CSCWiki - User contributions [en]

How to IRC

2025-09-18T05:59:22Z

R389li: /* syscom */ Add Cloaks section

Chat with us!

== The Lounge ==
We have a web UI for IRC at [https://chat.csclub.uwaterloo.ca The Lounge].
[[File:The_lounge_screenshot.png|alt=The Lounge screenshot of #csc channel|400px|thumbnail|A screen capture of the #csc channel, as seen from The Lounge web client]]
If you are a first-time IRC user, this is by far the easiest way to join.
The steps are (roughly):
<ol>
<li> Login using your CSC credentials. </li>
<li> Follow the prompts to join the Libera server (make sure TLS is enabled). </li>
<li> Type <code>/join #csc</code> </li>
<li> Say hi! </li>
</ol>

If you are a termcom member, you will need to join the #csc-termcom channel, which requires nick (nickname) registration. To do this, run the following commands in The Lounge (or any IRC client):
<pre>
/nick my_nickname
/msg NickServ REGISTER my_password my_email@example.com
</pre>
Fill in your nickname, password and email as appropriate. You will receive an email from Libera asking you to verify your email address.
Once you have done so, go back to The Lounge, go the Libera window, click on the three-dots button in the top right corner, and click "Edit this network". There, you can specify the nick and password which you just created.
== Mattermost ==
[[File:Mattermost-csc-sample.png|alt=Mattermost #csc screen capture, including a conversation between members of the channel|372x372px|right|thumbnail|A screen capture of the #csc channel, as seen from Mattermost desktop]]

[[File:Mattermost-phone-sample.jpg|alt=Mattermost android screenshot of #csc channel|362x362px|thumbnail|A screen capture of the #csc channel, as seen from Mattermost Android client]]
We self-host [https://mattermost.csclub.uwaterloo.ca/ Mattermost] now, it's easier to use if you're not familiar with IRC. If you know how to use IRC, we're #csc on libera.chat and there should be a #csc bridge that relays messages between #csc and our Mattermost instance.

Both #csc on libera.chat ([https://web.libera.chat/#csc Libera Webchat] or via IRC clients e.g. irssi, weechat) and ~csc on Mattermost are official channels to interact with CSC members!

=== Mattermost Setup ===

Make an account at [https://mattermost.csclub.uwaterloo.ca/signup_email our self-hosted Mattermost]. For username, you can put your questid (i.e. your CSC username), although you can always set your full name as it will appear in Mattermost.

The benefit of Mattermost over Slack and family is that Slack stores all your information on Slack's servers, wherever they are in the US. They do this so they can sell your data back to you (e.g. not allowing you to see old messages), but Slack is also closed-source even though it was derived from IRC. Mattermost is open-source and hosted on CSC servers.

For iOS users, Mattermost's mobile app is also a superior option if you wish to receive push notifications as it supports Apple's native push via iCloud/APN.

== Weechat ==

[[File:Glowing-bear-screencap.png|alt=glowing-bear screen capture of #csc IRC channel|right|thumbnail|450px|A screen capture of the #csc IRC channel, as seen from glowing-bear client]]

[[File:Weechat-Android-screenshot.png|alt=Weechat Android screen capture of #csc IRC channel|right|thumbnail|A screen capture of the #csc IRC channel, as seen from Weechat Android client]]

This method will establish a persistent IRC session that you can connect to with different clients. A [https://weechat.org/ weechat] server program running on a CSClub server will remain connected to IRC networks at all times, and simply connecting to your <code>weechat</code> server program will give you all the chat history upon connection.

To set up your <code>weechat</code> server program:
<ol>
<li>Log in to a CS Club general-use server, such as <code>neotame.csclub.uwaterloo.ca</code>, and run <code>weechat</code> in such a way that it will keep running after you log out.</li>

Replace ctdalek with your username:

<pre>
$ ssh ctdalek@neotame.csclub.uwaterloo.ca
$ screen -U weechat
</pre>

A "WeeChat" window should have opened up. Type the following commands into this window, replacing [yourpassword] with a password of your choice and [yourport] with a number in the range of [28100-28400]:

<pre>
/set relay.network.password [yourpassword]
/relay add weechat [yourport]
/save
</pre>

Once you have entered in all these commands, you don't need your terminal anymore. You can close your ssh window!

<li>Your personal WeeChat server is set up. Now connect to it using a pretty client:</li>

[http://www.glowing-bear.org/ glowing-bear]

is a free and open source web-based weechat client. It works well as a desktop client, and on iOS. To connect using glowing-bear, fill in "Connection Settings" with <code>neotame.csclub.uwaterloo.ca</code>, <code>[yourport]</code>, and <code>[yourpassword]</code>. Make sure to use the <code>http</code> version of the website with this guide! <code>https</code> only works if you set up encryption. That's not covered here.

'''Recommended''': [https://play.google.com/store/apps/details?id=com.ubergeek42.WeechatAndroid Weechat Android] is a free and open source android <code>weechat</code> client. It gives notifications when your receive a direct message or your name is mentioned in one of the channels you are in. To connect using Weechat Android, fill in Settings > Connection with <code>neotame.csclub.uwaterloo.ca</code>, <code>[yourport]</code>, and <code>[yourpassword]</code>.

<li>Join the #csc IRC channel</li>

In your weechat client (e.g. glowing-bear or Weechat Android), switch to the 'Libera' tab and type:

<pre>
/server add libera irc.libera.chat/6697 -ssl -autoconnect
/set irc.server.libera.autojoin "#csc"
/save
/connect libera
</pre>

You're now connected to the main IRC network! Connected by an SSL connection, so you're super sneaky as well. Way to go.

Now, to join the CSC channel!

In your client, you'll now have two buffers that you can switch to. One is called "weechat" and the other is "libera".

Switch to the "libera" buffer and type:

/join #csc

Congratulations you win!

<li>Know some IRC commands</li>

Welcome to the channel! Go ahead and say something, like

<pre>
Good morning ctdalek http://www.total-knowledge.com/~ilya/mips/ugt.html
</pre>

If you want to privately message someone, use

<pre>
/q [nick] [optional message]
</pre>

which will open a new tab with that person. For example <code>/q pj2melan ping pong</code>.

If you want to join another channel, use
<pre> /join [channel]
</pre>

For example <code>/join #csc</code>.
</ol>
''Note about CSClub server restarts:'' If <code>neotame</code> or any server you're using to run the <code>weechat</code> program on is restarted for any reason (we'll email you if it does), Make sure to run <code>screen -U weechat</code> again to start your server. You won't have to reconfigure <code>weechat</code> (step 2) though.

=== Securing Glowing Bear - SSL/TLS Setup ===

With the default setup, when you log in to your <code>weechat</code> relay using a client such as glowing-bear or Weechat Android, ''your password is sent in the clear''. If you believe this to be a bad thing, follow these steps to enable SSL encryption between you and your <code>weechat</code> relay running on <code>neotame</code>.

<ol>
<li>Log in to <code>neotame.csclub.uwaterloo.ca</code> to generate an SSL certificate:

<pre>
$ ssh neotame.csclub.uwaterloo.ca
$ mkdir ~/.weechat/ssl
$ cd ~/.weechat/ssl
$ openssl req -nodes -newkey rsa:4096 -keyout relay.pem -x509 -days 365 -out relay.pem # Fill in the fields as it asks
$ exit
</pre>
</li>

<li>Tell <code>weechat</code> to use the new certificate you generated, and add a new relay with a different password (since your old password was likely compromised):

<p>In your <code>weechat</code> client (glowing-bear, or Weechat Android), run</p>

<pre>
/set relay.network.password [newpassword]
/relay sslcertkey
/relay del weechat
/relay add ssl.weechat [yourport]
</pre>
</li>

<li>Tell your client to connect to your relay using SSL:

<p>For glowing-bear, refresh and simply check the "Encryption. Check settings for help." checkbox when logging in with your new password.</p>

<p>For Weechat Android, in Settings > Connection, change Connection type to WeeChat SSL and change your Relay password.</p>
</li>

</ol>

Enjoy fully encrypted communication!

You might have warnings about untrusted certificates, but since you made the certificate yourself you can trust yourself and add required security exceptions.

== Quick SSH-based Setup ==

1. Open up an IRC client, i.e. <code>irssi</code>. Launch <code>irssi</code> in a screen session, which you
can return to later.

$ ssh neotame.csclub.uwaterloo.ca
$ screen -U irssi

2. In irssi, connect to the libera network and join our channel.

/server add -auto -net libera -ssl -ssl_verify irc.libera.chat 6697
/save
/connect libera
/join #csc

3. Please set your nickname to your Quest ID so we know who you are.

/nick $YOUR_QUEST_ID
/save

You can register your nickname on the libera network by messaging NickServ.

/msg NickServ REGISTER password email

4. Close your screen session, which you can return to later.

CTRL-A CTRL-D

5. Return to your screen session. You will have remained connected to the channel.

$ ssh neotame.csclub.uwaterloo.ca -t "screen -Urd"

== Emacs ==
If you are comfortable with Emacs, then you can also configure the editor to act as an IRC client via <code>erc</code>. For a quick introduction, you can run <code>M-x erc-tls</code>where you will be prompted for a server, a port (the defaults are correct), and a nickname. For a detailed overview of possible configuration options see the [https://www.emacswiki.org/emacs/ERC ERC Emacs Wiki]. To prettify the default display and for simiilar QOL changes, consider applying some of the configuration options from [https://systemcrafters.cc/live-streams/june-04-2021/ this guide] by System Crafters.

=== ZNC.el ===
To keep track of chat logs while your machine is powered down, consider setting up [[ZNC]] with the help of [https://www.emacswiki.org/emacs/ErcZNC ZNC.el].

== Cloaks ==
raymo (and bandali as a backup, but please don't bother him unless raymo is dead*) is a registered Libera #csc community owner and can give you a cloak of your choosing (csc/member/username is the usual, csc/syscom/username for syscom members and csc/sysadmin/username for the sysadmin) upon request (you must ask him nicely).

Note to self (raymo): /join #libera-communities -> "Hey folks, could we please give X the csc/Y cloak? Thanks!"

Note to everyone else (except bandali/other community owners): this will not work if you are not a community owner

Further note: Libera discourages frequent updates of community ownership, so we have never changed ownership since we moved to Libera from Freenode. raymo will be around for many many terms anyway...

= syscom =

To kick (and optionally ban) a user:

/cs op #<channel>
/mode #<channel> +b <nick_to_ban>
/kick <nick_to_kick>
/mode -o <your_nick>

If the user need not be banned you can skip the second line. If other accounts from the same user/host should be banned, replace <code>nick_to_ban/kick</code> with <code>nick!username@host</code>.

<nowiki>*</nowiki>in which case you have more things to worry about and should probably find another Libera community owner for #csc

Machine List

2024-06-24T20:34:06Z

R389li: Add details about Cobalamin

Most of our machines are in the E7, F7, G7 and H7 racks (as of Jan. 2022) in the MC 3015 server room. There is an additional rack in the DC 3558 machine room on the third floor. Our office terminals are in the CSC office, in MC 3036/3037.

= Web Server =
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.

== ''caffeine'' ==

Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.

''(Redundant active backup coming soon...)''

==== Specs ====

* LXC virtual machine hosted on [[Machine List#phosphoric-acid|phosphoric-acid]]
** 12 vCPUs
** 32GB of RAM

==== Services ====

* Club and member web sites with [https://www.apache.org/ Apache]
* [[MySQL]] databases
* [[PostgreSQL]] databases
* [[ceo]] daemon

==''mathnews''==

[[#xylitol|xylitol]] hosts a systemd-nspawn container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.

= General-Use Servers =

These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no cryptocurrency mining).

For computationally-intensive jobs (CPU/memory bound) we recommend running on high-fructose-corn-syrup, carbonated-water, sorbitol, mannitol, or corn-syrup, listed in roughly decreasing order of available resources. For low-intensity interactive jobs, such as IRC clients, we recommend running on neotame. '''<u>If you have a long-running computationally intensive job, it's good to nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.</u>'''

== ''corn-syrup'' ==

Dell PowerEdge 2950

==== Specs ====

* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)
* 32 GB RAM
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29
* IPMI mac addr 00:24:e8:52:41:2b
* 3 × Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)

==== Notes ====

* Use eth0/Gb0 for the mathstudentorgsnet connection

==== Services ====

* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)

== ''high-fructose-corn-syrup'' ==

High-fructose-corn-syrup (or hfcs) is a large SuperMicro server. It's been in CSC service since April 2012.

==== Specs ====

* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)
* 192 GB RAM
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]
* 500 GB Seagate Barracuda
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]
'''Notes'''

* Missing moba IO shield (as of January 2024)

== ''carbonated-water'' ==

carbonated-water is a Dell R815 provided by CSCF.

==== Specs ====

* 4x AMD Opteron 6176 processors (2.3 GHz, 12 cores each)
* 128GB RAM

== ''neotame'' ==

neotame is a SuperMicro server funded by MEF. It is the successor to taurine.

'''We strongly discourage running computationally-intensive jobs''' on neotame as many users run interactive applications such as IRC clients on it and any significant service degradation will be more likely to affect other users (who will probably notice right away).

==== Specs ====

* 2x Intel Xeon E5-2630 v4 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM
'''Notes'''
* SSH server also listens on ports 21, 22, 53, 80, 81, 443, 8000, 8080 for your convenience.

== ''sorbitol'' ==

sorbitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 v4 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM
== ''mannitol'' ==

mannitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 v4 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM

= Office Terminals =

It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.

== ''cyanide'' ==
cyanide is a [https://support.apple.com/kb/sp710 Mac Mini (Late 2014)], identical in specification to powernap

=== Spec ===

* Intel i7-4578U (4) @ 3.500GHz
* 16GB RAM
* Intel Iris Graphics 5100
* 256GB On-board SSD

== ''suika'' ==

Suika is an office terminal built from various components donated by our members.

==== Specs ====

* AMD Ryzen 7 2700X
* 2x 8GB DDR4
* 1x Samsung 256GB SSD
* AMD Radeon RX 550 4GB

==''powernap''==
powernap is a [https://support.apple.com/kb/sp710 Mac Mini (Late 2014)].

=== Spec ===

* Intel i7-4578U (4) @ 3.500GHz
* 16GB RAM
* Intel Iris Graphics 5100
* 256GB On-board SSD

=== Speaker ===
powernap has the office speakers (a pair of nice studio monitors) currently connected to it.

=== Services ===
* MPD for playing music. Only office/termcom/syscom can log into powernap. Use `ncmpcpp` to control MPD.
** TODO: this is not the case anymore
* Bluetooth audio receiver. Only syscom can control bluetooth pairing. Use `bluetoothctl` to control bluetooth.

Music is located in `/music` on the office terminals.

= Progcom Only =
The Programme Committee has access to a VM on corn-syrup called 'progcom'. They have sudo rights in this VM so they may install and run their own software inside it. This VM should only be accessible by members of progcom or syscom.

= Codey Bot Only =
Ran on CSC Cloud in a separate Cloudstack project. codey-staging, codey-dev, codey-prod.

TODO: migrating from cloudstack

= Syscom Only =

The following systems are only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.

==''xylitol''==

xylitol is a Dell PowerEdge R815 donated by CSCF. It is primarily a container host for services previously hosted on aspartame and dextrose, including munin, rt, mathnews, auth1, and dns1. It was provisioned with the intent to replace both of those hosts.

==== Specs ====

* Dual AMD Opteron 6176 (2.3 GHz, 48 cores total)
* 128GB RAM
* 500GB volume group on RAID1 SSD (xylitol-mirrored)
* 500ish-GB volume group on RAID10 HDD (xylitol-raidten)

==''auth1''==

Container on [[#xylitol|xylitol]].

==== Services ====

*[[LDAP]] primary
*[[Kerberos]] primary

==''chat''==

Container on [[#xylitol|xylitol]].

==== Services ====

* The Lounge web IRC client (https://chat.csclub.uwaterloo.ca)

==''phosphoric-acid''==

phosphoric-acid is a Dell PowerEdge R815 donated by CSCF and is a clone of xylitol. It may be used to provide redundant cloud services in the future.

==== Specs ====

* (clone of Xylitol)

==== Services ====

*[[#caffeine|caffeine]]
*[[#coffee|coffee]]

==''coffee''==

Virtual machine running on phosphoric-acid.

==== Services ====

*[[Database#MySQL|MySQL]]
*[[Database#Postgres|Postgres]]

==''cobalamin''==

Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics, on Science Computing Rack 2. NICs are plugged into A1 and A2 on the adjacent rack. Acts as a backup server for many things.

TODO: should replace with another Syscom server when Science Computing clears out the rack (ETA before 09/2024)

==== Specs ====

* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)
* 16GB RAM
* Broadcom NetworkXtreme II
* 2x73GB Hard Drives, hardware RAID1
** Soon to be 2x1TB in MegaRAID1
*http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration

==== Services ====

* Containers: [[#auth2|auth2]] (kerberos)

==== Notes ====

* '''TODO: Mega unreliable.''' (Goes down once every few weeks... due to power outages in the PHYS server room)
** It is plugged into a UPS but the UPS has dead batteries.
* The network card requires non-free drivers. Be sure to use an installation disc with non-free.

* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:
** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248
* Physical access to the PHYS server rooms can be acquired by visiting Science Computing in PHYS 2006.

==''auth2''==

Container on [[#cobalamin|cobalamin]].

==== Services ====

*[[LDAP]] secondary
*[[Kerberos]] secondary

MAC Address: c2:c0:00:00:00:a2

==''mail''==

mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

TODO: "HA"-ish configuration

==== Specs ====

* currently hosted on [[#xylitol|xylitol]]

==== Services ====

*[[Mail]] services
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])
*[[Webmail]]
*[[ceo]] daemon

==''sodium-benzoate''==

Sodium-benzoate is our previous mirror server, funded by MEF.

It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.

==== Specs ====

* Intel Xeon Quad Core E5405 @ 2.00 GHz
* 16GB RAM
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)

Space disks are currently in the office underneath maltodextrin.

TODO: gone??

==''potassium-benzoate''==

potassium-benzoate is our mirror server, funded by MEF.

==== Specs ====

* 36 drive Supermicro chassis (SSG-6048R-E1CR36L)
* 1 x Intel Xeon E5-2630 v3 (8 cores, 2.40 GHz)
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM
* 2 x 1 TB Samsung Evo 850 SSD drives
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)
* 9 x 18TB Seagate Exos X18 (8 ZFS, Z2,1 hot-spare)
* 10 Gbps SFP+ card (loaned from CSCF)
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)

==== Network Connections ====

potassium-benzoate has two connections to our network:

* 1 Gbps to our switch (used for management)
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)

Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.

==== Services ====

*[[Mirror]]
*[[Talks]] mirror
*[[Debian_Repository|CSClub packages repository]]

==''munin''==

munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#xylitol|xylitol]]

==== Services ====

*[http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon
TODO: Debian 9?

==''yerba-mate''==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 GHz quad core Intel Xeon 5160
* 32GB RAM
* 2x75GB 15k drives (RAID 1)

==== Services ====

* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)
'''Notes'''

* Also used for experimenting new CSC services.

* TODO: use as backup server

==''citric-acid''==
A Dell PowerEdge R815 (TODO: check model) provided by CSCF to replace [[Machine List#aspartame|aspartame]].

'''Specs'''

* 2 x AMD Opteron 6174 (12 cores, 2.20 GHz)
* 128 GB RAM

'''Services'''

* Configured for [https://pass.uwaterloo.ca pass.uwaterloo.ca], a university-wide password manager hosted by CSC as a demo service for all Nexus (ADFS) user.
* [[Plane]], an internal (CSC) project management tool.
* Minio
'''Notes'''

* Being repurposed for Termcom training and development.
* TODO: migrate Vaultwarden (https://pass.csclub.uwaterloo.ca/)??
* UFW opened-ports: SSH, HTTP/HTTPS
* Upgraded to Podman 4.x

= Cloud =

These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.

==''chamomile''==

A Dell PowerEdge R815 provided by CSCF.

==== Specs ====

* 4x 2.20GHz 12-core processors (AMD Opteron(tm) Processor 6174)
* 128GB RAM
* 10GbE connection to core router

==== Services ====

* Cloudstack host
* TODO: cloudstack migration

==''riboflavin''==

A Dell PowerEdge R515 provided by CSCF.

==== Specs ====

* 2x 2.6 GHz 8-core processors (AMD Opteron(tm) Processor 4376 HE)
* 64GB RAM
* 10GbE connection to core router
* 2x 500GB internal SSD
* 12x Seagate 4TB SSHD
==== Services ====

* OpenStack block and object storage for csclub.cloud
* ????
'''Notes'''

* TODO: cloudstack migration

==''guayusa''==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 GHz quad core Intel Xeon 5160
* 32GB RAM
* 2TB PCI-Express Flash SSD
* 2x75GB 15k drives (RAID 1)

==== Services ====

* load-balancer-01

Was used to experiment the following then-new CSC services:

* cifs (for booting ginkgo from CD)
* caffeine-01 (testing of multi-node caffeine)
* TODO: ???
** block1.cloud
** object1.cloud
'''Notes'''

* TODO: cloudstack migration
* TODO: ditch... Currently being used to set up NextCloud.

==''ginkgo''==

Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.

==== Specs ====

* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]
* 256GB RAM
* 2 x 1.2 TB SSD (400GB of each for RAID 1)
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)

==== Services ====

* OpenStack Compute machine

No longer in use:

* controller1.cloud
* db1.cloud
* router1.cloud (NAT for cloud tenant network)
* network1.cloud

'''Notes'''
* TODO: cloudstack migration

==''biloba''==

Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558. TODO: rack??

==== Specs ====

* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]
* 384GB RAM
* 12 3.5" Hot Swap Drive Bays
** 2 x 480 GB SSD
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)

==== Services ====

* OpenStack Compute machine
'''Notes'''
* TODO: cloudstack migration

No longer in use:

* caffeine
* mail
* mattermost

= Storage =

==''fs00''==

fs00 is a '''NetApp FAS3040''' series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

* dual SFP connection to core switch

... TODO

==''fs01''==

fs01 is a '''NetApp FAS3040''' series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====
... TODO

TODO: disconnected??

==''fs10''==

fs10 is a '''NetApp FAS8040''' series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

* FAS8040 (dual heads)
** ... TODO
* 6 DS4324 HDD shelves (24-disks each)
** 24 x 2TB HDDs (assorted brands/models)
** Dual IOM3 controllers.
** Loop 1: bottom 4 shelves
** Loop 2: top 2 shelves + SSD shelf
* 1 DS2246 SSD shelf (TODO: right model?)
** 24 Samsung SM1625 SSDs (MZ-6ER2000/0G3), 200GB (SAS 2, 2.5")

= Other =

==''mathnews''==

[[#xylitol|xylitol]] hosts a systemd-nspawn container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.

== ps3 ==
This is just a very wide PS3, the model that supported running Linux natively before it was removed. Firmware was updated to remove this feature, however it can still be done via. homebrew.

'''Specs'''

* It's a PS3.

'''2022-10-24''' - Thermal paste replaced + firmware updated to latest supported version, also modded.

==''binaerpilot''==

This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

==''anamanaguchi''==

This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

==''digital cutter''==

See [[Digital Cutter|here]].

= Decommissioned =

==''aspartame''==

aspartame was a taurine clone donated by CSCF. It was once our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. Decomissioned in March 2021 after refusing to boot following a power outage.

==''psilodump''==

psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, hosted disk shelves exported as iSCSI block devices.

psilodump was plugged into aspartame. It's still installed but inaccessible.

==''phlogiston''==

phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, hosted disk shelves exported as iSCSI block devices.

phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 10GB RAM

==== Notes from before decommissioning ====

* The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.

==''glomag''==

Glomag hosted [[#caffeine|caffeine]]. Decommissioned April 6, 2018.

==== Specs ====

* Intel Xeon X3450 @ 2.67 GHz
* 6 GB RAM
* vg0: 465 GB software RAID1 (contains root partition):
** 750 GB Seagate Barracuda SATA hard drive
** 500 GB Western-Digital Caviar Blue SATA hard drive
* vg1: 596 GB software RAID1 (contains caffeine):
** 2 × 640 GB Western-Digital Caviar Blue SATA hard drive

==== Services ====

* Before its decommissioning, glomag hosted [[#caffeine|caffeine]], [[#mail|mail]], and [[#munin|munin]] as [[Virtualization#Linux_Container|Linux containers]]

==''Lisp machine''==

A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.

http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.

==== Specs ====

Currently inoperable due to (at least) a missing console cable.

==''ginseng''==

Ginseng used to be our fileserver, before aspartame and the netapp took over.

==== Specs ====

* Intel Pentium Dual Core E2180
* 8GB RAM
*[http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]
* 4 × 640 GB Western-Digital Caviar Blue in [[wikipedia:Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29|RAID 10]] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].
[[Category:Hardware]]

==''calum''==

Calum used to be our main server and was named after Calum T Dalek. Purchased new by the club in 1994.

==== Specs ====

* SPARCserver 10 (headless SPARCstation 10)

==''paza''==

An iMac G3 that was used as a dumb terminal.

==== Specs ====

* 233Mhz PowerPC 740/750
* 96 MB RAM

==''romana''==

Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.

Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.

==== Specs ====

* 2 PowerPC based processors
* Stylish Blinken processor-load lights

==''sodium-citrate''==

Sodium-citrate was an SGI O2 machine.

In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.

==== Specs ====
* SGI O2 MIPS processor
* 423 MB (?) RAM
* 2 × 2 GB hard drive

==''acesulfame-potassium''==

An old office terminal.

==== Specs ====
* Intel Pentium 4 2.67GHz
* 1GB RAM
*[http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard
* ATI Radeon 7000

==''skynet''==

skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.

==== Specs ====

* 15 full CPU/memory boards
** 2x UltraSPARC II 464MHz / 8MB Cache Processors
** ??? RAM?
* 1 I/O board (type=???)
** ???x disks?
* 1 CD-ROM drive

*[http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]
*[http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]
*[http://www.e6500.com/ e6500]

==''freebsd''==

FreeBSD was a virtual machine with FreeBSD installed.

==== Services ====

* Newer software

==''rainbowdragoneyes''==

Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.

==== Specs ====

* 800MHz MIPS Loongson 2f CPU

==''denardo''==

Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.

==== Specs ====

* Sun Fire V210
* TI UltraSparc IIIi (Jalapeño)
* 2 GB RAM
* 160 GB RAID array
* ALOM on denardo-alom.csclub can be used to power machine on/off
==''artificial-flavours''==

Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).

==== Specs ====

* Intel Celeron 3.2GHz
* 2GB RAM
*[http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard
* Western-Digital 80 GB ATA hard drive

==''potassium-citrate''==

Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.

It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).

==== Specs ====
* Alphaserver CS20 (2 833MHz EV68al CPUs)
* 512MB RAM
* 36 GB Seagate SCSI hard drive

==''potassium-nitrate''==

This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).

The name is from saltpetre, because sparks.

==== Specs ====

* 24 CPUs
* 90GB main memory
* 400GB scratch disk local storage in /scratch-potassium-nitrate

There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.

See also [[Sun 2900]].

==''taurine''==

'''Note: On August 21, 2019, just before 2:30PM EDT, we were informed that taurine caught fire'''. As a result, taurine has been decommissioned as of Fall 2019.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 8GB RAM
* 136 GB LVM volume group

==== Services ====

* Virtual machines
* BitlBee IRC instant messaging gateway (localhost only)
*[[ident]] server to maintain high connection cap to freenode
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

==''dextrose''==

dextrose was a [[#taurine|taurine]] clone donated by CSCF and was decommissioned in Fall 2019 after being replaced with a more powerful server.

==''sucrose''==

sucrose was a [[#taurine|taurine]] clone donated by CSCF. It was decommissioned in Fall 2019 following multiple hardware failures.

==''goto80''==
'''Note (2022-10-25): This seems to have gone missing or otherwise left our hands.'''

This was small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located was the office on the top shelf above strombola.

==== Specs ====

* 500 MHz Feroceon (ARM926ej-s compatible) processor
* ARMv5TEJ architecture

Use -march=armv5te -mtune=arm926ej-s options to GCC.

For information on the TS-7800's hardware see here:
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800

==''nullsleep''==

nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.

It's decommissioned on 2023-03-20 due to repeated unexpected shutdown. Replaced by [[#powernap|powernap]].

==== Specs ====

* Intel® Dual Core Atom™ 330
* 2GB RAM
* NVIDIA® ION™ graphics
* 1x 64GB SanDisk SDSSDP064G SSD
* DVD Burner

==== Speakers ====
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.

==== Services ====
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.
Music is located in /music on the office terminal

== ''bit-shifter'' ==
bit-shifter was an office terminal, decommissioned April 2023 due to extended age. It was upgraded to the same specs as Strombola at an unknown point in time.

==== Specs ====

* Intel Core 2 Quad CPU Q8300
* 4GB RAM
* Nvidia GeForce GT 440
*[http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD
* Jacob Parker's Firewire Card

==== Services ====

*[http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''strombola''==
Strombola was an office terminal named after Gordon Strombola. It was retired in April 2023.

==== Specs ====
* Intel Pentium G4600 2 cores @ 3.6Ghz
* 8 GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD

==== Speakers ====
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.

== ''gwem'' ==
gwem was an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.

=== Specs ===

* AMD FX-8150 3.6GHz 8-Core CPU
* 16 GB RAM
* AMD Radeon 6870 HD 1GB GPU
*[http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

== ''maltodextrin'' ==
(*specs are outdated at least as of 2023-05-27*)
*[http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
Maltodextrin was an office terminal. It was upgraded in Spring 2014 after an unidentified failure. Not operational (no video output) as of July 2022.

==== Specs ====

* Intel Core i3-4130 @ 3.40 GHz
* 8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
*[http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard

==== Services ====

*[http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''natural-flavours'' ==

Natural-flavours is an office terminal; it used to be our mirror.

In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.

==== Specs ====

* Intel Core i7-6700k
* 2x8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* Cup Holder (DVD drive has power, but not connected to mother board)
= UPS =

All of the machines in the MC 3015 machine room are connected to one of our UPSs.

All of our UPSs can be monitored via CSCF:

* MC3015-UPS-B2
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)

We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].

TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.

Observability

2024-05-27T02:14:56Z

R389li: /* Metrics */ make Alerts section and add Grafana alerts option

There are [https://www.oreilly.com/library/view/distributed-systems-observability/9781492033431/ch04.html three pillars of observability]: metrics, logging and tracing. We are only interested in the first two.

== Metrics ==
All of our machines are, or at least should be, running the Prometheus node exporter. This collects and sends machine metrics (e.g. RAM used, disk space) to the Prometheus server running at https://prometheus.csclub.uwaterloo.ca (currently a VM on phosphoric-acid). There are a few specialized exporters running on several other machines; a Postfix exporter is running on mail, an Apache exporter is running on caffeine, and an NGINX expoter is running on potassium-benzoate. There is also a custom exporter written by syscom running on potassium-benzoate for mirror stats.

Most of the exporters use mutual TLS authentication with the Prometheus server. I set the expiration date for the TLS certs to 10 years. If you are reading this and it is 2031 or later, then go update the certs.

I highly suggest becoming familiar with [https://prometheus.io/docs/prometheus/latest/querying/basics/ PromQL], the query language for Prometheus. You can run and visualize some queries at https://prometheus.csclub.uwaterloo.ca/prometheus. For example, here is a query to determine which machines are up or down:
<pre>
up{job="node_exporter"}
</pre>
<br>
Here's how we determine if a machine has NFS mounted. This will return 1 for machines which have NFS mounted, but will not return any records for machines which do not have NFS mounted. (We ignore the actual value of node_filesystem_device_error because it returns 1 for machines using Kerberized NFS.)
<pre>
count by (instance) (node_filesystem_device_error{mountpoint="/users", fstype="nfs"})
</pre>
<br>
Now this is a rather complicated expression which can return one of three values:
* 0: the machine is down
* 1: the machine is up, but NFS is not mounted
* 2: the machine is up and NFS is mounted
The [https://prometheus.io/docs/prometheus/latest/querying/operators/#logical-set-binary-operators or operator] in PromQL is key here.
<pre>
sum by (instance) (
(count by (instance) (node_filesystem_device_error{mountpoint="/users", fstype="nfs"}))
or up{job="node_exporter"}
)
</pre>

== Alerts ==
We also use [https://prometheus.io/docs/alerting/latest/alertmanager/ AlertManager] to send email alerts from Prometheus metrics. We should figure out how to also send messages to IRC or similar.

We also use the [https://github.com/prometheus/blackbox_exporter Blackbox prober exporter] to check if some of our web-based services are up.

We make some pretty charts on Grafana (https://prometheus.csclub.uwaterloo.ca) from PromQL queries. Grafana also has an 'Explorer' page where you can test out some queries before making chart panels from them.

You can also create fine-grained alerts on Grafana (https://prometheus.csclub.uwaterloo.ca/alerting/list).

== Logging ==
We now use [https://vector.dev/ Vector] for collecting and transforming logs, and [https://clickhouse.com/ ClickHouse] for storing log data.

=== ClickHouse ===
ClickHouse is a very fast OLAP database which has great documentation for storing and analyzing [https://clickhouse.com/use-cases/logging-and-metrics logging and metrics]. Unfortunately, the CPU on phosphoric-acid (which hosts the prometheus VM) is so old that when we try to install the official deb package, the following error occurs:
<pre>
Instruction check fail. The CPU does not support SSSE3 instruction set.
</pre>
So we're going to download the "compat" version instead:
<pre>
cd /root
wget https://s3.amazonaws.com/clickhouse-builds/master/amd64compat/clickhouse
chmod +x clickhouse
./clickhouse install
rm clickhouse
wget -O /etc/systemd/system/clickhouse-server.service https://github.com/ClickHouse/ClickHouse/raw/master/packages/clickhouse-server.service
systemctl daemon-reload
systemctl enable clickhouse-server
</pre>
By default, systemd limits the number of threads which a service can create, so we'll want to disable that. Run <code>systemctl edit clickhouse-server</code> and paste the following:
<pre>
[Service]
TasksMax=infinity
</pre>
Next, paste the following into /etc/clickhouse-server/users.d/csclub-users.xml:
<pre>
<clickhouse>
<profiles>
<default>

<log_queries replace="replace">0</log_queries>
<log_query_threads replace="replace">0</log_query_threads>
</default>
<readonly>

<readonly>2</readonly>
</readonly>
</profiles>
<users>
<default>

<networks>
<ip>::1</ip>
<ip>127.0.0.1</ip>
</networks>

<access_management>1</access_management>
<named_collection_control>1</named_collection_control>
<show_named_collections>1</show_named_collections>
<show_named_collections_secrets>1</show_named_collections_secrets>
</default>
</users>
</clickhouse>
</pre>
Then paste the following into /etc/clickhouse-server/config/zzz-csclub.xml (we need the zzz prefix because the configuration files are merged in alphabetical order, and we want ours to be applied last):
<pre>
<clickhouse>
<listen_host>127.0.0.1</listen_host>
<listen_host>::1</listen_host>
<logger>
<level>information</level>
<size>100M</size>
<count>10</count>
</logger>
<mysql_port></mysql_port>
<postgresql_port></postgresql_port>


<asynchronous_metric_log remove="1"/>
<metric_log remove="1"/>
<query_thread_log remove="1" />
<query_log remove="1" />
<query_views_log remove="1" />
<part_log remove="1"/>
<session_log remove="1"/>
<text_log remove="1" />
<trace_log remove="1"/>
</clickhouse>
</pre>
Then run <code>systemctl restart clickhouse-server</code> and make sure that it's running.

==== Schema ====
Run <code>clickhouse-client</code> to get a SQL shell. First we need to create a new database and some users:
<pre>
CREATE DATABASE vector;
CREATE USER vector IDENTIFIED BY 'REPLACE_ME';
GRANT ALL ON vector.* TO vector;
CREATE USER grafana IDENTIFIED BY 'REPLACE_ME' SETTINGS PROFILE 'readonly';
GRANT SHOW DATABASES, SHOW TABLES, SELECT, DICTGET ON *.* TO grafana;
</pre>

In some of our tables, we'll store the two-letter country code instead of a country's full name to save space. So we'll create a [https://clickhouse.com/docs/en/sql-reference/dictionaries dictionary] so that we can look up a country's full name. Exit the SQL shell, then, download the CSV file:
<pre>
wget -O /var/lib/clickhouse/user_files/country_codes.csv 'https://datahub.io/core/country-list/r/data.csv'
</pre>
Then run <code>clickhouse-client</code> and create the dictionary:
<pre>
CREATE DICTIONARY vector.country_codes_dictionary
(
Name String,
Code String
)
PRIMARY KEY Code
SOURCE(FILE(path '/var/lib/clickhouse/user_files/country_codes.csv' FORMAT 'CSVWithNames'))
LIFETIME(MIN 0 MAX 0)
LAYOUT(HASHED_ARRAY());
</pre>
Perform a SELECT to fill the table:
<pre>
SELECT * FROM country_codes_dictionary;
</pre>

Now we need to create the tables for storing our actual log data (after they are transformed by Vector).
Create a table for failed SSH logins:
<pre>
CREATE TABLE vector.failed_ssh_logins
(
host LowCardinality(String),
timestamp DateTime,
ip_address IPv6,
username String,
country_code LowCardinality(String)
)
ENGINE = MergeTree()
PRIMARY KEY (host, timestamp)
TTL timestamp + INTERVAL 1 MONTH DELETE;
</pre>

Create a table for storing mirror requests:
<pre>
CREATE TABLE vector.mirror_requests
(
distro LowCardinality(String),
timestamp DateTime CODEC(Delta, ZSTD),
ip_address IPv6,
bytes_sent UInt64,
user_agent String,
country_code LowCardinality(String),
region_name String,
city String
)
ENGINE = MergeTree()
PRIMARY KEY (distro, timestamp, country_code, region_name, city)
TTL timestamp + INTERVAL 1 WEEK DELETE;
</pre>

One of ClickHouse's great features is [https://clickhouse.com/docs/en/guides/developer/cascading-materialized-views Materialized Views]. These allow us to automatically "forward" data from one table to another, and the second table can use a different storage engine to aggregate data and save space.

We want to calculate the total number of requests and bytes sent for each distro, so let's create a table and view for that:
<pre>
CREATE TABLE vector.mirror_requests_agg_by_distro
(
distro LowCardinality(String),
date Date CODEC(Delta, ZSTD),
country_code LowCardinality(String),
num_requests UInt64,
bytes_sent UInt64
)
ENGINE = SummingMergeTree((num_requests, bytes_sent))
PRIMARY KEY (distro, toStartOfMonth(date), date, country_code)
TTL date + INTERVAL 1 MONTH
GROUP BY distro, toStartOfMonth(date)
SET num_requests = sum(num_requests),
bytes_sent = sum(bytes_sent),
date + INTERVAL 2 YEAR DELETE;

CREATE MATERIALIZED VIEW vector.mirror_requests_agg_by_distro_mv
TO vector.mirror_requests_agg_by_distro
AS
SELECT
distro,
toDate(timestamp) AS date,
country_code,
sum(1) AS num_requests,
sum(bytes_sent) AS bytes_sent
FROM vector.mirror_requests
GROUP BY distro, date, country_code;
</pre>

We also wants some stats for Canada specifically:
<pre>
CREATE TABLE vector.mirror_requests_agg_canada
(
distro LowCardinality(String),
date Date CODEC(Delta, ZSTD),
region_name LowCardinality(String),
city String,
bytes_sent UInt64,
num_requests UInt64
)
ENGINE = SummingMergeTree((bytes_sent, num_requests))
PRIMARY KEY (distro, toStartOfMonth(date), date, region_name, city)
TTL date + INTERVAL 1 MONTH
GROUP BY distro, toStartOfMonth(date)
SET num_requests = sum(num_requests),
bytes_sent = sum(bytes_sent),
date + INTERVAL 2 YEAR DELETE;

CREATE MATERIALIZED VIEW vector.mirror_requests_agg_canada_mv
TO vector.mirror_requests_agg_canada
AS
SELECT
distro,
toDate(timestamp) as date,
region_name,
city,
sum(bytes_sent) AS bytes_sent,
sum(1) AS num_requests
FROM vector.mirror_requests
WHERE country_code = 'CA'
GROUP BY distro, date, region_name, city;
</pre>

We also want to keep stats just for the university:
<pre>
CREATE TABLE vector.mirror_requests_agg_uw
(
distro LowCardinality(String),
date Date CODEC(Delta, ZSTD),
bytes_sent UInt64,
num_requests UInt64
)
ENGINE = SummingMergeTree((bytes_sent, num_requests))
PRIMARY KEY (distro, toStartOfMonth(date), date)
TTL date + INTERVAL 1 MONTH
GROUP BY distro, toStartOfMonth(date)
SET num_requests = sum(num_requests),
bytes_sent = sum(bytes_sent),
date + INTERVAL 2 YEAR DELETE;

CREATE MATERIALIZED VIEW vector.mirror_requests_agg_uw_mv
TO vector.mirror_requests_agg_uw
AS
SELECT
distro,
toDate(timestamp) as date,
sum(bytes_sent) AS bytes_sent,
sum(1) AS num_requests
FROM vector.mirror_requests
WHERE isIPAddressInRange(IPv6NumToString(ip_address), '::ffff:129.97.0.0/112')
OR isIPAddressInRange(IPv6NumToString(ip_address), '::ffff:10.0.0.0/104')
OR isIPAddressInRange(IPv6NumToString(ip_address), '::ffff:172.16.0.0/108')
OR isIPAddressInRange(IPv6NumToString(ip_address), '::ffff:192.168.0.0/112')
OR isIPAddressInRange(IPv6NumToString(ip_address), '2620:101:f000::/47')
OR isIPAddressInRange(IPv6NumToString(ip_address), 'fd74:6b6a:8eca::/47')
GROUP BY distro, date, region_name, city;
</pre>

Finally, we'll store some stats for IP subnets:
<pre>
CREATE TABLE vector.mirror_requests_agg_ip
(
timestamp DateTime CODEC(Delta, ZSTD),
cidr_start IPv6,
country_code LowCardinality(String),
num_requests UInt64,
bytes_sent UInt64
)
ENGINE = SummingMergeTree((num_requests, bytes_sent))
PRIMARY KEY (timestamp, cidr_start, country_code)
TTL timestamp + toIntervalWeek(2);

CREATE MATERIALIZED VIEW vector.mirror_requests_agg_ip_mv TO vector.mirror_requests_agg_ip AS
SELECT
toStartOfFiveMinutes(timestamp) AS timestamp,
IPv6CIDRToRange(ip_address, 120).1 AS cidr_start,
country_code,
sum(1) AS num_requests,
sum(bytes_sent) AS bytes_sent
FROM vector.mirror_requests
GROUP BY
timestamp,
cidr_start,
country_code;
</pre>

=== GeoIP database ===
We'll want to look up geographic information for the IP addresses in our data. To do this, we'll use the [https://dev.maxmind.com/geoip/geolite2-free-geolocation-data MaxMind GeoLite2 databases]. Syscom already has a MaxMind account; the password is stored in the usual place. Install the latest geoipupdate package from [https://github.com/maxmind/geoipupdate/releases here], then edit /etc/GeoIP.conf as necessary (use the syscom account ID and license key). Set <code>EditionIDs</code> to <code>GeoLite2-City</code> only.

We'll use a systemd timer to run the geoipupdate script periodically. Paste the following into /etc/systemd/system/geoipupdate.service:
<pre>
[Unit]
Description=GeoIP Update
Documentation=https://dev.maxmind.com/geoip/updating-databases
After=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/bin/geoipupdate
Nice=19
IOSchedulingClass=idle
IOSchedulingPriority=7
ProtectSystem=strict
ReadWritePaths=/usr/share/GeoIP
ProtectHome=true
PrivateTmp=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
LockPersonality=true
RestrictRealtime=true
</pre>
Run <code>systemctl daemon-reload</code> and then <code>systemctl start geoipupdate</code> to download the database for the first time.

Now paste the following into /etc/systemd/system/geoipupdate.timer:
<pre>
[Unit]
Description=Automatic GeoIP database update
Documentation=https://dev.maxmind.com/geoip/updating-databases

[Timer]
OnCalendar=monthly
RandomizedDelaySec=12h
Persistent=true

[Install]
WantedBy=timers.target
</pre>
Then run:
<pre>
systemctl daemon-reload
systemctl enable geoipupdate.timer
systemctl start geoipupdate.timer
</pre>

=== Vector ===
Vector allows you to create directed acyclic graphs (DAGs) for collecting and processing logs, which gives us a lot of flexibility. It also has a built-in scripting language, [https://vector.dev/docs/reference/vrl/ Vector Remap Language (VRL)] for slicing and dicing data. This allows us to remove fields which we don't need, add new fields which we do need, enrich an event with extra data, etc.

Our data pipeline looks like this: Vector agents -> Vector aggregator -> ClickHouse. We use Grafana for visualization.

We use mutual TLS between the agents and the aggregator to make sure that random people can't send us garbage data:
<pre>
openssl req -newkey rsa:2048 -nodes -keyout aggregator.key -x509 -out aggregator.crt -days 36500
openssl req -newkey rsa:2048 -nodes -keyout agent.key -x509 -out agent.crt -days 36500
chown vector:vector *.crt *.key
</pre>

Here is what our vector.toml looks like on the general-use machines; currently, we only use it for collecting failed SSH login attempts.
<pre>
[sources.source_sshd]
type = "journald"
include_units = ["ssh.service"]

[transforms.remap_sshd]
type = "remap"
inputs = ["source_sshd"]
source = """
parsed, err = parse_regex(
.message, r'^(?:Connection (?:closed|reset)|Disconnected) (?:by|from) (?:invalid|authenticating) user (?P<user>[^ ]+) (?P<ip>[0-9.a-f:]+)'
)
if is_null(err) {
. = {
"username": parsed.user,
"ip_address": parsed.ip,
"host": .host,
"timestamp": .timestamp,
"job": "vector-sshd"
}
}
"""

[transforms.filter_sshd]
type = "filter"
inputs = ["remap_sshd"]
condition = '.job == "vector-sshd"'

[sinks.aggregator]
type = "vector"
inputs = ["filter_sshd"]
address = "prometheus:5045"
[sinks.aggregator.tls]
enabled = true
ca_file = "/etc/vector/aggregator.crt"
crt_file = "/etc/vector/agent.crt"
key_file = "/etc/vector/agent.key"
verify_hostname = false
</pre>

The agent on potassium-benzoate collects NGINX logs:
<pre>
[sources.source_nginx]
type = "file"
include = ["/var/log/nginx/access.log"]
max_read_bytes = 65536

[transforms.remap_nginx]
type = "remap"
inputs = ["source_nginx"]
source = """
parsed_log, err = parse_nginx_log(.message, "combined")
status = parsed_log.status
request = string!(parsed_log.request || "")
if is_null(err) && status == 200 {
parsed_path, err = parse_regex(request, r'^GET /+(?P<distro>[^/? ]+)')
distro = parsed_path.distro
ignore = [
"server-status", "stats", "robots.txt",
"include", "pub", "news", "index.html", "sync.json", "ups",
"pool", "dists", "csclub.asc", "csclub.gpg"
]
if (
is_null(err) && !includes(ignore, distro) && !contains(request, "..") &&
!starts_with(request, "#") && !starts_with(request, "%") && !starts_with(request, ".")
) {
. = {
"distro": distro,
"user_agent": parsed_log.agent,
"ip_address": parsed_log.client,
"bytes_sent": parsed_log.size,
"timestamp": parsed_log.timestamp,
"job": "vector-mirror"
}
}
}
"""

...
</pre>

Finally, here's the aggregator config, which collects data from each agent and then inserts it into ClickHouse:
<pre>
[enrichment_tables.enrich_geoip]
type = "geoip"
path = "/usr/share/GeoIP/GeoLite2-City.mmdb"

[sources.source_agents]
type = "vector"
address = "[::]:5045"
[sources.source_agents.tls]
enabled = true
ca_file = "/etc/vector/agent.crt"
crt_file = "/etc/vector/aggregator.crt"
key_file = "/etc/vector/aggregator.key"
verify_hostname = false

[transforms.transform_route]
type = "route"
inputs = ["source_agents"]
route.sshd = '.job == "vector-sshd"'
route.mirror = '.job == "vector-mirror"'

[transforms.transform_sshd]
type = "remap"
inputs = ["transform_route.sshd"]
source = """
ipinfo = get_enrichment_table_record("enrich_geoip", {"ip": .ip_address}) ?? {}
if is_ipv4!(.ip_address) && (ip_cidr_contains!("10.0.0.0/8", .ip_address) \
|| ip_cidr_contains!("172.16.0.0/12", .ip_address) \
|| ip_cidr_contains!("192.168.0.0/16", .ip_address)) {
ipinfo.country_code = "CA";
ipinfo.region_name = "Ontario";
ipinfo.city_name = "Waterloo";
}
. = {
"host": .host,
"timestamp": .timestamp,
"username": .username,
"ip_address": ip_to_ipv6!(.ip_address),
"country_code": ipinfo.country_code || ""
}
"""

[transforms.transform_mirror]
type = "remap"
inputs = ["transform_route.mirror"]
source = """
ipinfo = get_enrichment_table_record("enrich_geoip", {"ip": .ip_address}) ?? {}
if is_ipv4!(.ip_address) && (ip_cidr_contains!("10.0.0.0/8", .ip_address) \
|| ip_cidr_contains!("172.16.0.0/12", .ip_address) \
|| ip_cidr_contains!("192.168.0.0/16", .ip_address)) {
ipinfo.country_code = "CA";
ipinfo.region_name = "Ontario";
ipinfo.city_name = "Waterloo";
}
. = {
"distro": .distro,
"timestamp": .timestamp,
"ip_address": ip_to_ipv6!(.ip_address),
"bytes_sent": .bytes_sent,
"user_agent": .user_agent,
"country_code": ipinfo.country_code || "",
"region_name": ipinfo.region_name || "",
"city": ipinfo.city_name || ""
}
"""

[transforms.transform_unmatched]
type = "remap"
inputs = ["transform_route._unmatched"]
source = """
log("unrecognized job: " + string!(.job || "null"), level: "warn")
"""

[sinks.sink_unmatched]
type = "blackhole"
inputs = ["transform_unmatched"]
print_interval_secs = 0

[sinks.clickhouse_sshd]
type = "clickhouse"
inputs = ["transform_sshd"]
encoding.timestamp_format = "unix"
endpoint = "$CLICKHOUSE_ENDPOINT"
database = "$CLICKHOUSE_DATABASE"
table = "failed_ssh_logins"
[sinks.clickhouse_sshd.auth]
strategy = "basic"
user = "$CLICKHOUSE_USER"
password = "$CLICKHOUSE_PASSWORD"

...
</pre>

=== Beats, Logstash and Loki (old) ===
We previously used Elastic Beats, Logstash and Grafana Loki for collecting and storing logs. One day I tried to upgrade Logstash and it exploded so badly that I figured it would be easier to just switch to Vector instead.

<b>The sections below are kept for historical purposes only and are no longer accurate.</b>

We use a combination of [https://www.elastic.co/beats/ Elastic Beats], [https://www.elastic.co/logstash/ Logstash] and [https://grafana.com/oss/loki/ Loki] for collecting, storing and querying our logs; for visualization, we use Grafana. Logstash and Loki are currently both running in the prometheus VM.

The reason why I chose Loki over Elasticsearch is because Loki is <i>very</i> space efficient with regards to storage. It also consumes way less RAM and CPU. This means that we can collect a lot of logs without worrying too much about resource usage.

We have Journalbeat and/or Filebeat running on some of our machines to collect logs from sshd, Apache and NGINX. The Beats send these logs to Logstash, which does some pre-processing. The most useful contribution by Logstash is its GeoIP plugin, which allows us to enrich the logs with some geographical information from IP addresses (e.g. add city and country). Logstash sends these logs to Loki, and we can then view these from Grafana.

'''Note''': Sometimes the Loki output plugin for Logstash disappears after a reboot or an upgrade. If you see Logstash complaining about this in the journald logs, run this:
<pre>
cd /usr/share/logstash
bin/logstash-plugin install logstash-output-loki
systemctl restart logstash
</pre>
See [https://grafana.com/docs/loki/latest/clients/logstash/ here] for details.

The language for querying logs in Loki is [https://grafana.com/docs/loki/latest/logql/ LogQL], which, syntactically, is very similar to PromQL. If you have already learned PromQL, then you should be able to pick up LogQL very easily. You can try out some LogQL queries from the 'Explore' page on Grafana; make sure you toggle the data source to 'Loki' in the top left corner. For the 'topk' queries, you will also want to toggle 'Query type' to 'Instant' rather than 'Range'.

==== LogQL examples ====
Here are the number of failed SSH login attempts for each host for a given time range:
<pre>
sum by (hostname) (
count_over_time(
{job="logstash-sshd"} [$__range]
)
)
</pre>
Note that <code>$__range</code> is a special [https://grafana.com/docs/grafana/latest/variables/variable-types/global-variables/ global variable] in Grafana which is equal to the time range in the top right corner of a chart.
<br><br>
Here are the top 10 IP addresses from which failed SSH login attempts arrived, for a given host and time range:
<pre>
topk(10,
sum by (ip_address) (
count_over_time(
{job="logstash-sshd",hostname="$hostname"} | json | __error__ = ""
[$__range]
)
)
)
</pre>
$hostname is a chart variable, which can be configured from a chart's settings.

I configured Logstash to send logs to Loki as JSON, but it's a rather hacky solution, so occasionally invalid JSON is sent.
<br><br>
Here are the number of HTTP requests for the 15 distros on our mirror from the last hour:
<pre>
topk(15,
sum by (distro) (
count_over_time(
{job="logstash-nginx"} | json | __error__ = "" | distro != "server-status"
[1h]
)
)
)
</pre>
<br><br>
Here are the number of total bytes sent over HTTP for the top 15 distros from the last hour. Note the use of the <code>unwrap</code> operator.
<pre>
topk(15,
sum by (distro) (
sum_over_time(
{job="logstash-nginx"} | json | __error__ = "" | distro != "server-status" | unwrap bytes
[1h]
)
)
)
</pre>
You can see more examples on the Mirror Requests dashboard on Grafana.

==== Avoid high cardinality ====
For both Prometheus and Loki, you must [https://prometheus.io/docs/practices/naming/#labels avoid high cardinality] labels at all costs. By high cardinality, I mean labels which can take on a very large number of values; for example, using a label to store IP addresses would be a very bad idea. This is because Prometheus and Loki use labels to store metrics/logs efficiently with compression; when two metrics have two different sets of labels, they cannot be stored together, which increases the storage space usage.

With Loki, you can extract labels from your logs inside your query dynamically. One way to do this is with the <code>json</code> operator; there are other ways to do this as well (see the LogQL docs). This basically means that we get infinite cardinality from our logs, the tradeoff being that queries may take longer to execute.

Also, be very careful about what you send to Loki from Logstash - [https://grafana.com/docs/loki/latest/clients/logstash/#usage-and-configuration every field in a Logstash message becomes a Loki label]. Usage of the <code>prune</code> command in Logstash is highly recommended.

File:Image.png

2023-10-19T14:25:52Z

R389li: R389li moved page File:Image.png to File:DONOTNAMEIMAGESImage.png

#REDIRECT [[File:DONOTNAMEIMAGESImage.png]]

File:DONOTNAMEIMAGESImage.png

2023-10-19T14:25:52Z

R389li: R389li moved page File:Image.png to File:DONOTNAMEIMAGESImage.png

September pop runs

How to (Extra) Ban Someone

2023-10-10T19:23:32Z

R389li: Be less destructive

This is a (hopefully comprehensive) '''guide on ensuring their existing account (based on their WatIAM) is put out of action for good, and immediately'''. This guide is mainly intended for ''Syscom'' as it requires root or admin access to many CSC services.

=== Step 1: Remove Membership ===
Through CEO's TUI (<code>ceo</code>) :

* Reset their password

=== Step 2: Screw Up Their Account ===

* Change their Login Shell (through LDAP - [[Ceo#raymo's guide on how to fix things after screwing up|guide here]]) to something like <code>/sbin/nologin</code> or <code>/bin/false</code>

'''NOTE''': CEO will not allow this change, so LDAP is the best (and likely only way)

=== Step 3: Deauth Them Everywhere ===

* Suspend Kerberos: https://wiki.csclub.uwaterloo.ca/Kerberos#Suspending_an_Account
* Remove their SSH keys:
** Run <code>sudo -u <user_to_ban> mv ~<user_to_ban>/.ssh/{authorized_keys,banned_keys}</code> from a CSC machine.

=== Step 4: Remove all Their Resources ===

* '''<u>Remove their CSC Cloud VMs</u>''': https://wiki.csclub.uwaterloo.ca/CloudStack#Administration
* (optional) Kill all processes they are running in General Use
* (optional) Delete their home directory - '''ONLY if necessary'''

Acronyms

2023-07-25T01:07:56Z

R389li: Add acronyms

Over the F22, W23, S23 terms, many members within the office speculated what CSC stands for. Here are their postulations:

* Caffeinated Students Club
* Calculator Slaves Club
* Calcium-deficient Students Club
* Camera-Shy Club
* Can't Sleep Club
* Can't Stop CSC
* Can't Succeed Club
* Card Skills Club
* Chair Sleeping Club
* Charge Smartphone Club
* Chess Studies Club
* Chopin Studies Club
* Clown Syndicate Club
* Coffee Supply Club
* Comic Sans Club
* Committee Sacking Club
* Communal Shoe Club
* Communal Shower Club
* Computer Stop-working Club
* Confidential Secrets Club
* Connection Sucks Club
* Constant Sacrificing Club
* Cool Shit Club
* Cool Students Club
* Copyright Safeguarding Club
* Co-op Suckers Club
* Crazy Superglue Club
* Creature Saving Club
* Crying Students Club
* CSC Scribbling Club
* CSC Systems Committee
* Cutting Sticker Club
* Culinary Students Club

Meeting:Saturday 11 February 2023

2023-02-16T05:53:25Z

R389li: /* Status Update */ correct speaker

== Status Update ==

* Leo talked to Dave
** Got GPU server quote for ~40K
** RAM for mirror is being worked on
** Potential project to upgrade the CSCF NTP Raspberry Pis to use a crystal as backup
* Jonathan: Vaultwardern does not support LDAP. Will use local user database instead.

== Todo ==

* Investigate how to do a CIF proposal
* Wait for MEF to accept proposals for this term
* Leo to answer emails
* Finish Mac Mini Debian setup
* Investigate atomic clocks for better time keeping
* Make office more welcoming

Main Page

2023-02-02T07:50:06Z

R389li: Reverted edits by E5kwon (talk) to last revision by Y266shen

This is the Wiki of the [[Computer Science Club]]. Feel free to start adding pages and information.

[[Special:AllPages]]

== New Member Highlights ==
To access our Linux machines, see [[How to SSH]] and select one of the general-use machines from [[Machine List#General-Use Servers]].

To host a website, see [[Web Hosting]]. If you are trying to host websites for clubs, see [[Club Hosting]].

To use our VPS services (similar to Linode and Amazon EC2), see [https://docs.cloud.csclub.uwaterloo.ca/ CSC Cloud Documentation]. Note that you'll need to activate your account on one of CSC's machines before using the management panel.

To view instruction on playing music at the office, see [[Music]].

To use our Nextcloud instance (similar to Google Drive and Dropbox), go to [https://files.csclub.uwaterloo.ca CSC Files].

== Guides ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[New Member Guide]]
* [[Budget Guide]]
* [[Club Hosting]]
* [[Web Hosting]]
* [[Git Hosting]]
* [[Exec Manual]]
* [[Sysadmin Guide]]
* [[Imapd Guide]]
* [[MEF Guide]]
* [[Office Policies]]
* [[Office Staff]]
* [[How to IRC]]
* [[How to SSH]]
* [[Talks Guide]]
* [[SCS Guide]]
* [[Kerberos | Password Reset ]]
* [[Disk Drive RMA Process]]
* [[ IPMI101 ]]
* [[Keys and Fobs]]
* [[BigBlueButton]]
* [https://docs.cloud.csclub.uwaterloo.ca/ CSC Cloud Documentation]
</div>

== News and Events ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[Meetings]]
* [[Talks]]
* [[Projects]]
</div>

== Machine/System Documentation ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[ADFS]]
* [[Application List]]
* [[Authentication]]
* [[Backups]]
* [[ceo]]
* [[Ceph]]
* [[Cloud Networking]]
* [[CloudStack]]
* [[CloudStack Templates]]
* [[DNS]]
* [[Debian Repository]]
* [[Firewall]]
* [[Hardware]]
* [[Kerberos]]
* [[Keycloak]]
* [[Kubernetes]]
* [[KVM]]
* [[LDAP]]
* [[Machine List]]
* [[Mail]]
* [[Mailing Lists]]
* [[Mirror]]
* [[Music]]
* [[MySQL]]
* [[New NetApp]]
* [[Network]]
* [[New CSC Machine]]
* [[Nextcloud]]
* [[NFS/Kerberos]]
* [[Observability]]
* [[OID Assignment]]
* [[Podman]]
* [[Printing]]
* [[Pulseaudio]]
* [[Scratch]]
* [[SNMP]]
* [[SSL]]
* [[Switches]]
* [[Syscom Todo]]
* [[Systemd-nspawn]]
* [[Two-Factor Authentication]]
* [[UID/GID Assignment]]
* [[Webmail]]
</div>

== Miscellaneous ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[Budget]]
* [[Executive]]
* [[Past Executive]]
* [[History]]
* [[Library]]
* [[MEF Proposals]]
* [[Proposed Constitution Changes]]
</div>

== Historical or Obsolete Pages ==
<div style="-webkit-column-count:3; -moz-column-count:3; column-count:3;">
* [[Robot Arm]]
* [[Webcams]]
* [[Website]]
* [[Digital Cutter]]
* [[Electronics]]
* [[NetApp]]
* [[Frosh]]
* [[Virtualization (LXC Containers)]]
* [[Serial Connections]]
__NOTOC__

User:E5kwon/CnD Ratings

2023-02-02T07:48:06Z

R389li: R389li moved page CnD Ratings to E5kwon/CnD Ratings

== Kwon's CnD Ratings ==
{| class="wikitable sortable"
|+
!Item
!Rating
!Notes
|-
|Chicken and Fried Rice
|6.0/10
|
|-
|Beef Chili
|7.0/10
|
|-
|Chocolate Croissant
|4.0/10
|
|-
|Chicken Stew
|7.5/10
|
|-
|Beef Burrito
|4.0/10
|
|-
|Breakfast Burrito
|3.0/10
|
|-
|Chicken Marinara Linguine
|3.0/10
|
|-
|Tikka Masala
|6.5/10
|
|-
|Butter Chicken
|6.5/10
|
|-
|Jamaican Patty
|4.0/10
|
|-
|Garlic Bread
|7.5/10
|
|-
|Samosa
|7.5/10
|
|-
|Western Sandwich
|5.0/10
|
|-
|Mac and Cheese
|6.0/10
|
|-
|Chicken Briyani
|7.0/10
|
|-
|Apple Fritter
|7.0/10
|
|-
|Pasta Fagioli
|2.0/10
|
|}

Machine List

2022-12-18T21:50:31Z

R389li: Add citric-acid

Most of our machines are in the E7, F7, G7 and H7 racks (as of Jan. 2022) in the MC 3015 server room. There is an additional rack in the DC 3558 machine room on the third floor. Our office terminals are in the CSC office, in MC 3036/3037.

= Web Server =
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.

== ''caffeine'' ==

Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.

==== Specs ====

* currently a virtual machine hosted on phosphoric-acid
** 12 vCPUs
** 32GB of RAM

==== Services ====

* Club and member web sites with [[Apache]]
* [[MySQL]] databases
* [[PostgreSQL]] databases
* [[ceo]] daemon
* mail was migrated to [[#mail|mail]]

= General-Use Servers =

These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no cryptocurrency mining).

For computationally-intensive jobs (CPU/memory bound) we recommend running on high-fructose-corn-syrup, carbonated-water, sorbitol, mannitol, or corn-syrup, listed in roughly decreasing order of available resources. For low-intensity interactive jobs, such as IRC clients, we recommend running on neotame. If you have a long-running computationally intensive job, it's good to nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.

== ''corn-syrup'' ==

PowerEdge 2950

==== Specs ====

* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)
* 32 GB RAM
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29
* IPMI mac addr 00:24:e8:52:41:2b
* 3 × Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)

==== Notes ====

* Use eth0/Gb0 for the mathstudentorgsnet connection
* has ipmi on corn-syrup-ipmi.csclub.uwaterloo.ca.

==== Services ====

* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)

== ''high-fructose-corn-syrup'' ==

High-fructose-corn-syrup (or hfcs) is a large SuperMicro server. It's been in CSC service since April 2012.

==== Specs ====

* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)
* 192 GB RAM
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]
* 500 GB Seagate Barracuda
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]

== ''carbonated-water'' ==

carbonated-water is a Dell R815 provided by CSCF.

==== Specs ====

* 4x AMD Opteron 6176 processors (2.3 GHz, 12 cores each)
* 128GB RAM

== ''neotame'' ==

neotame is a SuperMicro server funded by MEF. It is the successor to taurine.

We discourage running computationally-intensive jobs on neotame as many users run interactive applications such as IRC clients on it and any significant service degradation will be more likely to affect other users (who will probably notice right away).

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM
* SSH server also listens on ports 21, 22, 53, 80, 81, 443, 8000, 8080 for your convenience.

== ''sorbitol'' ==

sorbitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM

== ''mannitol'' ==

mannitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM

= Office Terminals =

It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.

== ''bit-shifter'' ==

bit-shifter is an office terminal.

==== Specs ====

* Intel(R) Core(TM)2 Quad CPU Q8300
* 4GB RAM
* Nvidia GeForce GT 440
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD
* Jacob Parker's Firewire Card

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''gwem'' ==

gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.

=== Specs ===

* AMD FX-8150 3.6GHz 8-Core CPU
* 16 GB RAM
* AMD Radeon 6870 HD 1GB GPU
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

== ''maltodextrin'' ==
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.
Not operational (no video output) as of July 2022.

==== Specs ====

* Intel Core i3-4130 @ 3.40 GHz
* 8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''natural-flavours'' ==

Natural-flavours is an office terminal; it used to be our mirror.

In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.

==== Specs ====

* Intel Core i7-6700k
* 2x8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* Cup Holder (DVD drive has power, but not connected to mother board)

== ''strombola''==
It is named after Gordon Strombola.

==== Specs ====
* Intel Pentium G4600 2 cores @ 3.6Ghz
* 8 GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD

==== Speakers ====
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.

== ''nullsleep'' ==

nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.

==== Specs ====

* Intel® Dual Core Atom™ 330
* 2GB RAM
* NVIDIA® ION™ graphics
* 1x 64GB SanDisk SDSSDP064G SSD
* DVD Burner

==== Speakers ====
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.

==== Services ====
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.
Music is located in /music on the office terminals

= Progcom Only =
The Programme Committee has access to a VM on corn-syrup called 'progcom'. They have sudo rights in this VM so they may install and run their own software inside it. This VM should only be accessible by members of progcom or syscom.

= Syscom Only =

The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.

== ''xylitol'' ==

xylitol is a Dell PowerEdge R815 donated by CSCF. It is primarily a container host for services previously hosted on aspartame and dextrose, including munin, rt, mathnews, auth1, and dns1. It was provisioned with the intent to replace both of those hosts.

==== Specs ====

* Dual AMD Opteron 6176 (2.3 GHz, 48 cores total)
* 128GB RAM
* 500GB volume group on RAID1 SSD (xylitol-mirrored)
* 500ish-GB volume group on RAID10 HDD (xylitol-raidten)

== ''auth1'' ==

Container on [[#xylitol|xylitol]].

==== Services ====

* [[LDAP]] primary
* [[Kerberos]] primary

== ''chat'' ==

Container on [[#xylitol|xylitol]].

==== Services ====

* The Lounge web IRC client (https://chat.csclub.uwaterloo.ca)

== ''phosphoric-acid'' ==

phosphoric-acid is a Dell PowerEdge R815 donated by CSCF and is a clone of xylitol. It may be used to provide redundant cloud services in the future.

==== Specs ====
==== Services ====

* [[#caffeine|caffeine]]
* [[#coffee|coffee]]

== ''coffee'' ==

Virtual machine running on phosphoric-acid.

==== Services ====

* [[Database#MySQL|MySQL]]
* [[Database#Postgres|Postgres]]

== ''cobalamin'' ==

Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.

==== Specs ====

* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)
* 16GB RAM
* Broadcom NetworkXtreme II
* 2x73GB Hard Drives, hardware RAID1
** Soon to be 2x1TB in MegaRAID1
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration

==== Services ====

* Containers: [[#auth2|auth2]]

==== Notes ====

* The network card requires non-free drivers. Be sure to use an installation disc with non-free.

* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:

** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248

* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.

== ''auth2'' ==

Container on [[#cobalamin|cobalamin]].

==== Services ====

* [[LDAP]] secondary
* [[Kerberos]] secondary

MAC Address: c2:c0:00:00:00:a2

== ''mail'' ==

mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#biloba|biloba]]

==== Services ====

* [[Mail]] services
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])
* [[Webmail]]
* [[ceo]] daemon

== ''sodium-benzoate'' ==

Sodium-benzoate is our previous mirror server, funded by MEF.

It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.

==== Specs ====

* Intel Xeon Quad Core E5405 @ 2.00 GHz
* 16GB RAM
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)

Space disks are currently in the office underneath maltodextrin.

== ''potassium-benzoate'' ==

potassium-benzoate is our mirror server, funded by MEF.

==== Specs ====

* 36 drive Supermicro chassis (SSG-6048R-E1CR36L)
* 1 x Intel Xeon E5-2630 (8 cores, 2.40 GHz)
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM
* 2 x 1 TB Samsung Evo 850 SSD drives
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)
* 10 Gbps SFP+ card (loaned from CSCF)
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)

==== Network Connections ====

potassium-benzoate has two connections to our network:

* 1 Gbps to our switch (used for management)
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)

Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.

==== Services ====

* [[Mirror]]
* [[Talks]] mirror
* [[Debian_Repository|CSClub packages repository]]

== ''munin'' ==

munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#xylitol|xylitol]]

==== Services ====

* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon
== ''yerba-mate'' ==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 Hz quad core Intel Xeon 5160
* 32GB RAM
* 2x75GB 15k drives (RAID 1)

==== Services ====

* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)
* shibboleth (under development)

Also used for experimenting new CSC services.

== ''citric-acid'' ==
A Dell PowerEdge provided by CSCF to replace [[Machine List#aspartame|aspartame]].

'''Specs'''

*

'''Services'''

* Being configured for [https://pass.uwaterloo.ca pass.uwaterloo.ca], a university-wide password manager hosted by CSC as a demo service for all Nexus (ADFS) users

= Cloud =

These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.

== ''chamomile'' ==

A Dell PowerEdge R815 provided by CSCF.

==== Specs ====

* 4x 2.20GHz 12-core processors
* 128GB RAM
* 10GbE connection to core router

==== Services ====

* OpenStack primary controller services for csclub.cloud

== ''riboflavin'' ==

A Dell PowerEdge R515 provided by CSCF.

==== Specs ====

* 2x 2.6 GHz 8-core processors
* 64GB RAM
* 10GbE connection to core router
* 2x 500GB internal SSD
* 12x Seagate 4TB SSHD

==== Services ====

* OpenStack block and object storage for csclub.cloud

== ''guayusa'' ==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 GHz quad core Intel Xeon 5160
* 32GB RAM
* 2TB PCI-Express Flash SSD
* 2x75GB 15k drives (RAID 1)

==== Services ====

Currently being used to set up NextCloud.

Was used to experiment the following then-new CSC services:

* logstash (testing of logstash)
* load-balancer-01
* cifs (for booting ginkgo from CD)
* caffeine-01 (testing of multi-node caffeine)
* block1.cloud
* object1.cloud

== ''ginkgo'' ==

Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.

==== Specs ====

* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]
* 256GB RAM
* 2 x 1.2 TB SSD (400GB of each for RAID 1)
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)

==== Services ====

* OpenStack Compute machine

No longer in use:

* controller1.cloud
* db1.cloud
* router1.cloud (NAT for cloud tenant network)
* network1.cloud

== ''biloba'' ==

Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558.

==== Specs ====

* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]
* 384GB RAM
* 12 3.5" Hot Swap Drive Bays
** 2 x 480 GB SSD
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)

==== Services ====

* OpenStack Compute machine

No longer in use:

* caffeine
* mail
* mattermost

= Storage =

== ''fs00'' ==

fs00 is a NetApp FAS3040 series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

== ''fs01'' ==

fs01 is a NetApp FAS3040 series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

= Other =

== ps3 ==
This is just a very wide PS3, the model that supported running Linux natively before it was removed. Firmware was updated to remove this feature, however it can still be done via. homebrew.

'''Specs'''

* It's a PS3.

'''2022-10-24''' - Thermal paste replaced + firmware updated to latest supported version, also modded.

==''binaerpilot''==

This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''anamanaguchi'' ==

This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''digital cutter'' ==

See [[Digital Cutter|here]].

== ''mathnews'' ==

[[#xylitol|xylitol]] hosts a systemd-nspawn container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.

= Decommissioned =

== ''aspartame'' ==

aspartame was a taurine clone donated by CSCF. It was once our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. Decomissioned in March 2021 after refusing to boot following a power outage.

== ''psilodump'' ==

psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, hosted disk shelves exported as iSCSI block devices.

psilodump was plugged into aspartame. It's still installed but inaccessible.

== ''phlogiston'' ==

phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, hosted disk shelves exported as iSCSI block devices.

phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 10GB RAM

==== Notes from before decommissioning ====

* The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.

== ''glomag'' ==

Glomag hosted [[#caffeine|caffeine]]. Decommissioned April 6, 2018.

==== Specs ====

* Intel Xeon X3450 @ 2.67 GHz
* 6 GB RAM
* vg0: 465 GB software RAID1 (contains root partition):
** 750 GB Seagate Barracuda SATA hard drive
** 500 GB Western-Digital Caviar Blue SATA hard drive
* vg1: 596 GB software RAID1 (contains caffeine):
** 2 × 640 GB Western-Digital Caviar Blue SATA hard drive

==== Services ====

* Before its decommissioning, glomag hosted [[#caffeine|caffeine]], [[#mail|mail]], and [[#munin|munin]] as [[Virtualization#Linux_Container|Linux containers]]

== ''Lisp machine'' ==

A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.

http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.

==== Specs ====

Currently inoperable due to (at least) a missing console cable.

== ''ginseng'' ==

Ginseng used to be our fileserver, before aspartame and the netapp took over.

==== Specs ====

* Intel Pentium Dual Core E2180
* 8GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]
* 4 × 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].
[[Category:Hardware]]

== ''calum'' ==

Calum used to be our main server and was named after Calum T Dalek. Purchased new by the club in 1994.

==== Specs ====

* SPARCserver 10 (headless SPARCstation 10)

== ''paza'' ==

An iMac G3 that was used as a dumb terminal.

==== Specs ====

* 233Mhz PowerPC 740/750
* 96 MB RAM

== ''romana'' ==

Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.

Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.

==== Specs ====

* 2 PowerPC based processors
* Stylish Blinken processor-load lights

== ''sodium-citrate'' ==

Sodium-citrate was an SGI O2 machine.

In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.

==== Specs ====
* SGI O2 MIPS processor
* 423 MB (?) RAM
* 2 × 2 GB hard drive

== ''acesulfame-potassium'' ==

An old office terminal.

==== Specs ====
* Intel Pentium 4 2.67GHz
* 1GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard
* ATI Radeon 7000

== ''skynet'' ==

skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.

==== Specs ====

* 15 full CPU/memory boards
** 2x UltraSPARC II 464MHz / 8MB Cache Processors
** ??? RAM?
* 1 I/O board (type=???)
** ???x disks?
* 1 CD-ROM drive

* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]
* [http://www.e6500.com/ e6500]

== ''freebsd'' ==

FreeBSD was a virtual machine with FreeBSD installed.

==== Services ====

* Newer software

== ''rainbowdragoneyes'' ==

Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.

==== Specs ====

* 800MHz MIPS Loongson 2f CPU

== ''denardo'' ==

Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.

==== Specs ====

* Sun Fire V210
* TI UltraSparc IIIi (Jalapeño)
* 2 GB RAM
* 160 GB RAID array
* ALOM on denardo-alom.csclub can be used to power machine on/off

== ''artificial-flavours'' ==

Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).

==== Specs ====

* Intel Celeron 3.2GHz
* 2GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard
* Western-Digital 80 GB ATA hard drive

== ''potassium-citrate'' ==

Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.

It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).

==== Specs ====
* Alphaserver CS20 (2 833MHz EV68al CPUs)
* 512MB RAM
* 36 GB Seagate SCSI hard drive

== ''potassium-nitrate'' ==

This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).

The name is from saltpetre, because sparks.

==== Specs ====

* 24 CPUs
* 90GB main memory
* 400GB scratch disk local storage in /scratch-potassium-nitrate

There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.

See also [[Sun 2900]].

== ''taurine'' ==

'''Note: On August 21, 2019, just before 2:30PM EDT, we were informed that taurine caught fire'''. As a result, taurine has been decommissioned as of Fall 2019.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 8GB RAM
* 136 GB LVM volume group

==== Services ====

* Virtual machines
* BitlBee IRC instant messaging gateway (localhost only)
* [[ident]] server to maintain high connection cap to freenode
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

== ''dextrose'' ==

dextrose was a [[#taurine|taurine]] clone donated by CSCF and was decommissioned in Fall 2019 after being replaced with a more powerful server.

== ''sucrose'' ==

sucrose was a [[#taurine|taurine]] clone donated by CSCF. It was decommissioned in Fall 2019 following multiple hardware failures.

== ''goto80'' ==
'''Note (2022-10-25): This seems to have gone missing or otherwise left our hands.'''

This was small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located was the office on the top shelf above strombola.

==== Specs ====

* 500 MHz Feroceon (ARM926ej-s compatible) processor
* ARMv5TEJ architecture

Use -march=armv5te -mtune=arm926ej-s options to GCC.

For information on the TS-7800's hardware see here:
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800

= UPS =

All of the machines in the MC 3015 machine room are connected to one of our UPSs.

All of our UPSs can be monitored via CSCF:

* MC3015-UPS-B2
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)

We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].

TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.

Firewall

2022-11-13T04:41:48Z

R389li: Use the syscom account for Jira access

Our networks are behind the University's Campus firewall. This means that traffic to us is automatically dropped at the edge of campus unless we have exceptions added for it.

= Current Exceptions =

== Office Terminals ==

No exceptions in the campus firewall.

== General Use ==

* Port 22 (SSH), plus additional SSH ports on taurine (21, 53, 80, 81, 443, 8000, 8080)
* Ports 60000–61000 (Mosh)
* Ports 28000-28500 (TCP/UDP general use)

== Webserver ==

* caffeine has ports 22 (SSH), 80 (HTTP), 443 (HTTPS), 11068 (HTTP for rridge) and UDP 60000–61000 (Mosh)
* wiki is now a CNAME for caffeine
* git has ports 80 (HTTP) and 443 (HTTPS)

== Mail ==

* mail has ports 25 (SMTP), 80 (HTTP), 143 (IMAP), 443 (HTTPS), 587 (MAIL SUBMISSION), 993 (IMAPS)
* mailman has ports 80 (HTTP) and 443 (HTTPS)

== Mirror ==

* mirror has ports 21 (FTP), 22 (SSH), 80 (HTTP), 443 (HTTPS), 873 (RSYNC)

== IPv6 Test ==

* ds.test-ipv6, mtu1280.test-ipv6 have ports 80 (HTTP), 443 (HTTPS)
* v6ns1.test-ipv6 has port 53 (DNS)

== Cloud ==

* load-balancer: 22 (SSH), 80 (HTTP) and 443 (HTTPS)
* load-balancer.cloud: 80 (HTTP) and 443 (HTTPS)
* object.cloud.csclub: 80 (HTTP) and 443 (HTTPS)

== BigBlueButton ==

* bbb has TCP ports 80 (HTTP) and 443 (HTTPS)
* bbb has UDP ports 16384 - 32768 (for WebRTC)

== drone.io (ci) ==

* ci has TCP ports 80 (HTTP) and 443 (HTTPS)

== progcom ==
* progcom has TCP ports 80 (HTTP) and 443 (HTTPS)

== Other Web Services ==

rt, munin, prometheus

* 80 (HTTP) and 443 (HTTPS)

= Adding Exceptions =

Create a ticket on the [https://uwaterloo.atlassian.net/servicedesk/customer/portal/2/group/413/create/805 UWaterloo Help Portal]. Use the syscom account unless you already have an account and IST knows it.

Office Policies

2022-11-04T03:18:28Z

R389li: Protected "Office Policies": Rules page ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

The following are the day-to-day policies for running the CSC Office. They are set down by the Office Manager or, should there not be a current Office Manager, by the Secretary.

* There must be an office staff member present in the office at all times when it is open.
* If issues arise, office staff are expected to be the adults and deal with them professionally, rather than making problems worse.
* Any significant incidents, including harassment, must be reported to the Office Manager, even if they get resolved.
* If there are people in the office, the doors should be open.
* Don't be excessively rude or loud in the office.
* Don't violate the privacy of others: e.g. if someone leaves their terminal unlocked, don't do anything that might get them angry at you.
* Desks and wheely chairs are primarily for use with office terminals: i.e. if you are sitting in/at one and are not using the terminal, anyone may kick you out to use the terminal.
* Chairs are for people over bags. If you leave a bag on a chair and someone comes along needing a seat, they take priority over your bag.
* If you leave your terminal and don't announce that you're coming back, or are gone for more than 5 minutes, someone else can take it.
* No sleeping in the office.
* No sex in the office.
* No distracting games in the office. Academics and club-related activities take priority.
* Nothing illegal in the office.
* The office is not your locker: if you choose to leave things here, you do so at your own risk; CSC/office staff is not responsible for any theft/loss/damage that may occur.
* The office is not your pantry: do not leave your food here.
* Clean up your garbage.
* The stapler may be used only inside the office, or for club business.
* The office phone is primarily for club business. You may use it for emergencies and brief calls, but do not use it excessively or to conduct business.
* Don't play music when you aren't in the office (but it's OK to leave with music queued up).
* Share the music queue.
* Keep music at a reasonable volume.

[[Category:Policy]]
[[Category:Office]]

Office Policies

2022-11-03T05:58:48Z

R389li: Revert food change

Office Policies

2022-11-02T20:38:21Z

R389li: Propose some new rules

The following are the day-to-day policies for running the CSC Office. They are set down by the Office Manager or, should there not be a current Office Manager, by the Secretary.

* There must be an office staff member present in the office at all times when it is open.
* If issues arise, office staff are expected to be the adults and deal with them professionally, rather than making problems worse.
* Any significant incidents, including harassment, must be reported to the Office Manager, even if they get resolved.
* If there are people in the office, the doors should be open.
* Don't be excessively rude or loud in the office.
* Don't violate the privacy of others: e.g. if someone leaves their terminal unlocked, don't do anything that might get them angry at you.
* Desks and wheely chairs are primarily for use with office terminals: i.e. if you are sitting in/at one and are not using the terminal, anyone may kick you out to use the terminal.
* Chairs are for people over bags. If you leave a bag on a chair and someone comes along needing a seat, they take priority over your bag.
* If you leave your terminal and don't announce that you're coming back, or are gone for more than 5 minutes, someone else can take it.
* No sleeping in the office.
* No sex in the office.
* No distracting games in the office. Academics and club-related activities take priority.
* Nothing illegal in the office.
* The office is not your locker: if you choose to leave things here, you do so at your own risk; CSC/office staff is not responsible for any theft/loss/damage that may occur.
* The office is not your pantry: if you leave food here it may get eaten.
* Clean up your garbage.
* The stapler may be used only inside the office, or for club business.
* The office phone is primarily for club business. You may use it for emergencies and brief calls, but do not use it excessively or to conduct business.
* Don't play music when you aren't in the office (but it's OK to leave with music queued up).
* Share the music queue.
* Keep music at a reasonable volume.

[[Category:Policy]]
[[Category:Office]]

ZNC

2022-11-01T17:52:59Z

R389li: Sunset

=== ZNC will be sunset on 7 November, 2022. Please migrate to another service, like our The Lounge instance, which provides message history automatically. ===
This page describes client and server setup for ZNC with LDAP authentication.
If you're new to IRC, see [[How to IRC]] to get started. For more info on ZNC, see [https://wiki.znc.in/ZNC].

== ZNC setup ==
These instructions show how to connect to the <code>#csc</code> channel on libera.chat via ZNC.
<ol>
<li>
Visit the ZNC web portal at [https://znc.csclub.uwaterloo.ca znc.csclub.uwaterloo.ca] and login using your CSC credentials.
</li>
<li>
Go to "Your Settings". Under "Networks", if you do not see a network called "libera", then click "Add", type "libera" for the Network Name, edit your nickname if desired, and enter the following into the IRC servers table:
<pre>
Hostname Port SSL
irc.libera.chat 6697 [Checked]
</pre>
</li>
<li>
(Optional, but recommended): Under the settings for libera, check the box which says "Connect to IRC & automatically re-connect". This will connect you to Libera as soon as you connect to ZNC.
</li>
<li>
Set your nick, alt. nick, and ident for libera. Make sure these all have the same value. By default these are set to %user% which will expand to your csc username.
If you are already logged in to libera with your csc username on a different IRC client, make sure to change your nick here
as two different connections cannot share the same nick.
</li>
<li>
Under the "channels" section for libera, click "Add", then enter <code>#csc</code> in the "Channel Name" field, and check the boxes "Save to config", "Detached", and "Enabled". Click "Add Channel and return".
</li>
</ol>
Now you will connect to ZNC with an IRC client.

== IRC Client setup ==
=== The Lounge (chat.csclub.uwaterloo.ca) ===
<ol>
<li>
Under network settings, name can be anything you want.
</li>
<li>
Server should be set to <code>znc.csclub.uwaterloo.ca</code>, and port <code>6697</code>. The password is <code><zncusername>:<zncpassword></code>. If you have multiple networks configured, i.e. Libera and Freenode, use <code><zncusername>/<networkname>:<zncpassword></code> for the password. Also set your nick, username and real name.
</li>
<li>
Under Authentication, choose <code>Username + password (SASL PLAIN)</code>, and enter your LIBERA nick and password.
</li>
</ol>

=== Weechat ===
<ol>
<pre>
/server add myznc znc.csclub.uwaterloo.ca/6697 -username=<CSC_USERNAME>/libera -password=<CSC_PASSWORD> -ssl -autoconnect
/connect myznc
/join #csc
</pre>
Don't forget to concatenate "/libera" to the end of your username.

<li>
If you did not check the autoconnect box, you will need to manually connect using:
<pre>
/msg *status connect
</pre>
To verify that you are connected to Libera, run
<pre>
/msg *status ListNetworks
</pre>
The "IRC" column should have the value "Yes".
</li>
<li>
A modified version of the backlog module [https://wiki.znc.in/Backlog] is enabled globally. To use this, first enable the <kbd>log</kbd> module for your user via the web UI. You will then be able to request older logs for a channel from your IRC client, e.g.
<pre>
/msg *backlog #csc 42
</pre>
Note that you do <b>not</b> need to specify the log path.
</li>
</ol>

== Server setup ==
Note that the following instructions are about setting up a ZNC instance with support for LDAP authentication, similar to the CSC ZNC, and it is ''not'' about configuring an IRC client to connect to ZNC. For that, see the [[ZNC#Client_setup|Client setup]] section above.

=== saslauthd setup ===
For LDAP authentication, we use the Cyrusauth module [https://wiki.znc.in/Cyrusauth], which needs to communicate with the SASL authentication daemon (saslauthd).
<ol>
<li>
On the server, install the following packages:
<pre>apt install sasl2-bin ca-certificates</pre>
</li>
<li>
Open /etc/default/saslauthd, and change the following lines:
<pre>
START=yes
MECHANISM="ldap"
</pre>
</li>
<li>
Paste the following into /etc/saslauthd.conf:
<pre>
ldap_servers: ldaps://auth1.csclub.uwaterloo.ca ldaps://auth2.csclub.uwaterloo.ca
ldap_search_base: ou=People,dc=csclub,dc=uwaterloo,dc=ca
ldap_filter: (uid=%u)
</pre>
</li>
<li>
Start saslauthd:
<pre>
# service saslauthd start
</pre>
</li>
<li>
Test saslauthd to make sure it's working:
<pre>
$ testsaslauthd -u "your_csc_username" -p "your_csc_password"
</pre>
You should see a response like
<pre>
0: OK "Success."
</pre>
</li>
</ol>
=== ZNC setup ===
<ol>
<li>
Install ZNC:
<pre>
# apt install znc
</pre>
</li>
<li>
Add a user for ZNC and create an initial configuration:
<pre>
# useradd -s /bin/bash -m znc
# usermod -a -G sasl znc
# su - znc
$ znc --makeconf
</pre>
Note that the znc user <b>must</b> be part of the sasl group to communicate with saslauthd.
</li>
<li>
Visit the web interface at <SERVER_IP>:<PORT>. Note that you may need to modify your browser settings so that you can visit a website at port 6667 or 6697.
</li>
<li>
Log in using your admin credentials, then go to "Global Settings". Check the "cyrusauth" box, type "saslauthd" in the arguments input field, then scroll to the bottom and click "Save".
</li>
<li>
You will now need to connect to ZNC with an IRC client. The commands below assume Weechat is being used, but other clients should be similar.
<pre>
/server add myznc <SERVER_IP>/<PORT> -username=<ADMIN_USERNAME> -password=<ADMIN_PASSWORD>
/connect myznc
/msg *Cyrusauth CreateUsers yes
</pre>
This will tell ZNC to create a new user on their first login.
</li>
<li>
You may optionally wish to create users from a template (i.e. dummy) user to share some common per-user settings, such as MaxNetworks. To do this, login to the ZNC web interface as admin and click on "Manage Users". Add a new user called "dummy" with the desired settings, then click "save".
Now open Weechat, login to ZNC as admin, and run the following:
<pre>
/msg *Cyrusauth CreateUsers clone dummy
</pre>
This will tell ZNC to clone new users using "dummy" as the template.
</li>
<li>
You may wish to optionally enable the adminlog module [https://wiki.znc.in/Adminlog] so that you can see who has logged in from where at what time. By default, these logs will be written to a file. To prevent this file from growing too long, install logrotate and paste the following into /etc/logrotate.d/znc:
<pre>
/home/znc/.znc/moddata/adminlog/znc.log {
rotate 4
weekly
compress
}
</pre>
This will keep rotate logs every week, discarding logs after they have been rotated 4 times.
</li>
</ol>
=== NGINX tuning ===
If you are running ZNC behind NGINX as a reverse proxy, keep in mind that by default, NGINX will run one worker process per CPU core. To reduce this, change the following in <kbd>/etc/nginx/nginx.conf</kbd>:
<pre>
worker_processes 4
</pre>

Music

2022-10-25T22:37:18Z

R389li: Rename syscom info to termcom info

Music is run off <code>nullsleep</code>, since that's the computer with the speakers attached.

All music files are in <code>/music</code>. You may or may not be required to be a member of the audio group to actually play tracks

View recently listened tracks: http://www.last.fm/user/csclub

== How to play music ==

# Run <code>ssh nullsleep</code> from an office terminal.
# Run <code>ncmpcpp</code>
# That's it!

== Controls ==
To view the keybindings of ncmpcpp, press F1 while it's running.
The number keys switch between tabs in it.

* 1 is current playlist
* 2 is browsing files
* 3 is search
* 4 is browsing the media library
* 5 is browsing saved playlists, etc.

== Termcom Info ==

* We require https://github.com/hrkfdn/mpdas to get scrobbling working as it "official" last.fm integration was removed from mpd in 2013.
** n.b. https://github.com/hrkfdn/mpdas/issues/58
* To control the mixer on other terminals, use <code>PULSE_SERVER=nullsleep pavucontrol</code>
* The official last.fm account credentials are stored in the exec password spot :)

User:R389li

2022-10-19T20:27:49Z

R389li: Add terms

= Whoami =

* Better known as <code>raymo</code> on the internet <span class="plainlinks">[https://raymond.li Raymond.Li]</span>
* Current CSC sysadmin (w2022, s2022, f2022) and syscom member (s2021, f2021, w2022, s2022, f2022)
* <span class="plainlinks">[https://ctf.uwaterloo.ca CTF Club]</span> president
* <span class="plainlinks">[https://github.com/Raymo111/i3lock-color i3lock-color]</span> maintainer
* Recommends you DON'T take 7 courses in a term. Ever.

SSL

2022-10-12T21:49:48Z

R389li: Add note to restart slapd

== GlobalSign ==

The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time to respond to certificate signing requests (CSR) for wildcard certs, so our CSR really needs to be handed off to IST at least 2 weeks in advance. You can do it sooner – the certificate expiry date will be the old expiry date + 1 year (+ a bonus ) Having an invalid cert for any length of time leads to terrible breakage, followed by terrible workarounds and prolonged problems.

When the certificate is due to expire in a month or two, syscom should (but apparently doesn't always) get an email notification. This will include a renewal link. Otherwise, use the [https://uwaterloo.ca/information-systems-technology/about/organizational-structure/information-security-services/certificate-authority/globalsign-signed-x5093-certificates/self-service-globalsign-ssl-certificates IST-CA self service system]. Please keep a copy of the key, CSR and (once issued) certificate in <tt>/home/sysadmin/certs</tt>. The OpenSSL examples linked there are good to generate a 2048-bit RSA key and a corresponding CSR. It's probably a good idea to change the private key (as it's not that much effort anyways). Just sure your CSR is for <tt>*.csclub.uwaterloo.ca</tt>.

At the self-service portal, these options worked in 2013. If you need IST assistance, [mailto:ist-ca@uwaterloo.ca ist-ca@uwaterloo.ca] is the email address you should contact.
Products: OrganizationSSL
SSL Certificate Type: Wildcard SSL Certificate
Validity Period: 1 year
Are you switching from a Competitor? No, I am not switching
Are you renewing this Certificate? Yes (paste current certificate)
30-day bonus: Yes (why not?)
Add specific Subject Alternative Names (SANs): No (*.csclub.uwaterloo.ca automatically adds csclub.uwaterloo.ca as a SAN)
Enter Certificate Signing Request (CSR): Yes (paste CSR)
Contact Information:
First Name: Computer Science Club
Last Name: Systems Committee
Telephone: +1 519 888 4567 x33870
Email Address: syscom@csclub.uwaterloo.ca

=== Helpful links ===
* [https://support.globalsign.com/ssl/ssl-certificates-installation/generate-csr-openssl How to generate a new CSR and private key]
* [https://uwaterloo.atlassian.net/wiki/spaces/ISTKB/pages/262013183/How+to+obtain+a+new+GlobalSign+certificate+or+renew+an+existing+one How to obtain a new GlobalSign certificate or renew an existing one]
* [https://system.globalsign.com/bm/public/certificate/poporder.do?domain=PAR12271n5w6s27pvg8d92v4150t GlobalSign UWaterloo self-service page]
* [https://support.globalsign.com/ca-certificates/intermediate-certificates/organizationssl-intermediate-certificates GlobalSign intermediate certificate] (needed to create a certificate chain; see below)

=== OpenSSL cheat sheet ===
<ul>
<li>
Generate a new CSR and private key (do this in a new directory):
<pre>
openssl req -out csclub.uwaterloo.ca.csr -new -newkey rsa:2048 -keyout csclub.uwaterloo.ca.key -nodes
</pre>
Enter the following information at the prompts:
<pre>
Country Name (2 letter code) [AU]:CA
State or Province Name (full name) [Some-State]:Ontario
Locality Name (eg, city) []:Waterloo
Organization Name (eg, company) [Internet Widgits Pty Ltd]:University of Waterloo
Organizational Unit Name (eg, section) []:Computer Science Club
Common Name (e.g. server FQDN or YOUR name) []:*.csclub.uwaterloo.ca
Email Address []:systems-committee@csclub.uwaterloo.ca

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
</pre>
</li>
<li>
View the information inside a CSR:
<pre>
openssl req -noout -text -in csclub.uwaterloo.ca.csr
</pre>
</li>
<li>
View the information inside a private key:
<pre>
openssl pkey -noout -text -in csclub.uwaterloo.ca.key
</pre>
</li>
<li>
View information inside a certificate:
<pre>
openssl x509 -noout -text -in csclub.uwaterloo.ca.crt
</pre>
</li>
</ul>

=== csclub.cloud ===
Once a year, someone from IST will ask us to create a temporary TXT record for csclub.cloud to prove to GlobalSign that we own it. This must be created at the <b>root</b> of the domain. Since this zone is managed dynamically (via the acme.sh script on biloba, see below), we need to freeze the domain and update /var/lib/bind/db.csclub.cloud directly. Here are the steps:
<ol>
<li>Run <code>rndc freeze csclub.cloud</code>.</li>
<li>
Open /var/lib/bind/db.csclub.cloud and add a new TXT record. It'll look something like
<pre>
TXT "_globalsign-domain-verification=blablabla"
</pre>
</li>
<li>
In the same file, make sure to also update the SOA serial number. It should generally be YYYYMMDDNN where NN is a monotonically increasing counter (YYYYMMDD is the current date).
</li>
<li>Run <code>rndc reload</code>.</li>
<li>
Run a DNS query to make sure you can see the TXT record:
<pre>
dig -t txt @dns1 csclub.cloud
dig -t txt @dns2 csclub.cloud
</pre>
</li>
<li>Email back the person from IST and let them know that we created the TXT record.</li>
<li>
Once the certificate has been renewed, delete the TXT record, update the SOA serial number, and run <code>rndc reload</code>.
</li>
<li>Run <code>rndc thaw csclub.cloud</code>.</li>
</ol>

== Certificate Files ==
Let's say you obtain a new certificate for *.csclub.uwaterloo.ca. Here are the files which should be stored in the certs folder:
<ul>
<li>csclub.uwaterloo.ca.key: private key created by openssl</li>
<li>csclub.uwaterloo.ca.csr: certificate signing request created by openssl</li>
<li>order: order number from GlobalSign</li>
<li>csclub.uwaterloo.ca.crt: certificate created by GlobalSign</li>
<li>globalsign-intermediate.crt: intermediate certificate from GlobalSign, obtainable from [https://support.globalsign.com/ca-certificates/intermediate-certificates/organizationssl-intermediate-certificates here]. As of this writing, we use the "OrganizationSSL SHA-256 R3 Intermediate Certificate". Just click the "View in Base64" button and copy the contents.
<ul>
<li>There is an alternative way to get the intermediate certificate: if you run <code>openssl x509 -noout -text -in csclub.uwaterloo.ca.crt</code>, under X509v3 extensions > Authority Information Access, there should be a field called "CA Issuers" which has a URL which looks like http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt. You can download that file and convert it to PEM:
<pre>
wget https://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
openssl x509 -inform der -in gsrsaovsslca2018.crt -out globalsign-intermediate.crt
rm gsrsaovsslca2018.crt
</pre>
</li>
</ul>
</li>
</ul><ul>
<li>csclub.uwaterloo.ca.chain: create this with the following command:
<pre>
cat csclub.uwaterloo.ca.crt globalsign-intermediate.crt > csclub.uwaterloo.ca.chain
</pre>
</li>
<li>csclub.uwaterloo.ca.pem: create this with the following command:
<pre>
cat csclub.uwaterloo.ca.key csclub.uwaterloo.ca.chain > csclub.uwaterloo.ca.pem
chmod 600 csclub.uwaterloo.ca.pem
</pre>
</li>
</ul>

== Certificate Locations ==

Keep a copy of newly generated certificates in /home/sysadmin/certs on the NFS server (currently [[Machine_List#xylitol|xylitol]]).

A list of places you'll need to put the new certificate to keep our services running. Private key (if applicable) should be kept next to the certificate with the extension .key.

* caffeine:/etc/ssl/private/csclub-wildcard.crt (for Apache)
* coffee:/etc/ssl/private/csclub.uwaterloo.ca (for PostgreSQL and MariaDB)
* mail:/etc/ssl/private/csclub-wildcard.crt (for Apache, Postfix and Dovecot)
* mailman:/etc/ssl/private/csclub-wildcard-chain.crt (for Apache)
* rt:/etc/ssl/private/csclub-wildcard.crt (for Apache)
* potassium-benzoate:/etc/ssl/private/csclub-wildcard.crt (for nginx)
* phosphoric-acid:/etc/ssl/private/csclub-wildcard-chain.crt (for ceod)
* auth1:/etc/ssl/private/csclub-wildcard.crt (for slapd, make sure to <code>sudo service slapd restart</code>)
* auth2:/etc/ssl/private/csclub-wildcard.crt (for slapd, make sure to <code>sudo service slapd restart</code>)
* logstash:/etc/ssl/private/csclub-wildcard.crt (for nginx) [temporarily down 2020]
* mattermost:/etc/ssl/private/csclub-wildcard.crt (for nginx)
* load-balancer-0(1|2):/etc/ssl/private/csclub.uwaterloo.ca (for haproxy) [temporarily down 2020]
* chat:/etc/ssl/private/csclub-wildcard-chain.crt (for nginx)
* znc:/etc/ssl/private/csclub-wildcard-chain.crt (for ZNC and nginx)
* prometheus:/etc/ssl/private/csclub-wildcard-chain.crt (for Apache)
* bigbluebutton:/etc/nginx/ssl/csclub-wildcard-chain.crt (podman container on xylitol)
* icy:/etc/ssl/private/csclub-wildcard.pem (for Icecast)
* chamomile:/etc/ssl/private/cloud.csclub.uwaterloo.ca.chain.crt, /etc/ssl/private/csclub.cloud.chain, /etc/ssl/private/csclub.uwaterloo.ca.chain (for nginx)
* biloba:/etc/ssl/private/cloud.csclub.uwaterloo.ca.chain.crt, /etc/ssl/private/csclub.cloud.chain, /etc/ssl/private/csclub.uwaterloo.ca.chain (for nginx)
* nextcloud (nspawn container inside guayusa): /etc/ssl/private/csclub.uwaterloo.ca.chain (for nginx)

Some services (e.g. Dovecot, Postfix) prefer to have the certificate chain in one file. Concatenate the appropriate intermediate root to the end of the certificate and store this as csclub-wildcard-chain.crt.

=== More certificate locations ===
We have some SSL certificates which are not used by web servers, but still need to be renewed eventually.

==== Prometheus node exporter ====
All of our Prometheus node exporters are using mTLS via stunnel (every bare-metal host, as well as caffeine, coffee and mail, is running this exporter). The certificates (both client and server) are set to expire in <b>September 2031</b>; before then, create new keypairs in /opt/prometheus/tls, and deploy the new server.crt, node.crt and node.key to /etc/stunnel/tls on all machines. Restart prometheus and all of the node exporters.

==== ADFS ====
See [[ADFS]]. When the university's IdP certificate expires (<b>October 2025</b>), we can just download a new one and restart Apache; when our own certificate expires (<b>July 2031</b>), we need to submit a new form to IST (please do this <i>before</i> the cert expires).

==== Keycloak ====
See [[Keycloak]]. When the saml-passthrough certificate expires (<b>January 2032</b>), you need to create a new keypair in /srv/saml-passthrough on caffeine, and upload the new certificate into the Keycloak UI (IdP settings). When the Keycloak SP certificate expires (<b>December 2031</b>), make sure to create a new keypair and upload it to the Keycloak UI (Realm Settings).

== letsencrypt ==

We support letsencrypt for our virtual hosts with custom domains. We use the <tt>cerbot</tt> from debian repositories with a configuration file at <tt>/etc/letsencrypt/cli.ini</tt>, and a systemd timer to handle renewals.

The setup for a new domain is:

# Become <tt>certbot</tt> on caffine with <tt>sudo -u certbot bash</tt> or similar.
# Run <tt>certbot certonly -c /etc/letsencrypt/cli.ini -d DOMAIN --logs-dir /tmp</tt>. The logs-dir isn't important and is only needed for troubleshooting.
# Set up the Apache site configuration using the example below. (apache config is in /etc/apache2) Note the permanent redirect to https.
# Make sure to commit your changes when you're done.
# Reloading apache config is <tt>sudo systemctl reload apache2</tt>.

<VirtualHost *:80>
ServerName example.com
ServerAlias *.example.com
ServerAdmin example@csclub.uwaterloo.ca

#DocumentRoot /users/example/www/
Redirect permanent / https://example.com/

ErrorLog /var/log/apache2/example-error.log
CustomLog /var/log/apache2/example-access.log combined
</VirtualHost>

<VirtualHost csclub:443>
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
SSLStrictSNIVHostCheck on

ServerName example.com
ServerAlias *.example.com
ServerAdmin example@csclub.uwaterloo.ca

DocumentRoot /users/example/www

ErrorLog /var/log/apache2/example-error.log
CustomLog /var/log/apache2/example-access.log combined
</VirtualHost>

== acme.sh ==
We are using [https://github.com/acmesh-official/acme.sh acme.sh] for provisioning SSL certificates for some of our *.csclub.cloud domains. It is currently set up under /root/.acme.sh on biloba.

<b>NOTE</b>: acme.sh has a cron job which automatically renews certificates before they expire and reloads NGINX, so you do not have to do anything after issuing and installing a certificate (i.e. "set-and-forget").

=== Installation ===
<pre>
cd /opt
git clone --depth 1 https://github.com/acmesh-official/acme.sh
cd acme.sh
./acme.sh --install -m syscom@csclub.uwaterloo.ca
. "/root/.acme.sh/acme.sh.env"
</pre>
<b>Important</b>: If invoking acme.sh from another program, it needs the environment variables set in acme.sh.env. Currently, that is just
<pre>
LE_WORKING_DIR="/root/.acme.sh"
</pre>

For testing purposes, make sure to use the Let's Encrypt test server:
<pre>
acme.sh --set-default-ca --server letsencrypt_test
</pre>

=== NGINX setup ===
<pre>
mkdir -p /var/www/.well-known/acme-challenge
</pre>
Add the following snippet to your default NGINX file (e.g. /etc/nginx/sites-enabled/default):
<pre>
# For Let's Encrypt
location /.well-known/acme-challenge/ {
alias /var/www/.well-known/acme-challenge/;
}
</pre>

Now assuming that biloba has the IP address for *.csclub.cloud, you can test that everything is working:
<pre>
acme.sh --issue -d app.merenber.csclub.cloud -w /var/www
</pre>
To install a certificate after it's been issued:
<pre>
acme.sh --install-cert -d app.merenber.csclub.cloud \
--key-file /etc/nginx/ceod/member-ssl/app.merenber.csclub.cloud.key \
--fullchain-file /etc/nginx/ceod/member-ssl/app.merenber.csclub.cloud.chain \
--reloadcmd "systemctl reload nginx"
</pre>
At this point, you should add your NGINX vhost file which uses that SSL certificate.
<br><br>
To remove a certificate:
<pre>
acme.sh --remove -d app.merenber.csclub.cloud
rm -r /root/.acme.sh/app.merenber.csclub.cloud
rm /etc/nginx/ceod/member-ssl/app.merenber.csclub.cloud.chain
rm /etc/nginx/ceod/member-ssl/app.merenber.csclub.cloud.key
</pre>
Don't forget to remove the NGINX vhost file too.

Once you think you're ready, use a real ACME provider, e.g.
<pre>
acme.sh --set-default-ca --server letsencrypt
</pre>

Since we have a [https://zerossl.com ZeroSSL] account, and ZeroSSL has no rate limit, we are going to use that instead:
<pre>
acme.sh --register-account --server zerossl \
--eab-kid xxxxxxxxxxxx \
--eab-hmac-key xxxxxxxxx
acme.sh --set-default-ca --server zerossl
</pre>

=== DNS challenge ===
To obtain a wildcard certificate (e.g. *.k8s.csclub.cloud), you will need to perform the DNS-01 challenge. We are going to use nsupdate to interact with our BIND9 server on dns1.

On dns1, run:
<pre>
tsig-keygen csc-cloud
</pre>
Paste the output into the appropriate section in /etc/bind/named.conf.local. Also paste it into a file somewhere on biloba, e.g. /etc/csc/csc-cloud-tsig.key.

Add the following to the csclub.cloud zone block:
<pre>
allow-update {
!{
!127.0.0.1;
!::1;
!129.97.134.0/24;
!2620:101:f000:4901::/64;
any;
};
key csc-cloud;
};
</pre>
(We're basically trying to restrict updates to the given IP ranges. See https://serverfault.com/a/417229.)

The 'bind' user can't write to files under /etc/bind, so we're going to move our zone file to /var/lib/bind instead.
Comment out 'file "/etc/bind/db.csclub.cloud";' from named.conf.local and add this line below it:
<pre>
file "/var/lib/bind/db.csclub.cloud";
</pre>
Then run:
<pre>
cp /etc/bind/db.csclub.cloud /var/lib/bind/db.csclub.cloud
chown bind:bind /var/lib/bind/db.csclub.cloud
rndc reload
</pre>

On biloba, check that everything's working:
<pre>
nsupdate -k /etc/csc/csc-cloud-tsig.key -v <<EOF
update add test.csclub.cloud 300 A 0.0.0.0
send
EOF
</pre>
Use a tool such as <code>dig</code> to make sure that the update was successful.
If it worked, you can delete the record:
<pre>
nsupdate -k /etc/csc/csc-cloud-tsig.key -v <<EOF
delete test.csclub.cloud
send
EOF
</pre>
Now we are ready to actually perform the challenge with acme.sh:
<pre>
export NSUPDATE_SERVER="dns1.csclub.uwaterloo.ca"
export NSUPDATE_KEY="/etc/csc/csc-cloud-tsig.key"
acme.sh --issue --dns dns_nsupdate -d 'k8s.csclub.cloud' -d '*.k8s.csclub.cloud'
</pre>
(If something goes wrong, use the <code>--debug</code> flag.)

If all went well, just install the certificate as usual:
<pre>
acme.sh --install-cert -d k8s.csclub.cloud \
--key-file /etc/nginx/ceod/syscom-ssl/k8s.csclub.cloud.key \
--fullchain-file /etc/nginx/ceod/syscom-ssl/k8s.csclub.cloud.chain \
--reloadcmd 'systemctl reload nginx'
</pre>

Past Executive

2022-09-16T03:19:20Z

R389li: Standardize formatting

Data sources for this exec list have been: CSC records, MathNEWS.
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.

= Definitions =
#define PR President
#define VP Vice-president
#define TR Treasurer
#define SE Secretary
#define AV Assistant Vice-president
#define SA Sysadmin
#define OF Office Manager
#define LI Librarian
#define FL Flasher
#define DE Deity
#define WW Webmaster
#define SE-TR Secretary-Treasurer (Position was split)
#define FR Fridge Regent (IMAPd)

<div style="float:right;margin-left: 1em;">__TOC__</div>

=Founding 1967=

Sponsor - J. Peter Sprung
PR: K. Rugger
VP: R. Jaques
SE-TR: G. Sutherland

Founding Members:
B. Kindree
R. Melen
V. Neglia
R. Charney
R. Truman
Glenn Berry
D. Meek

===Fall===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

Committee members: R. Stallwerthy, C. de Vries

=1968=

===Winter===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

===Fall===

SE-TR: Glenn Berry

=1969=

Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.

=1970=

===A note on ACM affiliation===

The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970

===Fall===

PR: Rick Beach
VP: Lee Santon
TR: Randy Melen
SE: Vic Neglia

=1971=

===Spring===

VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.

===Fall===

VP: James W. Welch

=1972=

It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.

===Winter===

PR: Mike Campbell
VP: Edgar Hew
SE-TR: Doug Lacy

There is also stuff from James W. Welch without a position.

===Fall===

PR: Ian McIntosh

=1973=

Faculty Sponsor: Morven Gentleman

===Winter===

SE: Douglas E. Lacy

===Spring===

PR: Jim Parry

===Fall===

PR: Jim Parry
VP: Ray Walden
TR: Slavko Stemberger
SE: Mario Festival

=1974=

===Fall===

PR: Russell Crook

=1975-1977=

Faculty Sponsor: Morven Gentleman??

Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.
Sylvia Eng: 1975/6 as some position.
Dave Buckingham: a VP at some point
Allison Nolan: 1977 time
Peter Stevens: 1977
Russel Crook???

Dennis Ritchie came. So did Jeffrey D. Ullman.

=1976=

===Fall===
<code>Progcom: Peter Stevens</code>

=1977=

===Winter===

Progcom: Allison Nowlan

===Spring===

PR: Peter Stevens
Progcom: Allison Nowlan

===Fall===

PR: Andrzej Jan Taramina
Progcom: Allison Nowlan

=1978=

===Winter===

PR: Peter Stevens

===Spring===

TR: K.G. Dykes
SE: Kandry Mutheardy

Brian Kernighan gave a talk this term. So did Ken Thompson.

=1979=

===Spring===

PR: Robert Biddle
=1987=

===Fall===

PR: Jim Boritz
VP: Ted Timar
TR: Gayla Boritz
SE: Edwin Hoogerbeets

=1988=

Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Rob*n Stewart did as an assignment in 1991-1992 for some class at UBC
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was our first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.

===Winter===
PR: Jim Boritz
(Source: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Fall===

SA: Wade Richards

=1989=

===Winter===

https://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg

Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ???

PR: Barry W. Smith
VP: Angela Chambers
SE: Sean Goggin
SA: Wade Richards / Ross Ridge

(President Kevin Smith confirmed: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Spring===

PR: Jim Thornton
VP: Gayla Boritz
TR: David Fenger
SE: Kivi Shapiro
SA: Reid Pinchback

Assistance to sysadmin: Jim Boritz.

===Fall===

PR: James Boritz
VP: Edmond Bourne
SA: Ross Ridge

=1990=

===Winter===

TR: Jim Thornton

===Spring===

TR: Karen Smith
SE: Rob*n Stewart
Robyn/Robin signed her emails as Rob*n and requested to be listed as such on this page.

===Fall===
PR: Wade Richards
TR: Carolyn Duke
SE: Rob*n Stewart - attended mathsoc meeting on our behalf.
Kivi Shapiro - attended mathsoc meeting on our behalf.
- Censured by mathsoc for his actions during the election.
Shannon Mann - attended mathsoc meeting on our behalf.

=1991=

===Winter===
VP: Edmond Bourne
TR: Carolyn Duke
SE: Rob*n Stewart
Shannon Mann - attended mathsoc meeting on our behalf.

John McCarthy came this term.

===Spring===
TR: Rob Leitman
Jason Knell - attended mathsoc meeting on our and PMC's behalf.

===Fall===
TR: Mike Van Lingen
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.
=1992=

===Winter===
TR: Norm Ross
SE: Brent Williams

===Spring===
PR: Dale Wick
TR: Stephen A. Mills

===Fall===
TR: Mark Plumb
=1993=

===Winter===
TR: Rob Leitman
VP: Tim Prime
OF: Dave Ebbo
LI: Norm Ross

Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray

===Spring===
TR: Mark Tompsett

===Fall===

PR: Ian Goldberg

=1994=

===Winter===
PR: Ian Goldberg
TR: Mark Tompsett
SE: Tom Rathbourne
LI: Michael Van Biesbrouck
Norm Ross assisted with finances.

===Spring===
PR: Dale Wick (?)
TR: Steve Mills
SA: Ian Goldberg (?)
Norm Ross assisted with finances.

===Fall===
PR: Ross Ridge
VP: Tom Rathbourne (?)
TR: Rob Leitman
SA: Zygo Blaxell
LI: Michael Van Biesbrouck
=1995=

===Winter===
TR: Sharlene Schmeichel
Amy Brown and Rob Ridge purchased books.

===Spring===
TR: Steve Mills

===Fall===
PR: Amy Brown (arbrown)
VP: Christina Norman (cbnorman)
TR: Steven Mills (samills)
SE: Allyson Graham (akgraham)
SA: Gavin Peters
=1996=

===Winter===
PR: Nikita Borisov (nborisov)
VP: Joseph Deu Ngoc (dtdeungo)
TR: Stephen Mills (samills)
SE: Sharlene Schmeichel (saschmei)
SA: Dave Brown (dagbrown)
OF: Somsack Tsai (stsai)
LI: Devin Carless (dccarles)
FL: Allyson Graham (akgraham)
DE: Ian Goldberg (iagoldbe)

===Spring===
PR: Blake Winton (bwinton)
VP: Nick Harvey (njaharve)
TR: Nikita Borisov (nborisov)
SE: Viet-Trung Luu (vluu)
SA: Drew Hamilton (awhamilt)
OF: Jillian Arnott (jarnott)
LI: Ross Ridge (rridge)
FL: Devin Carless (dccarles)

=== Fall ===
PR: Shannon Mann (sjbmann)
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)
TR: Michal Van Biesbrouck (mlvanbie)
SE: Nikita Borisov (nborisov)
SA: Chris Rovers
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation
LI: Aliz Csenki (acsenki)
FL: Aaron Chmielowiec (archmiel)
DE: Skuld (no uwuserid yet...)
=1997=

===Winter===
PR: Dima Brodsky
VP: Nikita Borisov (nborisov)
TR: Stephen Mills (samills)
SE: Evan Jones (ejones)
SA: Alex Brodsky
OF: Chris Doherty
LI: Matt Corks
FL: Paul Prescod

=== Fall ===
PR: Chris Rovers (cdrovers)
VP: Michael van Biesbrouck (mlvanbie)
TR: Somsack Tsai (stsai)
SE: Matt Corks (mvcorks)
SA: Lennart Sorensen (lsorense)
LI: Chmielowiec (archmiel)
OF: Devin Carless (dccarles)
FL: Aaron Chmielowiec (archmiel)
= 1998 =

=== Winter ===
PR: Suresh Naidu
VP: Viet-Trung Luu
TR: Tim Coleman
SE: Dax Hutcheon
LI: Dax Hutcheon
Flasher: Dax Hutcheon
WW: Dax Hutcheon
SA: Robin Powell
OF: Aaron Chmielowiec

=== Spring ===

Position Name You might call them...
President roconnor Russell O'Connor
Vice-president trwcolem Tim Coleman
Treasurer knzarysk Karl Zaryski
Secretary (bwinton) (Blake Winton)
Sysadmin wbiggs Billy Biggs
Librarian snaidu Suresh Naidu
Flasher pechrysl Paul Chrysler
Office Manager dccarles Devin Carless
WWWW trwcolem Tim Coleman

=== Fall ===

President Joe Deu Ngoc jtdeungo
Vice-President Wai Ling Yee wlyee
Treasurer Fjord j2lynn
Secretary Matt Corks mvcorks
Sysadmin Andrew Hamilton awhamilt

World Wide Web Wench Dax Hutcheon ddhutche
Office Manager Richard Bell rlbell
Librarian Damian Gryski dgryski
Flasher Paul Chrysler pechrysl
Official Deity Ian Goldberg iagoldbe
Official Chairbeing Calum T. Dalek calum
=1999=

=== Winter ===
PR: geduggan
=2000=

=== Winter ===
PR: Will Chartrand (wgchartr)
VP: Gavin Duggan (geduggan)
SA: Lennart Sorensen (lsorense)

=== Fall ===
PR: geduggan
SA: bioster
=2001=

=== Winter ===
PR: geduggan

=== Spring ===
PR: geduggan

=2002=

https://web.archive.org/web/20130715012002/http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php

=== Winter ===
PR: Billy Biggs
VP: Stefanus Du Toit
TR: Melissa Basinger
SE: James Perry
SA: Barry Genova
LI: Ryan Golbeck
WW: Jonathan Beverley
Office Manager: Sayan Li

=== Spring ===
PR: Alex Pop
VP: Melissa Basinger
TR: Siyan Li
SE: James A Morrison
SA: Jonathan Beverley
WW: Stefanus Du Toit

=== Fall ===
PR: James A. Morrison
VP: Stefanus Du Toit
TR: James Perry
SE: Michael Biggs
SA: Ryan Golbeck
LI: Mark Sherry, Cassandra Schopf
WW: Stefanus Du Toit
=2003=

=== Winter ===
PR: Kannan Vijayan (kvijayan)
VP: Meg Darragh (m2darrag)
TR: James Perry (jeperry)
SE: Wojciech Kosnik (wkosnik)
SA: Stefanus Du Toit (sjdutoit)
LI: Simon Law (sfllaw)
WM: Julie Lavoie (jlavoie)

===Fall===
PR: Stefanus Du Toit (sjdutoit)
VP: Meg Darragh (m2darrag)
TR: Tor Myklebust (tmyklebu)
SE: James Perry (jeperry)
SA: Simon Law (sfllaw)
=2004=

===Winter===
PR: Simon Law (sfllaw)
VP: fspacek
TR: ljain
SE: Julie Lavoie (jlavoie)
SA: Tor Myklebust(tmyklebu)

===Spring===
PR: dnmorton ?
VP: Tim Loach (tloach)
TR: Michael Biggs (mbiggs)
SE: Lesley Northam (lanortha)

===Fall ===
PR: jeperry
VP: mtsay
TR: Mark Sherry (mdsherry)
SE: Tor Myklebust (tmyklebu)
SA: jlavoie
=2005=

===Winter===

PR: mtsay
VP: Lesley Northam (lanortha)
TR: Holden Karau (hkarau)
SE: domorton
SA: Tor Myklebust (tmyklebu)

===Spring===

PR: Mark Sherry (mdsherry)
VP: Martin Kess (mdkess)
TR: Ali Piccioni (apiccion)
SE: Michael Biggs (mbiggs)
SA: Tor Myklebust (tmyklebu)

===Fall===

PR: Tim Loach (tloach)
VP: Lesley Northam (lanortha)
TR: Caelyn McAulay (cmcaulay)
SE: The Professor
SA: Holden Karau (hkarau)
=2006=

===Winter===

PR: Tor Myklebust (tmyklebu)
VP: Michael Druker (mdruker)
TR: Caelyn McAulay (cmcaulay)
SE: Mark Sherry (mdsherry)
SA: William O'Connor (woconnor)

===Spring===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: David Tenty (daltenty)
SE: Chris Evensen (cevensen)
SA: Holden Karau (hkarau)

===Fall===

PR: Martin Kess (mdkess)
VP: Mark Sherry (mdsherry)
TR: Sylvan L. Mably (slmably)
SE: Caelyn McAulay (cmcaulay)
SA: William O'Connor (woconnor)
=2007=

===Winter===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: Caelyn McAulay (cmcaulay)
SE: David Tenty (daltenty)
SA: Holden Karau (hkarau)
WW: jnopporn

===Spring===
PR: Gaelan D'costa (gdcosta)
VP: Kyle Larose (kmlarose)
TR: Kyle Spaans (kspaans)
SE: Erik Louie (elouie)
SA: Michael Spang (mspang)
LI: David Tenty (daltenty)

===Fall ===
PR: Holden Karau (hkarau)
VP: Alex McCausland (amccausl)
TR: Dominik Chlobowski (dchlobow)
SE: Sean Cumming (sgcummin)
SA: David Tenty (daltenty)
WW: dtbartle / jnopporn
=2008=

===Winter ===
PR: Sean Cumming (sgcummin)
VP: Matt Lawrence (m3lawren)
TR: Mateusz Tarkowski (mtarkows)
SE: Edgar Bering (ebering)
SA: Jordan Saunders (jmsaunde)

===Summer ===
PR: Brennan Taylor (b4taylor)
VP: Qifan Xi (qxi)
TR: Matt Lawrence (m3lawren)
SE: Nick Guenther (nguenthe)

===Fall ===
PR: Matthew Lawrence (m3lawren)
VP: Edgar Bering (ebering)
TR: Michael Gregson (mgregson)
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski
SA: Kyle Spaans (kspaans)
=2009=

===Winter===
PR: Michael Gregson (mgregson)
VP: Edgar Bering (ebering)
TR: Brennan Taylor (b4taylor)
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins)
SA: Jacob Parker (j3parker)
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)

===Spring ===
PR: Michael Spang (mspang)
VP: Jacob Parker (j3parker)
TR: Sapphyre Gervais (sagervai)
SE: Matthew McPherrin (mimcpher)
SA: Anthony Brennan (a2brenna)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Michael Spang (mspang)
SE: Brennan Taylor (b4taylor)
SA: Michael Ellis (m2ellis)
OF: Rebecca Putinski (rjputins)
=2010=

===Winter===
PR: Kyle Spaans (kspaans)
VP: Edgar Bering (ebering)
TR: Sapphyre Gervais (sagervai)
SE: Ajnu Jacob (ajacob)
SA: Matthew Thiffault (mthiffau)
OF: Jacob Parker (j3parker)
Keyed office staffers: j3camero, jdonland, m2ellis, mimcpher, nsasherr

===Spring===
PR: Jeff Cameron (j3camero)
VP: Brennan Taylor (b4taylor)
TR: Vardhan Mudunuru (vmudunur)
SE: Matthew Lawrence (m3lawren)
SA: Michael Ellis (m2ellis)
OF: Edgar Bering (ebering)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Rebecca Putinski (rjputins)
SE: Kyle Spaans (kspaans)
SA: Jeremy Roman (jbroman)
OF: Amir Sayed Khader (askhader)
=2011=

===Winter===
PR: Edgar Bering (ebering)
VP: Jennifer "Emily" Wong (jy2wong)
TR: Kyle Spaans (kspaans)
SE: Elana "Alana" Hashman (ehashman)
SA: Peter "Bofh" Barfuss (pbarfuss)
OF: Marc Burns (Marc Burns)

===Spring===
PR: Matthew Thiffault (mthiffau)
VP: Matthew McPherrin (mimcpher)
TR: Kyle Spaans (kspaans)
SE: Kwame Andrew Ansong (kansong)
SA: Jeremy Brandon Roman (jbroman)
OF: Jennifer "Emily" Wong (jy2wong)

===Fall===
PR: Marc Burns (m4burns)
VP: Katharine Hyatt (kshyatt)
TR: Jacob Parker (j3parker)
SE: Elana Hashman (ehashman)
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)
OF: Kyle Spaans (kspaans)
LI: Edgar Bering (ebering)
=2012=

===Winter===
PR: Marc Burns (m4burns)
VP: Elana Hashman (ehashman)
TR: Jacob Parker (j3parker)
SE: Matthew McPherrin (mimcpher)
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LI: Jennifer "Emily" Wong (jy2wong)

===Summer===
PR: Anthony Brennan (a2brenna)
VP: Luqman Aden (laden)
TR: Matthew McPherrin (mimcpher)
SE: Elana Hashman (ehashman)
SA: Sarah Harvey (sharvey)
OF: Marc Burns (m4burns)
LI: John Ladan (jladan)

===Fall===
PR: Marc Burns (m4burns)
VP: Salem Talha (satalha)
TR: Jennifer Wong (jy2wong)
SE: Elana Hashman (ehashman), resigned
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LI: John Ladan (jladan)
=2013=

===Winter===
PR: Anthony Brennan (a2brenna)
VP: Marc Burns (m4burns)
TR: John Mumford (jsmumfor)
SE: Matt Olechnowicz (mgolechn)
SA: Sarah Harvey (sharvey)
OF: Bryan Coutts (b2coutts)
LI: Matthew McPherrin (mimcpher)

===Spring===
PR: Shane Robert Creighton-Young (srcreigh)
VP: Visishta Vijayanand (vvijayan)
TR: Dominik Chlobowski (dchlobow)
SE: Youn Jin Kim (yj7kim)
SA: Anthony Brennan (a2brenna)
OF: Marc Burns (m4burns)
FR: Dominik Chlobowski (dchlobow)

===Fall===
PR: Elana Hashman (ehashman)
VP: Marc Burns (m4burns)
TR: Dominik Chlobowski (dchlobow)
SE: Edward Lee (e45lee)
SA: Jeremy Roman (jbroman)
OF: Alexis Hunt (aechunt)
= 2014 =

=== Winter ===
PR: Bryan Coutts (b2coutts)
VP: Visishta Vijayanand (vvijayan)
TR: Marc Burns (m4burns)
SE: Mark Farrell (m4farrel)
SA: Murphy Berzish (mtrberzi)
OF: Nicholas Black (nablack)

=== Spring ===
PR: Youn Jin Kim (yj7kim)
VP: Luke Franceschini (l3france)
TR: Joseph Chouinard (jchouina)
SE: Ifaz Kabir (ikabir)
SA: Murphy Berzish (mtrberzi)
OF: Matthew Thiffault (mthiffau)

=== Fall ===
PR: Youn Jin Kim (yj7kim)
VP: Theodor Belaire (tbelaire)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Shane Robert Creighton-Young (srcreigh)
SA: Alexis Hunt (aechunt)
OF: Mark Farrell (m4farrel)
LI: Gianni Leonardo Gambetti (glgambet)

= 2015 =

=== Winter ===
PR: Gianni Leonardo Gambetti (glgambet)
VP: Luke Franceschini (l3france)
TR: Edward Lee (e45lee)
SE: Patrick James Melanson (pj2melan)
SA: Murphy Berzish (mtrberzi)
OF: Shikhar Singh (s285sing)
LI: Aishwarya Gupta (a72gupta)
=== Spring ===
PR: Luqman Aden (laden)
VP: Patrick Melanson (pj2melan)
TR: Jonathan Bailey (jj2baile)
SE: Keri Warr (kpwarr)
SA: Nik Black (nablack)
OF: Ilia Chtcherbakov (ischtche)
LI: Yomna Nasser (ynasser)
=== Fall ===
PR: Simone Hu (ss2hu)
VP: Theo Belaire (tbelaire)
TR: Jordan Taylore Upiter (jtupiter)
SE: Daniel Marin (dmarin)
SA: Jordan Xavier Pryde (jxpryde)
OF: Ilia Chtcherbakov (ischtche)
= 2016 =

=== Winter ===
PR: Patrick Melanson (pj2melan)
VP: Patrick Melanson (pj2melan)
Acting VP, progcom chair: Theo Belaire (tbelaire)
TR: Luqman Aden (laden)
SE: Naomi Koo (m3koo)
SA: Zachary Seguin (ztseguin)
OF: Reila Zheng (wy2zheng)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

=== Spring ===
PR: Luqman Aden (laden)
VP: Melissa Angelica Mary Tedesco (matedesc)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Aditya Shivam Kothari (askothar)
SA: Jordan Xavier Pryde (jxpryde)
OF: Zachary Seguin (ztseguin)
LI: Charlie Wang (s455wang)
FR: Marc Mailhot (mnmailho)

=== Fall ===
PR: Charlie Wang (s455wang)
VP: Bryan Coutts (b2coutts)
TR: Laura Song (lhsong)
SE: Uday Barar (ubarar)
SA: Zachary Seguin (ztseguin)
OF: Jamie Sinn (j2sinn)
LI: Felix Bauckholt (fbauckho)
FR: Ilia Chtcherbakov (ischtche)

= 2017 =

=== Winter ===
PR: Wilson Cheang (wyschean)
VP: Tristan Hume (tghume)
TR: Jordan Pryde (jxpryde)
SE: Amir Fata (aafata)
SA: Zachary Seguin (ztseguin)
OF: Felix Bauckholt (fbaukcho)
LI: Connor Murphy (cfmurph)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Felix Bauckholt (fbauckho)
VP: Zichuan Wei (z34wei)
TR: Laura Song (lhsong)
SE: Bo Mo (bzmo)
SA: Zachary Seguin (ztseguin)
OF: Uday Barar (ubarar)
LI: Patrick Melanson (pj2melan)
FR: Uday Barar (ubarar)

=== Fall ===

PR: Melissa Tedesco (matedesc)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
SE: Marc Mailhot (mnmailho)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

= 2018 =

=== Winter ===

PR: Patrick Melanson (pj2melan)
VP: Charlie Wang (s455wang)
TR: Ashley Dewiputri Pranajaya (adpranaj)
SE: Arshia Mufti (a2mufti)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Zichuan Wei (z34wei)
FR: Uday Barar (ubarar)

=== Spring ===

PR: Melissa Tedesco (matedesc)
VP: Dhruv Jauhar (djauhar)
TR: Tristan Hume (tghume)
AV: Marc Mailhot (mnmailho)
SA: Jennifer Zhou (c7zou)
OF: Aditya Thakral (a3thakra)
LI: Archer Zhang (z577zhan)
FR: Marc Mailhot (mnmailho)

=== Fall ===

PR: Zichuan Wei (z34wei)
VP: Uday Barar (ubarar)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Jennifer Zhou (c7zou)
OF: Alexander Zvorygin (azvorygi)
LI: Neil Parikh (n3parikh)
FR:

= 2019 =

=== Winter ===

PR: Marc Mailhot (mnmailho)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
AV: Aditya Thakral (a3thakra)
SA: Charlie Wang (s455wang)
OF: Archer Zhang (z577zhan)
LI: Rishabh Minocha (rkminoch)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Uday Barar (ubarar)
VP: Rajat Malhotra (r24malho)
TR: Raghav Sethi (r5sethi)
AV: Bo Mo (bzmo)
SA: Charlie Wang (s455wang)
OF: Hannah Wong (sm7wong)
LI: Nolan Munce (nmmunce)

=== Fall ===

PR: Dhruv Jauhar (djauhar)
VP: Aditya Thakral (a3thakra)
TR: Rishabh Minocha (rkminoch)
AV: Tammy Khalaf (tekhalaf)
SA: Murphy Berzish (mtrberzi)
OF: Zihan Zhang (z577zhan)
LI: Raghav Sethi (r5sethi)

= 2020 =

=== Winter ===
The office was closed midway through this term due to the COVID-19 pandemic.

The pandemic that threw the University and rest of the world into disarray drove all CSC activity virtual. Though everyone thought the pandemic would quickly be over, the Alpha, then Delta, then Omicron variants resulted in the majority of classes being held online until February 2022.

As a result, the office would stay closed for a full 5 terms, and only reopen in W2022.

PR: Richard Shi (r27shi)
VP: Anastassia Gaikovaia (agaikova)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Amin Bandali (abandali)
OF: Alexander Zvorygin (azvorygi)
LI: Anastassia Gaikovaia (agaikova)
FR: Richard Shi (r27shi)

=== Spring ===

PR: Neil Parikh (n3parikh)
VP: Anastassia Gaikovaia (agaikova)
SA: Amin Bandali (abandali)

=== Fall ===

PR: Mokai Xu (m92xu)
VP: Anastassia Gaikovaia (agaikova) (stepped down as of 2020-11-30)
TR: Neil Parikh (n3parikh)
AV: Edwin Yang (e37yang)
SA: Murphy Berzish (mtrberzi)

= 2021 =
In 2021, CSC rapidly expanded the Program Committee, introducing subcommittees including Design, Events, Marketing, Photography, Reps, Discord mods, and Discord bot developers. The website committee also expanded, and the terminal committee was officially repurposed to serve a syscom-in-training role (since the office remained closed and the terminals powered off).

=== Winter ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Nakul Vijhani (nvijhani)
SA: Max Erenberg (merenber)

=== Spring ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Ravindu Angammana (rbangamm)
SA: Max Erenberg (merenber)

=== Fall ===

PR: Dora Su (d43su)
VP: Jason Sang (jzsang)
TR: Yanni Wang (y3859wan)
AV: Anjing Li (a348li)
SA: Max Erenberg (merenber)
Advising: Neil Parikh (n3parikh)

= 2022 =

=== Winter ===

PR: Juthika Hoque (j3hoque)
VP: Eric Huang (e48huang)
TR: Eden Chan (e223chan)
AV: Dina Orucevic (dmorucev)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Neil Parikh (n3parikh)

=== Spring ===

PR: Eden Chan (e223chan)
VP: Bonnie Peng (b38peng)
TR: Sat Arora (s97arora)
AV: Haley Song (h79song)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Sat Arora (s97arora)
LI: Santiago Montemayor (smontema) (appointed 2022-06-02)
FR: Sat Arora (s97arora) (appointed 2022-06-23)
=== Fall ===

PR: Amy Wang (a258wang)
VP: Anna Wang (aj2wang)
TR: Simon Zeng (s33zeng)
AV: Mabel Kwok (m23kwok)
SA: Raymond Li (r389li)
WW: Shahan Nedadahandeh (snedadah)
OF:
LI:
FR:

Past Executive

2022-09-16T03:09:08Z

R389li: /* Spring */ Fix title

Data sources for this exec list have been: CSC records, MathNEWS.
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.

= Definitions =
#define PR President
#define VP Vice-president
#define TR Treasurer
#define SE Secretary
#define AV Assistant Vice-president
#define SA Sysadmin
#define OF Office Manager
#define LI Librarian
#define FL Flasher
#define DE Deity
#define WW Webmaster
#define SE-TR Secretary-Treasurer (Position was split)
#define FR Fridge Regent (IMAPd)

<div style="float:right;margin-left: 1em;">__TOC__</div>

=Founding 1967=

Sponsor - J. Peter Sprung
PR: K. Rugger
VP: R. Jaques
SE-TR: G. Sutherland

Founding Members:
B. Kindree
R. Melen
V. Neglia
R. Charney
R. Truman
Glenn Berry
D. Meek

===Fall===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

Committee members: R. Stallwerthy, C. de Vries

=1968=

===Winter===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

===Fall===

SE-TR: Glenn Berry

=1969=

Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.

=1970=

===A note on ACM affiliation===

The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970

===Fall===

PR: Rick Beach
VP: Lee Santon
TR: Randy Melen
SE: Vic Neglia

=1971=

===Spring===

VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.

===Fall===

VP: James W. Welch

=1972=

It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.

===Winter===

PR: Mike Campbell
VP: Edgar Hew
SE-TR: Doug Lacy

There is also stuff from James W. Welch without a position.

===Fall===

PR: Ian McIntosh

=1973=

Faculty Sponsor: Morven Gentleman

===Winter===

SE: Douglas E. Lacy

===Spring===

PR: Jim Parry

===Fall===

PR: Jim Parry
VP: Ray Walden
TR: Slavko Stemberger
SE: Mario Festival

=1974=

===Fall===

PR: Russell Crook

=1975-1977=

Faculty Sponsor: Morven Gentleman??

Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.
Sylvia Eng: 1975/6 as some position.
Dave Buckingham: a VP at some point
Allison Nolan: 1977 time
Peter Stevens: 1977
Russel Crook???

Dennis Ritchie came. So did Jeffrey D. Ullman.

=1976=

===Fall===

Progcom: Peter Stevens

=1977=

===Winter===

Progcom: Allison Nowlan

===Spring===

PR: Peter Stevens
Progcom: Allison Nowlan

===Fall===

PR: Andrzej Jan Taramina
Progcom: Allison Nowlan

=1978=

===Winter===

PR: Peter Stevens

===Spring===

TR: K.G. Dykes
SE: Kandry Mutheardy

Brian Kernighan gave a talk this term. So did Ken Thompson.

===Fall===

=1979=

===Spring===

PR: Robert Biddle

=1987=

===Fall===

PR: Jim Boritz
VP: Ted Timar
TR: Gayla Boritz
SE: Edwin Hoogerbeets

=1988=

Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Rob*n Stewart did as an assignment in 1991-1992 for some class at UBC
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was our first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.

===Winter===
PR: Jim Boritz
(Source: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Fall===

SA: Wade Richards

=1989=

===Winter===

https://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg

Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ???

PR: Barry W. Smith
VP: Angela Chambers
TR:
SE: Sean Goggin
SA: Wade Richards / Ross Ridge

(President Kevin Smith confirmed: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Spring===

PR: Jim Thornton
VP: Gayla Boritz
TR: David Fenger
SE: Kivi Shapiro
SA: Reid Pinchback

Assistance to sysadmin: Jim Boritz.

===Fall===

PR: James Boritz
VP: Edmond Bourne
SA: Ross Ridge

=1990=

===Winter===

TR: Jim Thornton

===Spring===

TR: Karen Smith
SE: Rob*n Stewart
*Robyn/Robin signed her emails as Rob*n and requested to be listed as such on this page.

===Fall===
PR: Wade Richards
TR: Carolyn Duke
SE: Rob*n Stewart - attended mathsoc meeting on our behalf.
Kivi Shapiro - attended mathsoc meeting on our behalf.
- Censured by mathsoc for his actions during the election.
Shannon Mann - attended mathsoc meeting on our behalf.

=1991=

===Winter===
VP: Edmond Bourne
TR: Carolyn Duke
SE: Rob*n Stewart
Shannon Mann - attended mathsoc meeting on our behalf.

John McCarthy came this term.

===Spring===
TR: Rob Leitman
Jason Knell - attended mathsoc meeting on our and PMC's behalf.

===Fall===
TR: Mike Van Lingen
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.

=1992=

===Winter===
TR: Norm Ross
SE: Brent Williams

===Spring===
PR: Dale Wick
TR: Stephen A. Mills

===Fall===
TR: Mark Plumb

=1993=

===Winter===
TR: Rob Leitman
VP: Tim Prime
OF: Dave Ebbo
LI: Norm Ross

Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray

===Spring===
TR: Mark Tompsett

===Fall===

PR: Ian Goldberg

=1994=

===Winter===
PR: Ian Goldberg
TR: Mark Tompsett
SE: Tom Rathbourne
LI: Michael Van Biesbrouck
Norm Ross assisted with finances.

===Spring===
PR: Dale Wick (?)
TR: Steve Mills
SA: Ian Goldberg (?)
Norm Ross assisted with finances.

===Fall===
PR: Ross Ridge
VP: Tom Rathbourne (?)
TR: Rob Leitman
SA: Zygo Blaxell
LI: Michael Van Biesbrouck

=1995=

===Winter===
TR: Sharlene Schmeichel
Amy Brown and Rob Ridge purchased books.

===Spring===
TR: Steve Mills

===Fall===
PR: Amy Brown (arbrown)
VP: Christina Norman (cbnorman)
TR: Steven Mills (samills)
SE: Allyson Graham (akgraham)
SA: Gavin Peters

=1996=

===Winter===
PR: Nikita Borisov (nborisov)
VP: Joseph Deu Ngoc (dtdeungo)
TR: Stephen Mills (samills)
SE: Sharlene Schmeichel (saschmei)
SA: Dave Brown (dagbrown)
OF: Somsack Tsai (stsai)
LI: Devin Carless (dccarles)
FL: Allyson Graham (akgraham)
DE: Ian Goldberg (iagoldbe)

===Spring===
PR: Blake Winton (bwinton)
VP: Nick Harvey (njaharve)
TR: Nikita Borisov (nborisov)
SE: Viet-Trung Luu (vluu)
SA: Drew Hamilton (awhamilt)
OF: Jillian Arnott (jarnott)
LI: Ross Ridge (rridge)
FL: Devin Carless (dccarles)

=== Fall ===
PR: Shannon Mann (sjbmann)
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)
TR: Michal Van Biesbrouck (mlvanbie)
SE: Nikita Borisov (nborisov)
SA: Chris Rovers
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation
LI: Aliz Csenki (acsenki)
FL: Aaron Chmielowiec (archmiel)
DE: Skuld (no uwuserid yet...)

=1997=

===Winter===
PR: Dima Brodsky
VP: Nikita Borisov (nborisov)
TR: Stephen Mills (samills)
SE: Evan Jones (ejones)
SA: Alex Brodsky
OF: Chris Doherty
LI: Matt Corks
FL: Paul Prescod

=== Fall ===
PR: Chris Rovers (cdrovers)
VP: Michael van Biesbrouck (mlvanbie)
TR: Somsack Tsai (stsai)
SE: Matt Corks (mvcorks)
SA: Lennart Sorensen (lsorense)
LI: Chmielowiec (archmiel)
OF: Devin Carless (dccarles)
FL: Aaron Chmielowiec (archmiel)

= 1998 =

=== Winter ===
PR: Suresh Naidu
VP: Viet-Trung Luu
TR: Tim Coleman
SE: Dax Hutcheon
Librarian: Dax Hutcheon
Flasher: Dax Hutcheon
Webmaster: Dax Hutcheon
SA: Robin Powell
OF: Aaron Chmielowiec

=== Spring ===

Position Name You might call them...
President roconnor Russell O'Connor
Vice-president trwcolem Tim Coleman
Treasurer knzarysk Karl Zaryski
Secretary (bwinton) (Blake Winton)
Sysadmin wbiggs Billy Biggs
Librarian snaidu Suresh Naidu
Flasher pechrysl Paul Chrysler
Office Manager dccarles Devin Carless
WWWW trwcolem Tim Coleman

=== Fall ===

President Joe Deu Ngoc jtdeungo
Vice-President Wai Ling Yee wlyee
Treasurer Fjord j2lynn
Secretary Matt Corks mvcorks
Sysadmin Andrew Hamilton awhamilt

World Wide Web Wench Dax Hutcheon ddhutche
Office Manager Richard Bell rlbell
Librarian Damian Gryski dgryski
Flasher Paul Chrysler pechrysl
Official Deity Ian Goldberg iagoldbe
Official Chairbeing Calum T. Dalek calum

=1999=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:

=2000=

=== Winter ===
PR: Will Chartrand (wgchartr)
VP: Gavin Duggan (geduggan)
TR:
SE:
SA: Lennart Sorensen (lsorense)
OF:

=== Fall ===
PR: geduggan
VP:
TR:
SE:
SA: bioster
OF:

=2001=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=== Spring ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=2002=

https://web.archive.org/web/20130715012002/http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php

=== Winter ===
PR: Billy Biggs
VP: Stefanus Du Toit
TR: Melissa Basinger
SE: James Perry
SA: Barry Genova
Librarian: Ryan Golbeck
Webmaster: Jonathan Beverley
Office Manager: Sayan Li

=== Spring ===
PR: Alex Pop
VP: Melissa Basinger
TR: Siyan Li
SE: James A Morrison
SA: Jonathan Beverley
Webmaster: Stefanus Du Toit

=== Fall ===
PR: James A. Morrison
VP: Stefanus Du Toit
TR: James Perry
SE: Michael Biggs
SA: Ryan Golbeck
Librarian: Mark Sherry, Cassandra Schopf
Webmaster: Stefanus Du Toit

=2003=

=== Winter ===
PR: Kannan Vijayan (kvijayan)
VP: Meg Darragh (m2darrag)
TR: James Perry (jeperry)
SE: Wojciech Kosnik (wkosnik)
SA: Stefanus Du Toit (sjdutoit)
LI: Simon Law (sfllaw)
WM: Julie Lavoie (jlavoie)

===Fall===
PR: Stefanus Du Toit (sjdutoit)
VP: Meg Darragh (m2darrag)
TR: Tor Myklebust (tmyklebu)
SE: James Perry (jeperry)
SA: Simon Law (sfllaw)
OF:

=2004=

===Winter===
PR: Simon Law (sfllaw)
VP: fspacek
TR: ljain
SE: Julie Lavoie (jlavoie)
SA: Tor Myklebust(tmyklebu)
OF:

===Spring===
PR: dnmorton ?
VP: Tim Loach (tloach)
TR: Michael Biggs (mbiggs)
SE: Lesley Northam (lanortha)
SA:
OF:

===Fall ===
PR: jeperry
VP: mtsay
TR: Mark Sherry (mdsherry)
SE: Tor Myklebust (tmyklebu)
SA: jlavoie
OF:

=2005=

===Winter===

PR: mtsay
VP: Lesley Northam (lanortha)
TR: Holden Karau (hkarau)
SE: domorton
SA: Tor Myklebust (tmyklebu)
OF:

===Spring===

PR: Mark Sherry (mdsherry)
VP: Martin Kess (mdkess)
TR: Ali Piccioni (apiccion)
SE: Michael Biggs (mbiggs)
SA: Tor Myklebust (tmyklebu)
OF:

===Fall===

PR: Tim Loach (tloach)
VP: Lesley Northam (lanortha)
TR: Caelyn McAulay (cmcaulay)
SE: The Professor
SA: Holden Karau (hkarau)
OF:

=2006=

===Winter===

PR: Tor Myklebust (tmyklebu)
VP: Michael Druker (mdruker)
TR: Caelyn McAulay (cmcaulay)
SE: Mark Sherry (mdsherry)
SA: William O'Connor (woconnor)
OF:

===Spring===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: David Tenty (daltenty)
SE: Chris Evensen (cevensen)
SA: Holden Karau (hkarau)
OF:

===Fall===

PR: Martin Kess (mdkess)
VP: Mark Sherry (mdsherry)
TR: Sylvan L. Mably (slmably)
SE: Caelyn McAulay (cmcaulay)
SA: William O'Connor (woconnor)

=2007=

===Winter===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: Caelyn McAulay (cmcaulay)
SE: David Tenty (daltenty)
SA: Holden Karau (hkarau)
Webmaster: jnopporn
OF:

===Spring===
PR: Gaelan D'costa (gdcosta)
VP: Kyle Larose (kmlarose)
TR: Kyle Spaans (kspaans)
SE: Erik Louie (elouie)
SA: Michael Spang (mspang)
Librarian: David Tenty (daltenty)
OF:

===Fall ===
PR: Holden Karau (hkarau)
VP: Alex McCausland (amccausl)
TR: Dominik Chlobowski (dchlobow)
SE: Sean Cumming (sgcummin)
SA: David Tenty (daltenty)
OF:
WW: dtbartle / jnopporn

=2008=

===Winter ===
PR: Sean Cumming (sgcummin)
VP: Matt Lawrence (m3lawren)
TR: Mateusz Tarkowski (mtarkows)
SE: Edgar Bering (ebering)
SA: Jordan Saunders (jmsaunde)
OF:

===Summer ===
PR: Brennan Taylor (b4taylor)
VP: Qifan Xi (qxi)
TR: Matt Lawrence (m3lawren)
SE: Nick Guenther (nguenthe)
SA:
OF:

===Fall ===
PR: Matthew Lawrence (m3lawren)
VP: Edgar Bering (ebering)
TR: Michael Gregson (mgregson)
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski
SA: Kyle Spaans (kspaans)
OF:

=2009=

===Winter===
PR: Michael Gregson (mgregson)
VP: Edgar Bering (ebering)
TR: Brennan Taylor (b4taylor)
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins)
SA: Jacob Parker (j3parker)
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)

===Spring ===
PR: Michael Spang (mspang)
VP: Jacob Parker (j3parker)
TR: Sapphyre Gervais (sagervai)
SE: Matthew McPherrin (mimcpher)
SA: Anthony Brennan (a2brenna)
OF:

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Michael Spang (mspang)
SE: Brennan Taylor (b4taylor)
SA: Michael Ellis (m2ellis)
OF: Rebecca Putinski (rjputins)

=2010=

===Winter===
PR: Kyle Spaans (kspaans)
VP: Edgar Bering (ebering)
TR: Sapphyre Gervais (sagervai)
SE: Ajnu Jacob (ajacob)
SA: Matthew Thiffault (mthiffau)
OF: Jacob Parker (j3parker)

Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr

===Spring===
PR: Jeff Cameron (j3camero)
VP: Brennan Taylor (b4taylor)
TR: Vardhan Mudunuru (vmudunur)
SE: Matthew Lawrence (m3lawren)
SA: Michael Ellis (m2ellis)
OF: Edgar Bering (ebering)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Rebecca Putinski (rjputins)
SE: Kyle Spaans (kspaans)
SA: Jeremy Roman (jbroman)
OF: Amir Sayed Khader (askhader)

=2011=

===Winter===
PR: Edgar Bering (ebering)
VP: Jennifer "Emily" Wong (jy2wong)
TR: Kyle Spaans (kspaans)
SE: Elana "Alana" Hashman (ehashman)
SA: Peter "Bofh" Barfuss (pbarfuss)
OF: Marc Burns (Marc Burns)

===Spring===
PR: Matthew Thiffault (mthiffau)
VP: Matthew McPherrin (mimcpher)
TR: Kyle Spaans (kspaans)
SE: Kwame Andrew Ansong (kansong)
SA: Jeremy Brandon Roman (jbroman)
OF: Jennifer "Emily" Wong (jy2wong)

===Fall===
PR: Marc Burns (m4burns)
VP: Katharine Hyatt (kshyatt)
TR: Jacob Parker (j3parker)
SE: Elana Hashman (ehashman)
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)
OF: Kyle Spaans (kspaans)
LIB: Edgar Bering (ebering)

=2012=

===Winter===
PR: Marc Burns (m4burns)
VP: Elana Hashman (ehashman)
TR: Jacob Parker (j3parker)
SE: Matthew McPherrin (mimcpher)
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: Jennifer "Emily" Wong (jy2wong)

===Summer===
PR: Anthony Brennan (a2brenna)
VP: Luqman Aden (laden)
TR: Matthew McPherrin (mimcpher)
SE: Elana Hashman (ehashman)
SA: Sarah Harvey (sharvey)
OF: Marc Burns (m4burns)
LIB: John Ladan (jladan)

===Fall===
PR: Marc Burns (m4burns)
VP: Salem Talha (satalha)
TR: Jennifer Wong (jy2wong)
SE: Elana Hashman (ehashman), resigned
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: John Ladan (jladan)

=2013=

===Winter===
PR: Anthony Brennan (a2brenna)
VP: Marc Burns (m4burns)
TR: John Mumford (jsmumfor)
SE: Matt Olechnowicz (mgolechn)
SA: Sarah Harvey (sharvey)
OF: Bryan Coutts (b2coutts)
LIB: Matthew McPherrin (mimcpher)

===Spring===
PR: Shane Robert Creighton-Young (srcreigh)
VP: Visishta Vijayanand (vvijayan)
TR: Dominik Chlobowski (dchlobow)
SE: Youn Jin Kim (yj7kim)
SA: Anthony Brennan (a2brenna)
OF: Marc Burns (m4burns)
FR: Dominik Chlobowski (dchlobow)

===Fall===
PR: Elana Hashman (ehashman)
VP: Marc Burns (m4burns)
TR: Dominik Chlobowski (dchlobow)
SE: Edward Lee (e45lee)
SA: Jeremy Roman (jbroman)
OF: Alexis Hunt (aechunt)

= 2014 =

=== Winter ===
PR: Bryan Coutts (b2coutts)
VP: Visishta Vijayanand (vvijayan)
TR: Marc Burns (m4burns)
SE: Mark Farrell (m4farrel)
SA: Murphy Berzish (mtrberzi)
OF: Nicholas Black (nablack)

=== Spring ===
PR: Youn Jin Kim (yj7kim)
VP: Luke Franceschini (l3france)
TR: Joseph Chouinard (jchouina)
SE: Ifaz Kabir (ikabir)
SA: Murphy Berzish (mtrberzi)
OF: Matthew Thiffault (mthiffau)

=== Fall ===
PR: Youn Jin Kim (yj7kim)
VP: Theodor Belaire (tbelaire)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Shane Robert Creighton-Young (srcreigh)
SA: Alexis Hunt (aechunt)
OF: Mark Farrell (m4farrel)
LIB: Gianni Leonardo Gambetti (glgambet)

= 2015 =

=== Winter ===
PR: Gianni Leonardo Gambetti (glgambet)
VP: Luke Franceschini (l3france)
TR: Edward Lee (e45lee)
SE: Patrick James Melanson (pj2melan)
SA: Murphy Berzish (mtrberzi)
OF: Shikhar Singh (s285sing)
LIB: Aishwarya Gupta (a72gupta)

=== Spring ===
PR: Luqman Aden (laden)
VP: Patrick Melanson (pj2melan)
TR: Jonathan Bailey (jj2baile)
SE: Keri Warr (kpwarr)
SA: Nik Black (nablack)
OF: Ilia Chtcherbakov (ischtche)
LIB: Yomna Nasser (ynasser)

=== Fall ===
PR: Simone Hu (ss2hu)
VP: Theo Belaire (tbelaire)
TR: Jordan Taylore Upiter (jtupiter)
SE: Daniel Marin (dmarin)
SA: Jordan Xavier Pryde (jxpryde)
OF: Ilia Chtcherbakov (ischtche)

= 2016 =

=== Winter ===
PR: Patrick Melanson (pj2melan)
VP: Patrick Melanson (pj2melan)
Acting VP, progcom chair: Theo Belaire (tbelaire)
TR: Luqman Aden (laden)
SE: Naomi Koo (m3koo)
SA: Zachary Seguin (ztseguin)
OF: Reila Zheng (wy2zheng)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

=== Spring ===
PR: Luqman Aden (laden)
VP: Melissa Angelica Mary Tedesco (matedesc)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Aditya Shivam Kothari (askothar)
SA: Jordan Xavier Pryde (jxpryde)
OF: Zachary Seguin (ztseguin)
LI: Charlie Wang (s455wang)
FR: Marc Mailhot (mnmailho)

=== Fall ===
PR: Charlie Wang (s455wang)
VP: Bryan Coutts (b2coutts)
TR: Laura Song (lhsong)
SE: Uday Barar (ubarar)
SA: Zachary Seguin (ztseguin)
OF: Jamie Sinn (j2sinn)
LI: Felix Bauckholt (fbauckho)
FR: Ilia Chtcherbakov (ischtche)

= 2017 =

=== Winter ===
PR: Wilson Cheang (wyschean)
VP: Tristan Hume (tghume)
TR: Jordan Pryde (jxpryde)
SE: Amir Fata (aafata)
SA: Zachary Seguin (ztseguin)
OF: Felix Bauckholt (fbaukcho)
LI: Connor Murphy (cfmurph)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Felix Bauckholt (fbauckho)
VP: Zichuan Wei (z34wei)
TR: Laura Song (lhsong)
SE: Bo Mo (bzmo)
SA: Zachary Seguin (ztseguin)
OF: Uday Barar (ubarar)
LI: Patrick Melanson (pj2melan)
FR: Uday Barar (ubarar)

=== Fall ===

PR: Melissa Tedesco (matedesc)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
SE: Marc Mailhot (mnmailho)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

= 2018 =

=== Winter ===

PR: Patrick Melanson (pj2melan)
VP: Charlie Wang (s455wang)
TR: Ashley Dewiputri Pranajaya (adpranaj)
SE: Arshia Mufti (a2mufti)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Zichuan Wei (z34wei)
FR: Uday Barar (ubarar)

=== Spring ===

PR: Melissa Tedesco (matedesc)
VP: Dhruv Jauhar (djauhar)
TR: Tristan Hume (tghume)
AV: Marc Mailhot (mnmailho)
SA: Jennifer Zhou (c7zou)
OF: Aditya Thakral (a3thakra)
LI: Archer Zhang (z577zhan)
FR: Marc Mailhot (mnmailho)

=== Fall ===

PR: Zichuan Wei (z34wei)
VP: Uday Barar (ubarar)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Jennifer Zhou (c7zou)
OF: Alexander Zvorygin (azvorygi)
LI: Neil Parikh (n3parikh)
FR:

= 2019 =

=== Winter ===

PR: Marc Mailhot (mnmailho)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
AV: Aditya Thakral (a3thakra)
SA: Charlie Wang (s455wang)
OF: Archer Zhang (z577zhan)
LI: Rishabh Minocha (rkminoch)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Uday Barar (ubarar)
VP: Rajat Malhotra (r24malho)
TR: Raghav Sethi (r5sethi)
AV: Bo Mo (bzmo)
SA: Charlie Wang (s455wang)
OF: Hannah Wong (sm7wong)
LI: Nolan Munce (nmmunce)

=== Fall ===

PR: Dhruv Jauhar (djauhar)
VP: Aditya Thakral (a3thakra)
TR: Rishabh Minocha (rkminoch)
AV: Tammy Khalaf (tekhalaf)
SA: Murphy Berzish (mtrberzi)
OF: Zihan Zhang (z577zhan)
LI: Raghav Sethi (r5sethi)

= 2020 =

=== Winter ===
The office was closed midway through this term due to the COVID-19 pandemic.

The pandemic that threw the University and rest of the world into disarray drove all CSC activity virtual. Though everyone thought the pandemic would quickly be over, the Alpha, then Delta, then Omicron variants resulted in the majority of classes being held online until February 2022.

As a result, the office would stay closed for a full 5 terms, and only reopen in W2022.

PR: Richard Shi (r27shi)
VP: Anastassia Gaikovaia (agaikova)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Amin Bandali (abandali)
OF: Alexander Zvorygin (azvorygi)
LI: Anastassia Gaikovaia (agaikova)
FR: Richard Shi (r27shi)

=== Spring ===

PR: Neil Parikh (n3parikh)
VP: Anastassia Gaikovaia (agaikova)
SA: Amin Bandali (abandali)

=== Fall ===

PR: Mokai Xu (m92xu)
VP: Anastassia Gaikovaia (agaikova) (stepped down as of 2020-11-30)
TR: Neil Parikh (n3parikh)
AV: Edwin Yang (e37yang)
SA: Murphy Berzish (mtrberzi)

= 2021 =
In 2021, CSC rapidly expanded the Program Committee, introducing subcommittees including Design, Events, Marketing, Photography, Reps, Discord mods, and Discord bot developers. The website committee also expanded, and the terminal committee was officially repurposed to serve a syscom-in-training role (since the office remained closed and the terminals powered off).

=== Winter ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Nakul Vijhani (nvijhani)
SA: Max Erenberg (merenber)

=== Spring ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Ravindu Angammana (rbangamm)
SA: Max Erenberg (merenber)

=== Fall ===

PR: Dora Su (d43su)
VP: Jason Sang (jzsang)
TR: Yanni Wang (y3859wan)
AV: Anjing Li (a348li)
SA: Max Erenberg (merenber)
Advising: Neil Parikh (n3parikh)

= 2022 =

=== Winter ===

PR: Juthika Hoque (j3hoque)
VP: Eric Huang (e48huang)
TR: Eden Chan (e223chan)
AV: Dina Orucevic (dmorucev)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Neil Parikh (n3parikh)

=== Spring ===

PR: Eden Chan (e223chan)
VP: Bonnie Peng (b38peng)
TR: Sat Arora (s97arora)
AV: Haley Song (h79song)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Sat Arora (s97arora)
LI: Santiago Montemayor (smontema) (appointed 2022-06-02)
FR: Sat Arora (s97arora) (appointed 2022-06-23)
=== Fall ===

PR: Amy Wang (a258wang)
VP: Anna Wang (aj2wang)
TR: Simon Zeng (s33zeng)
AV: Mabel Kwok (m23kwok)
SA: Raymond Li (r389li)
WW: Shahan Nedadahandeh (snedadah)
OF:
LI:
FR:

Past Executive

2022-09-16T03:07:00Z

R389li: /* 2022 */ Update with initial F22 exec list and add 2021 history

Data sources for this exec list have been: CSC records, MathNEWS.
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.

= Definitions =
#define PR President
#define VP Vice-president
#define TR Treasurer
#define SE Secretary
#define AV Assistant Vice-president
#define SA Sysadmin
#define OF Office Manager
#define LI Librarian
#define FL Flasher
#define DE Deity
#define WW Webmaster
#define SE-TR Secretary-Treasurer (Position was split)
#define FR Fridge Regent (IMAPd)

<div style="float:right;margin-left: 1em;">__TOC__</div>

=Founding 1967=

Sponsor - J. Peter Sprung
PR: K. Rugger
VP: R. Jaques
SE-TR: G. Sutherland

Founding Members:
B. Kindree
R. Melen
V. Neglia
R. Charney
R. Truman
Glenn Berry
D. Meek

===Fall===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

Committee members: R. Stallwerthy, C. de Vries

=1968=

===Winter===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

===Fall===

SE-TR: Glenn Berry

=1969=

Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.

=1970=

===A note on ACM affiliation===

The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970

===Fall===

PR: Rick Beach
VP: Lee Santon
TR: Randy Melen
SE: Vic Neglia

=1971=

===Spring===

VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.

===Fall===

VP: James W. Welch

=1972=

It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.

===Winter===

PR: Mike Campbell
VP: Edgar Hew
SE-TR: Doug Lacy

There is also stuff from James W. Welch without a position.

===Fall===

PR: Ian McIntosh

=1973=

Faculty Sponsor: Morven Gentleman

===Winter===

SE: Douglas E. Lacy

===Spring===

PR: Jim Parry

===Fall===

PR: Jim Parry
VP: Ray Walden
TR: Slavko Stemberger
SE: Mario Festival

=1974=

===Fall===

PR: Russell Crook

=1975-1977=

Faculty Sponsor: Morven Gentleman??

Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.
Sylvia Eng: 1975/6 as some position.
Dave Buckingham: a VP at some point
Allison Nolan: 1977 time
Peter Stevens: 1977
Russel Crook???

Dennis Ritchie came. So did Jeffrey D. Ullman.

=1976=

===Fall===

Progcom: Peter Stevens

=1977=

===Winter===

Progcom: Allison Nowlan

===Spring===

PR: Peter Stevens
Progcom: Allison Nowlan

===Fall===

PR: Andrzej Jan Taramina
Progcom: Allison Nowlan

=1978=

===Winter===

PR: Peter Stevens

===Spring===

TR: K.G. Dykes
SE: Kandry Mutheardy

Brian Kernighan gave a talk this term. So did Ken Thompson.

===Fall===

=1979=

===Spring===

PR: Robert Biddle

=1987=

===Fall===

PR: Jim Boritz
VP: Ted Timar
TR: Gayla Boritz
SE: Edwin Hoogerbeets

=1988=

Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Rob*n Stewart did as an assignment in 1991-1992 for some class at UBC
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was our first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.

===Winter===
PR: Jim Boritz
(Source: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Fall===

SA: Wade Richards

=1989=

===Winter===

https://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg

Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ???

PR: Barry W. Smith
VP: Angela Chambers
TR:
SE: Sean Goggin
SA: Wade Richards / Ross Ridge

(President Kevin Smith confirmed: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Spring===

PR: Jim Thornton
VP: Gayla Boritz
TR: David Fenger
SE: Kivi Shapiro
SA: Reid Pinchback

Assistance to sysadmin: Jim Boritz.

===Fall===

PR: James Boritz
VP: Edmond Bourne
SA: Ross Ridge

=1990=

===Winter===

TR: Jim Thornton

===Spring===

TR: Karen Smith
SE: Rob*n Stewart
*Robyn/Robin signed her emails as Rob*n and requested to be listed as such on this page.

===Fall===
PR: Wade Richards
TR: Carolyn Duke
SE: Rob*n Stewart - attended mathsoc meeting on our behalf.
Kivi Shapiro - attended mathsoc meeting on our behalf.
- Censured by mathsoc for his actions during the election.
Shannon Mann - attended mathsoc meeting on our behalf.

=1991=

===Winter===
VP: Edmond Bourne
TR: Carolyn Duke
SE: Rob*n Stewart
Shannon Mann - attended mathsoc meeting on our behalf.

John McCarthy came this term.

===Spring===
TR: Rob Leitman
Jason Knell - attended mathsoc meeting on our and PMC's behalf.

===Fall===
TR: Mike Van Lingen
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.

=1992=

===Winter===
TR: Norm Ross
SE: Brent Williams

===Spring===
PR: Dale Wick
TR: Stephen A. Mills

===Fall===
TR: Mark Plumb

=1993=

===Winter===
TR: Rob Leitman
VP: Tim Prime
OF: Dave Ebbo
LI: Norm Ross

Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray

===Spring===
TR: Mark Tompsett

===Fall===

PR: Ian Goldberg

=1994=

===Winter===
PR: Ian Goldberg
TR: Mark Tompsett
SE: Tom Rathbourne
LI: Michael Van Biesbrouck
Norm Ross assisted with finances.

===Spring===
PR: Dale Wick (?)
TR: Steve Mills
SA: Ian Goldberg (?)
Norm Ross assisted with finances.

===Fall===
PR: Ross Ridge
VP: Tom Rathbourne (?)
TR: Rob Leitman
SA: Zygo Blaxell
LI: Michael Van Biesbrouck

=1995=

===Winter===
TR: Sharlene Schmeichel
Amy Brown and Rob Ridge purchased books.

===Spring===
TR: Steve Mills

===Fall===
PR: Amy Brown (arbrown)
VP: Christina Norman (cbnorman)
TR: Steven Mills (samills)
SE: Allyson Graham (akgraham)
SA: Gavin Peters

=1996=

===Winter===
PR: Nikita Borisov (nborisov)
VP: Joseph Deu Ngoc (dtdeungo)
TR: Stephen Mills (samills)
SE: Sharlene Schmeichel (saschmei)
SA: Dave Brown (dagbrown)
OF: Somsack Tsai (stsai)
LI: Devin Carless (dccarles)
FL: Allyson Graham (akgraham)
DE: Ian Goldberg (iagoldbe)

===Spring===
PR: Blake Winton (bwinton)
VP: Nick Harvey (njaharve)
TR: Nikita Borisov (nborisov)
SE: Viet-Trung Luu (vluu)
SA: Drew Hamilton (awhamilt)
OF: Jillian Arnott (jarnott)
LI: Ross Ridge (rridge)
FL: Devin Carless (dccarles)

=== Fall ===
PR: Shannon Mann (sjbmann)
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)
TR: Michal Van Biesbrouck (mlvanbie)
SE: Nikita Borisov (nborisov)
SA: Chris Rovers
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation
LI: Aliz Csenki (acsenki)
FL: Aaron Chmielowiec (archmiel)
DE: Skuld (no uwuserid yet...)

=1997=

===Winter===
PR: Dima Brodsky
VP: Nikita Borisov (nborisov)
TR: Stephen Mills (samills)
SE: Evan Jones (ejones)
SA: Alex Brodsky
OF: Chris Doherty
LI: Matt Corks
FL: Paul Prescod

=== Fall ===
PR: Chris Rovers (cdrovers)
VP: Michael van Biesbrouck (mlvanbie)
TR: Somsack Tsai (stsai)
SE: Matt Corks (mvcorks)
SA: Lennart Sorensen (lsorense)
LI: Chmielowiec (archmiel)
OF: Devin Carless (dccarles)
FL: Aaron Chmielowiec (archmiel)

= 1998 =

=== Winter ===
PR: Suresh Naidu
VP: Viet-Trung Luu
TR: Tim Coleman
SE: Dax Hutcheon
Librarian: Dax Hutcheon
Flasher: Dax Hutcheon
Webmaster: Dax Hutcheon
SA: Robin Powell
OF: Aaron Chmielowiec

=== Spring ===

Position Name You might call them...
President roconnor Russell O'Connor
Vice-president trwcolem Tim Coleman
Treasurer knzarysk Karl Zaryski
Secretary (bwinton) (Blake Winton)
Sysadmin wbiggs Billy Biggs
Librarian snaidu Suresh Naidu
Flasher pechrysl Paul Chrysler
Office Manager dccarles Devin Carless
WWWW trwcolem Tim Coleman

=== Fall ===

President Joe Deu Ngoc jtdeungo
Vice-President Wai Ling Yee wlyee
Treasurer Fjord j2lynn
Secretary Matt Corks mvcorks
Sysadmin Andrew Hamilton awhamilt

World Wide Web Wench Dax Hutcheon ddhutche
Office Manager Richard Bell rlbell
Librarian Damian Gryski dgryski
Flasher Paul Chrysler pechrysl
Official Deity Ian Goldberg iagoldbe
Official Chairbeing Calum T. Dalek calum

=1999=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:

=2000=

=== Winter ===
PR: Will Chartrand (wgchartr)
VP: Gavin Duggan (geduggan)
TR:
SE:
SA: Lennart Sorensen (lsorense)
OF:

=== Fall ===
PR: geduggan
VP:
TR:
SE:
SA: bioster
OF:

=2001=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=== Spring ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=2002=

https://web.archive.org/web/20130715012002/http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php

=== Winter ===
PR: Billy Biggs
VP: Stefanus Du Toit
TR: Melissa Basinger
SE: James Perry
SA: Barry Genova
Librarian: Ryan Golbeck
Webmaster: Jonathan Beverley
Office Manager: Sayan Li

=== Spring ===
PR: Alex Pop
VP: Melissa Basinger
TR: Siyan Li
SE: James A Morrison
SA: Jonathan Beverley
Webmaster: Stefanus Du Toit

=== Fall ===
PR: James A. Morrison
VP: Stefanus Du Toit
TR: James Perry
SE: Michael Biggs
SA: Ryan Golbeck
Librarian: Mark Sherry, Cassandra Schopf
Webmaster: Stefanus Du Toit

=2003=

=== Winter ===
PR: Kannan Vijayan (kvijayan)
VP: Meg Darragh (m2darrag)
TR: James Perry (jeperry)
SE: Wojciech Kosnik (wkosnik)
SA: Stefanus Du Toit (sjdutoit)
LI: Simon Law (sfllaw)
WM: Julie Lavoie (jlavoie)

===Fall===
PR: Stefanus Du Toit (sjdutoit)
VP: Meg Darragh (m2darrag)
TR: Tor Myklebust (tmyklebu)
SE: James Perry (jeperry)
SA: Simon Law (sfllaw)
OF:

=2004=

===Winter===
PR: Simon Law (sfllaw)
VP: fspacek
TR: ljain
SE: Julie Lavoie (jlavoie)
SA: Tor Myklebust(tmyklebu)
OF:

===Spring===
PR: dnmorton ?
VP: Tim Loach (tloach)
TR: Michael Biggs (mbiggs)
SE: Lesley Northam (lanortha)
SA:
OF:

===Fall ===
PR: jeperry
VP: mtsay
TR: Mark Sherry (mdsherry)
SE: Tor Myklebust (tmyklebu)
SA: jlavoie
OF:

=2005=

===Winter===

PR: mtsay
VP: Lesley Northam (lanortha)
TR: Holden Karau (hkarau)
SE: domorton
SA: Tor Myklebust (tmyklebu)
OF:

===Spring===

PR: Mark Sherry (mdsherry)
VP: Martin Kess (mdkess)
TR: Ali Piccioni (apiccion)
SE: Michael Biggs (mbiggs)
SA: Tor Myklebust (tmyklebu)
OF:

===Fall===

PR: Tim Loach (tloach)
VP: Lesley Northam (lanortha)
TR: Caelyn McAulay (cmcaulay)
SE: The Professor
SA: Holden Karau (hkarau)
OF:

=2006=

===Winter===

PR: Tor Myklebust (tmyklebu)
VP: Michael Druker (mdruker)
TR: Caelyn McAulay (cmcaulay)
SE: Mark Sherry (mdsherry)
SA: William O'Connor (woconnor)
OF:

===Spring===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: David Tenty (daltenty)
SE: Chris Evensen (cevensen)
SA: Holden Karau (hkarau)
OF:

===Fall===

PR: Martin Kess (mdkess)
VP: Mark Sherry (mdsherry)
TR: Sylvan L. Mably (slmably)
SE: Caelyn McAulay (cmcaulay)
SA: William O'Connor (woconnor)

=2007=

===Winter===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: Caelyn McAulay (cmcaulay)
SE: David Tenty (daltenty)
SA: Holden Karau (hkarau)
Webmaster: jnopporn
OF:

===Spring===
PR: Gaelan D'costa (gdcosta)
VP: Kyle Larose (kmlarose)
TR: Kyle Spaans (kspaans)
SE: Erik Louie (elouie)
SA: Michael Spang (mspang)
Librarian: David Tenty (daltenty)
OF:

===Fall ===
PR: Holden Karau (hkarau)
VP: Alex McCausland (amccausl)
TR: Dominik Chlobowski (dchlobow)
SE: Sean Cumming (sgcummin)
SA: David Tenty (daltenty)
OF:
WW: dtbartle / jnopporn

=2008=

===Winter ===
PR: Sean Cumming (sgcummin)
VP: Matt Lawrence (m3lawren)
TR: Mateusz Tarkowski (mtarkows)
SE: Edgar Bering (ebering)
SA: Jordan Saunders (jmsaunde)
OF:

===Summer ===
PR: Brennan Taylor (b4taylor)
VP: Qifan Xi (qxi)
TR: Matt Lawrence (m3lawren)
SE: Nick Guenther (nguenthe)
SA:
OF:

===Fall ===
PR: Matthew Lawrence (m3lawren)
VP: Edgar Bering (ebering)
TR: Michael Gregson (mgregson)
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski
SA: Kyle Spaans (kspaans)
OF:

=2009=

===Winter===
PR: Michael Gregson (mgregson)
VP: Edgar Bering (ebering)
TR: Brennan Taylor (b4taylor)
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins)
SA: Jacob Parker (j3parker)
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)

===Spring ===
PR: Michael Spang (mspang)
VP: Jacob Parker (j3parker)
TR: Sapphyre Gervais (sagervai)
SE: Matthew McPherrin (mimcpher)
SA: Anthony Brennan (a2brenna)
OF:

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Michael Spang (mspang)
SE: Brennan Taylor (b4taylor)
SA: Michael Ellis (m2ellis)
OF: Rebecca Putinski (rjputins)

=2010=

===Winter===
PR: Kyle Spaans (kspaans)
VP: Edgar Bering (ebering)
TR: Sapphyre Gervais (sagervai)
SE: Ajnu Jacob (ajacob)
SA: Matthew Thiffault (mthiffau)
OF: Jacob Parker (j3parker)

Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr

===Spring===
PR: Jeff Cameron (j3camero)
VP: Brennan Taylor (b4taylor)
TR: Vardhan Mudunuru (vmudunur)
SE: Matthew Lawrence (m3lawren)
SA: Michael Ellis (m2ellis)
OF: Edgar Bering (ebering)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Rebecca Putinski (rjputins)
SE: Kyle Spaans (kspaans)
SA: Jeremy Roman (jbroman)
OF: Amir Sayed Khader (askhader)

=2011=

===Winter===
PR: Edgar Bering (ebering)
VP: Jennifer "Emily" Wong (jy2wong)
TR: Kyle Spaans (kspaans)
SE: Elana "Alana" Hashman (ehashman)
SA: Peter "Bofh" Barfuss (pbarfuss)
OF: Marc Burns (Marc Burns)

===Spring===
PR: Matthew Thiffault (mthiffau)
VP: Matthew McPherrin (mimcpher)
TR: Kyle Spaans (kspaans)
SE: Kwame Andrew Ansong (kansong)
SA: Jeremy Brandon Roman (jbroman)
OF: Jennifer "Emily" Wong (jy2wong)

===Fall===
PR: Marc Burns (m4burns)
VP: Katharine Hyatt (kshyatt)
TR: Jacob Parker (j3parker)
SE: Elana Hashman (ehashman)
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)
OF: Kyle Spaans (kspaans)
LIB: Edgar Bering (ebering)

=2012=

===Winter===
PR: Marc Burns (m4burns)
VP: Elana Hashman (ehashman)
TR: Jacob Parker (j3parker)
SE: Matthew McPherrin (mimcpher)
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: Jennifer "Emily" Wong (jy2wong)

===Summer===
PR: Anthony Brennan (a2brenna)
VP: Luqman Aden (laden)
TR: Matthew McPherrin (mimcpher)
SE: Elana Hashman (ehashman)
SA: Sarah Harvey (sharvey)
OF: Marc Burns (m4burns)
LIB: John Ladan (jladan)

===Fall===
PR: Marc Burns (m4burns)
VP: Salem Talha (satalha)
TR: Jennifer Wong (jy2wong)
SE: Elana Hashman (ehashman), resigned
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: John Ladan (jladan)

=2013=

===Winter===
PR: Anthony Brennan (a2brenna)
VP: Marc Burns (m4burns)
TR: John Mumford (jsmumfor)
SE: Matt Olechnowicz (mgolechn)
SA: Sarah Harvey (sharvey)
OF: Bryan Coutts (b2coutts)
LIB: Matthew McPherrin (mimcpher)

===Spring===
PR: Shane Robert Creighton-Young (srcreigh)
VP: Visishta Vijayanand (vvijayan)
TR: Dominik Chlobowski (dchlobow)
SE: Youn Jin Kim (yj7kim)
SA: Anthony Brennan (a2brenna)
OF: Marc Burns (m4burns)
IMAPD: Dominik Chlobowski (dchlobow)

===Fall===
PR: Elana Hashman (ehashman)
VP: Marc Burns (m4burns)
TR: Dominik Chlobowski (dchlobow)
SE: Edward Lee (e45lee)
SA: Jeremy Roman (jbroman)
OF: Alexis Hunt (aechunt)

= 2014 =

=== Winter ===
PR: Bryan Coutts (b2coutts)
VP: Visishta Vijayanand (vvijayan)
TR: Marc Burns (m4burns)
SE: Mark Farrell (m4farrel)
SA: Murphy Berzish (mtrberzi)
OF: Nicholas Black (nablack)

=== Spring ===
PR: Youn Jin Kim (yj7kim)
VP: Luke Franceschini (l3france)
TR: Joseph Chouinard (jchouina)
SE: Ifaz Kabir (ikabir)
SA: Murphy Berzish (mtrberzi)
OF: Matthew Thiffault (mthiffau)

=== Fall ===
PR: Youn Jin Kim (yj7kim)
VP: Theodor Belaire (tbelaire)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Shane Robert Creighton-Young (srcreigh)
SA: Alexis Hunt (aechunt)
OF: Mark Farrell (m4farrel)
LIB: Gianni Leonardo Gambetti (glgambet)

= 2015 =

=== Winter ===
PR: Gianni Leonardo Gambetti (glgambet)
VP: Luke Franceschini (l3france)
TR: Edward Lee (e45lee)
SE: Patrick James Melanson (pj2melan)
SA: Murphy Berzish (mtrberzi)
OF: Shikhar Singh (s285sing)
LIB: Aishwarya Gupta (a72gupta)

=== Spring ===
PR: Luqman Aden (laden)
VP: Patrick Melanson (pj2melan)
TR: Jonathan Bailey (jj2baile)
SE: Keri Warr (kpwarr)
SA: Nik Black (nablack)
OF: Ilia Chtcherbakov (ischtche)
LIB: Yomna Nasser (ynasser)

=== Fall ===
PR: Simone Hu (ss2hu)
VP: Theo Belaire (tbelaire)
TR: Jordan Taylore Upiter (jtupiter)
SE: Daniel Marin (dmarin)
SA: Jordan Xavier Pryde (jxpryde)
OF: Ilia Chtcherbakov (ischtche)

= 2016 =

=== Winter ===
PR: Patrick Melanson (pj2melan)
VP: Patrick Melanson (pj2melan)
Acting VP, progcom chair: Theo Belaire (tbelaire)
TR: Luqman Aden (laden)
SE: Naomi Koo (m3koo)
SA: Zachary Seguin (ztseguin)
OF: Reila Zheng (wy2zheng)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

=== Spring ===
PR: Luqman Aden (laden)
VP: Melissa Angelica Mary Tedesco (matedesc)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Aditya Shivam Kothari (askothar)
SA: Jordan Xavier Pryde (jxpryde)
OF: Zachary Seguin (ztseguin)
LI: Charlie Wang (s455wang)
FR: Marc Mailhot (mnmailho)

=== Fall ===
PR: Charlie Wang (s455wang)
VP: Bryan Coutts (b2coutts)
TR: Laura Song (lhsong)
SE: Uday Barar (ubarar)
SA: Zachary Seguin (ztseguin)
OF: Jamie Sinn (j2sinn)
LI: Felix Bauckholt (fbauckho)
FR: Ilia Chtcherbakov (ischtche)

= 2017 =

=== Winter ===
PR: Wilson Cheang (wyschean)
VP: Tristan Hume (tghume)
TR: Jordan Pryde (jxpryde)
SE: Amir Fata (aafata)
SA: Zachary Seguin (ztseguin)
OF: Felix Bauckholt (fbaukcho)
LI: Connor Murphy (cfmurph)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Felix Bauckholt (fbauckho)
VP: Zichuan Wei (z34wei)
TR: Laura Song (lhsong)
SE: Bo Mo (bzmo)
SA: Zachary Seguin (ztseguin)
OF: Uday Barar (ubarar)
LI: Patrick Melanson (pj2melan)
FR: Uday Barar (ubarar)

=== Fall ===

PR: Melissa Tedesco (matedesc)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
SE: Marc Mailhot (mnmailho)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

= 2018 =

=== Winter ===

PR: Patrick Melanson (pj2melan)
VP: Charlie Wang (s455wang)
TR: Ashley Dewiputri Pranajaya (adpranaj)
SE: Arshia Mufti (a2mufti)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Zichuan Wei (z34wei)
FR: Uday Barar (ubarar)

=== Spring ===

PR: Melissa Tedesco (matedesc)
VP: Dhruv Jauhar (djauhar)
TR: Tristan Hume (tghume)
AV: Marc Mailhot (mnmailho)
SA: Jennifer Zhou (c7zou)
OF: Aditya Thakral (a3thakra)
LI: Archer Zhang (z577zhan)
FR: Marc Mailhot (mnmailho)

=== Fall ===

PR: Zichuan Wei (z34wei)
VP: Uday Barar (ubarar)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Jennifer Zhou (c7zou)
OF: Alexander Zvorygin (azvorygi)
LI: Neil Parikh (n3parikh)
FR:

= 2019 =

=== Winter ===

PR: Marc Mailhot (mnmailho)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
AV: Aditya Thakral (a3thakra)
SA: Charlie Wang (s455wang)
OF: Archer Zhang (z577zhan)
LI: Rishabh Minocha (rkminoch)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Uday Barar (ubarar)
VP: Rajat Malhotra (r24malho)
TR: Raghav Sethi (r5sethi)
AV: Bo Mo (bzmo)
SA: Charlie Wang (s455wang)
OF: Hannah Wong (sm7wong)
LI: Nolan Munce (nmmunce)

=== Fall ===

PR: Dhruv Jauhar (djauhar)
VP: Aditya Thakral (a3thakra)
TR: Rishabh Minocha (rkminoch)
AV: Tammy Khalaf (tekhalaf)
SA: Murphy Berzish (mtrberzi)
OF: Zihan Zhang (z577zhan)
LI: Raghav Sethi (r5sethi)

= 2020 =

=== Winter ===
The office was closed midway through this term due to the COVID-19 pandemic.

The pandemic that threw the University and rest of the world into disarray drove all CSC activity virtual. Though everyone thought the pandemic would quickly be over, the Alpha, then Delta, then Omicron variants resulted in the majority of classes being held online until February 2022.

As a result, the office would stay closed for a full 5 terms, and only reopen in W2022.

PR: Richard Shi (r27shi)
VP: Anastassia Gaikovaia (agaikova)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Amin Bandali (abandali)
OF: Alexander Zvorygin (azvorygi)
LI: Anastassia Gaikovaia (agaikova)
FR: Richard Shi (r27shi)

=== Spring ===

PR: Neil Parikh (n3parikh)
VP: Anastassia Gaikovaia (agaikova)
SA: Amin Bandali (abandali)

=== Fall ===

PR: Mokai Xu (m92xu)
VP: Anastassia Gaikovaia (agaikova) (stepped down as of 2020-11-30)
TR: Neil Parikh (n3parikh)
AV: Edwin Yang (e37yang)
SA: Murphy Berzish (mtrberzi)

= 2021 =
In 2021, CSC rapidly expanded the Program Committee, introducing subcommittees including Design, Events, Marketing, Photography, Reps, Discord mods, and Discord bot developers. The website committee also expanded, and the terminal committee was officially repurposed to serve a syscom-in-training role (since the office remained closed and the terminals powered off).

=== Winter ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Nakul Vijhani (nvijhani)
SA: Max Erenberg (merenber)

=== Spring ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Ravindu Angammana (rbangamm)
SA: Max Erenberg (merenber)

=== Fall ===

PR: Dora Su (d43su)
VP: Jason Sang (jzsang)
TR: Yanni Wang (y3859wan)
AV: Anjing Li (a348li)
SA: Max Erenberg (merenber)
Advising: Neil Parikh (n3parikh)

= 2022 =

=== Winter ===

PR: Juthika Hoque (j3hoque)
VP: Eric Huang (e48huang)
TR: Eden Chan (e223chan)
AV: Dina Orucevic (dmorucev)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Neil Parikh (n3parikh)

=== Spring ===

PR: Eden Chan (e223chan)
VP: Bonnie Peng (b38peng)
TR: Sat Arora (s97arora)
AV: Haley Song (h79song)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Sat Arora (s97arora)
LI: Santiago Montemayor (smontema) (appointed 2022-06-02)
FR: Sat Arora (s97arora) (appointed 2022-06-23)
=== Fall ===

PR: Amy Wang (a258wang)
VP: Anna Wang (aj2wang)
TR: Simon Zeng (s33zeng)
AV: Mabel Kwok (m23kwok)
SA: Raymond Li (r389li)
WW: Shahan Nedadahandeh (snedadah)
OF:
LI:
FR:

Git Hosting

2022-09-15T02:04:55Z

R389li: Document locale issues

We have a [https://git.csclub.uwaterloo.ca Gitea] instance running on [[Machine List#caffeine|caffeine]]. You can sign in via LDAP to the web interface. Projects used by CSC as a whole are owned by the [https://git.csclub.uwaterloo.ca/public public] organization, except for website-committee related repos, which are owned by the [https://git.csclub.uwaterloo.ca/www www] org.

== Installation Details ==
<code>/etc/gitea</code> on caffeine contains the configs for Gitea. It's installed as a Debian package, with additional files in <code>/var/lib/gitea/</code>and a systemd service at <code>/lib/systemd/system/gitea.service</code>.

There is a custom locale (used to define CSC-custom strings in some pages) at <code>/var/lib/gitea/custom/options/locale/locale_en-US.ini</code> that may need to be updated when the Gitea APT package is updated. To update this, run the <code>update_custom_locale.sh</code> in that directory (as root).

== Usage ==
"It's basically GitHub"

- raymo

=== SSH keys ===
It is recommended to setup [https://git.csclub.uwaterloo.ca/user/settings/keys SSH keys] so that you do not have to enter your password each time you push to a repo. Once you have uploaded your public key, add the following to your ~/.ssh/config:
<pre>
Host csclub.uwaterloo.ca
HostName csclub.uwaterloo.ca
IdentityFile ~/.ssh/id_rsa
User git
</pre>
(Replace ~/.ssh/id_rsa by the location of your private SSH key.) Now you should be able to clone, push and pull over SSH.

== Continuous Integration ==
We are running a CI server at https://ci.csclub.uwaterloo.ca. It uses OAuth via Gitea for logins, so you need to have logged in to Gitea first. See https://docs.drone.io/ for documentation. All you have to do is create a .drone.yml file in your repo, then enable CI on the repo from the CSC Drone website. There is an example [https://git.csclub.uwaterloo.ca/merenber/drone-test here].

== Pushing and pulling from the filesystem ==
(for syscom only)
<br>
If you need to keep the ability to push/pull from the filesystem, in addition to Gitea, you will need to take the following steps.
In this example, we are migrating a repo called 'public/repo.git', which is a folder under /srv/git on caffeine (which is a symlink to /users/git).
The way we're doing this right now is kind of hacky, but it works:
<ol>
<li>Clone the original repo locally: <code>git clone /srv/git/public/repo.git</code></li>
<li>Delete the old repo (from phosphoric-acid, which has no_root_squash): <code>rm -rf /srv/git/public/repo.git</code></li>
<li>Create a new repo with the name 'repo' from the Gitea web UI. This should create a bare repository at <code>/srv/git/public/repo.git</code>. (Make sure you choose the 'public' org from the dropdown.)</li>
<li>
Push the original repo to the new remote:
<pre>
cd repo
git remote add gitea https://git.csclub.uwaterloo.ca/public/repo.git
git push gitea master
</pre>
</li>
<li>
Remove any git gooks which require gitea:
<pre>
rm $(grep -IRl gitea /srv/git/public/repo.git/hooks)
</pre>
</li>
<li>
Change file permissions:
<pre>
chown -R git:git /srv/git/public/repo.git
chmod -R g+w /srv/git/public/repo.git
</pre>
You will need to do this from phosphoric-acid (due to NFS root squashing).
</li>
</ol>
Note that the repo folder SHOULD be owned by git:git. Anything else will likely break Gitea. (If a user pushes something to the folder and their umask doesn't allow group members to read, for example, then Gitea will be unable to read the repo.)
<br>
This means that only trusted users should be in the git group - ideally, only syscom members.

Shlink

2022-09-10T18:58:04Z

R389li: Add setup instructions

[https://shlink.io/ Shlink] is a self-hosted URL shortener. We run an instance on [[Machine List#caffeine|caffeine]], currently for exec-use only.

== Installation Details ==
Shlink was installed manually (as of F2022 there is currently no Debian package for it). Its files are in <code>/usr/local/lib/shlink</code> on caffeine, with a symlink of <code>bin/cli</code> (the Shlink CLI) to <code>/usr/local/bin/shlink</code> as recommended by Shlink's docs. Due to Shlink only supporting PHP 8.2, which is in debian-unstable at the moment, the installation and CLI scripts were modified to use the <code>php8.2</code> binary installed from <code>packages.sury.org</code>.

The web client (used to manage shortlinks graphically, the other option being the CLI) sources are located in <code>/usr/local/bin/shlink/web-client/</code>. Apache is configured (through <code>sites-available/csc-links.conf</code> and <code>sites-real/csc-links</code>) to serve actual shortlinks through [https://csclub.ca csclub.ca] (which itself redirects to the CSC homepage) and the web client through [https://links.csclub.uwaterloo.ca links.csclub.uwaterloo.ca].

== Usage ==
Links can be managed at [https://links.csclub.uwaterloo.ca links.csclub.uwaterloo.ca], or through the CLI (currently restricted to the <code>staff</code> group).
[[File:Shlink1.png|none|thumb|When you open it for the first time, you will see an interface that looks like this. Click '''Add a server'''.]]
[[File:Shlink2.png|none|thumb|Enter the details as follows. Name: <code>csclub.ca</code> URL: <code><nowiki>https://csclub.ca</nowiki></code> API key: The exec API key (in the usual exec passwords location, or ask an exec for it if you aren't one)]]
On the next interface, '''custom slug''' is the part of the URL that can be customized. If it is left blank, a random 4-character slug will be generated.

Use the <code>csctest</code> parameter to disable tracking on test requests.

File:Shlink2.png

2022-09-10T18:51:43Z

R389li:

Shlink setup process step 2

File:Shlink1.png

2022-09-10T18:48:59Z

R389li:

Shlink setup process step 1

Shlink

2022-08-29T06:11:25Z

R389li: Create page

[https://shlink.io/ Shlink] is a self-hosted URL shortener. We run an instance on [[Machine List#caffeine|caffeine]], currently for exec-use only.

== Installation Details ==
Shlink was installed manually (as of F2022 there is currently no Debian package for it). Its files are in <code>/usr/local/lib/shlink</code> on caffeine, with a symlink of <code>bin/cli</code> (the Shlink CLI) to <code>/usr/local/bin/shlink</code> as recommended by Shlink's docs. Due to Shlink only supporting PHP 8.2, which is in debian-unstable at the moment, the installation and CLI scripts were modified to use the <code>php8.2</code> binary installed from <code>packages.sury.org</code>.

The web client (used to manage shortlinks graphically, the other option being the CLI) sources are located in <code>/usr/local/bin/shlink/web-client/</code>. Apache is configured (through <code>sites-available/csc-links.conf</code> and <code>sites-real/csc-links</code>) to serve actual shortlinks through [https://csclub.ca csclub.ca] (which itself redirects to the CSC homepage) and the web client through [https://links.csclub.uwaterloo.ca links.csclub.uwaterloo.ca].

== Usage ==
Links can be managed at [https://links.csclub.uwaterloo.ca links.csclub.uwaterloo.ca], or through the CLI (currently restricted to the <code>staff</code> group).

Use the <code>csctest</code> parameter to disable tracking on test requests.

Database

2022-08-28T20:25:15Z

R389li: Add port

'''IMPORTANT NOTE: This is an upgraded database service offered by the CSC. It is not currently available to members, please see [[MySQL]] for current database information.'''

The CSC provides MySQL and Postgres databases to members.

If you want to run something different (e.g., MongoDB), you can compile/run it yourself. '''Please''' stay up to date with security updates and '''DO NOT''' run it on a port open to the internet (see [[Firewall|Firewall]]).

Database services are provided on [[Machine_List#coffee|coffee]], through port 3306.

== Servers ==

=== MySQL ===

=== Postgres ===

== Connecting ==

=== MySQL ===

==== PHP ====

To connect to MySQL from PHP, you need to specify the SSL Cipher of 'DHE-RSA-AES256-SHA:AES128-SHA'. For PHP PDO:

$pdo = new PDO('mysql:host=coffee.csclub.uwaterloo.ca;dbname=DBNAME', 'USERNAME', 'PASSWORD', [
PDO::MYSQL_ATTR_SSL_CIPHER => 'DHE-RSA-AES256-SHA:AES128-SHA'
]);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

Git Hosting

2022-08-28T19:46:19Z

R389li: Add installation details

We have a [https://git.csclub.uwaterloo.ca Gitea] instance running on [[Machine List#caffeine|caffeine]]. You can sign in via LDAP to the web interface. Projects used by CSC as a whole are owned by the [https://git.csclub.uwaterloo.ca/public public] organization, except for website-committee related repos, which are owned by the [https://git.csclub.uwaterloo.ca/www www] org.

== Installation Details ==
<code>/etc/gitea</code> on caffeine contains the configs for Gitea. It's installed as a Debian package, with additional files in <code>/var/lib/gitea/</code>and a systemd service at <code>/lib/systemd/system/gitea.service</code>.

== Usage ==
"It's basically GitHub"

- raymo

=== SSH keys ===
It is recommended to setup [https://git.csclub.uwaterloo.ca/user/settings/keys SSH keys] so that you do not have to enter your password each time you push to a repo. Once you have uploaded your public key, add the following to your ~/.ssh/config:
<pre>
Host csclub.uwaterloo.ca
HostName csclub.uwaterloo.ca
IdentityFile ~/.ssh/id_rsa
User git
</pre>
(Replace ~/.ssh/id_rsa by the location of your private SSH key.) Now you should be able to clone, push and pull over SSH.

== Continuous Integration ==
We are running a CI server at https://ci.csclub.uwaterloo.ca. It uses OAuth via Gitea for logins, so you need to have logged in to Gitea first. See https://docs.drone.io/ for documentation. All you have to do is create a .drone.yml file in your repo, then enable CI on the repo from the CSC Drone website. There is an example [https://git.csclub.uwaterloo.ca/merenber/drone-test here].

== Pushing and pulling from the filesystem ==
(for syscom only)
<br>
If you need to keep the ability to push/pull from the filesystem, in addition to Gitea, you will need to take the following steps.
In this example, we are migrating a repo called 'public/repo.git', which is a folder under /srv/git on caffeine (which is a symlink to /users/git).
The way we're doing this right now is kind of hacky, but it works:
<ol>
<li>Clone the original repo locally: <code>git clone /srv/git/public/repo.git</code></li>
<li>Delete the old repo (from phosphoric-acid, which has no_root_squash): <code>rm -rf /srv/git/public/repo.git</code></li>
<li>Create a new repo with the name 'repo' from the Gitea web UI. This should create a bare repository at <code>/srv/git/public/repo.git</code>. (Make sure you choose the 'public' org from the dropdown.)</li>
<li>
Push the original repo to the new remote:
<pre>
cd repo
git remote add gitea https://git.csclub.uwaterloo.ca/public/repo.git
git push gitea master
</pre>
</li>
<li>
Remove any git gooks which require gitea:
<pre>
rm $(grep -IRl gitea /srv/git/public/repo.git/hooks)
</pre>
</li>
<li>
Change file permissions:
<pre>
chown -R git:git /srv/git/public/repo.git
chmod -R g+w /srv/git/public/repo.git
</pre>
You will need to do this from phosphoric-acid (due to NFS root squashing).
</li>
</ol>
Note that the repo folder SHOULD be owned by git:git. Anything else will likely break Gitea. (If a user pushes something to the folder and their umask doesn't allow group members to read, for example, then Gitea will be unable to read the repo.)
<br>
This means that only trusted users should be in the git group - ideally, only syscom members.

Git Hosting

2022-08-28T19:43:30Z

R389li: Grammar

We have a [https://git.csclub.uwaterloo.ca gitea] instance running on [[Machine List#caffeine|caffeine]]. You can sign in via LDAP to the web interface. Projects used by CSC as a whole are owned by the [https://git.csclub.uwaterloo.ca/public public] organization, except for website-committee related repos, which are owned by the [https://git.csclub.uwaterloo.ca/www www] org.

== Usage ==
"It's basically GitHub"

- raymo

=== SSH keys ===
It is recommended to setup [https://git.csclub.uwaterloo.ca/user/settings/keys SSH keys] so that you do not have to enter your password each time you push to a repo. Once you have uploaded your public key, add the following to your ~/.ssh/config:
<pre>
Host csclub.uwaterloo.ca
HostName csclub.uwaterloo.ca
IdentityFile ~/.ssh/id_rsa
User git
</pre>
(Replace ~/.ssh/id_rsa by the location of your private SSH key.) Now you should be able to clone, push and pull over SSH.

== Continuous Integration ==
We are running a CI server at https://ci.csclub.uwaterloo.ca. It uses OAuth via Gitea for logins, so you need to have logged in to Gitea first. See https://docs.drone.io/ for documentation. All you have to do is create a .drone.yml file in your repo, then enable CI on the repo from the CSC Drone website. There is an example [https://git.csclub.uwaterloo.ca/merenber/drone-test here].

== Pushing and pulling from the filesystem ==
(for syscom only)
<br>
If you need to keep the ability to push/pull from the filesystem, in addition to Gitea, you will need to take the following steps.
In this example, we are migrating a repo called 'public/repo.git', which is a folder under /srv/git on caffeine (which is a symlink to /users/git).
The way we're doing this right now is kind of hacky, but it works:
<ol>
<li>Clone the original repo locally: <code>git clone /srv/git/public/repo.git</code></li>
<li>Delete the old repo (from phosphoric-acid, which has no_root_squash): <code>rm -rf /srv/git/public/repo.git</code></li>
<li>Create a new repo with the name 'repo' from the Gitea web UI. This should create a bare repository at <code>/srv/git/public/repo.git</code>. (Make sure you choose the 'public' org from the dropdown.)</li>
<li>
Push the original repo to the new remote:
<pre>
cd repo
git remote add gitea https://git.csclub.uwaterloo.ca/public/repo.git
git push gitea master
</pre>
</li>
<li>
Remove any git gooks which require gitea:
<pre>
rm $(grep -IRl gitea /srv/git/public/repo.git/hooks)
</pre>
</li>
<li>
Change file permissions:
<pre>
chown -R git:git /srv/git/public/repo.git
chmod -R g+w /srv/git/public/repo.git
</pre>
You will need to do this from phosphoric-acid (due to NFS root squashing).
</li>
</ol>
Note that the repo folder SHOULD be owned by git:git. Anything else will likely break Gitea. (If a user pushes something to the folder and their umask doesn't allow group members to read, for example, then Gitea will be unable to read the repo.)
<br>
This means that only trusted users should be in the git group - ideally, only syscom members.

How to IRC

2022-07-30T05:25:37Z

R389li:

Chat with us!

== The Lounge ==
We have a web UI for IRC at [https://chat.csclub.uwaterloo.ca The Lounge].
[[File:The_lounge_screenshot.png|alt=The Lounge screenshot of #csc channel|400px|thumbnail|A screen capture of the #csc channel, as seen from The Lounge web client]]
If you are a first-time IRC user, this is by far the easiest way to join.
The steps are (roughly):
<ol>
<li> Login using your CSC credentials. </li>
<li> Follow the prompts to join the Libera server (make sure TLS is enabled). </li>
<li> Type <code>/join #csc</code> </li>
<li> Say hi! </li>
</ol>

If you are a termcom member, you will need to join the #csc-termcom channel, which requires nick (nickname) registration. To do this, run the following commands in The Lounge (or any IRC client):
<pre>
/nick my_nickname
/msg NickServ REGISTER my_password my_email@example.com
</pre>
Fill in your nickname, password and email as appropriate. You will receive an email from Libera asking you to verify your email address.
Once you have done so, go back to The Lounge, go the Libera window, click on the three-dots button in the top right corner, and click "Edit this network". There, you can specify the nick and password which you just created.
== Mattermost ==
[[File:Mattermost-csc-sample.png|alt=Mattermost #csc screen capture, including a conversation between members of the channel|372x372px|right|thumbnail|A screen capture of the #csc channel, as seen from Mattermost desktop]]

[[File:Mattermost-phone-sample.jpg|alt=Mattermost android screenshot of #csc channel|362x362px|thumbnail|A screen capture of the #csc channel, as seen from Mattermost Android client]]
We self-host [https://mattermost.csclub.uwaterloo.ca/ Mattermost] now, it's easier to use if you're not familiar with IRC. If you know how to use IRC, we're #csc on libera.chat and there should be a #csc bridge that relays messages between #csc and our Mattermost instance.

Both #csc on libera.chat ([https://web.libera.chat/#csc Libera Webchat] or via IRC clients e.g. irssi, weechat) and ~csc on Mattermost are official channels to interact with CSC members!

=== Mattermost Setup ===

Make an account at [https://mattermost.csclub.uwaterloo.ca/signup_email our self-hosted Mattermost]. For username, you can put your questid (i.e. your CSC username), although you can always set your full name as it will appear in Mattermost.

The benefit of Mattermost over Slack and family is that Slack stores all your information on Slack's servers, wherever they are in the US. They do this so they can sell your data back to you (e.g. not allowing you to see old messages), but Slack is also closed-source even though it was derived from IRC. Mattermost is open-source and hosted on CSC servers.

For iOS users, Mattermost's mobile app is also a superior option if you wish to receive push notifications as it supports Apple's native push via iCloud/APN.

== Weechat ==

[[File:Glowing-bear-screencap.png|alt=glowing-bear screen capture of #csc IRC channel|right|thumbnail|450px|A screen capture of the #csc IRC channel, as seen from glowing-bear client]]

[[File:Weechat-Android-screenshot.png|alt=Weechat Android screen capture of #csc IRC channel|right|thumbnail|A screen capture of the #csc IRC channel, as seen from Weechat Android client]]

This method will establish a persistent IRC session that you can connect to with different clients. A [https://weechat.org/ weechat] server program running on a CSClub server will remain connected to IRC networks at all times, and simply connecting to your <code>weechat</code> server program will give you all the chat history upon connection.

To set up your <code>weechat</code> server program:
<ol>
<li>Log in to a CS Club general-use server, such as <code>neotame.csclub.uwaterloo.ca</code>, and run <code>weechat</code> in such a way that it will keep running after you log out.</li>

Replace ctdalek with your username:

<pre>
$ ssh ctdalek@neotame.csclub.uwaterloo.ca
$ screen -U weechat
</pre>

A "WeeChat" window should have opened up. Type the following commands into this window, replacing [yourpassword] with a password of your choice and [yourport] with a number in the range of [28100-28400]:

<pre>
/set relay.network.password [yourpassword]
/relay add weechat [yourport]
/save
</pre>

Once you have entered in all these commands, you don't need your terminal anymore. You can close your ssh window!

<li>Your personal WeeChat server is set up. Now connect to it using a pretty client:</li>

[http://www.glowing-bear.org/ glowing-bear] is a free and open source web-based weechat client. It works well as a desktop client, and on iOS. To connect using glowing-bear, fill in "Connection Settings" with <code>neotame.csclub.uwaterloo.ca</code>, <code>[yourport]</code>, and <code>[yourpassword]</code>. Make sure to use the <code>http</code> version of the website with this guide! <code>https</code> only works if you set up encryption. That's not covered here.

'''Recommended''': [https://play.google.com/store/apps/details?id=com.ubergeek42.WeechatAndroid Weechat Android] is a free and open source android <code>weechat</code> client. It gives notifications when your receive a direct message or your name is mentioned in one of the channels you are in. To connect using Weechat Android, fill in Settings > Connection with <code>neotame.csclub.uwaterloo.ca</code>, <code>[yourport]</code>, and <code>[yourpassword]</code>.

<li>Join the #csc IRC channel</li>

In your weechat client (e.g. glowing-bear or Weechat Android), switch to the 'Libera' tab and type:

<pre>
/server add libera irc.libera.chat/6697 -ssl -autoconnect
/set irc.server.libera.autojoin "#csc"
/save
/connect libera
</pre>

You're now connected to the main IRC network! Connected by an SSL connection, so you're super sneaky as well. Way to go.

Now, to join the CSC channel!

In your client, you'll now have two buffers that you can switch to. One is called "weechat" and the other is "libera".

Switch to the "libera" buffer and type:

/join #csc

Congratulations you win!

<li>Know some IRC commands</li>

Welcome to the channel! Go ahead and say something, like

<pre>
Good morning ctdalek http://www.total-knowledge.com/~ilya/mips/ugt.html
</pre>

If you want to privately message someone, use

<pre>
/q [nick] [optional message]
</pre>

which will open a new tab with that person. For example <code>/q pj2melan ping pong</code>.

If you want to join another channel, use
<pre> /join [channel]
</pre>

For example <code>/join #csc</code>.
</ol>
''Note about CSClub server restarts:'' If <code>neotame</code> or any server you're using to run the <code>weechat</code> program on is restarted for any reason (we'll email you if it does), Make sure to run <code>screen -U weechat</code> again to start your server. You won't have to reconfigure <code>weechat</code> (step 2) though.

=== Securing Glowing Bear - SSL/TLS Setup ===

With the default setup, when you log in to your <code>weechat</code> relay using a client such as glowing-bear or Weechat Android, ''your password is sent in the clear''. If you believe this to be a bad thing, follow these steps to enable SSL encryption between you and your <code>weechat</code> relay running on <code>neotame</code>.

<ol>
<li>Log in to <code>neotame.csclub.uwaterloo.ca</code> to generate an SSL certificate:

<pre>
$ ssh neotame.csclub.uwaterloo.ca
$ mkdir ~/.weechat/ssl
$ cd ~/.weechat/ssl
$ openssl req -nodes -newkey rsa:4096 -keyout relay.pem -x509 -days 365 -out relay.pem # Fill in the fields as it asks
$ exit
</pre>
</li>

<li>Tell <code>weechat</code> to use the new certificate you generated, and add a new relay with a different password (since your old password was likely compromised):

<p>In your <code>weechat</code> client (glowing-bear, or Weechat Android), run</p>

<pre>
/set relay.network.password [newpassword]
/relay sslcertkey
/relay del weechat
/relay add ssl.weechat [yourport]
</pre>
</li>

<li>Tell your client to connect to your relay using SSL:

<p>For glowing-bear, refresh and simply check the "Encryption. Check settings for help." checkbox when logging in with your new password.</p>

<p>For Weechat Android, in Settings > Connection, change Connection type to WeeChat SSL and change your Relay password.</p>
</li>

</ol>

Enjoy fully encrypted communication!

You might have warnings about untrusted certificates, but since you made the certificate yourself you can trust yourself and add required security exceptions.

== Quick SSH-based Setup ==

1. Open up an IRC client, i.e. <code>irssi</code>. Launch <code>irssi</code> in a screen session, which you
can return to later.

$ ssh neotame.csclub.uwaterloo.ca
$ screen -U irssi

2. In irssi, connect to the libera network and join our channel.

/server add -auto -net libera -ssl -ssl_verify irc.libera.chat 6697
/save
/connect libera
/join #csc

3. Please set your nickname to your Quest ID so we know who you are.

/nick $YOUR_QUEST_ID
/save

You can register your nickname on the libera network by messaging NickServ.

/msg NickServ REGISTER password email

4. Close your screen session, which you can return to later.

CTRL-A CTRL-D

5. Return to your screen session. You will have remained connected to the channel.

$ ssh neotame.csclub.uwaterloo.ca -t "screen -Urd"

= syscom =

To kick (and optionally ban) a user:

/cs op #<channel>
/mode #<channel> +b <nick_to_ban>
/kick <nick_to_kick>
/mode -o <your_nick>

If the user need not be banned you can skip the second line. If other accounts from the same user/host should be banned, replace <code>nick_to_ban/kick</code> with <code>nick!username@host</code>.

ZNC

2022-07-30T05:09:40Z

R389li: Fix link

This page describes client and server setup for ZNC with LDAP authentication.
If you're new to IRC, see [[How to IRC]] to get started. For more info on ZNC, see [https://wiki.znc.in/ZNC].

== ZNC setup ==
These instructions show how to connect to the <code>#csc</code> channel on libera.chat via ZNC.
<ol>
<li>
Visit the ZNC web portal at [https://znc.csclub.uwaterloo.ca znc.csclub.uwaterloo.ca] and login using your CSC credentials.
</li>
<li>
Go to "Your Settings". Under "Networks", if you do not see a network called "libera", then click "Add", type "libera" for the Network Name, edit your nickname if desired, and enter the following into the IRC servers table:
<pre>
Hostname Port SSL
irc.libera.chat 6697 [Checked]
</pre>
</li>
<li>
(Optional, but recommended): Under the settings for libera, check the box which says "Connect to IRC & automatically re-connect". This will connect you to Libera as soon as you connect to ZNC.
</li>
<li>
Set your nick, alt. nick, and ident for libera. Make sure these all have the same value. By default these are set to %user% which will expand to your csc username.
If you are already logged in to libera with your csc username on a different IRC client, make sure to change your nick here
as two different connections cannot share the same nick.
</li>
<li>
Under the "channels" section for libera, click "Add", then enter <code>#csc</code> in the "Channel Name" field, and check the boxes "Save to config", "Detached", and "Enabled". Click "Add Channel and return".
</li>
</ol>
Now you will connect to ZNC with an IRC client.

== IRC Client setup ==
=== The Lounge (chat.csclub.uwaterloo.ca) ===
<ol>
<li>
Under network settings, name can be anything you want.
</li>
<li>
Server should be set to <code>znc.csclub.uwaterloo.ca</code>, and port <code>6697</code>. The password is <code><zncusername>:<zncpassword></code>. If you have multiple networks configured, i.e. Libera and Freenode, use <code><zncusername>/<networkname>:<zncpassword></code> for the password. Also set your nick, username and real name.
</li>
<li>
Under Authentication, choose <code>Username + password (SASL PLAIN)</code>, and enter your LIBERA nick and password.
</li>
</ol>

=== Weechat ===
<ol>
<pre>
/server add myznc znc.csclub.uwaterloo.ca/6697 -username=<CSC_USERNAME>/libera -password=<CSC_PASSWORD> -ssl -autoconnect
/connect myznc
/join #csc
</pre>
Don't forget to concatenate "/libera" to the end of your username.

<li>
If you did not check the autoconnect box, you will need to manually connect using:
<pre>
/msg *status connect
</pre>
To verify that you are connected to Libera, run
<pre>
/msg *status ListNetworks
</pre>
The "IRC" column should have the value "Yes".
</li>
<li>
A modified version of the backlog module [https://wiki.znc.in/Backlog] is enabled globally. To use this, first enable the <kbd>log</kbd> module for your user via the web UI. You will then be able to request older logs for a channel from your IRC client, e.g.
<pre>
/msg *backlog #csc 42
</pre>
Note that you do <b>not</b> need to specify the log path.
</li>
</ol>

== Server setup ==
Note that the following instructions are about setting up a ZNC instance with support for LDAP authentication, similar to the CSC ZNC, and it is ''not'' about configuring an IRC client to connect to ZNC. For that, see the [[ZNC#Client_setup|Client setup]] section above.

=== saslauthd setup ===
For LDAP authentication, we use the Cyrusauth module [https://wiki.znc.in/Cyrusauth], which needs to communicate with the SASL authentication daemon (saslauthd).
<ol>
<li>
On the server, install the following packages:
<pre>apt install sasl2-bin ca-certificates</pre>
</li>
<li>
Open /etc/default/saslauthd, and change the following lines:
<pre>
START=yes
MECHANISM="ldap"
</pre>
</li>
<li>
Paste the following into /etc/saslauthd.conf:
<pre>
ldap_servers: ldaps://auth1.csclub.uwaterloo.ca ldaps://auth2.csclub.uwaterloo.ca
ldap_search_base: ou=People,dc=csclub,dc=uwaterloo,dc=ca
ldap_filter: (uid=%u)
</pre>
</li>
<li>
Start saslauthd:
<pre>
# service saslauthd start
</pre>
</li>
<li>
Test saslauthd to make sure it's working:
<pre>
$ testsaslauthd -u "your_csc_username" -p "your_csc_password"
</pre>
You should see a response like
<pre>
0: OK "Success."
</pre>
</li>
</ol>
=== ZNC setup ===
<ol>
<li>
Install ZNC:
<pre>
# apt install znc
</pre>
</li>
<li>
Add a user for ZNC and create an initial configuration:
<pre>
# useradd -s /bin/bash -m znc
# usermod -a -G sasl znc
# su - znc
$ znc --makeconf
</pre>
Note that the znc user <b>must</b> be part of the sasl group to communicate with saslauthd.
</li>
<li>
Visit the web interface at <SERVER_IP>:<PORT>. Note that you may need to modify your browser settings so that you can visit a website at port 6667 or 6697.
</li>
<li>
Log in using your admin credentials, then go to "Global Settings". Check the "cyrusauth" box, type "saslauthd" in the arguments input field, then scroll to the bottom and click "Save".
</li>
<li>
You will now need to connect to ZNC with an IRC client. The commands below assume Weechat is being used, but other clients should be similar.
<pre>
/server add myznc <SERVER_IP>/<PORT> -username=<ADMIN_USERNAME> -password=<ADMIN_PASSWORD>
/connect myznc
/msg *Cyrusauth CreateUsers yes
</pre>
This will tell ZNC to create a new user on their first login.
</li>
<li>
You may optionally wish to create users from a template (i.e. dummy) user to share some common per-user settings, such as MaxNetworks. To do this, login to the ZNC web interface as admin and click on "Manage Users". Add a new user called "dummy" with the desired settings, then click "save".
Now open Weechat, login to ZNC as admin, and run the following:
<pre>
/msg *Cyrusauth CreateUsers clone dummy
</pre>
This will tell ZNC to clone new users using "dummy" as the template.
</li>
<li>
You may wish to optionally enable the adminlog module [https://wiki.znc.in/Adminlog] so that you can see who has logged in from where at what time. By default, these logs will be written to a file. To prevent this file from growing too long, install logrotate and paste the following into /etc/logrotate.d/znc:
<pre>
/home/znc/.znc/moddata/adminlog/znc.log {
rotate 4
weekly
compress
}
</pre>
This will keep rotate logs every week, discarding logs after they have been rotated 4 times.
</li>
</ol>
=== NGINX tuning ===
If you are running ZNC behind NGINX as a reverse proxy, keep in mind that by default, NGINX will run one worker process per CPU core. To reduce this, change the following in <kbd>/etc/nginx/nginx.conf</kbd>:
<pre>
worker_processes 4
</pre>

How to IRC

2022-07-30T05:08:11Z

R389li: Fixes

= Chatting with us =

== The Lounge ==
We have a web UI for IRC at [https://chat.csclub.uwaterloo.ca The Lounge].
[[File:The_lounge_screenshot.png|alt=The Lounge screenshot of #csc channel|400px|top|left|thumbnail|A screen capture of the #csc channel, as seen from The Lounge web client]]
If you are a first-time IRC user, this is by far the easiest way to join.
The steps are (roughly):
<ol>
<li> Login using your CSC credentials. </li>
<li> Follow the prompts to join the Libera server (make sure TLS is enabled). </li>
<li> Type <code>/join #csc</code> </li>
<li> Say hi! </li>
</ol>

If you are a termcom member, you will need to join the #csc-termcom channel, which requires nick (nickname) registration. To do this, run the following commands in The Lounge (or any IRC client):
<pre>
/nick my_nickname
/msg NickServ REGISTER my_password my_email@example.com
</pre>
Fill in your nickname, password and email as appropriate. You will receive an email from Libera asking you to verify your email address.
Once you have done so, go back to The Lounge, go the Libera window, click on the three-dots button in the top right corner, and click "Edit this network". There, you can specify the nick and password which you just created.
== Mattermost ==
We self-host [https://mattermost.csclub.uwaterloo.ca/ Mattermost] now, it's easier to use if you're not familiar with IRC. If you know how to use IRC, we're #csc on libera.chat and there should be a #csc bridge that relays messages between #csc and our Mattermost instance.

Both #csc on libera.chat ([https://web.libera.chat/#csc Libera Webchat] or via IRC clients e.g. irssi, weechat) and ~csc on Mattermost are official channels to interact with CSC members!

= Mattermost Setup =

[[File:Mattermost-phone-sample.jpg|alt=Mattermost android screenshot of #csc channel|200px|top|left|thumbnail|A screen capture of the #csc channel, as seen from Mattermost Android client]]
[[File:Mattermost-csc-sample.png|alt=Mattermost #csc screen capture, including a conversation between members of the channel|200px|top|right|thumbnail|A screen capture of the #csc channel, as seen from Mattermost desktop]]

Make an account at [https://mattermost.csclub.uwaterloo.ca/signup_email our self-hosted Mattermost]. For username, you can put your questid (i.e. your CSC username), although you can always set your full name as it will appear in Mattermost.

The benefit of Mattermost over Slack and family is that Slack stores all your information on Slack's servers, wherever they are in the US. They do this so they can sell your data back to you (e.g. not allowing you to see old messages), but Slack is also closed-source even though it was derived from IRC. Mattermost is open-source and hosted on CSC servers.

For iOS users, Mattermost's mobile app is also a superior option if you wish to receive push notifications as it supports Apple's native push via iCloud/APN.

= IRC Setup =

[[File:Glowing-bear-screencap.png|alt=glowing-bear screen capture of #csc IRC channel|right|thumbnail|450px|A screen capture of the #csc IRC channel, as seen from glowing-bear client]]

[[File:Weechat-Android-screenshot.png|alt=Weechat Android screen capture of #csc IRC channel|right|thumbnail|A screen capture of the #csc IRC channel, as seen from Weechat Android client]]

This method will establish a persistent IRC session that you can connect to with different clients. A [https://weechat.org/ weechat] server program running on a CSClub server will remain connected to IRC networks at all times, and simply connecting to your <code>weechat</code> server program will give you all the chat history upon connection.

To set up your <code>weechat</code> server program:
<ol>
<li>Log in to a CS Club general-use server, such as <code>neotame.csclub.uwaterloo.ca</code>, and run <code>weechat</code> in such a way that it will keep running after you log out.</li>

Replace ctdalek with your username:

<pre>
$ ssh ctdalek@neotame.csclub.uwaterloo.ca
$ screen -U weechat
</pre>

A "WeeChat" window should have opened up. Type the following commands into this window, replacing [yourpassword] with a password of your choice and [yourport] with a number in the range of [28100-28400]:

<pre>
/set relay.network.password [yourpassword]
/relay add weechat [yourport]
/save
</pre>

Once you have entered in all these commands, you don't need your terminal anymore. You can close your ssh window!

<li>Your personal WeeChat server is set up. Now connect to it using a pretty client:</li>

[http://www.glowing-bear.org/ glowing-bear] is a free and open source web-based weechat client. It works well as a desktop client, and on iOS. To connect using glowing-bear, fill in "Connection Settings" with <code>neotame.csclub.uwaterloo.ca</code>, <code>[yourport]</code>, and <code>[yourpassword]</code>. Make sure to use the <code>http</code> version of the website with this guide! <code>https</code> only works if you set up encryption. That's not covered here.

'''Recommended''': [https://play.google.com/store/apps/details?id=com.ubergeek42.WeechatAndroid Weechat Android] is a free and open source android <code>weechat</code> client. It gives notifications when your receive a direct message or your name is mentioned in one of the channels you are in. To connect using Weechat Android, fill in Settings > Connection with <code>neotame.csclub.uwaterloo.ca</code>, <code>[yourport]</code>, and <code>[yourpassword]</code>.

<li>Join the #csc IRC channel</li>

In your weechat client (e.g. glowing-bear or Weechat Android), switch to the 'Libera' tab and type:

<pre>
/server add libera irc.libera.chat/6697 -ssl -autoconnect
/set irc.server.libera.autojoin "#csc"
/save
/connect libera
</pre>

You're now connected to the main IRC network! Connected by an SSL connection, so you're super sneaky as well. Way to go.

Now, to join the CSC channel!

In your client, you'll now have two buffers that you can switch to. One is called "weechat" and the other is "libera".

Switch to the "libera" buffer and type:

> /join #csc

Congratulations you win!

<li>Know some IRC commands</li>

Welcome to the channel! Go ahead and say something, like

<pre>
Good morning ctdalek http://www.total-knowledge.com/~ilya/mips/ugt.html
</pre>

If you want to privately message someone, use

<pre>
/q [nick] [optional message]
</pre>

which will open a new tab with that person. For example <code>/q pj2melan ping pong</code>.

If you want to join another channel, use
<pre>
/join [channel]
</pre>

For example <code>/join #csc</code>.
</ol>
''Note about CSClub server restarts:'' If <code>neotame</code> or any server you're using to run the <code>weechat</code> program on is restarted for any reason (we'll email you if it does), Make sure to run <code>screen -U weechat</code> again to start your server. You won't have to reconfigure <code>weechat</code> (step 2) though.

== Securing Glowing Bear - SSL/TLS Setup ==

With the default setup, when you log in to your <code>weechat</code> relay using a client such as glowing-bear or Weechat Android, ''your password is sent in the clear''. If you believe this to be a bad thing, follow these steps to enable SSL encryption between you and your <code>weechat</code> relay running on <code>neotame</code>.

<ol>
<li>Log in to <code>neotame.csclub.uwaterloo.ca</code> to generate an SSL certificate:

<pre>
$ ssh neotame.csclub.uwaterloo.ca
$ mkdir ~/.weechat/ssl
$ cd ~/.weechat/ssl
$ openssl req -nodes -newkey rsa:4096 -keyout relay.pem -x509 -days 365 -out relay.pem # Fill in the fields as it asks
$ exit
</pre>
</li>

<li>Tell <code>weechat</code> to use the new certificate you generated, and add a new relay with a different password (since your old password was likely compromised):

<p>In your <code>weechat</code> client (glowing-bear, or Weechat Android), run</p>

<pre>
> /set relay.network.password [newpassword]
> /relay sslcertkey
> /relay del weechat
> /relay add ssl.weechat [yourport]
</pre>
</li>

<li>Tell your client to connect to your relay using SSL:

<p>For glowing-bear, refresh and simply check the "Encryption. Check settings for help." checkbox when logging in with your new password.</p>

<p>For Weechat Android, in Settings > Connection, change Connection type to WeeChat SSL and change your Relay password.</p>
</li>

</ol>

Enjoy fully encrypted communication!

You might have warnings about untrusted certificates, but since you made the certificate yourself you can trust yourself and add required security exceptions.

== Quick SSH-based Setup ==

1. Open up an IRC client, i.e. <code>irssi</code>. Launch <code>irssi</code> in a screen session, which you
can return to later.

$ ssh neotame.csclub.uwaterloo.ca
$ screen -U irssi

2. In irssi, connect to the libera network and join our channel.

/server add -auto -net libera -ssl -ssl_verify irc.libera.chat 6697
/save
/connect libera
/join #csc

3. Please set your nickname to your Quest ID so we know who you are.

/nick $YOUR_QUEST_ID
/save

You can register your nickname on the libera network by messaging NickServ.

/msg NickServ REGISTER password email

4. Close your screen session, which you can return to later.

CTRL-A CTRL-D

5. Return to your screen session. You will have remained connected to the channel.

$ ssh neotame.csclub.uwaterloo.ca -t "screen -Urd"

= syscom =

To kick (and optionally ban) a user:

/cs op #<channel>
/mode #<channel> +b <nick_to_ban>
/kick <nick_to_kick>
/mode -o <your_nick>

If the user need not be banned you can skip the second line. If other accounts from the same user/host should be banned, replace <code>nick_to_ban/kick</code> with <code>nick!username@host</code>.

Machine List

2022-07-26T03:53:20Z

R389li: /* guayusa */ Update with NextCloud

Most of our machines are in the E7, F7, G7 and H7 racks (as of Jan. 2022) in the MC 3015 server room. There is an additional rack in the DC 3558 machine room on the third floor. Our office terminals are in the CSC office, in MC 3036/3037.

= Web Server =
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.

== ''caffeine'' ==

Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.

==== Specs ====

* currently a virtual machine hosted on phosphoric-acid
** 12 vCPUs
** 32GB of RAM

==== Services ====

* Club and member web sites with [[Apache]]
* [[MySQL]] databases
* [[PostgreSQL]] databases
* [[ceo]] daemon
* mail was migrated to [[#mail|mail]]

= General-Use Servers =

These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no cryptocurrency mining).

For computationally-intensive jobs (CPU/memory bound) we recommend running on high-fructose-corn-syrup, carbonated-water, sorbitol, mannitol, or corn-syrup, listed in roughly decreasing order of available resources. For low-intensity interactive jobs, such as IRC clients, we recommend running on neotame. If you have a long-running computationally intensive job, it's good to nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.

== ''corn-syrup'' ==

PowerEdge 2950

==== Specs ====

* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)
* 32 GB RAM
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29
* IPMI mac addr 00:24:e8:52:41:2b
* 3 × Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)

==== Notes ====

* Use eth0/Gb0 for the mathstudentorgsnet connection
* has ipmi on corn-syrup-ipmi.csclub.uwaterloo.ca.

==== Services ====

* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)

== ''high-fructose-corn-syrup'' ==

High-fructose-corn-syrup (or hfcs) is a large SuperMicro server. It's been in CSC service since April 2012.

==== Specs ====

* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)
* 192 GB RAM
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]
* 500 GB Seagate Barracuda
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]

== ''carbonated-water'' ==

carbonated-water is a Dell R815 provided by CSCF.

==== Specs ====

* 4x AMD Opteron 6176 processors (2.3 GHz, 12 cores each)
* 128GB RAM

== ''neotame'' ==

neotame is a SuperMicro server funded by MEF. It is the successor to taurine.

We discourage running computationally-intensive jobs on neotame as many users run interactive applications such as IRC clients on it and any significant service degradation will be more likely to affect other users (who will probably notice right away).

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM
* SSH server also listens on ports 21, 22, 53, 80, 81, 443, 8000, 8080 for your convenience.

== ''sorbitol'' ==

sorbitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM

== ''mannitol'' ==

mannitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM

= Office Terminals =

It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.

== ''bit-shifter'' ==

bit-shifter is an office terminal.

==== Specs ====

* Intel(R) Core(TM)2 Quad CPU Q8300
* 4GB RAM
* Nvidia GeForce GT 440
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD
* Jacob Parker's Firewire Card

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''gwem'' ==

gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.

=== Specs ===

* AMD FX-8150 3.6GHz 8-Core CPU
* 16 GB RAM
* AMD Radeon 6870 HD 1GB GPU
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

== ''maltodextrin'' ==
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.
Not operational (no video output) as of July 2022.

==== Specs ====

* Intel Core i3-4130 @ 3.40 GHz
* 8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''natural-flavours'' ==

Natural-flavours is an office terminal; it used to be our mirror.

In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.

==== Specs ====

* Intel Core i7-6700k
* 2x8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* Cup Holder (DVD drive has power, but not connected to mother board)

== ''strombola''==
It is named after Gordon Strombola.

==== Specs ====
* Intel Core2 Quad Q8200 @ 2.33GHz
* 4 GB RAM
* nVidia GeForce 8600 GTS
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

==== Speakers ====
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.

== ''nullsleep'' ==

nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.

==== Specs ====

* Intel® Dual Core Atom™ 330
* 2GB RAM
* NVIDIA® ION™ graphics
* 1x 64GB SanDisk SDSSDP064G SSD
* DVD Burner

==== Speakers ====
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.

==== Services ====
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.
Music is located in /music on the office terminals

= Progcom Only =
The Programme Committee has access to a VM on corn-syrup called 'progcom'. They have sudo rights in this VM so they may install and run their own software inside it. This VM should only be accessible by members of progcom or syscom.

= Syscom Only =

The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.

== ''xylitol'' ==

xylitol is a Dell PowerEdge R815 donated by CSCF. It is primarily a container host for services previously hosted on aspartame and dextrose, including munin, rt, mathnews, auth1, and dns1. It was provisioned with the intent to replace both of those hosts.

==== Specs ====

* Dual AMD Opteron 6176 (2.3 GHz, 48 cores total)
* 128GB RAM
* 500GB volume group on RAID1 SSD (xylitol-mirrored)
* 500ish-GB volume group on RAID10 HDD (xylitol-raidten)

== ''auth1'' ==

Container on [[#xylitol|xylitol]].

==== Services ====

* [[LDAP]] primary
* [[Kerberos]] primary

== ''chat'' ==

Container on [[#xylitol|xylitol]].

==== Services ====

* The Lounge web IRC client (https://chat.csclub.uwaterloo.ca)

== ''phosphoric-acid'' ==

phosphoric-acid is a Dell PowerEdge R815 donated by CSCF and is a clone of xylitol. It may be used to provide redundant cloud services in the future.

==== Specs ====
==== Services ====

* [[#caffeine|caffeine]]
* [[#coffee|coffee]]

== ''coffee'' ==

Virtual machine running on phosphoric-acid.

==== Services ====

* [[Database#MySQL|MySQL]]
* [[Database#Postgres|Postgres]]

== ''cobalamin'' ==

Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.

==== Specs ====

* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)
* 16GB RAM
* Broadcom NetworkXtreme II
* 2x73GB Hard Drives, hardware RAID1
** Soon to be 2x1TB in MegaRAID1
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration

==== Services ====

* Containers: [[#auth2|auth2]]

==== Notes ====

* The network card requires non-free drivers. Be sure to use an installation disc with non-free.

* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:

** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248

* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.

== ''auth2'' ==

Container on [[#cobalamin|cobalamin]].

==== Services ====

* [[LDAP]] secondary
* [[Kerberos]] secondary

MAC Address: c2:c0:00:00:00:a2

== ''mail'' ==

mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#biloba|biloba]]

==== Services ====

* [[Mail]] services
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])
* [[Webmail]]
* [[ceo]] daemon

== ''sodium-benzoate'' ==

Sodium-benzoate is our previous mirror server, funded by MEF.

It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.

==== Specs ====

* Intel Xeon Quad Core E5405 @ 2.00 GHz
* 16GB RAM
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)

Space disks are currently in the office underneath maltodextrin.

== ''potassium-benzoate'' ==

potassium-benzoate is our mirror server, funded by MEF.

==== Specs ====

* 36 drive Supermicro chassis (SSG-6048R-E1CR36L)
* 1 x Intel Xeon E5-2630 (8 cores, 2.40 GHz)
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM
* 2 x 1 TB Samsung Evo 850 SSD drives
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)
* 10 Gbps SFP+ card (loaned from CSCF)
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)

==== Network Connections ====

potassium-benzoate has two connections to our network:

* 1 Gbps to our switch (used for management)
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)

Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.

==== Services ====

* [[Mirror]]
* [[Talks]] mirror
* [[Debian_Repository|CSClub packages repository]]

== ''munin'' ==

munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#xylitol|xylitol]]

==== Services ====

* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon

== ''yerba-mate'' ==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 Hz quad core Intel Xeon 5160
* 32GB RAM
* 2x75GB 15k drives (RAID 1)

==== Services ====

* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)
* mattermost (under development)
* shibboleth (under development)

Also used for experimenting new CSC services.

= Cloud =

These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.

== ''chamomile'' ==

A Dell PowerEdge R815 provided by CSCF.

==== Specs ====

* 4x 2.20GHz 12-core processors
* 128GB RAM
* 10GbE connection to core router

==== Services ====

* OpenStack primary controller services for csclub.cloud

== ''riboflavin'' ==

A Dell PowerEdge R515 provided by CSCF.

==== Specs ====

* 2x 2.6 GHz 8-core processors
* 64GB RAM
* 10GbE connection to core router
* 2x 500GB internal SSD
* 12x Seagate 4TB SSHD

==== Services ====

* OpenStack block and object storage for csclub.cloud

== ''guayusa'' ==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 GHz quad core Intel Xeon 5160
* 32GB RAM
* 2TB PCI-Express Flash SSD
* 2x75GB 15k drives (RAID 1)

==== Services ====

Currently being used to set up NextCloud.

Was used to experiment the following then-new CSC services:

* logstash (testing of logstash)
* load-balancer-01
* cifs (for booting ginkgo from CD)
* caffeine-01 (testing of multi-node caffeine)
* block1.cloud
* object1.cloud

== ''ginkgo'' ==

Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.

==== Specs ====

* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]
* 256GB RAM
* 2 x 1.2 TB SSD (400GB of each for RAID 1)
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)

==== Services ====

* OpenStack Compute machine

No longer in use:

* controller1.cloud
* db1.cloud
* router1.cloud (NAT for cloud tenant network)
* network1.cloud

== ''biloba'' ==

Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558.

==== Specs ====

* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]
* 384GB RAM
* 12 3.5" Hot Swap Drive Bays
** 2 x 480 GB SSD
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)

==== Services ====

* OpenStack Compute machine

No longer in use:

* caffeine
* mail
* mattermost

= Storage =

== ''fs00'' ==

fs00 is a NetApp FAS3040 series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

== ''fs01'' ==

fs01 is a NetApp FAS3040 series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

= Other =

== ''goto80'' ==

This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located in the office on the top shelf above strombola.

==== Specs ====

* 500 MHz Feroceon (ARM926ej-s compatible) processor
* ARMv5TEJ architecture

Use -march=armv5te -mtune=arm926ej-s options to GCC.

For information on the TS-7800's hardware see here:
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800

== ''binaerpilot'' ==

This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''anamanaguchi'' ==

This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''digital cutter'' ==

See [[Digital Cutter|here]].

== ''mathnews'' ==

[[#xylitol|xylitol]] hosts a systemd-nspawn container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.

= Decommissioned =

== ''aspartame'' ==

aspartame was a taurine clone donated by CSCF. It was once our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. Decomissioned in March 2021 after refusing to boot following a power outage.

== ''psilodump'' ==

psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, hosted disk shelves exported as iSCSI block devices.

psilodump was plugged into aspartame. It's still installed but inaccessible.

== ''phlogiston'' ==

phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, hosted disk shelves exported as iSCSI block devices.

phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 10GB RAM

==== Notes from before decommissioning ====

* The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.

== ''glomag'' ==

Glomag hosted [[#caffeine|caffeine]]. Decommissioned April 6, 2018.

==== Specs ====

* Intel Xeon X3450 @ 2.67 GHz
* 6 GB RAM
* vg0: 465 GB software RAID1 (contains root partition):
** 750 GB Seagate Barracuda SATA hard drive
** 500 GB Western-Digital Caviar Blue SATA hard drive
* vg1: 596 GB software RAID1 (contains caffeine):
** 2 × 640 GB Western-Digital Caviar Blue SATA hard drive

==== Services ====

* Before its decommissioning, glomag hosted [[#caffeine|caffeine]], [[#mail|mail]], and [[#munin|munin]] as [[Virtualization#Linux_Container|Linux containers]]

== ''Lisp machine'' ==

A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.

http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.

==== Specs ====

Currently inoperable due to (at least) a missing console cable.

== ''ginseng'' ==

Ginseng used to be our fileserver, before aspartame and the netapp took over.

==== Specs ====

* Intel Pentium Dual Core E2180
* 8GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]
* 4 × 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].
[[Category:Hardware]]

== ''calum'' ==

Calum used to be our main server and was named after Calum T Dalek. Purchased new by the club in 1994.

==== Specs ====

* SPARCserver 10 (headless SPARCstation 10)

== ''paza'' ==

An iMac G3 that was used as a dumb terminal.

==== Specs ====

* 233Mhz PowerPC 740/750
* 96 MB RAM

== ''romana'' ==

Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.

Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.

==== Specs ====

* 2 PowerPC based processors
* Stylish Blinken processor-load lights

== ''sodium-citrate'' ==

Sodium-citrate was an SGI O2 machine.

In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.

==== Specs ====
* SGI O2 MIPS processor
* 423 MB (?) RAM
* 2 × 2 GB hard drive

== ''acesulfame-potassium'' ==

An old office terminal.

==== Specs ====
* Intel Pentium 4 2.67GHz
* 1GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard
* ATI Radeon 7000

== ''skynet'' ==

skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.

==== Specs ====

* 15 full CPU/memory boards
** 2x UltraSPARC II 464MHz / 8MB Cache Processors
** ??? RAM?
* 1 I/O board (type=???)
** ???x disks?
* 1 CD-ROM drive

* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]
* [http://www.e6500.com/ e6500]

== ''freebsd'' ==

FreeBSD was a virtual machine with FreeBSD installed.

==== Services ====

* Newer software

== ''rainbowdragoneyes'' ==

Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.

==== Specs ====

* 800MHz MIPS Loongson 2f CPU

== ''denardo'' ==

Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.

==== Specs ====

* Sun Fire V210
* TI UltraSparc IIIi (Jalapeño)
* 2 GB RAM
* 160 GB RAID array
* ALOM on denardo-alom.csclub can be used to power machine on/off

== ''artificial-flavours'' ==

Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).

==== Specs ====

* Intel Celeron 3.2GHz
* 2GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard
* Western-Digital 80 GB ATA hard drive

== ''potassium-citrate'' ==

Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.

It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).

==== Specs ====
* Alphaserver CS20 (2 833MHz EV68al CPUs)
* 512MB RAM
* 36 GB Seagate SCSI hard drive

== ''potassium-nitrate'' ==

This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).

The name is from saltpetre, because sparks.

==== Specs ====

* 24 CPUs
* 90GB main memory
* 400GB scratch disk local storage in /scratch-potassium-nitrate

There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.

See also [[Sun 2900]].

== ''taurine'' ==

'''Note: On August 21, 2019, just before 2:30PM EDT, we were informed that taurine caught fire'''. As a result, taurine has been decommissioned as of Fall 2019.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 8GB RAM
* 136 GB LVM volume group

==== Services ====

* Virtual machines
* BitlBee IRC instant messaging gateway (localhost only)
* [[ident]] server to maintain high connection cap to freenode
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

== ''dextrose'' ==

dextrose was a [[#taurine|taurine]] clone donated by CSCF and was decommissioned in Fall 2019 after being replaced with a more powerful server.

== ''sucrose'' ==

sucrose was a [[#taurine|taurine]] clone donated by CSCF. It was decommissioned in Fall 2019 following multiple hardware failures.

= UPS =

All of the machines in the MC 3015 machine room are connected to one of our UPSs.

All of our UPSs can be monitored via CSCF:

* MC3015-UPS-B2
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)

We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].

TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.

Past Executive

2022-07-02T01:09:11Z

R389li: /* Spring */ Add s97arora to FR

Data sources for this exec list have been: CSC records, MathNEWS.
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.

= Definitions =
#define PR President
#define VP Vice-president
#define TR Treasurer
#define SE Secretary
#define AV Assistant Vice-president
#define SA Sysadmin
#define OF Office Manager
#define LI Librarian
#define FL Flasher
#define DE Deity
#define WW Webmaster
#define SE-TR Secretary-Treasurer (Position was split)
#define FR Fridge Regent (IMAPd)

<div style="float:right;margin-left: 1em;">__TOC__</div>

=Founding 1967=

Sponsor - J. Peter Sprung
PR: K. Rugger
VP: R. Jaques
SE-TR: G. Sutherland

Founding Members:
B. Kindree
R. Melen
V. Neglia
R. Charney
R. Truman
Glenn Berry
D. Meek

===Fall===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

Committee members: R. Stallwerthy, C. de Vries

=1968=

===Winter===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

===Fall===

SE-TR: Glenn Berry

=1969=

Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.

=1970=

===A note on ACM affiliation===

The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970

===Fall===

PR: Rick Beach
VP: Lee Santon
TR: Randy Melen
SE: Vic Neglia

=1971=

===Spring===

VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.

===Fall===

VP: James W. Welch

=1972=

It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.

===Winter===

PR: Mike Campbell
VP: Edgar Hew
SE-TR: Doug Lacy

There is also stuff from James W. Welch without a position.

===Fall===

PR: Ian McIntosh

=1973=

Faculty Sponsor: Morven Gentleman

===Winter===

SE: Douglas E. Lacy

===Spring===

PR: Jim Parry

===Fall===

PR: Jim Parry
VP: Ray Walden
TR: Slavko Stemberger
SE: Mario Festival

=1974=

===Fall===

PR: Russell Crook

=1975-1977=

Faculty Sponsor: Morven Gentleman??

Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.
Sylvia Eng: 1975/6 as some position.
Dave Buckingham: a VP at some point
Allison Nolan: 1977 time
Peter Stevens: 1977
Russel Crook???

Dennis Ritchie came. So did Jeffrey D. Ullman.

=1976=

===Fall===

Progcom: Peter Stevens

=1977=

===Winter===

Progcom: Allison Nowlan

===Spring===

PR: Peter Stevens
Progcom: Allison Nowlan

===Fall===

PR: Andrzej Jan Taramina
Progcom: Allison Nowlan

=1978=

===Winter===

PR: Peter Stevens

===Spring===

TR: K.G. Dykes
SE: Kandry Mutheardy

Brian Kernighan gave a talk this term. So did Ken Thompson.

===Fall===

=1979=

===Spring===

PR: Robert Biddle

=1987=

===Fall===

PR: Jim Boritz
VP: Ted Timar
TR: Gayla Boritz
SE: Edwin Hoogerbeets

=1988=

Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Rob*n Stewart did as an assignment in 1991-1992 for some class at UBC
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was our first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.

===Winter===
PR: Jim Boritz
(Source: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Fall===

SA: Wade Richards

=1989=

===Winter===

https://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg

Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ???

PR: Barry W. Smith
VP: Angela Chambers
TR:
SE: Sean Goggin
SA: Wade Richards / Ross Ridge

(President Kevin Smith confirmed: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Spring===

PR: Jim Thornton
VP: Gayla Boritz
TR: David Fenger
SE: Kivi Shapiro
SA: Reid Pinchback

Assistance to sysadmin: Jim Boritz.

===Fall===

PR: James Boritz
VP: Edmond Bourne
SA: Ross Ridge

=1990=

===Winter===

TR: Jim Thornton

===Spring===

TR: Karen Smith
SE: Rob*n Stewart
*Robyn/Robin signed her emails as Rob*n and requested to be listed as such on this page.

===Fall===
PR: Wade Richards
TR: Carolyn Duke
SE: Rob*n Stewart - attended mathsoc meeting on our behalf.
Kivi Shapiro - attended mathsoc meeting on our behalf.
- Censured by mathsoc for his actions during the election.
Shannon Mann - attended mathsoc meeting on our behalf.

=1991=

===Winter===
VP: Edmond Bourne
TR: Carolyn Duke
SE: Rob*n Stewart
Shannon Mann - attended mathsoc meeting on our behalf.

John McCarthy came this term.

===Spring===
TR: Rob Leitman
Jason Knell - attended mathsoc meeting on our and PMC's behalf.

===Fall===
TR: Mike Van Lingen
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.

=1992=

===Winter===
TR: Norm Ross
SE: Brent Williams

===Spring===
PR: Dale Wick
TR: Stephen A. Mills

===Fall===
TR: Mark Plumb

=1993=

===Winter===
TR: Rob Leitman
VP: Tim Prime
OF: Dave Ebbo
LI: Norm Ross

Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray

===Spring===
TR: Mark Tompsett

===Fall===

PR: Ian Goldberg

=1994=

===Winter===
PR: Ian Goldberg
TR: Mark Tompsett
SE: Tom Rathbourne
LI: Michael Van Biesbrouck
Norm Ross assisted with finances.

===Spring===
PR: Dale Wick (?)
TR: Steve Mills
SA: Ian Goldberg (?)
Norm Ross assisted with finances.

===Fall===
PR: Ross Ridge
VP: Tom Rathbourne (?)
TR: Rob Leitman
SA: Zygo Blaxell
LI: Michael Van Biesbrouck

=1995=

===Winter===
TR: Sharlene Schmeichel
Amy Brown and Rob Ridge purchased books.

===Spring===
TR: Steve Mills

===Fall===
PR: Amy Brown (arbrown)
VP: Christina Norman (cbnorman)
TR: Steven Mills (samills)
SE: Allyson Graham (akgraham)
SA: Gavin Peters

=1996=

===Winter===
PR: Nikita Borisov (nborisov)
VP: Joseph Deu Ngoc (dtdeungo)
TR: Stephen Mills (samills)
SE: Sharlene Schmeichel (saschmei)
SA: Dave Brown (dagbrown)
OF: Somsack Tsai (stsai)
LI: Devin Carless (dccarles)
FL: Allyson Graham (akgraham)
DE: Ian Goldberg (iagoldbe)

===Spring===
PR: Blake Winton (bwinton)
VP: Nick Harvey (njaharve)
TR: Nikita Borisov (nborisov)
SE: Viet-Trung Luu (vluu)
SA: Drew Hamilton (awhamilt)
OF: Jillian Arnott (jarnott)
LI: Ross Ridge (rridge)
FL: Devin Carless (dccarles)

=== Fall ===
PR: Shannon Mann (sjbmann)
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)
TR: Michal Van Biesbrouck (mlvanbie)
SE: Nikita Borisov (nborisov)
SA: Chris Rovers
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation
LI: Aliz Csenki (acsenki)
FL: Aaron Chmielowiec (archmiel)
DE: Skuld (no uwuserid yet...)

=1997=

===Winter===
PR: Dima Brodsky
VP: Nikita Borisov (nborisov)
TR: Stephen Mills (samills)
SE: Evan Jones (ejones)
SA: Alex Brodsky
OF: Chris Doherty
LI: Matt Corks
FL: Paul Prescod

=== Fall ===
PR: Chris Rovers (cdrovers)
VP: Michael van Biesbrouck (mlvanbie)
TR: Somsack Tsai (stsai)
SE: Matt Corks (mvcorks)
SA: Lennart Sorensen (lsorense)
LI: Chmielowiec (archmiel)
OF: Devin Carless (dccarles)
FL: Aaron Chmielowiec (archmiel)

= 1998 =

=== Winter ===
PR: Suresh Naidu
VP: Viet-Trung Luu
TR: Tim Coleman
SE: Dax Hutcheon
Librarian: Dax Hutcheon
Flasher: Dax Hutcheon
Webmaster: Dax Hutcheon
SA: Robin Powell
OF: Aaron Chmielowiec

=== Spring ===

Position Name You might call them...
President roconnor Russell O'Connor
Vice-president trwcolem Tim Coleman
Treasurer knzarysk Karl Zaryski
Secretary (bwinton) (Blake Winton)
Sysadmin wbiggs Billy Biggs
Librarian snaidu Suresh Naidu
Flasher pechrysl Paul Chrysler
Office Manager dccarles Devin Carless
WWWW trwcolem Tim Coleman

=== Fall ===

President Joe Deu Ngoc jtdeungo
Vice-President Wai Ling Yee wlyee
Treasurer Fjord j2lynn
Secretary Matt Corks mvcorks
Sysadmin Andrew Hamilton awhamilt

World Wide Web Wench Dax Hutcheon ddhutche
Office Manager Richard Bell rlbell
Librarian Damian Gryski dgryski
Flasher Paul Chrysler pechrysl
Official Deity Ian Goldberg iagoldbe
Official Chairbeing Calum T. Dalek calum

=1999=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:

=2000=

=== Winter ===
PR: Will Chartrand (wgchartr)
VP: Gavin Duggan (geduggan)
TR:
SE:
SA: Lennart Sorensen (lsorense)
OF:

=== Fall ===
PR: geduggan
VP:
TR:
SE:
SA: bioster
OF:

=2001=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=== Spring ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=2002=

https://web.archive.org/web/20130715012002/http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php

=== Winter ===
PR: Billy Biggs
VP: Stefanus Du Toit
TR: Melissa Basinger
SE: James Perry
SA: Barry Genova
Librarian: Ryan Golbeck
Webmaster: Jonathan Beverley
Office Manager: Sayan Li

=== Spring ===
PR: Alex Pop
VP: Melissa Basinger
TR: Siyan Li
SE: James A Morrison
SA: Jonathan Beverley
Webmaster: Stefanus Du Toit

=== Fall ===
PR: James A. Morrison
VP: Stefanus Du Toit
TR: James Perry
SE: Michael Biggs
SA: Ryan Golbeck
Librarian: Mark Sherry, Cassandra Schopf
Webmaster: Stefanus Du Toit

=2003=

=== Winter ===
PR: Kannan Vijayan (kvijayan)
VP: Meg Darragh (m2darrag)
TR: James Perry (jeperry)
SE: Wojciech Kosnik (wkosnik)
SA: Stefanus Du Toit (sjdutoit)
LI: Simon Law (sfllaw)
WM: Julie Lavoie (jlavoie)

===Fall===
PR: Stefanus Du Toit (sjdutoit)
VP: Meg Darragh (m2darrag)
TR: Tor Myklebust (tmyklebu)
SE: James Perry (jeperry)
SA: Simon Law (sfllaw)
OF:

=2004=

===Winter===
PR: Simon Law (sfllaw)
VP: fspacek
TR: ljain
SE: Julie Lavoie (jlavoie)
SA: Tor Myklebust(tmyklebu)
OF:

===Spring===
PR: dnmorton ?
VP: Tim Loach (tloach)
TR: Michael Biggs (mbiggs)
SE: Lesley Northam (lanortha)
SA:
OF:

===Fall ===
PR: jeperry
VP: mtsay
TR: Mark Sherry (mdsherry)
SE: Tor Myklebust (tmyklebu)
SA: jlavoie
OF:

=2005=

===Winter===

PR: mtsay
VP: Lesley Northam (lanortha)
TR: Holden Karau (hkarau)
SE: domorton
SA: Tor Myklebust (tmyklebu)
OF:

===Spring===

PR: Mark Sherry (mdsherry)
VP: Martin Kess (mdkess)
TR: Ali Piccioni (apiccion)
SE: Michael Biggs (mbiggs)
SA: Tor Myklebust (tmyklebu)
OF:

===Fall===

PR: Tim Loach (tloach)
VP: Lesley Northam (lanortha)
TR: Caelyn McAulay (cmcaulay)
SE: The Professor
SA: Holden Karau (hkarau)
OF:

=2006=

===Winter===

PR: Tor Myklebust (tmyklebu)
VP: Michael Druker (mdruker)
TR: Caelyn McAulay (cmcaulay)
SE: Mark Sherry (mdsherry)
SA: William O'Connor (woconnor)
OF:

===Spring===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: David Tenty (daltenty)
SE: Chris Evensen (cevensen)
SA: Holden Karau (hkarau)
OF:

===Fall===

PR: Martin Kess (mdkess)
VP: Mark Sherry (mdsherry)
TR: Sylvan L. Mably (slmably)
SE: Caelyn McAulay (cmcaulay)
SA: William O'Connor (woconnor)

=2007=

===Winter===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: Caelyn McAulay (cmcaulay)
SE: David Tenty (daltenty)
SA: Holden Karau (hkarau)
Webmaster: jnopporn
OF:

===Spring===
PR: Gaelan D'costa (gdcosta)
VP: Kyle Larose (kmlarose)
TR: Kyle Spaans (kspaans)
SE: Erik Louie (elouie)
SA: Michael Spang (mspang)
Librarian: David Tenty (daltenty)
OF:

===Fall ===
PR: Holden Karau (hkarau)
VP: Alex McCausland (amccausl)
TR: Dominik Chlobowski (dchlobow)
SE: Sean Cumming (sgcummin)
SA: David Tenty (daltenty)
OF:
WW: dtbartle / jnopporn

=2008=

===Winter ===
PR: Sean Cumming (sgcummin)
VP: Matt Lawrence (m3lawren)
TR: Mateusz Tarkowski (mtarkows)
SE: Edgar Bering (ebering)
SA: Jordan Saunders (jmsaunde)
OF:

===Summer ===
PR: Brennan Taylor (b4taylor)
VP: Qifan Xi (qxi)
TR: Matt Lawrence (m3lawren)
SE: Nick Guenther (nguenthe)
SA:
OF:

===Fall ===
PR: Matthew Lawrence (m3lawren)
VP: Edgar Bering (ebering)
TR: Michael Gregson (mgregson)
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski
SA: Kyle Spaans (kspaans)
OF:

=2009=

===Winter===
PR: Michael Gregson (mgregson)
VP: Edgar Bering (ebering)
TR: Brennan Taylor (b4taylor)
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins)
SA: Jacob Parker (j3parker)
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)

===Spring ===
PR: Michael Spang (mspang)
VP: Jacob Parker (j3parker)
TR: Sapphyre Gervais (sagervai)
SE: Matthew McPherrin (mimcpher)
SA: Anthony Brennan (a2brenna)
OF:

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Michael Spang (mspang)
SE: Brennan Taylor (b4taylor)
SA: Michael Ellis (m2ellis)
OF: Rebecca Putinski (rjputins)

=2010=

===Winter===
PR: Kyle Spaans (kspaans)
VP: Edgar Bering (ebering)
TR: Sapphyre Gervais (sagervai)
SE: Ajnu Jacob (ajacob)
SA: Matthew Thiffault (mthiffau)
OF: Jacob Parker (j3parker)

Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr

===Spring===
PR: Jeff Cameron (j3camero)
VP: Brennan Taylor (b4taylor)
TR: Vardhan Mudunuru (vmudunur)
SE: Matthew Lawrence (m3lawren)
SA: Michael Ellis (m2ellis)
OF: Edgar Bering (ebering)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Rebecca Putinski (rjputins)
SE: Kyle Spaans (kspaans)
SA: Jeremy Roman (jbroman)
OF: Amir Sayed Khader (askhader)

=2011=

===Winter===
PR: Edgar Bering (ebering)
VP: Jennifer "Emily" Wong (jy2wong)
TR: Kyle Spaans (kspaans)
SE: Elana "Alana" Hashman (ehashman)
SA: Peter "Bofh" Barfuss (pbarfuss)
OF: Marc Burns (Marc Burns)

===Spring===
PR: Matthew Thiffault (mthiffau)
VP: Matthew McPherrin (mimcpher)
TR: Kyle Spaans (kspaans)
SE: Kwame Andrew Ansong (kansong)
SA: Jeremy Brandon Roman (jbroman)
OF: Jennifer "Emily" Wong (jy2wong)

===Fall===
PR: Marc Burns (m4burns)
VP: Katharine Hyatt (kshyatt)
TR: Jacob Parker (j3parker)
SE: Elana Hashman (ehashman)
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)
OF: Kyle Spaans (kspaans)
LIB: Edgar Bering (ebering)

=2012=

===Winter===
PR: Marc Burns (m4burns)
VP: Elana Hashman (ehashman)
TR: Jacob Parker (j3parker)
SE: Matthew McPherrin (mimcpher)
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: Jennifer "Emily" Wong (jy2wong)

===Summer===
PR: Anthony Brennan (a2brenna)
VP: Luqman Aden (laden)
TR: Matthew McPherrin (mimcpher)
SE: Elana Hashman (ehashman)
SA: Sarah Harvey (sharvey)
OF: Marc Burns (m4burns)
LIB: John Ladan (jladan)

===Fall===
PR: Marc Burns (m4burns)
VP: Salem Talha (satalha)
TR: Jennifer Wong (jy2wong)
SE: Elana Hashman (ehashman), resigned
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: John Ladan (jladan)

=2013=

===Winter===
PR: Anthony Brennan (a2brenna)
VP: Marc Burns (m4burns)
TR: John Mumford (jsmumfor)
SE: Matt Olechnowicz (mgolechn)
SA: Sarah Harvey (sharvey)
OF: Bryan Coutts (b2coutts)
LIB: Matthew McPherrin (mimcpher)

===Spring===
PR: Shane Robert Creighton-Young (srcreigh)
VP: Visishta Vijayanand (vvijayan)
TR: Dominik Chlobowski (dchlobow)
SE: Youn Jin Kim (yj7kim)
SA: Anthony Brennan (a2brenna)
OF: Marc Burns (m4burns)
IMAPD: Dominik Chlobowski (dchlobow)

===Fall===
PR: Elana Hashman (ehashman)
VP: Marc Burns (m4burns)
TR: Dominik Chlobowski (dchlobow)
SE: Edward Lee (e45lee)
SA: Jeremy Roman (jbroman)
OF: Alexis Hunt (aechunt)

= 2014 =

=== Winter ===
PR: Bryan Coutts (b2coutts)
VP: Visishta Vijayanand (vvijayan)
TR: Marc Burns (m4burns)
SE: Mark Farrell (m4farrel)
SA: Murphy Berzish (mtrberzi)
OF: Nicholas Black (nablack)

=== Spring ===
PR: Youn Jin Kim (yj7kim)
VP: Luke Franceschini (l3france)
TR: Joseph Chouinard (jchouina)
SE: Ifaz Kabir (ikabir)
SA: Murphy Berzish (mtrberzi)
OF: Matthew Thiffault (mthiffau)

=== Fall ===
PR: Youn Jin Kim (yj7kim)
VP: Theodor Belaire (tbelaire)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Shane Robert Creighton-Young (srcreigh)
SA: Alexis Hunt (aechunt)
OF: Mark Farrell (m4farrel)
LIB: Gianni Leonardo Gambetti (glgambet)

= 2015 =

=== Winter ===
PR: Gianni Leonardo Gambetti (glgambet)
VP: Luke Franceschini (l3france)
TR: Edward Lee (e45lee)
SE: Patrick James Melanson (pj2melan)
SA: Murphy Berzish (mtrberzi)
OF: Shikhar Singh (s285sing)
LIB: Aishwarya Gupta (a72gupta)

=== Spring ===
PR: Luqman Aden (laden)
VP: Patrick Melanson (pj2melan)
TR: Jonathan Bailey (jj2baile)
SE: Keri Warr (kpwarr)
SA: Nik Black (nablack)
OF: Ilia Chtcherbakov (ischtche)
LIB: Yomna Nasser (ynasser)

=== Fall ===
PR: Simone Hu (ss2hu)
VP: Theo Belaire (tbelaire)
TR: Jordan Taylore Upiter (jtupiter)
SE: Daniel Marin (dmarin)
SA: Jordan Xavier Pryde (jxpryde)
OF: Ilia Chtcherbakov (ischtche)

= 2016 =

=== Winter ===
PR: Patrick Melanson (pj2melan)
VP: Patrick Melanson (pj2melan)
Acting VP, progcom chair: Theo Belaire (tbelaire)
TR: Luqman Aden (laden)
SE: Naomi Koo (m3koo)
SA: Zachary Seguin (ztseguin)
OF: Reila Zheng (wy2zheng)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

=== Spring ===
PR: Luqman Aden (laden)
VP: Melissa Angelica Mary Tedesco (matedesc)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Aditya Shivam Kothari (askothar)
SA: Jordan Xavier Pryde (jxpryde)
OF: Zachary Seguin (ztseguin)
LI: Charlie Wang (s455wang)
FR: Marc Mailhot (mnmailho)

=== Fall ===
PR: Charlie Wang (s455wang)
VP: Bryan Coutts (b2coutts)
TR: Laura Song (lhsong)
SE: Uday Barar (ubarar)
SA: Zachary Seguin (ztseguin)
OF: Jamie Sinn (j2sinn)
LI: Felix Bauckholt (fbauckho)
FR: Ilia Chtcherbakov (ischtche)

= 2017 =

=== Winter ===
PR: Wilson Cheang (wyschean)
VP: Tristan Hume (tghume)
TR: Jordan Pryde (jxpryde)
SE: Amir Fata (aafata)
SA: Zachary Seguin (ztseguin)
OF: Felix Bauckholt (fbaukcho)
LI: Connor Murphy (cfmurph)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Felix Bauckholt (fbauckho)
VP: Zichuan Wei (z34wei)
TR: Laura Song (lhsong)
SE: Bo Mo (bzmo)
SA: Zachary Seguin (ztseguin)
OF: Uday Barar (ubarar)
LI: Patrick Melanson (pj2melan)
FR: Uday Barar (ubarar)

=== Fall ===

PR: Melissa Tedesco (matedesc)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
SE: Marc Mailhot (mnmailho)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

= 2018 =

=== Winter ===

PR: Patrick Melanson (pj2melan)
VP: Charlie Wang (s455wang)
TR: Ashley Dewiputri Pranajaya (adpranaj)
SE: Arshia Mufti (a2mufti)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Zichuan Wei (z34wei)
FR: Uday Barar (ubarar)

=== Spring ===

PR: Melissa Tedesco (matedesc)
VP: Dhruv Jauhar (djauhar)
TR: Tristan Hume (tghume)
AV: Marc Mailhot (mnmailho)
SA: Jennifer Zhou (c7zou)
OF: Aditya Thakral (a3thakra)
LI: Archer Zhang (z577zhan)
FR: Marc Mailhot (mnmailho)

=== Fall ===

PR: Zichuan Wei (z34wei)
VP: Uday Barar (ubarar)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Jennifer Zhou (c7zou)
OF: Alexander Zvorygin (azvorygi)
LI: Neil Parikh (n3parikh)
FR:

= 2019 =

=== Winter ===

PR: Marc Mailhot (mnmailho)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
AV: Aditya Thakral (a3thakra)
SA: Charlie Wang (s455wang)
OF: Archer Zhang (z577zhan)
LI: Rishabh Minocha (rkminoch)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Uday Barar (ubarar)
VP: Rajat Malhotra (r24malho)
TR: Raghav Sethi (r5sethi)
AV: Bo Mo (bzmo)
SA: Charlie Wang (s455wang)
OF: Hannah Wong (sm7wong)
LI: Nolan Munce (nmmunce)

=== Fall ===

PR: Dhruv Jauhar (djauhar)
VP: Aditya Thakral (a3thakra)
TR: Rishabh Minocha (rkminoch)
AV: Tammy Khalaf (tekhalaf)
SA: Murphy Berzish (mtrberzi)
OF: Zihan Zhang (z577zhan)
LI: Raghav Sethi (r5sethi)

= 2020 =

=== Winter ===
The office was closed midway through this term due to the COVID-19 pandemic.
The pandemic that threw the University and rest of the world into disarray
drove all CSC activity virtual. Though everyone thought the pandemic would
quickly be over, the Alpha, then Delta, then Omicron variants resulted in
the majority of classes being held online until February 2022. As a result,
the office would stay closed for a full 5 terms, and only reopen in W2022.

PR: Richard Shi (r27shi)
VP: Anastassia Gaikovaia (agaikova)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Amin Bandali (abandali)
OF: Alexander Zvorygin (azvorygi)
LI: Anastassia Gaikovaia (agaikova)
FR: Richard Shi (r27shi)

=== Spring ===

PR: Neil Parikh (n3parikh)
VP: Anastassia Gaikovaia (agaikova)
SA: Amin Bandali (abandali)

=== Fall ===

PR: Mokai Xu (m92xu)
VP: Anastassia Gaikovaia (agaikova) (stepped down as of 2020-11-30)
TR: Neil Parikh (n3parikh)
AV: Edwin Yang (e37yang)
SA: Murphy Berzish (mtrberzi)

= 2021 =

=== Winter ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Nakul Vijhani (nvijhani)
SA: Max Erenberg (merenber)

=== Spring ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Ravindu Angammana (rbangamm)
SA: Max Erenberg (merenber)

=== Fall ===

PR: Dora Su (d43su)
VP: Jason Sang (jzsang)
TR: Yanni Wang (y3859wan)
AV: Anjing Li (a348li)
SA: Max Erenberg (merenber)
Advising: Neil Parikh (n3parikh)

= 2022 =

=== Winter ===

PR: Juthika Hoque (j3hoque)
VP: Eric Huang (e48huang)
TR: Eden Chan (e223chan)
AV: Dina Orucevic (dmorucev)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Neil Parikh (n3parikh)

=== Spring ===

PR: Eden Chan (e223chan)
VP: Bonnie Peng (b38peng)
TR: Sat Arora (s97arora)
AV: Haley Song (h79song)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Sat Arora (s97arora)
LI: Santiago Montemayor (smontema) (appointed 2022-06-02)
FR: Sat Arora (s97arora) (appointed 2022-06-23)

Printing

2022-06-10T01:09:33Z

R389li: Undo revision 4819 by R389li (talk)

= Setting up printers =

We support the MathSoc printer on our office terminals. Users may also wish to print to uPrint via their browsers.

== MathSoc Printer ==

The new MathSoc Printer is a Brother MFC-L8900CDW. Its hostname is lp-mc3038.mathsoc.uwaterloo.ca and its IP is 172.19.4.99/28, the CSC manages the 172.19.4.96/28 subnet/VLAN for printers and other similar devices. The IP address is assigned by our DHCP server and the port is assigned to the correct VLAN for this subnet. If MathSoc upgrades their printer, they will have to contact us to reconfigure the port/DHCP.

The CSC's office terminals' CUPS servers have these printers configured to use the "Brother MFC9840CDW Foomatic/Postscript" driver. It seems to work fine.

= Setting up CUPS, the printing subsystem =
# Install <tt>cups</tt>.
# Go to <tt>http://localhost:631/</tt>. Go to 'Add Printer'. You may need to supply the root username/password.
# Click 'Internet Printing Protocol (ipp)'. CSC doesn't have any local printers, chances are all printers are connected via LAN. If it is LAN, then it is ipp.
# Enter connection, name, and description of the printer.

If there is a machine with printing already properly set up, you may copy the file /etc/cups/printers.conf to the corresponding location on machines that aren't set up. Ensure that you stop CUPS (sudo service cups stop) on the fresh machine before copying over printers.conf (and don't forget to start it again afterward).

Printing

2022-06-09T22:41:25Z

R389li: Update MathSoc printer IP

= Setting up printers =

We support the MathSoc printer on our office terminals. Users may also wish to print to uPrint via their browsers.

== MathSoc Printer ==

The new MathSoc Printer is a Brother MFC-L8900CDW. Its hostname is lp-mc3038.mathsoc.uwaterloo.ca and its IP is 172.14.4.99/28, the CSC manages the 172.19.4.96/28 subnet/VLAN for printers and other similar devices. The IP address is assigned by our DHCP server and the port is assigned to the correct VLAN for this subnet. If MathSoc upgrades their printer, they will have to contact us to reconfigure the port/DHCP.

The CSC's office terminals' CUPS servers have these printers configured to use the "Brother MFC9840CDW Foomatic/Postscript" driver. It seems to work fine.

= Setting up CUPS, the printing subsystem =
# Install <tt>cups</tt>.
# Go to <tt>http://localhost:631/</tt>. Go to 'Add Printer'. You may need to supply the root username/password.
# Click 'Internet Printing Protocol (ipp)'. CSC doesn't have any local printers, chances are all printers are connected via LAN. If it is LAN, then it is ipp.
# Enter connection, name, and description of the printer.

If there is a machine with printing already properly set up, you may copy the file /etc/cups/printers.conf to the corresponding location on machines that aren't set up. Ensure that you stop CUPS (sudo service cups stop) on the fresh machine before copying over printers.conf (and don't forget to start it again afterward).

Past Executive

2022-06-07T02:17:32Z

R389li: /* S22 */ add smontema

Data sources for this exec list have been: CSC records, MathNEWS.
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.

= Definitions =
#define PR President
#define VP Vice-president
#define TR Treasurer
#define SE Secretary
#define AV Assistant Vice-president
#define SA Sysadmin
#define OF Office Manager
#define LI Librarian
#define FL Flasher
#define DE Deity
#define WW Webmaster
#define SE-TR Secretary-Treasurer (Position was split)
#define FR Fridge Regent (Imapd)

<div style="float:right;margin-left: 1em;">__TOC__</div>

=Founding 1967=

Sponsor - J. Peter Sprung
PR: K. Rugger
VP: R. Jaques
SE-TR: G. Sutherland

Founding Members:
B. Kindree
R. Melen
V. Neglia
R. Charney
R. Truman
Glenn Berry
D. Meek

===Fall===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

Committee members: R. Stallwerthy, C. de Vries

=1968=

===Winter===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

===Fall===

SE-TR: Glenn Berry

=1969=

Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.

=1970=

===A note on ACM affiliation===

The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970

===Fall===

PR: Rick Beach
VP: Lee Santon
TR: Randy Melen
SE: Vic Neglia

=1971=

===Spring===

VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.

===Fall===

VP: James W. Welch

=1972=

It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.

===Winter===

PR: Mike Campbell
VP: Edgar Hew
SE-TR: Doug Lacy

There is also stuff from James W. Welch without a position.

===Fall===

PR: Ian McIntosh

=1973=

Faculty Sponsor: Morven Gentleman

===Winter===

SE: Douglas E. Lacy

===Spring===

PR: Jim Parry

===Fall===

PR: Jim Parry
VP: Ray Walden
TR: Slavko Stemberger
SE: Mario Festival

=1974=

===Fall===

PR: Russell Crook

=1975-1977=

Faculty Sponsor: Morven Gentleman??

Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.
Sylvia Eng: 1975/6 as some position.
Dave Buckingham: a VP at some point
Allison Nolan: 1977 time
Peter Stevens: 1977
Russel Crook???

Dennis Ritchie came. So did Jeffrey D. Ullman.

=1976=

===Fall===

Progcom: Peter Stevens

=1977=

===Winter===

Progcom: Allison Nowlan

===Spring===

PR: Peter Stevens
Progcom: Allison Nowlan

===Fall===

PR: Andrzej Jan Taramina
Progcom: Allison Nowlan

=1978=

===Winter===

PR: Peter Stevens

===Spring===

TR: K.G. Dykes
SE: Kandry Mutheardy

Brian Kernighan gave a talk this term. So did Ken Thompson.

===Fall===

=1979=

===Spring===

PR: Robert Biddle

=1987=

===Fall===

PR: Jim Boritz
VP: Ted Timar
TR: Gayla Boritz
SE: Edwin Hoogerbeets

=1988=

Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Rob*n Stewart did as an assignment in 1991-1992 for some class at UBC
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was our first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.

===Winter===
PR: Jim Boritz
(Source: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Fall===

SA: Wade Richards

=1989=

===Winter===

https://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg

Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ???

PR: Barry W. Smith
VP: Angela Chambers
TR:
SE: Sean Goggin
SA: Wade Richards / Ross Ridge

(President Kevin Smith confirmed: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Spring===

PR: Jim Thornton
VP: Gayla Boritz
TR: David Fenger
SE: Kivi Shapiro
SA: Reid Pinchback

Assistance to sysadmin: Jim Boritz.

===Fall===

PR: James Boritz
VP: Edmond Bourne
SA: Ross Ridge

=1990=

===Winter===

TR: Jim Thornton

===Spring===

TR: Karen Smith
SE: Rob*n Stewart
*Robyn/Robin signed her emails as Rob*n and requested to be listed as such on this page.

===Fall===
PR: Wade Richards
TR: Carolyn Duke
SE: Rob*n Stewart - attended mathsoc meeting on our behalf.
Kivi Shapiro - attended mathsoc meeting on our behalf.
- Censured by mathsoc for his actions during the election.
Shannon Mann - attended mathsoc meeting on our behalf.

=1991=

===Winter===
VP: Edmond Bourne
TR: Carolyn Duke
SE: Rob*n Stewart
Shannon Mann - attended mathsoc meeting on our behalf.

John McCarthy came this term.

===Spring===
TR: Rob Leitman
Jason Knell - attended mathsoc meeting on our and PMC's behalf.

===Fall===
TR: Mike Van Lingen
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.

=1992=

===Winter===
TR: Norm Ross
SE: Brent Williams

===Spring===
PR: Dale Wick
TR: Stephen A. Mills

===Fall===
TR: Mark Plumb

=1993=

===Winter===
TR: Rob Leitman
VP: Tim Prime
OF: Dave Ebbo
LI: Norm Ross

Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray

===Spring===
TR: Mark Tompsett

===Fall===

PR: Ian Goldberg

=1994=

===Winter===
PR: Ian Goldberg
TR: Mark Tompsett
SE: Tom Rathbourne
LI: Michael Van Biesbrouck
Norm Ross assisted with finances.

===Spring===
PR: Dale Wick (?)
TR: Steve Mills
SA: Ian Goldberg (?)
Norm Ross assisted with finances.

===Fall===
PR: Ross Ridge
VP: Tom Rathbourne (?)
TR: Rob Leitman
SA: Zygo Blaxell
LI: Michael Van Biesbrouck

=1995=

===Winter===
TR: Sharlene Schmeichel
Amy Brown and Rob Ridge purchased books.

===Spring===
TR: Steve Mills

===Fall===
PR: Amy Brown (arbrown)
VP: Christina Norman (cbnorman)
TR: Steven Mills (samills)
SE: Allyson Graham (akgraham)
SA: Gavin Peters

=1996=

===Winter===
PR: Nikita Borisov (nborisov)
VP: Joseph Deu Ngoc (dtdeungo)
TR: Stephen Mills (samills)
SE: Sharlene Schmeichel (saschmei)
SA: Dave Brown (dagbrown)
OF: Somsack Tsai (stsai)
LI: Devin Carless (dccarles)
FL: Allyson Graham (akgraham)
DE: Ian Goldberg (iagoldbe)

===Spring===
PR: Blake Winton (bwinton)
VP: Nick Harvey (njaharve)
TR: Nikita Borisov (nborisov)
SE: Viet-Trung Luu (vluu)
SA: Drew Hamilton (awhamilt)
OF: Jillian Arnott (jarnott)
LI: Ross Ridge (rridge)
FL: Devin Carless (dccarles)

=== Fall ===
PR: Shannon Mann (sjbmann)
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)
TR: Michal Van Biesbrouck (mlvanbie)
SE: Nikita Borisov (nborisov)
SA: Chris Rovers
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation
LI: Aliz Csenki (acsenki)
FL: Aaron Chmielowiec (archmiel)
DE: Skuld (no uwuserid yet...)

=1997=

===Winter===
PR: Dima Brodsky
VP: Nikita Borisov (nborisov)
TR: Stephen Mills (samills)
SE: Evan Jones (ejones)
SA: Alex Brodsky
OF: Chris Doherty
LI: Matt Corks
FL: Paul Prescod

=== Fall ===
PR: Chris Rovers (cdrovers)
VP: Michael van Biesbrouck (mlvanbie)
TR: Somsack Tsai (stsai)
SE: Matt Corks (mvcorks)
SA: Lennart Sorensen (lsorense)
LI: Chmielowiec (archmiel)
OF: Devin Carless (dccarles)
FL: Aaron Chmielowiec (archmiel)

= 1998 =

=== Winter ===
PR: Suresh Naidu
VP: Viet-Trung Luu
TR: Tim Coleman
SE: Dax Hutcheon
Librarian: Dax Hutcheon
Flasher: Dax Hutcheon
Webmaster: Dax Hutcheon
SA: Robin Powell
OF: Aaron Chmielowiec

=== Spring ===

Position Name You might call them...
President roconnor Russell O'Connor
Vice-president trwcolem Tim Coleman
Treasurer knzarysk Karl Zaryski
Secretary (bwinton) (Blake Winton)
Sysadmin wbiggs Billy Biggs
Librarian snaidu Suresh Naidu
Flasher pechrysl Paul Chrysler
Office Manager dccarles Devin Carless
WWWW trwcolem Tim Coleman

=== Fall ===

President Joe Deu Ngoc jtdeungo
Vice-President Wai Ling Yee wlyee
Treasurer Fjord j2lynn
Secretary Matt Corks mvcorks
Sysadmin Andrew Hamilton awhamilt

World Wide Web Wench Dax Hutcheon ddhutche
Office Manager Richard Bell rlbell
Librarian Damian Gryski dgryski
Flasher Paul Chrysler pechrysl
Official Deity Ian Goldberg iagoldbe
Official Chairbeing Calum T. Dalek calum

=1999=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:

=2000=

=== Winter ===
PR: Will Chartrand (wgchartr)
VP: Gavin Duggan (geduggan)
TR:
SE:
SA: Lennart Sorensen (lsorense)
OF:

=== Fall ===
PR: geduggan
VP:
TR:
SE:
SA: bioster
OF:

=2001=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=== Spring ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=2002=

https://web.archive.org/web/20130715012002/http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php

=== Winter ===
PR: Billy Biggs
VP: Stefanus Du Toit
TR: Melissa Basinger
SE: James Perry
SA: Barry Genova
Librarian: Ryan Golbeck
Webmaster: Jonathan Beverley
Office Manager: Sayan Li

=== Spring ===
PR: Alex Pop
VP: Melissa Basinger
TR: Siyan Li
SE: James A Morrison
SA: Jonathan Beverley
Webmaster: Stefanus Du Toit

=== Fall ===
PR: James A. Morrison
VP: Stefanus Du Toit
TR: James Perry
SE: Michael Biggs
SA: Ryan Golbeck
Librarian: Mark Sherry, Cassandra Schopf
Webmaster: Stefanus Du Toit

=2003=

=== Winter ===
PR: Kannan Vijayan (kvijayan)
VP: Meg Darragh (m2darrag)
TR: James Perry (jeperry)
SE: Wojciech Kosnik (wkosnik)
SA: Stefanus Du Toit (sjdutoit)
LI: Simon Law (sfllaw)
WM: Julie Lavoie (jlavoie)

===Fall===
PR: Stefanus Du Toit (sjdutoit)
VP: Meg Darragh (m2darrag)
TR: Tor Myklebust (tmyklebu)
SE: James Perry (jeperry)
SA: Simon Law (sfllaw)
OF:

=2004=

===Winter===
PR: Simon Law (sfllaw)
VP: fspacek
TR: ljain
SE: Julie Lavoie (jlavoie)
SA: Tor Myklebust(tmyklebu)
OF:

===Spring===
PR: dnmorton ?
VP: Tim Loach (tloach)
TR: Michael Biggs (mbiggs)
SE: Lesley Northam (lanortha)
SA:
OF:

===Fall ===
PR: jeperry
VP: mtsay
TR: Mark Sherry (mdsherry)
SE: Tor Myklebust (tmyklebu)
SA: jlavoie
OF:

=2005=

===Winter===

PR: mtsay
VP: Lesley Northam (lanortha)
TR: Holden Karau (hkarau)
SE: domorton
SA: Tor Myklebust (tmyklebu)
OF:

===Spring===

PR: Mark Sherry (mdsherry)
VP: Martin Kess (mdkess)
TR: Ali Piccioni (apiccion)
SE: Michael Biggs (mbiggs)
SA: Tor Myklebust (tmyklebu)
OF:

===Fall===

PR: Tim Loach (tloach)
VP: Lesley Northam (lanortha)
TR: Caelyn McAulay (cmcaulay)
SE: The Professor
SA: Holden Karau (hkarau)
OF:

=2006=

===Winter===

PR: Tor Myklebust (tmyklebu)
VP: Michael Druker (mdruker)
TR: Caelyn McAulay (cmcaulay)
SE: Mark Sherry (mdsherry)
SA: William O'Connor (woconnor)
OF:

===Spring===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: David Tenty (daltenty)
SE: Chris Evensen (cevensen)
SA: Holden Karau (hkarau)
OF:

===Fall===

PR: Martin Kess (mdkess)
VP: Mark Sherry (mdsherry)
TR: Sylvan L. Mably (slmably)
SE: Caelyn McAulay (cmcaulay)
SA: William O'Connor (woconnor)

=2007=

===Winter===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: Caelyn McAulay (cmcaulay)
SE: David Tenty (daltenty)
SA: Holden Karau (hkarau)
Webmaster: jnopporn
OF:

===Spring===
PR: Gaelan D'costa (gdcosta)
VP: Kyle Larose (kmlarose)
TR: Kyle Spaans (kspaans)
SE: Erik Louie (elouie)
SA: Michael Spang (mspang)
Librarian: David Tenty (daltenty)
OF:

===Fall ===
PR: Holden Karau (hkarau)
VP: Alex McCausland (amccausl)
TR: Dominik Chlobowski (dchlobow)
SE: Sean Cumming (sgcummin)
SA: David Tenty (daltenty)
OF:
WW: dtbartle / jnopporn

=2008=

===Winter ===
PR: Sean Cumming (sgcummin)
VP: Matt Lawrence (m3lawren)
TR: Mateusz Tarkowski (mtarkows)
SE: Edgar Bering (ebering)
SA: Jordan Saunders (jmsaunde)
OF:

===Summer ===
PR: Brennan Taylor (b4taylor)
VP: Qifan Xi (qxi)
TR: Matt Lawrence (m3lawren)
SE: Nick Guenther (nguenthe)
SA:
OF:

===Fall ===
PR: Matthew Lawrence (m3lawren)
VP: Edgar Bering (ebering)
TR: Michael Gregson (mgregson)
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski
SA: Kyle Spaans (kspaans)
OF:

=2009=

===Winter===
PR: Michael Gregson (mgregson)
VP: Edgar Bering (ebering)
TR: Brennan Taylor (b4taylor)
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins)
SA: Jacob Parker (j3parker)
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)

===Spring ===
PR: Michael Spang (mspang)
VP: Jacob Parker (j3parker)
TR: Sapphyre Gervais (sagervai)
SE: Matthew McPherrin (mimcpher)
SA: Anthony Brennan (a2brenna)
OF:

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Michael Spang (mspang)
SE: Brennan Taylor (b4taylor)
SA: Michael Ellis (m2ellis)
OF: Rebecca Putinski (rjputins)

=2010=

===Winter===
PR: Kyle Spaans (kspaans)
VP: Edgar Bering (ebering)
TR: Sapphyre Gervais (sagervai)
SE: Ajnu Jacob (ajacob)
SA: Matthew Thiffault (mthiffau)
OF: Jacob Parker (j3parker)

Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr

===Spring===
PR: Jeff Cameron (j3camero)
VP: Brennan Taylor (b4taylor)
TR: Vardhan Mudunuru (vmudunur)
SE: Matthew Lawrence (m3lawren)
SA: Michael Ellis (m2ellis)
OF: Edgar Bering (ebering)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Rebecca Putinski (rjputins)
SE: Kyle Spaans (kspaans)
SA: Jeremy Roman (jbroman)
OF: Amir Sayed Khader (askhader)

=2011=

===Winter===
PR: Edgar Bering (ebering)
VP: Jennifer "Emily" Wong (jy2wong)
TR: Kyle Spaans (kspaans)
SE: Elana "Alana" Hashman (ehashman)
SA: Peter "Bofh" Barfuss (pbarfuss)
OF: Marc Burns (Marc Burns)

===Spring===
PR: Matthew Thiffault (mthiffau)
VP: Matthew McPherrin (mimcpher)
TR: Kyle Spaans (kspaans)
SE: Kwame Andrew Ansong (kansong)
SA: Jeremy Brandon Roman (jbroman)
OF: Jennifer "Emily" Wong (jy2wong)

===Fall===
PR: Marc Burns (m4burns)
VP: Katharine Hyatt (kshyatt)
TR: Jacob Parker (j3parker)
SE: Elana Hashman (ehashman)
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)
OF: Kyle Spaans (kspaans)
LIB: Edgar Bering (ebering)

=2012=

===Winter===
PR: Marc Burns (m4burns)
VP: Elana Hashman (ehashman)
TR: Jacob Parker (j3parker)
SE: Matthew McPherrin (mimcpher)
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: Jennifer "Emily" Wong (jy2wong)

===Summer===
PR: Anthony Brennan (a2brenna)
VP: Luqman Aden (laden)
TR: Matthew McPherrin (mimcpher)
SE: Elana Hashman (ehashman)
SA: Sarah Harvey (sharvey)
OF: Marc Burns (m4burns)
LIB: John Ladan (jladan)

===Fall===
PR: Marc Burns (m4burns)
VP: Salem Talha (satalha)
TR: Jennifer Wong (jy2wong)
SE: Elana Hashman (ehashman), resigned
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: John Ladan (jladan)

=2013=

===Winter===
PR: Anthony Brennan (a2brenna)
VP: Marc Burns (m4burns)
TR: John Mumford (jsmumfor)
SE: Matt Olechnowicz (mgolechn)
SA: Sarah Harvey (sharvey)
OF: Bryan Coutts (b2coutts)
LIB: Matthew McPherrin (mimcpher)

===Spring===
PR: Shane Robert Creighton-Young (srcreigh)
VP: Visishta Vijayanand (vvijayan)
TR: Dominik Chlobowski (dchlobow)
SE: Youn Jin Kim (yj7kim)
SA: Anthony Brennan (a2brenna)
OF: Marc Burns (m4burns)
IMAPD: Dominik Chlobowski (dchlobow)

===Fall===
PR: Elana Hashman (ehashman)
VP: Marc Burns (m4burns)
TR: Dominik Chlobowski (dchlobow)
SE: Edward Lee (e45lee)
SA: Jeremy Roman (jbroman)
OF: Alexis Hunt (aechunt)

= 2014 =

=== Winter ===
PR: Bryan Coutts (b2coutts)
VP: Visishta Vijayanand (vvijayan)
TR: Marc Burns (m4burns)
SE: Mark Farrell (m4farrel)
SA: Murphy Berzish (mtrberzi)
OF: Nicholas Black (nablack)

=== Spring ===
PR: Youn Jin Kim (yj7kim)
VP: Luke Franceschini (l3france)
TR: Joseph Chouinard (jchouina)
SE: Ifaz Kabir (ikabir)
SA: Murphy Berzish (mtrberzi)
OF: Matthew Thiffault (mthiffau)

=== Fall ===
PR: Youn Jin Kim (yj7kim)
VP: Theodor Belaire (tbelaire)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Shane Robert Creighton-Young (srcreigh)
SA: Alexis Hunt (aechunt)
OF: Mark Farrell (m4farrel)
LIB: Gianni Leonardo Gambetti (glgambet)

= 2015 =

=== Winter ===
PR: Gianni Leonardo Gambetti (glgambet)
VP: Luke Franceschini (l3france)
TR: Edward Lee (e45lee)
SE: Patrick James Melanson (pj2melan)
SA: Murphy Berzish (mtrberzi)
OF: Shikhar Singh (s285sing)
LIB: Aishwarya Gupta (a72gupta)

=== Spring ===
PR: Luqman Aden (laden)
VP: Patrick Melanson (pj2melan)
TR: Jonathan Bailey (jj2baile)
SE: Keri Warr (kpwarr)
SA: Nik Black (nablack)
OF: Ilia Chtcherbakov (ischtche)
LIB: Yomna Nasser (ynasser)

=== Fall ===
PR: Simone Hu (ss2hu)
VP: Theo Belaire (tbelaire)
TR: Jordan Taylore Upiter (jtupiter)
SE: Daniel Marin (dmarin)
SA: Jordan Xavier Pryde (jxpryde)
OF: Ilia Chtcherbakov (ischtche)

= 2016 =

=== Winter ===
PR: Patrick Melanson (pj2melan)
VP: Patrick Melanson (pj2melan)
Acting VP, progcom chair: Theo Belaire (tbelaire)
TR: Luqman Aden (laden)
SE: Naomi Koo (m3koo)
SA: Zachary Seguin (ztseguin)
OF: Reila Zheng (wy2zheng)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

=== Spring ===
PR: Luqman Aden (laden)
VP: Melissa Angelica Mary Tedesco (matedesc)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Aditya Shivam Kothari (askothar)
SA: Jordan Xavier Pryde (jxpryde)
OF: Zachary Seguin (ztseguin)
LI: Charlie Wang (s455wang)
FR: Marc Mailhot (mnmailho)

=== Fall ===
PR: Charlie Wang (s455wang)
VP: Bryan Coutts (b2coutts)
TR: Laura Song (lhsong)
SE: Uday Barar (ubarar)
SA: Zachary Seguin (ztseguin)
OF: Jamie Sinn (j2sinn)
LI: Felix Bauckholt (fbauckho)
FR: Ilia Chtcherbakov (ischtche)

= 2017 =

=== Winter ===
PR: Wilson Cheang (wyschean)
VP: Tristan Hume (tghume)
TR: Jordan Pryde (jxpryde)
SE: Amir Fata (aafata)
SA: Zachary Seguin (ztseguin)
OF: Felix Bauckholt (fbaukcho)
LI: Connor Murphy (cfmurph)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Felix Bauckholt (fbauckho)
VP: Zichuan Wei (z34wei)
TR: Laura Song (lhsong)
SE: Bo Mo (bzmo)
SA: Zachary Seguin (ztseguin)
OF: Uday Barar (ubarar)
LI: Patrick Melanson (pj2melan)
FR: Uday Barar (ubarar)

=== Fall ===

PR: Melissa Tedesco (matedesc)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
SE: Marc Mailhot (mnmailho)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

= 2018 =

=== Winter ===

PR: Patrick Melanson (pj2melan)
VP: Charlie Wang (s455wang)
TR: Ashley Dewiputri Pranajaya (adpranaj)
SE: Arshia Mufti (a2mufti)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Zichuan Wei (z34wei)
FR: Uday Barar (ubarar)

=== Spring ===

PR: Melissa Tedesco (matedesc)
VP: Dhruv Jauhar (djauhar)
TR: Tristan Hume (tghume)
AV: Marc Mailhot (mnmailho)
SA: Jennifer Zhou (c7zou)
OF: Aditya Thakral (a3thakra)
LI: Archer Zhang (z577zhan)
FR: Marc Mailhot (mnmailho)

=== Fall ===

PR: Zichuan Wei (z34wei)
VP: Uday Barar (ubarar)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Jennifer Zhou (c7zou)
OF: Alexander Zvorygin (azvorygi)
LI: Neil Parikh (n3parikh)
FR:

= 2019 =

=== Winter ===

PR: Marc Mailhot (mnmailho)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
AV: Aditya Thakral (a3thakra)
SA: Charlie Wang (s455wang)
OF: Archer Zhang (z577zhan)
LI: Rishabh Minocha (rkminoch)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Uday Barar (ubarar)
VP: Rajat Malhotra (r24malho)
TR: Raghav Sethi (r5sethi)
AV: Bo Mo (bzmo)
SA: Charlie Wang (s455wang)
OF: Hannah Wong (sm7wong)
LI: Nolan Munce (nmmunce)

=== Fall ===

PR: Dhruv Jauhar (djauhar)
VP: Aditya Thakral (a3thakra)
TR: Rishabh Minocha (rkminoch)
AV: Tammy Khalaf (tekhalaf)
SA: Murphy Berzish (mtrberzi)
OF: Zihan Zhang (z577zhan)
LI: Raghav Sethi (r5sethi)

= 2020 =

=== Winter ===
The office was closed midway through this term due to the COVID-19 pandemic.
The pandemic that threw the University and rest of the world into disarray
drove all CSC activity virtual. Though everyone thought the pandemic would
quickly be over, the Alpha, then Delta, then Omicron variants resulted in
the majority of classes being held online until February 2022. As a result,
the office would stay closed for a full 5 terms, and only reopen in W2022.

PR: Richard Shi (r27shi)
VP: Anastassia Gaikovaia (agaikova)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Amin Bandali (abandali)
OF: Alexander Zvorygin (azvorygi)
LI: Anastassia Gaikovaia (agaikova)
FR: Richard Shi (r27shi)

=== Spring ===

PR: Neil Parikh (n3parikh)
VP: Anastassia Gaikovaia (agaikova)
SA: Amin Bandali (abandali)

=== Fall ===

PR: Mokai Xu (m92xu)
VP: Anastassia Gaikovaia (agaikova) (stepped down as of 2020-11-30)
TR: Neil Parikh (n3parikh)
AV: Edwin Yang (e37yang)
SA: Murphy Berzish (mtrberzi)

= 2021 =

=== Winter ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Nakul Vijhani (nvijhani)
SA: Max Erenberg (merenber)

=== Spring ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Ravindu Angammana (rbangamm)
SA: Max Erenberg (merenber)

=== Fall ===

PR: Dora Su (d43su)
VP: Jason Sang (jzsang)
TR: Yanni Wang (y3859wan)
AV: Anjing Li (a348li)
SA: Max Erenberg (merenber)
Advising: Neil Parikh (n3parikh)

= 2022 =

=== Winter ===

PR: Juthika Hoque (j3hoque)
VP: Eric Huang (e48huang)
TR: Eden Chan (e223chan)
AV: Dina Orucevic (dmorucev)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Neil Parikh (n3parikh)

=== Spring ===

PR: Eden Chan (e223chan)
VP: Bonnie Peng (b38peng)
TR: Sat Arora (s97arora)
AV: Haley Song (h79song)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Sat Arora (s97arora)
LI: Santiago Montemayor (smontema) (appointed 2022=06=02)

Sysadmin Guide

2022-06-05T00:50:44Z

R389li: Members don't get top-level UW subdomains

The system administrator chairs the [[Systems Committee]], and is responsible for keeping all of our computers in working order. The CSC computing environment is good, but not nearly perfect, and the sysadmin should look for ways to improve it. We don't have a strict "if it works, don't touch it" policy, and encourage people to try new things to see if they work better. Because of this, we don't have "5 nines" uptime or anything close, but do have a modern computing environment that is constantly improving. Our systems should be, and often are, better at the end of term than the beginning.

Early in the term, the sysadmin should consider what hardware upgrades we would like to have, and send proposals to the treasurer to add to the budget. A bit later, this happens again with MEF proposals.

The sysadmin should also make sure requests by our users (to systems-committee@csclub) are answered, and make recommendations to the Executive Council to add new systems committee members or reevaluate old ones.

=== Power Outages ===
Occasionally MC will undergo planned power outages. These usually last from the morning until the evening. a2brenna or someone from IST will hopefully give us a notice in advance. When this happens, you should:
==== Pre-Outage ====
<ul>
<li>
Send an email to csc-general announcing the outage (example [https://mailman.csclub.uwaterloo.ca/private/csc-general/2016-November/000694.html here])
</li>
<li>
Create an announcement on our main website announcing the outage
</li>
<li>
Announce the outage in the #csc IRC channel and update the channel topic to show outage information
</li>
<li>
Schedule the shutdown the night before the outage using the <code>shutdown</code> command on all of our MC machines, e.g.
<pre>
sudo shutdown 06:00 "CSC systems will be unavailable for a power outage 7am -> 5pm. This machine will shutdown at 6:00AM EDT."
</pre>
</li>
<li>
If the real machines hosting the web server (phosphoric-acid) and mirror (potassium-benzoate) cannot be kept up during the outage,
set up a backup web server in an LXC container on a machine which is not located in MC (currently there is a container named dr-website
on biloba). '''After''' the MC machines have shutdown, assign the IP addresses of csclub.uwaterloo.ca and mirror.csclub.uwaterloo.ca to
the backup container.
<br>
TODO: Consider using keepalived to automate this process.
</li>
</ul>

==== Post-Outage ====
<ul>
<li>
Log back into each MC machine and make sure that <code>/users</code> was mounted correctly. If not, check /etc/network/interfaces to get the name of the VLAN device, and use <code>ip addr</code> to see if the interface is up. If it is not up, try to use ifup; if that doesn't work, manually bring up the device and assign it the appropriate IP addresses using iproute2:
<pre>
# check /etc/network/interfaces for the interface name and IP
ip link add name ens3.530 link ens3 type vlan id 530
ip addr add dev ens3.530 172.19.168.49/27
ip addr add dev ens3.530 fd74:6b6a:8eca:4903:c5c::49/64
ip link set dev ens3.530 up
</pre>
</li>
</ul>

=== Let's Encrypt certificates ===
Make sure to read [[SSL]] first.

We handle LE certs for members and clubs who host their websites on our servers. The certs should be renewed automatically; if they do not, then something is very wrong. There are plans underway to migrate from <code>certbot</code> to <code>dehydrate</code> since the apt version of certbot appears to be broken.

If you get an email LE warning you that a cert is about to expire, login to caffeine and check /var/log/letsencrypt/letsencrypt.log. There should usually be some clue as to what went wrong. Often, a club or member decides that they no longer want to host their website on our servers, in which case the cert can safely be removed via <code>certbot delete --cert-name CERT_NAME</code>. Make sure to also delete the corresponding Apache config files. Sometimes a subset of the domains for a member have become invalid, in which case they must be removed from the cert. One way to do this is via <code>certbot certonly --webroot -d domain1.com -d domain2.com ...</code>. Only list the domains which are still valid with the <code>-d</code> flags; omitted domains will be removed. Make sure to update the corresponding Apache config files.

=== uwaterloo.ca subdomains ===
Make sure to read [[Web Hosting]] first.

If a club requests a uwaterloo.ca subdomain, first make sure that their website is being hosted on our servers. Then, forward the email to hostmaster (at) uwaterloo.ca, and ask them to make the domain a CNAME for caffeine.csclub.uwaterloo.ca. You will also need to add a VirtualHost entry in /etc/apache2 on caffeine, redirecting requests to /users/club_name/www.

Make sure to create a new Let's Encrypt certificate for the domain.

Members do not get their own top-level uwaterloo.ca subdomains, they can instead request a <WatIAM>.members.csclub.uwaterloo.ca subdomain.

=== Mailing list subscriptions ===
At the very least, you need to be subscribed to the [https://mailman.csclub.uwaterloo.ca/listinfo/syscom syscom] and [https://mailman.csclub.uwaterloo.ca/listinfo/exec exec] mailing lists. You may also wish to subscribe to the following:
<ul>
<li>
[https://mailman.csclub.uwaterloo.ca/listinfo/git git]: Get alerts on some git commits (mainly Apache configs)
</li>
<li>
[https://mailman.csclub.uwaterloo.ca/listinfo/packages packages]: Get alerts of when packages are added to our Debian repository
</li>
<li>
[https://mailman.csclub.uwaterloo.ca/listinfo/ceo ceo]: Get alerts on new user accounts
</li>
</ul>

Mailing Lists

2022-05-31T23:15:02Z

R389li: Add Moderation instructions

== Systems Mailing Lists ==

The following mailing lists are the targets of various automated notifications. Subscribe to them to receive these notifications.

=== git@csclub.uwaterloo.ca ===

Commits to club [http://gitweb.csclub.uwaterloo.ca/ git repositories] are sent to this [http://csclub.uwaterloo.ca/mailman/listinfo/git list] in patch form.

=== packages@csclub.uwaterloo.ca ===

Changes to our [http://debian.csclub.uwaterloo.ca/ debian repository] are sent to this [http://csclub.uwaterloo.ca/mailman/listinfo/packages list].

=== ceo@csclub.uwaterloo.ca ===

[[CEO]] sends a note to this [http://csclub.uwaterloo.ca/mailman/listinfo/ceo list] every time a new member or club is added.

== Technical Details ==

Most of our mailing lists are handled through [http://www.gnu.org/software/mailman/index.html Mailman], including the lists for the [[Executive]] (<tt>exec@csclub.uwaterloo.ca</tt>), the Program Committee (<tt>progcom@csclub.uwaterloo.ca</tt>), and the [[Systems Committee]] (<tt>syscom@csclub.uwaterloo.ca</tt>).

== Moderation ==
Our mailing lists need to be moderated. The process for that is this:

# When you become an exec, you are automatically subscribed to the <code>exec-moderators</code> mailing list.
# You should now [https://mailman.csclub.uwaterloo.ca/accounts/signup/?next=/postorius/lists/ create a mailman account] '''with your CSC email''', and sign up for a weekly shift to mod the <code>exec</code> mailing list.
# You can then remove yourself from the <code>exec-moderators</code> mailing list. To do this, go to [https://mailman.csclub.uwaterloo.ca/postorius/lists/exec-moderators.csclub.uwaterloo.ca/ this page] and click '''Unsubscribe''' (in red).
# When it's your turn to mod the list, go to [https://mailman.csclub.uwaterloo.ca/postorius/lists/exec.csclub.uwaterloo.ca/held_messages held messages] and read through each email before clicking '''Accept''' if it is not spam.
# If it IS spam, copy the email address it is from, and click '''Discard.''' '''DO NOT CLICK REJECT'''.
# Go to [https://mailman.csclub.uwaterloo.ca/postorius/lists/exec.csclub.uwaterloo.ca/settings/message_acceptance#id_discard_these_nonmembers message acceptance] and add the address to the '''Discard These Non-Members''' box. Don't forget to click '''Save Changes'''.

== Mailman 3 ==
Starting from April 2021, we now use [https://docs.mailman3.org/ Mailman 3] for managing our mailing lists. Mailman 3 is split into three
independent components:

* Mailman 3 Core is responsible for sending and receiving emails.
* Postorius is the web admin UI for creating and managing mailing lists.
* HyperKitty is the archiver, where past messages can be viewed and searched.

=== Day-to-Day Operations ===
The Django admin site for Mailman 3 is accessible from [https://mailman.csclub.uwaterloo.ca/admin/ here]. Generally, you'll only need to use
this to see the list of accounts, and to assign/remove permissions from them.

If you are logged in as a superuser, you should be able to see a list of all the mailing lists from
[https://mailman.csclub.uwaterloo.ca/postorius/lists here]. After clicking on a list, you should be able to access and modify all of its
settings, including subscription policy and message acceptance. Most of the setting names should be self-explanatory. For example, under
'Held Messages', you can see a list of all held messages, and take an action on each one (discard, reject, accept, etc.).

Unfortunately it is not possible to subscribe a new member from the web UI, although you can unsubscribe them (open issue [https://gitlab.com/mailman/postorius/-/issues/189 here]). You can do this from the command line in the mail container. For example, to add people to the exec list:
<pre>
sudo
su -s /bin/bash list
. /opt/mailman3/bin/activate
mailman addmembers - exec@csclub.uwaterloo.ca
person1@csclub.uwaterloo.ca
person2@csclub.uwaterloo.ca
...
^D
</pre>
You need to press Ctrl-D (EOF) after entering the list of new members.

==== Creating a new list ====
This can be done from the Postorius UI. Unfortunately, ever since we moved Mailman 3 into its container, its copy of postfix_lmtp (and postfix_lmtp.db) is out of sync with the mail container's version (since they each have their own filesystem). So after creating a new list, copy those files over and reload Postfix (from inside the mail container):
<pre>
# from xylitol
cp -a /vm/mailman/opt/mailman3/data/postfix_lmtp /vm/mail/rootfs/opt/mailman3/data/
cp -a /vm/mailman/opt/mailman3/data/postfix_lmtp.db /vm/mail/rootfs/opt/mailman3/data/
# from mail
postfix reload
</pre>
I have never actually attempted this before, so I am not certain that it will work.

<b>Make sure you disable the Pipermail archiver</b> (go to Settings -> Archiving and uncheck the Pipermail box). That archiver only works for lists which were migrated from Mailman 2.

==== User gets subscribed to the same list twice ====
Sometimes a user gets subscribed to a list twice and it becomes impossible to unsubscribe them. This actually happened to us before, and as of this writing, it is still [https://gitlab.com/mailman/mailman/-/issues/826 an open issue]. If this happens again, just run the following:
<pre>
su -s /bin/bash list
cd /opt/mailman3
. bin/activate
mailman shell -r delete_dup_sub Yes
</pre>

=== Installation ===
<b>Update</b>: We now use the pip package of mailman (from PyPI) instead of the Debian package, since the Debian package was giving us too many issues. All of the configs are now in /etc/mailman3, and the data files are in /opt/mailman3. A virtualenv was created in /opt/mailman3.

<b>Update 2</b>: Mailman has been moved into its own [[systemd-nspawn]] container. It communicates with the mail container via a dedicated veth pair. Some relevant changes include: apply [https://gitlab.com/mailman/hyperkitty/-/merge_requests/379 this] patch; edit /opt/mailman3/lib/python3.9/site-packages/mailman/database/alembic/versions/bc0c49c6dda2_use_utf8mb4_in_mysql.py so that the type of autoresponse_postings_text is SAUnicodeLarge instead of SAUnicode4Byte; update main.cf and master.cf (and postfix_lmtp and postfix_lmtp.db in /opt/mailman3/data) to account for the new veth pair IP address of the mailman container.

<b>Update 3</b>: So apparently Django tries to send emails over localhost by default, which doesn't work for us because the mail and mailman containers are now separate. Add the following params to /etc/mailman3/settings.py:
<pre>
EMAIL_HOST = 've-mail'
EMAIL_PORT = 10025
</pre>
See [https://docs.djangoproject.com/en/4.0/topics/email/#smtp-backend here] for more details. "ve-mail" is an alias set in /etc/hosts.

-------------------------------------------------------------

The steps below describe how Mailman 3 was installed on the mail container and how we migrated the lists from Mailman 2. Note that some lists
were not migrated due to inactivity. See <code>/var/lib/mailman/data/aliases</code> in the mail container to see which lists were not
migrated.

==== Database setup ====
Log into the coffee VM as root, run <code>mysql</code>, and create new databases for Mailman 3 and HyperKitty:
<pre>
CREATE DATABASE mailman3;
CREATE USER mailman3 IDENTIFIED BY 'replace_this_password';
GRANT ALL PRIVILEGES ON mailman3.* TO mailman3;
</pre>
Repeat the steps above for <code>mailman3web</code> instead of <code>mailman3</code>.

<b>Warning:</b> Make sure the MariaDB version is 10.2 or newer. The default package in Debian 10 and above should be fine.

==== Mail container setup ====
First, install some prerequisites which we'll need later:
<pre>
apt update
apt install python3-pip python3-mysqldb memcached python3-pylibmc python3-xapian
pip3 install git+https://github.com/notanumber/xapian-haystack.git
</pre>
As of this writing (2021-04-17), the package <code>python3-xapian-haystack</code> in the Debian repositories is broken. Make sure to install
the latest version off of GitHub, as shown above.

Unfortunately memcached will fail due to Debian's default LXC configuration being [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931545 unable to create new namespaces]. The easiest workaround for this is to just disable mount namespaces in the systemd service. Run <code>systemctl edit memcached.service</code>, then paste the following:
<pre>
[Service]
PrivateTmp=false
ProtectSystem=false
PrivateDevices=false
</pre>
Then restart memcached.

==== Installing the Mailman 3 suite ====
Get ready, because as soon as you install the full Mailman 3 suite, a lot of services are going to start failing, fast. The worst part is that
the mail container is currently set up to email failed cron jobs to the syscom list, and Mailman 3 installs a cron job which runs <i>once per minute</i>, which will cause a lot of spam. Make sure to read these instructions carefully before executing them.
<pre>
apt install mailman3-full
</pre>
If the command above works for you on the first try, consider yourself lucky. It certainly didn't for me. If it fails, the first thing you want to do is comment out all the lines in <code>/etc/cron.d/mailman3-web</code> because otherwise the syscom list will get spammed. We are going to edit some files, then try to reinstall the whole suite again.

First, open <code>/etc/mailman3/mailman.cfg</code>. Under <code>[general]</code>, set <code>site_owner</code> to your personal email address, temporarily. Under <code>[database]</code>, set:
<pre>
class: mailman.database.mysql.MySQLDatabase
url: mysql+mysqldb://mailman3:my_password@coffee.csclub.uwaterloo.ca/mailman3?charset=utf8&use_unicode=1
</pre>
Note how we are using the mysqldb (mysqlclient) driver, not the default pymysql. Make sure to replace <code>my_password</code> with the password you created for the <code>mailman3</code> database.

Under <code>[mta]</code>, set <code>smtp_port</code> to 10025 (there's an entry in <code>/etc/postfix/master.cf</code> for Mailman). Also make sure that the following lines are present at the end of the file:
<pre>
[archiver.hyperkitty]
class: mailman_hyperkitty.Archiver
enable: yes
configuration: /etc/mailman3/mailman-hyperkitty.cfg
</pre>

The next file we need to edit is <code>/etc/mailman3/mailman-web.py</code>. Go to the <code>DATABASES</code> variable and make sure 'ENGINE' is set to 'django.db.backends.mysql'. Fill in the username, password, host, and DB name for <code>mailman3web</code>. Uncomment the MySQL-specific options under 'OPTIONS'. Also set 'charset' to 'utf8mb4' in 'OPTIONS'. This is important - MariaDB, like MySQL, only uses 3 bytes per Unicode character by default, which means that if someone sends us an email with a 4-byte Unicode emoji in it, HyperKitty will explode. So make sure to use 'utf8mb4'.
The final variable should look like this:
<pre>
DATABASES = {
'default': {
'ENGINE': 'django.db.backends.mysql',
'NAME': 'mailman3web',
'USER': 'mailman3web',
'PASSWORD': 'my_password',
'HOST': 'coffee.csclub.uwaterloo.ca',
'PORT': '',
'OPTIONS': {
'init_command': "SET sql_mode='STRICT_TRANS_TABLES'",
'charset': 'utf8mb4',
},
}
}
</pre>
Some more variables you need to set/unset:

* Set EMAILNAME to 'csclub.uwaterloo.ca'.
* Set HOSTNAME to 'mailman.csclub.uwaterloo.ca'.
* Set POSTORIUS_TEMPLATE_BASE_URL to 'https://mailman.csclub.uwaterloo.ca/mailman3/'. If you want to strip out the <code>/mailman3</code> part, you'll need to edit the Apache config as well - see the relevant section below.
* Set TIME_ZONE to 'America/Toronto'.
* Comment out 'django_mailman3.lib.auth.fedora' under INSTALLED_APPS.

We need to instruct Django to use memcached for caching. Add the following section to mailman-web.py:
<pre>
CACHES = {
'default': {
'BACKEND': 'django.core.cache.backends.memcached.PyLibMCCache',
'LOCATION': '127.0.0.1:11211',
}
}
</pre>
We also need to want to use Xapian as the backend for full-text search (the default engine, Whoosh, is written in pure Python and has horrible performance). Add the following section to mailman-web.py:
<pre>
HAYSTACK_CONNECTIONS = {
'default': {
'ENGINE': 'xapian_backend.XapianEngine',
'PATH': '/var/lib/mailman3/web/xapian_index',
}
}
</pre>
We also don't want to run one qcluster process on each CPU core, so add the following section as well:
<pre>
Q_CLUSTER = {
'timeout': 300,
'save_limit': 100,
'orm': 'default',
'poll': 5,
'workers': 4,
}
</pre>

We also want to disable log emails because this will quickly spam our inboxes. (This is also bad for privacy because the HTTP Authorization header is kept in the log, which contains people's base64-encoded passwords). Copy the <code>LOGGING</code> variable from <code>/usr/share/mailman3-web/settings.py</code> into mailman-web.py and remove all mentions of 'mail_admins'.

The next file we need to edit is <code>/etc/mailman3/mailman-hyperkitty.cfg</code>. Set <code>api_key</code> to the same value as MAILMAN_ARCHIVER_KEY in mailman-web.py (without the quotation marks). Also set <code>base_url</code> to https://mailman.csclub.uwaterloo.ca/mailman3/hyperkitty/.

The next file we need to edit is <code>/etc/mailman3/uwsgi.ini</code>. The default buffer size limit for uWSGI is too low and can cause requests to fail. Add the following line to uwsgi.ini:
<pre>
buffer-size = 32768
</pre>

==== Patching the source files ====
Unfortunately some of the packages which we have installed have bugs in them which we need to fix.

===== Xapian word size limit =====
The first one is in the Haystack-Xapian backend: occasionally we have very large words which exceed Xapian's limit (see [https://gitlab.com/mailman/hyperkitty/-/issues/322 this GitLab issue]). Open <code>/usr/local/lib/python3.7/dist-packages/xapian_backend.py</code>, add <code>import traceback</code> at the top of the file, and make sure the bottom of the <code>update()</code> function (around line 500) looks like this:
<pre>
# finally, replace or add the document to the database
database.replace_document(document_id, document)

except UnicodeDecodeError:
sys.stderr.write('Chunk failed.\n')
pass

except xapian.InvalidArgumentError:
traceback.print_exc()

finally:
try:
database.close()
except:
traceback.print_exc()
</pre>
(We're just ignoring any errors caused by long words so that the entire indexing job doesn't fail.)

===== Xapian six import =====
Same file: open xapian_backend.py and at the top, replace <code>from django.utils import six</code> by <code>import six</code>.

===== Mailman3 restclient URL quoting =====
Next, we need to edit Mailman 3's REST client, because there is a bug where if someone's email address contains a space, the REST client doesn't URL-encode it properly (one of us should probably file an issue on GitLab for this at some point). Open <code>/usr/lib/python3/dist-packages/mailmanclient/client.py</code>, and at the top of the file, add the following line:
<pre>
from urllib.parse import quote
</pre>
Then, in the `get_user` function, replace
<pre>
response, content = self._connection.call(
'users/{0}'.format(address))
</pre>
with
<pre>
response, content = self._connection.call(
'users/{0}'.format(quote(str(address))))
</pre>

===== Hyperkitty URL truncation =====
Hyperkitty truncates each URL in each message to 76 characters. This is way too little. Most Google Docs links will go way past that limit. As of this writing, that limit is unfortunately hard-coded in the Django templates, so we're going to have to edit them.

There's actually another problem with the Django templates, which is the fact that URLs enclosed in angle brackets (<>) don't get quoted properly. So we're going to fix that too. (This might have been fixed in a more recent version of Hyperkitty).

Go to <code>/usr/lib/python3/dist-packages/hyperkitty/templates/hyperkitty</code> and find all files which contain the line <code>urlizetrunc:76</code>, and replace them with <code>urlize</code>. Also make sure that 'urlize' occurs right after 'email.content' in the filter pipeline. You can find these files using:
<pre>
cd /usr/lib/python3/dist-packages/hyperkitty/templates/hyperkitty
grep -IRl 'urlizetrunc:76' .
</pre>
For example, in <code>ajax/temp_message.html</code>, the template should look like:
<pre>
{{ email.content|urlize|snip_quoted|wordwrap:90|escapeemaillinks }}
</pre>

==== Installing Mailman 3, again ====

<b>Now</b> we are ready to reinstall mailman3-full:
<pre>
apt install mailman3-full
</pre>
Restart the mailman3 and mailman3-web services and make sure they are running:
<pre>
systemctl restart mailman3
systemctl restart mailman3-web
</pre>

==== Cron configuration ====

Open <code>/etc/default/cron</code> and set the following line:
<pre>
EXTRA_OPTS="-L 4"
</pre>
This will prevent cron from spamming the logs, which will inevitably happen since mailman3-web runs very frequent jobs. Restart cron:
<pre>
systemctl restart cron
</pre>
Also uncomment the lines in <code>/etc/cron.d/mailman3-web</code> which you commented out earlier.

Optional, but recommended: change the minutely cron job in <code>/etc/cron.d/mailman3-web</code> to run every 15 minutes instead (or even once an hour). Once a minute just sounds like too much. Example:
<pre>
*/15 * * * * www-data [ -f /usr/bin/django-admin ] && flock -n /var/run/mailman3-web/cron.minutely /usr/share/mailman3-web/manage.py runjobs minutely
</pre>

==== Installing extra archivers ====
I wrote some extra archivers for Mailman which are available [https://git.csclub.uwaterloo.ca/merenber/extra-mailman-archivers.git here]. One of them is called 'monthly_archiver' and it just dumps each message into a maildir directory for the current year and month. The motivation for this was to preserve message headers, since HyperKitty does not store headers. The other archiver is called 'pipermail', and it does two things: it passes each message to Pipermail, and it also appends it to the Mailman 2 mbox file. The idea behind this one was to have a backup in case we need to re-install Mailman 3 from scratch. Hopefully we never have to do that.

To install the archivers (as root):
<pre>
git clone my_username@csclub.uwaterloo.ca:/srv/git/merenber/extra-mailman-archivers.git
cd extra-mailman-archivers
pip3 install .
</pre>

Open mailman.cfg and add the following lines:
<pre>
[archiver.monthly_archiver]
class: extra_mailman_archivers.monthly_archiver.MonthlyArchiver
enable: yes

[archiver.pipermail]
class: extra_mailman_archivers.pipermail.Pipermail
enable: yes
configuration: /etc/mailman3/mailman-pipermail.cfg
</pre>

Also create the file <code>/etc/mailman3/mailman-pipermail.cfg</code> and paste the following inside it:
<pre>
[general]
base_url:
</pre>

Then restart mailman3.

You should now be able to view 'monthly_archiver' and 'pipermail' as archiver options for each list in Postorius. As a general rule of thumb, you only need monthly_archiver for the lists which are not moderated, so that we can use the headers to delete spam later. The pipermail archiver only really needs to be used for the exec and syscom lists, since those are the most important ones.

==== Postfix changes ====
Open <code>/etc/postfix/main.cf</code> and add the following lines:
<pre>
owner_request_special = no
transport_maps = hash:/var/lib/mailman3/data/postfix_lmtp
local_recipient_maps =
proxy:unix:passwd.byname,
$alias_maps,
hash:/var/lib/mailman3/data/postfix_lmtp
</pre>
Then run:
<pre>
postfix reload
</pre>

==== Apache httpd changes ====
Copy the contents of <code>/etc/mailman3/apache.conf</code> into <code>/etc/apache2/sites-real/mailman</code> (or wherever the config file is for the Mailman page). You may have to customize some lines. Then run:
<pre>
a2enmod proxy_uwsgi
systemctl restart apache2
</pre>

==== Postorius setup ====
Now cd into <code>/usr/share/mailman3-web</code>, and run <code>./manage.py createsuperuser</code>. Use 'sysadmin' as the username and use the syscom mailing list as the email address.

Now go to https://mailman.csclub.uwaterloo.ca/mailman3/postorius/lists/, and sign in as the user you just created. You will get an email confirmation.

You have probably noticed that the site name is still set to 'example.com'. Go to https://mailman.csclub.uwaterloo.ca/mailman3/admin/, then click on 'Sites'. Click on 'example.com', then set 'Domain name' to mailman.csclub.uwaterloo.ca. Set the display name to something reasonable.

Now go to https://mailman.csclub.uwaterloo.ca/mailman3/postorius/domains, click on 'New domain', and create a new domain.

Also click on 'Templates' and add two new templates:

* 'The footer for a regular (non-digest) message.'
* 'The footer for a digest message.'

The contents of these should be:
<pre>
_______________________________________________
$display_name mailing list -- $listname
To unsubscribe send an email to ${short_listname}-leave@${domain}
https://mailman.csclub.uwaterloo.ca/mailman3/postorius/lists/${list_id}
</pre>

The reason why we need to specify this is because many of our old lists had footer templates which used %()s placeholders, which [https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/2DCMJGCKSCXTSRIOVV6GPWKEHJHVAGOP/#2DCMJGCKSCXTSRIOVV6GPWKEHJHVAGOP have no meaning in Mailman 3]. [https://gitlab.com/mailman/mailman/tree/master/src/mailman/templates/en These] are the default templates, and [https://docs.mailman3.org/projects/mailman/en/latest/src/mailman/rest/docs/templates.html#templated-texts these] are the placeholders you can use.
Also note that you can have domain-wide templates and per-list templates.

==== Importing lists from Mailman 2 ====
<b>Make sure to read [https://docs.mailman3.org/en/latest/migration.html this] first.</b>

Before we continue - unfortunately the current version of HyperKitty in the Debian repos doesn't contain a fix which allows bad 'Subject' headers to be skipped (see [https://gitlab.com/mailman/hyperkitty/-/issues/317 this] issue). So we're going to need to download a more recent version of the file we need:
<pre>
cd /usr/lib/python3/dist-packages/hyperkitty/management/commands
mv hyperkitty_import.py hyperkitty_import.py.bak
curl -sLOJ 'https://gitlab.com/mailman/hyperkitty/-/raw/master/hyperkitty/management/commands/hyperkitty_import.py?inline=false'
</pre>

We're also going to need to download a newer version of a specific Mailman 3 file which [https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/JEPMB3HW4FI57EUMOST4L7BD2ILIIS3P/ occasionally causes the import21 command to fail]:
<pre>
cd /usr/lib/python3/dist-packages/mailman/commands
mv cli_import.py cli_import.py.bak
curl -sLOJ 'https://gitlab.com/mailman/mailman/-/raw/master/src/mailman/commands/cli_import.py?inline=false'
</pre>

We're also going to need to modify a few columns in the database because the csc-industry mailing list has a long description which exceeds the default alotted size. Log back into coffee as root, run <code>mysql</code>, and execute the following:
<pre>
USE mailman3;
ALTER TABLE mailinglist MODIFY info VARCHAR(1024);
ALTER TABLE mailinglist MODIFY autoresponse_postings_text VARCHAR(1024);
</pre>

Before migrating a list from Mailman 2, you will need to create a list with exact the same name in Mailman 3. Go to https://mailman.csclub.uwaterloo.ca/mailman3/postorius/lists, click 'New list', and follow the prompts. Go to the list settings and change what you need.

<b>Note:</b> For all of the commands below, it is crucial that you run the <code>mailman</code> command as the <code>list</code> user and the <code>manage.py</code> command as the <code>www-data</code> user. Otherwise, you can create files which only root can access, causing horrible breakage.

In this example, we're going to import the mailing list called 'test'. The process should be the same for the other lists.
<pre>
su -s /bin/bash list
mailman import21 test@csclub.uwaterloo.ca /var/lib/mailman/lists/test/config.pck
exit
su -s /bin/bash www-data
cd /usr/share/mailman3-web
./manage.py hyperkitty_import -l test@csclub.uwaterloo.ca -v3 /var/lib/mailman/archives/private/test.mbox/test.mbox
./manage.py update_index_one_list -v3 test@csclub.uwaterloo.ca
</pre>

Now open <code>/var/lib/mailman/data/aliases</code> and comment out all of the addresses for the list which we just migrated. Then run, as root,
<pre>
postalias /var/lib/mailman/data/aliases
postfix reload
</pre>

Once you are done migrating all of the lists, make sure sysadmin (or exec/syscom) is the site owner of Mailman,
not your personal email. Open <code>/etc/mailman3/mailman.cfg</code>, and under <code>[mailman]</code>, make sure you have the
following line:
<pre>
site_owner: sysadmin@csclub.uwaterloo.ca
</pre>
Then restart mailman3.

==== Custom URL ====
If you wish to strip out the <code>/mailman3</code> from all of the Mailman 3 URLs, there are several files which you'll need to edit.

First, open <code>/etc/mailman3/mailman-hyperkitty.cfg</code> and take out <code>/mailman3</code> from <code>base_url</code>.

Next, open <code>etc/mailman3/mailman-web.py</code> and add:
<pre>
STATIC_URL = '/static/'
</pre>
Also take out <code>/mailman3</code> from the <code>POSTORIUS_TEMPLATE_BASE_URL</code> variable.

Now open your Apache config and do the following:
<ul>
<li>Remove <code>/mailman3</code> from <code>Alias /mailman3/favicon.ico</code> and <code>Alias /mailman3/static</code>.</li>
<li>
Add the following lines to redirect people still using the old URLs:
<pre>
RedirectMatch permanent "^/mailman3$" "/"
RedirectMatch permanent "^/mailman3/(.*)$" "/$1"
</pre>
</li>
<li>
Add the following to your ProxyPass section:
<pre>
ProxyPass /mailman3 !
</pre>
Also remove <code>/mailman3</code> from the other ProxyPass entries.
</li>
</ul>
Now run:
<pre>
systemctl restart mailman3
systemctl restart mailman3-web
systemctl reload apache2
</pre>
Now go to https://mailman.csclub.uwaterloo.ca/postorius/domains and edit any templates which have hardcoded <code>/mailman3</code> in a URL. You will need to do this for any list-specific templates as well.

==== Shutting down Mailman 2 for good ====
Open <code>/etc/postfix/main.cf</code> and remove <code>hash:/var/lib/mailman/data/aliases</code> from <code>alias_maps</code>.

Run <code>postfix reload</code>.

Open the Apache config and comment out all of the lines relevant to Mailman 2, except for those necessary to show Pipermail. Reload Apache.

Open <code>/etc/cron.d/mailman</code> and comment out everything.

Now run:
<pre>
systemctl stop mailman
systemctl mask mailman
</pre>

==== HyperKitty scripts ====
There are a couple of scripts in <code>/usr/share/mailman3-web</code> for deleting messages from HyperKitty. The first deletes all messages from HyperKitty (this should only be used if you need to re-migrate a mailing list). Usage:
<pre>
./hyperkitty_delete_all.py name_of_list
</pre>
The other script deletes all messages which have been flagged by SpamAssassin as being spam:
<pre>
./hyperkitty_delete_spam.py --month 2021-April name_of_list
</pre>
This requires the monthly_archiver to be enabled. Alternatively, if you want to delete spam using the Mailman 2 mbox file:
<pre>
./hyperkitty_delete_spam.py --mbox name_of_list
</pre>
Note that using the mbox file will take a very long time.

==== Mailman 2 to 3 setting mappings ====
Here is a <b>very rough</b> mapping of Mailman 2 to Mailman 3 (Postorius) settings. Note that some of them are not perfectly equivalent. There are also some settings in Mailman 2 which are not available in Mailman 3 and vice versa.
{| class="wikitable"
|-
! scope="col"| Mailman 2 setting
! scope="col"| Mailman 3 setting
|-
|General Options -> owner
|Users -> Owners
|-
|Non-digest options -> msg_footer
|Templates -> 'The footer for a regular (non-digest) message.'
|-
|Digest options -> digest_footer
|Templates -> 'The footer for a digest message.'
|-
|Privacy options -> Subscription rules -> advertised
|Settings -> List Identity -> Show list on index page
|-
|Privacy options -> Subscription rules -> subscribe_policy
|Settings -> Subscription Policy -> Subscription Policy
|-
|Privacy options -> Subscription rules -> ban_list
|Banned addresses (Note that this only bans subscriptions, not posts.)
|-
|Privacy options -> Sender filters -> default_member_moderation, generic_nonmember_action
|Settings -> Message Acceptance -> Default action to take when a member posts to the list
|-
|Privacy options -> Sender filters -> discard_these_nonmembers
|Users -> Non-members -> add a non-member, then go to Non-member Options -> Administration options -> Moderation and choose 'Discard'
|-
|Privacy options -> Recipient filters -> require_explicit_destination
|Settings -> Message Acceptance -> Require Explicit Destination
|-
|Archiving options -> archive, archive_private
|Settings -> Archiving -> Archive policy
|}

Note that except for the templates, most settings <i>should</i> be imported correctly via the <code>mailman import21</code> command.

[[Category:Systems]]

Meeting:Termcom/Saturday 2 April 2022

2022-05-28T02:19:15Z

R389li: Test

← [[Termcom/Saturday 5 March 2022]] | [[Termcom/Saturday 2 April 2022]] →

Last meeting of the term, good luck on exams!

= Termcom members in attendance =
r389li, dzlin, j2767wan, jtoft (👋), r345liu

= Tasks completed last few weeks =
* r389li got USBs for the office, plugged in Nullsleep and booted it up

= Tasks for the week =
* a268wang and d278liu will continue working on Merlin and migrate the prometheus VM to the k8s cluster
* j2767wan will continue setting up NextCloud locally
* r4tandon will continue looking into how to make the Visual Editor on this Wiki work
* r345liu and y266shen will fix the last failing project(s?) (Apache/Debian/???) in mirror-checker
* r389li will try and fix Nullsleep's networking
* r389li will also upload the Unix 101 recording and update [https://csclub.uwaterloo.ca/~termcom/unix101 https://csclub.uwaterloo.ca/~termcom/unix101]
* dzlin and s7raviku will upgrade Postgres on coffee, ensuring data is migrated to the new database

= TODO =
* Convert the [[Ceph]] mount on [[Machine List#Cloud Cloud machines]] to a systemd.mount so NGINX won't try to start (and fail) before its FS is mounted
* MathNEWS container migration (LXC -> systemd-nspawn)
* Fix Guayusa
* Get the specs of the FusioIO card

= Syscom mailing list moderator =
a268wang

[[Category:Termcom]]

CloudStack Templates

2022-05-28T02:15:41Z

R389li: Test

This page explains how to create CloudStack templates from which CloudStack VMs are based.

Official documentation: https://docs.cloudstack.apache.org/en/latest/adminguide/templates.html

We require that cloud templates be prepared with [https://cloud-init.io/ cloud-init]. cloud-init is a program which passes configuration data (e.g. user's SSH key) from a cloud provider to a VM at boot time. Most "major" GNU/Linux distributions have public cloud images which are (mostly) ready-to-use thanks to cloud-init.

== Overview ==
There are two ways to create a template:

1. Convert the root disk volume of an existing VM into a template, or

2. Take a QCOW2 file, mount it over NBD, and modify files as necessary

The first option takes more time, but is generally easier. You can use either option; just keep in mind that some commands, such as <code>systemctl</code>, can only be executed in a live system.

== Limitations ==
=== Downloading ===
If you are downloading a template over HTTP(S), there's one weird problem which I found out the hard way - the CloudStack Systems VMs' iptables rules are configured to block outgoing traffic to VLAN 134. I have no idea why CloudStack decides to do this, but you're going to have to work around those rules if you want to download a file hosted on a machine on-campus.

SSH into the Secondary Storage VM, e.g.
<pre>
ssh -i /var/lib/cloudstack/management/.ssh/id_rsa -p 3922 root@169.254.12.1
</pre>
Check if the first rule of the OUTPUT chain will accept all traffic:
<pre>
iptables -L -vn
</pre>
If not, add such a rule:
<pre>
iptables -I OUTPUT 1 -j ACCEPT
</pre>

=== Uploading ===
If you are uploading a QCOW2 image directly from your computer, you need to be on the campus network. For some reason the web UI tries to contact the management server directly, which of course has a private IP address. So either configure your browser to use a SOCKS proxy, or use the campus VPN.

== Debian ==
We're going to start with Debian since it's the first template which I created. Other distributions are mostly similar.

From the CloudStack UI, as the admin user, click on Templates, then 'Register Template From URL'. Create a new template using this URL (change the release if necessary): https://cloud.debian.org/images/cloud/bullseye/latest/debian-11-genericcloud-amd64.qcow2. The following checkboxes should be checked: Extractable, HVM (don't make it public - we want members to use our modified templates instead).

Create a new VM using this template. Use the admin keypair during creation. Once it's ready, SSH into it using the admin keypair (on biloba or chamomile):
<pre>
ssh -i /var/lib/cloudstack/management/.ssh/id_rsa debian@172.19.134.129
</pre>
Replace the IP address as necessary.

=== IPv6 setup ===
We want the IPv6 address in our machines to be derived from the IPv4 address - for example, 172.19.134.129 becomes 2620:101:f000:4903::129. (Yes, I am aware that 129 in decimal is not the same as 129 in hex. But it makes it easier to remember.)

We're going to create some custom scripts which inject an IPv6 address at startup:
<pre>
mkdir /etc/csc

# Here's a script to disable Router Advertisements (RA) and Duplicate Address Detection (DAD)
cat << 'EOF' > /etc/csc/ipv6-sysctl.sh
#!/bin/bash
set -ex
while read interface _; do
if [ $interface = lo ]; then
continue
fi
sysctl net.ipv6.conf.$interface.accept_ra=0
sysctl net.ipv6.conf.$interface.accept_dad=0
done < <(ip -brief link show)
EOF
chmod +x /etc/csc/ipv6-sysctl.sh

# Here's a script to derive the IPv6 address from the IPv4 address
cat << 'EOF' > /etc/csc/ipv6-addr.sh
#!/bin/bash
set -ex
INTERFACE=
IPV4_ADDRESS=
while read interface _ address; do
if ! echo $address | grep -q '^172\.19\.134\.'; then
continue
fi
INTERFACE=$interface
IPV4_ADDRESS=$address
break
done < <(ip -4 -brief addr show)
if [ -z "$INTERFACE" ]; then
echo "Could not find primary interface" >&2
exit 1
fi
NUM=$(echo $IPV4_ADDRESS | grep -oP '^172\.19\.134\.\K(\d+)')
IPV6_ADDRESS="2620:101:f000:4903::$NUM/64"
ip -6 addr add $IPV6_ADDRESS dev $INTERFACE
ip -6 route add default via 2620:101:f000:4903::1 dev $INTERFACE
EOF
chmod +x /etc/csc/ipv6-addr.sh

# Create some systemd services
cat <<EOF >/etc/systemd/system/csc-ipv6-sysctl.service
[Unit]
Description=Disable IPv6 RAs and DAD
# needed to avoid a dependency on basic.target
DefaultDependencies=no
After=network-pre.target
Before=networking.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/etc/csc/ipv6-sysctl.sh

[Install]
WantedBy=multi-user.target
EOF

cat <<EOF >/etc/systemd/system/csc-ipv6-addr.service
[Unit]
Description=Allocate IPv6 address
Requires=csc-ipv6-sysctl.service
After=csc-ipv6-sysctl.service
Requires=network.target
After=network.target

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/etc/csc/ipv6-addr.sh

[Install]
WantedBy=multi-user.target
EOF

# Enable the systemd services
systemctl daemon-reload
systemctl enable csc-ipv6-sysctl
systemctl enable csc-ipv6-addr
</pre>

=== dhclient ===
OPen /etc/dhcp/dhclient.conf and remove the following fields from 'request': domain-name, domain-name-servers, domain-search, dhcp6.name-servers, dhcp6.domain-search, dhcp6.fqdn, dhcp6.sntp-servers, ntp-servers

=== resolv.conf ===
<pre>
rm /etc/resolv.conf
cat <<EOF >/etc/resolv.conf
search csclub.uwaterloo.ca uwaterloo.ca
options rotate timeout:1 attempts:1 ndots:2

# CSC Nameservers
nameserver 2620:101:f000:4901:c5c::4
nameserver 2620:101:f000:7300:c5c::20
nameserver 129.97.134.4
nameserver 129.97.18.20

# IST Anycast (fallback)
#nameserver 129.97.2.1
#nameserver 129.97.2.2
EOF
</pre>

=== chrony ===
Open /etc/chrony/chrony.conf, comment out the 'pool' line, and add the following lines:
<pre>
#server ntp.csclub.uwaterloo.ca
server 129.97.167.12
#server ntp.student.cs.uwaterloo.ca
server 129.97.167.4
#server ntp.cs.uwaterloo.ca
server 129.97.15.14
#server ntp.cscf.uwaterloo.ca
server 129.97.15.15
</pre>

=== Mirrors ===
Open /etc/apt/sources.list and replace <code>deb.debian.org</code> by <code>mirror.csclub.uwaterloo.ca</code>. Also replace <code>security.debian.org</code> by <code>mirror.csclub.uwaterloo.ca</code>. Comment out the deb-src lines.

=== MOTD ===
Add a custom MOTD in /etc/motd. Make sure to thank our sponsors (MEF and CSCF).

=== sshd ===
Add/set the following line in /etc/ssh/sshd_config:
<pre>
PrintLastLog=no
</pre>

=== Reset cloud-init ===
We need to undo the work done by cloud-init:
<pre>
echo debian > /etc/hostname
cat <<EOF >/etc/hosts
127.0.0.1 localhost
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
EOF
cloud-init clean
</pre>

=== Cleanup ===
Try to leave as little trace as possible:
<pre>
apt clean

# Clear logs
rm -f /var/log/*.log
rm -f /var/log/syslog
rm -f /var/log/messages
journalctl --vacuum-size=1

# Clear history files
rm -f ~/.viminfo
rm -f ~/.bash_history
history -c
exit
# do this^ for the debian user too
</pre>

=== Create the template ===
Power off the VM from the CloudStack UI, and follow the instructions here: http://docs.cloudstack.apache.org/en/latest/adminguide/templates.html#creating-a-template-from-an-existing-virtual-machine. (You're basically converting the root disk into a template.)

After you create the template, click on it from the UI, go to 'Settings', and delete SSH.PublicKey.

== Ubuntu ==
Cloud image (replace release if necessary): https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64-disk-kvm.img

All of the instructions for Debian apply, except for the changes below.

=== systemd-networkd ===
Ubuntu uses systemd-networkd instead of ifupdown, so in the custom systemd services which we create, replace 'networking.service' by 'systemd-networkd.service'.

For some reason systemd-networkd thinks that it's OK to accept router advertisements <i>despite us explicitly disabling them at the kernel level</i>, so we need to add the following snippet to /etc/cloud/cloud.cfg:
<pre>
network:
version: 2
ethernets:
id0:
match:
name: en*
dhcp4: true
accept-ra: false
</pre>

While you're at it, add/set the following keys to /etc/cloud/cloud.cfg as well:
<pre>
apt_preserve_sources_list: true
manage_etc_hosts: true
</pre>
(These preserve our changes to /etc/apt/sources.list and /etc/hosts, respectively.)

=== systemd-timesyncd ===
Ubuntu uses systemd-timesyncd instead of chrony, so open /etc/systemd/timesyncd.conf and set the following:
<pre>
# ntp.csclub.uwaterloo.ca ntp.student.cs.uwaterloo.ca
NTP=129.97.167.12 129.97.167.4
# ntp.cs.uwaterloo.ca ntp.cscf.uwaterloo.ca
FallbackNTP=129.97.15.14 129.97.15.15
</pre>

=== Mirrors ===
Open /etc/apt/sources.list and replace 'zone1.clouds.archive.ubuntu.com' with 'mirror.csclub.uwaterloo.ca'. Also replace 'security.ubuntu.com' with 'mirror.csclub.uwaterloo.ca'.

=== MOTD ===
In addition to setting /etc/motd, disable some of these noisy MOTD headers:
<pre>
chmod 640 /etc/update-motd.d/00-header
chmod 640 /etc/update-motd.d/10-help-text
chmod 640 /etc/update-motd.d/50-landscape-sysinfo
chmod 640 /etc/update-motd.d/50-motd-news
chmod 640 /etc/update-motd.d/88-esm-announce
</pre>

=== Reset cloud-init ===
Follow the same instructions for Debian, but paste 'ubuntu' into /etc/hostname.

== CentOS Stream ==
Download one of the GenericCloud images from here: https://cloud.centos.org/centos/8-stream/x86_64/images/

<b>Warning</b>: I've noticed that the default user in CentOS Stream 9 is called 'cloud-user' instead of 'centos'.

All of the instructions for Debian apply, except for the changes below.

No text editor is installed, so you'll want to install vim/nano.

=== NetworkManager ===
CentOS uses NetworkManager instead of ifupdown, so replace 'networking.service' by 'NetworkManager.service' in our custom systemd services.

In csc-ipv6-addr.service, replace 'network.target' by 'network-online.target' (otherwise the IPv4 address will not have been assigned by the time our script runs).

cloud-init has trouble reading DHCP data from NetworkManager for some reason, so install dhclient instead and add this line to the <code>[Main]</code> section of /etc/NetworkManager/NetworkManager.conf:
<pre>
dhcp = dhclient
</pre>

Before you logout of the VM, make sure to also <code>rm -f /var/lib/NetworkManager/*</code> to get rid of stale dhclient lease files.

=== chrony ===
The file to edit is /etc/chrony.conf, not /etc/chrony/chrony.conf.

=== Mirrors ===
In /etc/yum.repos.d, for each .repo file, comment out the 'mirrorlist=' line and add e.g.
<pre>
baseurl=http://mirror.csclub.uwaterloo.ca/$contentdir/$stream/BaseOS/$basearch/os/
</pre>
Replace 'BaseOS' by the name of the repo. For the Extras repo, write 'extras' as the repo name.

=== cloud.cfg configuration ===
There is a bug in the cloud-init configuration which was fixed in RHEL 8.2 but the fix doesn't seem to have made it to CentOS Stream 8 (it may already be fixed in CentOS Stream 9). See [https://bugzilla.redhat.com/show_bug.cgi?id=1888761 here] and [https://bugzilla.redhat.com/show_bug.cgi?id=1963981 here].

In /etc/cloud/cloud.cfg, comment out the line 'ssh_genkeytypes: ~' and add this line:
<pre>
ssh_genkeytypes: ['rsa', 'ecdsa', 'ed25519']
</pre>
Also add the following to /etc/cloud/cloud.cfg:
<pre>
manage_etc_hosts: true
</pre>

=== Hosts configuration ===
Paste the following into /etc/hosts:
<pre>
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
</pre>
Paste 'localhost.localdomain' into /etc/hostname.

=== Cleanup ===
Run <code>dnf clean all</code> instead of <code>apt clean</code>.

== Fedora ==
All of the instructions for CentOS Stream apply, except for the changes below.

=== Mount the QEMU image ===
Unfortunately cloud-init completely failed when I tried to use the Fedora Cloud image (https://alt.fedoraproject.org/cloud/) on a CloudStack VM. So we're going to download the QEMU image and mount it over NBD (instructions: https://gist.github.com/shamil/62935d9b456a6f9877b5). Note that Fedora uses btrfs, so you'll need to run something like <code>mount -t btrfs /dev/nbd0p5 /mnt/fedora</code>.

Add <code>dhcp = dhclient</code> to the <code>[Main]</code> section of /etc/NetworkManager/NetworkManager.conf in the mounted filesystem. Unmount the filesystem, remove the NBD device, and move/copy the modified QEMU image to /var/www/csc-cloud-images. You should now be able to download the image from the CloudStack UI using the URL <nowiki>http://biloba.cloud.csclub.uwaterloo.ca/csc-cloud-images/<name_of_file>.</nowiki> Make sure to edit the iptables rules in the System Storage VM first (see [[#Limitations]]).

=== Mirrors ===
For each file in /etc/yum.repos.d, comment out 'metalink' and set 'baseurl' to use the CSC mirror (except for cisco-openh264). For example, fedora.repo should use http://mirror.csclub.uwaterloo.ca/fedora/linux/releases/35/Everything/x86_64/os/.

Past Executive

2022-05-20T05:36:43Z

R389li: Add S22

Data sources for this exec list have been: CSC records, MathNEWS.
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.

= Definitions =
#define PR President
#define VP Vice-president
#define TR Treasurer
#define SE Secretary
#define AV Assistant Vice-president
#define SA Sysadmin
#define OF Office Manager
#define LI Librarian
#define FL Flasher
#define DE Deity
#define WW Webmaster
#define SE-TR Secretary-Treasurer (Position was split)
#define FR Fridge Regent (Imapd)

<div style="float:right;margin-left: 1em;">__TOC__</div>

=Founding 1967=

Sponsor - J. Peter Sprung
PR: K. Rugger
VP: R. Jaques
SE-TR: G. Sutherland

Founding Members:
B. Kindree
R. Melen
V. Neglia
R. Charney
R. Truman
Glenn Berry
D. Meek

===Fall===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

Committee members: R. Stallwerthy, C. de Vries

=1968=

===Winter===

PR: Bill Kindred
VP: Rick Jacques
SE-TR: Graham Sutherland

===Fall===

SE-TR: Glenn Berry

=1969=

Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.

=1970=

===A note on ACM affiliation===

The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970

===Fall===

PR: Rick Beach
VP: Lee Santon
TR: Randy Melen
SE: Vic Neglia

=1971=

===Spring===

VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.

===Fall===

VP: James W. Welch

=1972=

It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.

===Winter===

PR: Mike Campbell
VP: Edgar Hew
SE-TR: Doug Lacy

There is also stuff from James W. Welch without a position.

===Fall===

PR: Ian McIntosh

=1973=

Faculty Sponsor: Morven Gentleman

===Winter===

SE: Douglas E. Lacy

===Spring===

PR: Jim Parry

===Fall===

PR: Jim Parry
VP: Ray Walden
TR: Slavko Stemberger
SE: Mario Festival

=1974=

===Fall===

PR: Russell Crook

=1975-1977=

Faculty Sponsor: Morven Gentleman??

Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.
Sylvia Eng: 1975/6 as some position.
Dave Buckingham: a VP at some point
Allison Nolan: 1977 time
Peter Stevens: 1977
Russel Crook???

Dennis Ritchie came. So did Jeffrey D. Ullman.

=1976=

===Fall===

Progcom: Peter Stevens

=1977=

===Winter===

Progcom: Allison Nowlan

===Spring===

PR: Peter Stevens
Progcom: Allison Nowlan

===Fall===

PR: Andrzej Jan Taramina
Progcom: Allison Nowlan

=1978=

===Winter===

PR: Peter Stevens

===Spring===

TR: K.G. Dykes
SE: Kandry Mutheardy

Brian Kernighan gave a talk this term. So did Ken Thompson.

===Fall===

=1979=

===Spring===

PR: Robert Biddle

=1987=

===Fall===

PR: Jim Boritz
VP: Ted Timar
TR: Gayla Boritz
SE: Edwin Hoogerbeets

=1988=

Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Rob*n Stewart did as an assignment in 1991-1992 for some class at UBC
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was our first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.

===Winter===
PR: Jim Boritz
(Source: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Fall===

SA: Wade Richards

=1989=

===Winter===

https://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg

Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ???

PR: Barry W. Smith
VP: Angela Chambers
TR:
SE: Sean Goggin
SA: Wade Richards / Ross Ridge

(President Kevin Smith confirmed: https://csclub.uwaterloo.ca/misc/procedure.pdf)

===Spring===

PR: Jim Thornton
VP: Gayla Boritz
TR: David Fenger
SE: Kivi Shapiro
SA: Reid Pinchback

Assistance to sysadmin: Jim Boritz.

===Fall===

PR: James Boritz
VP: Edmond Bourne
SA: Ross Ridge

=1990=

===Winter===

TR: Jim Thornton

===Spring===

TR: Karen Smith
SE: Rob*n Stewart
*Robyn/Robin signed her emails as Rob*n and requested to be listed as such on this page.

===Fall===
PR: Wade Richards
TR: Carolyn Duke
SE: Rob*n Stewart - attended mathsoc meeting on our behalf.
Kivi Shapiro - attended mathsoc meeting on our behalf.
- Censured by mathsoc for his actions during the election.
Shannon Mann - attended mathsoc meeting on our behalf.

=1991=

===Winter===
VP: Edmond Bourne
TR: Carolyn Duke
SE: Rob*n Stewart
Shannon Mann - attended mathsoc meeting on our behalf.

John McCarthy came this term.

===Spring===
TR: Rob Leitman
Jason Knell - attended mathsoc meeting on our and PMC's behalf.

===Fall===
TR: Mike Van Lingen
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.

=1992=

===Winter===
TR: Norm Ross
SE: Brent Williams

===Spring===
PR: Dale Wick
TR: Stephen A. Mills

===Fall===
TR: Mark Plumb

=1993=

===Winter===
TR: Rob Leitman
VP: Tim Prime
OF: Dave Ebbo
LI: Norm Ross

Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray

===Spring===
TR: Mark Tompsett

===Fall===

PR: Ian Goldberg

=1994=

===Winter===
PR: Ian Goldberg
TR: Mark Tompsett
SE: Tom Rathbourne
LI: Michael Van Biesbrouck
Norm Ross assisted with finances.

===Spring===
PR: Dale Wick (?)
TR: Steve Mills
SA: Ian Goldberg (?)
Norm Ross assisted with finances.

===Fall===
PR: Ross Ridge
VP: Tom Rathbourne (?)
TR: Rob Leitman
SA: Zygo Blaxell
LI: Michael Van Biesbrouck

=1995=

===Winter===
TR: Sharlene Schmeichel
Amy Brown and Rob Ridge purchased books.

===Spring===
TR: Steve Mills

===Fall===
PR: Amy Brown (arbrown)
VP: Christina Norman (cbnorman)
TR: Steven Mills (samills)
SE: Allyson Graham (akgraham)
SA: Gavin Peters

=1996=

===Winter===
PR: Nikita Borisov (nborisov)
VP: Joseph Deu Ngoc (dtdeungo)
TR: Stephen Mills (samills)
SE: Sharlene Schmeichel (saschmei)
SA: Dave Brown (dagbrown)
OF: Somsack Tsai (stsai)
LI: Devin Carless (dccarles)
FL: Allyson Graham (akgraham)
DE: Ian Goldberg (iagoldbe)

===Spring===
PR: Blake Winton (bwinton)
VP: Nick Harvey (njaharve)
TR: Nikita Borisov (nborisov)
SE: Viet-Trung Luu (vluu)
SA: Drew Hamilton (awhamilt)
OF: Jillian Arnott (jarnott)
LI: Ross Ridge (rridge)
FL: Devin Carless (dccarles)

=== Fall ===
PR: Shannon Mann (sjbmann)
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)
TR: Michal Van Biesbrouck (mlvanbie)
SE: Nikita Borisov (nborisov)
SA: Chris Rovers
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation
LI: Aliz Csenki (acsenki)
FL: Aaron Chmielowiec (archmiel)
DE: Skuld (no uwuserid yet...)

=1997=

===Winter===
PR: Dima Brodsky
VP: Nikita Borisov (nborisov)
TR: Stephen Mills (samills)
SE: Evan Jones (ejones)
SA: Alex Brodsky
OF: Chris Doherty
LI: Matt Corks
FL: Paul Prescod

=== Fall ===
PR: Chris Rovers (cdrovers)
VP: Michael van Biesbrouck (mlvanbie)
TR: Somsack Tsai (stsai)
SE: Matt Corks (mvcorks)
SA: Lennart Sorensen (lsorense)
LI: Chmielowiec (archmiel)
OF: Devin Carless (dccarles)
FL: Aaron Chmielowiec (archmiel)

= 1998 =

=== Winter ===
PR: Suresh Naidu
VP: Viet-Trung Luu
TR: Tim Coleman
SE: Dax Hutcheon
Librarian: Dax Hutcheon
Flasher: Dax Hutcheon
Webmaster: Dax Hutcheon
SA: Robin Powell
OF: Aaron Chmielowiec

=== Spring ===

Position Name You might call them...
President roconnor Russell O'Connor
Vice-president trwcolem Tim Coleman
Treasurer knzarysk Karl Zaryski
Secretary (bwinton) (Blake Winton)
Sysadmin wbiggs Billy Biggs
Librarian snaidu Suresh Naidu
Flasher pechrysl Paul Chrysler
Office Manager dccarles Devin Carless
WWWW trwcolem Tim Coleman

=== Fall ===

President Joe Deu Ngoc jtdeungo
Vice-President Wai Ling Yee wlyee
Treasurer Fjord j2lynn
Secretary Matt Corks mvcorks
Sysadmin Andrew Hamilton awhamilt

World Wide Web Wench Dax Hutcheon ddhutche
Office Manager Richard Bell rlbell
Librarian Damian Gryski dgryski
Flasher Paul Chrysler pechrysl
Official Deity Ian Goldberg iagoldbe
Official Chairbeing Calum T. Dalek calum

=1999=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:

=2000=

=== Winter ===
PR: Will Chartrand (wgchartr)
VP: Gavin Duggan (geduggan)
TR:
SE:
SA: Lennart Sorensen (lsorense)
OF:

=== Fall ===
PR: geduggan
VP:
TR:
SE:
SA: bioster
OF:

=2001=

=== Winter ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=== Spring ===
PR: geduggan
VP:
TR:
SE:
SA:
OF:

=2002=

https://web.archive.org/web/20130715012002/http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php

=== Winter ===
PR: Billy Biggs
VP: Stefanus Du Toit
TR: Melissa Basinger
SE: James Perry
SA: Barry Genova
Librarian: Ryan Golbeck
Webmaster: Jonathan Beverley
Office Manager: Sayan Li

=== Spring ===
PR: Alex Pop
VP: Melissa Basinger
TR: Siyan Li
SE: James A Morrison
SA: Jonathan Beverley
Webmaster: Stefanus Du Toit

=== Fall ===
PR: James A. Morrison
VP: Stefanus Du Toit
TR: James Perry
SE: Michael Biggs
SA: Ryan Golbeck
Librarian: Mark Sherry, Cassandra Schopf
Webmaster: Stefanus Du Toit

=2003=

=== Winter ===
PR: Kannan Vijayan (kvijayan)
VP: Meg Darragh (m2darrag)
TR: James Perry (jeperry)
SE: Wojciech Kosnik (wkosnik)
SA: Stefanus Du Toit (sjdutoit)
LI: Simon Law (sfllaw)
WM: Julie Lavoie (jlavoie)

===Fall===
PR: Stefanus Du Toit (sjdutoit)
VP: Meg Darragh (m2darrag)
TR: Tor Myklebust (tmyklebu)
SE: James Perry (jeperry)
SA: Simon Law (sfllaw)
OF:

=2004=

===Winter===
PR: Simon Law (sfllaw)
VP: fspacek
TR: ljain
SE: Julie Lavoie (jlavoie)
SA: Tor Myklebust(tmyklebu)
OF:

===Spring===
PR: dnmorton ?
VP: Tim Loach (tloach)
TR: Michael Biggs (mbiggs)
SE: Lesley Northam (lanortha)
SA:
OF:

===Fall ===
PR: jeperry
VP: mtsay
TR: Mark Sherry (mdsherry)
SE: Tor Myklebust (tmyklebu)
SA: jlavoie
OF:

=2005=

===Winter===

PR: mtsay
VP: Lesley Northam (lanortha)
TR: Holden Karau (hkarau)
SE: domorton
SA: Tor Myklebust (tmyklebu)
OF:

===Spring===

PR: Mark Sherry (mdsherry)
VP: Martin Kess (mdkess)
TR: Ali Piccioni (apiccion)
SE: Michael Biggs (mbiggs)
SA: Tor Myklebust (tmyklebu)
OF:

===Fall===

PR: Tim Loach (tloach)
VP: Lesley Northam (lanortha)
TR: Caelyn McAulay (cmcaulay)
SE: The Professor
SA: Holden Karau (hkarau)
OF:

=2006=

===Winter===

PR: Tor Myklebust (tmyklebu)
VP: Michael Druker (mdruker)
TR: Caelyn McAulay (cmcaulay)
SE: Mark Sherry (mdsherry)
SA: William O'Connor (woconnor)
OF:

===Spring===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: David Tenty (daltenty)
SE: Chris Evensen (cevensen)
SA: Holden Karau (hkarau)
OF:

===Fall===

PR: Martin Kess (mdkess)
VP: Mark Sherry (mdsherry)
TR: Sylvan L. Mably (slmably)
SE: Caelyn McAulay (cmcaulay)
SA: William O'Connor (woconnor)

=2007=

===Winter===
PR: David Bartley (dtbartle)
VP: David Belanger (dbelange)
TR: Caelyn McAulay (cmcaulay)
SE: David Tenty (daltenty)
SA: Holden Karau (hkarau)
Webmaster: jnopporn
OF:

===Spring===
PR: Gaelan D'costa (gdcosta)
VP: Kyle Larose (kmlarose)
TR: Kyle Spaans (kspaans)
SE: Erik Louie (elouie)
SA: Michael Spang (mspang)
Librarian: David Tenty (daltenty)
OF:

===Fall ===
PR: Holden Karau (hkarau)
VP: Alex McCausland (amccausl)
TR: Dominik Chlobowski (dchlobow)
SE: Sean Cumming (sgcummin)
SA: David Tenty (daltenty)
OF:
WW: dtbartle / jnopporn

=2008=

===Winter ===
PR: Sean Cumming (sgcummin)
VP: Matt Lawrence (m3lawren)
TR: Mateusz Tarkowski (mtarkows)
SE: Edgar Bering (ebering)
SA: Jordan Saunders (jmsaunde)
OF:

===Summer ===
PR: Brennan Taylor (b4taylor)
VP: Qifan Xi (qxi)
TR: Matt Lawrence (m3lawren)
SE: Nick Guenther (nguenthe)
SA:
OF:

===Fall ===
PR: Matthew Lawrence (m3lawren)
VP: Edgar Bering (ebering)
TR: Michael Gregson (mgregson)
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski
SA: Kyle Spaans (kspaans)
OF:

=2009=

===Winter===
PR: Michael Gregson (mgregson)
VP: Edgar Bering (ebering)
TR: Brennan Taylor (b4taylor)
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins)
SA: Jacob Parker (j3parker)
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)

===Spring ===
PR: Michael Spang (mspang)
VP: Jacob Parker (j3parker)
TR: Sapphyre Gervais (sagervai)
SE: Matthew McPherrin (mimcpher)
SA: Anthony Brennan (a2brenna)
OF:

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Michael Spang (mspang)
SE: Brennan Taylor (b4taylor)
SA: Michael Ellis (m2ellis)
OF: Rebecca Putinski (rjputins)

=2010=

===Winter===
PR: Kyle Spaans (kspaans)
VP: Edgar Bering (ebering)
TR: Sapphyre Gervais (sagervai)
SE: Ajnu Jacob (ajacob)
SA: Matthew Thiffault (mthiffau)
OF: Jacob Parker (j3parker)

Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr

===Spring===
PR: Jeff Cameron (j3camero)
VP: Brennan Taylor (b4taylor)
TR: Vardhan Mudunuru (vmudunur)
SE: Matthew Lawrence (m3lawren)
SA: Michael Ellis (m2ellis)
OF: Edgar Bering (ebering)

===Fall===
PR: Jacob Parker (j3parker)
VP: Edgar Bering (ebering)
TR: Rebecca Putinski (rjputins)
SE: Kyle Spaans (kspaans)
SA: Jeremy Roman (jbroman)
OF: Amir Sayed Khader (askhader)

=2011=

===Winter===
PR: Edgar Bering (ebering)
VP: Jennifer "Emily" Wong (jy2wong)
TR: Kyle Spaans (kspaans)
SE: Elana "Alana" Hashman (ehashman)
SA: Peter "Bofh" Barfuss (pbarfuss)
OF: Marc Burns (Marc Burns)

===Spring===
PR: Matthew Thiffault (mthiffau)
VP: Matthew McPherrin (mimcpher)
TR: Kyle Spaans (kspaans)
SE: Kwame Andrew Ansong (kansong)
SA: Jeremy Brandon Roman (jbroman)
OF: Jennifer "Emily" Wong (jy2wong)

===Fall===
PR: Marc Burns (m4burns)
VP: Katharine Hyatt (kshyatt)
TR: Jacob Parker (j3parker)
SE: Elana Hashman (ehashman)
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)
OF: Kyle Spaans (kspaans)
LIB: Edgar Bering (ebering)

=2012=

===Winter===
PR: Marc Burns (m4burns)
VP: Elana Hashman (ehashman)
TR: Jacob Parker (j3parker)
SE: Matthew McPherrin (mimcpher)
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: Jennifer "Emily" Wong (jy2wong)

===Summer===
PR: Anthony Brennan (a2brenna)
VP: Luqman Aden (laden)
TR: Matthew McPherrin (mimcpher)
SE: Elana Hashman (ehashman)
SA: Sarah Harvey (sharvey)
OF: Marc Burns (m4burns)
LIB: John Ladan (jladan)

===Fall===
PR: Marc Burns (m4burns)
VP: Salem Talha (satalha)
TR: Jennifer Wong (jy2wong)
SE: Elana Hashman (ehashman), resigned
SA: Jeremy Roman (jbroman)
OF: Luqman Aden (laden)
LIB: John Ladan (jladan)

=2013=

===Winter===
PR: Anthony Brennan (a2brenna)
VP: Marc Burns (m4burns)
TR: John Mumford (jsmumfor)
SE: Matt Olechnowicz (mgolechn)
SA: Sarah Harvey (sharvey)
OF: Bryan Coutts (b2coutts)
LIB: Matthew McPherrin (mimcpher)

===Spring===
PR: Shane Robert Creighton-Young (srcreigh)
VP: Visishta Vijayanand (vvijayan)
TR: Dominik Chlobowski (dchlobow)
SE: Youn Jin Kim (yj7kim)
SA: Anthony Brennan (a2brenna)
OF: Marc Burns (m4burns)
IMAPD: Dominik Chlobowski (dchlobow)

===Fall===
PR: Elana Hashman (ehashman)
VP: Marc Burns (m4burns)
TR: Dominik Chlobowski (dchlobow)
SE: Edward Lee (e45lee)
SA: Jeremy Roman (jbroman)
OF: Alexis Hunt (aechunt)

= 2014 =

=== Winter ===
PR: Bryan Coutts (b2coutts)
VP: Visishta Vijayanand (vvijayan)
TR: Marc Burns (m4burns)
SE: Mark Farrell (m4farrel)
SA: Murphy Berzish (mtrberzi)
OF: Nicholas Black (nablack)

=== Spring ===
PR: Youn Jin Kim (yj7kim)
VP: Luke Franceschini (l3france)
TR: Joseph Chouinard (jchouina)
SE: Ifaz Kabir (ikabir)
SA: Murphy Berzish (mtrberzi)
OF: Matthew Thiffault (mthiffau)

=== Fall ===
PR: Youn Jin Kim (yj7kim)
VP: Theodor Belaire (tbelaire)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Shane Robert Creighton-Young (srcreigh)
SA: Alexis Hunt (aechunt)
OF: Mark Farrell (m4farrel)
LIB: Gianni Leonardo Gambetti (glgambet)

= 2015 =

=== Winter ===
PR: Gianni Leonardo Gambetti (glgambet)
VP: Luke Franceschini (l3france)
TR: Edward Lee (e45lee)
SE: Patrick James Melanson (pj2melan)
SA: Murphy Berzish (mtrberzi)
OF: Shikhar Singh (s285sing)
LIB: Aishwarya Gupta (a72gupta)

=== Spring ===
PR: Luqman Aden (laden)
VP: Patrick Melanson (pj2melan)
TR: Jonathan Bailey (jj2baile)
SE: Keri Warr (kpwarr)
SA: Nik Black (nablack)
OF: Ilia Chtcherbakov (ischtche)
LIB: Yomna Nasser (ynasser)

=== Fall ===
PR: Simone Hu (ss2hu)
VP: Theo Belaire (tbelaire)
TR: Jordan Taylore Upiter (jtupiter)
SE: Daniel Marin (dmarin)
SA: Jordan Xavier Pryde (jxpryde)
OF: Ilia Chtcherbakov (ischtche)

= 2016 =

=== Winter ===
PR: Patrick Melanson (pj2melan)
VP: Patrick Melanson (pj2melan)
Acting VP, progcom chair: Theo Belaire (tbelaire)
TR: Luqman Aden (laden)
SE: Naomi Koo (m3koo)
SA: Zachary Seguin (ztseguin)
OF: Reila Zheng (wy2zheng)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

=== Spring ===
PR: Luqman Aden (laden)
VP: Melissa Angelica Mary Tedesco (matedesc)
TR: Jonathan Jerel Bailey (jj2baile)
SE: Aditya Shivam Kothari (askothar)
SA: Jordan Xavier Pryde (jxpryde)
OF: Zachary Seguin (ztseguin)
LI: Charlie Wang (s455wang)
FR: Marc Mailhot (mnmailho)

=== Fall ===
PR: Charlie Wang (s455wang)
VP: Bryan Coutts (b2coutts)
TR: Laura Song (lhsong)
SE: Uday Barar (ubarar)
SA: Zachary Seguin (ztseguin)
OF: Jamie Sinn (j2sinn)
LI: Felix Bauckholt (fbauckho)
FR: Ilia Chtcherbakov (ischtche)

= 2017 =

=== Winter ===
PR: Wilson Cheang (wyschean)
VP: Tristan Hume (tghume)
TR: Jordan Pryde (jxpryde)
SE: Amir Fata (aafata)
SA: Zachary Seguin (ztseguin)
OF: Felix Bauckholt (fbaukcho)
LI: Connor Murphy (cfmurph)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Felix Bauckholt (fbauckho)
VP: Zichuan Wei (z34wei)
TR: Laura Song (lhsong)
SE: Bo Mo (bzmo)
SA: Zachary Seguin (ztseguin)
OF: Uday Barar (ubarar)
LI: Patrick Melanson (pj2melan)
FR: Uday Barar (ubarar)

=== Fall ===

PR: Melissa Tedesco (matedesc)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
SE: Marc Mailhot (mnmailho)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Felix Bauckholt (fbauckho)
FR: Marc Mailhot (mnmailho)

= 2018 =

=== Winter ===

PR: Patrick Melanson (pj2melan)
VP: Charlie Wang (s455wang)
TR: Ashley Dewiputri Pranajaya (adpranaj)
SE: Arshia Mufti (a2mufti)
SA: Jordan Pryde (jxpryde)
OF: Zoë Laing (zlaing)
LI: Zichuan Wei (z34wei)
FR: Uday Barar (ubarar)

=== Spring ===

PR: Melissa Tedesco (matedesc)
VP: Dhruv Jauhar (djauhar)
TR: Tristan Hume (tghume)
AV: Marc Mailhot (mnmailho)
SA: Jennifer Zhou (c7zou)
OF: Aditya Thakral (a3thakra)
LI: Archer Zhang (z577zhan)
FR: Marc Mailhot (mnmailho)

=== Fall ===

PR: Zichuan Wei (z34wei)
VP: Uday Barar (ubarar)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Jennifer Zhou (c7zou)
OF: Alexander Zvorygin (azvorygi)
LI: Neil Parikh (n3parikh)
FR:

= 2019 =

=== Winter ===

PR: Marc Mailhot (mnmailho)
VP: Victor Brestoiu (vabresto)
TR: Tristan Hume (tghume)
AV: Aditya Thakral (a3thakra)
SA: Charlie Wang (s455wang)
OF: Archer Zhang (z577zhan)
LI: Rishabh Minocha (rkminoch)
FR: Marc Mailhot (mnmailho)

=== Spring ===

PR: Uday Barar (ubarar)
VP: Rajat Malhotra (r24malho)
TR: Raghav Sethi (r5sethi)
AV: Bo Mo (bzmo)
SA: Charlie Wang (s455wang)
OF: Hannah Wong (sm7wong)
LI: Nolan Munce (nmmunce)

=== Fall ===

PR: Dhruv Jauhar (djauhar)
VP: Aditya Thakral (a3thakra)
TR: Rishabh Minocha (rkminoch)
AV: Tammy Khalaf (tekhalaf)
SA: Murphy Berzish (mtrberzi)
OF: Zihan Zhang (z577zhan)
LI: Raghav Sethi (r5sethi)

= 2020 =

=== Winter ===
The office was closed midway through this term due to the COVID-19 pandemic.
The pandemic that threw the University and rest of the world into disarray
drove all CSC activity virtual. Though everyone thought the pandemic would
quickly be over, the Alpha, then Delta, then Omicron variants resulted in
the majority of classes being held online until February 2022. As a result,
the office would stay closed for a full 5 terms, and only reopen in W2022.

PR: Richard Shi (r27shi)
VP: Anastassia Gaikovaia (agaikova)
TR: Alex Tomala (actomala)
AV: Neil Parikh (n3parikh)
SA: Amin Bandali (abandali)
OF: Alexander Zvorygin (azvorygi)
LI: Anastassia Gaikovaia (agaikova)
FR: Richard Shi (r27shi)

=== Spring ===

PR: Neil Parikh (n3parikh)
VP: Anastassia Gaikovaia (agaikova)
SA: Amin Bandali (abandali)

=== Fall ===

PR: Mokai Xu (m92xu)
VP: Anastassia Gaikovaia (agaikova) (stepped down as of 2020-11-30)
TR: Neil Parikh (n3parikh)
AV: Edwin Yang (e37yang)
SA: Murphy Berzish (mtrberzi)

= 2021 =

=== Winter ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Nakul Vijhani (nvijhani)
SA: Max Erenberg (merenber)

=== Spring ===

PR: Kallen Tu (k4tu)
VP: Gordon Le (g2le)
TR: Neil Parikh (n3parikh)
AV: Ravindu Angammana (rbangamm)
SA: Max Erenberg (merenber)

=== Fall ===

PR: Dora Su (d43su)
VP: Jason Sang (jzsang)
TR: Yanni Wang (y3859wan)
AV: Anjing Li (a348li)
SA: Max Erenberg (merenber)
Advising: Neil Parikh (n3parikh)

= 2022 =

=== Winter ===

PR: Juthika Hoque (j3hoque)
VP: Eric Huang (e48huang)
TR: Eden Chan (e223chan)
AV: Dina Orucevic (dmorucev)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Neil Parikh (n3parikh)

=== Spring ===

PR: Eden Chan (e223chan)
VP: Bonnie Peng (b38peng)
TR: Sat Arora (s97arora)
AV: Haley Song (h79song)
SA: Raymond Li (r389li)
WW: Amy Wang (a258wang)
OF: Sat Arora (s97arora)

Club Hosting

2022-05-04T00:52:47Z

R389li:

The Computer Science Club provides web hosting to other clubs free of charge. We host many club web sites. If you have a question about our hosting service, contact syscom at csclub dot uwaterloo dot ca or visit our office in MC 3036.

== Hosting Features ==

* 4 GB web space
* Scripting
** PHP (mod_fcgid)
** Perl (https://wiki.csclub.uwaterloo.ca/Web_Hosting#Dynamic_Sites)
** Python (https://wiki.csclub.uwaterloo.ca/Web_Hosting#Dynamic_Sites)
*** Django (https://wiki.csclub.uwaterloo.ca/Web_Hosting#Dynamic_Sites)
** Ruby (https://wiki.csclub.uwaterloo.ca/Web_Hosting#Dynamic_Sites)
* Databases
** [[MySQL]]

This is not an exhaustive list. Contact us if you want something not listed or installed.

== Getting Hosted ==

To get hosted, you need a '''club account''' and one '''user account''' for each person who will be updating the club's web site or other files.

The general process to get yourself an account on our systems to host your club website is:

1. Request a free club account on the CSC systems by emailing syscom@csclub.uwaterloo.ca from an official club email (an official club email is one that is posted on your website or Facebook page, for example). Something along the lines of "I am from the ActSci club and am the current webmaster. Can I be registered for a club account to access the ActSci website?" Include the WatIAM userids (Quest ID) of any club reps that should be authorized to manage the club account in your email.

2. For each club rep that needs access, an email needs to be sent to syscom with the following information, if they don't already have a CSC account:

* a scan or photograph copy of the rep's WatCard,
* their WatIAM userid, and
* their acknowledgement of having read, understood, and agreeing with our Machine Usage Agreement.

These can be sent in one email or separately.

3. Once syscom receives these, the users will be given permission to access your club website by adding you to your corresponding club group (for example, the actsci user group).

=== Club Account ===

Each club we host has a "club account" that owns and stores club resources. You can request a club account via email or in person. The club account:

* Is named after the club, possibly abbreviated.
* Has a home directory named /users/clubname, where club files are stored.
* Is not permitted to log in. You must use your own user account to login.

The Systems Committee will create club accounts when sent a request from the club's email address to syscom@csclub.uwaterloo.ca. Verification of the club's university affiliation may be required, for instance by contacting the Federation of Students or the club's faculty advisor.

=== User Accounts ===

Each user who needs access to the club account must have his/her own user account on our machines. There are two ways to get an account:

* Become a member of the Computer Science Club. Membership is $2.00 per term.
* Request a free "club representative" account. These accounts are to be used solely for managing the club account, and expire at the end of the term.

Club representatives can request renewal of their free accounts (for one or more terms) if they still need the account to manage the club account in future terms.

Your user account must also be authorized to change club files. Each club has a "club group" whose members may update the clubs files. We add (and remove) users to the group when we are asked to do so by the club exec. The exec must email the Systems Committee (syscom@csclub.uwaterloo.ca) from a club email address.

Any office staff member may create and renew both member and club representative accounts using [[ceo]]. Only Systems Committee members may modify club access lists.

== Accessing Club Resources ==

At this point, you have a user account and a club account, and need to get started with your web site. Before you can do anything, you need to log into our machines somehow.

=== Shell Access ===

To gain shell access to your site, you can:

* Log in using a terminal in the office
* Log in from anywhere using SSH. We discourage SSH'ing into our web server (caffeine), you should use a different general-use machine (like corn-syrup.csclub.uwaterloo.ca)

The club's files are stored in /users/clubname.

If you want, you can become the club user by typing "become_club clubname". This is not usually necessary, as the permissions should allow you to make changes as yourself.

=== SFTP File Access ===

You may access files stored on our servers, or upload new ones, via SFTP and SCP. If you are a Windows user you should use [http://winscp.net/ WinSCP] or a similar client with SFTP/SCP abilities. If you are using OS X you can use the sftp or scp Terminal commands, or you can install a graphical client such as [http://cyberduck.ch/ Cyberduck]. Similarly on GNU/Linux you can use the shell commands or a graphical client such as gftp.

== Services ==

=== Web Hosting ===

See [[Web Hosting]].

=== Databases ===

See [[MySQL]].

You can create a MySQL database yourself through [[ceo]] by following [[MySQL#Using_ceo|these instructions]].

[[Category:Services]]

Machine List

2022-04-28T21:49:13Z

R389li: /* mathnews */

Most of our machines are in the E7, F7, G7 and H7 racks (as of Jan. 2022) in the MC 3015 server room. There is an additional rack in the DC 3558 machine room on the third floor. Our office terminals are in the CSC office, in MC 3036/3037.

= Web Server =
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.

== ''caffeine'' ==

Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.

==== Specs ====

* currently a virtual machine hosted on phosphoric-acid
** 12 vCPUs
** 32GB of RAM

==== Services ====

* Club and member web sites with [[Apache]]
* [[MySQL]] databases
* [[PostgreSQL]] databases
* [[ceo]] daemon
* mail was migrated to [[#mail|mail]]

= General-Use Servers =

These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no cryptocurrency mining).

For computationally-intensive jobs (CPU/memory bound) we recommend running on high-fructose-corn-syrup, carbonated-water, sorbitol, mannitol, or corn-syrup, listed in roughly decreasing order of available resources. For low-intensity interactive jobs, such as IRC clients, we recommend running on neotame. If you have a long-running computationally intensive job, it's good to nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.

== ''corn-syrup'' ==

PowerEdge 2950

==== Specs ====

* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)
* 32 GB RAM
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29
* IPMI mac addr 00:24:e8:52:41:2b
* 3 × Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)

==== Notes ====

* Use eth0/Gb0 for the mathstudentorgsnet connection
* has ipmi on corn-syrup-ipmi.csclub.uwaterloo.ca.

==== Services ====

* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)

== ''high-fructose-corn-syrup'' ==

High-fructose-corn-syrup (or hfcs) is a large SuperMicro server. It's been in CSC service since April 2012.

==== Specs ====

* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)
* 192 GB RAM
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]
* 500 GB Seagate Barracuda
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]

== ''carbonated-water'' ==

carbonated-water is a Dell R815 provided by CSCF.

==== Specs ====

* 4x AMD Opteron 6176 processors (2.3 GHz, 12 cores each)
* 128GB RAM

== ''neotame'' ==

neotame is a SuperMicro server funded by MEF. It is the successor to taurine.

We discourage running computationally-intensive jobs on neotame as many users run interactive applications such as IRC clients on it and any significant service degradation will be more likely to affect other users (who will probably notice right away).

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM
* SSH server also listens on ports 21, 22, 53, 80, 81, 443, 8000, 8080 for your convenience.

== ''sorbitol'' ==

sorbitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM

== ''mannitol'' ==

mannitol is a SuperMicro server funded by MEF.

==== Specs ====

* 2x Intel Xeon E5-2630 processors (2.2 GHz, 10 cores/20 threads each)
* 64GB RAM

= Office Terminals =

It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.

== ''bit-shifter'' ==

bit-shifter is an office terminal.

==== Specs ====

* Intel(R) Core(TM)2 Quad CPU Q8300
* 4GB RAM
* Nvidia GeForce GT 440
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD
* Jacob Parker's Firewire Card

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''gwem'' ==

gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.

=== Specs ===

* AMD FX-8150 3.6GHz 8-Core CPU
* 16 GB RAM
* AMD Radeon 6870 HD 1GB GPU
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

== ''maltodextrin'' ==
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.

==== Specs ====

* Intel Core i3-4130 @ 3.40 GHz
* 8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''natural-flavours'' ==

Natural-flavours is an office terminal; it used to be our mirror.

In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.

==== Specs ====

* Intel Core i7-6700k
* 2x8GB RAM
* 1x 64GB SanDisk SDSSDP064G SSD
* Cup Holder (DVD drive has power, but not connected to mother board)

== ''strombola''==
It is named after Gordon Strombola.

==== Specs ====
* Intel Core2 Quad Q8200 @ 2.33GHz
* 4 GB RAM
* nVidia GeForce 8600 GTS
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 64GB SanDisk SDSSDP064G SSD

==== Speakers ====
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.

== ''nullsleep'' ==

nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.

==== Specs ====

* Intel® Dual Core Atom™ 330
* 2GB RAM
* NVIDIA® ION™ graphics
* 1x 64GB SanDisk SDSSDP064G SSD
* DVD Burner

==== Speakers ====
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.

==== Services ====
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.
Music is located in /music on the office terminals

= Progcom Only =
The Programme Committee has access to a VM on corn-syrup called 'progcom'. They have sudo rights in this VM so they may install and run their own software inside it. This VM should only be accessible by members of progcom or syscom.

= Syscom Only =

The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.

== ''xylitol'' ==

xylitol is a Dell PowerEdge R815 donated by CSCF. It is primarily a container host for services previously hosted on aspartame and dextrose, including munin, rt, mathnews, auth1, and dns1. It was provisioned with the intent to replace both of those hosts.

==== Specs ====

* Dual AMD Opteron 6176 (2.3 GHz, 48 cores total)
* 128GB RAM
* 500GB volume group on RAID1 SSD (xylitol-mirrored)
* 500ish-GB volume group on RAID10 HDD (xylitol-raidten)

== ''auth1'' ==

Container on [[#xylitol|xylitol]].

==== Services ====

* [[LDAP]] primary
* [[Kerberos]] primary

== ''chat'' ==

Container on [[#xylitol|xylitol]].

==== Services ====

* The Lounge web IRC client (https://chat.csclub.uwaterloo.ca)

== ''phosphoric-acid'' ==

phosphoric-acid is a Dell PowerEdge R815 donated by CSCF and is a clone of xylitol. It may be used to provide redundant cloud services in the future.

==== Specs ====
==== Services ====

* [[#caffeine|caffeine]]
* [[#coffee|coffee]]

== ''coffee'' ==

Virtual machine running on phosphoric-acid.

==== Services ====

* [[Database#MySQL|MySQL]]
* [[Database#Postgres|Postgres]]

== ''cobalamin'' ==

Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.

==== Specs ====

* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)
* 16GB RAM
* Broadcom NetworkXtreme II
* 2x73GB Hard Drives, hardware RAID1
** Soon to be 2x1TB in MegaRAID1
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration

==== Services ====

* Containers: [[#auth2|auth2]]

==== Notes ====

* The network card requires non-free drivers. Be sure to use an installation disc with non-free.

* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:

** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248

* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.

== ''auth2'' ==

Container on [[#cobalamin|cobalamin]].

==== Services ====

* [[LDAP]] secondary
* [[Kerberos]] secondary

MAC Address: c2:c0:00:00:00:a2

== ''mail'' ==

mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#biloba|biloba]]

==== Services ====

* [[Mail]] services
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])
* [[Webmail]]
* [[ceo]] daemon

== ''sodium-benzoate'' ==

Sodium-benzoate is our previous mirror server, funded by MEF.

It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.

==== Specs ====

* Intel Xeon Quad Core E5405 @ 2.00 GHz
* 16GB RAM
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)

Space disks are currently in the office underneath maltodextrin.

== ''potassium-benzoate'' ==

potassium-benzoate is our mirror server, funded by MEF.

==== Specs ====

* 36 drive Supermicro chassis (SSG-6048R-E1CR36L)
* 1 x Intel Xeon E5-2630 (8 cores, 2.40 GHz)
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM
* 2 x 1 TB Samsung Evo 850 SSD drives
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)
* 10 Gbps SFP+ card (loaned from CSCF)
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)

==== Network Connections ====

potassium-benzoate has two connections to our network:

* 1 Gbps to our switch (used for management)
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)

Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.

==== Services ====

* [[Mirror]]
* [[Talks]] mirror
* [[Debian_Repository|CSClub packages repository]]

== ''munin'' ==

munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#xylitol|xylitol]]

==== Services ====

* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon

== ''yerba-mate'' ==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 Hz quad core Intel Xeon 5160
* 32GB RAM
* 2x75GB 15k drives (RAID 1)

==== Services ====

* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)
* mattermost (under development)
* shibboleth (under development)

Also used for experimenting new CSC services.

= Cloud =

These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.

== ''chamomile'' ==

A Dell PowerEdge R815 provided by CSCF.

==== Specs ====

* 4x 2.20GHz 12-core processors
* 128GB RAM
* 10GbE connection to core router

==== Services ====

* OpenStack primary controller services for csclub.cloud

== ''riboflavin'' ==

A Dell PowerEdge R515 provided by CSCF.

==== Specs ====

* 2x 2.6 GHz 8-core processors
* 64GB RAM
* 10GbE connection to core router
* 2x 500GB internal SSD
* 12x Seagate 4TB SSHD

==== Services ====

* OpenStack block and object storage for csclub.cloud

== ''guayusa'' ==

A Dell PowerEdge 2950 donated by a CSC member.

==== Specs ====

* 2x 3.00 GHz quad core Intel Xeon 5160
* 32GB RAM
* 2TB PCI-Express Flash SSD
* 2x75GB 15k drives (RAID 1)

==== Services ====

Currently in use for experimenting new CSC services.

* logstash (testing of logstash)
* load-balancer-01
* cifs (for booting ginkgo from CD)
* caffeine-01 (testing of multi-node caffeine)
* block1.cloud
* object1.cloud

== ''ginkgo'' ==

Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.

==== Specs ====

* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]
* 256GB RAM
* 2 x 1.2 TB SSD (400GB of each for RAID 1)
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)

==== Services ====

* OpenStack Compute machine

No longer in use:

* controller1.cloud
* db1.cloud
* router1.cloud (NAT for cloud tenant network)
* network1.cloud

== ''biloba'' ==

Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558.

==== Specs ====

* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]
* 384GB RAM
* 12 3.5" Hot Swap Drive Bays
** 2 x 480 GB SSD
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)

==== Services ====

* OpenStack Compute machine

No longer in use:

* caffeine
* mail
* mattermost

= Storage =

== ''fs00'' ==

fs00 is a NetApp FAS3040 series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

== ''fs01'' ==

fs01 is a NetApp FAS3040 series fileserver donated by CSCF.

It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.

==== Specs ====

= Other =

== ''goto80'' ==

This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located in the office on the top shelf above strombola.

==== Specs ====

* 500 MHz Feroceon (ARM926ej-s compatible) processor
* ARMv5TEJ architecture

Use -march=armv5te -mtune=arm926ej-s options to GCC.

For information on the TS-7800's hardware see here:
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800

== ''binaerpilot'' ==

This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''anamanaguchi'' ==

This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''digital cutter'' ==

See [[Digital Cutter|here]].

== ''mathnews'' ==

[[#xylitol|xylitol]] hosts a systemd-nspawn container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.

= Decommissioned =

== ''aspartame'' ==

aspartame was a taurine clone donated by CSCF. It was once our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. Decomissioned in March 2021 after refusing to boot following a power outage.

== ''psilodump'' ==

psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, hosted disk shelves exported as iSCSI block devices.

psilodump was plugged into aspartame. It's still installed but inaccessible.

== ''phlogiston'' ==

phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, hosted disk shelves exported as iSCSI block devices.

phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 10GB RAM

==== Notes from before decommissioning ====

* The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.

== ''glomag'' ==

Glomag hosted [[#caffeine|caffeine]]. Decommissioned April 6, 2018.

==== Specs ====

* Intel Xeon X3450 @ 2.67 GHz
* 6 GB RAM
* vg0: 465 GB software RAID1 (contains root partition):
** 750 GB Seagate Barracuda SATA hard drive
** 500 GB Western-Digital Caviar Blue SATA hard drive
* vg1: 596 GB software RAID1 (contains caffeine):
** 2 × 640 GB Western-Digital Caviar Blue SATA hard drive

==== Services ====

* Before its decommissioning, glomag hosted [[#caffeine|caffeine]], [[#mail|mail]], and [[#munin|munin]] as [[Virtualization#Linux_Container|Linux containers]]

== ''Lisp machine'' ==

A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.

http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.

==== Specs ====

Currently inoperable due to (at least) a missing console cable.

== ''ginseng'' ==

Ginseng used to be our fileserver, before aspartame and the netapp took over.

==== Specs ====

* Intel Pentium Dual Core E2180
* 8GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]
* 4 × 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].
[[Category:Hardware]]

== ''calum'' ==

Calum used to be our main server and was named after Calum T Dalek. Purchased new by the club in 1994.

==== Specs ====

* SPARCserver 10 (headless SPARCstation 10)

== ''paza'' ==

An iMac G3 that was used as a dumb terminal.

==== Specs ====

* 233Mhz PowerPC 740/750
* 96 MB RAM

== ''romana'' ==

Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.

Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.

==== Specs ====

* 2 PowerPC based processors
* Stylish Blinken processor-load lights

== ''sodium-citrate'' ==

Sodium-citrate was an SGI O2 machine.

In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.

==== Specs ====
* SGI O2 MIPS processor
* 423 MB (?) RAM
* 2 × 2 GB hard drive

== ''acesulfame-potassium'' ==

An old office terminal.

==== Specs ====
* Intel Pentium 4 2.67GHz
* 1GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard
* ATI Radeon 7000

== ''skynet'' ==

skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.

==== Specs ====

* 15 full CPU/memory boards
** 2x UltraSPARC II 464MHz / 8MB Cache Processors
** ??? RAM?
* 1 I/O board (type=???)
** ???x disks?
* 1 CD-ROM drive

* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]
* [http://www.e6500.com/ e6500]

== ''freebsd'' ==

FreeBSD was a virtual machine with FreeBSD installed.

==== Services ====

* Newer software

== ''rainbowdragoneyes'' ==

Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.

==== Specs ====

* 800MHz MIPS Loongson 2f CPU

== ''denardo'' ==

Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.

==== Specs ====

* Sun Fire V210
* TI UltraSparc IIIi (Jalapeño)
* 2 GB RAM
* 160 GB RAID array
* ALOM on denardo-alom.csclub can be used to power machine on/off

== ''artificial-flavours'' ==

Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).

==== Specs ====

* Intel Celeron 3.2GHz
* 2GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard
* Western-Digital 80 GB ATA hard drive

== ''potassium-citrate'' ==

Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.

It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).

==== Specs ====
* Alphaserver CS20 (2 833MHz EV68al CPUs)
* 512MB RAM
* 36 GB Seagate SCSI hard drive

== ''potassium-nitrate'' ==

This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).

The name is from saltpetre, because sparks.

==== Specs ====

* 24 CPUs
* 90GB main memory
* 400GB scratch disk local storage in /scratch-potassium-nitrate

There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.

See also [[Sun 2900]].

== ''taurine'' ==

'''Note: On August 21, 2019, just before 2:30PM EDT, we were informed that taurine caught fire'''. As a result, taurine has been decommissioned as of Fall 2019.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 8GB RAM
* 136 GB LVM volume group

==== Services ====

* Virtual machines
* BitlBee IRC instant messaging gateway (localhost only)
* [[ident]] server to maintain high connection cap to freenode
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

== ''dextrose'' ==

dextrose was a [[#taurine|taurine]] clone donated by CSCF and was decommissioned in Fall 2019 after being replaced with a more powerful server.

== ''sucrose'' ==

sucrose was a [[#taurine|taurine]] clone donated by CSCF. It was decommissioned in Fall 2019 following multiple hardware failures.

= UPS =

All of the machines in the MC 3015 machine room are connected to one of our UPSs.

All of our UPSs can be monitored via CSCF:

* MC3015-UPS-B2
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)

We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].

TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.

Web Hosting

2022-04-12T21:33:14Z

R389li: /* ***NOTICE*** */ typo

The CSC offers web hosting for [[Club Hosting|clubs]] and [http://csclub.uwaterloo.ca/about/ our members] in accordance with our [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. This is a quick guide for the kinds of hosting we offer on our webserver, <tt>csclub.uwaterloo.ca</tt>, also known as [[Machine List#caffeine|caffeine]].

We run an Apache httpd webserver and we offer you the use of a [[MySQL|MySQL database]].

== What can I host on my website? ==

Web hosting is provided in accordance with the CSC [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. As a reminder, you are '''not permitted''' to host any of the following:

* '''Ads.''' Advertisements are not permitted because using our machines for commercial purposes is forbidden by university policy.
* '''Your start-up's website.''' Again, commercial use of our hosting is not permitted.
* '''Unauthorized copyrighted materials.''' Violating the law is a violation of our Machine Usage Agreement.

Please note that '''this is not an exhaustive list. Websites may be taken down ''without notice''''' at the discretion of the Systems Committee. (We will always let you know that we took your site down, but if it is breaking our shared environment, we can't provide an advance warning.)

Some great examples of things members host on our webserver:

* Academic projects!
* A personal website or blog!
* [[Club Hosting|Club websites!]]

== How do I make a website? ==

If this is your first time making a website, this section may be useful to you.

To build your website, CS Club suggests you use http://blog.getpelican.com/ (Python) or https://jekyllrb.com/ (Ruby). They generate static sites and are faster, simpler and more secure than CMSs like WordPress (dynamic and written in PHP) for small sites. We routinely disable WordPress sites that are more than a few weeks out of date (or if a critical security flaw is disclosed).

You can transfer files to the CS Club via SFTP If you run Windows use https://winscp.net/eng/index.php, if you use OS X use https://cyberduck.io/?l=en, and Linux users can directly access SFTP by using ssh:// urls in their GUI file managers. You can use SSH for direct shell access, just run <tt>ssh ctdalek@corn-syrup.csclub.uwaterloo.ca</tt> or look at https://wiki.csclub.uwaterloo.ca/Machine_List for our other machines. Please do not connect to caffeine (the actual web server) unless you need to debug code. You can also just create your site on our servers or in our office to avoid having to shuffle files around. Your home directory is distributed everywhere via NFS. Bonus points if you use Git to sync your own computer with our servers, if you do this we recommend using git.uwaterloo.ca as your upstream repository.

If you need help, email <tt>syscom@csclub.uwaterloo.ca[mailto:syscom@csclub.uwaterloo.ca]</tt> or come to the CS Club office on the MC 3rd floor across from the Mathsoc CnD.

== DNS and Your Domain Name ==

You can serve files without any additional configuration by placing them in your <tt>www</tt> directory and accessing them at <tt>http://csclub.uwaterloo.ca/~userid</tt>, where <tt>userid</tt> is your CSC user ID. However, many of our members and clubs prefer to use a custom domain name.

Note that this means you ''do not'' have to register a domain name to be able to use our services. You can just put a website at <tt>http://csclub.uwaterloo.ca/~userid</tt>.

=== uwaterloo.ca domain Names ===

If you represent a UWaterloo organization, you may be eligible for a custom <tt>uwaterloo.ca</tt> domain name, such as <tt>csclub.uwaterloo.ca</tt>. We can request this on your behalf.

In order to do so, we must have verified that the organization is a legitimate UWaterloo-affiliated group, and that you, the representative, are authorized to request a domain name on their behalf. This all takes place when you request [[Club Hosting|club hosting]] with the Computer Science Club.

Once you register as a club representative of your particular organization, you can send an email from your official club account to syscom@csclub.uwaterloo.ca to request the domain <tt>yourdomain.uwaterloo.ca</tt>. Assuming it is available, we will file a ticket and request the domain in your name.

=== Your personal domain name ===

These virtual hosts must be approved by the Executive and Systems Committee. If interested, send syscom@csclub.uwaterloo.ca an email. If your request is approved, the Systems Committee will direct you to create a CNAME record for your domain and point it at <tt>csclub.uwaterloo.ca</tt>.

If you are interested in receiving mail or having other records on your domain, the apex of your domain cannot be a CNAME. If this is the case, then your domain should contain an "A" record of <tt>129.97.134.17</tt> and a (optional, but recommended) "AAAA" record of <tt>2620:101:f000:4901:c5c::caff:e12e</tt>.

If you want TLS on your personal domain, mention this in your email to syscom (syscom: see [[SSL#letsencrypt]]).

== Static Sites ==

You can place all your static content into your web directory, <tt>/users/userid/www</tt>.

If you have been approved for a virtual host, you can access this content using your personal domain once the Systems Committee makes the appropriate configuration changes. Here is an example configuration file:

<VirtualHost *:80>
ServerName foobar.uwaterloo.ca
ServerAlias *.foobar.uwaterloo.ca foobar
ServerAdmin your@email.here.tld

DocumentRoot /users/userid/www/

ErrorLog /var/log/apache2/luser-userid-error.log
CustomLog /var/log/apache2/luser-userid-access.log combined
</VirtualHost>

== Dynamic Sites ==

If you require use of a database, we offer you the sole choice of MySQL. See [[MySQL|this guide]] for how to create your database and connect to MySQL.

=== ***NOTICE*** ===

We '''STRONGLY''' discourage the use of content management systems such as
WordPress. These packages are notorious for the number of security
vulnerabilities they contain and pose a threat to our systems if they are not
kept up to date. The Systems Committee '''WILL,''' at its discretion, disable
any website using a package such as WordPress that is not updated to the latest
version or that is found to contain exploitable security flaws. In such a case,
the member or club serving that site will be notified of the termination; the
site will not be re-enabled until the issues are addressed.

When pages are parked, access to them is restricted to on-campus IPs, so you can still fix your page, but anyone off-campus will not be able to access it, and will be shown this page instead: [https://csclub.uwaterloo.ca/~sysadmin/insecure/ https://csclub.uwaterloo.ca/~sysadmin/insecure/].

=== Using PHP ===

Because we use Apache, it's as simple as placing your <tt>index.php</tt> file in your <tt>/users/userid/www</tt>. That's it!

You can even include rewrite rules in an <tt>.htaccess</tt> file in your web directory.

=== Reverse Proxy (Python, Ruby, Perl, etc.) ===

(In progress... Cliff Notes below)

If computationally expensive, please run the server on a general-use server and proxy to Caffeine.

If Python, (1) use a [http://docs.python-guide.org/en/latest/dev/virtualenvs/ virtual environment] (2) host your app (within the virtualenv) with [http://gunicorn.org/ Gunicorn] on a high port (but campus firewalled, i.e. NOT Ports 28000-28500).

If Ruby (Note, I've never used Ruby so take this with a grain of salt), use [http://unicorn.bogomips.org/ Unicorn] in the same way.

==== .htaccess Config ====

Put the following in the appropriate .htaccess file (e.g. if you were running your app at ~ctdalek/python-app, put the .htaccess in ~ctdalek/www/python-app alongside the static files). Replace HOST with localhost if running on Caffeine or the hostname if running elsewhere; replace port with your chosen port number.

<pre>
RewriteEngine On

# If you want websockets, uncomment this:
#RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
#RewriteCond %{HTTP:CONNECTION} ^Upgrade$ [NC]
#RewriteRule .* ws://HOST:RANDOM_PORT%{REQUEST_URI} [L,P]

RewriteCond %{SCRIPT_FILENAME} !-d
RewriteCond %{SCRIPT_FILENAME} !-f
RewriteRule "index.html" "http://HOST:RANDOM_PORT/" [P]

RewriteCond %{SCRIPT_FILENAME} !-d
RewriteCond %{SCRIPT_FILENAME} !-f
RewriteRule "^(.*)$" "http://HOST:RANDOM_PORT/$1" [P]
</pre>

== Requiring Authentication ==

You can require users to authenticate through the University's Central Authentication System (CAS) by adding the following contents to your .htaccess configuration file:

<pre>
AuthType CAS
Require valid-user
</pre>

You can replace <pre>Require valid-user</pre> with <pre>Require user ctdalek</pre> to restrict to specific users. See https://doubledoublesecurity.ca/uw/cas/user.html for more information.

== Syscom ==

=== Disabling insecure or infringing sites ===

To disable a webspace that has known security vulnerabilities add the following snippet to `/etc/apache2/conf-available/disable-vuln-site.conf`. This rewrites all accesses of the directory or its children to the given file. Note that our disable page always returns HTTP status code 503 (Service Unavailable).

<Directory /users/$BADUSER/www>
AllowOverride None
Redirect 503 /
ErrorDocument 503 /~sysadmin/insecure/index.html
</Directory>

For infringing sites:

<Directory "/users/$BADUSER/www/infringing-directory">
AllowOverride None
Redirect 503 /
ErrorDocument 503 /~sysadmin/infringing/index.html
</Directory>

For club domains (e.g. club1.uwaterloo.ca), redirect to the CSC domain instead:

<Directory "/users/$BADCLUB/www">
AllowOverride None
RewriteEngine On
RewriteRule . %{REQUEST_SCHEME}://csclub.uwaterloo.ca/~sysadmin/insecure/index.php [L,P]
</Directory>

=== Expired Websites ===

There is a cron job running hourly on caffeine which disables expired member's websites (and re-enables them when they've renewed their membership).

The script is here: https://git.csclub.uwaterloo.ca/public/expire-sites

Some highlights:

* The script provides a 1-month grace period (corresponding to the grace period of pam-csc)
* The expired page returns HTTP status code of 503 (Service Unavailable)

=== Sample Apache config for website with both a custom domain and a UW subdomain ===

Define ENTITY_NAME pmclub
Define CUSTOM_DOMAIN puremath.club
Define UW_SUBDOMAIN ${ENTITY_NAME}.uwaterloo.ca
Define ADMIN_EMAIL ${ENTITY_NAME}@csclub.uwaterloo.ca
Define ENTITY_HOME https://csclub.uwaterloo.ca/~${ENTITY_NAME}

Define APACHE_LOG_DIR /var/log/apache2
Define ERROR_LOG ${APACHE_LOG_DIR}/${ENTITY_NAME}-error.log
Define CUSTOM_LOG "${APACHE_LOG_DIR}/${ENTITY_NAME}-access.log combined"

<VirtualHost *:80>
ServerName ${CUSTOM_DOMAIN}
ServerAlias *.${CUSTOM_DOMAIN} ${UW_SUBDOMAIN} *.${UW_SUBDOMAIN} ${ENTITY_NAME}
ServerAdmin ${ADMIN_EMAIL}

Redirect permanent / https://${CUSTOM_DOMAIN}/

ErrorLog ${ERROR_LOG}
CustomLog ${CUSTOM_LOG}
</VirtualHost>

<VirtualHost csclub:443>
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/${CUSTOM_DOMAIN}/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/${CUSTOM_DOMAIN}/privkey.pem
SSLStrictSNIVHostCheck on

ServerName ${CUSTOM_DOMAIN}
ServerAlias *.${CUSTOM_DOMAIN}
ServerAdmin ${ADMIN_EMAIL}

DocumentRoot /users/${ENTITY_NAME}/www

ErrorLog ${ERROR_LOG}
CustomLog ${CUSTOM_LOG}

Redirect permanent /<special page> ${ENTITY_HOME}/<special path>/<special file>
</VirtualHost>

<VirtualHost csclub:443>
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/${UW_SUBDOMAIN}/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/${UW_SUBDOMAIN}/privkey.pem
SSLStrictSNIVHostCheck on

ServerName ${UW_SUBDOMAIN}
ServerAlias *.${UW_SUBDOMAIN}
ServerAdmin ${ADMIN_EMAIL}

Redirect permanent / https://${CUSTOM_DOMAIN}/

ErrorLog ${ERROR_LOG}
CustomLog ${CUSTOM_LOG}
</VirtualHost>

Web Hosting

2022-04-12T21:33:06Z

R389li: /* ***NOTICE*** */ Add parking page example

The CSC offers web hosting for [[Club Hosting|clubs]] and [http://csclub.uwaterloo.ca/about/ our members] in accordance with our [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. This is a quick guide for the kinds of hosting we offer on our webserver, <tt>csclub.uwaterloo.ca</tt>, also known as [[Machine List#caffeine|caffeine]].

We run an Apache httpd webserver and we offer you the use of a [[MySQL|MySQL database]].

== What can I host on my website? ==

Web hosting is provided in accordance with the CSC [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. As a reminder, you are '''not permitted''' to host any of the following:

* '''Ads.''' Advertisements are not permitted because using our machines for commercial purposes is forbidden by university policy.
* '''Your start-up's website.''' Again, commercial use of our hosting is not permitted.
* '''Unauthorized copyrighted materials.''' Violating the law is a violation of our Machine Usage Agreement.

Please note that '''this is not an exhaustive list. Websites may be taken down ''without notice''''' at the discretion of the Systems Committee. (We will always let you know that we took your site down, but if it is breaking our shared environment, we can't provide an advance warning.)

Some great examples of things members host on our webserver:

* Academic projects!
* A personal website or blog!
* [[Club Hosting|Club websites!]]

== How do I make a website? ==

If this is your first time making a website, this section may be useful to you.

To build your website, CS Club suggests you use http://blog.getpelican.com/ (Python) or https://jekyllrb.com/ (Ruby). They generate static sites and are faster, simpler and more secure than CMSs like WordPress (dynamic and written in PHP) for small sites. We routinely disable WordPress sites that are more than a few weeks out of date (or if a critical security flaw is disclosed).

You can transfer files to the CS Club via SFTP If you run Windows use https://winscp.net/eng/index.php, if you use OS X use https://cyberduck.io/?l=en, and Linux users can directly access SFTP by using ssh:// urls in their GUI file managers. You can use SSH for direct shell access, just run <tt>ssh ctdalek@corn-syrup.csclub.uwaterloo.ca</tt> or look at https://wiki.csclub.uwaterloo.ca/Machine_List for our other machines. Please do not connect to caffeine (the actual web server) unless you need to debug code. You can also just create your site on our servers or in our office to avoid having to shuffle files around. Your home directory is distributed everywhere via NFS. Bonus points if you use Git to sync your own computer with our servers, if you do this we recommend using git.uwaterloo.ca as your upstream repository.

If you need help, email <tt>syscom@csclub.uwaterloo.ca[mailto:syscom@csclub.uwaterloo.ca]</tt> or come to the CS Club office on the MC 3rd floor across from the Mathsoc CnD.

== DNS and Your Domain Name ==

You can serve files without any additional configuration by placing them in your <tt>www</tt> directory and accessing them at <tt>http://csclub.uwaterloo.ca/~userid</tt>, where <tt>userid</tt> is your CSC user ID. However, many of our members and clubs prefer to use a custom domain name.

Note that this means you ''do not'' have to register a domain name to be able to use our services. You can just put a website at <tt>http://csclub.uwaterloo.ca/~userid</tt>.

=== uwaterloo.ca domain Names ===

If you represent a UWaterloo organization, you may be eligible for a custom <tt>uwaterloo.ca</tt> domain name, such as <tt>csclub.uwaterloo.ca</tt>. We can request this on your behalf.

In order to do so, we must have verified that the organization is a legitimate UWaterloo-affiliated group, and that you, the representative, are authorized to request a domain name on their behalf. This all takes place when you request [[Club Hosting|club hosting]] with the Computer Science Club.

Once you register as a club representative of your particular organization, you can send an email from your official club account to syscom@csclub.uwaterloo.ca to request the domain <tt>yourdomain.uwaterloo.ca</tt>. Assuming it is available, we will file a ticket and request the domain in your name.

=== Your personal domain name ===

These virtual hosts must be approved by the Executive and Systems Committee. If interested, send syscom@csclub.uwaterloo.ca an email. If your request is approved, the Systems Committee will direct you to create a CNAME record for your domain and point it at <tt>csclub.uwaterloo.ca</tt>.

If you are interested in receiving mail or having other records on your domain, the apex of your domain cannot be a CNAME. If this is the case, then your domain should contain an "A" record of <tt>129.97.134.17</tt> and a (optional, but recommended) "AAAA" record of <tt>2620:101:f000:4901:c5c::caff:e12e</tt>.

If you want TLS on your personal domain, mention this in your email to syscom (syscom: see [[SSL#letsencrypt]]).

== Static Sites ==

You can place all your static content into your web directory, <tt>/users/userid/www</tt>.

If you have been approved for a virtual host, you can access this content using your personal domain once the Systems Committee makes the appropriate configuration changes. Here is an example configuration file:

<VirtualHost *:80>
ServerName foobar.uwaterloo.ca
ServerAlias *.foobar.uwaterloo.ca foobar
ServerAdmin your@email.here.tld

DocumentRoot /users/userid/www/

ErrorLog /var/log/apache2/luser-userid-error.log
CustomLog /var/log/apache2/luser-userid-access.log combined
</VirtualHost>

== Dynamic Sites ==

If you require use of a database, we offer you the sole choice of MySQL. See [[MySQL|this guide]] for how to create your database and connect to MySQL.

=== ***NOTICE*** ===

We '''STRONGLY''' discourage the use of content management systems such as
WordPress. These packages are notorious for the number of security
vulnerabilities they contain and pose a threat to our systems if they are not
kept up to date. The Systems Committee '''WILL,''' at its discretion, disable
any website using a package such as WordPress that is not updated to the latest
version or that is found to contain exploitable security flaws. In such a case,
the member or club serving that site will be notified of the termination; the
site will not be re-enabled until the issues are addressed.

When pages are parked, access to them is restricted to on-campus IPs, so you can still fix your page, but anyone off-campus will not be able to access it, and will be shown this page instead: see [https://csclub.uwaterloo.ca/~sysadmin/insecure/ https://csclub.uwaterloo.ca/~sysadmin/insecure/].

=== Using PHP ===

Because we use Apache, it's as simple as placing your <tt>index.php</tt> file in your <tt>/users/userid/www</tt>. That's it!

You can even include rewrite rules in an <tt>.htaccess</tt> file in your web directory.

=== Reverse Proxy (Python, Ruby, Perl, etc.) ===

(In progress... Cliff Notes below)

If computationally expensive, please run the server on a general-use server and proxy to Caffeine.

If Python, (1) use a [http://docs.python-guide.org/en/latest/dev/virtualenvs/ virtual environment] (2) host your app (within the virtualenv) with [http://gunicorn.org/ Gunicorn] on a high port (but campus firewalled, i.e. NOT Ports 28000-28500).

If Ruby (Note, I've never used Ruby so take this with a grain of salt), use [http://unicorn.bogomips.org/ Unicorn] in the same way.

==== .htaccess Config ====

Put the following in the appropriate .htaccess file (e.g. if you were running your app at ~ctdalek/python-app, put the .htaccess in ~ctdalek/www/python-app alongside the static files). Replace HOST with localhost if running on Caffeine or the hostname if running elsewhere; replace port with your chosen port number.

<pre>
RewriteEngine On

# If you want websockets, uncomment this:
#RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
#RewriteCond %{HTTP:CONNECTION} ^Upgrade$ [NC]
#RewriteRule .* ws://HOST:RANDOM_PORT%{REQUEST_URI} [L,P]

RewriteCond %{SCRIPT_FILENAME} !-d
RewriteCond %{SCRIPT_FILENAME} !-f
RewriteRule "index.html" "http://HOST:RANDOM_PORT/" [P]

RewriteCond %{SCRIPT_FILENAME} !-d
RewriteCond %{SCRIPT_FILENAME} !-f
RewriteRule "^(.*)$" "http://HOST:RANDOM_PORT/$1" [P]
</pre>

== Requiring Authentication ==

You can require users to authenticate through the University's Central Authentication System (CAS) by adding the following contents to your .htaccess configuration file:

<pre>
AuthType CAS
Require valid-user
</pre>

You can replace <pre>Require valid-user</pre> with <pre>Require user ctdalek</pre> to restrict to specific users. See https://doubledoublesecurity.ca/uw/cas/user.html for more information.

== Syscom ==

=== Disabling insecure or infringing sites ===

To disable a webspace that has known security vulnerabilities add the following snippet to `/etc/apache2/conf-available/disable-vuln-site.conf`. This rewrites all accesses of the directory or its children to the given file. Note that our disable page always returns HTTP status code 503 (Service Unavailable).

<Directory /users/$BADUSER/www>
AllowOverride None
Redirect 503 /
ErrorDocument 503 /~sysadmin/insecure/index.html
</Directory>

For infringing sites:

<Directory "/users/$BADUSER/www/infringing-directory">
AllowOverride None
Redirect 503 /
ErrorDocument 503 /~sysadmin/infringing/index.html
</Directory>

For club domains (e.g. club1.uwaterloo.ca), redirect to the CSC domain instead:

<Directory "/users/$BADCLUB/www">
AllowOverride None
RewriteEngine On
RewriteRule . %{REQUEST_SCHEME}://csclub.uwaterloo.ca/~sysadmin/insecure/index.php [L,P]
</Directory>

=== Expired Websites ===

There is a cron job running hourly on caffeine which disables expired member's websites (and re-enables them when they've renewed their membership).

The script is here: https://git.csclub.uwaterloo.ca/public/expire-sites

Some highlights:

* The script provides a 1-month grace period (corresponding to the grace period of pam-csc)
* The expired page returns HTTP status code of 503 (Service Unavailable)

=== Sample Apache config for website with both a custom domain and a UW subdomain ===

Define ENTITY_NAME pmclub
Define CUSTOM_DOMAIN puremath.club
Define UW_SUBDOMAIN ${ENTITY_NAME}.uwaterloo.ca
Define ADMIN_EMAIL ${ENTITY_NAME}@csclub.uwaterloo.ca
Define ENTITY_HOME https://csclub.uwaterloo.ca/~${ENTITY_NAME}

Define APACHE_LOG_DIR /var/log/apache2
Define ERROR_LOG ${APACHE_LOG_DIR}/${ENTITY_NAME}-error.log
Define CUSTOM_LOG "${APACHE_LOG_DIR}/${ENTITY_NAME}-access.log combined"

<VirtualHost *:80>
ServerName ${CUSTOM_DOMAIN}
ServerAlias *.${CUSTOM_DOMAIN} ${UW_SUBDOMAIN} *.${UW_SUBDOMAIN} ${ENTITY_NAME}
ServerAdmin ${ADMIN_EMAIL}

Redirect permanent / https://${CUSTOM_DOMAIN}/

ErrorLog ${ERROR_LOG}
CustomLog ${CUSTOM_LOG}
</VirtualHost>

<VirtualHost csclub:443>
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/${CUSTOM_DOMAIN}/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/${CUSTOM_DOMAIN}/privkey.pem
SSLStrictSNIVHostCheck on

ServerName ${CUSTOM_DOMAIN}
ServerAlias *.${CUSTOM_DOMAIN}
ServerAdmin ${ADMIN_EMAIL}

DocumentRoot /users/${ENTITY_NAME}/www

ErrorLog ${ERROR_LOG}
CustomLog ${CUSTOM_LOG}

Redirect permanent /<special page> ${ENTITY_HOME}/<special path>/<special file>
</VirtualHost>

<VirtualHost csclub:443>
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/${UW_SUBDOMAIN}/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/${UW_SUBDOMAIN}/privkey.pem
SSLStrictSNIVHostCheck on

ServerName ${UW_SUBDOMAIN}
ServerAlias *.${UW_SUBDOMAIN}
ServerAdmin ${ADMIN_EMAIL}

Redirect permanent / https://${CUSTOM_DOMAIN}/

ErrorLog ${ERROR_LOG}
CustomLog ${CUSTOM_LOG}
</VirtualHost>

Meeting:Termcom/Saturday 2 April 2022

2022-04-02T23:47:16Z

R389li: /* TODO */

← [[Termcom/Saturday 5 March 2022]] | [[Termcom/Saturday 2 April 2022]] →

Last meeting of the term, good luck on exams!

= Termcom members in attendance =
r389li, dzlin, j2767wan, jtoft (👋), r345liu

= Tasks completed last few weeks =
* r389li got USBs for the office, plugged in Nullsleep and booted it up

= Tasks for the week =
* a268wang and d278liu will continue working on Merlin and migrate the prometheus VM to the k8s cluster
* j2767wan will continue setting up NextCloud locally
* r4tandon will continue looking into how to make the Visual Editor on this Wiki work
* r345liu and y266shen will fix the last failing project(s?) (Apache/Debian/???) in mirror-checker
* r389li will try and fix Nullsleep's networking
* r389li will also upload the Unix 101 recording and update [https://csclub.uwaterloo.ca/~termcom/unix101 https://csclub.uwaterloo.ca/~termcom/unix101]
* dzlin and s7raviku will upgrade Postgres on coffee, ensuring data is migrated to the new database

= TODO =
* convert the [[Ceph]] mount on [[Machine List#Cloud Cloud machines]] to a systemd.mount so NGINX won't try to start (and fail) before its FS is mounted
* MathNEWS container migration (LXC -> systemd-nspawn)
* Fix Guayusa
* get the specs of the FusioIO card

= Syscom mailing list moderator =
a268wang

[[Category:Termcom]]

Meeting:Termcom/Saturday 2 April 2022

2022-04-02T23:46:37Z

R389li: Create page

← [[Termcom/Saturday 5 March 2022]] | [[Termcom/Saturday 2 April 2022]] →

Last meeting of the term, good luck on exams!

= Termcom members in attendance =
r389li, dzlin, j2767wan, jtoft (👋), r345liu

= Tasks completed last few weeks =
* r389li got USBs for the office, plugged in Nullsleep and booted it up

= Tasks for the week =
* a268wang and d278liu will continue working on Merlin and migrate the prometheus VM to the k8s cluster
* j2767wan will continue setting up NextCloud locally
* r4tandon will continue looking into how to make the Visual Editor on this Wiki work
* r345liu and y266shen will fix the last failing project(s?) (Apache/Debian/???) in mirror-checker
* r389li will try and fix Nullsleep's networking
* r389li will also upload the Unix 101 recording and update [https://csclub.uwaterloo.ca/~termcom/unix101 https://csclub.uwaterloo.ca/~termcom/unix101]
* dzlin and s7raviku will upgrade Postgres on coffee, ensuring data is migrated to the new database

= TODO =
* convert the [[Ceph]] mount on [[Machine List#Cloud Cloud machines]] to a systemd.mount so NGINX won't try to start (and fail) before its FS is mounted
* MathNEWS container migration (LXC -> systemd-nspawn)
* Fix Guayusa

= Syscom mailing list moderator =
a268wang

[[Category:Termcom]]

Meeting:Termcom/Saturday 5 March 2022

2022-03-27T00:16:29Z

R389li: Fix dates

← [[Termcom/Saturday 26 February 2022]] | [[Termcom/Saturday 26 March 2022]] →

= Termcom members in attendance =
r389li, a268wang, d9hui, dzlin, j2767wan, r4tandon (👋), s7raviku

= Tasks completed last week =
* merenber and r389li recompiled [[Kerberos]] 1.17 for focal and bullseye. Cloud machines and office terminals now mount the <code>/users</code> directory successfully from NetApp.

= Tasks for the week =
* a268wang and d278liu will continue working on Merlin and migrate the prometheus VM to the k8s cluster
* dzlin will fix sorbitol again (more errors)
* j2767wan will continue looking into how to make the Visual Editor on this Wiki work
* r345liu will fix the last failing project (Apache IIRC) in mirror-checker
* r345liu will also make an Alpine image for [[CloudStack]], using <s>[[CloudStack Templates]]</s> something he found on GitHub (hmm sus)
* r389li/merenber will look into and fix the I/O errors on focal (related to NetApp mounting).
* r389li will also convert the [[Ceph]] mount on [[Machine List#Cloud Cloud machines]] to a systemd.mount so NGINX won't try to start (and fail) before its FS is mounted
* s7raviku will upgrade coffee to Bullseye, taking care to first backup the VM and ensure Postgres data is migrated to the new database

= Unix 101 =
Description: Join CSC's Systems Committee (syscom) for an introductory series on GNU/Linux!

== Final Plans ==
4 talks this term, the rest in the future.

=== Unix 101 - SSH & Bash/CLI ===
Location: In-person, room TBD

Date/Time: Friday March 18th, 2-3pm
* j2767wan: SSH - 15 mins
* dzlin: bash and basic CLI commands - 30-40 mins

=== Unix 101 - FS/Perms & vim ===
Location: Online (Twitch)

Date/Time: Saturday March 26th, 2-3pm
* s7raviku: FS/perms
* r345liu: vim

= Syscom mailing list moderator =
r345liu

[[Category:Termcom]]