1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
@title = 'LEAP Platform for Service Providers'
@nav_title = 'Provider Platform'
@toc = true
If you have ever been a sysadmin for an organization or company that provides communication services to end users, you have probably screamed this many times:
> $%#*&!! It shouldn't have to be this hard.
We agree! The LEAP Platform is consists of a set of complementary packages and recipes to automate the maintenance of LEAP services in a hardened Debian environment. Our goal is to make it as painless as possible for sysadmins to deploy and maintain an service provider's infrastructure.
There are three main parts to the platform:
1. The platform recipes.
2. The provider instance.
3. The command line tool you use to manage your instance.
Platform recipes (leap_platform)
----------------------------------------
The LEAP platform recipes define an abstract service provider. It consists of puppet modules designed to work together to provide a system administrator everything they need to manage a service provider infrastructure that provides secure communication services.
Typically, a system administrator will not need to modify the LEAP platform recipes, although they are free to fork and merge as desired. Most service providers using the LEAP platform will use the same platform recipes.
The recipes are abstract. In order to configure settings for a particular service provider, a system administrator creates a provider instance (see below).
The repository for the platform recipes is `git://leap.se/leap_platform`.
Provider instance
-----------------------------------------
A "provider instance" is a directory tree (typically tracked in git) containing all the configurations for a service provider's infrastructure. A provider instance primarily consists of:
* A configuration file for each server (node) in the provider's infrastructure
* A global configuration file for the provider
* Additional files, such as certificates and keys
* A pointer to the platform recipes
A minimal provider instance directory looks like this:
└── bitmask # provider instance directory.
├── common.json # settings common to all nodes.
├── Leapfile # various settings for this instance.
├── provider.json # global settings of the provider.
├── files/ # keys, certificates, and other files.
├── nodes/ # a directory for node configurations.
└── users/ # public key information for privileged sysadmins.
A provider instance directory contains everything needed to manage all the servers that compose a provider's infrastructure. Because of this, you can use normal git development work-flow to manage your provider instance.
Command line program (leap_cli)
------------------------------------------
The [command line program](commands) `leap` is used by sysadmins to manage everything about a service provider's infrastructure. Except when creating an new provider instance, `leap` is run from within the directory tree of a provider instance.
The `leap` command line has many capabilities, including:
* Create, initialize, and deploy nodes
* Manage keys and certificates
* Query information about the node configurations
Traditional system configuration automation systems, like puppet or chef, deploy changes to servers using a pull method. Each server pulls a manifest from a central master server and uses this to alter the state of the server.
Instead, LEAP uses a masterless push method: The user runs `leap deploy` from the provider instance directory on their desktop machine to push the changes out to every server (or a subset of servers). LEAP still uses puppet, but there is no central master server that each node must pull from.
One other significant difference between LEAP and typical system automation is how interactions among servers are handled. Rather than store a central database of information about each server that can be queried when a recipe is applied, the `leap` command compiles static representation of all the information a particular server will need in order to apply the recipes. In compiling this static representation, `leap` can use arbitrary programming logic to query and manipulate information about other servers.
These two approaches, masterless push and pre-compiled static configuration, allow the sysadmin to manage a set of LEAP servers using traditional software development techniques of branching and merging, to more easily create local testing environments using virtual servers, and to deploy without the added complexity and failure potential of a master server.
The repository for the `leap` command is `git://leap.se/leap_cli`. It can be installed with `sudo gem install leap_cli`.
Getting started
----------------------------------
We recommend you read the platform documentation in this order:
1. [Quick start tutorial](platform/quick-start).
2. Platform [examples](platform/examples).
3. The `leap` [command reference](platform/commands).
4. [Configuration format](platform/config).
|
