Puppet in IT-GT

Thanks to the work of GeorgiZlatkov who was here in 2011, we have started to deploy Puppet to manage the testbed infrastructure.

Since his initial PuppetProgress notes, there are some changes.

1) Installation

yum --enablrepo epel-testing will pull in the 2.6.x (2.6.6 at the time of writing) - much more recent than stock.

if you want puppet --help to work, you need to install ruby-rdoc

Firewall - don't disable all! just add an explicit rule for port 8140

"The main tasks for the student would be to implement and enhance an industry standard tool for fabric management within the group, most likely 'puppet'. This would allow consistent software configuration, improved reliability and reproducibility of test machines, better compliance with site policies such as security. The tool needs to be compatible with both the site linux platform (SLC 5/6) and those platforms needed by 3rd parties (Scientific Linux / Debian)

See also NonStandardMachines for the start list of things we need to check

Other tasks depending on time and priorities could include:

  • Integration with monitoring tools
  • Development of periodic report generation tools

Further ideas that have been discussed since then include:

  • interfacing with quattor type tools
  • Generating configs from yaims site-info.def

Original Rough Plan

(NB: this is NOT final -- just a whiteboard of ideas)

End Wk 1

  • Install Puppet master
  • 1-2 machine client test. - few basic files (/etc/motd or such)
  • Meet with Romain, Steve, Gavin, Ricardo for best practices plan

End Wk 2

  • Work out classification of machines and suitable scalable tree for master
  • version control the master configs
  • [AE/TW -- count of total no of testbed machines]

Wks 3-4

  • Install 'real' master - Harden + Yubikey?
  • Basic config files (NTP, ssh, syslog)
  • Merge info from external sources (ssh keys, firewall?)
  • Monitoring -- collectd installed and sending to central host
  • Nagios sanity check

Wk 5

  • Aim for 1/3 - 1/2 of entire testbed to be under control of puppet for basics

Wks 6-8

  • rest of testbed
  • 'Other Stuff'

All timings are provisional at this point

-- AndrewElwell - 09-May-2011

Edit | Attach | Watch | Print version | History: r4 < r3 < r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r4 - 2011-08-19 - unknown
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    ITGT All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2021 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback