CentOS 7 Igel Cloud Gateway

Purpose

To install the Igel Cloud Gateway on CentOS 7 in AWS. Reason for CentOS is for an instance pre-configured with SELinux. Officially Igel supports RHEL 7, but there are some changes I needed to make to get things to work with CentOS.

Prep CentOS Image

• Update

sudo yum upgrade -y

• Install python. At the time of writing Igel supports Python 2.7 which CentOS 7 ships with. However, this is going EoL and it would be good to run something newer. The only issue we will run into is that CentOS 7 requires python2.7 to work properly (i.e. yum)

sudo yum install python3

• Create dedicated user and add to wheel group (this can be done with single command, but I forgot).

sudo useradd igel
sudo passwd igel
sudo usermod -G wheel igel

• create bash alias to use python3 by adding the following to bashrc for the igel user

alias python='/usr/bin/python3'

• Update sshd.conf to allow the igel user to use password authentication.

Match User igel
        PasswordAuthentication yes

Deploy Using UMS

Disabling IPv6

This was originally added because I had routing issues on my instance, but was able to resolve it so this is not necessary.

• If not using IPv6, disable it. (I do not condone this, but my environment has third party support that is scared of IPv6)
• Append the following to /etc/sysctl.conf

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1

• Reload the config to apply

[centos@ip ~]$ sudo sysctl -p
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1

• Add the following to the yum config /etc/yum.conf

ip_resolve=4