MPU Meeting Thursday 4th May 2017


  • ii query can now pull out the hostname field which makes it useful for the exam lockdown scripts.
  • George has finished the location feed, updates are done hourly and has information on when a machine was last seen. This needs some tests.
  • Tests have been added for the logbook functionality
  • The API tests are pretty much complete.
  • The scripts are active on bandama so the service is effectively live
  • The code needs tidying and docs need to be written before it can be considered finished
  • Need to switch the apache authentication from mod_krb5 to mod_gssapi
  • Need to sort out backups

LCFG Client Refactoring

The resource and component handling code and documentation has been finished. Support has been added for importing and exporting resources from the environment which is needed for the qxprof rewrite.

Stephen has written up some notes for the Devel Meeting on his blog.

MPU SL7 Server Upgrades

The LCFG bugzilla has been upgraded. We just need to do the final report now. (It's here.)

Miscellaneous Development

The LCFG context command now conflicts with another script of the same name in the standard dice PATH which is part of the texlive distribution. Using such a generic name isn't a great idea so to resolve the issue Stephen renamed the LCFG script to be lcfg-context and added a symlink for backwards compatibility. Stephen will check what other tools we have with generic names that might benefit from being renamed.

https profiles
SEE noted that it was not possible to download LCFG profiles over https from the installroot/installbase. This turned out to be due to a lack of the perl-LWP-Protocol-https package. There are some other issues related to trusting the locally-signed certificate in the installroot which we need to think about.


root passwords
These have been updated

LCFG servers
The new LCFG slaves are now in service and the old VMs have been removed.

firewall report
The new firewall hole report for MPU was quite useful.

KVM servers
The reinstalls of the KVM servers is now all complete.

HP EliteDesk 820 G2
Stephen wants to check the BIOS on the new batch of desktops for the labs before they are deployed, he will contact Alison.

SL6 profiles
We will now issue regular reports on the remaining SL6 profiles.

systemd component
We will push out the systemd component upgrade to SL7.3 only.

Should this start later to avoid problems with upgrading the package at boot time?

Next Meeting

Instead of a normal meeting, next week we will discuss our MPU futures ideas.

This Week

  • Alastair
    • Inventory project
      • continue working through TartarusWorkFlow
      • Document clientreport (eg how to add modules)
      • Document order sync code
      • Document hpreport processing script
      • Continue work on RESTful API - TartarusRESTAPI
      • Document REST API
      • Write more of the ii commands and document as writing.
      • Start work on final report!
      • Convert from mod-auth_kerb to mod-auth_gssapi (See Stephen for details)
      • How represent VMs
      • Continue with REST API testing framework
      • Consider what else needs done other than docs and tidying and backups
      • Blog something....take dev meeting talks
    • Deploy encrypted /tmp and swap conversion script
      • Need to warn users that Gnome3 may pop up a window about /tmp being full (when script is run)
    • Schedule MPU meeting to discuss systemd ordering
    • Check sysmans (et al) have 'nograce'.
    • Take a look at RT #78875
    • Look at /etc/hosts - dns issue (IPV6?)
      • work out what we need to fix current problem
    • Circulate info on RH7.3 systemd changes we may wish to consider
    • Produce a report on machines with wrong time (using clientreport)
      • module written - produce an email report ( increase threshold to 30 s )
    • Contribute to MPU SL7 final project report
    • Put sticker on IBMDS3524 to mark controller A FC port 3 as dodgy
    • T1 report
    • RT actions

  • Chris
    • Inventory project
      • Continue work on clientreport modules for replacing firmwarereport
    • DICE encryption
      • Continue thinking and researching
    • Create a bug about P310 sleep problem Bug:1002
    • Contribute to MPU SL7 final project report (It's here.)
    • Implement new 'root' password once discussed at Ops
    • RT actions

  • Stephen
    • LCFG client refactor stage 2
      • testing and documentation
      • profile diffs coding
    • LCFG server symlink to exam branches - produce reporting script and discuss with Graham
    • submit polkit bug to redhat - with Alastair (check under 7.3)
    • Investigate George's multiple network interfaces SL7 issue (eg consoles server)
      • waiting on George breaking metropolitan
    • Look at config required for merging staff.login with staff.nx
    • Draft a position note on shell components under SL8 and possible ways forward
    • Produce some text for systemd mount bug (to submit to RH)
    • Contribute to MPU SL7 final project report (It's here.)
    • Test G2 BIOS settings before new lab machines go out (check AMT disabled by default)
    • Make new lcfg-systemd component live for SL7.3 stable
    • RT actions

-- AlastairScobie - 04 May 2017

Topic revision: r10 - 24 Sep 2019 - 13:50:24 - AlastairScobie
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
This Wiki uses Cookies