brandon/oam
1
0
Fork 0
mirror of https://gitea.com/mcereda/oam.git synced 2026-02-09 05:44:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: monitoring server in lxc container example using turris os

Browse Source
This commit is contained in:
Michele Cereda
2023-08-13 04:34:36 +02:00
parent d7c3732e17
commit 0014a1c387
4 changed files with 93 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
knowledge base/apt.md
View File

@@ -71,6 +71,12 @@ apt-check policy 'boinc-client'
# Reconfigure packages.
sudo dpkg-reconfigure 'mariadb-server'
sudo dpkg-reconfigure -p 'low' 'unattended-upgrades'
# Stop installing recommended and suggested packages.
cat > /etc/apt/apt.conf.d/99norecommend << EOF
APT::Install-Recommends "0";
APT::Install-Suggests "0";
EOF
```
## Automate security upgrades
@@ -97,6 +103,12 @@ See [Apt configuration] for more information.
APT::Default-Release "stable";
```
```txt
# /etc/apt/apt.conf.d/99norecommend
APT::Install-Recommends "0";
APT::Install-Suggests "0";
```
```txt
# /etc/apt/apt.conf.d/99parallel-fetch
APT::Acquire::Queue-Mode "access";

1
knowledge base/grafana.md
View File

@@ -140,6 +140,7 @@ $ curl -sS \
| Name | Grafana ID | URLs |
| ------------------ | ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Node exporter full | 1860 | [grafana](https://grafana.com/grafana/dashboards/1860-node-exporter-full/), [github raw](https://raw.githubusercontent.com/rfmoz/grafana-dashboards/master/prometheus/node-exporter-full.json) |
| OpenWRT | 11147 | [grafana](https://grafana.com/grafana/dashboards/11147-openwrt/) |
## Further readings

17
knowledge base/lxc.md
View File

@@ -19,17 +19,20 @@ ls '/usr/share/lxc/templates'
# List the options supported by templates.
lxc-create -t 'download' -h
# Create new containers.
# Create containers.
# Use the 'download' template to choose from a list of distribution.
lxc-create -n 'nas' --template 'download'
lxc-create -n 'nas' -t 'download'
lxc-create --name 'nas' --template 'download' -- \
--server 'images.linuxcontainers.org'
# Create containers non-interactively.
# Values are case sensitive and depend from what is on the server.
lxc-create -n 'pi-hole' -t 'download' -- \
--server 'images.linuxcontainers.org' \
--dist 'debian' --release 'bullseye' --arch 'armhf' --variant 'cloud'
lxc-create -n 'git' -t 'download' -- \
lxc-create -n 'alpine' -t 'download' -- -d 'Alpine' -r '3.18' -a 'armv7l'
lxc-create --name 'pi-hole' --template 'download' -- \
--server 'repo.turris.cz/lxc' \
-d 'Debian' -r 'Bullseye' -a 'armv7l'
--dist 'Ubuntu' --release 'Focal' --arch 'armv7l'
lxc-create … -t 'download' -- -d 'debian' -r 'bookworm' -a 'amd64' \
--server 'images.linuxcontainers.org'
# Start containers.
lxc-start -n 'pi-hole'

91
knowledge base/turris os.md
View File

@@ -15,10 +15,10 @@ Linux distribution based on top of OpenWrt. Check the [website] for more informa
1. [Start containers](#start-containers)
1. [Execute a shell into containers](#execute-a-shell-into-containers)
1. [Start containers at boot](#start-containers-at-boot)
1. [Examples](#examples)
1. [CFEngine hub](#cfengine-hub)
1. [Git server](#git-server)
1. [Pi-hole](#pi-hole)
1. [Example: cfengine hub](#example-cfengine-hub)
1. [Example: git server](#example-git-server)
1. [Example: monitoring](#example-monitoring)
1. [Example: pi-hole](#example-pi-hole)
1. [Hardening](#hardening)
1. [The SFP+ caged module](#the-sfp-caged-module)
1. [Use the SFP module as a LAN port](#use-the-sfp-module-as-a-lan-port)
@@ -71,9 +71,18 @@ reboot
# Gracefully shutdown the device.
poweroff
# List available LXC container images.
# Default source is 'repo.turris.cz/lxc'.
lxc-create -n 'test' -t 'download'; lxc-destroy -n 'test'
lxc-create … -t 'download' -- --server 'images.linuxcontainers.org'
# Create LXC containers.
lxc-create --name 'ubuntu-focal' --template 'download' -- --dist 'Ubuntu' --release 'Focal' --arch 'armv7l' --server 'repo.turris.cz/lxc'
lxc-create … -t 'download' -- --dist 'debian' --release 'bullseye' --arch 'armhf' --server 'images.linuxcontainers.org'
# Default source is 'repo.turris.cz/lxc'.
# Values are case sensitive and depend from what is on the server.
lxc-create -n 'alpine' -t 'download' -- -d 'Alpine' -r '3.18' -a 'armv7l'
lxc-create --name 'ubuntu-focal' --template 'download' -- \
--server 'repo.turris.cz/lxc' \
--dist 'Ubuntu' --release 'Focal' --arch 'armv7l'
# List snapshots.
schnapps list
@@ -181,13 +190,18 @@ Unless otherwise specified:
In shell:
```sh
# List available LXC container images.
# Default source is 'repo.turris.cz/lxc'.
# Values for the template options are case sensitive.
lxc-create --name 'test' --template 'download'
lxc-create -n 'git' -t 'download' -- -d 'Debian' -r 'Bullseye' -a 'armv7l'
lxc-create -n 'pi-hole' -t 'download' --
--server 'images.linuxcontainers.org' \
--dist 'debian' --release 'bullseye' --arch 'armhf'
lxc-create -n 'test' -t 'download'; lxc-destroy -n 'test'
lxc-create … -t 'download' -- --server 'images.linuxcontainers.org'
# Create LXC containers.
# Default source is 'repo.turris.cz/lxc'.
# Values are case sensitive and depend from what is on the server.
lxc-create -n 'pi-hole' -t 'download' -- -d 'Debian' -r 'Bullseye' -a 'armv7l'
lxc-create --name 'pi-hole' --template 'download' -- \
--server 'repo.turris.cz/lxc' \
--dist 'Ubuntu' --release 'Focal' --arch 'armv7l'
```
Using the WebUI:
@@ -257,16 +271,15 @@ config container
option timeout 60
```
### Examples
### Example: cfengine hub
#### CFEngine hub
> CFEngine does not seem to support 32bits ARM processors (but it does support arm64) anymore.
> CFEngine does not seem to support 32bits ARM processors anymore (but it does support arm64).<br/>
> Still, since I am using a 32bit processor this is not doable for me.
<details>
<summary>Old installation test</summary>
> This procedure assumes an LXC container based upon Debian Bullseye.
> This procedure assumes you are using an LXC container based on the Debian Bullseye image.
```sh
# Set the correct hostname.
@@ -283,9 +296,9 @@ config container
</details>
#### Git server
### Example: git server
> This procedure assumes an LXC container based upon Debian Bullseye.
> This procedure assumes you are using an LXC container based on the Debian Bullseye image.
```sh
# Set the correct hostname.
@@ -321,9 +334,45 @@ chsh 'git' -s "$(which 'git-shell')"
exit
```
#### Pi-hole
### Example: monitoring
> This procedure assumes an LXC container based upon Debian Bullseye.
> This procedure assumes you are using an LXC container based on the Debian Bullseye image.
```sh
# Set the correct hostname.
hostnamectl set-hostname 'monitoring'
# Install the requirements
DEBIAN_FRONTEND='noninteractive' apt-get install --assume-yes 'unattended-upgrades' 'wget'
# Stop installing recommended and suggested packages.
cat > /etc/apt/apt.conf.d/99norecommend << EOF
APT::Install-Recommends "0";
APT::Install-Suggests "0";
EOF
# Add Grafana's repository with its key.
wget -q -O /usr/share/keyrings/grafana.key https://apt.grafana.com/gpg.key
echo "deb [signed-by=/usr/share/keyrings/grafana.key] https://apt.grafana.com stable main" | tee -a /etc/apt/sources.list.d/grafana.list
# Install Prometheus and Grafana.
apt update
DEBIAN_FRONTEND='noninteractive' apt-get install --assume-yes 'grafana-enterprise' 'prometheus'
# Configure Prometheus and Grafana.
# See the '/docker/monitoring' example.
# Enable the services.
systemctl enable 'grafana-server.service'
systemctl enable 'prometheus.service'
# All done!
exit
```
### Example: pi-hole
> This procedure assumes you are using an LXC container based on the Debian Bullseye image.
See [Installing pi-hole on Turris Omnia], [Install Pi-hole] and [Pi-Hole on Turris Omnia] for details.