VEOS installation and configuration [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
en:veos:installation [2024/06/11 08:54] elena.krasnobryzhen:veos:installation [2026/05/28 15:46] (current) – created elena.krasnobryzh
Line 1: Line 1:
-====== Installation ======+======VEOS installation and configuration======
 {{indexmenu_n>2}} {{indexmenu_n>2}}
  
-<note tip>Before rack-mounting the server, make sure it meets **necessary requirements**+=====1. Requirements for VEOS installation===== 
 +====1.1. Hardware requirements==== 
 +Before mounting the server into the rack, make sure it meets the **required specifications**
 +  * [[en:dpi:dpi_brief:dpi_requirements|Requirements for SSG]] 
 +  * [[en:dpi:dpi_components:dpiui:hardware_recommendations|Requirements for GUI]] 
 +  * [[en:dpi:qoe_analytics:implementation_administration:requirements|Requirements for QoE]]
  
-  * [[en:dpi:dpi_brief:dpi_requirements:start|SSG requirements]] +:!If any discrepancies are identified at this stage, contact [[en:dpi:techsupport_info:start|VAS Experts technical support]] for a prompt resolution.
-  * [[en:dpi:dpi_components:dpiui:install_and_update:hardware_recommendations:start|GUI requirements]] +
-  * [[en:dpi:dpi_components:qoestor:install_and_update:hardware_recommendations:start|QoE requirements]]+
  
-:!: If any discrepancies are found at this stage, contact [[en:dpi:techsupport_info:start|VAS Experts technical support]] to promptly resolve the issue.</note>+====1.2. Disk partitioning requirements==== 
 +Disk partitioning for SSG software: 
 +  * ~20 GB for the root partition. 
 +  * Allocate the remaining space to the ''/var'' directory. 
 +  * SSG does not use a SWAP partition directly, but it is required for system tasks. Allocate 4 GB for it.
  
-===== ISO Links ===== +Use the GPT partition table type. 
-  - [[https://repo.vasexperts.com/veos/8.7/isos/x86_64/VEOS-8.7-x86_64-Minimal.iso|VEOS 8.7 Sakhalin]] ([[https://repo.vasexperts.com/veos/8.7/isos/x86_64/checksum|SHA-256 checksum]]) for minimal installation.+ 
 +=====2. Preparing for VEOS installation===== 
 +====2.1. Server preparation==== 
 +  * Disable Hyper-threading in BIOS for SSG software! 
 +  * Configure the server for maximum performance 
 + 
 +====2.2. Creating bootable media==== 
 +=== ISO links === 
 +  * [[https://repo.vasexperts.com/veos/8.10/isos/x86_64/VEOS-8.10-x86_64-Minimal.iso|VEOS 8.10 Olkhon]] ([[https://repo.vasexperts.com/veos/8.10/isos/x86_64/checksum|SHA-256 checksum]]) for minimal installation
  
 [[en:veos:installation:archived_versions]] [[en:veos:installation:archived_versions]]
  
-<note important>   +=== Method 1. Preparing a bootable USB drive === 
-When partitioning a disk for SSG software: +The most common way to install an operating system today is using bootable USB drive.
-  * ~ 20 GB for root partition +
-  * Allocate the remaining space for the ''/var'' directory. +
-  * The Stingray SG does not use a SWAP partition, but it is needed for system tasks and requires a 4 GB allocation. +
-**Disable Hyper-threading in BIOS for SSG software!** +
-</note> +
-===== Preparation of the installation USB memory stick ===== +
-The most popular current method of installing an operating system on computer is to install it from an installable USB memory stick.+
  
-<note warning>Do not use popular USB disk burning programs such as Unetbootin, Multibootusb and Universal USB Installer the VEOS installer WILL NOT work as these programs do not copy the installation ISO image correctly</note>+<note warning>Do not use popular USB writing tools such as Unetbootin, Multibootusb, or Universal USB Installer — the VEOS installer **WILL NOT** work because these tools incorrectly copy the installation ISO image.</note>
  
-==== Writing a USB disk on Linux ====+== Writing a USB drive on Linux ==
  
-To create a USB installation disk on Linux/Unix, run the dd command:+To create a bootable USB drive on Linux/Unix, run the dd command:
   > dd if=VEOS-8.7-x86_64-Minimal.iso of=/dev/sdz bs=1M   > dd if=VEOS-8.7-x86_64-Minimal.iso of=/dev/sdz bs=1M
  
-:!: When writing, you must specify the **entire disk**, not the partition on it (i.e. ''/dev/sdz'', but not ''/dev/sdz1'')+:!: When writing the image, specify the **entire disk**, not partition on it (i.e. ''/dev/sdz'', not ''/dev/sdz1'')
  
-==== Writing a USB Disk to Windows ====+== Writing a USB drive on Windows ==
  
-=== Rufus === +**1. Rufus**
-To burn an ISO to a USB drive on Windows, you can use the [[https://rufus.ie/ru/#|Rufus]] program, __must__ select the "Write to DD image" writing mode: +
-  Rufus main screen +
-{{:en:veos:rufus_main_screen.png?400|}} +
-  recording mode selection dialog box +
-{{:en:veos:record_mode.png?400|}}+
  
-=== Diskdupe (dd) for Windows === +To write the ISO image to a USB drive on Windows, you can use [[https://rufus.ie/ru/#|Rufus]], making sure to select the "DD Image mode": 
-The command parameters are similar to those on Linux. The DD distribution for Windows can be downloaded [[http://www.chrysocome.net/dd|here]].+  * Rufus main screen\\ {{:en:veos:rufus_main_screen.png?400|}} 
 +  * write mode selection dialog\\ {{:en:veos:record_mode.png?400|}}
  
-When using dd for Windows, first run dd --list and, after carefully reviewing the NT block device list, select a device similar to {\?\Device\Harddisk1\Partition0 with a description like "Removable media other than floppy. Block size = 512". Be careful with the choice of device, otherwise you may corrupt data on other disks!  
  
-===== Preparation of the installation disk ===== +**2Diskdupe (dd) for Windows**
-The most common way to install an operating system on a computer is to install from an installation DVD.+
  
-==== Recording a disk image in the MS Windows operating system ==== +The command parameters are the same as on LinuxThe DD distribution for Windows can be downloaded [[http://www.chrysocome.net/dd|here]].
-An ISO disk image file is a special format file prepared to burn on a diskTo burn an ISO image in the MS Windows use special programs: [[http://gluek.info/wiki/software/small-cd-writer|SCDWriter]], [[http://www.nero.com/rus/index.html|Nero BurningROM]], [[https://etcher.balena.io/|balenaEtcher]] and others+
  
-=== Recording a disk image with Small CD-Writer === +When using dd for Windows, first run ''dd --list'' and carefully review the list of NT block devicesSelect a device similar to ''\\?\Device\Harddisk1\Partition0'' with description like "Removable media other than floppyBlock size = 512". Be careful when selecting the deviceotherwise you may corrupt data on other disks!
-The entire process of burning an installation disk with Small CD-Writer consists of the following steps: +
-  - download the image of the distribution disk; +
-  - download the Small CD-Writer program archive http://gluek.info/wiki/_media/software/scdwriter14.zip; +
-  - extract program files from the archive to any directory; +
-  - insert blank disc into the drive; +
-  - enter the directory and run SCDWriter.exe; +
-  - start Disk → Burn ISO image to disk and, in the window that appearsspecify the path to the disk image; +
-  - click the Burn button.+
  
-==== Recording a disk image in the Linux operating system ==== +=== Method 2. Preparing an installation disk === 
-To burn ISO images it is recommended to use K3b or Brasero programs that come with any Linux distribution.+The traditional way to install an operating system is using an installation DVD.
  
-=== Recording a disk image with K3b === +== Burning a disk image on MS Windows (using Small CD-Writer) == 
-The entire process of burning an installation disk with K3b consists of the following steps: +An ISO disk image file is a specially formatted file prepared for burning to a disk. To burn an ISO image on MS Windows, use dedicated software such as [[http://gluek.info/wiki/software/small-cd-writer|SCDWriter]][[http://www.nero.com/rus/index.html|Nero BurningROM]][[https://etcher.balena.io/|balenaEtcher]]and others.
-  - if the k3b program is missing, you need to install it on your system using the standard software installation tools for the distribution you have; +
-  - run the k3b programIf properly configured, the program will tell you that there are no problems with the system and will prompt you to proceed to disk burning; +
-  in the Service main window menu, select Burn DVD image; +
-  in the Burn DVD image window that appearsclick the Choose file to burn buttonA dialog box will open in which you need to select the ISO image to burn and then click the OK button; +
-  - the k3b program will show you the information about the ISO file and start calculating the checksumThis operation may take a few minutesThe checksum you get may be compared with the MD5SUM on the distribution page; +
-  - if the checksums do not matchthat means you have selected a wrong file for burning or the downloaded ISO image was broken during data transfer over the network; +
-  - if the checksums matchinsert the disk into your drive. Wait for the Start button to activate; +
-  - click the Start button.+
  
  
-===== Installation ===== +The entire process of creating an installation disk using Small CD-Writer consists of the following steps: 
-To boot your computer to install the system, you need to use the media containing the VEOS distribution.+  - Download the distribution image; 
 +  - Download the [[http://gluek.info/wiki/_media/software/scdwriter14.zip|Small CD-Writer]] archive; 
 +  - Extract the program files from the archive into any directory; 
 +  - Insert a blank disk into the drive; 
 +  - Open the extracted directory and run SCDWriter.exe; 
 +  - Open the menu item Disk → Burn ISO Image to Disk and specify the path to the disk image in the dialog window; 
 +  - Click the Burn button.
  
-===== Installation sequence ===== +== Burning a disk image on Linux (using K3b) == 
-After successful initialization of the hardwarethe bootloader menu with installation options is displayed:+It is recommended to use K3b or Brasero for burning ISO imagesas these programs are included in most Linux distributions.
  
-{{ :veos:veos_boot_menu.png?nolink&600 |}}+The entire process of creating an installation disk using K3b consists of the following steps: 
 +  - if the k3b program is not installed, install it using the standard package management tools of your distribution; 
 +  - launch the k3b program. If the system is configured correctly, the program will report that there are no issues and offer to proceed with burning the disk; 
 +  - in the main window menu, select Service → Burn DVD Image; 
 +  - in the Burn DVD Image window, click the button to select the file for burning. A dialog will open where you need to choose the ISO image and click OK; 
 +  - k3b will display information about the ISO file and begin calculating the checksum. This may take several minutes. The resulting checksum can be compared with the MD5SUM value on the distribution page; 
 +  - if the checksums do not match, either the wrong file was selected or the downloaded ISO image was corrupted during transfer; 
 +  - if the checksums match, insert a writable disk into the drive and wait for the Start button to become active; 
 +  - click the Start button.
  
-Selecting the normal installation option launches the graphical interface of the installer programThe installation process is divided into stepsEach step is dedicated to configuring or installing a particular feature of the system. The steps follow one after the other. You can move to the next step by pressing Next. If necessaryyou can use the Back button to go back to a previous step and change the settings.+=====3Installation process===== 
 +====3.1. Booting from media and startup menu==== 
 +To boot the computer for system installation, use media containing the VEOS distribution.
  
-Technical information about the installation progress (log file) can be viewed by pressing Ctrl+Alt+F1, return to the graphical installer – Ctrl+Alt+F7. By pressing Ctrl+Alt+F2 the debugging virtual console opens. Each step is accompanied by brief help that can be accessed by clicking the Help button or by pressing the F1 key. +After successful hardware initialization, the bootloader menu with installation options is displayed:\\ 
-The following steps are used to install the system: +{{ :veos:veos_boot_menu.png?nolink&600 |}}
-  - choosing the language of the installation interface; +
-  - configuring OS installation options – keyboard layout, language support, date and time zone settings, disk partition preparation, network configuration, security policy configuration, and administrator account creation; +
-  - installing the system on the selected disk; +
-  - finishing installation and rebooting.+
  
 +Selecting the standard installation option launches the graphical installer interface. The installation process is divided into steps. Each step is dedicated to configuring or installing a specific system property. The steps must be completed sequentially. Proceed to the next step by clicking the Next button. If necessary, use the Back button to return to a previous step and modify settings.
  
 +Technical information about the installation process (log file) can be viewed by pressing Ctrl+Alt+F1, and you can return to the graphical installer using Ctrl+Alt+F7. Pressing Ctrl+Alt+F2 opens the debug virtual console.
 +Each step includes a short help section available by clicking the Help button or pressing F1.
 +The installation process consists of the following steps:
 +  - Selecting the installation interface language
 +  - Configuring OS installation parameters — keyboard layout, language support, date and time zone settings, disk partition preparation, network configuration, security policy configuration, and administrator account creation
 +  - Installing the system onto the selected disk
 +  - Completing the installation and rebooting
  
-===== Pre-configuring VEOS =====+====3.2. Verifying successful installation==== 
 +You can verify the installation in two ways: 
 +  * Check the VEOS version: <code bash>cat /etc/system-release</code> 
 +  * Download any test package from the repository
  
-If you received a preinstalled system from us, please immediately refer to the [[en:dpi:dpi_brief:install_point_ssg:micra_install|Appliance installation instruction]] section.\\ +=====4Providing access for further configuration=====
-Otherwise, you need to install the VEOS operating system on your server yourself and give us remote SSH access and root rights to perform the installation and initial configuration of the platform. After the work is completed, the remote access can be closed.+
  
-  - Create **vasexpertsmnt** user: <code> adduser -m -G wheel -u 3333 vasexpertsmnt </code> +If you received a preconfigured system from us, proceed directly to the [[en:dpi:dpi_brief:install_point_ssg:micra_install|Installation guide]] section.\\ 
-  - Set a **complex** password for the user **vasexpertsmnt**: <code>passwd vasexpertsmnt</code> For convenience, you can generate a password using openssl: <code> openssl rand -base64 15 </code>+Otherwise, you need to install the VEOS operating system on your server yourself and provide us with remote SSH access and root privileges so we can perform installation and initial platform configuration. 
 +After the work is completed, remote access can be disabled. 
 + 
 +  - Create the **vasexpertsmnt** user: <code>adduser -m -G wheel -u 3333 vasexpertsmnt</code> 
 +  - Set a **strong** password for the **vasexpertsmnt** user: <code>passwd vasexpertsmnt</code> For convenience, you can generate a password using openssl: <code>openssl rand -base64 15</code>
   - Save the password for **vasexpertsmnt**.   - Save the password for **vasexpertsmnt**.
-  - Set permission for users of the wheel group to use all commands on behalf of all users, for this you need to add to ///etc/sudoers// the line: <code>% wheel ALL=(ALL) NOPASSWD: ALL</code> +  - Allow users from the wheel group to execute all commands as any user by adding the following line to ///etc/sudoers//: <code>%wheel ALL=(ALL) NOPASSWD: ALL</code> 
-  - To provide remote access via SSH and set restrictions on valid IP addresses from the list: <code> 45.151.108.0/22, 94.140.198.64/27, 78.140.234.98, 193.218.143.187, 93.100.47.212, 93.100.73.160, 77.247170.13491.197.172.2, 46.243.181.24293.159.236.11 </code>+  - To provide remote SSH access and restrict access to the following IP addresses:<code>45.151.108.0/23, 94.140.198.64/27, 193.218.143.187, 93.100.73.160, 78.140.234.9893.159.236.11, 46.243.181.3546.243.181.242</code>
 <code> <code>
-iptables -A INPUT -m conntrack --ctstate RELATED, ESTABLISHED -j ACCEPT + iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT 
-iptables -A INPUT -p tcp -s 45.151.108.0/22 ​​-m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 45.151.108.0/23 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 94.140.198.64/27 -m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 94.140.198.64/27 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 78.140.234.98 -m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 193.218.143.187 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 193.218.143.187 -m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 93.100.73.160 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 93.100.47.212 -m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 78.140.234.98 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 93.100.73.160 -m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 93.159.236.11 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 77.247.170.134 -m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 46.243.181.35 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 91.197.172.-m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp -s 46.243.181.242 -m tcp --dport 22 -j ACCEPT 
-iptables -A INPUT -p tcp -s 46.243.181.242 -m tcp --dport 22 -j ACCEPT + iptables -A INPUT -p tcp --dport 22 -j DROP 
-iptables -A INPUT -p tcp -s 93.159.236.11 -m tcp --dport 22 -j ACCEPT + service iptables save
-iptables -A INPUT -p tcp --dport 22 -j DROP +
-service iptables save+
 </code> </code>
  
-If you are using firewalld:+If you use firewalld:
 <code> <code>
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "45.151.108.0/22" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="45.151.108.0/23" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "94.140.198.64/27" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="94.140.198.64/27" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "78.140.234.98" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="193.218.143.187" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "193.218.143.187" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="93.100.73.160" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "93.100.47.212" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="78.140.234.98" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "93.100.73.160" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="93.159.236.11" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "77.247.170.134" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="46.243.181.35" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "91.197.172.2" service name = "ssh" accept' + firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="46.243.181.242" service name="ssh" accept' 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "46.243.181.242" service name = "ssh" accept' + firewall-cmd --zone=public --remove-service=ssh --permanent 
-firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = "ipv4" source address = "93.159.236.11" service name "ssh" accept' + firewall-cmd --reload
-firewall-cmd --reload +
-firewall-cmd --zone = public --remove-service = ssh --permanent+
 </code> </code>
-**!Save your settings as the server will be rebooted during installation!** \\+**!Save your settings, since the server will be rebooted during installation!** \\
 \\ \\
  
-After making sure that remote access via SSH is providedsend to [[en:dpi:techsupport_info:start|technical support of VAS Experts]] (Service Desk) file an application for installation of the Stingray SG DPI license with the password and username for SSH access.+After confirming that remote SSH access is availablecontact [[en:dpi:techsupport_info|VAS Experts technical support]] (Service Desk) and create a request for SSG license installation, specifying the SSH username and password.
  
  
 <note> <note>
-Installation of the Stingray software is carried out by engineers or by yourself according to the instruction: [[en:dpi:dpi_brief:instal_script|Instructions for installing the Stingray software using the script]].+SSG software installation is performed either by engineers or independently according to the following guide: [[en:dpi:dpi_brief:instal_script]].
 </note> </note>
- 
 <note warning> <note warning>
-Do not update the operating system kernel until the system is activated [[en:dpi:update:start|updates]], +Do not update the operating system kernel until the [[en:dpi:update|update system]] has been activated
-this may cause the network card driver to fail (([[en:dpi:update:troubleshooting:start|Troubleshoot]]))+as this may cause the network card driver to fail.
 </note> </note>
  
 +=====5. Updating VEOS=====
 +To update VEOS, install the new version according to the standard [[en:veos:installation#installation_process|installation process]].
 +
 +=====6. Troubleshooting=====
 +====6.1. VEOS does not start after installation====
 +Boot issues can be caused by various reasons, from BIOS/UEFI settings to missing drivers.
 +  * Analyze the error messages displayed during boot.
 +  * The most common causes:
 +    * Secure Boot is enabled — disable it in UEFI settings.
 +    * Incorrect boot order — make sure the disk with VEOS is first in the boot device list.
 +    * GRUB bootloader is corrupted — boot into Rescue mode from the installation media and restore it.
 +    * Missing drivers (kernel panic) — use a DUD ISO with the inst.dd boot parameter.
 +  * If the cause is unclear, contact [[en:dpi:techsupport_info:start|VAS Experts technical support]] and attach a screenshot or the error text.
 +
 +====6.2. The installer does not detect the hard drive====
 +In most cases, the issue is related to hardware or the disk controller operating mode.
 +  * Check the physical disk connection: cables, ports, and power.
 +  * Check the SATA controller mode in BIOS/UEFI — switch between AHCI and RAID and try both options.
 +  * If the disk is connected to a RAID or HBA controller, there may be no built-in driver available — use a DUD ISO (see section 2.2.1).
 +  * To rule out disk failure, test the drive on another server.
  
 +====6.3. Network issues after installation====
 +If network connectivity is unavailable after booting VEOS, first check whether NetworkManager is running.
 +  * Check the NetworkManager status: <code>systemctl status NetworkManager</code>
 +  * If the service is disabled or not running, enable it: <code>systemctl enable NetworkManager
 +systemctl start NetworkManager</code>
 +  * If NetworkManager is running but the network still does not work, check the interface settings (DHCP or static IP), default gateway, and DNS.