Server installation from sources

Dependencies

  • python > 2.7
  • python-dev > 2.7
  • python-setuptools0.6
  • python-psycopg22.6.0
  • python-tornado3.2
  • python-sqlalchemy0.9.8

Installation

Proceed with the installation of the UI:

cd temboard/
sudo pip install .

Prepare directories and files

Creation of directories for the configuration file and SSL files:

sudo mkdir /etc/temboard

Logging directory:

sudo mkdir /var/log/temboard

PID directory:

sudo mkdir /var/run/temboard

Copy the sample configuration file:

sudo cp /usr/share/temboard/quickstart/temboard.conf /etc/temboard/temboard.conf

Copy the logrotate configuration file:

sudo cp /usr/share/temboard/quickstart/temboard.logrotate /etc/logrotate.d/temboard

Users

sudo useradd -M -r temboard
sudo chown -R temboard.temboard /etc/temboard/
sudo chown -R temboard.temboard /var/log/temboard/
sudo chown -R temboard.temboard /var/run/temboard/
sudo chmod 600 /etc/temboard/temboard.conf

SSL certificate

Using provided SSL certificate

temboard provides a ready to use self-signed SSL certifcate located in /usr/share/temboard/quickstart directory, if you don't want to use it, you can create a new one with the openssl binary.

sudo cp /usr/share/temboard/quickstart/temboard_CHANGEME.key /etc/temboard/.
sudo cp /usr/share/temboard/quickstart/temboard_CHANGEME.pem /etc/temboard/.
sudo chown temboard:temboard /etc/temboard/*

Build a new self-signed certificate

To build a new SSL certifcate:

sudo -u temboard openssl req -new -x509 -days 365 -nodes -out /etc/temboard/localhost.pem -keyout /etc/temboard/localhost.key

Then, ssl_cert_file and ssl_key_file parameters from temboard.conf file need to be set respectively to localhost.pem and localhost.key.

CA certificate file

Some plugins must be able to send requests to temboard-agent using the HTTPS API. To enable SSL cert. check (THIS IS NOT MANDATORY), the HTTPS client implemented by temboard needs to have each agent's SSL certifcate (.pem) stored in its CA certificate file. temBoard embeds a default CA cert. file containing agent's default SSL certificate.

sudo cp /usr/share/temboard/quickstart/temboard_ca_certs_CHANGEME.pem /etc/temboard/ca_certs_localhost.pem

ssl_ca_cert_file parameter in section [temboard] from the configuration file needs to be set to ca_certs_localhost.pem.

If you don't want to enable SSL cert. check, please comment this parameter in the configuration file.

Restrictions on SSL files

sudo chmod 0600 /etc/temboard/*.key
sudo chmod 0600 /etc/temboard/*.pem

Repository

The repository must be set up otherwise the temboard service will not start. See doc/temboard-repository-setup.md.

Operating temboard

Start

sudo -u temboard temboard -d -p /var/run/temboard/temboard.pid

Stop

sudo kill $(cat /var/run/temboard/temboard.pid)

Reload configuration

sudo kill -HUP $(cat /var/run/temboard/temboard.pid)

Init scripts and systemd service file

Init scripts and a systemd service file are available in the rpm/ and debian/ directories inside the source tree.