Virtual Machines – Sibeesh Passion

Encrypt an Azure Virtual Machine VHD File in 5 Minutes

SibeeshVenu — Tue, 03 Sep 2019 07:20:45 +0000

[toc]

Introduction

All the files inside a storage accounts are encrypted by default, but the case is different for an Azure Virtual Machine. The VHD file we have in an Azure VM is not encrypted by default, thus we would have to do that manually. Here in this video I will show, how you can do that. I hope you will like this video, Please do not forget to share me your feedback and subscribe to our channel.

Why Should We Encrypt Our VHD Disk?

Security is something that we all are concerned about, and by doing the Encryption on the VHD file in our Azure VM disk, we can assure some level of security and safeguard our data. Microsoft Azure uses the BitLocker feature in Windows and DMCrypt feature in Linux to do this encryption. As you might have already known that Azure Key Vault is used to store the key, secret, certificates of our applications, and while doing the encryption we are also saving our keys in the Azure KeyVault.

Prerequisites

You can not encrypt all of your VMs, there are some limitations.

Only the standard VMs are supported
The Basic A series VMs are not supported
The VM should have minimum of 2 GB memory

You can read more about this here.

Encrypt an Azure Virtual Machine VHD File in 5 Minutes

Your turn. What do you think?

Did I miss anything that you may think which is needed in this article? Could you find this post as useful? Kindly do not forget to share me your feedback.

Kindest Regards
Sibeesh Venu

SSH Deployment Task in Azure Pipelines

SibeeshVenu — Mon, 29 Apr 2019 13:32:09 +0000

[toc]

Introduction

The word automation means a lot to us, the developers. We hate to do the same work again and again, especially when it comes to some manual work, where we need to do the tasks one by one. With the help of Azure build and release pipelines in Azure DevOps, most of the build and release tasks can be automated. Here in this post, I am going to explain one such task which is SSH Deployment Task. This task is very handy when you want to perform some actions inside your virtual machine by login to the VM via SSH. Let’s jump in to the implementation now then.

Background

In one of my project. I am running a UCS server inside my Azure VM. We can consider the UCS server as a Google Play Store, where we can install and manage the relevant applications. For example, I have created my own application and I am running the same inside the UCS Azure VM. But every time when we have a new changes in the application, we have to update the new application Docker image in the UCS machine by login via SSH, below are some of the operations we do after login to the VM.

univention-app remove {AppName}
docker rmi $(docker ps -q)
univention-app update
univention-app install {AppName}

We had to set up a release pipeline to make our releases easier.

Working with SSH Deployment Task

As I mentioned earlier, this task will enable you to run your specific shell commands in your Virtual Machine. But to do that, we need to do some amazing things.

Create and Upload the Public Key to Azure VM

To set up our SSH Task we need a SSH Service Connection but to configure the connection we need to generate the Public and Private keys, you can use the below command to generate the same.

ssh-keygen -t rsa -b 2048

SSH KeyGen

You can either leave the passphrase blank or provide one, if there are keys available in the default location it will ask for the rewrite. Once the key is generated, you can go to the file id_sra pub file which is located at C:\Users\{username}\.ssh folder, and copy the entire content.

Now we can manually SSH into our VM and add our public key to the VMs authorized_keys.

ssh root@IP

Once you are logged in to the VM, you can add the newly generated public key to the authorized_keys.

cd .ssh/
touch authorized_keys

You can add the content by running the preceding command.

echo "" > authorized_keys

Please paste your public key inside the quotation (“”). As we already have our Private and Public key with us, now we can go ahead and create our SSH service connection.

Set Up the SSH Service Connection

First thing first, let’s create a SSH service connection in our Azure DevOps so that we can use it in our SSH Deployment Task.

Go to your Project Settings in your Azure DevOps project and click on the Service Connections and then click the +New service connection and then select SSH.

Service Connection

In the next dialogue box, you should fill all the details as preceding.

Add SSH Service Connection

Create the Release Pipeline

Wow!. We have created our Service connection successfully, and now it is time to use it. Go to your Azure DevOps project and click on Pipelines and then Releases. Now click on +New button and then +New release pipeline.

In the next dialogue, you should select the template for your pipeline, in this case, I will select “Empty Job”. Now click on the Tasks and then Agent Job. You can verify the Agent Job details, and once it is done, click on the + icon and then add SSH Task after searching with the keyword “SSH”.

Once the task is added, we can go ahead and set up the configuration.

SSH Task Configuration

Please remember to use the SSH service connection you have created. You can give the commands to run inside the VM in the commands section, each lines will be considered as a new command. You can always disable the option “Fail on STDER” if you think it is necessary. In my case I had disabled this feature as my UCS machine was running the some background tasks as part of the “univention-app” commands, some of such tasks were returning some errors, as these errors are not part of my releases, and as it is not any impacts in my deployment. Please remember to enable “Continue on error” in such scenarios.

Here, the adm_secret file is the file which contains the password of my UCS Admin Password. You can do this by running the preceding commands.

touch adm-secret;
echso "your secret" > adm_secret

Once your configuration is done, save your release configuration and create a new release. I hope the release will be successful.

Release Pipeline Result

Conclusion

In this article, we have learned,

How to create SSH Service connection in Azure DevOps
How to create and configure SSH Task in Azure Pipelines
How to generate Private and Public RSA keys

Please let me know what else you had learned from this Article.

Your turn. What do you think?

Thanks a lot for reading. Did I miss anything that you may think which is needed in this article? Could you find this post as useful? Kindly do not forget to share me your feedback.

Kindest Regards
Sibeesh Venu

Install MySQL in Azure Virtual Machine

SibeeshVenu — Fri, 18 Sep 2015 06:35:21 +0000

This article will help you understand how you can install and set up MySQL in a virtual machine in Azure. Basically Azure virtual machine is a computer which you can configure according to your needs. It allows load balance traffic, so if you host your website or anything in the virtual machines, it will be fast enough. We can set up the virtual machines from your azure portal. If you are new to azure virtual machine, I strongly recommend you to read here: Create Virtual Machine In Azure. It will be great if you have any existing MSDN subscription with you before you go with this. Now we will discuss more about installing MySQL in a virtual machine in Azure. I hope you will like this.

If you are new to azure, I recommend you to read here: Azure

Background

There are so many reasons why you should go with a virtual machine. I will share with you what exactly my need was. I was using a cleardb for my wordpress website. I was some having some limitation that 20 MB as the database size. For me that was not sufficient, and after my db crosses the limit, I was not able to login to my wordpress dashboard. I was getting some database errors when I try to login to admin. So I decided to create a virtual machine and install a MySQL there. This article helps you to install MySQL in virtual machine.

Steps to Install MySQL in Azure Virtual Machine

Go to start and click on the Internet Explorer