Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from this space and version 8.0.0


HTML
<div id="google_translate_element"></div>
<script type="text/javascript">
function googleTranslateElementInit() {
  new google.translate.TranslateElement({pageLanguage: 'en'}, 'google_translate_element');
}
</script>
<script type="text/javascript" src="//translate.google.com/translate_a/element.js?cb=googleTranslateElementInit"></script>

Configuring Secure64 x86 Support

Table of Contents


Note
titleA note on Ports

ProVision uses port 22 to communicate with and configure Secure64 infrastructure - please ensure that this is addressed in any ACLs/firewalls

ProVision also uses port 53 to do zone checks if the DNS Module is enabled and in use. Please ensure that your Secure64 infrastructure is configured to accept DNS lookups from the ProVision server


The initial setup of the Secure64 x86 Authoritative server is as follows:

Configuring Secure64 x86 Authority Server

  1. Using the terminal, SSH to the desired S64 x86 server. All the configurations and zones will be pushed in /srv/knot/6c/
  2. Create new user "provision"

    Code Block
    languagebash
    sudo useradd provision
    sudo passwd provision


  3. Create a directory called "6c" that will be used for the ProVision exports and set the permissions, so that we can push the configurations in /srv/knot/

    Code Block
    languagebash
    sudo mkdir --mode=u+rwx,g+wrs,o-rwx /srv/knot/6c
    sudo chown provision.knot /srv/knot/6c


  4. In order to properly reload the server without asking for a password from ProVision, we must edit the sudoers file to let the user "provision" execute "sudo knotc reload" after push. So, add the following line at the end of /etc/sudoers:

    Code Block
    languagebash
    provision ALL=(ALL) NOPASSWD: /sbin/knotc reload


  5. Add knot to be inside the "provision" group by editing the /etc/group as follows:

    Code Block
    languagebash
    provision:x:120:knot


  6. Add provision to be a part of the knot group (in case knot replaces a zone), so that Provision is able to replace it again on push. So, we must once again edit /etc/group, as follows:

    Code Block
    languagebash
    knot:x:119:provision


  7. Configure ProVision in the S64 server and add the include directive in /etc/knot/knot.conf:

    Code Block
    languagebash
    include: /srv/knot/6c/6c_knot.conf


  8. Open the ProVision UI and navigate to the DNS section to add the S64x86 server. While adding server settings, you must verify that Post Command is set to “sudo knotc reload” and the configuration path to “/srv/knot/6c/6c_knot.conf”


  9. An example ProVision server configuration for the S64 x86 server is shown below:


Expand
titleClick here for an example configuration...

Image Added