Sysadmin/Add virtual machine: Difference between revisions

No edit summary
Line 9: Line 9:
* Add A and AAAA records for the new host in the sugarlabs.org zone file (See [[Sysadmin/Nameservers]]).
* Add A and AAAA records for the new host in the sugarlabs.org zone file (See [[Sysadmin/Nameservers]]).


* To setup the machine, login as root from the console (there should be no password):
* Now login as root from the console (there should be no password)
# setup both IPv4 and IPv6 addresses
 
* setup both IPv4 and IPv6 addresses
 
  vi /etc/network/interfaces
  vi /etc/network/interfaces
   
   
# change machine fqdn
* change machine fqdn
 
  sed -i -e s/template-lucid/FOOBAR/ /etc/hostname /etc/postfix/main.cf
  sed -i -e s/template-lucid/FOOBAR/ /etc/hostname /etc/postfix/main.cf
   
   
# activate new IP and hostname
* activate new IP and hostname
 
  /etc/init.d/networking restart
  /etc/init.d/networking restart
   
   
# install latest security/stability updates
* install latest security/stability updates
 
  aptitude update
  aptitude update
  aptitude full-upgrade
  aptitude full-upgrade
   
   
# generate host keys and a key for root
* generate host keys and a key for root
 
  ssh-keygen -N "" -f /etc/ssh/ssh_host_rsa_key -t rsa
  ssh-keygen -N "" -f /etc/ssh/ssh_host_rsa_key -t rsa
  ssh-keygen -N "" -f /etc/ssh/ssh_host_dsa_key -t dsa
  ssh-keygen -N "" -f /etc/ssh/ssh_host_dsa_key -t dsa
Line 30: Line 36:
* Install <code>/root/.ssh/id_rsa.pub</code> key on <code>sugarbackup@backup.sugarlabs.org</code>
* Install <code>/root/.ssh/id_rsa.pub</code> key on <code>sugarbackup@backup.sugarlabs.org</code>


# setup backups
* Setup backups
 
  vi /etc/system-full-backup.conf
  vi /etc/system-full-backup.conf
   
   
# log in for the first time on backup server to accept ssh fingerprint
* Log in for the first time on backup server to accept ssh fingerprint
 
  ssh sugarbackup@backup.sugarlabs.org
  ssh sugarbackup@backup.sugarlabs.org


# move daily, weekly, monthly cronjobs to a unique timeslot to avoid cpu/net storms
* Move daily, weekly, monthly cronjobs to a unique timeslot to avoid cpu/net storms
 
  vi /etc/crontab
  vi /etc/crontab


# the most important thing: come up with a funny quip for this machine
* The most important thing: come up with a funny quip for this machine
 
  vi /etc/motd.tail
  vi /etc/motd.tail
   
   
# taa--daah!
* Taa--daah!
 
  reboot
  reboot