source: branches/fc11-dev/server/doc/install-howto.sh @ 1158

Last change on this file since 1158 was 1110, checked in by quentin, 15 years ago
Ask RPM about perl modules, not just package names
File size: 6.1 KB
Line 
1# This document is a how-to for installing a Fedora scripts.mit.edu server.
2
3set -e -x
4
5[ -e /scripts-boot-count ] || echo 0 > /scripts-boot-count
6
7source_server="old-faithful.mit.edu"
8
9boot=${1:$(cat /scripts-boot-count)}
10
11doreboot() {
12    echo $(( $boot + 1 )) > /scripts-boot-count;
13    shutdown -r now "Rebooting for step $(cat /scripts-boot-count)"
14}
15
16YUM() {
17    NSS_NONLOCAL_IGNORE=1 yum "$@"
18}
19
20# Helper files for the install are located in server/fedora/config.
21
22# Start with a normal install of Fedora.
23
24if [ $boot = 0 ]; then
25# When the initial configuration screen comes up, under "Firewall
26# configuration", disable the firewall, and under "System services", leave
27# enabled (as of Fedora 9) acpid, anacron, atd, cpuspeed, crond,
28# firstboot, fuse, haldaemon, ip6tables, iptables, irqbalance,
29# kerneloops, mdmonitor, messagebus, microcode_ctl, netfs, network, nscd, ntpd,
30# sshd, udev-post, and nothing else.
31    echo "--disabled" > /etc/sysconfig/system-config-firewall
32    for i in NetworkManager avahi-daemon bluetooth cups isdn nfslock pcscd restorecond rpcbind rpcgssd rpcidmapd sendmail; do
33        chkconfig "$i" off
34    done
35
36# Edit /etc/selinux/config so it has SELINUX=disabled and reboot.
37    sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
38    doreboot
39fi
40
41if [ $boot = 1 ]; then
42# Create a scripts-build user account, and set up rpm to build in
43# $HOME by doing a
44# cp config/home/scripts-build/.rpmmacros /home/scripts-build/
45# (If you just use the default setup, it will generate packages
46# in /usr/src/redhat.)
47    adduser scripts-build
48
49# Check out the scripts.mit.edu svn repository. Configure svn not to cache
50# credentials.
51
52    YUM install -y subversion
53
54    cd /srv
55    svn co svn://$source_server/ repository
56
57    sed -i 's/^(# *)*store-passwords.*/store-passwords = no/' /root/.subversion/config
58    sed -i 's/^(# *)*store-auth-creds.*/store-auth-creds = no/' /root/.subversion/config
59
60    chown -R scripts-build /srv/repository
61
62# cd to server/fedora in the svn repository.
63    cd /srv/repository/server/fedora
64
65# Run "make install-deps" to install various prereqs.  Nonstandard
66# deps are in /mit/scripts/rpm.
67    make install-deps
68
69# Install bind
70    YUM install -y bind
71
72# Check out the scripts /etc configuration
73    cd /root
74    svn co svn://scripts.mit.edu/server/fedora/config/etc etc
75    \cp -a etc /
76
77# env NSS_NONLOCAL_IGNORE=1 yum install scripts-base
78    YUM install -y scripts-base
79
80# Rebuild mit-zephyr on a 32-bit machine, like the one at Joe's home.
81
82# Remember to set NSS_NONLOCAL_IGNORE=1 anytime you're setting up
83# anything, e.g. using yum. Otherwise useradd will query LDAP in a stupid way
84# that makes it hang forever.
85
86# Install and configure bind
87# - env NSS_NONLOCAL_IGNORE=1 yum install bind
88# - chkconfig named on
89# - service named start
90
91# Reload the iptables config to take down the restrictive firewall
92# service iptables restart
93
94# Copy over root's dotfiles from one of the other machines.
95
96# Replace rsyslog with syslog-ng by doing:
97# # rpm -e --nodeps rsyslog
98# # yum install syslog-ng
99
100# Install various dependencies of the scripts system, including syslog-ng,
101# glibc-devel.i386, python-twisted-core, mod_fcgid, nrpe, nagios-plugins-all.
102
103# Disable NetworkManager with chkconfig NetworkManager off. Configure
104# networking on the front end and back end, and the routing table to send
105# traffic over the back end. Make sure that chkconfig reports "network" on, so
106# that the network will still be configured at next boot.
107
108# Fix the openafs /usr/vice/etc <-> /etc/openafs mapping by changing
109#  /usr/vice/etc/cacheinfo to contain:
110#       /afs:/usr/vice/cache:10000000
111
112# Figure out why Zephyr isn't working. Most recently, it was because there
113# was a 64-bit RPM installed; remove it and install Joe's 32-bit one
114
115# Install the full list of RPMs that users expect to be on the
116# scripts.mit.edu servers.  See server/doc/rpm and
117# server/doc/rpm_snapshot.  (Note that this is only a snapshot, and not
118# all packages may in fact be in use.)
119
120# Install the full list of perl modules that users expect to be on the
121# scripts.mit.edu servers.
122# - export PERL_MM_USE_DEFAULT=1
123# - Run 'cpan', accept the default configuration, and do 'o conf
124#   prerequisites_policy follow'.
125# - Parse the output of perldoc -u perllocal | grep head2 on an existing
126#   server, and "notest install" them from the cpan prompt.
127# TO DO THIS:
128# On another server, run:
129# perldoc -u perllocal | grep head2 | cut -f 3 -d '<' | cut -f 1 -d '|' | sort -u | perl -ne 'chomp; print "$_\n" if system("rpm -q --whatprovides \"perl($_)\" >/dev/null 2>/dev/null")' > /mit/scripts/config/perl-packages.txt
130# Then on the server you're installing,
131    perl -MCPAN -e"$(echo notest install $(cat /mit/scripts/config/perl-packages.txt))"
132
133# Install the Python eggs and Ruby gems and PEAR/PECL doohickeys that are on
134# the other scripts.mit.edu servers and do not have RPMs.
135# - Look at /usr/lib/python2.5/site-packages for Python eggs and modules.
136# - Look at `gem list` for Ruby gems.
137# - Look at `pear list` for Pear fruits (or whatever they're called).
138
139# echo 'import site, os.path; site.addsitedir(os.path.expanduser("~/lib/python2.5/site-packages"))' > /usr/lib/python2.5/site-packages/00scripts-home.pth
140
141# Install the credentials (machine keytab, daemon.scripts keytab, SSL
142# certs).
143
144# If you are setting up a test server, pay attention to
145# /etc/sysconfig/network-scripts and do not bind scripts' IP address.
146# You will also need to modify /etc/ldap.conf, /etc/nss-ldapd.conf,
147# /etc/openldap/ldap.conf, and /etc/httpd/conf.d/vhost_ldap.conf to
148# use scripts.mit.edu instead of localhost.
149
150# Install fedora-ds-base and set up replication (see ./HOWTO-SETUP-LDAP
151#   and ./fedora-ds-enable-ssl-and-kerberos.diff).
152
153# Make the services dirsrv, nslcd, nscd, postfix, and httpd start at
154# boot. Run chkconfig to make sure the set of services to be run is
155# correct.
156
157# Run fmtutil-sys --all, which does something that makes TeX work.
158
159# Ensure that PHP isn't broken:
160# # mkdir /tmp/sessions
161# # chmod 01777 /tmp/sessions
162
163# Reboot the machine to restore a consistent state, in case you
164# changed anything.
165
166# (Optional) Beat your head against a wall.
167
168# Possibly perform other steps that I've neglected to put in this
169# document.
Note: See TracBrowser for help on using the repository browser.