Changes between Version 25 and Version 26 of GENIRacksHome/ExogeniRacks/AcceptanceTestStatus/EG-ADM-2


Ignore:
Timestamp:
02/27/13 10:23:32 (6 years ago)
Author:
chaos@bbn.com
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • GENIRacksHome/ExogeniRacks/AcceptanceTestStatus/EG-ADM-2

    v25 v26  
    2323|| 1B         || [[Color(green,Pass)]]                     || 2012-05-27           ||                    ||                                                                                                         ||
    2424|| 1C         || [[Color(green,Pass)]]                     || 2012-05-27           ||                    ||                                                                                                         ||
    25 || 2A         || [[Color(#63B8FF,In progress)]]            ||                      ||                    || retest when experiments are known to be running on the worker                                           ||
    26 || 2B         || [[Color(#63B8FF,In progress)]]            ||                      ||                    || blocked on retest of 2A; this is n/a if no public IPs                                                   ||
     25|| 2A         || [[Color(green,Pass)]]                     || 2013-02-27           ||                    || retest when experiments are known to be running on the worker                                           ||
     26|| 2B         || No longer planned                         || 2013-02-27           ||                    || worker nodes have no public IPs, so we are not testing this                                             ||
    2727|| 2C         || [[Color(green,Pass)]]                     || 2012-05-27           ||                    ||                                                                                                         ||
    2828|| 3A         || [[Color(green,Pass)]]                     || 2012-05-27           ||                    || ([exoticket:10]) ready to test                                                                          ||
     
    340340I'll want to recheck this when i know some experiments are running on a worker node, to verify that there are no public IPs bound to the node itself in that situation.
    341341
     342==== Results of testing step 2A: 2013-02-27 ====
     343
     344 * I verified with JBS that he has a sliver, part of slice jbs15, with a VM bound to bbn-w1: [http://codepad.org/6fwRlzuH], and that VM has public IP 192.1.242.5
     345 * On bbn-w1:
     346   * Double-check the existence of that VM using MAC address reported by JBS:
     347{{{
     348bbn-w1,[~],15:21(0)$ pg qemu | grep fa:16:3e:02:41:97
     349root     13215     1  5 Feb25 ?        02:20:40 /usr/libexec/qemu-kvm -S -M rhel6.3.0 -enable-kvm -m 128 -smp 1,sockets=1,cores=1,threads=1 -name instance-00002966 -uuid 93e3c3c6-efec-4428-9735-3fe5edd0f3bc -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/instance-00002966.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -kernel /var/lib/nova/instances/instance-00002966/kernel -initrd /var/lib/nova/instances/instance-00002966/ramdisk -append root=/dev/vda console=ttyS0 -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=/var/lib/nova/instances/instance-00002966/disk,if=none,id=drive-virtio-disk0,format=qcow2,cache=none -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x4,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -netdev tap,ifname=tap05e9b4d1-74,script=,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=fa:16:3e:02:41:97,bus=pci.0,addr=0x3 -chardev file,id=charserial0,path=/var/lib/nova/instances/instance-00002966/console.log -device isa-serial,chardev=charserial0,id=serial0 -chardev pty,id=charserial1 -device isa-serial,chardev=charserial1,id=serial1 -device usb-tablet,id=input0 -vnc 127.0.0.1:0 -k en-us -vga cirrus -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5
     350}}}
     351   * Look at IP addresses bound to bbn-w1 itself:
     352{{{
     353bbn-w1,[~],15:17(0)$ ifconfig | grep "inet addr"
     354          inet addr:10.100.0.11  Bcast:10.100.0.255  Mask:255.255.255.0
     355          inet addr:127.0.0.1  Mask:255.0.0.0
     356          inet addr:169.254.95.120  Bcast:169.254.95.255  Mask:255.255.255.0
     357}}}
     358Therefore, there is no public address on bbn-w1 even when an active experiment has a public IP on that node:
     359
    342360=== Step 2B: verify the absence of common unencrypted login protocols ===
    343361