Open Infrastructure

Not sure if this is a good fit für Samuel

redmine@ungleich.ch writes:

Most important for this task is handing over / explaning to llnu & kjg

redmine@ungleich.ch writes:

Current freeipmi version on devuan available: 1.4.11
Version needed for having ipv6 support: >= 1.6.1
...

Nico Schottelius wrote:

Most important for this task is handing over / explaning to llnu & kjg

redmine@ungleich.ch writes:

Ok, so in general, the IPMI thing should not be a big of a deal:
I recommend to have the ipmi exporter running only on each monitoring.place{5,6} then using remote ipmi to access the servers. Since in this way we don't need to change the BootOS also we're able to get the data as long as the iDRAC interface is up.

IPMI¶

• Getting the required version running on monitoring.place{5,6}
  • Either compile by yourself or check if the prepackaged version for debian buster works
  • Probably best is to move it to our package mirror => Adding a new repository (prob. the ungleich use the ungleich repo) on monitoring and do the installation like this
• Installing ipmi_exporter on monitoring.place{5,6}
• Configuring prometheus accordingly
• Put everything in cdist:
  • Update the monitoring.place{5,6} cdist manifest (to install the new repository and install the required freeipmi package)
  • Update the prometheus config: According to the config from the README

SNMP¶

Documentation for enabling SNMP on aristas: https://www.arista.com/en/um-eos/eos-section-43-3-configuring-snmp#ww1159793

• Get the prebuild package from https://github.com/prometheus/snmp_exporter/releases
• Create a devuan package, move it to the ungleich mirror
  • Don't forget the init.d file
  • Use the same path hierarchy as the other prometheus packages (also log etc.)
• Install the exporter on monitoring.place{5,6}
• Create the config file according to the README
• cdistify everything (similar to IPMI)

For both services you'll have to open up ports
Open them only from the inside (so only monitoring.place{5,6} is allowed to talk with theses ports)

• Dominique, please approach @Jin-Guk Kwon in chat/infrastructure and implement it together with him
• @Jin-Guk Kwon: please read the ticket and ping @Dominique Roux when you have understood it -> you'll then implement it together