New CSC Machine - Revision history

S23adhik: /* After Installing */

2025-07-27T21:22:59Z

After Installing

← Older revision		Revision as of 16:22, 27 July 2025
Line 42:		Line 42:

	Add the machine's name to ~git/public/hosts.git, and run the ansible playbook (https://git.uwaterloo.ca/csc/playbooks/blob/master/update-hosts.yml) to distribute the updated hosts file to all machines.		Add the machine's name to ~git/public/hosts.git, and run the ansible playbook (https://git.uwaterloo.ca/csc/playbooks/blob/master/update-hosts.yml) to distribute the updated hosts file to all machines.

			== Networking ==
			Make sure to setup the IPMI on the mso-private VLAN (I think VLAN 520, check under networking page), and pleaseee set it up as a static IP.

			Then fetch the MAC address from the normal network interface, then on Caffine there's a dhcp server running. You'll need to add it there, just look for where all the servers are, and add it there. Make sure to assign it an IP there, otherwise it ''won't'' be assigned one.

			Then using IPAM give it a name and stuff, and a domain name.

	== apt ==		== apt ==

F5tao: Included a hint for the location of where the passwords are stored for convenience.

2024-06-11T21:57:11Z

Included a hint for the location of where the passwords are stored for convenience.

← Older revision		Revision as of 16:57, 11 June 2024
Line 238:		Line 238:

	=== Password ===		=== Password ===
	Change the root password to the specified password in the usual place. If it's an office terminal, change the local user's password to the one specified in the usual place.		Change the root password to the specified password in the usual place under the termcom user. If it's an office terminal, change the local user's password to the one specified in the usual place.

	=== Prevent suspend and hibernation (Office Terminal) ===		=== Prevent suspend and hibernation (Office Terminal) ===

Merenber: /* apt */

2023-12-19T22:30:35Z

apt

@@ Line 44: / Line 44: @@
 == apt ==
-If you did not during installation, change all references in <tt>/etc/apt/sources.list</tt> to use <tt>mirror</tt> instead of the usual mirrors.
+Delete/clear the file <tt>/etc/apt/sources.list</tt> and paste something like the following into <tt>/etc/apt/sources.list.d/debian.sources</tt> (replace "bookworm" by the the current Debian stable codename):
-In order to make debian use packages in our repository by default, set our repository to the highest priority. Create <code>/etc/apt/preferences.d/99-csclub</code>: <syntaxhighlight>
+In order to make Debian use packages in our repository by default, set our repository to the highest priority. Create <code>/etc/apt/preferences.d/99-csclub</code>: <syntaxhighlight>
 Package: *
 Pin: origin debian.csclub.uwaterloo.ca

Y266shen: add how to prevent suspend and hibernation

2022-10-27T06:23:20Z

add how to prevent suspend and hibernation

← Older revision		Revision as of 01:23, 27 October 2022
Line 220:		Line 220:
	=== Password ===		=== Password ===
	Change the root password to the specified password in the usual place. If it's an office terminal, change the local user's password to the one specified in the usual place.		Change the root password to the specified password in the usual place. If it's an office terminal, change the local user's password to the one specified in the usual place.

			=== Prevent suspend and hibernation (Office Terminal) ===
			Set <code>AllowSuspend</code>, <code>AllowHibernation</code>, <code>AllowSuspendThenHibernate</code> and <code>AllowHybridSleep</code> all to <code>no</code> in <code>/etc/systemd/sleep.conf</code>, and reboot.

	== Records ==		== Records ==

Y266shen: Fix hierarchy again

2022-10-26T22:34:21Z

Fix hierarchy again

← Older revision		Revision as of 17:34, 26 October 2022
Line 218:		Line 218:
	If this is to be the machine that actually plays audio (currently <tt>nullsleep</tt>), the setup is slightly more complicated. You'll need to set up MPD and PipeWire to receive connections, and store the PulseAudio cookie in <tt>~audio</tt>, with appropriate permissions so that only the <tt>audio</tt> group can access it. If this is a new audio machine, you'll also need to change <tt>default.pa</tt> on all office terminals to point to it.		If this is to be the machine that actually plays audio (currently <tt>nullsleep</tt>), the setup is slightly more complicated. You'll need to set up MPD and PipeWire to receive connections, and store the PulseAudio cookie in <tt>~audio</tt>, with appropriate permissions so that only the <tt>audio</tt> group can access it. If this is a new audio machine, you'll also need to change <tt>default.pa</tt> on all office terminals to point to it.

	==== Password ====		=== Password ===
	Change the root password to the specified password in the usual place. If it's an office terminal, change the local user's password to the one specified in the usual place.		Change the root password to the specified password in the usual place. If it's an office terminal, change the local user's password to the one specified in the usual place.

Y266shen: Fix hierarchy

2022-10-26T22:33:48Z

Fix hierarchy

← Older revision		Revision as of 17:33, 26 October 2022
Line 218:		Line 218:
	If this is to be the machine that actually plays audio (currently <tt>nullsleep</tt>), the setup is slightly more complicated. You'll need to set up MPD and PipeWire to receive connections, and store the PulseAudio cookie in <tt>~audio</tt>, with appropriate permissions so that only the <tt>audio</tt> group can access it. If this is a new audio machine, you'll also need to change <tt>default.pa</tt> on all office terminals to point to it.		If this is to be the machine that actually plays audio (currently <tt>nullsleep</tt>), the setup is slightly more complicated. You'll need to set up MPD and PipeWire to receive connections, and store the PulseAudio cookie in <tt>~audio</tt>, with appropriate permissions so that only the <tt>audio</tt> group can access it. If this is a new audio machine, you'll also need to change <tt>default.pa</tt> on all office terminals to point to it.

	===== Password =====		==== Password ====
	Change the root password to the specified password in the usual place. If it's an office terminal, change the local user's password to the one specified in the usual place.		Change the root password to the specified password in the usual place. If it's an office terminal, change the local user's password to the one specified in the usual place.

Y266shen: Major refactor. We use debian now.

2022-10-26T22:33:01Z

Major refactor. We use debian now.

Show changes

Y266shen: /* Prometheus (System Monitoring) */

2022-07-30T02:23:34Z

Prometheus (System Monitoring)

← Older revision		Revision as of 21:23, 29 July 2022
Line 326:		Line 326:

	Finally, start <tt>stunnel4.service</tt>.		Finally, start <tt>stunnel4.service</tt>.

			If it's a new machine, you'll also need to add it to the list of monitoring at <tt>prometheus:/opt/prometheus/prometheus.yml</tt>. Add it under a suitable label (or create a new label) in 'node_exporter' job.

	= New Distribution =		= New Distribution =

Y266shen at 02:20, 30 July 2022

2022-07-30T02:20:49Z

← Older revision		Revision as of 21:20, 29 July 2022
Line 323:		Line 323:
	verifyPeer = yes		verifyPeer = yes

	Copy <tt>/etc/stunnel/{node.crt, node.key, server.crt</tt> from <tt>prometheus:/opt/prometheus/tls</tt> or the same location on other machines.		Copy <tt>/etc/stunnel/{node.crt, node.key, server.crt}</tt> from <tt>prometheus:/opt/prometheus/tls</tt> or the same location on other machines.

	Finally, start <tt>stunnel4.service</tt>.		Finally, start <tt>stunnel4.service</tt>.

Y266shen at 02:20, 30 July 2022

2022-07-30T02:20:14Z

← Older revision		Revision as of 21:20, 29 July 2022
Line 303:		Line 303:
	Change <tt>/etc/default/prometheus-node-exporter</tt> to this:		Change <tt>/etc/default/prometheus-node-exporter</tt> to this:

	ARGS="--web.listen-address=localhost:9101"		ARGS="--web.listen-address=localhost:9101"

	and start <tt>prometheus-node-exporter</tt> ~~service~~.		and start <tt>prometheus-node-exporter.service</tt>.

	Then set up stunnel. Create <tt>/etc/stunnel/prometheus-node-exporter.conf</tt> with this content:		Then set up stunnel. Create <tt>/etc/stunnel/prometheus-node-exporter.conf</tt> with this content:

	setuid = stunnel4		setuid = stunnel4
	setgid = stunnel4		setgid = stunnel4
	pid = /var/run/stunnel4/exporter.pid		pid = /var/run/stunnel4/exporter.pid


	debug = 7		debug = 7


	[prometheus-node-exporter]		[prometheus-node-exporter]
	accept = 0.0.0.0:9100		accept = 0.0.0.0:9100
	connect = 127.0.0.1:9101		connect = 127.0.0.1:9101
	CAfile = /etc/stunnel/tls/server.crt		CAfile = /etc/stunnel/tls/server.crt
	cert = /etc/stunnel/tls/node.crt		cert = /etc/stunnel/tls/node.crt
	key = /etc/stunnel/tls/node.key		key = /etc/stunnel/tls/node.key
	verifyPeer = yes		verifyPeer = yes

	Copy <tt>/etc/stunnel/{node.crt, node.key, server.crt</tt> from <tt>prometheus:/opt/prometheus/tls</tt> or the same location on other machines.		Copy <tt>/etc/stunnel/{node.crt, node.key, server.crt</tt> from <tt>prometheus:/opt/prometheus/tls</tt> or the same location on other machines.