This document is specific to the London RedCentric lab, but should evolve to a more generic setup once we have more labs. For now, there are some hard-coded logic in the wiki as well as the scripts, to make sure we can reproduce at least the one lab we have. Once we have more labs, we'll work to automate that using configuration files, command line options, etc.
...
Our HPC Lab will be using the 10.5040.0.0/16 network, using a VPN just for us. We will have no contact with any other lab, in or out.
The servers will receive static IP assignments in the 10.5040.16.*/20 range, while the provisioner will work with IPs in the ranges:
- 10.5040.16.*/22 to dynamic
- 10.5040.20.*/22 to dynamic-reserved
- 10.5040.24.*/22 to static
The second interface in the provisioner will be in a different sub-net (via VLAN) with fixed IPs (because MrP still can't DHCP) in the range 192.168.2.0/24. This is overly restrictive considering the ranges above, but it's enough for the London data-centre (we won't have more than 250 machines in there).
...
| Code Block | ||
|---|---|---|
| ||
root@hpc-admin # git clone https://github.com/BaptisteGerondeau/ans_setup_jenkins.git root@hpc-admin # git clone https://github.com/BaptisteGerondeau/infra-automationans_setup_mrp.git |
Once the repos are checked out, update the system and install the required packages:
...
For both, the preseed will setup statis IPs (10.5040.0.3 and 10.5040.0.4 respectively), and they should be visible from the wider network, including the host.
...
Ansible will start Jenkins automatically, so you should be able to just open the URL on your browser (assuming you have a route to the machine's IP):
If your Linaro login belongs to the hpc-sig-admin group, then you can directly login, as Jenkins is connected to LDAP, with your email and Linaro password.
...
You may get two warnings when you log in to Jenkins, which can be corrected on the Global Security screen:
- Agent to master security subsystem is currently off: Check the box saying "Enable Agent → Master Access Control"
- Jenkins instance uses deprecated protocols: JNLP3-connect: Uncheck the box "Java Web Start Agent Protocol/3" in "Agent Protocols"
Save the configuration and you should be all set.
Installing the MrP service
...
| Code Block | ||||
|---|---|---|---|---|
| ||||
root@hpc-admin # cd ~/infra_automation/ansible root@hpc-admin # ansible-playbook playbooks/infra-servermrp_setup.yml -vvv -u root |
Ansible will start MrProvisioner automatically, so you should be able to just open the URL on your browser (assuming you have a route to the machine's IP):
The default authentication is (admin:linaro), please change it as soon as possible.