Ho kenya le ho sebetsa ha Rudder

Tlhaloso

“Setsoalle” sa rōna se qalile lilemong tse peli tse fetileng. Ke fihlile sebakeng se secha sa mosebetsi, moo mookameli oa pele a ileng a ntlohela software ena e le lefa. Ha kea ka ka fumana letho Marang-rang ntle le litokomane tsa molao. Esita le hona joale, haeba u sebelisa "rudder" ea google, maemong a 99% e tla tla le: li-hellm tsa likepe le li-quadcopter. Ke ile ka khona ho fumana mokhoa oa ho bua le eena. Kaha sechaba sa software ena ha se na thuso, ke ile ka etsa qeto ea ho arolelana phihlelo ea ka le rake. Ke nahana hore sena se tla ba molemo ho motho e mong.

Kahoo Rudder

Rudder ke sesebelisoa se bulehileng sa tlhahlobo le taolo ea tlhophiso e thusang ho iketsetsa tlhophiso ea sistimi. E sebetsa ka molao-motheo oa ho kenya moemeli bakeng sa mosebedisi e mong le e mong. Ka sehokelo se bonolo, re ka beha leihlo hore na meralo ea rona ea motheo e lumellana hakae le maano ohle a boletsoeng.

Sebelisa

Ka tlase ke tla thathamisa seo ke se sebelisang Rudder.

• Taolo ea lifaele le litlhophiso: ./ssh/authorized_keys ; /etc/hosts ; iptables; (mme joale moo monahano oa hau o lebisang teng)

• Taolo ea liphutheloana tse kentsoeng: zabbix.agent kapa software efe kapa efe

Ho kenya seva

Haufinyane tjena ke ntlafalitse ho tloha ho mofuta oa 5 ho isa ho 6.1, tsohle li tsamaile hantle. Ka tlase ke litaelo tsa Deban/Ubuntu empa ho boetse ho na le tšehetso: RHEL/CentOS и Sles.

Ke tla pata ho kenngoa ho ba senyang e le hore ke se ke ka u sitisa.

mosenyi

Ho itšetleha

Rudder-server e hloka Java RE bonyane mofuta oa 8, e ka kenngoa ho tsoa sebakeng sa polokelo e tloaelehileng:

E hlahloba ho bona hore na e kentsoe

java -version

haeba sephetho

-bash: java: command not found

ebe kenya

apt install default-jre

Seva

Ho kenya senotlolo

wget --quiet -O- "https://repository.rudder.io/apt/rudder_apt_key.pub" | sudo apt-key add -

Khatiso ke ena

pub  4096R/474A19E8 2011-12-15 Rudder Project (release key) <[email protected]>
      Key fingerprint = 7C16 9817 7904 212D D58C  B4D1 9322 C330 474A 19E8

Kaha ha re na peeletso e lefuoang, re eketsa polokelo e latelang

echo "deb http://repository.rudder.io/apt/6.1/ $(lsb_release -cs) main" > /etc/apt/sources.list.d/rudder.list

Ntlafatsa lenane la polokelo 'me u kenye seva

apt update
apt install rudder-server-root

Etsa tsamaiso ea basebelisi

rudder server create-user -u admin -p "Ваш Пароль"

Nakong e tlang re ka laola basebelisi ka config

Ke phetho, seva se lokile.

Tokiso ea seva

Hona joale o hloka ho eketsa liaterese tsa IP tsa baemeli kapa subnet eohle ho moemeli oa rudder, re tsepamisa maikutlo ho leano la ts'ireletso.

Litlhophiso -> Kakaretso

Lebaleng la "Eketsa marang-rang", kenya aterese le mask ka mokhoa oa xxxx/xx. E le ho lumella ho fihlella ho tsoa ho liaterese tsohle tsa marang-rang a ka hare (Ntle le haeba sena e le marang-rang a liteko 'me u ka morao NAT) kenya: 0.0.0.0/0

Bohlokoa - ka mor'a ho eketsa aterese ea ip, u se ke ua lebala ho tobetsa Boloka liphetoho, ho seng joalo ha ho letho le tla bolokeha.

Likepe

Bula likou tse latelang ho seva

• 443 - tcp

• 5309 - tcp

• 514 - tse ling

Re hlophisitse setaele sa pele sa seva.

Ho kenya Moemeli

mosenyi

Ho eketsa senotlolo

wget --quiet -O- "https://repository.rudder.io/apt/rudder_apt_key.pub" | sudo apt-key add -

Monwana wa senotlolo

pub  4096R/474A19E8 2011-12-15 Rudder Project (release key) <[email protected]>
      Key fingerprint = 7C16 9817 7904 212D D58C  B4D1 9322 C330 474A 19E8

Ho eketsa polokelo

echo "deb http://repository.rudder.io/apt/6.1/ $(lsb_release -cs) main" > /etc/apt/sources.list.d/rudder.list

Ho kenya moemeli

apt update
apt install rudder-agent

Tlhophiso ea moemeli

Re bontša moemeli aterese ea IP ea seva sa pholisi

rudder agent policy-server <rudder server ip or hostname> #Без скобок. Можно также использовать доменное имя 

Ka ho sebelisa taelo e latelang re tla romela kopo ea ho kenyelletsa moemeli e mocha ho seva, ka metsotso e seng mekae e tla hlaha lethathamong la baemeli ba bacha, ke tla hlalosa mokhoa oa ho eketsa karolong e latelang.

rudder agent inventory

Re ka boela ra qobella moemeli hore a qale 'me o tla romela kopo hang-hang

rudder agent run

Akhente ea rona e se e thehiloe, ha re tsoeleng pele.

Ho eketsa liakhente

Kena

https://127.0.0.1/rudder/index.html

Moemeli oa hau o tla hlaha karolong ea "Amohela li-node tse ncha", hlahloba lebokose ebe o tobetsa Amohela

E lokela ho nka nako e nyenyane ho fihlela tsamaiso e hlahloba seva bakeng sa ho lumellana le eona

Ho theha lihlopha tsa li-server

Ha re theheng sehlopha (e ntse e le boithabiso), ha re tsebe hore na ke hobane'ng ha baetsi ba lihlopha ba entse lihlopha tse sehlōhō joalo, empa ha ke ntse ke e utloisisa, ha ho na tsela e 'ngoe. Eya ho Tsamaiso ea Node -> Sehlopha sa lihlopha ebe o tobetsa ho Etsa, khetha sehlopha se tsitsitseng le lebitso.

Re sefa seva eo re e hlokang ka likarolo tse khethehileng, mohlala, ka aterese ea ip, le ho boloka

Sehlopha se thehiloe.

Ho theha melao

Eya ho Leano la Tlhophiso → Melao 'me u thehe molao o mocha

Kenya sehlopha se lokiselitsoeng pejana (sena se ka etsoa hamorao)

'Me re theha taelo e ncha

Ha re theheng taelo ea ho kenya linotlolo tsa sechaba ho .ssh/authorized_keys. Ke sebelisa sena ha mosebeletsi e mocha a tsamaea, kapa bakeng sa reinsurance, mohlala, haeba motho e mong a khaola senotlolo sa ka ka phoso.

Eya ho Leano la Tlhophiso → Litaelo ka letsohong le letšehali re bona "laeborari ea Directive" Fumana "Fihlello e hole → Linotlolo tse lumelletsoeng tsa SSH", ka ho le letona tobetsa Theha Directive.

Re kenya lintlha ka mosebelisi ebe re kenya senotlolo sa hae. E latelang, khetha leano la kopo

• Global - Leano la kamehla

• Qobella - Phetha ho li-server tse khethiloeng

• Audit - E tla etsa tlhahlobo le ho bolela hore na ke bareki bafe ba nang le senotlolo

Etsa bonnete ba ho bontša molao oa rona

Ebe u boloka 'me u qetile.

Ho hlahloba

Senotlolo se kentsoe ka katleho

Li-buns

Moemeli o fana ka lintlha tse felletseng mabapi le seva. Manane a liphutheloana tse kentsoeng, li-interfaces, likou tse bulehileng le tse ling tse ngata, tseo u ka li bonang skrineng e ka tlase

U ka kenya le ho laola software eseng feela ho Linux empa hape le ho Windows, ha kea ka ka sheba ea morao-rao, ho ne ho sa hlokahale.

Ho tsoa ho mongoli

U ka 'na ua botsa, ke hobane'ng ha u qapa lebili hape haeba bohlale le popi li se li qapiloe khale?

Kea araba: Ansible e na le mefokolo, mohlala, ha re bone hore na tlhophiso ena e boemong bofe hona joale, kapa boemo bo tloaelehileng ha u qala karolo kapa buka ea ho bapala 'me liphoso tsa ho senyeha li hlaha,' me u qala ho hloella ho seva ho bona hore na ke eng. sephutheloana se ntlafalitsoe moo. 'Me ha kea sebetsa le popi..

Na ho na le mathata ho Rudder? Tse ngata. (empa ka tsela, ha ke e-so bone sena ho mofuta oa 6 hajoale), se fellang ka tlhophiso e rarahaneng haholo le sebopeho se sa utloahaleng.

Na ho na le melemo? Hape ho na le melemo e mengata: Ho fapana le Ansible e tsebahalang, re na le sehokelo sa webo moo u ka bonang ho latela melao eo re e sebelisitseng. Mohlala, na likou li kenelletse lefats'eng, boemo ba firewall ke bofe, ke li-agent tsa ts'ireletso tse kentsoeng kapa lisebelisoa tse ling.

Software ena e phethahetse bakeng sa lefapha la ts'ireletso ea tlhahisoleseding, kaha boemo ba lisebelisoa bo tla lula bo le ka pel'a mahlo a hau, 'me haeba leha e le efe ea melao e khantša ka bofubelu, joale sena ke lebaka la ho etela seva. Joalokaha ke boletse, ke 'nile ka sebelisa Rudder ka lilemo tse 2 hona joale,' me haeba u e tsuba hanyenyane, bophelo bo ntlafala. Ntho e thata ka ho fetisisa mohahong o moholo oa motheo ke hore ha u hopole hore na seva se boemong bofe, ebang June o hlolohetsoe ho kenya baemeli ba ts'ireletso kapa hore na o lokiselitse li-iptables ka nepo, empa rudder e tla u thusa hore u lule u tseba liketsahalo tsohle. Ho tseba ho bolela ho hlomela! )

PS E bile ho feta kamoo ke neng ke rerile kateng, nke ke ka hlalosa mokhoa oa ho kenya liphutheloana, haeba ka tšohanyetso ho na le likōpo, ke tla ngola karolo ea bobeli.

PSS Sengoliloeng ke sa merero ea tlhahisoleseling, ke nkile qeto ea ho se arolelana kaha ho na le tlhahisoleseling e nyane haholo inthaneteng. Mohlomong sena se tla khahla motho e mong. Ebang le letsatsi le monate, metsoalle e ratehang)

E le papatso

Li-server tsa Epic - sena ke VPS ho Linux kapa Windows e nang le li-processor tse matla tsa lelapa tsa AMD EPYC le li-drive tsa Intel NVMe tse potlakileng haholo. Potlaka ho odara!

Source: www.habr.com