Changes

In For this portion of assignment 1, you will set up the basic functionality for a virtual machine to act as a '''cloning -source''' to make it easier for the student to create other servers (VMs) in later assignments. Whenever you clone another server (in later assignments), you MUST make certain to configure the cloned server in order to make it function in the network correctly and meet the requirements of future assignments. All of the assignments for this course are '''<u>interdependent </u>''' of each other and belong to the same Virtual Private Network called '''335assign'''.

'''Weight''': 53% of the overall grade '''Due Date''': During Week 6 (in class)

* Addresses in this network will start with '''10172.161''' followed by the '''last two digits of your student number30.20''' (just as your main virtual network). The subnet mask must be '''255.255.255.0'''

=== Create a "Cloning Source" VM (335assign Virtual Network) ===virtual machine that you will use as a cloning-source.

Create a virtual machine that you will use as a template (i.e. a '''Details for the cloning source'''). It should have a command-line interface only. Configure it to be a good cloning source, making certain it has all the following elements prior to cloning:

# The hostname for name of this server cloning-source VM will be called: '''seedling'''.#You should use the options that you used in your lab1 to setup the static network, plus you should use the DOMAIN parameter to set the '''coniferous.trees.ops''' domain for your cloning-source.#The VM should have a command-line interface only.#Configure it to be a good cloning-source, '''making certain that the cloning-sourcehas all the following elements prior to cloning:'''# ::*Don't make the virtual drive too big: you will need space for it as well as space for the clones you from your cloning -source<br>('''2GB''' should be enough for any cloning -source and clone VM that you create for this assignment).# ::*The hostname for this server will be called: '''seedling'''::*Make certain that you can login to your cloning -source.# ::*Configure your network interface for this cloning-source with a '''static''' configurationand is connected to the '''335assign''' network. Refer to the table below for IP address and hostname.<br>

| '''c7hostspruce.ops335coniferous.orgtrees.ops''' (your existing source) || 10 External Facing Address:''' DHCP assigned'''<br>Internal Virtual Bridge (virbr1):''' 172.16130.X20.1 ''' || Your '''host ''' machine

| '''sourceseedling.coniferous.ops335trees.orgops''' || 10'''172.16130.X20.254 100''' || '''Cloning -source ''' used to create other servers for other assignments.

<ol><li value="5">Make certain your cloning-source can connect to the Internet using the newer static configuration.</li><li>Run a '''yum update''' for this cloning-source.</li><li>Make certain that SELinux is set to '''enforcing'''.</li><li>Set up an SSH server on this "cloning-source".</li><li> Make sure that '''PermitRootLogin''' is set to '''yes''' for this server.</li><li>Make ceratin that only the root account is permitted to login using key authentication. If other users are required to be created in a later assignment, they should be permitted to log in with a their username and password.</li><li>Copy the same public key (already generated for your '''Host Machine''' for your '''root''' account in lab1) to the '''root''' account on your cloning-source.</li><li>Test to make certain that you can login from root on your host machine to your root account on the cloning-course ("seedling") without being prompted for a pass-phrase.</li><li>If you have created a '''regular user''' when you installed this machine, '''delete that regular user''' (make certain to '''remove the regular user's home directory!''').</li></ol> === Set-up Firewall Rules for your Cloning -Source===

# Modify the iptables to meet the following conditions:::<ul>::<li>All outgoing traffic is allowed.</li>::<li>Responses to any traffic the machine sends out are allowed.</li>::<li>Traffic on the loopback interface is allowed.</li>::<li>The default iptables rules should host machine (and <b>only</b> the host machine) must be OK, so you are NOT required able to ssh to make any iptables rules for that cloning-source VM.</li>::<li>ICMP traffic is allowed if it originated with the <b>local network only</b>.</li>::<li>As this portion of is acting as the assignmentsecure basis for later machines, no other traffic should be allowed.</li>::</ul>

=== Create Backup Script for your Cloning SourceFull and Incremental Backups of cloning-source VM===

# This task is to be performed in your c7host '''host''' machine.

# Create the following directory: '''/root/bin'''# Create a Bash shell script called '''/root/bin/backupCloningSourceassnBackup.bash''' to perform a '''full backup ''' using the dump '''gzip''' command to backup the entire file system of the your cloning-source VM to save the compressed copy to the directory path: '''/backup/full/'''). # This shell script should store any VM image file in the "/var/lib/libvirt/images" directory that has the extension ".qcow2" as a positional parameter to be used with a for loop. # Perform a Net-search to use the '''pv''' (like you did in Lab1''pipe-viewer'')command to show a text-based indicator of backup for EACH VM image file. You need to add the '''EPEL repository''' to install the pv command.

#*'''Demonstrate working assignment to your instructor in class:'''<ol type="a"><li>Students need to demonstrate their assignment functionality to their professor during a lab period (like you would for any lab for "sign-off").</li><li>Students are required to prepare everything ahead of time so that you can quickly demonstrate to your instructor that all required parts of your assignment are working.<br><br></li></ol>#Download and run a shell script that will check your set-up:<ol type="a"><li>Issue Do do proceed to the command: wget URL</li><li>Set execute permissions next step until you have demonstrated your assignment to your instructor to check for errors that may cause problems when running the shell checking script called: .</li><libr>Run the shell script and redirect standard output to a file<br>Issue the command: ./shellscriptname.bash > assn1p1.txt</li><li>Submit the file assn1p1.txt to the dropbox for assignment #1 - Part 1 by the required due date and time.</li></ol>

 ::'''Peter Callaghan's Classes (Sections C &amp; D):'''<ul><li>Refer to instruction on Moodle to download and run marking shell script</li></ul>  ::'''Murray Saul's Classes (Sections A &amp; B):'''<ol><li>Login as '''root''' on your '''host''' machine.</li><li>Change to the '''/root/bin''' directory.</li><li>Make certain that your '''cloning-source VM is running'''.<li>Issue the following command to install e-mail on your '''host''' machine:<source>yum install mailx </source><li>Issue the command to download a checking script for your assignment to your '''host''' machine: <source>wget http://matrix.senecac.on.ca/~murray.saul/ops335/check-assn1-p1.bash</source></li><li>Set execute permissions and run the command: '''/root/bin/check-assn1-p1.bash'''<br>(You shell script contents will be mailed to your Seneca email and to your OPS335 instructor's Seneca email. If you do '''NOT''' receive an e-mail message in your Seneca email account, then there is a problem, and you '''MUST''' rerun or contact your OPS335 instructor immediately.<br><br></li></ol>*'''Additional Assignment Information:'''<ol type="a"><li>This assignment is to be completed individually. '''Group submissions are not allowed'''.</li><li>Test your machine to make sure it works. If a machine is not accessible (e.g. will not boot, can not be accessed through ssh from your host, etc.), or is otherwise non-functional, you may be told to '''resubmit'''.</li><li>'''Late submissions are a subject to a penalty of 10% per day'''.</li><ol> ==Evaluation Rubric===

{| class="wikitable" width=4050%|-| colspan=2 style="text-align:center;background-color:#cccccc;" |'''Student Demonstration (in class)'''|-| style="font-weight:bold" | Evaluation Item | width=10% style="text-align:right;font-weight:bold" | Mark|-| Created Virtual Network: '''335assign'''<br>(correct settings) | style="text-align:right" | /1|-| Can '''ping cloning-source from host machine''' with '''correct IPADDR'''| style="text-align:right" | /1|-| root account on host machine can '''connect to cloning-source VM''' via ssh application '''without''' password| style="text-align:right" | /1|-| cloning-source VM can connect to the Internet<br>(i.e. '''ping 8.8.8.8''')| style="text-align:right" | /1|-| cloning-source can SSH to student's '''Matrix''' account| style="text-align:right" | /1|-| colspan=2 style="text-align:center;background-color:#cccccc;" |'''Configuration (Checking Script Output)'''|-| style="font-weight:bold;" | Evaluation Item | width=10% style="text-align:right;font-weight:bold" | Mark

| colspan=2 Hostname set to: '''seedling''' for cloning source | style="text-align:centerright" |'''Student Demonstration (in class)'''/1

| Evaluation Item '''yum update performed''' | width=10% style="text-align:right" | Mark/1

| Created Virtual Network '''No regular users on cloning source''' (just root)

| xSELinux status set to: '''enforcing'''

| colspan=2 firewalld '''stopped''' and '''inactive'''| style="text-align:centerright" |'''Configuration (Checking Script Output)'''/1

| Evaluation Item iptables '''active''' and '''enabled'''| Markstyle="text-align:right" | /1

| x iptables - '''All outgoing traffic is allowed'''

| xiptables - The '''host machine''' (and only the host machine) must be '''able to ssh to the cloning-source'''

| style="text-align:right" | '''/x30'''