Difference between revisions of "Syscom Todo"

From CSCWiki
Jump to navigation Jump to search
(remove irrelevant pages, note about psilodump)
 
(32 intermediate revisions by 8 users not shown)
Line 1: Line 1:
 
These are things that syscom should do eventually:
 
These are things that syscom should do eventually:
 
==Actually Important==
 
* Get a list of ports to open for when the perimeter firewall goes up.
 
   
 
==General==
 
==General==
 
* Prepare for `sodium-benzoate` upgrades/replacement.
* Buy hardware upgrades for `natural-flavours` from MEF money.
 
  +
** new-mirror has like 30 disk shelves so we can just do a live sync on the 2TB disks and then insert the 4TB ones
* Prepare MEF request for `sodium-benzoate` upgrades/replacement.
 
* Make roundcube use webauth, or else make webauth not tell you not to log into roundcube.
 
* Establish remote syslog
 
* Get ginseng installed in the Science machine room
 
* Get UPS monitoring working across multiple systems
 
* Clean up the cabling in the office.
 
* Get `/users` onto LVM.
 
 
* `/users` backups
 
* `/users` backups
 
* Disaster recovery plan
 
* Disaster recovery plan
* Back up containers?
 
 
* Get an IP/KVM for the machine room which doesn't suck?
 
* Get an IP/KVM for the machine room which doesn't suck?
* Update the wiki.
 
* Get stuff for natural-flavours & install
 
 
* Sort through keyboards in the office
 
* Sort through keyboards in the office
  +
* Clean up wiki vandalism
* Fix the webcam counter (jj2baile)
 
  +
* Fix debian.csclub, aka our personal Debian repo which serves the CEO package
* Put ginseng back together
 
  +
* Fix audio auth: audio is both a system group and an LDAP group and this has bad consequences for audio authorization
* Figure out all the hardware in the office
 
  +
* Centralized repo for various configs: NFS, PAM auth with kerb, LDAP and Kerb5, routing/interfaces files
* mounting USB sticks - special permissions required, can they be relaxed?
 
  +
** Private subnet routing is broken on every machine ''except'' corn-syrup, taurine (see 'ethcrazy')
  +
  +
== Wiki Updates ==
  +
 
* Update the following wiki pages
  +
** [[Backups]]
  +
** [[Ceo]], also related to "debian.csclub is broken"
  +
** somehow merge [[Conserver]]/[[Serial Connections]]/[[Console Configuration]]
  +
** [[Cscbot]]
  +
** [[DNS]]
  +
** [[Hardware]]
  +
** [[Machine List]]
  +
** [[Mirror]] including that rsyncd needs to be re-started after reboot. (systemctl start rsync)
  +
** [[Music]] and possibly link to [[Pulseaudio]]
  +
** [[MySQL]] mentions a-f replica
  +
** [[NFS/Kerberos]] should probably by merged with an existing page
  +
** [[NetApp]]
  +
** [[Netboot]] (might want to merge with [[New CSC Machine]])
  +
** [[OID Assignment]] and [[UID/GID Assignment]] should be merged with LDAP and replaced with a redirect
  +
** Merge [[Point Of Sale]] and [[Point of Sale System]]
  +
** [[Projects]]
  +
** [[Scratch]]
  +
** Add more info to [[Switches]]
  +
** [[Virtualization]]
  +
** [[Wireless]]
   
 
==When in the Machine Room==
 
==When in the Machine Room==
  +
* Set up binaerpilot.
* Rotate CPUs in `hfcs` to see if it's the CPU or the socket that's causing NMI issues.
 
* Set up binaerpilot?
+
* Set up rainbowdragoneyes
  +
* Pick up paperclip to install a new OS
* Make sure that the IPMI/console connections are correct, up-to-date, and working.
+
* Make sure that the console connections are correct, up-to-date, and working.
  +
* Fix psilodump's and aspartame's IPs and routing
  +
** psilodump should not be routable outside aspartame (but is this still relevant with New NetApp?) This *should* be fixed to use the net.ipv4.conf.all.arp_filter sysctl.
  +
  +
==Science Machine Room==
  +
* Set up remote syslog2

Latest revision as of 17:20, 15 February 2019

These are things that syscom should do eventually:

General

  • Prepare for `sodium-benzoate` upgrades/replacement.
    • new-mirror has like 30 disk shelves so we can just do a live sync on the 2TB disks and then insert the 4TB ones
  • `/users` backups
  • Disaster recovery plan
  • Get an IP/KVM for the machine room which doesn't suck?
  • Sort through keyboards in the office
  • Clean up wiki vandalism
  • Fix debian.csclub, aka our personal Debian repo which serves the CEO package
  • Fix audio auth: audio is both a system group and an LDAP group and this has bad consequences for audio authorization
  • Centralized repo for various configs: NFS, PAM auth with kerb, LDAP and Kerb5, routing/interfaces files
    • Private subnet routing is broken on every machine except corn-syrup, taurine (see 'ethcrazy')

Wiki Updates

When in the Machine Room

  • Set up binaerpilot.
  • Set up rainbowdragoneyes
  • Pick up paperclip to install a new OS
  • Make sure that the console connections are correct, up-to-date, and working.
  • Fix psilodump's and aspartame's IPs and routing
    • psilodump should not be routable outside aspartame (but is this still relevant with New NetApp?) This *should* be fixed to use the net.ipv4.conf.all.arp_filter sysctl.

Science Machine Room

  • Set up remote syslog2