MPU Meeting Tuesday 29th September 2015
Inventory
Alastair has been looking at using the jsonb support in
PostgreSQL 9.4, sadly our version of the
DBIx::Class
module is too old and it does not work nicely. Instead we will just store the client report data in a TEXT field for now.
The client reporting is now done via an authenticated submission system. The new client has been deployed to
develop machines and we are getting about 90 daily reports. The error handling for probe modules needs to be improved, we should decide where failure reports should be sent. The client should support using a configuration file so we can easily control which probe modules are run. Although functional the clientreport tools should still be considered to be at the prototype stage.
Alastair will now return to looking at the orders loading code.
LCFG Client Refactoring
The XS code for the
LCFG::PkgSpec
module has been reworked to use
XS::Object::Magic so that the class is now fully sub-classable. The
LCFG::Profile::PackageSpec
module has also been reworked so that it is a sub-class of
LCFG::PkgSpec
with the Context and Derivation roles applied. Nearly all required functionality for processing package specifications has been pushed into C with XS wrappers so that it is reusable. The handling of package lists was also improved using a new
LCFGPackageList
struct to hide the details. All the package APIs have been documented.
SL7 Server Base
- Networking
- Stephen has confirmed that setting
NM_CONTROLLED=no
in the network interface config files allows us to use the old networking scripts to setup bonding, bridging and VLANs. We still need to convert over to using networkmanager at some point in the future but this will allow us to start getting servers upgraded.
- IPMI
- Chris has checked this with Ian D and it all looks fine.
- Partition layout
- This seems to be fine for both normal and small servers.
- Nagios
- Stephen has checked that the basic active nagios checks (e.g. openssh) work. He has also got the necessary packages built so that the passive network bonding monitoring script works correctly, it has been fully tested by disabling ports.
- hwmon and toohot
- Chris will look at hwmon and toohot monitoring.
- localhome
- There is currently a conflict between localhome and autofs related to the management of a
/home
symlink. This will have to be sorted out with Craig before we can upgrade many of our MPU servers.
Miscellaneous Development
- Virtual DICE
- Chris has a new SL7-based virtual DICE system working, it is just waiting on the final few RAT packages.
- lightdm
- Stephen and Graham had a hackathon to fix the problems with session handling in lightdm on SL7. The results are in a new dice-desktop package. The user can now make a permanent choice of which desktop they want using the switchdesk tool.
- bashdefenv problems with gnome
- Alastair is having some weird problems with bashdefenv in Gnome3 which no-one else is seeing.
- pkgsearch
- Chris is looking at assembling yum configurations for our platforms which the pkgsearch web server can use to do searches.
- disk encryption
- Alastair has modified hackparts and the fstab component to add support for disk encryption with
/tmp
and swap. Will look at deploying once he is back from holiday. Easy to enable for new machines but how should we approach applying this to existing machines? See circlevm12 for details, needs a special PXE installroot.
- network-online hang
- The boot-time hang with network-online has been fixed by re-enabling networkmanager and instead just setting
NM_CONTROLLED=no
in the network interface configuration files.
Operational
- bugzilla
- Chris has a test version of the bugzilla upgrade available at testbugs.lcfg.org, we should all check it out.
- RT tickets
- It looks like we're accumulating tickets again which could be easily closed.
- SL6.5
- We still need to remove the final traces of the
DICE_STICK_WITH_SL65
macro from the LCFG source profiles.
This week
- Alastair
- Inventory project
- continue working through TartarusWorkFlow
-
finish deploying new order file processing code
- consider what next can be integrated into existing system, if anything
- Consider macaddr discovery tool (use same code as used for clientreport)
- Polish clientreport in light of results returned from clients
- Revisit order -> inventory sync code
- @home - look at using rsync from site.pkgs instead of mirroring from upstream
- Remove default pool if ops meeting agrees
- Experiment with different window managers under VNC (making the assumption that performance under NX will be similar)
- Think of a use for 'atom'
- Understand how NetworkManager works wrt init scripts
- Deploy encrypted /tmp and swap
-
Develop a script to modify existing machines
- Note that existing content is not wiped : only future data will be encrypted
- How ship? Separate RPM on part of lcfg-fstab
-
Test <live/fstab_test.h> with an installUpdated and tested. Note this header doesn't have the full config to encrypt
- Look at RT tickets to close
- SL7 base server
- localhome - discuss with Craig
- Look at metropolitan with SL7
-
investigate bash defenv problem -> RT ticket -> RATTurns out to be gnome-terminal started from Right-Click isn't being started in a manner that inherits the login environment. Starting gnome-terminal from Applications menu works fine
-
Look at testbugs
-
Produce list of displaced servers
- Chris
- Inventory project
- continue working through TartarusWorkFlow
- Look at clientreport modules for replacing firmwarereport
- pkgsearch for SL7
- reimplement as a yum web front end (yum search for keyword produce an html file of links to cgi to do yum info)
- Need support multiple platforms
-
Continue work on Virtual DICE for SL7
-
Continue work on bugzilla upgrade
- Liaise with George over iDRAC documentation
- SL7 -
- hwmon
- toohot
- Look at DL180 (or alternative model)
- RT tickets close
- Start work on the spending plan for 2015/2018
- identify any displaced (from other units) servers that we could use
- Stephen
- LCFG client refactor stage 1
- LCFG client refactor stage 2
- deploy package libraries and new whererpms
- test under MacOS
- work on resources processing
- Think about PD - Interested in ZeroMQ
- Write up how WM switchdesk mechanism works
- Liaise with Roger over borrowing an R620 for SL7 testing
-
RT tickets close
-
Look at creating a new develop PXE root with new version of fstab component
- Investigate kernel component pipe moan by using shell commands instead of RPM module
-
Look at testbugs
-
Sort out DICE_STICK_WITH_SL65
--
AlastairScobie - 29 Sep 2015