Data Capsule Host Setup

Pre-requisites:

Case 1: Deploy a single Data Capsule

• A Linux OS based machine with KVM support enabled acting as the Host (AWS/ GCP/ Jetstream instances could be used)
• Minimum Hard disk space of 20GB on the Host machine

Case 2: Deploy Multiple Data Capsules - follow below steps

• One Linux OS based machine with KVM support enabled acting as the Host (AWS/ GCP/ Jetstream instances could be used)
• Second Linux OS based machine to configure multiple host machines
• Minimum Hard disk space of 20GB on the Host machine

Steps:

0. Launch a Linux OS based machine that acts as a Host configuration machine.

1. On the Host configuration machine, Clone the GitHub repo

git clone --recurse-submodules https://github.com/TempleDSS/data-capsule-appliance.git

2. Install Ansible on the Host configuration machine using the below commands:

*Reference: (https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html#installing-ansible-on-ubuntu)

$ sudo apt update
$ sudo apt install software-properties-common
$ sudo add-apt-repository --yes --update ppa:ansible/ansible
$ sudo apt install ansible

3. Install python and pip on the Host configuration machine

$ sudo apt install python3-pip

4. Install passlib module on the Host configuration machine

$ pip install passlib

5. Setup a cloud instance(Host) with KVM support and linked SSH keys(ed25519/ RSA) - GCP recommended

In case of GCP, KVM support for the instance can be enabled by following the official documentation.

One can verify if KVM support exists/is enabled in the instance using the below commands,

$ sudo apt -y install bridge-utils cpu-checker libvirt-clients libvirt-daemon qemu qemu-kvm
$ sudo /usr/sbin/kvm-ok

6. SSH into the Host machine

Make the permissions of the key file strict by running

$ chmod 400 ./keyFile.pem

SSH into the cloud host instance using the private key file by running the below command,

$ ssh -i path/to/KeyFile.pem <Default Username>@<Public IPv4/ DNS address of the instance>

7. Install Ansible in the host instance using the below commands

$ sudo apt update
$ sudo apt install software-properties-common
$ sudo add-apt-repository --yes --update ppa:ansible/ansible
$ sudo apt install ansible

8. Install Qemu utilities using

$ sudo apt-get install qemu-utils

9. To Enable SSHing into the host instance without a keyfile, Click here

10. Exit from the instance by typing exit.

11. Go to the Directory /Data Capsule Host of the cloned repo.

12. Add the public ip address of the host instances in the hosts file.

13. Run the ansible-playbook using the command

$ ansible-playbook --user=<login_username> -k -i hosts site.yml --ask-become-pass

Where, login_username is the username of the host machine

14. If there are no errors and if failed=0, ansible-playbook is successfully run.

It means that the host machine is configured properly and all the Tasks are executed completely. (errors would be shown in red and successful task execution results would be shown in green/yellow.)

15. Save the ip-table rules in the instance

sudo apt install iptables-persistent
sudo iptables -L
sudo iptables-save | sudo tee /etc/iptables/rules.v4

16. Now lets proceed to the creation and testing of the Data Capsule.

Testing the Data Capsule