Differences between revisions 2 and 3

V2 and MAPS Setup in Production

Contents

This Page Is Incomplete

Introduction

This pages describe how to setup MAPS and V2 systems in a production environment such that MAPS is used for authentication management for V2 systems.

Two use cases are considered:

Installation of prototype systems
Installation of a true customer facing production system

Installation of zg-2.softxs.ch

Hardware

2 x Intel Xeon E5504, 2.0 GHz, e.g. 2 x quad-core
32 GB Main Memory
500 GB SSD, Samsung SSD 840
2 x 4 TB disk drives, WDC WD4001FAEX-0
Ensure VT-x is enabled in the BIOS

Disk Partitions

Memory Stick Preparation

Download Ubuntu Server 16.04.2 LTS
- http://releases.ubuntu.com/16.04
Use lsblk command to find USB device

Command to download and copy of memory stick:

cd /home/backup
wget http://releases.ubuntu.com/16.04/ubuntu-16.04.2-server-amd64.iso
dd bs=4M if=ubuntu-16.04.2-server-amd64.iso of=/dev/sdd

Memory stick should boot

Unbuntu Installation

Boot from Memory Stick
Language: English (install language)
Install: Install Ubuntu Server
Language: English
Location: Other --> Europe --> Switzerland
Configure Locales: United States en_US.UTF-8
Configure keyboard: English (US) --> English (US)

Ethernet:

enp0s25 <-- Select this one (where cable is plugged in)
enp1s0

Hostname: zg-2
User:
- Full name: Alan Hodgkinson
- User name: alan
- Password: *****
Encrypt home directory: No
Time zone: Europe/Zurich
Partitions:
- Unmount Partitions in use: Yes (/dev/sdb)

Partition disks: Manually

SCSI1 (0,0,0) sda
    #1    4 TB    

SCSI1 (0,1,0) sdb
    Part. Label          Size   Mount Point    Types/Notes
    -------------------------------------------------------------
    #1    zg2_boot       1 GB   /boot          ext4, bootable
    #2    N/A           16 GB   swap
    #3    zg2_root      16 GB   /              ext4    
    #4    zg2_tmp       32 GB   /tmp           ext4    
    #5    zg2_home     435 GB   /home          ext4    

SCSI2 (0,0,0) sdc
    #1    4 TB

System installed...
Configure Package Manager: HTTP Proxy: none
Configuring toolset: No automatic updates
1. Software Selection: Select the following (leave everything else unselected):
  - Open SSH server
  - Standard system utilities
Install GRUB boot loader on hard disk: Yes, /dev/sdb, SAMSUNG_SSD_...

Post Installation Config

Login on console as alan and sudo bash
Set root passwd

Allow root SSH login:

vi /etc/ssh/sshd_config
# Change
PermitRootLogin prohibit-password
# To
PermitRootLogin yes
:x

service sshd restart

Setup Networking

Interfaces

cd /etc/network
cat interfaces
... 
# The primary network interface
auto enp0s25
iface enp0s25 inet static
        address 94.231.88.101
        netmask 255.255.255.240
        network 94.231.88.96
        broadcast 94.231.88.111
        gateway 94.231.88.99
        #dns-nameservers 94.231.88.100 94.231.88.102
        dns-nameservers 127.0.0.1
        dns-search softxs.ch

Hostname

cat /etc/hostname
127.0.0.1   localhost
127.0.1.1   zg-2.softxs.ch zg-2
94.231.88.101       zg-2.softxs.ch zg-2

# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

-Deletions are marked like this.
+Additions are marked like this.
 Line 43:
-  {{{
+ {{{
 Line 47:
-   }}}
+ }}}
 Line 53:
 . Boot from Memory Stick
 Line 55:
 . Language: ''English'' (install language)
 Line 57:
 . Install: ''Install Ubuntu Server''
 Line 59:
 . Language: ''English''
 Line 61:
 . Location: ''Other --> Europe --> Switzerland''
 Line 63:
 . Configure Locales: ''United States en_US.UTF-8''
 Line 65:
 . Configure keyboard: ''English (US) --> English (US)''
 Line 67:
-. Ethernet:

  {{{
+. Ethernet:

 {{{
 Line 71:
-  }}}
+ }}}
 Line 73:
 . Hostname: ''zg-2''
 Line 75:
-. User:

     * Full name: ''Alan Hodgkinson''

     * User name: ''alan''

     * Password: ''*****''
+. User:

    * Full name: ''Alan Hodgkinson''

    * User name: ''alan''

    * Password: ''*****''
 Line 80:
 . Encrypt home directory: ''No''
 Line 82:
 . Time zone: ''Europe/Zurich''
 Line 84:
-. Partitions:

     * Unmount Partitions in use: ''Yes'' (''/dev/sdb'')
+. Partitions:

    * Unmount Partitions in use: ''Yes'' (''/dev/sdb'')
 Line 87:
-. Partition disks: ''Manually''

  {{{
+. Partition disks: ''Manually''

 {{{
 Line 103:
-  }}}
+ }}}
 Line 105:
 . ''System installed...''
 Line 107:
 . Configure Package Manager: HTTP Proxy: ''none''
 Line 109:
 . Configuring toolset: ''No automatic updates''
 Line 112:
-     * ''Open SSH server''

     * ''Standard system utilities''
+    * ''Open SSH server''

    * ''Standard system utilities''
 Line 115:
 . Install GRUB boot loader on hard disk: ''Yes'', /dev/sdb, SAMSUNG_SSD_...
 Line 117:
+== Post Installation Config ==



 1. Login on console as ''alan'' and ''sudo bash''



 1. Set root passwd



 1. Allow root SSH login:

 {{{

vi /etc/ssh/sshd_config

# Change

PermitRootLogin prohibit-password

# To

PermitRootLogin yes

:x



service sshd restart

 }}}



 1. Setup Networking

    * Interfaces

    {{{

cd /etc/network

cat interfaces

... 

# The primary network interface

auto enp0s25

iface enp0s25 inet static

        address 94.231.88.101

        netmask 255.255.255.240

        network 94.231.88.96

        broadcast 94.231.88.111

        gateway 94.231.88.99

        #dns-nameservers 94.231.88.100 94.231.88.102

        dns-nameservers 127.0.0.1

        dns-search softxs.ch

    }}}



    * Hostname

    {{{

cat /etc/hostname

127.0.0.1   localhost

127.0.1.1   zg-2.softxs.ch zg-2

94.231.88.101       zg-2.softxs.ch zg-2



# The following lines are desirable for IPv6 capable hosts

::1     localhost ip6-localhost ip6-loopback

ff02::1 ip6-allnodes

ff02::2 ip6-allrouters

    }}}