https://wiki.csclub.uwaterloo.ca/api.php?action=feedcontributions&feedformat=atom&user=S455wangCSCWiki - User contributions [en]2026-04-07T11:45:38ZUser contributionsMediaWiki 1.44.0https://wiki.csclub.uwaterloo.ca/index.php?title=Machine_List&diff=4293Machine List2019-08-21T20:25:44Z<p>S455wang: /* dextrose */ no longer hosts mail</p>
<hr />
<div>= Web Server =<br />
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.<br />
<br />
== ''caffeine'' ==<br />
<br />
Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.<br />
<br />
==== Specs ====<br />
<br />
* currently a virtual machine hosted on [[#biloba|biloba]]<br />
** 12 vCPUs<br />
** 32GB of RAM<br />
<br />
==== Services ====<br />
<br />
* Club and member web sites with [[Apache]]<br />
* [[MySQL]] databases<br />
* [[PostgreSQL]] databases<br />
* [[ceo]] daemon<br />
* mail was migrated to [[#mail|mail]]<br />
<br />
= General-Use Servers =<br />
<br />
These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no bitcoin mining).<br />
<br />
Most people use either taurine and clones or (high-fructose-)corn-syrup. hfcs is probably our beefiest machine at the moment, if you are wanting to do some heavy computation. Again, if you have a long-running computationally intensive job, it's good to<br />
nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.<br />
<br />
== ''corn-syrup'' ==<br />
<br />
PowerEdge 2950<br />
<br />
==== Specs ====<br />
<br />
* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)<br />
* 32 GB RAM<br />
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27<br />
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29<br />
* IPMI mac addr 00:24:e8:52:41:2b<br />
* 3 &times; Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)<br />
<br />
==== Notes ====<br />
<br />
* Use eth0/Gb0 for the mathstudentorgsnet connection<br />
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.<br />
<br />
==== Services ====<br />
<br />
* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)<br />
<br />
== ''high-fructose-corn-syrup'' ==<br />
<br />
High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.<br />
<br />
==== Specs ====<br />
<br />
* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)<br />
* 192 GB RAM<br />
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]<br />
* 500 GB Seagate Barracuda<br />
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]<br />
<br />
== ''taurine'' ==<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 8GB RAM<br />
* 136 GB LVM volume group<br />
<br />
==== Services ====<br />
<br />
* Virtual machines<br />
* BitlBee IRC instant messaging gateway (localhost only)<br />
* [[ident]] server to maintain high connection cap to freenode<br />
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.<br />
<br />
== ''sucrose'' ==<br />
<br />
sucrose is a [[#taurine|taurine]] clone donated by CSCF.<br />
<br />
==== Specs ====<br />
<br />
== ''carbonated-water'' ==<br />
<br />
carbonated-water is a Dell R815 provided by CSCF.<br />
<br />
==== Specs ====<br />
<br />
* 4x AMD Opteron 6176 processors (2.3 GHz, 12 cores each)<br />
* 128GB RAM<br />
<br />
= Office Terminals =<br />
<br />
It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.<br />
<br />
== ''bit-shifter'' ==<br />
<br />
bit-shifter is an office terminal.<br />
<br />
==== Specs ====<br />
<br />
* Intel(R) Core(TM)2 Quad CPU Q8300<br />
* 4GB RAM<br />
* Nvidia GeForce GT 440<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Jacob Parker's Firewire Card<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''gwem'' ==<br />
<br />
gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.<br />
<br />
=== Specs ===<br />
<br />
* AMD FX-8150 3.6GHz 8-Core CPU<br />
* 16 GB RAM<br />
* AMD Radeon 6870 HD 1GB GPU<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
== ''maltodextrin'' ==<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i3-4130 @ 3.40 GHz<br />
* 8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''natural-flavours'' ==<br />
<br />
Natural-flavours is an office terminal; it used to be our mirror.<br />
<br />
In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i7-6700k<br />
* 2x8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Cup Holder (DVD drive has power, but not connected to mother board)<br />
<br />
== ''nullsleep'' ==<br />
<br />
nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* Intel® Dual Core Atom™ 330<br />
* 2GB RAM<br />
* NVIDIA® ION™ graphics<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* DVD Burner<br />
<br />
==== Speakers ====<br />
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.<br />
<br />
==== Services ====<br />
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.<br />
Music is located in /music on the office terminals<br />
<br />
== ''strombola''==<br />
It is named after Gordon Strombola.<br />
<br />
==== Specs ====<br />
* Intel Core2 Quad Q8200 @ 2.33GHz<br />
* 4 GB RAM<br />
* nVidia GeForce 8600 GTS<br />
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
==== Speakers ====<br />
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.<br />
<br />
= Syscom Only =<br />
<br />
The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.<br />
== ''aspartame'' ==<br />
<br />
aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 10GB RAM<br />
<br />
==== Notes ====<br />
<br />
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.<br />
<br />
== ''dextrose'' ==<br />
<br />
dextrose is a [[#taurine|taurine]] clone donated by CSCF. It currently hosts [[#mathnews|the mathNEWS server]], [[#auth1|auth1]], [[#rt|rt]] and [[#munin|munin]].<br />
<br />
==== Specs ====<br />
<br />
* 2 72GB drives in RAID1 (LVM dextrose)<br />
* 2 1TB drives in RAID1 (LVM dextrose2)<br />
<br />
== ''auth1'' ==<br />
<br />
Container on [[#dextrose|dextrose]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] master<br />
* [[Kerberos]] master<br />
<br />
== ''coffee'' ==<br />
<br />
Virtual machine running on [[#ginkgo|ginkgo]].<br />
<br />
==== Services ====<br />
<br />
* [[Database#MySQL|MySQL]]<br />
* [[Database#Postgres|Postgres]]<br />
<br />
== ''cobalamin'' ==<br />
<br />
Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.<br />
<br />
==== Specs ====<br />
<br />
* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)<br />
* 16GB RAM<br />
* Broadcom NetworkXtreme II<br />
* 2x73GB Hard Drives, hardware RAID1<br />
** Soon to be 2x1TB in MegaRAID1<br />
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration<br />
<br />
==== Services ====<br />
<br />
* Containers: [[#auth2|auth2]]<br />
<br />
==== Notes ====<br />
<br />
* The network card requires non-free drivers. Be sure to use an installation disc with non-free.<br />
<br />
* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:<br />
<br />
** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240<br />
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248<br />
<br />
* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.<br />
<br />
== ''auth2'' ==<br />
<br />
Container on [[#cobalamin|cobalamin]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] slave<br />
* [[Kerberos]] slave<br />
<br />
MAC Address: c2:c0:00:00:00:a2<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon X3450 @ 2.67 GHz<br />
* 6 GB RAM<br />
* vg0: 465 GB software RAID1 (contains root partition):<br />
** 750 GB Seagate Barracuda SATA hard drive<br />
** 500 GB Western-Digital Caviar Blue SATA hard drive<br />
* vg1: 596 GB software RAID1 (contains caffeine):<br />
** 2 &times; 640 GB Western-Digital Caviar Blue SATA hard drive<br />
<br />
==== Services ====<br />
<br />
* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]], [[#munin|munin]]<br />
<br />
== ''mail'' ==<br />
<br />
mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#biloba|biloba]]<br />
<br />
==== Services ====<br />
<br />
* [[Mail]] services<br />
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])<br />
* [[Webmail]]<br />
* [[ceo]] daemon<br />
<br />
== ''psilodump'' ==<br />
<br />
psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.<br />
<br />
==== Specs ====<br />
<br />
== ''phlogiston'' ==<br />
<br />
phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.<br />
<br />
phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.<br />
<br />
==== Specs ====<br />
<br />
== ''sodium-benzoate'' ==<br />
<br />
Sodium-benzoate is our previous mirror server, funded by MEF.<br />
<br />
It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon Quad Core E5405 @ 2.00 GHz<br />
* 16GB RAM<br />
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)<br />
<br />
Space disks are currently in the office underneath maltodextrin.<br />
<br />
== ''potassium-benzoate'' ==<br />
<br />
potassium-benzoate is our mirror server, funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* 36 drive Supermicro chassis (SSG-6048R-E1CR36L) <br />
* 1 x Intel Xeon E5-2630 (8 cores, 2.40 GHz)<br />
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM<br />
* 2 x 1 TB Samsung Evo 850 SSD drives<br />
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)<br />
* 10 Gbps SFP+ card (loaned from CSCF)<br />
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)<br />
<br />
==== Network Connections ====<br />
<br />
potassium-benzoate has two connections to our network:<br />
<br />
* 1 Gbps to our switch (used for management)<br />
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)<br />
<br />
Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.<br />
<br />
==== Services ====<br />
<br />
* [[Mirror]]<br />
* [[Talks]] mirror<br />
* [[Debian_Repository|CSClub packages repository]]<br />
<br />
== ''munin'' ==<br />
<br />
munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#dextrose|dextrose]]<br />
<br />
==== Services ====<br />
<br />
* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon<br />
<br />
<br />
== ''yerba-mate'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)<br />
* mattermost (under development)<br />
* shibboleth (under development)<br />
<br />
Also used for experimenting new CSC services.<br />
<br />
= Cloud =<br />
<br />
These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.<br />
<br />
== ''guayusa'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2TB PCI-Express Flash SSD<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
Currently in use for experimenting new CSC services.<br />
<br />
* logstash (testing of logstash)<br />
* load-balancer-01<br />
* cifs (for booting ginkgo from CD)<br />
* caffeine-01 (testing of multi-node caffeine)<br />
* block1.cloud<br />
* object1.cloud<br />
<br />
== ''ginkgo'' ==<br />
<br />
Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]<br />
* 256GB RAM<br />
* 2 x 1.2 TB SSD (400GB of each for RAID 1)<br />
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
* controller1.cloud<br />
* db1.cloud<br />
* router1.cloud (NAT for cloud tenant network)<br />
* network1.cloud<br />
<br />
== ''biloba'' ==<br />
<br />
Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]<br />
* 384GB RAM<br />
* 12 3.5" Hot Swap Drive Bays<br />
** 2 x 480 GB SSD<br />
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
* caffeine<br />
* mail<br />
* mattermost<br />
<br />
= Storage =<br />
<br />
== ''fs00'' ==<br />
<br />
fs00 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
== ''fs01'' ==<br />
<br />
fs01 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
= Other =<br />
<br />
== ''goto80'' ==<br />
<br />
This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located in the office on the top shelf above strombola.<br />
<br />
==== Specs ====<br />
<br />
* 500 MHz Feroceon (ARM926ej-s compatible) processor<br />
* ARMv5TEJ architecture<br />
<br />
Use -march=armv5te -mtune=arm926ej-s options to GCC.<br />
<br />
For information on the TS-7800's hardware see here:<br />
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800<br />
<br />
== ''binaerpilot'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''anamanaguchi'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''digital cutter'' ==<br />
<br />
See [[Digital Cutter|here]].<br />
<br />
== ''mathnews'' ==<br />
<br />
[[#dextrose|dextrose]] hosts a container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.<br />
<br />
= Decommissioned =<br />
<br />
== ''glomag'' ==<br />
<br />
Glomag hosted [[#caffeine|caffeine]]. Decomissioned April 6, 2018.<br />
<br />
== ''Lisp machine'' ==<br />
<br />
A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.<br />
<br />
http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.<br />
<br />
==== Specs ====<br />
<br />
Currently inoperable due to (at least) a missing console cable.<br />
<br />
== ''ginseng'' ==<br />
<br />
Ginseng used to be our fileserver, before aspartame and the netapp took over.<br />
<br />
==== Specs ====<br />
<br />
* Intel Pentium Dual Core E2180<br />
* 8GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]<br />
* 4 &times; 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].<br />
[[Category:Hardware]]<br />
<br />
== ''calum'' ==<br />
<br />
The server from back before recorded memory.<br />
<br />
== ''paza'' ==<br />
<br />
An iMac G3 that was used as a dumb terminal.<br />
<br />
==== Specs ====<br />
<br />
* 233Mhz PowerPC 740/750<br />
* 96 MB RAM<br />
<br />
== ''romana'' ==<br />
<br />
Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.<br />
<br />
Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 2 PowerPC based processors<br />
* Stylish Blinken processor-load lights<br />
<br />
== ''sodium-citrate'' ==<br />
<br />
Sodium-citrate was an SGI O2 machine.<br />
<br />
In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.<br />
<br />
==== Specs ====<br />
* SGI O2 MIPS processor<br />
* 423 MB (?) RAM<br />
* 2 &times; 2 GB hard drive<br />
<br />
== ''acesulfame-potassium'' ==<br />
<br />
An old office terminal.<br />
<br />
==== Specs ====<br />
* Intel Pentium 4 2.67GHz<br />
* 1GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard<br />
* ATI Radeon 7000<br />
<br />
== ''skynet'' ==<br />
<br />
skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.<br />
<br />
==== Specs ====<br />
<br />
* 15 full CPU/memory boards<br />
** 2x UltraSPARC II 464MHz / 8MB Cache Processors<br />
** ??? RAM?<br />
* 1 I/O board (type=???)<br />
** ???x disks?<br />
* 1 CD-ROM drive<br />
<br />
* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]<br />
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]<br />
* [http://www.e6500.com/ e6500]<br />
<br />
== ''freebsd'' ==<br />
<br />
FreeBSD was a virtual machine with FreeBSD installed.<br />
<br />
==== Services ====<br />
<br />
* Newer software<br />
<br />
== ''rainbowdragoneyes'' ==<br />
<br />
Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 800MHz MIPS Loongson 2f CPU<br />
<br />
== ''denardo'' ==<br />
<br />
Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.<br />
<br />
==== Specs ====<br />
<br />
* Sun Fire V210<br />
* TI UltraSparc IIIi (Jalapeño)<br />
* 2 GB RAM<br />
* 160 GB RAID array<br />
* ALOM on denardo-alom.csclub can be used to power machine on/off<br />
<br />
<br />
== ''artificial-flavours'' ==<br />
<br />
Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).<br />
<br />
==== Specs ====<br />
<br />
* Intel Celeron 3.2GHz<br />
* 2GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard<br />
* Western-Digital 80 GB ATA hard drive<br />
<br />
== ''potassium-citrate'' ==<br />
<br />
Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.<br />
<br />
It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).<br />
<br />
==== Specs ====<br />
* Alphaserver CS20 (2 833MHz EV68al CPUs)<br />
* 512MB RAM<br />
* 36 GB Seagate SCSI hard drive<br />
<br />
== ''potassium-nitrate'' ==<br />
<br />
This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).<br />
<br />
The name is from saltpetre, because sparks.<br />
<br />
==== Specs ====<br />
<br />
* 24 CPUs<br />
* 90GB main memory<br />
* 400GB scratch disk local storage in /scratch-potassium-nitrate<br />
<br />
There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.<br />
<br />
See also [[Sun 2900]].<br />
<br />
<br />
= UPS =<br />
<br />
All of the machines in the machine room are connected to one of our UPSs.<br />
<br />
All of our UPSs can be monitored via CSCF:<br />
<br />
* MC3015-UPS-B2<br />
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)<br />
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)<br />
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)<br />
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)<br />
<br />
We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].<br />
<br />
TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Kerberos&diff=4291Kerberos2019-06-07T02:12:50Z<p>S455wang: /* Tools for Debugging SSSD */ add note on rebooting after clearing cache</p>
<hr />
<div>We use [http://web.mit.edu/Kerberos/ MIT Kerberos 5] for authentication. Our kerberos realm is CSCLUB.UWATERLOO.CA. KDCs run on [[Machine_List#auth1|auth1]] (kdc1) and [[Machine_List#auth2|auth2]] (kdc2).<br />
<br />
[[File:kerberos.png|frame|Kerberos, the network authentication protocol]]<br />
<br />
=== ehashman's guide to MIT Kerberos v5 on Debian ===<br />
<br />
==== Preparatory Reading ====<br />
<br />
# [http://web.mit.edu/kerberos/dialogue.html Kerberos: A Dialogue in Four Scenes] ('''''definitely''''' read this)<br />
# [http://www.roguelynn.com/words/explain-like-im-5-kerberos/ Explain Like I'm 5: Kerberos] (less entertaining than the stage play)<br />
# [http://www.rjsystems.nl/en/2100-d6-kerberos-master.php A very practical configuration guide to Kerberos on Debian squeeze] (things don't change much in the Debian world)<br />
# [http://web.mit.edu/kerberos/krb5-latest/doc/admin/index.html The official Kerberos documentation]<br />
<br />
==== Set up host records ====<br />
<br />
<ul><br />
<li><p>We will need host records to correspond to our Kerberos admin server and key distribution center, <code>kadmin.wics.uwaterloo.ca</code> and <code>kdc1.wics.uwaterloo.ca</code>. These can just be A records pointing to our auth server (currently <code>129.97.134.212</code>).</p></li><br />
<li><p>We can also set up [http://web.mit.edu/kerberos/krb5-latest/doc/admin/realm_config.html special SRV records] as well. This is recommended but not necessary. They look like this:</p><br />
<pre>_kerberos._udp.wics.uwaterloo.ca SRV 0 0 88 kdc1.wics.uwaterloo.ca<br />
_kerberos-master._udp.wics.uwaterloo.ca SRV 0 0 88 kdc1.wics.uwaterloo.ca<br />
_kpasswd._udp.wics.uwaterloo.ca SRV 0 0 464 kdc1.wics.uwaterloo.ca</pre><br />
<p>You may have guessed that the third integer is the port the service runs on.</p></li></ul><br />
<br />
==== Install packages ====<br />
<br />
<ul><br />
<li><p>First, install some common system utils that may be missing from the fresh container:</p><br />
<pre># apt-get install ssh ntpdate xinetd nmap</pre></li><br />
<li>Do NOT install ntp on the container. Install it on the host system instead. See [[ntp|NTP]] for info on NTP servers.</li><br />
<li><p>Next, install the Kerberos server:</p><br />
<pre>apt-get install krb5-{admin-server,user}</pre></li><br />
<li><p>During the install process, <code>dpkg</code> will ask you for the following three values, specified below:</p><br />
<pre>Default Kerberos version 5 realm: WICS.UWATERLOO.CA<br />
Kerberos servers for your realm: kdc1.wics.uwaterloo.ca<br />
Administrative server for your Kerberos realm: kadmin.wics.uwaterloo.ca</pre></li><br />
<li><p>You'll encounter this lovely error, from <code>xinetd</code>:</p><br />
<pre>Note: xinetd currently is not fully supported by update-inetd.<br />
Please consult /usr/share/doc/xinetd/README.Debian and itox(8).</pre><br />
<p>To solve this, we create a file <code>/etc/xinetd.d/krb_prop</code> with the following contents:</p><br />
<pre>service krb_prop<br />
{<br />
disable = no<br />
socket_type = stream<br />
protocol = tcp<br />
user = root<br />
wait = no<br />
server = /usr/sbin/kpropd<br />
}</pre><br />
<p>And then restart <code>xinetd</code>:</p><br />
<pre># service xinetd restart</pre></li><br />
<li><p>You'll also note that the <code>krb5-kdc</code> service failed to start. This is okay. &gt; This is because the realm, EXAMPLE.COM, or rather the database file for it (<code>/var/lib/krb5kdc/principal</code>), has not yet been created. – http://www.rjsystems.nl/en/2100-d6-kerberos-master.php</p></li></ul><br />
<br />
==== Configuring Kerberos ====<br />
<br />
<ul><br />
<li><p>The first thing we'll configure is the access control list. Edit <code>/etc/krb5kdc/kadm5.acl</code> and enable/add the following line:</p><br />
<pre>*/admin *</pre><br />
<p>Our primary admin principal will be <code>sysadmin/admin@WICS.UWATERLOO.CA</code>, so there is no need to add a separate <code>admin</code> principal to the ACL.</p></li><br />
<li><p>Let's configure Kerberos client-side in [https://git.uwaterloo.ca/wics/documentation/blob/master/krb5.conf <code>/etc/krb5.conf</code>]. Consulting with the CSC's config, [[www.rjsystems.nl/en/2100-d6-kerberos-master.php#rcfg|our favoured setup guide]], and [http://web.mit.edu/kerberos/krb5-1.12/doc/admin/conf_files/krb5_conf.html the Kerberos krb5.conf manual], we'll mostly select default settings. Notable additions include</p><br />
<pre>[libdefaults]<br />
allow_weak_crypto = false # default is currently false but hey<br />
<br />
# If DNS breaks we don't want auth to fail<br />
dns_lookup_kdc = false<br />
dns_lookup_realm = false<br />
<br />
[logging]<br />
kdc = FILE:/var/log/krb5kdc.log<br />
admin_server = FILE:/var/log/kadmin.log<br />
default = FILE:/var/log/krb5.log</pre></li><br />
<li><p>We also want to ensure we're using good crypto for our Key Distribution Center, so let's set that up next in [https://git.uwaterloo.ca/wics/documentation/blob/master/kdc.conf <code>/etc/krb5kdc/kdc.conf</code>]:</p><br />
<pre>[kdcdefaults]<br />
kdc_ports = 750,88<br />
<br />
[realms]<br />
WICS.UWATERLOO.CA = {<br />
database_name = /var/lib/krb5kdc/principal<br />
admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab<br />
acl_file = /etc/krb5kdc/kadm5.acl<br />
key_stash_file = /etc/krb5kdc/stash<br />
kdc_ports = 750,88<br />
max_life = 12h 0m 0s<br />
max_renewable_life = 1d 0h 0m 0s<br />
master_key_type = aes256-cts-hmac-sha1-96<br />
supported_enctypes = aes256-cts-hmac-sha1-96:normal aes128-cts-hmac-sha1-96:normal<br />
default_principal_flags = +preauth<br />
}</pre></li><br />
<li><p>We didn't choose to create a new krb5 log directory but we should set up logrotate. Create a file [https://git.uwaterloo.ca/wics/documentation/blob/master/logrotate.d.krb5 <code>/etc/logrotate.d/krb5</code>] with three of the following entries (one for each log file):</p><br />
<pre>/var/log/FILENAME.log {<br />
weekly<br />
missingok<br />
rotate 8<br />
compress<br />
delaycompress<br />
notifempty<br />
postrotate<br />
/etc/init.d/SERVICENAME restart &gt; /dev/null<br />
endscript<br />
}</pre></li><br />
<li><p>Make sure you also create those files so the service can write to them:</p><br />
<pre># touch /var/log/{krb5,krb5kdc,kadmin}.log</pre></li></ul><br />
<br />
==== Creating the Kerberos Realm ====<br />
<br />
<ul><br />
<li><p>Now we're going to create the realm:</p><br />
<pre># krb5_newrealm<br />
This script should be run on the master KDC/admin server to initialize<br />
a Kerberos realm. It will ask you to type in a master key password.<br />
This password will be used to generate a key that is stored in<br />
/etc/krb5kdc/stash. You should try to remember this password, but it<br />
is much more important that it be a strong password than that it be<br />
remembered. However, if you lose the password and /etc/krb5kdc/stash,<br />
you cannot decrypt your Kerberos database.<br />
Loading random data</pre><br />
<p>The script may pause at this point until there is sufficient available entropy to generate a key. Then it will prompt for a password. USE A LONG, RANDOM ONE. THIS PASSWORD IS VERY IMPORTANT.</p><br />
<pre>Initializing database '/var/lib/krb5kdc/principal' for realm<br />
'WICS.UWATERLOO.CA',<br />
master key name 'K/M@WICS.UWATERLOO.CA'<br />
You will be prompted for the database Master Password.<br />
It is important that you NOT FORGET this password.<br />
Enter KDC database master key:<br />
Re-enter KDC database master key to verify:<br />
<br />
<br />
Now that your realm is set up you may wish to create an administrative<br />
principal using the addprinc subcommand of the kadmin.local program.<br />
Then, this principal can be added to /etc/krb5kdc/kadm5.acl so that<br />
you can use the kadmin program on other computers. Kerberos admin<br />
principals usually belong to a single user and end in /admin. For<br />
example, if jruser is a Kerberos administrator, then in addition to<br />
the normal jruser principal, a jruser/admin principal should be<br />
created.<br />
<br />
Don't forget to set up DNS information so your clients can find your<br />
KDC and admin servers. Doing so is documented in the administration<br />
guide.</pre></li><br />
<li><p>We'll now configure the default and maximum ticket life for the Kerberos Ticket Granting Ticket (<code>krbtgt/WICS.UWATERLOO.CA@WICS.UWATERLOO.CA</code>):</p><br />
<pre># kadmin.local <br />
Authenticating as principal root/admin@WICS.UWATERLOO.CA with password.<br />
kadmin.local: getprinc krbtgt/WICS.UWATERLOO.CA@WICS.UWATERLOO.CA<br />
Principal: krbtgt/WICS.UWATERLOO.CA@WICS.UWATERLOO.CA<br />
Expiration date: [never]<br />
Last password change: [never]<br />
Password expiration date: [none]<br />
Maximum ticket life: 0 days 12:00:00<br />
Maximum renewable life: 1 day 00:00:00<br />
Last modified: Thu Dec 03 03:59:04 UTC 2015 (db_creation@WICS.UWATERLOO.CA)<br />
Last successful authentication: [never]<br />
Last failed authentication: [never]<br />
Failed password attempts: 0<br />
Number of keys: 2<br />
Key: vno 1, aes256-cts-hmac-sha1-96, no salt<br />
Key: vno 1, aes128-cts-hmac-sha1-96, no salt<br />
MKey: vno 1<br />
Attributes: REQUIRES_PRE_AUTH<br />
Policy: [none]</pre><br />
<p>Let's set the max life to 4 hours and the renewable life to 10 hours, for extra security.</p><br />
<pre>kadmin.local: modprinc -maxlife &quot;4 hour&quot; -maxrenewlife &quot;10 hour&quot; krbtgt/WICS.UWATERLOO.CA@WICS.UWATERLOO.CA<br />
Principal &quot;krbtgt/WICS.UWATERLOO.CA@WICS.UWATERLOO.CA&quot; modified.</pre></li></ul><br />
<br />
==== Adding Principals ====<br />
<br />
<ul><br />
<li><p>We need some root users in our system in order to bootstrap the rest, so let's create our sysadmin user, and give them our root password for authentication:</p><br />
<pre># kadmin.local<br />
Authenticating as principal root/admin@WICS.UWATERLOO.CA with password.<br />
kadmin.local: addprinc sysadmin/admin<br />
WARNING: no policy specified for sysadmin/admin@WICS.UWATERLOO.CA; defaulting to no policy<br />
Enter password for principal &quot;sysadmin/admin@WICS.UWATERLOO.CA&quot;: <br />
Re-enter password for principal &quot;sysadmin/admin@WICS.UWATERLOO.CA&quot;: <br />
Principal &quot;sysadmin/admin@WICS.UWATERLOO.CA&quot; created.</pre></li><br />
<li><p>Now we need to add a principal and keytab for our KDC host. While <code>addprinc -randkey</code> does add a key, we need to use <code>ktadd</code> to ensure it's copied over to the client host (in this case, auth1). <br />
<br />
('''keytab:''' a key table file containing one or more keys. A host or service uses a keytab file in much the same way as a user uses his/her password.)</p><br />
<br />
<pre>$ kadmin -p sysadmin/admin<br />
Authenticating as principal sysadmin/admin with password.<br />
Password for sysadmin/admin@WICS.UWATERLOO.CA:<br />
kadmin: addprinc -randkey host/auth1.wics.uwaterloo.ca<br />
WARNING: no policy specified for<br />
host/auth1.wics.uwaterloo.ca@WICS.UWATERLOO.CA; defaulting to no policy<br />
Principal &quot;host/auth1.wics.uwaterloo.ca@WICS.UWATERLOO.CA&quot; created.<br />
kadmin: ktadd host/auth1.wics.uwaterloo.ca<br />
Entry for principal host/auth1.wics.uwaterloo.ca with kvno 2, encryption type<br />
aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.<br />
Entry for principal host/auth1.wics.uwaterloo.ca with kvno 2, encryption type<br />
aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.</pre></li><br />
<li><p>Now we can test that the KDC can grant principals tickets:</p><br />
<pre>$ kinit sysadmin/admin<br />
Password for sysadmin/admin@WICS.UWATERLOO.CA: <br />
$ klist<br />
Ticket cache: FILE:/tmp/krb5cc_0<br />
Default principal: sysadmin/admin@WICS.UWATERLOO.CA<br />
Valid starting Expires Service principal<br />
12/03/2015 05:31:38 12/03/2015 09:31:38 krbtgt/WICS.UWATERLOO.CA@WICS.UWATERLOO.CA<br />
renew until 12/03/2015 15:31:38<br />
$ kdestroy<br />
$ klist<br />
klist: Credentials cache file '/tmp/krb5cc_0' not found</pre></li><br />
<li><p>Next, we'll probably want to add principals for any users that we created in LDAP. We can do this in <code>weo</code> using the following command, and we can even test that principal after its creation:</p><br />
<pre>$ python weo.py --add-krb-princ --username=ehashman<br />
Okay, adding Kerberos principal ehashman@WICS.UWATERLOO.CA<br />
Enter Kerberos admin password: <br />
Enter password for principal ehashman@WICS.UWATERLOO.CA: <br />
Retype password: <br />
Adding Kerberos principal...<br />
Principal ehashman@WICS.UWATERLOO.CA successfully added.<br />
$ kinit ehashman<br />
Password for ehashman@WICS.UWATERLOO.CA: <br />
$ klist<br />
Ticket cache: FILE:/tmp/krb5cc_1000<br />
Default principal: ehashman@WICS.UWATERLOO.CA<br />
Valid starting Expires Service principal<br />
15-12-03 17:36:22 15-12-03 21:36:22 krbtgt/WICS.UWATERLOO.CA@WICS.UWATERLOO.CA<br />
renew until 15-12-04 03:36:22</pre></li><br />
<li><p>From now on, though, Kerberos principals will automatically be generated when we add new users! Like this:</p><br />
<pre>$ python weo.py --adduser --username=fhboxwal --fullname=&quot;Fatema Boxwala&quot;<br />
Okay, adding user fhboxwal<br />
Please enter the new user's password: <br />
Retype password: <br />
Enter LDAP admin password: <br />
Enter Kerberos admin password: <br />
Locking LDAP database...<br />
Adding user...<br />
Unlocked database.<br />
Adding Kerberos principal...<br />
User fhboxwal successfully added.</pre></li><br />
<li><p>Awesome! Now we're ready to configure Kerberos for clients.</p></li></ul><br />
<br />
==== Setting Up Client Machines with SSSD ====<br />
<br />
<ul><br />
<li><p>On your machine of choice, install the Kerberos client packages:</p><br />
<pre># apt-get install krb5-user</pre></li><br />
<li><p>Now copy over your Kerberos config, [https://git.uwaterloo.ca/wics/documentation/blob/master/krb5.conf <code>krb5.conf</code>], into <code>/etc/krb5.conf</code>.</p></li><br />
<li><p>Next, set up a host keytab for the local machine:</p><br />
<pre># kadmin -p sysadmin/admin<br />
Authenticating as principal sysadmin/admin with password.<br />
Password for sysadmin/admin@WICS.UWATERLOO.CA: <br />
kadmin: addprinc -randkey host/mother-goose.wics.uwaterloo.ca<br />
WARNING: no policy specified for host/mother-goose.wics.uwaterloo.ca@WICS.UWATERLOO.CA; defaulting to no policy<br />
Principal &quot;host/mother-goose.wics.uwaterloo.ca@WICS.UWATERLOO.CA&quot; created.<br />
kadmin: ktadd host/mother-goose.wics.uwaterloo.ca<br />
Entry for principal host/mother-goose.wics.uwaterloo.ca with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.<br />
Entry for principal host/mother-goose.wics.uwaterloo.ca with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab FILE:/etc/krb5.keytab.</pre></li><br />
<li><p>In order to configure authentication, we'll use a package called SSSD. (It has 234823840 dependencies.) Install it and its utilities:</p><br />
<pre># apt-get install sssd sssd-tools</pre></li><br />
<li>Next, copy over the following configs:</li><br />
<li>[https://git.uwaterloo.ca/wics/documentation/blob/master/ldap.conf <code>/etc/ldap/ldap.conf</code>]</li><br />
<li>[https://git.uwaterloo.ca/wics/documentation/blob/master/sssd.conf <code>/etc/sssd/sssd.conf</code>]</li><br />
<li>[https://git.uwaterloo.ca/wics/documentation/blob/master/sshd_config <code>/etc/ssh/sshd_config</code>]</li><br />
<li>[https://git.uwaterloo.ca/wics/documentation/blob/master/ssh_config <code>/etc/ssh/ssh_config</code>]</li><br />
<li><p>[https://git.uwaterloo.ca/wics/documentation/blob/master/hosts <code>/etc/hosts</code>] (because what the heck)</p></li><br />
<li><p>Restart <code>sssd</code> and <code>sshd</code>. The former can be very temperamental:</p><br />
<pre># service ssh restart<br />
# service sssd restart</pre></li><br />
<li><p>Test that this all worked by attempting to log in:</p><br />
<pre># Just try logging in<br />
$ ssh me@machine.wics.uwaterloo.ca<br />
<br />
# Try logging in using Kerberos<br />
$ kinit me<br />
$ ssh -o GSSAPIAuthentication=yes me@machine.wics.uwaterloo.ca<br />
<br />
# Test that sudo is working<br />
machine:~$ sudo -i</pre></li></ul><br />
<br />
==== Tools for Debugging SSSD ====<br />
<br />
<ul><br />
<li><p>It turns out <code>sssd</code> is not the greatest at telling us things. If it starts breaking, stop it and start it in the foreground in debugging mode:</p><br />
<pre># service sssd stop<br />
# sssd -d 5 -i</pre></li><br />
<li><p>Some problems with <code>sssd</code> may be cache-related, and restarting it does not clear the cache. If you need to invalidate the cache, run</p><br />
<pre>sss_cache -E</pre></li></ul><br />
and then reboot (or restart sssd).<br />
<br />
=== Password Resets ===<br />
To change your own password you can run passwd on any of the club's machines.<br />
<br />
Changing other users' passwords<br />
* ssh auth1<br />
* sudo kadmin.local<br />
* cpw username<br />
* Enter new password and confirm<br />
<br />
[[Category:Software]]<br />
<br />
[http://web.archive.org/web/20120202205851/http://cryptnet.net/mirrors/docs/krb5api.html API Documentation.] While not even close to enough to let you do most things that you'd want to do with Kerberos (and also being somewhat woefully out-of-date, considering it's from 1996), it's at least a start.<br />
<br />
=== Expiring Passwords ===<br />
<br />
If you are on syscom, you can force a user to change their password by doing this:<br />
* ssh auth1<br />
* sudo kadmin.local<br />
* modify_principal +needchange [username]<br />
<br />
=== Suspending an Account ===<br />
<br />
If you are on syscom, you can prevent a user from logging with a Kerberos ticket by doing this:<br />
* ssh auth1<br />
* sudo kadmin.local<br />
* modify_principal -allow_tix [username]<br />
If you are seriously locking out an account, you may want to do some other things as well, including but not limited to changing the user's password (prevents password login) and changing the ownership and permissions on .ssh/authorized_keys* (prevents SSH key login). Don't do these things without a strong reason (but know how to do them when the time comes).<br />
<br />
=== bofh's Kerberos5 cheat sheet, or "what does *that* error message mean, exactly?" ===<br />
<br />
* If GSSAPI complains about "Wrong Principal in Request", make sure there's no clockskew on the machine trying to get the service ticket and the machine running the service that you are trying to get a GSS token to. This will cause this error for some insane reason, despite there being ANOTHER message for clockskew that specifically says "your clocks are off" - it just never seems to be used in the source code anywhere (as of MIT-KRB5 1.9, at least).<br />
* There are some "generic" errors that are hard to debug. A few possible causes: unreadable krb5.keytab, reverse resolution of a host does not match its principal.<br />
<br />
=== Replication ===<br />
<br />
auth1 replicates to auth2 using kpropd. This requires additional setup that needs to be documented here.<br />
<br />
Occasionally, the replication results in "ulog_replay failed (Cannot allocate memory), updates not registered". To correct this, run `kproplog -R` on auth1 and start the `kpropd` server again.</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=SSL&diff=4290SSL2019-06-02T13:29:12Z<p>S455wang: /* letsencrypt */ addmissing trailing slash to redirect URL</p>
<hr />
<div>== GlobalSign ==<br />
<br />
The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time to respond to certificate signing requests (CSR) for wildcard certs, so our CSR really needs to be handed off to IST at least 2 weeks in advance. You can do it sooner – the certificate expiry date will be the old expiry date + 1 year (+ a bonus ) Having an invalid cert for any length of time leads to terrible breakage, followed by terrible workarounds and prolonged problems.<br />
<br />
When the certificate is due to expire in a month or two, syscom should (but apparently doesn't always) get an email notification. This will include a renewal link. Otherwise, use the [https://uwaterloo.ca/information-systems-technology/about/organizational-structure/information-security-services/certificate-authority/globalsign-signed-x5093-certificates/self-service-globalsign-ssl-certificates IST-CA self service system]. Please keep a copy of the key, CSR and (once issued) certificate in <tt>/home/sysadmin/certs</tt>. The OpenSSL examples linked there are good to generate a 2048-bit RSA key and a corresponding CSR. It's probably a good idea to change the private key (as it's not that much effort anyways). Just sure your CSR is for <tt>*.csclub.uwaterloo.ca</tt>.<br />
<br />
At the self-service portal, these options worked in 2013. If you need IST assistance, [mailto:ist-ca@uwaterloo.ca ist-ca@uwaterloo.ca] is the email address you should contact.<br />
Products: OrganizationSSL<br />
SSL Certificate Type: Wildcard SSL Certificate<br />
Validity Period: 1 year<br />
Are you switching from a Competitor? No, I am not switching<br />
Are you renewing this Certificate? Yes (paste current certificate)<br />
30-day bonus: Yes (why not?)<br />
Add specific Subject Alternative Names (SANs): No (*.csclub.uwaterloo.ca automatically adds csclub.uwaterloo.ca as a SAN)<br />
Enter Certificate Signing Request (CSR): Yes (paste CSR)<br />
Contact Information:<br />
First Name: Computer Science Club<br />
Last Name: Systems Committee<br />
Telephone: +1 519 888 4567 x33870<br />
Email Address: syscom@csclub.uwaterloo.ca<br />
<br />
== Certificate Location ==<br />
<br />
Keep a copy of newly generated certificates in /home/sysadmin/certs on the NFS server (currently [[Machine_List#aspartame|aspartame]]).<br />
<br />
A list of places you'll need to put the new certificate to keep our services running. Private key (if applicable) should be kept next to the certificate with the extension .key.<br />
<br />
* caffeine:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* coffee:/etc/ssl/private/csclub.uwaterloo.ca (for PostgreSQL and MariaDB)<br />
* mail:/etc/ssl/private/csclub-wildcard.crt (for Apache, Postfix and Dovecot)<br />
* rt:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* potassium-benzoate:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* auth1:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* auth2:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* logstash:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* mattermost:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* load-balancer-0(1|2):/etc/ssl/private/csclub.uwaterloo.ca (for haproxy)<br />
<br />
Some services (e.g. Dovecot, Postfix) prefer to have the certificate chain in one file. Concatenate the appropriate intermediate root to the end of the certificate and store this as csclub-wildcard-chain.crt.<br />
<br />
== letsencrypt ==<br />
<br />
We support letsencrypt for our virtual hosts with custom domains. We use the <tt>cerbot</tt> from debian repositories with a configuration file at <tt>/etc/letsencrypt/cli.ini</tt>, and a systemd timer to handle renewals.<br />
<br />
The setup for a new domain is:<br />
<br />
# Become <tt>certbot</tt> on caffine with <tt>sudo -u certbot bash</tt> or similar<br />
# Run <tt>certbot certonly -c /etc/letsencrypt/cli.ini -d DOMAIN --logs-dir /tmp</tt>. The logs-dir isn't important and is only needed for troubleshooting.<br />
# Set up the Apache site configuration using the example below. Note the permanent redirect to https.<br />
<br />
<VirtualHost *:80><br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
#DocumentRoot /users/example/www/<br />
Redirect permanent / https://example.com/<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost><br />
<br />
<VirtualHost csclub:443><br />
SSLEngine on<br />
SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem<br />
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem<br />
SSLStrictSNIVHostCheck on<br />
<br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
DocumentRoot /users/example/www<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost></div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=SSL&diff=4287SSL2019-05-13T19:48:32Z<p>S455wang: /* letsencrypt */ add certonly to certbot command line</p>
<hr />
<div>== GlobalSign ==<br />
<br />
The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time to respond to certificate signing requests (CSR) for wildcard certs, so our CSR really needs to be handed off to IST at least 2 weeks in advance. You can do it sooner – the certificate expiry date will be the old expiry date + 1 year (+ a bonus ) Having an invalid cert for any length of time leads to terrible breakage, followed by terrible workarounds and prolonged problems.<br />
<br />
When the certificate is due to expire in a month or two, syscom should (but apparently doesn't always) get an email notification. This will include a renewal link. Otherwise, use the [https://uwaterloo.ca/information-systems-technology/about/organizational-structure/information-security-services/certificate-authority/globalsign-signed-x5093-certificates/self-service-globalsign-ssl-certificates IST-CA self service system]. Please keep a copy of the key, CSR and (once issued) certificate in <tt>/home/sysadmin/certs</tt>. The OpenSSL examples linked there are good to generate a 2048-bit RSA key and a corresponding CSR. It's probably a good idea to change the private key (as it's not that much effort anyways). Just sure your CSR is for <tt>*.csclub.uwaterloo.ca</tt>.<br />
<br />
At the self-service portal, these options worked in 2013. If you need IST assistance, [mailto:ist-ca@uwaterloo.ca ist-ca@uwaterloo.ca] is the email address you should contact.<br />
Products: OrganizationSSL<br />
SSL Certificate Type: Wildcard SSL Certificate<br />
Validity Period: 1 year<br />
Are you switching from a Competitor? No, I am not switching<br />
Are you renewing this Certificate? Yes (paste current certificate)<br />
30-day bonus: Yes (why not?)<br />
Add specific Subject Alternative Names (SANs): No (*.csclub.uwaterloo.ca automatically adds csclub.uwaterloo.ca as a SAN)<br />
Enter Certificate Signing Request (CSR): Yes (paste CSR)<br />
Contact Information:<br />
First Name: Computer Science Club<br />
Last Name: Systems Committee<br />
Telephone: +1 519 888 4567 x33870<br />
Email Address: syscom@csclub.uwaterloo.ca<br />
<br />
== Certificate Location ==<br />
<br />
Keep a copy of newly generated certificates in /home/sysadmin/certs on the NFS server (currently [[Machine_List#aspartame|aspartame]]).<br />
<br />
A list of places you'll need to put the new certificate to keep our services running. Private key (if applicable) should be kept next to the certificate with the extension .key.<br />
<br />
* caffeine:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* coffee:/etc/ssl/private/csclub.uwaterloo.ca (for PostgreSQL and MariaDB)<br />
* mail:/etc/ssl/private/csclub-wildcard.crt (for Apache, Postfix and Dovecot)<br />
* rt:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* potassium-benzoate:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* auth1:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* auth2:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* logstash:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* mattermost:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* load-balancer-0(1|2):/etc/ssl/private/csclub.uwaterloo.ca (for haproxy)<br />
<br />
Some services (e.g. Dovecot, Postfix) prefer to have the certificate chain in one file. Concatenate the appropriate intermediate root to the end of the certificate and store this as csclub-wildcard-chain.crt.<br />
<br />
== letsencrypt ==<br />
<br />
We support letsencrypt for our virtual hosts with custom domains. We use the <tt>cerbot</tt> from debian repositories with a configuration file at <tt>/etc/letsencrypt/cli.ini</tt>, and a systemd timer to handle renewals.<br />
<br />
The setup for a new domain is:<br />
<br />
# Become <tt>certbot</tt> on caffine with <tt>sudo -u certbot bash</tt> or similar<br />
# Run <tt>certbot certonly -c /etc/letsencrypt/cli.ini -d DOMAIN --logs-dir /tmp</tt>. The logs-dir isn't important and is only needed for troubleshooting.<br />
# Set up the Apache site configuration using the example below. Note the permanent redirect to https.<br />
<br />
<VirtualHost *:80><br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
#DocumentRoot /users/example/www/<br />
Redirect permanent / https://example.com<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost><br />
<br />
<VirtualHost csclub:443><br />
SSLEngine on<br />
SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem<br />
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem<br />
SSLStrictSNIVHostCheck on<br />
<br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
DocumentRoot /users/example/www<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost></div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=SSL&diff=4286SSL2019-05-13T19:45:32Z<p>S455wang: /* letsencrypt */ close <tt> tag properly</p>
<hr />
<div>== GlobalSign ==<br />
<br />
The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time to respond to certificate signing requests (CSR) for wildcard certs, so our CSR really needs to be handed off to IST at least 2 weeks in advance. You can do it sooner – the certificate expiry date will be the old expiry date + 1 year (+ a bonus ) Having an invalid cert for any length of time leads to terrible breakage, followed by terrible workarounds and prolonged problems.<br />
<br />
When the certificate is due to expire in a month or two, syscom should (but apparently doesn't always) get an email notification. This will include a renewal link. Otherwise, use the [https://uwaterloo.ca/information-systems-technology/about/organizational-structure/information-security-services/certificate-authority/globalsign-signed-x5093-certificates/self-service-globalsign-ssl-certificates IST-CA self service system]. Please keep a copy of the key, CSR and (once issued) certificate in <tt>/home/sysadmin/certs</tt>. The OpenSSL examples linked there are good to generate a 2048-bit RSA key and a corresponding CSR. It's probably a good idea to change the private key (as it's not that much effort anyways). Just sure your CSR is for <tt>*.csclub.uwaterloo.ca</tt>.<br />
<br />
At the self-service portal, these options worked in 2013. If you need IST assistance, [mailto:ist-ca@uwaterloo.ca ist-ca@uwaterloo.ca] is the email address you should contact.<br />
Products: OrganizationSSL<br />
SSL Certificate Type: Wildcard SSL Certificate<br />
Validity Period: 1 year<br />
Are you switching from a Competitor? No, I am not switching<br />
Are you renewing this Certificate? Yes (paste current certificate)<br />
30-day bonus: Yes (why not?)<br />
Add specific Subject Alternative Names (SANs): No (*.csclub.uwaterloo.ca automatically adds csclub.uwaterloo.ca as a SAN)<br />
Enter Certificate Signing Request (CSR): Yes (paste CSR)<br />
Contact Information:<br />
First Name: Computer Science Club<br />
Last Name: Systems Committee<br />
Telephone: +1 519 888 4567 x33870<br />
Email Address: syscom@csclub.uwaterloo.ca<br />
<br />
== Certificate Location ==<br />
<br />
Keep a copy of newly generated certificates in /home/sysadmin/certs on the NFS server (currently [[Machine_List#aspartame|aspartame]]).<br />
<br />
A list of places you'll need to put the new certificate to keep our services running. Private key (if applicable) should be kept next to the certificate with the extension .key.<br />
<br />
* caffeine:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* coffee:/etc/ssl/private/csclub.uwaterloo.ca (for PostgreSQL and MariaDB)<br />
* mail:/etc/ssl/private/csclub-wildcard.crt (for Apache, Postfix and Dovecot)<br />
* rt:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* potassium-benzoate:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* auth1:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* auth2:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* logstash:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* mattermost:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* load-balancer-0(1|2):/etc/ssl/private/csclub.uwaterloo.ca (for haproxy)<br />
<br />
Some services (e.g. Dovecot, Postfix) prefer to have the certificate chain in one file. Concatenate the appropriate intermediate root to the end of the certificate and store this as csclub-wildcard-chain.crt.<br />
<br />
== letsencrypt ==<br />
<br />
We support letsencrypt for our virtual hosts with custom domains. We use the <tt>cerbot</tt> from debian repositories with a configuration file at <tt>/etc/letsencrypt/cli.ini</tt>, and a systemd timer to handle renewals.<br />
<br />
The setup for a new domain is:<br />
<br />
# Become <tt>certbot</tt> on caffine with <tt>sudo -u certbot bash</tt> or similar<br />
# Run <tt>certbot -c /etc/letsencrypt/cli.ini -d DOMAIN --logs-dir /tmp</tt>. The logs-dir isn't important and is only needed for troubleshooting.<br />
# Set up the Apache site configuration using the example below. Note the permanent redirect to https.<br />
<br />
<VirtualHost *:80><br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
#DocumentRoot /users/example/www/<br />
Redirect permanent / https://example.com<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost><br />
<br />
<VirtualHost csclub:443><br />
SSLEngine on<br />
SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem<br />
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem<br />
SSLStrictSNIVHostCheck on<br />
<br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
DocumentRoot /users/example/www<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost></div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=SSL&diff=4285SSL2019-05-13T19:45:13Z<p>S455wang: /* letsencrypt */ update instructions on how to actually log in as certbot</p>
<hr />
<div>== GlobalSign ==<br />
<br />
The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time to respond to certificate signing requests (CSR) for wildcard certs, so our CSR really needs to be handed off to IST at least 2 weeks in advance. You can do it sooner – the certificate expiry date will be the old expiry date + 1 year (+ a bonus ) Having an invalid cert for any length of time leads to terrible breakage, followed by terrible workarounds and prolonged problems.<br />
<br />
When the certificate is due to expire in a month or two, syscom should (but apparently doesn't always) get an email notification. This will include a renewal link. Otherwise, use the [https://uwaterloo.ca/information-systems-technology/about/organizational-structure/information-security-services/certificate-authority/globalsign-signed-x5093-certificates/self-service-globalsign-ssl-certificates IST-CA self service system]. Please keep a copy of the key, CSR and (once issued) certificate in <tt>/home/sysadmin/certs</tt>. The OpenSSL examples linked there are good to generate a 2048-bit RSA key and a corresponding CSR. It's probably a good idea to change the private key (as it's not that much effort anyways). Just sure your CSR is for <tt>*.csclub.uwaterloo.ca</tt>.<br />
<br />
At the self-service portal, these options worked in 2013. If you need IST assistance, [mailto:ist-ca@uwaterloo.ca ist-ca@uwaterloo.ca] is the email address you should contact.<br />
Products: OrganizationSSL<br />
SSL Certificate Type: Wildcard SSL Certificate<br />
Validity Period: 1 year<br />
Are you switching from a Competitor? No, I am not switching<br />
Are you renewing this Certificate? Yes (paste current certificate)<br />
30-day bonus: Yes (why not?)<br />
Add specific Subject Alternative Names (SANs): No (*.csclub.uwaterloo.ca automatically adds csclub.uwaterloo.ca as a SAN)<br />
Enter Certificate Signing Request (CSR): Yes (paste CSR)<br />
Contact Information:<br />
First Name: Computer Science Club<br />
Last Name: Systems Committee<br />
Telephone: +1 519 888 4567 x33870<br />
Email Address: syscom@csclub.uwaterloo.ca<br />
<br />
== Certificate Location ==<br />
<br />
Keep a copy of newly generated certificates in /home/sysadmin/certs on the NFS server (currently [[Machine_List#aspartame|aspartame]]).<br />
<br />
A list of places you'll need to put the new certificate to keep our services running. Private key (if applicable) should be kept next to the certificate with the extension .key.<br />
<br />
* caffeine:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* coffee:/etc/ssl/private/csclub.uwaterloo.ca (for PostgreSQL and MariaDB)<br />
* mail:/etc/ssl/private/csclub-wildcard.crt (for Apache, Postfix and Dovecot)<br />
* rt:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* potassium-benzoate:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* auth1:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* auth2:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* logstash:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* mattermost:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* load-balancer-0(1|2):/etc/ssl/private/csclub.uwaterloo.ca (for haproxy)<br />
<br />
Some services (e.g. Dovecot, Postfix) prefer to have the certificate chain in one file. Concatenate the appropriate intermediate root to the end of the certificate and store this as csclub-wildcard-chain.crt.<br />
<br />
== letsencrypt ==<br />
<br />
We support letsencrypt for our virtual hosts with custom domains. We use the <tt>cerbot</tt> from debian repositories with a configuration file at <tt>/etc/letsencrypt/cli.ini</tt>, and a systemd timer to handle renewals.<br />
<br />
The setup for a new domain is:<br />
<br />
# Become <tt>certbot</tt> on caffine with <tt>sudo -u certbot bash<tt> or similar<br />
# Run <tt>certbot -c /etc/letsencrypt/cli.ini -d DOMAIN --logs-dir /tmp</tt>. The logs-dir isn't important and is only needed for troubleshooting.<br />
# Set up the Apache site configuration using the example below. Note the permanent redirect to https.<br />
<br />
<VirtualHost *:80><br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
#DocumentRoot /users/example/www/<br />
Redirect permanent / https://example.com<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost><br />
<br />
<VirtualHost csclub:443><br />
SSLEngine on<br />
SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem<br />
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem<br />
SSLStrictSNIVHostCheck on<br />
<br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
DocumentRoot /users/example/www<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost></div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Music&diff=4284Music2019-04-26T22:43:58Z<p>S455wang: update keybindings for ncmpcpp</p>
<hr />
<div>Music is run off nullsleep, since that's the computer with the speakers attached. All music files are in /music. The command to get music running is ncmpcpp. You must be a member of the audio group. View recently listened tracks: http://www.last.fm/user/csclub<br />
<br />
== Controls ==<br />
To view the keybindings of ncmpcpp, press F1 while it's running. <br />
The number keys switch between tabs in it. <br />
<br />
* 1 is current playlist <br />
* 2 is browsing files<br />
* 3 is search<br />
* 4 is browsing the media library<br />
* 5 is browsing saved playlists, etc.</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Web_Hosting&diff=4283Web Hosting2019-03-24T02:27:13Z<p>S455wang: Mention TLS for personal domains</p>
<hr />
<div>The CSC offers web hosting for [[Club Hosting|clubs]] and [http://csclub.uwaterloo.ca/about/ our members] in accordance with our [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. This is a quick guide for the kinds of hosting we offer on our webserver, <tt>csclub.uwaterloo.ca</tt>, also known as [[Machine List#caffeine|caffeine]].<br />
<br />
We run an Apache httpd webserver and we offer you the use of a [[MySQL|MySQL database]].<br />
<br />
== What can I host on my website? ==<br />
<br />
Web hosting is provided in accordance with the CSC [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. As a reminder, you are '''not permitted''' to host any of the following:<br />
<br />
* '''Ads.''' Advertisements are not permitted because using our machines for commercial purposes is forbidden by university policy.<br />
* '''Your start-up's website.''' Again, commercial use of our hosting is not permitted.<br />
* '''Unauthorized copyrighted materials.''' Violating the law is a violation of our Machine Usage Agreement.<br />
<br />
Please note that '''this is not an exhaustive list. Websites may be taken down ''without notice''''' at the discretion of the Systems Committee. (We will always let you know that we took your site down, but if it is breaking our shared environment, we can't provide an advance warning.)<br />
<br />
Some great examples of things members host on our webserver:<br />
<br />
* Academic projects!<br />
* A personal website or blog!<br />
* [[Club Hosting|Club websites!]]<br />
<br />
== How do I make a website? ==<br />
<br />
If this is your first time making a website, this section may be useful to you.<br />
<br />
To build your website, CS Club suggests you use http://blog.getpelican.com/ (Python) or https://jekyllrb.com/ (Ruby). They generate static sites and are faster, simpler and more secure than CMSs like WordPress (dynamic and written in PHP) for small sites. We routinely disable WordPress sites that are more than a few weeks out of date (or if a critical security flaw is disclosed).<br />
<br />
You can transfer files to the CS Club via SFTP If you run Windows use https://winscp.net/eng/index.php, if you use OS X use https://cyberduck.io/?l=en, and Linux users can directly access SFTP by using ssh:// urls in their GUI file managers. You can use SSH for direct shell access, just run <tt>ssh ctdalek@corn-syrup.csclub.uwaterloo.ca</tt> or look at https://wiki.csclub.uwaterloo.ca/Machine_List for our other machines. Please do not connect to caffeine (the actual web server) unless you need to debug code. You can also just create your site on our servers or in our office to avoid having to shuffle files around. Your home directory is distributed everywhere via NFS. Bonus points if you use Git to sync your own computer with our servers, if you do this we recommend using git.uwaterloo.ca as your upstream repository.<br />
<br />
If you need help, email <tt>syscom@csclub.uwaterloo.ca[mailto:syscom@csclub.uwaterloo.ca]</tt> or come to the CS Club office on the MC 3rd floor across from the Mathsoc CnD.<br />
<br />
== DNS and Your Domain Name ==<br />
<br />
You can serve files without any additional configuration by placing them in your <tt>www</tt> directory and accessing them at <tt>http://csclub.uwaterloo.ca/~userid</tt>, where <tt>userid</tt> is your CSC user ID. However, many of our members and clubs prefer to use a custom domain name.<br />
<br />
Note that this means you ''do not'' have to register a domain name to be able to use our services. You can just put a website at <tt>http://csclub.uwaterloo.ca/~userid</tt>.<br />
<br />
=== uwaterloo.ca domain Names ===<br />
<br />
If you represent a UWaterloo organization, you may be eligible for a custom <tt>uwaterloo.ca</tt> domain name, such as <tt>csclub.uwaterloo.ca</tt>. We can request this on your behalf.<br />
<br />
In order to do so, we must have verified that the organization is a legitimate UWaterloo-affiliated group, and that you, the representative, are authorized to request a domain name on their behalf. This all takes place when you request [[Club Hosting|club hosting]] with the Computer Science Club.<br />
<br />
Once you register as a club representative of your particular organization, you can send an email from your official club account to syscom@csclub.uwaterloo.ca to request the domain <tt>yourdomain.uwaterloo.ca</tt>. Assuming it is available, we will file a ticket and request the domain in your name.<br />
<br />
=== Your personal domain name ===<br />
<br />
These virtual hosts must be approved by the Executive and Systems Committee. If interested, send syscom@csclub.uwaterloo.ca an email. If your request is approved, the Systems Committee will direct you to create a CNAME record for your domain and point it at <tt>csclub.uwaterloo.ca</tt>.<br />
<br />
If you are interested in receiving mail or having other records on your domain, the apex of your domain cannot be a CNAME. If this is the case, then your domain should contain an "A" record of <tt>129.97.134.17</tt> and a (optional, but recommended) "AAAA" record of <tt>2620:101:f000:4901:c5c::caff:e12e</tt>.<br />
<br />
If you want TLS on your personal domain, mention this in your email to syscom (syscom: see [[SSL#letsencrypt]]).<br />
<br />
== Static Sites ==<br />
<br />
You can place all your static content into your web directory, <tt>/users/userid/www</tt>.<br />
<br />
If you have been approved for a virtual host, you can access this content using your personal domain once the Systems Committee makes the appropriate configuration changes. Here is an example configuration file:<br />
<br />
<VirtualHost *:80><br />
ServerName foobar.uwaterloo.ca<br />
ServerAlias *.foobar.uwaterloo.ca foobar<br />
ServerAdmin your@email.here.tld<br />
<br />
DocumentRoot /users/userid/www/<br />
<br />
ErrorLog /var/log/apache2/luser-userid-error.log<br />
CustomLog /var/log/apache2/luser-userid-access.log combined<br />
</VirtualHost><br />
<br />
== Dynamic Sites ==<br />
<br />
If you require use of a database, we offer you the sole choice of MySQL. See [[MySQL|this guide]] for how to create your database and connect to MySQL.<br />
<br />
=== ***NOTICE*** ===<br />
<br />
We '''STRONGLY''' discourage the use of content management systems such as<br />
WordPress. These packages are notorious for the number of security<br />
vulnerabilities they contain and pose a threat to our systems if they are not<br />
kept up to date. The Systems Committee '''WILL,''' at its discretion, disable<br />
any website using a package such as WordPress that is not updated to the latest<br />
version or that is found to contain exploitable security flaws. In such a case,<br />
the member or club serving that site will be notified of the termination; the<br />
site will not be re-enabled until the issues are addressed.<br />
<br />
=== Using PHP ===<br />
<br />
Because we use Apache, it's as simple as placing your <tt>index.php</tt> file in your <tt>/users/userid/www</tt>. That's it!<br />
<br />
You can even include rewrite rules in an <tt>.htaccess</tt> file in your web directory.<br />
<br />
=== Reverse Proxy (Python, Ruby, Perl, etc.) ===<br />
<br />
(In progress... Cliff Notes below)<br />
<br />
If computationally expensive, please run the server on a general-use server and proxy to Caffeine.<br />
<br />
If Python, (1) use a [http://docs.python-guide.org/en/latest/dev/virtualenvs/ virtual environment] (2) host your app (within the virtualenv) with [http://gunicorn.org/ Gunicorn] on a high port (but campus firewalled, i.e. NOT Ports 28000-28500).<br />
<br />
If Ruby (Note, I've never used Ruby so take this with a grain of salt), use [http://unicorn.bogomips.org/ Unicorn] in the same way.<br />
<br />
==== .htaccess Config ====<br />
<br />
Put the following in the appropriate .htaccess file (e.g. if you were running your app at ~ctdalek/python-app, put the .htaccess in ~ctdalek/www/python-app alongside the static files). Replace HOST with localhost if running on Caffeine or the hostname if running elsewhere; replace port with your chosen port number.<br />
<br />
<pre><br />
RewriteEngine On<br />
<br />
# If you want websockets, uncomment this:<br />
#RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]<br />
#RewriteCond %{HTTP:CONNECTION} ^Upgrade$ [NC]<br />
#RewriteRule .* ws://HOST:RANDOM_PORT%{REQUEST_URI} [L,P]<br />
<br />
RewriteCond %{SCRIPT_FILENAME} !-d<br />
RewriteCond %{SCRIPT_FILENAME} !-f<br />
RewriteRule "index.html" "http://HOST:RANDOM_PORT/" [P]<br />
<br />
RewriteCond %{SCRIPT_FILENAME} !-d<br />
RewriteCond %{SCRIPT_FILENAME} !-f<br />
RewriteRule "^(.*)$" "http://HOST:RANDOM_PORT/$1" [P]<br />
</pre><br />
<br />
== Requiring Authentication ==<br />
<br />
You can require users to authenticate through the University's Central Authentication System (CAS) by adding the following contents to your .htaccess configuration file:<br />
<br />
<pre><br />
AuthType CAS<br />
Require valid-user<br />
</pre><br />
<br />
You can replace <pre>Require valid-user</pre> with <pre>Require user ctdalek</pre> to restrict to specific users. See http://ist.uwaterloo.ca/~mpatters/cas/user.html for more information.<br />
<br />
== Syscom ==<br />
<br />
=== Disabling insecure or infringing sites ===<br />
<br />
To disable a webspace that has known security vulnerabilities add the following snippet to `/etc/apache2/conf-available/disable-vuln-site.conf`. This rewrites all accesses of the directory or its children to the given file. Note that our disable page always returns HTTP status code 503 (Service Unavailable).<br />
<br />
<Directory /users/$BADUSER/www><br />
AllowOverride None<br />
Redirect 503 /<br />
ErrorDocument 503 /~sysadmin/insecure/index.html<br />
</Directory><br />
<br />
For infringing sites:<br />
<br />
<Directory "/users/$BADUSER/www/infringing-directory"><br />
AllowOverride None<br />
Redirect 503 /<br />
ErrorDocument 503 /~sysadmin/infringing/index.html<br />
</Directory><br />
<br />
=== Expired Websites ===<br />
<br />
There is a cron job running hourly on caffeine which disables expired member's websites (and re-enables them when they've renewed their membership).<br />
<br />
The script is here: http://git.csclub.uwaterloo.ca/?p=public/expire-sites.git;a=summary<br />
<br />
Some highlights:<br />
<br />
* The script provides a 1-month grace period (corresponding to the grace period of pam-csc)<br />
* The expired page returns HTTP status code of 503 (Service Unavailable)</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=SSL&diff=4282SSL2019-03-24T02:23:27Z<p>S455wang: Add section on letsencrypt for virtual hosts</p>
<hr />
<div>== GlobalSign ==<br />
<br />
The CSC currently has an SSL Certificate from GlobalSign for *.csclub.uwaterloo.ca provided at no cost to us through IST. GlobalSign likes to take a long time to respond to certificate signing requests (CSR) for wildcard certs, so our CSR really needs to be handed off to IST at least 2 weeks in advance. You can do it sooner – the certificate expiry date will be the old expiry date + 1 year (+ a bonus ) Having an invalid cert for any length of time leads to terrible breakage, followed by terrible workarounds and prolonged problems.<br />
<br />
When the certificate is due to expire in a month or two, syscom should (but apparently doesn't always) get an email notification. This will include a renewal link. Otherwise, use the [https://uwaterloo.ca/information-systems-technology/about/organizational-structure/information-security-services/certificate-authority/globalsign-signed-x5093-certificates/self-service-globalsign-ssl-certificates IST-CA self service system]. Please keep a copy of the key, CSR and (once issued) certificate in <tt>/home/sysadmin/certs</tt>. The OpenSSL examples linked there are good to generate a 2048-bit RSA key and a corresponding CSR. It's probably a good idea to change the private key (as it's not that much effort anyways). Just sure your CSR is for <tt>*.csclub.uwaterloo.ca</tt>.<br />
<br />
At the self-service portal, these options worked in 2013. If you need IST assistance, [mailto:ist-ca@uwaterloo.ca ist-ca@uwaterloo.ca] is the email address you should contact.<br />
Products: OrganizationSSL<br />
SSL Certificate Type: Wildcard SSL Certificate<br />
Validity Period: 1 year<br />
Are you switching from a Competitor? No, I am not switching<br />
Are you renewing this Certificate? Yes (paste current certificate)<br />
30-day bonus: Yes (why not?)<br />
Add specific Subject Alternative Names (SANs): No (*.csclub.uwaterloo.ca automatically adds csclub.uwaterloo.ca as a SAN)<br />
Enter Certificate Signing Request (CSR): Yes (paste CSR)<br />
Contact Information:<br />
First Name: Computer Science Club<br />
Last Name: Systems Committee<br />
Telephone: +1 519 888 4567 x33870<br />
Email Address: syscom@csclub.uwaterloo.ca<br />
<br />
== Certificate Location ==<br />
<br />
Keep a copy of newly generated certificates in /home/sysadmin/certs on the NFS server (currently [[Machine_List#aspartame|aspartame]]).<br />
<br />
A list of places you'll need to put the new certificate to keep our services running. Private key (if applicable) should be kept next to the certificate with the extension .key.<br />
<br />
* caffeine:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* coffee:/etc/ssl/private/csclub.uwaterloo.ca (for PostgreSQL and MariaDB)<br />
* mail:/etc/ssl/private/csclub-wildcard.crt (for Apache, Postfix and Dovecot)<br />
* rt:/etc/ssl/private/csclub-wildcard.crt (for Apache)<br />
* potassium-benzoate:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* auth1:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* auth2:/etc/ssl/private/csclub-wildcard.crt (for slapd)<br />
* logstash:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* mattermost:/etc/ssl/private/csclub-wildcard.crt (for nginx)<br />
* load-balancer-0(1|2):/etc/ssl/private/csclub.uwaterloo.ca (for haproxy)<br />
<br />
Some services (e.g. Dovecot, Postfix) prefer to have the certificate chain in one file. Concatenate the appropriate intermediate root to the end of the certificate and store this as csclub-wildcard-chain.crt.<br />
<br />
== letsencrypt ==<br />
<br />
We support letsencrypt for our virtual hosts with custom domains. We use the <tt>cerbot</tt> from debian repositories with a configuration file at <tt>/etc/letsencrypt/cli.ini</tt>, and a systemd timer to handle renewals.<br />
<br />
The setup for a new domain is:<br />
<br />
# Become <tt>certbot</tt> on caffine<br />
# Run <tt>certbot -c /etc/letsencrypt/cli.ini -d DOMAIN --logs-dir /tmp</tt>. The logs-dir isn't important and is only needed for troubleshooting.<br />
# Set up the Apache site configuration using the example below. Note the permanent redirect to https.<br />
<br />
<VirtualHost *:80><br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
#DocumentRoot /users/example/www/<br />
Redirect permanent / https://example.com<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost><br />
<br />
<VirtualHost csclub:443><br />
SSLEngine on<br />
SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem<br />
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem<br />
SSLStrictSNIVHostCheck on<br />
<br />
ServerName example.com<br />
ServerAlias *.example.com<br />
ServerAdmin example@csclub.uwaterloo.ca<br />
<br />
DocumentRoot /users/example/www<br />
<br />
ErrorLog /var/log/apache2/example-error.log<br />
CustomLog /var/log/apache2/example-access.log combined<br />
</VirtualHost></div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Machine_List&diff=4275Machine List2019-02-04T17:21:38Z<p>S455wang: /* biloba */ biloba hosts caffeine and mail, among others</p>
<hr />
<div>= Web Server =<br />
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.<br />
<br />
== ''caffeine'' ==<br />
<br />
Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.<br />
<br />
==== Specs ====<br />
<br />
* currently a virtual machine hosted on [[#biloba|biloba]]<br />
** 12 vCPUs<br />
** 32GB of RAM<br />
<br />
==== Services ====<br />
<br />
* Club and member web sites with [[Apache]]<br />
* [[MySQL]] databases<br />
* [[PostgreSQL]] databases<br />
* [[ceo]] daemon<br />
* mail was migrated to [[#mail|mail]]<br />
<br />
= General-Use Servers =<br />
<br />
These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no bitcoin mining).<br />
<br />
Most people use either taurine and clones or (high-fructose-)corn-syrup. hfcs is probably our beefiest machine at the moment, if you are wanting to do some heavy computation. Again, if you have a long-running computationally intensive job, it's good to<br />
nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.<br />
<br />
== ''corn-syrup'' ==<br />
<br />
PowerEdge 2950<br />
<br />
==== Specs ====<br />
<br />
* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)<br />
* 32 GB RAM<br />
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27<br />
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29<br />
* IPMI mac addr 00:24:e8:52:41:2b<br />
* 3 &times; Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)<br />
<br />
==== Notes ====<br />
<br />
* Use eth0/Gb0 for the mathstudentorgsnet connection<br />
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.<br />
<br />
==== Services ====<br />
<br />
* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)<br />
<br />
== ''high-fructose-corn-syrup'' ==<br />
<br />
High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.<br />
<br />
==== Specs ====<br />
<br />
* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)<br />
* 192 GB RAM<br />
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]<br />
* 500 GB Seagate Barracuda<br />
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]<br />
<br />
== ''taurine'' ==<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 8GB RAM<br />
* 136 GB LVM volume group<br />
<br />
==== Services ====<br />
<br />
* Virtual machines<br />
* BitlBee IRC instant messaging gateway (localhost only)<br />
* [[ident]] server to maintain high connection cap to freenode<br />
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.<br />
<br />
== ''sucrose'' ==<br />
<br />
sucrose is a [[#taurine|taurine]] clone donated by CSCF.<br />
<br />
==== Specs ====<br />
<br />
= Office Terminals =<br />
<br />
It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.<br />
<br />
== ''bit-shifter'' ==<br />
<br />
bit-shifter is an office terminal.<br />
<br />
==== Specs ====<br />
<br />
* Intel(R) Core(TM)2 Quad CPU Q8300<br />
* 4GB RAM<br />
* Nvidia GeForce GT 440<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Jacob Parker's Firewire Card<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''gwem'' ==<br />
<br />
gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.<br />
<br />
=== Specs ===<br />
<br />
* AMD FX-8150 3.6GHz 8-Core CPU<br />
* 16 GB RAM<br />
* AMD Radeon 6870 HD 1GB GPU<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
== ''maltodextrin'' ==<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i3-4130 @ 3.40 GHz<br />
* 8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''natural-flavours'' ==<br />
<br />
Natural-flavours is an office terminal; it used to be our mirror.<br />
<br />
In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i7-6700k<br />
* 2x8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Cup Holder (DVD drive has power, but not connected to mother board)<br />
<br />
== ''nullsleep'' ==<br />
<br />
nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* Intel® Dual Core Atom™ 330<br />
* 2GB RAM<br />
* NVIDIA® ION™ graphics<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* DVD Burner<br />
<br />
==== Speakers ====<br />
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.<br />
<br />
==== Services ====<br />
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.<br />
Music is located in /music on the office terminals<br />
<br />
== ''strombola''==<br />
It is named after Gordon Strombola.<br />
<br />
==== Specs ====<br />
* Intel Core2 Quad Q8200 @ 2.33GHz<br />
* 4 GB RAM<br />
* nVidia GeForce 8600 GTS<br />
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
==== Speakers ====<br />
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.<br />
<br />
= Syscom Only =<br />
<br />
The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.<br />
== ''aspartame'' ==<br />
<br />
aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 10GB RAM<br />
<br />
==== Notes ====<br />
<br />
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.<br />
<br />
== ''dextrose'' ==<br />
<br />
dextrose is a [[#taurine|taurine]] clone donated by CSCF. It currently hosts [[#mathnews|the mathNEWS server]], [[#auth1|auth1]], [[#mail|mail]], [[#rt|rt]] and [[#munin|munin]].<br />
<br />
==== Specs ====<br />
<br />
* 2 72GB drives in RAID1 (LVM dextrose)<br />
* 2 1TB drives in RAID1 (LVM dextrose2)<br />
<br />
== ''auth1'' ==<br />
<br />
Container on [[#dextrose|dextrose]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] master<br />
* [[Kerberos]] master<br />
<br />
== ''coffee'' ==<br />
<br />
Virtual machine running on [[#ginkgo|ginkgo]].<br />
<br />
==== Services ====<br />
<br />
* [[Database#MySQL|MySQL]]<br />
* [[Database#Postgres|Postgres]]<br />
<br />
== ''cobalamin'' ==<br />
<br />
Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.<br />
<br />
==== Specs ====<br />
<br />
* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)<br />
* 16GB RAM<br />
* Broadcom NetworkXtreme II<br />
* 2x73GB Hard Drives, hardware RAID1<br />
** Soon to be 2x1TB in MegaRAID1<br />
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration<br />
<br />
==== Services ====<br />
<br />
* Containers: [[#auth2|auth2]]<br />
<br />
==== Notes ====<br />
<br />
* The network card requires non-free drivers. Be sure to use an installation disc with non-free.<br />
<br />
* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:<br />
<br />
** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240<br />
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248<br />
<br />
* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.<br />
<br />
== ''auth2'' ==<br />
<br />
Container on [[#cobalamin|cobalamin]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] slave<br />
* [[Kerberos]] slave<br />
<br />
MAC Address: c2:c0:00:00:00:a2<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon X3450 @ 2.67 GHz<br />
* 6 GB RAM<br />
* vg0: 465 GB software RAID1 (contains root partition):<br />
** 750 GB Seagate Barracuda SATA hard drive<br />
** 500 GB Western-Digital Caviar Blue SATA hard drive<br />
* vg1: 596 GB software RAID1 (contains caffeine):<br />
** 2 &times; 640 GB Western-Digital Caviar Blue SATA hard drive<br />
<br />
==== Services ====<br />
<br />
* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]], [[#munin|munin]]<br />
<br />
== ''mail'' ==<br />
<br />
mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#biloba|biloba]]<br />
<br />
==== Services ====<br />
<br />
* [[Mail]] services<br />
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])<br />
* [[Webmail]]<br />
* [[ceo]] daemon<br />
<br />
== ''psilodump'' ==<br />
<br />
psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.<br />
<br />
==== Specs ====<br />
<br />
== ''phlogiston'' ==<br />
<br />
phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.<br />
<br />
phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.<br />
<br />
==== Specs ====<br />
<br />
== ''sodium-benzoate'' ==<br />
<br />
Sodium-benzoate is our previous mirror server, funded by MEF.<br />
<br />
It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon Quad Core E5405 @ 2.00 GHz<br />
* 16GB RAM<br />
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)<br />
<br />
Space disks are currently in the office underneath maltodextrin.<br />
<br />
== ''potassium-benzoate'' ==<br />
<br />
potassium-benzoate is our mirror server, funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* 36 drive Supermicro chassis (SSG-6048R-E1CR36L) <br />
* 1 x Intel Xeon E5-2630 (8 cores, 2.40 GHz)<br />
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM<br />
* 2 x 1 TB Samsung Evo 850 SSD drives<br />
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)<br />
* 10 Gbps SFP+ card (loaned from CSCF)<br />
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)<br />
<br />
==== Network Connections ====<br />
<br />
potassium-benzoate has two connections to our network:<br />
<br />
* 1 Gbps to our switch (used for management)<br />
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)<br />
<br />
Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.<br />
<br />
==== Services ====<br />
<br />
* [[Mirror]]<br />
* [[Talks]] mirror<br />
* [[Debian_Repository|CSClub packages repository]]<br />
<br />
== ''munin'' ==<br />
<br />
munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#dextrose|dextrose]]<br />
<br />
==== Services ====<br />
<br />
* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon<br />
<br />
<br />
== ''yerba-mate'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)<br />
* mattermost (under development)<br />
* shibboleth (under development)<br />
<br />
Also used for experimenting new CSC services.<br />
<br />
= Cloud =<br />
<br />
These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.<br />
<br />
== ''guayusa'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2TB PCI-Express Flash SSD<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
Currently in use for experimenting new CSC services.<br />
<br />
* logstash (testing of logstash)<br />
* load-balancer-01<br />
* cifs (for booting ginkgo from CD)<br />
* caffeine-01 (testing of multi-node caffeine)<br />
* block1.cloud<br />
* object1.cloud<br />
<br />
== ''ginkgo'' ==<br />
<br />
Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]<br />
* 256GB RAM<br />
* 2 x 1.2 TB SSD (400GB of each for RAID 1)<br />
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
* controller1.cloud<br />
* db1.cloud<br />
* router1.cloud (NAT for cloud tenant network)<br />
* network1.cloud<br />
<br />
== ''biloba'' ==<br />
<br />
Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]<br />
* 384GB RAM<br />
* 12 3.5" Hot Swap Drive Bays<br />
** 2 x 480 GB SSD<br />
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
* caffeine<br />
* mail<br />
* mattermost<br />
<br />
= Storage =<br />
<br />
== ''fs00'' ==<br />
<br />
fs00 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
== ''fs01'' ==<br />
<br />
fs01 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
= Other =<br />
<br />
== ''goto80'' ==<br />
<br />
This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located in the office on the top shelf above strombola.<br />
<br />
==== Specs ====<br />
<br />
* 500 MHz Feroceon (ARM926ej-s compatible) processor<br />
* ARMv5TEJ architecture<br />
<br />
Use -march=armv5te -mtune=arm926ej-s options to GCC.<br />
<br />
For information on the TS-7800's hardware see here:<br />
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800<br />
<br />
== ''binaerpilot'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''anamanaguchi'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''digital cutter'' ==<br />
<br />
See [[Digital Cutter|here]].<br />
<br />
== ''mathnews'' ==<br />
<br />
[[#dextrose|dextrose]] hosts a container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.<br />
<br />
= Decommissioned =<br />
<br />
== ''glomag'' ==<br />
<br />
Glomag hosted [[#caffeine|caffeine]]. Decomissioned April 6, 2018.<br />
<br />
== ''Lisp machine'' ==<br />
<br />
A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.<br />
<br />
http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.<br />
<br />
==== Specs ====<br />
<br />
Currently inoperable due to (at least) a missing console cable.<br />
<br />
== ''ginseng'' ==<br />
<br />
Ginseng used to be our fileserver, before aspartame and the netapp took over.<br />
<br />
==== Specs ====<br />
<br />
* Intel Pentium Dual Core E2180<br />
* 8GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]<br />
* 4 &times; 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].<br />
[[Category:Hardware]]<br />
<br />
== ''calum'' ==<br />
<br />
The server from back before recorded memory.<br />
<br />
== ''paza'' ==<br />
<br />
An iMac G3 that was used as a dumb terminal.<br />
<br />
==== Specs ====<br />
<br />
* 233Mhz PowerPC 740/750<br />
* 96 MB RAM<br />
<br />
== ''romana'' ==<br />
<br />
Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.<br />
<br />
Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 2 PowerPC based processors<br />
* Stylish Blinken processor-load lights<br />
<br />
== ''sodium-citrate'' ==<br />
<br />
Sodium-citrate was an SGI O2 machine.<br />
<br />
In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.<br />
<br />
==== Specs ====<br />
* SGI O2 MIPS processor<br />
* 423 MB (?) RAM<br />
* 2 &times; 2 GB hard drive<br />
<br />
== ''acesulfame-potassium'' ==<br />
<br />
An old office terminal.<br />
<br />
==== Specs ====<br />
* Intel Pentium 4 2.67GHz<br />
* 1GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard<br />
* ATI Radeon 7000<br />
<br />
== ''skynet'' ==<br />
<br />
skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.<br />
<br />
==== Specs ====<br />
<br />
* 15 full CPU/memory boards<br />
** 2x UltraSPARC II 464MHz / 8MB Cache Processors<br />
** ??? RAM?<br />
* 1 I/O board (type=???)<br />
** ???x disks?<br />
* 1 CD-ROM drive<br />
<br />
* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]<br />
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]<br />
* [http://www.e6500.com/ e6500]<br />
<br />
== ''freebsd'' ==<br />
<br />
FreeBSD was a virtual machine with FreeBSD installed.<br />
<br />
==== Services ====<br />
<br />
* Newer software<br />
<br />
== ''rainbowdragoneyes'' ==<br />
<br />
Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 800MHz MIPS Loongson 2f CPU<br />
<br />
== ''denardo'' ==<br />
<br />
Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.<br />
<br />
==== Specs ====<br />
<br />
* Sun Fire V210<br />
* TI UltraSparc IIIi (Jalapeño)<br />
* 2 GB RAM<br />
* 160 GB RAID array<br />
* ALOM on denardo-alom.csclub can be used to power machine on/off<br />
<br />
<br />
== ''artificial-flavours'' ==<br />
<br />
Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).<br />
<br />
==== Specs ====<br />
<br />
* Intel Celeron 3.2GHz<br />
* 2GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard<br />
* Western-Digital 80 GB ATA hard drive<br />
<br />
== ''potassium-citrate'' ==<br />
<br />
Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.<br />
<br />
It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).<br />
<br />
==== Specs ====<br />
* Alphaserver CS20 (2 833MHz EV68al CPUs)<br />
* 512MB RAM<br />
* 36 GB Seagate SCSI hard drive<br />
<br />
== ''potassium-nitrate'' ==<br />
<br />
This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).<br />
<br />
The name is from saltpetre, because sparks.<br />
<br />
==== Specs ====<br />
<br />
* 24 CPUs<br />
* 90GB main memory<br />
* 400GB scratch disk local storage in /scratch-potassium-nitrate<br />
<br />
There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.<br />
<br />
See also [[Sun 2900]].<br />
<br />
<br />
= UPS =<br />
<br />
All of the machines in the machine room are connected to one of our UPSs.<br />
<br />
All of our UPSs can be monitored via CSCF:<br />
<br />
* MC3015-UPS-B2<br />
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)<br />
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)<br />
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)<br />
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)<br />
<br />
We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].<br />
<br />
TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Machine_List&diff=4274Machine List2019-02-04T17:19:49Z<p>S455wang: /* mail */ mail is now hosted on biloba</p>
<hr />
<div>= Web Server =<br />
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.<br />
<br />
== ''caffeine'' ==<br />
<br />
Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.<br />
<br />
==== Specs ====<br />
<br />
* currently a virtual machine hosted on [[#biloba|biloba]]<br />
** 12 vCPUs<br />
** 32GB of RAM<br />
<br />
==== Services ====<br />
<br />
* Club and member web sites with [[Apache]]<br />
* [[MySQL]] databases<br />
* [[PostgreSQL]] databases<br />
* [[ceo]] daemon<br />
* mail was migrated to [[#mail|mail]]<br />
<br />
= General-Use Servers =<br />
<br />
These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no bitcoin mining).<br />
<br />
Most people use either taurine and clones or (high-fructose-)corn-syrup. hfcs is probably our beefiest machine at the moment, if you are wanting to do some heavy computation. Again, if you have a long-running computationally intensive job, it's good to<br />
nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.<br />
<br />
== ''corn-syrup'' ==<br />
<br />
PowerEdge 2950<br />
<br />
==== Specs ====<br />
<br />
* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)<br />
* 32 GB RAM<br />
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27<br />
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29<br />
* IPMI mac addr 00:24:e8:52:41:2b<br />
* 3 &times; Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)<br />
<br />
==== Notes ====<br />
<br />
* Use eth0/Gb0 for the mathstudentorgsnet connection<br />
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.<br />
<br />
==== Services ====<br />
<br />
* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)<br />
<br />
== ''high-fructose-corn-syrup'' ==<br />
<br />
High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.<br />
<br />
==== Specs ====<br />
<br />
* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)<br />
* 192 GB RAM<br />
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]<br />
* 500 GB Seagate Barracuda<br />
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]<br />
<br />
== ''taurine'' ==<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 8GB RAM<br />
* 136 GB LVM volume group<br />
<br />
==== Services ====<br />
<br />
* Virtual machines<br />
* BitlBee IRC instant messaging gateway (localhost only)<br />
* [[ident]] server to maintain high connection cap to freenode<br />
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.<br />
<br />
== ''sucrose'' ==<br />
<br />
sucrose is a [[#taurine|taurine]] clone donated by CSCF.<br />
<br />
==== Specs ====<br />
<br />
= Office Terminals =<br />
<br />
It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.<br />
<br />
== ''bit-shifter'' ==<br />
<br />
bit-shifter is an office terminal.<br />
<br />
==== Specs ====<br />
<br />
* Intel(R) Core(TM)2 Quad CPU Q8300<br />
* 4GB RAM<br />
* Nvidia GeForce GT 440<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Jacob Parker's Firewire Card<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''gwem'' ==<br />
<br />
gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.<br />
<br />
=== Specs ===<br />
<br />
* AMD FX-8150 3.6GHz 8-Core CPU<br />
* 16 GB RAM<br />
* AMD Radeon 6870 HD 1GB GPU<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
== ''maltodextrin'' ==<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i3-4130 @ 3.40 GHz<br />
* 8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''natural-flavours'' ==<br />
<br />
Natural-flavours is an office terminal; it used to be our mirror.<br />
<br />
In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i7-6700k<br />
* 2x8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Cup Holder (DVD drive has power, but not connected to mother board)<br />
<br />
== ''nullsleep'' ==<br />
<br />
nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* Intel® Dual Core Atom™ 330<br />
* 2GB RAM<br />
* NVIDIA® ION™ graphics<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* DVD Burner<br />
<br />
==== Speakers ====<br />
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.<br />
<br />
==== Services ====<br />
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.<br />
Music is located in /music on the office terminals<br />
<br />
== ''strombola''==<br />
It is named after Gordon Strombola.<br />
<br />
==== Specs ====<br />
* Intel Core2 Quad Q8200 @ 2.33GHz<br />
* 4 GB RAM<br />
* nVidia GeForce 8600 GTS<br />
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
==== Speakers ====<br />
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.<br />
<br />
= Syscom Only =<br />
<br />
The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.<br />
== ''aspartame'' ==<br />
<br />
aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 10GB RAM<br />
<br />
==== Notes ====<br />
<br />
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.<br />
<br />
== ''dextrose'' ==<br />
<br />
dextrose is a [[#taurine|taurine]] clone donated by CSCF. It currently hosts [[#mathnews|the mathNEWS server]], [[#auth1|auth1]], [[#mail|mail]], [[#rt|rt]] and [[#munin|munin]].<br />
<br />
==== Specs ====<br />
<br />
* 2 72GB drives in RAID1 (LVM dextrose)<br />
* 2 1TB drives in RAID1 (LVM dextrose2)<br />
<br />
== ''auth1'' ==<br />
<br />
Container on [[#dextrose|dextrose]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] master<br />
* [[Kerberos]] master<br />
<br />
== ''coffee'' ==<br />
<br />
Virtual machine running on [[#ginkgo|ginkgo]].<br />
<br />
==== Services ====<br />
<br />
* [[Database#MySQL|MySQL]]<br />
* [[Database#Postgres|Postgres]]<br />
<br />
== ''cobalamin'' ==<br />
<br />
Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.<br />
<br />
==== Specs ====<br />
<br />
* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)<br />
* 16GB RAM<br />
* Broadcom NetworkXtreme II<br />
* 2x73GB Hard Drives, hardware RAID1<br />
** Soon to be 2x1TB in MegaRAID1<br />
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration<br />
<br />
==== Services ====<br />
<br />
* Containers: [[#auth2|auth2]]<br />
<br />
==== Notes ====<br />
<br />
* The network card requires non-free drivers. Be sure to use an installation disc with non-free.<br />
<br />
* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:<br />
<br />
** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240<br />
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248<br />
<br />
* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.<br />
<br />
== ''auth2'' ==<br />
<br />
Container on [[#cobalamin|cobalamin]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] slave<br />
* [[Kerberos]] slave<br />
<br />
MAC Address: c2:c0:00:00:00:a2<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon X3450 @ 2.67 GHz<br />
* 6 GB RAM<br />
* vg0: 465 GB software RAID1 (contains root partition):<br />
** 750 GB Seagate Barracuda SATA hard drive<br />
** 500 GB Western-Digital Caviar Blue SATA hard drive<br />
* vg1: 596 GB software RAID1 (contains caffeine):<br />
** 2 &times; 640 GB Western-Digital Caviar Blue SATA hard drive<br />
<br />
==== Services ====<br />
<br />
* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]], [[#munin|munin]]<br />
<br />
== ''mail'' ==<br />
<br />
mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#biloba|biloba]]<br />
<br />
==== Services ====<br />
<br />
* [[Mail]] services<br />
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])<br />
* [[Webmail]]<br />
* [[ceo]] daemon<br />
<br />
== ''psilodump'' ==<br />
<br />
psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.<br />
<br />
==== Specs ====<br />
<br />
== ''phlogiston'' ==<br />
<br />
phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.<br />
<br />
phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.<br />
<br />
==== Specs ====<br />
<br />
== ''sodium-benzoate'' ==<br />
<br />
Sodium-benzoate is our previous mirror server, funded by MEF.<br />
<br />
It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon Quad Core E5405 @ 2.00 GHz<br />
* 16GB RAM<br />
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)<br />
<br />
Space disks are currently in the office underneath maltodextrin.<br />
<br />
== ''potassium-benzoate'' ==<br />
<br />
potassium-benzoate is our mirror server, funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* 36 drive Supermicro chassis (SSG-6048R-E1CR36L) <br />
* 1 x Intel Xeon E5-2630 (8 cores, 2.40 GHz)<br />
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM<br />
* 2 x 1 TB Samsung Evo 850 SSD drives<br />
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)<br />
* 10 Gbps SFP+ card (loaned from CSCF)<br />
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)<br />
<br />
==== Network Connections ====<br />
<br />
potassium-benzoate has two connections to our network:<br />
<br />
* 1 Gbps to our switch (used for management)<br />
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)<br />
<br />
Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.<br />
<br />
==== Services ====<br />
<br />
* [[Mirror]]<br />
* [[Talks]] mirror<br />
* [[Debian_Repository|CSClub packages repository]]<br />
<br />
== ''munin'' ==<br />
<br />
munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#dextrose|dextrose]]<br />
<br />
==== Services ====<br />
<br />
* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon<br />
<br />
<br />
== ''yerba-mate'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)<br />
* mattermost (under development)<br />
* shibboleth (under development)<br />
<br />
Also used for experimenting new CSC services.<br />
<br />
= Cloud =<br />
<br />
These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.<br />
<br />
== ''guayusa'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2TB PCI-Express Flash SSD<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
Currently in use for experimenting new CSC services.<br />
<br />
* logstash (testing of logstash)<br />
* load-balancer-01<br />
* cifs (for booting ginkgo from CD)<br />
* caffeine-01 (testing of multi-node caffeine)<br />
* block1.cloud<br />
* object1.cloud<br />
<br />
== ''ginkgo'' ==<br />
<br />
Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]<br />
* 256GB RAM<br />
* 2 x 1.2 TB SSD (400GB of each for RAID 1)<br />
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
* controller1.cloud<br />
* db1.cloud<br />
* router1.cloud (NAT for cloud tenant network)<br />
* network1.cloud<br />
<br />
== ''biloba'' ==<br />
<br />
Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]<br />
* 384GB RAM<br />
* 12 3.5" Hot Swap Drive Bays<br />
** 2 x 480 GB SSD<br />
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
<br />
= Storage =<br />
<br />
== ''fs00'' ==<br />
<br />
fs00 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
== ''fs01'' ==<br />
<br />
fs01 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
= Other =<br />
<br />
== ''goto80'' ==<br />
<br />
This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located in the office on the top shelf above strombola.<br />
<br />
==== Specs ====<br />
<br />
* 500 MHz Feroceon (ARM926ej-s compatible) processor<br />
* ARMv5TEJ architecture<br />
<br />
Use -march=armv5te -mtune=arm926ej-s options to GCC.<br />
<br />
For information on the TS-7800's hardware see here:<br />
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800<br />
<br />
== ''binaerpilot'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''anamanaguchi'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''digital cutter'' ==<br />
<br />
See [[Digital Cutter|here]].<br />
<br />
== ''mathnews'' ==<br />
<br />
[[#dextrose|dextrose]] hosts a container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.<br />
<br />
= Decommissioned =<br />
<br />
== ''glomag'' ==<br />
<br />
Glomag hosted [[#caffeine|caffeine]]. Decomissioned April 6, 2018.<br />
<br />
== ''Lisp machine'' ==<br />
<br />
A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.<br />
<br />
http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.<br />
<br />
==== Specs ====<br />
<br />
Currently inoperable due to (at least) a missing console cable.<br />
<br />
== ''ginseng'' ==<br />
<br />
Ginseng used to be our fileserver, before aspartame and the netapp took over.<br />
<br />
==== Specs ====<br />
<br />
* Intel Pentium Dual Core E2180<br />
* 8GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]<br />
* 4 &times; 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].<br />
[[Category:Hardware]]<br />
<br />
== ''calum'' ==<br />
<br />
The server from back before recorded memory.<br />
<br />
== ''paza'' ==<br />
<br />
An iMac G3 that was used as a dumb terminal.<br />
<br />
==== Specs ====<br />
<br />
* 233Mhz PowerPC 740/750<br />
* 96 MB RAM<br />
<br />
== ''romana'' ==<br />
<br />
Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.<br />
<br />
Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 2 PowerPC based processors<br />
* Stylish Blinken processor-load lights<br />
<br />
== ''sodium-citrate'' ==<br />
<br />
Sodium-citrate was an SGI O2 machine.<br />
<br />
In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.<br />
<br />
==== Specs ====<br />
* SGI O2 MIPS processor<br />
* 423 MB (?) RAM<br />
* 2 &times; 2 GB hard drive<br />
<br />
== ''acesulfame-potassium'' ==<br />
<br />
An old office terminal.<br />
<br />
==== Specs ====<br />
* Intel Pentium 4 2.67GHz<br />
* 1GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard<br />
* ATI Radeon 7000<br />
<br />
== ''skynet'' ==<br />
<br />
skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.<br />
<br />
==== Specs ====<br />
<br />
* 15 full CPU/memory boards<br />
** 2x UltraSPARC II 464MHz / 8MB Cache Processors<br />
** ??? RAM?<br />
* 1 I/O board (type=???)<br />
** ???x disks?<br />
* 1 CD-ROM drive<br />
<br />
* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]<br />
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]<br />
* [http://www.e6500.com/ e6500]<br />
<br />
== ''freebsd'' ==<br />
<br />
FreeBSD was a virtual machine with FreeBSD installed.<br />
<br />
==== Services ====<br />
<br />
* Newer software<br />
<br />
== ''rainbowdragoneyes'' ==<br />
<br />
Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 800MHz MIPS Loongson 2f CPU<br />
<br />
== ''denardo'' ==<br />
<br />
Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.<br />
<br />
==== Specs ====<br />
<br />
* Sun Fire V210<br />
* TI UltraSparc IIIi (Jalapeño)<br />
* 2 GB RAM<br />
* 160 GB RAID array<br />
* ALOM on denardo-alom.csclub can be used to power machine on/off<br />
<br />
<br />
== ''artificial-flavours'' ==<br />
<br />
Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).<br />
<br />
==== Specs ====<br />
<br />
* Intel Celeron 3.2GHz<br />
* 2GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard<br />
* Western-Digital 80 GB ATA hard drive<br />
<br />
== ''potassium-citrate'' ==<br />
<br />
Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.<br />
<br />
It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).<br />
<br />
==== Specs ====<br />
* Alphaserver CS20 (2 833MHz EV68al CPUs)<br />
* 512MB RAM<br />
* 36 GB Seagate SCSI hard drive<br />
<br />
== ''potassium-nitrate'' ==<br />
<br />
This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).<br />
<br />
The name is from saltpetre, because sparks.<br />
<br />
==== Specs ====<br />
<br />
* 24 CPUs<br />
* 90GB main memory<br />
* 400GB scratch disk local storage in /scratch-potassium-nitrate<br />
<br />
There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.<br />
<br />
See also [[Sun 2900]].<br />
<br />
<br />
= UPS =<br />
<br />
All of the machines in the machine room are connected to one of our UPSs.<br />
<br />
All of our UPSs can be monitored via CSCF:<br />
<br />
* MC3015-UPS-B2<br />
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)<br />
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)<br />
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)<br />
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)<br />
<br />
We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].<br />
<br />
TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Machine_List&diff=4273Machine List2019-02-04T17:18:15Z<p>S455wang: /* caffeine */ caffeine is hosted on biloba now</p>
<hr />
<div>= Web Server =<br />
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.<br />
<br />
== ''caffeine'' ==<br />
<br />
Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services.<br />
<br />
==== Specs ====<br />
<br />
* currently a virtual machine hosted on [[#biloba|biloba]]<br />
** 12 vCPUs<br />
** 32GB of RAM<br />
<br />
==== Services ====<br />
<br />
* Club and member web sites with [[Apache]]<br />
* [[MySQL]] databases<br />
* [[PostgreSQL]] databases<br />
* [[ceo]] daemon<br />
* mail was migrated to [[#mail|mail]]<br />
<br />
= General-Use Servers =<br />
<br />
These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no bitcoin mining).<br />
<br />
Most people use either taurine and clones or (high-fructose-)corn-syrup. hfcs is probably our beefiest machine at the moment, if you are wanting to do some heavy computation. Again, if you have a long-running computationally intensive job, it's good to<br />
nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.<br />
<br />
== ''corn-syrup'' ==<br />
<br />
PowerEdge 2950<br />
<br />
==== Specs ====<br />
<br />
* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)<br />
* 32 GB RAM<br />
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27<br />
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29<br />
* IPMI mac addr 00:24:e8:52:41:2b<br />
* 3 &times; Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)<br />
<br />
==== Notes ====<br />
<br />
* Use eth0/Gb0 for the mathstudentorgsnet connection<br />
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.<br />
<br />
==== Services ====<br />
<br />
* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)<br />
<br />
== ''high-fructose-corn-syrup'' ==<br />
<br />
High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.<br />
<br />
==== Specs ====<br />
<br />
* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)<br />
* 192 GB RAM<br />
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]<br />
* 500 GB Seagate Barracuda<br />
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]<br />
<br />
== ''taurine'' ==<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 8GB RAM<br />
* 136 GB LVM volume group<br />
<br />
==== Services ====<br />
<br />
* Virtual machines<br />
* BitlBee IRC instant messaging gateway (localhost only)<br />
* [[ident]] server to maintain high connection cap to freenode<br />
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.<br />
<br />
== ''sucrose'' ==<br />
<br />
sucrose is a [[#taurine|taurine]] clone donated by CSCF.<br />
<br />
==== Specs ====<br />
<br />
= Office Terminals =<br />
<br />
It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.<br />
<br />
== ''bit-shifter'' ==<br />
<br />
bit-shifter is an office terminal.<br />
<br />
==== Specs ====<br />
<br />
* Intel(R) Core(TM)2 Quad CPU Q8300<br />
* 4GB RAM<br />
* Nvidia GeForce GT 440<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Jacob Parker's Firewire Card<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''gwem'' ==<br />
<br />
gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.<br />
<br />
=== Specs ===<br />
<br />
* AMD FX-8150 3.6GHz 8-Core CPU<br />
* 16 GB RAM<br />
* AMD Radeon 6870 HD 1GB GPU<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
== ''maltodextrin'' ==<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i3-4130 @ 3.40 GHz<br />
* 8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''natural-flavours'' ==<br />
<br />
Natural-flavours is an office terminal; it used to be our mirror.<br />
<br />
In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i7-6700k<br />
* 2x8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Cup Holder (DVD drive has power, but not connected to mother board)<br />
<br />
== ''nullsleep'' ==<br />
<br />
nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* Intel® Dual Core Atom™ 330<br />
* 2GB RAM<br />
* NVIDIA® ION™ graphics<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* DVD Burner<br />
<br />
==== Speakers ====<br />
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.<br />
<br />
==== Services ====<br />
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.<br />
Music is located in /music on the office terminals<br />
<br />
== ''strombola''==<br />
It is named after Gordon Strombola.<br />
<br />
==== Specs ====<br />
* Intel Core2 Quad Q8200 @ 2.33GHz<br />
* 4 GB RAM<br />
* nVidia GeForce 8600 GTS<br />
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
==== Speakers ====<br />
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.<br />
<br />
= Syscom Only =<br />
<br />
The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.<br />
== ''aspartame'' ==<br />
<br />
aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 10GB RAM<br />
<br />
==== Notes ====<br />
<br />
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.<br />
<br />
== ''dextrose'' ==<br />
<br />
dextrose is a [[#taurine|taurine]] clone donated by CSCF. It currently hosts [[#mathnews|the mathNEWS server]], [[#auth1|auth1]], [[#mail|mail]], [[#rt|rt]] and [[#munin|munin]].<br />
<br />
==== Specs ====<br />
<br />
* 2 72GB drives in RAID1 (LVM dextrose)<br />
* 2 1TB drives in RAID1 (LVM dextrose2)<br />
<br />
== ''auth1'' ==<br />
<br />
Container on [[#dextrose|dextrose]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] master<br />
* [[Kerberos]] master<br />
<br />
== ''coffee'' ==<br />
<br />
Virtual machine running on [[#ginkgo|ginkgo]].<br />
<br />
==== Services ====<br />
<br />
* [[Database#MySQL|MySQL]]<br />
* [[Database#Postgres|Postgres]]<br />
<br />
== ''cobalamin'' ==<br />
<br />
Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.<br />
<br />
==== Specs ====<br />
<br />
* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)<br />
* 16GB RAM<br />
* Broadcom NetworkXtreme II<br />
* 2x73GB Hard Drives, hardware RAID1<br />
** Soon to be 2x1TB in MegaRAID1<br />
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration<br />
<br />
==== Services ====<br />
<br />
* Containers: [[#auth2|auth2]]<br />
<br />
==== Notes ====<br />
<br />
* The network card requires non-free drivers. Be sure to use an installation disc with non-free.<br />
<br />
* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:<br />
<br />
** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240<br />
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248<br />
<br />
* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.<br />
<br />
== ''auth2'' ==<br />
<br />
Container on [[#cobalamin|cobalamin]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] slave<br />
* [[Kerberos]] slave<br />
<br />
MAC Address: c2:c0:00:00:00:a2<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon X3450 @ 2.67 GHz<br />
* 6 GB RAM<br />
* vg0: 465 GB software RAID1 (contains root partition):<br />
** 750 GB Seagate Barracuda SATA hard drive<br />
** 500 GB Western-Digital Caviar Blue SATA hard drive<br />
* vg1: 596 GB software RAID1 (contains caffeine):<br />
** 2 &times; 640 GB Western-Digital Caviar Blue SATA hard drive<br />
<br />
==== Services ====<br />
<br />
* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]], [[#munin|munin]]<br />
<br />
== ''mail'' ==<br />
<br />
mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#dextrose|dextrose]]<br />
<br />
==== Services ====<br />
<br />
* [[Mail]] services<br />
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])<br />
* [[Webmail]]<br />
* [[ceo]] daemon<br />
<br />
== ''psilodump'' ==<br />
<br />
psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.<br />
<br />
==== Specs ====<br />
<br />
== ''phlogiston'' ==<br />
<br />
phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.<br />
<br />
phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.<br />
<br />
==== Specs ====<br />
<br />
== ''sodium-benzoate'' ==<br />
<br />
Sodium-benzoate is our previous mirror server, funded by MEF.<br />
<br />
It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon Quad Core E5405 @ 2.00 GHz<br />
* 16GB RAM<br />
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)<br />
<br />
Space disks are currently in the office underneath maltodextrin.<br />
<br />
== ''potassium-benzoate'' ==<br />
<br />
potassium-benzoate is our mirror server, funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* 36 drive Supermicro chassis (SSG-6048R-E1CR36L) <br />
* 1 x Intel Xeon E5-2630 (8 cores, 2.40 GHz)<br />
* 64 GB (4 x 16GB) of DDR4 (2133Mhz) ECC RAM<br />
* 2 x 1 TB Samsung Evo 850 SSD drives<br />
* 17 x 4 TB Western Digital Gold drives (separate funding from MEF)<br />
* 10 Gbps SFP+ card (loaned from CSCF)<br />
* 50 Gbps Mellanox QSFP card (from ginkgo; currently unconnected)<br />
<br />
==== Network Connections ====<br />
<br />
potassium-benzoate has two connections to our network:<br />
<br />
* 1 Gbps to our switch (used for management)<br />
* 2 x 10 Gbps (LACP bond) to mc-rt-3015-mso-a (for mirror)<br />
<br />
Mirror's bandwidth is limited to 1 Gbps on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.<br />
<br />
==== Services ====<br />
<br />
* [[Mirror]]<br />
* [[Talks]] mirror<br />
* [[Debian_Repository|CSClub packages repository]]<br />
<br />
== ''munin'' ==<br />
<br />
munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#dextrose|dextrose]]<br />
<br />
==== Services ====<br />
<br />
* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon<br />
<br />
<br />
== ''yerba-mate'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
* test-ipv6 (test-ipv6.csclub.uwaterloo.ca; a test-ipv6.com mirror)<br />
* mattermost (under development)<br />
* shibboleth (under development)<br />
<br />
Also used for experimenting new CSC services.<br />
<br />
= Cloud =<br />
<br />
These machines are used by [https://cloud.csclub.uwaterloo.ca cloud.csclub.uwaterloo.ca]. The machines themselves are restricted to Syscom only access.<br />
<br />
== ''guayusa'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2TB PCI-Express Flash SSD<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
Currently in use for experimenting new CSC services.<br />
<br />
* logstash (testing of logstash)<br />
* load-balancer-01<br />
* cifs (for booting ginkgo from CD)<br />
* caffeine-01 (testing of multi-node caffeine)<br />
* block1.cloud<br />
* object1.cloud<br />
<br />
== ''ginkgo'' ==<br />
<br />
Supermicro server funded by MEF for CSC web hosting. Locate in MC 3015.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]<br />
* 256GB RAM<br />
* 2 x 1.2 TB SSD (400GB of each for RAID 1)<br />
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
* controller1.cloud<br />
* db1.cloud<br />
* router1.cloud (NAT for cloud tenant network)<br />
* network1.cloud<br />
<br />
== ''biloba'' ==<br />
<br />
Supermicro server funded by SLEF for CSC web hosting. Located in DC 3558.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon Gold 6140 @ 2.30GHz [18 cores each]<br />
* 384GB RAM<br />
* 12 3.5" Hot Swap Drive Bays<br />
** 2 x 480 GB SSD<br />
* 10GbE onboard, 10GbE SFP+ card (on loan from CSCF)<br />
<br />
==== Services ====<br />
<br />
* OpenStack Compute machine<br />
<br />
= Storage =<br />
<br />
== ''fs00'' ==<br />
<br />
fs00 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
== ''fs01'' ==<br />
<br />
fs01 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
= Other =<br />
<br />
== ''goto80'' ==<br />
<br />
This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located in the office on the top shelf above strombola.<br />
<br />
==== Specs ====<br />
<br />
* 500 MHz Feroceon (ARM926ej-s compatible) processor<br />
* ARMv5TEJ architecture<br />
<br />
Use -march=armv5te -mtune=arm926ej-s options to GCC.<br />
<br />
For information on the TS-7800's hardware see here:<br />
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800<br />
<br />
== ''binaerpilot'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''anamanaguchi'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''digital cutter'' ==<br />
<br />
See [[Digital Cutter|here]].<br />
<br />
== ''mathnews'' ==<br />
<br />
[[#dextrose|dextrose]] hosts a container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.<br />
<br />
= Decommissioned =<br />
<br />
== ''glomag'' ==<br />
<br />
Glomag hosted [[#caffeine|caffeine]]. Decomissioned April 6, 2018.<br />
<br />
== ''Lisp machine'' ==<br />
<br />
A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.<br />
<br />
http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.<br />
<br />
==== Specs ====<br />
<br />
Currently inoperable due to (at least) a missing console cable.<br />
<br />
== ''ginseng'' ==<br />
<br />
Ginseng used to be our fileserver, before aspartame and the netapp took over.<br />
<br />
==== Specs ====<br />
<br />
* Intel Pentium Dual Core E2180<br />
* 8GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]<br />
* 4 &times; 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].<br />
[[Category:Hardware]]<br />
<br />
== ''calum'' ==<br />
<br />
The server from back before recorded memory.<br />
<br />
== ''paza'' ==<br />
<br />
An iMac G3 that was used as a dumb terminal.<br />
<br />
==== Specs ====<br />
<br />
* 233Mhz PowerPC 740/750<br />
* 96 MB RAM<br />
<br />
== ''romana'' ==<br />
<br />
Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.<br />
<br />
Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 2 PowerPC based processors<br />
* Stylish Blinken processor-load lights<br />
<br />
== ''sodium-citrate'' ==<br />
<br />
Sodium-citrate was an SGI O2 machine.<br />
<br />
In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.<br />
<br />
==== Specs ====<br />
* SGI O2 MIPS processor<br />
* 423 MB (?) RAM<br />
* 2 &times; 2 GB hard drive<br />
<br />
== ''acesulfame-potassium'' ==<br />
<br />
An old office terminal.<br />
<br />
==== Specs ====<br />
* Intel Pentium 4 2.67GHz<br />
* 1GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard<br />
* ATI Radeon 7000<br />
<br />
== ''skynet'' ==<br />
<br />
skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.<br />
<br />
==== Specs ====<br />
<br />
* 15 full CPU/memory boards<br />
** 2x UltraSPARC II 464MHz / 8MB Cache Processors<br />
** ??? RAM?<br />
* 1 I/O board (type=???)<br />
** ???x disks?<br />
* 1 CD-ROM drive<br />
<br />
* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]<br />
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]<br />
* [http://www.e6500.com/ e6500]<br />
<br />
== ''freebsd'' ==<br />
<br />
FreeBSD was a virtual machine with FreeBSD installed.<br />
<br />
==== Services ====<br />
<br />
* Newer software<br />
<br />
== ''rainbowdragoneyes'' ==<br />
<br />
Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 800MHz MIPS Loongson 2f CPU<br />
<br />
== ''denardo'' ==<br />
<br />
Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.<br />
<br />
==== Specs ====<br />
<br />
* Sun Fire V210<br />
* TI UltraSparc IIIi (Jalapeño)<br />
* 2 GB RAM<br />
* 160 GB RAID array<br />
* ALOM on denardo-alom.csclub can be used to power machine on/off<br />
<br />
<br />
== ''artificial-flavours'' ==<br />
<br />
Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).<br />
<br />
==== Specs ====<br />
<br />
* Intel Celeron 3.2GHz<br />
* 2GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard<br />
* Western-Digital 80 GB ATA hard drive<br />
<br />
== ''potassium-citrate'' ==<br />
<br />
Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.<br />
<br />
It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).<br />
<br />
==== Specs ====<br />
* Alphaserver CS20 (2 833MHz EV68al CPUs)<br />
* 512MB RAM<br />
* 36 GB Seagate SCSI hard drive<br />
<br />
== ''potassium-nitrate'' ==<br />
<br />
This was a Sun Fire E2900 from a decommissioned MFCF compute cluster. It had a SPARC architecture and ran OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian. After multiple unsuccessful attempts to boot a modern Linux kernel and possible hardware instability, it was determined to be non-cost-effective and non-effort-effective to put more work into running this machine. The system was reclaimed by MFCF where someone from CS had better luck running a suitable operating system (probably Solaris).<br />
<br />
The name is from saltpetre, because sparks.<br />
<br />
==== Specs ====<br />
<br />
* 24 CPUs<br />
* 90GB main memory<br />
* 400GB scratch disk local storage in /scratch-potassium-nitrate<br />
<br />
There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.<br />
<br />
See also [[Sun 2900]].<br />
<br />
<br />
= UPS =<br />
<br />
All of the machines in the machine room are connected to one of our UPSs.<br />
<br />
All of our UPSs can be monitored via CSCF:<br />
<br />
* MC3015-UPS-B2<br />
* mc-3015-e7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced July 2014) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-e7-ups-1&var-Interval=30m)<br />
* mc-3015-f7-ups-1.cs.uwaterloo.ca (rbc55, batteries replaced Feb 2017) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-f7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2010) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-1&var-Interval=30m)<br />
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-g7-ups-2&var-Interval=30m)<br />
* mc-3015-h7-ups-1.cs.uwaterloo.ca (su5000t, batteries replaced 2004) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-1&var-Interval=30m)<br />
* mc-3015-h7-ups-2.cs.uwaterloo.ca (unknown) (https://metrics.cscf.uwaterloo.ca/grafana/dashboard/db/ups-statistics?orgId=1&var-UPS=mc-3015-h7-ups-2&var-Interval=30m)<br />
<br />
We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].<br />
<br />
TODO: Fix labels & verify info is correct & figure out why we can't talk to cacti.</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Past_Executive&diff=4113Past Executive2017-09-27T22:51:58Z<p>S455wang: /* Spring */ fix lhsong</p>
<hr />
<div>__NOTOC__<br />
<br />
Data sources for this exec list have been: CSC records, MathNEWS.<br />
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.<br />
<br />
= Definitions =<br />
#define PR President<br />
#define VP Vice-president<br />
#define TR Treasurer<br />
#define SE Secretary<br />
#define SA Sysadmin<br />
#define OF Office Manager<br />
#define LI Librarian<br />
#define FL Flasher<br />
#define DE Deity<br />
#define WW Webmaster<br />
#define OF Office Manager<br />
#define SE-TR Secretary-Treasurer (Position was split)<br />
#define FR Fridge Regent<br />
<br />
=Founding 1967=<br />
<br />
Sponsor - J. Peter Sprung<br />
PR: K. Rugger<br />
VP: R. Jaques<br />
SE-TR: G. Sutherland<br />
<br />
Founding Members:<br />
B. Kindree<br />
R. Melen<br />
V. Neglia<br />
R. Charney<br />
R. Truman<br />
Glenn Berry<br />
D. Meek<br />
<br />
===Fall===<br />
<br />
PR: Bill Kindred<br />
VP: Rick Jacques<br />
SE-TR: Graham Sutherland<br />
<br />
Committee members: R. Stallwerthy, C. de Vries<br />
<br />
=1968=<br />
<br />
===Winter===<br />
<br />
PR: Bill Kindred<br />
VP: Rick Jacques<br />
SE-TR: Graham Sutherland<br />
<br />
===Fall===<br />
<br />
SE-TR: Glenn Berry<br />
<br />
=1969=<br />
<br />
Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.<br />
<br />
=1970=<br />
<br />
===A note on ACM affiliation===<br />
<br />
The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970<br />
<br />
===Fall===<br />
<br />
PR: Rick Beach<br />
VP: Lee Santon<br />
TR: Randy Melen<br />
SE: Vic Neglia<br />
<br />
=1971=<br />
<br />
===Spring===<br />
<br />
VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.<br />
<br />
===Fall===<br />
<br />
VP: James W. Welch<br />
<br />
=1972=<br />
<br />
It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.<br />
<br />
===Winter===<br />
<br />
PR: Mike Campbell<br />
VP: Edgar Hew<br />
SE-TR: Doug Lacy<br />
<br />
There is also stuff from James W. Welch without a position.<br />
<br />
===Fall===<br />
<br />
PR: Ian McIntosh<br />
<br />
=1973=<br />
<br />
Faculty Sponsor: Morven Gentleman<br />
<br />
===Winter===<br />
<br />
SE: Douglas E. Lacy<br />
<br />
===Spring===<br />
<br />
PR: Jim Parry<br />
<br />
===Fall===<br />
<br />
PR: Jim Parry<br />
VP: Ray Walden<br />
TR: Slavko Stemberger<br />
SE: Mario Festival<br />
<br />
=1974=<br />
<br />
===Fall===<br />
<br />
PR: Russell Crook<br />
<br />
=1975-1977=<br />
<br />
Faculty Sponsor: Morven Gentleman??<br />
<br />
Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.<br />
Sylvia Eng: 1975/6 as some position.<br />
Dave Buckingham: a VP at some point<br />
Allison Nolan: 1977 time<br />
Peter Stevens: 1977<br />
Russel Crook???<br />
<br />
Dennis Ritchie came. So did Jeffrey D. Ullman.<br />
<br />
=1976=<br />
<br />
===Fall===<br />
<br />
Progcom: Peter Stevens<br />
<br />
=1977=<br />
<br />
===Winter===<br />
<br />
Progcom: Allison Nowlan<br />
<br />
===Spring=== <br />
<br />
PR: Peter Stevens<br />
Progcom: Allison Nowlan<br />
<br />
===Fall===<br />
<br />
PR: Andrzej Jan Taramina<br />
Progcom: Allison Nowlan<br />
<br />
=1978=<br />
<br />
===Winter===<br />
<br />
PR: Peter Stevens<br />
<br />
===Spring===<br />
<br />
TR: K.G. Dykes<br />
SE: Kandry Mutheardy<br />
<br />
Brian Kernighan gave a talk this term. So did Ken Thompson.<br />
<br />
===Fall===<br />
<br />
=1979=<br />
<br />
===Spring===<br />
<br />
PR: Robert Biddle<br />
<br />
<br />
=1987=<br />
<br />
===Fall===<br />
<br />
PR: Jim Boritz<br />
VP: Ted Timar<br />
TR: Gayla Boritz<br />
SE: Edwin Hoogerbeets<br />
<br />
=1988=<br />
<br />
Jim Boritz was president in Winter 1988. (Source: http://csclub.uwaterloo.ca/misc/procedure.pdf)<br />
Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.<br />
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Robyn Stewart did as an assignment in 1991-1992 for some class at UBC<br />
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was out first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.<br />
<br />
===Fall===<br />
<br />
SA: Wade Richards<br />
<br />
=1989=<br />
<br />
===Winter===<br />
<br />
http://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg<br />
<br />
Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ??? <br />
<br />
PR: Barry W. Smith<br />
VP: Angela Chambers<br />
TR:<br />
SE: Sean Goggin<br />
SA: Wade Richards / Ross Ridge<br />
<br />
(President Kevin Smith confirmed: http://csclub.uwaterloo.ca/misc/procedure.pdf)<br />
<br />
===Spring===<br />
<br />
PR: Jim Thornton<br />
VP: Gayla Boritz<br />
TR: David Fenger<br />
SE: Kivi Shapiro<br />
SA: Reid Pinchback<br />
<br />
Assistance to sysadmin: Jim Boritz.<br />
<br />
===Fall===<br />
<br />
PR: James Boritz<br />
VP: Edmond Bourne<br />
SA: Ross Ridge<br />
<br />
=1990=<br />
<br />
===Winter===<br />
<br />
TR: Jim Thornton<br />
<br />
===Spring===<br />
<br />
TR: Karen Smith<br />
SE: Robyn Steward<br />
<br />
===Fall===<br />
PR: Wade Richards<br />
TR: Carolyn Duke<br />
SE: Robyn Stewart - attended mathsoc meeting on our behalf.<br />
Kivi Shapiro - attended mathsoc meeting on our behalf.<br />
- Censured by mathsoc for his actions during the election.<br />
Shannon Mann - attended mathsoc meeting on our behalf.<br />
<br />
=1991=<br />
<br />
===Winter===<br />
VP: Edmond Bourne<br />
TR: Carolyn Duke<br />
SE: Robyn Stewart<br />
Shannon Mann - attended mathsoc meeting on our behalf.<br />
<br />
John McCarthy came this term.<br />
<br />
===Spring===<br />
TR: Rob Leitman<br />
Jason Knell - attended mathsoc meeting on our and PMC's behalf.<br />
<br />
===Fall===<br />
TR: Mike Van Lingen<br />
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.<br />
<br />
<br />
=1992=<br />
<br />
===Winter===<br />
TR: Norm Ross<br />
SE: Brent Williams<br />
<br />
===Spring===<br />
PR: Dale Wick<br />
TR: Stephen A. Mills<br />
<br />
===Fall===<br />
TR: Mark Plumb<br />
<br />
<br />
=1993=<br />
<br />
===Winter===<br />
TR: Rob Leitman<br />
VP: Tim Prime<br />
OF: Dave Ebbo<br />
LI: Norm Ross<br />
<br />
Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray<br />
<br />
===Spring===<br />
TR: Mark Tompsett <br />
<br />
===Fall===<br />
<br />
PR: Ian Goldberg<br />
<br />
=1994=<br />
<br />
===Winter===<br />
PR: Ian Goldberg<br />
TR: Mark Tompsett<br />
SE: Tom Rathbourne<br />
LI: Michael Van Biesbrouck<br />
Norm Ross assisted with finances.<br />
<br />
===Spring===<br />
PR: Dale Wick (?)<br />
TR: Steve Mills<br />
SA: Ian Goldberg (?)<br />
Norm Ross assisted with finances.<br />
<br />
===Fall===<br />
PR: Ross Ridge<br />
VP: Tom Rathbourne (?)<br />
TR: Rob Leitman<br />
SA: Zygo Blaxell<br />
LI: Michael Van Biesbrouck<br />
<br />
<br />
=1995=<br />
<br />
===Winter===<br />
TR: Sharlene Schmeichel<br />
Amy Brown and Rob Ridge purchased books.<br />
<br />
===Spring===<br />
TR: Steve Mills<br />
<br />
===Fall===<br />
PR: Amy Brown (arbrown) <br />
VP: Christina Norman (cbnorman)<br />
TR: Steven Mills (samills)<br />
SE: Allyson Graham (akgraham)<br />
SA: Gavin Peters<br />
<br />
<br />
=1996=<br />
<br />
===Winter===<br />
PR: Nikita Borisov (nborisov)<br />
VP: Joseph Deu Ngoc (dtdeungo) <br />
TR: Stephen Mills (samills)<br />
SE: Sharlene Schmeichel (saschmei)<br />
SA: Dave Brown (dagbrown)<br />
OF: Somsack Tsai (stsai)<br />
LI: Devin Carless (dccarles)<br />
FL: Allyson Graham (akgraham)<br />
DE: Ian Goldberg (iagoldbe)<br />
<br />
===Spring===<br />
PR: Blake Winton (bwinton)<br />
VP: Nick Harvey (njaharve)<br />
TR: Nikita Borisov (nborisov)<br />
SE: Viet-Trung Luu (vluu)<br />
SA: Drew Hamilton (awhamilt)<br />
OF: Jillian Arnott (jarnott)<br />
LI: Ross Ridge (rridge)<br />
FL: Devin Carless (dccarles)<br />
<br />
=== Fall ===<br />
PR: Shannon Mann (sjbmann) <br />
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)<br />
TR: Michal Van Biesbrouck (mlvanbie) <br />
SE: Nikita Borisov (nborisov) <br />
SA: Chris Rovers <br />
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation<br />
LI: Aliz Csenki (acsenki) <br />
FL: Aaron Chmielowiec (archmiel) <br />
DE: Skuld (no uwuserid yet...)<br />
<br />
<br />
=1997=<br />
<br />
===Winter===<br />
PR: Dima Brodsky <br />
VP: Nikita Borisov (nborisov)<br />
TR: Stephen Mills (samills)<br />
SE: Evan Jones (ejones)<br />
SA: Alex Brodsky<br />
OF: Chris Doherty<br />
LI: Matt Corks <br />
FL: Paul Prescod<br />
<br />
=== Fall ===<br />
PR: Chris Rovers (cdrovers) <br />
VP: Michael van Biesbrouck (mlvanbie) <br />
TR: Somsack Tsai (stsai) <br />
SE: Matt Corks (mvcorks)<br />
SA: Lennart Sorensen (lsorense) <br />
LI: Chmielowiec (archmiel) <br />
OF: Devin Carless (dccarles) <br />
FL: Aaron Chmielowiec (archmiel)<br />
<br />
<br />
= 1998 =<br />
<br />
=== Winter ===<br />
PR: Suresh Naidu <br />
VP: Viet-Trung Luu <br />
TR: Tim Coleman <br />
SE: Dax Hutcheon <br />
Librarian: Dax Hutcheon <br />
Flasher: Dax Hutcheon <br />
Webmaster: Dax Hutcheon <br />
SA: Robin Powell<br />
OF: Aaron Chmielowiec<br />
<br />
=== Spring ===<br />
<br />
Position Name You might call them...<br />
President roconnor Russell O'Connor<br />
Vice-president trwcolem Tim Coleman<br />
Treasurer knzarysk Karl Zaryski<br />
Secretary (bwinton) (Blake Winton)<br />
Sysadmin wbiggs Billy Biggs<br />
Librarian snaidu Suresh Naidu<br />
Flasher pechrysl Paul Chrysler<br />
Office Manager dccarles Devin Carless<br />
WWWW trwcolem Tim Coleman<br />
<br />
=== Fall ===<br />
<br />
President Joe Deu Ngoc jtdeungo<br />
Vice-President Wai Ling Yee wlyee<br />
Treasurer Fjord j2lynn<br />
Secretary Matt Corks mvcorks<br />
Sysadmin Andrew Hamilton awhamilt<br />
<br />
World Wide Web Wench Dax Hutcheon ddhutche<br />
Office Manager Richard Bell rlbell<br />
Librarian Damian Gryski dgryski<br />
Flasher Paul Chrysler pechrysl<br />
Official Deity Ian Goldberg iagoldbe<br />
Official Chairbeing Calum T. Dalek calum<br />
<br />
<br />
=1999=<br />
<br />
=== Winter ===<br />
PR: geduggan<br />
VP:<br />
TR:<br />
SE:<br />
SA:<br />
<br />
<br />
=2000=<br />
<br />
=== Winter ===<br />
PR: Will Chartrand (wgchartr)<br />
VP: Gavin Duggan (geduggan)<br />
TR:<br />
SE:<br />
SA: Lennart Sorensen (lsorense)<br />
OF:<br />
<br />
=== Fall ===<br />
PR: geduggan<br />
VP: <br />
TR:<br />
SE:<br />
SA: bioster<br />
OF:<br />
<br />
<br />
=2001=<br />
<br />
=== Winter ===<br />
PR: geduggan<br />
VP:<br />
TR:<br />
SE:<br />
SA:<br />
OF:<br />
<br />
=== Spring ===<br />
PR: geduggan<br />
VP:<br />
TR:<br />
SE:<br />
SA:<br />
OF:<br />
<br />
=2002=<br />
<br />
http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php<br />
<br />
=== Winter ===<br />
PR: Billy Biggs<br />
VP: Stefanus Du Toit<br />
TR: Melissa Basinger<br />
SE: James Perry<br />
SA: Barry Genova<br />
Librarian: Ryan Golbeck<br />
Webmaster: Jonathan Beverley<br />
Office Manager: Sayan Li<br />
<br />
=== Spring ===<br />
PR: Alex Pop<br />
VP: Melissa Basinger<br />
TR: Siyan Li<br />
SE: James A Morrison<br />
SA: Jonathan Beverley<br />
Webmaster: Stefanus Du Toit<br />
<br />
=== Fall ===<br />
PR: James A. Morrison<br />
VP: Stefanus Du Toit<br />
TR: James Perry<br />
SE: Michael Biggs<br />
SA: Ryan Golbeck<br />
Librarian: Mark Sherry, Cassandra Schopf<br />
Webmaster: Stefanus Du Toit<br />
<br />
<br />
=2003=<br />
<br />
=== Winter ===<br />
PR: Kannan Vijayan (kvijayan)<br />
VP: Meg Darragh (m2darrag)<br />
TR: James Perry (jeperry)<br />
SE: Wojciech Kosnik (wkosnik)<br />
SA: Stefanus Du Toit (sjdutoit)<br />
LI: Simon Law (sfllaw)<br />
WM: Julie Lavoie (jlavoie)<br />
<br />
===Fall===<br />
PR: Stefanus Du Toit (sjdutoit)<br />
VP: Meg Darragh (m2darrag)<br />
TR: Tor Myklebust (tmyklebu)<br />
SE: James Perry (jeperry)<br />
SA: Simon Law (sfllaw)<br />
OF:<br />
<br />
<br />
=2004=<br />
<br />
===Winter===<br />
PR: Simon Law (sfllaw)<br />
VP: fspacek<br />
TR: ljain<br />
SE: Julie Lavoie (jlavoie)<br />
SA: Tor Myklebust(tmyklebu)<br />
OF:<br />
<br />
===Spring===<br />
PR: dnmorton ?<br />
VP: Tim Loach (tloach)<br />
TR: Michael Biggs (mbiggs)<br />
SE: Lesley Northam (lanortha)<br />
SA: <br />
OF:<br />
<br />
===Fall ===<br />
PR: jeperry<br />
VP: mtsay<br />
TR: Mark Sherry (mdsherry)<br />
SE: Tor Myklebust (tmyklebu)<br />
SA: jlavoie<br />
OF:<br />
<br />
<br />
=2005=<br />
<br />
===Winter===<br />
<br />
PR: mtsay<br />
VP: Lesley Northam (lanortha)<br />
TR: Holden Karau (hkarau)<br />
SE: domorton<br />
SA: Tor Myklebust (tmyklebu)<br />
OF:<br />
<br />
===Spring===<br />
<br />
PR: Mark Sherry (mdsherry)<br />
VP: Martin Kess (mdkess)<br />
TR: Ali Piccioni (apiccion)<br />
SE: Michael Biggs (mbiggs)<br />
SA: Tor Myklebust (tmyklebu)<br />
OF:<br />
<br />
===Fall===<br />
<br />
PR: Tim Loach (tloach)<br />
VP: Lesley Northam (lanortha)<br />
TR: Caelyn McAulay (cmcaulay)<br />
SE: The Professor<br />
SA: Holden Karau (hkarau)<br />
OF:<br />
<br />
<br />
=2006=<br />
<br />
===Winter===<br />
<br />
PR: Tor Myklebust (tmyklebu)<br />
VP: Michael Druker (mdruker)<br />
TR: Caelyn McAulay (cmcaulay)<br />
SE: Mark Sherry (mdsherry)<br />
SA: William O'Connor (woconnor)<br />
OF:<br />
<br />
===Spring===<br />
PR: David Bartley (dtbartle)<br />
VP: David Belanger (dbelange)<br />
TR: David Tenty (daltenty)<br />
SE: Chris Evensen (cevensen)<br />
SA: Holden Karau (hkarau)<br />
OF:<br />
<br />
===Fall===<br />
<br />
PR: Martin Kess (mdkess)<br />
VP: Mark Sherry (mdsherry)<br />
TR: Sylvan L. Mably (slmably)<br />
SE: Caelyn McAulay (cmcaulay) <br />
SA: William O'Connor (woconnor)<br />
<br />
<br />
=2007=<br />
<br />
===Winter===<br />
PR: David Bartley (dtbartle)<br />
VP: David Belanger (dbelange)<br />
TR: Caelyn McAulay (cmcaulay)<br />
SE: David Tenty (daltenty)<br />
SA: Holden Karau (hkarau)<br />
Webmaster: jnopporn<br />
OF:<br />
<br />
===Spring===<br />
PR: Gaelan D'costa (gdcosta)<br />
VP: Kyle Larose (kmlarose)<br />
TR: Kyle Spaans (kspaans)<br />
SE: Erik Louie (elouie)<br />
SA: Michael Spang (mspang)<br />
Librarian: David Tenty (daltenty)<br />
OF:<br />
<br />
===Fall ===<br />
PR: Holden Karau (hkarau)<br />
VP: Alex McCausland (amccausl)<br />
TR: Dominik Chlobowski (dchlobow)<br />
SE: Sean Cumming (sgcummin)<br />
SA: David Tenty (daltenty)<br />
OF:<br />
WW: dtbartle / jnopporn<br />
<br />
<br />
=2008=<br />
<br />
===Winter ===<br />
PR: Sean Cumming (sgcummin)<br />
VP: Matt Lawrence (m3lawren)<br />
TR: Mateusz Tarkowski (mtarkows)<br />
SE: Edgar Bering (ebering)<br />
SA: Jordan Saunders (jmsaunde)<br />
OF:<br />
<br />
===Summer ===<br />
PR: Brennan Taylor (b4taylor)<br />
VP: Qifan Xi (qxi)<br />
TR: Matt Lawrence (m3lawren)<br />
SE: Nick Guenther (nguenthe)<br />
SA:<br />
OF:<br />
<br />
===Fall ===<br />
PR: Matthew Lawrence (m3lawren)<br />
VP: Edgar Bering (ebering)<br />
TR: Michael Gregson (mgregson)<br />
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski<br />
SA: Kyle Spaans (kspaans)<br />
OF:<br />
<br />
<br />
=2009=<br />
<br />
===Winter===<br />
PR: Michael Gregson (mgregson)<br />
VP: Edgar Bering (ebering)<br />
TR: Brennan Taylor (b4taylor)<br />
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins) <br />
SA: Jacob Parker (j3parker) <br />
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)<br />
<br />
===Spring ===<br />
PR: Michael Spang (mspang)<br />
VP: Jacob Parker (j3parker)<br />
TR: Sapphyre Gervais (sagervai)<br />
SE: Matthew McPherrin (mimcpher)<br />
SA: Anthony Brennan (a2brenna)<br />
OF:<br />
<br />
===Fall===<br />
PR: Jacob Parker (j3parker)<br />
VP: Edgar Bering (ebering)<br />
TR: Michael Spang (mspang)<br />
SE: Brennan Taylor (b4taylor)<br />
SA: Michael Ellis (m2ellis)<br />
OF: Rebecca Putinski (rjputins)<br />
<br />
<br />
=2010=<br />
<br />
===Winter===<br />
PR: Kyle Spaans (kspaans)<br />
VP: Edgar Bering (ebering)<br />
TR: Sapphyre Gervais (sagervai)<br />
SE: Ajnu Jacob (ajacob)<br />
SA: Matthew Thiffault (mthiffau)<br />
OF: Jacob Parker (j3parker)<br />
<br />
Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr<br />
<br />
===Spring===<br />
PR: Jeff Cameron (j3camero)<br />
VP: Brennan Taylor (b4taylor)<br />
TR: Vardhan Mudunuru (vmudunur)<br />
SE: Matthew Lawrence (m3lawren)<br />
SA: Michael Ellis (m2ellis)<br />
OF: Edgar Bering (ebering)<br />
<br />
===Fall===<br />
PR: Jacob Parker (j3parker)<br />
VP: Edgar Bering (ebering)<br />
TR: Rebecca Putinski (rjputins)<br />
SE: Kyle Spaans (kspaans)<br />
SA: Jeremy Roman (jbroman)<br />
OF: Amir Sayed Khader (askhader)<br />
<br />
<br />
=2011=<br />
<br />
===Winter===<br />
PR: Edgar Bering (ebering)<br />
VP: Jennifer "Emily" Wong (jy2wong)<br />
TR: Kyle Spaans (kspaans)<br />
SE: Elana "Alana" Hashman (ehashman)<br />
SA: Peter "Bofh" Barfuss (pbarfuss)<br />
OF: Marc Burns (Marc Burns)<br />
<br />
===Spring===<br />
PR: Matthew Thiffault (mthiffau)<br />
VP: Matthew McPherrin (mimcpher)<br />
TR: Kyle Spaans (kspaans)<br />
SE: Kwame Andrew Ansong (kansong)<br />
SA: Jeremy Brandon Roman (jbroman)<br />
OF: Jennifer "Emily" Wong (jy2wong)<br />
<br />
===Fall===<br />
PR: Marc Burns (m4burns)<br />
VP: Katharine Hyatt (kshyatt)<br />
TR: Jacob Parker (j3parker)<br />
SE: Elana Hashman (ehashman)<br />
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)<br />
OF: Kyle Spaans (kspaans)<br />
LIB: Edgar Bering (ebering)<br />
<br />
<br />
=2012=<br />
<br />
===Winter===<br />
PR: Marc Burns (m4burns)<br />
VP: Elana Hashman (ehashman)<br />
TR: Jacob Parker (j3parker)<br />
SE: Matthew McPherrin (mimcpher)<br />
SA: Jeremy Roman (jbroman)<br />
OF: Luqman Aden (laden)<br />
LIB: Jennifer "Emily" Wong (jy2wong)<br />
<br />
===Summer===<br />
PR: Anthony Brennan (a2brenna)<br />
VP: Luqman Aden (laden)<br />
TR: Matthew McPherrin (mimcpher)<br />
SE: Elana Hashman (ehashman)<br />
SA: Sarah Harvey (sharvey)<br />
OF: Marc Burns (m4burns)<br />
LIB: John Ladan (jladan)<br />
<br />
===Fall===<br />
PR: Marc Burns (m4burns)<br />
VP: Salem Talha (satalha)<br />
TR: Jennifer Wong (jy2wong)<br />
SE: Elana Hashman (ehashman), resigned<br />
SA: Jeremy Roman (jbroman)<br />
OF: Luqman Aden (laden)<br />
LIB: John Ladan (jladan)<br />
<br />
<br />
=2013=<br />
<br />
===Winter===<br />
PR: Anthony Brennan (a2brenna)<br />
VP: Marc Burns (m4burns)<br />
TR: John Mumford (jsmumfor)<br />
SE: Matt Olechnowicz (mgolechn)<br />
SA: Sarah Harvey (sharvey)<br />
OF: Bryan Coutts (b2coutts)<br />
LIB: Matthew McPherrin (mimcpher)<br />
<br />
===Spring===<br />
PR: Shane Robert Creighton-Young (srcreigh)<br />
VP: Visishta Vijayanand (vvijayan)<br />
TR: Dominik Chlobowski (dchlobow)<br />
SE: Youn Jin Kim (yj7kim)<br />
SA: Anthony Brennan (a2brenna)<br />
OF: Marc Burns (m4burns)<br />
IMAPD: Dominik Chlobowski (dchlobow)<br />
<br />
===Fall===<br />
PR: Elana Hashman (ehashman)<br />
VP: Marc Burns (m4burns)<br />
TR: Dominik Chlobowski (dchlobow)<br />
SE: Edward Lee (e45lee)<br />
SA: Jeremy Roman (jbroman)<br />
OF: Sean Hunt (scshunt)<br />
<br />
<br />
= 2014 =<br />
<br />
=== Winter ===<br />
PR: Bryan Coutts (b2coutts)<br />
VP: Visishta Vijayanand (vvijayan)<br />
TR: Marc Burns (m4burns)<br />
SE: Mark Farrell (m4farrel)<br />
SA: Murphy Berzish (mtrberzi)<br />
OF: Nicholas Black (nablack)<br />
<br />
=== Spring ===<br />
PR: Youn Jin Kim (yj7kim)<br />
VP: Luke Franceschini (l3france)<br />
TR: Joseph Chouinard (jchouina)<br />
SE: Ifaz Kabir (ikabir)<br />
SA: Murphy Berzish (mtrberzi)<br />
OF: Matthew Thiffault (mthiffau)<br />
<br />
=== Fall ===<br />
PR: Youn Jin Kim (yj7kim)<br />
VP: Theodor Belaire (tbelaire)<br />
TR: Jonathan Jerel Bailey (jj2baile)<br />
SE: Shane Robert Creighton-Young (srcreigh)<br />
SA: Alexis Hunt (aechunt)<br />
OF: Mark Farrell (m4farrel)<br />
LIB: Gianni Leonardo Gambetti (glgambet)<br />
<br />
= 2015 =<br />
<br />
=== Winter ===<br />
PR: Gianni Leonardo Gambetti (glgambet)<br />
VP: Luke Franceschini (l3france)<br />
TR: Edward Lee (e45lee)<br />
SE: Patrick James Melanson (pj2melan)<br />
SA: Murphy Berzish (mtrberzi)<br />
OF: Shikhar Singh (s285sing)<br />
LIB: Aishwarya Gupta (a72gupta)<br />
<br />
<br />
=== Spring ===<br />
PR: Luqman Aden (laden)<br />
VP: Patrick Melanson (pj2melan)<br />
TR: Jonathan Bailey (jj2baile)<br />
SE: Keri Warr (kpwarr)<br />
SA: Nik Black (nablack)<br />
OF: Ilia Chtcherbakov (ischtche)<br />
LIB: Yomna Nasser (ynasser)<br />
<br />
<br />
=== Fall ===<br />
PR: Simone Hu (ss2hu)<br />
VP: Theo Belaire (tbelaire)<br />
TR: Jordan Taylore Upiter (jtupiter)<br />
SE: Daniel Marin (dmarin)<br />
SA: Jordan Xavier Pryde (jxpryde)<br />
OF: Ilia Chtcherbakov (ischtche)<br />
<br />
<br />
= 2016 =<br />
<br />
=== Winter ===<br />
PR: Patrick Melanson (pj2melan)<br />
VP: Patrick Melanson (pj2melan)<br />
Acting VP, progcom chair: Theo Belaire (tbelaire)<br />
TR: Luqman Aden (laden)<br />
SE: Naomi Koo (m3koo)<br />
SA: Zachary Seguin (ztseguin)<br />
OF: Reila Zheng (wy2zheng)<br />
LI: Felix Bauckholt (fbauckho)<br />
FR: Marc Mailhot (mnmailho)<br />
<br />
=== Spring ===<br />
PR: Luqman Aden (laden)<br />
VP: Melissa Angelica Mary Tedesco (matedesc)<br />
TR: Jonathan Jerel Bailey (jj2baile)<br />
SE: Aditya Shivam Kothari (askothar)<br />
SA: Jordan Xavier Pryde (jxpryde)<br />
OF: Zachary Seguin (ztseguin)<br />
LI: Charlie Wang (s455wang)<br />
FR: Marc Mailhot (mnmailho)<br />
<br />
=== Fall ===<br />
PR: Charlie Wang (s455wang)<br />
VP: Bryan Coutts (b2coutts)<br />
TR: Laura Song (lhsong)<br />
SE: Uday Barar (ubarar)<br />
SA: Zachary Seguin (ztseguin)<br />
OF: Jamie Sinn (j2sinn)<br />
LI: Felix Bauckholt (fbauckho)<br />
FR: Ilia Chtcherbakov (ischtche)<br />
<br />
= 2017 =<br />
<br />
=== Winter ===<br />
PR: Wilson Cheang (wyschean)<br />
VP: Tristan Hume (tghume)<br />
TR: Jordan Pryde (jxpryde)<br />
SE: Amir Fata (aafata)<br />
SA: Zachary Seguin (ztseguin)<br />
OF: Felix Bauckholt (fbaukcho)<br />
LI: Connor Murphy (cfmurph)<br />
FR: Marc Mailhot (mnmailho)<br />
<br />
=== Spring ===<br />
<br />
PR: Felix Bauckholt (fbauckho)<br />
VP: Zichuan Wei (z34wei)<br />
TR: Laura Song (lhsong)<br />
SE: Bo Mo (bzmo)<br />
SA: Zachary Seguin (ztseguin)<br />
OM: Uday Barar (ubarar)<br />
LI: Patrick Melanson (pj2melan)<br />
FR: Uday Barar (ubarar)</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Historical:CAS&diff=4092Historical:CAS2017-05-10T22:20:37Z<p>S455wang: s/_ENV/_SERVER</p>
<hr />
<div>IST provides a service called CAS that can be used to authenticate UW accounts.<br />
Relevant docs from IST are http://ist.uwaterloo.ca/~mpatters/cas/user.html and https://strobe.uwaterloo.ca/~twiki/bin/view/ISTCSS/CASClientAuth<br />
<br />
CSC also provides WebAuth for authenticating against CSC accounts instead of UW accounts.<br />
<br />
===Using CAS in the CSC webhost environment===<br />
We've got the CAS module installed on the CSC webserver.<br />
<br />
You can use Authtype CAS in your .htaccess files<br />
For the simplest case, just require any UW password:<br />
<br />
AuthType CAS<br />
require valid-user<br />
<br />
If you put that in an .htaccess, anything in that folder will require a username to log in.<br />
<br />
If you want to require a few specific users, try this:<br />
<br />
Authtype CAS<br />
require user ctdalek dbelange mimcpher<br />
<br />
== CGI apps with CAS ==<br />
<br />
Apache puts the $REMOTE_USER variable into your application's environment, so you can use that to<br />
get the username. For example, in PHP, use $_SERVER['REMOTE_USER'], or os.environ['REMOTE_USER'] in a Python cgi.</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Past_Executive&diff=4076Past Executive2017-02-20T05:22:26Z<p>S455wang: /* Fall */ remove Laura's middle name</p>
<hr />
<div>__NOTOC__<br />
<br />
Data sources for this exec list have been: CSC records, MathNEWS.<br />
According to the warrior wiki dudes, there was an article about the CSC being founded in the chevron: ''This week on campus''. The Chevron. January 5 1968. Page 16. -- somebody should get a copy of that.<br />
<br />
= Definitions =<br />
#define PR President<br />
#define VP Vice-president<br />
#define TR Treasurer<br />
#define SE Secretary<br />
#define SA Sysadmin<br />
#define OF Office Manager<br />
#define LI Librarian<br />
#define FL Flasher<br />
#define DE Deity<br />
#define WW Webmaster<br />
#define OF Office Manager<br />
#define SE-TR Secretary-Treasurer (Position was split)<br />
#define FR Fridge Regent<br />
<br />
=Founding 1967=<br />
<br />
Sponsor - J. Peter Sprung<br />
PR: K. Rugger<br />
VP: R. Jaques<br />
SE-TR: G. Sutherland<br />
<br />
Founding Members:<br />
B. Kindree<br />
R. Melen<br />
V. Neglia<br />
R. Charney<br />
R. Truman<br />
Glenn Berry<br />
D. Meek<br />
<br />
===Fall===<br />
<br />
PR: Bill Kindred<br />
VP: Rick Jacques<br />
SE-TR: Graham Sutherland<br />
<br />
Committee members: R. Stallwerthy, C. de Vries<br />
<br />
=1968=<br />
<br />
===Winter===<br />
<br />
PR: Bill Kindred<br />
VP: Rick Jacques<br />
SE-TR: Graham Sutherland<br />
<br />
===Fall===<br />
<br />
SE-TR: Glenn Berry<br />
<br />
=1969=<br />
<br />
Unknown, only one letter found in the folder 'ACM History' addressed to Glenn Berry, which makes it likely that he was SE-TR once again. May be indicated in membership lists. The club appears to have died this academic year.<br />
<br />
=1970=<br />
<br />
===A note on ACM affiliation===<br />
<br />
The first attempt at joining the ACM was started with an informal inquiry Dec 5, 1967. This lead to a series of constitution edits (working towards affiliation) in Winter 1968. There was a break for the spring (no correspondence found, I presume we were waiting on a reply). In the fall records indicate that our constitution and chartering was rejected, further correspondence was sent in Fall 1968 by Glenn Berry. A new inquiry, seemingly unaware of the first was sent Dec 7, 1970<br />
<br />
===Fall===<br />
<br />
PR: Rick Beach<br />
VP: Lee Santon<br />
TR: Randy Melen<br />
SE: Vic Neglia<br />
<br />
=1971=<br />
<br />
===Spring===<br />
<br />
VP: James H. "Jim" Finch and James W. Welch both signed letters as VP.<br />
<br />
===Fall===<br />
<br />
VP: James W. Welch<br />
<br />
=1972=<br />
<br />
It appears we visited Western and Western visited us this year (there is some reference to a similar occurrence the year previous). Documents from 1973 indicate a termly exec structure, this probably goes back to 1972.<br />
<br />
===Winter===<br />
<br />
PR: Mike Campbell<br />
VP: Edgar Hew<br />
SE-TR: Doug Lacy<br />
<br />
There is also stuff from James W. Welch without a position.<br />
<br />
===Fall===<br />
<br />
PR: Ian McIntosh<br />
<br />
=1973=<br />
<br />
Faculty Sponsor: Morven Gentleman<br />
<br />
===Winter===<br />
<br />
SE: Douglas E. Lacy<br />
<br />
===Spring===<br />
<br />
PR: Jim Parry<br />
<br />
===Fall===<br />
<br />
PR: Jim Parry<br />
VP: Ray Walden<br />
TR: Slavko Stemberger<br />
SE: Mario Festival<br />
<br />
=1974=<br />
<br />
===Fall===<br />
<br />
PR: Russell Crook<br />
<br />
=1975-1977=<br />
<br />
Faculty Sponsor: Morven Gentleman??<br />
<br />
Peter Raynham reports (first hand account): president for at least 2 or 3 terms in this period.<br />
Sylvia Eng: 1975/6 as some position.<br />
Dave Buckingham: a VP at some point<br />
Allison Nolan: 1977 time<br />
Peter Stevens: 1977<br />
Russel Crook???<br />
<br />
Dennis Ritchie came. So did Jeffrey D. Ullman.<br />
<br />
=1976=<br />
<br />
===Fall===<br />
<br />
Progcom: Peter Stevens<br />
<br />
=1977=<br />
<br />
===Winter===<br />
<br />
Progcom: Allison Nowlan<br />
<br />
===Spring=== <br />
<br />
PR: Peter Stevens<br />
Progcom: Allison Nowlan<br />
<br />
===Fall===<br />
<br />
PR: Andrzej Jan Taramina<br />
Progcom: Allison Nowlan<br />
<br />
=1978=<br />
<br />
===Winter===<br />
<br />
PR: Peter Stevens<br />
<br />
===Spring===<br />
<br />
TR: K.G. Dykes<br />
SE: Kandry Mutheardy<br />
<br />
Brian Kernighan gave a talk this term. So did Ken Thompson.<br />
<br />
===Fall===<br />
<br />
=1979=<br />
<br />
===Spring===<br />
<br />
PR: Robert Biddle<br />
<br />
<br />
=1987=<br />
<br />
===Fall===<br />
<br />
PR: Jim Boritz<br />
VP: Ted Timar<br />
TR: Gayla Boritz<br />
SE: Edwin Hoogerbeets<br />
<br />
=1988=<br />
<br />
Jim Boritz was president in Winter 1988. (Source: http://csclub.uwaterloo.ca/misc/procedure.pdf)<br />
Tim Timar - cc'd on memos/mentioned on mathsoc minutes in 1987/88.<br />
The Sysadmin and Office Manager positions seem to have been created somewhere in here. The 'Record Management Profile' that Robyn Stewart did as an assignment in 1991-1992 for some class at UBC<br />
indicates the existence of both positions. We acquired an HP-9000 in the summer of 1988 and as this was out first "real" computer (previously we had an IBM PC and terminal), the sysadmin position was created, starting with the Fall 1988 term.<br />
<br />
===Fall===<br />
<br />
SA: Wade Richards<br />
<br />
=1989=<br />
<br />
===Winter===<br />
<br />
http://mirror.csclub.uwaterloo.ca/csclub/bill-gates-1989-big.jpg<br />
<br />
Left to right: Jim Boritz (bottom), Wade Richards (top), Ted Timar, ???, Keven Smith, Bill Gates (not exec), Angela Chambers, Ross Ridge (top), Sean Goggin (bottom), ??? <br />
<br />
PR: Barry W. Smith<br />
VP: Angela Chambers<br />
TR:<br />
SE: Sean Goggin<br />
SA: Wade Richards / Ross Ridge<br />
<br />
(President Kevin Smith confirmed: http://csclub.uwaterloo.ca/misc/procedure.pdf)<br />
<br />
===Spring===<br />
<br />
PR: Jim Thornton<br />
VP: Gayla Boritz<br />
TR: David Fenger<br />
SE: Kivi Shapiro<br />
SA: Reid Pinchback<br />
<br />
Assistance to sysadmin: Jim Boritz.<br />
<br />
===Fall===<br />
<br />
PR: James Boritz<br />
VP: Edmond Bourne<br />
SA: Ross Ridge<br />
<br />
=1990=<br />
<br />
===Winter===<br />
<br />
TR: Jim Thornton<br />
<br />
===Spring===<br />
<br />
TR: Karen Smith<br />
SE: Robyn Steward<br />
<br />
===Fall===<br />
PR: Wade Richards<br />
TR: Carolyn Duke<br />
SE: Robyn Stewart - attended mathsoc meeting on our behalf.<br />
Kivi Shapiro - attended mathsoc meeting on our behalf.<br />
- Censured by mathsoc for his actions during the election.<br />
Shannon Mann - attended mathsoc meeting on our behalf.<br />
<br />
=1991=<br />
<br />
===Winter===<br />
VP: Edmond Bourne<br />
TR: Carolyn Duke<br />
SE: Robyn Stewart<br />
Shannon Mann - attended mathsoc meeting on our behalf.<br />
<br />
John McCarthy came this term.<br />
<br />
===Spring===<br />
TR: Rob Leitman<br />
Jason Knell - attended mathsoc meeting on our and PMC's behalf.<br />
<br />
===Fall===<br />
TR: Mike Van Lingen<br />
Wiktor Wiewiorowski - attended mathsoc meeting on our behalf this term.<br />
<br />
<br />
=1992=<br />
<br />
===Winter===<br />
TR: Norm Ross<br />
SE: Brent Williams<br />
<br />
===Spring===<br />
PR: Dale Wick<br />
TR: Stephen A. Mills<br />
<br />
===Fall===<br />
TR: Mark Plumb<br />
<br />
<br />
=1993=<br />
<br />
===Winter===<br />
TR: Rob Leitman<br />
VP: Tim Prime<br />
OF: Dave Ebbo<br />
LI: Norm Ross<br />
<br />
Other exec for this term: Ellen Hsiang, Sam Coulombe, Peter Gray<br />
<br />
===Spring===<br />
TR: Mark Tompsett <br />
<br />
===Fall===<br />
<br />
PR: Ian Goldberg<br />
<br />
=1994=<br />
<br />
===Winter===<br />
PR: Ian Goldberg<br />
TR: Mark Tompsett<br />
SE: Tom Rathbourne<br />
LI: Michael Van Biesbrouck<br />
Norm Ross assisted with finances.<br />
<br />
===Spring===<br />
PR: Dale Wick (?)<br />
TR: Steve Mills<br />
SA: Ian Goldberg (?)<br />
Norm Ross assisted with finances.<br />
<br />
===Fall===<br />
PR: Ross Ridge<br />
VP: Tom Rathbourne (?)<br />
TR: Rob Leitman<br />
SA: Zygo Blaxell<br />
LI: Michael Van Biesbrouck<br />
<br />
<br />
=1995=<br />
<br />
===Winter===<br />
TR: Sharlene Schmeichel<br />
Amy Brown and Rob Ridge purchased books.<br />
<br />
===Spring===<br />
TR: Steve Mills<br />
<br />
===Fall===<br />
PR: Amy Brown (arbrown) <br />
VP: Christina Norman (cbnorman)<br />
TR: Steven Mills (samills)<br />
SE: Allyson Graham (akgraham)<br />
SA: Gavin Peters<br />
<br />
<br />
=1996=<br />
<br />
===Winter===<br />
PR: Nikita Borisov (nborisov)<br />
VP: Joseph Deu Ngoc (dtdeungo) <br />
TR: Stephen Mills (samills)<br />
SE: Sharlene Schmeichel (saschmei)<br />
SA: Dave Brown (dagbrown)<br />
OF: Somsack Tsai (stsai)<br />
LI: Devin Carless (dccarles)<br />
FL: Allyson Graham (akgraham)<br />
DE: Ian Goldberg (iagoldbe)<br />
<br />
===Spring===<br />
PR: Blake Winton (bwinton)<br />
VP: Nick Harvey (njaharve)<br />
TR: Nikita Borisov (nborisov)<br />
SE: Viet-Trung Luu (vluu)<br />
SA: Drew Hamilton (awhamilt)<br />
OF: Jillian Arnott (jarnott)<br />
LI: Ross Ridge (rridge)<br />
FL: Devin Carless (dccarles)<br />
<br />
=== Fall ===<br />
PR: Shannon Mann (sjbmann) <br />
VP: Joe "Frosh" Deu Ngoc (jtdeungo) resigned (heavy workload)<br />
TR: Michal Van Biesbrouck (mlvanbie) <br />
SE: Nikita Borisov (nborisov) <br />
SA: Chris Rovers <br />
OF: Dax Hutcheon (ddhutche) became VP upon jtduengo's resignation<br />
LI: Aliz Csenki (acsenki) <br />
FL: Aaron Chmielowiec (archmiel) <br />
DE: Skuld (no uwuserid yet...)<br />
<br />
<br />
=1997=<br />
<br />
===Winter===<br />
PR: Dima Brodsky <br />
VP: Nikita Borisov (nborisov)<br />
TR: Stephen Mills (samills)<br />
SE: Evan Jones (ejones)<br />
SA: Alex Brodsky<br />
OF: Chris Doherty<br />
LI: Matt Corks <br />
FL: Paul Prescod<br />
<br />
=== Fall ===<br />
PR: Chris Rovers (cdrovers) <br />
VP: Michael van Biesbrouck (mlvanbie) <br />
TR: Somsack Tsai (stsai) <br />
SE: Matt Corks (mvcorks)<br />
SA: Lennart Sorensen (lsorense) <br />
LI: Chmielowiec (archmiel) <br />
OF: Devin Carless (dccarles) <br />
FL: Aaron Chmielowiec (archmiel)<br />
<br />
<br />
= 1998 =<br />
<br />
=== Winter ===<br />
PR: Suresh Naidu <br />
VP: Viet-Trung Luu <br />
TR: Tim Coleman <br />
SE: Dax Hutcheon <br />
Librarian: Dax Hutcheon <br />
Flasher: Dax Hutcheon <br />
Webmaster: Dax Hutcheon <br />
SA: Robin Powell<br />
OF: Aaron Chmielowiec<br />
<br />
=== Spring ===<br />
<br />
Position Name You might call them...<br />
President roconnor Russell O'Connor<br />
Vice-president trwcolem Tim Coleman<br />
Treasurer knzarysk Karl Zaryski<br />
Secretary (bwinton) (Blake Winton)<br />
Sysadmin wbiggs Billy Biggs<br />
Librarian snaidu Suresh Naidu<br />
Flasher pechrysl Paul Chrysler<br />
Office Manager dccarles Devin Carless<br />
WWWW trwcolem Tim Coleman<br />
<br />
=== Fall ===<br />
<br />
President Joe Deu Ngoc jtdeungo<br />
Vice-President Wai Ling Yee wlyee<br />
Treasurer Fjord j2lynn<br />
Secretary Matt Corks mvcorks<br />
Sysadmin Andrew Hamilton awhamilt<br />
<br />
World Wide Web Wench Dax Hutcheon ddhutche<br />
Office Manager Richard Bell rlbell<br />
Librarian Damian Gryski dgryski<br />
Flasher Paul Chrysler pechrysl<br />
Official Deity Ian Goldberg iagoldbe<br />
Official Chairbeing Calum T. Dalek calum<br />
<br />
<br />
=1999=<br />
<br />
=== Winter ===<br />
PR: geduggan<br />
VP:<br />
TR:<br />
SE:<br />
SA:<br />
<br />
<br />
=2000=<br />
<br />
=== Winter ===<br />
PR: Will Chartrand (wgchartr)<br />
VP: Gavin Duggan (geduggan)<br />
TR:<br />
SE:<br />
SA: Lennart Sorensen (lsorense)<br />
OF:<br />
<br />
=== Fall ===<br />
PR: geduggan<br />
VP: <br />
TR:<br />
SE:<br />
SA: bioster<br />
OF:<br />
<br />
<br />
=2001=<br />
<br />
=== Winter ===<br />
PR: geduggan<br />
VP:<br />
TR:<br />
SE:<br />
SA:<br />
OF:<br />
<br />
=== Spring ===<br />
PR: geduggan<br />
VP:<br />
TR:<br />
SE:<br />
SA:<br />
OF:<br />
<br />
=2002=<br />
<br />
http://www.mathnews.uwaterloo.ca/Issues/mn8902/cscflash.php<br />
<br />
=== Winter ===<br />
PR: Billy Biggs<br />
VP: Stefanus Du Toit<br />
TR: Melissa Basinger<br />
SE: James Perry<br />
SA: Barry Genova<br />
Librarian: Ryan Golbeck<br />
Webmaster: Jonathan Beverley<br />
Office Manager: Sayan Li<br />
<br />
=== Spring ===<br />
PR: Alex Pop<br />
VP: Melissa Basinger<br />
TR: Siyan Li<br />
SE: James A Morrison<br />
SA: Jonathan Beverley<br />
Webmaster: Stefanus Du Toit<br />
<br />
=== Fall ===<br />
PR: James A. Morrison<br />
VP: Stefanus Du Toit<br />
TR: James Perry<br />
SE: Michael Biggs<br />
SA: Ryan Golbeck<br />
Librarian: Mark Sherry, Cassandra Schopf<br />
Webmaster: Stefanus Du Toit<br />
<br />
<br />
=2003=<br />
<br />
=== Winter ===<br />
PR: Kannan Vijayan (kvijayan)<br />
VP: Meg Darragh (m2darrag)<br />
TR: James Perry (jeperry)<br />
SE: Wojciech Kosnik (wkosnik)<br />
SA: Stefanus Du Toit (sjdutoit)<br />
LI: Simon Law (sfllaw)<br />
WM: Julie Lavoie (jlavoie)<br />
<br />
===Fall===<br />
PR: Stefanus Du Toit (sjdutoit)<br />
VP: Meg Darragh (m2darrag)<br />
TR: Tor Myklebust (tmyklebu)<br />
SE: James Perry (jeperry)<br />
SA: Simon Law (sfllaw)<br />
OF:<br />
<br />
<br />
=2004=<br />
<br />
===Winter===<br />
PR: Simon Law (sfllaw)<br />
VP: fspacek<br />
TR: ljain<br />
SE: Julie Lavoie (jlavoie)<br />
SA: Tor Myklebust(tmyklebu)<br />
OF:<br />
<br />
===Spring===<br />
PR: dnmorton ?<br />
VP: Tim Loach (tloach)<br />
TR: Michael Biggs (mbiggs)<br />
SE: Lesley Northam (lanortha)<br />
SA: <br />
OF:<br />
<br />
===Fall ===<br />
PR: jeperry<br />
VP: mtsay<br />
TR: Mark Sherry (mdsherry)<br />
SE: Tor Myklebust (tmyklebu)<br />
SA: jlavoie<br />
OF:<br />
<br />
<br />
=2005=<br />
<br />
===Winter===<br />
<br />
PR: mtsay<br />
VP: Lesley Northam (lanortha)<br />
TR: Holden Karau (hkarau)<br />
SE: domorton<br />
SA: Tor Myklebust (tmyklebu)<br />
OF:<br />
<br />
===Spring===<br />
<br />
PR: Mark Sherry (mdsherry)<br />
VP: Martin Kess (mdkess)<br />
TR: Ali Piccioni (apiccion)<br />
SE: Michael Biggs (mbiggs)<br />
SA: Tor Myklebust (tmyklebu)<br />
OF:<br />
<br />
===Fall===<br />
<br />
PR: Tim Loach (tloach)<br />
VP: Lesley Northam (lanortha)<br />
TR: Caelyn McAulay (cmcaulay)<br />
SE: The Professor<br />
SA: Holden Karau (hkarau)<br />
OF:<br />
<br />
<br />
=2006=<br />
<br />
===Winter===<br />
<br />
PR: Tor Myklebust (tmyklebu)<br />
VP: Michael Druker (mdruker)<br />
TR: Caelyn McAulay (cmcaulay)<br />
SE: Mark Sherry (mdsherry)<br />
SA: William O'Connor (woconnor)<br />
OF:<br />
<br />
===Spring===<br />
PR: David Bartley (dtbartle)<br />
VP: David Belanger (dbelange)<br />
TR: David Tenty (daltenty)<br />
SE: Chris Evensen (cevensen)<br />
SA: Holden Karau (hkarau)<br />
OF:<br />
<br />
===Fall===<br />
<br />
PR: Martin Kess (mdkess)<br />
VP: Mark Sherry (mdsherry)<br />
TR: Sylvan L. Mably (slmably)<br />
SE: Caelyn McAulay (cmcaulay) <br />
SA: William O'Connor (woconnor)<br />
<br />
<br />
=2007=<br />
<br />
===Winter===<br />
PR: David Bartley (dtbartle)<br />
VP: David Belanger (dbelange)<br />
TR: Caelyn McAulay (cmcaulay)<br />
SE: David Tenty (daltenty)<br />
SA: Holden Karau (hkarau)<br />
Webmaster: jnopporn<br />
OF:<br />
<br />
===Spring===<br />
PR: Gaelan D'costa (gdcosta)<br />
VP: Kyle Larose (kmlarose)<br />
TR: Kyle Spaans (kspaans)<br />
SE: Erik Louie (elouie)<br />
SA: Michael Spang (mspang)<br />
Librarian: David Tenty (daltenty)<br />
OF:<br />
<br />
===Fall ===<br />
PR: Holden Karau (hkarau)<br />
VP: Alex McCausland (amccausl)<br />
TR: Dominik Chlobowski (dchlobow)<br />
SE: Sean Cumming (sgcummin)<br />
SA: David Tenty (daltenty)<br />
OF:<br />
WW: dtbartle / jnopporn<br />
<br />
<br />
=2008=<br />
<br />
===Winter ===<br />
PR: Sean Cumming (sgcummin)<br />
VP: Matt Lawrence (m3lawren)<br />
TR: Mateusz Tarkowski (mtarkows)<br />
SE: Edgar Bering (ebering)<br />
SA: Jordan Saunders (jmsaunde)<br />
OF:<br />
<br />
===Summer ===<br />
PR: Brennan Taylor (b4taylor)<br />
VP: Qifan Xi (qxi)<br />
TR: Matt Lawrence (m3lawren)<br />
SE: Nick Guenther (nguenthe)<br />
SA:<br />
OF:<br />
<br />
===Fall ===<br />
PR: Matthew Lawrence (m3lawren)<br />
VP: Edgar Bering (ebering)<br />
TR: Michael Gregson (mgregson)<br />
SE: James Simpson (j2simpso) resigned for medical reasons, replaced by Dominik 'Domo' Chłobowski<br />
SA: Kyle Spaans (kspaans)<br />
OF:<br />
<br />
<br />
=2009=<br />
<br />
===Winter===<br />
PR: Michael Gregson (mgregson)<br />
VP: Edgar Bering (ebering)<br />
TR: Brennan Taylor (b4taylor)<br />
SE: James Simpson (j2simpso) resigned for business reasons, replaced by Rebecca Putinski (rjputins) <br />
SA: Jacob Parker (j3parker) <br />
OF: XinChi Yang / Sapphyre Gervais (x23yang / sagervai) (both)<br />
<br />
===Spring ===<br />
PR: Michael Spang (mspang)<br />
VP: Jacob Parker (j3parker)<br />
TR: Sapphyre Gervais (sagervai)<br />
SE: Matthew McPherrin (mimcpher)<br />
SA: Anthony Brennan (a2brenna)<br />
OF:<br />
<br />
===Fall===<br />
PR: Jacob Parker (j3parker)<br />
VP: Edgar Bering (ebering)<br />
TR: Michael Spang (mspang)<br />
SE: Brennan Taylor (b4taylor)<br />
SA: Michael Ellis (m2ellis)<br />
OF: Rebecca Putinski (rjputins)<br />
<br />
<br />
=2010=<br />
<br />
===Winter===<br />
PR: Kyle Spaans (kspaans)<br />
VP: Edgar Bering (ebering)<br />
TR: Sapphyre Gervais (sagervai)<br />
SE: Ajnu Jacob (ajacob)<br />
SA: Matthew Thiffault (mthiffau)<br />
OF: Jacob Parker (j3parker)<br />
<br />
Keyed office staffers: j3camero,jdonland,m2ellis,mimcpher,nsasherr<br />
<br />
===Spring===<br />
PR: Jeff Cameron (j3camero)<br />
VP: Brennan Taylor (b4taylor)<br />
TR: Vardhan Mudunuru (vmudunur)<br />
SE: Matthew Lawrence (m3lawren)<br />
SA: Michael Ellis (m2ellis)<br />
OF: Edgar Bering (ebering)<br />
<br />
===Fall===<br />
PR: Jacob Parker (j3parker)<br />
VP: Edgar Bering (ebering)<br />
TR: Rebecca Putinski (rjputins)<br />
SE: Kyle Spaans (kspaans)<br />
SA: Jeremy Roman (jbroman)<br />
OF: Amir Sayed Khader (askhader)<br />
<br />
<br />
=2011=<br />
<br />
===Winter===<br />
PR: Edgar Bering (ebering)<br />
VP: Jennifer "Emily" Wong (jy2wong)<br />
TR: Kyle Spaans (kspaans)<br />
SE: Elana "Alana" Hashman (ehashman)<br />
SA: Peter "Bofh" Barfuss (pbarfuss)<br />
OF: Marc Burns (Marc Burns)<br />
<br />
===Spring===<br />
PR: Matthew Thiffault (mthiffau)<br />
VP: Matthew McPherrin (mimcpher)<br />
TR: Kyle Spaans (kspaans)<br />
SE: Kwame Andrew Ansong (kansong)<br />
SA: Jeremy Brandon Roman (jbroman)<br />
OF: Jennifer "Emily" Wong (jy2wong)<br />
<br />
===Fall===<br />
PR: Marc Burns (m4burns)<br />
VP: Katharine Hyatt (kshyatt)<br />
TR: Jacob Parker (j3parker)<br />
SE: Elana Hashman (ehashman)<br />
SA: Anthony "hatguy/hotgay" Brennan (a2brenna)<br />
OF: Kyle Spaans (kspaans)<br />
LIB: Edgar Bering (ebering)<br />
<br />
<br />
=2012=<br />
<br />
===Winter===<br />
PR: Marc Burns (m4burns)<br />
VP: Elana Hashman (ehashman)<br />
TR: Jacob Parker (j3parker)<br />
SE: Matthew McPherrin (mimcpher)<br />
SA: Jeremy Roman (jbroman)<br />
OF: Luqman Aden (laden)<br />
LIB: Jennifer "Emily" Wong (jy2wong)<br />
<br />
===Summer===<br />
PR: Anthony Brennan (a2brenna)<br />
VP: Luqman Aden (laden)<br />
TR: Matthew McPherrin (mimcpher)<br />
SE: Elana Hashman (ehashman)<br />
SA: Sarah Harvey (sharvey)<br />
OF: Marc Burns (m4burns)<br />
LIB: John Ladan (jladan)<br />
<br />
===Fall===<br />
PR: Marc Burns (m4burns)<br />
VP: Salem Talha (satalha)<br />
TR: Jennifer Wong (jy2wong)<br />
SE: Elana Hashman (ehashman), resigned<br />
SA: Jeremy Roman (jbroman)<br />
OF: Luqman Aden (laden)<br />
LIB: John Ladan (jladan)<br />
<br />
<br />
=2013=<br />
<br />
===Winter===<br />
PR: Anthony Brennan (a2brenna)<br />
VP: Marc Burns (m4burns)<br />
TR: John Mumford (jsmumfor)<br />
SE: Matt Olechnowicz (mgolechn)<br />
SA: Sarah Harvey (sharvey)<br />
OF: Bryan Coutts (b2coutts)<br />
LIB: Matthew McPherrin (mimcpher)<br />
<br />
===Spring===<br />
PR: Shane Robert Creighton-Young (srcreigh)<br />
VP: Visishta Vijayanand (vvijayan)<br />
TR: Dominik Chlobowski (dchlobow)<br />
SE: Youn Jin Kim (yj7kim)<br />
SA: Anthony Brennan (a2brenna)<br />
OF: Marc Burns (m4burns)<br />
IMAPD: Dominik Chlobowski (dchlobow)<br />
<br />
===Fall===<br />
PR: Elana Hashman (ehashman)<br />
VP: Marc Burns (m4burns)<br />
TR: Dominik Chlobowski (dchlobow)<br />
SE: Edward Lee (e45lee)<br />
SA: Jeremy Roman (jbroman)<br />
OF: Sean Hunt (scshunt)<br />
<br />
<br />
= 2014 =<br />
<br />
=== Winter ===<br />
PR: Bryan Coutts (b2coutts)<br />
VP: Visishta Vijayanand (vvijayan)<br />
TR: Marc Burns (m4burns)<br />
SE: Mark Farrell (m4farrel)<br />
SA: Murphy Berzish (mtrberzi)<br />
OF: Nicholas Black (nablack)<br />
<br />
=== Spring ===<br />
PR: Youn Jin Kim (yj7kim)<br />
VP: Luke Franceschini (l3france)<br />
TR: Joseph Chouinard (jchouina)<br />
SE: Ifaz Kabir (ikabir)<br />
SA: Murphy Berzish (mtrberzi)<br />
OF: Matthew Thiffault (mthiffau)<br />
<br />
=== Fall ===<br />
PR: Youn Jin Kim (yj7kim)<br />
VP: Theodor Belaire (tbelaire)<br />
TR: Jonathan Jerel Bailey (jj2baile)<br />
SE: Shane Robert Creighton-Young (srcreigh)<br />
SA: Alexis Hunt (aechunt)<br />
OF: Mark Farrell (m4farrel)<br />
LIB: Gianni Leonardo Gambetti (glgambet)<br />
<br />
= 2015 =<br />
<br />
=== Winter ===<br />
PR: Gianni Leonardo Gambetti (glgambet)<br />
VP: Luke Franceschini (l3france)<br />
TR: Edward Lee (e45lee)<br />
SE: Patrick James Melanson (pj2melan)<br />
SA: Murphy Berzish (mtrberzi)<br />
OF: Shikhar Singh (s285sing)<br />
LIB: Aishwarya Gupta (a72gupta)<br />
<br />
<br />
=== Spring ===<br />
PR: Luqman Aden (laden)<br />
VP: Patrick Melanson (pj2melan)<br />
TR: Jonathan Bailey (jj2baile)<br />
SE: Keri Warr (kpwarr)<br />
SA: Nik Black (nablack)<br />
OF: Ilia Chtcherbakov (ischtche)<br />
LIB: Yomna Nasser (ynasser)<br />
<br />
<br />
=== Fall ===<br />
PR: Simone Hu (ss2hu)<br />
VP: Theo Belaire (tbelaire)<br />
TR: Jordan Taylore Upiter (jtupiter)<br />
SE: Daniel Marin (dmarin)<br />
SA: Jordan Xavier Pryde (jxpryde)<br />
OF: Ilia Chtcherbakov (ischtche)<br />
<br />
<br />
= 2016 =<br />
<br />
=== Winter ===<br />
PR: Patrick Melanson (pj2melan)<br />
VP: Patrick Melanson (pj2melan)<br />
Acting VP, progcom chair: Theo Belaire (tbelaire)<br />
TR: Luqman Aden (laden)<br />
SE: Naomi Koo (m3koo)<br />
SA: Zachary Seguin (ztseguin)<br />
OF: Reila Zheng (wy2zheng)<br />
LI: Felix Bauckholt (fbauckho)<br />
FR: Marc Mailhot (mnmailho)<br />
<br />
=== Spring ===<br />
PR: Luqman Aden (laden)<br />
VP: Melissa Angelica Mary Tedesco (matedesc)<br />
TR: Jonathan Jerel Bailey (jj2baile)<br />
SE: Aditya Shivam Kothari (askothar)<br />
SA: Jordan Xavier Pryde (jxpryde)<br />
OF: Zachary Seguin (ztseguin)<br />
LI: Charlie Wang (s455wang)<br />
FR: Marc Mailhot (mnmailho)<br />
<br />
=== Fall ===<br />
PR: Charlie Wang (s455wang)<br />
VP: Bryan Coutts (b2coutts)<br />
TR: Laura Song (lhsong)<br />
SE: Uday Barar (ubarar)<br />
SA: Zachary Seguin (ztseguin)<br />
OF: Jamie Sinn (j2sinn)<br />
LI: Felix Bauckholt (fbauckho)<br />
FR: Ilia Chtcherbakov (ischtche)</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Machine_List&diff=4075Machine List2017-02-20T05:20:03Z<p>S455wang: /* fs01" */</p>
<hr />
<div>= Web Server =<br />
You are highly encouraged to avoid running anything that's not directly related to your CSC webspace on our web server. We have plenty of general-use machines; please use those instead. You can even edit web pages from any other machine--usually the only reason you'd *need* to be on caffeine is for database access.<br />
<br />
== ''caffeine'' ==<br />
<br />
Caffeine is the Computer Science Club's web server. It serves websites, databases for websites, and a large amount of other services. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#glomag|glomag]]<br />
<br />
==== Services ====<br />
<br />
* Club and member web sites with [[Apache]]<br />
* [[MySQL]] databases<br />
* [[PostgreSQL]] databases<br />
* [[ceo]] daemon<br />
* mail was migrated to [[#mail|mail]]<br />
<br />
= General-Use Servers =<br />
<br />
These machines can be used for (nearly) anything you like (though be polite and remember that these are shared machines). Recall that when you signed the Machine Usage Agreement, you promised not to use these machines to generate profit (so no bitcoin mining).<br />
<br />
Most people use either taurine and clones or (high-fructose-)corn-syrup. hfcs is probably our beefiest machine at the moment, if you are wanting to do some heavy computation. Again, if you have a long-running computationally intensive job, it's good to<br />
nice[https://en.wikipedia.org/wiki/Nice_(Unix)] your process, and possibly let syscom know too.<br />
<br />
== ''corn-syrup'' ==<br />
<br />
PowerEdge 2950<br />
<br />
==== Specs ====<br />
<br />
* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)<br />
* 32 GB RAM<br />
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27<br />
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29<br />
* IPMI mac addr 00:24:e8:52:41:2b<br />
* 3 &times; Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)<br />
<br />
==== Notes ====<br />
<br />
* Use eth0/Gb0 for the mathstudentorgsnet connection<br />
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.<br />
<br />
==== Services ====<br />
<br />
* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)<br />
<br />
== ''high-fructose-corn-syrup'' ==<br />
<br />
High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.<br />
<br />
==== Specs ====<br />
<br />
* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)<br />
* 192 GB RAM<br />
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]<br />
* 500 GB Seagate Barracuda<br />
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]<br />
<br />
== ''taurine'' ==<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 8GB RAM<br />
* 136 GB LVM volume group<br />
<br />
==== Services ====<br />
<br />
* Virtual machines<br />
* BitlBee IRC instant messaging gateway (localhost only)<br />
* [[ident]] server to maintain high connection cap to freenode<br />
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.<br />
<br />
== ''sucrose'' ==<br />
<br />
sucrose is a [[#taurine|taurine]] clone donated by CSCF.<br />
<br />
==== Specs ====<br />
<br />
== ''potassium-citrate'' ==<br />
<br />
Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss.<br />
<br />
It is temporarily decommissioned pending the reinstallation of a supported operating system (such as OpenBSD).<br />
<br />
==== Specs ====<br />
* Alphaserver CS20 (2 833MHz EV68al CPUs)<br />
* 512MB RAM<br />
* 36 GB Seagate SCSI hard drive<br />
<br />
== ''potassium-nitrate'' ==<br />
<br />
It is a Sun Fire E2900 from a decommissioned MFCF compute cluster, on loan for an extended period. It has a SPARC architecture and runs OpenBSD, unlike many of our other systems which are x86/x86-64 and Linux/Debian.<br />
<br />
It is available for general use. Due to an "interesting" SSH server configuration, Kerberos authentication is '''required''' to access this machine. This means that from a CSC machine, run 'kinit -p' to obtain credentials before SSH'ing in. From a non-CSC machine, follow the instructions on [[Kerberos#Running_Kerberos_Locally|running Kerberos locally]].<br />
<br />
The name is from saltpetre, because sparks.<br />
<br />
==== Specs ====<br />
<br />
* 24 CPUs<br />
* 90GB main memory<br />
* 400GB scratch disk local storage in /scratch-potassium-nitrate<br />
<br />
There is a [[Sun 2900 Strategy Guide|setup guide]] available for this machine.<br />
<br />
See also [[Sun 2900]].<br />
<br />
= Office Terminals =<br />
<br />
It's possible to SSH into these machines, but we discourage you from trying to use these machines when you're not sitting in front of them. They are bounced at least every time our login manager, lightdm, throws a tantrum (which is several times a day). These are for use inside our physical office.<br />
<br />
== ''bit-shifter'' ==<br />
<br />
bit-shifter is an office terminal.<br />
<br />
==== Specs ====<br />
<br />
* Intel(R) Core(TM)2 Quad CPU Q8300<br />
* 4GB RAM<br />
* Nvidia GeForce GT 440<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Jacob Parker's Firewire Card<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''gwem'' ==<br />
<br />
gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.<br />
<br />
=== Specs ===<br />
<br />
* AMD FX-8150 3.6GHz 8-Core CPU<br />
* 16 GB RAM<br />
* AMD Radeon 6870 HD 1GB GPU<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ga-990fxa-ud7_e.pdf Gigabyte GA-990FXA-UD7] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
== ''maltodextrin'' ==<br />
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
Maltodextrin is an office terminal. It was upgraded in Spring 2014 after an unidentified failure.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i3-4130 @ 3.40 GHz<br />
* 8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* [http://csclub.uwaterloo.ca/misc/manuals/E8425_H81I_PLUS.pdf ASUS H81-PLUS] Motherboard<br />
<br />
==== Services ====<br />
<br />
* [http://csclub.uwaterloo.ca/office/webcam Office webcam]<br />
<br />
== ''natural-flavours'' ==<br />
<br />
Natural-flavours is an office terminal; it used to be our mirror.<br />
<br />
In Fall 2016, it received a major upgrade thanks the MathSoc's Capital Improvement Fund.<br />
<br />
==== Specs ====<br />
<br />
* Intel Core i7-6700k<br />
* 2x8GB RAM<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* Cup Holder (DVD drive has power, but not connected to mother board)<br />
<br />
== ''nullsleep'' ==<br />
<br />
nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
* Intel® Dual Core Atom™ 330<br />
* 2GB RAM<br />
* NVIDIA® ION™ graphics<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
* DVD Burner<br />
<br />
==== Speakers ====<br />
Nullsleep has the office speakers (a pair of nice studio monitors) currently connected to it.<br />
<br />
==== Services ====<br />
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.<br />
Music is located in /music on the office terminals<br />
<br />
== ''strombola''==<br />
It is named after Gordon Strombola.<br />
<br />
==== Specs ====<br />
* Intel Core2 Quad Q8200 @ 2.33GHz<br />
* 4 GB RAM<br />
* nVidia GeForce 8600 GTS<br />
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard<br />
* 1x 64GB SanDisk SDSSDP064G SSD<br />
<br />
==== Speakers ====<br />
Strombola used to have integrated 5.1 channel sound before we got new speakers and moved audio stuff to nullsleep.<br />
<br />
= Syscom Only =<br />
<br />
The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.<br />
== ''aspartame'' ==<br />
<br />
aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. It also used to host the [[#auth1|auth1]] container, which has been temporarily moved to [[#dextrose|dextrose]]. The lxc files are still present and should not be started up, or else the two copies of auth1 will collide.<br />
<br />
==== Specs ====<br />
<br />
* 2 AMD Opteron 2218 CPUs<br />
* 10GB RAM<br />
<br />
==== Notes ====<br />
<br />
* It currently cannot route the 10.0.0.0/8 block to a misconfiguration on the NetApp. This should be fixed at some point.<br />
<br />
== ''dextrose'' ==<br />
<br />
dextrose is a [[#taurine|taurine]] clone donated by CSCF. It currently hosts [[#mathnews|the mathNEWS server]], [[#auth1|auth1]], [[#mail|mail]], [[#rt|rt]] and [[#munin|munin]].<br />
<br />
==== Specs ====<br />
<br />
* 2 72GB drives in RAID1 (LVM dextrose)<br />
* 2 1TB drives in RAID1 (LVM dextrose2)<br />
<br />
== ''auth1'' ==<br />
<br />
Container on [[#dextrose|dextrose]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] master<br />
* [[Kerberos]] master<br />
<br />
== ''cobalamin'' ==<br />
<br />
Dell PowerEdge 2950 donated to us by FEDS. Located in the Science machine room on the first floor of Physics. Will act as a backup server for many things.<br />
<br />
==== Specs ====<br />
<br />
* 1 × Intel Xeon E5420 (2.50 GHz, 4 cores)<br />
* 16GB RAM<br />
* Broadcom NetworkXtreme II<br />
* 2x73GB Hard Drives, hardware RAID1<br />
** Soon to be 2x1TB in MegaRAID1<br />
* http://www.dell.com/support/home/ca/en/cabsdt1/product-support/servicetag/51TYRG1/configuration<br />
<br />
==== Services ====<br />
<br />
* Containers: [[#auth2|auth2]]<br />
<br />
==== Notes ====<br />
<br />
* The network card requires non-free drivers. Be sure to use an installation disc with non-free.<br />
<br />
* We have separate IP ranges for cobalamin and its containers because the machine is located in a different building. They are:<br />
<br />
** VLAN ID 506 (csc-data1): 129.97.18.16/29; gateway 129.97.18.17; mask 255.255.255.240<br />
** VLAN ID 504 (csc-ipmi): 172.19.5.24/29; gateway 172.19.5.25; mask 255.255.255.248<br />
<br />
* For some reason, the keyboard is shit. Try to avoid having to use it. It's doable, but painful. IPMI works now, and then we don't need to bug about physical access so it's better anyway.<br />
<br />
== ''auth2'' ==<br />
<br />
Container on [[#cobalamin|cobalamin]].<br />
<br />
==== Services ====<br />
<br />
* [[LDAP]] slave<br />
* [[Kerberos]] slave<br />
<br />
MAC Address: c2:c0:00:00:00:a2<br />
<br />
== ''glomag'' ==<br />
<br />
Glomag is a newish server (as of Fall 2009) which hosts [[#caffeine|caffeine]]. Only syscom are allowed to SSH in here directly, though SSH to caffeine is permitted to all members.<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon X3450 @ 2.67 GHz<br />
* 6 GB RAM<br />
* vg0: 465 GB software RAID1 (contains root partition):<br />
** 750 GB Seagate Barracuda SATA hard drive<br />
** 500 GB Western-Digital Caviar Blue SATA hard drive<br />
* vg1: 596 GB software RAID1 (contains caffeine):<br />
** 2 &times; 640 GB Western-Digital Caviar Blue SATA hard drive<br />
<br />
==== Services ====<br />
<br />
* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]], [[#munin|munin]]<br />
<br />
== ''mail'' ==<br />
<br />
mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#dextrose|dextrose]]<br />
<br />
==== Services ====<br />
<br />
* [[Mail]] services<br />
* mailman (web interface at [http://mailman.csclub.uwaterloo.ca/])<br />
* [[Webmail]]<br />
* [[ceo]] daemon<br />
<br />
== ''psilodump'' ==<br />
<br />
psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.<br />
<br />
==== Specs ====<br />
<br />
== ''phlogiston'' ==<br />
<br />
phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.<br />
<br />
phlogiston is turned off and should remain that way. It is misconfigured to have its drives overlap with those owned by psilodump, and if it is turned on, it will likely cause irreparable data loss.<br />
<br />
==== Specs ====<br />
<br />
== ''sodium-benzoate'' ==<br />
<br />
Sodium-benzoate is our previous mirror server, funded by MEF.<br />
<br />
It is currently sitting in the office pending repurposing. Will likely become a machine for backups in DC.<br />
<br />
==== Specs ====<br />
<br />
* Intel Xeon Quad Core E5405 @ 2.00 GHz<br />
* 16GB RAM<br />
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)<br />
<br />
Space disks are currently in the office underneath maltodextrin.<br />
<br />
== ''potassium-benzoate'' ==<br />
<br />
potassium-benzoate is our mirror server, funded by MEF.<br />
<br />
==== Specs ====<br />
<br />
Coming soon.<br />
<br />
Drives: See [[Potassium-Benzoate_Drives|Potassium-Benzoate Drives]]<br />
<br />
==== Network Connections ====<br />
<br />
potassium-benzoate has two connections to our network:<br />
<br />
* 1gbps to our switch (used for management)<br />
* 10gbps to cs-mc2 (this places it basically at the campus backbone and is used for mirror's IP addresses)<br />
<br />
Mirror's bandwidth is limited to 1gpbs on each of the 4 campus internet links. Mirror's bandwidth is not limited on campus.<br />
<br />
==== Services ====<br />
<br />
* [[Mirror]]<br />
* [[Talks]] mirror<br />
* [[Debian_Repository|CSClub packages repository]]<br />
<br />
== ''munin'' ==<br />
<br />
munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.<br />
<br />
==== Specs ====<br />
<br />
* currently hosted on [[#dextrose|dextrose]]<br />
<br />
==== Services ====<br />
<br />
* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon<br />
<br />
<br />
== ''yerba-mate'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
Currently in use for experimenting new CSC services.<br />
<br />
== ''guayusa'' ==<br />
<br />
A Dell PowerEdge 2950 donated by a CSC member.<br />
<br />
==== Specs ====<br />
<br />
* 2x 3.00 Hz quad core Intel Xeon 5160<br />
* 32GB RAM<br />
* 2TB PCI-Express Flash SSD<br />
* 2x75GB 15k drives (RAID 1)<br />
<br />
==== Services ====<br />
<br />
Currently in use for experimenting new CSC services.<br />
<br />
* logstash (testing of logstash)<br />
<br />
== ''ginkgo'' ==<br />
<br />
Supermicro server funded by MEF for CSC web hosting.<br />
<br />
==== Specs ====<br />
<br />
* 2x Intel Xeon E5-2697 v4 @ 2.30GHz [18 cores each]<br />
* 256GB RAM<br />
* 2 x 1.2 TB SSD (400GB of each for RAID 1)<br />
* 10GbE onboard, 25GbE SFP+ card (also included 50GbE SFP+ card which will probably go in mirror)<br />
<br />
==== Services ====<br />
<br />
Exact services are currently unknown, however all services will be dedicated to CSC web hosting.<br />
<br />
<br />
== ''fs00'' ==<br />
<br />
fs00 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
== ''fs01'' ==<br />
<br />
fs01 is a NetApp FAS3040 series fileserver donated by CSCF.<br />
<br />
It is currently being used for testing of a HA NetApp nodes and serving home directories directly from the NetApp filer.<br />
<br />
==== Specs ====<br />
<br />
= Other =<br />
<br />
== ''goto80'' ==<br />
<br />
This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface. Located in the office on the top shelf above strombola.<br />
<br />
==== Specs ====<br />
<br />
* 500 MHz Feroceon (ARM926ej-s compatible) processor<br />
* ARMv5TEJ architecture<br />
<br />
Use -march=armv5te -mtune=arm926ej-s options to GCC.<br />
<br />
For information on the TS-7800's hardware see here:<br />
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800<br />
<br />
== ''binaerpilot'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Tobi expansion board. It is currently attached to corn-syrup in the machine room and even more currently turned off until someone can figure out what is wrong with it.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''anamanaguchi'' ==<br />
<br />
This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board. It is currently in the hardware drawer in the CSC.<br />
<br />
==== Specs ====<br />
<br />
* TI OMAP 3530 750Mhz (ARM Cortex-A8)<br />
* 512MB RAM<br />
<br />
== ''digital cutter'' ==<br />
<br />
See [[Digital Cutter|here]].<br />
<br />
== ''mathnews'' ==<br />
<br />
[[#dextrose|dextrose]] hosts a container which serves as the mathNEWS webserver. It is administered by mathNEWS, as a pilot for providing containers to select groups who have more specialized demands than the general-use infrastructure can meet.<br />
<br />
= Decommissioned =<br />
<br />
== ''Lisp machine'' ==<br />
<br />
A Symbolics XL1200 Lisp machine. Donated to a new home when we couldn't get it working.<br />
<br />
http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.<br />
<br />
==== Specs ====<br />
<br />
Currently inoperable due to (at least) a missing console cable.<br />
<br />
== ''ginseng'' ==<br />
<br />
Ginseng used to be our fileserver, before aspartame and the netapp took over.<br />
<br />
==== Specs ====<br />
<br />
* Intel Pentium Dual Core E2180<br />
* 8GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]<br />
* 4 &times; 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].<br />
[[Category:Hardware]]<br />
<br />
== ''calum'' ==<br />
<br />
The server from back before recorded memory.<br />
<br />
== ''paza'' ==<br />
<br />
An iMac G3 that was used as a dumb terminal.<br />
<br />
==== Specs ====<br />
<br />
* 233Mhz PowerPC 740/750<br />
* 96 MB RAM<br />
<br />
== ''romana'' ==<br />
<br />
Romana was a BeBox that has been in the CSC's possession since long before BeOS became defunct.<br />
<br />
Confirmed on March 19th, 2016 to be fully functional. An SSHv1 compatible client was installed from http://www.abstrakt.ch/be/ and a compatible firewalled daemon was started on Sucrose (living in /root, prefix is /root/ssh-romana). The insecure daemon is to be used a bastion host to jump to hosts only supporting >=SSHv2. The mail daemon on the BeBox has also been configured to send mail through mail.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 2 PowerPC based processors<br />
* Stylish Blinken processor-load lights<br />
<br />
== ''sodium-citrate'' ==<br />
<br />
Sodium-citrate was an SGI O2 machine.<br />
<br />
In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.<br />
<br />
==== Specs ====<br />
* SGI O2 MIPS processor<br />
* 423 MB (?) RAM<br />
* 2 &times; 2 GB hard drive<br />
<br />
== ''acesulfame-potassium'' ==<br />
<br />
An old office terminal.<br />
<br />
==== Specs ====<br />
* Intel Pentium 4 2.67GHz<br />
* 1GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard<br />
* ATI Radeon 7000<br />
<br />
== ''skynet'' ==<br />
<br />
skynet was a Sun E6500 machine donated by Sanjay Singh. It was never fully set up.<br />
<br />
==== Specs ====<br />
<br />
* 15 full CPU/memory boards<br />
** 2x UltraSPARC II 464MHz / 8MB Cache Processors<br />
** ??? RAM?<br />
* 1 I/O board (type=???)<br />
** ???x disks?<br />
* 1 CD-ROM drive<br />
<br />
* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]<br />
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]<br />
* [http://www.e6500.com/ e6500]<br />
<br />
== ''freebsd'' ==<br />
<br />
FreeBSD was a virtual machine with FreeBSD installed.<br />
<br />
==== Services ====<br />
<br />
* Newer software<br />
<br />
== ''rainbowdragoneyes'' ==<br />
<br />
Rainbowdragoneyes was our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.<br />
<br />
==== Specs ====<br />
<br />
* 800MHz MIPS Loongson 2f CPU<br />
<br />
== ''denardo'' ==<br />
<br />
Due to some instability, general uselessness, and the acquisition of a more powerful SPARC machine from MFCF, denardo was decommissioned in February 2015.<br />
<br />
==== Specs ====<br />
<br />
* Sun Fire V210<br />
* TI UltraSparc IIIi (Jalapeño)<br />
* 2 GB RAM<br />
* 160 GB RAID array<br />
* ALOM on denardo-alom.csclub can be used to power machine on/off<br />
<br />
<br />
== ''artificial-flavours'' ==<br />
<br />
Artificial-flavours was our secondary (backup services) server. It used to be an office terminal. It was decommissioned in February 2015 and transferred to the ownership of Women in Computer Science (WiCS).<br />
<br />
==== Specs ====<br />
<br />
* Intel Celeron 3.2GHz<br />
* 2GB RAM<br />
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard<br />
* Western-Digital 80 GB ATA hard drive<br />
<br />
= UPS =<br />
<br />
All of the machines in the machine room are connected to one of our UPSs.<br />
<br />
All of our UPSs can be monitored via CSCF:<br />
<br />
* mc-3015-e7-ups-1.cs.uwaterloo.ca (unknown)<br />
* mc-3015-f7-ups-1.cs.uwaterloo.ca (http://cacti.cscf.uwaterloo.ca/cacti/graph_view.php?action=tree&tree_id=11&leaf_id=829)<br />
* mc-3015-g7-ups-1.cs.uwaterloo.ca (http://cacti.cscf.uwaterloo.ca/cacti/graph_view.php?action=tree&tree_id=11&leaf_id=722)<br />
* mc-3015-g7-ups-2.cs.uwaterloo.ca (unknown)<br />
* mc-3015-h7-ups-1.cs.uwaterloo.ca (http://cacti.cscf.uwaterloo.ca/cacti/graph_view.php?action=tree&tree_id=11&leaf_id=723)<br />
* mc-3015-h7-ups-2.cs.uwaterloo.ca (http://cacti.cscf.uwaterloo.ca/cacti/graph_view.php?action=tree&tree_id=11&leaf_id=871)<br />
<br />
We will receive email alerts for any issues with the UPS. Their status can be monitored via [[SNMP]].</div>S455wanghttps://wiki.csclub.uwaterloo.ca/index.php?title=Web_Hosting&diff=3928Web Hosting2016-02-12T02:56:42Z<p>S455wang: /* .htaccess Config */ fix missing quote</p>
<hr />
<div>The CSC offers web hosting for [[Club Hosting|clubs]] and [http://csclub.uwaterloo.ca/about/ our members] in accordance with our [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. This is a quick guide for the kinds of hosting we offer on our webserver, <tt>csclub.uwaterloo.ca</tt>, also known as [[Machine List#caffeine|caffeine]].<br />
<br />
We run an Apache httpd webserver and we offer you the use of a [[MySQL|MySQL database]].<br />
<br />
== What can I host on my website? ==<br />
<br />
Web hosting is provided in accordance with the CSC [http://csclub.uwaterloo.ca/services/machine_usage Machine Usage Agreement]. As a reminder, you are '''not permitted''' to host any of the following:<br />
<br />
* '''Ads.''' Advertisements are not permitted because using our machines for commercial purposes is forbidden by university policy.<br />
* '''Your start-up's website.''' Again, commercial use of our hosting is not permitted.<br />
* '''Unauthorized copyrighted materials.''' Violating the law is a violation of our Machine Usage Agreement.<br />
<br />
Please note that '''this is not an exhaustive list. Websites may be taken down ''without notice''''' at the discretion of the Systems Committee. (We will always let you know that we took your site down, but if it is breaking our shared environment, we can't provide an advance warning.)<br />
<br />
Some great examples of things members host on our webserver:<br />
<br />
* Academic projects!<br />
* A personal website or blog!<br />
* [[Club Hosting|Club websites!]]<br />
<br />
== DNS and Your Domain Name ==<br />
<br />
You can serve files without any additional configuration by placing them in your <tt>www</tt> directory and accessing them at <tt>http://csclub.uwaterloo.ca/~userid</tt>, where <tt>userid</tt> is your CSC user ID. However, many of our members and clubs prefer to use a custom domain name.<br />
<br />
=== uwaterloo.ca domain Names ===<br />
<br />
If you represent a UWaterloo organization, you may be eligible for a custom <tt>uwaterloo.ca</tt> domain name, such as <tt>csclub.uwaterloo.ca</tt>. We can request this on your behalf.<br />
<br />
In order to do so, we must have verified that the organization is a legitimate UWaterloo-affiliated group, and that you, the representative, are authorized to request a domain name on their behalf. This all takes place when you request [[Club Hosting|club hosting]] with the Computer Science Club.<br />
<br />
Once you register as a club representative of your particular organization, you can send an email from your official club account to syscom@csclub.uwaterloo.ca to request the domain <tt>yourdomain.uwaterloo.ca</tt>. Assuming it is available, we will file a ticket and request the domain in your name.<br />
<br />
=== Your personal domain name ===<br />
<br />
These virtual hosts must be approved by the Executive and Systems Committee. If interested, send syscom@csclub.uwaterloo.ca an email. If your request is approved, the Systems Committee will direct you to create a CNAME record for your domain and point it at <tt>csclub.uwaterloo.ca</tt>.<br />
<br />
== Static Sites ==<br />
<br />
You can place all your static content into your web directory, <tt>/users/userid/www</tt>.<br />
<br />
If you have been approved for a virtual host, you can access this content using your personal domain once the Systems Committee makes the appropriate configuration changes. Here is an example configuration file:<br />
<br />
<VirtualHost *:80><br />
ServerName foobar.uwaterloo.ca<br />
ServerAlias *.foobar.uwaterloo.ca foobar<br />
ServerAdmin your@email.here.tld<br />
<br />
DocumentRoot /users/userid/www/<br />
<br />
ErrorLog /var/log/apache2/luser-userid-error.log<br />
CustomLog /var/log/apache2/luser-userid-access.log combined<br />
</VirtualHost><br />
<br />
== Dynamic Sites ==<br />
<br />
If you require use of a database, we offer you the sole choice of MySQL. See [[MySQL|this guide]] for how to create your database and connect to MySQL.<br />
<br />
=== ***NOTICE*** ===<br />
<br />
We '''STRONGLY''' discourage the use of content management systems such as<br />
WordPress. These packages are notorious for the number of security<br />
vulnerabilities they contain and pose a threat to our systems if they are not<br />
kept up to date. The Systems Committee '''WILL,''' at its discretion, disable<br />
any website using a package such as WordPress that is not updated to the latest<br />
version or that is found to contain exploitable security flaws. In such a case,<br />
the member or club serving that site will be notified of the termination; the<br />
site will not be re-enabled until the issues are addressed.<br />
<br />
=== Using PHP ===<br />
<br />
Because we use Apache, it's as simple as placing your <tt>index.php</tt> file in your <tt>/users/userid/www</tt>. That's it!<br />
<br />
You can even include rewrite rules in an <tt>.htaccess</tt> file in your web directory.<br />
<br />
=== Reverse Proxy (Python, Ruby, Perl, etc.) ===<br />
<br />
(In progress... Cliff Notes below)<br />
<br />
If computationally expensive, please run the server on a general-use server and proxy to Caffiene.<br />
<br />
If Python, (1) use a [http://docs.python-guide.org/en/latest/dev/virtualenvs/ virtual environment] (2) host your app (within the virtualenv) with [http://gunicorn.org/ Gunicorn] on a high port, bound to localhost<br />
<br />
If Ruby (Note, I've never used Ruby so take this with a grain of salt), use [http://unicorn.bogomips.org/ Unicorn]<br />
<br />
==== .htaccess Config ====<br />
<br />
Put the following in the appropriate .htaccess file. Replace HOST with localhost if running on Caffiene or the hostname if running elsewhere; replace port with your chosen port number.<br />
<br />
<pre><br />
Options +FollowSymLinks<br />
RewriteEngine On<br />
RewriteCond %{SCRIPT_FILENAME} !-d<br />
RewriteCond %{SCRIPT_FILENAME} !-f<br />
RewriteRule "^(.*)$" "http://HOST:RANDOM_PORT/$1" [P]<br />
</pre><br />
<br />
=== ['''Deprecated'''] Using WSGI ===<br />
<br />
We newly support <tt>mod_wsgi</tt> for dynamic frameworks you may not want to run through FCGI, such as Django. If you'd like to set up one of these sites, you'll need Systems Committee approval and assistance with the configuration. You will be responsible for setting up the site in your home directory and all the associated WSGI scripts.<br />
<br />
Here is a sample configuration file for a Django site:<br />
<br />
<VirtualHost *:80><br />
ServerName foobar.uwaterloo.ca<br />
ServerAlias *.foobar.uwaterloo.ca foobar<br />
ServerAdmin your@email.here.tld<br />
<br />
ErrorLog /var/log/apache2/luser-userid-error.log<br />
CustomLog /var/log/apache2/luser-userid-access.log combined<br />
<br />
WSGIDaemonProcess process_name python-path=your/path/here/:possibly:/users/userid/site:/users/userid/.env/...<br />
WSGIScriptAlias / /path/to/your/wsgi/script<br />
WSGIProcessGroup process_name<br />
<br />
Alias /robots.txt /path/if/necessary/robots.txt<br />
Alias /favicon.ico /path/if/necessary/favicon.ico<br />
<br />
<Directory /path/to/your/wsgi/script><br />
<Files wsgi.py><br />
Require all granted<br />
</Files><br />
</Directory><br />
</VirtualHost><br />
<br />
== Syscom ==<br />
<br />
=== Disabling insecure or infringing sites ===<br />
<br />
To disable a webspace that has known security vulnerabilities add the following snippet to `/etc/apache2/conf-available/disable-vuln-site.conf`. This rewrites all accesses of the directory or its children to the given file. Note that our disable page uses PHP to always return HTTP status code 503. (TODO: move files to somewhere in /srv)<br />
<br />
<Directory /users/$BADUSER/www><br />
AllowOverride None<br />
RewriteEngine On<br />
RewriteRule . /~sysadmin/insecure/index.php [L]<br />
</Directory><br />
<br />
=== Expired Websites ===<br />
<br />
There is a cron job running hourly on caffeine which disables expired member's websites (and re-enables them when they've renewed their membership).<br />
<br />
The script is here: http://git.csclub.uwaterloo.ca/?p=public/expire-sites.git;a=summary<br />
<br />
Some highlights:<br />
<br />
* The script provides a 1-month grace period (corresponding to the grace period of pam-csc)<br />
* The expired page returns HTTP status code of 503 (Service Unavailable)</div>S455wang