X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=plc_config.xml;h=5f17219dc68321c1686169c05a77012683b72acb;hb=refs%2Fheads%2Fmyplc-0_4-branch;hp=5d494a0f0ce76868f55f17dd8f77d916b0578c3b;hpb=9d2a2347afc198d02f4e0a8718f625665f7b0dcd;p=myplc.git diff --git a/plc_config.xml b/plc_config.xml index 5d494a0..5f17219 100644 --- a/plc_config.xml +++ b/plc_config.xml @@ -1,5 +1,15 @@ - - + + + + + @@ -28,9 +38,9 @@ not be changed. - + Root Account - root@test.planet-lab.org + root@localhost.localdomain The name of the initial administrative account. We recommend that this account be used only to create additional accounts associated with real @@ -94,6 +104,66 @@ + + Management and Slice Authority + These variables control how your site interacts + with other PlanetLab sites as a Management Authority (MA) and/or + Slice Authority (SA). + + + + Namespace + test + The namespace of your MA/SA. This should be a + globally unique value assigned by PlanetLab + Central. + + + + SSL Private Key + /etc/planetlab/ma_sa_ssl.key + The SSL private key used for signing documents + with the signature of your MA/SA. If non-existent, one will + be generated. + + + + SSL Public Certificate + /etc/planetlab/ma_sa_ssl.crt + The corresponding SSL public certificate. By + default, this certificate is self-signed. You may replace + the certificate later with one signed by the PLC root + CA. + + + + Root CA SSL Public Certificate + /etc/planetlab/ma_sa_ca_ssl.crt + If applicable, the certificate of the PLC root + CA. If your MA/SA certificate is self-signed, then this file + is the same as your MA/SA certificate. + + + + Root CA SSL Public Key + /etc/planetlab/ma_sa_ca_ssl.pub + If applicable, the public key of the PLC root + CA. If your MA/SA certificate is self-signed, then this file + is the same as your MA/SA public key. + + + + API Certificate + /etc/planetlab/ma_sa_api.xml + The API Certificate is your MA/SA public key + embedded in a digitally signed XML document. By default, + this document is self-signed. You may replace this + certificate later with one signed by the PLC root + CA. + + + + Network Network environment. @@ -101,18 +171,41 @@ Primary DNS Server - 128.112.136.10 + 127.0.0.1 Primary DNS server address. Secondary DNS Server - 128.112.136.12 + Secondary DNS server address. + + DNS + MyPLC can provide forward DNS resolution for itself + and for its nodes. To enable resolution for MyPLC itself, set + the Primary DNS Server address to 127.0.0.1 and provide external + IP addresses for the database, API, web, and boot servers + below. To enable resolution for nodes, use the external IP + address of this machine as the primary DNS server address for + each node. + + + + Enable DNS + true + Enable the internal DNS server. The server does + not provide reverse resolution and is not a production + quality or scalable DNS solution. Use the internal DNS + server only for small deployments or for + testing. + + + + Mail Many maintenance scripts, as well as the API and @@ -127,9 +220,9 @@ and warnings. - + Support Address - root@localhost + root+support@localhost.localdomain This address is used for support requests. Support requests may include traffic complaints, security incident reporting, web site malfunctions, and @@ -138,13 +231,19 @@ Tracker. - + Boot Messages Address - root@localhost + root+install-msgs@localhost.localdomain The API will notify this address when a problem - occurs during node installation or boot. If a domain is not - specified, the default system domain will be used - name. + occurs during node installation or boot. + + + + Slice Address + root+SLICE@localhost.localdomain + This address template is used for sending + e-mail notifications to slices. SLICE will be replaced with + the name of the slice. @@ -170,10 +269,23 @@ Hostname - localhost - The fully qualified hostname or IP address of - the database server. This hostname must be resolvable and - reachable by the rest of your installation. + localhost.localdomain + The fully qualified hostname of the database + server. + + + + IP Address + 127.0.0.1 + The IP address of the database server, if not + resolvable by the configured DNS servers. + + + + Port + 5432 + The TCP port number through which the database + server should be accessed. @@ -220,13 +332,18 @@ Hostname - localhost - The fully qualified hostname or IP address of - the API server. This hostname must be resolvable and - reachable by the rest of your installation, as well as your - nodes. + localhost.localdomain + The fully qualified hostname of the API + server. + + IP Address + 127.0.0.1 + The IP address of the API server, if not + resolvable by the configured DNS servers. + + Port 80 @@ -246,7 +363,7 @@ Maintenance User - maint@test.planet-lab.org + maint@localhost.localdomain The username of the maintenance account. This account is used by local scripts that perform automated tasks, and cannot be used for normal logins. @@ -264,9 +381,10 @@ Authorized Hosts A space-separated list of IP addresses allowed - to access the API through the maintenance account. If left - blank, the API, web, and boot servers are - allowed. + to access the API through the maintenance account. The value + of this variable is set automatically to allow only the API, + web, and boot servers, and should not be + changed. - - SSL Certificate - /etc/planetlab/api_ssl.crt - The signed SSL certificate to use for HTTPS - access. If not specified or non-existent, a self-signed - certificate will be generated. - - - SSL Key + SSL Private Key /etc/planetlab/api_ssl.key - The corresponding SSL private key used for - signing the certificate, and for signing slice tickets. If - not specified or non-existent, one will be + The SSL private key to use for encrypting HTTPS + traffic. If non-existent, one will be generated. - - SSL Key - /etc/planetlab/api_ssl.pub - The corresponding SSL public key. If not - specified or non-existent, one will be - generated. + + SSL Public Certificate + /etc/planetlab/api_ssl.crt + The corresponding SSL public certificate. By + default, this certificate is self-signed. You may replace + the certificate later with one signed by a root + CA. + + + + Root CA SSL Public Certificate + /etc/planetlab/api_ca_ssl.crt + The certificate of the root CA, if any, that + signed your server certificate. If your server certificate is + self-signed, then this file is the same as your server + certificate. @@ -322,13 +441,18 @@ Hostname - localhost - The fully qualified hostname or IP address of - the web server. This hostname must be resolvable and - reachable by the rest of your installation, as well as your - nodes. + localhost.localdomain + The fully qualified hostname of the web + server. + + IP Address + 127.0.0.1 + The IP address of the web server, if not + resolvable by the configured DNS servers. + + Port 80 @@ -349,20 +473,30 @@ be downloaded, or its contents replaced by a file upload, but the actual shouldn't need to be changed. --> + + SSL Private Key + /etc/planetlab/www_ssl.key + The SSL private key to use for encrypting HTTPS + traffic. If non-existent, one will be + generated. + + - SSL Certificate + SSL Public Certificate /etc/planetlab/www_ssl.crt - The signed SSL certificate to use for HTTPS - access. If not specified or non-existent, a self-signed - certificate will be generated. + The corresponding SSL public certificate for + the HTTP server. By default, this certificate is + self-signed. You may replace the certificate later with one + signed by a root CA. - - SSL Key - /etc/planetlab/www_ssl.key - The corresponding SSL private key. If not - specified or non-existent, one will be - generated. + + Root CA SSL Public Certificate + /etc/planetlab/www_ca_ssl.crt + The certificate of the root CA, if any, that + signed your server certificate. If your server certificate is + self-signed, then this file is the same as your server + certificate. @@ -385,13 +519,18 @@ Hostname - localhost - The fully qualified hostname or IP address of - the boot server. This hostname must be resolvable and - reachable by the rest of your installation, as well as your - nodes. + localhost.localdomain + The fully qualified hostname of the boot + server. + + IP Address + 127.0.0.1 + The IP address of the boot server, if not + resolvable by the configured DNS servers. + + Port 80 @@ -413,20 +552,29 @@ be downloaded, or its contents replaced by a file upload, but the actual shouldn't need to be changed. --> - - SSL Certificate + + SSL Private Key + /etc/planetlab/boot_ssl.key + The SSL private key to use for encrypting HTTPS + traffic. + + + + SSL Public Certificate /etc/planetlab/boot_ssl.crt - The signed SSL certificate to use for HTTPS - access. If not specified, or non-existent a self-signed - certificate will be generated. + The corresponding SSL public certificate for + the HTTP server. By default, this certificate is + self-signed. You may replace the certificate later with one + signed by a root CA. - - SSL Key - /etc/planetlab/boot_ssl.key - The corresponding SSL private key. If not - specified or non-existent, one will be - generated. + + Root CA SSL Public Certificate + /etc/planetlab/boot_ca_ssl.crt + The certificate of the root CA, if any, that + signed your server certificate. If your server certificate is + self-signed, then this file is the same as your server + certificate. @@ -440,10 +588,21 @@ PlanetLab Central Packages true + + dev + + + kernel-vserver + sendmail sendmail-cf + + dnsmasq + rsync @@ -454,13 +613,24 @@ cvs curl wget + less + gzip + bzip2 + cpio + tar + diffutils createrepo + yum + rpm expect + + openssh + python @@ -491,20 +661,16 @@ PyXML + PlanetLabAuth xmlsec1 xmlsec1-openssl openssl - - mkisofs - - - gnupg - - - sharutils + + bootcd + bootmanager