Skip to content

added some info on HUNT cloud deployment - #33

Merged
vbabenko97 merged 4 commits into
mainfrom
hunt
Sep 18, 2026
Merged

vbabenko97 merged 4 commits into
mainfrom
hunt

Conversation

@espenhgn

Copy link
Copy Markdown
Collaborator

No description provided.

@espenhgn
espenhgn requested a review from vbabenko97 September 18, 2026 11:40
… with the site scripts

The README was rewritten as a landing page in #34, so the block no longer
had a place there. It is now section 4 of docs/cloud_demo.md, linked from
the README's "Adding a TRE" details, with these corrections:

- start the site with scripts/start_site.sh, which also runs the mock TRE
  the executor queries; the bare sub_start.sh path in the snippet pointed
  at startup/startup/sub_start.sh
- a kit packed for an unreachable name is fixed by start_site.sh's third
  argument, not by editing /etc/hosts for a server name the project does
  not use
- kits move through kit_export/kit_import as elsewhere in the runbook; a
  Drive download stays as the fallback, with the private-key caveat
- literal server and HUNT addresses replaced by <DNS> and "egress address";
  the firewall sentence now states the direction (inbound to the server's
  8002 from HUNT)
- typo "modiy"

Sections 4 and 5 of the runbook renumbered to 5 and 6; nothing linked to
their anchors.
@vbabenko97

Copy link
Copy Markdown
Collaborator

I merged current main and moved the HUNT Cloud notes into docs/cloud_demo.md as section 4 (#34 rewrote the README as a landing page, which is what the conflict was), with a one-line pointer from the README's "Adding a TRE" details. While moving it I aligned the steps with the runbook's site scripts:

  • scripts/start_site.sh hunt .remote/hunt starts the FLARE client and the mock TRE the executor queries; the original snippet ran ./startup/sub_start.sh from inside startup/, which does not exist there. sub_start.sh --once is kept as the client-only variant.
  • the /etc/hosts entry is replaced by start_site.sh's third argument, which patches the server address in a copy of the kit (the project's server is flare-server, not server1, and kits from bootstrap_server.sh dial the public DNS directly).
  • kits go through kit_export.sh / kit_import.sh like the other sites; the Drive download stays as the fallback with a note that the archive holds the client's private key.
  • the two literal IPs became <DNS> and "HUNT Cloud's egress address", and the firewall sentence now states the direction.

Three things only you can confirm, since I have not run anything on HUNT:

  1. Can the lab clone GitHub and pip install the checkout? The kit holds only certificates, so the site needs the repository for the mock TRE and the executor.
  2. Is 129.241.176.121 HUNT Cloud's egress address? If so it belongs in the network-opening text as such.
  3. Did your run start the mock TRE as well, or only the FLARE client? If only the client, the jobs would have had nothing to query, and the notes should say what was verified.

Happy to adjust if any of this misreads the setup.

@vbabenko97
vbabenko97 merged commit abedb97 into main Sep 18, 2026
2 checks passed
@espenhgn
espenhgn deleted the hunt branch September 20, 2026 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants