Open main menu

Linux and Unix Users Group at Virginia Teck Wiki β

Changes

Project Bringing Sexy Back

3,630 bytes added, 20 January
m
typo in 'telnoratti'
'''Note''': This is an effort toward the end of Fall 2017 to get new hardware, determining if we can use old hardware for anything, bring many vtluug services back to life plus add new services, fix major problems relating to the page does '''not''' reflect current infrastructure, make managing the current infrastructure easier, and to provide enough documentation so that anybody can have a very good understanding . It was for planning purposes. As of how 2019 everything works without having has been migrated to ask the officers about every little everything. This goes beyond documentating what we have (aka the wiki)new infra, instead provide a sort of guide that provides an overview on how to run everythingas explained in [[Infrastructure]].
One major change we are considering is running an OpenStack cluster If you're looking for managing everything, along with offering a VPS service in addition to shell accounts on the older project [[InfrastructureUser:Acidburntelnoratti|Acidburntelnoratti]] proposed, details about it are at [[Summer_2013_New_Machines]]. This is not possible with the current hardware.
OhThis is an effort toward the end of Fall 2017 and early Spring 2018 to get new hardware, determining if we can use old hardware for anything, bring many vtluug services back to life plus add new services, fix major problems relating to the current infrastructure, make managing the current infrastructure easier, and tshirtsto provide enough documentation so that anybody can have a very good understanding of how everything works without having to ask the officers about every little thing. This will be summarized at https://vtluug.org/rtfm.txt
//TODO talk about doing stuff from One major change offering a VPS service in addition to shell accounts on [[Infrastructure:Acidburn|Acidburn]]. This is not possible with the project listcurrent hardware.
 [[T<!--shirts]] //TODO update with designstalk about doing stuff from the project list-->
== Getting new hardware ==
[[Infrastructure:Cyberdelia|Cyberdelia]] is the only connected physical machine right now, besides [[Infrastructure:Temp88191|our router]]. See [[Infrastructure 2017]]. We are planning to request funding from the SBB for new infrastructure as early as possible Spring 2018.
We are still working on exactly what to ask for, but here are some desirable things:
//TODO link items
{| class='wikitable' id='sortMe'
!Priority
|-
|10
|Dell PowerEdge R430Poweredge R620s|$1,200 - $1,400600 ish
|-
|10} Ideally we will get 2. A much more detailed price analysis will be done for the SBB. \o/ We got $1300 to get 2 R620s!! == Hardware Configuration ====== Hardware ====* temp88191* [[Infrastructure:Cyberdelia|Cyberdelia]]* [[Infrastructure:Wood|RAM Wood]]* 2x SGI (Phantomphreak/Joey)* 2x R620s (Meltdown/Spectre) ==== Configuration ====* Router/DNS Server: joey (R430s only sry temp88191 is too old)* NAS: [[Infrastructure:Cyberdelia|Cyberdelia]] due to its HDD capacity* Libvirt hosts: Meltdown & Spectre* HPC: [[Infrastructure:Wood|Wood]] due to its 4U height that can easily fit gpus Diagrams in progress == Networking ==See [[Infrastructure:Network]] for a mostly up to date networking layout. Public IPv4s are the same except for a few, the local IPv4 network is different, and IPv6 is completely different because we have 8GBa prefix. ==== Public IPv4 addresses ===={| class='wikitable' id='sortMe'!Function!DNS!IP|-|Router/DNS|joey.vtluug.org|128.173.88.191|-|One Libvirt Node (out of 2)|~ $meltdown.vtluug.org|128.173.89.246|-|Web/Proxy server|sczi.vtluug.org|128.173.88.78|-|Shell Server|acidburn.vtluug.org|128.173.89.245/16GB|-|FreeIPA|chimera.vtluug.org|128.173.89.247|-|Primary NFS server|dirtycow.vtluug.org|128.173.89.244
|-
|9Matt's server|1Gp/s Switchmjh.ece.vt.edu|~ $100128.173.88.104
|-
|8
|UPS
|TBD - Based on infra power usage
|}
As per [[User:echarlie|echarlie]], "check rdns. if there isn't an entry, and it's in ece's allocated block, we can use it."
== Old hardware evaulation Service Importance ===== [[Infrastructure'''Note''':Wood|Wood]] ===This section's PoV does '''not''' taking into account the current state of service. Instead, it assumes services are being installed to a new infrastructure.
Syntax:
* Overall service (hostname)
== Infrastructure Organization ===== Planned Infrastructure Organization ===* Use [[w:Debian|Debian]] instead of [[w:Centos|Centos]] due to better compataiblity with [[w:ZFS|ZFS]] and upgradability. Regarding [[EL_Migration_Project]], I'd like to see some specific examples of this if it's an issue because both [[w:Debian|Debian]] and [[w:Centos|Centos]] Services running on each host are both very popular for servers.* Get a new compute server, and use [[Infrastructure:Cyberdelia|Cyberdelia]] as a NAS (possibly using [[w:FreeNAS|FreeNAS]]). Hence covered in the need for a switch as well* Continue using [[Infrastructure:temp88191|temp88191]] as a router.* Possibly use some old hardware for part of the OpenStack cluster.following sections
=== Essential ===
==== Bare Metal ====
* Routing (joey)
* DNS (joey)
* Firewall (joey)
* NAS ("new" dell 2900 - dirtycow, dell 2900 - cyberdelia, r310 - shellshock)
* Libvirt hosts (meltdown, spectre)
== Planned Services ==VMs === REQUIRED ===* FreeIPA (chimera)* Web services (sczi)* Shell (acidburn)
=== VERY IMPORTANT Very Important ======= Bare Metal ====* VPS system via Libvirt** Somewhat automated system where a user is given a VM** Give each user an ipv6 address* NAS Backup
=== IMPORTANT =VMs ====* elk (theplague)** Need to research this a bunch* jitsi.vtluug.org (jitsi)** Proxy through sczi* emby.vtluug.org (emby)** Proxy through sczi* mirror.vtluug.org (mirror)* syncthing discovery server (sync) === Important ======= VMs ====* Tahoe-LAFS (crashoverride)* telnet BBS** How tf do these things work* wargame.vtluug.org (wargame)* Archive Team Warrior* map.vtluug.org (map)
=== Other things to consider ===
* diaspora*
* finger (kerberos-based)
* talkd
 
== Migration ==
=== VTLUUG Site ===
* Setup on sczi via the web ansible role
 
=== VTLUUG & Gobblerpedia wiki ===
* Backup content using dumpBackup.xml script
* Setup on sczi via the web ansible role
* Restore content to new wiki
 
=== Wadsworth/phenny ===
* Use irc3 module instead
* Setup on acidburn via the small-services ansible role
 
=== VTBash ===
* Setup on sczi via the web ansible role
 
=== Hokieprivacy ===
* Setup on sczi via the web ansible role
 
=== Linx ===
* Setup on sczi via the web ansible role
 
=== Acidburn ===
* Migrate homedirs to dirtycow NAS
* Implement background tmux irc systemd service (or just tell people to use crontabs @reboot (sounds like u got a problem w/ systemd))
 
=== User Accounts ===
* Setup on chimera via freeipa-server ansible role
* Import LDAP accounts to freeipa
=== /tank ===
* Move main stuff to dirtycow
* Clean up a bit
== Issues with current services ==
When (re)implementing services listed above do the following changes. === For all services using a custom systemd script VTLUUG Site ===* Need standard place to put script for organizationWe're literally proxying a static github page (vtluug.github.io)** [[Wadsworth]] contains scripts in the homedir** VTBash contains scripts in [[User:pew|pew]]'s homedirProbably should be redesigned to be slightly more dynamic using jekyll or flask or something
=== VTLUUG wiki ===
* Need meeting script
* Some meetings weren't added Need to category (fixed??)* Lots clean up a lot of out of date old information* Templates?
=== Gobblerpedia ===
* Lots of out of date information
* Building templates (populate automatically from database) === Wadsworth/phenny ===* Things constantly break, but there's nothing we can really do about this* Migrate to irc3 pythong library for a stable core* Migrate SysV scripts to systemd unit files === VTBash ===* Old shitty interface converted from python2 to python3** Nothing good seems to already exist, so we probably need to write one from scratch* Need to merge 2 old sqlite databases** Causes bug when only 1 quote author is entered, this is why they can't be merged === Hokieprivacy ===* Mobile formatting is fucked -- someone should look into the hugo templates and fix* Out of date === Linx ===* Offload storage to NAS* Binaries need updating* Need to do reddit stress test === vtluug.org/files ===* Need easy way fo non-root to add stuff here === vtluug.org/users/~$USERNAME ===* should document for buildingsusers* maybe support dynamic server-side content (probably not; use js) === mail ===* Train spamassassin (use corpus)* Sieve doesn't seem to work
== VTBash = gopherspace ===* [https://bash.vtluug.org bash.vtluug.org] is working as who tf uses gopher (fwiw, gopher was 90% of the goal of August 2017project bringing sexy back)* An issue with the code resulted in 2 different databaseslegacy IP only, eash of which b/c pygopherd is very large and good** We need to convert these sqlite dbs* Needs overhaul** Shittly converted to python 3 from python 2 and wordwrap isn't a thingshite
=== TOR services ===
linx, hokieprivacy, and the main site (hence vtluug.org) can be accessed over tor. advertise these urls or make them more memorable (or both)
[[Category:VTLUUG:Projects]]
[[Category:Infrastructure:Misc]]
238
edits