[SAC] [OSGeo] #2452: new VM for demo.pycsw.org

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Keywords: pycsw demo
---------------------------+------------------------
http://demo.pycsw.org is running off the old adhoc machine.

We (pycsw) would like a new VM so we can setup an autodeploy via Docker,
which will lessen the legacy footprint of AdhocVM.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by robe):

I'll start off with 4G RAM, 4 CPU, 100 GB. Is that okay? We can go up if
needed those are just soft-limits so easy to change without rebooting.

I've been slowly resetting up monitoring for all the servers.

Can you see if you can log into here -- https://monitoring.osgeo.org

Once I have the new server setup you'll see metrics for it on the OSGeo7
dashboard.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by robe):

oops sorry url is https://monitor.osgeo.org

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:2&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by tomkralidis):

Specs are great. Yup I can login to https://monitor.osgeo.org/ just fine.

Thanks

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:3&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by robe):

VM is setup, I haven't added it to the monitor yet.

the container is called pycsw and I gave you sudo rights in it.

So you should be able to login with tomkralidis@osgeo7-pycsw and finish
setting it up however you like. It's already got docker installed.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:4&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by robe):

As discussed with Tom on IRC. proxying port 80 on nginx to domain
https://staging.demo.pycsw.osgeo.org/

We'll flip it to demo.pycsw.org once he's done setting it off and shut off
the demo.pycsw.org running on old-adhoc.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:5&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by tomkralidis):

updates:

- can we have a UNIX group {{{pycsw-demo}}} (which includes
{{{tomkralidis}}} for starters)?
- can we enable running docker without sudo for anyone in the {{{pycsw-
demo}}} ? See https://docs.docker.com/engine/install/linux-postinstall
/#manage-docker-as-a-non-root-user for more info

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:6&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by robe):

Tom I can't figure out how to give a different user group access to
docker.
It seems docker is hardwired to accept only docker as a group. I'm sure
it's buried somewhere and we can rename it, but not sure

So what I did instead is this -- which is pretty much following the
directions you had above

{{{
sudo usermod -aG docker tomkralidis #add tom to docker group
sudo usermod -aG docker robe # add regina to docker group
}}}

Then I exited out of pycsw and logged back in and tried doing this. Note
logging out and logging back in is required for new permissions to take
effect.

{{{
  docker run hello-world
}}}

and it was successful. Before that it gave a permission error.

Is that okay, or you really need the group to be called pycsw-demo?

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:7&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by robe):

tomkralidis just one more note -- since you are an admin of this container
you can do anything you want with it including adding new members to
docker group.

The container is snapshotted nightly and 30 days of backup is kept, so if
you screw it up badly we can always restore from a previous backup.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:8&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by tomkralidis):

Thanks Regina, group name {{{docker}}} is just fine, thanks.

I didn't realize it was ok for me to make admin changes, will do so in the
future. As well, thanks for the note about backups. Excellent SAC
services here!

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:9&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: pycsw demo |
---------------------------+------------------------

Comment (by tomkralidis):

I think we are ready for the switchover. Let's discuss on IRC (I am
unsure on how HTTPS will work).

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:10&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution: fixed
Keywords: pycsw demo |
---------------------------+------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed

Comment:

As discussed on irc all set and switched over.

Committed the changes at
https://git.osgeo.org/gitea/sac/osgeo7/commit/fabc16b4749039e3ace34de3a6f3029fa7d8e6eb

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:11&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2452: new VM for demo.pycsw.org
---------------------------+---------------------------------------
Reporter: tomkralidis | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2020-I
Component: Systems Admin | Resolution: fixed
Keywords: pycsw demo |
---------------------------+---------------------------------------
Changes (by robe):

* milestone: Unplanned => Sysadmin Contract 2020-I

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2452#comment:12&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.