From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.1 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE autolearn=ham
	autolearn_force=no version=3.4.4
Received: (qmail 23899 invoked from network); 2 Dec 2020 20:15:30 -0000
Received: from ewsd.inri.net (107.191.116.128)
  by inbox.vuxu.org with ESMTPUTF8; 2 Dec 2020 20:15:30 -0000
Received: from mail-yb1-f170.google.com ([209.85.219.170]) by ewsd; Wed Dec  2 15:13:22 -0500 2020
Received: by mail-yb1-f170.google.com with SMTP id k65so2787285ybk.5
        for <9front@9front.org>; Wed, 02 Dec 2020 12:13:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:references:in-reply-to:from:date:message-id:subject:to
         :content-transfer-encoding;
        bh=kFsRx7TvRhZDWD3SX6Bb94ylk7ygp2eMcz4l1RF0QoE=;
        b=llNJoiT4TNV0vEIbUcx3+Dj/zmH/HH05LfF/vF88UIIxAhxLuy3H7XOD+MvE4usba1
         Wm96t/gZH/ZM4dzBTcCweRaWDMQPpOqsRUttMuWZHhhDITeY7mnwgys5pZeuBVj6uTPY
         ywd0ojy+y766JRvGqbAo/HIh6tBEGnCpTzNwiIoLFUWEVZXH72Qi/Bhhj8F8kdMfOJSZ
         9UGARf0Tk7BivJjudCPSfKcMNTZ7zCXrGMK7TyLz+JgRrNVbXQEqHcxVfvXtWAoS+Le6
         4nTEnf1xvO/zbm4JvbWyWqhdcNp/swicbWySNQXwopoZVdi2asbB1mu2MhBAx2qhrnml
         M0qw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:references:in-reply-to:from:date
         :message-id:subject:to:content-transfer-encoding;
        bh=kFsRx7TvRhZDWD3SX6Bb94ylk7ygp2eMcz4l1RF0QoE=;
        b=H6Lx1VTSd4qsbYnF8b6nGpr7xkyGizp+PEdOtN7aMZki3/JlA4ADn1IlbryvrymlUG
         QDJcmg1Whq2lxlGAU+ZVM9h7AW2zeUBvcmDBrViMhEBNG64cArss8G5D7sKDDjmAy3dO
         H8gKmcYoNX9Wo2Ns7Qm7vRu8ug96J4j5Bi00a3mqUll3mDHBwLDy3vOvz8Hvyay3OD9D
         mQmfVX1U26NgYJNWkrgpXwkIiPqkw1Yjp6UxE22BSJxcH+EUX59zrTXPJggayGVDHQu9
         xmsB2qsmdk35Ai+OXOTLZi39e0+b38+4rA2SLz6b96+S9Mfy8WtMMB/YLCZxdr5KHj6c
         r3xw==
X-Gm-Message-State: AOAM532k5krNA3y0aHtjAB+AwqFKZYFZYjOudfRkAJyht058I0ZtjNBP
	gLMLX4SzeHiBiifSlzWZUutMamHQAU/5Dx8G+u80gCqL3+Y=
X-Google-Smtp-Source: ABdhPJxRjj4Upl4kU/kUACN5kCLDxlXNBMIjL8rhKiIDN5AzfG/z9WSbaS2hLwHOiN4CpWRTRD/q3dblCUVspBIidGk=
X-Received: by 2002:a25:6951:: with SMTP id e78mr6759492ybc.42.1606939993560;
 Wed, 02 Dec 2020 12:13:13 -0800 (PST)
MIME-Version: 1.0
References: <F3D9F1D5-4483-44A1-91F5-03A159A87C83@me.com> <CAFSF3XOCNLa8D8cQqoG=cRTw1M1NHLh2f+pggYE5C0k+qp4_oA@mail.gmail.com>
 <98CB8CF6-6399-4A0D-B9C5-F01672F230E7@me.com> <8B248954-6CF0-49FD-9AC1-CA06D8070347@me.com>
In-Reply-To: <8B248954-6CF0-49FD-9AC1-CA06D8070347@me.com>
From: Silas McCroskey <inkswinc@gmail.com>
Date: Wed, 2 Dec 2020 12:13:02 -0800
Message-ID: <CAHjwAuwbv=1cveAX-4bcAqL+C600SwU2UZKn1ANwBu1NMgDKPw@mail.gmail.com>
To: 9front@9front.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: module software cloud singleton-based backend 
Subject: Re: [9front] possible file server setup
Reply-To: 9front@9front.org
Precedence: bulk

> I was wondering wether it is possible to have a separate auth server that=
 TCP/PXE boots from the fileserver. It looks like the idiomatic way on one =
end, a =E2=80=9Cchicken and egg=E2=80=9D problem on the other!

you can auth to another machine without using an auth server as long
as you're authing as the server's hostowner.

You can use this trick to bring the auth server up second via PXE
(with nvram on a USB stick or something to make it automatic, if
desired) and then use the auth server for everything else.

I don't know how common this is... I'm pretty sure I did it with VMs a
while back, but on hardware I've always run combined file + auth.

- sam-d