Changes

Jump to navigation Jump to search
no edit summary
[[category:McNair Admin]]
 
Haas PhD Students have two new servers and this page details their configuration.
 
'''NOTE THAT THE [[Posgres Server Configuration|CONFIGURATION OF POSTGRES2]] HAS ITS OWN PAGE'''
==IP Addresses==
During the configuration phase the The servers will be onhave been moved to a colo. Their new IP addresses are:*phd-pgsqlwiki: 128.32.66204.163202*phd-lamppostgres2: 128.32.66204.203 The domain names wiki.haas.berkeley.edu and postgres.haas.berkeley.edu should be mapped to these IP addresses shortly.164
==Base configurations==
===On Both Machines===
 
====Creating Users====
 
Assuming that you have root, you can create user accounts and give them root too. The process is:
 
First great the users group, checking the last group number:
cat /etc/group
/usr/sbin/groupadd -g 515 username
 
Then add the user
/usr/sbin/useradd -g username -G root -s /bin/bash -p xxxx -d /home/username -m username
where g is the primary group, G is other groups, p sets a password,
d declares a home directory and m makes the directory
 
Change the user's password:
passwd username
 
And add the user to the sudoers file
echo 'username ALL=(ALL) ALL' >> /etc/sudoers
 
To delete a user:
/usr/sbin/userdel -r roger
where r removes the home directory
 
And to remove their group
/usr/sbin/groupdel username
====Mounting bear====
mkdir /mnt/ed
mount -t cifs //bear/ed_egan/ /mnt/ed -o user=haas\\ed_egan
or:
mount -t cifs //bear/ed_egan/ /mnt/ed -o user=ed_egan
(which ever works)
for the inclusion into fstab or other more sophisticated approaches there is a [http://wiki.centos.org/TipsAndTricks/WindowsShares Centos help page].
yum install glib glib2 libpng libjpeg libtiff ghostscript freetype ImageMagick ImageMagick-perl
===On PgsqlPostgres.Haas===
====Removing Unneeded Servers====
yum groupremove "Mail Server"
yum groupremove "News Server"
 
====Install and Configure PostgreSQL====
 
To install Postgres with the PLs (Procedural Languages) do:
 
yum install postgresql postgresql-server postgresql-pl postgresql-libs
 
Start the service with:
 
/sbin/chkconfig postgresql on
/sbin/service postgresql start
 
Add the following to ''/etc/sysconfig/iptables'' to allow access through the firewall:
 
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 128.32.66.0/24 --dport 5432 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 128.32.67.0/24 --dport 5432 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 128.32.74.0/24 --dport 5432 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -s 10.136.0.0/23 --dport 5432 -j ACCEPT
 
Restart the IPtables so the changes take effect:
 
service iptables restart
 
Now create some users on the database server:
 
su postgres
createuser root
createuser -P ed_egan
exit
 
Check the version of Postgres and Perl installed:
 
psql -c "select version();" template1
PostgreSQL 8.1.23
perl -v
v5.8.8
 
Now add the perl PL to the standard template so that all new databases will be perl enabled:
 
createlang plperl template1
 
Check the specs on the machine for the configuration:
 
cat /proc/meminfo
MemTotal: 8181356 kB
cat /proc/cpuinfo
2 x Quad core CPUs
cache size: 2048 KB
model name: Intel(R) Xeon(TM) CPU 2.80GHz
 
Review the performance tuning section on the [[Working with PostgreSQL]] page, and possibly on [http://wiki.postgresql.org/wiki/Tuning_Your_PostgreSQL_Server the official quick guide page] and make the following changes to ''/var/lib/pgsql/data/postgresql.conf'':
listen_addresses = '*'
port = 5432
checkpoint_segments=32
This is equivalent to every 512Mb
shared_buffers = 786432
#1gig = 1073741824 => '''131072''' * 8 * 1024, currently trying 6gig
The recommendation is to use around 10-15% of RAM,
but for a single user db something higher seems better
This is in 8K blocks
work_mem = 2097152
#In KB, so 1024 * 512=> 524288 = 512Mb,
Note that this might be a little too high for aggresively stacked queries
But this seems to be the bite point for performance.
maintenance_work_mem = 262144
#786432 => 6 * 1073741824 => 6 * 131072 * 8 * 1024
This is how much VACUUM will use - it doesn't make a huge difference
effective_cache_size = 1835008
#In 8k blocks. This is the maximum memory that postgres will allocate.
It is currently set to 14Gb.
 
Alter ''/var/lib/pgsql/data/pg_hba.conf'' to include the lines (under IPv4):
 
host all all 128.32.74.0/24 md5
host all all 128.32.66.0/24 md5
host all all 128.32.67.0/24 md5
host all all 10.136.0.0/23 md5
 
Note that this will use encrypted database passwords, and that all accounts must have non-null passwords (i.e. be created with createuser -P username)
 
And restart Postgres:
 
/sbin/service postgresql restart
====Upgrade Python?====
yum list python #lists version 2.4.3-27.el5_5.3
There are tarballs of version 3.2 available from [http://www.python.org/download/ Python.org's download area], but it seems to too recent to have got rpm/yum support as yet.
==Configuration==
We will now do the extensions and fine detail configuration.
Change the following settings in LocalSettings.php  $wgEnableUploads =true; #Changed by Ed $wgUseTeX =Datatrue; #Changed by Ed $wgLogo ="/icons/wiki_logo.gif"; $wgArticlePath ="/wiki/$1"; $wgUsePathInfo = true; $wgFavicon = "$wgScriptPath/favicon.ico"; $wgGroupPermissions['*']['edit'] = false; #Stops editing without an account, globally  Change the permissions on the images directory:  chmod a+w /var/www/html/w/images Add the info for the side bar (this might be restored from a backup):  Edit (or create): http://wiki.haas.berkeley.edu/wiki/MediaWiki:Sidebar * navigation ** mainpage|mainpage-description ** research_computing |Research Computing ** portal-url|Community ** currentevents-url|currentevents ** recentchanges-url|recentchanges ** randompage-url|randompage ** helppage|help * Group Pages ** accounting|Accounting ** bpp|BPP ** finance|Finance ** management_of_organizations|Management of Organizations ** marketing|Marketing ** operations_and_it_management|Operations and IT Management ** real_estate|Real Estate * SEARCH * TOOLBOX * LANGUAGES   And populate the wiki using the Special:Import page. Note that you can get a list of all pages on a wiki using the API:  http://wiki.haas.berkeley.edu/w/api.php?action=query&list=allpages&aplimit=500 Mount the Backup Directory: mkdir /mnt/wiki mount -t cifs //bear.haas.berkeley.edu/wiki/bulk/backup /mnt/wiki/ -o user=haas\\wiki Mount the Images Directory: mv /var/www/html/w/images /var/www/html/w/imagesorg mkdir images mount -t cifs //bear.haas.berkeley.edu/wiki/bulk/media /var/www/html/w/images -o user=haas\\wiki mkdir /var/www/html/w/image/tmp Change the max_upload_filesize to 8M in php.ini: vi php.ini #edit max_upload_filesize variable
For lampRestart the webserver:*Import Wiki pages /etc/init.d/httpd restart*Change links  =====Do the extensions:===== '''Simple security'''Get it from: http://www.mediawiki.org/wiki/Extension:Simple_Security  tar -xzf /mnt/ed/HaasWiki/SimpleSecurity-MW1.16-r62389.tar.gz -C /var/www/html/w/extensions '''UserMerge'''Get it from: http://www.mediawiki.org/wiki/Extension:UserMerge  tar -xzf /mnt/ed/HaasWiki/UserMerge-MW1.16-r66255.tar.gz -C /var/www/html/w/extensions '''RenameUser'''Get it from:http://www.mediawiki.org/wiki/Extension:Rename_user  tar -xzf /mnt/ed/HaasWiki/Renameuser-MW1.16-r66255.tar.gz -C /var/www/html/w/extensions '''ImportUsers'''Get it from: http://www.mediawiki.org/wiki/Extension:ImportUsers  tar -xzf /mnt/ed/HaasWiki/ImportUsers-MW1.16-r62790.tar.gz -C /var/www/html/w/extensions '''UserRightsList'''Get it from: http://www.mediawiki.org/wiki/Extension:UserRightsList  tar -xzf /mnt/ed/HaasWiki/UserRightsList.0.52.tgz -C /var/www/html/w/extensions '''MultipleUpload'''Get it from: http://www.mediawiki.org/wiki/Extension:MultiUpload  tar -xzf /mnt/ed/HaasWiki/MultiUpload-MW1.16-r78542.tar.gz -C /var/www/html/w/extensions  Add to pdfs and repository filesLocalSettings.php  #SimpleSecurity $wgSecurityUseDBHook = true; # Add this to enable the experimental DB hook for stronger security include_once("{$IP}/extensions/SimpleSecurity/SimpleSecurity.php"); # All other SimpleSecurity directives MUST be specified after the include or the defaults will override them. $wgSecurityRenderInfo = true; $wgSecurityAllowUnreadableLinks = false; $wgPageRestrictions['Category:Servers']['read'] = 'sysop'; $wgSecurityExtraGroups = array( 'students' => 'Students', 'faculty' => 'Faculty, 'staff' => 'Staff', ); #UserMerge require_once( "$IP/extensions/UserMerge/UserMerge.php" ); $wgGroupPermissions['bureaucrat']['usermerge'] = true; #RenameUser require_once("$IP/extensions/Renameuser/Renameuser.php"); #ImportUsers require_once("$IP/extensions/ImportUsers/SpecialImportUsers.php"); #UserRightsList require_once("$IP/extensions/UserRightsList/UserRightsList.php"); #MultipleUpload require_once("$IP/extensions/MultiUpload/SpecialMultipleUpload.php"); $wgMaxUploadFiles=10; [[admin_classification::IT Build| ]]

Navigation menu