More notes I added at some point

doc/uk-image.txt

@@ -56,16 +56,20 @@ B. While running Linux (single user):
   Copy the correct file over from /usr/share/zoneinfo
 
 * /etc/ssh/ssh_host*
-  Generate new host keys.  Actually, copy from an existing image.
+  Generate new host keys.  Actually, copy from an existing image if
+  available (i.e., we use a single host key across all images and OSes
+  within a testbed).
 
 * /etc/testbed/shadow
   Change the root password, this file will get installed by prepare.
 
 * /etc/testbed/{client,emulab}.pem
-  Generate a new one.  From Leigh:
-      Just need to cd into the ssl directory and do a gmake
-      (on their boss of course!) then a gmake boss-installX.
-      The images need emulab.pem and client.pem from that directory.
+  Generate new ones.  This needs to be done on the site's boss node.
+  Go into the build tree "ssl" subdirectory and edit the *.cnf.in files
+  to update the "[ req_distinguished_name ]" section with the appropriate
+  country, state, city, etc.  Then do a "gmake boss-installX" which generates
+  the certs and installs the server-side.  Grab the emulab.pem and client.pem
+  from that directory to put in the images.
 
 * Remount root filesystem read-only (IMPORTANT!)
   cd /