OLD | NEW |
1 Adblock Plus infrastructure | 1 Adblock Plus infrastructure |
2 =========================== | 2 =========================== |
3 | 3 |
4 The Adblock Plus infrastructure uses [Puppet](http://puppetlabs.com/) | 4 The Adblock Plus infrastructure uses [Puppet](http://puppetlabs.com/) |
5 to set up servers, and to have a realistic development environment. | 5 to set up servers, and to have a realistic development environment. |
6 | 6 |
7 Our Puppet manifests are only tested with Ubuntu 12.04 right now. | 7 Our Puppet manifests are only tested with Ubuntu 12.04 right now. |
8 | 8 |
9 Environment specific setup | 9 Environment specific setup |
10 -------------------------- | 10 -------------------------- |
(...skipping 92 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
103 | 103 |
104 In development, this is all that needs to be done before the new box can be | 104 In development, this is all that needs to be done before the new box can be |
105 started using `vagrant up ...`. Production servers, however, need a working | 105 started using `vagrant up ...`. Production servers, however, need a working |
106 Puppet configuration first (see below). | 106 Puppet configuration first (see below). |
107 | 107 |
108 Configuring Puppet | 108 Configuring Puppet |
109 ------------------ | 109 ------------------ |
110 | 110 |
111 ### Prerequisites | 111 ### Prerequisites |
112 | 112 |
113 1. Install Ubuntu Server 12.04 LTS | 113 1. Install Debian Jessie |
114 2. Run `hiera/install_precise.py` as user `root` to install Puppet and Hiera | 114 2. Install necessary packages (as root or with sudo): |
115 3. Enable pluginsync (Add the following to the _main_ section in | |
116 _/etc/puppet/puppet.conf_) | |
117 | 115 |
118 » pluginsync=true | 116 apt update |
| 117 apt install puppet apt-transport-https |
119 | 118 |
120 4. Configure the master address (Add the following to the bottom of | 119 3. Modify `/etc/puppet/puppet.conf` as follows: |
121 » _/etc/puppet/puppet.conf_) | |
122 | 120 |
123 » [agent] | 121 [main] |
124 » server = puppetmaster.adblockplus.org | 122 ... |
| 123 pluginsync=true |
| 124 ... |
| 125 [agent] |
| 126 server = puppetmaster.adblockplus.org |
125 | 127 |
126 Now you can either set it up as a pure agent or as a master. The | 128 Now you can either set it up as a pure agent or as a master. The |
127 master provides the configuration, agents fetch it from the master and | 129 master provides the configuration, agents fetch it from the master and |
128 apply it locally. The master is also an agent, fetching configuration | 130 apply it locally. The master is also an agent, fetching configuration |
129 from itself. | 131 from itself. |
130 | 132 |
| 133 #### Ubuntu variation (legacy setup) |
| 134 |
| 135 Like with debian, but the first two steps as follows: |
| 136 |
| 137 1. Install Ubuntu Server 12.04 LTS |
| 138 2. Run `hiera/install_precise.py` as user `root` to install Puppet and Hiera |
| 139 |
131 ### Puppet agent | 140 ### Puppet agent |
132 | 141 |
133 1. Attempt an initial provisioning, this will fail | 142 1. Attempt an initial provisioning, this will fail |
134 | 143 |
135 puppet agent --test | 144 puppet agent --test |
136 | 145 |
137 2. On the master: List the certificates to get the name of the new | 146 2. On the master: List the certificates to get the name of the new |
138 agent's certificate | 147 agent's certificate |
139 | 148 |
140 puppet cert list | 149 puppet cert list |
(...skipping 51 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
192 Monitoring is fully functional in any environment, including development. | 201 Monitoring is fully functional in any environment, including development. |
193 Here, after bootstrapping the `server4` box, one can access the Nagios GUI | 202 Here, after bootstrapping the `server4` box, one can access the Nagios GUI |
194 from the host machine via <https://nagiosadmin:nagiosadmin@10.8.0.99/>. | 203 from the host machine via <https://nagiosadmin:nagiosadmin@10.8.0.99/>. |
195 | 204 |
196 The monitoring service of our production environment, however, is accessible | 205 The monitoring service of our production environment, however, is accessible |
197 via <https://monitoring.adblockplus.org/>. | 206 via <https://monitoring.adblockplus.org/>. |
198 Add yourself to _files/nagios-htpasswd_ in the _private_ module used on the | 207 Add yourself to _files/nagios-htpasswd_ in the _private_ module used on the |
199 server, or have someone add you if you don't have access. | 208 server, or have someone add you if you don't have access. |
200 | 209 |
201 | 210 |
OLD | NEW |