Changeset 1382


Ignore:
Timestamp:
Dec 19, 2009, 12:38:47 AM (14 years ago)
Author:
ezyang
Message:
Miscellaneous extra instructions from f11-test.
File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/server/doc/install-howto.sh

    r1381 r1382  
    3232# sshd, udev-post, and nothing else.
    3333    echo "--disabled" > /etc/sysconfig/system-config-firewall
    34     for i in NetworkManager avahi-daemon bluetooth cups isdn nfslock pcscd restorecond rpcbind rpcgssd rpcidmapd sendmail; do
     34    for i in NetworkManager avahi-daemon bluetooth cups isdn nfslock nfs pcscd restorecond rpcbind rpcgssd rpcidmapd sendmail; do
    3535        chkconfig "$i" off
    3636    done
     
    160160#       /afs:/usr/vice/cache:10000000
    161161# Also fix ThisCell to contain athena.mit.edu in both directories
     162# WARNING: if you're installing a test server, this needs to be much
     163# smaller; the max filesize on XVM is 10GB.  Pick something like
     164# 500000
    162165    echo "/afs:/usr/vice/cache:10000000" > /usr/vice/etc/cacheinfo
    163166    # ezyang: ThisCell on b-k and c-w don't have anything special
    164167    # written here
     168# If you're making a test server, some of the AFS parameters are
     169# kind of retarded (and if you're low on disk space, will actually
     170# exhaust our inodes).
     171# Edit the parameters in /etc/sysconfig/openafs
    165172
    166173# Figure out why Zephyr isn't working. Most recently, it was because there
     
    194201# scripts.mit.edu servers.
    195202
    196 # ezyang: Running the below I got file conflicts. To fix (since I had
    197 # botched steps above), I manually compared package lists and installed
    198 # them.  If you've done the krb5 setup originally correctly, then
    199 # write down what you had to do here.
    200     yumdownloader krb5-devel
    201     rpm -i --force krb5-devel-*.i586.rpm
    202     rpm -U --force krb5-devel-*.scripts.1138.x86_64.rpm
    203     yumdownloader krb5-server
    204     rpm -i --force krb5-server-*.scripts.1138.x86_64.rpm
    205 
    206 
    207203# on another server, run:
    208204rpm -qa --queryformat "%{Name}.%{Arch}\n" | sort > packages.txt
     
    221217    # as the only diff
    222218    # ezyang: I got exim installed as another package
     219    # here's a cute script that removes all extra packages
     220    diff -u packages.txt newpackages.txt  | grep '+' | cut -c2- | grep -v "@" | grep -v "++" | xargs yum erase -y
    223221
    224222# Check out the scripts /usr/vice/etc configuration
     
    271269#   (you might get complaints about the php_scripts module; ignore them)
    272270# - Look at `pecl list` for PECL things.  'yum search', and if you must,
    273 #   'pecl install' needed items.
     271#   'pecl install' needed items. (as of 2009-12-18 there are no extra pecl things)
    274272    # Automating this... will require a lot of batonning between
    275273    # the servers. Probably best way to do it is to write an actual
     
    354352    cd /etc
    355353    svn status | grep M
    356     # ezyang: I had to revert krb5.conf, nsswitch.conf and sysconfig/openafs
     354    # ezyang: I had to revert krb5.conf (not with latest), nsswitch.conf and sysconfig/openafs
     355
     356# ThisCell got clobbered, replace it with athena.mit.edu
     357    echo "athena.mit.edu" > /usr/vice/etc/ThisCell
    357358
    358359# Reboot the machine to restore a consistent state, in case you
     
    368369# Possibly perform other steps that I've neglected to put in this
    369370# document.
    370 #   o In the first install of not-backward, ThisCell got clobbered, resulting
    371 #     in trying to get tickets from openafs.org. Not sure when it got
    372 #     clobbered -- ezyang
    373371#   o For some reason, syslog-ng wasn't turning on automatically, so we weren't
    374372#     getting spew
     
    377375#   o /etc/sysconfig/network
    378376#   o your lvm thingies; probably don't need to edit
     377
     378# More stuff for test servers
     379#   - You need a self-signed SSL cert.  Generate with:
     380    openssl req -new -x509 -keyout /etc/pki/tls/private/scripts.key -out /etc/pki/tls/certs/scripts.cert -nodes
     381#     Also make /etc/pki/tls/certs/ca.pem match up
     382#   - Make (/etc/aliases) root mail go to /dev/null, so we don't spam people
     383#   - Edit /etc/httpd/conf.d/scripts-vhost-names.conf to have scripts-fX-test.xvm.mit.edu
     384#     be an accepted vhost name
     385#   - Look at the old test server and see what config changes are floating around
Note: See TracChangeset for help on using the changeset viewer.