MAJOR CHANGES TO COME

The following will be out of date soon. We will be moving to Ansible soon. For more details on how we are doing this and why, see our wiki pages

Cloyne servers installation

This repository contains Salt files to deploy Cloyne servers. Expected to be used with Ubuntu Server 16.04, but it might work with other distributions as well.

Dependencies

This only works on Ubuntu! It DOES work on Windows Subsystem for Linux with Ubuntu installed. It DOES NOT work on Mac OS.

You will need to install the python package virtualenv. You can do this using pip. If you don't already have pip installed, install it with sudo apt install python3-pip. Once you have pip installed, run sudo pip3 install virtualenv.

If you don't already have pip installed, look up instructions for your operating system. On a fresh linux install you may also need to install g++ and python-dev.

After cloning this repository, you will also need to check out all submodules:

git submodule update --init --recursive

Next, create a virtualenv, for example:

virtualenv --python=/usr/bin/python3 salt-virtualenv
. salt-virtualenv/bin/activate

If upgrading from python2, you'll need to rm -rf the existing salt-virtualenv folder first.

Inside the virtualenv

Your prompt should change to start with (salt-virtualenv). Make sure you're in a terminal where you've activated the virtualenv before contiuing.

You'll then install salt-ssh using virtualenv (you do NOT need sudo for these):

# currently necessary as of 06/25/2020, but this is a bug and should be fixed, see https://github.com/saltstack/salt/issues/55029
pip install distro

# Install salt==3001
pip install salt==3001

# Check version of salt-ssh
salt-ssh --version
# salt-ssh 3001

Deploying to the server

Then you can sync the state of a server by doing: (This updates the live server to match the docker images built from github, so make sure all the docker images still work!)

$ salt-ssh '<servername>' state.highstate

If using a server that is configured to disallow password logins, you must specify the public key:

$ salt-ssh '<servername>' state.highstate

Note: This might take ~10 minutes with no output until the end. If it fails quickly with ImportError: No module named concurrent.futures: ssh into <servername> and run sudo pip install futures.

Secrets

Secrets are encrypted with a GPG keypair to be protected. Future secrets can be encrypted using:

echo -n "supersecret" | gpg --armor --encrypt -r <keyid>

See Salt GPG renderer documentation for more information.

Adding New Servers

When adding a new server, the cloyne user on the target server should have sudo permissions without needing to provide a password.

First create the cloyne user and set a password:

useradd -m cloyne -G sudo
passwd cloyne

Next, configure that in /etc/sudoers on the target server with such line (you can replace existing one without NOPASSWD):

# Allow members of group sudo to execute any command
%sudo   ALL=(ALL) NOPASSWD: ALL

Terminal setup (optional)

This configures the prompt, vim, and tmux to match the existing servers

git clone https://github.com/ecawthon/cli_base
cd cli_base
./init.sh

you may have to run this per-user. or copy files around.

Additional dreamhost steps

had to manually sudo apt install python3-pip and run debsums init. Also had to add port allows from DreamCompute interface, but this should persist across instances.

Troubleshooting

permission issues/can't copy salt key

Check config/roster and make sure the settings are correct for the host you're deploying to
Make sure you have passwordless login set up on the remote host
pass the option --priv ~/.ssh/id_rsa to use your RSA key instead of Salt's.

permission denied for writing to the log file

Pass the location of the log file inside this directory, e.g. --log-file=./log/ssh

ModuleNotFoundError: No moule named 'vboxapi'

Install VirtualBox sudo apt install virtualbox
Download SDK from virtualbox.org/wiki/Downloads
cd to sdk/installer and run

export VBOX_INSTALL_PATH=$(which virtualbox)
python vboxapisetup.py install

I also did pip3 install virtualbox and pip3 install vboxapi and pip3 install pyvbox; not sure if these were necessary

No module named 'urllib2'

Use clonm/salt instead of tozd/salt. tozd/salt hasn't been upgraded to python3 yet.

No Top file

run it again.

cloyne/servers