X-Git-Url: https://feistymeow.org/gitweb/?a=blobdiff_plain;f=production%2Fsites%2Fcakelampvm.com%2Fdocs%2Fmanual%2Fcakelampvm_guide_v002.html;h=71db45c80c026657b05807c7a7e7b657070f55d9;hb=ae875c4c1ae88f635f185f9a348cc81ed677aaf4;hp=5992b9735fe9f1512367a684ecbd8d7328c9a001;hpb=1e3c106c798eeb14702282fbe031cbaf3b078fcf;p=feisty_meow.git diff --git a/production/sites/cakelampvm.com/docs/manual/cakelampvm_guide_v002.html b/production/sites/cakelampvm.com/docs/manual/cakelampvm_guide_v002.html index 5992b973..71db45c8 100644 --- a/production/sites/cakelampvm.com/docs/manual/cakelampvm_guide_v002.html +++ b/production/sites/cakelampvm.com/docs/manual/cakelampvm_guide_v002.html @@ -1,16 +1,17 @@
- +The cakelampvm project provides a Virtualbox VM that acts as an "internet in a bottle", serving up your web sites securely and only to your local host. The virtual machine provides DNS services (Saco Design of Winterport, Maine.
-Commands preceded by an octothorpe ('#') below are intended to be typed - into a bash shell running on the cakelampvm virtual machine. The - bash shell can be obtained either by logging into the VM through ssh or by - logging in directly to the Virtualbox VM console. You may find the - ssh session more convenient, because copy & paste features work as - expected.
+Commands in fixed-width bold below are intended to be typed into a bash + shell running on the cakelampvm virtual machine. The bash shell can + be obtained either by logging into the VM through ssh or by logging in + directly to the Virtualbox VM console. You may find the ssh session + more convenient, because copy & paste features work as expected.
Commands preceded by a greater-than symbol ('>') are intended to be run on the Host PC in a Windows command prompt (or in a bash prompt running on the Host PC).
@@ -47,8 +47,7 @@ target="_blank" title="not just in the garden" href="https://www.gnome.org/">gnome display manager★ This section requires that the VM is already configured properly for + Host-Only and NAT networks.
Using the Virtualbox interface, you should now be able to start your virtual machine. Virtualbox will complain if it detects any remaining configuration problems in the VM. The Linux boot sequence @@ -141,17 +144,45 @@ firewall, then allow the Virtualbox to get through. Usually, telling Windows that once is enough, but if any odd network access problems result, edit the Windows firewall settings and allow Virtualbox to use - both "Public" and "Private" networks.
-You can log in directly on the VM console with the developer account, but - it is generally more useful to connect to the cakelampvm over ssh. - If the networking has been established properly, you should be able to do - this with:
-# ssh developer@10.28.42.20 # or the equivalent with your ssh client+ both "Public" and "Private" networks. (Cortana can find the firewall + settings if you ask her about 'firewall'. Within the firewall + configuration dialog, look for "Allow an app or feature through..." on the + left and configure Virtualbox from within that list.) + You can log in directly on the VM console with the developer account, but it + is generally more useful to connect to the cakelampvm over ssh. If the + networking has been established properly, you should be able to do this + with: +
ssh developer@10.28.42.20
# or perform the equivalent connection with your ssh client.
And then provide the password to log in.
-Once the DNS services are set up (discussed in detail below), you will be - able to run the much friendlier command:
-# ssh developer@cakelampvm.com+
+ +
++ + ★ It is very important that the ssh connection is working properly before + proceeding to other configuration steps. If ssh is not working, try + pinging the host:
+ping 10.28.42.20+
If the ping is also failing, then please re-check the two network + configuration sections above (for Host-Only networking and NAT + networking). These are both required for the VM's network to + function as designed.
+Optional: Once the DNS services are set up (discussed in detail below), + you will be able to run the much friendlier command:
+ssh developer@cakelampvm.com
+ It is important to set up ssh key forwarding to enable your use of git + repositories while logged into the VM. Key forwarding should be + enabled for the VM's two fake host identities:
+cakelampvm.com
10.28.42.20
+ The details of configuring ssh key forwarding vary for each ssh + client. For Linux ssh, the ~/.ssh/config file might contain + this information:
+Host cakelampvm.com 10.28.42.20+
ForwardAgent yes
★ This section requires that the VM is already configured and is + accessible via ssh.
The cakelampvm v002 is released with the intention that it not need to be released again. Version 001 was not built with that explicit intention, which then required the release of Version 002. But we @@ -159,30 +190,52 @@
There is an update feature built into the VM that is quite easy to use. The updates are driven by the feisty meow script repository in conjunction with a local scripted command. To activate the "update - process" for your VM, run the following commands on the VM (without the - initial '#' symbol):
-# rpuffer $FEISTY_MEOW_APEX # updates to the latest version of feisty meow -# revamp_cakelampvm # enacts any configuration changes needed,+ process" for your VM, run the following commands on the VM, logged in as + the developer user: +
# plus fixes web folder and other permissions.
# update to the latest version of feisty meow.
rpuffer $FEISTY_MEOW_APEX; regenerate
# enact any configuration changes needed, such as permissions and account setup.
+revamp_cakelampvm
+
These two commands can be run at any time to patch up your VM to the - latest.
-The first command ("rpuffer ...") is also useful on its own for getting - the latest version of the feisty meow code. Run it again if there - are bug fixes you need for any of the scripts or if you would like the - most up-to-date cakelampvm documentation.
+ latest configuration. +Recent versions of feisty meow support a new "get_feisty" + command, which will behave the same as the first line above. Once + you have run the "puffer..." command above for the first time (on + cakelampvm v002), this new command becomes available.
+Here are some first steps that will make the vm your own:
+★ This section requires that the VM is already configured and is + accessible via ssh.
+Here are some first steps that will make the vm your own.
# passwd+
passwd
The 'passwd' command will ask for your current password, and then for a
new password plus a verification of that new password.smbpasswd
# git config --global user.email "developer@cakelampvm.com"-
# git config --global user.name "Developer J. Cakemo"+
git config --global user.email "developer@cakelampvm.com"
+ git config --global user.name "Developer J. Cakemo"
+ (The feisty meow codebase is already configured for the developer account on the cakelampvm virtual machine.)
-[incomplete section]
-If a feature called "X forwarding" is enabled in your ssh client, then - you can start graphical applications on the VM and display them on your - local machine. This works right away on most Linux hosts, but can - also work on PCs with X window system installed. This section - describes how to set up Cygwin to run X server, which enables X11 - forwarding to your local display.
-...{insert that info}...
★ This section requires that the VM is already configured and is + accessible via ssh.
The cakelampvm has been set up to provide a DNS server which will answer name lookup requests on any of the sites that the cakelampvm is hosting for you. It will also serve as a general DNS server for any other @@ -230,23 +276,25 @@ meow 10.28.42.20. (The DNS server can be tested with nslookup, dig and other tools.)
Note that the cakelampvm DNS should be listed first, if one intends to - override any DNS names that actually exist out on the internet. We - have also found it most effective to have only the cakelampvm as your DNS - server, because a secondary DNS server can "take over" providing the name - lookups, and thus foul up DNS requests that should succeed for your - VM-hosted sites.
+ override any DNS names that actually exist out on the internet. + Further, we have found it most effective to have *only* the cakelampvm as + your DNS server, because a secondary DNS server can "take over" providing + the name lookups, and thus foul up DNS requests that should succeed for + your VM-hosted sites.If your Host PC is running Windows, see the DNS configuration section below that is tailored to that operating system.
Important Note: It behooves you to remember to switch back to a normal DNS server configuration when you shut off the cakelampvm, or your machine - will not know the names of any sites on the internet any more!
+ will not know the names of any sites on the internet any more! The + official Google DNS servers are 8.8.8.8 and 8.8.4.4.Once the DNS server is properly set up (by whatever means necessary), these ping commands should get answering responses (from 10.28.42.20) on both the cakelampvm VM and on your host PC. Note: ping on Linux keeps going forever, so hit control-C when you are tired of seeing the pings:
-# ping cakelampvm.com-
# ping mapsdemo.cakelampvm.com+
ping cakelampvm.com
+
+ ping www.cakelampvm.com
Note that any other answer than 10.28.42.20 for the address is *bzzzt* wrong, and means something needs to be fixed.
If these pings succeed (which hopefully they will!), then try accessing @@ -258,21 +306,64 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com internet. If you instead get failures to find the domains, or if the "real internet" site comes up for cakelampvm.com (the page covered with red X marks and complaining), then the DNS is not hooked up properly yet.
+The ipconfig tool will provide helpful information about your current + networking and DNS configuration:
+> ipconfig /all
+ The DNS configuration on Windows is somewhat byzantine. The pipe + characters ('|') below are used to separate the menus or tabs or dialogs + to traverse. Follow this path to get to the DNS config:
+Control Panel | Network & Internet | Network & Sharing | click WiFI or Ethernet link near top right | click Adapter Settings button...+
| click on the specific network device to modify | select Properties
Once the properties dialog is displayed, find "internet protocol version + 4" in the list and double click it.
+Change the DNS setting from "obtain...automatically" to "use the + following dns addresses".
+Enter 10.28.42.20 as the first DNS address and clear the second address + (all blanks).
+Hit okay, then okay, then close, etc to back out of adapter + configuration.
If your pings are getting the wrong answers and you're certain the DNS settings on your Host PC are right, then you may need to flush your DNS - cache, and that might be sufficient. On Windows, the command for - flushing DNS is:
-> ipconfig /flushdns+ cache, and that might be sufficient to start getting the right IP + address. On Windows, the command for flushing DNS is: +
> ipconfig /flushdns
and on Linux the flush DNS command can be many different things, but try these two most common options:
-# sudo service dns-clean restart # restarts the client side DNS cache.+
# restarts the client side DNS cache.
sudo service dns-clean restart
or
-# sudo service nscd restart # restarts the nscd caching server.+
# restarts the nscd caching server.
sudo service nscd restart
After, this try the pings again. If they still fail, please go back
over your DNS configuration very carefully. The cakelampvm's DNS
feature *does* actually work, but operating systems sometimes do their best
to deny this.There is one caveat to be aware of when connecting to the cakelampvm.com + domain. If you have accidentally added the "real" cakelampvm.com + domain from the internet to your ssh known_keys at some point, then ssh + will complain about connecting to the VM on the cakelampvm.com + domain. This complaint will look like:
+The authenticity of host 'cakelampvm.com (104.236.56.82)' can't be established.+
Note that the IP address shown is not our beloved 10.28.42.20 local IP + address.
+To fix this, remove the entry pointing at the "real" site from the + known_hosts file (ssh will print out the line number of the offending + entry). The DNS configuration needs to be configured before you will + get the warning about the cakelampvm.com domain. Up until then, the + domain name is always referring to the site out on the internet with the + red X's and warnings. See the DNS configuration section below to + configure DNS the first time.
+Once you connect to the VM and the ssh client records the VM's host key + in your known_hosts, then you're in good shape. This state also + gives you a "canary in a coal mine" warning system... Once the VM is + registered as a known host, then any attempt to connect back to the "real" + internet version of cakelampvm.com will garner a complaint from ssh. + This version of the ssh warning should be heeded; you do not want to + connect to the real internet site, and the warning indicates that the host + PC is no longer using the DNS on the VM (since it reached the real + internet site instead of the VM). That situation needs to be + corrected by running through the DNS configuration section again (and + testing the DNS until it is working).
If your DNS pings and lookups are functioning properly, but you're just not getting the right websites, then try clearing your browser's cache and @@ -280,20 +371,6 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com and try the address again. Often this cache dumping is enough to fix the browser so that you start seeing the local website versions on cakelampvm.com.
-The ipconfig tool will provide helpful information about your current - networking and DNS configuration:
-ipconfig --all-
The DNS configuration on Windows is somewhat byzantine. The pipe - characters ('|') below are used to separate the menus or tabs or dialogs - to traverse. Follow this path to get to the DNS config:
-Control Panel | Network & Sharing | click WiFI or Ethernet link near top right | click Adapter Settings on left | click on specific network device to modify | select Properties-
-
{fill in rest}
-
-
On the host computer, look for the guest vm as a networked computer @@ -318,7 +395,7 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com
If you run into any permission problems that prevent file access, either remotely or within the VM itself, then try running this command to fix them (repeated from the section above about updating the cakelampvm):
-# revamp_cakelampvm+
revamp_cakelampvm
Afterwards, the www folder and others should allow the developer user to create new folders at will.
# mkdir ~/shared # for the guest's version of the shared folder+
# sudo mount -t vboxsf myshare ~/shared # mount the vm's share name onto the folder on the vm.
# make the guest's version of the shared folder
mkdir ~/shared
# mount the vm's share name onto the folder on the vm.
sudo mount -t vboxsf myshare ~/shared
+ [incomplete section]
+If a feature called "X forwarding" is enabled in your ssh client, then + you can start graphical applications on the VM and display them on your + local machine. This works right away on most Linux hosts, but can + also work on PCs with X window system installed. This section + describes how to set up Cygwin to run X server, which enables X11 + forwarding to your local display.
+...{insert that info}...
+A Cheat sheet for the Vim editor (there are many of these available): https://vim.rtorr.com/
+A git branching model that seems to work well: http://nvie.com/posts/a-successful-git-branching-model/
+This is a basic guide to the Google Developer Console and API Key + management: Google + API Docs
+Meld is a great comparison tool that displays differences between two + files or directories or directory trees in a graphical view. Meld is + pre-installed on the VM. This tool can be launched either in the + VM's X Windowing System (on the console) or if X11 forwarding is enabled.
+To run meld, just type this command:
+meld A B
+ where A and B are either both file names or they are both directory + names. If A and B are directories, meld will compare the entire tree + structure between the two directories. It allows one to copy from + one side to the other, even if the item that needs to be copied is an + entire subdirectory.
+Run this command:
+ifconfig
+ In the results, look for "inet addr". + There may be more than one, if there are multiple network interfaces.
+The standard IP address is 10.28.42.20 for the cakelampvm.
+When you've got the DNS and everything integrated, these commands will + manage the vm's state:
+First, log into the guest VM:
+ssh developer@cakelampvm.com
+ Then, to reboot the guest VM:
+sudo reboot
+ Or, to halt the guest VM:
+sudo shutdown -h now
+ Using these commands is kinder to the VM than just cycling the power from + the Virtualbox control panel.
+This is the lowest level of plumbing for your VM. Hopefully you + will not need to engage with this section. The most useful doc + section here is the one below about the "Virtualbox guest additions", + which you will probably need at some future point. Oracle releases + updates to the guest additions fairly regularly.
+The guest VM should already be set up appropriately. These steps + are provided for reference and updates.
+sudo mount /dev/sr0 /media/cdrom
+ Linux will mention that the device is mounted "read-only".
cd /media/cdrom
sudo sh VBoxLinuxAdditions.run
+ The network interfaces should already be configured on the guest within + the Virtualbox configuration. This is available by clicking on the + VM in the Virtualbox manager and selecting "Settings". These are the + configuration settings used:
+ Adapter 1:Adapter 2:
+ Attached to: Nat Network
+ Name: NatNetwork
On the guest VM itself, the network settings are specified in a file + called /etc/network/interfaces. Here are the current contents of + that file:
+source /etc/network/interfaces.d/*+
auto lo
iface lo inet loopback
auto enp0s3
iface enp0s3 inet static
address 10.28.42.20
netmask 255.255.255.0
network 10.28.42.0
broadcast 10.28.42.255
dns-domain cakelampvm.com
dns-search cakelampvm.com
dns-nameservers 127.0.0.1 8.8.8.8
auto enp0s8+
iface enp0s8 inet dhcp+
+
To minimize the size used for the disk image, there are three major + steps.
+1. While running the VM, run this command:
+sudo apt clean
+ This throws away any cached data from the apt tool, which can be + substantial.
+If there are other junk files you know of that can be removed, delete + those now also.
+2. Reboot the VM to the gparted ISO image (available at the gparted + site) and run the following command:
+sudo zerofree /dev/sda
+ This sets all free space to the zero byte, enabling Virtualbox to free + that space in the next step.
+3. Shut the vm down after zerofree is complete and run this command on + the host PC (this is the Linux version of the command):
+VBoxManage modifyhd --compact ~/cake_lamp_vm/cake-lamp-vm-hd.vdi
+ Replace the ~/cake_lamp_vm + path with the real VM storage path. This command compacts the root + (and only) partition of the VM.
+After these steps are complete, the VM should be its minimal size.
Note: these instructions, even the quick approaches below, pale in comparison to the ease of use of the "standup" command in feisty meow's @@ -365,18 +559,18 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com details on how to add a containing domain for the first time.
Run this command in a bash shell on the VM:
-# add_domain excalibur.cakelampvm.com+
add_domain excalibur.cakelampvm.com
Done.
Note: the manual approach is not compatible with later use of feisty meow's "remove_domain".
Execute the following command to edit the DNS file for the cakelampvm domain: -# sudo vi /etc/bind/cakelampvm.com.conf+
sudo vi /etc/bind/cakelampvm.com.conf
Add a stanza for the new site at the end of this file:
excalibur.cakelampvm.com. IN A 10.28.42.20
IN HINFO "linux server" "ubuntu"
Restart the DNS server:
-# sudo service bind9 restart+
sudo service bind9 restart
Afterwards, pinging excalibur.cakelampvm.com should work from both the guest VM and the host PC.
# add_domain excalibur.tv+
add_domain excalibur.tv
Done.
Note: the manual approach is not compatible with later use of feisty @@ -402,7 +596,7 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com to add the new file by adding this bit of configuration at the end:
zone "excalibur.tv" in {
file "/etc/bind/excalibur.tv.conf";
type master;
allow-query { any; };
};
Restart the DNS server:
-# sudo service bind9 restart+
sudo service bind9 restart
Afterwards, pinging excalibur.tv should work from both the guest and the host.
Run this command in a bash shell on the VM:
-# add_apache_site excalibur excalibur.tv+
add_apache_site excalibur excalibur.tv
(The first parameter is the application name, the second is the domain name.)
Done.
@@ -432,21 +626,21 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com appropriate file name that includes the site's domain name. We will call our config file "excalibur.tv.conf". If you developed the file in your home folder, this would be the command to move it up to Apache: -# sudo cp ~/excalibur.tv.conf /etc/apache2/sites-available+
sudo cp ~/excalibur.tv.conf /etc/apache2/sites-available
Then tell apache to use the new file:
-# sudo a2ensite excalibur.tv # the '.conf' portion of the filename is unnecessary for this command. +for any error messages that can be corrected. The log files are stored in "/var/log/apache2" and are named after the website (if configured through the above process). -sudo a2ensite excalibur.tv
# the '.conf' portion of the filename is unnecessary for this command.Finally, restart apache to get it to begin serving the site:
-# sudo service apache2 restart+sudo service apache2 restart
Test the new web site
Given the configuration above, your host PC should now be able to access the new website on the domain "excalibur.tv".
To test this, first try pinging the new DNS name:
-# ping excalibur.tv-If there are responses to the ping *and* the answer is 10.28.42.20, then - it means the DNS is working. If there are no responses or it's some - other IP address talking back, check the instructions in the above DNS - sections.
+ping excalibur.tv
+If there are responses to the ping *and* + the answer is 10.28.42.20, then it means the DNS is working.
+If there are no responses or it's some other IP address talking back, + check the instructions in the above DNS sections.
Once the DNS is working, try browsing to the site at "http://excalibur.tv". That should at least bring up the configured site storage path, even if nothing is @@ -455,77 +649,6 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com
A Cheat sheet for the Vim editor (there are many of these available): https://vim.rtorr.com/
-A git branching model that seems to work well: http://nvie.com/posts/a-successful-git-branching-model/
-Run this command:
-# ifconfig-
In the results, look for "inet addr". - There may be more than one, if there are multiple network interfaces.
-The standard IP address is 10.28.42.20 for the cakelampvm.
-When you've got the DNS and everything integrated, these commands will - manage the vm's state:
-First, log into the guest VM:
-# ssh developer@cakelampvm.com-
Then, to reboot the guest VM:
-# sudo reboot-
Or, to halt the guest VM:
-# sudo shutdown -h now-
Using these commands is kinder to the VM than just cycling the power from - the Virtualbox control panel.
-This is the lowest level of plumbing for your VM. Hopefully you - will not need to engage with this section. The most useful doc - section here is the one below about the "Virtualbox guest additions", - which you will probably need at some future point. Oracle releases - updates to the guest additions fairly regularly.
-The guest VM should already be set up appropriately. These steps - are provided for reference and updates.
-# sudo mount /dev/sr0 /media/cdrom-
Linux will mention that the device is mounted "read-only".
-# cd /media/cdrom-
# sudo sh VBoxLinuxAdditions.run
The network interfaces should already be configured on the guest within - the Virtualbox configuration. This is available by clicking on the - VM in the Virtualbox manager and selecting "Settings". These are the - configuration settings used:
- Adapter 1:Adapter 2:
- Attached to: Nat Network
- Name: NatNetwork
On the guest VM itself, the network settings are specified in a file - called /etc/network/interfaces. Here are the current contents of - that file:
-source /etc/network/interfaces.d/*-
auto lo
iface lo inet loopback
auto enp0s3
iface enp0s3 inet static
address 10.28.42.20
netmask 255.255.255.0
network 10.28.42.0
broadcast 10.28.42.255
dns-domain cakelampvm.com
dns-search cakelampvm.com
dns-nameservers 127.0.0.1 8.8.8.8
auto enp0s8-
iface enp0s8 inet dhcp-
This is all work that should already have been done. It is mentioned here just as breadcrumbs for a future vm builder.
@@ -548,8 +671,6 @@ href="http://mapsdemo.cakelampvm.com">http://mapsdemo.cakelampvm.com