[44/50] [abbrv] brooklyn-docs git commit: Add back wrongly deleted page

[m4...@apache.org]

Add back wrongly deleted page


Project: http://git-wip-us.apache.org/repos/asf/brooklyn-docs/repo
Commit: http://git-wip-us.apache.org/repos/asf/brooklyn-docs/commit/91a7e9ca
Tree: http://git-wip-us.apache.org/repos/asf/brooklyn-docs/tree/91a7e9ca
Diff: http://git-wip-us.apache.org/repos/asf/brooklyn-docs/diff/91a7e9ca

Branch: refs/heads/master
Commit: 91a7e9ca67cff2100a809a073c33c38294e148c3
Parents: f7d4865
Author: Thomas Bouron <th...@cloudsoftcorp.com>
Authored: Mon Oct 23 13:37:13 2017 +0100
Committer: Thomas Bouron <th...@cloudsoftcorp.com>
Committed: Mon Oct 23 13:37:13 2017 +0100

----------------------------------------------------------------------
 guide/SUMMARY.md                                |   2 +-
 .../provisioned-machine-requirements.md         | 176 +++++++++++++++++++
 2 files changed, 177 insertions(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/brooklyn-docs/blob/91a7e9ca/guide/SUMMARY.md
----------------------------------------------------------------------
diff --git a/guide/SUMMARY.md b/guide/SUMMARY.md
index a076dd6..1ef6219 100644
--- a/guide/SUMMARY.md
+++ b/guide/SUMMARY.md
@@ -78,7 +78,7 @@
   * [IBM Softlayer](locations/index.md#ibm-softlayer)
   * [OpenStack](locations/index.md#openstack)
   * [Named Locations](locations/index.md#named-locations)
-  * [Provisioned Machine Requirements](locations/index.md#inheritance-and-named-locations)
+  * [Provisioned Machine Requirements](locations/provisioned-machine-requirements.md)
   * [BYON](locations/index.md#byon)
   * [SSH Keys](locations/index.md#ssh-keys)
   * [Localhost](locations/index.md#localhost)

http://git-wip-us.apache.org/repos/asf/brooklyn-docs/blob/91a7e9ca/guide/locations/provisioned-machine-requirements.md
----------------------------------------------------------------------
diff --git a/guide/locations/provisioned-machine-requirements.md b/guide/locations/provisioned-machine-requirements.md
new file mode 100644
index 0000000..1967f65
--- /dev/null
+++ b/guide/locations/provisioned-machine-requirements.md
@@ -0,0 +1,176 @@
+---
+title: Provisioned Machine Requirements
+layout: website-normal
+---
+# {{ page.title }}
+
+The requirements for how a provisioned machine should behave will depend on the
+entites subsequently deployed there.
+
+Below are a set of common assumptions, made by many entity implementations, which
+could cause subsequent errors if they do not hold. These relate to the machine's 
+configuration, rather than additional networking or security that a given Cloud 
+might offer.
+
+Also see the [Troubleshooting]({{ site.path.guide }}/ops/troubleshooting/) docs.
+
+
+## Remote Access
+
+### SSH or WinRM Access
+
+Many entities require ssh'ing (or using WinRM for Windows), to install and configure 
+the software.
+
+An example of disabling all ssh'ing is shown below:
+
+```yaml
+location:
+  aws-ec2:us-east-1:
+    identity: XXXXXXXX
+    credential: XXXXXXXX
+    waitForSshable: false
+    pollForFirstReachableAddress: false
+services:
+- type: org.apache.brooklyn.entity.software.base.EmptySoftwareProcess
+  brooklyn.config:
+    onbox.base.dir.skipResolution: true
+    sshMonitoring.enabled: false
+```
+
+### Parsing SSH stdout: No Extra Lines
+
+For entities that execute ssh commands, these sometimes parse the resulting stdout.
+
+It is strongly recommended that VMs are configured so that no additional stdout is written when executing 
+remote ssh (or WinRM) commands. Such stdout risks interfering with the response parsing in some blueprints.
+
+For example, if configuring the VM to write out "Last login" information, this should be done for only 
+"interactive" shells (see [Stackoverflow](http://stackoverflow.com/a/415444/1393883) for more details).
+
+
+### Passwordless Sudo
+
+Does passwordless sudo work?
+
+Try executing:
+
+```bash
+sudo whoami
+```
+
+See [Passwordless Sudo]({{ site.path.guide }}/locations/index.html#passwordless-sudo).
+
+
+## Advertised Addresses
+
+### Hostname Resolves Locally
+
+Does the hostname known at the box resolve at the box?
+
+Try executing:
+
+```bash
+ping $(hostname)
+```
+
+if not, consider setting `generate.hostname: true` in the location config, for jclouds-based locations.
+
+
+### IP Resolves Locally
+
+For the IP address advertised in Brooklyn using the sensor `host.addresses.private` (or `host.subnet.address`), 
+can the machine reach that IP?
+
+Get the sensor value, and then try executing:
+
+```bash
+ping ${PRIVATE_IP}
+```
+
+Is there a public IP (advertised using the sensor `host.addresses.public`, or `host.address`), and can the 
+machine reach it?
+
+Get the sensor value, and then try executing:
+
+```bash
+ping ${PUBLIC_IP}
+```
+
+## Networking
+
+### Public Internet Access
+
+Can the machine reach the public internet, and does DNS resolve?
+
+Try executing:
+
+```bash
+ping www.example.org
+```
+
+### Machine's Hostname in DNS
+
+Is the machine hostname well-known? If ones does a DNS lookup, e.g. from the Brooklyn server, does it resolve and 
+does it return the expected IP (e.g. the same IP as the `host.addresses.public` sensor)? Try using the hostname
+that the machine reports when you execute `hostname`.
+
+Many blueprints do not require this, instead using IP addresses directly. Some blueprints may include registration
+with an appropriate DNS server. Some clouds do this automatically.
+
+
+### Reachability
+
+When provisioning two machines, can these two machines reach each other on the expected IP(s) and hostname(s)?
+
+Try using `ping` from one machine to another using the public or subnet ip or hostname.
+However, note that `ping` requires access over ICMP, which may be disabled. Alternatively,
+try connecting to a specific TCP port using `telnet <address> <port>`.
+
+
+### Firewalls
+
+What firewall(s) are running on the machine, and are the required ports open?
+On linux, check things like `iptables`, `firewalld`, `ufw` or other commercial
+firewalls. On Windows, check the settings of the 
+[Windows Firewall](https://en.wikipedia.org/wiki/Windows_Firewall).
+
+Consider using `openIptables: true`, or even `stopIptables: true`.
+
+
+## Sufficient Entropy for /dev/random
+
+Is there sufficient entropy on the machine, for `/dev/random` to respond quickly?
+
+Try executing:
+
+```bash
+{ cat /dev/random > /tmp/x & } ; sleep 10 ; kill %1 ; { cat /dev/random > /tmp/x & } ; sleep 1 ; kill %1 ; wc /tmp/x | awk '{print $3}'
+```
+
+The result should be more than 1M.
+
+If not, consider setting `installDevUrandom: true` for jclouds-based locations.
+
+See instructions to [Increase Entropy]({{ site.path.guide }}/ops/troubleshooting/increase-entropy.html).
+
+
+## File System
+
+### Permissions of /tmp
+
+Is `/tmp` writable?
+
+Try executing:
+
+```bash
+touch /tmp/amp-test-file ; rm /tmp/amp-test-file
+```
+
+Are files in `/tmp` executable (e.g. some places it has been mounted NO_EXECUTE)?
+
+Try executing:
+
+```bash
+echo date > /tmp/brooklyn-test.sh && chmod +x /tmp/brooklyn-test.sh && /tmp/brooklyn-test.sh && rm /tmp/brooklyn-test.sh
+```