You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: install_config_first_time.rst
+2-3
Original file line number
Diff line number
Diff line change
@@ -72,11 +72,10 @@ perfSONAR hosts are just like any other host and need to be actively managed to
72
72
* An important aspect of security is to stay informed. Multiple system administrators from your site should be subscribed to the perfsonar security `announcement list <https://lists.internet2.edu/sympa/subscribe/perfsonar-announce>`_. This mailing list keeps users up-to-date on actions that need to be taken when critical security updates for both perfSONAR and third-party packages are released.
73
73
* Always follow best common security practices when it comes to creating user accounts and choosing passwords. Normal precautions should be taken to protect the root password as it can be used to make changes to the system. For example, safe password practices would recommend a password that contains a mixture of letters of different case, numbers, symbols, and a length greater than 8. It is also not recommend to re-use passwords on multiple machines, in the event of a system breach.
74
74
* If you have enabled SSH on the system, consider restricting access to specific subnets to the SSH port via IPTables, or implement a *jump host* that allows only logins from one location.
75
-
* Consider configuring rsyslog to send logs to other locations for aggregation and analysis
75
+
* Consider configuring syslog to send logs to other locations for aggregation and analysis
76
76
* If email has been enabled on the host, forward email from root to a central location
77
77
* If applicable, use a management network on a spare networking interface to further restrict the access profile for users and system data.
78
-
* If your site uses any form of automated management (CFEngine, Puppet, Forman, etc.), integrate the perfSONAR node into this procedure.
79
-
* If you run `Nagios <http://www.nagios.org>`_, add your perfSONAR host to your monitoring infrastructure. Consider running some of the nagios `security plugins <http://exchange.nagios.org/directory/Plugins/Security#/>`_ such as `check_yum <http://exchange.nagios.org/directory/Plugins/Operating-Systems/Linux/check_yum/details>`_
78
+
* If your site uses any form of automated management (e.g. Ansible), integrate the perfSONAR node into this procedure.
80
79
* Automatic updates are enabled by default on all perfSONAR Toolkit hosts. In order to understand how to update your Toolkit and if automatic updates are right for your system, see :doc:`manage_update`
81
80
* The perfSONAR Toolkit ships with a default iptables rule-set and intrusion detection system (IDS) software. In order to learn more about these components and how to do things like add custom firewall rules see :doc:`manage_security`
note:: For older CentOS 7 installation see :doc:`install_centos`
6
-
7
4
8
5
perfSONAR combines various sets of measurement tools and services bundled in different useful ways. RPMs are available that install the bundles described in :doc:`install_options`. The steps in the remaining sections of this document detail the steps required for installing these bundles.
9
6
10
7
System Requirements
11
8
====================
12
9
* **Operating System:**
13
10
14
-
* **Alma 8, Alma 9, Rocky 8 or Rocky 9** x86_64 installations are supported. Other RedHat-based operating systems may work, but are not officially supported at this time.
11
+
* **Alma 9 or Rocky 9** x86_64 installations are supported. Other RedHat-based operating systems based on EL9 may work, but are not officially supported at this time.
15
12
* See :doc:`install_hardware` for hardware requirements and more.
16
13
17
14
.. note:: Installing a graphical/desktop environment with perfSONAR is not supported. These environments generally come with a Network Manager that conflicts with the way that perfSONAR is tuning the network interface parameters. We recommend doing only server grade OS installs.
@@ -25,29 +22,19 @@ Installation
25
22
26
23
Step 1: Configure DNF
27
24
----------------------
28
-
.. note:: If your system is using dnf/yum priorities make sure that repositories required for perfSONAR are higher priority than anything else to avoid conflicts with older versions. Please note that yum maintainers do not recommend using priorities.
25
+
.. note:: If your system is using dnf priorities make sure that repositories required for perfSONAR are higher priority than anything else to avoid conflicts with older versions. Please note that dnf maintainers do not recommend using priorities.
29
26
30
27
The process configures dnf to point at the necessary repositories to get packages needed for perfSONAR. **You will need to follow the steps below as privileged user**:
31
28
32
-
.. note:: All commands work on both EL8 and EL9 based operating systems unless otherwise indicated
33
-
34
29
#. Install the EPEL RPM::
35
30
36
31
dnf install epel-release
37
32
38
-
#. **EL8-only** Enable the PowerTools repository on an EL8 system::
39
-
40
-
dnf config-manager --set-enabled powertools
41
-
42
-
#. **EL9-only** Enable the CBR repository on an EL9 system::
33
+
#. Enable the CBR repository::
43
34
44
35
dnf config-manager --set-enabled crb
45
36
46
-
#. **EL8-only** Install the perfsonar-repo RPM for EL8::
@@ -145,29 +132,17 @@ You can also enable dnf ‘auto updates’ to ensure you always have the most cu
145
132
146
133
.. _install_el_step6:
147
134
148
-
Step 6: Service Watcher
149
-
------------------------
150
-
The ``perfsonar-toolkit-servicewatcher`` installs scripts that check if important processes are running and restarts if they have stopped unexpectedly.
151
-
152
-
The install automatically configures cron to run the service_watcher regularly.
153
-
154
-
To run the script manually, run::
155
-
156
-
/usr/lib/perfsonar/scripts/service_watcher
157
-
158
-
.. _install_el_step7:
159
-
160
-
Step 7: Register your services
135
+
Step 6: Register your services
161
136
-------------------------------
162
137
163
138
Note: this step can be done through the web interface if the perfsonar-toolkit bundle was installed.
164
139
See :doc:`manage_admin_info`.
165
140
166
141
No actual configuration is required but filling fields such as administrator_email, site_name, city, country, latitude, longitude, etc. are **highly recommended**. You can add these by removing the leading `#` of any property and filling it out with a proper value for your host. Changes will be picked-up automatically without need for any restarts.
167
142
168
-
.. _install_el_step8:
143
+
.. _install_el_step7:
169
144
170
-
Step 8: Starting your services
145
+
Step 7: Starting your services
171
146
-------------------------------
172
147
All services should be started after install. Additionally, you can start all the services by rebooting the host since all are configured to run by default. In order to check services status issue the following commands::
0 commit comments