Changes

Jump to: navigation, search

Project Bringing Sexy Back

202 bytes removed, 02:34, 10 January 2019
no edit summary
'''Note''': This page does '''not''' reflect current infrastructure. It is was for planning purposes. As of 2019 everything has been migrated to new infra, as explained in [[Infrastructure]].
This is an effort toward the end of Fall 2017 and early Spring 2018 to get new hardware, determining if we can use old hardware If you're looking for anything, bring many vtluug services back to life plus add new services, fix major problems relating to the current infrastructure, make managing the current infrastructure easierolder project [[User:telnorattti|telnoratti]] proposed, and to provide enough documentation so that anybody can have a very good understanding of how everything works without having to ask the officers details about every little thing. This will be summarized in the it are at [[Sysadmin HandbookSummer_2013_New_Machines]].
One major change This is running an Proxmox cluster effort toward the end of Fall 2017 and early Spring 2018 to get new hardware, determining if we can use old hardware for anything, bring many vtluug services back to life plus add new services, fix major problems relating to the current infrastructure, make managing the current infrastructure easier, and to provide enough documentation so that anybody can have a very good understanding of how everything, along with works without having to ask the officers about every little thing. This will be summarized at https://vtluug.org/rtfm.txt One major change offering a VPS service in addition to shell accounts on [[Infrastructure:Acidburn|Acidburn]]. This is not possible with the current hardware.
<!--TODO talk about doing stuff from the project list-->
We are still working on exactly what to ask for, but here are some desirable things:
//TODO link items
{| class='wikitable' id='sortMe'
!Priority
* Router/DNS Server: joey (sry temp88191 is too old)
* NAS: [[Infrastructure:Cyberdelia|Cyberdelia]] due to its HDD capacity
* Proxmox hosted-engineLibvirt hosts: Both R620s, PhantomphreakMeltdown & Spectre
* HPC: [[Infrastructure:Wood|Wood]] due to its 4U height that can easily fit gpus
== Networking ==
See [[Infrastructure:Network]] for a mostly up to date networking layout.
This section reflects Public IPv4s are the services decscribed in same except for a few, the following sectionlocal IPv4 network is different, and IPv6 is completely different because we have a prefix.
==== Public IPv4 addresses ====
|128.173.88.191
|-
|Proxmox ControllerOne Libvirt Node (out of 2)
|meltdown.vtluug.org
|128.173.89.244246
|-
|Web/Proxy server
|-
|FreeIPA
|zerocoolchimera.vtluug.org
|128.173.89.247
|-
|MirrorPrimary NFS server|mirrordirtycow.vtluug.org|128.173.89.246244
|-
|Matt's server
As per [[User:echarlie|echarlie]], "check rdns. if there isn't an entry, and it's in ece's allocated block, we can use it."
 
==== Private IPv4 addresses ====
We also use private addresses for things like NAS. This isn't 100% figured out yet, but we will probably do something like use 10.0.0.0-100 as static IPs and run DHCP on 10.0.0.101+.
 
==== IPv6 addresses ====
See [[Infrastructure]].
== Service Importance ==
'''Note''': This section's PoV does '''not''' taking into account the current state of service. Instead, it assumes services are being installed to a new infrastructure.
'''All''' necessary services send notifications to officers for alerts.Syntax:* Overall service (hostname)
Syntax:* Host (hostname)** Services running on each hostare covered in the following sections
=== Essential ===
* DNS (joey)
* Firewall (joey)
* NAS ("new" dell 2900 - dirtycow, dell 2900 - cyberdelia, r310 - falloutshellshock)* Proxmox VE Libvirt hosts (meltdown,spectre,phantomphreak)
==== VMs ====
* FreeIPA (chimera)
* Sczi Web services (sczi)** vtluug.org** wiki.vtluug.org** hokieprivacy.org** linx.vtluug.org + linx.li** bash.vtluug.org** pSQLShell (acidburn)
=== Very Important ===
==== Bare Metal ====
* VPS system via ProxmoxLibvirt
** Somewhat automated system where a user is given a VM
** Give each user an ipv6 address
==== VMs ====
* Shell (acidburn)** Wadsworth ** duckhunter9000** multimediamanv2*** Produces /files/irc-vtluug.org** mail** Member pages @ vtluug.org/~user* rsyslog elk (theplague)
** Need to research this a bunch
 
* jitsi.vtluug.org (jitsi)
** Proxy through sczi
* emby.vtluug.org (emby)
** Proxy through sczi
* mirror.vtluug.org (mirror)
* syncthing discovery server (sync)
=== Important ===
==== VMs ====
* mirror.vtluug.org (mirror)
* syncthing discovery server (sync)
* Tahoe-LAFS (crashoverride)
* telnet BBS
== Migration ==
'''NOTE''': We're not going to use docker //TODO
(??? elaborate)
 
=== VTLUUG Site ===
* Migrate to dockerSetup on sczi via the web ansible role
=== VTLUUG & Gobblerpedia wiki ===* Backup contentusing dumpBackup.xml script* Migrate to docker === Gobblerpedia ===Setup on sczi via the web ansible role* Backup Restore content* Migrate to dockernew wiki
=== Wadsworth/phenny ===
* Backup db (for .in)Use irc3 module instead* Migrate to dockerSetup on acidburn via the small-services ansible role
=== VTBash ===
* Migrate to dockerSetup on sczi via the web ansible role
=== Hokieprivacy ===
* Migrate to dockerSetup on sczi via the web ansible role
=== Linx ===
* Move files to NAS* Migrate to dockerSetup on sczi via the web ansible role
=== Acidburn ===
* Migrate homedirs to dirtycow NAS (what do you mean; they're already there)* Currently have a ton of users - most people don't use it anymore or have accounts in new ldap system (resolved: ewontfix notabug)** Have people re-register with FreeIPA - this is a dick move; need ways to do remotely* Implement background tmux irc systemd service (or just tell people to use crontabs @reboot (sounds like u got a problem w/ systemd)) === User Accounts ===* Setup on chimera via freeipa-server ansible role* Import LDAP accounts to freeipa
=== /tank ===
* Backup then clean upMove main stuff to dirtycow** Either to tardis or Clean up a temporary NASbit
== Issues with current services ==
=== vtluug.org/files ===
* Need easy way fo non-root to add stuff here
 
=== vtluug.org/users/~$USERNAME ===
* should document for users
* maybe support dynamic server-side content (probably not; use js)
=== mail ===
* Train spamassassin(use corpus)
* Sieve doesn't seem to work
Retrieved from "https://vtluug.org/wiki/Special:MobileDiff/6655...7622"

Navigation menu