5 Deploying and securing servers
This chapter provides an overview for using the HP Insight Rapid Deployment software to deploy servers
and the HP Vulnerability and Patch Management Pack (VPM) to perform vulnerability scanning and deploy
patches and fixes.
Configuring BladeSystem servers and image installs using the HP Insight
Rapid Deployment software
NOTE:
Because of compatibility issues, you must run HP Insight Rapid Deployment software and Ignite-UX
on different subnets.
IMPORTANT:
disk. The disks are enumerated using a proprietary algorithm. The "first" disk might not be the system boot
disk. The Altiris showdisk utility can be used to generate human-readable disk enumeration output. This utility
is called in the provided Read Hardware Configuration jobs. For more information on reading the showdisk
output, see the Rapid Deployment Pack Knowledge Base at http://www.hp.com/servers/rdp/kb.
Configuring scripted installs
The scripted install jobs use a small image to partition and format the disk. When deploying to a server with
multiple disks, either DAS or SAN, you might have to specify the system boot disk in the job for the NTFS.img
or GRUB.img images.
To specify a particular disk:
1.
In the Deployment Server Console, copy, rename, and edit the job.
2.
Modify the Distribute Disk Image task.
3.
In the Additional Parameters box, add the -dx switch, where x is an integer that represents the
appropriate disk number.
Additionally, for Red Hat Linux in a multiple disk configuration, the kickstart file must specify the system boot
disk.
1.
On the Deployment Server, copy and rename the kickstart file.
2.
Modify the new kickstart file by replacing the autopart command with separate part command lines
and adding the --ondisk=XXX option to each where XXX is the device label.
Example for non-LVM:
part /boot --size=75 --ondisk=cciss/c0d0part swap
--ondisk=cciss/c0d0part / --size 5120 - grow --ondisk=cciss/c0d0
Example for LVM:
part /boot --size=100 --fstype=ext3 --ondisk=cciss/c0d0part pv.01 --size=100
--grow --ondisk=cciss/c0d0volgroup VolGroup00 - pesize=32768 pv.01
3.
Edit the Run Script Create Boot Environment task in the job created above to use the new kickstart
file created in step 2.
Configuring SAN-attached scripted install
In addition to the steps in the Configuring-scripted-installs section, some further steps might be necessary.
For VMware ESX Server 3.x, disconnect the SAN. After the operating system install is complete, reconnect
the SAN and create a VMFS datastore on it.
Configuring image installs
When capturing or deploying an image to a server with multiple disks, either DAS or SAN, you might have
to specify the system boot disk in the job.
To specify a particular disk:
Configuring BladeSystem servers and image installs using the HP Insight Rapid Deployment software
By default, the Create Disk Image and Distribute Disk Image tasks operate on the "first"
size=1000
75