GNU General Public License
v3 or later.
Mandos is a system for allowing servers with encrypted root file systems to reboot unattended and/or remotely. See the manual for more information, including an FAQ list.
Mandos is Free Software, licensed using
the GNU General Public License
v3 or later.
(The Halls of Mandos is, in the fictional world of J. R. R. Tolkien, where the spirits of dead elves would go to be judged and possibly reincarnated. Similarly, the Mandos system allows “dead” servers to request reincarnation, which can be either denied or granted by the Mandos server.)
Mandos is feature-complete; that is, it solves the problem it was created to solve. It has been included in Ubuntu ever since the Ubuntu Karmic release of October 2009, and in Debian since the Debian 6.0 “squeeze” release of February 2011. The latest versions of Mandos are uploaded to Debian unstable.
For future plans, see the TODO file.
![[Key and communication overview]](mandos/Mandos_Keys.png)
![[Plugin system overview]](mandos/Mandos_Overview.png)
There is a mailing list “mandos-dev”. Subscribe or read its archives at https://mail.recompile.se/cgi-bin/mailman/listinfo/mandos-dev
The current maintainers can be reached at mandos@recompile.seMandos is available directly in Debian unstable and in the Ubuntu “universe” component, so to get Mandos installed in those distributions you use whatever method you normally use to select and install software packages for that distribution. There is no need to download anything from here, unless you want the latest version.
Add these lines to a new file, named /etc/apt/sources.list.d/mandos.sources
# Mandos - <https://www.recompile.se/mandos> Types: deb deb-src URIs: https://ftp.recompile.se/pub/mandos/debian Suites: bookworm-backports Components: main Signed-By: /etc/apt/keyrings/mandos.pgp
Then, do this to download the key used to sign the packages
su -c "mkdir --parents --mode=0755 /etc/apt/keyrings"
su -c "wget --timestamping --directory-prefix=/etc/apt/keyrings https://www.recompile.se/mandos/mandos.pgp"
su -c "chmod a+r /etc/apt/keyrings/mandos.pgp"
(The key should have the fingerprint “153A 37F1 0BBA 0435 987F 2C4A 7223 2973 CA34 C2C4”.)
Add these lines to a new file, named /etc/apt/sources.list.d/mandos.sources
# Mandos - <https://www.recompile.se/mandos> Types: deb deb-src URIs: https://ftp.recompile.se/pub/mandos/debian Suites: bullseye-backports Components: main Signed-By: /etc/apt/keyrings/mandos.pgp
(For the key file, see stable/bookworm/12 above.)
Add these lines to a new file, named /etc/apt/sources.list.d/mandos.sources
# Mandos - <https://www.recompile.se/mandos> Types: deb deb-src URIs: https://ftp.recompile.se/pub/mandos/debian Suites: buster-backports Components: main Signed-By: /etc/apt/keyrings/mandos.pgp
(For the key file, see stable/bookworm/12 above.)
Add these lines to a new file, named /etc/apt/sources.list.d/mandos.sources
# Mandos - <https://www.recompile.se/mandos> Types: deb deb-src URIs: http://ftp.recompile.se/pub/mandos/debian Suites: stretch-backports Components: main Signed-By: /etc/apt/keyrings/mandos.pgp
(For the key file, see stable/bookworm/12 above.)
Known bugs and planned features are kept in the TODO file.
Check out the source code from the repository (requires the Breezy (brz) version control system, package name “brz”.):
brz branch ftp://anonymous@ftp.recompile.se/pub/mandos/trunk mandos
Build the Debian package (requires the brz-debian Breezy plugin package, package name “brz-debian”):
cd mandos brz builddeb --builder='debuild -i -us -uc -b'
The .deb files should now be built and can be found in the parent directory.
After installing a package, follow the instructions in the file “/usr/share/doc/package-name/README.Debian”.