Skip to content

Conversation

@markocto
Copy link
Contributor

@markocto markocto commented Oct 6, 2025

A set of 3 scripts allowing the user to stop trusting an old thumbprint / certificate and start trusting a new thumbprint / certificate.

Scripts for both Listening and Polling Linux Tentacles.

A set of 3 scripts allowing the user to stop trusting an old thumbprint / certificate and start trusting a new thumbprint / certificate.

Scripts for both Listening and Polling Linux Tentacles.

# Stop trusting the old certificate
echo "Stop trusting the old Octopus Server certificate..."
sudo ./Tentacle configure --instance Tentacle --remove-trust <old-thumbprint>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should the instance name Tentacle be a variable? Not all tentacles use the default named instance. They may have another name for it, meaning this and subsequent commands would fail

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good call, I'll update the script accordingly, thank you!


# Trust new Octopus Server thumbprint
echo "Trust the new Octopus Server certificate / thumbprint..."
sudo ./Tentacle configure --trust="<new-octopus-server-thumbprint>"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this command include the --instance parameter with a variable supplied with the name.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This documentation appears to show support for --instance. I suspect that the doc you linked to was assuming the default instance (called Tentacle). It depends how complete you want this script to be I guess?


# Trust new Octopus Server thumbprint
echo "Trust the new Octopus Server certificate / thumbprint..."
sudo ./Tentacle update-trust --oldThumbprint "1111111111111111111111111111111111111111" --newThumbprint "1234567890123456789012345678901234567890"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this command include the --instance parameter with a variable supplied with the name.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This documentation appears to show support for --instance. I suspect that the doc you linked to was assuming the default instance (called Tentacle). It depends how complete you want this script to be I guess?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants