SlideShare a Scribd company logo
Automating the deployment of FreeBSD & PC-BSD® systemsAutomating the deployment of FreeBSD & PC-BSD® systems
BSDCan 2013BSDCan 2013
Kris MooreKris Moore
PC-BSD / iXsystemsPC-BSD / iXsystems
kris@pcbsd.orgkris@pcbsd.org
The problem:The problem:
You want to (quickly) deploy multipleYou want to (quickly) deploy multiple
FreeBSD or PC-BSD systems.FreeBSD or PC-BSD systems.
You like what you hear about this wholeYou like what you hear about this whole
“ZFS” thing“ZFS” thing
There are currently two ways to accomplishThere are currently two ways to accomplish
this:this:
Solution #1Solution #1
●
Write your own installation scriptsWrite your own installation scripts
●
Configure network booting by handConfigure network booting by hand
●
Maintain as necessaryMaintain as necessary
When to consider Solution #1:When to consider Solution #1:
●
You have a very unique installationYou have a very unique installation
●
You are a FreeBSD God – Congrats!You are a FreeBSD God – Congrats!
When to not consider Solution #1:When to not consider Solution #1:
●
Manual disk partitioning isn't your thingManual disk partitioning isn't your thing
●
You work for a livingYou work for a living
Solution #2Solution #2
●
Use theUse the pc-thinclientpc-thinclient utility included withutility included with
PC-BSD & TrueOSPC-BSD & TrueOS
When to consider Solution #2:When to consider Solution #2:
●
You don't enjoy disk partitioningYou don't enjoy disk partitioning
●
You want to have a weekendYou want to have a weekend
What you will need:What you will need:
●
A system with a network interface (2)?A system with a network interface (2)?
●
Running PC-BSD 9.1 / TrueOS 9.1Running PC-BSD 9.1 / TrueOS 9.1
●
A few GB of disk spaceA few GB of disk space
Getting StartedGetting Started
●
First, checkout a FreeBSD ports treeFirst, checkout a FreeBSD ports tree
On TrueOSOn TrueOS
# portsnap fetch extract update# portsnap fetch extract update
On PC-BSDOn PC-BSD
Control panel → System Manager → TasksControl panel → System Manager → Tasks
→ Fetch Ports→ Fetch Ports
Getting StartedGetting Started
Getting StartedGetting Started
Getting StartedGetting Started
●
Install serverInstall server
●
Or desktop “Thin-Client” serverOr desktop “Thin-Client” server
Short DetourShort Detour
What is Remote Desktop?What is Remote Desktop?
●
The thin-client utility can operate bothThe thin-client utility can operate both
install server or desktop serverinstall server or desktop server
●
Allows diskless clients to boot via PXEAllows diskless clients to boot via PXE
●
Brings up GDM login on clientBrings up GDM login on client
Why would you run Remote Desktop?Why would you run Remote Desktop?
●
You have a bunch of low-end clientsYou have a bunch of low-end clients
●
You want to simplify backup, security andYou want to simplify backup, security and
managementmanagement
Why should you not run Remote Desktop?Why should you not run Remote Desktop?
●
You don't have a server with horsepowerYou don't have a server with horsepower
●
You need sound support on the clientsYou need sound support on the clients
Back to your previously scheduledBack to your previously scheduled
presentationpresentation
Getting StartedGetting Started
●
Will run DHCPDWill run DHCPD
●
Be careful which cable is usedBe careful which cable is used
Getting StartedGetting Started
Getting startedGetting started
●
You may now connect a client systemYou may now connect a client system
●
To PXE boot, you may need to checkTo PXE boot, you may need to check
BIOS on client firstBIOS on client first
Its Demo time!Its Demo time!
Customizing the installCustomizing the install
●
Of course you will want your ownOf course you will want your own
installation options / archives, etcinstallation options / archives, etc
●
It is possible to adjust entirely on serverIt is possible to adjust entirely on server
sideside
The two key directories:The two key directories:
●
/home/thinclient/installscripts/home/thinclient/installscripts
●
/home/thinclient/installarchive/home/thinclient/installarchive
Client mounted as:Client mounted as:
●
/installscripts/installscripts
●
/installarchive/installarchive
●
pc-sysinstall.example can be used as apc-sysinstall.example can be used as a
template for other installationstemplate for other installations
Example #1Example #1
Changing to ZFSChanging to ZFS
Example disk layout:Example disk layout:
disk0-part=UFS+SUJ 1000 /disk0-part=UFS+SUJ 1000 /
disk0-part=SWAP 2000 nonedisk0-part=SWAP 2000 none
disk0-part=UFS+SUJ 0 /usrdisk0-part=UFS+SUJ 0 /usr
commitDiskLabelcommitDiskLabel
Converted to ZFS becomes:Converted to ZFS becomes:
disk0-part=ZFS 0 /,/root,/tmp,/usr,/vardisk0-part=ZFS 0 /,/root,/tmp,/usr,/var
commitDiskLabelcommitDiskLabel
Example #2Example #2
Changing installation archiveChanging installation archive
Example install archive:Example install archive:
installMedium=localinstallMedium=local
localPath=/installarchivelocalPath=/installarchive
packageType=tarpackageType=tar
installFile=fbsd-release.txzinstallFile=fbsd-release.txz
Changed to custom archive:Changed to custom archive:
installMedium=localinstallMedium=local
localPath=/installarchivelocalPath=/installarchive
packageType=tarpackageType=tar
installFile=fbsd-8.4-amd64.txzinstallFile=fbsd-8.4-amd64.txz
Example #3Example #3
User ManagementUser Management
# Root Password# Root Password
rootPass=rootrootPass=root
# User Setup# User Setup
userName=krisuserName=kris
userComment=Kris MooreuserComment=Kris Moore
userPass=krisuserPass=kris
userShell=/bin/cshuserShell=/bin/csh
userHome=/home/krisuserHome=/home/kris
userGroups=wheel,operatoruserGroups=wheel,operator
commitUsercommitUser
Example #4Example #4
Advanced CommandsAdvanced Commands
# Run command inside installed system# Run command inside installed system
runCommand=sh /root/initme.shrunCommand=sh /root/initme.sh
# Run command outside installed system# Run command outside installed system
runExtCommand=mount -t devfs devfs ${FSMNT}/devrunExtCommand=mount -t devfs devfs ${FSMNT}/dev
Example #5Example #5
Packages, oh my!Packages, oh my!
installPackages=apache22 mysql55-serverinstallPackages=apache22 mysql55-server
Can use short package names, or fullCan use short package names, or full
versions.versions.
PKGNG supportPKGNG support
●
Checks package format before installChecks package format before install
●
Will “boot-strap” PKGNG if necessaryWill “boot-strap” PKGNG if necessary
Example #6Example #6
FreeBSD dist filesFreeBSD dist files
# Install from vanilla FreeBSD dist files# Install from vanilla FreeBSD dist files
installMedium=localinstallMedium=local
localPath=/distfiles/9.1-Release/amd64/distlocalPath=/distfiles/9.1-Release/amd64/dist
packageType=distpackageType=dist
distFiles=base doc games kernel lib32distFiles=base doc games kernel lib32
Putting the Automated in “Fully Automated”Putting the Automated in “Fully Automated”
File: /home/thinclient/installscripts/unattended.cfgFile: /home/thinclient/installscripts/unattended.cfg
●
If config exists, the client will boot andIf config exists, the client will boot and
begin installation after 30 seconds.begin installation after 30 seconds.
●
System will shutdown when finishedSystem will shutdown when finished
●
USE WITH CAUTION!!USE WITH CAUTION!!
ScalabilityScalability
●
All CPU instructions are run on the clientAll CPU instructions are run on the client
●
Server is in essence a large “File Server”Server is in essence a large “File Server”
●
Will be mostly disk IO / network speedWill be mostly disk IO / network speed
dependentdependent
ScalabilityScalability
●
Default DHCP server is configured for 99Default DHCP server is configured for 99
clientsclients
●
To adjust edit the file:To adjust edit the file:
●
/usr/local/etc/dhcpd.conf/usr/local/etc/dhcpd.conf
●
range 192.168.2.100 192.168.2.199;range 192.168.2.100 192.168.2.199;
Tips and TricksTips and Tricks
●
The PC-BSD GUI installer is your friendThe PC-BSD GUI installer is your friend
●
Every install is a scripted installEvery install is a scripted install
●
After installation a copy of the pc-After installation a copy of the pc-
sysinstall.cfg file is saved to:sysinstall.cfg file is saved to:
●
/root/pc-sysinstallcfg/root/pc-sysinstallcfg
Tips and TricksTips and Tricks
●
To greatly speed up installations, use ZFSTo greatly speed up installations, use ZFS
mirrored drives, SSD, or even TMPFSmirrored drives, SSD, or even TMPFS
What's next?What's next?
●
Improvements to pc-sysinstallImprovements to pc-sysinstall
●
Faster setup of initial thin-clientFaster setup of initial thin-client
environmentenvironment
Questions? Comments?Questions? Comments?
wiki.pcbsd.orgwiki.pcbsd.org
lists.pcbsd.orglists.pcbsd.org
forums.pcbsd.orgforums.pcbsd.org
Thank you!Thank you!
www.slideshare.net/krispcbsd/bsdcan2013www.slideshare.net/krispcbsd/bsdcan2013

More Related Content

What's hot

LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISORLOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISOR
Vanika Kapoor
 
Ha opensuse
Ha opensuseHa opensuse
Ha opensuse
Kenny (netman)
 
Relax-and-Recover Automated Testing
Relax-and-Recover Automated TestingRelax-and-Recover Automated Testing
Relax-and-Recover Automated Testing
Gratien D'haese
 
NFD9 - Matt Peterson, Data Center Operations
NFD9 - Matt Peterson, Data Center OperationsNFD9 - Matt Peterson, Data Center Operations
NFD9 - Matt Peterson, Data Center Operations
Cumulus Networks
 
Cis222 2
Cis222 2Cis222 2
Cis222 2
Russ Ferriday
 
Practical Introduction To Linux
Practical Introduction To LinuxPractical Introduction To Linux
Practical Introduction To Linux
Zeeshan Rizvi
 
NVDIMM block drivers with NFIT
NVDIMM block drivers with NFITNVDIMM block drivers with NFIT
NVDIMM block drivers with NFIT
joeylikernel
 
LinuxTag2012 Rear
LinuxTag2012 RearLinuxTag2012 Rear
LinuxTag2012 Rear
Gratien D'haese
 
Scale 2010: BSD for Linux Users
Scale 2010: BSD for Linux UsersScale 2010: BSD for Linux Users
Scale 2010: BSD for Linux Users
Dru Lavigne
 
Lavigne bsdmag sept12
Lavigne bsdmag sept12Lavigne bsdmag sept12
Lavigne bsdmag sept12
Dru Lavigne
 
Free Bsd7.2 Install V1.7
Free Bsd7.2 Install V1.7Free Bsd7.2 Install V1.7
Free Bsd7.2 Install V1.7
Jainan O
 
VMs All the Way Down (BSides Delaware 2016)
VMs All the Way Down (BSides Delaware 2016)VMs All the Way Down (BSides Delaware 2016)
VMs All the Way Down (BSides Delaware 2016)
John Hubbard
 
Flourish11
Flourish11Flourish11
Flourish11
Dru Lavigne
 
Cobbler, Func and Puppet: Tools for Large Scale Environments
Cobbler, Func and Puppet: Tools for Large Scale EnvironmentsCobbler, Func and Puppet: Tools for Large Scale Environments
Cobbler, Func and Puppet: Tools for Large Scale Environments
ViSenze - Artificial Intelligence for the Visual Web
 
Lavigne bsdmag apr13
Lavigne bsdmag apr13Lavigne bsdmag apr13
Lavigne bsdmag apr13
Dru Lavigne
 
Cfg2html fosdem2014
Cfg2html fosdem2014Cfg2html fosdem2014
Cfg2html fosdem2014
Gratien D'haese
 
LCA13: Xen on ARM
LCA13: Xen on ARMLCA13: Xen on ARM
LCA13: Xen on ARM
Linaro
 
Feature rich BTRFS is Getting Richer with Encryption
Feature rich BTRFS is Getting Richer with EncryptionFeature rich BTRFS is Getting Richer with Encryption
Feature rich BTRFS is Getting Richer with Encryption
LF Events
 
Keith Paskett - Postgres on ZFS @ Postgres Open
Keith Paskett - Postgres on ZFS @ Postgres OpenKeith Paskett - Postgres on ZFS @ Postgres Open
Keith Paskett - Postgres on ZFS @ Postgres OpenPostgresOpen
 

What's hot (20)

LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISORLOAD BALANCING OF APPLICATIONS  USING XEN HYPERVISOR
LOAD BALANCING OF APPLICATIONS USING XEN HYPERVISOR
 
Chap 17 advfs
Chap 17 advfsChap 17 advfs
Chap 17 advfs
 
Ha opensuse
Ha opensuseHa opensuse
Ha opensuse
 
Relax-and-Recover Automated Testing
Relax-and-Recover Automated TestingRelax-and-Recover Automated Testing
Relax-and-Recover Automated Testing
 
NFD9 - Matt Peterson, Data Center Operations
NFD9 - Matt Peterson, Data Center OperationsNFD9 - Matt Peterson, Data Center Operations
NFD9 - Matt Peterson, Data Center Operations
 
Cis222 2
Cis222 2Cis222 2
Cis222 2
 
Practical Introduction To Linux
Practical Introduction To LinuxPractical Introduction To Linux
Practical Introduction To Linux
 
NVDIMM block drivers with NFIT
NVDIMM block drivers with NFITNVDIMM block drivers with NFIT
NVDIMM block drivers with NFIT
 
LinuxTag2012 Rear
LinuxTag2012 RearLinuxTag2012 Rear
LinuxTag2012 Rear
 
Scale 2010: BSD for Linux Users
Scale 2010: BSD for Linux UsersScale 2010: BSD for Linux Users
Scale 2010: BSD for Linux Users
 
Lavigne bsdmag sept12
Lavigne bsdmag sept12Lavigne bsdmag sept12
Lavigne bsdmag sept12
 
Free Bsd7.2 Install V1.7
Free Bsd7.2 Install V1.7Free Bsd7.2 Install V1.7
Free Bsd7.2 Install V1.7
 
VMs All the Way Down (BSides Delaware 2016)
VMs All the Way Down (BSides Delaware 2016)VMs All the Way Down (BSides Delaware 2016)
VMs All the Way Down (BSides Delaware 2016)
 
Flourish11
Flourish11Flourish11
Flourish11
 
Cobbler, Func and Puppet: Tools for Large Scale Environments
Cobbler, Func and Puppet: Tools for Large Scale EnvironmentsCobbler, Func and Puppet: Tools for Large Scale Environments
Cobbler, Func and Puppet: Tools for Large Scale Environments
 
Lavigne bsdmag apr13
Lavigne bsdmag apr13Lavigne bsdmag apr13
Lavigne bsdmag apr13
 
Cfg2html fosdem2014
Cfg2html fosdem2014Cfg2html fosdem2014
Cfg2html fosdem2014
 
LCA13: Xen on ARM
LCA13: Xen on ARMLCA13: Xen on ARM
LCA13: Xen on ARM
 
Feature rich BTRFS is Getting Richer with Encryption
Feature rich BTRFS is Getting Richer with EncryptionFeature rich BTRFS is Getting Richer with Encryption
Feature rich BTRFS is Getting Richer with Encryption
 
Keith Paskett - Postgres on ZFS @ Postgres Open
Keith Paskett - Postgres on ZFS @ Postgres OpenKeith Paskett - Postgres on ZFS @ Postgres Open
Keith Paskett - Postgres on ZFS @ Postgres Open
 

Similar to BSDCan2013

Asiabsdcon2013
Asiabsdcon2013Asiabsdcon2013
Asiabsdcon2013
krispcbsd
 
The Deck by Phil Polstra GrrCON2012
The Deck by Phil Polstra GrrCON2012The Deck by Phil Polstra GrrCON2012
The Deck by Phil Polstra GrrCON2012
Philip Polstra
 
Polstra 44con2012
Polstra 44con2012Polstra 44con2012
Polstra 44con2012
Philip Polstra
 
Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 2012Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 2012
44CON
 
Dru lavigne servers-tutorial
Dru lavigne servers-tutorialDru lavigne servers-tutorial
Dru lavigne servers-tutorial
Dru Lavigne
 
Recipe of a linux Live CD (archived)
Recipe of a linux Live CD (archived)Recipe of a linux Live CD (archived)
Recipe of a linux Live CD (archived)
Bud Siddhisena
 
Linux conf-admin
Linux conf-adminLinux conf-admin
Linux conf-adminbadamisri
 
Linux conf-admin
Linux conf-adminLinux conf-admin
Linux conf-admin
badamisri
 
A3Sec Advanced Deployment System
A3Sec Advanced Deployment SystemA3Sec Advanced Deployment System
A3Sec Advanced Deployment Systema3sec
 
Distributed Compiler Icecc
Distributed Compiler IceccDistributed Compiler Icecc
Distributed Compiler Icecc
SZ Lin
 
Perfect Linux Desktop - OpenSuSE 12.2
Perfect Linux Desktop - OpenSuSE 12.2Perfect Linux Desktop - OpenSuSE 12.2
Perfect Linux Desktop - OpenSuSE 12.2Davor Guttierrez
 
Snapshots, Replication, and Boot-Environments by Kris Moore
Snapshots, Replication, and Boot-Environments by Kris Moore Snapshots, Replication, and Boot-Environments by Kris Moore
Snapshots, Replication, and Boot-Environments by Kris Moore
eurobsdcon
 
linux minimal os tutorial - by shatrix
linux minimal os tutorial - by shatrixlinux minimal os tutorial - by shatrix
linux minimal os tutorial - by shatrixSherif Mousa
 
Oracle11g On Fedora14
Oracle11g On Fedora14Oracle11g On Fedora14
Oracle11g On Fedora14
kmsa
 
Oracle11g on fedora14
Oracle11g on fedora14Oracle11g on fedora14
Oracle11g on fedora14
Khalid Matar Albuflasah
 
Linux Installation
Linux InstallationLinux Installation
Linux Installation
BIT DURG
 
FreeBSD Portscamp, Kuala Lumpur 2016
FreeBSD Portscamp, Kuala Lumpur 2016FreeBSD Portscamp, Kuala Lumpur 2016
FreeBSD Portscamp, Kuala Lumpur 2016
Muhammad Moinur Rahman
 
olf10
olf10olf10

Similar to BSDCan2013 (20)

Asiabsdcon2013
Asiabsdcon2013Asiabsdcon2013
Asiabsdcon2013
 
The Deck by Phil Polstra GrrCON2012
The Deck by Phil Polstra GrrCON2012The Deck by Phil Polstra GrrCON2012
The Deck by Phil Polstra GrrCON2012
 
Polstra 44con2012
Polstra 44con2012Polstra 44con2012
Polstra 44con2012
 
Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 2012Hacking and Forensics on the Go - 44CON 2012
Hacking and Forensics on the Go - 44CON 2012
 
Dru lavigne servers-tutorial
Dru lavigne servers-tutorialDru lavigne servers-tutorial
Dru lavigne servers-tutorial
 
Recipe of a linux Live CD (archived)
Recipe of a linux Live CD (archived)Recipe of a linux Live CD (archived)
Recipe of a linux Live CD (archived)
 
Linux conf-admin
Linux conf-adminLinux conf-admin
Linux conf-admin
 
Linux Conf Admin
Linux Conf AdminLinux Conf Admin
Linux Conf Admin
 
Linux conf-admin
Linux conf-adminLinux conf-admin
Linux conf-admin
 
A3Sec Advanced Deployment System
A3Sec Advanced Deployment SystemA3Sec Advanced Deployment System
A3Sec Advanced Deployment System
 
Distributed Compiler Icecc
Distributed Compiler IceccDistributed Compiler Icecc
Distributed Compiler Icecc
 
Perfect Linux Desktop - OpenSuSE 12.2
Perfect Linux Desktop - OpenSuSE 12.2Perfect Linux Desktop - OpenSuSE 12.2
Perfect Linux Desktop - OpenSuSE 12.2
 
Snapshots, Replication, and Boot-Environments by Kris Moore
Snapshots, Replication, and Boot-Environments by Kris Moore Snapshots, Replication, and Boot-Environments by Kris Moore
Snapshots, Replication, and Boot-Environments by Kris Moore
 
linux minimal os tutorial - by shatrix
linux minimal os tutorial - by shatrixlinux minimal os tutorial - by shatrix
linux minimal os tutorial - by shatrix
 
Oracle11g On Fedora14
Oracle11g On Fedora14Oracle11g On Fedora14
Oracle11g On Fedora14
 
Oracle11g on fedora14
Oracle11g on fedora14Oracle11g on fedora14
Oracle11g on fedora14
 
Linux Installation
Linux InstallationLinux Installation
Linux Installation
 
Xen time machine
Xen time machineXen time machine
Xen time machine
 
FreeBSD Portscamp, Kuala Lumpur 2016
FreeBSD Portscamp, Kuala Lumpur 2016FreeBSD Portscamp, Kuala Lumpur 2016
FreeBSD Portscamp, Kuala Lumpur 2016
 
olf10
olf10olf10
olf10
 

Recently uploaded

Knowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and backKnowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and back
Elena Simperl
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Inflectra
 
State of ICS and IoT Cyber Threat Landscape Report 2024 preview
State of ICS and IoT Cyber Threat Landscape Report 2024 previewState of ICS and IoT Cyber Threat Landscape Report 2024 preview
State of ICS and IoT Cyber Threat Landscape Report 2024 preview
Prayukth K V
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
UiPathCommunity
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
Product School
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Alan Dix
 
UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3
DianaGray10
 
Bits & Pixels using AI for Good.........
Bits & Pixels using AI for Good.........Bits & Pixels using AI for Good.........
Bits & Pixels using AI for Good.........
Alison B. Lowndes
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
Product School
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
Ana-Maria Mihalceanu
 
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Product School
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
ThousandEyes
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance
 
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdfSmart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
91mobiles
 
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
Sri Ambati
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
Cheryl Hung
 
The Future of Platform Engineering
The Future of Platform EngineeringThe Future of Platform Engineering
The Future of Platform Engineering
Jemma Hussein Allen
 
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
James Anderson
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
Kari Kakkonen
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
KatiaHIMEUR1
 

Recently uploaded (20)

Knowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and backKnowledge engineering: from people to machines and back
Knowledge engineering: from people to machines and back
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
 
State of ICS and IoT Cyber Threat Landscape Report 2024 preview
State of ICS and IoT Cyber Threat Landscape Report 2024 previewState of ICS and IoT Cyber Threat Landscape Report 2024 preview
State of ICS and IoT Cyber Threat Landscape Report 2024 preview
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
 
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
 
UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3UiPath Test Automation using UiPath Test Suite series, part 3
UiPath Test Automation using UiPath Test Suite series, part 3
 
Bits & Pixels using AI for Good.........
Bits & Pixels using AI for Good.........Bits & Pixels using AI for Good.........
Bits & Pixels using AI for Good.........
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
 
Monitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR EventsMonitoring Java Application Security with JDK Tools and JFR Events
Monitoring Java Application Security with JDK Tools and JFR Events
 
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
 
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdfSmart TV Buyer Insights Survey 2024 by 91mobiles.pdf
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf
 
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
 
The Future of Platform Engineering
The Future of Platform EngineeringThe Future of Platform Engineering
The Future of Platform Engineering
 
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
 

BSDCan2013

  • 1. Automating the deployment of FreeBSD & PC-BSD® systemsAutomating the deployment of FreeBSD & PC-BSD® systems BSDCan 2013BSDCan 2013 Kris MooreKris Moore PC-BSD / iXsystemsPC-BSD / iXsystems kris@pcbsd.orgkris@pcbsd.org
  • 2. The problem:The problem: You want to (quickly) deploy multipleYou want to (quickly) deploy multiple FreeBSD or PC-BSD systems.FreeBSD or PC-BSD systems. You like what you hear about this wholeYou like what you hear about this whole “ZFS” thing“ZFS” thing
  • 3. There are currently two ways to accomplishThere are currently two ways to accomplish this:this:
  • 4. Solution #1Solution #1 ● Write your own installation scriptsWrite your own installation scripts ● Configure network booting by handConfigure network booting by hand ● Maintain as necessaryMaintain as necessary
  • 5. When to consider Solution #1:When to consider Solution #1: ● You have a very unique installationYou have a very unique installation ● You are a FreeBSD God – Congrats!You are a FreeBSD God – Congrats!
  • 6. When to not consider Solution #1:When to not consider Solution #1: ● Manual disk partitioning isn't your thingManual disk partitioning isn't your thing ● You work for a livingYou work for a living
  • 7. Solution #2Solution #2 ● Use theUse the pc-thinclientpc-thinclient utility included withutility included with PC-BSD & TrueOSPC-BSD & TrueOS
  • 8. When to consider Solution #2:When to consider Solution #2: ● You don't enjoy disk partitioningYou don't enjoy disk partitioning ● You want to have a weekendYou want to have a weekend
  • 9. What you will need:What you will need: ● A system with a network interface (2)?A system with a network interface (2)? ● Running PC-BSD 9.1 / TrueOS 9.1Running PC-BSD 9.1 / TrueOS 9.1 ● A few GB of disk spaceA few GB of disk space
  • 10. Getting StartedGetting Started ● First, checkout a FreeBSD ports treeFirst, checkout a FreeBSD ports tree On TrueOSOn TrueOS # portsnap fetch extract update# portsnap fetch extract update
  • 11. On PC-BSDOn PC-BSD Control panel → System Manager → TasksControl panel → System Manager → Tasks → Fetch Ports→ Fetch Ports
  • 14. Getting StartedGetting Started ● Install serverInstall server ● Or desktop “Thin-Client” serverOr desktop “Thin-Client” server
  • 16. What is Remote Desktop?What is Remote Desktop? ● The thin-client utility can operate bothThe thin-client utility can operate both install server or desktop serverinstall server or desktop server ● Allows diskless clients to boot via PXEAllows diskless clients to boot via PXE ● Brings up GDM login on clientBrings up GDM login on client
  • 17. Why would you run Remote Desktop?Why would you run Remote Desktop? ● You have a bunch of low-end clientsYou have a bunch of low-end clients ● You want to simplify backup, security andYou want to simplify backup, security and managementmanagement
  • 18. Why should you not run Remote Desktop?Why should you not run Remote Desktop? ● You don't have a server with horsepowerYou don't have a server with horsepower ● You need sound support on the clientsYou need sound support on the clients
  • 19. Back to your previously scheduledBack to your previously scheduled presentationpresentation
  • 20. Getting StartedGetting Started ● Will run DHCPDWill run DHCPD ● Be careful which cable is usedBe careful which cable is used
  • 22. Getting startedGetting started ● You may now connect a client systemYou may now connect a client system ● To PXE boot, you may need to checkTo PXE boot, you may need to check BIOS on client firstBIOS on client first
  • 23. Its Demo time!Its Demo time!
  • 24. Customizing the installCustomizing the install ● Of course you will want your ownOf course you will want your own installation options / archives, etcinstallation options / archives, etc ● It is possible to adjust entirely on serverIt is possible to adjust entirely on server sideside
  • 25. The two key directories:The two key directories: ● /home/thinclient/installscripts/home/thinclient/installscripts ● /home/thinclient/installarchive/home/thinclient/installarchive Client mounted as:Client mounted as: ● /installscripts/installscripts ● /installarchive/installarchive
  • 26. ● pc-sysinstall.example can be used as apc-sysinstall.example can be used as a template for other installationstemplate for other installations Example #1Example #1 Changing to ZFSChanging to ZFS
  • 27. Example disk layout:Example disk layout: disk0-part=UFS+SUJ 1000 /disk0-part=UFS+SUJ 1000 / disk0-part=SWAP 2000 nonedisk0-part=SWAP 2000 none disk0-part=UFS+SUJ 0 /usrdisk0-part=UFS+SUJ 0 /usr commitDiskLabelcommitDiskLabel Converted to ZFS becomes:Converted to ZFS becomes: disk0-part=ZFS 0 /,/root,/tmp,/usr,/vardisk0-part=ZFS 0 /,/root,/tmp,/usr,/var commitDiskLabelcommitDiskLabel
  • 28. Example #2Example #2 Changing installation archiveChanging installation archive
  • 29. Example install archive:Example install archive: installMedium=localinstallMedium=local localPath=/installarchivelocalPath=/installarchive packageType=tarpackageType=tar installFile=fbsd-release.txzinstallFile=fbsd-release.txz Changed to custom archive:Changed to custom archive: installMedium=localinstallMedium=local localPath=/installarchivelocalPath=/installarchive packageType=tarpackageType=tar installFile=fbsd-8.4-amd64.txzinstallFile=fbsd-8.4-amd64.txz
  • 30. Example #3Example #3 User ManagementUser Management
  • 31. # Root Password# Root Password rootPass=rootrootPass=root # User Setup# User Setup userName=krisuserName=kris userComment=Kris MooreuserComment=Kris Moore userPass=krisuserPass=kris userShell=/bin/cshuserShell=/bin/csh userHome=/home/krisuserHome=/home/kris userGroups=wheel,operatoruserGroups=wheel,operator commitUsercommitUser
  • 32. Example #4Example #4 Advanced CommandsAdvanced Commands
  • 33. # Run command inside installed system# Run command inside installed system runCommand=sh /root/initme.shrunCommand=sh /root/initme.sh # Run command outside installed system# Run command outside installed system runExtCommand=mount -t devfs devfs ${FSMNT}/devrunExtCommand=mount -t devfs devfs ${FSMNT}/dev
  • 34. Example #5Example #5 Packages, oh my!Packages, oh my!
  • 35. installPackages=apache22 mysql55-serverinstallPackages=apache22 mysql55-server Can use short package names, or fullCan use short package names, or full versions.versions.
  • 36. PKGNG supportPKGNG support ● Checks package format before installChecks package format before install ● Will “boot-strap” PKGNG if necessaryWill “boot-strap” PKGNG if necessary
  • 37. Example #6Example #6 FreeBSD dist filesFreeBSD dist files
  • 38. # Install from vanilla FreeBSD dist files# Install from vanilla FreeBSD dist files installMedium=localinstallMedium=local localPath=/distfiles/9.1-Release/amd64/distlocalPath=/distfiles/9.1-Release/amd64/dist packageType=distpackageType=dist distFiles=base doc games kernel lib32distFiles=base doc games kernel lib32
  • 39. Putting the Automated in “Fully Automated”Putting the Automated in “Fully Automated” File: /home/thinclient/installscripts/unattended.cfgFile: /home/thinclient/installscripts/unattended.cfg ● If config exists, the client will boot andIf config exists, the client will boot and begin installation after 30 seconds.begin installation after 30 seconds. ● System will shutdown when finishedSystem will shutdown when finished ● USE WITH CAUTION!!USE WITH CAUTION!!
  • 40. ScalabilityScalability ● All CPU instructions are run on the clientAll CPU instructions are run on the client ● Server is in essence a large “File Server”Server is in essence a large “File Server” ● Will be mostly disk IO / network speedWill be mostly disk IO / network speed dependentdependent
  • 41. ScalabilityScalability ● Default DHCP server is configured for 99Default DHCP server is configured for 99 clientsclients ● To adjust edit the file:To adjust edit the file: ● /usr/local/etc/dhcpd.conf/usr/local/etc/dhcpd.conf ● range 192.168.2.100 192.168.2.199;range 192.168.2.100 192.168.2.199;
  • 42. Tips and TricksTips and Tricks ● The PC-BSD GUI installer is your friendThe PC-BSD GUI installer is your friend ● Every install is a scripted installEvery install is a scripted install ● After installation a copy of the pc-After installation a copy of the pc- sysinstall.cfg file is saved to:sysinstall.cfg file is saved to: ● /root/pc-sysinstallcfg/root/pc-sysinstallcfg
  • 43. Tips and TricksTips and Tricks ● To greatly speed up installations, use ZFSTo greatly speed up installations, use ZFS mirrored drives, SSD, or even TMPFSmirrored drives, SSD, or even TMPFS
  • 44. What's next?What's next? ● Improvements to pc-sysinstallImprovements to pc-sysinstall ● Faster setup of initial thin-clientFaster setup of initial thin-client environmentenvironment