How to Create Cluster 7 (Ubuntu 20.04): Difference between revisions

From DISI
Jump to navigation Jump to search
No edit summary
Line 130: Line 130:
#* ufw allow 53/tcp
#* ufw allow 53/tcp
#* ufw allow 53/udp
#* ufw allow 53/udp
#* ufw allow 67:69/udp
#* ufw allow 80/tcp
#* ufw allow 443/tcp
#* ufw allow 3000/tcp
#* ufw allow 5910:5930/tcp
#* ufw allow 5432/tcp
#* ufw allow 8140/tcp
#* ufw allow 8443/tcp
# Prepare Puppet for Foreman

Revision as of 03:25, 23 October 2021

Introduction

Here are the instructions on how to build Cluster 7 using Ubuntu 20.04.

The build is not complete as of October 19, 2021.

Hardware Requirements (so far)

  • 2 x 1 gigabit unmanaged switches
  • one switch for private IP
  • one switch for public IP
  • 4 x unused ProLiant DL160 G5 Machines
  • one for NAT machine
  • one for Foreman Server
  • one for LDAP Server
  • one extra for any testing
  • 1 x USB for Operating System (OS)


Create a Network Address Translation(NAT) machine

A NAT machine will act as a local VPN to the cluster. This will be the first machine you SSH into.

Current machine:

  • Hostname: segundo.dot
  • Private IP Address: 10.70.1.2
  • Public IP Address: 169.230.26.58

Instructions

  1. Install Ubuntu 20.04 using USB. You can set everything to default but make sure to disable network interfaces if DHCP Server is not set up yet.
  2. After OS installation, grab MAC Address of network interface enp4s0. You'll need it to make a public IP.
    • ip a
  3. Create a DNS entry for this machine in the website below to give you a public IP address
  4. File a ticket to UCSF IT to open port 22 on the public interface
  5. Configure private and public network interfaces
    • vim /etc/netplan/00-installer-config.yaml
    • Configuration should look like this:
    # This is the network config written by 'subiquity'
    network:
    ethernets:
    enp3s0:
    addresses:
    - 10.70.1.2/16
    gateway4: 127.0.0.1
    nameservers:
    addresses:
    - 10.70.1.1
    search:
    - dot
    enp4s0:
    addresses:
    - 169.230.26.58/16
    gateway4: 169.230.26.1
    nameservers:
    addresses:
    - 8.8.8.8
    - 8.8.4.4
    - 128.218.254.10
    - 128.218.254.40
    search:
    - dot
    - compbio.ucsf.edu
    version: 2
  6. Test if configuration works by pinging google
    • ping google.com
  7. Enable and allow ssh in UFW firewall
    • ufw enable
    • ufw allow ssh
    • ufw status
  8. Enable NAT in UFW
    • vim /etc/default/ufw
      • Change parameter of "DEFAULT_FORWARD_POLICY" to "ACCEPT"
    • vim /etc/ufw/sysctl.conf
      • Uncomment "net.ipv4.ip_forward=1"
    • vim /etc/ufw/before.rules
      • Add these lines at the beginning of the file:
    # NAT table rules
    *nat
    :POSTROUTING ACCEPT [0:0]
    -A POSTROUTING -s 169.230.26.58/16 -o enp4s0 -j MASQUERADE
    COMMIT
    • ufw reload
  9. Test by setting another machine's gateway to 10.70.1.2 and then pinging google.com

Install Foreman

Foreman is an all in one cluster management tool with a graphical user interface.

Current machine:

  • Hostname: primero.dot
  • IP Address: 10.70.1.1
  • Public IP Address: 169.230.26.69

Instructions

  1. Install Ubuntu 20.04 using USB. You can set everything to default but make sure to disable network interfaces if DHCP Server is not set up yet.
  2. After OS installation, grab MAC Address of network interface enp4s0. You'll need it to make a public IP.
    • ip a
  3. Create a DNS entry for this machine in the website below to give you a public IP address
  4. Configure private and public network interfaces
    • vim /etc/netplan/00-installer-config.yaml
    • Configuration should look like this:
    # This is the network config written by 'subiquity'
    network:
    ethernets:
    enp3s0:
    addresses:
    - 10.70.1.1/16
    gateway4: 10.70.1.2
    nameservers:
    addresses:
    - 10.70.1.1
    search:
    - dot
    enp4s0:
    addresses:
    - 169.230.26.69/16
    gateway4: 169.230.26.1
    nameservers:
    addresses:
    - 8.8.8.8
    - 8.8.4.4
    - 128.218.254.10
    - 128.218.254.40
    search:
    - dot
    - compbio.ucsf.edu
    version: 2
  5. Test if configuration works by pinging google
    • ping google.com
  6. Enable listed ports for Foreman and additional services
    • ufw allow 53/tcp
    • ufw allow 53/udp
    • ufw allow 67:69/udp
    • ufw allow 80/tcp
    • ufw allow 443/tcp
    • ufw allow 3000/tcp
    • ufw allow 5910:5930/tcp
    • ufw allow 5432/tcp
    • ufw allow 8140/tcp
    • ufw allow 8443/tcp
  7. Prepare Puppet for Foreman
Retrieved from "http://wiki.docking.org/index.php?title=How_to_Create_Cluster_7_(Ubuntu_20.04)&oldid=13723"