Difference between revisions of "Agile testbed/Cloud/Installation notes"
From PDP/Grid Wiki
Jump to navigationJump to search (→Slaves: add mkisofs install) |
m |
||
| (4 intermediate revisions by the same user not shown) | |||
| Line 4: | Line 4: | ||
* Install CentOS 5 bare-bones | * Install CentOS 5 bare-bones | ||
* Setup LDAP authentication (see [http://www.linux.com/archive/feature/113643?theme=print this guide]) | * Setup LDAP authentication (see [http://www.linux.com/archive/feature/113643?theme=print this guide]) | ||
| − | |||
** configure <tt>/etc/ldap.conf</tt> according to [[NDPFDirectoryImplementation#Example_configurations|this]] | ** configure <tt>/etc/ldap.conf</tt> according to [[NDPFDirectoryImplementation#Example_configurations|this]] | ||
| + | ** symlink <tt>/etc/ldap.conf</tt> to <tt>/etc/openldap/ldap.conf</tt> | ||
** make sure the DutchGrid CA certificate is in <tt>/etc/openldap/cacerts/16da7552.0</tt> (from rpm or [http://certificate.nikhef.nl/medium/cacert.pem here]) | ** make sure the DutchGrid CA certificate is in <tt>/etc/openldap/cacerts/16da7552.0</tt> (from rpm or [http://certificate.nikhef.nl/medium/cacert.pem here]) | ||
** update <tt>/etc/pam.d/system-auth</tt> using command <tt>authconfig --enableldap --enableldapauth --update</tt> | ** update <tt>/etc/pam.d/system-auth</tt> using command <tt>authconfig --enableldap --enableldapauth --update</tt> | ||
| + | *** this adds <tt>ldap</tt> to <tt>/etc/nsswitch.conf</tt>'s <tt>passwd</tt>, <tt>shadow</tt> and <tt>group</tt> entries | ||
** create homedirs for your users as <tt>/user/<username></tt> with correct owner, populate authorized_keys | ** create homedirs for your users as <tt>/user/<username></tt> with correct owner, populate authorized_keys | ||
** disable ssh PasswordAuthentication | ** disable ssh PasswordAuthentication | ||
| Line 20: | Line 21: | ||
*** or [http://wiki.centos.org/HowTos/SetupRpmBuildEnvironment use] the [http://svn.opennebula.org/components/packages/trunk/redhat/one-1.4.0.spec spec file] and [http://svn.opennebula.org/components/packages/trunk/redhat/one-1.4.0.patch patch] | *** or [http://wiki.centos.org/HowTos/SetupRpmBuildEnvironment use] the [http://svn.opennebula.org/components/packages/trunk/redhat/one-1.4.0.spec spec file] and [http://svn.opennebula.org/components/packages/trunk/redhat/one-1.4.0.patch patch] | ||
*** and create startup script | *** and create startup script | ||
| − | + | * Setup dynamic DNS (optional but convenient) | |
| − | * Setup dynamic DNS | ||
** install and configure bind | ** install and configure bind | ||
** create OpenNebula hooks with <tt>ddns-update</tt> script | ** create OpenNebula hooks with <tt>ddns-update</tt> script | ||
* Setup image repository | * Setup image repository | ||
| + | * Install <tt>mkisofs</tt> for contextualisation | ||
[http://www.opennebula.org/doku.php?id=documentation OpenNebula documentation] [http://www.slideshare.net/rsmontero/building-clouds-one-14 Building Clouds presentation] [[Virtual Machines working group]] | [http://www.opennebula.org/doku.php?id=documentation OpenNebula documentation] [http://www.slideshare.net/rsmontero/building-clouds-one-14 Building Clouds presentation] [[Virtual Machines working group]] | ||
| Line 39: | Line 40: | ||
** Add <tt>PATH=$PATH:/sbin:/usr/sbin</tt> to <tt>~oneadmin/.bashrc</tt> so that these commands can be found | ** Add <tt>PATH=$PATH:/sbin:/usr/sbin</tt> to <tt>~oneadmin/.bashrc</tt> so that these commands can be found | ||
* Install <tt>ruby</tt> from the [http://rubyworks.rubyforge.org/ RubyWorks] repository (you really need 1.8.6 or higher) | * Install <tt>ruby</tt> from the [http://rubyworks.rubyforge.org/ RubyWorks] repository (you really need 1.8.6 or higher) | ||
| − | |||
* Enable passwordless ssh login from master for <tt>oneadmin</tt> user | * Enable passwordless ssh login from master for <tt>oneadmin</tt> user | ||
* Add to master using <tt>onehost</tt> there | * Add to master using <tt>onehost</tt> there | ||
| + | * Setup networking | ||
| + | ** if multiple interfaces: [http://www.debian-administration.org/articles/470 bridge] [http://wiki.xensource.com/xenwiki/XenNetworking setup] [http://www.novell.com/communities/node/4094/xen-network-bridges-explained-with-troubleshooting-notes notes] (with <tt>options netloop nloopbacks=0</tt> in <tt>modprobe.conf</tt>) | ||
Latest revision as of 14:28, 23 February 2010
This page contains notes on the installation of the agile testbed cloud.
Base install
- Install CentOS 5 bare-bones
- Setup LDAP authentication (see this guide)
- configure /etc/ldap.conf according to this
- symlink /etc/ldap.conf to /etc/openldap/ldap.conf
- make sure the DutchGrid CA certificate is in /etc/openldap/cacerts/16da7552.0 (from rpm or here)
- update /etc/pam.d/system-auth using command authconfig --enableldap --enableldapauth --update
- this adds ldap to /etc/nsswitch.conf's passwd, shadow and group entries
- create homedirs for your users as /user/<username> with correct owner, populate authorized_keys
- disable ssh PasswordAuthentication
Master
- Install and configure OpenNebula
- Setup dynamic DNS (optional but convenient)
- install and configure bind
- create OpenNebula hooks with ddns-update script
- Setup image repository
- Install mkisofs for contextualisation
OpenNebula documentation Building Clouds presentation Virtual Machines working group
Slaves
- Enable Xen (see also Xen on CentOS 5)
- yum install xen kernel-xen
- make grub boot Xen kernel by default (change default in /boot/grub/menu.lst), add nosmp to kernel cmdline and reboot
- Allow oneadmin user to execute cloud-related commands using sudo
- Setup /etc/sudoers (e.g. using visudo)
- Cmnd_Alias CLOUD = /usr/sbin/xm, /usr/sbin/xentop, /usr/sbin/lvs, /usr/sbin/lvcreate, /usr/sbin/lvremove, /bin/dd
- oneadmin ALL = NOPASSWD: CLOUD
- Disable sudo's requiretty option
- Add PATH=$PATH:/sbin:/usr/sbin to ~oneadmin/.bashrc so that these commands can be found
- Setup /etc/sudoers (e.g. using visudo)
- Install ruby from the RubyWorks repository (you really need 1.8.6 or higher)
- Enable passwordless ssh login from master for oneadmin user
- Add to master using onehost there
- Setup networking
