Prepare nodes (on-prem)
AttentionThis page documents an earlier version. Go to the latest (v2.3) version.
For on-premises deployments of YugabyteDB universes, you need to import nodes which can be managed by Yugabyte Platform. This page outlines the steps required to prepare these YugabyteDB nodes for on-premises deployments.
NoteFor airgapped, on-premises deployments (without Internet connectivity), additional steps are required as outlined below.
Install the prerequisites and verify the system resource limits as described in system configuration.
Identify or create an SSH user. This user must have
sudo privileges on each YugabyteDB node.
To add a new SSH user, follow this procedure:
- Add the
$ sudo groupadd yugabyte
- Add the SSH user
$ sudo useradd -m -s /bin/bash -g yugabyte yugabyte
- Add a password for the user
$ sudo passwd yugabyte
/home/yugabytehome directory exists for this user. The directory should have been created automatically as a result of the above steps.
/home/yugabytedirectory is owned by
yugabyteuser to the
sudousers file (
/etc/sudoers) using the
Add the line below to the end of the file and then save your changes:
yugabyte ALL=(ALL) NOPASSWD: ALL
- Add the SSH keys to enable passwordless SSH as the
$ sudo mkdir /home/yugabyte/.ssh $ sudo chown yugabyte:yugabyte /home/yugabyte/.ssh $ sudo chmod 700 /home/yugabyte/.ssh $ sudo touch /home/yugabyte/.ssh/authorized_keys $ sudo chmod 600 /home/yugabyte/.ssh/authorized_keys $ sudo chown yugabyte:yugabyte /home/yugabyte/.ssh/authorized_keys
- Add the public key of the on-premises provider to authorized keys for this user. This is a public key derived from the provider private key created when installing the Yugabyte Platform:
$ ssh-keygen -y -f <private-key-file>.pem
3.Verify that you can
ssh into this node (from your local machine, if node has a public address).
$ ssh -i your_private_key.pem [email protected]_ip