MPU meeting Tuesday 9 December 2014

systemd

Alastair has been blogging:

SL7

A useful build environment
SL7 on the inf level has useful things like CMake and lcfg-reltool but they are not installed by default. The LCFG profile for lizard shows what to include to get these useful things installed.
Package management
Stephen has been updating the lcfg-refreshpkgs software. freshenrpms now simply takes a directory as an argument - far cleaner and simpler than before. He's also simplified the rpms os tree in the packages repository, which has in turn allowed a great simplification of our yum and mock configuration, now both also shared between SL6 and SL7. He's blogged about these things on the SL7 diary: Repository changes and yum/mock config. These changes are all in this week's release. Once that's installed our package builders will start using the new configuration too.
autoreboot
Stephen has built, tagged and tested it for SL7.
Weekly installs
Stephen has been working towards getting all of the required software for the weekly install CD images onto SL7. He's almost there.
Move to dice level
Stephen will coordinate a meeting which will plan how to move our SL7 from the inf to the dice level.
lightdm screen locking
We're looking for a solution to locking the screen under lightdm - Alastair has discovered that dmlock simply changes the virtual terminal, rather than locking the session.

Misc Development

apacheconf-security.h
There is now a standard LCFG header for mod_security - dice/options/apacheconf-security.h. There are a couple of options:
  • DICE_OPTIONS_APACHECONF_SECURITY_BODYLIMIT - defines the maximum allowed size of the body of a POST (in bytes), the default is 13MB.
  • DICE_OPTIONS_APACHECONF_SECURITY_ALLOWHYPHENS - permits strings of double-hyphens in the body text.
lcfg-skeleton
Its Perl behaviour has been brought up to date. For details see Stephen's blog article.
LCFG Annual Review 2014
Many thanks to all who attended and/or helped with this year's LCFG annual review. We were delighted with the turnout and found the event thoroughly worthwhile.

Operational

  • devtoolset and software collections now work together, and a problem with missing packages has been fixed. Thanks a lot to Barry O'Rourke for reporting the problem (LCFG bug 805).
  • Chris will put out this week's stable release.
  • New on the LCFG wiki: How to use dumpdeps.

This Week

  • Alastair
    • systemd project
      • Consider how components will work with systemd
      • Continue work on documentation - guidance for other COs on how to use
      • Look at getting Stop method to rebuild /etc/systemd regardless of whether there have been resource changes (remember Stop doesn't call Configure)
      • convert to module
    • EL7 project
      • what sort of level of space is required by systemd journald logging (for desktop /var sizing)
        • (By default journald logs to /run/log. Have to mkdir /var/log/journal to keep data). Have enabled on one machine
        • identify default retention policyDefault retention is to use up to 10% of partition. Can use either space or time as a constraint on space. Logs are per user + system, so users can read their own data. Each log file starts at 8MB, so a popular machine will have lots of log data.
        • Blog about journald retention policy - and document how to set...
        • Blog about decision to keep journald and /var/lcfg/log/syslog duplication - and resulting configuration change.
      • check installroot stuff same version across SL6 and EL7
        • and pull out old SL5 stuff
      • Look at whether we need anything better than existing network component for desktops
      • Look at lightdm issues
        • locking (dm-lock doesn't actually lock, just respawns greeter on different VT - can still switch back to original VT
        • power management
      • Blog about dconf and lightdm components
      • Look at LCFG bug #799 (systemd buffered output)
      • convert lcfg-dconf and lcfg-lightdm to module
    • RT 65774 - try two identical monitors on my machine
    • Fix systemd, dconf, and lightdm components so default values are in the defaults file, not just in the schema file
    • Need to remove default bridge from kvmtool create
    • Think about disk partition policy
    • Review last reviewed date for documentation
    • Consider more cores as default for KVM guests
    • Is there a way of disabling debugging information being displayed by drupal when there are problems?Can't see how to do safely (needs disable backtrace in /etc/php.ini?)- Ask David Marsh in Physics?
    • Read LISA notes
    • Look at KVM server loading

  • Chris
    • EL7
      • continue with Sleep component
      • investigate Gnome power-management and document
    • url shortener (once gdm solved)
    • Create Project entries - for KVM refinement project
    • Experiment rename br0 as br33 on metropolitan
    • Think about disk partition policy
    • Review last reviewed date for documentation
    • Commission jubilee's extra disks as an extra pool
    • Identify VMs to move to waterloo
    • Investigate monitoring hare and wildcat problem
    • Stable release 10th Dec

  • Stephen
    • LCFG client refactor stage 1
      • schedule debrief meeting
    • EL7
      • Continue thinking about boot.run functionality
      • Complete porting MPU managed resources to the DICE level
        • Coordinate a meeting with infrastructure
      • Finish working towards a stable EL7 release (consider pull lvm, add caveat to network docs)
    • Think about PD - Interested in ZeroMQ
    • Deploy northern as staff.nx (first open up holes and test from home)
    • Think about disk partition policy
    • Review last reviewed date for documentation
    • Add extra memory to waterloo (and if those work, order up more memory for hammersmith)
    • Incorporate comments into pandemic security doc

-- AlastairScobie - 09 Dec 2014

Topic revision: r2 - 09 Dec 2014 - 16:42:23 - ChrisCooke
 
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
This Wiki uses Cookies