Home

#ALL

##hostfile:

10.78.254.1 symphony.prv.cluster symphony 10.78.254.2 symphony-directory.prv.cluster symphony-directory 10.78.254.3 symphony-repo.prv.cluster symphony-repo 10.78.254.4 symphony-monitor.prv.cluster symphony-monitor

##packages:

yum -y install vim yum-priorities augeas

systemctl disable NetworkManager

##Setup firewall

systemctl enable firewalld systemctl start firewalld

#SYMPHONY

(centos 7 minimal)

##configure hostname + networking

edit /etc/hostname symphony.prv.cluster

eth0 = primary network

IPV6INIT=no BOOTPROTO=none DEVICE=eth0 ONBOOT=yes IPADDR=10.78.254.1 NETMASK=255.255.0.0 NETWORK=10.78.0.0 ZONE=trusted

eth1 = public network dhcp

IPV6INIT=no BOOTPROTO=dhcp DEVICE=eth1 ONBOOT=yes PEERDNS=no ZONE=external

##Firewall

firewall-cmd --zone=external --add-masquerade --permanent

#SYMPHONY-REPO

(centos 7 minimal vm with large data disk mounted on /var/lib/pulp/content/)

##configure hostname + networking:

edit /etc/hostname symphony-repo.prv.cluster

eth0 = primary network

IPV6INIT=no BOOTPROTO=none DEVICE=eth0 ONBOOT=yes IPADDR=10.78.254.3 NETMASK=255.255.0.0 NETWORK=10.78.0.0 GATEWAY=10.78.254.1 DNS=10.78.254.2 ZONE=private

firewall

firewall-cmd --new-zone private --permanent firewall-cmd --add-service http --zone private --permanent firewall-cmd --add-service ssh --zone private --permanent

install repos:

curl https://repos.fedorapeople.org/repos/pulp/pulp/rhel-pulp.repo > /etc/yum.repos.d/pulp.repo TODO fix 7 != 7server bug in pulp repos sed -i -e 's/$releasever/7Server/g' /etc/yum.repos.d/pulp.repo

yum -y install https://anorien.csc.warwick.ac.uk/mirrors/epel/7/x86_64/e/epel-release-7-1.noarch.rpm yum -y install mongodb-server systemctl enable mongod systemctl start mongod

yum -y install qpid-cpp-server qpid-cpp-server-store

TODO Fix bug for augeas with qpidd ln -snf /etc/qpid/qpidd.conf /etc/qpidd.conf

augtool -s set /files/etc/qpidd.conf/auth no

systemctl enable qpidd systemctl start qpidd

Edit /etc/pulp/server.conf

TODO use SSL

Init pulp DB:

sudo -u apache pulp-manage-db

systemctl enable httpd systemctl start httpd

systemctl enable pulp_workers systemctl start pulp_workers

systemctl enable pulp_celerybeat systemctl start pulp_celerybeat

systemctl enable pulp_resource_manager systemctl start pulp_resource_manager

Admin Client

yum groupinstall pulp-admin edit /etc/pulp/admin/admin.conf: server=symphony-repo.prv.cluster verify_ssl=false

TODO enable proper ssl

pulp-admin login -u admin -p admin pulp-admin auth user update --login admin --password 'sqrt(s*w)' TODO set site password

##Import Repos

###Centos 7 pulp-admin rpm repo create --repo-id=centos7.0 --feed=http://www.mirrorservice.org/sites/mirror.centos.org/7.0.1406/os/x86_64/ --serve-http=true --relative-url=centos/7.0/os/ pulp-admin rpm repo sync run --repo-id centos7.0 --bg

pulp-admin rpm repo create --repo-id=centos7.0-updates --feed=http://www.mirrorservice.org/sites/mirror.centos.org/7.0.1406/updates/x86_64/ --serve-http=true --relative-url=centos/7.0/updates pulp-admin rpm repo sync run --repo-id centos7.0-updates --bg

pulp-admin rpm repo create --repo-id=epel7 --feed=http://anorien.csc.warwick.ac.uk/mirrors/epel/7/x86_64/ --serve-http=true --relative-url=epel7 pulp-admin rpm repo sync run --bg --repo-id=epel7

pulp-admin rpm repo create --repo-id=cobbler-el7 --feed=http://download.opensuse.org/repositories/home:/libertas-ict:/cobbler26/CentOS_CentOS-7/noarch/ --serve-http=true --relative-url=cobbler/el7 pulp-admin rpm repo sync run --bg --repo-id=cobbler-el7