mirror of
https://git.rwth-aachen.de/acs/public/villas/node/
synced 2025-03-09 00:00:00 +01:00
moved some stuff to InetDistSim repository because it does not belong to S2SS
This commit is contained in:
parent
ec2595e703
commit
c75e03db77
21 changed files with 0 additions and 363 deletions
|
@ -1,24 +0,0 @@
|
|||
S2SS LiveUSB Image
|
||||
===================================================================
|
||||
|
||||
This archive contains an image of Fedora installation
|
||||
which has been tuned for low latency and overall performance.
|
||||
It facilitates the setup of a S2SS instance and is designed to be used
|
||||
by partners of the Institute for Automation of Complex Power Systems (ACS).
|
||||
|
||||
This image will automatically request an IP address via DHCP
|
||||
and create a SSH tunnel to the central orchestration server.
|
||||
This allows further configuration and control.
|
||||
|
||||
The default credentials are:
|
||||
|
||||
User: root
|
||||
Password: s2ss-admin
|
||||
|
||||
Copy image with bundled tool [1] to a USB stick or a harddisk.
|
||||
The image is about 2GB in size.
|
||||
IMPORTANT: All contents of the stick will be wiped! Make backups!
|
||||
|
||||
[1] http://www.alexpage.de/usb-image-tool/
|
||||
|
||||
Contact: Steffen Vogel <StVogel@eonerc.rwth-aachen.de>
|
|
@ -1,10 +0,0 @@
|
|||
#!/bin/bash
|
||||
|
||||
mount /dev/sdb1 /media/usb
|
||||
|
||||
for part in dev sys proc; do
|
||||
umount /media/usb/$part
|
||||
mount -o bind /$part /media/usb/$part
|
||||
done
|
||||
|
||||
chroot /media/usb
|
|
@ -1,7 +0,0 @@
|
|||
GRUB_TIMEOUT=5
|
||||
GRUB_DISTRIBUTOR="$(sed 's, release .*$,,g' /etc/system-release)"
|
||||
GRUB_DEFAULT=1
|
||||
GRUB_DISABLE_SUBMENU=false
|
||||
GRUB_TERMINAL_OUTPUT="console"
|
||||
GRUB_CMDLINE_LINUX="isolcpus=6,7 selinux=0 audit=0"
|
||||
GRUB_DISABLE_RECOVERY=true
|
|
@ -1 +0,0 @@
|
|||
unknown-s2ss
|
|
@ -1,10 +0,0 @@
|
|||
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
|
||||
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
|
||||
|
||||
# Orchestrator
|
||||
|
||||
# ACS hosts
|
||||
134.130.169.31 acs-s2ss
|
||||
134.130.169.32 acs-gtfpga
|
||||
137.226.160.69 acs-opal
|
||||
137.226.160.115 acs-workstation
|
|
@ -1 +0,0 @@
|
|||
0.5-turin
|
|
@ -1 +0,0 @@
|
|||
setup.sh
|
|
@ -1,3 +0,0 @@
|
|||
blacklist snd_hda_intel
|
||||
blacklist nouveau
|
||||
blacklist mei_me
|
|
@ -1,3 +0,0 @@
|
|||
# More conservative interrupt throttling for better latency
|
||||
# https://www.kernel.org/doc/Documentation/networking/e1000e.txt
|
||||
option e1000e InterruptThrottleRate=1
|
|
@ -1,31 +0,0 @@
|
|||
*filter
|
||||
:INPUT ACCEPT
|
||||
:FORWARD ACCEPT
|
||||
:OUTPUT ACCEPT
|
||||
|
||||
# Allow loopback traffic
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
|
||||
# Allow established connections, and those not coming from the outside
|
||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
|
||||
# Allow HTTP
|
||||
-A INPUT -p tcp --dport http -m conntrack --ctstate NEW -j ACCEPT
|
||||
|
||||
# Allow SSH
|
||||
-A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j ACCEPT
|
||||
|
||||
# Allow Tinc
|
||||
-A INPUT -p udp --dport tinc -j ACCEPT
|
||||
-A INPUT -p tcp --dport tinc -j ACCEPT
|
||||
|
||||
# Accept Pings
|
||||
-A INPUT -p icmpv6 -j ACCEPT
|
||||
|
||||
# Reject everything else
|
||||
-A INPUT -j REJECT
|
||||
|
||||
# We wont act as a router
|
||||
-A FORWARD -j REJECT
|
||||
|
||||
COMMIT
|
|
@ -1,34 +0,0 @@
|
|||
*filter
|
||||
:INPUT ACCEPT
|
||||
:FORWARD ACCEPT
|
||||
:OUTPUT ACCEPT
|
||||
|
||||
# Allow loopback traffic
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
|
||||
# Allow established connections, and those not coming from the outside
|
||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
|
||||
# Allow HTTP
|
||||
-A INPUT -p tcp --dport http -m conntrack --ctstate NEW -j ACCEPT
|
||||
|
||||
# Allow VPN
|
||||
-A INPUT -s 10.0.0.0/8 -j ACCEPT
|
||||
|
||||
# Allow SSH
|
||||
-A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j ACCEPT
|
||||
|
||||
# Allow Tinc
|
||||
-A INPUT -p udp --dport tinc -j ACCEPT
|
||||
-A INPUT -p tcp --dport tinc -j ACCEPT
|
||||
|
||||
# Accept Pings
|
||||
-A INPUT -p icmp -j ACCEPT
|
||||
|
||||
# Reject everything else
|
||||
-A INPUT -j REJECT
|
||||
|
||||
# We wont act as a router
|
||||
-A FORWARD -j REJECT
|
||||
|
||||
COMMIT
|
|
@ -1 +0,0 @@
|
|||
NETWORKING=yes
|
|
@ -1,15 +0,0 @@
|
|||
[Unit]
|
||||
Description=dhclient on all interfaces
|
||||
Wants=network.target
|
||||
|
||||
[Service]
|
||||
Type=forking
|
||||
ExecStart=/sbin/dhclient -4 -w
|
||||
|
||||
Restart=on-failure
|
||||
RestartSec=10
|
||||
|
||||
TimeoutSec=60
|
||||
|
||||
[Install]
|
||||
WantedBy=network.target
|
|
@ -1,15 +0,0 @@
|
|||
[Unit]
|
||||
Description=The mongoose Web server
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=nobody
|
||||
Group=nobody
|
||||
Restart=always
|
||||
ExecStart=/usr/bin/mongoose -p 80 -r /var/www/
|
||||
StandardOutput=syslog
|
||||
SyslogIdentifier=mongoose
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
|
@ -1,16 +0,0 @@
|
|||
[Unit]
|
||||
Description=S2SS LiveUSB Image setup
|
||||
Requires=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
ExecStart=/etc/image/setup.sh
|
||||
RemainAfterExit=yes
|
||||
|
||||
Restart=on-failure
|
||||
RestartSec=10
|
||||
|
||||
TimeoutSec=60
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
|
@ -1 +0,0 @@
|
|||
latency-performance
|
|
@ -1,9 +0,0 @@
|
|||
#!/bin/bash
|
||||
|
||||
rpm -Uvh http://ccrma.stanford.edu/planetccrma/mirror/fedora/linux/planetccrma/20/i386/planetccrma-repo-1.1-3.fc20.ccrma.noarch.rpm
|
||||
|
||||
yum update
|
||||
|
||||
yum install planetccrma-core
|
||||
|
||||
source update_boot.sh
|
|
@ -1,56 +0,0 @@
|
|||
#!/bin/bash
|
||||
|
||||
set -e
|
||||
|
||||
RECIPIENTS="stvogel@eonerc.rwth-aachen.de,mstevic@eonerc.rwth-aachen.de"
|
||||
|
||||
SERVER=s2ss.0l.de
|
||||
USER=acs
|
||||
|
||||
PORT=$(shuf -i 60000-65535 -n 1)
|
||||
|
||||
# wait for working network connection
|
||||
while ! curl http://canihazip.com/s &> /dev/null; do
|
||||
sleep 1
|
||||
done
|
||||
|
||||
IP=$(curl -s http://canihazip.com/s)
|
||||
HOSTNAME=$(dig +short -x $IP)
|
||||
if [ -z "$HOSTNAME" ]; then
|
||||
HOSTNAME=$(hostname)
|
||||
fi
|
||||
|
||||
# check if system has net connectivity. otherwise die...
|
||||
ssh -q -o ConnectTimeout=2 $USER@$SERVER
|
||||
|
||||
# setup SSH tunnel for mail notification
|
||||
ssh -f -N -L 25:localhost:25 $USER@$SERVER
|
||||
# setup SSH reverse tunnel for remote administration
|
||||
ssh -f -N -R $PORT:localhost:22 $USER@$SERVER
|
||||
|
||||
# send mail with notification about new node
|
||||
sendmail "$RECIPIENTS" <<EOF
|
||||
Subject: New S2SS node alive: $IP ($HOSTNAME)
|
||||
From: Simulator2Simulator Server <acs@0l.de>
|
||||
To: $RECIPIENTS
|
||||
|
||||
There's a new host with the S2SS LiveUSB Image running:
|
||||
|
||||
Version: $(cat /etc/image-release)
|
||||
Reverse SSH tunnel port: $PORT
|
||||
Internet IP: $IP
|
||||
Hostname: $HOSTNAME
|
||||
|
||||
Latency:
|
||||
$(ping -qc 5 $SERVER)
|
||||
|
||||
Traceroute:
|
||||
$(traceroute $SERVER)
|
||||
|
||||
Interfaces:
|
||||
$(ip addr)
|
||||
|
||||
Hardware:
|
||||
$(lshw)
|
||||
|
||||
EOF
|
|
@ -1,24 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
# author: Christian Berendt <mail@cberendt.net>
|
||||
|
||||
set -x
|
||||
|
||||
for kernel in $(find /boot/vmlinuz*); do
|
||||
version=$(basename $kernel)
|
||||
version=${version#*-}
|
||||
if [ ! -e /boot/initramfs-$version.img ]; then
|
||||
sudo /usr/bin/dracut /boot/initramfs-$version.img $version
|
||||
fi
|
||||
done
|
||||
|
||||
for image in $(find /boot/initramfs*); do
|
||||
version=${image%.img}
|
||||
version=${version#*initramfs-}
|
||||
if [ ! -e /boot/vmlinuz-$version ]; then
|
||||
sudo rm $image
|
||||
fi
|
||||
done
|
||||
|
||||
/usr/sbin/grub2-mkconfig -o /boot/grub2/grub.cfg
|
||||
|
|
@ -1,56 +0,0 @@
|
|||
authconfig-6.2.6-4.fc20.x86_64
|
||||
automake-1.13.4-6.fc20.noarch
|
||||
bash-completion-2.1-3.fc20.noarch
|
||||
bind-utils-9.9.4-18.P2.fc20.x86_64
|
||||
biosdevname-0.5.0-2.fc20.x86_64
|
||||
bzip2-1.0.6-9.fc20.x86_64
|
||||
dhclient-4.2.7-2.fc20.x86_64
|
||||
dosfstools-3.0.27-1.fc20.x86_64
|
||||
dracut-config-rescue-037-11.git20140402.fc20.x86_64
|
||||
e2fsprogs-1.42.12-3.fc20.x86_64
|
||||
efibootmgr-0.11.0-1.fc20.x86_64
|
||||
ftp-0.17-65.fc20.x86_64
|
||||
gcc-4.8.3-7.fc20.x86_64
|
||||
gdb-7.7.1-21.fc20.x86_64
|
||||
gdisk-0.8.10-2.fc20.x86_64
|
||||
git-svn-1.9.3-2.fc20.x86_64
|
||||
grub2-2.00-27.fc20.x86_64
|
||||
htop-1.0.3-3.fc20.x86_64
|
||||
iptables-services-1.4.19.1-1.fc20.x86_64
|
||||
kbd-1.15.5-12.fc20.x86_64
|
||||
kernel-modules-extra-3.18.9-100.fc20.x86_64
|
||||
kernel-rt-modules-extra-3.14.29-200.rt26.1.fc20.ccrma.x86_64
|
||||
libconfig-1.4.9-5.fc20.x86_64
|
||||
lshw-B.02.17-2.fc20.x86_64
|
||||
lzo-devel-2.08-1.fc20.x86_64
|
||||
mailx-12.5-11.fc20.x86_64
|
||||
man-db-2.6.5-6.fc20.x86_64
|
||||
minicom-2.6.2-4.fc20.x86_64
|
||||
nano-2.3.2-5.fc20.x86_64
|
||||
nmap-6.45-1.fc20.x86_64
|
||||
ntp-4.2.6p5-20.fc20.x86_64
|
||||
numactl-2.0.9-2.fc20.x86_64
|
||||
openssh-server-6.4p1-8.fc20.x86_64
|
||||
openssl-devel-1.0.1e-41.fc20.x86_64
|
||||
parted-3.1-13.fc20.x86_64
|
||||
passwd-0.79-2.fc20.x86_64
|
||||
patch-2.7.1-7.fc20.x86_64
|
||||
pciutils-devel-3.3.0-1.fc20.x86_64
|
||||
planetccrma-repo-1.1-3.fc20.ccrma.noarch
|
||||
policycoreutils-2.2.5-4.fc20.x86_64
|
||||
psmisc-22.20-3.fc20.x86_64
|
||||
readline-devel-6.2-10.fc20.x86_64
|
||||
rootfiles-8.1-16.fc20.noarch
|
||||
schedtool-1.3.0-9.fc20.x86_64
|
||||
screen-4.1.0-0.19.20120314git3c2946.fc20.x86_64
|
||||
setserial-2.17-34.fc20.x86_64
|
||||
socat-1.7.2.4-1.fc20.x86_64
|
||||
ssmtp-2.64-14.fc20.x86_64
|
||||
sudo-1.8.12-1.fc20.x86_64
|
||||
tar-1.26-31.fc20.x86_64
|
||||
tcpdump-4.5.1-3.fc20.x86_64
|
||||
texinfo-5.1-4.fc20.x86_64
|
||||
traceroute-2.0.20-1.fc20.x86_64
|
||||
tuned-2.4.1-3.fc20.noarch
|
||||
wget-1.16.1-2.fc20.x86_64
|
||||
yum-utils-1.1.31-27.fc20.noarch
|
|
@ -1,45 +0,0 @@
|
|||
#!/bin/sh
|
||||
|
||||
# die on error
|
||||
set -e
|
||||
|
||||
if [ "$(hostname)" != "acs-s2ss" ]; then
|
||||
echo "This script has to be run only acs-s2ss!" 1>&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ "$(id -u)" != "0" ]; then
|
||||
echo -e "This script must be run as root" 1>&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
IP=78.91.103.24
|
||||
PORT=12010
|
||||
IPT=iptables
|
||||
RULE1="-p udp --dport $PORT -s $IP -j REJECT"
|
||||
RULE2="-p tcp --dport $PORT -s $IP -j REJECT"
|
||||
|
||||
case $1 in
|
||||
block)
|
||||
$IPT -I INPUT 1 $RULE1
|
||||
$IPT -I INPUT 1 $RULE2
|
||||
service tincd restart
|
||||
;;
|
||||
|
||||
unblock)
|
||||
$IPT -D INPUT $RULE1
|
||||
$IPT -D INPUT $RULE2
|
||||
service tincd restart
|
||||
;;
|
||||
|
||||
status)
|
||||
$IPT -C INPUT $RULE1 && echo "Tinc UDP is blocked"
|
||||
$IPT -C INPUT $RULE2 && echo "Tinc TCP is blocked"
|
||||
|
||||
echo -n "Sintef "
|
||||
tinc -n s2ss info sintef | grep "Reachability"
|
||||
|
||||
echo -n "Frankfurt "
|
||||
tinc -n s2ss info fra | grep "Reachability"
|
||||
;;
|
||||
esac
|
Loading…
Add table
Reference in a new issue