Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automate blobfuse2 setup for new VM #1575

Open
wants to merge 11 commits into
base: blobfuse/2.4.1
Choose a base branch
from

Conversation

ashruti-msft
Copy link
Collaborator

@ashruti-msft ashruti-msft commented Nov 22, 2024

✅ What

Created a script automating blobfuse2 setup required in a fresh VM. Also added a script to install azsecpack on new UBN VMs to avoid SFI alerts.

🤔 Why

Helps save time settign up blobfuse2 on a new VM especially while perf testing on multiple VMs

👩‍🔬 How to validate if applicable

run the script ./setup/setupUBN.sh and ./setup/vmSetupAzSecPack.sh

setup.sh Outdated Show resolved Hide resolved
setupUBN.sh Outdated Show resolved Hide resolved
setupUBN.sh Outdated Show resolved Hide resolved
@vibhansa-msft vibhansa-msft added this to the v2-2.4.1 milestone Nov 25, 2024
@vibhansa-msft vibhansa-msft changed the base branch from main to blobfuse/2.4.1 November 29, 2024 07:55
@jainakanksha-msft
Copy link
Collaborator

@ashruti-msft
proper working secpack installation steps are these

curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
      sudo apt-get update
      sudo apt-get install apt-transport-https ca-certificates curl gnupg lsb-release -y
sudo apt-get install apt-transport-https ca-certificates curl gnupg lsb-release -y
sudo mkdir -p /etc/apt/keyrings
curl -sLS https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor | sudo tee /etc/apt/keyrings/microsoft.gpg > /dev/null
sudo chmod go+r /etc/apt/keyrings/microsoft.gpg
AZ_DIST=$(lsb_release -cs)
echo "Types: deb
URIs: https://packages.microsoft.com/repos/azure-cli/
Suites: ${AZ_DIST}
Components: main
Architectures: $(dpkg --print-architecture)
Signed-by: /etc/apt/keyrings/microsoft.gpg" | sudo tee /etc/apt/sources.list.d/azure-cli.sources
sudo apt-get install azure-cli -y
sudo apt-get update
sudo apt-get install azure-cli -y
sudo apt autoremove
az upgrade

az login --tenant 72f988bf-86f1-41af-91ab-2d7cd011db47
az vm extension set -n AzureMonitorLinuxAgent --publisher Microsoft.Azure.Monitor --version 1.0 --vm-name --resource-group --enable-auto-upgrade true --settings '{"GCS_AUTO_CONFIG": true}'
az vm extension set -n AzureSecurityLinuxAgent --publisher Microsoft.Azure.Security.Monitoring --version 2.0 --vm-name --resource-group --enable-auto-upgrade true --settings '{"enableGenevaUpload":true,"enableAutoConfig":true}'
sudo /usr/local/bin/azsecd status

az vm assess-patches --resource-group --name
az vm install-patches --resource-group --name --maximum-duration PT2H --reboot-setting IfRequired --classifications-to-include-linux Critical Security

@@ -0,0 +1,103 @@
# Install Azure CLI
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We shall call this script from the above setup script to set up everything in one shot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants