Rate This Document
Findability
Accuracy
Completeness
Readability

Installing HAF on Offload Nodes

  1. Install the HAF software package on the offload nodes (ceph1, ceph2, and ceph3). Select ceph1, ceph2, and ceph3 and configure the offload nodes.

    Select all offload nodes and click Configure Service.

  2. Modify the installation configuration file.

    Skip this step if the default configuration file haf_target_install.conf in Configuration Items for HAF Deployment meets your service requirements.

    When installing the HAF software on an offload node, you can modify the haf_target_install.conf file to modify the installation configuration of nodes in a batch. For details about the options that can be modified, see Configuration Items for HAF Deployment.

    You are advised to use the configuration file to modify the options that cannot be modified by haf-tool.

    The following describes how to disable TLS identity authentication and data encryption/decryption. By default, this switch is enabled. To disable it, set the corresponding parameter to 0.

    The command is as follows:

    cd /opt/haf-software

    sed -i 's/\"target_tls_switch\": 1/\"target_tls_switch\": 0/g' install-config/haf_target_install.conf

    To modify other options, you can run related commands as required.

    1. Select Custom and click Next.

    2. Select Command Execution and click Add a Task.

    3. Set task 1 parameters and click Save.
      Table 1 Parameter description

      Parameter

      Description

      Task Name

      Disabling TLS

      Task Description

      Disabling TLS

      Run Directory

      /opt/haf-software

      Run Command

      sed -i 's/\"target_tls_switch\": 1/\"target_tls_switch\": 0/g' install-config/haf_target_install.conf

      Whether to Check Return Code

      Yes

      Expected Return Code

      0

    4. Save the settings. Then, click Run Service to execute the service flow.

    • To modify multiple options, you can configure multiple commands in the command cell of the command execution module of SmartKit and separate them with semicolons (;).
    • For example, the following commands are used to disable TLS and change the log directory to /temp/log:

      sed -i 's/\"target_tls_switch\": 1/\"target_tls_switch\": 0/g' install-config/haf_target_install.conf;sed -i 's/\/var\/log\//\/temp\/log\//g' install-config/haf_target_install.conf

  3. Install HAF on offload nodes.
    1. Select all offload nodes and click Configure Service.

    2. Select Custom and click Next.

    3. Select Command Execution and click Add a Task.

    4. Set task 1 parameters and click Save.
      Table 2 Parameter description

      Parameter

      Description

      Task Name

      Installing the HAF package on offload nodes

      Task Description

      Installing the HAF package on offload nodes and generating the key for initialization

      Run Directory

      /opt/haf-software

      Run Command

      ./haf_installer -m offload -p /opt/haf-software/haf-target-1.0.1.tar.gz -i listen_ip_duration -w ip_white_list -j java_home -t /opt

      NOTE:
      • The script parameters are described as follows:
        • -m offload: The installation is performed on an offload node.
        • -p /opt/haf-software/haf-target-1.0.1.tar.gz: package to be installed on the offload node.
        • -i listen_ip_duration: network segment information (for example, 10.10.0.1/24) of the listening IP address of the offload node. During the installation, the HAF matches and binds the IP address of the offload node.
        • -w ip_white_list: IP address trustlist (format: 127.0.0.1,10.10.0.2).
        • -j java_home: Java installation path of the node.
        • -t install_dir: root directory for installing the software package on the offload node. The default directory is /opt.
        • The first two parameters are mandatory, and the last four parameters are optional. If IP address trustlist verification is not required, the trustlist can be left blank, but you need to disable the function. For details, see Disabling the IP Address Trustlist Function.
      • SmartKit commands do not support long character strings. If the IP address trustlist is long, you need to manually run the IP address trustlist update command in the system. For details, see Updating the IP Address Trustlist or Listening IP Address Segment.

      Whether to Check Return Code

      Yes

      Expected Return Code

      0

    1. Execute the service flow. Click Finish in the lower right corner and then click Run Service to execute the service flow.