Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
googlecloud-gettingstarted [2020_06_01 21:24] – [Upgrade to 1906] stevengooglecloud-gettingstarted [2024_03_18 20:16] (current) steven
Line 1: Line 1:
 +# Getting Started with Google Cloud
  
-Getting Started on Google Cloud+##### last updated July 13, 2023
  
 ## Why Google Cloud? ## Why Google Cloud?
  
-[[https://console.cloud.google.com/marketplace/details/sme-public-project/sme-enterprisefilefabric|{{ :googlecloud-gettingstarted:launchnow.png?nolink|nobox}}]]+[[https://console.cloud.google.com/marketplace/product/nasuni-public/nasuni-access-anywhere-server|{{ :googlecloud-gettingstarted:launchnow.png?nolink|nobox}}]]
  
-Google Cloud customers are using the File Fabric to take advantage of the high durability, scalability and low cost of Google Cloud Storage. Customers are able to securely extend access to end users and existing file-based applications, significantly reducing migration costs to the cloud. +Google Cloud customers are using Nasuni Access Anywhere to take advantage of the high durability, scalability and low cost of Nasuni file sgtorage. Customers are able to securely extend access to end users and existing file-based applications, significantly reducing migration costs to the cloud. 
  
-For more information on See [[https://storagemadeeasy.com/objectstorage/|The Enterprise File Fabric™ — The Killer Solution for Object Storage !]] +## Deployment Architecture
- +
-## Architecture +
- +
-### Single VM Deployment+
  
 {{ :googlecloud-gettingstarted:eff-google-mktplace.png?200| }}  {{ :googlecloud-gettingstarted:eff-google-mktplace.png?200| }} 
  
-For evaluation and smaller production environments the Enterprise File Fabric™ solution is typically deployed as a single virtual machine. The virtual machine includes an embedded database and search index.+For evaluation and smaller production environmentsthe Access Anywhere Server is typically deployed as a single virtual machine. The virtual machine includes an embedded database and search index.
  
 A single virtual machine can be launched directly from the Google Cloud Platform Marketplace.  A single virtual machine can be launched directly from the Google Cloud Platform Marketplace. 
  
-### Multiple VM Deployment+### High Availability
  
 {{ :googlecloud-gettingstarted:eff-google-arch.png?200| }} {{ :googlecloud-gettingstarted:eff-google-arch.png?200| }}
  
-The Enterprise File Fabric solution may also be deployed for High Availability with multiple virtual machines and a separate database.+The platform may also be deployed across multiple nodes with an external database for scalability and High Availability. Contact us for more information.
  
 Please contact us for more information on setting up HA deployments on the Google Cloud Platform. Please contact us for more information on setting up HA deployments on the Google Cloud Platform.
  
-For production deployments see also [[sizingguide|]].+### Sizing 
 + 
 +For production deployments see [[sizingguide]].
  
 ## Requirements ## Requirements
Line 35: Line 34:
  
  * Access to request / update DNS names for appliance (recommended)  * Access to request / update DNS names for appliance (recommended)
- SME Enterprise File Fabric license key (required) - A trial key can be requested from https://www.storagemadeeasy.com/appform/.+ License key (required) - A trial key can be requested from https://www.storagemadeeasy.com/appform/.
  * Outbound mail relay information. (recommended)  * Outbound mail relay information. (recommended)
  * Default storage system connectivity details - Google Cloud Storage recommended (required)  * Default storage system connectivity details - Google Cloud Storage recommended (required)
Line 42: Line 41:
 ## Launch ## Launch
  
-{{ :googlecloud-gettingstarted:gcp-launch-enterprisefilefabric.png?300| }} +{{ :googlecloud-gettingstarted:launch-server.png?400 |}}
- +
-1. From the Google Cloud Platform Marketplace click  [[https://console.cloud.google.com/marketplace/details/sme-public-project/sme-enterprisefilefabric|Enterprise File Fabric]].+
  
-2Then click **Launch on Compute Engine**.+1From the Google Cloud Platform Marketplace click  [[https://console.cloud.google.com/marketplace/product/nasuni-public/nasuni-access-anywhere-server|Nasuni Access Anywhere Server]].
  
 +2. Then click **Launch**.
  
  
Line 55: Line 53:
  1. Choose a Zone   1. Choose a Zone 
  1. Verify the Machine type - The minimum is large enough for evaluation.  1. Verify the Machine type - The minimum is large enough for evaluation.
- 1. Set IP Ranges for TCP port 8080 - This port is used only for initial network configuration+ 1. Optionally Set IP Ranges for TCP port 8080 - This port is used only for initial network configuration
  1. Select **Deploy**.  1. Select **Deploy**.
  
Line 65: Line 63:
  
 {{ :googlecloud-gettingstarted:solution-deployed.png?nolink&1000 |}} {{ :googlecloud-gettingstarted:solution-deployed.png?nolink&1000 |}}
- 
 ## Verify Web Access ## Verify Web Access
  
-{{ :googlecloud-gettingstarted:appl_login.png?200| }}+{{ :googlecloud-gettingstarted:appl_login.png?300 | }}
  
 From the deployment panel, click the button **Visit the site** to bring up the appliance login page. You can also use the Site Address URL directly. Use the username **appladmin** and password **Admin password** to log into the appliance. From the deployment panel, click the button **Visit the site** to bring up the appliance login page. You can also use the Site Address URL directly. Use the username **appladmin** and password **Admin password** to log into the appliance.
Line 74: Line 71:
 Until changed the appliance has an untrusted SSL certificate. Most browsers will flag this as a potential security issue and require your acknowledgement to bring up the page. Until changed the appliance has an untrusted SSL certificate. Most browsers will flag this as a potential security issue and require your acknowledgement to bring up the page.
  
-If you don't have the deployment panel, first open the [[https://console.cloud.google.com|Google Cloud Console]]. From the top left hamburger menu (aka Navigation menu) go to the page **Compute Engine > [[https://console.cloud.google.com/compute/instances|VM instances]]**. If you don't see the File Fabric instance check the project you are viewing. Open the VM instance details and locate the **External IP** under Network interfaces. Open the appliance website at %%https://<External IP>/%%. The username is appladmin and the password can be found under Customer metadata as the **eff\_user\_password**.+If you don't have the deployment panel, first open the [[https://console.cloud.google.com|Google Cloud Console]]. From the top left hamburger menu (aka Navigation menu) go to the page **Compute Engine > [[https://console.cloud.google.com/compute/instances|VM instances]]**. If you don't see the Access Anywhere server instance check the project you are viewing. Open the VM instance details and locate the **External IP** under Network interfaces. 
 + 
 +Open the appliance website at %%https://<External IP>/%%. The username is appladmin and the password can be found towards the bottom of the page under Customer metadata as the ```eff_user_password```. 
 + 
 +{{ :googlecloud-gettingstarted:custom-metadata.png?500 |}}
  
  
Line 80: Line 81:
 ## Verify SSH Access ## Verify SSH Access
  
-From the deployment panel, or from vm instance details, click the **SSH** button for remote access to the instance (using a browser or another ssh client). Check that you can become the smeconfiguser. (See trial email for password).+From the deployment panel, or from vm instance details, click the **SSH** button for remote access to the instance (using a browser or another ssh client). Check that you can become the smeconfiguser.
  
-    su smeconfiguser+    sudo su smeconfiguser
          
-Check that you can become root. (See trial email for password).+Check that you can become root.
  
-    su -+    sudo su - 
          
-This will be required to complete configuration.+This will be required to complete the configuration. 
  
-{{ :googlecloud-gettingstarted:ssh-login.png?nolink&1200 |}}+# Configure Network Services
  
-# SSL Configuration (Recommended)+## SSL Configuration (Recommended)
  
 The appliance is configured, by default, with DHCP and a self-generated untrusted SSL certificate.  The appliance is configured, by default, with DHCP and a self-generated untrusted SSL certificate. 
Line 138: Line 140:
 ## Change Hostname ## Change Hostname
  
-To update the appliance with the FQDN change to the root user by issuing “su -“ with SSH. As the root user, edit /etc/hostname with nano or vi.+To update the appliance with the FQDN change to the root user by issuing “sudo su -“ with SSH. As the root user, edit /etc/hostname with nano or vi.
  
 Change the google instance name to your FQDN. Change the google instance name to your FQDN.
Line 144: Line 146:
 {{ :cloudappliance:applinstallv1901:image002.png?nolink&600 |}} {{ :cloudappliance:applinstallv1901:image002.png?nolink&600 |}}
  
-## Start SME Config Server+## Start NAAConfig Server
  
-Leave root privilege and as the smeconfiguser start the configuration server by typing **smeconfigserver**. You should see a confirmation that the config server is running:+If you are logged in as root leave root privilege and as the smeconfiguser start the configuration server by typing **smeconfigserver**. You should see a confirmation that the config server is running:
  
 {{ :cloudappliance:applinstallv1901:image004.png?nolink&600 |}} {{ :cloudappliance:applinstallv1901:image004.png?nolink&600 |}}
Line 156: Line 158:
 ## Configure Hostname Settings ## Configure Hostname Settings
  
-Here you only need to configure the three domain names. Click "Configuration" and then "SME Server Hostname Settings".+Here you only need to configure the three domain names. Click "Configuration" and then "NAAServer Hostname Settings".
  
 {{ :googlecloud-gettingstarted:server-hostname-settings.png?nolink&600 |}} {{ :googlecloud-gettingstarted:server-hostname-settings.png?nolink&600 |}}
Line 170: Line 172:
 Elevate to the root user by typing the following command and entering the root password when prompted. Elevate to the root user by typing the following command and entering the root password when prompted.
  
-    su -+    sudo su -
  
 Note: The appliance will be inaccessible during the request which may be up to a minute. Note: The appliance will be inaccessible during the request which may be up to a minute.
Line 182: Line 184:
 Please also agree to the Terms of Service. It is not necessary to share the provided email with the Electronic Frontier Foundation. Please also agree to the Terms of Service. It is not necessary to share the provided email with the Electronic Frontier Foundation.
  
-Certbot will automatically detect what FQDNs are setup for the Enterprise File Fabric and prompt for which should be included in the certificate.+Certbot will automatically detect what FQDNs are setup for the Access Anywhere server and prompt for which should be included in the certificate.
  
     Which names would you like to activate HTTPS for?     Which names would you like to activate HTTPS for?
Line 193: Line 195:
     blank to select all options shown (Enter 'c' to cancel): 1,2,3     blank to select all options shown (Enter 'c' to cancel): 1,2,3
  
-Lastly, Certbot will prompt to disable all HTTP access.  Please select option 1 as the File Fabric already has HTTP to HTTPS redirection options configured.+Lastly, Certbot will prompt to disable all HTTP access.  Please select option 1 as the server already has HTTP to HTTPS redirection options configured.
  
     Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.     Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
Line 204: Line 206:
     Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1     Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
  
-After successful completion, the Enterprise File Fabric will automatically start using the new certificates.  These certificates will last for 90 days, so the final step is to setup automated renewal.+After successful completion, the server will automatically start using the new certificates.  These certificates will last for 90 days, so the final step is to setup automated renewal.
  
 ###  Automatically renewing the certificate ###  Automatically renewing the certificate
Line 210: Line 212:
 A Let’s Encrypt certificate is valid for 90 days, and can be automatically renewed within 30 days of expiration.  A simple cron job will run daily and handle renewals. A Let’s Encrypt certificate is valid for 90 days, and can be automatically renewed within 30 days of expiration.  A simple cron job will run daily and handle renewals.
  
-Please Note:  The File Fabric will be inaccessible during the renewal.  Please ensure that the renewal time is during off hours.  Downtime will only occur every 60 days when a renewal is required and may last up to one minute.+Please Note:  The server will be inaccessible during the renewal.  Please ensure that the renewal time is during off hours.  Downtime will only occur every 60 days when a renewal is required and may last up to one minute.
  
 While still logged in as root run the following command to add a cron job. While still logged in as root run the following command to add a cron job.
Line 216: Line 218:
     crontab -e     crontab -e
  
-In the example below the renewal attempt will process at 2:30AM in the timezone of the Enterprise File Fabric.  The Enterprise File Fabric ships by default with the timezone set to UTC time.  Please adjust this timezone as necessary.+In the example below the renewal attempt will process at 2:30AM.  The server ships with the timezone set to UTC.  You can set the cron jobs to run at the time of your choosing, but do not change the server'timezone.
  
     30 2 * * * /bin/certbot renew >> /var/log/letsencrypt/le-renew.log     30 2 * * * /bin/certbot renew >> /var/log/letsencrypt/le-renew.log
Line 222: Line 224:
 This will create a crontab entry for a cron job that will handle the renewals and write its output to a log file. This will create a crontab entry for a cron job that will handle the renewals and write its output to a log file.
  
-Use https://www.ssllabs.com/ to test the installation.+Use https://www.ssllabs.com/ to test the installation after updating the certificate.
  
 ## Outbound Email (Recommended) ## Outbound Email (Recommended)
Line 230: Line 232:
 If you do not configure an email server remember not to use email notification when adding users. If you do not configure an email server remember not to use email notification when adding users.
  
-### Using Gmail for Outbound Email+### Outbound Email (Recommended)
  
-Below is a sample what my screen looks like, for an SMTP setup using a Gmail account.+An SMTP server is used by the appliance to send registration and notification emails to users. A daily report and error notices are also emailed to the "Notification Email".
  
-{{ :cloudappliance:applinstallv1901:smtp-configuration.png?nolink&800 |}}+See [[cloudappliance/smtp_configuration]].
  
-The “Notification Email” address will receive emails from the system warning of license expiration etc. You should enter your email here.+If you do not initially configure an email server remember not to use email notifications when adding users.
  
 ### Change Appliance Admin Email ### Change Appliance Admin Email
Line 251: Line 253:
  
  
-# Upgrade to Latest 
- 
-The Google image is currently at version 1901. To upgrade to the latest 1906 release first install the Enterprise repo with the following commands: 
- 
-    yum install https://download.storagemadeeasy.com/sme-repo-release-latest.rpm 
-    yum install -y sme-externalrepo 
- 
-Now update the appliance with the following commands 
- 
-    yum clean all 
-    yum install sme-package-1906.06-11 
- 
-For upgrades prior to 1906.06, a new configuration value will need to be added to the File Fabric's core configuration file. Please [[https://docs.storagemadeeasy.com/appliance/editing-config|follow this guide]] for editing the configuration file. The following configuration flag must be present: 
- 
-    var $redishost = 'localhost:6379'; 
- 
-Now please reboot the system. 
- 
-    reboot 
  
 # Create an Organization # Create an Organization
Line 286: Line 269:
 ## Review User Package (Optional) ## Review User Package (Optional)
  
-The File Fabric platform uses templates for organizations, in order for us to create our organization, we need to pick a template, before we do, let’s review.+The platform uses templates for organizations, in order for us to create our organization, we need to pick a template, before we do, let’s review.
  
 Click “User Packages” and then click the pencil to modify “Organisation Cloud 20 Users” This is a good template to start from. Scroll down to the “Extra options” section and add “Content Search Enabled” and Dropfolders. Use “Crtl-Click" to add to the selection. Click “User Packages” and then click the pencil to modify “Organisation Cloud 20 Users” This is a good template to start from. Scroll down to the “Extra options” section and add “Content Search Enabled” and Dropfolders. Use “Crtl-Click" to add to the selection.
Line 332: Line 315:
   * [[organisationcloud/usermanagement|Add users]]   * [[organisationcloud/usermanagement|Add users]]
   * [[cloudproviders/googledocs|Link your account to Google Drive]]   * [[cloudproviders/googledocs|Link your account to Google Drive]]
-  * [[filesharing|Share files]] 
-  * ... 
  
 For more information see [[index|]] For more information see [[index|]]
 +
 +# Accessing Open Source Licenses
 +
 +The server includes open source components. Open source licenses can be found on the appliance in the root folder:
 +
 + * Third Party Licenses including Open Source Software.pdf