First step: Installing Perun slave scripts
First step before configuring a target machine with specific propagation is to install Perun slave scripts. You need to install slave scripts on your target machine and authorise access to the machine. All installed scripts are then located in /opt/perun/bin/.
Choose what type of Linux distribution machine is running.
DEB based systems (like Ubuntu or Debian)
DEB repository: https://repo.metacentrum.cz
On 13th November 2025 we have updated our repository GPG signing key! It now contains both old key (valid until 2026-04-23) and new key (valid until 2035-11-09). You can get new key from the same URL: https://repo.metacentrum.cz/key.asc
1
DEB packages are signed, and the signatures must be verified. In order to verify the signatures, you must add repo’s PGP key to the trusted keys for the APT tool. Put the content of the URL https://repo.metacentrum.cz/key.asc into the file /etc/apt/keyrings/metacentrum.asc. It can be done using the following commands:
mkdir /etc/apt/keyrings
wget -O /etc/apt/keyrings/metacentrum.asc https://repo.metacentrum.cz/key.asc2
Create file /etc/apt/sources.list.d/meta-repo.sources with the following content:
Architectures: amd64
Components: main pilot
X-Repolib-Name: meta_repo
Signed-By: /etc/apt/keyrings/metacentrum.asc
Suites: all
Types: deb
URIs: https://repo.metacentrum.cz/3
Load the list of available DEB packages:
apt update4
Install perun-slave-base package and then packages for the services you require by running apt install perun-slave-process-[service-name].
An example for a propagation of Unix users, creating their home folders and setting their SSH keys:
apt install perun-slave-base
apt install perun-slave-process-fs-home
apt install perun-slave-process-passwd
apt install perun-slave-process-sshkeysYou may also install all packages at once with:
apt install perun-slave-full
RPM based systems (like RedHat Linux or CentOS)
On 9th October 2024 we have migrated our RPM repository from https://homeproj.cesnet.cz/rpm/perunv3/stable/noarch/ to https://repo.cerit-sc.cz/el-perun/noarch/. Repository uses new GPG signing key!
On 15th December 2024 we have updated our repository GPG signing key! New public key is available at: https://repo.cerit-sc.cz/el-perun/repo.cerit-sc.cz.gpg.pub
For RPM based systems (like RedHat Linux or CentOS) there is RPM repository https://repo.cerit-sc.cz/el-perun/
1
Create file /etc/yum.repos.d/perun.repo with the following content:
[Perun]
name=Perun IdM Slave Scripts
baseurl=https://repo.cerit-sc.cz/el-perun/noarch/
enabled=1
gpgcheck=1
gpgkey=https://repo.cerit-sc.cz/el-perun/repo.cerit-sc.cz.gpg.pubDuring installation, you should check whether GPG key's fingerprint matches, dnf should present you this when importing the key:
Importing GPG key 0xA37D0378:
Userid : "support@cerit-sc.cz <support@cerit-sc.cz>"
Fingerprint: E87F 0C7F B638 150D BE37 D69A 23CB D011 A37D 0378
From : https://repo.cerit-sc.cz/el-perun/repo.cerit-sc.cz.gpg.pub2
Load the list of available RPM packages:
dnf makecache --repo Perun3
Install packages for the services you require by running dnf install perun-slave-process-[service-name].
An example for a propagation of Unix users, creating their home folders and setting their SSH keys:
dnf install perun-slave-process-fs-home
dnf install perun-slave-process-passwd
dnf install perun-slave-process-sshkeysYou may also install all packages at once with:
dnf install perun-slave-full