zenoss / core-autodeploy Goto Github PK

View Code? Open in Web Editor NEW

18.0 18.0 20.0 53 KB

Auto-deployment scripts for Zenoss Core 4

Shell 100.00%

core-autodeploy's People

Stargazers

Watchers

core-autodeploy's Issues

False positive on zenoss package check

If you have installed http://deps.zenoss.com/yum/zenossdeps-4.2.x-1.el6.noarch.rpm you'll hit https://github.com/zenoss/core-autodeploy/blob/4.2.4/core-autodeploy.sh#L108

It might make sense to exclude the deps rpm? maybe something like this (untested, just an illustration):

if [ `rpm -qa | egrep -c -i '^zenoss[^dep]'` -gt 0 ]; then

Replace "disable iptables" by proper iptables rules

It seems paradoxical that what is essentially a security tool recommends weakening the host operating system it is installed on by disabling its firewall:

NOTE: You may need to disable or modify this server's firewall to access port
8080. To disable this system's firewall, type:
# service iptables save
# service iptables stop
# chkconfig iptables off
Alternatively, you can modify your firewall to enable incoming connections to
port 8080. Here is a full list of all the ports Zenoss accepts incoming
connections from, and their purpose:
8080 (TCP) Web user interface
11211 (TCP and UDP) memcached
514 (UDP) syslog
162 (UDP) SNMP traps

True, it is indicated which ports should be opened, but since no concrete commands are given for that option, I guess most people will not bother.

I propose adding the proper iptables commands to open those ports.

Fails to download Oracle Java

The oracle java looks like it has changed, it now gives a redirect when it attempts to download.

Here is the updated link, however, it gave a long, URL for a file name, I renamed it to the proper name and it installed:
http://javadl.sun.com/webapps/download/AutoDL?BundleId=68235

Is the autodeploy script still being maintained?

Looking at the list of open issues, it seems that this script is no longer actively maintained. Is that a correct observation?

Version of RabbitMQ Server not on EPEL any more

Hello,

The autodeployment script tries to do:

yum --enablerepo=epel -y --nogpgcheck localinstall rabbitmq-server-2.8.7-1.noarch.rpm

...but the specific version is not available on EPEL any more.

curl: (6) Couldn't resolve host 'dev.zenoss.org'

Hi,it seems that dev.zenoss.org is not active,right?

[root@zenoss4 zenoss-core-autodeploy-3642640]# ./core-autodeploy.sh 
Welcome to the Zenoss Core auto-deploy script!

This auto-deploy script installs the Oracle Java Runtime Environment (JRE).
To continue, please review and accept the Oracle Binary Code License Agreement
for Java SE. 

Press Enter to continue.

Do you accept the Oracle Binary Code License Agreement for Java SE?y
Install continues....
Ensuring Zenoss RPMs are not already present
Disabling SELinux...
Downloading zenoss_core-4.2.5-2108.el6.x86_64.rpm...
--2016-02-20 10:22:56--  http://downloads.sourceforge.net/project/zenoss/zenoss-4.2/zenoss-4.2.5//zenoss_core-4.2.5-2108.el6.x86_64.rpm
Resolving downloads.sourceforge.net... 216.34.181.59
Connecting to downloads.sourceforge.net|216.34.181.59|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://nchc.dl.sourceforge.net/project/zenoss/zenoss-4.2/zenoss-4.2.5/zenoss_core-4.2.5-2108.el6.x86_64.rpm [following]
--2016-02-20 10:22:56--  http://nchc.dl.sourceforge.net/project/zenoss/zenoss-4.2/zenoss-4.2.5/zenoss_core-4.2.5-2108.el6.x86_64.rpm
Resolving nchc.dl.sourceforge.net... 211.79.60.17, 2001:e10:ffff:1f02::17
Connecting to nchc.dl.sourceforge.net|211.79.60.17|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 123063789 (117M) [application/octet-stream]
Saving to: “zenoss_core-4.2.5-2108.el6.x86_64.rpm”

46% [==============================================================>                                                                        ] 57,788,806   376K/s  eta 4m 28s  h100%[======================================================================================================================================>] 123,063,789  218K/s   in 7m 42s  

2016-02-20 10:30:39 (260 KB/s) - “zenoss_core-4.2.5-2108.el6.x86_64.rpm” saved [123063789/123063789]

Importing Zenoss GPG Key
curl: (6) Couldn't resolve host 'dev.zenoss.org'
error: http://dev.zenoss.org/yum/RPM-GPG-KEY-zenoss: import read failed(2).
Command failure: rpm --import http://dev.zenoss.org/yum/RPM-GPG-KEY-zenoss

ENHANCEMENT: Support Autmatted Execution of secure_zenoss.sh

If you are automating installations the manual prompt for "Configure a secure MySQL root password? [Yn]: " can get in the way.

At the very least something like --no-secure should be supported so that if you don't want to secure mysql (IE a dev workstation or something).

Being able to actually sure via the command line might also be valuable

rrdtool deps missing

On a very bare CentOS 6.3 install:

Checking RRDtool version >= 1.4.7:
rrdtool: error while loading shared libraries: libpixman-1.so.0: cannot open shared object file: No such file or directory
[FAIL]
Error: unable to determine your RRDtool version. Please confirm that RRDtool (version >= 1.4.7) is installed.

Seems like the (rpmforge-extra) rrdtool deps are broken.

To fix, need to manually install pixman and libXau (both from base CentOS repo):

yum install -y pixman libXau

It wouldn't hurt if autodeploy script ran the command above, and would certainly help in the case of very bare systems.

Note, this is with the 4.2.3 tagged version of core-autodeploy.

Don't disable SELinux.

It seems paradoxical that what is essentially a security tool recommends weakening the host operating system it is installed on by disabling SELinux:

echo "Disabling SELinux..."
if [ -e /selinux/enforce ]; then
echo 0 > /selinux/enforce
fi
if [ -e /etc/selinux/config ]; then
sed -i -e 's/^SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
fi

In which use cases does SELinux interfere with Zenoss? I could not find any - re-enabling SELinux seems to work fine.

Alternatively, if there are one or more use cases where SELinux interferes with Zenoss, I propose creating a proper SELinux policy instead, as explained at http://wiki.centos.org/HowTos/SELinux

Name of gzipped archive may be describe what it is. When I deploy zenoss on some server, for some month I dont know what this directory, and when all gzipped archives have this name, we have a problem.
I think, right name this package may be something like zenoss-core-autodeploy.tar.gz

Cannot connect to MySQL mirror: no longer available

Argonne mirror is no longer available as of February 1, 2015.
Check http://mirror.anl.gov/pub/mysql/Downloads/MySQL-5.5/

The workaround consists in changing the mysql_ftp_mirror to some other mirror.
For example:
comment the variable declaration :

mysql_ftp_mirror="ftp://mirror.anl.gov/pub/mysql/Downloads/MySQL-5.5/"

Add a new value for the variable:
mysql_ftp_mirror="ftp://ftp.mirrorservice.org/sites/ftp.mysql.com/Downloads/MySQL-5.5/"

Also, the issue would have been easier to debug if the wget didn't have its stderr output redirected to /dev/null

mysql mirror no longer active

ftp://mirror.anl.gov is no longer active, since February 1st, see http://mirror.anl.gov/:

We regret to inform you that public access to the Argonne software mirror will no longer be available as of February 1, 2015. The service will continue to be available onsite to Argonne employees, but offsite access will require an Argonne VPN connection.

The following websites will no longer be accessible from the Internet:
* http://mirror.anl.gov
* http://mirror.mcs.anl.gov
* http://mirror.ipv6.anl.gov
This applies to access via the HTTP, FTP, and rsync protocols.

This means that the following line in the autodeploy script silently fails:

 try wget --no-remove-listing $mysql_ftp_mirror >/dev/null 2>&1

zenoss / core-autodeploy Goto Github PK

core-autodeploy's People

Stargazers

Watchers

Forkers

core-autodeploy's Issues

mysql_ftp_mirror="ftp://mirror.anl.gov/pub/mysql/Downloads/MySQL-5.5/"

Recommend Projects

Recommend Topics

Recommend Org