welcome: please sign in

The following 294 words could not be found in the dictionary of 7 words (including 7 LocalSpellingWords) and are highlighted below:
according   add   Add   added   adding   addresses   Addresses   Admin   Administration   afs   After   agent   Allocate   an   and   any   applicable   Apply   apt   are   as   At   Automated   automatically   available   basic   be   been   Before   before   behave   bin   bug   Bug   bugzilla   buster   but   by   ca   cannot   case   Category   certificate   certname   cgi   changes   class   classes   code   com   common   conf   Config   config   configuration   configuring   confirmed   console   control   Coop   correctly   Create   create   created   current   Daemon   dc   deb   deciding   definitions   deployment   directory   disable   dns   Documentation   documentation   does   Dom   domain   domains   domtool   Domtool   dtl   Edit   enable   Enable   entry   etc   examples   exim   exim4   existing   exists   fetch   firewall   Firewall   fixed   for   free   from   full   fully   fwtool   git   go   Hardware   has   have   hc   hcoop   host   hostname   https   id   ideally   if   If   in   In   include   information   Infrastructure   infrastructure   initial   Install   install   Installation   installed   intended   into   ip   Ip   Ips   ipv6   is   it   itself   kadmin   Kerberos   Kernel   key   keytabs   lib   library   list   listed   listmacrosdefs   ll   Machine   machine   mail   Mail   main   Make   managed   manifests   mapping   master   may   members   minimally   more   must   name   need   needed   net   nets   Network   new   Node   node   nodes   Nodes   none   noop   not   Note   notes   of   on   Once   onetime   opt   package   packages   page   peer1   physical   poll   Portal   portal   pp   Prepare   principal   private   procedure   proceeding   progress   puppet   Puppet   puppet6   puppetlabs   puppetserver   purpose   qualified   quirks   quite   randkey   rdns   ready   reality   record   relay   release   relevant   rely   repository   Request   request   required   resources   reverse   review   routing   rules   Run   run   safe   section   see   See   server   Server   servers   service   services   set   Setup   setup   show   Sign   sign   site   so   source   specific   stages   start   still   stop   sub   such   sure   synchronize   Synchronize   System   system   systemctl   test   that   the   their   then   this   through   to   To   Tool   tweak   unix   unless   until   up   Update   update   user   users   Using   using   various   Virtual   waitforcert   Web   web   where   which   will   with   work   working   yet   You   you  

Clear message
Edit

InstallationProcedure / CommonInstallSteps

Before proceeding with the AutomatedSystemInstall new nodes must be added to HCoop's infrastructure.

1. Network

After deciding on the host name through a poll of the members:

  1. Allocate an addresses from the free list on IpAddresses (and update the page!)

  2. Using the peer1 request portal, add a reverse dns mapping to the hostname
    • You cannot install the machine until the reverse dns mapping has been created; various services rely on the rdns mapping to behave correctly.

  3. Add basic node information to DomTool config

    1. Edit /afs/hcoop.net/common/etc/domtool/lib/hcoop.dtl and add definitions for HOSTNAME_ip, HOSTNAME_private_ip, and HOSTNAME_ipv6

    2. Edit /afs/hcoop.net/user/h/hc/hcoop/.domtool/hcoop.net to add a DNS entry for $HOST.hcoop.net, using HOSTNAME_ip for the A record and HOSTNAME_ipv6 for the AAAA record; and $HOST-private.hcoop.net using HOSTNAME_private_ip.

    3. Apply DomTool configuration (run DOMTOOL_USER=hcoop domtool hcoop.net)

    4. Synchronize DomTool library with source code git repository

2. Documentation

Create a ServerHOST page and add the machine to the Hardware page. KernelVirtualMachines go into a sub-section of their current physical node. Note any relevant information such as the resources available for the node, intended purpose, etc.

Make sure the machine is listed on the IpAddresses page.

After install, update the server notes with any quirks of the install (ideally: none, but reality is a work in progress).

3. Add to Infrastructure

3.1. Kerberos

Add the server key to Kerberos. At the kadmin console ($SERVER is the fully qualified domain name): 

add_principal -randkey host/$SERVER@HCOOP.NET

Update create-user to synchronize keytabs to the new node if applicable.

3.2. Puppet

TODO: Create full page on Puppet

Create class hcoop::server::$SERVER and include service classes required for the server (see existing servers for examples).

Add node '$SERVER' { include ::hcoop::server::$SERVER } to manifests/site.pp on master.

After server is installed, set up puppet:

3.3. Mail

Enable mail routing by adding to exim configuration on the mail server (unless Bug 939 has been fixed, in which case update this documentation with the domtool managed procedure). In the exim config directory:

3.4. Portal

Create WebNode for portal according to DaemonAdmin/Portal so that users may request packages, firewall rules, etc.

3.5. Domtool

To control the node with DomTool minimally:

If you are configuring the node for a specific purpose, you'll need to add it to more configuration. See the DomTool documentation where it exists.

Prepare DomTool for deployment: DomTool/Installation.

CategorySystemAdministration

InstallationProcedure/CommonInstallSteps (last edited 2020-07-19 21:49:28 by ClintonEbadi)