Target Requirements

O/S User / Privileges

1. Delphix O/S user which is identical to the cockroach software installer O/S user. Script to create Delphix O/S user: createDelphixOSUser.sh
2. Delphix O/S user must have read and execute privileges on:
   • CockroachDB Install Path: Location where software binaries are installed and located on the staging host.
3. The CockroachDB installation on the target environment must have the same version than the staging environment.
4. Empty folder on host to hold Delphix plugin [ approximate 2GB free space ]
5. Empty folder on host to mount nfs filesystem. This is just and empty folder with no space requirements and act as base folder for nfs mounts.
6. Please ensure any login banners similar to the one in the image below must be disabled on the target host.
7. To accomplish necessary tasks on the Cockroach target hosts, the Delphix OS user account requires privilege elevation specifications. Here is an example specification for the sudo privileges for mount, umount, link/unlink and start/stop cockroach services on the target host. Using the visudo to edit the sudoers configuration file.

   Defaults:delphix !requiretty
   delphix ALL=NOPASSWD:/bin/mount,/bin/umount,/bin/ln -s *dlpx*.service, /bin/unlink *dlpx*.service, /bin/systemctl daemon-reload, /bin/systemctl *st* *dlpx*.service
   

8. To secure your CockroachDB target cluster’s inter-node and client-node communication, please ensure the certificate directory must contain valid certificates containing the IP address and hostname for the Cockroach DB target server. Use below command to list certificates and keys:

   cockroach cert list --certs-dir=[path-to-certs-directory]
   

   For example: Delphix expects a valid hostname or IP address associated with Certificate File (node.crt)

   $ cockroach cert list --certs-dir=[path-to-certs-directory]
   Certificate directory: /home/cockroach/certs
     Usage  | Certificate File |    Key File     |  Expires   |                             Notes                              | Error
   ---------+------------------+-----------------+------------+----------------------------------------------------------------+--------
     CA     | ca.crt           |                 | 2032/03/29 | num certs: 1                                                   |
     Node   | node.crt         | node.key        | 2027/03/26 | addresses:crdb-node.example.com,10.1.1.1                       |
     Client | client.root.crt  | client.root.key | 2027/03/26 | user: root                                                     |
   (3 rows)
   

   To create these certificates and keys, use the cockroach cert commands with the appropriate subcommands and flags.

Note: --certs-dir - It’s the valid path to the CockroachDB cluster’s certificate and keys needed by cockroach commands.