Details

    • Type: Task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Fix Version/s: Initial Clearing
    • Component/s: VMWare
    • Labels:
      None

      Description

      Please create an Ubuntu jail for the DeviceMap podling.

      Initial users:
      https://svn.apache.org/repos/infra/infrastructure/trunk/ssh_keys/people/bdelacretaz.pub

      Other committers might add their key URLs here.

      Thanks!

        Activity

        Hide
        infrabot #asfinfra Bot added a comment -
        <danielsh> assuming you want an Ubuntu VM rather than a FreeBSD jail.
        Show
        infrabot #asfinfra Bot added a comment - <danielsh> assuming you want an Ubuntu VM rather than a FreeBSD jail.
        Hide
        bdelacretaz Bertrand Delacretaz added a comment - Reporter
        Yes, Ubuntu it is, jail or VM doesn't matter to us.

        BTW are there any docs on those things?

        I assume http://www.apache.org/dev/solaris-zones.html is out of date, haven't found docs on jails or VMs.
        Show
        bdelacretaz Bertrand Delacretaz added a comment - Reporter Yes, Ubuntu it is, jail or VM doesn't matter to us. BTW are there any docs on those things? I assume http://www.apache.org/dev/solaris-zones.html is out of date, haven't found docs on jails or VMs.
        Hide
        infrabot #asfinfra Bot added a comment -
        <danielsh> dev/freebsd-jails exists, not sure we have separate doc for Ubuntu
        Show
        infrabot #asfinfra Bot added a comment - <danielsh> dev/freebsd-jails exists, not sure we have separate doc for Ubuntu
        Hide
        ipv6guru Gavin added a comment -
        What sort of hard disk space and mem do you think you'll need for this VM?

        I'll do 40GB space and 2GB RAM otherwise.

        VM hostname will be devicemap-vm.apache.org
        Show
        ipv6guru Gavin added a comment - What sort of hard disk space and mem do you think you'll need for this VM? I'll do 40GB space and 2GB RAM otherwise. VM hostname will be devicemap-vm.apache.org
        Hide
        ipv6guru Gavin added a comment -
        change component
        Show
        ipv6guru Gavin added a comment - change component
        Hide
        bdelacretaz Bertrand Delacretaz added a comment - Reporter
        40GB space and 2GB RAM is fine, we don't plan anything big at this time.
        Show
        bdelacretaz Bertrand Delacretaz added a comment - Reporter 40GB space and 2GB RAM is fine, we don't plan anything big at this time.
        Hide
        pctony Tony Stevenson added a comment -
        dns added...

        140.211.11.78 - devicemap-vm.a.o

        Show
        pctony Tony Stevenson added a comment - dns added... 140.211.11.78 - devicemap-vm.a.o
        Hide
        pctony Tony Stevenson added a comment -
        Bertrand,

        The VM has been created, and you will have access as soon as you add your ssh key to LDAP.
        This VM uses LDAP for user accounts, it doesnt have local user accounts (aside from root@ related stuff).

        To add a new user, they need to add their SSH key to their LDAP account also (using id.apache.org), then you need to run 'sudo usermod -G sshusers $availid'

        Sudo access is controlled via an LDAP group which currently only root@ can manage.


        Have fun, etc :)
        Show
        pctony Tony Stevenson added a comment - Bertrand, The VM has been created, and you will have access as soon as you add your ssh key to LDAP. This VM uses LDAP for user accounts, it doesnt have local user accounts (aside from root@ related stuff). To add a new user, they need to add their SSH key to their LDAP account also (using id.apache.org), then you need to run 'sudo usermod -G sshusers $availid' Sudo access is controlled via an LDAP group which currently only root@ can manage. Have fun, etc :)
        Hide
        pctony Tony Stevenson added a comment -
        All done.
        Show
        pctony Tony Stevenson added a comment - All done.
        Hide
        bdelacretaz Bertrand Delacretaz added a comment - Reporter
        Thanks, login works but I cannot sudo.

        $ sudo id
        sudo: pam_authenticate: User not known to the underlying authentication module

        User bdelacretaz is a member of group 6006(devicemap-vm.apache.org-sudoers), which I assume is correct?
        Show
        bdelacretaz Bertrand Delacretaz added a comment - Reporter Thanks, login works but I cannot sudo. $ sudo id sudo: pam_authenticate: User not known to the underlying authentication module User bdelacretaz is a member of group 6006(devicemap-vm.apache.org-sudoers), which I assume is correct?
        Hide
        infrabot #asfinfra Bot added a comment -
        <danielsh> run opiepasswd first
        Show
        infrabot #asfinfra Bot added a comment - <danielsh> run opiepasswd first
        Hide
        ipv6guru Gavin added a comment -
        bertrand, the sudo system on the vm requires you to use the One Time Password system, in this case, you run 'ortpasswd' on the VM, and locally create OTP key to type in as the result.

        Jump on #asfinfra if you need any help in this area.
        Show
        ipv6guru Gavin added a comment - bertrand, the sudo system on the vm requires you to use the One Time Password system, in this case, you run 'ortpasswd' on the VM, and locally create OTP key to type in as the result. Jump on #asfinfra if you need any help in this area.
        Hide
        ipv6guru Gavin added a comment -
        Show
        ipv6guru Gavin added a comment - See also http://apache.org/dev/freebsd-jails#opie for hints.
        Hide
        pctony Tony Stevenson added a comment -
        This was resolved in IRC.

        13:51 ::: bdelacretaz [~bert@apache/committer/bdelacretaz] joined #asfinfra
        13:51 ::: cstx [~cstx@BC24221F.catv.pool.telekom.hu] joined #asfinfra
        13:52 < bdelacretaz> still having trouble with sudo on devicemap-vm.a.o. danielsh or someone can you help? (not urgent but might be quicker to fix here)
        13:53 < Uli-> 14:31:27 < joes4> tell bdelacretaz that he needs to run opiepasswd
        13:53 < bdelacretaz> I don't see opiepasswd on that box
        13:54 < danielsh> ortpasswd
        13:54 < bdelacretaz> danielsh: thanks - that's found
        13:54 < danielsh> run it
        13:55 < danielsh> www.a.o/dev/fbsd-jails
        13:56 < bdelacretaz> aahhh I see it now sorry - I'll try to update those docs for VM once I got that one fully setup
        13:57 < danielsh> bdelacretaz: thanks, note that ubuntu -> ortpasswd, fbsd => opiepasswd
        Show
        pctony Tony Stevenson added a comment - This was resolved in IRC. 13:51 ::: bdelacretaz [~ bert@apache /committer/bdelacretaz] joined #asfinfra 13:51 ::: cstx [~ cstx@BC24221F.catv.pool.telekom.hu ] joined #asfinfra 13:52 < bdelacretaz> still having trouble with sudo on devicemap-vm.a.o. danielsh or someone can you help? (not urgent but might be quicker to fix here) 13:53 < Uli-> 14:31:27 < joes4> tell bdelacretaz that he needs to run opiepasswd 13:53 < bdelacretaz> I don't see opiepasswd on that box 13:54 < danielsh> ortpasswd 13:54 < bdelacretaz> danielsh: thanks - that's found 13:54 < danielsh> run it 13:55 < danielsh> www.a.o/dev/fbsd-jails 13:56 < bdelacretaz> aahhh I see it now sorry - I'll try to update those docs for VM once I got that one fully setup 13:57 < danielsh> bdelacretaz: thanks, note that ubuntu -> ortpasswd, fbsd => opiepasswd
        Hide
        pctony Tony Stevenson added a comment -
        All squared away now, afaict
        Show
        pctony Tony Stevenson added a comment - All squared away now, afaict
        Hide
        bdelacretaz Bertrand Delacretaz added a comment - Reporter
        Yes, thanks very much and sorry that I didn't update this after getting help on IRC.
        Show
        bdelacretaz Bertrand Delacretaz added a comment - Reporter Yes, thanks very much and sorry that I didn't update this after getting help on IRC.

          People

          • Assignee:
            pctony Tony Stevenson
            Reporter:
            bdelacretaz Bertrand Delacretaz
            Request participants:
            None
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: