Details

      Description

      The Allura podling would like to self-host Allura to provide ticket management, wiki, etc. I don't know what standard options for a VM are available, so here's our ideal requirements. We can be flexible.

      * Ubuntu 12.04 (or 11.10). Main packages we would install within it: solr, python, mongodb, git, httpd/mod_wsgi
      * URL to the VM at a subdomain (as opposed to a subdirectory on a shared subdomain)
      * Outbound smtp available
      * Access to Apache LDAP for authentication (probably)
      * Inbound email routing
      * readonly access to the Allura git repo (for code browsing, etc)

      https://sourceforge.net/p/allura/git/#readme describes our installation process in more detail.

      It will take us some time to get everything in this Allura instance functioning, so requests like LDAP, inbound email and access to the git repo files can be deferred & discussed in the future.

        Activity

        Hide
        #asfinfra IRC Bot added a comment -
        <pctony> Dave, we will need more details as to the spec of the VM. Also, if you require any logins, we require that they are only taken via HTTPS, and if that is the case we will proxy HTTP[S] request to your VM from a VM managed by root@ so we can preserve integrity of the SSL cert.
        Show
        #asfinfra IRC Bot added a comment - <pctony> Dave, we will need more details as to the spec of the VM. Also, if you require any logins, we require that they are only taken via HTTPS, and if that is the case we will proxy HTTP[S] request to your VM from a VM managed by root@ so we can preserve integrity of the SSL cert.
        Hide
        Dave Brondsema added a comment -
        What sort of specs? Like RAM/CPU/disk usage?

        We haven't discussed yet what sort of authentication we'll set up for Allura, but it seems very likely that we'd want HTTPS in any case. Lets plan on that.
        Show
        Dave Brondsema added a comment - What sort of specs? Like RAM/CPU/disk usage? We haven't discussed yet what sort of authentication we'll set up for Allura, but it seems very likely that we'd want HTTPS in any case. Lets plan on that.
        Hide
        Tony Stevenson added a comment -
        Yes,

        VM specs. Please.
        Show
        Tony Stevenson added a comment - Yes, VM specs. Please.
        Hide
        Dave Brondsema added a comment -
        We'd like a minimum of 768M RAM and 20G disk space. Are multiple cores/cpus available? If so, 2 2-Ghz CPUs would be a good start. Thanks.
        Show
        Dave Brondsema added a comment - We'd like a minimum of 768M RAM and 20G disk space. Are multiple cores/cpus available? If so, 2 2-Ghz CPUs would be a good start. Thanks.
        Hide
        Gavin added a comment -
        I've created allura-vm.a.o , single cpu sorry, but with 60GB HD and 1GB RAM.
        Next step is to puppetise it.
        Show
        Gavin added a comment - I've created allura-vm.a.o , single cpu sorry, but with 60GB HD and 1GB RAM. Next step is to puppetise it.
        Hide
        Gavin added a comment -
        Ok puppetised.

        I'll need asf availid list of any that will need access to the machine. And, if different, a list of those that will need sudo.
        Show
        Gavin added a comment - Ok puppetised. I'll need asf availid list of any that will need access to the machine. And, if different, a list of those that will need sudo.
        Hide
        Dave Brondsema added a comment -
        Let's start with: brondsem, rbowen
        Show
        Dave Brondsema added a comment - Let's start with: brondsem, rbowen
        Hide
        Gavin added a comment -
        Ok Done, both should now have access and sudo , please check.
        Show
        Gavin added a comment - Ok Done, both should now have access and sudo , please check.
        Hide
        #asfinfra IRC Bot added a comment -
        <pctony> Please note that this VM is managed by puppet, and as such it will revert changes made to system files that it manages. It also configures, and sets up the PAM+LDAP, SUDO+LDAP integration and much more. It also controls iptables, and the packages that are installed.
        Show
        #asfinfra IRC Bot added a comment - <pctony> Please note that this VM is managed by puppet, and as such it will revert changes made to system files that it manages. It also configures, and sets up the PAM+LDAP, SUDO+LDAP integration and much more. It also controls iptables, and the packages that are installed.
        Hide
        #asfinfra IRC Bot added a comment -
        <pctony> if you install any packages please let us know, so we can update our docs
        Show
        #asfinfra IRC Bot added a comment - <pctony> if you install any packages please let us know, so we can update our docs
        Hide
        Dave Brondsema added a comment - - edited
        Pardon, my ignorance, but what do I have to do to login to the VM? If I run `ssh allura-vm.apache.org` I get 'Permission denied (publickey).' I'm not sure where I would put my ssh key .. I tried adding it on my account page at https://id.apache.org/ but that didn't help. Thanks
        Show
        Dave Brondsema added a comment - - edited Pardon, my ignorance, but what do I have to do to login to the VM? If I run `ssh allura-vm.apache.org` I get 'Permission denied (publickey).' I'm not sure where I would put my ssh key .. I tried adding it on my account page at https://id.apache.org/ but that didn't help. Thanks
        Hide
        Daniel Gruno added a comment -
        Show
        Daniel Gruno added a comment - keys should be added to https://svn.apache.org/repos/infra/infrastructure/trunk/ssh_keys/people/ IIRC
        Hide
        Gavin added a comment -
        id.apache.org is the right place for ldap-aware VMs, which allura-vm is.
        I cant see why it fails for you Dave, try again and give me a timestamp so I can check logs. (or jump on #asfinfra and go through it live)
        Show
        Gavin added a comment - id.apache.org is the right place for ldap-aware VMs, which allura-vm is. I cant see why it fails for you Dave, try again and give me a timestamp so I can check logs. (or jump on #asfinfra and go through it live)
        Hide
        Dave Brondsema added a comment -
        Turned out to be a client issue. pctony helped in #asfinfra and I'm set now.

        Will follow up later regarding packages.
        Show
        Dave Brondsema added a comment - Turned out to be a client issue. pctony helped in #asfinfra and I'm set now. Will follow up later regarding packages.
        Hide
        #asfinfra IRC Bot added a comment -
        <pctony> Wooho! Thanks.
        Show
        #asfinfra IRC Bot added a comment - <pctony> Wooho! Thanks.

          People

          • Assignee:
            Gavin
            Reporter:
            Dave Brondsema
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development