Needed to set up a cluster where horsepower and cost were paramount, so I thought this would be a good opportunity to try out Intel's business class "vPro AMT" remote administration technology, and compare it to IPMI, which I've used for years on servers. From a feature standpoint, it seems quite impressive, going to far as using standards-based VNC!
Unfortunately, set up is quite a bear, with most of a day spent and while I can remote power cycle the machine via a web interface, VNC support is still not to be found. I have no intention of buying Windows licenses for all these machines just so I can enable AMT. (the VNC remote desktop solution)
So far, it would seem that the Intel approach is very Windows-oriented, to the point where I've been unable to find any official documentation at all as to how to make it work with *nix. After some googling and trying to make sense of the "enterprise reference documentation" I came across http://blog.yarda.eu/2012/09/intel-amt-quickstart-guide.html which apparently was working as recently as October of this year. (see the comments)
However, it would seem that intel has pulled support for some of this, as pages like http://intel.com/wbem/wscim/1/ips-schema/1/IPS_KVMRedirectionSettingData and http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_KVMRedirectionSAP simply resolve to 404, numerous attempts to google "IPS_KVMRedirectionSettingData" and such haven't (so far) returned anything useful.
From what it seems, Intel wants everybody to be installing PKI AMT certificates on vPro motherboards via Windows.
Does anybody have any information that might be useful about how to enable unencrypted VNC remote administration for CentOS based servers? I have a used KVM switch, but that's always been a sub-optimum solution, and it really makes a mess out of your server cages.
On Fri, Nov 15, 2013 at 6:26 PM, Lists lists@benjamindsmith.com wrote:
<snip>
From what it seems, Intel wants everybody to be installing PKI AMT certificates on vPro motherboards via Windows.
Does anybody have any information that might be useful about how to enable unencrypted VNC remote administration for CentOS based servers? I have a used KVM switch, but that's always been a sub-optimum solution, and it really makes a mess out of your server cages.
What type of admin are trying to do on your cluster. First, to get the most power out of your cluster, shouldn't you be running nodes in run level 3 (non gui).
You can set up ssh keys so you can create some scripts and perform your commands (from your admin machine) on each of your cluster nodes. (i.e., running a command over ssh without a password being needed).
You may also be interested in esysman that allows for doing many admin tasks from a web interface on your admin box:
https://github.com/comptekki/esysman
Just this last week I updated it to work with CentOS (orLSB/RPM based systems). It currently supports MS Windows, OS X, Xubuntu (and probably other LSB/ubuntu/debian base systems) and now CentOS.
-wes
On 11/15/2013 07:30 PM, Wes James wrote:
What type of admin are trying to do on your cluster. First, to get the most power out of your cluster, shouldn't you be running nodes in run level 3 (non gui).
You can set up ssh keys so you can create some scripts and perform your commands (from your admin machine) on each of your cluster nodes. (i.e., running a command over ssh without a password being needed).
You may also be interested in esysman that allows for doing many admin tasks from a web interface on your admin box:
https://github.com/comptekki/esysman
Just this last week I updated it to work with CentOS (orLSB/RPM based systems). It currently supports MS Windows, OS X, Xubuntu (and probably other LSB/ubuntu/debian base systems) and now CentOS.
There's no GUI installed, and I'm quite familiar with SSH, and most daily administration is heavily scripted/automated.
The capabilities I'm looking for include the ability to force restart the server remotely, even when the O/S Is locked up (EG: kernel panic) and access the BIOS remotely, do an O/S install remotely, etc. which can be done with IPMI. From what I've read, Intel's vPro allows for all of these possibilities, although it does seem to be heavily Windows oriented.
On 16/11/2013 04:26, Lists wrote:
From what I've read, Intel's vPro allows for all of these possibilities, although it does seem to be heavily Windows oriented.
Does this help?
https://communities.intel.com/community/vproexpert/blog/2011/11/03/intel-set...
https://communities.intel.com/community/vproexpert/blog/2012/01/19/configuri...
https://communities.intel.com/community/vproexpert/blog/2012/02/13/configuri...
http://software.intel.com/en-us/articles/download-the-latest-intel-amt-open-...
Dan
On 11/16/2013 04:14 AM, Daniel Bird wrote:
On 16/11/2013 04:26, Lists wrote:
From what I've read, Intel's vPro allows for all of these possibilities, although it does seem to be heavily Windows oriented.
Does this help?
https://communities.intel.com/community/vproexpert/blog/2011/11/03/intel-set...
https://communities.intel.com/community/vproexpert/blog/2012/01/19/configuri...
https://communities.intel.com/community/vproexpert/blog/2012/02/13/configuri...
http://software.intel.com/en-us/articles/download-the-latest-intel-amt-open-...
Thanks, this looks very good! I will try Monday morning and report results here.