Project

General

Profile

Actions
Copy link

Support #366

closed

OAM: Server provisioning pipeline (SetupNewSystem.sh)

Support #366: OAM: Server provisioning pipeline (SetupNewSystem.sh)

Added by Charles N 1 day ago.

Status:
Closed
Priority:
Normal
Assignee:
Charles N
Target version:
TSYS Group - Potential to Kinetic Ready
Start date:
08/06/2026
Due date:
% Done:

100%

Estimated time:

Description

End-to-end server provisioning pipeline validated.

Completed work:

  • SetupNewSystem.sh deploys end-to-end (rc=0) on Debian 13 trixie
  • Security hardening: SSH, SCAP-STIG, Wazuh, 2FA (SSH+Cockpit+Webmin)
  • NTP: redundant pfv-netinfra-01/02, stratum 3
  • DNS resolv.conf: managed static file
  • Test suite: 5 tests
  • VM validation harness: git-based deploy + auto-rollback + guest-agent access

NOW PORTED TO ANSIBLE: KNELIAC project (/home/reachableceo/projects/KNELIAC/).
Legacy bash preserved in PFVCluster/archive/provisioning/.

Code: PFVCluster/archive/provisioning/, KNELIAC/playbooks/setup_new_system.yml

Updated by Charles N 1 day ago Actions
Copy link
 #1

  • Status changed from New to Closed
  • % Done changed from 0 to 100

RETROACTIVE: Work completed prior to Redmine system-of-record migration. Ticket created for audit/compliance trail. Code reference in description.

Actions
Copy link

Also available in: PDF Atom