Debugging Infrastructure

Author: DerekTBrown

Makefile

@@ -16,10 +16,17 @@ run:
 
 # Test Application
 test:
-	ansible-playbook ./test.yml --inventory ./local/vagrant_ansible_inventory
 	vagrant rsync meteor
 	vagrant ssh meteor --command "cd /tuxlab-sync && /usr/local/bin/meteor npm install && /usr/local/bin/meteor npm test";
 
+# Access Various Containers
+meteor:
+	vagrant ssh meteor; exit 0;
+dswarm:
+	vagrant ssh dswarm; exit 0;
+dhost:
+	ssh -i ~/.vagrant.d/insecure_private_key -p 2222 -o UserKnownHostsFile=/dev/null [email protected]; exit 0;
+
 # Down Vagrantfile
 destroy:
 	vagrant destroy --force;

app

@@ -1,4 +1,5 @@
 #!/bin/bash
 # For some unknown reason, this fixes network bugs.
+/bin/sleep 5;
 sudo systemctl restart network || true;
 /bin/sleep 5;

local/vagrant_network_conf.sh

@@ -104,6 +104,10 @@
     -config /etc/pki/tls/openssl.cnf
   register: CSR
 
+- name: Convert PKCS8 to PKCS1 Alternative
+  become: true
+  shell: openssl rsa -in /etc/ssl/local/host.pem -out /etc/ssl/local/host.key
+
 ###############################
 #          SIGN CSR           #
 ###############################

roles/ssl/tasks/main.yml

@@ -22,7 +22,7 @@
       verify_host: no
 
 # INSTALL FOREVER
-  - name: install forvever
+  - name: install forever
     become: yes
     shell: meteor npm install -g forever
 

roles/tuxlab-app/tasks/production.yml

@@ -1,9 +1,27 @@
 ---
+
+- name: create tuxlab settings directory
+  become: yes
+  file:
+    path: /etc/tuxlab-proxy/
+    state: directory
+    mode: 0755
+
 - name: copy tuxlab-proxy settings
   become: yes
-  template: src=settings.json.j2 dest=/root/tuxlab-proxy-settings.json owner=root group=root mode=0644
+  template:
+    src: settings.json.j2
+    dest: /etc/tuxlab-proxy/settings.json
+    mode: 0755
+
+- name: update permissions
+  become: true
+  shell: chmod +rwx {{item}}
+  with_items:
+    - /etc/ssl/local/
+    - /etc/tuxlab-proxy/
 
-#TODO https://github.com/ansible/ansible-modules-core/issues/5515
+#TODO https://github.com/ansible/ansible-mod   ~/tuxlab-proxy-settings.json~/tuxlab-proxy-settings.json~/tuxlab-proxy-settings.jsonules-core/issues/5515
 - name: pull ssh-proxy image
   become: yes
   shell: docker pull tuxlab/ssh-proxy
@@ -14,8 +32,8 @@
     name: host-proxy
     image: tuxlab/ssh-proxy
     state: started
-    restart_policy: on-failure
+    restart_policy: always
     network_mode: host
     volumes:
-      - /root/tuxlab-proxy-settings.json:/settings.json:ro
-      - /etc/ssl/local:/ssl:ro
+      - /etc/tuxlab-proxy/settings.json:/usr/lib/tuxlab/settings.json:ro
+      - /etc/ssl/local/:/usr/lib/tuxlab/ssl/:ro

roles/tuxlab-proxy/tasks/main.yml

@@ -1,26 +1,27 @@
 {
   "etcd_conf" : {
-    "etcd_hosts" : ["172.17.0.1:2379"],
+    "etcd_hosts" : ["https://{{ ansible_host }}:2379"],
     "etcd_conn_opts" : {
-      "cert" : "/ssl/cert.pem",
-      "key" : "/ssl/key.pem",
-      "cacert" : "/ssl/ca.pem"
+      "cert" : "/usr/lib/tuxlab/ssl/cert.pem",
+      "key" : "/usr/lib/tuxlab/ssl/host.pem",
+      "cacert" : "/usr/lib/tuxlab/ssl/ca.pem"
     }
   },
   "docker_conf" : {
     "docker_url" : "tcp://{{ ansible_host }}:2375",
     "docker_args" : {
-      "cert" : "/ssl/cert.pem",
-      "key" : "/ssl/key.pem",
-      "cacert" : "/ssl/ca.pem"
+      "cert" : "/usr/lib/tuxlab/ssl/cert.pem",
+      "key" : "/usr/lib/tuxlab/ssl/host.pem",
+      "cacert" : "/usr/lib/tuxlab/ssl/ca.pem"
     }
   },
-  "wetty_conf" : {
+  "xterm_conf" : {
     "host" : "0.0.0.0",
     "port" : 80
   },
   "ssh_conf" : {
     "host" : "0.0.0.0",
-    "port" : 22
+    "port" : 22,
+    "key" : "/usr/lib/tuxlab/ssl/host.key"
   }
 }