Novell LINUX ENTERPRISE SERVER 11 - DEPLOYMENT страница 17 Скачать руководство пользователя

Страница: 17 / 322

Part I. Architecture Specific

Installation Considerations

Содержание LINUX ENTERPRISE SERVER 11 - DEPLOYMENT

Страница 1: ...SUSE Linux Enterprise Server www novell com 11 March 23 2009 Deployment Guide...

Страница 2: ...hat this manual specifically for the printed format is reproduced and or distributed for noncommercial use only The express authorization of Novell Inc must be obtained prior to any other use of any m...

Страница 3: ...on x86 AMD64 Intel 64 and Itanium 7 2 1 Required Background 7 2 2 System Requirements for Operating Linux 8 2 3 Installation Considerations 11 2 4 Boot and Installation Media 14 2 5 Installation Proc...

Страница 4: ...on 92 6 5 System Start Up for Installation 93 6 6 The Boot Screen 93 6 7 Welcome 98 6 8 IBM System z Hard Disk Configuration 99 6 9 Installation Mode 101 6 10 Clock and Time Zone 103 6 11 Server Base...

Страница 5: ...3 Additional Options for User Accounts 167 12 4 Changing Default Settings for Local Users 175 12 5 Assigning Users to Groups 176 12 6 Managing Groups 176 12 7 Changing the User Authentication Method 1...

Страница 6: ...with KIWI 260 17 5 For More Information 262 18 Creating Add On Products With Add on Creator 263 18 1 Creating Images 263 18 2 Add On Structure 264 18 3 For More Information 265 19 Creating Images with...

Страница 7: ...21 3 For More Information 302 22 Automated Deployment of Preload Images 303 22 1 Deploying system manually from rescue image 304 22 2 Automated Deployment with PXE Boot 305...

Страница 8: ......

Страница 9: ...often require to prepare images or products furnished with the features that are needed in this special case Several options are described that allow the administrator to prepare this deployment metho...

Страница 10: ...ich lets you specify per program which files the program may read write and execute or the auditing system that reliably collects informa tion about any security relevant events Virtualization with Xe...

Страница 11: ...s for your product 2 Feedback Several feedback channels are available To report bugs for a product component or to submit enhancements requests please use https bugzilla novell com If you are new to B...

Страница 12: ...em64t ipf This paragraph is only relevant for the specified architectures The arrows mark the beginning and the end of the text block ipseries zseries This paragraph is only relevant for the specifie...

Страница 13: ...lization Runs many virtual machines on a single server each with its own instance of an operating system For more information see Virtualization with Xen Virtualization with Xen YaST Several new confi...

Страница 14: ...stateful protocol Oracle Cluster File System 2 OCFS2 is a general purpose journaling file system that is fully integrated in the Linux 2 6 kernel and later Find an overview of OCFS2 in the High Avail...

Страница 15: ...f SUSE Linux Enterprise Server To make sure that your system will run flawlessly always try to use certified hardware The hardware certification process is an ongoing process and the database of certi...

Страница 16: ...s or other causes for downtime or data loss For any serious computing task where data loss could occur a regular backup should be done For optimal security and safe work you should make regular update...

Страница 17: ...Part I Architecture Specific Installation Considerations...

Страница 18: ......

Страница 19: ...and several common known problems Also learn how to control the in stallation provide installation media and boot with regular methods 2 1 Required Background To keep the scope of these guidelines ma...

Страница 20: ...rch Search jsp 2 2 1 Hardware for x86 Computers based on x86 constitute a cost effective way of building high performance systems The preconditions to operating SUSE Linux Enterprise Server on this pl...

Страница 21: ...or firmware must support booting from USB devices Create an bootable USB hard drive with mkbootdisk which is found on the first instal lation DVD in the directory boot i386 or boot x86_64 For more in...

Страница 22: ...over the network This may also be set up with SUSE Linux En terprise Server 2 2 3 Hardware for AMD64 and Intel 64 The AMD64 and Intel 64 architectures support the simple migration of x86 software to...

Страница 23: ...ux Enterprise Server 2 3 Installation Considerations This section encompasses many decisions that need to be made before installing SUSE Linux Enterprise Server on x86 AMD64 Intel 64 and Itanium hardw...

Страница 24: ...This option requires a boot server in the network This PXE or bootp task can be handled by a separate SUSE Linux Enterprise Server SUSE Linux Enterprise Server can also be booted from hard disk For th...

Страница 25: ...work file systems that offer the standard Unix permissions However it may be problematic to boot these because they must be supported by the initramfs before the actual system can start Such instal la...

Страница 26: ...it is possible to boot from a USB hard drive or a floppy disk The respective media must be created with the utility mkbootdisk which can be found together with its documentation on the first CD or DVD...

Страница 27: ...f the steps required for the complete installation of SUSE Linux Enterprise Server in the required mode Part II Manual Deployment page 77 contains a full description of how to install and configure th...

Страница 28: ...the installation in one of several ways The method most frequently used is to install SUSE Linux Enterprise Server from the computer console Other options are available for different situations Find m...

Страница 29: ...on the installation proceeds similarly to the text based installation over this ter minal 2 6 3 Installation with SSH If you do not have direct access to the computer hardware and for example the ins...

Страница 30: ...th the aid of Auto YaST In this case start by installing one SUSE Linux Enterprise Server and use this to create the necessary AutoYaST configuration files AutoYaST is extensively documented in Chapte...

Страница 31: ...r 8 The Boot Loader GRUB Administration Guide Virus Warning after Installation There are BIOS variants that check the structure of the boot sector MBR and er roneously display a virus warning after th...

Страница 32: ...ations the default setting on the installation DVD for SUSE Linux Enterprise Server is that your system is booted from the first hard disk At this point an installed boot loader normally takes over co...

Страница 33: ...To provide you with a guide to help you during the planning phase the minimum requirements are presented here If you want to be sure that a given computer configuration will work find out which comput...

Страница 34: ...bm com systems p linux BladeCenter BladeCenter JS12 BladeCenter JS20 BladeCenter JS21 and BladeCenter JS22 are supported systems 3 1 2 Software Requirements IBM pSeries IBM eServer p5 System p OpenPow...

Страница 35: ...n Section 14 2 1 Setting Up an Installation Server Using YaST page 198 The installation can be controlled with a VNC client For more information about VNC see Section 14 1 1 Simple Remote Installation...

Страница 36: ...w topic iphai_p5 confighmcgs htm Modern Features of IBM eServer p5 Systems IBM eServer p5 systems offer the possibility to partition the system This enables the concurrent operation of up to 254 opera...

Страница 37: ...ition Server Management 2 From the available servers expand the server and partition to install 3 Right click the profile to use for installation and select Properties see Figure 3 1 HMC Server Manage...

Страница 38: ...and partition to install 3 Right click the profile to use for installation and select Properties see Figure 3 1 HMC Server Management Properties page 25 4 In the Logical Partition Profile Properties d...

Страница 39: ...ole during the system check when the system is rebooted IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM...

Страница 40: ...Name 1 Virtual Ethernet loc U9111 520 10D3CCC V1 C3 T1 2 Ethernet loc U787A 001 DNZ00XG P1 T5 3 Ethernet loc U787A 001 DNZ00XG P1 T6 4 IDE CD ROM loc U787A 001 DNZ00XG P4 D3 5 1 SCSI 73407 MB Harddisk...

Страница 41: ...pe rescue to start the rescue system on this CD DVD Welcome to yaboot version 1 3 11 SuSE Enter help to get some basic usage information boot Type install and press Enter To read the installation data...

Страница 42: ...n on IBM eServer p5 System p and OpenPower Models page 24 This enables the concurrent operation of up to 16 operating systems on one machine These operating systems are installed in LPARs logical part...

Страница 43: ...c tion 15 1 Using the YaST Partitioner page 227 For more information see http publib boulder ibm com infocenter eserver v1r2s en_US index htm info iphai confighmcgs htm Setting Up the Installation Sou...

Страница 44: ...e the SCSI devices are checked Select 6 MultiBoot to enter the Multiboot dialog See Figure 3 4 Multiboot Dialog page 32 Figure 3 4 Multiboot Dialog Version M2P01113 c Copyright IBM Corp 2000 All right...

Страница 45: ...thernet slot 2 7 None X Exit 3 Booting from the CD ROM Drive Select the respective CD ROM drive 3 in this example The system reads from the CD ROM drive and displays the identstring 1 SuSE SLE 11 GA A...

Страница 46: ...Installation on IBM JSxx BladeCenter This section describes the preparatory steps for the installation of SUSE Linux Enter prise Server on JSxx Blades It covers installation using the CD ROM drive of...

Страница 47: ...nge Media Tray Owner of the new window Then set up the CD ROM drive as a boot device Do this by selecting Blade Tasks then Configuration while in the BladeCenter Management Module Then select the JSxx...

Страница 48: ...ect to the BladeCenter with the command telnet bladecenter and log in username user password system The command env T system blade bay number determines for which JSxx Blade the subsequent commands ar...

Страница 49: ...o SuSE SLE 11 GA Type install to start the YaST installer on this CD DVD Type slp to start the YaST install via network Type rescue to start the rescue system on this CD DVD Welcome to yaboot version...

Страница 50: ......

Страница 51: ...also covers the different installation types how to do an IPL for the first installation and information about the IOCDS 4 1 1 System Requirements This section provides a list of hardware for IBM Syst...

Страница 52: ...C is used 512MB of memory is required as a minimum otherwise the installation attempt is likely to fail Further note that the number of devices visible to the z VM guest or LPAR image affects memory r...

Страница 53: ...option is not available and you cannot use z VM for installing the system you need to IPL from a channel attached tape with the tapeipl kernel the parmfile and the initrd Thus you need access to a tap...

Страница 54: ...standard Unix tool that should be present on any Unix or Linux system For Windows there is an SSH client called Putty It is free to use and is available from http www chiark greenend org uk sgtatham...

Страница 55: ...d IPLing the installed system LPAR If you install SUSE Linux Enterprise Server for IBM System z into a separate logical partition LPAR allow SUSE Linux Enterprise Server to use a special part of physi...

Страница 56: ...comfortable administration it is recommended to create a user linuxmnt that owns a minidisk with the files and scripts needed for IPL This minidisk is then accessed read only by the Linux guests Load...

Страница 57: ...s Consider the definition of the necessary resources in advance when plan ning the setup for SUSE Linux Enterprise Server on IBM System z This example shows how to dedicate a DASD to one specific LPAR...

Страница 58: ...A IODEVICE ADDRESS FEFE 001 CUNUMBR FE00 UNIT OSAD 4 2 Preparing for Installation In this section learn how to make the data accessible for installation install SUSE Linux Enterprise Server using diff...

Страница 59: ...es with NFS Exporting the file system root does not imply the export of mounted devices such as DVD Explicitly name the mount point in etc exports media dvd ro After changing this file restart the NFS...

Страница 60: ...tion SSH also provides a graphical installation by tunneling the X connection through SSH with ssh X Using a Microsoft Windows Workstation If there is a Microsoft Windows workstation available in your...

Страница 61: ...VD as described in Section Load from SCSI Attached DVD page 45 the installation system use the DVD as the installation medium In that case you do not need the installation media on an FTP NFS or SMB s...

Страница 62: ...Start installation using YaST and IPL the installed system See Chapter 6 Instal lation with YaST page 89 Procedure 4 2 Installation Overview of z VM Installation 1 Prepare the devices needed for insta...

Страница 63: ...s example defines one DASD one OSA 2 network device and a tape device for LPAR Z1 For further information about how to set up the IOCDS for Linux refer to IBM hardware documentation of your machine Ex...

Страница 64: ...xtend able up to 1024 MB 32 MB of expanded RAM XSTORE some minidisks MDISK two CPUs and an OSA QDIO device TIP Assigning Memory to z VM guests When assigning memory to a z VM guest make sure that the...

Страница 65: ...INT 019E 019E RR LINK MAINT 019D 019D RR MINIDISK DEFINITIONS MDISK 201 3390 0001 0050 DASD40 MR ONE4ME TWO4ME THR4ME MDISK 150 3390 0052 0200 DASD40 MR ONE4ME TWO4ME THR4ME MDISK 151 3390 0253 2800 D...

Страница 66: ...ectory of the first CD ROM then select continue In the list of options that appears choose the default selection Operating system messages should now show the kernel boot messages IPL from FCP Attache...

Страница 67: ...d locsite fix 1024 Example 4 6 REXX Script to Create an IPLable Tape REWIND 181 FILEDEF IN1 DISK SLES11 IMAGE A FILEDEF IN2 DISK SLES11 PARM A FILEDEF IN3 DISK SLES11 INITRD A FILEDEF OUT TAP1 RECFM F...

Страница 68: ...lable by FTP within your network From this directory get the files vmrdr ikr initrd parmfile and sles11 exec Transfer the files with a fixed block size of 80 characters Specify it with the FTP command...

Страница 69: ...ec Command get media dvd1 boot s390x initrd sles11 initrd 200 PORT Command successful 150 Opening BINARY mode data connection for media dvd1 boot s390x initrd 12654815 bytes 226 Transfer complete 1219...

Страница 70: ...s boot messages To continue the installation proceed with Section z VM Installation page 60 IPL from FCP Attached SCSI DVD To IPL in z VM prepare the SCSI IPL process by using the SET LOADDEV paramete...

Страница 71: ...tive driver is installed and you see the corresponding kernel messages Proceeding with the installation linuxrc displays a list of potential usable read write and if applicable data channels After ent...

Страница 72: ...hannel 0 0 0702 After entering the channels insert the name of the port to which the OSA card is connected SUSE Linux Enterprise Server now tries to load the network module by building a pa rameter li...

Страница 73: ...0 collisions 0 txqueuelen 1000 RX bytes 0 0 0 Mb TX bytes 0 0 0 Mb 4 2 6 Connecting to the SUSE Linux Enterprise Server Installation System After setting up your network connection linuxrc prompts for...

Страница 74: ...Installation for the X Window System IMPORTANT X Authentication Mechanism The direct installation with the X Window System relies on a primitive authen tication mechanism based on hostnames This mecha...

Страница 75: ...rk Connection Types SUSE Linux Enterprise Server for IBM System z includes network drivers for OSA devices ethernet and gigabit ethernet and HiperSockets This chapter describes the configuration withi...

Страница 76: ...050c 8 IBM OSA Express Network card 0 0 050d 9 IBM OSA Express Network card 0 0 050e 10 IBM OSA Express Network card 0 0 f401 11 IBM OSA Express Network card 0 0 f400 12 IBM OSA Express Network card...

Страница 77: ...ty if you don t need one 192 168 0 1 Enter your search domains separated by a space example com 4 3 2 Gigabit Ethernet with the qeth Module Select an IBM OSA Express Network card from the list of netw...

Страница 78: ...0601 6 IBM OSA Express Network card 0 0 0602 7 IBM IUCV 4 Please choose the physical medium 1 Ethernet 2 Token Ring 1 Enter the relative port number 0 Device address for read channel 0 0 0600 0 0 060...

Страница 79: ...he data required for network setup and DASD configuration In addition to that it can be used to set up the connection method to the SUSE Linux Enterprise Server installation system and the YaST instan...

Страница 80: ...ies setting Manual to 0 Info URL Specifies a location for a file to read more options from Useful to overcome the limitations of 10 lines and 80 characters per line under z VM for the parmfile More do...

Страница 81: ...example com Domain search path for DNS Allows you to use short host names instead of fully qualified ones HostIP 192 168 1 2 Enter the IP address of the interface to configure Gateway 192 168 1 3 Spec...

Страница 82: ...s requires certain setup options Interfaces ctc and escon CTC and ESCON are no longer officially supported ReadChannel 0 0 0424 WriteChannel 0 0 0425 ReadChannel specifies the READ channel to use Writ...

Страница 83: ...nnel For WriteChannel enter the number of the WRITE channel DataChannel specifies the DATA channel For Portname enter an appropriate port name Make sure that the READ channel carries an even device nu...

Страница 84: ...any time IMPORTANT X Authentication Mechanism The direct installation with the X Window System relies on a primitive au thentication mechanism based on hostnames This mechanism is disabled on current...

Страница 85: ...2 Gateway 192 168 1 3 Nameserver 192 168 1 4 InstNetDev hsi layer2 0 Netmask 255 255 255 128 Broadcast 192 168 1 255 readchannel 0 0 702c writechannel 0 0 702d datachannel 0 0 702e install nfs 192 16...

Страница 86: ...console ttyS0 console ttyS1 The resulting parameters line would look like the following example parameters root dev dasda2 TERM dumb console ttyS0 console ttyS1 Save the changes in etc zipl conf run z...

Страница 87: ...ments Linux on IBM eServer zSeries and S 390 ISP and ASP Solutions SG24 6299 These documents might not reflect the current state of Linux but the principles of Linux deployment outlined there remain a...

Страница 88: ...n IBM eServer zSeries and S 390 Large Scale Deployment SG24 6824 Linux on IBM eServer zSeries and S 390 Performance Measuring and Tuning SG24 6926 Linux with zSeries and ESS Essentials SG24 7025 IBM T...

Страница 89: ...Part II Manual Deployment...

Страница 90: ......

Страница 91: ...Enterprise Server is a plain manual installation as featured in Chapter 6 Installation with YaST page 89 Manual installation can be done in several different ways depending on your requirements Instal...

Страница 92: ...talling from the SUSE Linux Enterprise Server Media page 89 Details Table 5 2 Installing from a Network Server Using SLP Network installation server holding the SUSE Linux Enterprise Server installati...

Страница 93: ...hem manually There are many automated or semiautomated approaches as well as several options to perform an installation with minimal to no physical user interaction Before considering a fully automate...

Страница 94: ...Wake on LAN page 85 Consider this approach in a small to medium scenario that should be installed via network and without physical interaction with the installation targets A network a network install...

Страница 95: ...Physical access is needed for booting Section 14 1 1 Simple Remote Installation via VNC Static Network Configuration page 190 Details Table 5 5 Simple Remote Installation via VNC Dynamic Network Conf...

Страница 96: ...ited For Small to medium scenarios with varying hardware Completely remote installs cross site deployment Each machine must be set up manually Drawbacks Section 14 1 3 Remote Installation via VNC PXE...

Страница 97: ...the installation source Booting from installation media Remote SSH Control and Monitoring Best Suited For Small to medium scenarios with varying hardware Low bandwidth connections to target Drawbacks...

Страница 98: ...ndividually Drawbacks Section 14 1 6 Remote Installation via SSH PXE Boot and Wake on LAN page 197 Details Table 5 10 Simple Mass Installation Preferably network Installation Source Preparations Gathe...

Страница 99: ...ably network Installation Source Preparations Gathering hardware information Creating AutoYaST profiles Creating AutoYaST rules Setting up the installation server Distributing the profile Setting up n...

Страница 100: ...unt of time to create a sophisticated rule and class framework in AutoYaST to match the requirements of a huge deployment site Not having to touch each target separately can save you a tremendous amou...

Страница 101: ...x Enterprise Server Media Choose this option if you want to perform a stand alone installation and do not want to rely on a network providing the installation data or the boot infrastructure The insta...

Страница 102: ...upported by the system s BIOS or firmware and a boot server must be available in the network PXE or BOOTP This task can also be handled by another SUSE Linux Enterprise Server system Refer to Chapter...

Страница 103: ...hout SLP If your network setup does not support OpenSLP for the retrieval of network installation sources boot the system and press F4 in the boot screen to select the desired network protocol NFS HTT...

Страница 104: ...ause there is no splash screen or boot loader command line kernel or boot parameters cannot be entered on screen but must be included in the kernel image using the mkzimage_cmdline utility TIP IBM POW...

Страница 105: ...oot Screen The boot screen displays a number of options for the installation procedure Boot from Hard Disk boots the installed system and is selected default because the CD is often left in the drive...

Страница 106: ...CD KDE and CD GNOME media Figure 6 1 The Boot Screen Use the function keys indicated in the bar at the bottom of the screen to change the language screen resolution installation source or to add addit...

Страница 107: ...with some hardware Safe Settings boots the system with the DMA mode for CD DVD ROM drives and power management functions disabled If you are not sure try the following options first Installation ACPI...

Страница 108: ...rver to provide a local update source you need to equip the client with the server s URL Client and server communicate solely via HTTPS protocol therefore you also need to enter a path to the server s...

Страница 109: ...add on product or if you are using a certificate issued by an official certificate authority Example smtcert done WARNING Beware of typing errors Make sure the values you enter are correct If smturl...

Страница 110: ...own menu The language selected here is also used to assume a time zone for the system clock This setting along with the selection of secondary languages to install on your system can be modified later...

Страница 111: ...ed SCSI Disks ZFCP or iSCSI for installation of SUSE Linux Enterprise Server After selecting Configure DASD Disks an overview lists all available DASDs To get a clearer picture of the available device...

Страница 112: ...m Action Activate See Figure 6 4 IBM System z Activating a DASD page 100 To format the DASDs select Perform Action Format right away or use the YaST partitioner later as described in Section 15 1 Usin...

Страница 113: ...DASD and zFCP entries are shown at the very bottom After adding the disks reread the partition table Return to the installation proposal screen and choose Partitioning then select Reread Partition Ta...

Страница 114: ...Clock and Time Zone page 103 6 9 1 Add On Products Add on products can be installed either from a local source CD DVD or directory or from a network source HTTP FTP NFS CIFS When installing from a ne...

Страница 115: ...in the installed system is described in Chapter 10 Installing Add On Products page 157 Network Setup When invoking the network setup YaST scans for available network cards If more than one network car...

Страница 116: ...as Microsoft Windows it is likely your system uses local time instead If you only run Linux on your machine set the hardware clock to UTC and have the switch from standard time to daylight saving tim...

Страница 117: ...chine Choose this scenario when installing in a virtual machine such as XEN XEN Virtualization Host Choose this scenario when installing on a machine that should serve as a XEN host Figure 6 7 Server...

Страница 118: ...tion Settings TIP Restoring the Default Settings You can reset all changes to the defaults by clicking Change Reset to Defaults YaST then shows the original proposal again 6 12 1 Partitioning Overview...

Страница 119: ...de 6 12 3 Software Overview SUSE Linux Enterprise Server contains a number of software patterns for various ap plication purposes Click Software to start the pattern selection and modify the installa...

Страница 120: ...nguage settings select Language Select a language from the list The primary language is used as the system language You can also adapt keyboard layout and time zone to the primary language if the curr...

Страница 121: ...Accept to return to the installation summary 6 12 7 Time Zone Expert Adjust time zone and clock settings here Provided a network is configured you can also set up a Network Time Protocol NTP client th...

Страница 122: ...se confirmation dialogs are displayed Click Accept to install the software package When not agreeing to the license click I Disagree and the software package will not be installed In the dialog that f...

Страница 123: ...he type of instal lation LPAR Installation In the IBM System z HMC select Load select Clear then enter the loading address the device address of the device holding the boot directory with the bootload...

Страница 124: ...try to initiate a connection to the Linux system using a VNC viewer If you connect using a Java capable browser enter the complete URL consisting of the IP address of the installed system along with...

Страница 125: ...but not yet configured for use The hardware the network and other services are not set up yet 6 14 1 System Configuration Having rebooted the system starts the manual configuration If the configuratio...

Страница 126: ...a network the hostname has to be unique in this network whereas the domain name has to be common to all hosts on the network In many networks the system receives its name over DHCP In this case it is...

Страница 127: ...e Section IPv6 The Next Gener ation Internet Chapter 17 Basic Networking Administration Guide Firewall By default SuSEfirewall2 is enabled on all configured network interfaces To globally disable the...

Страница 128: ...et Connection After having configured a network connection you can test it For this purpose YaST establishes a connection to the SUSE Linux Enterprise Server server and downloads the latest release no...

Страница 129: ...r product will be send to the Novell servers In order to become entitled for support make sure to check Registration Code You will be prompted to enter the code when proceeding with Next Find more inf...

Страница 130: ...issued by a certificate authority Open the dialog with Advanced Local Registration Server Registration Server URL of the registration server The URL has a fixed format https FQN center regsvc FQN has...

Страница 131: ...age 149 or Chapter 1 YaST Online Update Ad ministration Guide This step is skipped if no updates are available or if you haven t registered Services After testing the Internet connection and downloadi...

Страница 132: ...a previous installation Also change the password encryption type in this dialog You can also add additional user accounts or change the user authentication method in the installed system For detailed...

Страница 133: ...es are stored in the local mailbox var spool mail username where username is the login name of the selected user To read e mails after installation you can use any e mail client for example KMail or E...

Страница 134: ...ntication To use it select Set Up Kerberos Authentication For more information on Kerberos refer to Chapter 6 Network Authentication with Kerberos Security Guide Release Notes After completing the use...

Страница 135: ...red TIP Resetting Hardware Configuration to the Default Values You can cancel any changes to the hardware configuration by clicking Change Reset to Defaults YaST then shows the original proposal again...

Страница 136: ...er is now fully installed and configured Unless you enabled the automatic login function or customized the default runlevel you should see the graphical login on your screen in which to enter a userna...

Страница 137: ...11 for example Make sure you update the old system to the most recent patch level first at the moment that is SP2 Software tends to grow from version to version Therefore take a look at the available...

Страница 138: ...ssible Problems If you update a default system from the previous version to this version YaST works out necessary changes and performs them Depending on your customizations some steps or the entire up...

Страница 139: ...nd mount the file systems listed there 4 In the Installation Settings dialog adjust the settings according to your require ments Normally you can leave the default settings untouched but if you intend...

Страница 140: ...d setting up a central network installation source are described here TIP Installation Changes Read the installation instructions on the Service Pack media for further changes 7 3 Software Changes fro...

Страница 141: ...to find out details like vendor and model of a certain hardware to be able to properly configure it Here and in the following sections we assume that you already started YaST for exam ple by pressing...

Страница 142: ...ful when manually changing the allowed monitor frequencies Incorrect values might destroy your monitor Always refer to the monitor s manual before changing frequencies Change the resolution if fonts a...

Страница 143: ...whether you want to use the second monitor in Cloned Multihead or in Xinerama Multihead mode and click Ok 6 Test the new configuration before it is applied to the system Click Ok to decide what to do...

Страница 144: ...g 5 As an option you can enable Additional Layouts Check one or more boxes in the list This feature is handy if you want to switch between different languages or scripts in the running system without...

Страница 145: ...ws 1 In YaST click Hardware Mouse Model The SaX2 configuration tool reads the system resources and displays the Mouse Properties dialog 2 Click Change and select your mouse model from the list display...

Страница 146: ...cy sound board is installed in your computer let YaST probe for old chips if YaST cannot find a sound board Within the pop up click Yes probe If YaST cannot detect your sound card automatically procee...

Страница 147: ...e following options manually Volume Use this dialog is for setting the volume Play Test Sound Use this option for testting the sound system Start Sequencer For playback of MIDI files check this option...

Страница 148: ...utomatically to configure it YaST can configure the printer automatically if the parallel or USB port can be set up automatically and the connected printer can be detected The printer model must also...

Страница 149: ...tch from a PostScript driver to a PCL driver provided your printer understands PCL If no driver for your printer is listed you can try to select a generic driver with an ap propriate standard language...

Страница 150: ...the printer YaST defaults to the one marked recommended as a general rule See the Driver section in the dialog for all drivers available The one that is currently chosen is marked as Current Driver No...

Страница 151: ...istrator for details on configuring a network printer in your environment 8 5 3 Sharing Printers Over the Network Printers managed by a local CUPS daemon can be shared over the network and so turn yo...

Страница 152: ......

Страница 153: ...stall packages not shipped with the installation media and let YaST manage them Keep your system up to date by managing software updates with openSUSE Updater 9 1 Definition of Terms Repository A loca...

Страница 154: ...e of resolvable is a package or a patch patchrpm A patchrpm consists only of files that have been updated since it was first released for SUSE Linux Enterprise Server 11 Its download size is usually c...

Страница 155: ...lso define special search patterns using wild cards and regular expressions in Search Mode TIP Quick Search In addition to the Search filter all lists of the package manager feature a quick search Cli...

Страница 156: ...ature offers a more de tailed view of the software grouped by categories Often packages depend on other packages if you select a package you might be requested to install additional packages to resolv...

Страница 157: ...ormation window If you click Check Dependencies the package manager checks if the current package selection results in any unresolved package dependencies or conflicts In the event of unresolved depen...

Страница 158: ...e repository use the Repositories filter In the default configuration this filter shows a list of all packages from the selected installation source To restrict the list use a secondary filter To view...

Страница 159: ...language add on repository with translations dictionaries etc might also be configured Here also manage subscriptions to so called Services A Service in this context is a Repository Index Service RIS...

Страница 160: ...done you can install software from this repository as described in Section 9 2 1 Installing Software page 142 In the Configured Software Repositories overview find several configuration options Prope...

Страница 161: ...t is started by default Choose Applications System Desktop Applet kupdateapplet from the main menu to manually start it Green Geeko Head with Green Arrows No patches available Green Geeko Head with Ye...

Страница 162: ...Require a Restart to skip these updates for now Start updating your system by clicking Install Figure 9 2 KDE Updater Applet Simple Update View A click on Details opens the Available Updates window wh...

Страница 163: ...uide for more infor mation Installing New Software Versions New software versions are available from software repositories provided by the open SUSE community By default no such repositories are preco...

Страница 164: ...ails and then on the Upgrade tab to open the list with new software versions Either select single packages by checking the box in front of an entry or click Select All Packages Install starts the inst...

Страница 165: ...stem Is under Low Load Prohibits checking for updates when the system is under heavy load This option is activated by default Search for Drivers When New Hardware is Attached Provided a repository off...

Страница 166: ...in the background Alternatively left click the updater icon and choose Show Updates to open the Software Update Viewer In the overview it shows the number of patches available per category Click on Re...

Страница 167: ...whether to Close the Software Update Viewer The YaST Online Update offers advanced features to customize the patch installation Please refer to Chapter 1 YaST Online Update Administration Guide for m...

Страница 168: ...ic Install Configure whether patches are installed automatically or not default Automatic installation can be chosen for either security patches only or for all patches Check for Major Upgrades Choose...

Страница 169: ...ia select Local ISO Image and enter the Path to ISO Image The Repository Name is arbitrary 10 1 Add Ons To install a new add on proceed as follows 1 Click Software Add On Products to see an overview o...

Страница 170: ...udes all the open source tools that were used to build the SUSE Linux Enterprise Server product It provides you as a developer independent software vendor ISV or independent hardware vendor IHV with a...

Страница 171: ...e all the data ready to hand when starting to configure the Internet access 11 1 Direct Internet Connection When your computer is directly connected to the Internet you first need to configure the har...

Страница 172: ...ving DNS and IP allocation is handled in most cases this data is received automatically when connecting Regardless whether you choose an ISP from the list or add a custom provider you need to enter at...

Страница 173: ...now whether it is connected to a serial port or to an USB port Please note that not all USB modems and internal modems are supported by SUSE Linux Enterprise Server The modem configuration module alre...

Страница 174: ...ssumed that the network is connected to the Internet and provides routing and name services In case these services are provided by a router make sure the router is configured correctly before setting...

Страница 175: ...is assigned a user ID UID which identifies him in the system Apart from the users which can log in to your machine there are also a number of system users for internal use only Each user is assigned...

Страница 176: ...arily disable user accounts as described in Section 12 2 Managing User Accounts page 165 Learn about ad vanced options like enforcing password policies using encrypted home directories using fingerpri...

Страница 177: ...page 178 For user and group management the dialog provides similar functionality You can easily switch between the user and group administration view by choosing the appro priate tab at the top of th...

Страница 178: ...st of users in the system and the groups the users belong to 3 To modify options for an existing user select an entry and click Edit To create a new user account click Add 4 Enter the appropriate user...

Страница 179: ...the network Procedure 12 2 Disabling or Deleting User Accounts 1 Open the YaST User and Group Administration dialog and click the Users tab 2 To temporarily disable a user account without deleting it...

Страница 180: ...ystem and your data If your system contains confidential data do not use this functionality If you want to activate auto login or login without password access these functions in the YaST User and Gro...

Страница 181: ...directories for users These are encrypted with LUKS Linux Unified Key Setup which results in an image and an image key generated for the user The image key is protected with the user s login password...

Страница 182: ...apter 11 Encrypting Partitions and Files Security Guide Procedure 12 4 Creating Encrypted Home Directories 1 Open the YaST User and Group Management dialog and click the Users tab 2 To encrypt the hom...

Страница 183: ...login password to proceed if YaST prompts for it 6 Click Expert Options Write Changes Now to save all changes without exiting the administration dialog Or click Finish to close the administration dia...

Страница 184: ...p Administration dialog Or click Finish to close the adminis tration dialog and to save the changes 12 3 4 Using Fingerprint Authentication If your system includes a fingerprint reader you can use bio...

Страница 185: ...ion In order to configure quotas for certain users and groups you need to enable quota support for the respective partition in the YaST Expert Partitioner first 1 In YaST select System Partitioner and...

Страница 186: ...ded the soft limit specified for size or inodes Otherwise the time related input fields are not activated Specify the time period for which the user or group is allowed to exceed the limits set above...

Страница 187: ...ministration dialog and select the Defaults for New Users tab 2 To change the primary group the new users should automatically belong to select another group from Default Group 3 To modify the seconda...

Страница 188: ...k Edit and switch to the Details tab 3 To change the primary group the user belongs to click Default Group and select the group from the list 4 To assign the user to additional secondary groups activa...

Страница 189: ...ew group select them from the list of possible Group Members by checking the corresponding box To remove them from the group just uncheck the box 7 Click OK to apply your changes 8 Click Expert Option...

Страница 190: ...see Chapter 4 LDAP A Directory Service Security Guide You can manage LDAP users with the YaST user module All other LDAP settings including the default settings for LDAP users have to be defined with...

Страница 191: ...tion about the configuration of the appropriate client refer to the following sections NIS Section Configuring NIS Clients Chapter 3 Using NIS Security Guide LDAP Section Configuring an LDAP Client wi...

Страница 192: ......

Страница 193: ...time server 13 1 Changing the System Language Depending on how you use your desktop and whether you want to switch the entire system to another language or just the desktop environment itself there ar...

Страница 194: ...appropriate language code 13 1 1 Installing Additional System Languages The main language was selected during installation see Section 6 7 Welcome page 98 and keyboard and time zone settings were adju...

Страница 195: ...Secondary Languages When you leave this dialog with Ok YaST installs the additional localized software packages The system is multilingual but you need to set the desired language explicitly to start...

Страница 196: ...for local users no means the language settings for root are not affected by language changes All locale values remain unset Use UTF 8 Encoding Disable this box if you do not want to use UTF 8 encodin...

Страница 197: ...ngly If you run another operating system on your machine such as Microsoft Windows it is likely your system does not use UTC but local time In this case uncheck Hardware Clock Set To UTC If you only r...

Страница 198: ...ure 13 2 Setting Country and Time 1 Click Change to set date and time 2 Select Manually and enter date and time values 3 Confirm with Accept If you want to make use of an NTP server 186 Deployment Gui...

Страница 199: ...nize Now to get your system time set correctly If you want to make use of NTP permanently enable Save NTP Configuration 5 Confirm with Accept With the Configure button you can also open the advanced N...

Страница 200: ......

Страница 201: ...e installation scenarios NOTE In the following sections the system to hold your new SUSE Linux Enterprise Server installation is referred to as target system or installation target The term installati...

Страница 202: ...n make sure that the following requirements are met Remote installation source NFS HTTP FTP or SMB with working network connection Target system with working network connection Controlling system with...

Страница 203: ...open a VNC viewing application or Web browser and connect to the target system as described in Section 14 5 1 VNC Installation page 222 5 Perform the installation as described in Chapter 6 Installati...

Страница 204: ...target system appears use the boot options prompt to set the appropriate VNC options and the address of the installation source This is described in detail in Section 14 4 Booting the Target System fo...

Страница 205: ...Konqueror Internet Explorer or Opera To perform this type of installation proceed as follows 1 Set up the installation source as described in Section 14 2 Setting Up the Server Holding the Installatio...

Страница 206: ...ystem to boot for installation and to determine the IP address of the installation target The installation itself is entirely controlled from a remote workstation using SSH to connect to the installer...

Страница 207: ...vironment giving the network address under which the graphical installation environment can be addressed by any SSH client 4 On the controlling workstation open a terminal window and connect to the ta...

Страница 208: ...system using the first CD or DVD of the SUSE Linux Enterprise Server media kit 3 When the boot screen of the target system appears use the boot options prompt to pass the appropriate parameters for n...

Страница 209: ...ibed in Section 14 2 Setting Up the Server Holding the Installation Sources page 198 Choose an NFS HTTP or FTP network server For the configuration of an SMB installation source refer to Section 14 2...

Страница 210: ...tion The easiest way to set up an installation server is to use YaST on SUSE Linux Enterprise Server 11 or SUSE Linux 9 3 and higher TIP You can even use a Microsoft Windows machine as installation se...

Страница 211: ...cessible under nfs Server IP Name Details of NFS and exports can be found in Chapter 25 Sharing File Systems with NFS Administration Guide TIP Firewall Settings Make sure that the firewall settings of...

Страница 212: ...started every time the system is started No further intervention is re quired You only need to configure and start this service correctly by hand if you have deactivated the automatic configuration of...

Страница 213: ...ion server di rectory cp a media path_to_your_CD ROM_drive Replace path_to_your_CD ROM_drive with the actual path under which your CD or DVD drive is addressed Depending on the type of drive used in y...

Страница 214: ...Open the file etc exports and enter the following line productversion ro root_squash sync This exports the directory productversion to any host that is part of this network or to any host that can co...

Страница 215: ...ion about NFS is found in Chapter 25 Sharing File Systems with NFS Administration Guide 14 2 3 Setting Up an FTP Installation Source Manually Creating an FTP installation source is very similar to cre...

Страница 216: ...under etc slp reg d that contains the following lines Register the FTP Installation Server service install suse ftp HOSTNAME srv ftp instsource CD1 en 65535 description FTP Installation Source Replac...

Страница 217: ...n Installation Chap ter 27 The Apache HTTP Server Administration Guide 2b Enter the root directory of the HTTP server srv www htdocs and create a subdirectory that will hold the installation sources m...

Страница 218: ...tart 14 2 5 Managing an SMB Installation Source Using SMB you can import the installation sources from a Microsoft Windows server and start your Linux deployment even with no Linux machine around To s...

Страница 219: ...r installation server and use them as installation source To set up an HTTP NFS or FTP server that uses ISO images instead of media copies proceed as follows 1 Download the ISO images and save them to...

Страница 220: ...ly page 205 To automatically mount the ISO images at boot time add the respective mount entries to etc fstab An entry according to the previous example would look like the following path_to_iso path_t...

Страница 221: ...option to the subnet s configuration 7 Select filename and enter pxelinux 0 as the value 8 Add another option next server and set its value to the address of the TFTP server 9 Select OK and Finish to...

Страница 222: ...y executing rcdhcpd restart If you plan on using SSH for the remote control of a PXE and Wake on LAN installation explicitly specify the IP address DHCP should provide to the installation target To ac...

Страница 223: ...e server is started and included in the boot routines No further action from your side is required to secure this xinetd starts tftpd at boot time 4 Click Open Port in Firewall to open the appropriate...

Страница 224: ...background information as well as PXE s complete specifications are available in the Preboot Execution Environment PXE Specification http www pix net software pxeboot archive pxespec pdf 1 Change to t...

Страница 225: ...hat must be used for the network installation It is only necessary if the client is equipped with several network cards and must be adapted accordingly In case of a single network card this entry can...

Страница 226: ...he vnc and vncpassword or the usessh and sshpassword options to the install entry The lines separated by must be entered as one continuous line without a line break and without the default harddisk de...

Страница 227: ...tic boot If no configuration file is present or no DEFAULT entry is present in the configu ration file the default is the kernel name linux with no options APPEND options Add one or more options to th...

Страница 228: ...used to override a global APPEND LOCALBOOT type On PXELINUX specifying LOCALBOOT 0 instead of a KERNEL option means invoking this particular label and causes a local disk boot instead of a kernel boot...

Страница 229: ...online help presumably for the kernel command line options For backward compatibility with earlier releases F10 can be also entered as F0 Note that there is currently no way to bind filenames to F11 a...

Страница 230: ...dule called WOL to easily configure Wake on LAN Users of other versions of SUSE Linux based operating sys tems can use a command line tool 14 3 8 Wake on LAN with YaST 1 Log in as root 2 Start YaST Ne...

Страница 231: ...sing Custom Boot Options page 219 A detailed description of the available function keys is available at Section 6 6 The Boot Screen page 93 14 4 2 Using Custom Boot Options Using the appropriate set o...

Страница 232: ...k Gateway ed if several network de vices are available VNC enablement VNC password hostip some_ip netmask some _netmask gateway ip_gateway vnc 1 vncpassword some _password Section 14 1 2 Simple Remote...

Страница 233: ...sword hostip some_ip netmask some _netmask gateway ip_gateway usessh 1 sshpassword some _password Section 14 1 5 Simple Remote Installation via install nfs http ftp smb path _to_instmedia Location of...

Страница 234: ...you need to do on the installation target to prepare for a VNC installation is to provide the appropriate boot options at the initial boot for installation see Section 14 4 2 Using Custom Boot Options...

Страница 235: ...indows or Mac OS On a Linux machine make sure that the package tightvnc is installed On a Windows machine install the Windows port of this application which can be obtained at the TightVNC home page h...

Страница 236: ...ons to enable SSH for installation See Section 14 4 2 Using Custom Boot Options page 219 for details OpenSSH is installed by default on any SUSE Linux based operating system Connecting to the Installa...

Страница 237: ...ot option After you have successfully authenticated a command line prompt for the installation target appears 5 Enter yast to launch the installation program A window opens showing the normal YaST scr...

Страница 238: ......

Страница 239: ...orts multipath I O For details see the chapter about multipath I O in Storage Administration Guide Starting with SUSE Linux Enterprise Server 10 there is also the option to use iSCSI as a networked di...

Страница 240: ...sda Partitions are listed as parts of these devices such as dev sda1 or dev dasda1 respectively The size type file system and mount point of the hard disks and their partitions are also displayed The...

Страница 241: ...to a particular operating system With primary partitions only you would be limited to four partitions per hard disk because more do not fit in the partition table This is why extended partitions are u...

Страница 242: ...ated To use a different mount method like mount by label select Fstab Options 4 Specify additional file system options if your setup requires them This is neces sary for example if you need persistent...

Страница 243: ...Encrypt File System If you activate the encryption all data is written to the hard disk in encrypted form This increases the security of sensitive data but slightly reduces the system speed because th...

Страница 244: ...isting file system select the partition and use Resize Note that it is not possible to resize partitions while mounted To resize partitions un mount the respective partition before running the partiti...

Страница 245: ...tes until the out of memory killer of the kernel resolves the issue Note that you will need a certain amount of swap if the computer should perform a suspend to disk In that case the swap size should...

Страница 246: ...ile use the command swapoff var lib swap swapfile 4 Check the current available swap spaces with the command cat proc swaps Note that at this point this is only temporary swap space After the next reb...

Страница 247: ...ration Guide 15 2 LVM Configuration This section briefly describes the principles behind the Logical Volume Manager LVM and its basic features that make it useful under many circumstances In Section 1...

Страница 248: ...ght On the left side one single disk has been divided into three physical partitions PART each with a mount point MP assigned so that the operating system can access them On the right side two disks h...

Страница 249: ...nformation about configuring LVM is available in the official LVM HOWTO at http tldp org HOWTO LVM HOWTO Starting from kernel version 2 6 LVM version 2 is available which is downward compatible with t...

Страница 250: ...sical Extend Size This value defines the size of a physical block in the volume group All the disk space in a volume group is handled in chunks of this size TIP Logical Volumes and Block Sizes The pos...

Страница 251: ...u can add or remove PVs to the selected volume group Configuring Logical Volumes After the volume group has been filled with PVs define the LVs the operating system should use in the next dialog Choos...

Страница 252: ...ul 3 Choose the filesystem to use on the LV as well as the mount point By using stripes it is possible to distribute the data stream in the LV among several PVs striping If these PVs reside on differe...

Страница 253: ...trollers that support IDE or SATA hard disks Soft RAID provides the advantages of RAID systems without the additional cost of hardware RAID controllers However this requires some CPU time and has memo...

Страница 254: ...y disk and cannot service simultaneous multiple requests Both levels are only rarely used RAID 4 Level 4 provides block level striping just like Level 0 combined with a dedicated parity disk In the ca...

Страница 255: ...rocedure until you defined all the desired physical volumes on the available disks For RAID 0 and RAID 1 at least two partitions are needed for RAID 1 usually ex actly two and no more If RAID 5 is use...

Страница 256: ...e and others indicated with RAID in the expert partitioner 15 3 2 Troubleshooting Check the file proc mdstat to find out whether a RAID partition has been damaged In the event of a system failure shut...

Страница 257: ...ails for soft RAID can be found in the HOWTOs at usr share doc packages mdadm Software RAID HOWTO html http en tldp org HOWTO Software RAID HOWTO html Linux RAID mailing lists are also available such...

Страница 258: ......

Страница 259: ...ed to equip the client with the server s URL As client and server communicate via the HTTPS protocol during registration you also need to make sure the client trusts the server s certificate In case y...

Страница 260: ...tter is optional regurl URL of the SMT server The URL needs to be in the following format https FQDN center regsvc with FQDN being the fully qualified hostname of the SMT server It must be identical t...

Страница 261: ...e certificate In case regcert is not specified at all it will default to http FQDN smt crt with FQDN being the name of the SMT server WARNING Change of SMT Server Certificate If the SMT server gets a...

Страница 262: ...An overview of the current configuration is shown 4 Click Edit 5 To register while installing automatically select Run Product Registration You can include information from your system with Hardware P...

Страница 263: ...h registration_URL for example clientSetup4SMT sh https smt example com center regsvc In the second case the script name is followed by the host option followed by hostname of the SMT server clientSet...

Страница 264: ...register command register testenv 1 For more information about using SMT with a test environment refer to the Subscription Management Tool Guide 252 Deployment Guide...

Страница 265: ...Part III Imaging and Creating Products...

Страница 266: ......

Страница 267: ...cks virtual disk to play in full virtual systems like VMware XEN images for paravirtualization in a hypervisor and a PXE environment to boot from network 17 1 Prerequisites for KIWI To build images wi...

Страница 268: ...e steps 1 Physical Extend Preparation This stage prepares the content of your new filesystem During this step the root directory is created you determine which packages are installed on your image and...

Страница 269: ...n script while creating the physical extend config sh configuration file for each image description ex plained in Section 17 3 2 page 258 config xml archive only used for ISO images config cdroot tgz...

Страница 270: ...he HTML file usr share doc packages kiwi schema kiwi xsd html The configuration file consists of several parts some description about the author contact information and a short explanation preferences...

Страница 271: ...home rpmdir repository packages type image patternPackageType onlyRequired package name yast2 live installer package name pam List of packages reduced packages The root element of every KIWI configur...

Страница 272: ...er the network bandwith the faster the image creation If you do not have a fast network or you do not want to use it create a local installation resource Proceed as follows 1 Collect your installation...

Страница 273: ...oc packages kiwi examples suse 11 0 suse oem preload to your current directory 4 Open the file config xml and locate the element repository If you want to use a local installation source refer to Sect...

Страница 274: ...and packages and save the file package name nfs client 5 Rebuild the image as described in Step 5 page 261 17 5 For More Information Find more information about KIWI in the following documents http de...

Страница 275: ...2 If you have not run this module before click on Create an Add On from the Beginning to start In case you have already created an Add On the window shows a list of all created Add Ons Click Add to s...

Страница 276: ...o add files to your Add On product The first part can be used to insert information about the Add On in the info txt file Use the license files to display a window with Agree and Disagree buttons befo...

Страница 277: ...tains a list of all files and directories of your Add On product medium media N Contains files with basic information about the Add On media set The directory is numered so media 1 is for the first Ad...

Страница 278: ...g Creating_YaST_Installation _Sources YaST installation source creation http en opensuse org Libzypp Metadata YaST YaSTmetadata description http developer novell com wiki index php Creating _Add ons 2...

Страница 279: ...lowing prerequisites 1 Install the package yast2 product creator from the SDK under ftp dist suse de install SLE 11 SDK This package needs other packages Make sure you fullfill all dependencies 2 Free...

Страница 280: ...rectory Tree Only Use the other options to insert metadata Click Next 4 Edit the content of the isolinux cfg file if it is a part of the configuration In most cases you can leave it as it is If the fi...

Страница 281: ...or Xen images 19 3 For More Information Find more information about creating system images and related topics in the following documents Chapter 17 KIWI page 255 http en opensuse org KIWI The KIWI pro...

Страница 282: ......

Страница 283: ...5 Creating a custom installation rolling it out to your hardware and personalizing the final product involves the following steps 1 Prepare the master machine whose disk should be cloned to the client...

Страница 284: ...p 5 page 272 5 Enable firstboot as root Create an empty file var lib YaST2 reconfig_system to trigger firstboot s execution This file will be deleted once the firstboot configuration has been successf...

Страница 285: ...stboot xml Configure the installation workflow by enabling or disabling components or adding custom ones 20 2 1 Customizing YaST Messages By default an installation of SUSE Linux Enterprise Server con...

Страница 286: ...inish messages These variables are FIRSTBOOT_LICENSE_DIR and FIRSTBOOT_FINISH_FILE Change the SHOW_Y2CC_CHECKBOX to yes if the user should be able to start YaST directly after performing the installat...

Страница 287: ...wn release notes file Use the RTF format as in the example file in usr share doc release notes and save the result as RELEASE NOTES en rtf for English 2 Store optional localized versions next to the o...

Страница 288: ...ng the Proposal Screens page 276 This provides you with enough background to modify the firstboot installation workflow The basic syntax of the firstboot configuration file and how the key elements ar...

Страница 289: ...listed here Example 20 2 Configuring the Workflow Section workflows config type list workflow defaults enable_back yes enable_back enable_next yes enable_next archs all archs defaults stage firstboot...

Страница 290: ...e itself must be located under usr share YaST2 clients and have the ycp file suffix To make changes to the number or order of proposal screens during the firstboot instal lation proceed as follows 1 O...

Страница 291: ...ange the value for the enabled element from true to false to disable the module or from false to true to enable it again module label Time and Date label enabled config type boolean true enabled name...

Страница 292: ...elopment refer to http developer novell com wiki index php YaST Detailed information about YaST firstboot can be found at http forgeftp novell com yast doc SL11 1 tdg inst_in_general_chap html 20 2 5...

Страница 293: ...oted firstboot starts and the installation proceeds exactly as laid out in Section 20 2 4 Customizing the Workflow page 275 Only the components included in the firstboot workflow configuration are sta...

Страница 294: ......

Страница 295: ...Part IV Automated Installations...

Страница 296: ......

Страница 297: ...E Linux Enterprise to a set of machines with exactly the same hardware configuration To prepare for an AutoYaST mass installation proceed as follows 1 Create an AutoYaST profile that contains the inst...

Страница 298: ...l different ways Clone a fresh installation from a reference machine to a set of identical machines Use the AutoYaST GUI to create and modify a profile to meet your requirements Use an XML editor and...

Страница 299: ...ite it to a new profile 6 To proceed choose one of the following If the profile is complete and matches your requirements select File Save as and enter a filename for the profile such as autoyast xml...

Страница 300: ...sed to make the profile location known to the installation routines on the client The location of the profile is passed to the installation routines by means of the boot prompt or an info file that is...

Страница 301: ...llation routines retrieve the control file from an HTTPS server autoyast https server path HTTPS Has the installation routines retrieve the control file from a TFTP server autoyast tftp server path TF...

Страница 302: ...a file with the MAC address of the clients as the filename The MAC address of the example client is 0080C8F6484C 4 If the MAC address named file cannot be found YaST searches for a file named default...

Страница 303: ...stallation and pull in the control file from a network location or a floppy Alter natively create your own custom CD ROM holding both the installation sources and the AutoYaST profile The following se...

Страница 304: ...does not support PXE and you have physical access to system to install during most of the process You need The SUSE Linux Enterprise media A network server providing the profile data see Section 21 1...

Страница 305: ...ne by creating a command line containing all the parameters needed to locate the AutoYaST components installation sources and the parameters needed to control the installation process Do this by manua...

Страница 306: ...or the selected network netmask Default gateway gateway Name server nameserver Location of the the control file to use for the automatic installation such as autoyast nfs 192 168 1 110 profiles autoya...

Страница 307: ...info As a file in the root directory of the initial RAM disk used for booting the system provided either from custom installation media or via PXE boot As part of the AutoYaST profile In this case the...

Страница 308: ...Depending on the scenario chosen for booting and monitoring the process physical interaction with the client may be needed If the client system boots from any kind of physical media either product med...

Страница 309: ...e to match a heterogeneous scenario by merging several profiles into one Each rule describes one particular distinctive feature of your setup such as disk size and tells AutoYaST which profile to use...

Страница 310: ...on 21 2 2 Example Scenario for Rule Based Autoinstallation page 299 3 Determine the source of the AutoYaST profile and the parameter to pass to the installation routines as described in Section 21 1 2...

Страница 311: ...rint Server This machine just needs a minimal installation without a desktop environment and a limited set of software packages Workstations in the Engineering Department These machines need a desktop...

Страница 312: ...ers Sales Department Laptops Print Server AutoYaST Directory Merge Process rules xml File In a first step use one of the methods outlined in Section 21 1 1 Creating an AutoYaST Profile page 286 to cre...

Страница 313: ...slates into a rules xml file with the following content xml version 1 0 DOCTYPE autoinstall SYSTEM usr share autoinstall dtd rules dtd autoinstall xmlns http www suse com 1 0 yast2ns xmlns config http...

Страница 314: ...verip profiles URL AutoYaST looks for a rules subdirectory containing a file named rules xml first then loads and merges the profiles specified in the rules file The rest of the autoinstallation proce...

Страница 315: ...reating an Image page 261 When you build the ISO image you can find the RAW file at the destination folder There are many possibilities to dump a raw image onto a disk Plug the disk into a deployment...

Страница 316: ...ing 3 Configure your network If you have DHCP available in your network this is merely the command ifup dhcp eth0 If you must do this manually use the command ip to configure your network The output s...

Страница 317: ...e details see Section 22 2 1 Setup a Boot and Install Server page 306 Prepare a preload Image The actual installation is done by copying a raw image of the operating system to the new harddisk All fea...

Страница 318: ...on server PXE boot This is described in further detail in Section 14 3 3 Using PXE Boot page 212 Note that the actual installation process will greatly benefit if you provide enough memory to this mac...

Страница 319: ...is necessary to start a initial linux system on the target computer During a typical installation kernel and initial ram filesystem are read from some boot medium and started by the bios The needed f...

Страница 320: ...otserver as user root and create a directory where you can modify the ram filesystem mkdir bootimage 6 Change your working directory into this directory with the command cd bootimage 7 Unpack the prev...

Страница 321: ...the kernel to this directory cp vmlinuz srv tftpboot linux boot The initial ram filesystem is now prepared to take two new kernel command line param eters The parameter rawimage URL is used to identi...

Страница 322: ...diting srv tftpboot pxelinux cfg default add the following entries default bootinstall label bootinstall kernel linux boot append initrd initrd boot rawimage ftp 192 168 1 115 preload preloadimage raw...

Результаты поиска

Содержание LINUX ENTERPRISE SERVER 11 - DEPLOYMENT

Отзывы:

Похожие инструкции для LINUX ENTERPRISE SERVER 11 - DEPLOYMENT

Бренды по названию

Популярные бренды

Novell LINUX ENTERPRISE SERVER 11 - DEPLOYMENT, Руководство по развертыванию

Результаты поиска

Содержание LINUX ENTERPRISE SERVER 11 - DEPLOYMENT

Отзывы:

Похожие инструкции для LINUX ENTERPRISE SERVER 11 - DEPLOYMENT

Бренды по названию

Популярные бренды