RancherOS Cluster: Unterschied zwischen den Versionen

Aus C3D2
Wechseln zu: Navigation, Suche
(SmartOS Installation)
(IPMI Firmware Update)
Zeile 218: Zeile 218:
 
   Module Name        Existing Version        New Version   
 
   Module Name        Existing Version        New Version   
 
   IPMI_FW            02.16                  03.36
 
   IPMI_FW            02.16                  03.36
 +
</source>
 +
 +
* bei Problemen mit der '''Java Security''' lassen sich alte IPMI Versionen auch lokal aus den hohen Sicherheitseinstellungen excluden
 +
 +
<source>
 +
javaws -viewer
 
</source>
 
</source>

Version vom 19. Mai 2019, 09:27 Uhr

Ankündigung

Hallo,

das WE komme ich in den Club und hatte folgendes vor:

Eine minimalistische Ramdisk bauen, welche Netzwerkunterstützung und das Tool DD beinhaltet. Lauffähig soll es auf i386 Hardware mit max. 16 MB RAM! werden.

Freitag: (heute spät am Abend)
1. SmartOS Server als Virtualisierungsumgebung aufsetzen
2. RancherOS Cluster aufsetzen
3. Draw.IO aufsetzen, für Datenfluss Dokumentation

Samstag:
1. grundlegendes Verständnis erarbeiten was alles für den  Bau eines Images benötigt wird

Sonntag: (nice to have)
1. Templates für Docker Images erstellen und im Rancher Cluster testen

Freue mich auf eventuelle Mitstreiter 

Aufbau

  • 2 x FSC RX300 S6?
  • 2 x Dell R510?

Umsetzung: Sun May 19

Wahl des Servers

  • Server7

BIOS Einstellungen

  • Hyperthreading aus (weil broken by design)
  • Aggressive Link Power Management aus
  • NUMA an
  • boot nur vom USB-Stick

SmartOS Installation

  • SmartOS booten

C3d2 smartos 2.jpg

IPMI per SmartOS (mittels ipmitool konfigurieren)

alte Konfiguration

[root@smarti ~]# ipmitool lan print
Set in Progress         : Set Complete
Auth Type Support       : NONE MD2 MD5 PASSWORD
Auth Type Enable        : Callback : MD2 MD5 PASSWORD
                        : User     : MD2 MD5 PASSWORD
                        : Operator : MD2 MD5 PASSWORD
                        : Admin    : MD2 MD5 PASSWORD
                        : OEM      : MD2 MD5 PASSWORD
IP Address Source       : Static Address
IP Address              : 10.0.3.23
Subnet Mask             : 255.255.255.0
MAC Address             : 00:25:90:2f:3d:fa
SNMP Community String   : public
IP Header               : TTL=0x00 Flags=0x00 Precedence=0x00 TOS=0x00
BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled
Default Gateway IP      : 10.0.3.254
Default Gateway MAC     : 00:00:00:00:00:00
Backup Gateway IP       : 0.0.0.0
Backup Gateway MAC      : 00:00:00:00:00:00
802.1q VLAN ID          : Disabled
802.1q VLAN Priority    : 0
RMCP+ Cipher Suites     : 1,2,3,6,7,8,11,12
Cipher Suite Priv Max   : aaaaXXaaaXXaaXX
                        :     X=Cipher Suite Unused
                        :     c=CALLBACK
                        :     u=USER
                        :     o=OPERATOR
                        :     a=ADMIN
                        :     O=OEM
[root@smarti ~]#

neu konfigurieren

[root@smarti ~]#
[root@smarti ~]# ipmitool lan set 1 ipsrc static
[root@smarti ~]# ipmitool lan set 1 ipaddr 172.22.99.244
Setting LAN IP Address to 172.22.99.244
[root@smarti ~]# ipmitool lan set 1 netmask 255.255.255.0
Setting LAN Subnet Mask to 255.255.255.0
[root@smarti ~]# ipmitool lan set 1 defgw ipaddr 172.22.99.1
Setting LAN Default Gateway IP to 172.22.99.1
[root@smarti ~]# ipmitool lan set 1 defgw macaddr 0a:14:48:01:07:00
Setting LAN Default Gateway MAC to 0a:14:48:01:07:00
[root@smarti ~]# ipmitool lan set 1 arp respond on
Enabling BMC-generated ARP responses
[root@smarti ~]# ipmitool lan set 1 auth ADMIN MD5
[root@smarti ~]# ipmitool lan set 1 access on
[root@smarti ~]#

neue Konfiguration

[root@smarti ~]# ipmitool lan print
Set in Progress         : Set Complete
Auth Type Support       : NONE MD2 MD5 PASSWORD
Auth Type Enable        : Callback : MD2 MD5 PASSWORD
                        : User     : MD2 MD5 PASSWORD
                        : Operator : MD2 MD5 PASSWORD
                        : Admin    : MD5
                        : OEM      : MD2 MD5 PASSWORD
IP Address Source       : Static Address
IP Address              : 172.22.99.244
Subnet Mask             : 255.255.255.0
MAC Address             : 00:25:90:2f:3d:fa
SNMP Community String   : public
IP Header               : TTL=0x00 Flags=0x00 Precedence=0x00 TOS=0x00
BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled
Default Gateway IP      : 172.22.99.1
Default Gateway MAC     : 0a:14:48:01:07:00
Backup Gateway IP       : 0.0.0.0
Backup Gateway MAC      : 00:00:00:00:00:00
802.1q VLAN ID          : Disabled
802.1q VLAN Priority    : 0
RMCP+ Cipher Suites     : 1,2,3,6,7,8,11,12
Cipher Suite Priv Max   : aaaaXXaaaXXaaXX
                        :     X=Cipher Suite Unused
                        :     c=CALLBACK
                        :     u=USER
                        :     o=OPERATOR
                        :     a=ADMIN
                        :     O=OEM
[root@smarti ~]#
  • neues ADMIN Passwort per IPMI Web UI gesetzt, siehe: http://172.22.99.244
    • PW Hinweis: (Denk an unsere Erde)

IPMI Firmware Update

  • Mainboard Version herausfinden
[root@smarti ~]# sysinfo
{
  "Live Image": "20190510T131809Z",
  "System Type": "SunOS",
  "Boot Time": "1558250640",
  "SDC Version": "7.0",
  "Manufacturer": "Supermicro",
  "Product": "X9DRT-F/IBQF/IBFF",
  "Serial Number": "0123456789",
  "SKU Number": "To be filled by O.E.M.",
  "HW Version": "0123456789",
  "HW Family": "To be filled by O.E.M.",
  "Setup": "false",
  "VM Capable": true,
  "Bhyve Capable": true,
  "Bhyve Max Vcpus": 32,
  "HVM API": true,
  "CPU Type": "Intel(R) Xeon(R) CPU E5-2680 v2 @ 2.80GHz",
  "CPU Virtualization": "vmx",
  "CPU Physical Cores": 2,
  "Admin NIC Tag": "admin",
  "Admin IP": "dhcp",
  "UUID": "00000000-0000-0000-0000-0025904f1c3c",
  "Hostname": "smarti",
  "CPU Total Cores": 20,
  "MiB of Memory": "131038",
  "Zpool": "zones",
  "Zpool Disks": "c1t6479A71D12653333d0,c3t1d0",
  "Zpool Profile": "striped",
  "Zpool Creation": 1558250466,
  "Zpool Size in GiB": 860,
  "Disks": {
    "c1t6479A71D12653333d0": {"Size in GB": 960},
    "c3t1d0": {"Size in GB": 250}
  },
  "Boot Parameters": {
    "module_name_0": "environment",
    "console": "text",
    "boot_args": "",
    "bootargs": "",
    "bootfile": "unix",
    "os_console": "text",
    "root_shadow": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXxx",
    "screen_#cols": "158",
    "screen_#rows": "63",
    "screen_font": "8x16",
    "screen_height": "1024",
    "screen_width": "1280",
    "smartos": "true"
  },
  "Network Interfaces": {
    "igb0": {"MAC Address": "00:25:90:4f:1c:3c", "ip4addr": "172.22.99.186", "Link Status": "up", "NIC Names": ["admin"]},
    "igb1": {"MAC Address": "00:25:90:4f:1c:3d", "ip4addr": "", "Link Status": "down", "NIC Names": []}
  },
  "Virtual Network Interfaces": {
  },
  "Link Aggregations": {
  }
}
[root@smarti ~]#
  • Upgrade per Web UI
  • Upgrade unbedingt per Firefox (nicht Google-Chrome / Chromium) durchführen
  Module Name         Existing Version        New Version  
  IPMI_FW             02.16                   03.36
  • bei Problemen mit der Java Security lassen sich alte IPMI Versionen auch lokal aus den hohen Sicherheitseinstellungen excluden
javaws -viewer