source: server/doc/install-howto @ 906

Last change on this file since 906 was 906, checked in by geofft, 14 years ago
yum remove NetworkManager isn't sustainable.
File size: 5.5 KB
Line 
1This document is a how-to for installing a Fedora scripts.mit.edu server.
2
3Helper files for the install are located in server/fedora/config.
4
5* Start with a normal install of Fedora.
6
7* Edit /etc/selinux/config so it has SELINUX=disabled and reboot.
8
9* Check out the scripts.mit.edu svn repository. Configure svn not to cache
10  credentials.
11
12* cd to server/fedora in the svn repository.
13
14* Run "make install-deps" to install various prereqs.  Nonstandard
15  deps are in /mit/scripts/rpm.
16
17* Create a scripts-build user account, and set up rpm to build in
18  $HOME by doing a
19  cp config/home/scripts-build/.rpmmacros /home/scripts-build/
20  (If you just use the default setup, it will generate packages
21  in /usr/src/redhat.)
22
23* su scripts-build -
24
25* Make sure that server/fedora (where you currently are) is writable
26  by user scripts-build.
27
28* Use the Makefile to build the scripts.mit.edu-specific Fedora
29  packages.
30  - export PATH=$PATH:/usr/sbin
31  - make download
32  - make setup
33  - make all
34  - openafs-devel is a build-dependency of accountadm, so you'll need to
35    install the openafs-devel package you just built by hand when that fails.
36
37* Then install the packages you just built as root:
38   - yum localinstall --nogpgcheck accountadm-0.00-0.x86_64.rpm \
39       execsys-0.00-0.x86_64.rpm httpd* \
40       kmod-openafs-1.4.7-1.1.2.6.25_14.fc9.x86_64.rpm \
41       krb5-{debuginfo,devel,libs,pki,workstation-1}* \
42       logview-0.00-0.x86_64.rpm mit-zephyr-2.1-6-linux.x86_64.rpm \
43       mod_ssl-2.2.8-3.x86_64.rpm nss_nonlocal-* \
44       openafs-1.4.7-1.1.1.x86_64.rpm \
45       openafs-{authlibs,client,debuginfo,devel,docs,krb5}* openssh* \
46       sql-signup-0.00-0.x86_64.rpm tokensys-0.00-0.x86_64.rpm \
47       whoisd-0.00-0.x86_64.rpm
48
49* Rebuild mit-zephyr on a 32-bit machine, like the one at Joe's home.
50
51* Run "make suexec" and "make install-suexec" to overwrite
52  /usr/sbin/suexec with one that works. The one installed by the
53  newly-built Apache RPM is misconfigured.
54  ... Except Anders claims he fixed this.
55
56* Remember to set NSS_NONLOCAL_IGNORE=1 anytime you're setting up
57  anything, e.g. using yum. Otherwise useradd will query LDAP in a stupid way
58  that makes it hang forever.
59
60* Install and configure bind
61  - env NSS_NONLOCAL_IGNORE=1 yum install bind
62  - chkconfig named on
63  - service named start
64
65* Check out the scripts /etc configuration, which is done most easily by
66  $ svn co svn://scripts.mit.edu/server/fedora/config/etc
67  # \cp -a etc /
68
69* Reload the iptables config to take down the restrictive firewall
70  service iptables restart
71
72* Copy over root's dotfiles from one of the other machines.
73
74* Replace rsyslog with syslog-ng by doing:
75  # rpm -e --nodeps rsyslog
76  # yum install syslog-ng
77
78* Install various dependencies of the scripts system, including syslog-ng,
79  glibc-devel.i386, python-twisted-core, mod_fcgid, nrpe, nagios-plugins-all.
80
81* Disable NetworkManager with chkconfig NetworkManager off. Configure
82  networking on the front end and back end, and the routing table to send
83  traffic over the back end. Make sure that chkconfig reports "network" on, so
84  that the network will still be configured at next boot.
85
86* Fix the openafs /usr/vice/etc <-> /etc/openafs mapping by changing
87   /usr/vice/etc/cacheinfo to contain:
88        /afs:/usr/vice/cache:10000000
89
90* Figure out why Zephyr isn't working. Most recently, it was because there
91  was a 64-bit RPM installed; remove it and install Joe's 32-bit one
92
93* Install the full list of RPMs that users expect to be on the
94  scripts.mit.edu servers.  See server/doc/rpm and
95  server/doc/rpm_snapshot.  (Note that this is only a snapshot, and not
96  all packages may in fact be in use.)
97
98* Install the full list of perl modules that users expect to be on the
99  scripts.mit.edu servers.  See server/doc/perl and
100  server/doc/perl_snapshot.
101
102  - export PERL_MM_USE_DEFAULT=1
103  - Run 'cpan', accept the default configuration, and do 'o conf
104    prerequisites_policy follow'.
105  - Parse the output of perldoc -u perllocal | grep head2 on an existing
106    server, and "notest install" them from the cpan prompt.
107
108* Install the Python eggs and Ruby gems and PEAR/PECL doohickeys that are on
109  the other scripts.mit.edu servers and do not have RPMs.
110  - Look at /usr/lib/python2.5/site-packages for Python eggs and modules.
111  - Look at `gem list` for Ruby gems.
112  - Look at `pear list` for Pear fruits (or whatever they're called).
113
114* echo 'import site, os.path; site.addsitedir(os.path.expanduser("~/lib/python2.5/site-packages"))' > /usr/lib/python2.5/site-packages/00scripts-home.pth
115
116* Install the credentials (machine keytab, daemon.scripts keytab, SSL
117  certs).
118
119*  If you are setting up a test server, pay attention to
120  /etc/sysconfig/network-scripts and do not bind scripts' IP address.
121  You will also need to modify /etc/ldap.conf, /etc/openldap/ldap.conf, and
122  /etc/httpd/conf.d/vhost_ldap.conf to use scripts.mit.edu instead of
123  localhost.
124
125* Install fedora-ds-base and set up replication (see ./HOWTO-SETUP-LDAP
126    and ./fedora-ds-enable-ssl-and-kerberos.diff).
127
128* Install nslcd / nss-ldapd, which, unlike nss-ldap, doesn't crash every few
129  hours. Add /sbin/service dirsrv start and /sbin/nslcd to /etc/rc.local, or
130  better yet package nss-ldapd properly.
131
132* Make the services dirsrv, postfix, and httpd start at boot. Run
133  chkconfig to make sure the set of services to be run is correct.
134
135* Run fmtutil-sys --all, which does something that makes TeX work.
136
137* Reboot the machine to restore a consistent state, in case you
138  changed anything.
139
140* (Optional) Beat your head against a wall.
141
142* Possibly perform other steps that I've neglected to put in this
143  document.
Note: See TracBrowser for help on using the repository browser.