merged in operating agreement
This commit is contained in:
@@ -1,44 +1 @@
|
||||
# TSYS Group - IT Documentation - Processes - Move To Production
|
||||
|
||||
- [TSYS Group - IT Documentation - Processes - Move To Production](#tsys-group-it-documentation-processes-move-to-production)
|
||||
- [Provision the system](#provision-the-system)
|
||||
- [Configure the system](#configure-the-system)
|
||||
|
||||
## Provision the system
|
||||
|
||||
The below steps are performed manually for the small handful of "pet" machines (db/web/app). They are performed by the RackRental provisioner for the "cattle" machines.
|
||||
|
||||
* Create phpipam record
|
||||
* Create forward DNS record
|
||||
* Create reverse DNS record
|
||||
* Install the VM
|
||||
i - Setup the hostname
|
||||
* Install SSH server
|
||||
* Configure IP address
|
||||
* Set resolver to 10.251.37.5 , 10.251.37.6
|
||||
|
||||
|
||||
|
||||
## Configure the system
|
||||
|
||||
* Install FetchApply
|
||||
|
||||
```bash
|
||||
curl <http://pfv-toolbox.turnsys.net/installFetch.sh|/bin/bash>
|
||||
```
|
||||
|
||||
FetchApply will :
|
||||
|
||||
* Setup NTP
|
||||
* Add rundeck key to root authorized_keys
|
||||
* Setup postfix to relay via pfv-toolbox
|
||||
* Setup netdata agent
|
||||
* Setup snmpd
|
||||
* Add the tsys CA root/intermediate certs
|
||||
* Harden ssh configuration
|
||||
* Install logwatch
|
||||
* Install molly-guard
|
||||
* Patch the system
|
||||
* Add system to librenms
|
||||
* Add system to rundeck
|
||||
* Perform any server role specific configuration
|
||||
# Processes - Move To Production
|
||||
|
||||
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/fixcpuperf.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/fixcpuperf.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/newsrv.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/newsrv.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/omsa.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/omsa.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/prox.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/hypervisor/code/prox.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/networking/code/fixeth.sh
Normal file → Executable file
0
src/CIO/Systems/Admin-DataCenter/networking/code/fixeth.sh
Normal file → Executable file
@@ -272,7 +272,7 @@ sudo snap install helm --classic
|
||||
```console
|
||||
apt-get -y install \
|
||||
kicad librecad freecad gimp blender shellcheck jq net-tools\
|
||||
ruby-full offlineimap zsh vim thunderbird enigmail \
|
||||
ruby-full offlineimap zsh vim thunderbird enigmail highlight\
|
||||
kleopatra zsh-autosuggestions zsh-syntax-highlighting screen \
|
||||
mtr cifs-utils grass cubicsdr arduino jupyter-notebook \
|
||||
dia basket vym code wings3d flatpak wireguard gnuplot \
|
||||
|
||||
0
src/CIO/Systems/code/ListAllSystems.sh
Executable file → Normal file
0
src/CIO/Systems/code/ListAllSystems.sh
Executable file → Normal file
Reference in New Issue
Block a user