WebYaST is a web-based system management tool that allows remote administration of SUSE Linux systems through a web browser. It is based on YaST, but removes the need for direct access or specialized software. WebYaST uses a RESTful API and reusable YaST components to provide remote system configuration and package management capabilities to both expert and novice users. It has additional security features like role-based access control compared to YaST. The presentation demonstrated WebYaST and discussed its architecture, customization options, and installation process.

1. WebYaST
Remote Web Based System Management
Ladislav Slezák
lslezak@suse.cz
SUSE Linux s.r.o.

2. © Novell Inc. All rights reserved2
Content
• YaST
• WebYaST features
• WebYaST demo
• Implementation details, solved problems
• Installation, customization
• Questions

3. YaST

4. © Novell Inc. All rights reserved4
YaST – Yet another Setup Tool
• System management tool for Linux
• System installer
• Open source (GPLv2+)
• Included in openSUSE, SUSE Linux Enterprise
• Desktop application, administration account needed

5. © Novell Inc. All rights reserved5
YaST – Installation

6. © Novell Inc. All rights reserved6
YaST – Control Center

7. © Novell Inc. All rights reserved7
YaST – Package Manager

8. © Novell Inc. All rights reserved8
YaST – Package Manager

9. WebYaST

10. © Novell Inc. All rights reserved10
WebYaST Features
• Successor to YaST
• Access via a web browser
• Open source (GPLv2 and LGPLv2)

11. © Novell Inc. All rights reserved11
WebYaST – Target Users
• Beginner users
• Experts (remote system monitoring)
• Appliance (virtual machine) management
– e.g. SUSE Lifecycle Management Server (SLMS)

12. © Novell Inc. All rights reserved12
Comparing YaST and WebYaST
YaST
SSH
VNC
HTTPS
• Remote access
WebYaST
• No special SW needed,
just a web browser
• OS/HW independent

13. © Novell Inc. All rights reserved13
Comparing YaST and WebYaST
• Authorization and security
YaST WebYaST
• No password sharing
• Access control
• Role based access
Admin
Password
User administrator SW administrator
?
Linux System
User administrator SW administrator
User's
password
User's
password
Access
rights
Access
rights
Linux System

14. WebYaST Demo

15. © Novell Inc. All rights reserved15
WebYaST

16. © Novell Inc. All rights reserved16
WebYaST

17. © Novell Inc. All rights reserved17
WebYaST

18. © Novell Inc. All rights reserved18
WebYaST

19. © Novell Inc. All rights reserved19
WebYaST

20. WebYaST in Details

21. © Novell Inc. All rights reserved21
YaST Architecture
UI
(Qt, Gtk, ncurses)
Application Logic
Low Level
Access
System Privilegeduser(root)
YaST

22. © Novell Inc. All rights reserved22
WebYaST Architecture – Overview
Web browser
Web client
HTML/HTTPS
XML/HTTP
Web service
(REST service)
System
Non-privileged
user
Non-privileged
user
WebYaST
?

23. © Novell Inc. All rights reserved23
WebYaST Architecture – Details
Web browser
Web client
HTML/HTTPS
XML/HTTP
Web service
(REST service)
YaST DBus
service PackageKit
System
Non-privileged
user
Non-privileged
user
Privileged
user
DBus
Directnon-privilegedaccess
...
RESTServiceWeb
Client
WebYaST

24. © Novell Inc. All rights reserved24
WebYaST – Details
• WebYaST uses Ruby on Rails framework
• Reusing existing YaST code
UI
(Qt, Gtk, ncurses)
Application Logic
Low Level
Access
System
Privilegeduser(root)
DBus
Wrapper
DBus
Access control
PolicyKit
DBusservice
LegacyYaST

25. © Novell Inc. All rights reserved25
REST Service
• The backend which actually configures system
• XML or JSON format over HTTP
• Can be also used by 3rd
party software
– or from commadline (via curl, wget)

26. © Novell Inc. All rights reserved26
REST Service
• Key components/features
– Small privileged part – DBus service
– Access control – using PolicyKit
– Reusing existing YaST components

27. © Novell Inc. All rights reserved27
Web Client
• HTML output over HTTPS
• Key features
– XML communication with REST – Rails ActiveResource
– Cross-browser compatibility – jQuery JavaScript library
– Localization support – GetText

28. © Novell Inc. All rights reserved28
Web Client – Customization
• First boot mode – first time configuration
– Set of modules started before the main application
– Started just once
– Example: license agreement, root password, registration
• Custom icon/link in the control panel, custom label
• Custom CSS (layout, colors, ...)

29. © Novell Inc. All rights reserved29
WebYaST – Customization

30. © Novell Inc. All rights reserved30
WebYaST – Plugins
• Plugin design
– Similar to legacy YaST
– Basic and shared functionality in base packages
– Plugins implement the actual functionality
> Decrease package dependencies
> Install only the needed modules (security)
• Plugins make WebYaST easily extensible

31. Installing WebYaST

32. © Novell Inc. All rights reserved32
WebYast – Installation
• Already preinstalled
– WebYaST in an appliance
• Installing from RPM packages
– http://download.opensuse.org/repositories/YaST:/Web/
– Start yastws and yastwc system services
– Open webyast-ui firewall port (optional for remote access)
– Open https://localhost:54984 in your browser
• Running directly from sources (GIT)
– The latest version for developers
– See http://en.opensuse.org/YaST/Web/Installation

33. © Novell Inc. All rights reserved33
WebYaST – Development
• Interested in WebYaST development?
• Open source (GPLv2 and LGPLv2)
• Contact:
– yast-devel@opensuse.org
– IRC freenode.net #yast
• Bug reporting
– http://bugzilla.novell.com, product: WebYaST

34. © Novell Inc. All rights reserved34
Resources
• WebYaST Documentation
– http://en.opensuse.org/WebYaST
• User and Vendor Guide
– http://www.novell.com/documentation/webyast/
book_webyast_use/data/cha_webyast_user_overview.html
– http://www.novell.com/documentation/webyast/
book_webyast_vendor/data/cha_webyast_vendor_overview.html
• General Terms
– REST: http://en.wikipedia.org/wiki/Representational_State_Transfer

35. Questions?