About me! RajeshKumarIN

Transcription

1 Chef Server

2 About me! RajeshKumarIN RajeshKumarIN RajeshKumarIN

3 Prerequisites An x86_64 compatible system architecture; Red Hat Enterprise Linux and CentOS may require updates prior to installation A resolvable hostname that is specified using a FQDN or an IP address A connection to Network Time Protocol (NTP) to prevent clock drift A local mail transfer agent that allows the Chef server to send notifications Using cron and the /etc/cron.d directory for periodic maintenance tasks Disabling the Apache Qpid daemon on CentOS and Red Hat systems

4 Download

5 hostname sudo vi /etc/hosts fqdn_or_ip_address host_alias localhost IP_address fqdn_or_ip_address host_alias chef-server localhost chef-server hostnamectl set-hostname chef-server hostnamectl set-hostname chef-server

6 As a root user CentOS > rpm -Uvh chef-server-core-<version>.rpm Ubuntu > dpkg -i chef-server-core-<version>.deb

7 Run to start all of the services: > chef-server-ctl reconfigure > chef-server-ctl status Some Important directories /opt/chef-server The installation from the package is here. /etc/chef-server The API specific configuration files and keys are here. /var/opt/chef-server The dependent services such as RabbitMQ, Nginx and so on are here, including the PostgreSQL database, SOLR indexes. /var/log/chef-server All the runit services write their output here.

8 Chef Server Configuration /etc/chef-server/chef-server.rb /etc/chef/client.rb ~/.chef/knife.rb

9 Verify Insallation > sudo chef-server-ctl test

10 chef-server-ctl chef-server-ctl service-list chef-server-ctl status chef-server-ctl tail

11 More about chef-server-ctl

12 WAY Command Line GUI

13 > mkdir.chef Run the command to create an administrator > chef-server-ctl user-create USER_NAME FIRST_NAME LAST_NAME 'PASSWORD' --filename ~/.chef/username.pem e.g > chef-server-ctl user-create stevedanno Steve Danno 'abc123' --filename /path/to/stevedanno.pemv

14 Run the command to create an organization: > chef-server-ctl org-create short_name 'full_organization_name' --association_user user_name --filename ORGANIZATIONvalidator.pem e.g > chef-server-ctl org-create 4thcoffee 'Fourth Coffee, Inc.' --association_user stevedanno -- filename /path/to/4thcoffee-validator.pem

15 Chef Server GUI

16 In the attributes file, we control whether the WebUI is enabled: default['chef_server']['chef-server-webui']['enable'] = true To modify this in /etc/chef-server/chef-server.rb, for example to disable it: chef_server_webui['enable'] = false After making any changes to /etc/chef-server/chef-server.rb, reconfigure the Chef Server. sudo chef-server-ctl reconfigure

17 Web Interface : chef-server-webui > chef-server-ctl install chef-manage > chef-server-ctl reconfigure > opscode-manage-ctl reconfigure --accept-license > chef-server-ctl status Default Username: admin Default Password: p@ssw0rd1 Note You may have to disable the firewall > systemctl disable firewalld

18 chef-server.rb cd /etc/chef-server echo "chef_server_webui['enable'] = false" >> chef-server.rb chefserver-ctl reconfigure

19 Generating and Copying Keys from the Server Click on the "Clients" tab in the top navigation bar. You will see two two clients called chef-validator and chef-webui:

20 Click on the "Edit" button associated with the chefvalidator client. Regenerate the private key by selecting that box and clicking "Save Client":

21 You will be taken a screen with the newly generated values for the key file.

22 Note: This key will only be available once, so don't click out of this page! If you do, you will need to regenerate the key again. Copy the value of the private key field (the one at the bottom). On your workstation machine, change to the Chef configuration directory we created in the repo:

23 > cd ~/chef-repo/.chef Open a new file for the validator key we just created: > nano chef-validator.pem In this file, paste the contents of the key you copied from the server's web interface (some lines have been removed for brevity here): Ensure that there are not extra blank lines above or below the key. Save and close the file.

24 Admin Key We will follow the same procedure to regenerate and save the admin user's key file. This time, the key is for a user, so click on the "Users" tab on the top.

25 Copy the Private key value on the next screen. Once again, this will not be shown again, so copy it correctly the first time. Back on your workstation computer, you will need to create another file for the admin user in the same directory: > nano admin.pem Paste the contents of the key you copied from the server's interface (again, this is shortened):

26 Reference torials/how-to-set-up-a-chef-12-configuration- management-system-on-ubuntu servers MfK0