MPU Meeting Tuesday 14th February 2017


The MAC support has been finished in the REST API and the ii tool. Alastair has now begun work on the API test suite. The necessary credentials have been acquired for access to the space/person information stored in theon.

This has now been upgraded to SL7.

Stephen has been working on a better solution for the "disable kernel module loading" issue, he is a bit stuck with the systemd configuration and has asked Alastair to take a look.

LCFG Client Refactoring

Nothing happened.

Additional disk encryption

Nothing happened.

Miscellaneous development


There appear to be problems with using journald on machines with a separate /var partion, this can be seen on badger (a pkgforge build host), Stephen will investigate. We will change the logging on the SSH and NX servers so that we do NOT keep separate logs for each user which should help with space issues (and the potential for a DoS ). We need to rethink some partition sizes based on recent experience.

PXE root server
This is still on the backup server wildcat which is a little confusing, Stephen will move it back to hare.

Package mirror docs
Chris has updated the PackagesSiteMirror page.

epel mirror
We're very close to running out of space for the epel mirror, Alastair will take the issue to CEG.

This KVM server crashed. We need to sort out the serial console. We will evacuate all VMs to do some investigations and fix the console.

The test KVM server has been reinstalled with an improved partition layout. It would be useful to test creating VMs on circle using libvirt 2 and then migrating them to waterloo which is still running the older version.

We do not feel it is worthwhile to continue offering diydice to users (MPU are the only users anyway) so we will unpublish all the associated documentation on

We should add a cronjob to rebuild the initramfs on all SL7 machines to ensure they are safe to reboot.

This Week

  • Alastair
    • Inventory project
      • continue working through TartarusWorkFlow
      • Document clientreport (eg how to add modules)
      • Document order sync code
      • Document hpreport processing script
      • Continue work on RESTful API - TartarusRESTAPI
      • Document REST API
      • Further encourage people to use API and ii commands
      • Write more of the ii commands and document as writing.
      • Speak to George about macaddr/space feed
      • Start work on final report!
      • Configure theon conduits to use new credential
      • Convert from mod-auth_kerb to mod-auth_gssapi (See Stephen for details)
      • How represent VMs
    • Deploy encrypted /tmp and swap conversion script
      • Do during Festival of Creative Learning week (w.b. 20th Feb)
      • Need to warn users that Gnome3 may pop up a window about /tmp being full (when script is run)
    • Schedule MPU meeting to discuss systemd ordering
    • submit polkit bug to redhat - with Stephen (check with 7.3)
    • Think how to regularly report on machines with no /var/log/journal
    • Decommission old 'hilfe' server
    • Check lagun is being rmirror backed up (ask services)
    • Check sysmans (et al) have 'nograce'.
    • Take a look at RT #78875
    • Look at RT and SL7RT
    • Look at differences for new 7.3 libvirt (2.0.0)
    • Try 7.3 on P310
      • dual head works fine
      • sleep works fine, but breaks virtual terminals
    • Stephen's systemd target question email
    • Order new LCFG slaves
      • awaiting quote
    • Take 'juice' replacement to CEG - want to bring forward

  • Chris
    • Inventory project
      • Continue work on clientreport modules for replacing firmwarereport
    • MPU SL7
      • Continue with bugzilla
      • Look at wake backend (running on Inf servers)
    • DICE encryption
      • Continue thinking and researching
    • Roll out fixed sleep code
    • Reschedule MPU futures meeting
    • Schedule gaivota downtime to investigate LVM/IBM VG issue and serial console issues
    • Look at differences for new 7.3 libvirt (2.0.0)
    • Look at RT and SL7RT
    • Think about whether we can use NX service for staff.login/student.login
    • Try creating a guest under libvirt 2.0.0 (circle) and try migrate it to an older KVM server
    • Unpublish DIY DICE help pages and remove references

  • Stephen
    • LCFG client refactor stage 1
      • schedule debrief meeting
    • LCFG client refactor stage 2
      • testing and documentation
      • blog article (once documentation complete)
    • LCFG server symlink to exam branches - produce reporting script and discuss with Graham
    • submit polkit bug to redhat - with Alastair (check under 7.3)
    • Investigate George's multiple network interfaces SL7 issue (eg consoles server)
      • waiting on George breaking metropolitan
    • Look at differences for new 7.3 libvirt (2.0.0)
    • Look at RT and SL7RT
    • Continue investigating badger (to get /var/log/journal)
    • Think about whether we can use NX service for staff.login/student.login
    • Draft a position note on shell components under SL8 and possible ways forward
    • Change logging on 'nx' servers - combined rather than per user
    • Run initramfs rebuild on all servers (by cron)

-- AlastairScobie - 14 Feb 2017

Topic revision: r11 - 24 Sep 2019 - 13:50:24 - AlastairScobie
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
This Wiki uses Cookies