TWiki> UCLHCWeb Web>UCLHCAdminDoc (revision 4)EditAttach

Admin Documentation

Puppetize brick

Open firewall in uclhcpup for ports 8140, 8443, 443; see /etc/firewalld/zones/public.xml

rpm -ivh https://yum.puppetlabs.com/puppetlabs-release-el-6.noarch.rpm

yum install puppet

Modify /etc/puppet/puppet.conf and fill in the relevant hostname:

[main]
vardir = /var/lib/puppet
logdir = /var/log/puppet
rundir = /var/run/puppet
ssldir = $vardir/ssl


[agent]
pluginsync      = true
report          = true  
ignoreschedules = true
daemon          = false
ca_server       = uclhcpup.t2.ucsd.edu
certname        = hostname
environment     = production
server          = uclhcpup.t2.ucsd.edu
configtimeout   = 10m

Start puppet:

puppet resource service puppet ensure=running enable=true

On uclhcpup:

Look for and sign hostname:

puppet cert list
puppet cert sign hostname

Create relevant yaml in /etc/puppet/hiera/nodes/

Generate a node specific ssh auth keys file from /etc/puppet/environments/production/modules/uclhc-admin/files/root.ssh

Ensure host certs are copied and named appropriately into /etc/puppet/environments/production/modules/host_cert/files/ and check permissions

In foreman, assign relevant host group (UCLHC/ATLAS / UCLHC/CMS):
hosts -> click host -> edit -> hostgroup pulldown

click submit.

To apply classes immediately, run:

puppet agent --test

Brick Yum Update

We pin some packages to specific version numbers and only upgrade through puppet, these should be excluded in a normal yum update:

yum update --exclude=condor* --exclude=glideinwms* 

Upgrade OSG Version

  1. (all bricks) Do a yum update as described above
  2. (all bricks) Turn off puppet agents: service puppet stop
  3. (uclhcpup) Merge dev to master:
    cd /etc/uclhc-puppet/production
    git fetch
    git merge origin/development
    git push
  4. (uclhcpup) Bump hiera osg version and optionally condor and gwms in /etc/puppet/hiera/global.yaml:
    osg_repos::release: x
    condor::condor_version: y
    condor::gwms_version: z
    
  5. (all bricks) puppet agent --test errors are harmless, this is just to get the latest osg-release
  6. (all bricks) yum clean all
  7. (all bricks) puppet agent --test a second time
  8. (all bricks) Do a second yum update as described above
  9. (all bricks) Turn on puppet agent: service puppet start

-- JeffreyDost - 2016/02/09

Edit | Attach | Print version | History: r6 < r5 < r4 < r3 < r2 | Backlinks | Raw View | Raw edit | More topic actions...
Topic revision: r4 - 2017/11/07 - 23:17:52 - JeffreyDost
 
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback