DokuWiki

Additional tools for the OpenHPC environment. First add these two lines to SMS and all compute nodes. Patch CHROOT as well.

• /etc/security/limits.conf

# added for RLIMIT_MEMLOCK warnings with libibverbs -hmeij
*                soft    memlock         unlimited
*                hard    memlock         unlimited

• Skipping SSH restrictions for users
  • Set up password less logins ssh-keygen -t rsa
  • cat ~/.ssh/idrsa.pub » ~/.ssh/authorized_keys
  • Collect all server fingerprints and make a global known_hosts file in ~/.ssh/
• Skipping Luster installation

• Nagios monitoring

yum -y groupinstall ohpc-nagios
yum -y --installroot=/data/ohpc/images/centos7.2 install nagios-plugins-all-ohpc nrpe-ohpc
chroot /data/ohpc/images/centos7.2 systemctl enable nrpe
perl -pi -e "s/^allowed_hosts=/# allowed_hosts=/"  /data/ohpc/images/centos7.2/etc/nagios/nrpe.cfg
echo "nrpe 5666/tcp # NRPE" >> /data/ohpc/images/centos7.2/etc/services
echo "nrpe : 192.168.1.249 : ALLOW" >> /data/ohpc/images/centos7.2/etc/hosts.allow
echo "nrpe : ALL : DENY" >> /data/ohpc/images/centos7.2/etc/hosts.allow
chroot /data/ohpc/images/centos7.2 /usr/sbin/useradd -c "NRPE user for the NRPE service" \
       -d /var/run/nrpe -r -g nrpe -s /sbin/nologin nrpe
mv /etc/nagios/conf.d/services.cfg.example /etc/nagios/conf.d/services.cfg
mv /etc/nagios/conf.d/hosts.cfg.example /etc/nagios/conf.d/hosts.cfg
perl -pi -e "s/HOSTNAME1/n29/ || s/HOST1_IP/192.168.102.38/" /etc/nagios/conf.d/hosts.cfg
perl -pi -e "s/HOSTNAME2/n31/ || s/HOST2_IP/192.168.102.40/" /etc/nagios/conf.d/hosts.cfg
perl -pi -e "s/ \/bin\/mail/\/usr\/bin\/mailx/g" /etc/nagios/objects/commands.cfg
perl -pi -e "s/nagios\@localhost/root\@ohpc0-test/" /etc/nagios/objects/contacts.cfg
chkconfig nagios on
systemctl start nagios
chmod u+s `which ping`
echo "relayhost = 192.168.102.42" >> /etc/postfix/main.cf
echo "root:           hmeij@wes..." >> /etc/aliases
newaliases
systemctl restart postfix

# recreate vnfs and reimage nodes, see page1
wwvnfs -y --chroot /data/ohpc/images/centos7.2
/root/deploy.sh

• Page1 OpenHPC
• Reset nagiosadmin password htpasswd -c /etc/nagios/passwd nagiosadmin
• Open port 80 in iptables but restrict severely (plain text passwords)
• http://localhost/nagios

Back