1. 01 Dec, 2014 1 commit
    • Dimitris Aragiorgis's avatar
      deploy: Networking fixes · da63a421
      Dimitris Aragiorgis authored
      Introduce /etc/network/interfaces.synnefo that will setup bridges
      used for VMs' public and private networks.
      
      Instead of using a common bridge use two separate bridges (br0,
      prv0). Their default ports are defined in nodes.conf
      (vm_public_iface, vm_private_iface) which are by default dummy. In a
      single node setup we don't need those interfaces. In case of router
      node, br0 will get the gateway IP.
      
      Use ferm for persistent network configuration. Add masq.ferm that
      is responsible for masquerading on router node and MAC SNAT on all
      nodes (needed in case we have a MAC filtered setup on
      vm_public_iface).
      
      Use rc.local to losetup extra disk and ifup bridges.
      Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
      da63a421
  2. 30 Nov, 2014 2 commits
  3. 24 Nov, 2014 1 commit
  4. 06 Nov, 2014 12 commits
  5. 15 Oct, 2014 4 commits
    • Dimitris Aragiorgis's avatar
      deploy: chown -R root:archipelago /etc/synnefo · f73ca203
      Dimitris Aragiorgis authored
      Pithos and Cyclades components require ArchipSynnefo which makes
      gunicorn run as root:archipelago.
      
      Currently all snf-* packages install their conf files as
      root:www-data. Note that the g+s mode in /etc/synnefo does is not
      enough since debian uses mv and not copy to put the conf files in
      the proper dir.
      
      Thus we have to manually change the owner of conf files after
      package installation.
      
      Do this in GTools and Admin components too.
      Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
      f73ca203
    • Dimitris Aragiorgis's avatar
      deploy: Add archipelago user and group manually · cf165739
      Dimitris Aragiorgis authored
      In NFS and Mount components add archipelago user manually. For NFS
      permissions to work properly across all nodes, the group owner of
      the exported directory must exist on all nodes and have a common
      gid. Thus, prior adduser, we create archipelago group with high gid
      (200) to avoid conflicts.
      Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
      cf165739
    • Dimitris Aragiorgis's avatar
      deploy: Remove pithos_dir references · 1df27925
      Dimitris Aragiorgis authored
      Since archipelago is the pithos backend, the NFS dir /srv/pithos
      is useless. Cleanup everything related to it.
      Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
      1df27925
    • Dimitris Aragiorgis's avatar
      deploy: Do not run archipelago as root · 3a9cca82
      Dimitris Aragiorgis authored
      Since 0.4~rc2, archipelago creates archipelago user and group
      upon package installation. In order not to run as root we
      have to:
      
       - chown and chmod /srv/archip dirs and file
       - let gunicorn run as www-data.archipelago
       - chown /etc/synnefo and /var/log/gunicorn
      
      Additionally archipelago introduces an new dir to store locks.
      Create this dir on the nfs node.
      
      NOTE: In case of a multinode setup using NFS as archipelago
      backend, the archipelago user must have a common group id across
      all nodes. Currently snf-deploy does not take that into account
      since it practically setups a single node installation.
      Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
      3a9cca82
  6. 14 Oct, 2014 1 commit
  7. 29 Sep, 2014 1 commit
  8. 25 Sep, 2014 1 commit
  9. 22 Sep, 2014 3 commits
  10. 16 Sep, 2014 1 commit
  11. 15 Sep, 2014 2 commits
  12. 10 Sep, 2014 1 commit
    • Dionysis Grigoropoulos's avatar
      deploy: Remove obsolete UI_MEDIA_URL setting · 76b2ea74
      Dionysis Grigoropoulos authored
      Deploy used to set UI_MEDIA_URL to point to the IP of the host
      instead of its FQDN, to work around issues with the Java-based VNC
      client and self-signed certificates. Synnefo v0.16 has obsoleted
      the Java VNC console, so we may safely remove this setting.
      76b2ea74
  13. 08 Sep, 2014 2 commits
  14. 01 Sep, 2014 1 commit
  15. 14 Jul, 2014 1 commit
  16. 08 Jul, 2014 5 commits
  17. 02 Jul, 2014 1 commit