source: trunk/server/doc/install-xen @ 1861

Last change on this file since 1861 was 1861, checked in by quentin, 12 years ago
More host configuration instructions
File size: 3.3 KB
Line 
1# install Squeeze
2 # Configure each drive with a 1G partition and a rest-of-the-space partition, as RAID
3 # Create a RAID1 for the 1G partitions
4 # Create a RAID1 for each pair of rest-of-the-space partitions
5 # Create an ext3 /boot on the 1G RAID1
6 # Create an LVM volume group named after the machine's short hostname
7 # Create an LV called "swap" that is the same size as the machine's physical RAM
8 # Create an LV called "root" that is 50G ext4
9
10# ??? F11 will suggest ext4, DON'T USE IT.
11#   - New filesystem, so it's scary
12#   - The hosts can't mount it
13#   - Grub can't cope with it
14
15# install useful utility packages
16    aptitude install htop ipmitool emacs23-nox vim memtest86 memtest86+ ntp ntpdate git smartmontools kpartx
17    git config --global color.ui auto
18
19# install Xen
20    aptitude install xen-linux-system
21
22# download Debathena archive key, verify
23  (aptitude install debian-keyring &&
24  cd /tmp &&
25  wget http://debathena.mit.edu/apt/debathena-archive.asc &&
26  kcr_fingerprint=$(gpg --keyring /usr/share/keyrings/debian-keyring.gpg --no-default-keyring --list-keys --with-colons kcr@debian.org | grep ^pub | cut -f 5 -d :) &&
27  gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --import debathena-archive.asc &&
28  gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --refresh-keys &&
29  gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --keyring /usr/share/keyrings/debian-keyring.gpg --check-sigs --with-colons debathena@mit.edu | grep '^sig:!' | cut -d: -f5 | grep -q $kcr_fingerprint &&
30  gpg --primary-keyring /tmp/debathena.gpg --no-default-keyring --export debathena@mit.edu | apt-key adv --import)
31
32# add Debathena repos to etc/apt/sources.list.d
33  cat <<EOF > /etc/apt/sources.list.d/debathena.list
34deb http://debathena.mit.edu/apt squeeze debathena debathena-config debathena-system openafs
35deb-src http://debathena.mit.edu/apt squeeze debathena debathena-config debathena-system openafs
36EOF
37
38# install host keytab
39# install Debathena software (hit enter to take the defaults at the
40# configuration prompts)
41  aptitude update
42  aptitude install debathena-clients debathena-ssh-server-config
43# compare packages with another server
44  dpkg -l
45# reconfigure so that we can get an MTA, although we don't
46# want the hosts to accept mail (mail sent by smarthost; no local mail)
47# outgoing.mit.edu
48    dpkg-reconfigure exim4-config
49        # answer questions properly
50# change root alias in /etc/aliases to be the same as scripts server
51# reload it
52    newaliases
53# clone the xen config (/etc/xen)
54    git clone -b squeeze ssh://scripts@scripts.mit.edu/mit/scripts/git/xen.git /etc/xen
55# copy conserver config (we need to version this)
56  aptitude install sudo conserver-{server,client}
57# setup conserver
58  cat <<EOF > /etc/conserver/conserver.cf
59config * {
60        sslrequired no;
61}
62default full {
63        rw *;
64}
65default * {
66        logfile /var/log/conserver/&.log;
67        timestamp "1lab";
68        include full;
69        sslrequired no;
70        options reinitoncc;
71}
72default xen {
73        type exec;
74        exec sudo xm console f;
75        execsubst f=cs;
76}
77access * {
78        trusted 127.0.0.1;
79}
80EOF
81    visudo # add conservr to sudoers list with:
82        conservr ALL=(ALL) NOPASSWD: /usr/sbin/xm console *
83
84# setup munin and nagios 
85    aptitude install munin-node
86cat <<EOF >> /etc/munin/munin-node.conf
87allow ^18\.187\.1\.128$
88allow ^18\.181\.0\.65$
89allow ^18\.181\.0\.51$
90EOF
91
Note: See TracBrowser for help on using the repository browser.