| 1 | # install Squeeze |
|---|
| 2 | # Configure each drive with a 1G partition and a rest-of-the-space partition, as RAID |
|---|
| 3 | # Create a RAID1 for the 1G partitions |
|---|
| 4 | # Create a RAID1 for each pair of rest-of-the-space partitions |
|---|
| 5 | # Create an ext3 /boot on the 1G RAID1 |
|---|
| 6 | # Create an LVM volume group named after the machine's short hostname |
|---|
| 7 | # Create an LV called "swap" that is the same size as the machine's physical RAM |
|---|
| 8 | # Create an LV called "root" that is 50G ext4 |
|---|
| 9 | |
|---|
| 10 | # ??? F11 will suggest ext4, DON'T USE IT. |
|---|
| 11 | # - New filesystem, so it's scary |
|---|
| 12 | # - The hosts can't mount it |
|---|
| 13 | # - Grub can't cope with it |
|---|
| 14 | |
|---|
| 15 | # install useful utility packages |
|---|
| 16 | aptitude install htop ipmitool emacs23-nox vim memtest86 memtest86+ ntp ntpdate git |
|---|
| 17 | git config --global color.ui auto |
|---|
| 18 | |
|---|
| 19 | # install Xen |
|---|
| 20 | aptitude install xen-linux-system |
|---|
| 21 | # download Debathena archive key, verify |
|---|
| 22 | # Fetch https://debathena.mit.edu/apt/debathena-archive.asc from a |
|---|
| 23 | # machine with the MIT CA, then paste it into |
|---|
| 24 | apt-key adv --import |
|---|
| 25 | # add Debathena repos to etc/apt/sources.list.d |
|---|
| 26 | cat <<EOF > /etc/apt/sources.list.d/debathena.list |
|---|
| 27 | deb http://debathena.mit.edu/apt squeeze debathena debathena-config debathena-system openafs |
|---|
| 28 | deb-src http://debathena.mit.edu/apt squeeze debathena debathena-config debathena-system openafs |
|---|
| 29 | EOF |
|---|
| 30 | |
|---|
| 31 | # install host keytab |
|---|
| 32 | # install Debathena software (hit enter to take the defaults at the |
|---|
| 33 | # configuration prompts) |
|---|
| 34 | aptitude update |
|---|
| 35 | aptitude install debathena-clients debathena-ssh-server-config |
|---|
| 36 | # compare packages with another server |
|---|
| 37 | dpkg -l |
|---|
| 38 | # reconfigure so that we can get an MTA, although we don't |
|---|
| 39 | # want the hosts to accept mail (mail sent by smarthost; no local mail) |
|---|
| 40 | # outgoing.mit.edu |
|---|
| 41 | dpkg-reconfigure exim4-config |
|---|
| 42 | # answer questions properly |
|---|
| 43 | # change root alias in /etc/aliases to be the same as scripts server |
|---|
| 44 | # reload it |
|---|
| 45 | newaliases |
|---|
| 46 | # clone the xen config (/etc/xen) |
|---|
| 47 | git clone -b squeeze ssh://scripts@scripts.mit.edu/mit/scripts/git/xen.git /etc/xen |
|---|
| 48 | # copy conserver config (we need to version this) |
|---|
| 49 | # setup conserver |
|---|
| 50 | cat /etc/conserver/console.cf # add the correct entires here |
|---|
| 51 | visudo # add conservr to sudoers list with: |
|---|
| 52 | conservr ALL=(ALL) NOPASSWD: /usr/sbin/xm console * |
|---|