Changes between Initial Version and Version 1 of GENIRacksHome/OpenGENIRacks/InstallOpsMon


Ignore:
Timestamp:
05/23/14 11:36:37 (8 years ago)
Author:
rrhain@bbn.com
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • GENIRacksHome/OpenGENIRacks/InstallOpsMon

    v1 v1  
     1=== Installing Operation Monitoring on GRAM ===
     2
     3Most of the dependencies and code for monitoring have been installed.   However, some configuration may still need to be done by hand.
     4
     5== Configuring opsmon_config.json ==
     6Configure /home/gram/gram/opsmon/opsmon_config.json
     7
     8Replace the three fields in this section with the correct information.
     9{{{
     10
     11        "base_address" : "https://128.89.118.100",
     12        "aggregate_id" : "gram-bbncam",
     13        "aggregate_urn" : "urn:publicid:IDN+bbn-cam-ctrl-1.bbn.com+authority+am"
     14
     15}}}
     16
     17Edit Hosts Information:  You must find the '''control''' ethernet interface, i.e. the interface with 10.10.8 prefix and find the IP address and also find the '''data''' ethernet, i.e the interface with 10.10.5 prefix and its corresponding MAC address.   The correct urn for the compute nodes must also be replaced with the correct ones for your installation.
     18{{{
     19
     20 "hosts" : [
     21                {"id" : "bbn-cam-cmpe-1", "address" : "10.10.8.101",
     22                "urn" : "urn:publicid:IDN+bbn-cam-ctrl-1.bbn.com+node+bbn-cam-cmpe-1",
     23                "interfaces" : {"eth3" : {"address" : "10.10.8.101",
     24                                 "type" : "IPv4", "role" : "CONTROL", "max_bps" : "1000000000"},
     25                                "eth2" : {"address" : "a0:36:9f:11:0d:60",
     26                                 "type" : "MAC", "role" : "DATA", "max_bps" : "1000000000"}}},
     27                {"id" : "bbn-cam-cmpe-2", "address" : "10.10.8.102",
     28                "urn" : "urn:publicid:IDN+bbn-cam-ctrl-1.bbn.com+node+bbn-cam-cmpe-2",
     29                "interfaces" : {"eth3" : {"address" : "10.10.8.102",
     30                                 "type" : "IPv4", "role" : "CONTROL", "max_bps" : "1000000000"},
     31                                "eth2" : {"address" : "a0:36:9f:20:74:cc",
     32                                 "type" : "MAC", "role" : "DATA", "max_bps" : "1000000000"}}}
     33        ],
     34
     35
     36
     37}}}
     38
     39== Configuring mysql for monitoring ==
     40Run the following sequence of commands:
     41 1. cd /home/gram/ops-monitoring/local/unit-tests
     42 1. python ./local_table_reset.py
     43
     44
     45== Configuring Apache ==
     46
     47   1. Fetch the GENI clearinghouse CA root certificate here:
     48      -http://groups.geni.net/geni/raw-attachment/wiki/GeniTrustAnchors/ch.geni.net-ca.pem and copy it to /etc/ssl/certs.
     49
     50   2. In /etc/apache2/sites-available/default-ssl, make sure the following SSL settings are in place.  Some of these are commented out by default, so be sure to remove the initial "#".
     51{{{
     52        SSLEngine on
     53        SSLCACertificateFile /etc/ssl/certs/ch.geni.net-ca.pem
     54        SSLVerifyClient require
     55        SSLVerifyDepth  3
     56        SSLOptions +ExportCertData
     57}}}
     58
     59    3. Add text to an appropriate !VirtualHost directive in your apache configuration.  Put this inside the <!VirtualHost _default_:443> block of /etc/apache2/sites-available/default-ssl, right below the SSL settings and above the ending </!VirtualHost>.
     60{{{
     61        WSGIDaemonProcess localstore threads=5
     62        WSGIScriptAlias / /home/gram/ops-monitoring/local/wsgi/localstore.wsgi
     63
     64        <Directory /home/gram/ops-monitoring/local/wsgi>
     65            WSGIProcessGroup localstore
     66            WSGIApplicationGroup %{GLOBAL}
     67            Order deny,allow
     68            Allow from all
     69        </Directory>
     70}}}
     71
     72    4. In order to see WSGI errors if any occur, modify that same !VirtualHost block and set:
     73{{{
     74  LogLevel info
     75}}}
     76
     77    5. Make sure you haven't introduced any syntax errors in default-ssl:  Type ''sudo apache2ctl configtest''
     78
     79    6. Start or restart Apache:  Type ''sudo service apache2 [start|restart]''
     80
     81    7.  Use the certificate attached [attachment:collector-gpo-withnpkey.pem collector-gpo-withnpkey.pem] to this page to verify that you can connect to Apache:
     82    Type ''curl -k --cert path-to/your-tool-cert.pem !https://your-apache-host/info/opsconfig/geni-prod''
     83
     84    Output should look like:
     85{{{
     86curl -k --cert ./collector-gpo-withnpkey.pem https://128.89.118.100/info/opsconfig/geni-prod
     87{"info": [{"db_schema": [["$schema", "varchar"], ["id", "varchar"], ["selfRef", "varchar"],
     88["urn", "varchar"], ["ts", "int8"], ["measRef", "varchar"]], "name": "aggregate"},
     89{"db_schema": [["$schema", "varchar"], ["id", "varchar"], ["selfRef", "varchar"], ["urn", "varchar"], ["ts", "int8"], ["properties$mem_total_kb", "int8"]], "name": "node"},
     90{"db_schema": [["$schema", "varchar"], ["id", "varchar"], ["selfRef", "varchar"], ["urn", "varchar"], ["ts", "int8"]], "name": "link"},
     91{"db_schema": [["$schema", "varchar"], ["id", "varchar"], ...
     92}}}
     93
     94