New machine setup - Revision history

Ardumont at 08:27, 14 June 2018

2018-06-14T08:27:51Z

← Older revision		Revision as of 08:27, 14 June 2018
Line 44:		Line 44:
	The parenthesis denotes optional scheme.		The parenthesis denotes optional scheme.

	= Modus operandi =		== Modus operandi ==
	The modus operandi is as follows:		The modus operandi is as follows:

Line 57:		Line 57:
	* run puppet agent on the dns node		* run puppet agent on the dns node

	= Example with azure =		== Example with azure ==
	First, Install [https://forge.softwareheritage.org/diffusion/SPRE/browse/master/azure/README.md$4 azure's requirements].		First, Install [https://forge.softwareheritage.org/diffusion/SPRE/browse/master/azure/README.md$4 azure's requirements].

Ardumont: /* Modus operandi */

2018-06-14T08:23:22Z

Modus operandi

← Older revision		Revision as of 08:23, 14 June 2018
Line 44:		Line 44:
	The parenthesis denotes optional scheme.		The parenthesis denotes optional scheme.

	== Modus operandi ==		= Modus operandi =
	The modus operandi is as follows:		The modus operandi is as follows:

	* ~~install pre-~~requisite as per ~~infra (cf. dedicated~~ infra/cloud resources)		* Install infra's requisite dependencies (read per infra/cloud resources)

	* provision a vm from the dedicated infrastructure cloud provider		* provision a vm from the dedicated infrastructure cloud provider

Ardumont: /* Example with azure */

2018-06-14T08:22:42Z

Example with azure

← Older revision		Revision as of 08:22, 14 June 2018
Line 57:		Line 57:
	* run puppet agent on the dns node		* run puppet agent on the dns node

	== Example with azure ==		= Example with azure =
			First, Install [https://forge.softwareheritage.org/diffusion/SPRE/browse/master/azure/README.md$4 azure's requirements].

	cd /path/to/sysadm-provisioning		cd /path/to/sysadm-provisioning
	# historic implementation detail (really use the following user)		# historic implementation detail (really use the following user)

Ardumont: /* Modus operandi */

2018-06-14T08:20:13Z

Modus operandi

← Older revision		Revision as of 08:20, 14 June 2018
Line 46:		Line 46:
	== Modus operandi ==		== Modus operandi ==
	The modus operandi is as follows:		The modus operandi is as follows:

			* install pre-requisite as per infra (cf. dedicated infra/cloud resources)

	* provision a vm from the dedicated infrastructure cloud provider		* provision a vm from the dedicated infrastructure cloud provider

Ardumont: /* Setting up a new Virtual Machine (manual process) */

2018-06-14T08:15:38Z

Setting up a new Virtual Machine (manual process)

Show changes

Ardumont: /* Setting up a new Virtual Machine (manual process) */

2018-01-19T09:06:18Z

Setting up a new Virtual Machine (manual process)

← Older revision		Revision as of 09:06, 19 January 2018
Line 80:		Line 80:
	on the vm:		on the vm:

	~~mkpasswd~~		passwd

	* Allow root ssh password login (edit /etc/ssh/sshd_config and flip to yes the following options)		* Allow root ssh password login (edit /etc/ssh/sshd_config and flip to yes the following options)

Ardumont: /* Setting up a new Virtual Machine (manual process) */

2018-01-19T09:02:41Z

Setting up a new Virtual Machine (manual process)

← Older revision		Revision as of 09:02, 19 January 2018
Line 47:		Line 47:
	./create-vm.sh worker01		./create-vm.sh worker01

	* Add the machine to the internal dns (swh-site commit and push + deploy the latest puppet recipes in ~~the~~ puppet master pergamon)		* after the provisioning, the vm should have been given a private ip, keep it in mind

			* Add the machine to the internal dns: swh-site commit and push + deploy the latest puppet recipes in puppet master (pergamon) + deploy the recipe to internal dns (pergamon)

	ssh pergamon.internal.softwareheritage.org		ssh pergamon.internal.softwareheritage.org
	sudo /usr/local/bin/deploy.sh		sudo /usr/local/bin/deploy.sh
			sudo puppet agent --test

	* Connect to the machine with the temp admin user		* Connect to the machine with the temp admin user
Line 62:		Line 65:
	apt-get autoremove --purge		apt-get autoremove --purge

	* Set a root password (xckdpass, add to password store)		* Set a root password (on your machine `xckdpass` + add to password store)

			on your machine:

	# generate password (for example)		# generate password (for example)
Line 72:		Line 77:
	pass insert infra/<machine-name>/root		pass insert infra/<machine-name>/root
	pass git push		pass git push

			on the vm:

			mkpasswd

	* Allow root ssh password login (edit /etc/ssh/sshd_config and flip to yes the following options)		* Allow root ssh password login (edit /etc/ssh/sshd_config and flip to yes the following options)

Ardumont: /* Setting up a new Virtual Machine (manual process) */

2018-01-19T08:48:45Z

Setting up a new Virtual Machine (manual process)

← Older revision		Revision as of 08:48, 19 January 2018
Line 95:		Line 95:
	* Set the hostname to the appropriate one:		* Set the hostname to the appropriate one:
	** Edit /etc/hostname: machine.zone.hoster (e.g. worker01.euwest.azure)		** Edit /etc/hostname: machine.zone.hoster (e.g. worker01.euwest.azure)
	** Edit /etc/hosts: add {{<ip> machine.zone.hoster.internal.softwareheritage.org machine.zone.hoster}}} line		** Edit /etc/hosts: add {{<ip> machine.zone.hoster.internal.softwareheritage.org machine.zone.hoster}} line

	* reboot to get new hostname		* reboot to get new hostname

Ardumont at 10:15, 29 November 2017

2017-11-29T10:15:14Z

@@ Line 130: / Line 130: @@
 * reboot to check new services
 * update clustershell configuration on louvre
 [[Category:Infrastructure]]
 [[Category:System administration]]

Ardumont: /* Setting up a new Virtual Machine (manual process) */

2017-11-22T14:51:40Z

Setting up a new Virtual Machine (manual process)

@@ Line 40: / Line 40: @@
 Naming scheme: machine_name.<zone>.<hoster>.internal.softwareheritage.org.
-* Provision the virtual machine from a Debian image
+* Provision the virtual machine from a Debian image ([https://forge.softwareheritage.org/diffusion/DSNIP/browse/master/olasd/azure/create-vm.sh Provisioning script example for azure])
-** Set the admin user to something temporary with an ssh key
+** Sets a temporary admin user with an ssh key (the real setup will be installed through puppet later)
 ** Avoid public IPs if you don't need them
-** Add the machine to the internal dns (swh-site + puppet run on pergamon)
+** Example:
 * Connect to the machine with the temp admin user
-* apt-get update, dist-upgrade, autoremove --purge
-* set a root password (xckdpass, add to password store)
+    ssh -i <public-key-used-during-provisioning> <user>@<new-vm>
-* allow root ssh password login
-* connect as root
+* Update machine to the latest
 * remove temporary user
-** deluser foo
+    apt-get update
-** rm -rf /home/foo
+    apt-get dist-upgrade
-* set the hostname
+    apt-get autoremove --purge
 ** /etc/hostname: machine.zone.hoster (e.g. worker01.euwest.azure)
-** /etc/hosts: add {{<ip> machine.zone.hoster.internal.softwareheritage.org machine.zone.hoster}}} line
+* Set a root password (xckdpass, add to password store)
 * reboot to get new hostname
 * install and setup puppet
-** apt-get install puppet
-** systemctl disable puppet
+    apt-get install puppet
-** server=pergamon.internal.softwareheritage.org in /etc/puppet/puppet.conf
+    systemctl disable puppet
-** puppet agent --enable
-** puppet agent -t
+* Edit /etc/puppet/puppet.conf and add the following line in the [main] section
-** run puppet on pergamon to update munin server config
 * reboot to check new services
 * update clustershell configuration on louvre