Difference between revisions of "Syscom Todo"

From CSCWiki
Jump to navigation Jump to search
(remove irrelevant pages, note about psilodump)
 
(17 intermediate revisions by 4 users not shown)
Line 4: Line 4:
 
* Prepare for `sodium-benzoate` upgrades/replacement.
 
* Prepare for `sodium-benzoate` upgrades/replacement.
 
** new-mirror has like 30 disk shelves so we can just do a live sync on the 2TB disks and then insert the 4TB ones
 
** new-mirror has like 30 disk shelves so we can just do a live sync on the 2TB disks and then insert the 4TB ones
* Establish remote syslog
 
* Get UPS monitoring working across multiple systems
 
 
* `/users` backups
 
* `/users` backups
 
* Disaster recovery plan
 
* Disaster recovery plan
* Put backup containers onto cobalamin (auth2)
 
 
* Get an IP/KVM for the machine room which doesn't suck?
 
* Get an IP/KVM for the machine room which doesn't suck?
* Update the wiki.
 
 
* Sort through keyboards in the office
 
* Sort through keyboards in the office
 
* Clean up wiki vandalism
 
* Clean up wiki vandalism
 
* Fix debian.csclub, aka our personal Debian repo which serves the CEO package
 
* Fix debian.csclub, aka our personal Debian repo which serves the CEO package
** Fix ceo versioning, which seems to be different on every machine it's installed on...
 
 
* Fix audio auth: audio is both a system group and an LDAP group and this has bad consequences for audio authorization
 
* Fix audio auth: audio is both a system group and an LDAP group and this has bad consequences for audio authorization
* Centralized repo for various configs: NFS, PAM auth with kerb, /etc/hosts/, LDAP and Kerb5, routing/interfaces files
+
* Centralized repo for various configs: NFS, PAM auth with kerb, LDAP and Kerb5, routing/interfaces files
** LDAP login is currently broken on glomag, it is password with root only
+
** Private subnet routing is broken on every machine ''except'' corn-syrup, taurine (see 'ethcrazy')
  +
** Private subnet routing is broken on every machine ''except'' corn-syrup (see 'ethcrazy')
 
  +
== Wiki Updates ==
* Update hosts list (10.15.134.WTF?)
 
  +
 
* Update the following wiki pages
  +
** [[Backups]]
  +
** [[Ceo]], also related to "debian.csclub is broken"
  +
** somehow merge [[Conserver]]/[[Serial Connections]]/[[Console Configuration]]
  +
** [[Cscbot]]
  +
** [[DNS]]
  +
** [[Hardware]]
  +
** [[Machine List]]
  +
** [[Mirror]] including that rsyncd needs to be re-started after reboot. (systemctl start rsync)
  +
** [[Music]] and possibly link to [[Pulseaudio]]
  +
** [[MySQL]] mentions a-f replica
  +
** [[NFS/Kerberos]] should probably by merged with an existing page
  +
** [[NetApp]]
  +
** [[Netboot]] (might want to merge with [[New CSC Machine]])
  +
** [[OID Assignment]] and [[UID/GID Assignment]] should be merged with LDAP and replaced with a redirect
  +
** Merge [[Point Of Sale]] and [[Point of Sale System]]
  +
** [[Projects]]
  +
** [[Scratch]]
  +
** Add more info to [[Switches]]
  +
** [[Virtualization]]
  +
** [[Wireless]]
   
 
==When in the Machine Room==
 
==When in the Machine Room==
 
* Set up binaerpilot.
 
* Set up binaerpilot.
  +
* Set up rainbowdragoneyes
* Make sure that the IPMI/console connections are correct, up-to-date, and working.
 
  +
* Pick up paperclip to install a new OS
 
* Make sure that the console connections are correct, up-to-date, and working.
 
* Fix psilodump's and aspartame's IPs and routing
 
* Fix psilodump's and aspartame's IPs and routing
** psilodump should not be routable outside aspartame. This is currently accomplished by fuckery. This *should* be fixed to use the net.ipv4.conf.all.arp_filter sysctl.
+
** psilodump should not be routable outside aspartame (but is this still relevant with New NetApp?) This *should* be fixed to use the net.ipv4.conf.all.arp_filter sysctl.
* Look into expanding /scratch and using RAID using spare disks in the office.
 
   
 
==Science Machine Room==
 
==Science Machine Room==

Latest revision as of 17:20, 15 February 2019

These are things that syscom should do eventually:

General

  • Prepare for `sodium-benzoate` upgrades/replacement.
    • new-mirror has like 30 disk shelves so we can just do a live sync on the 2TB disks and then insert the 4TB ones
  • `/users` backups
  • Disaster recovery plan
  • Get an IP/KVM for the machine room which doesn't suck?
  • Sort through keyboards in the office
  • Clean up wiki vandalism
  • Fix debian.csclub, aka our personal Debian repo which serves the CEO package
  • Fix audio auth: audio is both a system group and an LDAP group and this has bad consequences for audio authorization
  • Centralized repo for various configs: NFS, PAM auth with kerb, LDAP and Kerb5, routing/interfaces files
    • Private subnet routing is broken on every machine except corn-syrup, taurine (see 'ethcrazy')

Wiki Updates

When in the Machine Room

  • Set up binaerpilot.
  • Set up rainbowdragoneyes
  • Pick up paperclip to install a new OS
  • Make sure that the console connections are correct, up-to-date, and working.
  • Fix psilodump's and aspartame's IPs and routing
    • psilodump should not be routable outside aspartame (but is this still relevant with New NetApp?) This *should* be fixed to use the net.ipv4.conf.all.arp_filter sysctl.

Science Machine Room

  • Set up remote syslog2