diff --git a/sysadm/deployment/idrac.rst b/sysadm/deployment/idrac.rst new file mode 100644 --- /dev/null +++ b/sysadm/deployment/idrac.rst @@ -0,0 +1,119 @@ +.. _idrac: + +iDRAC +===== + +.. admonition:: Intended audience + :class: important + + sysadm staff members + +The **integrated Dell Remote Access Controller** is the remote console that's to control +servers (e.g DELL, ...). + +We currently have :ref:`5 iDRACs `: + +* banco +* beaubourg +* hypervisor3 +* orsay +* uffizi + +These instructions are not really vendor-specific and can also be useful for generic +IPMI access or even other kinds of out-of-band management system implementations. + +.. _connection_how_to: + +Connection how to +----------------- + +You will need to install the following packages on your local machine: + +* `sshuttle `_ +* `icedtea-8-plugin `_ + +On debian like machines: + +.. code:: + + apt install sshuttle icedtea-8-plugin + +sshuttle +~~~~~~~~ + +sshuttle uses firewall rules to redirect traffic to a set of ip addresses via a SSH +tunnel. + +By default, you can run sshuttle as your own user. This will forward all TCP packets to +any hosts through the tunnel. + +To be able to use UDP (e.g. for the IPMI SoL), you need to run sshuttle as root with the +tproxy method. + +This needs some `specific routing setup +`_ to work; for instance, in +``/etc/network/interfaces``: + +.. code:: + + # This file describes the network interfaces available on your system + # and how to activate them. For more information, see interfaces(5). + source /etc/network/interfaces.d/* + # The loopback network interface + auto lo + iface lo inet loopback + up ip route add local default dev lo table 100 + up ip rule add fwmark 1 lookup 100 + up ip -6 route add local default dev lo table 100 + up ip -6 rule add fwmark 1 lookup 100 + +Once this is setup and the marked packets are properly routed, sshuttle's tproxy method +can do its work: + +.. code:: + + $ ssh-add .ssh/id_ed25519.inria # or whatever your ssh key is + $ sudo SSH_AUTH_SOCK="$SSH_AUTH_SOCK" sshuttle --python python3 \ + --method tproxy \ + -r ${username}@sesi-ssh.inria.fr 128.93.162.142 128.93.134.0/27 + +In general +~~~~~~~~~~ + +Look up the hostname of the management interface you want to access in the `inventory +`_. + +Authentication +-------------- + +Usernames and passwords for logging in are in the :ref:`credentials storage +`, under ``infra/HOSTNAME/idrac`` + +If not found, check the default DELL or Supermicro/IPMI credentials which are under +``infra/idrac/{dell,supermicro-ipmi}``. + +.. _management_network: + +Management network +------------------ + +The machines hosted in the main Software Heritage bay at Rocquencourt use the +128.93.134.0/27 network. + +The first usable IP address is **128.93.134.1** and the last one **128.93.134.29**. + +**128.93.134.30** is a gateway. + +.. _connect_to_the_serial_console: + +Connect to the serial console +----------------------------- + +The console can be unavailable on the webui on servers with an expired license. The +serial console can still be used. Example: + +:: + + ipmitool -I lanplus -H swh-es3-adm.inria.fr -U root -P sol activate + +NOTE: This command is available on the ``ipmitool`` package. diff --git a/sysadm/deployment/index.rst b/sysadm/deployment/index.rst --- a/sysadm/deployment/index.rst +++ b/sysadm/deployment/index.rst @@ -8,3 +8,4 @@ upgrade-swh-service deploy-lister data-migration + idrac