CSCWiki - User contributions [en]

Machine List

2015-01-22T15:47:08Z

Jy2wong: update strombola speaker situation

= Web Server =
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.

== ''caffeine'' ==

Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* Club and member web sites with [[Apache]]
* [[MySQL]] databases
* [[PostgreSQL]] databases (not backed up.)
* [[ceo]] daemon
* mail was migrated to [[#mail|mail]]

= General-Use Servers =

These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no bitcoin mining).

Most people use either taurine and clones or (high-fructose-)corn-syrup. hfcs is probably our beefiest machine at the moment, if you are wanting to do some heavy computation. Again, if you have a long-running computationally intensive job, it's good to
nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.

== ''corn-syrup'' ==

PowerEdge 2950

==== Specs ====

* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)
* 32 GB RAM
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29
* IPMI mac addr 00:24:e8:52:41:2b
* 3 × Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)

==== Notes ====

* Use eth0/Gb0 for the mathstudentorgsnet connection
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.

==== Services ====

* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)

== ''denardo'' ==

Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo is scheduled to be decommissioned.

==== Specs ====

* Sun Fire V210
* TI UltraSparc IIIi (Jalapeño)
* 2 GB RAM
* 160 GB RAID array
* ALOM on denardo-alom.csclub can be used to power machine on/off

== ''high-fructose-corn-syrup'' ==

High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.

==== Specs ====

* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)
* 192 GB RAM
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]
* 500 GB Seagate Barracuda
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]

== ''taurine'' ==

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 8GB RAM
* 136 GB LVM volume group

==== Services ====

* Virtual machines
* BitlBee IRC instant messaging gateway (localhost only)
* [[ident]] server to maintain high connection cap to freenode
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

== ''sucrose'' ==

sucrose is a [[#taurine|taurine]] clone donated by CSCF.

==== Specs ====

== ''dextrose'' ==

dextrose is a [[#taurine|taurine]] clone donated by CSCF. It currently hosts [[#mathnews|the mathNEWS server]] but is still general-use for the time being.

==== Specs ====

== ''potassium-citrate'' ==

Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss. It is scheduled to be temporarily decommissioned until pbarfuss puts a new OS onto it or takes it home, as Debian has dropped Alpha support.

==== Specs ====
* Alphaserver CS20 (2 833MHz EV68al CPUs)
* 512MB RAM
* 36 GB Seagate SCSI hard drive

== ''potassium-nitrate'' ==

It is a Sun E2900 from a decommissioned MFCF compute cluster, on loan for an extended period. It has a SPARC architecture.

It is currently being set up; MFCF needs to perform some last setup steps and then we will install Debian on it and set it up as general-use.

The name is from saltpetre, because sparks.

==== Specs ====

See [[Sun 2900]].

= Office Terminals =

It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.

== ''bit-shifter'' ==

bit-shifter is an office terminal.

==== Specs ====

* Intel(R) Core(TM)2 Quad CPU Q8300
* 4GB RAM
* Nvidia GeForce GT 440
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD
* Jacob Parker's Firewire Card

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''gwem'' ==

gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.

=== Specs ===

* AMD FX-8150 3.6GHz 8-Core CPU
* 16 GB RAM
* AMD Radeon 6870 HD 1GB GPU
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

== ''maltodextrin'' ==
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.

==== Specs ====

* Intel Core i3-4130 @ 3.40 GHz
* 8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''natural-flavours'' ==

Natural-flavours is an office terminal; it used to be our mirror.

==== Specs ====

* Intel Core 2 Duo E6300 @ 1.86 GHz
* 2x1GB RAM
* Nvidia GeForce GT 440
* 1x 64GB SanDisk SDSSDP064G SSD
* [http://csclub.uwaterloo.ca/misc/manuals/E2737_p5l-mx.pdf ASUS P5L-MX] Motherboard
* DVD Burner

== ''nullsleep'' ==

nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.

==== Specs ====

* Intel® Dual Core Atom™ 330
* 2GB RAM
* NVIDIA® ION™ graphics
* 1x 64GB SanDisk SDSSDP064G SSD
* DVD Burner

==== Speakers ====
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.

==== Services ====
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.
Music is located in /music on the office terminals

== ''strombola''==
It is named after Gordon Strombola.

==== Specs ====
* Intel Core2 Quad Q8200 @ 2.33GHz
* 4 GB RAM
* nVidia GeForce 8600 GTS
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

==== Speakers ====
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.

= Syscom Only =

The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.

== ''artificial-flavours'' ==

Artificial-flavours is our backup server. It used to be an office terminal. It is scheduled to be decommissioned once the backup services are moved to containers on cobalamin,
and it may be transferred to the ownership of Women in Computer Science (WiCS).

A few users were running jobs before we remembered to make a-f actually be syscom-only. They have grandfathered access to the machine, which will be removed at some point.

==== Specs ====

* Intel Celeron 3.2GHz
* 2GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard
* Western-Digital 80 GB ATA hard drive

==== Services ====

* Backup [[Kerberos|authentication]] and [[OpenLDAP|directory services]]
* [[MySQL]] replica
* Secondary [[Mail]] exchanger

Note: secondary mail exchanger is offline due to improper relay setup.

== ''aspartame'' ==

aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. It also hosts the [[#auth1|auth1]] container.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 10GB RAM

==== Notes ====

* It currently cannot route the Internet due to a misconfiguration on the NetApp. This should be fixed at some point.

== ''auth1'' ==

Container on [[#aspartame|aspartame]].

==== Services ====

* [[LDAP]] master
* [[Kerberos]] master

== ''cobalamin'' ==

Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.

* debian.csclub keys not installed
* ssh host keys need to be correctly configured (some removed?)

==== Specs ====

* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)
* 16GB RAM
* Broadcom NetworkXtreme II
* 2x73GB Hard Drives, hardware RAID1
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration

==== Services ====

==== Notes ====

* The network card requires non-free drivers. Be sure to use an installation disc with non-free.

* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248
** VLAN ID 505 (csc-data): 129.97.16.96/29; gateway 129.97.16.96; mask 255.255.255.248

* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.

== ''glomag'' ==

Glomag is a newish server (as of Fall 2009) which hosts [[#caffeine|caffeine]]. Only syscom are allowed to SSH in here directly, though SSH to caffeine is permitted to all members.

==== Specs ====

* Intel Xeon X3450 @ 2.67 GHz
* 6 GB RAM
* vg0: 465 GB software RAID1 (contains root partition):
** 750 GB Seagate Barracuda SATA hard drive
** 500 GB Western-Digital Caviar Blue SATA hard drive
* vg1: 596 GB software RAID1 (contains caffeine):
** 2 × 640 GB Western-Digital Caviar Blue SATA hard drive

==== Services ====

* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]], [[#munin|munin]]

== ''mail'' ==

mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* [[Mail]] services
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])
* [[Webmail]]
* [[ceo]] daemon

== ''psilodump'' ==

psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.

==== Specs ====

== ''phlogiston'' ==

phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.

phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.

==== Specs ====

== ''sodium-benzoate'' ==

Sodium-benzoate is our mirror server, funded by MEF.

==== Specs ====

* Intel Xeon Quad Core E5405 @ 2.00 GHz
* 16GB RAM
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)
* mirror: ~14 TB block device behind DELL PERC 6/i (contains mirror)
** 8 × 2 TB hard drive (RAID-5)

After several disk failures and RMAs, the mirror array was accidentally rebuilt using some of the 4TB drives purchased for the new mirror. They do not work properly with sodium-benzoate because the RAID controller does not support 4TB drives and only exposes part of the storage. At some point we will need to rebuild the array using the 2TB disks again.

Space disks are currently in the office underneath maltodextrin.

==== Services ====

* [[Mirror]]
* [[Talks]] mirror
* [[Debian_Repository|CSClub packages repository]]

== ''munin'' ==

munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon

= Other =

== ''goto80'' ==

This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Location unknown.

==== Specs ====

* 500 MHz Feroceon (ARM926ej-s compatible) processor
* ARMv5TEJ architecture

Use -march=armv5te -mtune=arm926ej-s options to GCC.

For information on the TS-7800's hardware see here:
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800

== ''binaerpilot'' ==

This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''anamanaguchi'' ==

This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''digital cutter'' ==

See [[Digital Cutter|here]].

== ''mathnews'' ==

[[#dextrose|dextrose]] hosts a container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.

= Decommissioned =

== ''Lisp machine'' ==

A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.

http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.

==== Specs ====

Currently inoperable due to (at least) a missing console cable.

== ''ginseng'' ==

Ginseng used to be our fileserver, before aspartame and the netapp took over.

==== Specs ====

* Intel Pentium Dual Core E2180
* 8GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]
* 4 × 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].
[[Category:Hardware]]

== ''calum'' ==

The server from back before recorded memory.

== ''paza'' ==

An iMac G3 that was used as a dumb terminal.

==== Specs ====

* 233Mhz PowerPC 740/750
* 96 MB RAM

== ''romana'' ==

Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.

==== Specs ====

* 2 PowerPC based procccessors
* Stylish Blinken processor-load lights

== ''sodium-citrate'' ==

Sodium-citrate was an SGI O2 machine.

In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.

==== Specs ====
* SGI O2 MIPS processor
* 423 MB (?) RAM
* 2 × 2 GB hard drive

== ''acesulfame-potassium'' (decommissioned) ==

An old office terminal.

==== Specs ====
* Intel Pentium 4 2.67GHz
* 1GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard
* ATI Radeon 7000

== ''skynet'' ==

skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.

==== Specs ====

* 15 full CPU/memory boards
** 2x UltraSPARC II 464MHz / 8MB Cache Processors
** ??? RAM?
* 1 I/O board (type=???)
** ???x disks?
* 1 CD-ROM drive

* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]
* [http://www.e6500.com/ e6500]

== ''freebsd'' ==

FreeBSD was a virtual machine with FreeBSD installed.

==== Services ====

* Newer software

== ''rainbowdragoneyes'' ==

Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.

==== Specs ====

* 800MHz MIPS Loongson 2f CPU

Machine List

2015-01-22T15:35:25Z

Jy2wong: explain machine categories; rename Servers -> General Use

= Web Server =
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.

== ''caffeine'' ==

Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* Club and member web sites with [[Apache]]
* [[MySQL]] databases
* [[PostgreSQL]] databases (not backed up.)
* [[ceo]] daemon
* mail was migrated to [[#mail|mail]]

= General-Use Servers =

These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no bitcoin mining).

Most people use either taurine and clones or (high-fructose-)corn-syrup. hfcs is probably our beefiest machine at the moment, if you are wanting to do some heavy computation. Again, if you have a long-running computationally intensive job, it's good to
nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.

== ''corn-syrup'' ==

PowerEdge 2950

==== Specs ====

* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)
* 32 GB RAM
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29
* IPMI mac addr 00:24:e8:52:41:2b
* 3 × Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)

==== Notes ====

* Use eth0/Gb0 for the mathstudentorgsnet connection
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.

==== Services ====

* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)

== ''denardo'' ==

Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo is scheduled to be decommissioned.

==== Specs ====

* Sun Fire V210
* TI UltraSparc IIIi (Jalapeño)
* 2 GB RAM
* 160 GB RAID array
* ALOM on denardo-alom.csclub can be used to power machine on/off

== ''high-fructose-corn-syrup'' ==

High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.

==== Specs ====

* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)
* 192 GB RAM
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]
* 500 GB Seagate Barracuda
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]

== ''taurine'' ==

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 8GB RAM
* 136 GB LVM volume group

==== Services ====

* Virtual machines
* BitlBee IRC instant messaging gateway (localhost only)
* [[ident]] server to maintain high connection cap to freenode
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

== ''sucrose'' ==

sucrose is a [[#taurine|taurine]] clone donated by CSCF.

==== Specs ====

== ''dextrose'' ==

dextrose is a [[#taurine|taurine]] clone donated by CSCF. It currently hosts [[#mathnews|the mathNEWS server]] but is still general-use for the time being.

==== Specs ====

== ''potassium-citrate'' ==

Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss. It is scheduled to be temporarily decommissioned until pbarfuss puts a new OS onto it or takes it home, as Debian has dropped Alpha support.

==== Specs ====
* Alphaserver CS20 (2 833MHz EV68al CPUs)
* 512MB RAM
* 36 GB Seagate SCSI hard drive

== ''potassium-nitrate'' ==

It is a Sun E2900 from a decommissioned MFCF compute cluster, on loan for an extended period. It has a SPARC architecture.

It is currently being set up; MFCF needs to perform some last setup steps and then we will install Debian on it and set it up as general-use.

The name is from saltpetre, because sparks.

==== Specs ====

See [[Sun 2900]].

= Office Terminals =

It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.

== ''bit-shifter'' ==

bit-shifter is an office terminal.

==== Specs ====

* Intel(R) Core(TM)2 Quad CPU Q8300
* 4GB RAM
* Nvidia GeForce GT 440
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD
* Jacob Parker's Firewire Card

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''gwem'' ==

gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.

=== Specs ===

* AMD FX-8150 3.6GHz 8-Core CPU
* 16 GB RAM
* AMD Radeon 6870 HD 1GB GPU
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

== ''maltodextrin'' ==
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.

==== Specs ====

* Intel Core i3-4130 @ 3.40 GHz
* 8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''natural-flavours'' ==

Natural-flavours is an office terminal; it used to be our mirror.

==== Specs ====

* Intel Core 2 Duo E6300 @ 1.86 GHz
* 2x1GB RAM
* Nvidia GeForce GT 440
* 1x 64GB SanDisk SDSSDP064G SSD
* [http://csclub.uwaterloo.ca/misc/manuals/E2737_p5l-mx.pdf ASUS P5L-MX] Motherboard
* DVD Burner

== ''nullsleep'' ==

nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.

==== Specs ====

* Intel® Dual Core Atom™ 330
* 2GB RAM
* NVIDIA® ION™ graphics
* 1x 64GB SanDisk SDSSDP064G SSD
* DVD Burner

==== Speakers ====
Nullsleep has the office speakers currently connected to it.

==== Services ====
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.
Music is located in /music on the office terminals

== ''strombola''==
It is named after Gordon Strombola.

==== Specs ====
* Intel Core2 Quad Q8200 @ 2.33GHz
* 4 GB RAM
* nVidia GeForce 8600 GTS
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

==== Speakers ====
Strombola has integrated 5.1 channel sound.

= Syscom Only =

The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.

== ''artificial-flavours'' ==

Artificial-flavours is our backup server. It used to be an office terminal. It is scheduled to be decommissioned once the backup services are moved to containers on cobalamin,
and it may be transferred to the ownership of Women in Computer Science (WiCS).

A few users were running jobs before we remembered to make a-f actually be syscom-only. They have grandfathered access to the machine, which will be removed at some point.

==== Specs ====

* Intel Celeron 3.2GHz
* 2GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard
* Western-Digital 80 GB ATA hard drive

==== Services ====

* Backup [[Kerberos|authentication]] and [[OpenLDAP|directory services]]
* [[MySQL]] replica
* Secondary [[Mail]] exchanger

Note: secondary mail exchanger is offline due to improper relay setup.

== ''aspartame'' ==

aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. It also hosts the [[#auth1|auth1]] container.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 10GB RAM

==== Notes ====

* It currently cannot route the Internet due to a misconfiguration on the NetApp. This should be fixed at some point.

== ''auth1'' ==

Container on [[#aspartame|aspartame]].

==== Services ====

* [[LDAP]] master
* [[Kerberos]] master

== ''cobalamin'' ==

Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.

* debian.csclub keys not installed
* ssh host keys need to be correctly configured (some removed?)

==== Specs ====

* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)
* 16GB RAM
* Broadcom NetworkXtreme II
* 2x73GB Hard Drives, hardware RAID1
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration

==== Services ====

==== Notes ====

* The network card requires non-free drivers. Be sure to use an installation disc with non-free.

* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248
** VLAN ID 505 (csc-data): 129.97.16.96/29; gateway 129.97.16.96; mask 255.255.255.248

* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.

== ''glomag'' ==

Glomag is a newish server (as of Fall 2009) which hosts [[#caffeine|caffeine]]. Only syscom are allowed to SSH in here directly, though SSH to caffeine is permitted to all members.

==== Specs ====

* Intel Xeon X3450 @ 2.67 GHz
* 6 GB RAM
* vg0: 465 GB software RAID1 (contains root partition):
** 750 GB Seagate Barracuda SATA hard drive
** 500 GB Western-Digital Caviar Blue SATA hard drive
* vg1: 596 GB software RAID1 (contains caffeine):
** 2 × 640 GB Western-Digital Caviar Blue SATA hard drive

==== Services ====

* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]], [[#munin|munin]]

== ''mail'' ==

mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* [[Mail]] services
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])
* [[Webmail]]
* [[ceo]] daemon

== ''psilodump'' ==

psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.

==== Specs ====

== ''phlogiston'' ==

phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.

phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.

==== Specs ====

== ''sodium-benzoate'' ==

Sodium-benzoate is our mirror server, funded by MEF.

==== Specs ====

* Intel Xeon Quad Core E5405 @ 2.00 GHz
* 16GB RAM
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)
* mirror: ~14 TB block device behind DELL PERC 6/i (contains mirror)
** 8 × 2 TB hard drive (RAID-5)

After several disk failures and RMAs, the mirror array was accidentally rebuilt using some of the 4TB drives purchased for the new mirror. They do not work properly with sodium-benzoate because the RAID controller does not support 4TB drives and only exposes part of the storage. At some point we will need to rebuild the array using the 2TB disks again.

Space disks are currently in the office underneath maltodextrin.

==== Services ====

* [[Mirror]]
* [[Talks]] mirror
* [[Debian_Repository|CSClub packages repository]]

== ''munin'' ==

munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon

= Other =

== ''goto80'' ==

This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Location unknown.

==== Specs ====

* 500 MHz Feroceon (ARM926ej-s compatible) processor
* ARMv5TEJ architecture

Use -march=armv5te -mtune=arm926ej-s options to GCC.

For information on the TS-7800's hardware see here:
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800

== ''binaerpilot'' ==

This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''anamanaguchi'' ==

This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''digital cutter'' ==

See [[Digital Cutter|here]].

== ''mathnews'' ==

[[#dextrose|dextrose]] hosts a container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.

= Decommissioned =

== ''Lisp machine'' ==

A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.

http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.

==== Specs ====

Currently inoperable due to (at least) a missing console cable.

== ''ginseng'' ==

Ginseng used to be our fileserver, before aspartame and the netapp took over.

==== Specs ====

* Intel Pentium Dual Core E2180
* 8GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]
* 4 × 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].
[[Category:Hardware]]

== ''calum'' ==

The server from back before recorded memory.

== ''paza'' ==

An iMac G3 that was used as a dumb terminal.

==== Specs ====

* 233Mhz PowerPC 740/750
* 96 MB RAM

== ''romana'' ==

Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.

==== Specs ====

* 2 PowerPC based procccessors
* Stylish Blinken processor-load lights

== ''sodium-citrate'' ==

Sodium-citrate was an SGI O2 machine.

In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.

==== Specs ====
* SGI O2 MIPS processor
* 423 MB (?) RAM
* 2 × 2 GB hard drive

== ''acesulfame-potassium'' (decommissioned) ==

An old office terminal.

==== Specs ====
* Intel Pentium 4 2.67GHz
* 1GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard
* ATI Radeon 7000

== ''skynet'' ==

skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.

==== Specs ====

* 15 full CPU/memory boards
** 2x UltraSPARC II 464MHz / 8MB Cache Processors
** ??? RAM?
* 1 I/O board (type=???)
** ???x disks?
* 1 CD-ROM drive

* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]
* [http://www.e6500.com/ e6500]

== ''freebsd'' ==

FreeBSD was a virtual machine with FreeBSD installed.

==== Services ====

* Newer software

== ''rainbowdragoneyes'' ==

Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.

==== Specs ====

* 800MHz MIPS Loongson 2f CPU

New Member Guide

2015-01-09T17:50:03Z

Jy2wong: add a section about mail, mailing lists

Hello, and welcome to the Computer Science Club! Thanks for joining. The office staff who signed you up should have told you about this stuff, but just as a refresher, here it is again.

== Office ==

* Our office is MC 3036/3037 (we occupy both rooms) and we're across the hall (but distinct from) the Mathsoc office.

* Our club doesn't have weekly meetings or anything like that. If the door is open, we are open (even if it's 3 in the morning on Sunday). Feel free to drop in and say hi!

* The office closes when the last office staff leaves the room, and the office opens when somebody with a key comes by. If you're interested in becoming office staff, look out for the termly office staff training event or ask around the office.

* We have staplers by the door farthest from Mathsoc. Even if you're not a member, you're allowed to use them. You don't even have to ask (and in fact, we'd prefer if you didn't. Office regulars spend a good amount of time telling people that yes, they can use the staplers).

* We sell pop, chips, chocolate bars and other snacks. Prices are on the fridge door. Pay the red cup in the fridge.

== Events ==
We hold a different set of events every term, but the same types of events come up again and again. Watch out for emails about:
* Industry tech talks. In the past, we've gotten folks from various tech companies to talk about algorithms, database design decisions and other things.

* UNIX 10X tutorials. Don't know how to use the commandline? Come out and learn with us. Know how to use the commandline? Come out and help us answer questions.

* Member talks. Do you have a burning desire to talk about AVL trees? No? Well, if you want to talk about a computer sciencey topic that's close to your heart, send an email to exec at csclub.uwaterloo.ca with a talk abstract (a paragraph we can put on a poster to describe your talk) and we'll see if we can make something happen.

* Code parties. We eat food, talk and write code. Code parties happen several times a term.

== Machines ==
As a member of the club, you have access to our machines, both [[Machine_List#Servers|servers in the machine room down the hall]] and [[Machine_List#Office Terminals|desktops in our physical office]]. Keep in mind that your username is your quest userid (e.g. j7smith) and your password starts out as the one you set when you joined the club for the first time.

* Your files are accessible on all of our machines

* Keep in mind that the machines are shared among all of our members. Play nice. For example, <nowiki>caffeine</nowiki> is our web server. You are strongly advised not to run long, intensive jobs on it. Something like that is a better fit for <nowiki>hfcs</nowiki>, <nowiki>corn-syrup</nowiki> or even possibly <nowiki>taurine</nowiki>.

* use SSH for access to the machines in the server room.
** If you don't know how to use the commandline, you can wait for our approximately termly UNIX 101 event, google for "how to use the command line", or ask around the office.
** if you happen to be using Windows, you can use an SSH client such as PuTTY[http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html].
** If you have a Mac or you run Linux, you already have the <nowiki>ssh</nowiki> command installed. If your userid is <nowiki>j7smith</nowiki> and you want to use <nowiki>taurine</nowiki>, just open up a terminal window and type the following. You will be asked for your CSC password.

ssh j7smith@taurine.csclub.uwaterloo.ca

* Our office terminals are turned off, rebooted and otherwise reset somewhat frequently.

* If you forget your password, come by the office with your watcard and some other form of ID. Regular office staff can't reset your password for you, but if there's someone on our Systems Committee hanging around, they can do this for you.

* If you would like to change your password, log on to any of our machines and type <nowiki>kpasswd</nowiki> in a terminal. You will be prompted for your old password and be asked to type in your new password twice (just to make sure you didn't make a typo).

* We have a MySQL daemon running, but only on our web server <nowiki>caffeine</nowiki>. Check out [[MySQL|this page]] if you would like a database.

* for technical questions (including package installation requests), send an email to our systems committee, syscom at csclub.uwaterloo.ca.

== Web Hosting ==
You get web space with your CSC membership. Your website is visible at [http://csclub.uwaterloo.ca/~j7smith] (where j7smith is replaced with your own userid, of course).

* Files in the <nowiki>www</nowiki> directory inside your home directory (e.g. <nowiki>/users/j7smith/www</nowiki>) will appear on your web space.
* If you create a file called <nowiki>index.html</nowiki> and place it in <nowiki>www</nowiki>, it will appear at [http://csclub.uwaterloo.ca/~j7smith] instead of the directory listing that was there before.
* If the above information makes no sense to you, ask someone in the office for a gentler step-by-step introduction. Some day, there will be a guide like this on the wiki, but such a thing doesn't currently exist.

== IRC ==
We have an IRC (internet relay chat) channel. Come hang out with us in #csc on freenode. If you are unfamiliar with IRC, you may want to read [[How to IRC|this guide]].

== Mail ==
* see the [[Mail]] page.
* The CSC gets a lot of requests to distribute [[Industry Opportunities]] to our members. We have a special opt-in mailing list for the people that want to hear about such things.
* We have a low-volume general mailing list which we use to send out information about upcoming events.

== Library ==
There are books on the shelves lining the office. Feel free to drop by and read them.

Someone who knows more about the library checkout system than jy2wong should write something here.

Main Page

2015-01-09T17:40:53Z

Jy2wong: add new member guide to main page

This is the Wiki of the [[Computer Science Club]]. Feel free to start adding pages and information.

[[Special:AllPages]]

== Guides ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[ New Member Guide]]
* [[Budget Guide]]
* [[Club Hosting]]
* [[Member Hosting]]
* [[Exec Manual]]
* [[Imapd Guide]]
* [[MEF Guide]]
* [[Office Policies]]
* [[Office Staff]]
* [[How to IRC]]
* [[Talks Guide]]
* [[SCS Guide]]
* [[Kerberos | Password Reset ]]
* [[Disk Drive RMA Process]]
</div>

== News and Events ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[Meetings]]
* [[Talks]]
* [[Projects]]
* [[Industry Opportunities]]
</div>

== Machine/System Documentation ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[Authentication]]
* [[Backups]]
* [[ceo]]
* [[DNS]]
* [[Debian Repository]]
* [[Digital Cutter]]
* [[Directory Services]]
* [[Electronics]]
* [[Hardware]]
* [[Kerberos]]
* [[Machine List]]
* [[Mail]]
* [[Mailing Lists]]
* [[Mirror]]
* [[Music]]
* [[MySQL]]
* [[NetApp]]
* [[New CSC Machine]]
* [[NFS/Kerberos]]
* [[OID Assignment]]
* [[Printing]]
* [[Pulseaudio]]
* [[Robot Arm]]
* [[Scratch]]
* [[SNMP]]
* [[Serial Connections]]
* [[SSL]]
* [[Switches]]
* [[Sony Camera]]
* [[Syscom Todo]]
* [[Systems Committee]]
* [[TS-7800]]
* [[UID/GID Assignment]]
* [[User-data]]
* [[Webcams]]
* [[Webmail]]
* [[Website]]
* [[Virtualization]]
</div>

== Miscellaneous ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[Budget]]
* [[Executive]]
* [[Past Executive]]
* [[Frosh]]
* [[History]]
* [[Library]]
* [[MEF Proposals]]
* [[Office Cleanup]]
* [[Projector]]
* [[Term Notes]]
</div> __NOTOC__

New Member Guide

2015-01-09T17:39:16Z

Jy2wong: create new member guide

Hello, and welcome to the Computer Science Club! Thanks for joining. The office staff who signed you up should have told you about this stuff, but just as a refresher, here it is again.

== Office ==

* Our office is MC 3036/3037 (we occupy both rooms) and we're across the hall (but distinct from) the Mathsoc office.

* Our club doesn't have weekly meetings or anything like that. If the door is open, we are open (even if it's 3 in the morning on Sunday). Feel free to drop in and say hi!

* The office closes when the last office staff leaves the room, and the office opens when somebody with a key comes by. If you're interested in becoming office staff, look out for the termly office staff training event or ask around the office.

* We have staplers by the door farthest from Mathsoc. Even if you're not a member, you're allowed to use them. You don't even have to ask (and in fact, we'd prefer if you didn't. Office regulars spend a good amount of time telling people that yes, they can use the staplers).

* We sell pop, chips, chocolate bars and other snacks. Prices are on the fridge door. Pay the red cup in the fridge.

== Events ==
We hold a different set of events every term, but the same types of events come up again and again. Watch out for emails about:
* Industry tech talks. In the past, we've gotten folks from various tech companies to talk about algorithms, database design decisions and other things.

* UNIX 10X tutorials. Don't know how to use the commandline? Come out and learn with us. Know how to use the commandline? Come out and help us answer questions.

* Member talks. Do you have a burning desire to talk about AVL trees? No? Well, if you want to talk about a computer sciencey topic that's close to your heart, send an email to exec at csclub.uwaterloo.ca with a talk abstract (a paragraph we can put on a poster to describe your talk) and we'll see if we can make something happen.

* Code parties. We eat food, talk and write code. Code parties happen several times a term.

== Machines ==
As a member of the club, you have access to our machines, both [[Machine_List#Servers|servers in the machine room down the hall]] and [[Machine_List#Office Terminals|desktops in our physical office]]. Keep in mind that your username is your quest userid (e.g. j7smith) and your password starts out as the one you set when you joined the club for the first time.

* Your files are accessible on all of our machines

* Keep in mind that the machines are shared among all of our members. Play nice. For example, <nowiki>caffeine</nowiki> is our web server. You are strongly advised not to run long, intensive jobs on it. Something like that is a better fit for <nowiki>hfcs</nowiki>, <nowiki>corn-syrup</nowiki> or even possibly <nowiki>taurine</nowiki>.

* use SSH for access to the machines in the server room.
** If you don't know how to use the commandline, you can wait for our approximately termly UNIX 101 event, google for "how to use the command line", or ask around the office.
** if you happen to be using Windows, you can use an SSH client such as PuTTY[http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html].
** If you have a Mac or you run Linux, you already have the <nowiki>ssh</nowiki> command installed. If your userid is <nowiki>j7smith</nowiki> and you want to use <nowiki>taurine</nowiki>, just open up a terminal window and type the following. You will be asked for your CSC password.

ssh j7smith@taurine.csclub.uwaterloo.ca

* Our office terminals are turned off, rebooted and otherwise reset somewhat frequently.

* If you forget your password, come by the office with your watcard and some other form of ID. Regular office staff can't reset your password for you, but if there's someone on our Systems Committee hanging around, they can do this for you.

* If you would like to change your password, log on to any of our machines and type <nowiki>kpasswd</nowiki> in a terminal. You will be prompted for your old password and be asked to type in your new password twice (just to make sure you didn't make a typo).

* We have a MySQL daemon running, but only on our web server <nowiki>caffeine</nowiki>. Check out [[MySQL|this page]] if you would like a database.

* for technical questions (including package installation requests), send an email to our systems committee, syscom at csclub.uwaterloo.ca.

== Web Hosting ==
You get web space with your CSC membership. Your website is visible at [http://csclub.uwaterloo.ca/~j7smith] (where j7smith is replaced with your own userid, of course).

* Files in the <nowiki>www</nowiki> directory inside your home directory (e.g. <nowiki>/users/j7smith/www</nowiki>) will appear on your web space.
* If you create a file called <nowiki>index.html</nowiki> and place it in <nowiki>www</nowiki>, it will appear at [http://csclub.uwaterloo.ca/~j7smith] instead of the directory listing that was there before.
* If the above information makes no sense to you, ask someone in the office for a gentler step-by-step introduction. Some day, there will be a guide like this on the wiki, but such a thing doesn't currently exist.

== IRC ==
We have an IRC (internet relay chat) channel. Come hang out with us in #csc on freenode. If you are unfamiliar with IRC, you may want to read [[How to IRC|this guide]].

== Library ==
There are books on the shelves lining the office. Feel free to drop by and read them.

Someone who knows more about the library checkout system than jy2wong should write something here.

Wireless

2014-09-23T04:11:58Z

Jy2wong: instructions for wpa_supplicant config snippet

'''csc-wireless no longer exists. Members are advised to use eduroam or uw-unsecured.'''

== Rosetta Stone ==
See IST's page http://ist.uwaterloo.ca/cs/wireless.html for Windows and other devices.

The ca_cert line is only needed to verify the authenticity of the eduroam AP, and is otherwise not actually needed to connect to it. Keep in mind that removing it from your config means that you are technically vulnerable to someone creating a fake eduroam access point and using it to grab your Quest login, though honestly the chances of this ever happening on campus are extremely unlikely.

=== Linux ===
If you don't wish to have your password floating around in a text file in /etc, then (at least for the wpa_supplicant based network managers) you may take the output of
echo -n "hunter2" | iconv -t utf16le | openssl md4
and replace the password line with
password=hash:HASH_HERE

==== netctl ====
Toss this into /etc/netctl/, making sure you edit identity and password. Replace wlan0 with the correct interface. Your correct interface can probably be seen in the output of
ip link
and probably is the one that starts with 'w'.

To connect, run sudo netctl start eduroam

Connection='wireless'
Interface=wlan0
Security='wpa-configsection'
IP='dhcp'
WPAConfigSection=(
'identity="userid@uwaterloo.ca"'
'password="hunter2"'
'ssid="eduroam"'
'key_mgmt=WPA-EAP'
'eap=PEAP'
'ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"'
)

==== wicd ====
Toss this into /etc/wicd/encryption/templates/ and edit /etc/wicd/encryption/templates/active to include a line with eduroam.

name = Eduroam UW
author = Steven She
version = 1
require username *Username password *Password
-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="$_ESSID"
scan_ssid="$_SCAN"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="$_USERNAME"
password="$_PASSWORD"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

==== wpa_supplicant ====
add this to a file in /etc/wpa_supplicant/.

network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="userid@uwaterloo.ca"
password="hunter2"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

[[Category:Systems]]

Wireless

2014-09-23T03:54:56Z

Jy2wong: remove netcfg config (nobody should be using netcfg any more)

'''csc-wireless no longer exists. Members are advised to use eduroam or uw-unsecured.'''

== Rosetta Stone ==
See IST's page http://ist.uwaterloo.ca/cs/wireless.html for Windows and other devices.

The ca_cert line is only needed to verify the authenticity of the eduroam AP, and is otherwise not actually needed to connect to it. Keep in mind that removing it from your config means that you are technically vulnerable to someone creating a fake eduroam access point and using it to grab your Quest login, though honestly the chances of this ever happening on campus are extremely unlikely.

=== Linux ===
If you don't wish to have your password floating around in a text file in /etc, then (at least for the wpa_supplicant based network managers) you may take the output of
echo -n "hunter2" | iconv -t utf16le | openssl md4
and replace the password line with
password=hash:HASH_HERE

==== netctl ====
Toss this into /etc/netctl/, making sure you edit identity and password. Replace wlan0 with the correct interface. Your correct interface can probably be seen in the output of
ip link
and probably is the one that starts with 'w'.

To connect, run sudo netctl start eduroam

Connection='wireless'
Interface=wlan0
Security='wpa-configsection'
IP='dhcp'
WPAConfigSection=(
'identity="userid@uwaterloo.ca"'
'password="hunter2"'
'ssid="eduroam"'
'key_mgmt=WPA-EAP'
'eap=PEAP'
'ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"'
)

==== wicd ====
Toss this into /etc/wicd/encryption/templates/ and edit /etc/wicd/encryption/templates/active to include a line with eduroam.

name = Eduroam UW
author = Steven She
version = 1
require username *Username password *Password
-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="$_ESSID"
scan_ssid="$_SCAN"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="$_USERNAME"
password="$_PASSWORD"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

==== wpa_supplicant ====
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="userid@uwaterloo.ca"
password="hunter2"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

[[Category:Systems]]

Wireless

2014-09-23T03:54:15Z

Jy2wong: modify netctl config based on qllam's working config

'''csc-wireless no longer exists. Members are advised to use eduroam or uw-unsecured.'''

== Rosetta Stone ==
See IST's page http://ist.uwaterloo.ca/cs/wireless.html for Windows and other devices.

The ca_cert line is only needed to verify the authenticity of the eduroam AP, and is otherwise not actually needed to connect to it. Keep in mind that removing it from your config means that you are technically vulnerable to someone creating a fake eduroam access point and using it to grab your Quest login, though honestly the chances of this ever happening on campus are extremely unlikely.

=== Linux ===
If you don't wish to have your password floating around in a text file in /etc, then (at least for the wpa_supplicant based network managers) you may take the output of
echo -n "hunter2" | iconv -t utf16le | openssl md4
and replace the password line with
password=hash:HASH_HERE

==== netcfg ====
Toss this into /etc/network.d/, making sure you edit identity and password. sudo netcfg eduroam

CONNECTION='wireless'
INTERFACE=wlan0
SECURITY='wpa-configsection'
IP='dhcp'
CONFIGSECTION='
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="userid@uwaterloo.ca"
password="hunter2"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"'

==== netctl ====
Toss this into /etc/netctl/, making sure you edit identity and password. Replace wlan0 with the correct interface. Your correct interface can probably be seen in the output of
ip link
and probably is the one that starts with 'w'.

To connect, run sudo netctl start eduroam

Connection='wireless'
Interface=wlan0
Security='wpa-configsection'
IP='dhcp'
WPAConfigSection=(
'identity="userid@uwaterloo.ca"'
'password="hunter2"'
'ssid="eduroam"'
'key_mgmt=WPA-EAP'
'eap=PEAP'
'ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"'
)

==== wicd ====
Toss this into /etc/wicd/encryption/templates/ and edit /etc/wicd/encryption/templates/active to include a line with eduroam.

name = Eduroam UW
author = Steven She
version = 1
require username *Username password *Password
-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="$_ESSID"
scan_ssid="$_SCAN"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="$_USERNAME"
password="$_PASSWORD"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

==== wpa_supplicant ====
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="userid@uwaterloo.ca"
password="hunter2"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

[[Category:Systems]]

Wireless

2014-09-10T03:46:45Z

Jy2wong: add information about MSCHAPv2 hashing; add profiles for wpa_supplicant and netctl

'''csc-wireless no longer exists. Members are advised to use eduroam or uw-unsecured.'''

== Rosetta Stone ==
See IST's page http://ist.uwaterloo.ca/cs/wireless.html for Windows and other devices.

The ca_cert line is only needed to verify the authenticity of the eduroam AP, and is otherwise not actually needed to connect to it. Keep in mind that removing it from your config means that you are technically vulnerable to someone creating a fake eduroam access point and using it to grab your Quest login, though honestly the chances of this ever happening on campus are extremely unlikely.

=== Linux ===
If you don't wish to have your password floating around in a text file in /etc, then (at least for the wpa_supplicant based network managers) you may take the output of
echo -n "hunter2" | iconv -t utf16le | openssl md4
and replace the password line with
password=hash:HASH_HERE

==== netcfg ====
Toss this into /etc/network.d/, making sure you edit identity and password. sudo netcfg eduroam

CONNECTION='wireless'
INTERFACE=wlan0
SECURITY='wpa-configsection'
IP='dhcp'
CONFIGSECTION='
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="userid@uwaterloo.ca"
password="hunter2"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"'

==== netctl ====
Toss this into /etc/netctl/, making sure you edit identity and password. sudo netctl start eduroam

Connection='wireless'
Interface=wlan0
Security='wpa-configsection'
IP='dhcp'
WPAConfigSection=(
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="userid@uwaterloo.ca"
'password="hunter2"'
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
)

==== wicd ====
Toss this into /etc/wicd/encryption/templates/ and edit /etc/wicd/encryption/templates/active to include a line with eduroam.

name = Eduroam UW
author = Steven She
version = 1
require username *Username password *Password
-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="$_ESSID"
scan_ssid="$_SCAN"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="$_USERNAME"
password="$_PASSWORD"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

==== wpa_supplicant ====
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="userid@uwaterloo.ca"
password="hunter2"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

[[Category:Systems]]

Printing

2014-01-27T17:52:38Z

Jy2wong:

= Setting up CUPS, the printing subsystem =
# Install <tt>cups</tt>.
# Go to <tt>http://localhost:631/</tt>. Go to 'Add Printer'. You may need to supply the root username/password.
# Click 'Internet Printing Protocol (ipp)'. CSC doesn't have any local printers, chances are all printers are connected via LAN. If it is LAN, then it is ipp.
# Enter connection, name, and description of the printer.

If there is a machine with printing already properly set up, you may copy the file /etc/cups/printers.conf to the corresponding location on machines that aren't set up. Ensure that you stop CUPS (sudo service cups stop) on the fresh machine before copying over printers.conf (and don't forget to start it again afterward).

== MathSoc Printer ==

# Go to [http://welcome.solutions.brother.com/bsc/public_s/id/linux/en/download_prn.html#MFC-9970CDW the Brother site] and grab the cupswrapper and lpr drivers.
# Install the drivers with <tt>dpkg</tt>. You may need to use <tt>--force architecture</tt> on a 64-bit machine; don't worry, the package is actually arch-independent. <pre>sudo dpkg --force-architecture -i mfc9970*.deb</pre>
# On a 64-bit machine, install <tt>ia32-libs</tt>
# Printer Connection: <pre>ipp://lp-mc3038.mathsoc.uwaterloo.ca/ipp</pre>
# Name: MathSoc
# Description: The colour printer in MathSoc. Printing is 10 cents per double-sided black and white sheet, and 30 cents per colour side.
# Location: MC 3038
# Brand: Brother
# Make: MFC 9770CDW
# Default options: make sure that Color is set to Mono and Two-sided printing is set to Long-edge.

== ljp_3016 printer ==

# Printer Connection: <pre>ipp://print.cs.uwaterloo.ca/printers/ljp_3016</pre>
# Name: ljp_3016
# Description: Main Math Printers
# Location: MC 3016
# Brand: HP
# Make: LaserJet 4250 Foomatic/Postscript
# Default options: make sure that two-sided printing is set to long-edge

'''NOTE: If the brand/make is not available for selection, don't download any third-party drivers. These drivers are available in apt. Find them there.'''

Print quota is done via IST's XAS system, which can be accessed here: [http://strobe.uwaterloo.ca/ist/services/index.php?service=62] or [https://ist-xas.uwaterloo.ca/xas/]

Printing

2014-01-27T17:32:21Z

Jy2wong: formatting

= Setting up CUPS, the printing subsystem =
# Install <tt>cups</tt>.
# Go to <tt>http://localhost:631/</tt>. Go to 'Add Printer'. You may need to supply the root username/password.
# Click 'Internet Printing Protocol (ipp)'. CSC doesn't have any local printers, chances are all printers are connected via LAN. If it is LAN, then it is ipp.
# Enter connection, name, and description of the printer.

== MathSoc Printer ==

# Go to [http://welcome.solutions.brother.com/bsc/public_s/id/linux/en/download_prn.html#MFC-9970CDW the Brother site] and grab the cupswrapper and lpr drivers.
# Install the drivers with <tt>dpkg</tt>. You may need to use <tt>--force architecture</tt> on a 64-bit machine; don't worry, the package is actually arch-independent. <pre>sudo dpkg --force-architecture -i mfc9970*.deb</pre>
# On a 64-bit machine, install <tt>ia32-libs</tt>
# Printer Connection: <pre>ipp://lp-mc3038.mathsoc.uwaterloo.ca/ipp</pre>
# Name: MathSoc
# Description: The colour printer in MathSoc. Printing is 10 cents per double-sided black and white sheet, and 30 cents per colour side.
# Location: MC 3038
# Brand: Brother
# Make: MFC 9770CDW
# Default options: make sure that Color is set to Mono and Two-sided printing is set to Long-edge.

== ljp_3016 printer ==

# Printer Connection: <pre>ipp://print.cs.uwaterloo.ca/printers/ljp_3016</pre>
# Name: ljp_3016
# Description: Main Math Printers
# Location: MC 3016
# Brand: HP
# Make: LaserJet 4250 Foomatic/Postscript
# Default options: make sure that two-sided printing is set to long-edge

'''NOTE: If the brand/make is not available for selection, don't download any third-party drivers. These drivers are available in apt. Find them there.'''

Print quota is done via IST's XAS system, which can be accessed here: [http://strobe.uwaterloo.ca/ist/services/index.php?service=62] or [https://ist-xas.uwaterloo.ca/xas/]

Printing

2014-01-27T16:57:09Z

Jy2wong:

= Setting up CUPS, the printing subsystem =
# Install <tt>cups</tt>.
# Go to <tt>http://localhost:631/</tt>. Go to 'Add Printer'. You may need to supply the root username/password.
# Click 'Internet Printing Protocol (ipp)'. CSC doesn't have any local printers, chances are all printers are connected via LAN. If it is LAN, then it is ipp.
# Enter connection, name, and description of the printer.

== MathSoc Printer ==

# Go to [http://welcome.solutions.brother.com/bsc/public_s/id/linux/en/download_prn.html#MFC-9970CDW the Brother site] and grab the cupswrapper and lpr drivers.
# Install the drivers with <tt>dpkg</tt>. You may need to use <tt>--force architecture</tt> on a 64-bit machine; don't worry, the package is actually arch-independent.
<pre>sudo dpkg --force-architecture -i mfc9970*.deb</pre>
# On a 64-bit machine, install <tt>ia32-libs</tt>
# Printer Connection: <tt>ipp://lp-mc3038.mathsoc.uwaterloo.ca/ipp</tt>
# Name: MathSoc
# Description: The colour printer in MathSoc. Printing is 10 cents per double-sided black and white sheet, and 30 cents per colour side.
# Brand: Brother
# Make: MFC 9770CDW
# Default options: make sure that Color is set to Mono and Two-sided printing is set to Long-edge.

== ljp_3016 printer ==

# Printer Connection: <tt>ipp://print.cs.uwaterloo.ca/printers/ljp_3016</tt>
# Name: ljp_3016
# Description: Main Math Printers
# Location: MC 3016
# Brand: HP
# Make: LaserJet 4250 Foomatic/Postscript
# Default options: make sure that two-sided printing is set to long-edge

'''NOTE: If the brand/make is not available for selection, don't download any third-party drivers. These drivers are available in apt. Find them there.'''

Print quota is done via IST's XAS system, which can be accessed here: [http://strobe.uwaterloo.ca/ist/services/index.php?service=62] or [https://ist-xas.uwaterloo.ca/xas/]

NetApp

2013-02-04T04:08:58Z

Jy2wong: /* iSCSI setup procedure */ Makefile for copying user homedirs

As of 2013, the CSC has a NetApp FAS3000 series which is capable of hosting network shares. It was donated to us by CSCF. It is also pretty old.

==Documentation==
All the manuals are hosted in ~sysadmin/netapp-docs/

Relevant docs for storage modification are: smg.pdf, sysadmin.pdf

iSCSI documentation is in ontop/bsag.pdf

==Access==
Currently it is accessible via serial interface via ascorbic-acid.

(Later, this will be accessible via aspartame, through its network interface+serial interface).

==Permissions==
The NetApp does not support extended ACLs on NFSv4, so extended ACLs are supported via CIFS. This is particularly important for club accounts, and for some users hosting git repos out of their homedirs.

==Commands==
aggr status -r aggr<num>
Shows aggregate status
disk show -v
Shows disks, and which filer they are owned by (currently all by psilodump)
storage
storage related things
disk assign
Assigns orphaned disks to a filer
vol
Volume stuffs

==Layout==
* shelf 1
** 10,000 RPM FibreChannel disks
** Currently set to standalone filer+shelf, not set up
* shelf 2
** 10,000 RPM FibreChannel disks
** Currently assigned to phlogiston, not set up (phlogiston is off)
* shelf 3
** 7,200 RPM ATA disks
** Currently assigned to psilodump
* shelf 4
** 7,200 RPM ATA disks
** Currently assigned to psilodump

===Aggregates===
* aggr0
** Root aggregate volume, in RAID-DP
* aggr1
** Music aggregate volume, in RAID-DP
* aggr2
** Users aggregate volume, in RAID-DP

===Volumes===
* /vol/vol0
** Root volume
* /vol/vol1music
** Music volume
* /vol/vol2users
** Users volume

==Terminology==
* RAID-DP - Double Parity RAID6

==iSCSI setup log==
1. on the netapp,
* start the iscsi stuff. Set up a client user/pass (m4burns: please fill this part out at some point)

2. set up aspartame to talk with the netapp. (all commands were run on aspartame)
* installed open-iscsi
* set discovery.sendtargets.auth.* and node.session.auth.* in /etc/iscsi/iscsid.conf (users and passwords are the same)
* start open-iscsi with service open-iscsi start
* to verify that the netapp is exporting the iSCSI interface properly,
iscsiadm -m discovery --type st -p psilodump
*
iscsiadm --mode node --targetname "iqn.1992-08.com.netapp:psilodump.csclub.uwaterloo.ca" --portal 129.97.134.130:3260 --login

3. set up ginseng the same way as aspartame

4. set up the netapp filesystem and transfer old files from ginseng:
* on ginseng, use parted to set up the mounted iscsi drive as an ext4 primary partition (setting up a partition of size >2TB requires care)
* installed star as root on ginseng
* transferred files with the following Makefile (make -j8):
foo := $(wildcard /export/users/*)
bar := $(patsubst /export/users/%,/mnt/iscsi/%,$(foo))
all: $(bar)
/mnt/iscsi/%: /export/users/%
# echo $@ $<
~/star-1.5.2/star/OBJ/x86_64-linux-cc/star \
-copy -p artype=exustar \
-C /export/users $(notdir $<) /mnt/iscsi
*

NetApp

2013-02-04T02:55:59Z

Jy2wong: iscsi setup part 1

As of 2013, the CSC has a NetApp FAS3000 series which is capable of hosting network shares. It was donated to us by CSCF. It is also pretty old.

==Documentation==
All the manuals are hosted in ~sysadmin/netapp-docs/

Relevant docs for storage modification are: smg.pdf, sysadmin.pdf

iSCSI documentation is in ontop/bsag.pdf

==Access==
Currently it is accessible via serial interface via ascorbic-acid.

(Later, this will be accessible via aspartame, through its network interface+serial interface).

==Permissions==
The NetApp does not support extended ACLs on NFSv4, so extended ACLs are supported via CIFS. This is particularly important for club accounts, and for some users hosting git repos out of their homedirs.

==Commands==
aggr status -r aggr<num>
Shows aggregate status
disk show -v
Shows disks, and which filer they are owned by (currently all by psilodump)
storage
storage related things
disk assign
Assigns orphaned disks to a filer
vol
Volume stuffs

==Layout==
* shelf 1
** 10,000 RPM FibreChannel disks
** Currently set to standalone filer+shelf, not set up
* shelf 2
** 10,000 RPM FibreChannel disks
** Currently assigned to phlogiston, not set up (phlogiston is off)
* shelf 3
** 7,200 RPM ATA disks
** Currently assigned to psilodump
* shelf 4
** 7,200 RPM ATA disks
** Currently assigned to psilodump

===Aggregates===
* aggr0
** Root aggregate volume, in RAID-DP
* aggr1
** Music aggregate volume, in RAID-DP
* aggr2
** Users aggregate volume, in RAID-DP

===Volumes===
* /vol/vol0
** Root volume
* /vol/vol1music
** Music volume
* /vol/vol2users
** Users volume

==Terminology==
* RAID-DP - Double Parity RAID6

==iSCSI setup procedure==
* on the netapp,
** start the iscsi stuff. Set up a client user/pass (Marc: please fill this part out at some point)

* set up aspartame to talk with the netapp. (all commands were run on aspartame)
** installed open-iscsi
** set discovery.sendtargets.auth.* and node.session.auth.* in /etc/iscsi/iscsid.conf (users and passwords are the same)
** start open-iscsi with service open-iscsi start
** iscsiadm -m discovery --type st -p psilodump
to verify that the netapp is exporting the iSCSI interface properly

** iscsiadm --mode node --targetname "iqn.1992-08.com.netapp:psilodump.csclub.uwaterloo.ca" --portal 129.97.134.130:3260 --login

* set up the netapp filesystem:
** entire thing is an ext4 primary partition

New CSC Machine

2013-02-04T00:24:52Z

Jy2wong: /* General */

= Booting =

* Put the TFTP image in place (if dist-arch pair installed before, you may skip this).
e.g. extract http://mirror.csclub.uwaterloo.ca/ubuntu/dists/oneiric/main/installer-amd64/current/images/netboot/netboot.tar.gz to caffeine:/srv/tftp/oneiric-amd64

* Configure DHCP server; see caffeine:/etc/dhcp/dhcpd.conf. This allow caffeine to identify the host by its MAC address and give it the correct IP and boot image. e.g.
host bit-shifter {
hardware ethernet 6C:F0:49:08:49:48;
fixed-address 129.97.134.111;
next-server 129.97.134.17;
filename "precise-amd64/pxelinux.0";
}

* Force network boot in the BIOS. This may be called "Legacy LAN" or other such cryptic things. If this doesn't work, boot from CD or USB instead.

It is preferred to use the "alternate" Ubuntu installer image, based on debian-installer, instead of the Ubiquity installer. This installer supports software RAID and LVM out of the box, and will generally make your life easier. If installing Debian, this is the usual installer, so don't sweat it.

= Installing =

== debian-installer ==

At least in expert mode, you can choose a custom mirror (top of the countries list) and give the path for mirror directly. This will make installation super-fast compared to installing from anywhere else.

Please install to LVM volumes, as this is our standard configuration on all machines where possible. It allows more flexible partitioning across available volumes. Since GRUB 2, even /boot may be on LVM; this is the preferred configuration for simplicity, except when legacy partitioning setups make this inconvenient.

You may enable unattended upgrades, but do not enable Canonical's remote management service or any such nonsense. This is mostly a straightforward Debian/Ubuntu install.

== Ubiquity ==

Ubiquity is the Ubuntu GUI installer. For it to have lvm support, run:
apt-get install lvm2

If you still can't see the partitions (even if lvscan sees them, but no devices exist), run <tt>vgscan</tt> and <tt>vgchange -ay</tt> as root. Now the partitioner should be able to see them. We prefer to use LVM for partitions. Since GRUB 2, even /boot may be on LVM; this is the preferred configuration for simplicity, except when legacy partitioning setups make this inconvenient.

After installing with Ubiquity, you must also add LVM support to the newly installed system, and in particular its initramfs.

mount /dev/vg0/root /mnt
mount /dev/sda1 /mnt/boot
chroot /mnt
apt-get install lvm2

You should see an update-initramfs update. Reboot.

= After Installing =

== apt ==

If you did not during installation, change all references in <tt>/etc/apt/sources.list</tt> to use <tt>mirror</tt> instead of the usual mirrors.

Also add support for the CSC packages. Add the following to <tt>/etc/apt/sources.list.d/csclub.list</tt> (or copy from another host):

deb http://debian.csclub.uwaterloo.ca/ <distribution> main contrib non-free
deb-src http://debian.csclub.uwaterloo.ca/ <distribution> main contrib non-free

You'll also need the CSC archive signing key (if <tt>curl</tt> is not installed, install it).
curl -s http://debian.csclub.uwaterloo.ca/csclub.asc | apt-key add -

If you are running Debian, our package list installs some cross-compilers that are in the Emdebian repository. Install the package <tt>emdebian-archive-keyring</tt> and then add the following entry to <tt>/etc/apt/sources.list.d/emdebian.list</tt>:
deb http://mirror.csclub.uwaterloo.ca/emdebian/ squeeze main
deb-src http://mirror.csclub.uwaterloo.ca/emdebian/ squeeze main

You should now run <tt>apt-get update</tt> to reflect these changes.

Next, install <tt>inapt</tt> (it is in the CSC Debian archive). If it hasn't previously been built for the current platform, clone and build it (TODO: describe how to do this).

Clone <tt>~git/public/packages.git</tt>, update it if necessary (notably updating <tt>nodes.ia</tt> to reflect the distribution and role of the machine), then run:
inapt *.ia

(Due to a bug, if a warning is thrown, this will segfault. Until fixed, just temporarily remove whatever packages it complains about from the list.)

Warning: this will take a long time due to the large number of packages being installed. Some of the below can be done once the relevant packages are installed, but while other packages are still being installed.

Note that inapt current uninstalls NetworkManager, which is what Ubuntu uses by default to configure the network. Once this completes, open <tt>/etc/network/interfaces</tt> and set up a static networking configuration (otherwise, networking will not come back up on reboot). It should look something like this:

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 129.97.134.xxx
netmask 255.255.255.0
gateway 129.97.134.1
network 129.97.134.0
broadcast 129.97.134.255
dns-nameservers 129.97.2.1 129.97.47.5 129.97.47.6
dns-search csclub.uwaterloo.ca uwaterloo.ca

For unattended upgrades in the future, install the <tt>unattended-upgrades</tt> package and copy <tt>/etc/apt/apt.conf</tt> from another host.

== Keys ==

If this is a reinstall of an existing host, copy back the SSH host keys and <tt>/etc/krb5.keytab</tt> from its former incarnation. Otherwise, create a new Kerberos principal and copy the keytab over, as follows (run from the host in question):
kadmin -p sysadmin/admin # or any other admin principal; the password for this one is the usual root password
addprinc -randkey host/[hostname].csclub.uwaterloo.ca
ktadd host/[hostname].csclub.uwaterloo.ca

This will generate a new principal (you can skip this step if one already exists) and add it to the local Kerberos keytab.

Also copy <tt>/etc/ssl/certs/GlobalSign_Intermediate_Root.pem</tt> from another host, as many of our services use a certificate issued by this CA.

== Configuration ==

=== General ===

The following config files are needed to work in the CSC environment (examples given below for an office terminal; perhaps refer to another host if preferred).

<tt>/etc/nsswitch.conf</tt>
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd: files ldap
group: files ldap
shadow: files
sudoers: files ldap

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files

netgroup: nis

<tt>/etc/ldap/ldap.conf</tt>

On ginseng, the shadow line also contains ldap. At least one non-office terminal (aspartame) has been set up with ldap in the shadow line.

# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04 19:57:01 kurt Exp $
#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

BASE dc=csclub, dc=uwaterloo, dc=ca
URI ldaps://ldap1.csclub.uwaterloo.ca ldaps://ldap2.csclub.uwaterloo.ca

SIZELIMIT 0

TLS_CACERT /etc/ssl/certs/GlobalSign_Intermediate_Root.pem
TLS_CACERTFILE /etc/ssl/certs/GlobalSign_Intermediate_Root.pem

SUDOERS_BASE ou=SUDOers,dc=csclub,dc=uwaterloo,dc=ca

(On Debian, also copy <tt>/etc/sudo-ldap.conf</tt>.)

<tt>/etc/nslcd.conf</tt>
# /etc/nslcd.conf
# nslcd configuration file. See nslcd.conf(5)
# for details.

# The user and group nslcd should run as.
uid nslcd
gid nslcd

# The location at which the LDAP server(s) should be reachable.
uri ldap://ldap1.csclub.uwaterloo.ca
uri ldap://ldap2.csclub.uwaterloo.ca

# The search base that will be used for all queries.
base dc=csclub,dc=uwaterloo,dc=ca

# use the uniqueMember attribute for group membership
# (not applicable on Debian squeeze)
map group member uniqueMember

<tt>/etc/krb5.conf</tt>
[libdefaults]
default_realm = CSCLUB.UWATERLOO.CA
forwardable = true
proxiable = true

# remove this once NFS mounts without it
allow_weak_crypto = true

[realms]
CSCLUB.UWATERLOO.CA = {
kdc = kdc1.csclub.uwaterloo.ca
kdc = kdc2.csclub.uwaterloo.ca
admin_server = kadmin.csclub.uwaterloo.ca
}
(rest omitted for brevity)

Notably, <tt>allow_weak_crypto</tt> is currently needed to mount <tt>/users</tt> (though oddly, not <tt>/scratch</tt>. /music is sec=sys and thus will always mount, even when krb5 is down and/or broken). Otherwise, you will get a mysterious "permission denied" error (even though the server claims to have authenticated the mount successfully).

<tt>/etc/pam.d/common-account</tt>
#
# /etc/pam.d/common-account - authorization settings common to all services
#

# here are the per-package modules (the "Primary" block)
account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so
# here's the fallback if no module succeeds
account requisite pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
account required pam_permit.so
# and here are more per-package modules (the "Additional" block)
account required pam_krb5.so minimum_uid=10000
# end of pam-auth-update config

# Make sure the user is up to date. System accounts and syscom are exempt.
account [success=2 default=ignore] pam_succeed_if.so quiet uid < 10000
account [success=1 default=ignore] pam_succeed_if.so quiet user ingroup syscom
account required pam_csc.so

This file is notably different on syscom-only hosts. Look at an existing syscom-only host to see the difference.

Alter <tt>/etc/default/nfs-common</tt> to enable <tt>statd</tt>, and more importantly <tt>gssd</tt> (needed for Kerberos NFS mounts). Start both daemons manually for now.

Add <tt>/users</tt>, <tt>/music</tt> and <tt>/scratch</tt> to <tt>/etc/fstab</tt> (as appropriate for the machine's role), make their mount points and mount them. Note that /music is sec=sys whereas /users and /scratch are both sec=krb5 (with exceptions granted on a case-by-case basis for servers only, office terminals are always sec=krb5 for security reasons).

To allow single sign-on as <tt>root</tt> (primarily useful for pushing files to all machines simultaneously), put the following in <tt>/root/.k5login</tt>:
sysadmin/admin@CSCLUB.UWATERLOO.CA

Also copy the following files from another CSC host:
* <tt>/etc/ssh/ssh_config</tt> and <tt>/etc/ssh/sshd_config</tt> (for single sign-on)
* <tt>/etc/ssh/ssh_known_hosts</tt> (to remove hostkey warnings within our network)
* <tt>/etc/hosts</tt> (for host tab completion and emergency name resolution)

=== Display Manager ===

LightDM (with unity-greeter) is the current display manager of choice for CSC office terminals. Copy <tt>/etc/lightdm/lightdm.conf</tt> and <tt>/etc/lightdm/users.conf</tt> from another CSC machine to configure it properly. If kdm or another display manager gets installed, please ensure that you continue to choose LightDM as the default display manager.

Please leave AccountsService enabled, as LightDM and certain parts of the GNOME packages work better when it is available.

The Unity greeter configuration is now in gsettings. We currently have a novelty wallpaper configured. To configure this, copy <tt>/usr/local/share/backgrounds/tarkin.png</tt> from another machine and run:

sudo -u lightdm dbus-launch gsettings set com.canonical.unity-greeter background /usr/local/share/backgrounds/tarkin.png

=== Tweaks ===

On Ubuntu precise, even when <tt>gnome-keyring</tt> is uninstalled, it leaves a config file behind that causes error messages. Remove <tt>/etc/pkcs11/modules/gnome-keyring-module</tt> to fix this.

== Records ==

You probably already created the host in the University IPAM system beforehand. If not, please do so.

Please also add the host to the [[Machine List]] here on the Wiki, and to <tt>/users/syscom/csc-machines</tt> (and <tt>csc-office-machines</tt>, if applicable).

= New Distribution =

If new distribution, create in conf/distributions AND conf/uploaders, and do rrr-update as well as rrr-incoming.
(TODO: expand this to describe building and pushing core CSC packages)

New CSC Machine

2013-02-04T00:06:39Z

Jy2wong: /* General */

= Booting =

* Put the TFTP image in place (if dist-arch pair installed before, you may skip this).
e.g. extract http://mirror.csclub.uwaterloo.ca/ubuntu/dists/oneiric/main/installer-amd64/current/images/netboot/netboot.tar.gz to caffeine:/srv/tftp/oneiric-amd64

* Configure DHCP server; see caffeine:/etc/dhcp/dhcpd.conf. This allow caffeine to identify the host by its MAC address and give it the correct IP and boot image. e.g.
host bit-shifter {
hardware ethernet 6C:F0:49:08:49:48;
fixed-address 129.97.134.111;
next-server 129.97.134.17;
filename "precise-amd64/pxelinux.0";
}

* Force network boot in the BIOS. This may be called "Legacy LAN" or other such cryptic things. If this doesn't work, boot from CD or USB instead.

It is preferred to use the "alternate" Ubuntu installer image, based on debian-installer, instead of the Ubiquity installer. This installer supports software RAID and LVM out of the box, and will generally make your life easier. If installing Debian, this is the usual installer, so don't sweat it.

= Installing =

== debian-installer ==

At least in expert mode, you can choose a custom mirror (top of the countries list) and give the path for mirror directly. This will make installation super-fast compared to installing from anywhere else.

Please install to LVM volumes, as this is our standard configuration on all machines where possible. It allows more flexible partitioning across available volumes. Since GRUB 2, even /boot may be on LVM; this is the preferred configuration for simplicity, except when legacy partitioning setups make this inconvenient.

You may enable unattended upgrades, but do not enable Canonical's remote management service or any such nonsense. This is mostly a straightforward Debian/Ubuntu install.

== Ubiquity ==

Ubiquity is the Ubuntu GUI installer. For it to have lvm support, run:
apt-get install lvm2

If you still can't see the partitions (even if lvscan sees them, but no devices exist), run <tt>vgscan</tt> and <tt>vgchange -ay</tt> as root. Now the partitioner should be able to see them. We prefer to use LVM for partitions. Since GRUB 2, even /boot may be on LVM; this is the preferred configuration for simplicity, except when legacy partitioning setups make this inconvenient.

After installing with Ubiquity, you must also add LVM support to the newly installed system, and in particular its initramfs.

mount /dev/vg0/root /mnt
mount /dev/sda1 /mnt/boot
chroot /mnt
apt-get install lvm2

You should see an update-initramfs update. Reboot.

= After Installing =

== apt ==

If you did not during installation, change all references in <tt>/etc/apt/sources.list</tt> to use <tt>mirror</tt> instead of the usual mirrors.

Also add support for the CSC packages. Add the following to <tt>/etc/apt/sources.list.d/csclub.list</tt> (or copy from another host):

deb http://debian.csclub.uwaterloo.ca/ <distribution> main contrib non-free
deb-src http://debian.csclub.uwaterloo.ca/ <distribution> main contrib non-free

You'll also need the CSC archive signing key (if <tt>curl</tt> is not installed, install it).
curl -s http://debian.csclub.uwaterloo.ca/csclub.asc | apt-key add -

If you are running Debian, our package list installs some cross-compilers that are in the Emdebian repository. Install the package <tt>emdebian-archive-keyring</tt> and then add the following entry to <tt>/etc/apt/sources.list.d/emdebian.list</tt>:
deb http://mirror.csclub.uwaterloo.ca/emdebian/ squeeze main
deb-src http://mirror.csclub.uwaterloo.ca/emdebian/ squeeze main

You should now run <tt>apt-get update</tt> to reflect these changes.

Next, install <tt>inapt</tt> (it is in the CSC Debian archive). If it hasn't previously been built for the current platform, clone and build it (TODO: describe how to do this).

Clone <tt>~git/public/packages.git</tt>, update it if necessary (notably updating <tt>nodes.ia</tt> to reflect the distribution and role of the machine), then run:
inapt *.ia

(Due to a bug, if a warning is thrown, this will segfault. Until fixed, just temporarily remove whatever packages it complains about from the list.)

Warning: this will take a long time due to the large number of packages being installed. Some of the below can be done once the relevant packages are installed, but while other packages are still being installed.

Note that inapt current uninstalls NetworkManager, which is what Ubuntu uses by default to configure the network. Once this completes, open <tt>/etc/network/interfaces</tt> and set up a static networking configuration (otherwise, networking will not come back up on reboot). It should look something like this:

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 129.97.134.xxx
netmask 255.255.255.0
gateway 129.97.134.1
network 129.97.134.0
broadcast 129.97.134.255
dns-nameservers 129.97.2.1 129.97.47.5 129.97.47.6
dns-search csclub.uwaterloo.ca uwaterloo.ca

For unattended upgrades in the future, install the <tt>unattended-upgrades</tt> package and copy <tt>/etc/apt/apt.conf</tt> from another host.

== Keys ==

If this is a reinstall of an existing host, copy back the SSH host keys and <tt>/etc/krb5.keytab</tt> from its former incarnation. Otherwise, create a new Kerberos principal and copy the keytab over, as follows (run from the host in question):
kadmin -p sysadmin/admin # or any other admin principal; the password for this one is the usual root password
addprinc -randkey host/[hostname].csclub.uwaterloo.ca
ktadd host/[hostname].csclub.uwaterloo.ca

This will generate a new principal (you can skip this step if one already exists) and add it to the local Kerberos keytab.

Also copy <tt>/etc/ssl/certs/GlobalSign_Intermediate_Root.pem</tt> from another host, as many of our services use a certificate issued by this CA.

== Configuration ==

=== General ===

The following config files are needed to work in the CSC environment (examples given below for an office terminal; perhaps refer to another host if preferred).

<tt>/etc/nsswitch.conf</tt>
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd: files ldap
group: files ldap
shadow: files
sudoers: files ldap

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files

netgroup: nis

<tt>/etc/ldap/ldap.conf</tt>

On ginseng, the shadow line also contains ldap.

# $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04 19:57:01 kurt Exp $
#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

BASE dc=csclub, dc=uwaterloo, dc=ca
URI ldaps://ldap1.csclub.uwaterloo.ca ldaps://ldap2.csclub.uwaterloo.ca

SIZELIMIT 0

TLS_CACERT /etc/ssl/certs/GlobalSign_Intermediate_Root.pem
TLS_CACERTFILE /etc/ssl/certs/GlobalSign_Intermediate_Root.pem

SUDOERS_BASE ou=SUDOers,dc=csclub,dc=uwaterloo,dc=ca

(On Debian, also copy <tt>/etc/sudo-ldap.conf</tt>.)

<tt>/etc/nslcd.conf</tt>
# /etc/nslcd.conf
# nslcd configuration file. See nslcd.conf(5)
# for details.

# The user and group nslcd should run as.
uid nslcd
gid nslcd

# The location at which the LDAP server(s) should be reachable.
uri ldap://ldap1.csclub.uwaterloo.ca
uri ldap://ldap2.csclub.uwaterloo.ca

# The search base that will be used for all queries.
base dc=csclub,dc=uwaterloo,dc=ca

# use the uniqueMember attribute for group membership
# (not applicable on Debian squeeze)
map group member uniqueMember

<tt>/etc/krb5.conf</tt>
[libdefaults]
default_realm = CSCLUB.UWATERLOO.CA
forwardable = true
proxiable = true

# remove this once NFS mounts without it
allow_weak_crypto = true

[realms]
CSCLUB.UWATERLOO.CA = {
kdc = kdc1.csclub.uwaterloo.ca
kdc = kdc2.csclub.uwaterloo.ca
admin_server = kadmin.csclub.uwaterloo.ca
}
(rest omitted for brevity)

Notably, <tt>allow_weak_crypto</tt> is currently needed to mount <tt>/users</tt> (though oddly, not <tt>/scratch</tt>. /music is sec=sys and thus will always mount, even when krb5 is down and/or broken). Otherwise, you will get a mysterious "permission denied" error (even though the server claims to have authenticated the mount successfully).

<tt>/etc/pam.d/common-account</tt>
#
# /etc/pam.d/common-account - authorization settings common to all services
#

# here are the per-package modules (the "Primary" block)
account [success=1 new_authtok_reqd=done default=ignore] pam_unix.so
# here's the fallback if no module succeeds
account requisite pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
account required pam_permit.so
# and here are more per-package modules (the "Additional" block)
account required pam_krb5.so minimum_uid=10000
# end of pam-auth-update config

# Make sure the user is up to date. System accounts and syscom are exempt.
account [success=2 default=ignore] pam_succeed_if.so quiet uid < 10000
account [success=1 default=ignore] pam_succeed_if.so quiet user ingroup syscom
account required pam_csc.so

This file is notably different on syscom-only hosts. Look at an existing syscom-only host to see the difference.

Alter <tt>/etc/default/nfs-common</tt> to enable <tt>statd</tt>, and more importantly <tt>gssd</tt> (needed for Kerberos NFS mounts). Start both daemons manually for now.

Add <tt>/users</tt>, <tt>/music</tt> and <tt>/scratch</tt> to <tt>/etc/fstab</tt> (as appropriate for the machine's role), make their mount points and mount them. Note that /music is sec=sys whereas /users and /scratch are both sec=krb5 (with exceptions granted on a case-by-case basis for servers only, office terminals are always sec=krb5 for security reasons).

To allow single sign-on as <tt>root</tt> (primarily useful for pushing files to all machines simultaneously), put the following in <tt>/root/.k5login</tt>:
sysadmin/admin@CSCLUB.UWATERLOO.CA

Also copy the following files from another CSC host:
* <tt>/etc/ssh/ssh_config</tt> and <tt>/etc/ssh/sshd_config</tt> (for single sign-on)
* <tt>/etc/ssh/ssh_known_hosts</tt> (to remove hostkey warnings within our network)
* <tt>/etc/hosts</tt> (for host tab completion and emergency name resolution)

=== Display Manager ===

LightDM (with unity-greeter) is the current display manager of choice for CSC office terminals. Copy <tt>/etc/lightdm/lightdm.conf</tt> and <tt>/etc/lightdm/users.conf</tt> from another CSC machine to configure it properly. If kdm or another display manager gets installed, please ensure that you continue to choose LightDM as the default display manager.

Please leave AccountsService enabled, as LightDM and certain parts of the GNOME packages work better when it is available.

The Unity greeter configuration is now in gsettings. We currently have a novelty wallpaper configured. To configure this, copy <tt>/usr/local/share/backgrounds/tarkin.png</tt> from another machine and run:

sudo -u lightdm dbus-launch gsettings set com.canonical.unity-greeter background /usr/local/share/backgrounds/tarkin.png

=== Tweaks ===

On Ubuntu precise, even when <tt>gnome-keyring</tt> is uninstalled, it leaves a config file behind that causes error messages. Remove <tt>/etc/pkcs11/modules/gnome-keyring-module</tt> to fix this.

== Records ==

You probably already created the host in the University IPAM system beforehand. If not, please do so.

Please also add the host to the [[Machine List]] here on the Wiki, and to <tt>/users/syscom/csc-machines</tt> (and <tt>csc-office-machines</tt>, if applicable).

= New Distribution =

If new distribution, create in conf/distributions AND conf/uploaders, and do rrr-update as well as rrr-incoming.
(TODO: expand this to describe building and pushing core CSC packages)

Mail

2012-05-23T01:35:12Z

Jy2wong: caffeine no longer does mail things. Also added a small guide for forwarding email elsewhere

Mail services are currently handled by [[Machine_List#mail|the mail container]] on [[Machine_List#glomag|glomag]].

== Reading your mail ==

You can use any user agent that supports maildir locally (mutt, alpine, etc), and any client that supports IMAP either locally or remotely. We also have webmail.

Here are the details:

* maildir
** Location: $HOME/.maildir/

* [[Webmail]]
** URL: https://mail.csclub.uwaterloo.ca/

* POP3
** No longer supported.

* IMAP
** Hostname: mail.csclub.uwaterloo.ca
** Port: 143 (IMAP), 993 (IMAPS)

* SMTP
** Hostname: mail.csclub.uwaterloo.ca
** SSL encryption and authentication required
** Port: 25, 465, or 587

== Spamfiltering ==

By default, we do not run any Bayesian Spamfilters on user email, as they stand a chance of false-positives leading to users not recieving legitimate mails. However, you can configure procmail (the application that postfix calls to deliver any mail that it recieved to the user that it was sent to) to pipe your message through spamassassin, and then optionally place it in special folders and/or delete it based on its spam score and/or whether it got flagged as spam or not. In order to do this, you need to configure procmail via .procmailrc in your home directory. An example such .procmailrc is below:

<nowiki>
#Begin spamfilter-enabled procmailrc
SHELL=/bin/sh
PATH=/bin:/usr/bin
LOGABSTRACT=all
MAILDIR=$HOME/.maildir
LOGFILE=$MAILDIR/procmail.log
VERBOSE=off

#Spamassassin start
:0fw: spamassassin.lock
| /usr/bin/spamc
#Spamassassin end

:0:
* ^X-Spam-Status: Yes
spam
#End spamfilter-enabled procmailrc</nowiki>

== Technical Details ==

=== Mail Transfer (Incoming) ===

[http://www.postfix.org/ Postfix] is our MTA and runs on mail. Incoming mail is received inbound on smtp/25 or ssmtp/465 and goes through a sequence of filters before being delivered to users.

We are using the following filters for incoming mail, to combat spam and malware:

* zen.spamhaus.org RBL
* Greylisting with postgrey

These filters reject truckloads of spam, preventing them from reaching your inbox. Greylisting adds a delay to mail delivery from unknown servers, but after a small number of successes they will be auto-whitelisted. If that isn't good enough, ask systems-committee@csclub.uwaterloo.ca to whitelist all mail to your address.

=== Mail Delivery ===

User mail is delivered, by default, to procmail. This is configurable by adding a comma-separated list of destinations in $HOME/.forward. See aliases(5) for more details.

Procmail, in turn, writes mail to $HOME/.maildir unless instructed otherwise. You can customize procmail by editing $HOME/.procmailrc. See procmailrc(5) for more details.

==== Failures ====

If you are out of quota or another error occurs writing to your home directory, procmail will deliver your message to /var/mail/$USER on the mail server. If that too fails, the server is probably on fire. The message will be returned to the queue where it will eventually bounce.

==== Forwarding ====

Place the following in $HOME/.forward to keep a local copy of your mail as well as forward it to some other email account. Replace ctdalek with your CSC username, but make sure the backslash stays.

<nowiki>
\ctdalek
calumt@dalek.com</nowiki>

=== Mail Retrieval ===

We run [http://www.dovecot.org Dovecot], an IMAP server. It reads messages from $HOME/.maildir, so if you have procmail deliver your mail elsewhere you will be unable to retrieve your mail using IMAP.

=== Mail Submission (Outgoing) ===

On the mail container, outgoing mail is submitted directly to Postfix via the sendmail(1) wrapper or on submission/587. Submitted mail is then queued for delivery to its destination. The other systems have no MTA and instead run sSMTP, which relays mail through the mail container immediately without any queue or daemon.

[[Category:Software]]

Mail

2012-05-23T00:15:55Z

Jy2wong: /* Spamfiltering */ put the .procmailrc example into one box rather than three

Mail services are currently handled by [[Machine_List#caffeine|caffeine]].

== Reading your mail ==

You can use any user agent that supports maildir locally (mutt, alpine, etc), and any client that supports POP3 or IMAP either locally or remotely. We also have webmail.

Here are the details:

* maildir
** Location: $HOME/.maildir/

* [[Webmail]]
** URL: https://mail.csclub.uwaterloo.ca/

* POP3
** Hostname: mail.csclub.uwaterloo.ca
** Port: 110 (POP3), 995 (POP3S)
** POP3 is considered deprecated. We would like to get rid of it someday, so please don't use it unless no other alternatives exist for you.

* IMAP
** Hostname: mail.csclub.uwaterloo.ca
** Port: 143 (IMAP), 993 (IMAPS)

* SMTP
** Hostname: mail.csclub.uwaterloo.ca
** SSL encryption and authentication required
** Port: 25, 465, or 587

== Spamfiltering ==

By default, we do not run any Bayesian Spamfilters on user email, as they stand a chance of false-positives leading to users not recieving legitimate mails. However, you can configure procmail (the application that postfix calls to deliver any mail that it recieved to the user that it was sent to) to pipe your message through spamassassin, and then optionally place it in special folders and/or delete it based on its spam score and/or whether it got flagged as spam or not. In order to do this, you need to configure procmail via .procmailrc in your home directory. An example such .procmailrc is below:

<nowiki>
#Begin spamfilter-enabled procmailrc
SHELL=/bin/sh
PATH=/bin:/usr/bin
LOGABSTRACT=all
MAILDIR=$HOME/.maildir
LOGFILE=$MAILDIR/procmail.log
VERBOSE=off

#Spamassassin start
:0fw: spamassassin.lock
| /usr/bin/spamc
#Spamassassin end

:0:
* ^X-Spam-Status: Yes
spam
#End spamfilter-enabled procmailrc</nowiki>

== Technical Details ==

=== Mail Transfer (Incoming) ===

[http://www.postfix.org/ Postfix] is our MTA and runs on mail. Incoming mail is received inbound on smtp/25 or ssmtp/465 and goes through a sequence of filters before being delivered to users.

We are using the following filters for incoming mail, to combat spam and malware:

* zen.spamhaus.org RBL
* Greylisting with postgrey

These filters reject truckloads of spam, preventing them from reaching your inbox. Greylisting adds a delay to mail delivery from unknown servers, but after a small number of successes they will be auto-whitelisted. If that isn't good enough, ask systems-committee@csclub.uwaterloo.ca to whitelist all mail to your address.

=== Mail Delivery ===

User mail is delivered, by default, to procmail. This is configurable by adding a comma-separated list of destinations in $HOME/.forward. See aliases(5) for more details.

Procmail, in turn, writes mail to $HOME/.maildir unless instructed otherwise. You can customize procmail by editing $HOME/.procmailrc. See procmailrc(5) for more details.

==== Failures ====

If you are out of quota or another error occurs writing to your home directory, procmail will deliver your message to /var/mail/$USER on the mail server. If that too fails, caffeine is probably on fire. The message will be returned to the queue where it will eventually bounce.

=== Mail Retrieval ===

We run [http://www.dovecot.org Dovecot], a POP3 and IMAP server. It reads messages from $HOME/.maildir, so if you have procmail deliver your mail elsewhere you will be unable to retrieve your mail using POP3 or IMAP.

=== Mail Submission (Outgoing) ===

On caffeine, outgoing mail is submitted directly to Postfix via the sendmail(1) wrapper or on submission/587. Submitted mail is then queued for delivery to its destination. The other systems have no MTA and instead run sSMTP, which relays mail through caffeine immediately without any queue or daemon.

[[Category:Software]]

Past Executive

2012-03-24T19:48:18Z

Jy2wong: filled in names

__NOTOC__
= Definitions =
#define PR President
#define VP Vice-president
#define TR Treasurer
#define SE Secretary
#define SA Sysadmin
#define OF Office Manager
#define LI Librarian
#define FL Flasher
#define DE Deity
#define WW Webmaster
#define OF Office Manager
#define SE-TR Secretary-Treasurer (Position was split)

=Founding 1967-1968=

Sponsor - J. Peter Sprung
PR: K. Rugger
VP: R. Jaques
SE-TR: G. Sutherland

Founding Members:
B. Kindree
R. Melen
V. Neglia
R. Charney
R. Truman
Glenn Berry
D. Meek

=1968-1969=

SE-TR: Glenn Berry

=1969-1970=

Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.

===A note on ACM affiliation===

The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970

=1971=

James W. Welch is the only person sending letters for the club. Later signs them Vice-President. Continues this for most of the year. Either he was VP throughout 3 terms or we were on calendar year elections then.

=1972=

It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.

===Winter===

PR: Mike Campbell
SE: Doug Lacy

there is also stuff from James W. Welch without a position. Considering his work in the founding and that the letters are speaker invitations he is, with high probability, VP this term.

===Spring===

===Fall===

PR: Ian McIntosh

=1973=

Faculty Sponsor: Morven Gentleman

===Winter===
===Spring===

Either secretary or VP: Jim Parry (sent the only letter on file, but it is a speaker invite, did not sign his position).

===Fall===

PR: Jim Parry
VP: Ray Walden
TR: Slavko Stemberger
SE: Mario Festival

=1974-1977=

Faculty Sponsor: Morven Gentleman??

Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.
Sylvia Eng: 1975/6 as some position.
Dave Buckingham: a VP at some point
Allison Nolan: 1977 time
Peter ??: 1977
Russel Crook???
Dennis Ritchie came

=1987=

Jim Boritz was president in Fall 1987 (Source: http://csclub.uwaterloo.ca/misc/procedure.pdf)

=1988=

Jim Boritz was president in Winter 1988. (Source: http://csclub.uwaterloo.ca/misc/procedure.pdf)
Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Robyn Stewart did as an assignment in 1991-1992 for some class at UBC
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was out first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.

===Fall===

SA: Wade Richards

=1989=
===Winter===

http://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg

Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ???

PR: Kevin W. Smith ?? (derived from a signature, may be a bad reading)
VP: Angela Chambers
TR:
SE: Sean Goggin
SA: Wade Richards / Ross Ridge

(President Kevin Smith confirmed: http://csclub.uwaterloo.ca/misc/procedure.pdf)

===Spring===
===Fall===

PR: Sean Goggin
SA: Ross Ridge

=1990=
===Winter===
===Spring===

SE: Robyn Steward

===Fall===
PR: Wade Richards
Kivi Shapiro - attended mathsoc meeting on our behalf.
- Censured by mathsoc for his actions during the election.
Shannon Mann - attended mathsoc meeting on our behalf.
SE: Robyn Stewart - attended mathsoc meeting on our behalf.

=1991=
===Winter===
Shannon Mann - attended mathsoc meeting on our behalf.
Ed Bourne - attended mathsoc meeting on our behalf.
SE: Robyn Stewart

===Spring===
Jason Knell - attended mathsoc meeting on our and PMC's behalf.
===Fall===
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.

=1992=
===Winter===
SE: Brent Williams

===Spring===
PR: Dale Wick
TR: Stephen Mills
===Fall===

=1993=
===Winter===
===Spring===
TR: Mark Tompsett
===Fall===

=1994=

===Winter===
PR: Ian Goldberg (?)
SE: Tom Rathbourne
LI: Michael Van Biesbrouck

===Spring===
PR: Dale Wick (?)
SA: Ian Goldberg (?)

===Fall===
PR: Ross Ridge
VP: Tom Rathbourne (?)
SA: Zygo Blaxell
LI: Michael Van Biesbrouck

=1995=
===Winter===
===Spring===
===Fall===
PR: Amy Brown (arbrown)
VP: Christina Norman (cbnorman)
TR: Steven Mills (samills)
SE: Allyson Graham (akgraham)
SA: Gavin Peters

=1996=
===Winter===
PR: Nikita Borisov (nborisov)
VP: Joseph Deu Ngoc (dtdeungo)
TR: Stephen Mills (samills)
SE: Sharlene Schmeichel (saschmei)
SA: Dave Brown (dagbrown)
OF: Somsack Tsai (stsai)
LI: Devin Carless (dccarles)
FL: Allyson Graham (akgraham)
DE: Ian Goldberg (iagoldbe)

===Spring===
PR: Blake Winton (bwinton)
VP: Nick Harvey (njaharve)
TR: Nikita Borisov (nborisov)
SE: Viet-Trung Luu (vluu)
SA: Drew Hamilton (awhamilt)
OF: Jillian Arnott (jarnott)
LI: Ross Ridge (rridge)
FL: Devin Carless (dccarles)

=== Fall ===
PR: Shannon Mann (sjbmann)
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)
TR: Michal Van Biesbrouck (mlvanbie)
SE: Nikita Borisov (nborisov)
SA: Chris Rovers
OF: Dax Hutcheon (ddhutche)
LI: Aliz Csenki (acsenki)
FL: Aaron Chmielowiec (archmiel)
DE: Skuld (no uwuserid yet...)

=1997 =

===Winter===
PR: Dima Brodsky
VP: Nikita Borisov
TR: Stephen Mills
SE: Evan Jones (ejones)
SA: Alex Brodsky
OF: Chris Doherty
LI: Matt Corks
FL: Paul Prescod

=== Fall ===
PR: Chris Rovers (cdrovers)
VP: Michael van Biesbrouck (mlvanbie)
TR: Somsack Tsai (stsai)
SE: Matt Corks (mvcorks)
SA: Lennart Sorensen (lsorense)
LI: Chmielowiec (archmiel)
OF: Devin Carless (dccarles)
FL: Aaron Chmielowiec (archmiel)

= 1998 =
=== Winter ===
PR: Suresh Naidu
VP: Viet-Trung Luu
TR: Tim Coleman
SE: Dax Hutcheon
Librarian: Dax Hutcheon
Flasher: Dax Hutcheon
Webmaster: Dax Hutcheon
SA: Robin Powell
OF: Aaron Chmielowiec

=== Spring ===

Position Name You might call them...
President roconnor Russell O'Connor
Vice-president trwcolem Tim Coleman
Treasurer knzarysk Karl Zaryski
Secretary (bwinton) (Blake Winton)
Sysadmin wbiggs Billy Biggs
Librarian snaidu Suresh Naidu
Flasher pechrysl Paul Chrysler
Office Manager dccarles Devin Carless
WWWW trwcolem Tim Coleman

=== Fall ===

President Joe Deu Ngoc jtdeungo
Vice-President Wai Ling Yee wlyee
Treasurer Fjord j2lynn
Secretary Matt Corks mvcorks
Sysadmin Andrew Hamilton awhamilt

World Wide Web Wench Dax Hutcheon ddhutche
Office Manager Richard Bell rlbell
Librarian Damian Gryski dgryski
Flasher Paul Chrysler pechrysl
Official Deity Ian Goldberg iagoldbe
Official Chairbeing Calum T. Dalek calum

=1999=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:

=== Spring ===

=== Fall ===

=2000=
=== Winter ===
PR: Will Chartrand (wgchartr)
VP: Gavin Duggan (geduggan)
TR:
SE:
SA: Lennart Sorensen (lsorense)
OF:

=== Spring ===

=== Fall ===
PR: geduggan
VP:
TR:
SE:
SA: bioster
OF:

=2001=
=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=== Spring ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=== Fall ===

=2002=
http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php
=== Winter ===
PR: Billy Biggs
VP: Stefanus Du Toit
TR: Melissa Basinger
SE: James Perry
SA: Barry Genova
Librarian: Ryan Golbeck
Webmaster: Jonathan Beverley
Office Manager: Sayan Li

=== Spring ===
PR: Alex Pop
VP: Melissa Basinger
TR: Siyan Li
SE: James A Morrison
SA: Jonathan Beverley
Webmaster: Stefanus Du Toit

=== Fall ===
PR: James A. Morrison
VP: Stefanus Du Toit
TR: James Perry
SE: Michael Biggs
SA: Ryan Golbeck
Librarian: Mark Sherry, Cassandra Schopf
Webmaster: Stefanus Du Toit

=2003=
=== Winter ===
PR: Kannan Vijayan (kvijayan)
VP: Meg Darragh (m2darrag)
TR: James Perry (jeperry)
SE: Wojciech Kosnik (wkosnik)
SA: Stefanus Du Toit (sjdutoit)
LI: Simon Law (sfllaw)
WM: Julie Lavoie (jlavoie)

=== Spring===
===Fall===
PR: Stefanus Du Toit (sjdutoit)
VP: Meg Darragh (m2darrag)
TR: Tor Myklebust (tmyklebu)
SE: James Perry (jeperry)
SA: Simon Law (sfllaw)
OF:

=2004=
===Winter===
PR: Simon Law (sfllaw)
VP: fspacek
TR: ljain
SE: Julie Lavoie (jlavoie)
SA: Tor Myklebust(tmyklebu)
OF:

===Spring===
PR: dnmorton ?
VP: Tim Loach (tloach)
TR: Michael Biggs (mbiggs)
SE: Lesley Northam (lanortha)
SA:
OF:

===Fall ===
PR: jeperry
VP: mtsay
TR: Mark Sherry (mdsherry)
SE: Tor Myklebust (tmyklebu)
SA: jlavoie
OF:

=2005=
===Winter===

PR: mtsay
VP: Lesley Northam (lanortha)
TR: Holden Karau (hkarau)
SE: domorton
SA: Tor Myklebust (tmyklebu)
OF:

===Spring===

PR: Mark Sherry (mdsherry)
VP: Martin Kess (mdkess)
TR: Ali Piccioni (apiccion)
SE: Michael Biggs (mbiggs)
SA: Tor Myklebust (tmyklebu)
OF:

===Fall===

PR: Tim Loach (tloach)
VP: Lesley Northam (lanortha)
TR: Caelyn McAulay (cmcaulay)
SE: The Professor
SA: Holden Karau (hkarau)
OF:

=2006=

===Winter===

PR: Tor Myklebust (tmyklebu)
VP: Michael Druker (mdruker)
TR: Caelyn McAulay (cmcaulay)
SE: Mark Sherry (mdsherry)
SA: William O'Connor (woconnor)
OF:

===Spring===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: David Tenty (daltenty)
SE: Chris Evensen (cevensen)
SA: Holden Karau (hkarau)
OF:

===Fall===

PR: Martin Kess (mdkess)
VP: Mark Sherry (mdsherry)
TR: Sylvan L. Mably (slmably)
SE: Caelyn McAulay (cmcaulay)
SA: William O'Connor (woconnor)

=2007=

===Winter===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: Caelyn McAulay (cmcaulay)
SE: David Tenty (daltenty)
SA: Holden Karau (hkarau)
Webmaster: jnopporn
OF:

===Spring===
PR: Gaelan D'costa (gdcosta)
VP: Kyle Larose (kmlarose)
TR: Kyle Spaans (kspaans)
SE: Erik Louie (elouie)
SA: Michael Spang (mspang)
Librarian: David Tenty (daltenty)
OF:

===Fall ===
PR: Holden Karau (hkarau)
VP: Alex McCausland (amccausl)
TR: Dominik Chlobowski (dchlobow)
SE: Sean Cumming (sgcummin)
SA: David Tenty (daltenty)
OF:
WW: dtbartle / jnopporn

=2008=
===Winter ===
PR: Sean Cumming (sgcummin)
VP: Matt Lawrence (m3lawren)
TR: Mateusz Tarkowski (mtarkows)
SE: Edgar Bering (ebering)
SA: Jordan Saunders (jmsaunde)
OF:

===Summer ===
PR: b4taylor
VP: qxi
TR: m3lawren
SE: nguenthe
SA:
OF:

===Fall ===
PR: Matthew Lawrence (m3lawren)
VP: Edgar Bering (ebering)
TR: Michael Gregson (mgregson)
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski
SA: Kyle Spaans (kspaans)
OF:

=2009=
===Winter===
PR: Michael Gregson (mgregson)
VP: Edgar Bering (ebering)
TR: Brennan Taylor (b4taylor)
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins)
SA: Jacob Parker (j3parker)
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)

===Spring ===
PR: Michael Spang (mspang)
VP: Jacob Parker (j3parker)
TR: Sapphyre Gervais (sagervai)
SE: Matthew McPherrin (mimcpher)
SA: Anthony Brennan (a2brenna)
OF:

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Michael Spang (mspang)
SE: Brennan Taylor (b4taylor)
SA: Michael Ellis (m2ellis)
OF: Rebecca Putinski (rjputins)

=2010=
===Winter===
PR: Kyle Spaans (kspaans)
VP: Edgar Bering (ebering)
TR: Sapphyre Gervais (sagervai)
SE: Ajnu Jacob (ajacob)
SA: Matthew Thiffault (mthiffau)
OF: Jacob Parker (j3parker)

Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr

===Spring===
PR: Jeff Cameron (j3camero)
VP: Brennan Taylor (b4taylor)
TR: Vardhan Mudunuru (vmudunur)
SE: Matthew Lawrence (m3lawren)
SA: Michael Ellis (m2ellis)
OF: Edgar Bering (ebering)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Rebecca Putinski (rjputins)
SE: Kyle Spaans (kspaans)
SA: Jeremy Roman (jbroman)
OF: Amir Sayed Khader (askhader)

=2011=
===Winter===
PR: Edgar Bering (ebering)
VP: Jennifer "Emily" Wong (jy2wong)
TR: Kyle Spaans (kspaans)
SE: Elana "Alana" Hashman (ehashman)
SA: Peter "Bofh" Barfuss (pbarfuss)
OF: Marc Burns (Marc Burns)

===Spring===
PR: Matthew Thiffault (mthiffau)
VP: Matthew McPherrin (mimcpher)
TR: Kyle Spaans (kspaans)
SE: Kwame Andrew Ansong (kansong)
SA: Jeremy Brandon Roman (jbroman)
OF: Jennifer "Emily" Wong (jy2wong)

===Fall===
PR: Marc Burns (m4burns)
VP: Katharine Hyatt (kshyatt)
TR: Jacob Parker (j3parker)
SE: Elana Hashman (ehashman)
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)
OF: Kyle Spaans (kspaans)
LIB: Edgar Bearing (ebering)

=2012=
===Winter===
PR: Marc Burns (m4burns)
VP: Elana Hashman (ehashman)
TR: Jacob Parker (j3parker)
SE: Matthew McPherrin (mimcpher)
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: Jennifer "Emily" Wong (jy2wong)

Wireless

2012-02-27T17:47:05Z

Jy2wong: added eduroam configs for netcfg(arch linux), wicd

'''csc-wireless no longer exists. Members are advised to use eduroam or uw-unsecured.'''

== Rosetta Stone ==

=== Linux ===
==== netcfg ====
Toss this into /etc/network.d/, making sure you edit identity and password. sudo netcfg eduroam

CONNECTION='wireless'
INTERFACE=wlan0
SECURITY='wpa-configsection'
# Uncomment this if your ssid is hidden
#HIDDEN=yes
IP='dhcp'
CONFIGSECTION='
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
#anonymous_identity="anonymous"
identity="userid@uwaterloo.ca"
password="hunter2"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
priority=1'

==== wicd ====
Toss this into /etc/wicd/encryption/templates/ and edit /etc/wicd/encryption/templates/active to include a line with eduroam.

name = Eduroam UW
author = Steven She
version = 1
require username *Username password *Password
-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="$_ESSID"
scan_ssid="$_SCAN"
proto=RSN
key_mgmt=WPA-EAP
pairwise=CCMP
group=CCMP
eap=PEAP
identity="$_USERNAME"
password="$_PASSWORD"
ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
phase2="auth=MSCHAPV2"
}

The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

[[Category:Systems]]