TurnKey Linux Virtual Appliance Library

Announcing TurnKey OpenVZ optimized builds (+ Proxmox VE channel)

OpenVZ and Proxmox VE has been a recurring topic of discussion on the forums, for which we have Jeremy to blame thank. He's done tons of research, testing, preaching, and then some.

What I love about Open Source is that if you have an itch, and the drive to scratch it yourself, you can.

That's exactly what Jeremy and Adrian did. They wanted OpenVZ optimized builds for their Proxmox VE deployments, so they developed a TKLPatch that would convert an ISO into an OpenVZ container. And if that wasn't enough, took the time to upload some of the builds to sourceforge so it would be easier for others to leverage their work.

Hats off to you guys, you rock!

TurnKey OpenVZ optimized builds

Based on Adrian's and Jeremy's work, we were able to add OpenVZ support to our build infrastructure in no time, and after some initial testing, triggered the whole appliance library to be built as optimized OpenVZ containers.

You can get them from the "Download -> More Builds" link on the appliance pages.

Pre-seeding / default passwords

Because OpenVZ builds are used in headless deployments (without a console), they include an inithook which preseeds default values and passwords (excluding the root password which is handled by the VZ CLI tools).

/usr/lib/inithooks/firstboot.d/29preseed

DB_PASS=turnkey
APP_PASS=turnkey
APP_EMAIL=admin@example.com
APP_DOMAIN=DEFAULT
HUB_APIKEY=SKIP
SEC_UPDATES=FORCE

Depending on your use case, you can preseed the values before the system is booted for the first time, or once the system has booted by executing turnkey-init.

It would be great if someone would add preseeding support to PVE... 

TurnKey Proxmox VE channel

A while back the Proxmox folks came up with the idea of adding a TurnKey channel to PVE, to allow users to download TKL appliances in the same way their custom built appliances are downloaded.

It was a great idea, but unfortunately it never got off the ground.

As I mentioned above, the great thing about Open Source is that you can scratch your own itch, and I was curious how the channel mechanism worked - so I dived in. When I came up for air I had added minimal third party channel support and a TurnKey Linux channel (github).

What this basically means is you can now download and deploy any TurnKey appliance on your PVE server in a couple of clicks without leaving your browser.

proxmox turnkey channel

I hope to see this integrated in the upcoming PVE 2.0 release [update: it's coming...]. If you're running PVE 1.9 then you can add the TurnKey channel as follows:

cd /usr/share/perl5/PVE
mv APLInfo.pm APLInfo.pm.bak
wget https://raw.github.com/turnkeylinux/pve-patches/master/PVE/APLInfo.pm

# update appliance list
pveam update
Enjoyed this post? Get future posts delivered by email or get the RSS feed.
Find us on Facebook and Twitter.
Last update: Fri, April 13 - 04:56

Comments

No such file or directory

Try as above and am getting multiple errors.  

 

xxxxx:/usr/share/perl5/PVE# cd /usr/share/perl5/PVE
buc5media:/usr/share/perl5/PVE# mv APLInfo.pm APLInfo.pm.bak
mv: cannot stat `APLInfo.pm': No such file or directory
xxxxx:/usr/share/perl5/PVE# wget https://raw.github.com/turnkeylinux/pve-patches/master/PVE/APLInfo.pm
--2012-01-16 09:56:31--  https://raw.github.com/turnkeylinux/pve-patches/master/PVE/APLInfo.pm
Resolving raw.github.com... 207.97.227.243
Connecting to raw.github.com|207.97.227.243|:443... connected.
ERROR: cannot verify raw.github.com's certificate, issued by `/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287':
  Self-signed certificate encountered.
To connect to raw.github.com insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.
xxxxx:/usr/share/perl5/PVE# 
xxxxx:/usr/share/perl5/PVE# # update appliance list
xxxxx:/usr/share/perl5/PVE# pveam update
 
Jeremy (aka JedMeister)'s picture

Are you using PVE v1.9?

Because it works fine for me on my v1.9 host:

proxmox:~# cd /usr/share/perl5/PVE
proxmox:/usr/share/perl5/PVE# mv APLInfo.pm APLInfo.pm.bak
proxmox:/usr/share/perl5/PVE# wget https://raw.github.com/turnkeylinux/pve-patches/master/PVE/APLInfo.pm
--2012-01-17 10:24:14--  https://raw.github.com/turnkeylinux/pve-patches/master/PVE/APLInfo.pm
Resolving raw.github.com... 207.97.227.243
Connecting to raw.github.com|207.97.227.243|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6025 (5.9K) [text/plain]
Saving to: `APLInfo.pm'

100%[=====================================>] 6,025       --.-K/s   in 0s      

2012-01-17 10:24:18 (426 MB/s) - `APLInfo.pm' saved [6025/6025]

proxmox:/usr/share/perl5/PVE# pveam update
debug: channel updates: initiated
debug: proxmox: starting...
debug: proxmox: getting index signature
debug: url_get: http://download.proxmox.com/appliances/aplinfo.dat.asc
debug: url_get: 200 OK
debug: proxmox: getting index
debug: url_get: http://download.proxmox.com/appliances/aplinfo.dat.gz
debug: url_get: 200 OK
debug: proxmox: verifying index integrity
debug: proxmox: validating index syntax
debug: proxmox: update complete
debug: turnkeylinux: starting...
debug: turnkeylinux: getting index signature
debug: url_get: http://releases.turnkeylinux.org/pve/aplinfo.dat.asc
debug: url_get: 200 OK
debug: turnkeylinux: getting index
debug: url_get: http://releases.turnkeylinux.org/pve/aplinfo.dat.gz
debug: url_get: 200 OK
debug: turnkeylinux: importing A16EB94D from hkp://keyserver.ubuntu.com
  (RSA: 1)
debug: turnkeylinux: verifying index integrity
debug: turnkeylinux: validating index syntax
debug: turnkeylinux: update complete
debug: channel updates: finalizing
debug: channel updates: complete

And the TKL entries are now there under 'Appliance Templates' >> Download.


I'm a nOOb

Yes, it's 1.9.  I might be doing something wrong but am not having any luck.  

Jeremy (aka JedMeister)'s picture

I don't think you can do anything 'wrong'

It's pretty much a case of copy/paste the commands (the beauty of CLI). So I would suspect that something is not quite right in your PVE install. Did you install from a 1.9 ISO, or did you update from an earlier ISO install, or did you install on top of Debian? Probably the first thing I'd try is to make sure that you have everything up to date. See here (it details upgrading to 1.9 from an earlier release, but should still apply in your instance).


Got it, updated but had to

Got it, updated but had to use the --no-check--certificate.

Thank you for sticking with it.

Jeremy (aka JedMeister)'s picture

That is so cool! :)

I'm loving it Alon! :)

And I think your solution to the firstboot passwords is the best (and quite obvious in retrospect).

Nice work all round. Thanks heaps.


Chris Musty's picture

Unfreaking-believable!

Absolutely love it! No more downloading the ISO, uploading it to PVE and then getting it going!

It all makes sence looking back on how PVE works but I never connected the dots.

Have you guys seen the beta for 2.0?

I barely got it running and started to play with it when I got called away to something else but I could not see immediatly any similarity.

Keep it going guys! Awesome work!

Chris Musty

Director

Specialised Technologies

Marvelous, thanks

I have a cluster of two Proxmox servers. I used to install turnkey isos on KVM. And now I can even install Openvz containers in such an easy way!!

Thank you for this great possibility.

You should post this on the PVE forum and a howto on the PVEwiki.

Peerx

Thanks for the cool

Thanks for the cool work.

Maybe this is the kick in the pants I need to try out ProxMox VE. I have a server all set to install but haven't given it a whirl yet because I am so familiar with ESXi. Maybe today.

 

EDIT: Just a heads up for anyone else wanting to trying this and planning on using the ProxMox VE 2.0 beta. As of beta3... appliance templates are not visible in the UI yet.


Chris Musty's picture

First Crack

Had a go at it and am a happy camper.

Now I can download ISO's directly to PVE!!!

w00t!!!

Chris Musty

Director

Specialised Technologies

Question to First Crack: Do

Question to First Crack:

Do you mean iso's by iso's or Openvz containers?

Jeremy (aka JedMeister)'s picture

I reckon Chris means OVZ template

And if he doesn't then he knows something I don't!


Chris Musty's picture

:-)

ok when i typed that i was creating an iso for a client. 

Chris Musty

Director

Specialised Technologies

Works great!

Thank you so much for this hack. Getting hold of openVZ containers of Turnkey Linux images from within the web GUI is almost like cheating. Too easy, you get to do what you actually needed to do in minutes, not hours... Thanks!

Oh Snap.

I also had to ignore certification, but no big deal. I'm downloading a VZ now, and excited to give it a go.

This is so handy it makes me feel like I got away with something. Turnkey, you make me look like I know what I'm doing. :)

Ben Alexander's picture

Thanks!

Great added resource to another great resource,  Thanks for working this out.

Alon Swartz's picture

TurnKey channel to be integrated by default in PVE 2.0

Martin just announced that the TurnKey channel will be integrated by default in PVE 2.0, and is already available in PVE 2.0rc1.

Jeremy (aka JedMeister)'s picture

Fantastic news Alon! :)

Yay! I'm excited!

Personally I think this is a huge win for both projects and their communities. TKL users wanting a solid base for deploying multiple TKL appliances to hardware have a fantastic OOTB option in PVE. And PVE users have an almost too easy way to access a huge range of ready-to-run TKL OVZ templates at their fingertips, without even leaving the PVE WebUI!

IMO this is the power of open source in action and great to see this sort of cross polination between projects. I think this will have flow on benefits for both PVE and TKL, and I would imagine increased exposure to both.

Thanks again for your efforts on this front Alon. And what great timing too. This will mean that from the first stable release, PVE will include access to TKL templates OOTB. Yay! Can you tell I'm excited? :D

I guess I'll have to have a proper test of PVE v2.0 now then! :)


Brilliant!

Proxmox + Turnkeylinux - it just got a whole lot better!. Thank you for all your great work.

Gerry

Thanks

Thats verly nice,, Have looking for it in a loooong time,,, 

 

 

Gratz Whit it

Proxmox 1.6

Can I use this script in PVE 1.6?

Jeremy (aka JedMeister)'s picture

Perhaps...?

But only one way to find out! I'm inclined to ask why you are still running v1.6...


I have few quite occupied

I have few quite occupied vps's on host I am bit worried that after upgrade to 1.9 I will lost contact to my host mashine.

;-D 

Its OVH release and Ive heard users reported issues with ethernet adapter beeing unsupported by newer PVE releases.

Abkrim Mateos's picture

Problems with update

debug: turnkeylinux: getting index
debug: url_get: http://releases.turnkeylinux.org/pve/aplinfo.dat.gz
debug: url_get: 200 OK
debug: turnkeylinux: importing A16EB94D from hkp://keyserver.ubuntu.com
debug: turnkeylinux: verifying index integrity

debug: turnkeylinux: unable to verify signature

tail -f /var/log/pveam.log
mar 22 12:12:18 turnkeylinux: importing A16EB94D from hkp://keyserver.ubuntu.com
?: keyserver.ubuntu.com: Connection timed out
gpgkeys: HTTP fetch error 7: couldn't connect: Connection timed out
gpg: solicitando clave A16EB94D de hkp servidor keyserver.ubuntu.com
gpg: no se han encontrados datos OpenPGP válidos
gpg: Cantidad total procesada: 0
mar 22 12:12:39 turnkeylinux: verifying index integrity
gpg: Firmado el vie 13 ene 2012 09:05:19 CET usando clave RSA ID A16EB94D
gpg: Imposible comprobar la firma: Clave pública no encontrada
mar 22 12:12:39 turnkeylinux: unable to verify signature
 
 
I'm lost.

Apreciate help



Yo solo se que no se nada...

http://islaserver.com/
http://tamainut.com/

Jeremy (aka JedMeister)'s picture

Not sure what's happening for you

Mine is working ok this morning:

/etc/cron.daily/pve:
debug: channel updates: initiated
debug: proxmox: starting...
debug: proxmox: getting index signature
debug: url_get: http://download.proxmox.com/appliances/aplinfo.dat.asc
debug: url_get: 200 OK
debug: proxmox: getting index
debug: url_get: http://download.proxmox.com/appliances/aplinfo.dat.gz
debug: url_get: 200 OK
debug: proxmox: verifying index integrity
debug: proxmox: validating index syntax
debug: proxmox: update complete
debug: turnkeylinux: starting...
debug: turnkeylinux: getting index signature
debug: url_get: http://releases.turnkeylinux.org/pve/aplinfo.dat.asc
debug: url_get: 200 OK
debug: turnkeylinux: getting index
debug: url_get: http://releases.turnkeylinux.org/pve/aplinfo.dat.gz
debug: url_get: 200 OK
debug: turnkeylinux: verifying index integrity
debug: turnkeylinux: validating index syntax
debug: turnkeylinux: update complete
debug: channel updates: finalizing
debug: channel updates: complete

Have you retried it?


Webmin Question

what's port for webmin? I mean how can i acess

Jeremy (aka JedMeister)'s picture

Guessing you probably found the answer by now...

Because it is readily available info (although in fairness not quite so obvious from OVZ builds because no confconsole auto running). Anyway it is port 12321 (https only).


magento openvz on PVE2 not working

It was great seeing all the turnkey linux appliances on my freshly installed PVE2 server. I tried installing turnkety.magento and I could not get to it. I tried re downloading and installing but no good.

Anyone else having this issue? 

Jeremy (aka JedMeister)'s picture

What do you mean "could not get to it"?

Do you mean that you can't login as the Admin user?

I just downloaded the TKL Magento OVZ template from the PVE2 WebUI and it all seemed to be going ok, until I tried to log in. It wouldn't let me log in. I tried resetting the login info a few times (turnkey-init) and no dice. I even tried the 'forgot password' link and the email said it sent but I never got it.

Out of interest I launched a Small TKL Magento instance on AWS and same deal!? So I'm not sure what's going on...?!

I've had a bit of a dig through the firstboot scripts and I think this may be a bug. But I'm not sure. If what I think is going on is right, then others should have complained about this previously and it's not just limited to OVZ installs, all Magento appliances should be affected.

I'm tired and going to bed now so not going to do anymore hunting. Some links that may (or may not) be of use are here:
http://www.magentocommerce.com/boards/viewthread/272236/
http://www.magentocommerce.com/boards/viewthread/4957/
http://www.magentocommerce.com/wiki/recover/resetting-admin-password


magento

I got that issue and I could not log in. I then removed  recreated  and I would get something about the printer not being setup.  In short I would not get the welcome screen.  

I downloaded template again and installed. Browser has shop.example.com on top but I see nothing.

*PVE2 did have updates recently...

Domain for Magento

I was reading another post for magento on TKL:

http://www.turnkeylinux.org/forum/support/20110127/turnkey-magento-magento-domain-set

I dont remeber being asked about the domain when setting up magento. Right now it is defaulting to shop.example.com. How would I change it so i can reach it with a service like dyndns?
 

* I can reach webmin on magento VZ and other appliances are working on my PVE2. Any help or direction would be greatly appreciated. 

Jeremy (aka JedMeister)'s picture

Need to run 'turnkey-init'

Because OVZ appliances don't have a true console, firstboot scripts don't run properly (they cause Webmin and other services to hang because they run and wait for input but there is no way to access the dialog to provide the input).

As a workaround, firstboot scripts don't auto run in OVZ templates, they need to be run manually. Hence the 'turnkey-init' script. By running turnkey-init all the firstboot scripts that run automatically when appliances are installed in other mediums (such as ISO install, VM image, etc) are triggered (with the exception of setting the root account password as that is done prior to boot on the host OS).

But as I said, even after running the firstboot scripts I still couldn't login. Not sure why, be interested to hear your experience.


Re installed

read another post on your forum where you instructed to run the init script which helped me getting the domain for magento changed.

 

*Regarding the no login. I removed and installed again which fixed the issue. I did install the fileserver vz and I cant login with admin. 

Its great having TKL repo in PVE2 it makes it easy to dl and try TKL very easily

 

thanks for the init info, got me going

Alon Swartz's picture

TurnKey Core 12.0rc now available in TurnKey PVE channel

Following the announcement of TurnKey Core 12.0rc (ISO , Amazon EC2), we've released an OpenVZ optimized build which is available in the TurnKey PVE channel. You can force the channels update as follows (or wait for the daily refresh):

/usr/bin/pveam update

If you come across any issues, or have ideas on improving the optimized build, please post a comment.

Changes from TurnKey 11.3 OpenVZ optimized builds:

  • Removed Ubuntu related hacks (not needed in Debian)
  • Removed NTP daemon (recommended by Martin)
  • Misc tweaks for Debian Squeeze.

Post new comment

The content of this field is kept private and will not be shown publicly. If you have a Gravatar account, used to display your avatar.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <p> <span> <div> <h1> <h2> <h3> <h4> <h5> <h6> <img> <map> <area> <hr> <br> <br /> <ul> <ol> <li> <dl> <dt> <dd> <table> <tr> <td> <em> <b> <u> <i> <strong> <font> <del> <ins> <sub> <sup> <quote> <blockquote> <pre> <address> <code> <cite> <strike> <caption>

More information about formatting options

Leave this field empty. It's part of a security mechanism.
(Dear spammers: moderators are notified of all new posts. Spam is deleted immediately)