Data Capsule Host Setup

Pre-requisites:

• A Linux OS based machine with KVM support enabled acting as the target (AWS/ GCP/ Jetstream instances could be used)
• A Linux OS based machine to configure the host
• Minimum Hard disk space of 20GB on the Target machine

Steps:

0. Launch a Linux OS based machine that acts as a Host configuration machine.

1. On the Host configuration machine, Clone the GitHub repo

git clone --recurse-submodules https://github.com/TempleDSS/data-capsule-appliance.git

2. Install Ansible on the Host configuration machine using the below commands:

*Reference: (https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#installing-ansible-on-ubuntu)

$ sudo apt update
$ sudo apt install software-properties-common
$ sudo add-apt-repository --yes --update ppa:ansible/ansible
$ sudo apt install ansible

3. Install python and pip on the Host configuration machine

$ sudo apt install python3-pip

4. Install passlib module on the Host configuration machine

$ pip install passlib

5. Setup a cloud instance(Target) with KVM support and linked SSH keys(ed25519/ RSA) - GCP recommended

In case of GCP, KVM support for the instance can be enabled by following the official documentation.

One can verify if KVM support exists/is enabled in the instance using below commands,

$ sudo apt -y install bridge-utils cpu-checker libvirt-clients libvirt-daemon qemu qemu-kvm
$ sudo /usr/sbin/kvm-ok

6. SSH into the Target machine

Make the permissions of the key file strict by running

$ chmod 400 ./keyFile.pem

SSH into the cloud target instance using the private key file by running the below command,

$ ssh -i path/to/KeyFile.pem <Default Username>@<Public IPv4/ DNS address of the instance>

7. Install Ansible in the target instance using the below commands

$ sudo apt update
$ sudo apt install software-properties-common
$ sudo add-apt-repository --yes --update ppa:ansible/ansible
$ sudo apt install ansible

8. Install Qemu utilities using

$ sudo apt-get install qemu-utils

9. To Enable SSHing into the target instance without a keyfile, Click here

10. Exit from the instance by typing exit.

11. Go to the Directory /Data Capsule Host of the cloned repo.

12. Add the public ip address of the target instances in the hosts file.

13. Run the ansible -playbook using the command

$ ansible-playbook --user=<login_username> -k -i hosts site.yml --ask-become-pass

14. If there are no errors and if failed=0, ansible-playbook is successfully run.

It means that the target machine is configured properly and all the Tasks are exeuted completely. (errors would be shown in red and successful task execution results would be shown in green/yellow.)

15. Save the ip-table rules in the instance

sudo apt install iptables-persistent
sudo iptables -L
sudo iptables-save | sudo tee /etc/iptables/rules.v4

16. Now lets proceed to the creation and testing of the Data Capsule.