.
This commit is contained in:
parent
f834957464
commit
2c36f06963
@ -1,7 +1,7 @@
|
|||||||
# Installing the Admin server
|
# Installing the Admin server
|
||||||
|
|
||||||
## Prerequisites
|
## Prerequisites
|
||||||
The installation script assumes a installed and configured openSUSE Leap 15.3 x86_64.
|
The installation script assumes a installed and configured openSUSE Leap 15.3 x86_64 with Gnome desktop.
|
||||||
My setup has two NIC and one wifi.
|
My setup has two NIC and one wifi.
|
||||||
- `eth0` is connected to the lab switch, internal network
|
- `eth0` is connected to the lab switch, internal network
|
||||||
- `eth1` is going to be the external interface
|
- `eth1` is going to be the external interface
|
||||||
|
@ -78,3 +78,144 @@ Installs nfs-server and creates a backup export `/srv/exports/backups <internal
|
|||||||
## nginx
|
## nginx
|
||||||
Installs nginx and configures the www.suse.lan web site
|
Installs nginx and configures the www.suse.lan web site
|
||||||
|
|
||||||
|
## packages
|
||||||
|
installs additional packages
|
||||||
|
```
|
||||||
|
# salt/pillars/packages.sls
|
||||||
|
packages:
|
||||||
|
- vim
|
||||||
|
- jq
|
||||||
|
```
|
||||||
|
|
||||||
|
## podman
|
||||||
|
Installs podman and configures it to use the [docker registry proxy](#docker)
|
||||||
|
|
||||||
|
## rancher
|
||||||
|
Installs rancher server in a podman container, creates a systemd unit called `rancher`
|
||||||
|
The container redirects host port `6080->80` and `6443->443` to the container.
|
||||||
|
It also adds a [nginx](#nginx) reverse proxy configuration to `rancher.suse.lan`
|
||||||
|
```
|
||||||
|
# salt/pillars/rancher.sls
|
||||||
|
rancher:
|
||||||
|
ca_passphrase: rancher
|
||||||
|
url: docker.io/rancher/rancher
|
||||||
|
tag: v2.6.1
|
||||||
|
bootstrapPassword: rancher
|
||||||
|
```
|
||||||
|
|
||||||
|
## remote-desktop
|
||||||
|
installs `xorg-x11-Xvnc` disables wayland logins
|
||||||
|
and creates a vnc login session for the user running update.sh
|
||||||
|
```
|
||||||
|
# salt/pillars/remote-desktop.sls
|
||||||
|
remote-desktop:
|
||||||
|
password: linux0
|
||||||
|
```
|
||||||
|
|
||||||
|
## rmt
|
||||||
|
installs and configures rmt
|
||||||
|
```
|
||||||
|
# salt/pillars/rmt.sls
|
||||||
|
rmt:
|
||||||
|
ca_passphrase: linux
|
||||||
|
db_password: linux
|
||||||
|
scc:
|
||||||
|
username:
|
||||||
|
password:
|
||||||
|
stopped_services:
|
||||||
|
- rmt-server-mirror.timer
|
||||||
|
- rmt-server-sync.timer
|
||||||
|
- rmt-server-systems-scc-sync.timer
|
||||||
|
|
||||||
|
products:
|
||||||
|
-
|
||||||
|
name: SUSE Linux Enterprise Server 15 SP3 x86_64
|
||||||
|
id: 2140
|
||||||
|
-
|
||||||
|
name: SUSE Linux Enterprise High Performance Computing 15 SP3 x86_64
|
||||||
|
id: 2133
|
||||||
|
-
|
||||||
|
name: Containers Module 15 SP3 x86_64
|
||||||
|
id: 2157
|
||||||
|
-
|
||||||
|
name: SUSE Linux Enterprise Micro 5.0 x86_64
|
||||||
|
id: 2202
|
||||||
|
-
|
||||||
|
name: SUSE Linux Enterprise Micro 5.1 x86_64
|
||||||
|
id: 2283
|
||||||
|
-
|
||||||
|
name: SUSE Linux Enterprise High Availability Extension 15 SP3 x86_64
|
||||||
|
id: 2195
|
||||||
|
-
|
||||||
|
name: openSUSE Leap 15.3 aarch64
|
||||||
|
id: 2233
|
||||||
|
-
|
||||||
|
name: openSUSE Leap 15.3 x86_64
|
||||||
|
id: 2236
|
||||||
|
-
|
||||||
|
name: Public Cloud Module 15 SP3 x86_64
|
||||||
|
id: 2175
|
||||||
|
```
|
||||||
|
|
||||||
|
## ssh
|
||||||
|
installs openSSH server and start the daemon.
|
||||||
|
It also configures the authorized keys for remote sessions to the admin server.
|
||||||
|
add ssh public keys to the user-pub-keys in your local.sls and they will be added
|
||||||
|
```
|
||||||
|
# salt/pillars/ssh.sls
|
||||||
|
ssh:
|
||||||
|
user-pub-keys: []
|
||||||
|
```
|
||||||
|
|
||||||
|
## tlu-harvester
|
||||||
|
This state creates all files necessary to install a harvester cluster on node1, node2 and node3.
|
||||||
|
It will create the [pxe](#pxe) configurations and also manifests that can be applied to your harvester cluster when it's up and running. The manifests will land in the `$HOME/tlu-havester` directory, just apply them with kubectl
|
||||||
|
It will also download some images and place them in corresponding folder on the [www.suse.lan](#nginx).
|
||||||
|
|
||||||
|
Id you download SUSE images and place them in `/srv/www/htdocs/images/suse/` and run this state, manifests for them will be created and added to the `$HOME/tlu-harvester` directory
|
||||||
|
```
|
||||||
|
# salt/pillars/tlu-harvester.sls
|
||||||
|
tlu-harvester:
|
||||||
|
version: 0.3.0
|
||||||
|
dns_host: harvester
|
||||||
|
password: rancher
|
||||||
|
token: ThisShouldBeConfiguredInYour_local.sls
|
||||||
|
os:
|
||||||
|
ssh_authorized_keys: []
|
||||||
|
password: rancher
|
||||||
|
install:
|
||||||
|
mgmt-interface: enp2s0f0
|
||||||
|
device: /dev/nvme0n1
|
||||||
|
|
||||||
|
|
||||||
|
images:
|
||||||
|
opensuse:
|
||||||
|
- name: openSUSE Leap 15.3
|
||||||
|
url: https://download.opensuse.org/distribution/leap/15.3/appliances/openSUSE-Leap-15.3-JeOS.x86_64-OpenStack-Cloud.qcow2
|
||||||
|
checksum: 7207cce5b77d9d040610c39cd3d09437489797882b1b834acfb8b0f9d82be26c
|
||||||
|
ns: default
|
||||||
|
- name: openSUSE MicroOS
|
||||||
|
url: https://download.opensuse.org/tumbleweed/appliances/openSUSE-MicroOS.x86_64-kvm-and-xen.qcow2
|
||||||
|
ubuntu:
|
||||||
|
- name: ubuntu 20.04 (Focal Fossa)
|
||||||
|
url: https://cloud-images.ubuntu.com/focal/20211015/focal-server-cloudimg-amd64.img
|
||||||
|
checksum: c7adca2038a5fdda38328ecd461462bf4ab2cbaec2cc1bfd9340d9ee6bc543a8
|
||||||
|
ns: default
|
||||||
|
- name: ubuntu 21.04 (Hirsute Hippo)
|
||||||
|
url: https://cloud-images.ubuntu.com/hirsute/20211017/hirsute-server-cloudimg-amd64.img
|
||||||
|
checksum: 2d8c7f872aab587f70268a34f031c6380197f6940b29eb5f241050bb98ba420e
|
||||||
|
```
|
||||||
|
|
||||||
|
## vlan
|
||||||
|
configures the vlan configuration, settings are in `salt/pillar/network.sls`
|
||||||
|
|
||||||
|
## wol
|
||||||
|
Creates `$HOME/wol` bash script so I can send Wake on LAN packages to node1, node2 and node3.
|
||||||
|
mac address needs to be set in your local.sls
|
||||||
|
```
|
||||||
|
network:
|
||||||
|
wol:
|
||||||
|
1: xx:xx:xx:xx:xx:9b
|
||||||
|
2: xx:xx:xx:xx:xx:0a
|
||||||
|
3: xx:xx:xx:xx:xx:58
|
||||||
|
```
|
||||||
|
Loading…
Reference in New Issue
Block a user