Linux and Unix Users Group at Virginia Teck Wiki - Recent changes [en]

Network Time Protocol

Drakeerv13 — Fri, 25 Sep 2026 14:49:38 GMT

Construct

Clj — Fri, 18 Sep 2026 18:03:42 GMT

add construct page

New page

[https://github.com/vtluug/construct/ Construct] is VTLUUG's pseudo-mono repo of the future. It contains [https://nixos.org NixOS] configurations for [[Bastille]], [[Vesuvius]], [[Rowhammer]], and more! It also has some [https://kubernetes.io Kubernetes] manifests, but they aren't automatically applied currently.

== Why ==
Many person-hours have been spent on this repo, and we plan to spend many more, so it's reasonable to ask why Construct is the way it is. I think it's helpful to contrast with the "cowboy-style" system administration that you usually see at our scale:
# Notice problem
# SSH in
# Change some configs, reload etc
# Done!
Whereas the Construct way is more like
# Notice problem
# Make issue
# Make local branch
# Test/deploy loop (we don't have a staging environment :P)
# Make pull request
# It eventually gets merged into main
# Done…
The latter is clearly worse in the short-term, but in the long-term it means that:
* The reason for a change is documented
* We have (some) code review before pull requests are merged
* Fixes in shared configuration are actually shared

== Why Nix(OS) ==
With NixOS, our deploys are an atomic unit. If a deploy fails, <code>nixos-rebuild</code> will fully roll it back. In the [https://github.com/vtluug/construct/pull/31 near future], <code>nixos-version --configuration-revision</code> will tell us what git commit a machine is currently running. NixOS modules make it easy to share common configuration while still overriding stuff where needed, and Nix + Nixpkgs makes packaging our own software in a reproducible way much easier.

Infrastructure:Bastille

Rsk — Mon, 14 Sep 2026 04:42:00 GMT

Infrastructure:Prospit

Rsk — Mon, 14 Sep 2026 03:46:16 GMT

Infrastructure:Bastille

Rsk — Mon, 14 Sep 2026 03:24:23 GMT

Category:Bastille

Rsk — Mon, 14 Sep 2026 03:23:56 GMT

Created page with "Pages relating to the Bastille cluster."

New page

Pages relating to the Bastille cluster.

Infrastructure:Pahoehoe

Rsk — Mon, 14 Sep 2026 03:23:28 GMT

Created page with "Pahoehoe acts as the cluster's backend network, supplying the blades with two bonded 10G SFP+ connections, and Vesuvius with a 40G QSFP+ link. It i..."

New page

[[Infrastructure:Pahoehoe|Pahoehoe]] acts as the cluster's backend network, supplying the blades with two bonded 10G SFP+ connections, and Vesuvius with a 40G QSFP+ link. It is an Arista 7050QX-32.

It is statically routed.

== Management ==

ssh papatux@10.98.0.197

== References ==

[[Category:Infrastructure]]
[[Category:Hosts]]
[[Category:Bastille]]

Infrastructure:Magma

Rsk — Mon, 14 Sep 2026 03:21:58 GMT

Infrastructure:Magma

Rsk — Mon, 14 Sep 2026 03:20:42 GMT

Created page with "Magma (ws-c3750g-48ts) serves as the north/south traffic switch for Infrastructure:Bastille. By convention, the top half is for management interfa..."

New page

[[Infrastructure:Magma|Magma (ws-c3750g-48ts)]] serves as the north/south traffic switch for [[Infrastructure:Bastille]]. By convention, the top half is for management interfaces, and the bottom half is for host frontend connections.

== Management ==

There is a serial console.

Configured, you can also manage it over SSH using the command

ssh \
-o KexAlgorithms=+diffie-hellman-group1-sha1 \
-o HostKeyAlgorithms=+ssh-rsa \
-o Ciphers=+aes128-cbc \
papatux@10.98.0.192

or over HTTP at the same address.

== TODO ==

It currently has one VLAN. Ideally the top and bottom halves would be split into MGMT/LAN.

== References ==

[[Category:Infrastructure]]
[[Category:Hosts]]
[[Category:Bastille]]

Infrastructure:Bastille

Rsk — Fri, 11 Sep 2026 20:09:24 GMT

Calendar

Editslave — Wed, 09 Sep 2026 04:52:05 GMT

calendarium was here

VTLUUG:2026-09-09

Editslave — Wed, 09 Sep 2026 04:52:04 GMT

calendarium was here

New page

[[VTLUUG:2026-09-02|Previous Meeting]]

[https://github.com/vtluug/calendarium generated using calendarium]

== Time/Location ==

Meeting:
* Time: 2026-09-09 14:00:00
* Location: McBryde 106/110 (McBryde CS Lounge)
* Subject: Installfest!
* Presenter: VTLUUG

== Plan/Description ==

Curious about one of the few Microsoft Windows alternatives out there?

Just having a hard time getting Linux going on your laptop?

Come on out to the VTLUUG Installfest!

And, of course, FREE PIZZA!

No registration required -- just show up! Stay for a little while or the whole

time.

If you are an experienced Linux/UNIX user, come hang out with other linux people

and talk about interesting topics.

== Meeting Notes ==

[[category:VTLUUG:2026]][[category:VTLUUG:Meetings]]

Next meeting

Editslave — Wed, 09 Sep 2026 04:52:04 GMT

calendarium was here

Calendar

Editslave — Wed, 02 Sep 2026 06:47:57 GMT

calendarium was here

Next meeting

Editslave — Wed, 02 Sep 2026 06:47:56 GMT

calendarium was here

VTLUUG:2026-09-02

Editslave — Wed, 02 Sep 2026 06:47:55 GMT

calendarium was here

New page

[[VTLUUG:2026-08-26|Previous Meeting]]

[https://github.com/vtluug/calendarium generated using calendarium]

== Time/Location ==

Meeting:
* Time: 2026-09-02 19:00:00
* Location: McBryde 226
* Subject: Propaganda
* Presenter: Officers

== Plan/Description ==

Installfest (our interest meeting / linux installation / FREE PIZZA event) is

next week. Lets discuss what poster designs we want to print and more ways

of getting people involved.

== Meeting Notes ==

[[category:VTLUUG:2026]][[category:VTLUUG:Meetings]]

@@ Line 6: / Line 6: @@
 * '''ntp-3.vt.edu''' (198.82.247.108) (2001:468:c80:6101:0:111:7c3a:677)
 * '''ntp-4.vt.edu''' (198.82.247.131) (2001:468:c80:8101:0:178:d2dd:db75)
 === Using Gnome ===

← Older revision		Revision as of 04:42, 14 September 2026
(4 intermediate revisions by the same user not shown)
Line 28:		Line 28:

	They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.		They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.
		+	{\| class="wikitable sortable"
		+	! Hostname !! Frontend IP4 !! Backend IP4 !! Global IP6 !! Notes
		+	\|-
		+	\| [[Infrastructure:Vesuvius\|vesuvius]] \|\| 10.98.0.23 \|\| 10.98.3.1 \|\| 2607:b400:6:cc80:21e:67ff:feca:9c12 \|\| k3s control plane; PXE boot image server
		+	\|-
		+	\| backbiter \|\| 10.98.0.25 \|\| 10.98.3.2 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:655f \|\|
		+	\|-
		+	\| damocles \|\| 10.98.0.26 \|\| 10.98.3.3 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:67db \|\|
		+	\|-
		+	\| durendal \|\| 10.98.0.27 \|\| 10.98.3.4 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:6895 \|\|
		+	\|-
		+	\| excalibur \|\| 10.98.0.29 \|\| 10.98.3.5 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:6967 \|\|
		+	\|-
		+	\| eyelander \|\| 10.98.0.28 \|\| 10.98.3.6 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:6943 \|\|
		+	\|-
		+	\| gram \|\| 10.98.0.30 \|\| 10.98.3.7 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:7459 \|\|
		+	\|-
		+	\| [[Infrastructure:Prospit\|prospit]] \|\| - \|\| - \|\| - \|\| [[User:Enzoisotton]] took this out of the server room to test pxe booting, yell at him until it's back
		+	\|-
		+	\| gryffindor \|\| 10.98.0.31 \|\| 10.98.3.8 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:74d7 \|\|
		+	\|-
		+	\| kusanagi \|\| 10.98.0.32 \|\| - \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:7597 \|\| the SFP+ NIC appears broken. may work if re-seated.
		+	\|-
		+	\| narsil \|\| 10.98.0.33 \|\| 10.98.3.10 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:759d \|\|
		+	\|-
		+	\| oathbringer \|\| 10.98.0.34 \|\| 10.98.3.11 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:75f1 \|\|
		+	\|-
		+	\| riptide \|\| 10.98.0.35 \|\| 10.98.3.13 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:7621 \|\|
		+	\|-
		+	\| sting \|\| 10.98.0.36 \|\| 10.98.3.14 \|\| 2607:b400:6:cc80:42f2:e9ff:fec6:7723 \|\|
		+	\|}
		+
		+	Each machine can be remotely accessed on port 2222 from it's global IP6 address, or by DNS at <name>.vtluug.org.
		+
		+	Each machine has a management interface on 10.98.2.0/24, with the same last octet as its backend IP -- i.e. riptide can be managed from 10.98.2.13.
		+
		+	== Guide ==
		+
		+	=== Technical ===
		+
		+	Each listed blade has four connections: two 8p8c NICs attached to [[Infrastructure:Magma]], one for the frontend network, and one for its management interface, then two SFP+ NICs bonded together and connected to [[Infrastructure:Pahoehoe]] via QSFP+ breakout cable. The 20G bonded interface is used for the cluster's backend interconnect.
		+
		+	The frontend networks, uses DHCP with [[Infrastructure:Shellshock]], while the backend network is statically routed.
		+
		+	The blades have completely ephemeral disks -- the k3s node passwords and join tokens are shipped via agenix, targeting an ssh host key that is sealed by TPM1.2 and kept in the netboot image.
		+
		+	You can spy their config here [https://github.com/vtluug/construct/blob/main/hosts/bastille/blade.nix]
		+
		+	=== Operational ===
		+
		+	All users with a VTLUUG SSO account (read: FreeIPA/acidburn) can SSH to [[Infrastructure:Vesuvius]] from the VTLUUG LAN or the public IPv6 address.
		+
		+	From there, all users with sudo access can use `kubectl` to manage the cluster, or proxy/jump to other nodes through the backend fabric.
		+
		+	Non-admin tenant namespaces coming Soon^{tm}

	== Things To Host On All This (Post Suggestions!!!) ==		== Things To Host On All This (Post Suggestions!!!) ==

@@ Line 1: / Line 1: @@
 Prospit<ref>https://homestuck.com/images/hspanels/actThree/01032.gif</ref> is a Dell Precision 5810(?) tower, donated by [[User:Nate|nate]] and named by [[User:Clj|clj]].
-It is not doing anything, at the moment, and is configured to be disklessly netbooted as part of [[Infrastructure:Vesuvius|the cluster]].
+It is not doing anything, at the moment, and is configured to be disklessly netbooted as part of [[Infrastructure:Bastille|the cluster]].
 [[Category:Infrastructure]]
 [[Category:Hosts]]

← Older revision		Revision as of 03:21, 14 September 2026
Line 1:		Line 1:
−	[[Infrastructure:Magma\|Magma ~~(ws-c3750g-48ts)~~]] serves as the north/south traffic switch for [[Infrastructure:Bastille]]. By convention, the top half is for management interfaces, and the bottom half is for host frontend connections.	+	[[Infrastructure:Magma\|Magma]] serves as the north/south traffic switch for [[Infrastructure:Bastille]]. It is a Cisco ws-c3750g-48ts. By convention, the top half is for management interfaces, and the bottom half is for host frontend connections.

	== Management ==		== Management ==

@@ Line 6: / Line 6: @@
 * 256 GiB DDR4
 * a fully-featured remote management interface, with a webUI kvm
-* two gigabit eth NICs (Both connected), and one Intel X520 2x10G SFP+ (Unused)
+* two gigabit eth NICs, and one Intel X520 2x10G SFP+
 * notably, no peripheral ports other than a multiplexed one that uses a proprietary adapter to VGA, Serial, 2x USB
@@ Line 45: / Line 45: @@
 ** quay.io/oauth2-proxy/oauth2-proxy:latest
 ** mariadb:10.4.32
-** vtluug/mediawiki-vtluug:1.1
+** <s>vtluug/mediawiki-vtluug:1.1</s> ported
 ** linuxserver/swag
 ** vectorim/element-web:latest
@@ Line 51: / Line 51: @@
 ** <s>vtluug/pyqdb</s> ported
 ** thelounge/thelounge:latest
-** vtluug-site-vtluug-site
+** <s>vtluug-site-vtluug-site</s> ported
 ** vaultwarden/server:latest
 ** gitea/gitea:nightly

← Older revision		Revision as of 03:24, 14 September 2026
Line 68:		Line 68:
	[[Category:Infrastructure]]		[[Category:Infrastructure]]
	[[Category:Hosts]]		[[Category:Hosts]]
		+	[[Category:Bastille]]

@@ Line 2: / Line 2: @@
 Check out our [https://vtluug.org/calendar.html calendar] for this semester, including planned talks.
-Last Meeting: [[VTLUUG:2026-08-26]]
+Last Meeting: [[VTLUUG:2026-09-02]]
 Upcoming Meeting: [[Next_meeting]]

← Older revision		Revision as of 04:52, 9 September 2026
Line 1:		Line 1:
−	#REDIRECT [[VTLUUG:2026-09-02]]	+	#REDIRECT [[VTLUUG:2026-09-09]]

← Older revision		Revision as of 06:47, 2 September 2026
Line 1:		Line 1:
−	#REDIRECT [[VTLUUG:2026-08-26]]	+	#REDIRECT [[VTLUUG:2026-09-02]]