Difference between revisions of "Agile testbed/Cloud/Installation notes"

Revision as of 14:27, 23 February 2010

This page contains notes on the installation of the agile testbed cloud.

Install and configure OpenNebula
- add EPEL repository
- install packages: ruby ruby-devel gcc gcc-c++ make openssl-devel scons flex bison
- enable Karan Extras repository and install xmlrpc-c: yum install --enablerepo=kbs-CentOS-Testing xmlrpc-c-devel
- download and install OpenNebula
  - either manually from source, installing a recent sqlite first (according to manual)
  - or use the spec file and patch
  - and create startup script
Setup dynamic DNS (optional but convenient)
- install and configure bind
- create OpenNebula hooks with ddns-update script
Setup image repository
Install mkisofs for contextualisation

Enable Xen (see also Xen on CentOS 5)
- yum install xen kernel-xen
- make grub boot Xen kernel by default (change default in /boot/grub/menu.lst), add nosmp to kernel cmdline and reboot
Allow oneadmin user to execute cloud-related commands using sudo
- Setup /etc/sudoers (e.g. using visudo)
  Cmnd_Alias CLOUD = /usr/sbin/xm, /usr/sbin/xentop, /usr/sbin/lvs, /usr/sbin/lvcreate, /usr/sbin/lvremove, /bin/dd
  
  oneadmin ALL = NOPASSWD: CLOUD
- Disable sudo's requiretty option
- Add PATH=$PATH:/sbin:/usr/sbin to ~oneadmin/.bashrc so that these commands can be found
Install ruby from the RubyWorks repository (you really need 1.8.6 or higher)
Enable passwordless ssh login from master for oneadmin user
Add to master using onehost there
Setup networking
- if multiple interfaces: bridge setup notes (with options netloop nloopbacks=0 in modprobe.conf)

@@ Line 4: / Line 4: @@
 * Install CentOS 5 bare-bones
 * Setup LDAP authentication (see [http://www.linux.com/archive/feature/113643?theme=print this guide])
-** add <tt>ldap</tt> to <tt>/etc/nsswitch.conf</tt>'s <tt>passwd</tt>, <tt>shadow</tt> and <tt>group</tt> entries
 ** configure <tt>/etc/ldap.conf</tt> according to [[NDPFDirectoryImplementation#Example_configurations|this]]
 ** make sure the DutchGrid CA certificate is in <tt>/etc/openldap/cacerts/16da7552.0</tt> (from rpm or [http://certificate.nikhef.nl/medium/cacert.pem here])
 ** update <tt>/etc/pam.d/system-auth</tt> using command <tt>authconfig --enableldap --enableldapauth --update</tt>
+*** this adds <tt>ldap</tt> to <tt>/etc/nsswitch.conf</tt>'s <tt>passwd</tt>, <tt>shadow</tt> and <tt>group</tt> entries
 ** create homedirs for your users as <tt>/user/<username></tt> with correct owner, populate authorized_keys
 ** disable ssh PasswordAuthentication