Duke-GCB/ElucidatorRestart

Name: ElucidatorRestart

Owner: Duke Center for Genomic and Computational Biology

Description: Elucidator Restart Service

Created: 2017-04-13 14:40:58.0

Updated: 2017-04-13 14:55:06.0

Pushed: 2017-06-12 14:14:10.0

Homepage: null

Size: 329

Language: Shell

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

Elucidator Restart Webserver

Serves website that allows authorized users to restart a service on a target machine. Authentication is handled using Duke shibboleth and groupmanager.

User Clicks “Submit Restart Request”

This screen will display Restart already scheduled. if a user has already requested a restart that hasn't completed yet.

Installation

Setup for website

Install docker

Create a directory named external with the following structure:

rnal/
ibboleth/
 sp-cert.pem               # generated by /etc/shibboleth/keygen.sh
 sp-key.pem                # generated by /etc/shibboleth/keygen.sh
h/
 id_rsa                    # ssh setup used to connect to machine that will restart service
 known_hosts
l/
 restart_server.cer        # certs used by apache for https
 restart_server.key
 restart_server_interm.cer

Run this command to start the server:

$(pwd)
er run -p 443:443 -p 80:80 -e ELUCIDATOR_HOST=<user@targethost> \
-v $PWD/external:/etc/external \
quay.io/dukegcb/elucidator-restart

Setup for target machine

• Setup a user to be used when connecting.
• Add targetserver/authorized_keys to this users's .ssh directory (after filling in TODO).
• Create /opt/elrestart/ directory with appropriate permissions.
• Put targetserver/elrestart.sh in /opt/elrestart/ this is the ssh forced command that is run by the docker webserver.
• As root (since that user has permissions to restart the service) add a cron job. Copy targetserver/check_restart into some location.

  tab -e
  

  Example that runs every 5 minutes:

  * * * * <somelocation>/check_restart.sh