10.5.6. tpm copy Command

Automates the act of copying the shared SSL keys generated during installation to other cluster nodes as part of the post-installation workflow.

This command should only be run on ONE node, and should only be needed once, right after initial installation has completed on all nodes, and before the Tungsten processes have been started.

Note

This tool should only be needed for INI-based installations, and requires SSH access between the nodes to function properly.

See the table below for a list of valid arguments:

Table 10.20. tpm copy Common Options

OptionDescription
--all, --aCopy appropriate files in both the generated and share source directories to the list of nodes
--debug, -dDebug Mode.
--doiniCopy the /etc/tungsten/tungsten.ini configuration file to the list of nodes
--dryrun, -nDo not execute the copy commands, display only
--extra, -xDisplay the copy command executed
--gen, -gSync all files in the /opt/continuent/generated directory to the list of nodes
--help, -h
--hostsSpecify a comma-separated list of node names as seen in tpm reverse (default: all nodes in clusters as shown below)
--i-am-sureConfirm you want the files copied and that the installs are done on all nodes
--info, -i
--listList the default nodes shown below (all valid nodes in all clusters)
--localCopies the running passwords.store in share/ to the generated/ directory on the local node only, used only with --passwords (i.e. cp /opt/continuent/share/passwords.store /opt/continuent/generated/passwords.store) To also sync the generated/ directory to the node list, specify --gen as well
--long, -lShow the command output when run
--passwordsCopy just the /opt/continuent/share/passwords.store file to the list of nodes (included when using --share)
--quiet, -q
--share, --init, --install, --start, -sCopy needed files ([jpt]* .[jpt]*) in the /opt/continuent/share directory to the list of nodes (Note --install is only available in version 8.0.0 onwards)
--timeoutSpecify the ssh/scp Timeout as an integer in seconds (default: 3)
-vVerbose output.

With no options, prompt to continue, then, by default, copy the needed security files from /opt/continuent/share/ to all nodes on all clusters, skipping the localhost. To bypass the interactive pause, you may specify i-am-sure to confirm that all nodes are done installing, and that none of the Tungsten processes have been started yet.

This tool uses OS commands ssh, scp and uptime to function.

The scp and ssh commands will be called with two options:

  • -o StrictHostKeyChecking=no

  • -o ConnectTimeout={timeout in seconds, default 3}

The files specified by:

  • /opt/continuent/share/[jpt]*

  • /opt/continuent/share/.[jpt]*

will be copied from the local host to the same directory on all hosts in the target list, excluding the local node.

The default security key location path (/opt/continuent/share/) may be changed (although NOT recommended) by using the tpm option security-directory