Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
S
synnefo
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Service Desk
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Operations
Operations
Incidents
Environments
Analytics
Analytics
CI / CD
Repository
Value Stream
Wiki
Wiki
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
itminedu
synnefo
Commits
ddb51ce5
Commit
ddb51ce5
authored
Sep 05, 2014
by
Stratos Psomadakis
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
docs: Update 0.16 upgrade guide
parent
d59e4f94
Changes
3
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
with
90 additions
and
11 deletions
+90
-11
docs/install-guide-centos.rst
docs/install-guide-centos.rst
+16
-0
docs/install-guide-debian.rst
docs/install-guide-debian.rst
+16
-0
docs/upgrade/upgrade-0.16.rst
docs/upgrade/upgrade-0.16.rst
+58
-11
No files found.
docs/install-guide-centos.rst
View file @
ddb51ce5
...
...
@@ -2096,6 +2096,22 @@ settings. Check the `documentation
<
http
://
www
.
synnefo
.
org
/
docs
/
snf
-
vncauthproxy
/
latest
/
index
.
html
>`
_
of
snf
-
vncauthproxy
for
more
information
.
You
should
also
provide
snf
-
vncauthproxy
with
SSL
certificates
signed
by
a
trusted
CA
.
You
can
either
copy
them
to
`/
var
/
lib
/
vncauthproxy
/{
cert
,
key
}.
pem
`
or
inform
vncauthproxy
about
the
location
of
the
certificates
(
via
the
`
DAEMON_OPTS
`
setting
in
`/
etc
/
default
/
vncauthproxy
`).
::
DAEMON_OPTS
=
"--pid-file=$PIDFILE --cert-file=<path_to_cert> --key-file=<path_to_key>"
Both
files
should
be
readable
by
the
`
vncauthproxy
`
user
or
group
.
..
note
::
At
the
moment
,
the
certificates
should
be
issued
to
the
FQDN
of
the
Cyclades
worker
.
We
have
now
finished
with
the
basic
Cyclades
configuration
.
Database
Initialization
...
...
docs/install-guide-debian.rst
View file @
ddb51ce5
...
...
@@ -2136,6 +2136,22 @@ settings. Check the `documentation
<http://www.synnefo.org/docs/snf-vncauthproxy/latest/index.html>`_ of
snf-vncauthproxy for more information.
You should also provide snf-vncauthproxy with SSL certificates signed by a
trusted CA. You can either copy them to `/var/lib/vncauthproxy/{cert,key}.pem`
or inform vncauthproxy about the location of the certificates (via the
`DAEMON_OPTS` setting in `/etc/default/vncauthproxy`).
::
DAEMON_OPTS="--pid-file=$PIDFILE --cert-file=<path_to_cert> --key-file=<path_to_key>"
Both files should be readable by the `vncauthproxy` user or group.
.. note::
At the moment, the certificates should be issued to the FQDN of the
Cyclades worker.
We have now finished with the basic Cyclades configuration.
Database Initialization
...
...
docs/upgrade/upgrade-0.16.rst
View file @
ddb51ce5
...
...
@@ -6,16 +6,16 @@ Introduction
Starting with version 0.16, we introduce Archipelago as the new storage backend
for the Pithos Service. Archipelago will act as a storage abstraction layer
between Pithos and NFS, RADOS or any other storage backend driver that
Archipelago
supports. In order to use the Pithos Service you must install Archipelago on the
node that runs the Pithos workers. Additionally, you must install snf-image
version 0.16 on the Ganeti nodes since this is the first version that supports
Archipelago.
between Pithos and NFS, RADOS or any other storage backend driver that
Archipelago supports. In order to use the Pithos Service you must install
Archipelago on the node that runs the Pithos and Cyclades workers.
Additionally, you must install snf-image version 0.16 on the Ganeti nodes since
this is the first version that supports
Archipelago.
Until now the Pithos mapfile was a simple file containing a list of hashes that
make up the stored file in a Pithos container. After this consolidation the
Pithos
mapfile had to be converted to an Archipelago mapfile. An Archipelago mapfile
is an updated version of the Pithos mapfile, intended to supersede it.
make up the stored file in a Pithos container. After this consolidation the
Pithos mapfile had to be converted to an Archipelago mapfile. An Archipelago
mapfile
is an updated version of the Pithos mapfile, intended to supersede it.
More info about the new mapfile you can find in Archipelago documentation.
...
...
@@ -23,7 +23,9 @@ More info about the new mapfile you can find in Archipelago documentation.
Upgrade Steps
=============
The upgrade to v0.16 consists in the following steps:
The upgrade to v0.16 consists of the following steps:
0. Upgrade / Install Archipelago and snf-image.
1. Bring down services and backup databases.
...
...
@@ -43,6 +45,24 @@ The upgrade to v0.16 consists in the following steps:
It is strongly suggested that you keep separate database backups
for each service after the completion of each step.
0. Upgrade / Install Archipelago and snf-image
==============================================
If you have never used Archipelago before, make sure to install Archipelago 0.4
on all Ganeti VM-capable nodes.
If you're upgrading from Archipelago 0.3.5, make sure to upgrade Archipelago
on all Ganeti nodes before starting the upgrade process. For more
information, check the Archipelago
`upgrade notes <https://www.synnefo.org/docs/archipelago/latest/upgrades/archipelago_upgrade_v04.rst>`_.
Once you have Archipelago 0.4 up and running, you can install snf-image 0.16.
At this point, you should also install Archipelago 0.4 on the Pithos and
Cyclades workers.
1. Bring web services down, backup databases
============================================
...
...
@@ -143,6 +163,33 @@ The upgrade to v0.16 consists in the following steps:
pithos-host$ pithos-migrate upgrade head
2.3 Configure snf-vncauthproxy
------------------------------
Synnefo 0.16 replaces the Java VNC client with an HTML5 Websocket client and
the Cyclades UI will always request secure Websocket connections. You should,
therefore, provide snf-vncauthproxy with SSL certificates signed by a trusted
CA. You can either copy them to `/var/lib/vncauthproxy/{cert,key}.pem` or
inform vncauthproxy about the location of the certificates (via the
`DAEMON_OPTS` setting in `/etc/default/vncauthproxy`).
::
DAEMON_OPTS="--pid-file=$PIDFILE --cert-file=<path_to_cert> --key-file=<path_to_key>"
Both files should be readable by the `vncauthproxy` user or group.
.. note::
At the moment, the certificates should be issued to the FQDN of the
Cyclades worker.
For more information on how to setup snf-vncauthproxy check the
snf-vncauthproxy `documentation <https://www.synnefo.org/docs/snf-vncauthproxy/latest/index.html#usage-with-synnefo>`_
and `upgrade notes <https://www.synnefo.org/docs/snf-vncauthproxy/latest/upgrade/upgrade-1.6.html>`_.
3. Inspect and adjust resource limits
=====================================
...
...
@@ -198,8 +245,8 @@ another project in order to overcome this restriction.
4. Tweak Archipelago and Gunicorn settings on Pithos node
=========================================================
After installing Archipelago on
Pithos node we need to adjust the configuration
files according to our deployment needs.
After installing Archipelago on
the Pithos node we need to adjust the
configuration
files according to our deployment needs.
For Archipelago the configuration file is located on
``/etc/archipelago/archipelago.conf``, where we need to adjust carefully at
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment