Research and Development Network

h1. Ubuntu server install

These directions are mostly for an Ubuntu install (12.04)

h2. PXE config

# Make sure that DHCP has addresses free to give to the new machine!

# Pick a hostname from our list at [[hosts]]

# Update the entry to reflect that you are using it

## If it has to be renamed, we need to update the reverse resolution records and send them to IT

# Login to @dhcp.dev.ru.is@

# Become root

# Add an entry in @/etc/dhcp/dhcp.conf@ before the line that says "# PUT DEVNET HOSTS ABOVE THIS LINE".  Replace the things starting with my with the appropriate information.  An ethernet address is a MAC address.

<pre>

     host myhostname {

          hardware ethernet myethernetaddress;

          fixed-adress myhostname;

     }

</pre>

# If you need any aliases, add CNAMES to the /var/named/dev.ru.is.zone file

# Restart dhcp

<pre>service dhcpd restart</pre>

# Reload named zone files

<pre>rndc reload</pre>

# On the machine to be installed, make sure that PXE boot is enabled and is high on the priority list

## (or you can choose it manually on the boot menu if you hit F12 usually)

## The setup menu also often lets you know the MAC address

h2. Partitions

Partitioning is a rather personal thing.  These are my guidelines.  If the machine has hardware raid, you should set the system partition on a mirroring set of 18GB SCSI3 drives.

* /boot partition ext2, 256MB.  Standard partion, NOT LVM

* LVM for the rest with name same as the hostname

** /var/cache/openafs ext3  1080MB (which is 5% bigger than 1024) labeled afscache

** swap swap (same as memory or doubled)

** / ext4 (the rest) labeled system

You may want to make a separate /var partition, because it often fills up with logs.

h2. Kerberos/AFS

Follow the directions at https://samvinna.ru.is/projects/projects/devnet-documentation/wiki/AFS_Client_Installation

Main points:

# Install packages

<pre>

sudo apt-get install krb5-auth-dialog krb5-user krb5-clients libpam-ccreds libpam-krb5 build-essential dkms linux-headers-`uname -r` openafs-modules-dkms openafs-{client,krb5} libpam-afs-session

</pre>

# Start up AFS

<pre>sudo service openafs-client start</pre>

# Grab the /etc/krb5.conf from afs and install it

# setup ssh and sshd to use GSSAPI and delegate credentials

# use kadmin to install a krb5.keytab for the host

# put your principals into /root/.k5login to allow you to access as root remotely

# install denyhosts

# MORE TO COME