Open main menu

Linux and Unix Users Group at Virginia Teck Wiki β

Project Bringing Sexy Back

Revision as of 23:23, 27 December 2017 by imported>Pew (Issues with current services)

This is an effort toward the end of Fall 2017 to get new hardware, determining if we can use old hardware for anything, bring many vtluug services back to life plus add new services, fix major problems relating to the current infrastructure, make managing the current infrastructure easier, and to provide enough documentation so that anybody can have a very good understanding of how everything works without having to ask the officers about every little thing. This will be summarized in the Sysadmin Handbook

One major change is running an oVirt cluster to managing everything, along with offering a VPS service in addition to shell accounts on Acidburn. This is not possible with the current hardware.


T-shirts


Contents

Getting new hardware

Cyberdelia is the only connected physical machine right now, besides our router. See Infrastructure 2017. We are planning to request funding from the SBB for new infrastructure as early as possible Spring 2018.

We are still working on exactly what to ask for, but here are some desirable things: //TODO link items

Priority Item Estimated Cost
10 Dell Poweredge R620s $600 ish

Ideally we will get 2.

A much more detailed price analysis will be done for the SBB.

Hardware Configuration

Hardware we will definitely have:

Assuming we do get SBB funding

Additional hardware: 2x R620

  • Router: temp88191
  • NAS: Cyberdelia due to its HDD capacity
  • oVirt Controller: R620
  • oVirt Workers (via PXE): R620 Controller, the other R620, Phantomphreak, Joey
  • HPC: Wood due to its 4U height that can easily fit gpus

If we don't get SBB funding

We probably need to get some additional RAM & CPUs for Wood in this case in order to do the cluster.

  • Router: temp88191
  • NAS: Cyberdelia
  • oVirt Controller: Wood
  • oVirt Workers (via PXE): Wood, Phantomphreak, Joey


We may also get some additional hardware early Spring 2017. This will replace Phantomphreak/Joey, become the oVirt Controller, or the NAS depending on its specs. TBD

Diagrams in progress


Service Importance

Note: This secion's PoV does not taking into account the current state of service. Instead, it assumes services are being installed to a new infrastructure.

All necessary services send notifications to officers for alerts.

Syntax:

  • Service (VM name | Container name)

Urgent

Bare Metal

  • Monitoring (crashandburn)
    • Nagios or Prometheus, or possibly both

VMs

  • FreeIPA (zerocool)

K8s

  • Sczi proxy (sczi)
    • For proxying *.vtluug.org because we don't have unlimited v4
  • vtluug.org (vtluug)
  • wiki.vtluug.org, gobblerpedia.org (wiki)
    • pSQL (should pSQL be in separate container??? TODO)
  • hokieprivacy.org (hokieprivacy)

Very Important

Bare Metal

  • VPS system (crashandburn)
    • Somewhat automated system where a user is given a VM
    • Possibly is really easy with oVirt
    • Possibly do something like <user>.users.vtluug.org

VMs

  • Shell (acidburn)
    • Member pages @ vtluug.org/~user
  • rsyslog (theplague)
    • Need to research this a bunch
  • DNS (lordnikon)
    • Need to research this a bunch
  • Mail (acidburn)
    • Possibly in Docker instead of VM

K8s

  • Wadsworth (wadsworth)
  • duckhunter9000 (duckhunter)
  • truncatedcone (truncatedcone)
  • multimediamanv2 (multimediaman)
    • Produces /files/irc-vtluug.org


Important

VMs

  • Tahoe-LAFS (crashoverride)
    • Possibly put in container
  • telnet BBS
    • How tf do these things work
  • wargame.vtluug.org (wargame)
  • Archive Team Warrior

K8s

  • linx.vtlug.org (linx)
  • bash.vtluug.org (bash)
  • foodfor.vtluug.org (foorfor)
    • .pickfood, .foodvote
  • emby.vtluug.org (emby)
  • mirror.vtluug.org (mirror)
  • map.vtluug.org (map)
  • jitsi.vtluug.org (jitsi)

Other things to consider

  • diaspora*
  • finger (kerberos)
  • talkd

Issues with current services

When (re)implementing services listed above do the following changes.

VTLUUG Site

  • We're literally proxying a static github page (vtluug.github.io)
  • Probably should be redesigned to be slightly more dynamic using jekyll or flask or something

VTLUUG wiki

  • Need meeting script
  • Need to clean up a lot of old information

Gobblerpedia

  • Lots of out of dat information
  • Building templates

Wadsworth/phenny

  • Things constantly break, but there's nothing we can really do about this
  • Migrate to irc3 pythong library for a stable core
  • Migrate SysV scripts to systemd unit files

VTBash

  • Old shitty interface converted from python2 to python3
    • Nothing good seems to already exist, so we probably need to write one from scratch
  • Need to merge 2 old sqlite databases
    • Causes bug when only 1 quote author is entered, this is why they can't be merged

Hokieprivacy

  • Mobile formatting is fucked, at least for FF on Android
  • Out of date

Linx

  • Offload storage to NAS
  • Binaries need updating
  • Need to do reddit stress test

vtluug.org/files

  • Need easy way fo non-root to add stuff here

mail

  • Train spamassassin
  • Sieve doesn't seem to work

gopherspace

  • who tf uses gopher

hokieprivacy

out of date

linx

someone needs to update binary

TOR services

linx, hokieprivacy, and the main site (hence vtluug.org) can be accessed over tor. advertise these urls or make them more memorable (or both)

vtluug.org/files

  • need easier way for non-root to add stuff here???

ldap

ldap sucks and needs to die. this is also a cent6 box

mail

  • train spamassassin against a corpus of spam so it filters better
  • sieve doesn't seem to work at all; fix that