MPU SL7 Servers Upgrade

Project Activity

You can track the progress of this project by reading the relevant articles on the MPU blog and by noting which of the following work items have been struck off.

Common requirements

  • ipfilter (only the client side which should "just work")
  • nagios_client + MPU passive monitoring scripts
  • nut (for forum based servers)
  • rsync (for backups with rmirror)

Local package master (bruegel)

  • Components:
    • apacheconf
    • refreshpkgs
    • waklog
  • Additional Software:
    • mod_waklog
  • Headers:
    • dice/options/pkg-master.h
    • dice/options/pkg-slave.h

Package mirror (juice)

  • Components:
    • apacheconf
  • Additional Software:
    • pkglist-tools
  • Headers:
    • dice/options/package-mirror.h

Package slave, package export (otter)

  • Components:
    • apacheconf
  • Additional Software:
    • mod_waklog
  • Headers:
    • dice/options/pkg-slave.h
    • dice/options/pkg-rsync.h

Package caches (hare, wildcat)

  • Components:
    • nfs
    • pxeserver
    • rpmaccel
    • xinetd (if we can't get systemd to start tftpd)
  • Additional software:
    • squid - in SL7, goes from 3.1 to 3.3.8
    • tftpd
    • pxelinux - platform independent so it's the same everywhere, so no need to upgrade specially for SL7
  • Headers:
    • dice/options/rpmaccel.h
    • dice/options/pxe_root_server.h
    • dice/options/pxeserver.h

LCFG master (steen)

  • Components:
    • apacheconf + cosign + x509
    • postgresql + pgluser (not needed as ordershost is moving hosts)
    • rfe
    • rmirror
    • subversion
    • websvn
    • (xinetd does not seem to be needed any more)
  • Additional Software:
    • websvn - upgrade from 2.2 to 2.3 if there's a way round its awkward configuration system - or maybe switch to an alternative such as ViewVC
  • Headers:
    • dice/options/lcfg-master-server.h
    • dice/options/ordershost.h (moving to bandama)
  • Defaults packages
  • Backups:

LCFG slaves (vermeer, rembrandt, vole)

  • Components:
    • apacheconf + cosign + x509
    • lcfg server
  • Headers:
    • dice/options/lcfg-slave-server.h

LCFG inf level test server (barents)

  • Components:
    • lcfg server
  • Additional Software:
  • Headers:

Will keep barents live for now so we can continue checking SL6 server. The SL7 server is on polecat.

LCFG inf level devel server for COs (stomme)

  • Components:
  • Additional Software:
  • Headers:

DIY DICE (mole)

  • LCFG Slave + diydice stuff
  • Headers:
    • dice/options/lcfg-diy-server.h
  • Backups:

DR server (salamanca)

  • LCFG Master & Slave + Packages Slave
  • Headers:
    • dice/options/lcfg-dr-server.h

PkgForge master (pinemarten)

  • Components:
    • apacheconf + cosign + x509
    • postgresql + pgluser
    • pkgforge
  • Additional Software:
    • mod_waklog
  • Headers:
    • dice/options/pkgforge-master.h
    • dice/options/pkgforge-web.h
  • Backups:

Pkgforge builders (badger, shrew)

  • Components:
    • pkgforge
    • mock
  • Additional Software:
  • Headers:
    • dice/options/pkgforge-builder.h

LCFG website (otter)

  • Components:
    • apacheconf + cosign + x509
    • lcfgweb (Stephen would also like to rewrite a chunk of the website code using the Perl Catalyst toolkit)
    • mysql (services?)
  • Additional software requirements:
  • Headers:
    • dice/options/lcfg-webservices.h
  • Backups:

LCFG bugzilla server (heda)

  • Components:
    • bugzilla
    • apacheconf + cosign + x509
  • Additional Software:
    • Bugzilla - upgrade from 4.4 series to 5.0 series
  • Headers:
    • dice/options/bugs-lcfg.h
  • Backups:

SSH servers (schiff, brendel, rabbit)

  • Components:
    • fail2ban
    • rkhunter
    • auditd
    • limits
    • tcpwrappers
  • Additional Software:
    • wakeweb
    • custom list of software to remove
  • Headers:
    • dice/options/external-access-server.h

NX servers (piccadilly, northern)

  • Components:
    • freenx
  • Additional Software:
  • Headers:
    • external-freenx-server.h

Wake on LAN service (_ionian_, 2 Infrastructure Unit servers)

  • Components:
    • apacheconf + cosign + x509
    • wolclient + wolconf
  • Additional Software:
    • remctl
  • Headers:
    • =dice/options/wake-client.h=
    • =dice/options/wake-web.h=
    • dice/options/wake-backend.h

IBM DS3524 monitor (giz)

We've decided not to upgrade this to SL7 since our use of the IBM storage array has now declined to virtually nothing. We intend to keep it going somehow on some sort of SL6, self-managed if necessary.
  • Components:
  • Additional Software:
    • java
    • IBM "SM" software
  • Headers:
    • dice/options/ibm_sm.h

Log Cabin (beaver)

  • Components:
    • apacheconf + cosign + x509
  • Additional Software:
    • Python Django web framework (1.6.11 on SL7)
  • Headers:
    • dice/options/cabin.h
    • dice/options/cabin-packages.h

Computing help web service (hjaelpe hilfe, brent)

  • Components:
    • apacheconf + cosign + x509 + mysql
  • Additional Software:
  • Headers:
    • dice/options/computing-help-server.h

KVM servers (azul, oyster, gaivota, girassol, amarela, vermelha, waterloo, circle, metropolitan)

  • Components:
    • lvm
    • rmirrorclient
  • Additional Software:
    • libvirtd
    • uuid + uuid-perl
    • @lcfg_sl72_kvm.rpms
  • Headers:
    • live/mpu-kvm-server.h
    • dice/options/kvm-server.h
    • dice/options/kvm-client.h
    • lcfg/options/kvm-server.h
    • lcfg/options/kvm-client.h
    • dice/options/perl-uuid.h
    • lcfg/options/perl-uuid.h

Priority list of components

(Priority from the SL6 upgrade. Priority for SL7 still to be determined)

  • apacheconf
  • xinetd
  • rsync
  • refreshpkgs
  • waklog (?)
  • pxeserver
  • rpmaccel
  • pkgforge - blocked on waklog
  • diydice
  • bugzilla
  • postgresql
  • lcfgweb
  • mysql (?)
  • lcfg-server
  • rfe
  • rmirror (?)
  • subversion and websvn (?)

Order of upgrade

(This order from SL6 upgrade. Still to order for SL7).

  • SSH servers
  • NX servers
  • Packages master
  • Packages caches
  • Packages slave
  • LCFG slaves
  • LCFG master
  • DR server

Problems

-- AlastairScobie - 26 Jan 2016

Topic revision: r40 - 11 Feb 2017 - 17:00:31 - AlastairScobie
 
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
This Wiki uses Cookies