7.5W. During operation the chassis drew arround 38W."
+msgstr "The device itself is passivly cooled, whereas the power supply has an active fan. Even if the main processor is powered off, the power supply fan is operating and the entire chassis draws 7.5W. During operation the chassis drew arround 38W."
+
#: ../../installation/image.rst:10
msgid "The directory structure of the boot device:"
msgstr "The directory structure of the boot device:"
@@ -1576,7 +1745,7 @@ msgstr "The following link will always fetch the most recent VyOS build for AMD6
msgid "The image directory contains the system kernel, a compressed image of the root filesystem for the OS, and a directory for persistent storage, such as configuration. On boot, the system will extract the OS image into memory and mount the appropriate live-rw sub-directories to provide persistent storage system configuration."
msgstr "The image directory contains the system kernel, a compressed image of the root filesystem for the OS, and a directory for persistent storage, such as configuration. On boot, the system will extract the OS image into memory and mount the appropriate live-rw sub-directories to provide persistent storage system configuration."
-#: ../../installation/vyos-on-baremetal.rst:180
+#: ../../installation/bare-metal.rst:180
msgid "The image will be loaded and the last lines you will get will be:"
msgstr "The image will be loaded and the last lines you will get will be:"
@@ -1584,15 +1753,15 @@ msgstr "The image will be loaded and the last lines you will get will be:"
msgid "The import can be verified with:"
msgstr "The import can be verified with:"
-#: ../../installation/install.rst:486
+#: ../../installation/install.rst:487
msgid "The initial ramdisk of the VyOS ISO you want to deploy. That is the *initrd.img* file inside the */live* directory of the extracted contents from the ISO file. Do not use an empty (0 bytes) initrd.img file you might find, the correct file may have a longer name."
msgstr "The initial ramdisk of the VyOS ISO you want to deploy. That is the *initrd.img* file inside the */live* directory of the extracted contents from the ISO file. Do not use an empty (0 bytes) initrd.img file you might find, the correct file may have a longer name."
-#: ../../installation/vyos-on-baremetal.rst:293
+#: ../../installation/bare-metal.rst:293
msgid "The install on this Q355G4 box is pretty much plug and play. The port numbering the OS does might differ from the labels on the outside, but the UEFI firmware has a port blink test built in with MAC addresses so you can very quickly identify which is which. MAC labels are on the inside as well, and this test can be done from VyOS or plain Linux too. Default settings in the UEFI will make it boot, but depending on your installation wishes (i.e. storage type, boot type, console type) you might want to adjust them. This Qotom company seems to be the real OEM/ODM for many other relabelling companies like Protectli."
msgstr "The install on this Q355G4 box is pretty much plug and play. The port numbering the OS does might differ from the labels on the outside, but the UEFI firmware has a port blink test built in with MAC addresses so you can very quickly identify which is which. MAC labels are on the inside as well, and this test can be done from VyOS or plain Linux too. Default settings in the UEFI will make it boot, but depending on your installation wishes (i.e. storage type, boot type, console type) you might want to adjust them. This Qotom company seems to be the real OEM/ODM for many other relabelling companies like Protectli."
-#: ../../installation/install.rst:483
+#: ../../installation/install.rst:484
msgid "The kernel of the VyOS software you want to deploy. That is the *vmlinuz* file inside the */live* directory of the extracted contents from the ISO file."
msgstr "The kernel of the VyOS software you want to deploy. That is the *vmlinuz* file inside the */live* directory of the extracted contents from the ISO file."
@@ -1604,10 +1773,18 @@ msgstr "The minimum system requirements are 1024 MiB RAM and 2 GiB storage. Depe
msgid "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:"
msgstr "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:"
+#: ../../installation/update.rst:88
+msgid "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL from a web browser:"
+msgstr "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL from a web browser:"
+
#: ../../installation/install.rst:107
msgid "The official VyOS public key can be retrieved in a number of ways. Skip to :ref:`gpg-verification` if the key is already present."
msgstr "The official VyOS public key can be retrieved in a number of ways. Skip to :ref:`gpg-verification` if the key is already present."
+#: ../../installation/secure-boot.rst:51
+msgid "The requested ``input password`` can be user chosen and is only needed after rebooting the system into MOK Manager to permanently install the keys."
+msgstr "The requested ``input password`` can be user chosen and is only needed after rebooting the system into MOK Manager to permanently install the keys."
+
#: ../../installation/install.rst:197
msgid "The signature can be downloaded by appending `.asc` to the URL of the downloaded VyOS image. That small *.asc* file is the signature for the associated image."
msgstr "The signature can be downloaded by appending `.asc` to the URL of the downloaded VyOS image. That small *.asc* file is the signature for the associated image."
@@ -1616,15 +1793,19 @@ msgstr "The signature can be downloaded by appending `.asc` to the URL of the do
msgid "The system is fully operational."
msgstr "The system is fully operational."
+#: ../../installation/bare-metal.rst:477
+msgid "The system provides a regular RS232 console port using 115200,8n1 setting which is sufficient to install VyOS from a USB pendrive."
+msgstr "The system provides a regular RS232 console port using 115200,8n1 setting which is sufficient to install VyOS from a USB pendrive."
+
#: ../../installation/virtual/libvirt.rst:120
msgid "The virt-manager application is a desktop user interface for managing virtual machines through libvirt. On the linux open :abbr:`VMM (Virtual Machine Manager)`."
msgstr "The virt-manager application is a desktop user interface for managing virtual machines through libvirt. On the linux open :abbr:`VMM (Virtual Machine Manager)`."
-#: ../../installation/install.rst:590
+#: ../../installation/install.rst:591
msgid "The workaround is to type `e` when the boot menu appears and edit the GRUB boot options. Specifically, remove the:"
msgstr "The workaround is to type `e` when the boot menu appears and edit the GRUB boot options. Specifically, remove the:"
-#: ../../installation/vyos-on-baremetal.rst:421
+#: ../../installation/bare-metal.rst:421
msgid "Then VyOS should boot and you can perform the ``install image``"
msgstr "Then VyOS should boot and you can perform the ``install image``"
@@ -1641,11 +1822,11 @@ msgstr "Then reboot the system."
msgid "Then you will be taken to the console."
msgstr "Then you will be taken to the console."
-#: ../../installation/vyos-on-baremetal.rst:328
+#: ../../installation/bare-metal.rst:328
msgid "There are WDT options and auto-boot on power enable, which is great for remote setups. Firmware is reasonably secure (no backdoors found, BootGuard is enabled in enforcement mode, which is good but also means no coreboot option), yet has most options available to configure (so it's not locked out like most firmwares are)."
msgstr "There are WDT options and auto-boot on power enable, which is great for remote setups. Firmware is reasonably secure (no backdoors found, BootGuard is enabled in enforcement mode, which is good but also means no coreboot option), yet has most options available to configure (so it's not locked out like most firmwares are)."
-#: ../../installation/vyos-on-baremetal.rst:306
+#: ../../installation/bare-metal.rst:306
msgid "There are a number of other options, but they all seem to be close to Intel reference designs, with added features like more serial ports, more network interfaces and the likes. Because they don't deviate too much from standard designs all the hardware is well-supported by mainline. It accepts one LPDDR3 SO-DIMM, but chances are that if you need more than that, you'll also want something even beefier than an i5. There are options for antenna holes, and SIM slots, so you could in theory add an LTE/Cell modem (not tested so far)."
msgstr "There are a number of other options, but they all seem to be close to Intel reference designs, with added features like more serial ports, more network interfaces and the likes. Because they don't deviate too much from standard designs all the hardware is well-supported by mainline. It accepts one LPDDR3 SO-DIMM, but chances are that if you need more than that, you'll also want something even beefier than an i5. There are options for antenna holes, and SIM slots, so you could in theory add an LTE/Cell modem (not tested so far)."
@@ -1653,11 +1834,16 @@ msgstr "There are a number of other options, but they all seem to be close to In
msgid "There have been previous documented issues with GRE/IPSEC tunneling using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been advised."
msgstr "There have been previous documented issues with GRE/IPSEC tunneling using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been advised."
+#: ../../installation/secure-boot.rst:11
+#: ../../installation/secure-boot.rst:123
+msgid "There is yet no signed version of ``shim`` for VyOS, thus we provide no signed image for secure boot yet. If you are interested in secure boot you can build an image on your own."
+msgstr "There is yet no signed version of ``shim`` for VyOS, thus we provide no signed image for secure boot yet. If you are interested in secure boot you can build an image on your own."
+
#: ../../installation/migrate-from-vyatta.rst:101
msgid "This example uses VyOS 1.0.0, however, it's better to install the latest release."
msgstr "This example uses VyOS 1.0.0, however, it's better to install the latest release."
-#: ../../installation/vyos-on-baremetal.rst:85
+#: ../../installation/bare-metal.rst:85
msgid "This guide was developed using an APU4C4 board with the following specs:"
msgstr "This guide was developed using an APU4C4 board with the following specs:"
@@ -1665,11 +1851,15 @@ msgstr "This guide was developed using an APU4C4 board with the following specs:
msgid "This guide will provide the necessary steps for installing and setting up VyOS on GNS3."
msgstr "This guide will provide the necessary steps for installing and setting up VyOS on GNS3."
-#: ../../installation/install.rst:580
+#: ../../installation/install.rst:581
msgid "This is a list of known issues that can arise during installation."
msgstr "This is a list of known issues that can arise during installation."
-#: ../../installation/vyos-on-baremetal.rst:374
+#: ../../installation/secure-boot.rst:177
+msgid "This means that the Machine Owner Key used to sign the Kernel is not trusted by your UEFI. You need to install the MOK via ``install mok`` as stated above."
+msgstr "This means that the Machine Owner Key used to sign the Kernel is not trusted by your UEFI. You need to install the MOK via ``install mok`` as stated above."
+
+#: ../../installation/bare-metal.rst:374
msgid "This microbox network appliance was build to create OpenVPN bridges. It can saturate a 100Mbps link. It is a small (serial console only) PC with 6 Gb LAN"
msgstr "This microbox network appliance was build to create OpenVPN bridges. It can saturate a 100Mbps link. It is a small (serial console only) PC with 6 Gb LAN"
@@ -1685,10 +1875,18 @@ msgstr "This step also enables systemd service and runs it."
msgid "This subsection only applies to LTS images, for Rolling images please jump to :ref:`live_installation`."
msgstr "This subsection only applies to LTS images, for Rolling images please jump to :ref:`live_installation`."
+#: ../../installation/secure-boot.rst:162
+msgid "Thos we close the door to load any malicious stuff after the image was assembled into the Kernel as module. You can of course disable this behavior on custom builds."
+msgstr "Thos we close the door to load any malicious stuff after the image was assembled into the Kernel as module. You can of course disable this behavior on custom builds."
+
#: ../../installation/cloud/gcp.rst:8
msgid "To deploy VyOS on GCP (Google Cloud Platform)"
msgstr "To deploy VyOS on GCP (Google Cloud Platform)"
+#: ../../installation/secure-boot.rst:15
+msgid "To generate a custom ISO with your own secure boot keys, run the following commands prior to your ISO image build:"
+msgstr "To generate a custom ISO with your own secure boot keys, run the following commands prior to your ISO image build:"
+
#: ../../installation/virtual/gns3.rst:153
msgid "To turn the template into a working VyOS machine, further steps are necessary as outlined below:"
msgstr "To turn the template into a working VyOS machine, further steps are necessary as outlined below:"
@@ -1701,15 +1899,23 @@ msgstr "To use Amazon CloudWatch Agent, configure it within the Amazon SSM Param
msgid "To use the `latest` option the \"system update-check url\" must be configured."
msgstr "To use the `latest` option the \"system update-check url\" must be configured."
+#: ../../installation/update.rst:81
+msgid "To use the `latest` option the \"system update-check url\" must be configured appropriately for the installed release."
+msgstr "To use the `latest` option the \"system update-check url\" must be configured appropriately for the installed release."
+
#: ../../installation/install.rst:248
msgid "To verify a VyOS image starting off with VyOS 1.3.0-rc6 you can run:"
msgstr "To verify a VyOS image starting off with VyOS 1.3.0-rc6 you can run:"
-#: ../../installation/install.rst:337
+#: ../../installation/secure-boot.rst:167
+msgid "Troubleshoot"
+msgstr "Troubleshoot"
+
+#: ../../installation/install.rst:338
msgid "Unlike general purpose Linux distributions, VyOS uses \"image installation\" that mimics the user experience of traditional hardware routers and allows keeping multiple VyOS versions installed simultaneously. This makes it possible to switch to a previous version if something breaks or miss-behaves after an image upgrade."
msgstr "Unlike general purpose Linux distributions, VyOS uses \"image installation\" that mimics the user experience of traditional hardware routers and allows keeping multiple VyOS versions installed simultaneously. This makes it possible to switch to a previous version if something breaks or miss-behaves after an image upgrade."
-#: ../../installation/install.rst:288
+#: ../../installation/install.rst:289
msgid "Unmount the USB drive. Replace X in the example below with the letter of your device and keep the asterisk (wildcard) to unmount all partitions."
msgstr "Unmount the USB drive. Replace X in the example below with the letter of your device and keep the asterisk (wildcard) to unmount all partitions."
@@ -1733,7 +1939,7 @@ msgstr "Use the defaults in the **Binary and format** window and click ``Next``.
msgid "Use the defaults in the **Qcow2 options** window and click ``Next``."
msgstr "Use the defaults in the **Qcow2 options** window and click ``Next``."
-#: ../../installation/vyos-on-baremetal.rst:205
+#: ../../installation/bare-metal.rst:205
msgid "Use the following command to adjust the :ref:`serial-console` settings:"
msgstr "Use the following command to adjust the :ref:`serial-console` settings:"
@@ -1753,27 +1959,35 @@ msgstr "VM setup"
msgid "Virt-manager"
msgstr "Virt-manager"
+#: ../../installation/virtual/index.rst:3
+msgid "Virtual Environments"
+msgstr "Virtual Environments"
+
#: ../../installation/virtual/proxmox.rst:54
msgid "Visit https://www.proxmox.com/en/ for more information about the download and installation of this hypervisor."
msgstr "Visit https://www.proxmox.com/en/ for more information about the download and installation of this hypervisor."
-#: ../../installation/install.rst:272
+#: ../../installation/install.rst:273
msgid "VyOS, as other GNU+Linux distributions, can be tested without installing it in your hard drive. **With your downloaded VyOS .iso file you can create a bootable USB drive that will let you boot into a fully functional VyOS system**. Once you have tested it, you can either decide to begin a :ref:`permanent_installation` in your hard drive or power your system off, remove the USB drive, and leave everything as it was."
msgstr "VyOS, as other GNU+Linux distributions, can be tested without installing it in your hard drive. **With your downloaded VyOS .iso file you can create a bootable USB drive that will let you boot into a fully functional VyOS system**. Once you have tested it, you can either decide to begin a :ref:`permanent_installation` in your hard drive or power your system off, remove the USB drive, and leave everything as it was."
-#: ../../installation/vyos-on-baremetal.rst:135
+#: ../../installation/bare-metal.rst:135
msgid "VyOS 1.2 (crux)"
msgstr "VyOS 1.2 (crux)"
-#: ../../installation/vyos-on-baremetal.rst:222
+#: ../../installation/bare-metal.rst:222
msgid "VyOS 1.2 (rolling)"
msgstr "VyOS 1.2 (rolling)"
+#: ../../installation/bare-metal.rst:507
+msgid "VyOS 1.4 (sagitta)"
+msgstr "VyOS 1.4 (sagitta)"
+
#: ../../installation/migrate-from-vyatta.rst:6
msgid "VyOS 1.x line aims to preserve backward compatibility and provide a safe upgrade path for existing Vyatta Core users. You may think of VyOS 1.0.0 as VC7.0."
msgstr "VyOS 1.x line aims to preserve backward compatibility and provide a safe upgrade path for existing Vyatta Core users. You may think of VyOS 1.0.0 as VC7.0."
-#: ../../installation/install.rst:438
+#: ../../installation/install.rst:439
msgid "VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)"
msgstr "VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)"
@@ -1785,7 +1999,7 @@ msgstr "VyOS VM configuration"
msgid "VyOS automatically associates the configuration to the image, so you don't need to worry about that. Each image has a unique copy of its configuration."
msgstr "VyOS automatically associates the configuration to the image, so you don't need to worry about that. Each image has a unique copy of its configuration."
-#: ../../installation/install.rst:429
+#: ../../installation/install.rst:430
msgid "VyOS can also be installed through PXE. This is a more complex installation method that allows deploying VyOS through the network."
msgstr "VyOS can also be installed through PXE. This is a more complex installation method that allows deploying VyOS through the network."
@@ -1793,7 +2007,7 @@ msgstr "VyOS can also be installed through PXE. This is a more complex installat
msgid "VyOS configuration is associated to each image, and **each image has a unique copy of its configuration**. This is different than a traditional network router where the configuration is shared across all images."
msgstr "VyOS configuration is associated to each image, and **each image has a unique copy of its configuration**. This is different than a traditional network router where the configuration is shared across all images."
-#: ../../installation/vyos-on-baremetal.rst:263
+#: ../../installation/bare-metal.rst:263
msgid "VyOS custom print"
msgstr "VyOS custom print"
@@ -1809,6 +2023,10 @@ msgstr "VyOS installation requires a downloaded VyOS .iso file. That file is a l
msgid "VyOS requires an IPv6-enabled docker network. Currently linux distributions do not enable docker IPv6 support by default. You can enable IPv6 support in two ways."
msgstr "VyOS requires an IPv6-enabled docker network. Currently linux distributions do not enable docker IPv6 support by default. You can enable IPv6 support in two ways."
+#: ../../installation/secure-boot.rst:82
+msgid "VyOS will now launch in UEFI secure boot mode. This can be double-checked by running either one of the commands:"
+msgstr "VyOS will now launch in UEFI secure boot mode. This can be double-checked by running either one of the commands:"
+
#: ../../installation/migrate-from-vyatta.rst:15
msgid "Vyatta Core 6.4 and earlier may have incompatibilities. In Vyatta 6.5 the \"modify\" firewall was removed and replaced with the ``set policy route`` command family, old configs can not be automatically converted. You will have to adapt it to post-6.5 Vyatta syntax manually."
msgstr "Vyatta Core 6.4 and earlier may have incompatibilities. In Vyatta 6.5 the \"modify\" firewall was removed and replaced with the ``set policy route`` command family, old configs can not be automatically converted. You will have to adapt it to post-6.5 Vyatta syntax manually."
@@ -1821,23 +2039,24 @@ msgstr "Vyatta Core releases from 6.5 to 6.6 should be 100% compatible."
msgid "Vyatta release compatibility"
msgstr "Vyatta release compatibility"
-#: ../../installation/vyos-on-baremetal.rst:122
+#: ../../installation/bare-metal.rst:122
+#: ../../installation/bare-metal.rst:665
msgid "WWAN"
msgstr "WWAN"
-#: ../../installation/install.rst:306
+#: ../../installation/install.rst:307
msgid "Wait until you get the outcome (bytes copied). Be patient, in some computers it might take more than one minute."
msgstr "Wait until you get the outcome (bytes copied). Be patient, in some computers it might take more than one minute."
-#: ../../installation/vyos-on-baremetal.rst:364
+#: ../../installation/bare-metal.rst:364
msgid "Warning the interface labels on my device are backwards; the left-most \"LAN4\" port is eth0 and the right-most \"LAN1\" port is eth3."
msgstr "Warning the interface labels on my device are backwards; the left-most \"LAN4\" port is eth0 and the right-most \"LAN1\" port is eth3."
-#: ../../installation/install.rst:536
+#: ../../installation/install.rst:537
msgid "We also need to provide the *filesystem.squashfs* file. That is a heavy file and TFTP is slow, so you could send it through HTTP to speed up the transfer. That is how it is done in our example, you can find that in the configuration file above."
msgstr "We also need to provide the *filesystem.squashfs* file. That is a heavy file and TFTP is slow, so you could send it through HTTP to speed up the transfer. That is how it is done in our example, you can find that in the configuration file above."
-#: ../../installation/install.rst:437
+#: ../../installation/install.rst:438
msgid "Webserver (HTTP) - optional, but we will use it to speed up installation"
msgstr "Webserver (HTTP) - optional, but we will use it to speed up installation"
@@ -1849,15 +2068,23 @@ msgstr "When prompted, answer \"yes\" to the question \"Do you want to store the
msgid "When the underlying ESXi host is approaching ~92% memory utilisation it will start the balloon process in a 'soft' state to start reclaiming memory from guest operating systems. This causes an artificial pressure using the vmmemctl driver on memory usage on the virtual guest. As VyOS by default does not have a swap file, this vmmemctl pressure is unable to force processes to move in memory data to the paging file, and blindly consumes memory forcing the virtual guest into a low memory state with no way to escape. The balloon can expand to 65% of guest allocated memory, so a VyOS guest running >35% of memory usage, can encounter an out of memory situation, and trigger the kernel oom_kill process. At this point a weighted lottery favouring memory hungry processes will be run with the unlucky winner being terminated by the kernel."
msgstr "When the underlying ESXi host is approaching ~92% memory utilisation it will start the balloon process in a 'soft' state to start reclaiming memory from guest operating systems. This causes an artificial pressure using the vmmemctl driver on memory usage on the virtual guest. As VyOS by default does not have a swap file, this vmmemctl pressure is unable to force processes to move in memory data to the paging file, and blindly consumes memory forcing the virtual guest into a low memory state with no way to escape. The balloon can expand to 65% of guest allocated memory, so a VyOS guest running >35% of memory usage, can encounter an out of memory situation, and trigger the kernel oom_kill process. At this point a weighted lottery favouring memory hungry processes will be run with the unlucky winner being terminated by the kernel."
-#: ../../installation/vyos-on-baremetal.rst:112
+#: ../../installation/secure-boot.rst:150
+msgid "Whenever our CI system builds a Kernel package and the required 3rd party modules, we will generate a temporary (ephemeral) public/private key-pair that's used for signing the modules. The public key portion is embedded into the Kernel binary to verify the loaded modules."
+msgstr "Whenever our CI system builds a Kernel package and the required 3rd party modules, we will generate a temporary (ephemeral) public/private key-pair that's used for signing the modules. The public key portion is embedded into the Kernel binary to verify the loaded modules."
+
+#: ../../installation/bare-metal.rst:112
msgid "WiFi"
msgstr "WiFi"
+#: ../../installation/secure-boot.rst:54
+msgid "With the next reboot, MOK Manager will automatically launch"
+msgstr "With the next reboot, MOK Manager will automatically launch"
+
#: ../../installation/install.rst:194
msgid "With the public key imported, the signature for the desired image needs to be downloaded."
msgstr "With the public key imported, the signature for the desired image needs to be downloaded."
-#: ../../installation/vyos-on-baremetal.rst:354
+#: ../../installation/bare-metal.rst:354
msgid "Write VyOS ISO to USB drive of some sort"
msgstr "Write VyOS ISO to USB drive of some sort"
@@ -1865,7 +2092,7 @@ msgstr "Write VyOS ISO to USB drive of some sort"
msgid "Write a name for your VM, for instance \"VyOS\", and click ``Next``."
msgstr "Write a name for your VM, for instance \"VyOS\", and click ``Next``."
-#: ../../installation/install.rst:296
+#: ../../installation/install.rst:297
msgid "Write the image (your VyOS .iso file) to the USB drive. Note that here you want to use the device name (e.g. /dev/sdb), not the partition name (e.g. /dev/sdb1)."
msgstr "Write the image (your VyOS .iso file) to the USB drive. Note that here you want to use the device name (e.g. /dev/sdb), not the partition name (e.g. /dev/sdb1)."
@@ -1881,10 +2108,14 @@ msgstr "You can execute ``docker stop vyos`` when you are finished with the cont
msgid "You can go back to your Vyatta install using the ``set system image default-boot`` command and selecting the your previous Vyatta Core image."
msgstr "You can go back to your Vyatta install using the ``set system image default-boot`` command and selecting the your previous Vyatta Core image."
-#: ../../installation/vyos-on-baremetal.rst:198
+#: ../../installation/bare-metal.rst:198
msgid "You can now proceed with a regular image installation as described in :ref:`installation`."
msgstr "You can now proceed with a regular image installation as described in :ref:`installation`."
+#: ../../installation/secure-boot.rst:64
+msgid "You can now view the key to be installed and ``continue`` with the Key installation"
+msgstr "You can now view the key to be installed and ``continue`` with the Key installation"
+
#: ../../installation/update.rst:75
msgid "You can use ``latest`` option. It loads the latest available Rolling release."
msgstr "You can use ``latest`` option. It loads the latest available Rolling release."
@@ -1893,7 +2124,7 @@ msgstr "You can use ``latest`` option. It loads the latest available Rolling rel
msgid "You just use ``add system image``, as if it was a new VC release (see :ref:`update_vyos` for additional information). The only thing you want to do is to verify the new images digital signature. You will have to add the public key manually once as it is not shipped the first time."
msgstr "You just use ``add system image``, as if it was a new VC release (see :ref:`update_vyos` for additional information). The only thing you want to do is to verify the new images digital signature. You will have to add the public key manually once as it is not shipped the first time."
-#: ../../installation/vyos-on-baremetal.rst:377
+#: ../../installation/bare-metal.rst:377
msgid "You may have to add your own RAM and HDD/SSD. There is no VGA connector. But Acrosser provides a DB25 adapter for the VGA header on the motherboard (not used)."
msgstr "You may have to add your own RAM and HDD/SSD. There is no VGA connector. But Acrosser provides a DB25 adapter for the VGA header on the motherboard (not used)."
@@ -1901,7 +2132,7 @@ msgstr "You may have to add your own RAM and HDD/SSD. There is no VGA connector.
msgid "You probably will want to accept to copy the .iso file to your default image directory when you are asked."
msgstr "You probably will want to accept to copy the .iso file to your default image directory when you are asked."
-#: ../../installation/install.rst:423
+#: ../../installation/install.rst:424
msgid "You will boot now into a permanent VyOS system."
msgstr "You will boot now into a permanent VyOS system."
@@ -1913,11 +2144,11 @@ msgstr ".ova files are available for supporting users, and a VyOS can also be st
msgid ":ref:`Install VyOS <installation>` as normal (that is, using the ``install image`` command)."
msgstr ":ref:`Install VyOS <installation>` as normal (that is, using the ``install image`` command)."
-#: ../../installation/install.rst:435
+#: ../../installation/install.rst:436
msgid ":ref:`dhcp-server`"
msgstr ":ref:`dhcp-server`"
-#: ../../installation/install.rst:436
+#: ../../installation/install.rst:437
msgid ":ref:`tftp-server`"
msgstr ":ref:`tftp-server`"
@@ -1925,7 +2156,7 @@ msgstr ":ref:`tftp-server`"
msgid ":vytask:`T2108` switched the validation system to prefer minisign over GPG keys."
msgstr ":vytask:`T2108` switched the validation system to prefer minisign over GPG keys."
-#: ../../installation/vyos-on-baremetal.rst:349
+#: ../../installation/bare-metal.rst:349
msgid "`Manufacturer product page <http://www.inctel.com.cn/product/detail/338.html>`_."
msgstr "`Manufacturer product page <http://www.inctel.com.cn/product/detail/338.html>`_."
@@ -1933,7 +2164,11 @@ msgstr "`Manufacturer product page <http://www.inctel.com.cn/product/detail/338.
msgid "``gpg --recv-keys FD220285A0FE6D7E``"
msgstr "``gpg --recv-keys FD220285A0FE6D7E``"
-#: ../../installation/install.rst:593
+#: ../../installation/secure-boot.rst:160
+msgid "``insmod: ERROR: could not insert module malicious.ko: Key was rejected by service``"
+msgstr "``insmod: ERROR: could not insert module malicious.ko: Key was rejected by service``"
+
+#: ../../installation/install.rst:594
msgid "`console=ttyS0,115200`"
msgstr "`console=ttyS0,115200`"
@@ -1961,11 +2196,19 @@ msgstr "https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/install-C
msgid "https://muralidba.blogspot.com/2018/03/how-does-linux-out-of-memory-oom-killer.html"
msgstr "https://muralidba.blogspot.com/2018/03/how-does-linux-out-of-memory-oom-killer.html"
+#: ../../installation/secure-boot.rst:148
+msgid "https://patchwork.kernel.org/project/linux-integrity/patch/20210218220011.67625-5-nayna@linux.ibm.com/"
+msgstr "https://patchwork.kernel.org/project/linux-integrity/patch/20210218220011.67625-5-nayna@linux.ibm.com/"
+
#: ../../installation/install.rst:116
msgid "https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E"
msgstr "https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E"
#: ../../installation/update.rst:86
+msgid "https://raw.githubusercontent.com/vyos/vyos-nightly-build/refs/heads/current/version.json"
+msgstr "https://raw.githubusercontent.com/vyos/vyos-nightly-build/refs/heads/current/version.json"
+
+#: ../../installation/update.rst:91
msgid "https://vyos.net/get/nightly-builds/"
msgstr "https://vyos.net/get/nightly-builds/"
@@ -1981,6 +2224,6 @@ msgstr "https://www.oracle.com/cloud/"
msgid "ly-builds/releases/download/1.4-rolling-202308240020/vyos-1.4-rolling-202308240020-amd64.iso"
msgstr "ly-builds/releases/download/1.4-rolling-202308240020/vyos-1.4-rolling-202308240020-amd64.iso"
-#: ../../installation/install.rst:595
+#: ../../installation/install.rst:596
msgid "option, and type CTRL-X to boot."
msgstr "option, and type CTRL-X to boot."