root / docs / quick-install-admin-guide.rst @ 2e1e6844
History | View | Annotate | Download (67 kB)
1 | bdb83fd6 | cven | .. _quick-install-admin-guide: |
---|---|---|---|
2 | bdb83fd6 | cven | |
3 | bdb83fd6 | cven | Administrator's Quick Installation Guide |
4 | a96ec00f | Constantinos Venetsanopoulos | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ |
5 | a96ec00f | Constantinos Venetsanopoulos | |
6 | a96ec00f | Constantinos Venetsanopoulos | This is the Administrator's quick installation guide. |
7 | a96ec00f | Constantinos Venetsanopoulos | |
8 | a96ec00f | Constantinos Venetsanopoulos | It describes how to install the whole synnefo stack on two (2) physical nodes, |
9 | a96ec00f | Constantinos Venetsanopoulos | with minimum configuration. It installs synnefo from Debian packages, and |
10 | a96ec00f | Constantinos Venetsanopoulos | assumes the nodes run Debian Squeeze. After successful installation, you will |
11 | a96ec00f | Constantinos Venetsanopoulos | have the following services running: |
12 | a96ec00f | Constantinos Venetsanopoulos | |
13 | a96ec00f | Constantinos Venetsanopoulos | * Identity Management (Astakos) |
14 | dad708b4 | Antony Chazapis | * Object Storage Service (Pithos+) |
15 | a96ec00f | Constantinos Venetsanopoulos | * Compute Service (Cyclades) |
16 | a96ec00f | Constantinos Venetsanopoulos | * Image Registry Service (Plankton) |
17 | a96ec00f | Constantinos Venetsanopoulos | |
18 | a96ec00f | Constantinos Venetsanopoulos | and a single unified Web UI to manage them all. |
19 | a96ec00f | Constantinos Venetsanopoulos | |
20 | a96ec00f | Constantinos Venetsanopoulos | The Volume Storage Service (Archipelago) and the Billing Service (Aquarium) are |
21 | a96ec00f | Constantinos Venetsanopoulos | not released yet. |
22 | a96ec00f | Constantinos Venetsanopoulos | |
23 | dad708b4 | Antony Chazapis | If you just want to install the Object Storage Service (Pithos+), follow the guide |
24 | a96ec00f | Constantinos Venetsanopoulos | and just stop after the "Testing of Pithos+" section. |
25 | a96ec00f | Constantinos Venetsanopoulos | |
26 | a96ec00f | Constantinos Venetsanopoulos | |
27 | a96ec00f | Constantinos Venetsanopoulos | Installation of Synnefo / Introduction |
28 | a96ec00f | Constantinos Venetsanopoulos | ====================================== |
29 | a96ec00f | Constantinos Venetsanopoulos | |
30 | a96ec00f | Constantinos Venetsanopoulos | We will install the services with the above list's order. Cyclades and Plankton |
31 | a96ec00f | Constantinos Venetsanopoulos | will be installed in a single step (at the end), because at the moment they are |
32 | a96ec00f | Constantinos Venetsanopoulos | contained in the same software component. Furthermore, we will install all |
33 | a96ec00f | Constantinos Venetsanopoulos | services in the first physical node, except Pithos+ which will be installed in |
34 | a96ec00f | Constantinos Venetsanopoulos | the second, due to a conflict between the snf-pithos-app and snf-cyclades-app |
35 | a96ec00f | Constantinos Venetsanopoulos | component (scheduled to be fixed in the next version). |
36 | a96ec00f | Constantinos Venetsanopoulos | |
37 | a96ec00f | Constantinos Venetsanopoulos | For the rest of the documentation we will refer to the first physical node as |
38 | a96ec00f | Constantinos Venetsanopoulos | "node1" and the second as "node2". We will also assume that their domain names |
39 | a96ec00f | Constantinos Venetsanopoulos | are "node1.example.com" and "node2.example.com" and their IPs are "4.3.2.1" and |
40 | a96ec00f | Constantinos Venetsanopoulos | "4.3.2.2" respectively. |
41 | a96ec00f | Constantinos Venetsanopoulos | |
42 | a96ec00f | Constantinos Venetsanopoulos | |
43 | a96ec00f | Constantinos Venetsanopoulos | General Prerequisites |
44 | a96ec00f | Constantinos Venetsanopoulos | ===================== |
45 | a96ec00f | Constantinos Venetsanopoulos | |
46 | a96ec00f | Constantinos Venetsanopoulos | These are the general synnefo prerequisites, that you need on node1 and node2 |
47 | a96ec00f | Constantinos Venetsanopoulos | and are related to all the services (Astakos, Pithos+, Cyclades, Plankton). |
48 | a96ec00f | Constantinos Venetsanopoulos | |
49 | a96ec00f | Constantinos Venetsanopoulos | To be able to download all synnefo components you need to add the following |
50 | a96ec00f | Constantinos Venetsanopoulos | lines in your ``/etc/apt/sources.list`` file: |
51 | a96ec00f | Constantinos Venetsanopoulos | |
52 | d109485a | Constantinos Venetsanopoulos | | ``deb http://apt.dev.grnet.gr squeeze main`` |
53 | d109485a | Constantinos Venetsanopoulos | | ``deb-src http://apt.dev.grnet.gr squeeze main`` |
54 | a96ec00f | Constantinos Venetsanopoulos | |
55 | ec9862dd | Stratos Psomadakis | and import the repo's GPG key: |
56 | ec9862dd | Stratos Psomadakis | |
57 | ec9862dd | Stratos Psomadakis | | ``curl https://dev.grnet.gr/files/apt-grnetdev.pub | apt-key add -`` |
58 | ec9862dd | Stratos Psomadakis | |
59 | 169f7d38 | Vangelis Koukis | Also add the following line to enable the ``squeeze-backports`` repository, |
60 | 169f7d38 | Vangelis Koukis | which may provide more recent versions of certain packages. The repository |
61 | 169f7d38 | Vangelis Koukis | is deactivated by default and must be specified expicitly in ``apt-get`` |
62 | 169f7d38 | Vangelis Koukis | operations: |
63 | 169f7d38 | Vangelis Koukis | |
64 | 169f7d38 | Vangelis Koukis | | ``deb http://backports.debian.org/debian-backports squeeze-backports main`` |
65 | 169f7d38 | Vangelis Koukis | |
66 | a96ec00f | Constantinos Venetsanopoulos | You also need a shared directory visible by both nodes. Pithos+ will save all |
67 | a96ec00f | Constantinos Venetsanopoulos | data inside this directory. By 'all data', we mean files, images, and pithos |
68 | a96ec00f | Constantinos Venetsanopoulos | specific mapping data. If you plan to upload more than one basic image, this |
69 | a96ec00f | Constantinos Venetsanopoulos | directory should have at least 50GB of free space. During this guide, we will |
70 | a96ec00f | Constantinos Venetsanopoulos | assume that node1 acts as an NFS server and serves the directory ``/srv/pithos`` |
71 | a96ec00f | Constantinos Venetsanopoulos | to node2. Node2 has this directory mounted under ``/srv/pithos``, too. |
72 | a96ec00f | Constantinos Venetsanopoulos | |
73 | a96ec00f | Constantinos Venetsanopoulos | Before starting the synnefo installation, you will need basic third party |
74 | a96ec00f | Constantinos Venetsanopoulos | software to be installed and configured on the physical nodes. We will describe |
75 | a96ec00f | Constantinos Venetsanopoulos | each node's general prerequisites separately. Any additional configuration, |
76 | a96ec00f | Constantinos Venetsanopoulos | specific to a synnefo service for each node, will be described at the service's |
77 | a96ec00f | Constantinos Venetsanopoulos | section. |
78 | a96ec00f | Constantinos Venetsanopoulos | |
79 | a96ec00f | Constantinos Venetsanopoulos | Node1 |
80 | a96ec00f | Constantinos Venetsanopoulos | ----- |
81 | a96ec00f | Constantinos Venetsanopoulos | |
82 | a96ec00f | Constantinos Venetsanopoulos | General Synnefo dependencies |
83 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
84 | a96ec00f | Constantinos Venetsanopoulos | |
85 | a96ec00f | Constantinos Venetsanopoulos | * apache (http server) |
86 | a96ec00f | Constantinos Venetsanopoulos | * gunicorn (WSGI http server) |
87 | a96ec00f | Constantinos Venetsanopoulos | * postgresql (database) |
88 | a96ec00f | Constantinos Venetsanopoulos | * rabbitmq (message queue) |
89 | a96ec00f | Constantinos Venetsanopoulos | |
90 | a96ec00f | Constantinos Venetsanopoulos | You can install the above by running: |
91 | a96ec00f | Constantinos Venetsanopoulos | |
92 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
93 | a96ec00f | Constantinos Venetsanopoulos | |
94 | bdfd94c9 | Constantinos Venetsanopoulos | # apt-get install apache2 postgresql rabbitmq-server |
95 | a96ec00f | Constantinos Venetsanopoulos | |
96 | 73ff1d54 | Constantinos Venetsanopoulos | Make sure to install gunicorn >= v0.12.2. You can do this by installing from |
97 | 73ff1d54 | Constantinos Venetsanopoulos | the official debian backports: |
98 | 73ff1d54 | Constantinos Venetsanopoulos | |
99 | 73ff1d54 | Constantinos Venetsanopoulos | .. code-block:: console |
100 | 73ff1d54 | Constantinos Venetsanopoulos | |
101 | 73ff1d54 | Constantinos Venetsanopoulos | # apt-get -t squeeze-backports install gunicorn |
102 | 73ff1d54 | Constantinos Venetsanopoulos | |
103 | 73ff1d54 | Constantinos Venetsanopoulos | On node1, we will create our databases, so you will also need the |
104 | 73ff1d54 | Constantinos Venetsanopoulos | python-psycopg2 package: |
105 | a96ec00f | Constantinos Venetsanopoulos | |
106 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
107 | a96ec00f | Constantinos Venetsanopoulos | |
108 | a96ec00f | Constantinos Venetsanopoulos | # apt-get install python-psycopg2 |
109 | a96ec00f | Constantinos Venetsanopoulos | |
110 | a96ec00f | Constantinos Venetsanopoulos | Database setup |
111 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~ |
112 | a96ec00f | Constantinos Venetsanopoulos | |
113 | a96ec00f | Constantinos Venetsanopoulos | On node1, we create a database called ``snf_apps``, that will host all django |
114 | a96ec00f | Constantinos Venetsanopoulos | apps related tables. We also create the user ``synnefo`` and grant him all |
115 | a96ec00f | Constantinos Venetsanopoulos | privileges on the database. We do this by running: |
116 | a96ec00f | Constantinos Venetsanopoulos | |
117 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
118 | a96ec00f | Constantinos Venetsanopoulos | |
119 | a96ec00f | Constantinos Venetsanopoulos | root@node1:~ # su - postgres |
120 | a96ec00f | Constantinos Venetsanopoulos | postgres@node1:~ $ psql |
121 | a96ec00f | Constantinos Venetsanopoulos | postgres=# CREATE DATABASE snf_apps WITH ENCODING 'UTF8' LC_COLLATE='C' LC_CTYPE='C' TEMPLATE=template0; |
122 | a96ec00f | Constantinos Venetsanopoulos | postgres=# CREATE USER synnefo WITH PASSWORD 'example_passw0rd'; |
123 | a96ec00f | Constantinos Venetsanopoulos | postgres=# GRANT ALL PRIVILEGES ON DATABASE snf_apps TO synnefo; |
124 | a96ec00f | Constantinos Venetsanopoulos | |
125 | a96ec00f | Constantinos Venetsanopoulos | We also create the database ``snf_pithos`` needed by the pithos+ backend and |
126 | a96ec00f | Constantinos Venetsanopoulos | grant the ``synnefo`` user all privileges on the database. This database could |
127 | a96ec00f | Constantinos Venetsanopoulos | be created on node2 instead, but we do it on node1 for simplicity. We will |
128 | a96ec00f | Constantinos Venetsanopoulos | create all needed databases on node1 and then node2 will connect to them. |
129 | a96ec00f | Constantinos Venetsanopoulos | |
130 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
131 | a96ec00f | Constantinos Venetsanopoulos | |
132 | 73ff1d54 | Constantinos Venetsanopoulos | postgres=# CREATE DATABASE snf_pithos WITH ENCODING 'UTF8' LC_COLLATE='C' LC_CTYPE='C' TEMPLATE=template0; |
133 | a96ec00f | Constantinos Venetsanopoulos | postgres=# GRANT ALL PRIVILEGES ON DATABASE snf_pithos TO synnefo; |
134 | a96ec00f | Constantinos Venetsanopoulos | |
135 | a96ec00f | Constantinos Venetsanopoulos | Configure the database to listen to all network interfaces. You can do this by |
136 | a96ec00f | Constantinos Venetsanopoulos | editting the file ``/etc/postgresql/8.4/main/postgresql.conf`` and change |
137 | a96ec00f | Constantinos Venetsanopoulos | ``listen_addresses`` to ``'*'`` : |
138 | a96ec00f | Constantinos Venetsanopoulos | |
139 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
140 | a96ec00f | Constantinos Venetsanopoulos | |
141 | a96ec00f | Constantinos Venetsanopoulos | listen_addresses = '*' |
142 | a96ec00f | Constantinos Venetsanopoulos | |
143 | a96ec00f | Constantinos Venetsanopoulos | Furthermore, edit ``/etc/postgresql/8.4/main/pg_hba.conf`` to allow node1 and |
144 | a96ec00f | Constantinos Venetsanopoulos | node2 to connect to the database. Add the following lines under ``#IPv4 local |
145 | a96ec00f | Constantinos Venetsanopoulos | connections:`` : |
146 | a96ec00f | Constantinos Venetsanopoulos | |
147 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
148 | a96ec00f | Constantinos Venetsanopoulos | |
149 | a96ec00f | Constantinos Venetsanopoulos | host all all 4.3.2.1/32 md5 |
150 | a96ec00f | Constantinos Venetsanopoulos | host all all 4.3.2.2/32 md5 |
151 | a96ec00f | Constantinos Venetsanopoulos | |
152 | a96ec00f | Constantinos Venetsanopoulos | Make sure to substitute "4.3.2.1" and "4.3.2.2" with node1's and node2's |
153 | a96ec00f | Constantinos Venetsanopoulos | actual IPs. Now, restart the server to apply the changes: |
154 | a96ec00f | Constantinos Venetsanopoulos | |
155 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
156 | a96ec00f | Constantinos Venetsanopoulos | |
157 | a96ec00f | Constantinos Venetsanopoulos | # /etc/init.d/postgresql restart |
158 | a96ec00f | Constantinos Venetsanopoulos | |
159 | a96ec00f | Constantinos Venetsanopoulos | Gunicorn setup |
160 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~ |
161 | a96ec00f | Constantinos Venetsanopoulos | |
162 | a96ec00f | Constantinos Venetsanopoulos | Create the file ``synnefo`` under ``/etc/gunicorn.d/`` containing the following: |
163 | a96ec00f | Constantinos Venetsanopoulos | |
164 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
165 | a96ec00f | Constantinos Venetsanopoulos | |
166 | a96ec00f | Constantinos Venetsanopoulos | CONFIG = { |
167 | a96ec00f | Constantinos Venetsanopoulos | 'mode': 'django', |
168 | a96ec00f | Constantinos Venetsanopoulos | 'environment': { |
169 | a96ec00f | Constantinos Venetsanopoulos | 'DJANGO_SETTINGS_MODULE': 'synnefo.settings', |
170 | a96ec00f | Constantinos Venetsanopoulos | }, |
171 | a96ec00f | Constantinos Venetsanopoulos | 'working_dir': '/etc/synnefo', |
172 | a96ec00f | Constantinos Venetsanopoulos | 'user': 'www-data', |
173 | a96ec00f | Constantinos Venetsanopoulos | 'group': 'www-data', |
174 | a96ec00f | Constantinos Venetsanopoulos | 'args': ( |
175 | a96ec00f | Constantinos Venetsanopoulos | '--bind=127.0.0.1:8080', |
176 | a96ec00f | Constantinos Venetsanopoulos | '--workers=4', |
177 | a96ec00f | Constantinos Venetsanopoulos | '--log-level=debug', |
178 | a96ec00f | Constantinos Venetsanopoulos | ), |
179 | a96ec00f | Constantinos Venetsanopoulos | } |
180 | a96ec00f | Constantinos Venetsanopoulos | |
181 | 0c40b4ac | Kostas Papadimitriou | .. warning:: Do NOT start the server yet, because it won't find the |
182 | 1ec63d8a | Kostas Papadimitriou | ``synnefo.settings`` module. We will start the server after successful |
183 | 4de94e15 | Kostas Papadimitriou | installation of astakos. If the server is running:: |
184 | a96ec00f | Constantinos Venetsanopoulos | |
185 | 4de94e15 | Kostas Papadimitriou | # /etc/init.d/gunicorn stop |
186 | a96ec00f | Constantinos Venetsanopoulos | |
187 | a96ec00f | Constantinos Venetsanopoulos | Apache2 setup |
188 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~ |
189 | a96ec00f | Constantinos Venetsanopoulos | |
190 | a96ec00f | Constantinos Venetsanopoulos | Create the file ``synnefo`` under ``/etc/apache2/sites-available/`` containing |
191 | a96ec00f | Constantinos Venetsanopoulos | the following: |
192 | a96ec00f | Constantinos Venetsanopoulos | |
193 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
194 | a96ec00f | Constantinos Venetsanopoulos | |
195 | a96ec00f | Constantinos Venetsanopoulos | <VirtualHost *:80> |
196 | a96ec00f | Constantinos Venetsanopoulos | ServerName node1.example.com |
197 | a96ec00f | Constantinos Venetsanopoulos | |
198 | a96ec00f | Constantinos Venetsanopoulos | RewriteEngine On |
199 | d2a9f85f | Sofia Papagiannaki | RewriteCond %{THE_REQUEST} ^.*(\\r|\\n|%0A|%0D).* [NC] |
200 | d2a9f85f | Sofia Papagiannaki | RewriteRule ^(.*)$ - [F,L] |
201 | a96ec00f | Constantinos Venetsanopoulos | RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} |
202 | a96ec00f | Constantinos Venetsanopoulos | </VirtualHost> |
203 | a96ec00f | Constantinos Venetsanopoulos | |
204 | a96ec00f | Constantinos Venetsanopoulos | Create the file ``synnefo-ssl`` under ``/etc/apache2/sites-available/`` |
205 | a96ec00f | Constantinos Venetsanopoulos | containing the following: |
206 | a96ec00f | Constantinos Venetsanopoulos | |
207 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
208 | a96ec00f | Constantinos Venetsanopoulos | |
209 | a96ec00f | Constantinos Venetsanopoulos | <IfModule mod_ssl.c> |
210 | a96ec00f | Constantinos Venetsanopoulos | <VirtualHost _default_:443> |
211 | a96ec00f | Constantinos Venetsanopoulos | ServerName node1.example.com |
212 | a96ec00f | Constantinos Venetsanopoulos | |
213 | a96ec00f | Constantinos Venetsanopoulos | Alias /static "/usr/share/synnefo/static" |
214 | a96ec00f | Constantinos Venetsanopoulos | |
215 | a96ec00f | Constantinos Venetsanopoulos | # SetEnv no-gzip |
216 | a96ec00f | Constantinos Venetsanopoulos | # SetEnv dont-vary |
217 | a96ec00f | Constantinos Venetsanopoulos | |
218 | 04427415 | Constantinos Venetsanopoulos | AllowEncodedSlashes On |
219 | 04427415 | Constantinos Venetsanopoulos | |
220 | a96ec00f | Constantinos Venetsanopoulos | RequestHeader set X-Forwarded-Protocol "https" |
221 | a96ec00f | Constantinos Venetsanopoulos | |
222 | a96ec00f | Constantinos Venetsanopoulos | <Proxy * > |
223 | a96ec00f | Constantinos Venetsanopoulos | Order allow,deny |
224 | a96ec00f | Constantinos Venetsanopoulos | Allow from all |
225 | a96ec00f | Constantinos Venetsanopoulos | </Proxy> |
226 | a96ec00f | Constantinos Venetsanopoulos | |
227 | a96ec00f | Constantinos Venetsanopoulos | SetEnv proxy-sendchunked |
228 | a96ec00f | Constantinos Venetsanopoulos | SSLProxyEngine off |
229 | a96ec00f | Constantinos Venetsanopoulos | ProxyErrorOverride off |
230 | a96ec00f | Constantinos Venetsanopoulos | |
231 | a96ec00f | Constantinos Venetsanopoulos | ProxyPass /static ! |
232 | a96ec00f | Constantinos Venetsanopoulos | ProxyPass / http://localhost:8080/ retry=0 |
233 | a96ec00f | Constantinos Venetsanopoulos | ProxyPassReverse / http://localhost:8080/ |
234 | a96ec00f | Constantinos Venetsanopoulos | |
235 | a96ec00f | Constantinos Venetsanopoulos | RewriteEngine On |
236 | d2a9f85f | Sofia Papagiannaki | RewriteCond %{THE_REQUEST} ^.*(\\r|\\n|%0A|%0D).* [NC] |
237 | d2a9f85f | Sofia Papagiannaki | RewriteRule ^(.*)$ - [F,L] |
238 | a96ec00f | Constantinos Venetsanopoulos | RewriteRule ^/login(.*) /im/login/redirect$1 [PT,NE] |
239 | a96ec00f | Constantinos Venetsanopoulos | |
240 | a96ec00f | Constantinos Venetsanopoulos | SSLEngine on |
241 | a96ec00f | Constantinos Venetsanopoulos | SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem |
242 | a96ec00f | Constantinos Venetsanopoulos | SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key |
243 | a96ec00f | Constantinos Venetsanopoulos | </VirtualHost> |
244 | a96ec00f | Constantinos Venetsanopoulos | </IfModule> |
245 | a96ec00f | Constantinos Venetsanopoulos | |
246 | a96ec00f | Constantinos Venetsanopoulos | Now enable sites and modules by running: |
247 | a96ec00f | Constantinos Venetsanopoulos | |
248 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
249 | a96ec00f | Constantinos Venetsanopoulos | |
250 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod ssl |
251 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod rewrite |
252 | a96ec00f | Constantinos Venetsanopoulos | # a2dissite default |
253 | a96ec00f | Constantinos Venetsanopoulos | # a2ensite synnefo |
254 | a96ec00f | Constantinos Venetsanopoulos | # a2ensite synnefo-ssl |
255 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod headers |
256 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod proxy_http |
257 | a96ec00f | Constantinos Venetsanopoulos | |
258 | 4de94e15 | Kostas Papadimitriou | .. warning:: Do NOT start/restart the server yet. If the server is running:: |
259 | a96ec00f | Constantinos Venetsanopoulos | |
260 | 4de94e15 | Kostas Papadimitriou | # /etc/init.d/apache2 stop |
261 | a96ec00f | Constantinos Venetsanopoulos | |
262 | 2c85833e | Constantinos Venetsanopoulos | .. _rabbitmq-setup: |
263 | 2c85833e | Constantinos Venetsanopoulos | |
264 | bdfd94c9 | Constantinos Venetsanopoulos | Message Queue setup |
265 | bdfd94c9 | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~ |
266 | bdfd94c9 | Constantinos Venetsanopoulos | |
267 | bdfd94c9 | Constantinos Venetsanopoulos | The message queue will run on node1, so we need to create the appropriate |
268 | bdfd94c9 | Constantinos Venetsanopoulos | rabbitmq user. The user is named ``synnefo`` and gets full privileges on all |
269 | bdfd94c9 | Constantinos Venetsanopoulos | exchanges: |
270 | bdfd94c9 | Constantinos Venetsanopoulos | |
271 | bdfd94c9 | Constantinos Venetsanopoulos | .. code-block:: console |
272 | bdfd94c9 | Constantinos Venetsanopoulos | |
273 | bdfd94c9 | Constantinos Venetsanopoulos | # rabbitmqctl add_user synnefo "examle_rabbitmq_passw0rd" |
274 | bdfd94c9 | Constantinos Venetsanopoulos | # rabbitmqctl set_permissions synnefo ".*" ".*" ".*" |
275 | bdfd94c9 | Constantinos Venetsanopoulos | |
276 | bdfd94c9 | Constantinos Venetsanopoulos | We do not need to initialize the exchanges. This will be done automatically, |
277 | bdfd94c9 | Constantinos Venetsanopoulos | during the Cyclades setup. |
278 | bdfd94c9 | Constantinos Venetsanopoulos | |
279 | a96ec00f | Constantinos Venetsanopoulos | Pithos+ data directory setup |
280 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
281 | a96ec00f | Constantinos Venetsanopoulos | |
282 | a96ec00f | Constantinos Venetsanopoulos | As mentioned in the General Prerequisites section, there is a directory called |
283 | a96ec00f | Constantinos Venetsanopoulos | ``/srv/pithos`` visible by both nodes. We create and setup the ``data`` |
284 | a96ec00f | Constantinos Venetsanopoulos | directory inside it: |
285 | a96ec00f | Constantinos Venetsanopoulos | |
286 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
287 | a96ec00f | Constantinos Venetsanopoulos | |
288 | a96ec00f | Constantinos Venetsanopoulos | # cd /srv/pithos |
289 | a96ec00f | Constantinos Venetsanopoulos | # mkdir data |
290 | a96ec00f | Constantinos Venetsanopoulos | # chown www-data:www-data data |
291 | a96ec00f | Constantinos Venetsanopoulos | # chmod g+ws data |
292 | a96ec00f | Constantinos Venetsanopoulos | |
293 | a96ec00f | Constantinos Venetsanopoulos | You are now ready with all general prerequisites concerning node1. Let's go to |
294 | a96ec00f | Constantinos Venetsanopoulos | node2. |
295 | a96ec00f | Constantinos Venetsanopoulos | |
296 | a96ec00f | Constantinos Venetsanopoulos | Node2 |
297 | a96ec00f | Constantinos Venetsanopoulos | ----- |
298 | a96ec00f | Constantinos Venetsanopoulos | |
299 | a96ec00f | Constantinos Venetsanopoulos | General Synnefo dependencies |
300 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
301 | a96ec00f | Constantinos Venetsanopoulos | |
302 | a96ec00f | Constantinos Venetsanopoulos | * apache (http server) |
303 | a96ec00f | Constantinos Venetsanopoulos | * gunicorn (WSGI http server) |
304 | a96ec00f | Constantinos Venetsanopoulos | * postgresql (database) |
305 | a96ec00f | Constantinos Venetsanopoulos | |
306 | a96ec00f | Constantinos Venetsanopoulos | You can install the above by running: |
307 | a96ec00f | Constantinos Venetsanopoulos | |
308 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
309 | a96ec00f | Constantinos Venetsanopoulos | |
310 | 73ff1d54 | Constantinos Venetsanopoulos | # apt-get install apache2 postgresql |
311 | 73ff1d54 | Constantinos Venetsanopoulos | |
312 | 73ff1d54 | Constantinos Venetsanopoulos | Make sure to install gunicorn >= v0.12.2. You can do this by installing from |
313 | 73ff1d54 | Constantinos Venetsanopoulos | the official debian backports: |
314 | 73ff1d54 | Constantinos Venetsanopoulos | |
315 | 73ff1d54 | Constantinos Venetsanopoulos | .. code-block:: console |
316 | 73ff1d54 | Constantinos Venetsanopoulos | |
317 | 73ff1d54 | Constantinos Venetsanopoulos | # apt-get -t squeeze-backports install gunicorn |
318 | a96ec00f | Constantinos Venetsanopoulos | |
319 | 73ff1d54 | Constantinos Venetsanopoulos | Node2 will connect to the databases on node1, so you will also need the |
320 | 73ff1d54 | Constantinos Venetsanopoulos | python-psycopg2 package: |
321 | a96ec00f | Constantinos Venetsanopoulos | |
322 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
323 | a96ec00f | Constantinos Venetsanopoulos | |
324 | a96ec00f | Constantinos Venetsanopoulos | # apt-get install python-psycopg2 |
325 | a96ec00f | Constantinos Venetsanopoulos | |
326 | a96ec00f | Constantinos Venetsanopoulos | Database setup |
327 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~ |
328 | a96ec00f | Constantinos Venetsanopoulos | |
329 | a96ec00f | Constantinos Venetsanopoulos | All databases have been created and setup on node1, so we do not need to take |
330 | a96ec00f | Constantinos Venetsanopoulos | any action here. From node2, we will just connect to them. When you get familiar |
331 | a96ec00f | Constantinos Venetsanopoulos | with the software you may choose to run different databases on different nodes, |
332 | a96ec00f | Constantinos Venetsanopoulos | for performance/scalability/redundancy reasons, but those kind of setups are out |
333 | a96ec00f | Constantinos Venetsanopoulos | of the purpose of this guide. |
334 | a96ec00f | Constantinos Venetsanopoulos | |
335 | a96ec00f | Constantinos Venetsanopoulos | Gunicorn setup |
336 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~ |
337 | a96ec00f | Constantinos Venetsanopoulos | |
338 | a96ec00f | Constantinos Venetsanopoulos | Create the file ``synnefo`` under ``/etc/gunicorn.d/`` containing the following |
339 | a96ec00f | Constantinos Venetsanopoulos | (same contents as in node1; you can just copy/paste the file): |
340 | a96ec00f | Constantinos Venetsanopoulos | |
341 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
342 | a96ec00f | Constantinos Venetsanopoulos | |
343 | a96ec00f | Constantinos Venetsanopoulos | CONFIG = { |
344 | a96ec00f | Constantinos Venetsanopoulos | 'mode': 'django', |
345 | a96ec00f | Constantinos Venetsanopoulos | 'environment': { |
346 | a96ec00f | Constantinos Venetsanopoulos | 'DJANGO_SETTINGS_MODULE': 'synnefo.settings', |
347 | a96ec00f | Constantinos Venetsanopoulos | }, |
348 | a96ec00f | Constantinos Venetsanopoulos | 'working_dir': '/etc/synnefo', |
349 | a96ec00f | Constantinos Venetsanopoulos | 'user': 'www-data', |
350 | a96ec00f | Constantinos Venetsanopoulos | 'group': 'www-data', |
351 | a96ec00f | Constantinos Venetsanopoulos | 'args': ( |
352 | a96ec00f | Constantinos Venetsanopoulos | '--bind=127.0.0.1:8080', |
353 | a96ec00f | Constantinos Venetsanopoulos | '--workers=4', |
354 | a96ec00f | Constantinos Venetsanopoulos | '--log-level=debug', |
355 | 699c8773 | Sofia Papagiannaki | '--timeout=43200' |
356 | a96ec00f | Constantinos Venetsanopoulos | ), |
357 | a96ec00f | Constantinos Venetsanopoulos | } |
358 | a96ec00f | Constantinos Venetsanopoulos | |
359 | 0c40b4ac | Kostas Papadimitriou | .. warning:: Do NOT start the server yet, because it won't find the |
360 | 1ec63d8a | Kostas Papadimitriou | ``synnefo.settings`` module. We will start the server after successful |
361 | 4de94e15 | Kostas Papadimitriou | installation of astakos. If the server is running:: |
362 | a96ec00f | Constantinos Venetsanopoulos | |
363 | 4de94e15 | Kostas Papadimitriou | # /etc/init.d/gunicorn stop |
364 | bdb83fd6 | cven | |
365 | a96ec00f | Constantinos Venetsanopoulos | Apache2 setup |
366 | a96ec00f | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~ |
367 | 5b6feb88 | Vangelis Koukis | |
368 | a96ec00f | Constantinos Venetsanopoulos | Create the file ``synnefo`` under ``/etc/apache2/sites-available/`` containing |
369 | a96ec00f | Constantinos Venetsanopoulos | the following: |
370 | 5b6feb88 | Vangelis Koukis | |
371 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
372 | a96ec00f | Constantinos Venetsanopoulos | |
373 | a96ec00f | Constantinos Venetsanopoulos | <VirtualHost *:80> |
374 | a96ec00f | Constantinos Venetsanopoulos | ServerName node2.example.com |
375 | a96ec00f | Constantinos Venetsanopoulos | |
376 | a96ec00f | Constantinos Venetsanopoulos | RewriteEngine On |
377 | d2a9f85f | Sofia Papagiannaki | RewriteCond %{THE_REQUEST} ^.*(\\r|\\n|%0A|%0D).* [NC] |
378 | d2a9f85f | Sofia Papagiannaki | RewriteRule ^(.*)$ - [F,L] |
379 | a96ec00f | Constantinos Venetsanopoulos | RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} |
380 | a96ec00f | Constantinos Venetsanopoulos | </VirtualHost> |
381 | a96ec00f | Constantinos Venetsanopoulos | |
382 | a96ec00f | Constantinos Venetsanopoulos | Create the file ``synnefo-ssl`` under ``/etc/apache2/sites-available/`` |
383 | a96ec00f | Constantinos Venetsanopoulos | containing the following: |
384 | a96ec00f | Constantinos Venetsanopoulos | |
385 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
386 | a96ec00f | Constantinos Venetsanopoulos | |
387 | a96ec00f | Constantinos Venetsanopoulos | <IfModule mod_ssl.c> |
388 | a96ec00f | Constantinos Venetsanopoulos | <VirtualHost _default_:443> |
389 | a96ec00f | Constantinos Venetsanopoulos | ServerName node2.example.com |
390 | a96ec00f | Constantinos Venetsanopoulos | |
391 | a96ec00f | Constantinos Venetsanopoulos | Alias /static "/usr/share/synnefo/static" |
392 | a96ec00f | Constantinos Venetsanopoulos | |
393 | a96ec00f | Constantinos Venetsanopoulos | SetEnv no-gzip |
394 | a96ec00f | Constantinos Venetsanopoulos | SetEnv dont-vary |
395 | 04427415 | Constantinos Venetsanopoulos | AllowEncodedSlashes On |
396 | a96ec00f | Constantinos Venetsanopoulos | |
397 | a96ec00f | Constantinos Venetsanopoulos | RequestHeader set X-Forwarded-Protocol "https" |
398 | a96ec00f | Constantinos Venetsanopoulos | |
399 | a96ec00f | Constantinos Venetsanopoulos | <Proxy * > |
400 | a96ec00f | Constantinos Venetsanopoulos | Order allow,deny |
401 | a96ec00f | Constantinos Venetsanopoulos | Allow from all |
402 | a96ec00f | Constantinos Venetsanopoulos | </Proxy> |
403 | a96ec00f | Constantinos Venetsanopoulos | |
404 | a96ec00f | Constantinos Venetsanopoulos | SetEnv proxy-sendchunked |
405 | a96ec00f | Constantinos Venetsanopoulos | SSLProxyEngine off |
406 | a96ec00f | Constantinos Venetsanopoulos | ProxyErrorOverride off |
407 | a96ec00f | Constantinos Venetsanopoulos | |
408 | a96ec00f | Constantinos Venetsanopoulos | ProxyPass /static ! |
409 | a96ec00f | Constantinos Venetsanopoulos | ProxyPass / http://localhost:8080/ retry=0 |
410 | a96ec00f | Constantinos Venetsanopoulos | ProxyPassReverse / http://localhost:8080/ |
411 | a96ec00f | Constantinos Venetsanopoulos | |
412 | a96ec00f | Constantinos Venetsanopoulos | SSLEngine on |
413 | a96ec00f | Constantinos Venetsanopoulos | SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem |
414 | a96ec00f | Constantinos Venetsanopoulos | SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key |
415 | a96ec00f | Constantinos Venetsanopoulos | </VirtualHost> |
416 | a96ec00f | Constantinos Venetsanopoulos | </IfModule> |
417 | a96ec00f | Constantinos Venetsanopoulos | |
418 | a96ec00f | Constantinos Venetsanopoulos | As in node1, enable sites and modules by running: |
419 | a96ec00f | Constantinos Venetsanopoulos | |
420 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
421 | a96ec00f | Constantinos Venetsanopoulos | |
422 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod ssl |
423 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod rewrite |
424 | a96ec00f | Constantinos Venetsanopoulos | # a2dissite default |
425 | a96ec00f | Constantinos Venetsanopoulos | # a2ensite synnefo |
426 | a96ec00f | Constantinos Venetsanopoulos | # a2ensite synnefo-ssl |
427 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod headers |
428 | a96ec00f | Constantinos Venetsanopoulos | # a2enmod proxy_http |
429 | a96ec00f | Constantinos Venetsanopoulos | |
430 | 4de94e15 | Kostas Papadimitriou | .. warning:: Do NOT start/restart the server yet. If the server is running:: |
431 | a96ec00f | Constantinos Venetsanopoulos | |
432 | 4de94e15 | Kostas Papadimitriou | # /etc/init.d/apache2 stop |
433 | a96ec00f | Constantinos Venetsanopoulos | |
434 | a96ec00f | Constantinos Venetsanopoulos | We are now ready with all general prerequisites for node2. Now that we have |
435 | a96ec00f | Constantinos Venetsanopoulos | finished with all general prerequisites for both nodes, we can start installing |
436 | a96ec00f | Constantinos Venetsanopoulos | the services. First, let's install Astakos on node1. |
437 | a96ec00f | Constantinos Venetsanopoulos | |
438 | a96ec00f | Constantinos Venetsanopoulos | |
439 | a96ec00f | Constantinos Venetsanopoulos | Installation of Astakos on node1 |
440 | a96ec00f | Constantinos Venetsanopoulos | ================================ |
441 | a96ec00f | Constantinos Venetsanopoulos | |
442 | a96ec00f | Constantinos Venetsanopoulos | To install astakos, grab the package from our repository (make sure you made |
443 | a96ec00f | Constantinos Venetsanopoulos | the additions needed in your ``/etc/apt/sources.list`` file, as described |
444 | a96ec00f | Constantinos Venetsanopoulos | previously), by running: |
445 | a96ec00f | Constantinos Venetsanopoulos | |
446 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
447 | a96ec00f | Constantinos Venetsanopoulos | |
448 | a96ec00f | Constantinos Venetsanopoulos | # apt-get install snf-astakos-app |
449 | a96ec00f | Constantinos Venetsanopoulos | |
450 | a96ec00f | Constantinos Venetsanopoulos | After successful installation of snf-astakos-app, make sure that also |
451 | a96ec00f | Constantinos Venetsanopoulos | snf-webproject has been installed (marked as "Recommended" package). By default |
452 | a96ec00f | Constantinos Venetsanopoulos | Debian installs "Recommended" packages, but if you have changed your |
453 | a96ec00f | Constantinos Venetsanopoulos | configuration and the package didn't install automatically, you should |
454 | a96ec00f | Constantinos Venetsanopoulos | explicitly install it manually running: |
455 | a96ec00f | Constantinos Venetsanopoulos | |
456 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
457 | a96ec00f | Constantinos Venetsanopoulos | |
458 | a96ec00f | Constantinos Venetsanopoulos | # apt-get install snf-webproject |
459 | a96ec00f | Constantinos Venetsanopoulos | |
460 | a96ec00f | Constantinos Venetsanopoulos | The reason snf-webproject is "Recommended" and not a hard dependency, is to give |
461 | a96ec00f | Constantinos Venetsanopoulos | the experienced administrator the ability to install synnefo in a custom made |
462 | a96ec00f | Constantinos Venetsanopoulos | django project. This corner case concerns only very advanced users that know |
463 | a96ec00f | Constantinos Venetsanopoulos | what they are doing and want to experiment with synnefo. |
464 | a96ec00f | Constantinos Venetsanopoulos | |
465 | 04c1254b | Constantinos Venetsanopoulos | |
466 | 04c1254b | Constantinos Venetsanopoulos | .. _conf-astakos: |
467 | 04c1254b | Constantinos Venetsanopoulos | |
468 | a96ec00f | Constantinos Venetsanopoulos | Configuration of Astakos |
469 | a96ec00f | Constantinos Venetsanopoulos | ======================== |
470 | a96ec00f | Constantinos Venetsanopoulos | |
471 | a96ec00f | Constantinos Venetsanopoulos | Conf Files |
472 | a96ec00f | Constantinos Venetsanopoulos | ---------- |
473 | a96ec00f | Constantinos Venetsanopoulos | |
474 | a96ec00f | Constantinos Venetsanopoulos | After astakos is successfully installed, you will find the directory |
475 | a96ec00f | Constantinos Venetsanopoulos | ``/etc/synnefo`` and some configuration files inside it. The files contain |
476 | a96ec00f | Constantinos Venetsanopoulos | commented configuration options, which are the default options. While installing |
477 | a96ec00f | Constantinos Venetsanopoulos | new snf-* components, new configuration files will appear inside the directory. |
478 | a96ec00f | Constantinos Venetsanopoulos | In this guide (and for all services), we will edit only the minimum necessary |
479 | a96ec00f | Constantinos Venetsanopoulos | configuration options, to reflect our setup. Everything else will remain as is. |
480 | a96ec00f | Constantinos Venetsanopoulos | |
481 | a96ec00f | Constantinos Venetsanopoulos | After getting familiar with synnefo, you will be able to customize the software |
482 | a96ec00f | Constantinos Venetsanopoulos | as you wish and fits your needs. Many options are available, to empower the |
483 | a96ec00f | Constantinos Venetsanopoulos | administrator with extensively customizable setups. |
484 | a96ec00f | Constantinos Venetsanopoulos | |
485 | a96ec00f | Constantinos Venetsanopoulos | For the snf-webproject component (installed as an astakos dependency), we |
486 | a96ec00f | Constantinos Venetsanopoulos | need the following: |
487 | a96ec00f | Constantinos Venetsanopoulos | |
488 | a96ec00f | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/10-snf-webproject-database.conf``. You will need to |
489 | a96ec00f | Constantinos Venetsanopoulos | uncomment and edit the ``DATABASES`` block to reflect our database: |
490 | a96ec00f | Constantinos Venetsanopoulos | |
491 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
492 | a96ec00f | Constantinos Venetsanopoulos | |
493 | a96ec00f | Constantinos Venetsanopoulos | DATABASES = { |
494 | a96ec00f | Constantinos Venetsanopoulos | 'default': { |
495 | a96ec00f | Constantinos Venetsanopoulos | # 'postgresql_psycopg2', 'postgresql','mysql', 'sqlite3' or 'oracle' |
496 | a96ec00f | Constantinos Venetsanopoulos | 'ENGINE': 'postgresql_psycopg2', |
497 | a96ec00f | Constantinos Venetsanopoulos | # ATTENTION: This *must* be the absolute path if using sqlite3. |
498 | a96ec00f | Constantinos Venetsanopoulos | # See: http://docs.djangoproject.com/en/dev/ref/settings/#name |
499 | a96ec00f | Constantinos Venetsanopoulos | 'NAME': 'snf_apps', |
500 | a96ec00f | Constantinos Venetsanopoulos | 'USER': 'synnefo', # Not used with sqlite3. |
501 | a96ec00f | Constantinos Venetsanopoulos | 'PASSWORD': 'examle_passw0rd', # Not used with sqlite3. |
502 | a96ec00f | Constantinos Venetsanopoulos | # Set to empty string for localhost. Not used with sqlite3. |
503 | a96ec00f | Constantinos Venetsanopoulos | 'HOST': '4.3.2.1', |
504 | a96ec00f | Constantinos Venetsanopoulos | # Set to empty string for default. Not used with sqlite3. |
505 | a96ec00f | Constantinos Venetsanopoulos | 'PORT': '5432', |
506 | a96ec00f | Constantinos Venetsanopoulos | } |
507 | a96ec00f | Constantinos Venetsanopoulos | } |
508 | a96ec00f | Constantinos Venetsanopoulos | |
509 | a96ec00f | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/10-snf-webproject-deploy.conf``. Uncomment and edit |
510 | a96ec00f | Constantinos Venetsanopoulos | ``SECRET_KEY``. This is a django specific setting which is used to provide a |
511 | a96ec00f | Constantinos Venetsanopoulos | seed in secret-key hashing algorithms. Set this to a random string of your |
512 | a96ec00f | Constantinos Venetsanopoulos | choise and keep it private: |
513 | a96ec00f | Constantinos Venetsanopoulos | |
514 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
515 | a96ec00f | Constantinos Venetsanopoulos | |
516 | a96ec00f | Constantinos Venetsanopoulos | SECRET_KEY = 'sy6)mw6a7x%n)-example_secret_key#zzk4jo6f2=uqu!1o%)' |
517 | a96ec00f | Constantinos Venetsanopoulos | |
518 | a96ec00f | Constantinos Venetsanopoulos | For astakos specific configuration, edit the following options in |
519 | 73ff1d54 | Constantinos Venetsanopoulos | ``/etc/synnefo/20-snf-astakos-app-settings.conf`` : |
520 | a96ec00f | Constantinos Venetsanopoulos | |
521 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
522 | a96ec00f | Constantinos Venetsanopoulos | |
523 | a96ec00f | Constantinos Venetsanopoulos | ASTAKOS_IM_MODULES = ['local'] |
524 | a96ec00f | Constantinos Venetsanopoulos | |
525 | a96ec00f | Constantinos Venetsanopoulos | ASTAKOS_COOKIE_DOMAIN = '.example.com' |
526 | a96ec00f | Constantinos Venetsanopoulos | |
527 | a96ec00f | Constantinos Venetsanopoulos | ASTAKOS_BASEURL = 'https://node1.example.com' |
528 | a96ec00f | Constantinos Venetsanopoulos | |
529 | a96ec00f | Constantinos Venetsanopoulos | ASTAKOS_SITENAME = '~okeanos demo example' |
530 | a96ec00f | Constantinos Venetsanopoulos | |
531 | a96ec00f | Constantinos Venetsanopoulos | ASTAKOS_RECAPTCHA_PUBLIC_KEY = 'example_recaptcha_public_key!@#$%^&*(' |
532 | a96ec00f | Constantinos Venetsanopoulos | ASTAKOS_RECAPTCHA_PRIVATE_KEY = 'example_recaptcha_private_key!@#$%^&*(' |
533 | 5b6feb88 | Vangelis Koukis | |
534 | a96ec00f | Constantinos Venetsanopoulos | ASTAKOS_RECAPTCHA_USE_SSL = True |
535 | 5b6feb88 | Vangelis Koukis | |
536 | a96ec00f | Constantinos Venetsanopoulos | ``ASTAKOS_IM_MODULES`` refers to the astakos login methods. For now only local |
537 | a96ec00f | Constantinos Venetsanopoulos | is supported. The ``ASTAKOS_COOKIE_DOMAIN`` should be the base url of our |
538 | a96ec00f | Constantinos Venetsanopoulos | domain (for all services). ``ASTAKOS_BASEURL`` is the astakos home page. |
539 | 5b6feb88 | Vangelis Koukis | |
540 | a96ec00f | Constantinos Venetsanopoulos | For the ``ASTAKOS_RECAPTCHA_PUBLIC_KEY`` and ``ASTAKOS_RECAPTCHA_PRIVATE_KEY`` |
541 | a96ec00f | Constantinos Venetsanopoulos | go to https://www.google.com/recaptcha/admin/create and create your own pair. |
542 | 5b6feb88 | Vangelis Koukis | |
543 | 610ff8cf | Constantinos Venetsanopoulos | Then edit ``/etc/synnefo/20-snf-astakos-app-cloudbar.conf`` : |
544 | 610ff8cf | Constantinos Venetsanopoulos | |
545 | 610ff8cf | Constantinos Venetsanopoulos | .. code-block:: console |
546 | 610ff8cf | Constantinos Venetsanopoulos | |
547 | 610ff8cf | Constantinos Venetsanopoulos | CLOUDBAR_LOCATION = 'https://node1.example.com/static/im/cloudbar/' |
548 | 610ff8cf | Constantinos Venetsanopoulos | |
549 | 610ff8cf | Constantinos Venetsanopoulos | CLOUDBAR_SERVICES_URL = 'https://node1.example.com/im/get_services' |
550 | 610ff8cf | Constantinos Venetsanopoulos | |
551 | 610ff8cf | Constantinos Venetsanopoulos | CLOUDBAR_MENU_URL = 'https://node1.example.com/im/get_menu' |
552 | 610ff8cf | Constantinos Venetsanopoulos | |
553 | 610ff8cf | Constantinos Venetsanopoulos | Those settings have to do with the black cloudbar endpoints and will be described |
554 | 610ff8cf | Constantinos Venetsanopoulos | in more detail later on in this guide. For now, just edit the domain to point at |
555 | 610ff8cf | Constantinos Venetsanopoulos | node1 which is where we have installed Astakos. |
556 | 610ff8cf | Constantinos Venetsanopoulos | |
557 | d189d11c | Constantinos Venetsanopoulos | If you are an advanced user and want to use the Shibboleth Authentication method, |
558 | d189d11c | Constantinos Venetsanopoulos | read the relative :ref:`section <shibboleth-auth>`. |
559 | d2a9f85f | Sofia Papagiannaki | |
560 | a96ec00f | Constantinos Venetsanopoulos | Database Initialization |
561 | a96ec00f | Constantinos Venetsanopoulos | ----------------------- |
562 | a96ec00f | Constantinos Venetsanopoulos | |
563 | de20a465 | Constantinos Venetsanopoulos | After configuration is done, we initialize the database by running: |
564 | 5b6feb88 | Vangelis Koukis | |
565 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
566 | a96ec00f | Constantinos Venetsanopoulos | |
567 | a96ec00f | Constantinos Venetsanopoulos | # snf-manage syncdb |
568 | a96ec00f | Constantinos Venetsanopoulos | |
569 | a96ec00f | Constantinos Venetsanopoulos | At this example we don't need to create a django superuser, so we select |
570 | a96ec00f | Constantinos Venetsanopoulos | ``[no]`` to the question. After a successful sync, we run the migration needed |
571 | a96ec00f | Constantinos Venetsanopoulos | for astakos: |
572 | 5b6feb88 | Vangelis Koukis | |
573 | 5b6feb88 | Vangelis Koukis | .. code-block:: console |
574 | 5b6feb88 | Vangelis Koukis | |
575 | a96ec00f | Constantinos Venetsanopoulos | # snf-manage migrate im |
576 | a96ec00f | Constantinos Venetsanopoulos | |
577 | de20a465 | Constantinos Venetsanopoulos | Then, we load the pre-defined user groups |
578 | d2a9f85f | Sofia Papagiannaki | |
579 | d2a9f85f | Sofia Papagiannaki | .. code-block:: console |
580 | d2a9f85f | Sofia Papagiannaki | |
581 | d2a9f85f | Sofia Papagiannaki | # snf-manage loaddata groups |
582 | d2a9f85f | Sofia Papagiannaki | |
583 | de20a465 | Constantinos Venetsanopoulos | .. _services-reg: |
584 | de20a465 | Constantinos Venetsanopoulos | |
585 | de20a465 | Constantinos Venetsanopoulos | Services Registration |
586 | de20a465 | Constantinos Venetsanopoulos | --------------------- |
587 | de20a465 | Constantinos Venetsanopoulos | |
588 | de20a465 | Constantinos Venetsanopoulos | When the database is ready, we configure the elements of the Astakos cloudbar, |
589 | de20a465 | Constantinos Venetsanopoulos | to point to our future services: |
590 | de20a465 | Constantinos Venetsanopoulos | |
591 | de20a465 | Constantinos Venetsanopoulos | .. code-block:: console |
592 | de20a465 | Constantinos Venetsanopoulos | |
593 | 62b10e3f | Constantinos Venetsanopoulos | # snf-manage service-add "~okeanos home" https://node1.example.com/im/ home-icon.png |
594 | 62b10e3f | Constantinos Venetsanopoulos | # snf-manage service-add "cyclades" https://node1.example.com/ui/ |
595 | 62b10e3f | Constantinos Venetsanopoulos | # snf-manage service-add "pithos+" https://node2.example.com/ui/ |
596 | de20a465 | Constantinos Venetsanopoulos | |
597 | de20a465 | Constantinos Venetsanopoulos | Servers Initialization |
598 | de20a465 | Constantinos Venetsanopoulos | ---------------------- |
599 | de20a465 | Constantinos Venetsanopoulos | |
600 | de20a465 | Constantinos Venetsanopoulos | Finally, we initialize the servers on node1: |
601 | de20a465 | Constantinos Venetsanopoulos | |
602 | de20a465 | Constantinos Venetsanopoulos | .. code-block:: console |
603 | de20a465 | Constantinos Venetsanopoulos | |
604 | de20a465 | Constantinos Venetsanopoulos | root@node1:~ # /etc/init.d/gunicorn restart |
605 | de20a465 | Constantinos Venetsanopoulos | root@node1:~ # /etc/init.d/apache2 restart |
606 | de20a465 | Constantinos Venetsanopoulos | |
607 | de20a465 | Constantinos Venetsanopoulos | We have now finished the Astakos setup. Let's test it now. |
608 | a96ec00f | Constantinos Venetsanopoulos | |
609 | a96ec00f | Constantinos Venetsanopoulos | |
610 | a96ec00f | Constantinos Venetsanopoulos | Testing of Astakos |
611 | a96ec00f | Constantinos Venetsanopoulos | ================== |
612 | a96ec00f | Constantinos Venetsanopoulos | |
613 | a96ec00f | Constantinos Venetsanopoulos | Open your favorite browser and go to: |
614 | a96ec00f | Constantinos Venetsanopoulos | |
615 | a96ec00f | Constantinos Venetsanopoulos | ``http://node1.example.com/im`` |
616 | a96ec00f | Constantinos Venetsanopoulos | |
617 | a96ec00f | Constantinos Venetsanopoulos | If this redirects you to ``https://node1.example.com/im`` and you can see |
618 | a96ec00f | Constantinos Venetsanopoulos | the "welcome" door of Astakos, then you have successfully setup Astakos. |
619 | a96ec00f | Constantinos Venetsanopoulos | |
620 | a96ec00f | Constantinos Venetsanopoulos | Let's create our first user. At the homepage click the "CREATE ACCOUNT" button |
621 | a96ec00f | Constantinos Venetsanopoulos | and fill all your data at the sign up form. Then click "SUBMIT". You should now |
622 | a96ec00f | Constantinos Venetsanopoulos | see a green box on the top, which informs you that you made a successful request |
623 | caa6c07d | Constantinos Venetsanopoulos | and the request has been sent to the administrators. So far so good, let's assume |
624 | caa6c07d | Constantinos Venetsanopoulos | that you created the user with username ``user@example.com``. |
625 | a96ec00f | Constantinos Venetsanopoulos | |
626 | a96ec00f | Constantinos Venetsanopoulos | Now we need to activate that user. Return to a command prompt at node1 and run: |
627 | a96ec00f | Constantinos Venetsanopoulos | |
628 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
629 | a96ec00f | Constantinos Venetsanopoulos | |
630 | 62b10e3f | Constantinos Venetsanopoulos | root@node1:~ # snf-manage user-list |
631 | a96ec00f | Constantinos Venetsanopoulos | |
632 | a96ec00f | Constantinos Venetsanopoulos | This command should show you a list with only one user; the one we just created. |
633 | a96ec00f | Constantinos Venetsanopoulos | This user should have an id with a value of ``1``. It should also have an |
634 | a96ec00f | Constantinos Venetsanopoulos | "active" status with the value of ``0`` (inactive). Now run: |
635 | a96ec00f | Constantinos Venetsanopoulos | |
636 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
637 | a96ec00f | Constantinos Venetsanopoulos | |
638 | 62b10e3f | Constantinos Venetsanopoulos | root@node1:~ # snf-manage user-modify --set-active 1 |
639 | a96ec00f | Constantinos Venetsanopoulos | |
640 | a96ec00f | Constantinos Venetsanopoulos | This modifies the active value to ``1``, and actually activates the user. |
641 | a96ec00f | Constantinos Venetsanopoulos | When running in production, the activation is done automatically with different |
642 | a96ec00f | Constantinos Venetsanopoulos | types of moderation, that Astakos supports. You can see the moderation methods |
643 | a96ec00f | Constantinos Venetsanopoulos | (by invitation, whitelists, matching regexp, etc.) at the Astakos specific |
644 | f846d8df | Constantinos Venetsanopoulos | documentation. In production, you can also manually activate a user, by sending |
645 | f846d8df | Constantinos Venetsanopoulos | him/her an activation email. See how to do this at the :ref:`User |
646 | f846d8df | Constantinos Venetsanopoulos | activation <user_activation>` section. |
647 | a96ec00f | Constantinos Venetsanopoulos | |
648 | a96ec00f | Constantinos Venetsanopoulos | Now let's go back to the homepage. Open ``http://node1.example.com/im`` with |
649 | a96ec00f | Constantinos Venetsanopoulos | your browser again. Try to sign in using your new credentials. If the astakos |
650 | a96ec00f | Constantinos Venetsanopoulos | menu appears and you can see your profile, then you have successfully setup |
651 | a96ec00f | Constantinos Venetsanopoulos | Astakos. |
652 | a96ec00f | Constantinos Venetsanopoulos | |
653 | a96ec00f | Constantinos Venetsanopoulos | Let's continue to install Pithos+ now. |
654 | a96ec00f | Constantinos Venetsanopoulos | |
655 | a96ec00f | Constantinos Venetsanopoulos | |
656 | a96ec00f | Constantinos Venetsanopoulos | Installation of Pithos+ on node2 |
657 | a96ec00f | Constantinos Venetsanopoulos | ================================ |
658 | a96ec00f | Constantinos Venetsanopoulos | |
659 | 138253bc | Constantinos Venetsanopoulos | To install pithos+, grab the packages from our repository (make sure you made |
660 | a96ec00f | Constantinos Venetsanopoulos | the additions needed in your ``/etc/apt/sources.list`` file, as described |
661 | a96ec00f | Constantinos Venetsanopoulos | previously), by running: |
662 | a96ec00f | Constantinos Venetsanopoulos | |
663 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
664 | a96ec00f | Constantinos Venetsanopoulos | |
665 | a96ec00f | Constantinos Venetsanopoulos | # apt-get install snf-pithos-app |
666 | a96ec00f | Constantinos Venetsanopoulos | |
667 | a96ec00f | Constantinos Venetsanopoulos | After successful installation of snf-pithos-app, make sure that also |
668 | a96ec00f | Constantinos Venetsanopoulos | snf-webproject has been installed (marked as "Recommended" package). Refer to |
669 | a96ec00f | Constantinos Venetsanopoulos | the "Installation of Astakos on node1" section, if you don't remember why this |
670 | 138253bc | Constantinos Venetsanopoulos | should happen. Now, install the pithos web interface: |
671 | a96ec00f | Constantinos Venetsanopoulos | |
672 | 138253bc | Constantinos Venetsanopoulos | .. code-block:: console |
673 | 138253bc | Constantinos Venetsanopoulos | |
674 | 138253bc | Constantinos Venetsanopoulos | # apt-get install snf-pithos-webclient |
675 | 138253bc | Constantinos Venetsanopoulos | |
676 | 138253bc | Constantinos Venetsanopoulos | This package provides the standalone pithos web client. The web client is the |
677 | 138253bc | Constantinos Venetsanopoulos | web UI for pithos+ and will be accessible by clicking "pithos+" on the Astakos |
678 | 138253bc | Constantinos Venetsanopoulos | interface's cloudbar, at the top of the Astakos homepage. |
679 | a96ec00f | Constantinos Venetsanopoulos | |
680 | caa6c07d | Constantinos Venetsanopoulos | |
681 | 04c1254b | Constantinos Venetsanopoulos | .. _conf-pithos: |
682 | 04c1254b | Constantinos Venetsanopoulos | |
683 | a96ec00f | Constantinos Venetsanopoulos | Configuration of Pithos+ |
684 | a96ec00f | Constantinos Venetsanopoulos | ======================== |
685 | a96ec00f | Constantinos Venetsanopoulos | |
686 | a96ec00f | Constantinos Venetsanopoulos | Conf Files |
687 | a96ec00f | Constantinos Venetsanopoulos | ---------- |
688 | a96ec00f | Constantinos Venetsanopoulos | |
689 | a96ec00f | Constantinos Venetsanopoulos | After pithos+ is successfully installed, you will find the directory |
690 | a96ec00f | Constantinos Venetsanopoulos | ``/etc/synnefo`` and some configuration files inside it, as you did in node1 |
691 | a96ec00f | Constantinos Venetsanopoulos | after installation of astakos. Here, you will not have to change anything that |
692 | a96ec00f | Constantinos Venetsanopoulos | has to do with snf-common or snf-webproject. Everything is set at node1. You |
693 | 138253bc | Constantinos Venetsanopoulos | only need to change settings that have to do with pithos+. Specifically: |
694 | a96ec00f | Constantinos Venetsanopoulos | |
695 | a96ec00f | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/20-snf-pithos-app-settings.conf``. There you need to set |
696 | a96ec00f | Constantinos Venetsanopoulos | only the two options: |
697 | a96ec00f | Constantinos Venetsanopoulos | |
698 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
699 | a96ec00f | Constantinos Venetsanopoulos | |
700 | a96ec00f | Constantinos Venetsanopoulos | PITHOS_BACKEND_DB_CONNECTION = 'postgresql://synnefo:example_passw0rd@node1.example.com:5432/snf_pithos' |
701 | a96ec00f | Constantinos Venetsanopoulos | |
702 | a96ec00f | Constantinos Venetsanopoulos | PITHOS_BACKEND_BLOCK_PATH = '/srv/pithos/data' |
703 | bdfd94c9 | Constantinos Venetsanopoulos | |
704 | 01bd066a | Sofia Papagiannaki | PITHOS_AUTHENTICATION_URL = 'https://node1.example.com/im/authenticate' |
705 | 01bd066a | Sofia Papagiannaki | PITHOS_AUTHENTICATION_USERS = None |
706 | a96ec00f | Constantinos Venetsanopoulos | |
707 | 3e6d0710 | Constantinos Venetsanopoulos | PITHOS_SERVICE_TOKEN = 'pithos_service_token22w==' |
708 | 3e6d0710 | Constantinos Venetsanopoulos | |
709 | bdfd94c9 | Constantinos Venetsanopoulos | The ``PITHOS_BACKEND_DB_CONNECTION`` option tells to the pithos+ app where to |
710 | bdfd94c9 | Constantinos Venetsanopoulos | find the pithos+ backend database. Above we tell pithos+ that its database is |
711 | bdfd94c9 | Constantinos Venetsanopoulos | ``snf_pithos`` at node1 and to connect as user ``synnefo`` with password |
712 | bdfd94c9 | Constantinos Venetsanopoulos | ``example_passw0rd``. All those settings where setup during node1's "Database |
713 | bdfd94c9 | Constantinos Venetsanopoulos | setup" section. |
714 | a96ec00f | Constantinos Venetsanopoulos | |
715 | bdfd94c9 | Constantinos Venetsanopoulos | The ``PITHOS_BACKEND_BLOCK_PATH`` option tells to the pithos+ app where to find |
716 | bdfd94c9 | Constantinos Venetsanopoulos | the pithos+ backend data. Above we tell pithos+ to store its data under |
717 | a96ec00f | Constantinos Venetsanopoulos | ``/srv/pithos/data``, which is visible by both nodes. We have already setup this |
718 | a96ec00f | Constantinos Venetsanopoulos | directory at node1's "Pithos+ data directory setup" section. |
719 | a96ec00f | Constantinos Venetsanopoulos | |
720 | 8f85321e | Sofia Papagiannaki | The ``PITHOS_AUTHENTICATION_URL`` option tells to the pithos+ app in which URI |
721 | bdfd94c9 | Constantinos Venetsanopoulos | is available the astakos authentication api. If not set, pithos+ tries to |
722 | 8f85321e | Sofia Papagiannaki | authenticate using the ``PITHOS_AUTHENTICATION_USERS`` user pool. |
723 | 8f85321e | Sofia Papagiannaki | |
724 | 3e6d0710 | Constantinos Venetsanopoulos | The ``PITHOS_SERVICE_TOKEN`` should be the Pithos+ token returned by running on |
725 | 3e6d0710 | Constantinos Venetsanopoulos | the Astakos node (node1 in our case): |
726 | 3e6d0710 | Constantinos Venetsanopoulos | |
727 | 3e6d0710 | Constantinos Venetsanopoulos | .. code-block:: console |
728 | 3e6d0710 | Constantinos Venetsanopoulos | |
729 | 62b10e3f | Constantinos Venetsanopoulos | # snf-manage service-list |
730 | 3e6d0710 | Constantinos Venetsanopoulos | |
731 | 3e6d0710 | Constantinos Venetsanopoulos | The token has been generated automatically during the :ref:`Pithos+ service |
732 | 3e6d0710 | Constantinos Venetsanopoulos | registration <services-reg>`. |
733 | 3e6d0710 | Constantinos Venetsanopoulos | |
734 | 138253bc | Constantinos Venetsanopoulos | Then we need to setup the web UI and connect it to astakos. To do so, edit |
735 | 138253bc | Constantinos Venetsanopoulos | ``/etc/synnefo/20-snf-pithos-webclient-settings.conf``: |
736 | 138253bc | Constantinos Venetsanopoulos | |
737 | 138253bc | Constantinos Venetsanopoulos | .. code-block:: console |
738 | 138253bc | Constantinos Venetsanopoulos | |
739 | 138253bc | Constantinos Venetsanopoulos | PITHOS_UI_LOGIN_URL = "https://node1.example.com/im/login?next=" |
740 | 138253bc | Constantinos Venetsanopoulos | PITHOS_UI_FEEDBACK_URL = "https://node1.example.com/im/feedback" |
741 | 138253bc | Constantinos Venetsanopoulos | |
742 | 138253bc | Constantinos Venetsanopoulos | The ``PITHOS_UI_LOGIN_URL`` option tells the client where to redirect you, if |
743 | 138253bc | Constantinos Venetsanopoulos | you are not logged in. The ``PITHOS_UI_FEEDBACK_URL`` option points at the |
744 | 138253bc | Constantinos Venetsanopoulos | pithos+ feedback form. Astakos already provides a generic feedback form for all |
745 | 138253bc | Constantinos Venetsanopoulos | services, so we use this one. |
746 | 138253bc | Constantinos Venetsanopoulos | |
747 | 138253bc | Constantinos Venetsanopoulos | Then edit ``/etc/synnefo/20-snf-pithos-webclient-cloudbar.conf``, to connect the |
748 | 138253bc | Constantinos Venetsanopoulos | pithos+ web UI with the astakos web UI (through the top cloudbar): |
749 | 138253bc | Constantinos Venetsanopoulos | |
750 | 138253bc | Constantinos Venetsanopoulos | .. code-block:: console |
751 | 138253bc | Constantinos Venetsanopoulos | |
752 | 138253bc | Constantinos Venetsanopoulos | CLOUDBAR_LOCATION = 'https://node1.example.com/static/im/cloudbar/' |
753 | de20a465 | Constantinos Venetsanopoulos | PITHOS_UI_CLOUDBAR_ACTIVE_SERVICE = '3' |
754 | 138253bc | Constantinos Venetsanopoulos | CLOUDBAR_SERVICES_URL = 'https://node1.example.com/im/get_services' |
755 | 138253bc | Constantinos Venetsanopoulos | CLOUDBAR_MENU_URL = 'https://node1.example.com/im/get_menu' |
756 | 138253bc | Constantinos Venetsanopoulos | |
757 | 138253bc | Constantinos Venetsanopoulos | The ``CLOUDBAR_LOCATION`` tells the client where to find the astakos common |
758 | 138253bc | Constantinos Venetsanopoulos | cloudbar. |
759 | 138253bc | Constantinos Venetsanopoulos | |
760 | de20a465 | Constantinos Venetsanopoulos | The ``PITHOS_UI_CLOUDBAR_ACTIVE_SERVICE`` points to an already registered |
761 | de20a465 | Constantinos Venetsanopoulos | Astakos service. You can see all :ref:`registered services <services-reg>` by |
762 | de20a465 | Constantinos Venetsanopoulos | running on the Astakos node (node1): |
763 | de20a465 | Constantinos Venetsanopoulos | |
764 | de20a465 | Constantinos Venetsanopoulos | .. code-block:: console |
765 | de20a465 | Constantinos Venetsanopoulos | |
766 | 62b10e3f | Constantinos Venetsanopoulos | # snf-manage service-list |
767 | de20a465 | Constantinos Venetsanopoulos | |
768 | de20a465 | Constantinos Venetsanopoulos | The value of ``PITHOS_UI_CLOUDBAR_ACTIVE_SERVICE`` should be the pithos service's |
769 | de20a465 | Constantinos Venetsanopoulos | ``id`` as shown by the above command, in our case ``3``. |
770 | 138253bc | Constantinos Venetsanopoulos | |
771 | 138253bc | Constantinos Venetsanopoulos | The ``CLOUDBAR_SERVICES_URL`` and ``CLOUDBAR_MENU_URL`` options are used by the |
772 | 138253bc | Constantinos Venetsanopoulos | pithos+ web client to get from astakos all the information needed to fill its |
773 | bdfd94c9 | Constantinos Venetsanopoulos | own cloudbar. So we put our astakos deployment urls there. |
774 | 138253bc | Constantinos Venetsanopoulos | |
775 | a96ec00f | Constantinos Venetsanopoulos | Servers Initialization |
776 | a96ec00f | Constantinos Venetsanopoulos | ---------------------- |
777 | a96ec00f | Constantinos Venetsanopoulos | |
778 | a96ec00f | Constantinos Venetsanopoulos | After configuration is done, we initialize the servers on node2: |
779 | a96ec00f | Constantinos Venetsanopoulos | |
780 | a96ec00f | Constantinos Venetsanopoulos | .. code-block:: console |
781 | a96ec00f | Constantinos Venetsanopoulos | |
782 | a96ec00f | Constantinos Venetsanopoulos | root@node2:~ # /etc/init.d/gunicorn restart |
783 | a96ec00f | Constantinos Venetsanopoulos | root@node2:~ # /etc/init.d/apache2 restart |
784 | a96ec00f | Constantinos Venetsanopoulos | |
785 | a96ec00f | Constantinos Venetsanopoulos | You have now finished the Pithos+ setup. Let's test it now. |
786 | a96ec00f | Constantinos Venetsanopoulos | |
787 | a96ec00f | Constantinos Venetsanopoulos | |
788 | a96ec00f | Constantinos Venetsanopoulos | Testing of Pithos+ |
789 | a96ec00f | Constantinos Venetsanopoulos | ================== |
790 | a96ec00f | Constantinos Venetsanopoulos | |
791 | bdfd94c9 | Constantinos Venetsanopoulos | Open your browser and go to the Astakos homepage: |
792 | bdfd94c9 | Constantinos Venetsanopoulos | |
793 | bdfd94c9 | Constantinos Venetsanopoulos | ``http://node1.example.com/im`` |
794 | bdfd94c9 | Constantinos Venetsanopoulos | |
795 | bdfd94c9 | Constantinos Venetsanopoulos | Login, and you will see your profile page. Now, click the "pithos+" link on the |
796 | bdfd94c9 | Constantinos Venetsanopoulos | top black cloudbar. If everything was setup correctly, this will redirect you |
797 | bdfd94c9 | Constantinos Venetsanopoulos | to: |
798 | bdfd94c9 | Constantinos Venetsanopoulos | |
799 | bdfd94c9 | Constantinos Venetsanopoulos | ``https://node2.example.com/ui`` |
800 | bdfd94c9 | Constantinos Venetsanopoulos | |
801 | bdfd94c9 | Constantinos Venetsanopoulos | and you will see the blue interface of the Pithos+ application. Click the |
802 | bdfd94c9 | Constantinos Venetsanopoulos | orange "Upload" button and upload your first file. If the file gets uploaded |
803 | bdfd94c9 | Constantinos Venetsanopoulos | successfully, then this is your first sign of a successful Pithos+ installation. |
804 | bdfd94c9 | Constantinos Venetsanopoulos | Go ahead and experiment with the interface to make sure everything works |
805 | bdfd94c9 | Constantinos Venetsanopoulos | correctly. |
806 | bdfd94c9 | Constantinos Venetsanopoulos | |
807 | bdfd94c9 | Constantinos Venetsanopoulos | You can also use the Pithos+ clients to sync data from your Windows PC or MAC. |
808 | bdfd94c9 | Constantinos Venetsanopoulos | |
809 | bdfd94c9 | Constantinos Venetsanopoulos | If you don't stumble on any problems, then you have successfully installed |
810 | bdfd94c9 | Constantinos Venetsanopoulos | Pithos+, which you can use as a standalone File Storage Service. |
811 | bdfd94c9 | Constantinos Venetsanopoulos | |
812 | bdfd94c9 | Constantinos Venetsanopoulos | If you would like to do more, such as: |
813 | bdfd94c9 | Constantinos Venetsanopoulos | |
814 | bdfd94c9 | Constantinos Venetsanopoulos | * Spawning VMs |
815 | bdfd94c9 | Constantinos Venetsanopoulos | * Spawning VMs from Images stored on Pithos+ |
816 | bdfd94c9 | Constantinos Venetsanopoulos | * Uploading your custom Images to Pithos+ |
817 | bdfd94c9 | Constantinos Venetsanopoulos | * Spawning VMs from those custom Images |
818 | bdfd94c9 | Constantinos Venetsanopoulos | * Registering existing Pithos+ files as Images |
819 | 7a8df455 | Constantinos Venetsanopoulos | * Connect VMs to the Internet |
820 | 7a8df455 | Constantinos Venetsanopoulos | * Create Private Networks |
821 | 7a8df455 | Constantinos Venetsanopoulos | * Add VMs to Private Networks |
822 | bdfd94c9 | Constantinos Venetsanopoulos | |
823 | bdfd94c9 | Constantinos Venetsanopoulos | please continue with the rest of the guide. |
824 | a96ec00f | Constantinos Venetsanopoulos | |
825 | caa6c07d | Constantinos Venetsanopoulos | |
826 | 7a8df455 | Constantinos Venetsanopoulos | Cyclades (and Plankton) Prerequisites |
827 | 7a8df455 | Constantinos Venetsanopoulos | ===================================== |
828 | bc055d09 | Constantinos Venetsanopoulos | |
829 | caa6c07d | Constantinos Venetsanopoulos | Before proceeding with the Cyclades (and Plankton) installation, make sure you |
830 | caa6c07d | Constantinos Venetsanopoulos | have successfully set up Astakos and Pithos+ first, because Cyclades depends |
831 | caa6c07d | Constantinos Venetsanopoulos | on them. If you don't have a working Astakos and Pithos+ installation yet, |
832 | caa6c07d | Constantinos Venetsanopoulos | please return to the :ref:`top <quick-install-admin-guide>` of this guide. |
833 | bc055d09 | Constantinos Venetsanopoulos | |
834 | caa6c07d | Constantinos Venetsanopoulos | Besides Astakos and Pithos+, you will also need a number of additional working |
835 | caa6c07d | Constantinos Venetsanopoulos | prerequisites, before you start the Cyclades installation. |
836 | bc055d09 | Constantinos Venetsanopoulos | |
837 | caa6c07d | Constantinos Venetsanopoulos | Ganeti |
838 | 7a8df455 | Constantinos Venetsanopoulos | ------ |
839 | bc055d09 | Constantinos Venetsanopoulos | |
840 | caa6c07d | Constantinos Venetsanopoulos | `Ganeti <http://code.google.com/p/ganeti/>`_ handles the low level VM management |
841 | caa6c07d | Constantinos Venetsanopoulos | for Cyclades, so Cyclades requires a working Ganeti installation at the backend. |
842 | caa6c07d | Constantinos Venetsanopoulos | Please refer to the |
843 | caa6c07d | Constantinos Venetsanopoulos | `ganeti documentation <http://docs.ganeti.org/ganeti/2.5/html>`_ for all the |
844 | bc055d09 | Constantinos Venetsanopoulos | gory details. A successful Ganeti installation concludes with a working |
845 | caa6c07d | Constantinos Venetsanopoulos | :ref:`GANETI-MASTER <GANETI_NODES>` and a number of :ref:`GANETI-NODEs |
846 | caa6c07d | Constantinos Venetsanopoulos | <GANETI_NODES>`. |
847 | caa6c07d | Constantinos Venetsanopoulos | |
848 | caa6c07d | Constantinos Venetsanopoulos | The above Ganeti cluster can run on different physical machines than node1 and |
849 | caa6c07d | Constantinos Venetsanopoulos | node2 and can scale independently, according to your needs. |
850 | caa6c07d | Constantinos Venetsanopoulos | |
851 | caa6c07d | Constantinos Venetsanopoulos | For the purpose of this guide, we will assume that the :ref:`GANETI-MASTER |
852 | caa6c07d | Constantinos Venetsanopoulos | <GANETI_NODES>` runs on node1 and is VM-capable. Also, node2 is a |
853 | caa6c07d | Constantinos Venetsanopoulos | :ref:`GANETI-NODE <GANETI_NODES>` and is Master-capable and VM-capable too. |
854 | caa6c07d | Constantinos Venetsanopoulos | |
855 | caa6c07d | Constantinos Venetsanopoulos | We highly recommend that you read the official Ganeti documentation, if you are |
856 | caa6c07d | Constantinos Venetsanopoulos | not familiar with Ganeti. If you are extremely impatient, you can result with |
857 | cc16407a | Dimitris Aragiorgis | the above assumed setup by running on both nodes: |
858 | caa6c07d | Constantinos Venetsanopoulos | |
859 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
860 | caa6c07d | Constantinos Venetsanopoulos | |
861 | cc16407a | Dimitris Aragiorgis | # apt-get install ganeti2 |
862 | cc16407a | Dimitris Aragiorgis | # apt-get install ganeti-htools |
863 | cc16407a | Dimitris Aragiorgis | # modprobe drbd minor_count=255 usermode_helper=/bin/true |
864 | cc16407a | Dimitris Aragiorgis | |
865 | cc16407a | Dimitris Aragiorgis | Unfortunatelly, stock Ganeti doesn't support IP pool management yet (we are |
866 | cc16407a | Dimitris Aragiorgis | working hard to merge it upstream for Ganeti 2.7). Synnefo depends on the IP |
867 | cc16407a | Dimitris Aragiorgis | pool functionality of Ganeti, so you have to use GRNET's patches for now. To |
868 | cc16407a | Dimitris Aragiorgis | do so you have to build your own package from source: |
869 | cc16407a | Dimitris Aragiorgis | |
870 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
871 | cc16407a | Dimitris Aragiorgis | |
872 | cc16407a | Dimitris Aragiorgis | # apt-get install python-bitarray |
873 | cc16407a | Dimitris Aragiorgis | # apt-get install git-buildpackage |
874 | cc16407a | Dimitris Aragiorgis | # git clone https://code.grnet.gr/git/ganeti-local |
875 | cc16407a | Dimitris Aragiorgis | # mkdir build-area |
876 | cc16407a | Dimitris Aragiorgis | # cd ganeti-local |
877 | cc16407a | Dimitris Aragiorgis | # git checkout stable-2.6-grnet |
878 | cc16407a | Dimitris Aragiorgis | # git checkout debian-2.6-grnet |
879 | cc16407a | Dimitris Aragiorgis | # git-buildpackage --git-upstream-branch=stable-2.6-grnet \ |
880 | cc16407a | Dimitris Aragiorgis | --git-debian-branch=debian-2.6-grnet \ |
881 | cc16407a | Dimitris Aragiorgis | --git-export=INDEX \ |
882 | cc16407a | Dimitris Aragiorgis | --git-ignore-new |
883 | cc16407a | Dimitris Aragiorgis | |
884 | cc16407a | Dimitris Aragiorgis | This will create two deb packages in build-area. You should then run in both |
885 | cc16407a | Dimitris Aragiorgis | nodes: |
886 | cc16407a | Dimitris Aragiorgis | |
887 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
888 | cc16407a | Dimitris Aragiorgis | |
889 | cc16407a | Dimitris Aragiorgis | # dpkg -i build-area/\*deb |
890 | cc16407a | Dimitris Aragiorgis | # apt-get install -f |
891 | caa6c07d | Constantinos Venetsanopoulos | |
892 | caa6c07d | Constantinos Venetsanopoulos | We assume that Ganeti will use the KVM hypervisor. After installing Ganeti on |
893 | caa6c07d | Constantinos Venetsanopoulos | both nodes, choose a domain name that resolves to a valid floating IP (let's say |
894 | caa6c07d | Constantinos Venetsanopoulos | it's ``ganeti.node1.example.com``). Make sure node1 and node2 have root access |
895 | caa6c07d | Constantinos Venetsanopoulos | between each other using ssh keys and not passwords. Also, make sure there is an |
896 | caa6c07d | Constantinos Venetsanopoulos | lvm volume group named ``ganeti`` that will host your VMs' disks. Finally, setup |
897 | cc16407a | Dimitris Aragiorgis | a bridge interface on the host machines (e.g: br0). Then run on node1: |
898 | caa6c07d | Constantinos Venetsanopoulos | |
899 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
900 | caa6c07d | Constantinos Venetsanopoulos | |
901 | caa6c07d | Constantinos Venetsanopoulos | root@node1:~ # gnt-cluster init --enabled-hypervisors=kvm --no-ssh-init |
902 | caa6c07d | Constantinos Venetsanopoulos | --no-etc-hosts --vg-name=ganeti |
903 | caa6c07d | Constantinos Venetsanopoulos | --nic-parameters link=br0 --master-netdev eth0 |
904 | caa6c07d | Constantinos Venetsanopoulos | ganeti.node1.example.com |
905 | caa6c07d | Constantinos Venetsanopoulos | root@node1:~ # gnt-cluster modify --default-iallocator hail |
906 | caa6c07d | Constantinos Venetsanopoulos | root@node1:~ # gnt-cluster modify --hypervisor-parameters kvm:kernel_path= |
907 | caa6c07d | Constantinos Venetsanopoulos | root@node1:~ # gnt-cluster modify --hypervisor-parameters kvm:vnc_bind_address=0.0.0.0 |
908 | caa6c07d | Constantinos Venetsanopoulos | |
909 | caa6c07d | Constantinos Venetsanopoulos | root@node1:~ # gnt-node add --no-node-setup --master-capable=yes |
910 | caa6c07d | Constantinos Venetsanopoulos | --vm-capable=yes node2.example.com |
911 | cc16407a | Dimitris Aragiorgis | root@node1:~ # gnt-cluster modify --disk-parameters=drbd:metavg=ganeti |
912 | cc16407a | Dimitris Aragiorgis | root@node1:~ # gnt-group modify --disk-parameters=drbd:metavg=ganeti default |
913 | caa6c07d | Constantinos Venetsanopoulos | |
914 | caa6c07d | Constantinos Venetsanopoulos | For any problems you may stumble upon installing Ganeti, please refer to the |
915 | caa6c07d | Constantinos Venetsanopoulos | `official documentation <http://docs.ganeti.org/ganeti/2.5/html>`_. Installation |
916 | caa6c07d | Constantinos Venetsanopoulos | of Ganeti is out of the scope of this guide. |
917 | caa6c07d | Constantinos Venetsanopoulos | |
918 | caa6c07d | Constantinos Venetsanopoulos | .. _cyclades-install-snfimage: |
919 | caa6c07d | Constantinos Venetsanopoulos | |
920 | caa6c07d | Constantinos Venetsanopoulos | snf-image |
921 | 7a8df455 | Constantinos Venetsanopoulos | --------- |
922 | caa6c07d | Constantinos Venetsanopoulos | |
923 | caa6c07d | Constantinos Venetsanopoulos | Installation |
924 | 7a8df455 | Constantinos Venetsanopoulos | ~~~~~~~~~~~~ |
925 | caa6c07d | Constantinos Venetsanopoulos | For :ref:`Cyclades <cyclades>` to be able to launch VMs from specified Images, |
926 | caa6c07d | Constantinos Venetsanopoulos | you need the :ref:`snf-image <snf-image>` OS Definition installed on *all* |
927 | caa6c07d | Constantinos Venetsanopoulos | VM-capable Ganeti nodes. This means we need :ref:`snf-image <snf-image>` on |
928 | caa6c07d | Constantinos Venetsanopoulos | node1 and node2. You can do this by running on *both* nodes: |
929 | caa6c07d | Constantinos Venetsanopoulos | |
930 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
931 | caa6c07d | Constantinos Venetsanopoulos | |
932 | 053d0dfc | Constantinos Venetsanopoulos | # apt-get install snf-image-host snf-pithos-backend python-psycopg2 |
933 | 1a37da56 | Constantinos Venetsanopoulos | |
934 | 1a37da56 | Constantinos Venetsanopoulos | snf-image also needs the `snf-pithos-backend <snf-pithos-backend>`, to be able to |
935 | 053d0dfc | Constantinos Venetsanopoulos | handle image files stored on Pithos+. It also needs `python-psycopg2` to be able |
936 | 053d0dfc | Constantinos Venetsanopoulos | to access the Pithos+ database. This is why, we also install them on *all* |
937 | 1a37da56 | Constantinos Venetsanopoulos | VM-capable Ganeti nodes. |
938 | caa6c07d | Constantinos Venetsanopoulos | |
939 | caa6c07d | Constantinos Venetsanopoulos | Now, you need to download and save the corresponding helper package. Please see |
940 | caa6c07d | Constantinos Venetsanopoulos | `here <https://code.grnet.gr/projects/snf-image/files>`_ for the latest package. Let's |
941 | 62b10e3f | Constantinos Venetsanopoulos | assume that you installed snf-image-host version 0.4.4-1. Then, you need |
942 | 62b10e3f | Constantinos Venetsanopoulos | snf-image-helper v0.4.4-1 on *both* nodes: |
943 | caa6c07d | Constantinos Venetsanopoulos | |
944 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
945 | caa6c07d | Constantinos Venetsanopoulos | |
946 | caa6c07d | Constantinos Venetsanopoulos | # cd /var/lib/snf-image/helper/ |
947 | 62b10e3f | Constantinos Venetsanopoulos | # wget https://code.grnet.gr/attachments/download/1058/snf-image-helper_0.4.4-1_all.deb |
948 | caa6c07d | Constantinos Venetsanopoulos | |
949 | caa6c07d | Constantinos Venetsanopoulos | .. warning:: Be careful: Do NOT install the snf-image-helper debian package. |
950 | caa6c07d | Constantinos Venetsanopoulos | Just put it under /var/lib/snf-image/helper/ |
951 | caa6c07d | Constantinos Venetsanopoulos | |
952 | caa6c07d | Constantinos Venetsanopoulos | Once, you have downloaded the snf-image-helper package, create the helper VM by |
953 | caa6c07d | Constantinos Venetsanopoulos | running on *both* nodes: |
954 | caa6c07d | Constantinos Venetsanopoulos | |
955 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
956 | caa6c07d | Constantinos Venetsanopoulos | |
957 | 62b10e3f | Constantinos Venetsanopoulos | # ln -s snf-image-helper_0.4.4-1_all.deb snf-image-helper.deb |
958 | caa6c07d | Constantinos Venetsanopoulos | # snf-image-update-helper |
959 | caa6c07d | Constantinos Venetsanopoulos | |
960 | caa6c07d | Constantinos Venetsanopoulos | This will create all the needed files under ``/var/lib/snf-image/helper/`` for |
961 | caa6c07d | Constantinos Venetsanopoulos | snf-image-host to run successfully. |
962 | caa6c07d | Constantinos Venetsanopoulos | |
963 | caa6c07d | Constantinos Venetsanopoulos | Configuration |
964 | 7a8df455 | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~ |
965 | caa6c07d | Constantinos Venetsanopoulos | snf-image supports native access to Images stored on Pithos+. This means that |
966 | caa6c07d | Constantinos Venetsanopoulos | snf-image can talk directly to the Pithos+ backend, without the need of providing |
967 | caa6c07d | Constantinos Venetsanopoulos | a public URL. More details, are described in the next section. For now, the only |
968 | caa6c07d | Constantinos Venetsanopoulos | thing we need to do, is configure snf-image to access our Pithos+ backend. |
969 | caa6c07d | Constantinos Venetsanopoulos | |
970 | caa6c07d | Constantinos Venetsanopoulos | To do this, we need to set the corresponding variables in |
971 | caa6c07d | Constantinos Venetsanopoulos | ``/etc/default/snf-image``, to reflect our Pithos+ setup: |
972 | caa6c07d | Constantinos Venetsanopoulos | |
973 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
974 | caa6c07d | Constantinos Venetsanopoulos | |
975 | caa6c07d | Constantinos Venetsanopoulos | PITHOS_DB="postgresql://synnefo:example_passw0rd@node1.example.com:5432/snf_pithos" |
976 | caa6c07d | Constantinos Venetsanopoulos | |
977 | caa6c07d | Constantinos Venetsanopoulos | PITHOS_DATA="/srv/pithos/data" |
978 | caa6c07d | Constantinos Venetsanopoulos | |
979 | caa6c07d | Constantinos Venetsanopoulos | If you have installed your Ganeti cluster on different nodes than node1 and node2 make |
980 | caa6c07d | Constantinos Venetsanopoulos | sure that ``/srv/pithos/data`` is visible by all of them. |
981 | caa6c07d | Constantinos Venetsanopoulos | |
982 | caa6c07d | Constantinos Venetsanopoulos | If you would like to use Images that are also/only stored locally, you need to |
983 | caa6c07d | Constantinos Venetsanopoulos | save them under ``IMAGE_DIR``, however this guide targets Images stored only on |
984 | caa6c07d | Constantinos Venetsanopoulos | Pithos+. |
985 | caa6c07d | Constantinos Venetsanopoulos | |
986 | caa6c07d | Constantinos Venetsanopoulos | Testing |
987 | 7a8df455 | Constantinos Venetsanopoulos | ~~~~~~~ |
988 | caa6c07d | Constantinos Venetsanopoulos | You can test that snf-image is successfully installed by running on the |
989 | caa6c07d | Constantinos Venetsanopoulos | :ref:`GANETI-MASTER <GANETI_NODES>` (in our case node1): |
990 | caa6c07d | Constantinos Venetsanopoulos | |
991 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
992 | caa6c07d | Constantinos Venetsanopoulos | |
993 | caa6c07d | Constantinos Venetsanopoulos | # gnt-os diagnose |
994 | caa6c07d | Constantinos Venetsanopoulos | |
995 | caa6c07d | Constantinos Venetsanopoulos | This should return ``valid`` for snf-image. |
996 | caa6c07d | Constantinos Venetsanopoulos | |
997 | caa6c07d | Constantinos Venetsanopoulos | If you are interested to learn more about snf-image's internals (and even use |
998 | caa6c07d | Constantinos Venetsanopoulos | it alongside Ganeti without Synnefo), please see |
999 | caa6c07d | Constantinos Venetsanopoulos | `here <https://code.grnet.gr/projects/snf-image/wiki>`_ for information concerning |
1000 | caa6c07d | Constantinos Venetsanopoulos | installation instructions, documentation on the design and implementation, and |
1001 | caa6c07d | Constantinos Venetsanopoulos | supported Image formats. |
1002 | caa6c07d | Constantinos Venetsanopoulos | |
1003 | 8a4cd31b | Constantinos Venetsanopoulos | .. _snf-image-images: |
1004 | 8a4cd31b | Constantinos Venetsanopoulos | |
1005 | caa6c07d | Constantinos Venetsanopoulos | snf-image's actual Images |
1006 | 7a8df455 | Constantinos Venetsanopoulos | ------------------------- |
1007 | caa6c07d | Constantinos Venetsanopoulos | |
1008 | caa6c07d | Constantinos Venetsanopoulos | Now that snf-image is installed successfully we need to provide it with some |
1009 | caa6c07d | Constantinos Venetsanopoulos | Images. :ref:`snf-image <snf-image>` supports Images stored in ``extdump``, |
1010 | caa6c07d | Constantinos Venetsanopoulos | ``ntfsdump`` or ``diskdump`` format. We recommend the use of the ``diskdump`` |
1011 | caa6c07d | Constantinos Venetsanopoulos | format. For more information about snf-image's Image formats see `here |
1012 | caa6c07d | Constantinos Venetsanopoulos | <https://code.grnet.gr/projects/snf-image/wiki/Image_Format>`_. |
1013 | caa6c07d | Constantinos Venetsanopoulos | |
1014 | caa6c07d | Constantinos Venetsanopoulos | :ref:`snf-image <snf-image>` also supports three (3) different locations for the |
1015 | caa6c07d | Constantinos Venetsanopoulos | above Images to be stored: |
1016 | caa6c07d | Constantinos Venetsanopoulos | |
1017 | caa6c07d | Constantinos Venetsanopoulos | * Under a local folder (usually an NFS mount, configurable as ``IMAGE_DIR`` in |
1018 | caa6c07d | Constantinos Venetsanopoulos | :file:`/etc/default/snf-image`) |
1019 | caa6c07d | Constantinos Venetsanopoulos | * On a remote host (accessible via a public URL e.g: http://... or ftp://...) |
1020 | caa6c07d | Constantinos Venetsanopoulos | * On Pithos+ (accessible natively, not only by its public URL) |
1021 | caa6c07d | Constantinos Venetsanopoulos | |
1022 | caa6c07d | Constantinos Venetsanopoulos | For the purpose of this guide, we will use the `Debian Squeeze Base Image |
1023 | caa6c07d | Constantinos Venetsanopoulos | <https://pithos.okeanos.grnet.gr/public/9epgb>`_ found on the official |
1024 | caa6c07d | Constantinos Venetsanopoulos | `snf-image page |
1025 | caa6c07d | Constantinos Venetsanopoulos | <https://code.grnet.gr/projects/snf-image/wiki#Sample-Images>`_. The image is |
1026 | caa6c07d | Constantinos Venetsanopoulos | of type ``diskdump``. We will store it in our new Pithos+ installation. |
1027 | caa6c07d | Constantinos Venetsanopoulos | |
1028 | caa6c07d | Constantinos Venetsanopoulos | To do so, do the following: |
1029 | caa6c07d | Constantinos Venetsanopoulos | |
1030 | caa6c07d | Constantinos Venetsanopoulos | a) Download the Image from the official snf-image page (`image link |
1031 | caa6c07d | Constantinos Venetsanopoulos | <https://pithos.okeanos.grnet.gr/public/9epgb>`_). |
1032 | caa6c07d | Constantinos Venetsanopoulos | |
1033 | caa6c07d | Constantinos Venetsanopoulos | b) Upload the Image to your Pithos+ installation, either using the Pithos+ Web UI |
1034 | caa6c07d | Constantinos Venetsanopoulos | or the command line client `kamaki |
1035 | caa6c07d | Constantinos Venetsanopoulos | <http://docs.dev.grnet.gr/kamaki/latest/index.html>`_. |
1036 | caa6c07d | Constantinos Venetsanopoulos | |
1037 | caa6c07d | Constantinos Venetsanopoulos | Once the Image is uploaded successfully, download the Image's metadata file |
1038 | caa6c07d | Constantinos Venetsanopoulos | from the official snf-image page (`image_metadata link |
1039 | caa6c07d | Constantinos Venetsanopoulos | <https://pithos.okeanos.grnet.gr/public/gwqcv>`_). You will need it, for |
1040 | caa6c07d | Constantinos Venetsanopoulos | spawning a VM from Ganeti, in the next section. |
1041 | caa6c07d | Constantinos Venetsanopoulos | |
1042 | caa6c07d | Constantinos Venetsanopoulos | Of course, you can repeat the procedure to upload more Images, available from the |
1043 | caa6c07d | Constantinos Venetsanopoulos | `official snf-image page |
1044 | caa6c07d | Constantinos Venetsanopoulos | <https://code.grnet.gr/projects/snf-image/wiki#Sample-Images>`_. |
1045 | caa6c07d | Constantinos Venetsanopoulos | |
1046 | 8a4cd31b | Constantinos Venetsanopoulos | .. _ganeti-with-pithos-images: |
1047 | 8a4cd31b | Constantinos Venetsanopoulos | |
1048 | caa6c07d | Constantinos Venetsanopoulos | Spawning a VM from a Pithos+ Image, using Ganeti |
1049 | 7a8df455 | Constantinos Venetsanopoulos | ------------------------------------------------ |
1050 | caa6c07d | Constantinos Venetsanopoulos | |
1051 | caa6c07d | Constantinos Venetsanopoulos | Now, it is time to test our installation so far. So, we have Astakos and |
1052 | caa6c07d | Constantinos Venetsanopoulos | Pithos+ installed, we have a working Ganeti installation, the snf-image |
1053 | caa6c07d | Constantinos Venetsanopoulos | definition installed on all VM-capable nodes and a Debian Squeeze Image on |
1054 | caa6c07d | Constantinos Venetsanopoulos | Pithos+. Make sure you also have the `metadata file |
1055 | caa6c07d | Constantinos Venetsanopoulos | <https://pithos.okeanos.grnet.gr/public/gwqcv>`_ for this image. |
1056 | caa6c07d | Constantinos Venetsanopoulos | |
1057 | caa6c07d | Constantinos Venetsanopoulos | Run on the :ref:`GANETI-MASTER's <GANETI_NODES>` (node1) command line: |
1058 | caa6c07d | Constantinos Venetsanopoulos | |
1059 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
1060 | caa6c07d | Constantinos Venetsanopoulos | |
1061 | cc16407a | Dimitris Aragiorgis | # gnt-instance add -o snf-image+default --os-parameters \ |
1062 | cc16407a | Dimitris Aragiorgis | img_passwd=my_vm_example_passw0rd,img_format=diskdump,img_id="pithos://user@example.com/pithos/debian_base-6.0-7-x86_64.diskdump",img_properties='{"OSFAMILY":"linux"\,"ROOT_PARTITION":"1"}' \ |
1063 | cc16407a | Dimitris Aragiorgis | -t plain --disk 0:size=2G --no-name-check --no-ip-check \ |
1064 | caa6c07d | Constantinos Venetsanopoulos | testvm1 |
1065 | caa6c07d | Constantinos Venetsanopoulos | |
1066 | caa6c07d | Constantinos Venetsanopoulos | In the above command: |
1067 | caa6c07d | Constantinos Venetsanopoulos | |
1068 | caa6c07d | Constantinos Venetsanopoulos | * ``img_passwd``: the arbitrary root password of your new instance |
1069 | caa6c07d | Constantinos Venetsanopoulos | * ``img_format``: set to ``diskdump`` to reflect the type of the uploaded Image |
1070 | caa6c07d | Constantinos Venetsanopoulos | * ``img_id``: If you want to deploy an Image stored on Pithos+ (our case), this |
1071 | caa6c07d | Constantinos Venetsanopoulos | should have the format |
1072 | caa6c07d | Constantinos Venetsanopoulos | ``pithos://<username>/<container>/<filename>``: |
1073 | caa6c07d | Constantinos Venetsanopoulos | * ``username``: ``user@example.com`` (defined during Astakos sign up) |
1074 | caa6c07d | Constantinos Venetsanopoulos | * ``container``: ``pithos`` (default, if the Web UI was used) |
1075 | caa6c07d | Constantinos Venetsanopoulos | * ``filename``: the name of file (visible also from the Web UI) |
1076 | caa6c07d | Constantinos Venetsanopoulos | * ``img_properties``: taken from the metadata file. Used only the two mandatory |
1077 | caa6c07d | Constantinos Venetsanopoulos | properties ``OSFAMILY`` and ``ROOT_PARTITION``. `Learn more |
1078 | caa6c07d | Constantinos Venetsanopoulos | <https://code.grnet.gr/projects/snf-image/wiki/Image_Format#Image-Properties>`_ |
1079 | caa6c07d | Constantinos Venetsanopoulos | |
1080 | caa6c07d | Constantinos Venetsanopoulos | If the ``gnt-instance add`` command returns successfully, then run: |
1081 | caa6c07d | Constantinos Venetsanopoulos | |
1082 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
1083 | caa6c07d | Constantinos Venetsanopoulos | |
1084 | caa6c07d | Constantinos Venetsanopoulos | # gnt-instance info testvm1 | grep "console connection" |
1085 | caa6c07d | Constantinos Venetsanopoulos | |
1086 | caa6c07d | Constantinos Venetsanopoulos | to find out where to connect using VNC. If you can connect successfully and can |
1087 | caa6c07d | Constantinos Venetsanopoulos | login to your new instance using the root password ``my_vm_example_passw0rd``, |
1088 | caa6c07d | Constantinos Venetsanopoulos | then everything works as expected and you have your new Debian Base VM up and |
1089 | caa6c07d | Constantinos Venetsanopoulos | running. |
1090 | caa6c07d | Constantinos Venetsanopoulos | |
1091 | caa6c07d | Constantinos Venetsanopoulos | If ``gnt-instance add`` fails, make sure that snf-image is correctly configured |
1092 | caa6c07d | Constantinos Venetsanopoulos | to access the Pithos+ database and the Pithos+ backend data. Also, make sure |
1093 | caa6c07d | Constantinos Venetsanopoulos | you gave the correct ``img_id`` and ``img_properties``. If ``gnt-instance add`` |
1094 | caa6c07d | Constantinos Venetsanopoulos | succeeds but you cannot connect, again find out what went wrong. Do *NOT* |
1095 | caa6c07d | Constantinos Venetsanopoulos | proceed to the next steps unless you are sure everything works till this point. |
1096 | caa6c07d | Constantinos Venetsanopoulos | |
1097 | 2f6143c9 | Constantinos Venetsanopoulos | If everything works, you have successfully connected Ganeti with Pithos+. Let's |
1098 | 2f6143c9 | Constantinos Venetsanopoulos | move on to networking now. |
1099 | caa6c07d | Constantinos Venetsanopoulos | |
1100 | 2f6143c9 | Constantinos Venetsanopoulos | .. warning:: |
1101 | 7a8df455 | Constantinos Venetsanopoulos | You can bypass the networking sections and go straight to |
1102 | 2c85833e | Constantinos Venetsanopoulos | :ref:`Cyclades Ganeti tools <cyclades-gtools>`, if you do not want to setup |
1103 | 2c85833e | Constantinos Venetsanopoulos | the Cyclades Network Service, but only the Cyclades Compute Service |
1104 | 2c85833e | Constantinos Venetsanopoulos | (recommended for now). |
1105 | 2f6143c9 | Constantinos Venetsanopoulos | |
1106 | cc16407a | Dimitris Aragiorgis | Networking Setup Overview |
1107 | cc16407a | Dimitris Aragiorgis | ------------------------- |
1108 | 2f6143c9 | Constantinos Venetsanopoulos | |
1109 | 2f6143c9 | Constantinos Venetsanopoulos | This part is deployment-specific and must be customized based on the specific |
1110 | 2f6143c9 | Constantinos Venetsanopoulos | needs of the system administrator. However, to do so, the administrator needs |
1111 | 2f6143c9 | Constantinos Venetsanopoulos | to understand how each level handles Virtual Networks, to be able to setup the |
1112 | b11446c1 | Constantinos Venetsanopoulos | backend appropriately, before installing Cyclades. To do so, please read the |
1113 | b11446c1 | Constantinos Venetsanopoulos | :ref:`Network <networks>` section before proceeding. |
1114 | 2f6143c9 | Constantinos Venetsanopoulos | |
1115 | cc16407a | Dimitris Aragiorgis | Since synnefo 0.11 all network actions are managed with the snf-manage |
1116 | cc16407a | Dimitris Aragiorgis | network-* commands. This needs the underlying setup (Ganeti, nfdhcpd, |
1117 | cc16407a | Dimitris Aragiorgis | snf-network, bridges, vlans) to be already configured correctly. The only |
1118 | cc16407a | Dimitris Aragiorgis | actions needed in this point are: |
1119 | cc16407a | Dimitris Aragiorgis | |
1120 | cc16407a | Dimitris Aragiorgis | a) Have Ganeti with IP pool management support installed. |
1121 | 2f6143c9 | Constantinos Venetsanopoulos | |
1122 | cc16407a | Dimitris Aragiorgis | b) Install :ref:`snf-network <snf-network>`, which provides a synnefo specific kvm-ifup script, etc. |
1123 | 2f6143c9 | Constantinos Venetsanopoulos | |
1124 | cc16407a | Dimitris Aragiorgis | c) Install :ref:`nfdhcpd <nfdhcpd>`, which serves DHCP requests of the VMs. |
1125 | 2f6143c9 | Constantinos Venetsanopoulos | |
1126 | cc16407a | Dimitris Aragiorgis | In order to test that everything is setup correctly before installing Cyclades, |
1127 | cc16407a | Dimitris Aragiorgis | we will make some testing actions in this section, and the actual setup will be |
1128 | cc16407a | Dimitris Aragiorgis | done afterwards with snf-manage commands. |
1129 | 2f6143c9 | Constantinos Venetsanopoulos | |
1130 | cc16407a | Dimitris Aragiorgis | .. _snf-network: |
1131 | 2f6143c9 | Constantinos Venetsanopoulos | |
1132 | cc16407a | Dimitris Aragiorgis | snf-network |
1133 | cc16407a | Dimitris Aragiorgis | ~~~~~~~~~~~ |
1134 | 2f6143c9 | Constantinos Venetsanopoulos | |
1135 | cc16407a | Dimitris Aragiorgis | snf-network includes `kvm-vif-bridge` script that is invoked every time |
1136 | cc16407a | Dimitris Aragiorgis | a tap (a VM's NIC) is created. Based on environment variables passed by |
1137 | cc16407a | Dimitris Aragiorgis | Ganeti it issues various commands depending on the network type the NIC is |
1138 | cc16407a | Dimitris Aragiorgis | connected to and sets up a corresponding dhcp lease. |
1139 | 2f6143c9 | Constantinos Venetsanopoulos | |
1140 | cc16407a | Dimitris Aragiorgis | Install snf-network on all Ganeti nodes: |
1141 | 2f6143c9 | Constantinos Venetsanopoulos | |
1142 | 2f6143c9 | Constantinos Venetsanopoulos | .. code-block:: console |
1143 | 2f6143c9 | Constantinos Venetsanopoulos | |
1144 | cc16407a | Dimitris Aragiorgis | # apt-get install snf-network |
1145 | 2f6143c9 | Constantinos Venetsanopoulos | |
1146 | cc16407a | Dimitris Aragiorgis | Then, in :file:`/etc/default/snf-network` set: |
1147 | 2f6143c9 | Constantinos Venetsanopoulos | |
1148 | 2f6143c9 | Constantinos Venetsanopoulos | .. code-block:: console |
1149 | 2f6143c9 | Constantinos Venetsanopoulos | |
1150 | cc16407a | Dimitris Aragiorgis | MAC_MASK=ff:ff:f0:00:00:00 |
1151 | 2f6143c9 | Constantinos Venetsanopoulos | |
1152 | cc16407a | Dimitris Aragiorgis | .. _nfdhcpd: |
1153 | 2f6143c9 | Constantinos Venetsanopoulos | |
1154 | cc16407a | Dimitris Aragiorgis | nfdhcpd |
1155 | 7a8df455 | Constantinos Venetsanopoulos | ~~~~~~~ |
1156 | 2f6143c9 | Constantinos Venetsanopoulos | |
1157 | cc16407a | Dimitris Aragiorgis | Each NIC's IP is chosen by Ganeti (with IP pool management support). |
1158 | cc16407a | Dimitris Aragiorgis | `kvm-vif-bridge` script sets up dhcp leases and when the VM boots and |
1159 | cc16407a | Dimitris Aragiorgis | makes a dhcp request, iptables will mangle the packet and `nfdhcpd` will |
1160 | cc16407a | Dimitris Aragiorgis | create a dhcp response. |
1161 | 2f6143c9 | Constantinos Venetsanopoulos | |
1162 | 2f6143c9 | Constantinos Venetsanopoulos | .. code-block:: console |
1163 | 2f6143c9 | Constantinos Venetsanopoulos | |
1164 | cc16407a | Dimitris Aragiorgis | # apt-get install nfqueue-bindings-python=0.3+physindev-1 |
1165 | 2f6143c9 | Constantinos Venetsanopoulos | # apt-get install nfdhcpd |
1166 | 2f6143c9 | Constantinos Venetsanopoulos | |
1167 | 2f6143c9 | Constantinos Venetsanopoulos | Edit ``/etc/nfdhcpd/nfdhcpd.conf`` to reflect your network configuration. At |
1168 | 2f6143c9 | Constantinos Venetsanopoulos | least, set the ``dhcp_queue`` variable to ``42`` and the ``nameservers`` |
1169 | 2f6143c9 | Constantinos Venetsanopoulos | variable to your DNS IP/s. Those IPs will be passed as the DNS IP/s of your new |
1170 | 2f6143c9 | Constantinos Venetsanopoulos | VMs. Once you are finished, restart the server on all nodes: |
1171 | 2f6143c9 | Constantinos Venetsanopoulos | |
1172 | 2f6143c9 | Constantinos Venetsanopoulos | .. code-block:: console |
1173 | 2f6143c9 | Constantinos Venetsanopoulos | |
1174 | 2f6143c9 | Constantinos Venetsanopoulos | # /etc/init.d/nfdhcpd restart |
1175 | 2f6143c9 | Constantinos Venetsanopoulos | |
1176 | 2f6143c9 | Constantinos Venetsanopoulos | If you are using ``ferm``, then you need to run the following: |
1177 | 2f6143c9 | Constantinos Venetsanopoulos | |
1178 | 2f6143c9 | Constantinos Venetsanopoulos | .. code-block:: console |
1179 | 2f6143c9 | Constantinos Venetsanopoulos | |
1180 | 2f6143c9 | Constantinos Venetsanopoulos | # echo "@include 'nfdhcpd.ferm';" >> /etc/ferm/ferm.conf |
1181 | 2f6143c9 | Constantinos Venetsanopoulos | # /etc/init.d/ferm restart |
1182 | 2f6143c9 | Constantinos Venetsanopoulos | |
1183 | cc16407a | Dimitris Aragiorgis | or make sure to run after boot: |
1184 | cc16407a | Dimitris Aragiorgis | |
1185 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1186 | cc16407a | Dimitris Aragiorgis | |
1187 | cc16407a | Dimitris Aragiorgis | # iptables -t mangle -A PREROUTING -p udp -m udp --dport 67 -j NFQUEUE --queue-num 42 |
1188 | cc16407a | Dimitris Aragiorgis | |
1189 | cc16407a | Dimitris Aragiorgis | and if you have IPv6 enabled: |
1190 | cc16407a | Dimitris Aragiorgis | |
1191 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1192 | cc16407a | Dimitris Aragiorgis | |
1193 | cc16407a | Dimitris Aragiorgis | # ip6tables -t mangle -A PREROUTING -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j NFQUEUE --queue-num 43 |
1194 | cc16407a | Dimitris Aragiorgis | # ip6tables -t mangle -A PREROUTING -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j NFQUEUE --queue-num 44 |
1195 | cc16407a | Dimitris Aragiorgis | |
1196 | cc16407a | Dimitris Aragiorgis | You can check which clients are currently served by nfdhcpd by running: |
1197 | cc16407a | Dimitris Aragiorgis | |
1198 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1199 | cc16407a | Dimitris Aragiorgis | |
1200 | cc16407a | Dimitris Aragiorgis | # kill -SIGUSR1 `cat /var/run/nfdhcpd/nfdhcpd.pid` |
1201 | cc16407a | Dimitris Aragiorgis | |
1202 | cc16407a | Dimitris Aragiorgis | When you run the above, then check ``/var/log/nfdhcpd/nfdhcpd.log``. |
1203 | cc16407a | Dimitris Aragiorgis | |
1204 | cc16407a | Dimitris Aragiorgis | Public Network Setup |
1205 | cc16407a | Dimitris Aragiorgis | -------------------- |
1206 | cc16407a | Dimitris Aragiorgis | |
1207 | cc16407a | Dimitris Aragiorgis | To achieve basic networking the simplest way is to have a common bridge (e.g. |
1208 | cc16407a | Dimitris Aragiorgis | ``br0``, on the same collision domain with the router) where all VMs will connect |
1209 | cc16407a | Dimitris Aragiorgis | to. Packets will be "forwarded" to the router and then to the Internet. If |
1210 | cc16407a | Dimitris Aragiorgis | you want a more advanced setup (ip-less routing and proxy-arp plese refer to |
1211 | cc16407a | Dimitris Aragiorgis | :ref:`Network <networks>` section). |
1212 | cc16407a | Dimitris Aragiorgis | |
1213 | cc16407a | Dimitris Aragiorgis | Physical Host Setup |
1214 | cc16407a | Dimitris Aragiorgis | ~~~~~~~~~~~~~~~~~~~ |
1215 | cc16407a | Dimitris Aragiorgis | |
1216 | cc16407a | Dimitris Aragiorgis | Assuming ``eth0`` on both hosts is the public interface (directly connected |
1217 | cc16407a | Dimitris Aragiorgis | to the router), run on every node: |
1218 | 2f6143c9 | Constantinos Venetsanopoulos | |
1219 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1220 | cc16407a | Dimitris Aragiorgis | |
1221 | cc16407a | Dimitris Aragiorgis | # brctl addbr br0 |
1222 | cc16407a | Dimitris Aragiorgis | # ip link set br0 up |
1223 | cc16407a | Dimitris Aragiorgis | # vconfig add eth0 100 |
1224 | cc16407a | Dimitris Aragiorgis | # ip link set eth0.100 up |
1225 | cc16407a | Dimitris Aragiorgis | # brctl addif br0 eth0.100 |
1226 | cc16407a | Dimitris Aragiorgis | |
1227 | cc16407a | Dimitris Aragiorgis | |
1228 | cc16407a | Dimitris Aragiorgis | Testing a Public Network |
1229 | cc16407a | Dimitris Aragiorgis | ~~~~~~~~~~~~~~~~~~~~~~~~ |
1230 | cc16407a | Dimitris Aragiorgis | |
1231 | cc16407a | Dimitris Aragiorgis | Let's assume, that you want to assign IPs from the ``5.6.7.0/27`` range to you |
1232 | cc16407a | Dimitris Aragiorgis | new VMs, with ``5.6.7.1`` as the router's gateway. In Ganeti you can add the |
1233 | cc16407a | Dimitris Aragiorgis | network by running: |
1234 | cc16407a | Dimitris Aragiorgis | |
1235 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1236 | cc16407a | Dimitris Aragiorgis | |
1237 | cc16407a | Dimitris Aragiorgis | # gnt-network add --network=5.6.7.0/27 --gateway=5.6.7.1 --network-type=public --tags=nfdhcpd test-net-public |
1238 | 2f6143c9 | Constantinos Venetsanopoulos | |
1239 | cc16407a | Dimitris Aragiorgis | Then, connect the network to all your nodegroups. We assume that we only have |
1240 | cc16407a | Dimitris Aragiorgis | one nodegroup (``default``) in our Ganeti cluster: |
1241 | cc16407a | Dimitris Aragiorgis | |
1242 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1243 | cc16407a | Dimitris Aragiorgis | |
1244 | cc16407a | Dimitris Aragiorgis | # gnt-network connect test-net-public default bridged br0 |
1245 | 2f6143c9 | Constantinos Venetsanopoulos | |
1246 | 2f6143c9 | Constantinos Venetsanopoulos | Now, it is time to test that the backend infrastracture is correctly setup for |
1247 | cc16407a | Dimitris Aragiorgis | the Public Network. We will add a new VM, the same way we did it on the |
1248 | cc16407a | Dimitris Aragiorgis | previous testing section. However, now will also add one NIC, configured to be |
1249 | cc16407a | Dimitris Aragiorgis | managed from our previously defined network. Run on the GANETI-MASTER (node1): |
1250 | 2f6143c9 | Constantinos Venetsanopoulos | |
1251 | 2f6143c9 | Constantinos Venetsanopoulos | .. code-block:: console |
1252 | 2f6143c9 | Constantinos Venetsanopoulos | |
1253 | cc16407a | Dimitris Aragiorgis | # gnt-instance add -o snf-image+default --os-parameters \ |
1254 | cc16407a | Dimitris Aragiorgis | img_passwd=my_vm_example_passw0rd,img_format=diskdump,img_id="pithos://user@example.com/pithos/debian_base-6.0-7-x86_64.diskdump",img_properties='{"OSFAMILY":"linux"\,"ROOT_PARTITION":"1"}' \ |
1255 | cc16407a | Dimitris Aragiorgis | -t plain --disk 0:size=2G --no-name-check --no-ip-check \ |
1256 | cc16407a | Dimitris Aragiorgis | --net 0:ip=pool,network=test-net-public \ |
1257 | 2f6143c9 | Constantinos Venetsanopoulos | testvm2 |
1258 | 2f6143c9 | Constantinos Venetsanopoulos | |
1259 | 2f6143c9 | Constantinos Venetsanopoulos | If the above returns successfully, connect to the new VM and run: |
1260 | 2f6143c9 | Constantinos Venetsanopoulos | |
1261 | 2f6143c9 | Constantinos Venetsanopoulos | .. code-block:: console |
1262 | 2f6143c9 | Constantinos Venetsanopoulos | |
1263 | cc16407a | Dimitris Aragiorgis | root@testvm2:~ # ip addr |
1264 | cc16407a | Dimitris Aragiorgis | root@testvm2:~ # ip route |
1265 | cc16407a | Dimitris Aragiorgis | root@testvm2:~ # cat /etc/resolv.conf |
1266 | 2f6143c9 | Constantinos Venetsanopoulos | |
1267 | cc16407a | Dimitris Aragiorgis | to check IP address (5.6.7.2), IP routes (default via 5.6.7.1) and DNS config |
1268 | cc16407a | Dimitris Aragiorgis | (nameserver option in nfdhcpd.conf). This shows correct configuration of |
1269 | cc16407a | Dimitris Aragiorgis | ganeti, snf-network and nfdhcpd. |
1270 | 2f6143c9 | Constantinos Venetsanopoulos | |
1271 | 2f6143c9 | Constantinos Venetsanopoulos | Now ping the outside world. If this works too, then you have also configured |
1272 | cc16407a | Dimitris Aragiorgis | correctly your physical host and router. |
1273 | 547c78f6 | Constantinos Venetsanopoulos | |
1274 | 547c78f6 | Constantinos Venetsanopoulos | Make sure everything works as expected, before proceeding with the Private |
1275 | 2f6143c9 | Constantinos Venetsanopoulos | Networks setup. |
1276 | 2f6143c9 | Constantinos Venetsanopoulos | |
1277 | 04c1254b | Constantinos Venetsanopoulos | .. _private-networks-setup: |
1278 | 04c1254b | Constantinos Venetsanopoulos | |
1279 | cc16407a | Dimitris Aragiorgis | Private Networks Setup |
1280 | 7a8df455 | Constantinos Venetsanopoulos | ---------------------- |
1281 | 2f6143c9 | Constantinos Venetsanopoulos | |
1282 | cc16407a | Dimitris Aragiorgis | Synnefo supports two types of private networks: |
1283 | cc16407a | Dimitris Aragiorgis | |
1284 | cc16407a | Dimitris Aragiorgis | - based on MAC filtering |
1285 | cc16407a | Dimitris Aragiorgis | - based on physical VLANs |
1286 | cc16407a | Dimitris Aragiorgis | |
1287 | cc16407a | Dimitris Aragiorgis | Both types provide Layer 2 isolation to the end-user. |
1288 | 2f6143c9 | Constantinos Venetsanopoulos | |
1289 | cc16407a | Dimitris Aragiorgis | For the first type a common bridge (e.g. ``prv0``) is needed while for the second a |
1290 | cc16407a | Dimitris Aragiorgis | range of bridges (e.g. ``prv1..prv100``) each bridged on a different physical |
1291 | cc16407a | Dimitris Aragiorgis | VLAN. To this end to assure isolation among end-users' private networks each |
1292 | cc16407a | Dimitris Aragiorgis | has to have different MAC prefix (for the filtering to take place) or to be |
1293 | cc16407a | Dimitris Aragiorgis | "connected" to a different bridge (VLAN actually). |
1294 | 547c78f6 | Constantinos Venetsanopoulos | |
1295 | cc16407a | Dimitris Aragiorgis | Physical Host Setup |
1296 | cc16407a | Dimitris Aragiorgis | ~~~~~~~~~~~~~~~~~~~ |
1297 | cc16407a | Dimitris Aragiorgis | |
1298 | cc16407a | Dimitris Aragiorgis | In order to create the necessary VLAN/bridges, one for MAC filtered private |
1299 | cc16407a | Dimitris Aragiorgis | networks and various (e.g. 20) for private networks based on physical VLANs, |
1300 | cc16407a | Dimitris Aragiorgis | run on every node: |
1301 | 547c78f6 | Constantinos Venetsanopoulos | |
1302 | cc16407a | Dimitris Aragiorgis | Assuming ``eth0`` of both hosts are somehow (via cable/switch with VLANs |
1303 | cc16407a | Dimitris Aragiorgis | configured correctly) connected together, run on every node: |
1304 | 547c78f6 | Constantinos Venetsanopoulos | |
1305 | 547c78f6 | Constantinos Venetsanopoulos | .. code-block:: console |
1306 | 547c78f6 | Constantinos Venetsanopoulos | |
1307 | cc16407a | Dimitris Aragiorgis | # apt-get install vlan |
1308 | cc16407a | Dimitris Aragiorgis | # modprobe 8021q |
1309 | 547c78f6 | Constantinos Venetsanopoulos | # $iface=eth0 |
1310 | cc16407a | Dimitris Aragiorgis | # for prv in $(seq 0 20); do |
1311 | 547c78f6 | Constantinos Venetsanopoulos | vlan=$prv |
1312 | 547c78f6 | Constantinos Venetsanopoulos | bridge=prv$prv |
1313 | 547c78f6 | Constantinos Venetsanopoulos | vconfig add $iface $vlan |
1314 | 547c78f6 | Constantinos Venetsanopoulos | ifconfig $iface.$vlan up |
1315 | 547c78f6 | Constantinos Venetsanopoulos | brctl addbr $bridge |
1316 | 547c78f6 | Constantinos Venetsanopoulos | brctl setfd $bridge 0 |
1317 | 547c78f6 | Constantinos Venetsanopoulos | brctl addif $bridge $iface.$vlan |
1318 | 547c78f6 | Constantinos Venetsanopoulos | ifconfig $bridge up |
1319 | 547c78f6 | Constantinos Venetsanopoulos | done |
1320 | 547c78f6 | Constantinos Venetsanopoulos | |
1321 | cc16407a | Dimitris Aragiorgis | The above will do the following : |
1322 | 547c78f6 | Constantinos Venetsanopoulos | |
1323 | cc16407a | Dimitris Aragiorgis | * provision 21 new bridges: ``prv0`` - ``prv20`` |
1324 | cc16407a | Dimitris Aragiorgis | * provision 21 new vlans: ``eth0.0`` - ``eth0.20`` |
1325 | cc16407a | Dimitris Aragiorgis | * add the corresponding vlan to the equivalent bridge |
1326 | 547c78f6 | Constantinos Venetsanopoulos | |
1327 | 547c78f6 | Constantinos Venetsanopoulos | You can run ``brctl show`` on both nodes to see if everything was setup |
1328 | 547c78f6 | Constantinos Venetsanopoulos | correctly. |
1329 | 547c78f6 | Constantinos Venetsanopoulos | |
1330 | cc16407a | Dimitris Aragiorgis | Synnefo Setup |
1331 | cc16407a | Dimitris Aragiorgis | ~~~~~~~~~~~~~ |
1332 | cc16407a | Dimitris Aragiorgis | |
1333 | cc16407a | Dimitris Aragiorgis | As long as those resourses have been provisioned, admin has to define two |
1334 | cc16407a | Dimitris Aragiorgis | different pools in Synnefo: |
1335 | cc16407a | Dimitris Aragiorgis | |
1336 | cc16407a | Dimitris Aragiorgis | - MAC prefix Pool |
1337 | cc16407a | Dimitris Aragiorgis | - Bridge Pool |
1338 | cc16407a | Dimitris Aragiorgis | |
1339 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1340 | cc16407a | Dimitris Aragiorgis | |
1341 | cc16407a | Dimitris Aragiorgis | root@testvm1:~ # snf-manage pool-create --type=mac-prefix --base=aa:00:0 --size=65536 |
1342 | cc16407a | Dimitris Aragiorgis | |
1343 | cc16407a | Dimitris Aragiorgis | root@testvm1:~ # snf-manage pool-create --type=bridge --base=prv --size=20 |
1344 | cc16407a | Dimitris Aragiorgis | |
1345 | cc16407a | Dimitris Aragiorgis | Change the Synnefo setting in :file:`20-snf-cyclades-app-api.conf`: |
1346 | cc16407a | Dimitris Aragiorgis | |
1347 | cc16407a | Dimitris Aragiorgis | .. code-block:: console |
1348 | cc16407a | Dimitris Aragiorgis | |
1349 | cc16407a | Dimitris Aragiorgis | PRIVATE_MAC_FILTERED_BRIDGE = 'prv0' |
1350 | 547c78f6 | Constantinos Venetsanopoulos | |
1351 | 2f6143c9 | Constantinos Venetsanopoulos | Testing the Private Networks |
1352 | 7a8df455 | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
1353 | caa6c07d | Constantinos Venetsanopoulos | |
1354 | 547c78f6 | Constantinos Venetsanopoulos | To test the Private Networks, we will create two instances and put them in the |
1355 | cc16407a | Dimitris Aragiorgis | same Private Networks (one MAC Filtered and one Physical VLAN). This means |
1356 | cc16407a | Dimitris Aragiorgis | that the instances will have a second NIC connected to the ``prv0`` |
1357 | cc16407a | Dimitris Aragiorgis | pre-provisioned bridge and a third to ``prv1``. |
1358 | 547c78f6 | Constantinos Venetsanopoulos | |
1359 | 547c78f6 | Constantinos Venetsanopoulos | We run the same command as in the Public Network testing section, but with one |
1360 | 547c78f6 | Constantinos Venetsanopoulos | more argument for the second NIC: |
1361 | 547c78f6 | Constantinos Venetsanopoulos | |
1362 | 547c78f6 | Constantinos Venetsanopoulos | .. code-block:: console |
1363 | 547c78f6 | Constantinos Venetsanopoulos | |
1364 | cc16407a | Dimitris Aragiorgis | # gnt-network add --network=192.168.1.0/24 --mac-prefix=aa:00:55 --network-type=private --tags=nfdhcpd,private-filtered test-net-prv-mac |
1365 | cc16407a | Dimitris Aragiorgis | # gnt-network connect test-net-prv-mac default bridged prv0 |
1366 | cc16407a | Dimitris Aragiorgis | |
1367 | cc16407a | Dimitris Aragiorgis | # gnt-network add --network=10.0.0.0/24 --tags=nfdhcpd --network-type=private test-net-prv-vlan |
1368 | cc16407a | Dimitris Aragiorgis | # gnt-network connect test-net-prv-vlan default bridged prv1 |
1369 | cc16407a | Dimitris Aragiorgis | |
1370 | cc16407a | Dimitris Aragiorgis | # gnt-instance add -o snf-image+default --os-parameters \ |
1371 | cc16407a | Dimitris Aragiorgis | img_passwd=my_vm_example_passw0rd,img_format=diskdump,img_id="pithos://user@example.com/pithos/debian_base-6.0-7-x86_64.diskdump",img_properties='{"OSFAMILY":"linux"\,"ROOT_PARTITION":"1"}' \ |
1372 | cc16407a | Dimitris Aragiorgis | -t plain --disk 0:size=2G --no-name-check --no-ip-check \ |
1373 | cc16407a | Dimitris Aragiorgis | --net 0:ip=pool,network=test-net-public \ |
1374 | cc16407a | Dimitris Aragiorgis | --net 1:ip=pool,network=test-net-prv-mac \ |
1375 | cc16407a | Dimitris Aragiorgis | --net 2:ip=none,network=test-net-prv-vlan \ |
1376 | 547c78f6 | Constantinos Venetsanopoulos | testvm3 |
1377 | 547c78f6 | Constantinos Venetsanopoulos | |
1378 | cc16407a | Dimitris Aragiorgis | # gnt-instance add -o snf-image+default --os-parameters \ |
1379 | cc16407a | Dimitris Aragiorgis | img_passwd=my_vm_example_passw0rd,img_format=diskdump,img_id="pithos://user@example.com/pithos/debian_base-6.0-7-x86_64.diskdump",img_properties='{"OSFAMILY":"linux"\,"ROOT_PARTITION":"1"}' \ |
1380 | cc16407a | Dimitris Aragiorgis | -t plain --disk 0:size=2G --no-name-check --no-ip-check \ |
1381 | cc16407a | Dimitris Aragiorgis | --net 0:ip=pool,network=test-net-public \ |
1382 | cc16407a | Dimitris Aragiorgis | --net 1:ip=pool,network=test-net-prv-mac \ |
1383 | cc16407a | Dimitris Aragiorgis | --net 2:ip=none,network=test-net-prv-vlan \ |
1384 | 547c78f6 | Constantinos Venetsanopoulos | testvm4 |
1385 | 547c78f6 | Constantinos Venetsanopoulos | |
1386 | cc16407a | Dimitris Aragiorgis | Above, we create two instances with first NIC connected to the internet, their |
1387 | cc16407a | Dimitris Aragiorgis | second NIC connected to a MAC filtered private Network and their third NIC |
1388 | cc16407a | Dimitris Aragiorgis | connected to the first Physical VLAN Private Network. Now, connect to the |
1389 | cc16407a | Dimitris Aragiorgis | instances using VNC and make sure everything works as expected: |
1390 | 547c78f6 | Constantinos Venetsanopoulos | |
1391 | cc16407a | Dimitris Aragiorgis | a) The instances have access to the public internet through their first eth |
1392 | cc16407a | Dimitris Aragiorgis | interface (``eth0``), which has been automatically assigned a public IP. |
1393 | 547c78f6 | Constantinos Venetsanopoulos | |
1394 | cc16407a | Dimitris Aragiorgis | b) ``eth1`` will have mac prefix ``aa:00:55``, while ``eth2`` default one (``aa:00:00``) |
1395 | 547c78f6 | Constantinos Venetsanopoulos | |
1396 | cc16407a | Dimitris Aragiorgis | c) ip link set ``eth1``/``eth2`` up |
1397 | 547c78f6 | Constantinos Venetsanopoulos | |
1398 | cc16407a | Dimitris Aragiorgis | d) dhclient ``eth1``/``eth2`` |
1399 | 547c78f6 | Constantinos Venetsanopoulos | |
1400 | cc16407a | Dimitris Aragiorgis | e) On testvm3 ping 192.168.1.2/10.0.0.2 |
1401 | 547c78f6 | Constantinos Venetsanopoulos | |
1402 | 547c78f6 | Constantinos Venetsanopoulos | If everything works as expected, then you have finished the Network Setup at the |
1403 | 547c78f6 | Constantinos Venetsanopoulos | backend for both types of Networks (Public & Private). |
1404 | 547c78f6 | Constantinos Venetsanopoulos | |
1405 | 2c85833e | Constantinos Venetsanopoulos | .. _cyclades-gtools: |
1406 | 2c85833e | Constantinos Venetsanopoulos | |
1407 | 2c85833e | Constantinos Venetsanopoulos | Cyclades Ganeti tools |
1408 | 2c85833e | Constantinos Venetsanopoulos | --------------------- |
1409 | 2c85833e | Constantinos Venetsanopoulos | |
1410 | 2c85833e | Constantinos Venetsanopoulos | In order for Ganeti to be connected with Cyclades later on, we need the |
1411 | 2c85833e | Constantinos Venetsanopoulos | `Cyclades Ganeti tools` available on all Ganeti nodes (node1 & node2 in our |
1412 | 2c85833e | Constantinos Venetsanopoulos | case). You can install them by running in both nodes: |
1413 | 2c85833e | Constantinos Venetsanopoulos | |
1414 | 2c85833e | Constantinos Venetsanopoulos | .. code-block:: console |
1415 | 2c85833e | Constantinos Venetsanopoulos | |
1416 | 2c85833e | Constantinos Venetsanopoulos | # apt-get install snf-cyclades-gtools |
1417 | 2c85833e | Constantinos Venetsanopoulos | |
1418 | 2c85833e | Constantinos Venetsanopoulos | This will install the following: |
1419 | 2c85833e | Constantinos Venetsanopoulos | |
1420 | 2c85833e | Constantinos Venetsanopoulos | * ``snf-ganeti-eventd`` (daemon to publish Ganeti related messages on RabbitMQ) |
1421 | 2c85833e | Constantinos Venetsanopoulos | * ``snf-ganeti-hook`` (all necessary hooks under ``/etc/ganeti/hooks``) |
1422 | 2c85833e | Constantinos Venetsanopoulos | * ``snf-progress-monitor`` (used by ``snf-image`` to publish progress messages) |
1423 | 2c85833e | Constantinos Venetsanopoulos | |
1424 | 2c85833e | Constantinos Venetsanopoulos | Configure ``snf-cyclades-gtools`` |
1425 | 2c85833e | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
1426 | 2c85833e | Constantinos Venetsanopoulos | |
1427 | 04c1254b | Constantinos Venetsanopoulos | The package will install the ``/etc/synnefo/10-snf-cyclades-gtools-backend.conf`` |
1428 | 2c85833e | Constantinos Venetsanopoulos | configuration file. At least we need to set the RabbitMQ endpoint for all tools |
1429 | 2c85833e | Constantinos Venetsanopoulos | that need it: |
1430 | 2c85833e | Constantinos Venetsanopoulos | |
1431 | 2c85833e | Constantinos Venetsanopoulos | .. code-block:: console |
1432 | 2c85833e | Constantinos Venetsanopoulos | |
1433 | ad003186 | Constantinos Venetsanopoulos | AMQP_HOSTS=["amqp://synnefo:example_rabbitmq_passw0rd@node1.example.com:5672"] |
1434 | 2c85833e | Constantinos Venetsanopoulos | |
1435 | 2c85833e | Constantinos Venetsanopoulos | The above variables should reflect your :ref:`Message Queue setup |
1436 | 2c85833e | Constantinos Venetsanopoulos | <rabbitmq-setup>`. This file should be editted in all Ganeti nodes. |
1437 | 2c85833e | Constantinos Venetsanopoulos | |
1438 | 2c85833e | Constantinos Venetsanopoulos | Connect ``snf-image`` with ``snf-progress-monitor`` |
1439 | 2c85833e | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
1440 | 2c85833e | Constantinos Venetsanopoulos | |
1441 | 2c85833e | Constantinos Venetsanopoulos | Finally, we need to configure ``snf-image`` to publish progress messages during |
1442 | 2c85833e | Constantinos Venetsanopoulos | the deployment of each Image. To do this, we edit ``/etc/default/snf-image`` and |
1443 | 2c85833e | Constantinos Venetsanopoulos | set the corresponding variable to ``snf-progress-monitor``: |
1444 | 2c85833e | Constantinos Venetsanopoulos | |
1445 | 2c85833e | Constantinos Venetsanopoulos | .. code-block:: console |
1446 | 2c85833e | Constantinos Venetsanopoulos | |
1447 | 2c85833e | Constantinos Venetsanopoulos | PROGRESS_MONITOR="snf-progress-monitor" |
1448 | 2c85833e | Constantinos Venetsanopoulos | |
1449 | 2c85833e | Constantinos Venetsanopoulos | This file should be editted in all Ganeti nodes. |
1450 | 2c85833e | Constantinos Venetsanopoulos | |
1451 | 7a8df455 | Constantinos Venetsanopoulos | .. _rapi-user: |
1452 | 7a8df455 | Constantinos Venetsanopoulos | |
1453 | caa6c07d | Constantinos Venetsanopoulos | Synnefo RAPI user |
1454 | 7a8df455 | Constantinos Venetsanopoulos | ----------------- |
1455 | caa6c07d | Constantinos Venetsanopoulos | |
1456 | 7a8df455 | Constantinos Venetsanopoulos | As a last step before installing Cyclades, create a new RAPI user that will |
1457 | caa6c07d | Constantinos Venetsanopoulos | have ``write`` access. Cyclades will use this user to issue commands to Ganeti, |
1458 | 2c85833e | Constantinos Venetsanopoulos | so we will call the user ``cyclades`` with password ``example_rapi_passw0rd``. |
1459 | 2c85833e | Constantinos Venetsanopoulos | You can do this, by first running: |
1460 | 2c85833e | Constantinos Venetsanopoulos | |
1461 | 2c85833e | Constantinos Venetsanopoulos | .. code-block:: console |
1462 | 2c85833e | Constantinos Venetsanopoulos | |
1463 | 2c85833e | Constantinos Venetsanopoulos | # echo -n 'cyclades:Ganeti Remote API:example_rapi_passw0rd' | openssl md5 |
1464 | 2c85833e | Constantinos Venetsanopoulos | |
1465 | 2c85833e | Constantinos Venetsanopoulos | and then putting the output in ``/var/lib/ganeti/rapi/users`` as follows: |
1466 | caa6c07d | Constantinos Venetsanopoulos | |
1467 | caa6c07d | Constantinos Venetsanopoulos | .. code-block:: console |
1468 | caa6c07d | Constantinos Venetsanopoulos | |
1469 | 2c85833e | Constantinos Venetsanopoulos | cyclades {HA1}55aec7050aa4e4b111ca43cb505a61a0 write |
1470 | caa6c07d | Constantinos Venetsanopoulos | |
1471 | caa6c07d | Constantinos Venetsanopoulos | More about Ganeti's RAPI users `here. |
1472 | caa6c07d | Constantinos Venetsanopoulos | <http://docs.ganeti.org/ganeti/2.5/html/rapi.html#introduction>`_ |
1473 | bc055d09 | Constantinos Venetsanopoulos | |
1474 | 7a8df455 | Constantinos Venetsanopoulos | You have now finished with all needed Prerequisites for Cyclades (and |
1475 | 7a8df455 | Constantinos Venetsanopoulos | Plankton). Let's move on to the actual Cyclades installation. |
1476 | 7a8df455 | Constantinos Venetsanopoulos | |
1477 | 7a8df455 | Constantinos Venetsanopoulos | |
1478 | 7a8df455 | Constantinos Venetsanopoulos | Installation of Cyclades (and Plankton) on node1 |
1479 | 7a8df455 | Constantinos Venetsanopoulos | ================================================ |
1480 | 7a8df455 | Constantinos Venetsanopoulos | |
1481 | 7a8df455 | Constantinos Venetsanopoulos | This section describes the installation of Cyclades. Cyclades is Synnefo's |
1482 | 7a8df455 | Constantinos Venetsanopoulos | Compute service. Plankton (the Image Registry service) will get installed |
1483 | 7a8df455 | Constantinos Venetsanopoulos | automatically along with Cyclades, because it is contained in the same Synnefo |
1484 | 7a8df455 | Constantinos Venetsanopoulos | component right now. |
1485 | 7a8df455 | Constantinos Venetsanopoulos | |
1486 | 04c1254b | Constantinos Venetsanopoulos | We will install Cyclades (and Plankton) on node1. To do so, we install the |
1487 | 04c1254b | Constantinos Venetsanopoulos | corresponding package by running on node1: |
1488 | 04c1254b | Constantinos Venetsanopoulos | |
1489 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1490 | 04c1254b | Constantinos Venetsanopoulos | |
1491 | 04c1254b | Constantinos Venetsanopoulos | # apt-get install snf-cyclades-app |
1492 | 04c1254b | Constantinos Venetsanopoulos | |
1493 | 7d07d924 | Constantinos Venetsanopoulos | .. warning:: Make sure you have installed ``python-gevent`` version >= 0.13.6. |
1494 | 7d07d924 | Constantinos Venetsanopoulos | This version is available at squeeze-backports and can be installed by |
1495 | 7d07d924 | Constantinos Venetsanopoulos | running: ``apt-get install -t squeeze-backports python-gevent`` |
1496 | 7d07d924 | Constantinos Venetsanopoulos | |
1497 | 7d07d924 | Constantinos Venetsanopoulos | If all packages install successfully, then Cyclades and Plankton are installed |
1498 | 04c1254b | Constantinos Venetsanopoulos | and we proceed with their configuration. |
1499 | 04c1254b | Constantinos Venetsanopoulos | |
1500 | bc055d09 | Constantinos Venetsanopoulos | |
1501 | a96ec00f | Constantinos Venetsanopoulos | Configuration of Cyclades (and Plankton) |
1502 | a96ec00f | Constantinos Venetsanopoulos | ======================================== |
1503 | 5b6feb88 | Vangelis Koukis | |
1504 | 04c1254b | Constantinos Venetsanopoulos | Conf files |
1505 | 04c1254b | Constantinos Venetsanopoulos | ---------- |
1506 | bc055d09 | Constantinos Venetsanopoulos | |
1507 | 04c1254b | Constantinos Venetsanopoulos | After installing Cyclades, a number of new configuration files will appear under |
1508 | 04c1254b | Constantinos Venetsanopoulos | ``/etc/synnefo/`` prefixed with ``20-snf-cyclades-app-``. We will descibe here |
1509 | 04c1254b | Constantinos Venetsanopoulos | only the minimal needed changes to result with a working system. In general, sane |
1510 | 04c1254b | Constantinos Venetsanopoulos | defaults have been chosen for the most of the options, to cover most of the |
1511 | 04c1254b | Constantinos Venetsanopoulos | common scenarios. However, if you want to tweak Cyclades feel free to do so, |
1512 | 04c1254b | Constantinos Venetsanopoulos | once you get familiar with the different options. |
1513 | bc055d09 | Constantinos Venetsanopoulos | |
1514 | 04c1254b | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/20-snf-cyclades-app-api.conf``: |
1515 | bc055d09 | Constantinos Venetsanopoulos | |
1516 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1517 | 04c1254b | Constantinos Venetsanopoulos | |
1518 | bc3a7b5a | Constantinos Venetsanopoulos | ASTAKOS_URL = 'https://node1.example.com/im/authenticate' |
1519 | 04c1254b | Constantinos Venetsanopoulos | |
1520 | 04c1254b | Constantinos Venetsanopoulos | The ``ASTAKOS_URL`` denotes the authentication endpoint for Cyclades and is set |
1521 | 04c1254b | Constantinos Venetsanopoulos | to point to Astakos (this should have the same value with Pithos+'s |
1522 | 04c1254b | Constantinos Venetsanopoulos | ``PITHOS_AUTHENTICATION_URL``, setup :ref:`previously <conf-pithos>`). |
1523 | 04c1254b | Constantinos Venetsanopoulos | |
1524 | 053d0dfc | Constantinos Venetsanopoulos | TODO: Document the Network Options here |
1525 | 04c1254b | Constantinos Venetsanopoulos | |
1526 | 04c1254b | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/20-snf-cyclades-app-cloudbar.conf``: |
1527 | 04c1254b | Constantinos Venetsanopoulos | |
1528 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1529 | 04c1254b | Constantinos Venetsanopoulos | |
1530 | bc3a7b5a | Constantinos Venetsanopoulos | CLOUDBAR_LOCATION = 'https://node1.example.com/static/im/cloudbar/' |
1531 | de20a465 | Constantinos Venetsanopoulos | CLOUDBAR_ACTIVE_SERVICE = '2' |
1532 | bc3a7b5a | Constantinos Venetsanopoulos | CLOUDBAR_SERVICES_URL = 'https://node1.example.com/im/get_services' |
1533 | 04c1254b | Constantinos Venetsanopoulos | CLOUDBAR_MENU_URL = 'https://account.node1.example.com/im/get_menu' |
1534 | 04c1254b | Constantinos Venetsanopoulos | |
1535 | 04c1254b | Constantinos Venetsanopoulos | ``CLOUDBAR_LOCATION`` tells the client where to find the Astakos common |
1536 | 04c1254b | Constantinos Venetsanopoulos | cloudbar. The ``CLOUDBAR_SERVICES_URL`` and ``CLOUDBAR_MENU_URL`` options are |
1537 | 04c1254b | Constantinos Venetsanopoulos | used by the Cyclades Web UI to get from Astakos all the information needed to |
1538 | 04c1254b | Constantinos Venetsanopoulos | fill its own cloudbar. So, we put our Astakos deployment urls there. All the |
1539 | 04c1254b | Constantinos Venetsanopoulos | above should have the same values we put in the corresponding variables in |
1540 | 04c1254b | Constantinos Venetsanopoulos | ``/etc/synnefo/20-snf-pithos-webclient-cloudbar.conf`` on the previous |
1541 | 04c1254b | Constantinos Venetsanopoulos | :ref:`Pithos configuration <conf-pithos>` section. |
1542 | 04c1254b | Constantinos Venetsanopoulos | |
1543 | de20a465 | Constantinos Venetsanopoulos | The ``CLOUDBAR_ACTIVE_SERVICE`` points to an already registered Astakos |
1544 | de20a465 | Constantinos Venetsanopoulos | service. You can see all :ref:`registered services <services-reg>` by running |
1545 | de20a465 | Constantinos Venetsanopoulos | on the Astakos node (node1): |
1546 | de20a465 | Constantinos Venetsanopoulos | |
1547 | de20a465 | Constantinos Venetsanopoulos | .. code-block:: console |
1548 | de20a465 | Constantinos Venetsanopoulos | |
1549 | 62b10e3f | Constantinos Venetsanopoulos | # snf-manage service-list |
1550 | de20a465 | Constantinos Venetsanopoulos | |
1551 | de20a465 | Constantinos Venetsanopoulos | The value of ``CLOUDBAR_ACTIVE_SERVICE`` should be the cyclades service's |
1552 | de20a465 | Constantinos Venetsanopoulos | ``id`` as shown by the above command, in our case ``2``. |
1553 | 04c1254b | Constantinos Venetsanopoulos | |
1554 | 04c1254b | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/20-snf-cyclades-app-plankton.conf``: |
1555 | 04c1254b | Constantinos Venetsanopoulos | |
1556 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1557 | 04c1254b | Constantinos Venetsanopoulos | |
1558 | 04c1254b | Constantinos Venetsanopoulos | BACKEND_DB_CONNECTION = 'postgresql://synnefo:example_passw0rd@node1.example.com:5432/snf_pithos' |
1559 | 04c1254b | Constantinos Venetsanopoulos | BACKEND_BLOCK_PATH = '/srv/pithos/data/' |
1560 | 04c1254b | Constantinos Venetsanopoulos | |
1561 | 04c1254b | Constantinos Venetsanopoulos | In this file we configure the Plankton Service. ``BACKEND_DB_CONNECTION`` |
1562 | 04c1254b | Constantinos Venetsanopoulos | denotes the Pithos+ database (where the Image files are stored). So we set that |
1563 | 04c1254b | Constantinos Venetsanopoulos | to point to our Pithos+ database. ``BACKEND_BLOCK_PATH`` denotes the actual |
1564 | 04c1254b | Constantinos Venetsanopoulos | Pithos+ data location. |
1565 | 04c1254b | Constantinos Venetsanopoulos | |
1566 | 04c1254b | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/20-snf-cyclades-app-queues.conf``: |
1567 | 04c1254b | Constantinos Venetsanopoulos | |
1568 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1569 | 04c1254b | Constantinos Venetsanopoulos | |
1570 | ad003186 | Constantinos Venetsanopoulos | AMQP_HOSTS=["amqp://synnefo:example_rabbitmq_passw0rd@node1.example.com:5672"] |
1571 | 04c1254b | Constantinos Venetsanopoulos | |
1572 | 04c1254b | Constantinos Venetsanopoulos | The above settings denote the Message Queue. Those settings should have the same |
1573 | 04c1254b | Constantinos Venetsanopoulos | values as in ``/etc/synnefo/10-snf-cyclades-gtools-backend.conf`` file, and |
1574 | 04c1254b | Constantinos Venetsanopoulos | reflect our :ref:`Message Queue setup <rabbitmq-setup>`. |
1575 | 04c1254b | Constantinos Venetsanopoulos | |
1576 | 04c1254b | Constantinos Venetsanopoulos | Edit ``/etc/synnefo/20-snf-cyclades-app-ui.conf``: |
1577 | 04c1254b | Constantinos Venetsanopoulos | |
1578 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1579 | 04c1254b | Constantinos Venetsanopoulos | |
1580 | bc3a7b5a | Constantinos Venetsanopoulos | UI_LOGIN_URL = "https://node1.example.com/im/login" |
1581 | bc3a7b5a | Constantinos Venetsanopoulos | UI_LOGOUT_URL = "https://node1.example.com/im/logout" |
1582 | 04c1254b | Constantinos Venetsanopoulos | |
1583 | 04c1254b | Constantinos Venetsanopoulos | The ``UI_LOGIN_URL`` option tells the Cyclades Web UI where to redirect users, |
1584 | 04c1254b | Constantinos Venetsanopoulos | if they are not logged in. We point that to Astakos. |
1585 | 04c1254b | Constantinos Venetsanopoulos | |
1586 | 04c1254b | Constantinos Venetsanopoulos | The ``UI_LOGOUT_URL`` option tells the Cyclades Web UI where to redirect the |
1587 | 04c1254b | Constantinos Venetsanopoulos | user when he/she logs out. We point that to Astakos, too. |
1588 | 04c1254b | Constantinos Venetsanopoulos | |
1589 | 053d0dfc | Constantinos Venetsanopoulos | Edit ``/etc/default/vncauthproxy``: |
1590 | 053d0dfc | Constantinos Venetsanopoulos | |
1591 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1592 | 053d0dfc | Constantinos Venetsanopoulos | |
1593 | 053d0dfc | Constantinos Venetsanopoulos | CHUID="www-data:nogroup" |
1594 | 053d0dfc | Constantinos Venetsanopoulos | |
1595 | 04c1254b | Constantinos Venetsanopoulos | We have now finished with the basic Cyclades and Plankton configuration. |
1596 | 04c1254b | Constantinos Venetsanopoulos | |
1597 | 04c1254b | Constantinos Venetsanopoulos | Database Initialization |
1598 | 04c1254b | Constantinos Venetsanopoulos | ----------------------- |
1599 | 04c1254b | Constantinos Venetsanopoulos | |
1600 | 04c1254b | Constantinos Venetsanopoulos | Once Cyclades is configured, we sync the database: |
1601 | bc055d09 | Constantinos Venetsanopoulos | |
1602 | bc055d09 | Constantinos Venetsanopoulos | .. code-block:: console |
1603 | bc055d09 | Constantinos Venetsanopoulos | |
1604 | bc055d09 | Constantinos Venetsanopoulos | $ snf-manage syncdb |
1605 | bc055d09 | Constantinos Venetsanopoulos | $ snf-manage migrate |
1606 | bc055d09 | Constantinos Venetsanopoulos | |
1607 | 04c1254b | Constantinos Venetsanopoulos | and load the initial server flavors: |
1608 | bc055d09 | Constantinos Venetsanopoulos | |
1609 | bc055d09 | Constantinos Venetsanopoulos | .. code-block:: console |
1610 | bc055d09 | Constantinos Venetsanopoulos | |
1611 | bc055d09 | Constantinos Venetsanopoulos | $ snf-manage loaddata flavors |
1612 | bc055d09 | Constantinos Venetsanopoulos | |
1613 | 04c1254b | Constantinos Venetsanopoulos | If everything returns successfully, our database is ready. |
1614 | 04c1254b | Constantinos Venetsanopoulos | |
1615 | 053d0dfc | Constantinos Venetsanopoulos | Add the Ganeti backend |
1616 | 053d0dfc | Constantinos Venetsanopoulos | ---------------------- |
1617 | 053d0dfc | Constantinos Venetsanopoulos | |
1618 | 7a3439cf | Constantinos Venetsanopoulos | In our installation we assume that we only have one Ganeti cluster, the one we |
1619 | 7a3439cf | Constantinos Venetsanopoulos | setup earlier in the ``/etc/synnefo/20-snf-cyclades-app-backend.conf`` file. |
1620 | 7a3439cf | Constantinos Venetsanopoulos | Cyclades will set up this backend automatically by looking at the above |
1621 | 7a3439cf | Constantinos Venetsanopoulos | configuration file. You can see everything has been setup correctly by running: |
1622 | 053d0dfc | Constantinos Venetsanopoulos | |
1623 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1624 | 053d0dfc | Constantinos Venetsanopoulos | |
1625 | 053d0dfc | Constantinos Venetsanopoulos | $ snf-manage backend-list |
1626 | 053d0dfc | Constantinos Venetsanopoulos | |
1627 | 7a3439cf | Constantinos Venetsanopoulos | If something is not set correctly, you can modify the backend with the |
1628 | 7a3439cf | Constantinos Venetsanopoulos | ``snf-manage backend-modify`` command. If something has gone wrong, you could |
1629 | 7a3439cf | Constantinos Venetsanopoulos | modify the backend to reflect the Ganeti installation by running: |
1630 | 053d0dfc | Constantinos Venetsanopoulos | |
1631 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1632 | 053d0dfc | Constantinos Venetsanopoulos | |
1633 | 053d0dfc | Constantinos Venetsanopoulos | $ snf-manage backend-modify --clustername "ganeti.node1.example.com" |
1634 | 7a3439cf | Constantinos Venetsanopoulos | --user=cyclades |
1635 | 7a3439cf | Constantinos Venetsanopoulos | --pass=example_rapi_passw0rd |
1636 | 053d0dfc | Constantinos Venetsanopoulos | 1 |
1637 | 053d0dfc | Constantinos Venetsanopoulos | |
1638 | 053d0dfc | Constantinos Venetsanopoulos | ``clustername`` denotes the Ganeti-cluster's name. We provide the corresponding |
1639 | 053d0dfc | Constantinos Venetsanopoulos | domain that resolves to the master IP, than the IP itself, to ensure Cyclades |
1640 | 053d0dfc | Constantinos Venetsanopoulos | can talk to Ganeti even after a Ganeti master-failover. |
1641 | 053d0dfc | Constantinos Venetsanopoulos | |
1642 | 7a3439cf | Constantinos Venetsanopoulos | ``user`` and ``pass`` denote the RAPI user's username and the RAPI user's |
1643 | 7a3439cf | Constantinos Venetsanopoulos | password. We set the above to reflect our :ref:`RAPI User setup <rapi-user>`. |
1644 | 7a3439cf | Constantinos Venetsanopoulos | The port is already set to the default RAPI port; you need to change it, only |
1645 | 7a3439cf | Constantinos Venetsanopoulos | if you have changed it in your Ganeti cluster setup. |
1646 | 053d0dfc | Constantinos Venetsanopoulos | |
1647 | 053d0dfc | Constantinos Venetsanopoulos | Once we setup the first backend to point at our Ganeti cluster, we update the |
1648 | 053d0dfc | Constantinos Venetsanopoulos | Cyclades backends status by running: |
1649 | 053d0dfc | Constantinos Venetsanopoulos | |
1650 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1651 | 053d0dfc | Constantinos Venetsanopoulos | |
1652 | 053d0dfc | Constantinos Venetsanopoulos | $ snf-manage backend-update-status |
1653 | 053d0dfc | Constantinos Venetsanopoulos | |
1654 | 7a3439cf | Constantinos Venetsanopoulos | Cyclades can manage multiple Ganeti backends, but for the purpose of this |
1655 | 7a3439cf | Constantinos Venetsanopoulos | guide,we won't get into more detail regarding mulitple backends. If you want to |
1656 | 7a3439cf | Constantinos Venetsanopoulos | learn more please see /*TODO*/. |
1657 | 7a3439cf | Constantinos Venetsanopoulos | |
1658 | 7a3439cf | Constantinos Venetsanopoulos | Add a Public Network |
1659 | 053d0dfc | Constantinos Venetsanopoulos | ---------------------- |
1660 | 053d0dfc | Constantinos Venetsanopoulos | |
1661 | 7a3439cf | Constantinos Venetsanopoulos | Cyclades supports different Public Networks on different Ganeti backends. |
1662 | cc16407a | Dimitris Aragiorgis | After connecting Cyclades with our Ganeti cluster, we need to setup a Public |
1663 | cc16407a | Dimitris Aragiorgis | Network for this Ganeti backend (`id = 1`). The basic setup is to bridge every |
1664 | cc16407a | Dimitris Aragiorgis | created NIC on a bridge. After having a bridge (e.g. br0) created in every |
1665 | cc16407a | Dimitris Aragiorgis | backend node edit Synnefo setting CUSTOM_BRIDGED_BRIDGE to 'br0': |
1666 | 053d0dfc | Constantinos Venetsanopoulos | |
1667 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1668 | 053d0dfc | Constantinos Venetsanopoulos | |
1669 | 053d0dfc | Constantinos Venetsanopoulos | $ snf-manage network-create --subnet=5.6.7.0/27 |
1670 | 053d0dfc | Constantinos Venetsanopoulos | --gateway=5.6.7.1 |
1671 | 053d0dfc | Constantinos Venetsanopoulos | --subnet6=2001:648:2FFC:1322::/64 |
1672 | 053d0dfc | Constantinos Venetsanopoulos | --gateway6=2001:648:2FFC:1322::1 |
1673 | cc16407a | Dimitris Aragiorgis | --public --dhcp --type=CUSTOM_BRIDGED |
1674 | 053d0dfc | Constantinos Venetsanopoulos | --name=public_network |
1675 | 7a3439cf | Constantinos Venetsanopoulos | --backend-id=1 |
1676 | 053d0dfc | Constantinos Venetsanopoulos | |
1677 | 053d0dfc | Constantinos Venetsanopoulos | This will create the Public Network on both Cyclades and the Ganeti backend. To |
1678 | 053d0dfc | Constantinos Venetsanopoulos | make sure everything was setup correctly, also run: |
1679 | 053d0dfc | Constantinos Venetsanopoulos | |
1680 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1681 | 053d0dfc | Constantinos Venetsanopoulos | |
1682 | 053d0dfc | Constantinos Venetsanopoulos | $ snf-manage reconcile-networks |
1683 | 053d0dfc | Constantinos Venetsanopoulos | |
1684 | 053d0dfc | Constantinos Venetsanopoulos | You can see all available networks by running: |
1685 | 053d0dfc | Constantinos Venetsanopoulos | |
1686 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1687 | 053d0dfc | Constantinos Venetsanopoulos | |
1688 | 7a3439cf | Constantinos Venetsanopoulos | $ snf-manage network-list |
1689 | 053d0dfc | Constantinos Venetsanopoulos | |
1690 | 053d0dfc | Constantinos Venetsanopoulos | and inspect each network's state by running: |
1691 | 053d0dfc | Constantinos Venetsanopoulos | |
1692 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1693 | 053d0dfc | Constantinos Venetsanopoulos | |
1694 | 053d0dfc | Constantinos Venetsanopoulos | $ snf-manage network-inspect <net_id> |
1695 | 053d0dfc | Constantinos Venetsanopoulos | |
1696 | 053d0dfc | Constantinos Venetsanopoulos | Finally, you can see the networks from the Ganeti perspective by running on the |
1697 | 053d0dfc | Constantinos Venetsanopoulos | Ganeti MASTER: |
1698 | 053d0dfc | Constantinos Venetsanopoulos | |
1699 | 053d0dfc | Constantinos Venetsanopoulos | .. code-block:: console |
1700 | 053d0dfc | Constantinos Venetsanopoulos | |
1701 | 053d0dfc | Constantinos Venetsanopoulos | $ gnt-network list |
1702 | 053d0dfc | Constantinos Venetsanopoulos | $ gnt-network info <network_name> |
1703 | 053d0dfc | Constantinos Venetsanopoulos | |
1704 | 04c1254b | Constantinos Venetsanopoulos | Servers restart |
1705 | 04c1254b | Constantinos Venetsanopoulos | --------------- |
1706 | 04c1254b | Constantinos Venetsanopoulos | |
1707 | 053d0dfc | Constantinos Venetsanopoulos | Restart gunicorn on node1: |
1708 | 04c1254b | Constantinos Venetsanopoulos | |
1709 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1710 | bc055d09 | Constantinos Venetsanopoulos | |
1711 | 04c1254b | Constantinos Venetsanopoulos | # /etc/init.d/gunicorn restart |
1712 | bc055d09 | Constantinos Venetsanopoulos | |
1713 | 04c1254b | Constantinos Venetsanopoulos | Now let's do the final connections of Cyclades with Ganeti. |
1714 | bc055d09 | Constantinos Venetsanopoulos | |
1715 | 04c1254b | Constantinos Venetsanopoulos | ``snf-dispatcher`` initialization |
1716 | 04c1254b | Constantinos Venetsanopoulos | --------------------------------- |
1717 | 04c1254b | Constantinos Venetsanopoulos | |
1718 | 04c1254b | Constantinos Venetsanopoulos | ``snf-dispatcher`` dispatches all messages published to the Message Queue and |
1719 | 04c1254b | Constantinos Venetsanopoulos | manages the Cyclades database accordingly. It also initializes all exchanges. By |
1720 | 04c1254b | Constantinos Venetsanopoulos | default it is not enabled during installation of Cyclades, so let's enable it in |
1721 | 04c1254b | Constantinos Venetsanopoulos | its configuration file ``/etc/default/snf-dispatcher``: |
1722 | 04c1254b | Constantinos Venetsanopoulos | |
1723 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1724 | 04c1254b | Constantinos Venetsanopoulos | |
1725 | 04c1254b | Constantinos Venetsanopoulos | SNF_DSPTCH_ENABLE=true |
1726 | 04c1254b | Constantinos Venetsanopoulos | |
1727 | 04c1254b | Constantinos Venetsanopoulos | and start the daemon: |
1728 | 04c1254b | Constantinos Venetsanopoulos | |
1729 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1730 | 04c1254b | Constantinos Venetsanopoulos | |
1731 | 04c1254b | Constantinos Venetsanopoulos | # /etc/init.d/snf-dispatcher start |
1732 | 04c1254b | Constantinos Venetsanopoulos | |
1733 | 04c1254b | Constantinos Venetsanopoulos | You can see that everything works correctly by tailing its log file |
1734 | 04c1254b | Constantinos Venetsanopoulos | ``/var/log/synnefo/dispatcher.log``. |
1735 | 04c1254b | Constantinos Venetsanopoulos | |
1736 | 04c1254b | Constantinos Venetsanopoulos | ``snf-ganeti-eventd`` on GANETI MASTER |
1737 | 04c1254b | Constantinos Venetsanopoulos | -------------------------------------- |
1738 | 04c1254b | Constantinos Venetsanopoulos | |
1739 | 04c1254b | Constantinos Venetsanopoulos | The last step of the Cyclades setup is enabling the ``snf-ganeti-eventd`` |
1740 | 04c1254b | Constantinos Venetsanopoulos | daemon (part of the :ref:`Cyclades Ganeti tools <cyclades-gtools>` package). |
1741 | 04c1254b | Constantinos Venetsanopoulos | The daemon is already installed on the GANETI MASTER (node1 in our case). |
1742 | 04c1254b | Constantinos Venetsanopoulos | ``snf-ganeti-eventd`` is disabled by default during the ``snf-cyclades-gtools`` |
1743 | 04c1254b | Constantinos Venetsanopoulos | installation, so we enable it in its configuration file |
1744 | 04c1254b | Constantinos Venetsanopoulos | ``/etc/default/snf-ganeti-eventd``: |
1745 | 04c1254b | Constantinos Venetsanopoulos | |
1746 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1747 | 04c1254b | Constantinos Venetsanopoulos | |
1748 | 04c1254b | Constantinos Venetsanopoulos | SNF_EVENTD_ENABLE=true |
1749 | 04c1254b | Constantinos Venetsanopoulos | |
1750 | 04c1254b | Constantinos Venetsanopoulos | and start the daemon: |
1751 | 04c1254b | Constantinos Venetsanopoulos | |
1752 | 04c1254b | Constantinos Venetsanopoulos | .. code-block:: console |
1753 | bc055d09 | Constantinos Venetsanopoulos | |
1754 | 04c1254b | Constantinos Venetsanopoulos | # /etc/init.d/snf-ganeti-eventd start |
1755 | bc055d09 | Constantinos Venetsanopoulos | |
1756 | 04c1254b | Constantinos Venetsanopoulos | .. warning:: Make sure you start ``snf-ganeti-eventd`` *ONLY* on GANETI MASTER |
1757 | bc055d09 | Constantinos Venetsanopoulos | |
1758 | 04c1254b | Constantinos Venetsanopoulos | If all the above return successfully, then you have finished with the Cyclades |
1759 | 04c1254b | Constantinos Venetsanopoulos | and Plankton installation and setup. Let's test our installation now. |
1760 | bc055d09 | Constantinos Venetsanopoulos | |
1761 | 5b6feb88 | Vangelis Koukis | |
1762 | a96ec00f | Constantinos Venetsanopoulos | Testing of Cyclades (and Plankton) |
1763 | a96ec00f | Constantinos Venetsanopoulos | ================================== |
1764 | 5b6feb88 | Vangelis Koukis | |
1765 | 8a4cd31b | Constantinos Venetsanopoulos | Cyclades Web UI |
1766 | 8a4cd31b | Constantinos Venetsanopoulos | --------------- |
1767 | 8a4cd31b | Constantinos Venetsanopoulos | |
1768 | 8a4cd31b | Constantinos Venetsanopoulos | First of all we need to test that our Cyclades Web UI works correctly. Open your |
1769 | 8a4cd31b | Constantinos Venetsanopoulos | browser and go to the Astakos home page. Login and then click 'cyclades' on the |
1770 | 8a4cd31b | Constantinos Venetsanopoulos | top cloud bar. This should redirect you to: |
1771 | 8a4cd31b | Constantinos Venetsanopoulos | |
1772 | 8a4cd31b | Constantinos Venetsanopoulos | `http://node1.example.com/ui/` |
1773 | 8a4cd31b | Constantinos Venetsanopoulos | |
1774 | 8a4cd31b | Constantinos Venetsanopoulos | and the Cyclades home page should appear. If not, please go back and find what |
1775 | 8a4cd31b | Constantinos Venetsanopoulos | went wrong. Do not proceed if you don't see the Cyclades home page. |
1776 | 8a4cd31b | Constantinos Venetsanopoulos | |
1777 | 8a4cd31b | Constantinos Venetsanopoulos | If the Cyclades home page appears, click on the orange button 'New machine'. The |
1778 | 8a4cd31b | Constantinos Venetsanopoulos | first step of the 'New machine wizard' will appear. This step shows all the |
1779 | 8a4cd31b | Constantinos Venetsanopoulos | available Images from which you can spawn new VMs. The list should be currently |
1780 | 8a4cd31b | Constantinos Venetsanopoulos | empty, as we haven't registered any Images yet. Close the wizard and browse the |
1781 | 8a4cd31b | Constantinos Venetsanopoulos | interface (not many things to see yet). If everything seems to work, let's |
1782 | 8a4cd31b | Constantinos Venetsanopoulos | register our first Image file. |
1783 | 8a4cd31b | Constantinos Venetsanopoulos | |
1784 | 8a4cd31b | Constantinos Venetsanopoulos | Cyclades Images |
1785 | 8a4cd31b | Constantinos Venetsanopoulos | --------------- |
1786 | 8a4cd31b | Constantinos Venetsanopoulos | |
1787 | 8a4cd31b | Constantinos Venetsanopoulos | To test our Cyclades (and Plankton) installation, we will use an Image stored on |
1788 | 8a4cd31b | Constantinos Venetsanopoulos | Pithos+ to spawn a new VM from the Cyclades interface. We will describe all |
1789 | 8a4cd31b | Constantinos Venetsanopoulos | steps, even though you may already have uploaded an Image on Pithos+ from a |
1790 | 8a4cd31b | Constantinos Venetsanopoulos | :ref:`previous <snf-image-images>` section: |
1791 | 8a4cd31b | Constantinos Venetsanopoulos | |
1792 | 8a4cd31b | Constantinos Venetsanopoulos | * Upload an Image file to Pithos+ |
1793 | 8a4cd31b | Constantinos Venetsanopoulos | * Register that Image file to Plankton |
1794 | 8a4cd31b | Constantinos Venetsanopoulos | * Spawn a new VM from that Image from the Cyclades Web UI |
1795 | 8a4cd31b | Constantinos Venetsanopoulos | |
1796 | 8a4cd31b | Constantinos Venetsanopoulos | We will use the `kamaki <http://docs.dev.grnet.gr/kamaki/latest/index.html>`_ |
1797 | 8a4cd31b | Constantinos Venetsanopoulos | command line client to do the uploading and registering of the Image. |
1798 | 8a4cd31b | Constantinos Venetsanopoulos | |
1799 | 8a4cd31b | Constantinos Venetsanopoulos | Installation of `kamaki` |
1800 | 8a4cd31b | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~ |
1801 | 8a4cd31b | Constantinos Venetsanopoulos | |
1802 | 8a4cd31b | Constantinos Venetsanopoulos | You can install `kamaki` anywhere you like, since it is a standalone client of |
1803 | 8a4cd31b | Constantinos Venetsanopoulos | the APIs and talks to the installation over `http`. For the purpose of this |
1804 | 8a4cd31b | Constantinos Venetsanopoulos | guide we will assume that we have downloaded the `Debian Squeeze Base Image |
1805 | 8a4cd31b | Constantinos Venetsanopoulos | <https://pithos.okeanos.grnet.gr/public/9epgb>`_ and stored it under node1's |
1806 | 8a4cd31b | Constantinos Venetsanopoulos | ``/srv/images`` directory. For that reason we will install `kamaki` on node1, |
1807 | 8a4cd31b | Constantinos Venetsanopoulos | too. We do this by running: |
1808 | 8a4cd31b | Constantinos Venetsanopoulos | |
1809 | 8a4cd31b | Constantinos Venetsanopoulos | .. code-block:: console |
1810 | 8a4cd31b | Constantinos Venetsanopoulos | |
1811 | 8a4cd31b | Constantinos Venetsanopoulos | # apt-get install kamaki |
1812 | 8a4cd31b | Constantinos Venetsanopoulos | |
1813 | 8a4cd31b | Constantinos Venetsanopoulos | Configuration of kamaki |
1814 | 8a4cd31b | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~ |
1815 | 8a4cd31b | Constantinos Venetsanopoulos | |
1816 | 8a4cd31b | Constantinos Venetsanopoulos | Now we need to setup kamaki, by adding the appropriate URLs and tokens of our |
1817 | 8a4cd31b | Constantinos Venetsanopoulos | installation. We do this by running: |
1818 | 8a4cd31b | Constantinos Venetsanopoulos | |
1819 | 8a4cd31b | Constantinos Venetsanopoulos | .. code-block:: console |
1820 | 8a4cd31b | Constantinos Venetsanopoulos | |
1821 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki config set astakos.url "https://node1.example.com" |
1822 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki config set compute.url="https://node1.example.com/api/v1.1" |
1823 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki config set image.url "https://node1.examle.com/plankton" |
1824 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki config set storage.url "https://node2.example.com/v1" |
1825 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki config set storage.account "user@example.com" |
1826 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki config set global.token "bdY_example_user_tokenYUff==" |
1827 | 8a4cd31b | Constantinos Venetsanopoulos | |
1828 | 8a4cd31b | Constantinos Venetsanopoulos | The token at the last kamaki command is our user's (``user@example.com``) token, |
1829 | 8a4cd31b | Constantinos Venetsanopoulos | as it appears on the user's `Profile` web page on the Astakos Web UI. |
1830 | 8a4cd31b | Constantinos Venetsanopoulos | |
1831 | 8a4cd31b | Constantinos Venetsanopoulos | You can see that the new configuration options have been applied correctly, by |
1832 | 8a4cd31b | Constantinos Venetsanopoulos | running: |
1833 | 8a4cd31b | Constantinos Venetsanopoulos | |
1834 | 8a4cd31b | Constantinos Venetsanopoulos | .. code-block:: console |
1835 | 8a4cd31b | Constantinos Venetsanopoulos | |
1836 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki config list |
1837 | 8a4cd31b | Constantinos Venetsanopoulos | |
1838 | 8a4cd31b | Constantinos Venetsanopoulos | Upload an Image file to Pithos+ |
1839 | 8a4cd31b | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
1840 | 8a4cd31b | Constantinos Venetsanopoulos | |
1841 | 8a4cd31b | Constantinos Venetsanopoulos | Now, that we have set up `kamaki` we will upload the Image that we have |
1842 | 8a4cd31b | Constantinos Venetsanopoulos | downloaded and stored under ``/srv/images/``. Although we can upload the Image |
1843 | 8a4cd31b | Constantinos Venetsanopoulos | under the root ``Pithos`` container (as you may have done when uploading the |
1844 | 8a4cd31b | Constantinos Venetsanopoulos | Image from the Pithos+ Web UI), we will create a new container called ``images`` |
1845 | 8a4cd31b | Constantinos Venetsanopoulos | and store the Image under that container. We do this for two reasons: |
1846 | 8a4cd31b | Constantinos Venetsanopoulos | |
1847 | 8a4cd31b | Constantinos Venetsanopoulos | a) To demonstrate how to create containers other than the default ``Pithos``. |
1848 | 8a4cd31b | Constantinos Venetsanopoulos | This can be done only with the `kamaki` client and not through the Web UI. |
1849 | 8a4cd31b | Constantinos Venetsanopoulos | |
1850 | 8a4cd31b | Constantinos Venetsanopoulos | b) As a best organization practise, so that you won't have your Image files |
1851 | 8a4cd31b | Constantinos Venetsanopoulos | tangled along with all your other Pithos+ files and directory structures. |
1852 | 8a4cd31b | Constantinos Venetsanopoulos | |
1853 | 8a4cd31b | Constantinos Venetsanopoulos | We create the new ``images`` container by running: |
1854 | 8a4cd31b | Constantinos Venetsanopoulos | |
1855 | 8a4cd31b | Constantinos Venetsanopoulos | .. code-block:: console |
1856 | 8a4cd31b | Constantinos Venetsanopoulos | |
1857 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki store create images |
1858 | 8a4cd31b | Constantinos Venetsanopoulos | |
1859 | 8a4cd31b | Constantinos Venetsanopoulos | Then, we upload the Image file to that container: |
1860 | 8a4cd31b | Constantinos Venetsanopoulos | |
1861 | 8a4cd31b | Constantinos Venetsanopoulos | .. code-block:: console |
1862 | 8a4cd31b | Constantinos Venetsanopoulos | |
1863 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki store upload --container images \ |
1864 | 8a4cd31b | Constantinos Venetsanopoulos | /srv/images/debian_base-6.0-7-x86_64.diskdump \ |
1865 | 8a4cd31b | Constantinos Venetsanopoulos | debian_base-6.0-7-x86_64.diskdump |
1866 | 8a4cd31b | Constantinos Venetsanopoulos | |
1867 | 8a4cd31b | Constantinos Venetsanopoulos | The first is the local path and the second is the remote path on Pithos+. If |
1868 | 8a4cd31b | Constantinos Venetsanopoulos | the new container and the file appears on the Pithos+ Web UI, then you have |
1869 | 8a4cd31b | Constantinos Venetsanopoulos | successfully created the container and uploaded the Image file. |
1870 | 8a4cd31b | Constantinos Venetsanopoulos | |
1871 | 8a4cd31b | Constantinos Venetsanopoulos | Register an existing Image file to Plankton |
1872 | 8a4cd31b | Constantinos Venetsanopoulos | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
1873 | 8a4cd31b | Constantinos Venetsanopoulos | |
1874 | 8a4cd31b | Constantinos Venetsanopoulos | Once the Image file has been successfully uploaded on Pithos+, then we register |
1875 | 8a4cd31b | Constantinos Venetsanopoulos | it to Plankton (so that it becomes visible to Cyclades), by running: |
1876 | 8a4cd31b | Constantinos Venetsanopoulos | |
1877 | 8a4cd31b | Constantinos Venetsanopoulos | .. code-block:: console |
1878 | 8a4cd31b | Constantinos Venetsanopoulos | |
1879 | 8a4cd31b | Constantinos Venetsanopoulos | $ kamaki image register "Debian Base" |
1880 | 8a4cd31b | Constantinos Venetsanopoulos | pithos://user@examle.com/images/debian_base-6.0-7-x86_64.diskdump |
1881 | 8a4cd31b | Constantinos Venetsanopoulos | --public |
1882 | 8a4cd31b | Constantinos Venetsanopoulos | --disk-format=diskdump |
1883 | 8a4cd31b | Constantinos Venetsanopoulos | --property OSFAMILY=linux --property ROOT_PARTITION=1 |
1884 | 8a4cd31b | Constantinos Venetsanopoulos | --property description="Debian Squeeze Base System" |
1885 | 8a4cd31b | Constantinos Venetsanopoulos | --property size=451 --property kernel=2.6.32 --property GUI="No GUI" |
1886 | 8a4cd31b | Constantinos Venetsanopoulos | --property sortorder=1 --property USERS=root --property OS=debian |
1887 | 8a4cd31b | Constantinos Venetsanopoulos | |
1888 | 8a4cd31b | Constantinos Venetsanopoulos | This command registers the Pithos+ file |
1889 | 8a4cd31b | Constantinos Venetsanopoulos | ``pithos://user@examle.com/images/debian_base-6.0-7-x86_64.diskdump`` as an |
1890 | 8a4cd31b | Constantinos Venetsanopoulos | Image in Plankton. This Image will be public (``--public``), so all users will |
1891 | 8a4cd31b | Constantinos Venetsanopoulos | be able to spawn VMs from it and is of type ``diskdump``. The first two |
1892 | 8a4cd31b | Constantinos Venetsanopoulos | properties (``OSFAMILY`` and ``ROOT_PARTITION``) are mandatory. All the rest |
1893 | 8a4cd31b | Constantinos Venetsanopoulos | properties are optional, but recommended, so that the Images appear nicely on |
1894 | 8a4cd31b | Constantinos Venetsanopoulos | the Cyclades Web UI. ``Debian Base`` will appear as the name of this Image. The |
1895 | 8a4cd31b | Constantinos Venetsanopoulos | ``OS`` property's valid values may be found in the ``IMAGE_ICONS`` variable |
1896 | 8a4cd31b | Constantinos Venetsanopoulos | inside the ``20-snf-cyclades-app-ui.conf`` configuration file. |
1897 | 8a4cd31b | Constantinos Venetsanopoulos | |
1898 | 8a4cd31b | Constantinos Venetsanopoulos | ``OSFAMILY`` and ``ROOT_PARTITION`` are mandatory because they will be passed |
1899 | 8a4cd31b | Constantinos Venetsanopoulos | from Plankton to Cyclades and then to Ganeti and `snf-image` (also see |
1900 | 8a4cd31b | Constantinos Venetsanopoulos | :ref:`previous section <ganeti-with-pithos-images>`). All other properties are |
1901 | 8a4cd31b | Constantinos Venetsanopoulos | used to show information on the Cyclades UI. |
1902 | 8a4cd31b | Constantinos Venetsanopoulos | |
1903 | 8a4cd31b | Constantinos Venetsanopoulos | Spawn a VM from the Cyclades Web UI |
1904 | 8a4cd31b | Constantinos Venetsanopoulos | ----------------------------------- |
1905 | 8a4cd31b | Constantinos Venetsanopoulos | |
1906 | 8a4cd31b | Constantinos Venetsanopoulos | If the registration completes successfully, then go to the Cyclades Web UI from |
1907 | 8a4cd31b | Constantinos Venetsanopoulos | your browser at: |
1908 | 8a4cd31b | Constantinos Venetsanopoulos | |
1909 | 8a4cd31b | Constantinos Venetsanopoulos | `https://node1.example.com/ui/` |
1910 | 8a4cd31b | Constantinos Venetsanopoulos | |
1911 | 8a4cd31b | Constantinos Venetsanopoulos | Click on the 'New Machine' button and the first step of the wizard will appear. |
1912 | 8a4cd31b | Constantinos Venetsanopoulos | Click on 'My Images' (right after 'System' Images) on the left pane of the |
1913 | 8a4cd31b | Constantinos Venetsanopoulos | wizard. Your previously registered Image "Debian Base" should appear under |
1914 | 8a4cd31b | Constantinos Venetsanopoulos | 'Available Images'. If not, something has gone wrong with the registration. Make |
1915 | 8a4cd31b | Constantinos Venetsanopoulos | sure you can see your Image file on the Pithos+ Web UI and ``kamaki image |
1916 | 8a4cd31b | Constantinos Venetsanopoulos | register`` returns successfully with all options and properties as shown above. |
1917 | 8a4cd31b | Constantinos Venetsanopoulos | |
1918 | 8a4cd31b | Constantinos Venetsanopoulos | If the Image appears on the list, select it and complete the wizard by selecting |
1919 | 8a4cd31b | Constantinos Venetsanopoulos | a flavor and a name for your VM. Then finish by clicking 'Create'. Make sure you |
1920 | 8a4cd31b | Constantinos Venetsanopoulos | write down your password, because you *WON'T* be able to retrieve it later. |
1921 | 8a4cd31b | Constantinos Venetsanopoulos | |
1922 | 8a4cd31b | Constantinos Venetsanopoulos | If everything was setup correctly, after a few minutes your new machine will go |
1923 | 8a4cd31b | Constantinos Venetsanopoulos | to state 'Running' and you will be able to use it. Click 'Console' to connect |
1924 | 8a4cd31b | Constantinos Venetsanopoulos | through VNC out of band, or click on the machine's icon to connect directly via |
1925 | 8a4cd31b | Constantinos Venetsanopoulos | SSH or RDP (for windows machines). |
1926 | 8a4cd31b | Constantinos Venetsanopoulos | |
1927 | 8a4cd31b | Constantinos Venetsanopoulos | Congratulations. You have successfully installed the whole Synnefo stack and |
1928 | 8a4cd31b | Constantinos Venetsanopoulos | connected all components. Go ahead in the next section to test the Network |
1929 | 8a4cd31b | Constantinos Venetsanopoulos | functionality from inside Cyclades and discover even more features. |
1930 | 8a4cd31b | Constantinos Venetsanopoulos | |
1931 | 5b6feb88 | Vangelis Koukis | |
1932 | a96ec00f | Constantinos Venetsanopoulos | General Testing |
1933 | a96ec00f | Constantinos Venetsanopoulos | =============== |
1934 | 5b6feb88 | Vangelis Koukis | |
1935 | 5b6feb88 | Vangelis Koukis | |
1936 | a96ec00f | Constantinos Venetsanopoulos | Notes |
1937 | a96ec00f | Constantinos Venetsanopoulos | ===== |