Creating a Restricted User for HyperScale 1.5 Appliance

clear

Command to clear the restricted shell screen.

hs_node

Command to administer the local node from where its is invoked, unless a remote node name is specified.

The following options are available for this command:

$ hs_node --help
usage: hs_node (options)
Command options for current node.
Optional arguments:
  -h, --help            show this help message and exit
  --node <hostname>     If not specified, execute on local node. If specified, execute on specified node.
                        This can be applied to any of the node optional arguments;
                        Example: [--get_serial_number --node <remote_node>]
                        NOTE: Passwordless SSH must be configured for remote nodes.
  --get_serial_number   Show serial number of the node.
  --gethostname         Show hostname of the node.
  --cat <PATH_TO_FILE>  Show only allowed file's content.
  --tail [<TAIL_CLI_OPTIONS> [<TAIL_CLI_OPTIONS> ...]]
                        Show file content using 'tail' command.
                        Run [--tail ++help] option to check detailed usage.
                        Does not support --node option.
  --df                  Execute's command 'df -h'.
  --sestatus            Execute's command 'sestatus'. Used to check if ransomware protection is enabled.
  --lsblk               Execute's command 'lsblk'.
  --lsscsi              Execute's command 'lsscsi'.
  --lsmod               Execute's command 'lsmod'.
  --fdisk               Execute's command 'fdisk -l'.
  --get_registry_entry [reg_path= reg_key= [instance= ...]]
                        Show registry value for a given combination of instance=, reg_path=, and reg_key=.
                        Default instance value is Instance001. reg_path is an xpath from instance level.
                        Sample usage of the command:
                        1. hs_node --get_registry_entry reg_path=Installer/Subsystems reg_key=nPackageSum
                        2. hs_node --get_registry_entry reg_path=MediaAgent reg_key=sHyperScaleRPMQuerySuccess
  --grep SEARCH_WORD    Execute's command 'grep -i SEARCH_WORD -'.
                        Use it by piping output from other commands.
                        Does not support --node option.
                        Sample usage of the command:
                        1. hs_node --df | hs_node --grep "hedvig"
  --commvault SUBCOMMAND
                        Execute's command 'commvault (list|status|start|restart|start_services|stop|reg)'.
                        'start_services' subcommand can be used to start services as OS update does.
  --dmidecode           Execute's command 'dmidecode -t system'.
  --date                Execute's command 'date'.
  --netstat             Execute's command 'netstat -rn'.
  --blkid               Execute's command 'blkid'.
  --mount               Execute's command 'mount'.
  --uname               Execute's command 'uname -a'.
  --rpm                 Execute's command 'rpm -qa'.
  --ulimit              Execute's command 'ulimit -a'.
  --uptime              Execute's command 'uptime'.
  --resume_protection   Sets the node in enforcing mode.
  --firewall_list_open_ports
                        Execute's command 'firewall-cmd --list-ports'.
  --ping IP/Hostname    Execute's command 'ping IP/Hostname'. Does not support --node option.
  --nslookup IP/Hostname
                        Execute's command 'nslookup IP/Hostname'. Does not support --node option.
  --reboot              Execute's command 'reboot'. Does not support --node option.
  --gluster_volume SUBCOMMAND
                        Shows gluster volume related information. use --gluster_volume help to get more information.
  --volume GLUSTER_VOLUME_NAME
                        Provide gluster volume name.

hs_cluster

Command to administer all the nodes in a cluster.

The following options are available for this command:

$ hs_cluster --help
usage: hs_cluster [options]
These actions are preformed across the entire cluster, for each and every node.
optional arguments:
  -h, --help            show this help message and exit
  --get_serial_number   Show serial number for each node in the cluster.
  --list                Show all nodes in the cluster.
  --cat <PATH_TO_FILE>  Show only allowed file's content from each node in the cluster.
  --sestatus            'sestatus' command is executed on all nodes and prints output on the screen.
  --lsblk               'lsblk' command is executed on all nodes and prints output on the screen.
  --lsscsi              'lsscsi' command is executed on all nodes and prints output on the screen.
  --lsmod               'lsmod' command is executed on all nodes and prints output on the screen.
  --fdisk               'fdisk -l' command is executed on all nodes and prints output on the screen.
  --df                  'df -h' command is executed on all nodes and prints output on the screen.
  --get_registry_entry [GET_REGISTRY_ENTRY [GET_REGISTRY_ENTRY ...]]
                        'hs_node --get_registry_entry' command is executed on all nodes and prints output on the screen.
  --commvault SUBCOMMAND
                        'hs_node --commvault' command is executed on all nodes and prints output on the screen.
  --dmidecode           'dmidecode -t system' command is executed on all nodes and prints output on the screen.
  --date                'date' command is executed on all nodes and prints output on the screen.
  --netstat             'netstat -rn' command is executed on all nodes and prints output on the screen.
  --blkid               'blkid' command is executed on all nodes and prints output on the screen.
  --mount               'mount' command is executed on all nodes and prints output on the screen.
  --uname               'uname -a' command is executed on all nodes and prints output on the screen.
  --rpm                 'rpm -qa' command is executed on all nodes and prints output on the screen.
  --ulimit              'ulimit -a' command is executed on all nodes and prints output on the screen.
  --uptime              'uptime' command is executed on all nodes and prints output on the screen.
  --resume_protection   Sets Selinux to enforcing mode on all nodes in the cluster.
  --firewall_list_open_ports
                        'firewall-cmd --list-ports' command is executed on all nodes and prints output on the screen.
  --get_remote_cache    Find which node is the remote cache node of this cluster.

enable_ransomware_protection

Command to enable ransomware protection on the nodes.

Reboot the node after enabling ransomware using the following command:

$ hs_node –reboot

osupdate

Command to upgrade the operating system (OS).

When the OS upgrade process in in progress, the upgrade status can be viewed using the following command:

$ osupdate -status