source: server/doc/install-howto @ 832

Last change on this file since 832 was 832, checked in by geofft, 14 years ago
nelhage is much more awesome than CPAN.pm
File size: 3.7 KB
Line 
1This document is a how-to for installing a Fedora scripts.mit.edu server.
2
3* Check out the scripts.mit.edu svn repository. Configure svn not to cache
4  credentials.
5
6* cd to server/fedora in the svn repository.
7
8* Run "make install-deps" to install various prereqs.
9
10* Create a scripts-build account, and set up rpm to build in $HOME.
11  If you just use the default setup, it will generate packages
12  in /usr/src/redhat.
13
14* Use the Makefile to build the scripts.mit.edu-specific Fedora
15  packages.
16  - export PATH=$PATH:/usr/sbin
17  - make download
18  - make setup
19  - make all
20  - openafs-devel is a build-dependency of accountadm, so you'll need to
21    install it by hand when that fails.
22  Then install all the packages as root.
23
24* Rebuild mit-zephyr on a 32-bit machine, like the one at Joe's home.
25
26* Run "make suexec" and "make suexec-install" to overwrite
27  /usr/sbin/suexec with one that works. The one installed by the
28  newly-built Apache RPM is misconfigured.
29
30* Check out the scripts /etc configuration, which is done most easily by
31  - svn co https://scripts.mit.edu:1111/server/fedora/config/etc
32  - \cp -a etc /
33
34* Copy over root's dotfiles.
35
36* Install various dependencies of the scripts system, including syslog-ng,
37  glibc-devel.i386, python-twisted-core, mod_fcgid, nrpe, nagios-plugins-all.
38
39* Disable SELinux and NetworkManager.
40
41* Figure out why Zephyr isn't working and why the openafs /usr/vice/etc <->
42  /etc/openafs mapping isn't in sync.
43
44* Install the full list of RPMs that users expect to be on the
45  scripts.mit.edu servers.  See server/doc/rpm and
46  server/doc/rpm_snapshot.  (Note that this is only a snapshot, and not
47  all packages may in fact be in use.)
48
49* Install the full list of perl modules that users expect to be on the
50  scripts.mit.edu servers.  See server/doc/perl and
51  server/doc/perl_snapshot.
52
53  - export PERL_MM_USE_DEFAULT=1
54  - Run 'cpan', accept the default configuration, and do 'o conf
55    prerequisites_policy follow'.
56  - Parse the output of perldoc -u perllocal | grep head2 on an existing
57    server, and "notest install" them from the cpan prompt.
58
59* Install the Python eggs and Ruby gems and PEAR/PECL doohickeys that are on
60  the other scripts.mit.edu servers and do not have RPMs.
61  - Look at /usr/lib/python2.5/site-packages for Python eggs and modules.
62  - Look at `gem list` for Ruby gems.
63  - Look at `pear list` for Pear fruits (or whatever they're called).
64
65* echo 'import site, os.path; site.addsitedir(os.path.expanduser("~/lib/python2.5/site-packages"))' > /usr/lib/python2.5/site-packages/00scripts-home.pth
66
67* Install the credentials (machine keytab, daemon.scripts keytab, SSL
68  certs).
69
70* Attempt to check out server/fedora/config/etc into /etc. The easiest way to
71  do this is to create a checkout of etc in another directory and mv -f this on
72  top of /etc.
73
74  - If you are setting up a test server, pay attention to
75  /etc/sysconfig/network-scripts and do not bind scripts' IP address.
76  You will also need to modify /etc/ldap.conf, /etc/openldap/ldap.conf, and
77  /etc/httpd/conf.d/vhost_ldap.conf to use scripts.mit.edu instead of
78  localhost.
79
80* Install fedora-ds-base and set up replication (see /mit/scripts/doc
81  and /mit/geofft/Public/fedora-ds-enable-ssl-and-kerberos.diff).
82
83* Install nslcd / nss-ldapd, which, unlike nss-ldap, doesn't crash every few
84  hours. Add /sbin/service dirsrv start and /sbin/nslcd to /etc/rc.local, or
85  better yet package nss-ldapd properly.
86
87* Make the services dirsrv, postfix, and httpd start at boot.
88
89* Run fmtutil-sys --all, which does something that makes TeX work.
90
91* (Optional) Beat your head against a wall.
92
93* I recommend setting noatime for the root filesystem in /etc/fstab.
94
95* Possibly perform other steps that I've neglected to put in this
96  document.
Note: See TracBrowser for help on using the repository browser.