Project

General

Profile

Azure VPS setup notes » History » Version 28

Jon Goldberg, 02/25/2022 05:08 PM

1 12 Jon Goldberg
{{last_updated_at}} by {{last_updated_by}}
2
3 14 Jon Goldberg
# Microsoft Azure - Setup
4 6 Jon Goldberg
5 14 Jon Goldberg
## For the Client
6 6 Jon Goldberg
7 22 Jon Goldberg
Hi there!  If I've directed you to this page, the part that concerns you are the first three sections only.  It's a bit convoluted, so feel free to ask me if you run into trouble! -Jon
8 14 Jon Goldberg
9 1 Jon Goldberg
[**NOTE**: Most of Microsoft's pages break with an ad blocker enabled.]
10 6 Jon Goldberg
11
### Get a Sponsorship
12
* [Go to the Nonprofit Microsoft Getting Started page](https://nonprofit.microsoft.com/en-us/getting-started).  Fill out the paperwork to be approved as a 501c3.  Approval can take 1 day or 3-4 weeks - I've seen both multiple times.
13
* Once approved, go to https://www.microsoft.com/en-us/nonprofits/azure to claim credits (or go directly to [Claiming Your Credits](https://nonprofit.microsoft.com/en-us/offers/azure).
14 14 Jon Goldberg
* You'll know your successful because you'll see a sponsorship listed on the [Sponsorship Page](https://www.microsoftazuresponsorships.com/Balance).
15 6 Jon Goldberg
16
### Create a Subscription
17
18 1 Jon Goldberg
* Check that you have credits in your sponsored account: https://www.microsoftazuresponsorships.com/Balance
19
* Visit the [Azure Portal](https://portal.azure.com).  
20
* Click the **Subscriptions** icon.
21
* Click the **Add** button.
22
* Add a subscription of type "Microsoft Azure Sponsorship" from the Azure portal. You will likely need to select **Show other subscription types** to see it.
23
 * **Note**: Even sponsored subscriptions require a credit card, make sure you have one available.
24
25 22 Jon Goldberg
### Grant access to other users
26
Microsoft is now enforcing two-factor authentication, so you need to create a separate user for me as your web vendor.
27
[Source](https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/add-change-subscription-administrator) for instructions
28 26 Jon Goldberg
* Open the new subscription by clicking on it from the **Subscriptions** page.
29 22 Jon Goldberg
* Click **Access Control (IAM)** in the left navigation bar.
30
* Under *Grant access to this resource*, click **Add role assignments**.
31 25 Jon Goldberg
* On the *Role* tab, click **Owner** and press **Next**.
32
* On the *Members* tab, set *Assign Access* to **User, group, or service principal**, and click **Select Members**.
33
* In the *Search by name or email address* box, put the email of the new user and press **Save**.
34 22 Jon Goldberg
At this point, they'll receive an email to either log in with an existing Microsoft account or to create a new one.
35
36 16 Jon Goldberg
## Technical Configuration
37
To set up a free account, you must:
38
* Get a Sponsorship (see above)
39
* Create a Subscription linked to the Sponsorship (see above)
40
* (Strongly recommended) Grant access to the subscription to other users.
41
* Create a Resource Group linked to the Subscription
42
* Create a Virtual Machine (and associated resources) linked to the Resource Group
43 14 Jon Goldberg
44
### Create a resource group
45 6 Jon Goldberg
* Select "Resource Group" from the main Azure portal.  
46 28 Jon Goldberg
* Select **Create** and give it a name.
47 1 Jon Goldberg
* Your subscription should be pre-selected since you only have the one.
48 23 Jon Goldberg
* Click **Review and Create**, then **Create**.
49 6 Jon Goldberg
50 1 Jon Goldberg
### Create a virtual machine
51 14 Jon Goldberg
* Click on your new resource group in the Azure Portal.
52 23 Jon Goldberg
* Click **Add » Marketplace**.
53
* Search for the name of the image you want (e.g. `Debian 10 "Buster"`).
54
 * If you picked an image that shows an hourly cost, it's probably the wrong one.
55
* See the screenshots below for configuration of the "Basics" and "Disk" tabs.  The other tabs I keep with the defaults.  My standard VPS type is now `D2as_v4`.
56 9 Jon Goldberg
* I've attached a downloaded template for this VM, which as of now I haven't used yet, not sure how it works.
57
58
![Create a VM - Basics Tab](https://hq.megaphonetech.com/attachments/download/1771/Selection_999(010).png)
59
60 15 Jon Goldberg
![Create a VM - Disks Tab](Selection_1016.png)
61 6 Jon Goldberg
62 14 Jon Goldberg
### Post-provisioning configuration
63 10 Jon Goldberg
64 14 Jon Goldberg
#### Partition and format the attached disk
65 10 Jon Goldberg
Your VM (if it's D2s v3) will have an "OS disk" of 30GB it ships with.  Your attached disk is unformatted.  Partition and format the new disk with:
66
67
```shell
68 18 Jon Goldberg
sudo parted --script -a optimal /dev/sdc mklabel gpt -- mkpart primary ext4 '0%' '100%'
69
sudo mkfs -t ext4 /dev/sdc1 
70 1 Jon Goldberg
```
71 18 Jon Goldberg
72
**NOTE** At different times, Azure may attach the disk as `/dev/sdb` or /dev/sdc`.  Use `fdisk -l` to determine the correct disk to work with.
73 17 Jon Goldberg
74 1 Jon Goldberg
#### Mount the attached disk
75 20 Jon Goldberg
```shell
76 24 Jon Goldberg
# waagent is writing to /var, we need to kill it for now.
77
sudo pkill waagent
78 20 Jon Goldberg
# install lsof and rsync
79 1 Jon Goldberg
sudo apt install lsof rsync
80
# Ensure that no files are open in /var.
81 24 Jon Goldberg
# This should come back empty. (Note that recently it hasn't been but seems to work anyway).
82 20 Jon Goldberg
sudo lsof | grep /var
83 1 Jon Goldberg
84 20 Jon Goldberg
sudo mount /dev/sdc1 /mnt
85 23 Jon Goldberg
sudo rsync -va /var/* /mnt
86
sudo mv /var /var.old
87 1 Jon Goldberg
sudo umount /mnt
88 21 Jon Goldberg
sudo mkdir /var
89 20 Jon Goldberg
sudo mount /dev/sdc1 /var
90 24 Jon Goldberg
sudo vi /etc/fstab
91 20 Jon Goldberg
```
92
Add the following line to `/etc/fstab`:
93
```
94 23 Jon Goldberg
/dev/sdc1       /var     ext4    defaults    0 1
95 20 Jon Goldberg
```
96 10 Jon Goldberg
97 14 Jon Goldberg
#### Modify Firewall Rules
98 6 Jon Goldberg
* Click on your new virtual machine in the Azure portal.
99
* Click **Networking** in the side navigation.
100
* You should see your firewall settings.  They should look like the screenshot below, except they'll be missing the two items circled.
101
* Add the "allow_ping" and "Port_5665" rules to the *Inbound Port Rules* as shown in the screenshot.
102
103 8 Jon Goldberg
![Firewall Rules](https://hq.megaphonetech.com/attachments/download/1772/Selection_999(012).png)
104
105 14 Jon Goldberg
#### Add a swapfile
106 6 Jon Goldberg
[Complete instructions are here](https://support.microsoft.com/en-us/help/4010058/how-to-add-a-swap-file-in-linux-azure-virtual-machines) but in short, add this to `/etc/waagent.conf` for an 8GB swapfile:
107
108
```
109
    ResourceDisk.Format=y
110
    ResourceDisk.EnableSwap=y
111
    ResourceDisk.SwapSizeMB=8192
112
```
113
114
Then run `service walinuxagent restart`.
115 27 Jon Goldberg
116
## Post-deployment management
117
### Adding a new disk
118
Add a disk by going to the virtual machine and clicking "Disk", not by "Add Resource".  Then used the `parted` and `mkfs` commands from above.  Don't forget to modify `/etc/fstab`!