MPU Meeting Thursday 6th November 2014

Virtual DICE

Nothing happened.


Nothing happened.


Stephen made a start on an FAQ for LCFG component authors.

The work on the polkit component has been completed and Stephen has used it to authorize users to be able to reboot and poweroff their own desktop machines. This replaces the previous support in SL6 which used PAM.

The gdm theme is now looking a lot more reasonable, it has been configured using dconf component resources. We will need to modify the gnome shell theme to create a DICE theme. We could just change the logo, that's quite easy.

Graham reported that he had a problem with logging into a recently booted machine which then rebooted automatically. Alastair seems to think it works fine for him, he will check the Systemd configuration.

Stephen has noted EL7 support for lots of core components and tagged new releases. The new releases have been built and will be in the next stable release. To avoid too many changes in one week he will do another bunch of packages when he gets back from LISA.

Miscellaneous Devel

Stephen spent some time fixing small bugs:

  • rkhunter schema improvement #734
  • MacOSX build tools problem #791 (just needed newer versions uploaded to CPAN)
  • local accounts - #778, #794


This has now got more memory, Stephen noted that the memory upgrade was not straightforward and you need to check the manual first. The spare disks were also added but need to be configured in the RAID controller and formatted, etc. It looks like the network cabling needs changing so that the bonding is done over both NICs for redundancy.

Just before we were due to move the staff NX service to northern one of the disks died. This is not under warranty so we should have a look to see if we have any spares lieing around, if not we should ask Sheile to order new ones.

This will be upgraded to SL6.5 tomorrow morning.

drupal exploit
There is a critical drupal exploit. We don't believe has been affected but we will assume the worst and switch back to an older backup. Any changes since that date can then be manually restored.

This has been commissioned as a hot spare KVM server for the Forum.

SL5 packages
All SL5 packages have now been archived to tape and removed from the AFS servers.

SL6 software collections
Stephen has put together headers for various SL6 software collections which are needed by our users. These are apache 2.4, MongoDB 2.4, PHP 5.4, PHP 5.5, Ruby 1.9.3, Ruby 2 and V8 3.1.4

This Week

  • Alastair
    • systemd project
      • Consider how components will work with systemd
      • Continue work on documentation - guidance for other COs on how to use
    • EL7 project
      • Upgrade all my machines to SL7
      • Look at whether I did manage to grab console input for a component whilst being started from systemd
      • continue considering dependencies between components and ordering
      • blog about dependency issues
        • client time before updaterpms
        • starting stuff before network
      • what sort of level of space is required by systemd journald logging (for desktop /var sizing)
        • (By default journald logs to /run/log. Have to mkdir /var/log/journal to keep data). Have enabled on one machine
        • identify default retention policyDefault retention is to use up to 10% of partition. Can use either space or time as a constraint on space. Logs are per user + system, so users can read their own data. Each log file starts at 8MB, so a popular machine will have lots of log data.
        • Blog about journald retention policy - and document how to set...
        • are we duplicating stuff in journald and /var/lcfg/log/syslog (if so, do we want to kill off /var/lcfg/log/syslog?)Yes we are.
        • Blog about decision to keep journald and /var/lcfg/log/syslog duplication - and resulting configuration change.
      • check installroot stuff same version across SL6 and EL7
        • and pull out old SL5 stuff
      • Look at pam_systemd module - what does it do?
      • Complete dconf component and ship
        • kdm component has option to forcerestart even if someone is logged in (used for exam mode)
      • Look at what else we used kdm component for
        • setting and clearing ownership of /dev devices on login/logout (for devices in labs) - might be a better solution using udev rules?
        • enable/disable Xdmcp (never used?)
        • Set kdm theme (for background image etc)
        • enable/disable shutdown at login window (for podium machines)
      • Look at whether we need anything better than existing network component for desktops
      • Look at lightdm (and configuration) - and systemd configuration
    • Upgrade jubilee to 6.5 and install disks and additional memory - waiting for additional memory
    • RT 65774 - try two identical monitors on my machine
    • Need to remove default bridge from kvmtool create
    • Think about disk partition policy
    • Review last reviewed date for documentation

  • Chris
    • Virtual DICE
      • Request USU sign off - chase Alison
    • EL7
      • Consider what next
      • Create SL7 hardware testing page and ask Carol to start testing various hardware types
    • Check for 146GB 15K SAS disk for northern (in B.03) - or order a couple
    • url shortener (once gdm solved)
    • Projects EL7 blog - start populating
    • Create Project entries - for KVM refinement project
    • Experiment rename br0 as br202 on circle
    • Think about disk partition policy
    • Review last reviewed date for documentation
    • Deploy metropolitan as backup KVM server (for while we're all out of country)
    • Hammersmith upgrade

  • Stephen
    • LCFG client refactor stage 1
      • schedule debrief meeting
    • EL7
      • Continue thinking about functionality
      • complete repository management scripts
      • Consider what next
      • Complete porting MPU managed resources to the DICE level
      • update tags in packages to record el7 support
      • convert dice-authorise to looking up netgroup
      • Look at porting updatepkgsvolumes to afs command (from perl-afs)
    • Think about PD - Interested in ZeroMQ
    • RT 68269
    • Deploy northern as staff.nx (first open up holes and test from home)
    • Think about disk partition policy
    • Review last reviewed date for documentation

-- AlastairScobie - 06 Nov 2014

Topic revision: r8 - 03 Dec 2014 - 09:07:50 - StephenQuinney
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
This Wiki uses Cookies