|
|
|
|
### This is the main Anvil! configuration file.
|
|
|
|
|
|
|
|
|
|
# To help understand how the Anvil! is used, some features will "call home" to record anonymous information
|
The core logic is done!!!! Still need to finish end-points for the WebUI to hook into, but the core of M3 is complete! Many, many bugs are expected, of course. :)
* Created DRBD->check_if_syncsource() and ->check_if_synctarget() that return '1' if the target host is currently SyncSource or SyncTarget for any resource, respectively.
* Updated DRBD->update_global_common() to return the unified-format diff if any changes were made to global-common.conf.
* Created ScanCore->check_health() that returns the health score for a host. Created ->count_servers() that returns the number of servers on a host, how much RAM is used by those servers and, if available, the estimated migration time of the servers. Updated ->check_temperature() to set/clear/return the time that a host has been in a warning or critical temperature state.
* Finished ScanCore->post_scan_analysis_node()!!! It certainly has bugs, and much testing is needed, but the logic is all in place! Oh what a slog that was... It should be far more intelligent than M2 though, once flushed out and tested.
* Created Server->active_migrations() that returns '1' if any servers are in a migration on an Anvil! system. Updated ->migrate_virsh() to record how long a migration took in the "server::migration_duration" variable, which is averaged by ScanCore->count_servers() to estimate migration times.
* Updated scan-drbd to check/update the global-common.conf file's config at the end of a scan.
* Updated ScanCore itself to not scan when in maintenance mode. Also updated it to call 'anvil-safe-start' when ScanCore starts, so long as it is within ten minutes of the host booting.
Signed-off-by: Digimer <digimer@alteeve.ca>
4 years ago
|
|
|
# about a machine participating in an Anvil! system. An example is DRBD's 'usage-count' option. If you wish
|
|
|
|
|
# to not have this happen, set this to '1'.
|
|
|
|
|
sys::privacy::strong = 0
|
|
|
|
|
|
The core logic is done!!!! Still need to finish end-points for the WebUI to hook into, but the core of M3 is complete! Many, many bugs are expected, of course. :)
* Created DRBD->check_if_syncsource() and ->check_if_synctarget() that return '1' if the target host is currently SyncSource or SyncTarget for any resource, respectively.
* Updated DRBD->update_global_common() to return the unified-format diff if any changes were made to global-common.conf.
* Created ScanCore->check_health() that returns the health score for a host. Created ->count_servers() that returns the number of servers on a host, how much RAM is used by those servers and, if available, the estimated migration time of the servers. Updated ->check_temperature() to set/clear/return the time that a host has been in a warning or critical temperature state.
* Finished ScanCore->post_scan_analysis_node()!!! It certainly has bugs, and much testing is needed, but the logic is all in place! Oh what a slog that was... It should be far more intelligent than M2 though, once flushed out and tested.
* Created Server->active_migrations() that returns '1' if any servers are in a migration on an Anvil! system. Updated ->migrate_virsh() to record how long a migration took in the "server::migration_duration" variable, which is averaged by ScanCore->count_servers() to estimate migration times.
* Updated scan-drbd to check/update the global-common.conf file's config at the end of a scan.
* Updated ScanCore itself to not scan when in maintenance mode. Also updated it to call 'anvil-safe-start' when ScanCore starts, so long as it is within ten minutes of the host booting.
Signed-off-by: Digimer <digimer@alteeve.ca>
4 years ago
|
|
|
### Features
|
|
|
|
|
# Normally, if one node in the Anvil! is healthier than the other, it will pull the servers from the peer
|
|
|
|
|
# on to it. This is a process called "preventative live migration". If you would like to disable this
|
|
|
|
|
# feature, set this to '1'.
|
|
|
|
|
feature::scancore::disable::preventative-live-migration = 0
|
|
|
|
|
|
|
|
|
|
### Database
|
|
|
|
|
# Database connections;
|
|
|
|
|
#
|
|
|
|
|
# Each Anvil! database is defined below using an incrementing counter as the second variable. The value of
|
|
|
|
|
# the second variable is the local 'host_uuid' (via: dmidecode --string system-uuid | perl -ne 'print lc').
|
|
|
|
|
# This ensures that entries can be moved and copied without causing conflicts.
|
|
|
|
|
#
|
|
|
|
|
# There are six variables for each database definition;
|
|
|
|
|
# host = This is the (resolvable) host name or IP address of the peer database.
|
|
|
|
|
# port = This is the TCP port used to connect to the database. By default, it is 5432
|
|
|
|
|
# password = This is the password used to connect to the database.
|
|
|
|
|
# NOTE: Do not directly change the database password. Please use 'anvil-update-password' so that
|
|
|
|
|
# the WebUI, database, nodes and peers are all kept in sync.
|
|
|
|
|
# ping = If set, this will cause a ping to be made against the database server before the actual
|
|
|
|
|
# connection is attempted. This can be useful when peer dashboards are offline for extended
|
|
|
|
|
# periods of time. The value can be any real number and will be used as the timeout for the actual
|
|
|
|
|
# ping. If the peer dashboard is on the same subnet, a value of '0.25' (250ms) should be a good
|
|
|
|
|
# balance between giving the peer a chance to reply and not waiting too long when it is offline.
|
|
|
|
|
# If the peer is remote, you will want to set this to '1' (1000ms) or higher.
|
|
|
|
|
#
|
|
|
|
|
# Setting this to '0' disables pinging before connecting entirely. In this case, if the peer is
|
|
|
|
|
# offline, it will take about 3 seconds on average for the connection attempt to timeout. This
|
|
|
|
|
# might be necessary if the peer dashboard is behind a firewall/router or otherwise can't respond
|
|
|
|
|
# to ICMP pings.
|
|
|
|
|
# NOTE: The database is called 'anvil' and the database owner is 'admin'.
|
|
|
|
|
#database::eec27c2f-2308-4b4f-bd81-24118b53f8a3::host = localhost
|
|
|
|
|
#database::eec27c2f-2308-4b4f-bd81-24118b53f8a3::port = 5432
|
|
|
|
|
#database::eec27c2f-2308-4b4f-bd81-24118b53f8a3::password = Initial1
|
|
|
|
|
#database::eec27c2f-2308-4b4f-bd81-24118b53f8a3::ping = 1
|
|
|
|
|
|
|
|
|
|
# Below are the databases configured for use by this system. Please be careful manually editing them. They
|
|
|
|
|
# are updated by Striker and changes can be overwritten. Please do not alter or remove the 'start db list'
|
|
|
|
|
# and 'end db list' comments below.
|
|
|
|
|
### start db list ###
|
|
|
|
|
### end db list ###
|
|
|
|
|
|
|
|
|
|
# To keep Anvil!'s database growth in check, an auto-archive mechanism is used by some agents where, at the
|
|
|
|
|
# end of each scan, the number of records in the history schema for a given table are counted (restricted to
|
|
|
|
|
# the agent's host, when appropriate).
|
|
|
|
|
#
|
|
|
|
|
# When the number exceeds the trigger, the number of records that are archived is approximately (number of
|
|
|
|
|
# records above trigger + 'count'). This is not an exact number because a representative timestamp will be
|
|
|
|
|
# selected from the hostory schema at this count, and then any record equal to or older than the time stamp
|
|
|
|
|
# is removed.
|
|
|
|
|
#
|
|
|
|
|
# To protect against the potential of using too much disk space, archives are off by default. Under normal
|
|
|
|
|
# behaviour, old records are simple removed. To enable the archive function, set this to '1'.
|
|
|
|
|
#sys::database::archive::save_to_disk = 1
|
|
|
|
|
#
|
|
|
|
|
# When archiving to disk is enabled, to protect against large memory use or long archive times in the case
|
|
|
|
|
# where the number of records to archive are particularly large, the 'division' value is used to break up the
|
|
|
|
|
# archive job into "chunks". Generally speaking, the division should be greater than the count, and never be
|
|
|
|
|
# needed. However, if the archive process takes too long, or if the archive was triggered well above the
|
|
|
|
|
# trigger value, the division can help prevent using too much memory at once. If division is set to '0',
|
|
|
|
|
# archive jobs will never be divided.
|
|
|
|
|
#
|
|
|
|
|
# The archives are all stored in the specified directory using the name format
|
|
|
|
|
# '<agent>.<table>.<timestamp>.bz2' and the archives are synced between dashboards for safe keeping. Archive
|
|
|
|
|
# files are never removed automatically.
|
|
|
|
|
#
|
|
|
|
|
# To disable auto-archiving entirely, set 'trigger' to '0'.
|
|
|
|
|
#
|
|
|
|
|
# NOTE: If the archive directory doesn't exist, Anvil! will create it
|
|
|
|
|
# automatically the first time it is needed.
|
|
|
|
|
sys::database::archive::compress = 1
|
|
|
|
|
sys::database::archive::trigger = 500000
|
|
|
|
|
sys::database::archive::count = 100000
|
|
|
|
|
sys::database::archive::division = 125000
|
|
|
|
|
sys::database::archive::directory = /usr/local/anvil/archives/
|
|
|
|
|
|
|
|
|
|
# This puts a limit on how many queries (writes, generally) to make in a single batch transaction. This is
|
|
|
|
|
# useful when doing very large transacions, like resync'ing a large table, by limiting how long a given
|
|
|
|
|
# transaction can take and how much memory is used.
|
|
|
|
|
sys::database::maximum_batch_size = 25000
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### Apache stuff
|
|
|
|
|
# By default, we try to determine the host type which anvil RPM is installed. If, for some reason, you want
|
|
|
|
|
# to statically assign the host type, you can do so with this variable. Note that this sets the host type of
|
|
|
|
|
# this host only. You will need to set this appropriately on other hosts.
|
|
|
|
|
#
|
|
|
|
|
# Normally, you should not need to set this.
|
|
|
|
|
#sys::host_type = node
|
|
|
|
|
# This configuration file provides a way to override Anvil::Tools' built-in defaults.
|
|
|
|
|
|
|
|
|
|
# This controls the default language. The value is the ISO code of the country's language you want to use by
|
|
|
|
|
# default. Note that the logging language is set with 'defaults::log::language' below.
|
|
|
|
|
# NOTE: Be sure the language exists before changing it!
|
|
|
|
|
defaults::languages::output = en_CA
|
|
|
|
|
|
|
|
|
|
# This controls how many loops Anvil::Tools::Words is allow to make while processing a string. This acts as a
|
|
|
|
|
# mechanism to exit infinite loops, and generally should not need to be changed.
|
|
|
|
|
defaults::limits::string_loops = 1000
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### Logging options
|
|
|
|
|
# This controls whether all database transactions are recorded or not. Genreally this should be left off
|
|
|
|
|
# unless you are debugging the program.
|
|
|
|
|
# WARNING: This ignores 'secure', and will always be logged. Be careful about exposing sensitive data!
|
|
|
|
|
sys::database::log_transactions = 0
|
|
|
|
|
|
|
|
|
|
# By default, if a configured database is not accessible, a log level 1 alert is registered. This can cause a
|
|
|
|
|
# lot of log traffic. If you want to silence these log alerts, you can set the value below to be higher than
|
|
|
|
|
# your current active log level (default is '1', so set to '2' or '3' to silence).
|
|
|
|
|
# NOTE: It's important to only use this temporarily.
|
|
|
|
|
sys::database::failed_connection_log_level = 1
|
|
|
|
|
|
|
|
|
|
# This controls what log facility to use by default.
|
|
|
|
|
# NOTE: This will always be 'authpriv' when a log entry is marked as secure.
|
|
|
|
|
defaults::log::facility = local0
|
|
|
|
|
|
|
|
|
|
# This controls what language logs are recorded in. Be sure that the language exists before changing it!
|
|
|
|
|
defaults::log::language = en_CA
|
|
|
|
|
|
|
|
|
|
# This controls the default log level. See 'perldoc Anvil::Tools::Logs' for details.
|
|
|
|
|
defaults::log::level = 1
|
|
|
|
|
|
|
|
|
|
# This controls whether sensitive log entries are logged or not. Generally, this should be left disabled!
|
|
|
|
|
defaults::log::secure = 0
|
|
|
|
|
|
|
|
|
|
# THis sets the default log server to send the log entries to. Leave it blank in most cases.
|
|
|
|
|
#defaults::log::server =
|
|
|
|
|
|
|
|
|
|
# This sets the default log tag used when logging an entry. Most programs will likely override this.
|
|
|
|
|
defaults::log::tag = anvil
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### Templates
|
|
|
|
|
# This sets the default template used when rendering HTML pages. It must be the same as the directory name
|
|
|
|
|
# under /var/www/html/skins/
|
|
|
|
|
defaults::template::html = alteeve
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### Install Target options
|
|
|
|
|
# Note; Please see 'pxe.txt' for editable templates for 'dhcpd.conf', (tftpboot's BIOS) 'default' and the
|
|
|
|
|
# kickstart templates.
|
|
|
|
|
#
|
|
|
|
|
# This section allows for adapting certain installations of systems via the Install Target feature.
|
|
|
|
|
# Generally, these don't need to be edited.
|
|
|
|
|
#
|
|
|
|
|
# This controls the keyboard configuration. See:
|
|
|
|
|
# - https://docs.fedoraproject.org/en-US/fedora/f28/install-guide/appendixes/Kickstart_Syntax_Reference/#sect-kickstart-commands-keyboard
|
|
|
|
|
#kickstart::keyboard = --vckeymap=us --xlayouts='us'
|
|
|
|
|
#
|
|
|
|
|
# This sets the default password of newly stage-1 built machines. Generally, this shouldn't be change. It is
|
|
|
|
|
# recorded in plain text and it is used in the stage-2 configuration tools.
|
|
|
|
|
#kickstart::password = Initial1
|
|
|
|
|
#
|
|
|
|
|
# This is the system timezone to be set. Generally, it's recommended to leave the Anvil! machines to UTC, but
|
|
|
|
|
# you might want to change this is if you spend time working directly on the various Anvil! cluster machines.
|
|
|
|
|
#kickstart::timezone = Etc/GMT --isUtc
|
|
|
|
|
|
|
|
|
|
# If this is set to '1', the packages used to build machines via the Install Target feature will not
|
|
|
|
|
# auto-update.
|
|
|
|
|
install-manifest::refresh-packages = 1
|
|
|
|
|
|
|
|
|
|
# This controls how often the local RPM repository is checked for updates. The default is '86400' seconds
|
|
|
|
|
# (one day). If anything, you might want to increase this. Common values;
|
|
|
|
|
# 86400 = Once per day
|
|
|
|
|
# 604800 = Once per week
|
|
|
|
|
# 2419200 = Once per month (well, 4 weeks)
|
|
|
|
|
install-manifest::refresh-period = 86400
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### This controls Striker-specific features
|
|
|
|
|
# This can be set a a comma-separated list of packages to be added to Striker's RPM repos. Note that this is
|
|
|
|
|
# only useful is you want to store EL8-specific packages needed outside the Anvil!.
|
|
|
|
|
striker::repo::extra-packages =
|
|
|
|
|
|
|
|
|
|
### System functions
|
|
|
|
|
# The machines used in the Anvil! are treated as appliances, and thus fully under our control. As such, much
|
|
|
|
|
# of the system is monitored, managed and auto-repaired. This can frustrate sysadmins. As such, an admin may
|
|
|
|
|
# use the 'system::*' options to retake control over some system behaviour.
|
|
|
|
|
|
|
|
|
|
# Setting this to '0' will disable auto-management of the firewall.
|
|
|
|
|
sys::manage::firewall = 1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
### Server related options
|
|
|
|
|
# This is the "short list" of servers shown when provisioning a new server. To see the full list of options,
|
|
|
|
|
# run '/usr/bin/osinfo-query os' on any machine in the Anvil!.
|
|
|
|
|
#sys::servers::os_short_list = debian10,fedora32,freebsd12.1,gentoo,macosx10.7,msdos6.22,openbsd6.7,opensuse15.2,rhel5.11,rhel6.10,rhel7.9,rhel8.3,sles12sp5,solaris11,ubuntu20.04,win10,win2k16,win2k19
|
