This file documents how to install a fresh ubuntu image on a CaC node. The ubuntu image is taken directly from ubuntu.com. However, they only provide images over http (not https).

It also documents how to set up full-disk encryption with remote unlocking via ssh.

I used several good references to develop this set of instructions. They are listed at the bottom of the page.

I would also note that none of this material is particularly CaC specific. Rather, the approach will apply to all modern Ubuntu server installations.

Install a fresh Ubuntu image

1. Get the mini.iso for the desired distribution:

   wget -c "http://archive.ubuntu.com/ubuntu/dists/<desired_dist>/main/installer-amd64/current/images/netboot/mini.iso"

   (here <desired_dist> is e.g. yakkety)

2. Mount the mini.iso as a loopback on your local system.

   sudo mount -o loop mini.iso /mnt

3. Copy /mnt/linux and /mnt/initrd.gz to a webserver someplace.

   cp /mnt/linux /var/www/linux
   cp /mnt/initrd.gz /var/www/initrd.gz

4. On the CaC node (built according to standard procedures), download the linux and initrd.gz files to the /boot partition.

   wget -c...