diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 00000000..f4617c28 --- /dev/null +++ b/.dockerignore @@ -0,0 +1,2 @@ +.git* +Dockerfile diff --git a/Dockerfile b/Dockerfile index 8f947899..64f47430 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,7 +7,7 @@ RUN install_packages pip jupyter-notebook python3-anyio python3-greenlet python3 RUN pip install jupyter-book && rm -r /root/.cache/pip RUN mkdir -p /root/documentation -COPY * /root/documentation +COPY . /root/documentation RUN cd /root/documentation && jupyter-book build . # TODO make build book accessible through a webserver diff --git a/_toc.yml b/_toc.yml index aabe6a23..9dafac5d 100644 --- a/_toc.yml +++ b/_toc.yml @@ -12,6 +12,18 @@ parts: - caption: Infrastructure Guide chapters: - file: infrastructure-guide/home + sections: + - file: infrastructure-guide/pxeserv01 + - file: infrastructure-guide/boot00 + - file: infrastructure-guide/puppet01 + - file: infrastructure-guide/repo00 + - file: infrastructure-guide/reposync + - file: infrastructure-guide/lxweb00 + - file: infrastructure-guide/login + - file: infrastructure-guide/influx00 + - file: infrastructure-guide/metrics00 + - file: infrastructure-guide/lxsup00 + - file: infrastructure-guide/satint - caption: RHEL8 chapters: @@ -27,4 +39,3 @@ parts: - file: rhel8-guides-beta/developer_guide - file: rhel8-guides-beta/installation_guide - file: rhel8-guides-beta/admin_guide - \ No newline at end of file diff --git a/infrastructure-guide/boot00.md b/infrastructure-guide/boot00.md index 101ea62d..f857f216 100644 --- a/infrastructure-guide/boot00.md +++ b/infrastructure-guide/boot00.md @@ -1,3 +1,5 @@ +# boot00: SysDB API server + https://git.psi.ch/linux-infra/sysdb/ is pulled into /var/www/sysdb/app/ (no automation, just by hand) httpd runs the service and it needs restarting, when pulling changes @@ -6,4 +8,4 @@ Access rights are granted on the environment level (bob env list). At this time, Detailed documentation of the software is at: -http://linux-infra.gitpages.psi.ch/admin-guide/index.html \ No newline at end of file +https://linux.psi.ch/admin-guide/index.html diff --git a/infrastructure-guide/influx00.md b/infrastructure-guide/influx00.md index bb124a45..6a62160a 100644 --- a/infrastructure-guide/influx00.md +++ b/infrastructure-guide/influx00.md @@ -1,3 +1,5 @@ +# influx00 + This is a RHEL7 machine and is puppet managed: https://git.psi.ch/linux-infra/data-pli/blob/master/default/influx00.psi.ch.yaml @@ -98,4 +100,4 @@ Alias=influxd.service - What are the other open ports needed for? :111 :8086 :25 :8088 - 25 is postfix (SMTP), 111 belongs to NFS, the 80xx ports both belong to influx - - It's certainly not being used, nothing is mounted or exported via NFS. It isn't even enabled in puppet for this host. However, most of the puppet works in a way, where it installs things, but doesn't remove anything, if the settings change. So if it was enabled at any time in the past, it was just left behind. Though the NFS service is not running, only the rpcbind is. \ No newline at end of file + - It's certainly not being used, nothing is mounted or exported via NFS. It isn't even enabled in puppet for this host. However, most of the puppet works in a way, where it installs things, but doesn't remove anything, if the settings change. So if it was enabled at any time in the past, it was just left behind. Though the NFS service is not running, only the rpcbind is. diff --git a/infrastructure-guide/login.md b/infrastructure-guide/login.md index 50828ac1..15f16feb 100644 --- a/infrastructure-guide/login.md +++ b/infrastructure-guide/login.md @@ -1,3 +1,5 @@ +# login + This is a cluster made up of 3 hosts, which all are VMs running on the AIT vmware cluster. These machines are pretty standard RHEL7 hosts managed by Puppet: https://git.psi.ch/linux-infra/data-pli/blob/master/login.yaml. -Info for users is published at https://intranet.psi.ch/de/computing/linux-login-clusters \ No newline at end of file +Info for users is published at https://intranet.psi.ch/de/computing/linux-login-clusters diff --git a/infrastructure-guide/lxsup00.md b/infrastructure-guide/lxsup00.md index a89a4651..95df28f0 100644 --- a/infrastructure-guide/lxsup00.md +++ b/infrastructure-guide/lxsup00.md @@ -1,2 +1,4 @@ +# lxsup00 + This is a RHEL7 machine and is puppet managed: -https://git.psi.ch/linux-infra/data-pli/blob/master/default/lxsup00.psi.ch.yaml \ No newline at end of file +https://git.psi.ch/linux-infra/data-pli/blob/master/default/lxsup00.psi.ch.yaml diff --git a/infrastructure-guide/lxweb00.md b/infrastructure-guide/lxweb00.md index 8ad9c185..3b179f11 100644 --- a/infrastructure-guide/lxweb00.md +++ b/infrastructure-guide/lxweb00.md @@ -1,3 +1,5 @@ +# lxweb00 + This is a RHEL7 machine and is puppet managed. The httpd configuration seem to be managed there as well: https://git.psi.ch/linux-infra/data-pli/blob/master/default/lxweb00.psi.ch.yaml diff --git a/infrastructure-guide/metrics00.md b/infrastructure-guide/metrics00.md index c8807e03..45fa8321 100644 --- a/infrastructure-guide/metrics00.md +++ b/infrastructure-guide/metrics00.md @@ -1,3 +1,5 @@ +# metrics00 + This machine is a RHEL7 machine and is puppet managed: https://git.psi.ch/linux-infra/data-pli/blob/master/default/metrics00.psi.ch.yaml diff --git a/infrastructure-guide/puppet01.md b/infrastructure-guide/puppet01.md index 181854a3..f6eaa5a2 100644 --- a/infrastructure-guide/puppet01.md +++ b/infrastructure-guide/puppet01.md @@ -1,3 +1,5 @@ +# puppet01 + Runs the puppet server for rhel7 The main code repositories are synced into: diff --git a/infrastructure-guide/pxeserv01.md b/infrastructure-guide/pxeserv01.md index ec779e8b..bc579d0e 100644 --- a/infrastructure-guide/pxeserv01.md +++ b/infrastructure-guide/pxeserv01.md @@ -1,3 +1,5 @@ +# pxeserv01 + The server is a RHEL 8, installed manually and registered directly with redhat.com . This is so that it's completely independent from anything else at PSI. For historical reasons, the tftpboot directory is hosted on AFS. But for an unknown reason, the RHEL8 tftpd can not read the files from AFS. (It's not SELinux) So the data is mirrored to the local drive and is served from this copy. diff --git a/infrastructure-guide/repo00.md b/infrastructure-guide/repo00.md index 26c78e8c..409340f3 100644 --- a/infrastructure-guide/repo00.md +++ b/infrastructure-guide/repo00.md @@ -1,3 +1,5 @@ +# repo00 + This machine is a RHEL7 system **not** under Puppet control. This machine has no AFS dependencies. The basic service provided by this system is: httpd @@ -120,4 +122,4 @@ The rest were put there by hand. Much of it is probably not needed, but wouldn't - Who belongs this repo? https://repo00.psi.ch/mt86/ (I guess mt86 is a person short code - unfortunately I cannot find this code in the phonebook) - - It's memory test for x86 systems, not a person at PSI. \ No newline at end of file + - It's memory test for x86 systems, not a person at PSI. diff --git a/infrastructure-guide/reposync.md b/infrastructure-guide/reposync.md index 6de41712..df82cdee 100644 --- a/infrastructure-guide/reposync.md +++ b/infrastructure-guide/reposync.md @@ -1,3 +1,5 @@ +# reposync + This server exports all repositories for RHEL8 and uses btrfs to keep weekly snapshots of these. The btrfs is mounted at /var/www/html . Here the 'hot' directory is a sub-volume and the 'cold-*' directories are snapshots of the hot. This system forms an integral part of the psi.packer ansible role. diff --git a/infrastructure-guide/satint.md b/infrastructure-guide/satint.md index 07a474bc..4eb28a05 100644 --- a/infrastructure-guide/satint.md +++ b/infrastructure-guide/satint.md @@ -1,7 +1,9 @@ +# satint + Manually installed installed RHEL7, registered directly with redhat.com Standard RH Satellite installation through the puppet-based foreman installer. To install any extra packages or perform upgrades, the foreman-maintain command has to be used. * **/root/httpd_psi_hack.sh** - Enables the non-authenticated access of the repositories stored on the host. Necessary to run after most foreman-maintain runs. -In case of issues with the manifest or anything else around the redhat.com account, contact **rhn@id.ethz.ch** \ No newline at end of file +In case of issues with the manifest or anything else around the redhat.com account, contact **rhn@id.ethz.ch**