Difference between revisions of "Syscom Todo"
Jump to navigation
Jump to search
(→General: remove duplicate and task that's complete) |
(remove irrelevant pages, note about psilodump) |
||
| (29 intermediate revisions by 7 users not shown) | |||
| Line 1: | Line 1: | ||
These are things that syscom should do eventually: |
These are things that syscom should do eventually: |
||
| − | |||
| − | ==Actually Important== |
||
| − | * Get a list of ports to open for when the perimeter firewall goes up. |
||
==General== |
==General== |
||
| − | * Prepare |
+ | * Prepare for `sodium-benzoate` upgrades/replacement. |
| + | ** new-mirror has like 30 disk shelves so we can just do a live sync on the 2TB disks and then insert the 4TB ones |
||
| − | * Prepare MEF request for drives for cobalamin. |
||
| − | * Make roundcube use webauth, or else make webauth not tell you not to log into roundcube. |
||
| − | * Establish remote syslog |
||
| − | * Get UPS monitoring working across multiple systems |
||
| − | * Clean up the cabling in the office. |
||
* `/users` backups |
* `/users` backups |
||
* Disaster recovery plan |
* Disaster recovery plan |
||
| − | * Put backup containers onto cobalamin |
||
* Get an IP/KVM for the machine room which doesn't suck? |
* Get an IP/KVM for the machine room which doesn't suck? |
||
| ⚫ | |||
| − | * Get stuff for natural-flavours & install (e45lee) |
||
* Sort through keyboards in the office |
* Sort through keyboards in the office |
||
| + | * Clean up wiki vandalism |
||
| − | * Fix the webcam counter (jj2baile) |
||
| + | * Fix debian.csclub, aka our personal Debian repo which serves the CEO package |
||
| − | * Put ginseng back together |
||
| + | * Fix audio auth: audio is both a system group and an LDAP group and this has bad consequences for audio authorization |
||
| − | * Figure out all the hardware in the office |
||
| + | * Centralized repo for various configs: NFS, PAM auth with kerb, LDAP and Kerb5, routing/interfaces files |
||
| − | * mounting USB sticks - special permissions required, can they be relaxed? |
||
| + | ** Private subnet routing is broken on every machine ''except'' corn-syrup, taurine (see 'ethcrazy') |
||
| + | |||
| + | == Wiki Updates == |
||
| + | |||
| ⚫ | |||
| + | ** [[Backups]] |
||
| + | ** [[Ceo]], also related to "debian.csclub is broken" |
||
| + | ** somehow merge [[Conserver]]/[[Serial Connections]]/[[Console Configuration]] |
||
| + | ** [[Cscbot]] |
||
| + | ** [[DNS]] |
||
| + | ** [[Hardware]] |
||
| + | ** [[Machine List]] |
||
| + | ** [[Mirror]] including that rsyncd needs to be re-started after reboot. (systemctl start rsync) |
||
| + | ** [[Music]] and possibly link to [[Pulseaudio]] |
||
| + | ** [[MySQL]] mentions a-f replica |
||
| + | ** [[NFS/Kerberos]] should probably by merged with an existing page |
||
| + | ** [[NetApp]] |
||
| + | ** [[Netboot]] (might want to merge with [[New CSC Machine]]) |
||
| + | ** [[OID Assignment]] and [[UID/GID Assignment]] should be merged with LDAP and replaced with a redirect |
||
| + | ** Merge [[Point Of Sale]] and [[Point of Sale System]] |
||
| + | ** [[Projects]] |
||
| + | ** [[Scratch]] |
||
| + | ** Add more info to [[Switches]] |
||
| + | ** [[Virtualization]] |
||
| + | ** [[Wireless]] |
||
==When in the Machine Room== |
==When in the Machine Room== |
||
| + | * Set up binaerpilot. |
||
| − | * Rotate CPUs in `hfcs` to see if it's the CPU or the socket that's causing NMI issues. |
||
| − | * Set up |
+ | * Set up rainbowdragoneyes |
| + | * Pick up paperclip to install a new OS |
||
| − | * Make sure that the |
+ | * Make sure that the console connections are correct, up-to-date, and working. |
| + | * Fix psilodump's and aspartame's IPs and routing |
||
| + | ** psilodump should not be routable outside aspartame (but is this still relevant with New NetApp?) This *should* be fixed to use the net.ipv4.conf.all.arp_filter sysctl. |
||
==Science Machine Room== |
==Science Machine Room== |
||
| + | * Set up remote syslog2 |
||
| − | * Setup Cobalamin (space has already been set aside for us) |
||
Latest revision as of 17:20, 15 February 2019
These are things that syscom should do eventually:
General
- Prepare for `sodium-benzoate` upgrades/replacement.
- new-mirror has like 30 disk shelves so we can just do a live sync on the 2TB disks and then insert the 4TB ones
- `/users` backups
- Disaster recovery plan
- Get an IP/KVM for the machine room which doesn't suck?
- Sort through keyboards in the office
- Clean up wiki vandalism
- Fix debian.csclub, aka our personal Debian repo which serves the CEO package
- Fix audio auth: audio is both a system group and an LDAP group and this has bad consequences for audio authorization
- Centralized repo for various configs: NFS, PAM auth with kerb, LDAP and Kerb5, routing/interfaces files
- Private subnet routing is broken on every machine except corn-syrup, taurine (see 'ethcrazy')
Wiki Updates
- Update the following wiki pages
- Backups
- Ceo, also related to "debian.csclub is broken"
- somehow merge Conserver/Serial Connections/Console Configuration
- Cscbot
- DNS
- Hardware
- Machine List
- Mirror including that rsyncd needs to be re-started after reboot. (systemctl start rsync)
- Music and possibly link to Pulseaudio
- MySQL mentions a-f replica
- NFS/Kerberos should probably by merged with an existing page
- NetApp
- Netboot (might want to merge with New CSC Machine)
- OID Assignment and UID/GID Assignment should be merged with LDAP and replaced with a redirect
- Merge Point Of Sale and Point of Sale System
- Projects
- Scratch
- Add more info to Switches
- Virtualization
- Wireless
When in the Machine Room
- Set up binaerpilot.
- Set up rainbowdragoneyes
- Pick up paperclip to install a new OS
- Make sure that the console connections are correct, up-to-date, and working.
- Fix psilodump's and aspartame's IPs and routing
- psilodump should not be routable outside aspartame (but is this still relevant with New NetApp?) This *should* be fixed to use the net.ipv4.conf.all.arp_filter sysctl.
Science Machine Room
- Set up remote syslog2