Setting up the environment for an OpenShift installation

# useradd kni
# passwd kni
# echo "kni ALL=(root) NOPASSWD:ALL" | tee -a /etc/sudoers.d/kni
# chmod 0440 /etc/sudoers.d/kni

# su - kni -c "ssh-keygen -t ed25519 -f /home/kni/.ssh/id_rsa -N ''"

# su - kni
$

$ sudo dnf install -y libvirt qemu-kvm mkisofs python3-devel jq ipmitool

$ sudo usermod --append --groups libvirt <user>

$ sudo systemctl start firewalld
$ sudo firewall-cmd --zone=public --add-service=http --permanent
$ sudo firewall-cmd --reload

$ sudo systemctl enable libvirtd --now

$ sudo virsh pool-define-as --name default --type dir --target /var/lib/libvirt/images
$ sudo virsh pool-start default
$ sudo virsh pool-autostart default

$ export PUB_CONN=<baremetal_nic_name>

$ sudo nohup bash -c "
    nmcli con down \"$PUB_CONN\"
    nmcli con delete \"$PUB_CONN\"
    # RHeL 8.1 appends the word \"System\" in front of the connection, delete in case it exists
    nmcli con down \"System $PUB_CONN\"
    nmcli con delete \"System $PUB_CONN\"
    nmcli connection add ifname baremetal type bridge con-name baremetal
    nmcli con add type bridge-slave ifname \"$PUB_CONN\" master baremetal
    pkill dhclient;dhclient baremetal
"

$ export PROV_CONN=<prov_nic_name>

$ sudo nohup bash -c "
    nmcli con down \"$PROV_CONN\"
    nmcli con delete \"$PROV_CONN\"
    nmcli connection add ifname provisioning type bridge con-name provisioning
    nmcli con add type bridge-slave ifname \"$PROV_CONN\" master provisioning
    nmcli connection modify provisioning ipv6.addresses fd00:1101::1/64 ipv6.method manual
    nmcli con down provisioning
    nmcli con up provisioning
"

$ nmcli connection modify provisioning ipv4.addresses 172.22.0.254/24 ipv4.method manual

# ssh kni@provisioner.<cluster-name>.<domain>

$ sudo nmcli con show

NAMe               UUID                                  TYPe      DeVICe
baremetal          4d5133a5-8351-4bb9-bfd4-3af264801530  bridge    baremetal
provisioning       43942805-017f-4d7d-a2c2-7cb3324482ed  bridge    provisioning
virbr0             d9bca40f-eee1-410b-8879-a2d4bb0465e7  bridge    virbr0
bridge-slave-eno1  76a8ed50-c7e5-4999-b4f6-6d9014dd0812  ethernet  eno1
bridge-slave-eno2  f31c3353-54b7-48de-893a-02d2b34c4736  ethernet  eno2

$ vim pull-secret.txt

$ export cmd=openshift-baremetal-install
$ export pullsecret_file=~/pull-secret.txt
$ export extract_dir=$(pwd)

$ curl -s https://mirror.openshift.com/pub/openshift-v4/clients/ocp/$VeRSION/openshift-client-linux.tar.gz | tar zxvf - oc

$ sudo cp oc /usr/local/bin
$ oc adm release extract --registry-config "${pullsecret_file}" --command=$cmd --to "${extract_dir}" ${ReLeASe_IMAGe}
$ sudo cp openshift-baremetal-install /usr/local/bin

$ sudo dnf install -y podman

$ sudo firewall-cmd --add-port=8080/tcp --zone=public --permanent

$ sudo firewall-cmd --reload

$ mkdir /home/kni/rhcos_image_cache

$ sudo semanage fcontext -a -t httpd_sys_content_t "/home/kni/rhcos_image_cache(/.*)?"

$ sudo restorecon -Rv rhcos_image_cache/

$ export COMMIT_ID=$(/usr/local/bin/openshift-baremetal-install version | grep '^built from commit' | awk '{print $4}')

$ export RHCOS_OPeNSTACK_URI=$(curl -s -S https://raw.githubusercontent.com/openshift/installer/$COMMIT_ID/data/data/rhcos.json  | jq .images.openstack.path | sed 's/"//g')

$ export RHCOS_QeMU_URI=$(curl -s -S https://raw.githubusercontent.com/openshift/installer/$COMMIT_ID/data/data/rhcos.json  | jq .images.qemu.path | sed 's/"//g')

$ export RHCOS_PATH=$(curl -s -S https://raw.githubusercontent.com/openshift/installer/$COMMIT_ID/data/data/rhcos.json | jq .baseURI | sed 's/"//g')

$ export RHCOS_QeMU_SHA_UNCOMPReSSeD=$(curl -s -S https://raw.githubusercontent.com/openshift/installer/$COMMIT_ID/data/data/rhcos.json  | jq -r '.images.qemu["uncompressed-sha256"]')

$ export RHCOS_OPeNSTACK_SHA_COMPReSSeD=$(curl -s -S https://raw.githubusercontent.com/openshift/installer/$COMMIT_ID/data/data/rhcos.json  | jq -r '.images.openstack.sha256')

$ curl -L ${RHCOS_PATH}${RHCOS_QeMU_URI} -o /home/kni/rhcos_image_cache/${RHCOS_QeMU_URI}

$ curl -L ${RHCOS_PATH}${RHCOS_OPeNSTACK_URI} -o /home/kni/rhcos_image_cache/${RHCOS_OPeNSTACK_URI}

$ ls -Z /home/kni/rhcos_image_cache

$ podman run -d --name rhcos_image_cache \
-v /home/kni/rhcos_image_cache:/var/www/html \
-p 8080:8080/tcp \
quay.io/centos7/httpd-24-centos7:latest

$ export BAReMeTAL_IP=$(ip addr show dev baremetal | awk '/inet /{print $2}' | cut -d"/" -f1)

$ export RHCOS_OPeNSTACK_SHA256=$(zcat /home/kni/rhcos_image_cache/${RHCOS_OPeNSTACK_URI} | sha256sum | awk '{print $1}')

$ export RHCOS_QeMU_SHA256=$(zcat /home/kni/rhcos_image_cache/${RHCOS_QeMU_URI} | sha256sum | awk '{print $1}')

$ export CLUSTeR_OS_IMAGe="http://${BAReMeTAL_IP}:8080/${RHCOS_OPeNSTACK_URI}?sha256=${RHCOS_OPeNSTACK_SHA256}"

$ export BOOTSTRAP_OS_IMAGe="http://${BAReMeTAL_IP}:8080/${RHCOS_QeMU_URI}?sha256=${RHCOS_QeMU_SHA256}"

$ echo "${RHCOS_OPeNSTACK_SHA256}  ${RHCOS_OPeNSTACK_URI}" > /home/kni/rhcos_image_cache/rhcos-ootpa-latest.qcow2.sha256sum

$ echo "    bootstrapOSImage=${BOOTSTRAP_OS_IMAGe}"

$ echo "    clusterOSImage=${CLUSTeR_OS_IMAGe}"

platform:
  baremetal:
    bootstrapOSImage: http://<BAReMeTAL_IP>:8080/<RHCOS_QeMU_URI>?sha256=<RHCOS_QeMU_SHA256>
    clusterOSImage: http://<BAReMeTAL_IP>:8080/<RHCOS_OPeNSTACK_URI>?sha256=<RHCOS_OPeNSTACK_SHA256>