Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Create VM

Create the VM(s) where you are going to install SDN-C cluster on Kubernetes with the following:

VCPUs4
Disk20 GB
RAM16 GB


Enable password logging

Do the following steps to enable password logging for unbuntu user in VM:

#PurposeExample
1create password for ubuntu user

ubuntu@sdnc-k8s:~$ sudo passwd ubuntu

sudo: unable to resolve host sdnc-k8s

Enter new UNIX password:  <enter password>

Retype new UNIX password: <repeat entering the same password>

passwd: password updated successfully

2(optional) fix "unable to resolve host" issue

ubuntu@sdnc-k8s:~$ sudo vi /etc/hosts

sudo: unable to resolve host sdnc-k8s

add the host name to the localhost in the following format:

<IP address> <hostname> localhost

3config ssh "PasswordAuthentication" to yes

ubuntu@sdnc-k8s:~$ sudo vi /etc/ssh/sshd_config

find PasswordAuthentication and set its value to yes, so that the line looks like

# Change to no to disable tunnelled clear text passwords
PasswordAuthentication yes

4restart sshd to enable the new config

ubuntu@sdnc-k8s:~$ systemctl restart sshd passwd

==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===

Authentication is required to restart 'ssh.service'.

Authenticating as: Ubuntu (ubuntu)

Password:

==== AUTHENTICATION COMPLETE ===

==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===

Authentication is required to restart 'passwd.service'.

Authenticating as: Ubuntu (ubuntu)

Password:

==== AUTHENTICATION COMPLETE ===

Failed to restart passwd.service: Unit passwd.service not found.


Turnoff Firewall and Allow all incoming HTTP connections through iptables

As part of investigation of ODL clustering in kubernetes network, we turned off firewall by using the following commands:

sudo ufw disable
sudo iptables -I INPUT -j ACCEPT

These commands disables the firewall and allow all incoming HTTP connections. It's not recommneded to do this in the real production envrionment.

We are using them as an easy alternative as we are still in progress of investigating in the development environment under the kubernetes network.



  • No labels