Changing the OMS password on OpenNode

The OpenNode Management Server is installed with a default password. To help ensure your OpenNode server is secure, you must change the password to something more secure.

See my blog post to install OMS if you haven’t yet got it set up.

The default username and password for OMS as below:

• Username: opennode
• Password: changeme

You must SSH onto the OMS OpenVZ container to change the password. You could SSH directly to the IP address or use vzctl enter to access it from the OpenNode host.

vzctl enter 999

The above example assumes that the OMS container is running using VMID 999.

Change directory to the OMS bin directory:

cd /opt/oms/bin

Execute the change password command and enter your new password when promted:

omspasswd opennode

Your password will be changed immediately and you can use it to log into the web front end of OMS.

Update OpenNode OMS to the Latest Version

OpenNodes web management GUI (OMS) runs in it’s own OpenVZ container. To update the running OMS you must connect to the OMS server via SSH and run the update command.

Log into the OMS Server via SSH using the root account.

Change your current directory to the location of the update script using the below commands.

cd /opt/oms

Run the update.sh script with the below command.

./update.sh

You will receive a message similar to the below output confirming that the update has completed.

[root@oms oms]# ./update.sh
which: invalid option -- 'S'
/usr/bin/python2.7
Downloading file:///opt/oms/download-cache/setuptools-0.6c11-py2.7.egg
Updating oms.
Getting distribution for 'opennode.oms.core'.
Got opennode.oms.core 0.0-1585-g0bce.
Getting distribution for 'opennode.wsproxy'.
Got opennode.wsproxy 1.0.
Getting distribution for 'opennode.oms.onc'.
Got opennode.oms.onc 0.0-1063-g2fd9.
Getting distribution for 'opennode.oms.knot'.
Got opennode.oms.knot 0.0-779-g78a8.
Generated script '/opt/oms/bin/omspy'.
Generated script '/opt/oms/bin/omsd'.
Generated script '/opt/oms/bin/obj_graph'.
Generated script '/opt/oms/bin/omspasswd'.
Generated script '/opt/oms/bin/plugin'.
Generated script '/opt/oms/bin/fstail'.
Generated script '/opt/oms/bin/zeopack'.
Generated script '/opt/oms/bin/runzeo'.
Generated script '/opt/oms/bin/zeopasswd'.
Generated script '/opt/oms/bin/zeoctl'.
Generated script '/opt/oms/bin/fsdump'.
Generated script '/opt/oms/bin/fsrefs'.
Generated script '/opt/oms/bin/repozo'.
Generated script '/opt/oms/bin/fsoids'.
Generated script '/opt/oms/bin/wsproxy'.

The final step is to restart the OMS service. Use the below command and reload the service .

systemctl restart oms

Install OpenNode web GUI (OMS)

The OpenNode Management service, or OMS, is used to administer OpenNode via a web based GUI. The OMS is not installed by default and has to be added after installation. The OMS is not installed as a package using yum, but instead is a hosted OpenVZ container. The container is then registered with the OpenNode system and can then be used to administer it.

You must have OpenNode installed Before installing the OMS.

OpenNode also has a TUI, this is a text based management utility which can be used to create and manage new virtual machines and help you install the OMS.

Login to your OpenNode ssh session and run the opennode command to start the TUI.

opennode

Select OMS (beta) on the right to be given a set of options for getting the OMS up and running.

Select Download OMS image and press ENTER.

Select Yes to start downloading the OMS virtual machine archive.

The download may take a while. If you quit the download and restart it, it will resume where it left off and not download the same part of the file twice.

Press OK when the download completes. 

Back in the main menu, select Install OMS image to open the settings for the new virtual machine. You will need to enter the following settings

•  VSwap size (GB): set to 1GB
• Number of CPUs: set to two. The OMS can be quite CPU hungry when performing certain tasks.
• CPU usage limit (%): set to 100% to allow all of the assigned CPU to be used.
• Disk size (GB): as very little is stored on the OMS root device you will not need to assign it much space. 5GB should be sufficient.
• IO Priority: although very little IO will occur on the OMS container, it is best to give it the priority over other containers.
• Hostname: set this to the hostname you would like to use for the OMS container.
• IP-address: set this to the IP address for the container to use.
• Nameserver: set this to the IP address of your networks DNS server.
• Root password: enter a password which the OMS container will use for it’s root account. This is not the password which will be used to access the web GUI.
• Root password x2: Repeat your password to confirm it.
• Start VM select this and press SPACE to start the container after it has been created.
• Start on boot select this and press SPACE to enable the container to start up after your OpenNode server starts up after a reboot.

Click Create VM once you have entered all the required settings.

You will be taken back to the OpenNode Management Service (OMS) operations menu when your container has been created and started. The final step is to register the OMS with the OpenNode server. Select Register with OMS and enter the OMS server address – this is the IP you just created in the above step. Make sure the OMS server port remains on the default of 4506.

You can now log into your OMS web administration with the below username and password. The URL to use is the IP address you created when creating the container for the OMS. You must also access the page over HTTPS, for example https://10.10.10.8

• Username: opennode
• Password: changeme

See my blog post on changing the password to help secure your OMS install.