|
Size: 1844
Comment: more puppet
|
← Revision 23 as of 2018-04-22 02:02:56 ⇥
Size: 1624
Comment: move puppet notes to ConfigurationManagement
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 9: | Line 9: |
| * Volume mounted in /vicepa * added /opt/puppetlabs/bin/ to root $PATH in .bashrc, should be done in /etc/profile.d/ |
* set domain name to hcoop.net manually * need to review setup... hostname = `gibran`, using `domain hcoop.net` in `resolv.conf`, and `159.203.101.102 gibran.hcoop.net gibran` in `hosts` (similar setup to other hcoop servers), but ... maybe we should just be leaving `hosts` alone and putting the fqdn into `hostname` ? * original setup had "gibran.localdomain gibran 127.0.1.1" |
| Line 12: | Line 13: |
| * set domain name to hcoop.net manually * set `search hcoop.net` in `/etc/resolv.conf` manually |
|
| Line 15: | Line 14: |
| * manually installed libnss-afs | |
| Line 19: | Line 19: |
| * looks like it might just be https://help.ubuntu.com/community/CloudInit which would make it acceptable to keep in place | |
| Line 20: | Line 21: |
| == Puppet == | == AFS Setup Notes == |
| Line 22: | Line 23: |
| === puppetserver === | * Not sure we want to link /etc/openafs/CellServDB to /etc/openafs/server/CellServDB or not * downside: client ignores dns, upside: client works if dns is down * Left client CellServDB separate for the time being |
| Line 24: | Line 27: |
| * Installed https://apt.puppetlabs.com/puppet5-release-stretch.deb manually * Packages: puppetserver, puppet-agent * added /opt/puppetlabs/bin/ to root $PATH in .bashrc |
Questions |
| Line 28: | Line 29: |
| Puppet git structure (different repos for each): /etc/puppetlabs/puppet, /etc/puppetlabs/code/environments/production, /etc/puppetlabs/modules. Subject to change. Puppet module structure: * hcoop * server * $server (e.g. gibran) * service * openafs-client === puppetdb === install guide is weird puppet resource package puppetdb ensure=latest puppet resource package puppetdb-termini ensure=latest puppet module install puppetlabs-puppetdb === installed modules === * puppetlabs-firewall * puppetlabs-puppetdb * alexharvey-firewall_multi (says incompatible, but works... enough). === style guide === Ideas for keeping consistency among admins * Use firewall_multi for all rules unless it really is ipv4 or ipv6 only, provider is set in defaults and will keep ipv4 and ipv6 firewall in sync * Must pass puppet-lint (enforce using git hook) |
* will openafs be smart enough find fileservers on private interfaces? * if not, local aliases in hosts? any way to achieve this? (private networking is unbilling, so ideally we will take advantage of it) * `vos listaddrs` showed private interfaces so seems like clients might be able to auto home? |
gibran.hcoop.net is virtual machine at digital ocean that will become our primary afs server
It is named after the author Kahlil Gibran
1. Setup Notes
Or: things that need to go into Puppet
- set domain name to hcoop.net manually
need to review setup... hostname = gibran, using domain hcoop.net in resolv.conf, and 159.203.101.102 gibran.hcoop.net gibran in hosts (similar setup to other hcoop servers), but ... maybe we should just be leaving hosts alone and putting the fqdn into hostname ?
- original setup had "gibran.localdomain gibran 127.0.1.1"
removed joe (or at least update-alternatives editor to either vim or emacs...)
- root has basic emacs config for puppet-mode and melpa (probably no need to formalize that...)
- manually installed libnss-afs
1.1. todo
- default "cloud-config" system may be active, check license and remove if it is non-free
looks like it might just be https://help.ubuntu.com/community/CloudInit which would make it acceptable to keep in place
2. AFS Setup Notes
- Not sure we want to link /etc/openafs/CellServDB to /etc/openafs/server/CellServDB or not
- downside: client ignores dns, upside: client works if dns is down
- Left client CellServDB separate for the time being
Questions
- will openafs be smart enough find fileservers on private interfaces?
- if not, local aliases in hosts? any way to achieve this? (private networking is unbilling, so ideally we will take advantage of it)
vos listaddrs showed private interfaces so seems like clients might be able to auto home?