goatos-base

Description

GoatOS is a distributed LXC automation suite. It uses Chef for configuration managemenbt and Blender for orchestration.

With GoatOS you can set up ubuntu 14.04 servers to run unprivileged LXC containers. GoatOS automates

• bootstrapping/provisioning LXC hosts, chef servers etc (using SSH).
• container life cycle management (create, start, stop, destroy)
• exposing network services from containers to outside (using haproxy)
• customizing container with familiar chef DSL

Installation

gem install goatos-base

Usage

Setup

goatos init

Typical GoatOS clusters are composed of one master and multiple slaves. Master hosts chef server, which act as configuration artifact repository and metadata source, while the slave nodes run unprivileged LXC instances. Master and slave host customization can be done via chef, while container management is done on demand via blender.

GoatOS Base can be installed in a single host ( standalone mode) as well. For this create a virtual box vm (or ec2 instance) with ubuntu 14.04. Create an user with sudo access and bootstrap the instance with following command:

goatos bootstrap -h 192.168.1.49 -u ubuntu -i ssh_key.rsa

Note: GoatOS installer will ask for ssh password when -P flag is passed, instead of the -i flag.

This will install chef server, LXC and a goatos specific ssh keypair on the instance. Chef and ssh configuration will be stored locally for downstream automation. You should have chef's admin and validation key along with goatos specific ssh key on the keys directory in your current directory. This will also generate a knife config in etc directory for chef (you invoke all regular knife commands by passing -c etc/knife.rb, hence forth).

Next you can check conatiners present on the goatos fleet like this:

goatos lxc ls

This will use the ssh credentials (goatos user and an rsa key) generate via bootstrap.

To create a container, use the goatos lxc create command.

goatos lxc create -N ct01

This will create an ubunu 14.04 container. Additional flags can be used to create container specify other distro, release, archtecture. You can specify network services that you want to expose from the container using the --expose flag.

goatos lxc create -N ct01 --expose 22:tcp:2201

Above command will save the '22:tcp:2201' as metadata for the container. This metadata is processed by chef runs that controls the host running container to expose outside using haproxy. The string 22:tcp:2201 express the intent to expose port 22 (SSH i.e) of container on port 2201 on the host. Following goatos command will propagate these changes via chef.

bundle exec goatos run-chef -u USER -i key.rsa

You should be able to ssh into one of the container directly by ssh -p 2201 HOST_IP. Note, the default container have a prebaked user with name ubuntu and password ubuntu

For multinode cluster, you can bootstrap the master with -T master option, which will direct goatos to install only chef server specific components in the target host. While rest of the instanec can be bootstrapped with -T slave option, which will direct goatos to use local knife config (generated via master bootstrap process) and install only LXC specific tooling.

License

Apache 2

Contributing

1. Fork it ( https://github.com/PagerDuty/blender/fork )
2. Create your feature branch (git checkout -b my-new-feature)
3. Commit your changes (git commit -am 'Add some feature')
4. Push to the branch (git push origin my-new-feature)
5. Create a new Pull Request