MPU Meeting Tuesday 27th November 2012

Server Upgrades

The perl-AFS module is now available for use on SL6 and SL6_64 with openafs 1.4, it will be in the stable release from Wednesday 28th November. This should allow us to upgrade the packages master server to SL6_64. The refreshpkgs code needs testing, this could be done on a VM, it will need to be stopped on brendel first and the VM will need a copy of the Kerberos keytab.

The LCFG website is going to be on a VM based at KB. We will need a mirror of the data in the Forum, Stephen will speak to Services Unit to get that organised. This will need a second SAN volume for the data, Stephen will take the chance to test out adding extra disks to a VM to see if he can replicate the problem Graham encountered.

Alastair has checked through the remaining services on nelson. Toby is going to take on the maintenance of gerrit. The git not-a-service will soon be replaced with a full service managed by the Services Unit. There has been no response from the users about the openid not-a-service.

Server Hardware

Chris has written up the final report, he will take the project to the next Development meeting to be signed off. There is now another ordershost query which gives details of the hardware and firmware details of major components of the servers.

Security Enhancements

This is at the documentation writing stage. All new components have complete documentation for the available resources and methods. There is still a fair amount of higher level documentation required, Stephen is currently focussing on that required for the BuzzSaw log parsing and reporting system. Chris will take a look at the guide on writing BuzzSaw filters so that he can write a filter for the sleep component log entries.


The project proposal has been reworked. It looks like this is going to take 9 weeks of effort, this will have to be spread over at least 2 separate thirds of the year. After the design phase is complete the effort estimation for the implementation phase will have to be re-done.

Absence Reporting

Nothing more to do on this right now. Chris is going to write up a short summary and check that Liz agrees with the conclusion.

Miscellaneous Development

LVM component
The latest version of the LCFG LVM component has been shipped. Alastair will test this on district

All members of the Computing Team now have remctl access to the wake-on-lan system. Currently this is done with a static authorization list, it would be nicer to make this more easily maintained at some point.

sleep component
The disable method now just stops the machine from going to sleep, it does not prevent the component from running and setting wake alarms. This means that the machine will wake up to run updaterpms even if gnome sleep is active.

HP 8300
Alastair has tested the new HP 8300 and it seems to work fine with SL6.3, there are new hardware headers available.


Data audit
Chris has completed the audit of the data on our servers and checked the backups. Mostly we have now switched to using the new spanning map approach to mirroring. Chris has suggested we should have backups of the various logs on the SSH servers (process accounting, audit logs), Stephen will look into implementing something.

This Week

  • Alastair
    • Read server hardware final report
    • Test new lvm component (on district)
    • Look for new libvirt-client (sl testing or rebuild rhel)
    • Try subscribing to more Dell models to see whether do get mail re firmware
    • Systems blog article on the KVM Service
    • Report libvirt empty LVM group issue to Redhat, unless fixed in 6.3
    • create an MPU KVM server header
    • Document ssh keys mgmt - windows
    • Stargaze
    • What jobs can we give to our CSO?
    • Reboot metropolitan

  • Chris
    • Upgrade brendel -> SL6 (continue)
    • Bring server hardware project to dev meeting for closure
    • Start "increasing energy savings from DICE desktops" project
    • Quick report on "Absence Report" project
    • Document ssh keys mgmt - macos

  • Stephen
    • LCFG site -> SL6 (also test second disk issue)
    • Continue documentation for Security project
    • Discuss, with George, rmirroring audit logs to loghost
    • CO clinic
    • Document ssh keys mgmt - linux
-- AlastairScobie - 27 Nov 2012
Topic revision: r5 - 04 Dec 2012 - 09:41:23 - StephenQuinney
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
This Wiki uses Cookies