1
0
Fork 0
mirror of https://git.rwth-aachen.de/acs/public/villas/node/ synced 2025-03-09 00:00:00 +01:00

moved some stuff to InetDistSim repository because it does not belong to S2SS

This commit is contained in:
Steffen Vogel 2015-09-27 16:04:15 +02:00
parent ec2595e703
commit c75e03db77
21 changed files with 0 additions and 363 deletions

View file

@ -1,24 +0,0 @@
S2SS LiveUSB Image
===================================================================
This archive contains an image of Fedora installation
which has been tuned for low latency and overall performance.
It facilitates the setup of a S2SS instance and is designed to be used
by partners of the Institute for Automation of Complex Power Systems (ACS).
This image will automatically request an IP address via DHCP
and create a SSH tunnel to the central orchestration server.
This allows further configuration and control.
The default credentials are:
User: root
Password: s2ss-admin
Copy image with bundled tool [1] to a USB stick or a harddisk.
The image is about 2GB in size.
IMPORTANT: All contents of the stick will be wiped! Make backups!
[1] http://www.alexpage.de/usb-image-tool/
Contact: Steffen Vogel <StVogel@eonerc.rwth-aachen.de>

View file

@ -1,10 +0,0 @@
#!/bin/bash
mount /dev/sdb1 /media/usb
for part in dev sys proc; do
umount /media/usb/$part
mount -o bind /$part /media/usb/$part
done
chroot /media/usb

View file

@ -1,7 +0,0 @@
GRUB_TIMEOUT=5
GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
GRUB_DEFAULT=1
GRUB_DISABLE_SUBMENU=false
GRUB_TERMINAL_OUTPUT="console"
GRUB_CMDLINE_LINUX="isolcpus=6,7 selinux=0 audit=0"
GRUB_DISABLE_RECOVERY=true

View file

@ -1 +0,0 @@
unknown-s2ss

View file

@ -1,10 +0,0 @@
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
# Orchestrator
# ACS hosts
134.130.169.31 acs-s2ss
134.130.169.32 acs-gtfpga
137.226.160.69 acs-opal
137.226.160.115 acs-workstation

View file

@ -1 +0,0 @@
0.5-turin

View file

@ -1 +0,0 @@
setup.sh

View file

@ -1,3 +0,0 @@
blacklist snd_hda_intel
blacklist nouveau
blacklist mei_me

View file

@ -1,3 +0,0 @@
# More conservative interrupt throttling for better latency
# https://www.kernel.org/doc/Documentation/networking/e1000e.txt
option e1000e InterruptThrottleRate=1

View file

@ -1,31 +0,0 @@
*filter
:INPUT ACCEPT
:FORWARD ACCEPT
:OUTPUT ACCEPT
# Allow loopback traffic
-A INPUT -i lo -j ACCEPT
# Allow established connections, and those not coming from the outside
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
# Allow HTTP
-A INPUT -p tcp --dport http -m conntrack --ctstate NEW -j ACCEPT
# Allow SSH
-A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j ACCEPT
# Allow Tinc
-A INPUT -p udp --dport tinc -j ACCEPT
-A INPUT -p tcp --dport tinc -j ACCEPT
# Accept Pings
-A INPUT -p icmpv6 -j ACCEPT
# Reject everything else
-A INPUT -j REJECT
# We wont act as a router
-A FORWARD -j REJECT
COMMIT

View file

@ -1,34 +0,0 @@
*filter
:INPUT ACCEPT
:FORWARD ACCEPT
:OUTPUT ACCEPT
# Allow loopback traffic
-A INPUT -i lo -j ACCEPT
# Allow established connections, and those not coming from the outside
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
# Allow HTTP
-A INPUT -p tcp --dport http -m conntrack --ctstate NEW -j ACCEPT
# Allow VPN
-A INPUT -s 10.0.0.0/8 -j ACCEPT
# Allow SSH
-A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j ACCEPT
# Allow Tinc
-A INPUT -p udp --dport tinc -j ACCEPT
-A INPUT -p tcp --dport tinc -j ACCEPT
# Accept Pings
-A INPUT -p icmp -j ACCEPT
# Reject everything else
-A INPUT -j REJECT
# We wont act as a router
-A FORWARD -j REJECT
COMMIT

View file

@ -1 +0,0 @@
NETWORKING=yes

View file

@ -1,15 +0,0 @@
[Unit]
Description=dhclient on all interfaces
Wants=network.target
[Service]
Type=forking
ExecStart=/sbin/dhclient -4 -w
Restart=on-failure
RestartSec=10
TimeoutSec=60
[Install]
WantedBy=network.target

View file

@ -1,15 +0,0 @@
[Unit]
Description=The mongoose Web server
After=network.target
[Service]
Type=simple
User=nobody
Group=nobody
Restart=always
ExecStart=/usr/bin/mongoose -p 80 -r /var/www/
StandardOutput=syslog
SyslogIdentifier=mongoose
[Install]
WantedBy=multi-user.target

View file

@ -1,16 +0,0 @@
[Unit]
Description=S2SS LiveUSB Image setup
Requires=network-online.target
[Service]
Type=simple
ExecStart=/etc/image/setup.sh
RemainAfterExit=yes
Restart=on-failure
RestartSec=10
TimeoutSec=60
[Install]
WantedBy=multi-user.target

View file

@ -1 +0,0 @@
latency-performance

View file

@ -1,9 +0,0 @@
#!/bin/bash
rpm -Uvh http://ccrma.stanford.edu/planetccrma/mirror/fedora/linux/planetccrma/20/i386/planetccrma-repo-1.1-3.fc20.ccrma.noarch.rpm
yum update
yum install planetccrma-core
source update_boot.sh

View file

@ -1,56 +0,0 @@
#!/bin/bash
set -e
RECIPIENTS="stvogel@eonerc.rwth-aachen.de,mstevic@eonerc.rwth-aachen.de"
SERVER=s2ss.0l.de
USER=acs
PORT=$(shuf -i 60000-65535 -n 1)
# wait for working network connection
while ! curl http://canihazip.com/s &> /dev/null; do
sleep 1
done
IP=$(curl -s http://canihazip.com/s)
HOSTNAME=$(dig +short -x $IP)
if [ -z "$HOSTNAME" ]; then
HOSTNAME=$(hostname)
fi
# check if system has net connectivity. otherwise die...
ssh -q -o ConnectTimeout=2 $USER@$SERVER
# setup SSH tunnel for mail notification
ssh -f -N -L 25:localhost:25 $USER@$SERVER
# setup SSH reverse tunnel for remote administration
ssh -f -N -R $PORT:localhost:22 $USER@$SERVER
# send mail with notification about new node
sendmail "$RECIPIENTS" <<EOF
Subject: New S2SS node alive: $IP ($HOSTNAME)
From: Simulator2Simulator Server <acs@0l.de>
To: $RECIPIENTS
There's a new host with the S2SS LiveUSB Image running:
Version: $(cat /etc/image-release)
Reverse SSH tunnel port: $PORT
Internet IP: $IP
Hostname: $HOSTNAME
Latency:
$(ping -qc 5 $SERVER)
Traceroute:
$(traceroute $SERVER)
Interfaces:
$(ip addr)
Hardware:
$(lshw)
EOF

View file

@ -1,24 +0,0 @@
#!/bin/sh
# author: Christian Berendt <mail@cberendt.net>
set -x
for kernel in $(find /boot/vmlinuz*); do
version=$(basename $kernel)
version=${version#*-}
if [ ! -e /boot/initramfs-$version.img ]; then
sudo /usr/bin/dracut /boot/initramfs-$version.img $version
fi
done
for image in $(find /boot/initramfs*); do
version=${image%.img}
version=${version#*initramfs-}
if [ ! -e /boot/vmlinuz-$version ]; then
sudo rm $image
fi
done
/usr/sbin/grub2-mkconfig -o /boot/grub2/grub.cfg

View file

@ -1,56 +0,0 @@
authconfig-6.2.6-4.fc20.x86_64
automake-1.13.4-6.fc20.noarch
bash-completion-2.1-3.fc20.noarch
bind-utils-9.9.4-18.P2.fc20.x86_64
biosdevname-0.5.0-2.fc20.x86_64
bzip2-1.0.6-9.fc20.x86_64
dhclient-4.2.7-2.fc20.x86_64
dosfstools-3.0.27-1.fc20.x86_64
dracut-config-rescue-037-11.git20140402.fc20.x86_64
e2fsprogs-1.42.12-3.fc20.x86_64
efibootmgr-0.11.0-1.fc20.x86_64
ftp-0.17-65.fc20.x86_64
gcc-4.8.3-7.fc20.x86_64
gdb-7.7.1-21.fc20.x86_64
gdisk-0.8.10-2.fc20.x86_64
git-svn-1.9.3-2.fc20.x86_64
grub2-2.00-27.fc20.x86_64
htop-1.0.3-3.fc20.x86_64
iptables-services-1.4.19.1-1.fc20.x86_64
kbd-1.15.5-12.fc20.x86_64
kernel-modules-extra-3.18.9-100.fc20.x86_64
kernel-rt-modules-extra-3.14.29-200.rt26.1.fc20.ccrma.x86_64
libconfig-1.4.9-5.fc20.x86_64
lshw-B.02.17-2.fc20.x86_64
lzo-devel-2.08-1.fc20.x86_64
mailx-12.5-11.fc20.x86_64
man-db-2.6.5-6.fc20.x86_64
minicom-2.6.2-4.fc20.x86_64
nano-2.3.2-5.fc20.x86_64
nmap-6.45-1.fc20.x86_64
ntp-4.2.6p5-20.fc20.x86_64
numactl-2.0.9-2.fc20.x86_64
openssh-server-6.4p1-8.fc20.x86_64
openssl-devel-1.0.1e-41.fc20.x86_64
parted-3.1-13.fc20.x86_64
passwd-0.79-2.fc20.x86_64
patch-2.7.1-7.fc20.x86_64
pciutils-devel-3.3.0-1.fc20.x86_64
planetccrma-repo-1.1-3.fc20.ccrma.noarch
policycoreutils-2.2.5-4.fc20.x86_64
psmisc-22.20-3.fc20.x86_64
readline-devel-6.2-10.fc20.x86_64
rootfiles-8.1-16.fc20.noarch
schedtool-1.3.0-9.fc20.x86_64
screen-4.1.0-0.19.20120314git3c2946.fc20.x86_64
setserial-2.17-34.fc20.x86_64
socat-1.7.2.4-1.fc20.x86_64
ssmtp-2.64-14.fc20.x86_64
sudo-1.8.12-1.fc20.x86_64
tar-1.26-31.fc20.x86_64
tcpdump-4.5.1-3.fc20.x86_64
texinfo-5.1-4.fc20.x86_64
traceroute-2.0.20-1.fc20.x86_64
tuned-2.4.1-3.fc20.noarch
wget-1.16.1-2.fc20.x86_64
yum-utils-1.1.31-27.fc20.noarch

View file

@ -1,45 +0,0 @@
#!/bin/sh
# die on error
set -e
if [ "$(hostname)" != "acs-s2ss" ]; then
echo "This script has to be run only acs-s2ss!" 1>&2
exit 1
fi
if [ "$(id -u)" != "0" ]; then
echo -e "This script must be run as root" 1>&2
exit 1
fi
IP=78.91.103.24
PORT=12010
IPT=iptables
RULE1="-p udp --dport $PORT -s $IP -j REJECT"
RULE2="-p tcp --dport $PORT -s $IP -j REJECT"
case $1 in
block)
$IPT -I INPUT 1 $RULE1
$IPT -I INPUT 1 $RULE2
service tincd restart
;;
unblock)
$IPT -D INPUT $RULE1
$IPT -D INPUT $RULE2
service tincd restart
;;
status)
$IPT -C INPUT $RULE1 && echo "Tinc UDP is blocked"
$IPT -C INPUT $RULE2 && echo "Tinc TCP is blocked"
echo -n "Sintef "
tinc -n s2ss info sintef | grep "Reachability"
echo -n "Frankfurt "
tinc -n s2ss info fra | grep "Reachability"
;;
esac