MPU Meeting Tuesday 8th November 2011
AFS automation project
Nothing happened.
LCFG Server Refactoring
Nothing happened.
Install Scripts
The report's on the blog. Chris will send a note to everyone who responded, and check the blog for withheld comments.
Wake-On-Lan
Chris has the
wolclient
and
wolconf
components running on test machines and a suitable-looking configuration file is being generated. Next we need a virtual web server, a CGI script and some use of secure
remctl
to pass messages to a suitable network infrastructure machine to get it to actually send the Magic Packet. Hopefully it'll all be up and running this week.
Simple KVM Service
Alastair looked at the possibility of using LVM. He tried using Matthew's component, configured a storage pool, and everything worked first time. The performance is better than the filesystem-based alternative. However using LVM would mean full pre-allocation of disk space. He reckons on 15GB for a small virtual server. This would mean that we had disk space for more than 30 servers on a 500GB partition.
Server Upgrades
Stephen upgraded
schiff. One problem was encountered, with NFS, which was that
rpcbind
was being tied down by
tcpwrappers
to
localhost only.
We've decided to do firmware upgrades while machines are down for OS upgrades.
Miscellaneous Development
Stephen has been working on the
desktop ssh
header. When complete it will have a
live
header which will let us close all desktop ssh holes in one move. It also has Fail2Ban.
Operational
After power-cycling the KB Sataboy, the KB test FC setup was happy and functional even with
northern running SL6. Alastair's theory is that we'll just need to power-cycle the remaining SAN boxes to fix the SL6 FC woes. This theory will be tested on Thursday when Craig power-cycles the KB infrastructure. After Craig has finished, Alastair will reboot
piccadilly.
- Alastair
- Complete KVM documentation + beta service
-
Piccadilly reboot on Thursday
- Pass BIOS settings to USU
- Look at SL6 server stuff
- Chris
- WOL project
- PD
- Look at SL6 server stuff
- Add hwmon to relevant dice headers
- Stephen
- Complete report on ssh compromise
- Documentation for LCFG audit components and consider how to deploy
- Replace rockefeller with dunlin (student.ssh)
- LCFG project
--
AlastairScobie - 08 Nov 2011