Difference between pages "Virginia Tech Wifi (OLD)" and "Arch"

From the Linux and Unix Users Group at Virginia Teck Wiki
(Difference between pages)
Jump to: navigation, search
imported>Mutantmonkey
 
imported>Ram
(Add criticism of the lack of package signing.)
 
Line 1: Line 1:
Since the fall of 2008, there have been two wireless networks on campus. One network, called '''VT-Wireless''', encrypts all traffic and is secured with EAP-TLS or PEAP-MSCHAPv2. The other network, [[VT_WLAN]], is an unencrypted, captive portal wireless network. While connections to VT-Wireless are secure by default, and require no user authentication once set up, the EAP-TLS setup has a number of steps. In contrast, setup for VT_WLAN network is negligible, but you will be required to manually authenticate each time you connect (although this can be scripted), and your traffic will be readable to everyone.
+
== Introduction to Arch Linux ==
 +
Linux users tend to become fan boys of their favorite flavor of Linux. [[Ubuntu]], [[OpenSUSE]] and [[Fedora]] tend to lead the distributions lists ([http://www.distrowatch.com/ Distro Watch]), because of their ease of installation and use. The other type of distribution targets users who desire a highly customized and fine-tuned system, an example of which would be [[Gentoo]]. While both extremes have their pros and cons in terms of customizability and ease of use, neither group targets users who desire easily customized systems that expose the lower-level workings of Linux. Arch Linux fills this void with a distribution that uses the bare-bones approach of Gentoo, but without requiring every package be compiled from source. It also shies away from GUI-based configuration tools in favor of directly editing text files, although GUI-based configuration tools do exist. This makes Arch an excellent distribution for older or low-end hardware. Although the installation lacks the glitz of Ubuntu or OpenSUSE, it still detects nearly all modern hardware and automatically installs drivers. [[Mirrors|Virginia Tech's mirroring]] of the Arch repositories also benefits VT Arch users, because it ensures fast installs and updates.
  
== Select a connection method ==
+
== When to Use Arch Linux ==
 +
Arch Linux targets enthusiasts who want to better understand the
 +
Linux Operating System. It maintains a level of abstraction above
 +
Gentoo and Linux From Scratch by reducing the amount of manual
 +
configuration. Also, the distribution excels on lower-end machines,
 +
because it installs only the packages required to boot and install
 +
additional software. It does contain excellent package management
 +
software in the form of ''pacman'' archives, which are officially
 +
supported packages and works similar to Debian's apt-get program.
 +
Community maintained packages for more esoteric software can be found
 +
in Arch's AUR repository.
 +
The distributions command-line installation limits its appeal
 +
for first-time Linux users, so this is not a distribution to use when
 +
trying Linux. Also, there is a slightly steeper learning curve in
 +
understanding the package management, which could deter users used to
 +
Ubuntu's GUI-based package management. That stated, Arch Linux is
 +
overall an excellent, easy-to-use distribution, and could be
 +
recommended to any Linux user who understands the command line.
 +
<br />
  
{| class="wikitable"
+
== Getting Started with Arch Linux ==
|-
+
You can find documentation and mirrors of Arch Linux on their homepage at [http://www.archlinux.org/ http://www.archlinux.org], although using their local mirror at [http://mirror.cs.vt.edu/pub/ArchLinux/iso Virginia Tech]
! Network
+
would be much faster. The ftp-based installation is recommended as it
! Authentication
+
installs the most up-to-date version of Arch with all the updates. Be
! Encrypted
+
sure to remove the default mirror if you choose to install Arch Linux,
! Setup
+
as it caps upload speeds.
! Support
+
Following their [http://wiki.archlinux.org/index.php/Beginners_Guide "Beginners Guide"]
|-
+
painlessly walks you through the process of setting up your system and
| VT-Wireless
+
getting into X. There are also more targeted installation guides that
| Strong ([[EAP-TLS]])
+
can be found through Google for specialized hardware, such as the Eee
| Yes
+
PC. Because Arch Linux uses a command-line based installation, it is
| Involved
+
highly recommended to either have another computer nearby or print out
| Many devices (Laptops and [[Android]] devices)
+
a copy of the [http://wiki.archlinux.org/index.php/Beginners_Guide "Beginners Guide"].
|-
+
<br />
| VT-Wireless
 
| None to Medium ([[PEAP-MSCHAPv2]])
 
| Yes
 
| Simple
 
| Most devices
 
|-
 
| [[VT_WLAN]]
 
| Weak ([[w:Captive portal|Captive portal]])
 
| No
 
| Negligible
 
| All devices
 
|}
 
  
The best option is [[EAP-TLS]], which provides strong, two-way authentication to ensure that neither you or the authentication server can be impersonated. Unfortunately, setting up EAP-TLS can be somewhat involved because it requires a certificate to be installed on the device.
 
  
[[VT_WLAN]] is an unsecured captive portal wireless network. It requires no set up at all, but you must log in with your PID and password every time you connect. Since it is not secure, it is simple for any and all unencrypted traffic on the network to be sniffed by anyone within range and is also vulnerable to deauthentication attacks. Its use is discouraged in most cases.
+
== Arch Linux at Virginia Tech ==
 +
[[Arch Tablet Functionality]] - Configuring your tablet PC [http://www.eng.vt.edu/academics/comp_require.php required] by the Engineering Department.
  
{| class='wikitable' width='40%'
+
== Criticism ==
! colspan="2" | Select a method for setup instructions
+
Arch does not currently support package signing.[https://bugs.archlinux.org/task/5331] As a result of this, an insecure mirror (including any mirrors upstream of the one you are synching from) or a untrusted connection (such as a man in the middle attack between you and the mirror, or any hops between mirrors) could result in your system's security being compromised. There has been some work towards adding package signing functionality to Arch[http://projects.archlinux.org/users/allan/pacman.git/log/?h=gpg], however there have been claims that the developers are not concerned with the security implications and are reluctant to accept improvements from outside of the core team[http://igurublog.wordpress.com/2011/02/19/archs-dirty-little-notso-secret/].
|-
 
| style="font-size:1.5em;text-align:center" width='50%' | [[EAP-TLS]]
 
| style="font-size:1.5em;text-align:center" width='50%' | [[PEAP-MSCHAPv2]]
 
|}
 
  
==Network Information Sources==
+
[[Category:Linux distributions]]
* [http://www.cns.vt.edu/html/wireless/wlan/index.html Communications Network Services: Wireless LAN]
 
* [http://computing.vt.edu/internet_and_web/internet_access/ipaddresses.html Virginia Tech IP Addresses]
 
 
 
[[Category:Howtos]]
 
[[Category:Campus computing resources]]
 
 
[[Category:Round 2 migration]]
 
[[Category:Round 2 migration]]

Revision as of 20:16, 10 March 2011

Introduction to Arch Linux

Linux users tend to become fan boys of their favorite flavor of Linux. Ubuntu, OpenSUSE and Fedora tend to lead the distributions lists (Distro Watch), because of their ease of installation and use. The other type of distribution targets users who desire a highly customized and fine-tuned system, an example of which would be Gentoo. While both extremes have their pros and cons in terms of customizability and ease of use, neither group targets users who desire easily customized systems that expose the lower-level workings of Linux. Arch Linux fills this void with a distribution that uses the bare-bones approach of Gentoo, but without requiring every package be compiled from source. It also shies away from GUI-based configuration tools in favor of directly editing text files, although GUI-based configuration tools do exist. This makes Arch an excellent distribution for older or low-end hardware. Although the installation lacks the glitz of Ubuntu or OpenSUSE, it still detects nearly all modern hardware and automatically installs drivers. Virginia Tech's mirroring of the Arch repositories also benefits VT Arch users, because it ensures fast installs and updates.

When to Use Arch Linux

Arch Linux targets enthusiasts who want to better understand the Linux Operating System. It maintains a level of abstraction above Gentoo and Linux From Scratch by reducing the amount of manual configuration. Also, the distribution excels on lower-end machines, because it installs only the packages required to boot and install additional software. It does contain excellent package management software in the form of pacman archives, which are officially supported packages and works similar to Debian's apt-get program. Community maintained packages for more esoteric software can be found in Arch's AUR repository. The distributions command-line installation limits its appeal for first-time Linux users, so this is not a distribution to use when trying Linux. Also, there is a slightly steeper learning curve in understanding the package management, which could deter users used to Ubuntu's GUI-based package management. That stated, Arch Linux is overall an excellent, easy-to-use distribution, and could be recommended to any Linux user who understands the command line.

Getting Started with Arch Linux

You can find documentation and mirrors of Arch Linux on their homepage at http://www.archlinux.org, although using their local mirror at Virginia Tech would be much faster. The ftp-based installation is recommended as it installs the most up-to-date version of Arch with all the updates. Be sure to remove the default mirror if you choose to install Arch Linux, as it caps upload speeds. Following their "Beginners Guide" painlessly walks you through the process of setting up your system and getting into X. There are also more targeted installation guides that can be found through Google for specialized hardware, such as the Eee PC. Because Arch Linux uses a command-line based installation, it is highly recommended to either have another computer nearby or print out a copy of the "Beginners Guide".


Arch Linux at Virginia Tech

Arch Tablet Functionality - Configuring your tablet PC required by the Engineering Department.

Criticism

Arch does not currently support package signing.[1] As a result of this, an insecure mirror (including any mirrors upstream of the one you are synching from) or a untrusted connection (such as a man in the middle attack between you and the mirror, or any hops between mirrors) could result in your system's security being compromised. There has been some work towards adding package signing functionality to Arch[2], however there have been claims that the developers are not concerned with the security implications and are reluctant to accept improvements from outside of the core team[3].