Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • http://wiki.opscode.com/display/chef/Package+Installation+on+Debian+and+Ubuntu** just install "chef" package, chef-server not needed since we use opscode's
    • http://help.opscode.com/kb/start/2-setting-up-your-user-environment (scroll down to section Create your Chef repository)
    • organization key is in vault directory as mifos-validator.pem.cpt (same password as the password vault)
    • when setting up your chef env if you lost your client key or want to generate a new one go to this (replace with your username): http://community.opscode.com/users/YOUR_USERNAME/ (be sure to login again if you don't see the "get private key" link)
    • create ~/.chef/knife.rb. Here's a template:
      No Format
      # Replace USERNAME, ORGANIZATION with yours
      current_dir = File.dirname(__FILE__)
      log_level                :info
      log_location             STDOUT
      node_name                "USERNAME"
      client_key               "#{current_dir}/USERNAME.pem"
      validation_client_name   "ORGANIZATION-validator"
      validation_key           "#{current_dir}/ORGANIZATION-validator.pem"
      chef_server_url          "https://api.opscode.com/organizations/ORGANIZATION"
      cache_type               'BasicFile'
      cache_options( :path => "#{ENV['HOME']}/.chef/checksums" )
      # Customize as necessary. Mifos cookbooks are in the cloud git
      # repository, under chef/cookbooks. Multiple paths are allowed.
      cookbook_path            ["#{ENV['HOME']}/git/mifos-cloud/chef/cookbooks"]
      
    • Copy the keys and knife configuration you downloaded earlier into ~/.chef:
      No Format
      $ mkdir -p ~/.chef
      $ cp USERNAME.pem ~/.chef
      $ cp ORGANIZATION-validator.pem ~/.chef
      $ cp knife.rb ~/.chef
      

...

...

  • Statefiles with lists of latest packages are created periodically (see above).
  • An administrator must keep track of security releases in upstream Ubuntu packages.
  • A groovy script will be created is available to move a customer from one image to the next (it could be an upgrade or just a security update), this script should only be used if the mfi deployment for the environment already exists, volumes created, elastic ips associated etc.  It can be invoked like so
Code Block

groovy upgrade.groovy <mfi e.g. rise> <environment testing|prod> <ami id>

It will then prompt you to verify to continue.  You should check the AMI path, calculated hostnames, etc.  There will be roughly 5 minutes of downtime to change the image (as long as there is not a major mifos upgrade requiring database migrations).

...