Bmcbutler is a BMC (Baseboard Management Controller) configuration management tool that uses bmclib.
Hardware | User accounts | Syslog | NTP | Ldap | Ldap groups | BIOS | HTTPS Cert |
---|---|---|---|---|---|---|---|
Dell M1000e | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | - | |
Dell iDRAC8 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
Dell iDRAC9 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
HP c7000 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | - | |
HP iLO4 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
HP iLO5 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | |
Supermicro X10 | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
Need help? See kiwiirc link above/find us on the freenode IRC channel ##bmc-toolbox
.
go get github.com/bmc-toolbox/bmcbutler
GO111MODULE=on go build -mod vendor -v
To point to a local copy of bmclib, add to the bottom of the go.mod
file
replace github.com/bmc-toolbox/bmclib => ../bmclib
To pick a specific bmclib SHA.
GO111MODULE=on go get github.com/bmc-toolbox/bmclib@2d1bd1cb
To add/update the vendor dir.
GO111MODULE=on go mod vendor
There's two parts to setting up configuration for bmcbutler,
- Bmcbutler configuration
- Configuration for BMCs
This document assumes the Bmcbutler configuration directory is ~/.bmcbutler.
Setup configuration Bmcbutler requires to run.
# create a configuration directory for ~/.bmcbutler
mkdir ~/.bmcbutler/
Copy the sample config into ~/.bmcbutler/ bmcbutler.yml sample
Configuration to be applied to BMCs.
# create a directory for BMC config
mkdir ~/.bmcbutler/cfg
add the BMC yaml config definitions in there, for sample config see configuration.yml sample
configuration.yml supports templating, for details see configTemplating
Bmcbutler was written with the intent of sourcing inventory assets and configuring their bmcs, a csv inventory example is provided to play with.
The 'inventory' parameter points Bmcbutler to the inventory source.
Bmcbutler can manage certs for BMCs, It compares the current HTTPS cert Subject attributes of a BMC with the ones declared in its configuration, if the attributes don't match, it proceeds to,
- Generate a CSR on the BMC using the Subject attributes declared in its configuration.
- Pass the CSR to the signer executable, read the signed cert.
- Upload the signed cert to the BMC.
- Reset the BMC if required.
To have this setup,
- Declare a
https_cert
configuration section in the BMC config template, see configuration.yml sample - Declare a signer executable in the bmcbutler config, see bmcbutler.yml sample
The signer executable is required to accept a CSR through STDIN and spit out the signed cert through STDOUT. An example signer that uses lemur can be found under helpers
Configure Blades/Chassis/Discretes
#configure all BMCs in inventory, dry run with debug output
bmcbutler configure --all --dryrun --debug
#configure all servers in given locations
bmcbutler configure --servers --locations ams2
#configure all chassis in given locations
bmcbutler configure --chassis --locations ams2,lhr3
#configure all servers in given location, spawning given butlers
bmcbutler configure --servers --locations lhr5 --butlers 200
#configure one or more BMCs identified by IP(s)
bmcbutler configure --ips 192.168.0.1,192.168.0.2,192.168.0.2
#configure one or more BMCs identified by serial(s) and trace log
bmcbutler configure --serials <serial1>,<serial2> --trace
bmcbutler configure --serial <serial1>,<serial2> --debug
bmcbutler configure --serial <serial> --debug
#Apply specific configuration resource(s) and trace log
bmcbutler configure --ips 192.168.1.4 --resources ntp,syslog,user --trace
bmcbutler was originally developed for Booking.com. With approval from Booking.com, the code and specification were generalized and published as Open Source on github, for which the authors would like to express their gratitude.