In this section, we will configure the 3 ETCD VMs to mount NFS shared storage from OPENFILER VM. This is the recommended best practice by Rancher Labs to have a backup solution in place for the distributed key/value store.
Refer the commands, videos and screenshots listed below:
[ English ] [ French ] [ German ] [ Japanese ]
[ Spanish ] [ Russian ] [ Mandarin ] [ Hindi ]
[ Tamil ] [ Arabic ] [ Persian ] [ Swahili ]
Log into JUMPBOX VM (172.16.10.10) and configure it as a repository by running the following commands as root.
# yum install –y open-vm-tools net-tools wget bridge-utils tftp tftp-server \ dhcp httpd php gd php-gd syslinux epel-release # vi /etc/selinux/config ----- SELINUX=disabled ----- # systemctl stop firewalld.service # systemctl disable firewalld.service # yum –y update ; sync ; sync ; reboot
# cd /var/www/html # mkdir -p repository/DVD1 # mkdir info-files # cd repository/DVD1 # cp -rav /run/media/student/SUSE-CaaS-Platform-2.0-DVD-86_6/* ./repository/DVD1 # chmod -R 755 * # chown -R apache:apache *
# vi /etc/httpd/conf.d/pxeboot.conf ----- Alias /repository /var/www/html/repository <Directory /var/www/html/repository> Options Indexes FollowSymLinks Allow from all </Directory> -----
# vi /etc/httpd/conf/httpd.conf ----- Listen 172.16.10.10:80 ServerName jumpbox.susecaas.local:80 -----
# cd /var/www/html/info-files # vi admin ----- netdevice=eth0 ifcfg="eth0=172.16.10.50/24,172.16.10.253,172.16.10.250,susecaas.local" hostip=172.16.10.50/24 netmask=255.255.255.0 gateway=172.16.10.253 nameserver=172.16.10.250 domain=susecaas.local hostname=admin.susecaas.local install=http://jumpbox.susecaas.local/repository/DVD1 -----
# vi master-01
-----
netdevice=eth0 ifcfg="eth0=172.16.10.101/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.101/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=master-01.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
-----
# vi master-02
-----
netdevice=eth0 ifcfg="eth0=172.16.10.102/24, 172.16.10.253, 172.16.10.250,susecaas.local"
hostip=172.16.10.102/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=master-02.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
-----
# vi master-03
-----
netdevice=eth0 ifcfg="eth0=172.16.10.103/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.103/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=master-03.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-01
-----
netdevice=eth0 ifcfg="eth0=172.16.10.201/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.201/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-01.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-02
-----
netdevice=eth0 ifcfg="eth0=172.16.10.202/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.202/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-02.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-03
-----
netdevice=eth0 ifcfg="eth0=172.16.10.203/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.203/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-03.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-04
-----
netdevice=eth0 ifcfg="eth0=172.16.10.204/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.204/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-04.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-05
-----
netdevice=eth0 ifcfg="eth0=172.16.10.205/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.205/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-05.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-06
-----
netdevice=eth0 ifcfg="eth0=172.16.10.206/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.206/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-06.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-07
-----
netdevice=eth0 ifcfg="eth0=172.16.10.207/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.207/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-07.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-08
-----
netdevice=eth0 ifcfg="eth0=172.16.10.208/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.208/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-08.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-09
-----
netdevice=eth0 ifcfg="eth0=172.16.10.209/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.209/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-09.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
----
# vi worker-10
-----
netdevice=eth0 ifcfg="eth0=172.16.10.210/24,172.16.10.253,172.16.10.250,susecaas.local"
hostip=172.16.10.210/24
netmask=255.255.255.0
gateway=172.16.10.253
nameserver=172.16.10.250
domain=susecaas.local
hostname=worker-10.susecaas.local
install=http://jumpbox.susecaas.local/repository/DVD1
autoyast=http://admin.susecaas.local/autoyast
-----
# pwd
/var/www/html/info-files
# chmod 755 *
# chown apache:apache *
# systemctl start httpd.service
# systemctl enable httpd.service
# systemctl status -l httpd.service
Now open up the browser in the JUMPBOX VM itself and verify that the files in directories namely
/var/www/html/repository/DVD1 and /var/www/html/info-files are accessible from the browser.
This confirm that the website is now completed successfully as a repository.
Log into LB VM (172.16.10.100) and run the following commands as root. Note that the VMs SERVER-01 and SERVER-02 are defined as backend in the file /etc/haproxy/haproxy.cfg
# yum install –y open-vm-tools net-tools wget bridge-utils # vi /etc/selinux/config ----- SELINUX=disabled ----- # systemctl stop firewalld.service # systemctl disable firewalld.service # yum –y update ; sync ; sync ; reboot # yum install –y gcc pcre-static pcre-devel # wget https://www.haproxy.org/download/1.7/src//haproxy-1.7.9.tar.gz -O ~/haproxy.tar.gz # tar zxvf ~/haproxy.tar.gz –C ~/ # cd ~/haproxy-1.7.9 # make TARGET=linux2628 # make install # make clean # mkdir –p /etc/haproxy # mkdir –p /var/lib/haproxy # touch /var/lib/haproxy/stats # ln –s /usr/local/sbin/haproxy /usr/sbin/haproxy # cp ~/haproxy-1.7.9/examples/haproxy.init /etc/init.d/haproxy # chmod 755 /etc/init.d/haproxy # systemctl daemon-reload # useradd –r haproxy # haproxy –v
# vi /etc/haproxy/hproxy.cfg
# systemctl enable haproxy # systemctl restart haproxy
Login as root into MYSQL VM (172.16.10.14) and enter the following commands:
# yum install –y open-vm-tools net-tools tcpdump # vi /etc/selinux/config ----- SELINUX=disabled ----- # systemctl stop firewalld.service # systemctl disable firewalld.service # yum –y update ; sync ; sync ; reboot # rpm –import /etc/pki/rpm-gpg/RPM-GPG-KEY* # yum –y install epel-release # yum –y install mariadb-server mariadb # systemctl start mariadb.service # systemctl enable mariadb.service # mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we’ll need the current
password for the root user. If you’ve just installed MariaDB, and
you haven’t set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none): <–Hit ENTER
OK, successfully used password, moving on…
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
Set root password? [Y/n]
New password: 1FieldDay-IO // Enter your preferred password here
Re-enter new password: 1FieldDay-IO // re-enter the password again
Password updated successfully!
Reloading privilege tables..
… Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] <–Hit ENTER
… Success!
Normally, root should only be allowed to connect from ‘localhost’. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] <–Hit ENTER
… Success!
By default, MariaDB comes with a database named ‘test’ that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] <–Hit ENTER
– Dropping test database…
… Success!
– Removing privileges on test database…
… Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] <–Hit ENTER
… Success!
Cleaning up…
All done! If you’ve completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!
// Install apache web server
# yum –y install httpd # systemctl start httpd.service # systemctl enable httpd.service
// Install PHP 7.1
# rpm –Uvh http://rpms.remirepo.net/enterprise/remi-release-7.rpm # yum –y install yum-utils # yum –y update # yum-config-manager --enable remi-php71 # yum –y install php php-opcache # systemctl restart httpd.service # vi /var/www/html/info.php ----- <?php phpinfo(); ?> -----
From JUMPBOX, point your browser to http://172.16.10.14/info.php
// Note: MySQL will not be listed in the above output.
// Install MySQL support in PHP
# yum search php # yum –y install php-mysql # yum -y install php-gd php-ldap php-odbc php-pear php-xml php-xmlrpc php-mbstring php-soap curl curl-devel # systemctl restart httpd.service
// Reload the info.php page again. MySQL will be listed this time
// Install phpMyAdmin
# yum –y install phpMyAdmin # vi /etc/httpd/conf.d/phpMyAdmin.conf
—–
[…]
Alias /phpMyAdmin /usr/share/phpMyAdmin Alias /phpmyadmin /usr/share/phpMyAdmin <Directory /usr/share/phpMyAdmin/>
AddDefaultCharset UTF-8
<IfModule mod_authz_core.c>
# Apache 2.4
# <RequireAny>
# Require ip 127.0.0.1
# Require ip ::1
# </RequireAny>
Require all granted
</IfModule>
<IfModule !mod_authz_core.c>
# Apache 2.2
Order Deny,Allow
Deny from All
Allow from 127.0.0.1
Allow from ::1
</IfModule>
</Directory>
<Directory /usr/share/phpMyAdmin/>
Options none
AllowOverride Limit
Require all granted
</Directory>
[…]
—–
# vi /etc/phpMyAdmin/config.inc.php ----- [...] $cfg['Servers'][$i]['auth_type'] = 'http'; // Authentication method (config, http or cookie based)? [...] -----
# systemctl restart httpd.service http://172.16.10.14/myphpadmin
Credentials
Login: root
Password: 1FieldDay-IO
Confirm the same via JUMPBOX browser via myphpadmin
