Changes

'''Note''': This is an effort toward the end of Fall 2017 to get new hardware, determining if we can use old hardware for anything, bring many vtluug services back to life plus add new services, fix major problems relating to the page does '''not''' reflect current infrastructure, make managing the current infrastructure easier, and to provide enough documentation so that anybody can have a very good understanding . It was for planning purposes. As of how 2019 everything works without having has been migrated to ask the officers about every little thing. This will be summarized new infra, as explained in the [[Sysadmin HandbookInfrastructure]].

One major change If you're looking for the older project [[User:telnorattti|telnoratti]] proposed, details about it are at [[Summer_2013_New_Machines]]. This is running an oVirt cluster effort toward the end of Fall 2017 and early Spring 2018 to get new hardware, determining if we can use old hardware for anything, bring many vtluug services back to life plus add new services, fix major problems relating to the current infrastructure, make managing the current infrastructure easier, and to provide enough documentation so that anybody can have a very good understanding of how everything, along with works without having to ask the officers about every little thing. This will be summarized at https://vtluug.org/rtfm.txt One major change offering a VPS service in addition to shell accounts on [[Infrastructure:Acidburn|Acidburn]]. This is not possible with the current hardware.

Ideally we will get 2. A much more detailed price analysis will be done for the SBB.

==== Hardware we will definitely have:====

=== Assuming we do get SBB funding = Configuration ====Additional hardware: 2x R620 * Router/DNS Server: joey (sry temp88191is too old)

* oVirt ControllerLibvirt hosts: R620* oVirt Workers (via PXE): R620 Controller, the other R620, Phantomphreak, JoeyMeltdown & Spectre

=== If we don't get SBB funding ===We probably need to get some additional RAM & CPUs for Wood Diagrams in this case in order to do the cluster.progress

* Router: temp88191* NAS: [[Infrastructure:Cyberdelia|Cyberdelia]]== Networking ==* oVirt Controller: [[Infrastructure:Wood|Wood]]* oVirt Workers (via PXE): See [[Infrastructure:Wood|WoodNetwork]], Phantomphreak, Joeyfor a mostly up to date networking layout.

We may also get some additional hardware early Spring 2017==== Public IPv4 addresses ===={| class='wikitable' id='sortMe'!Function!DNS!IP|-|Router/DNS|joey.vtluug.org|128.173.88.191|-|One Libvirt Node (out of 2)|meltdown.vtluug. This will replace Phantomphreakorg|128.173.89.246|-|Web/Joey, become the oVirt Controller, or the NAS depending on its specsProxy server|sczi.vtluug.org|128.173.88.78|-|Shell Server|acidburn.vtluug.org|128.173.89.245|-|FreeIPA|chimera.vtluug.org|128.173.89.247|-|Primary NFS server|dirtycow.vtluug.org|128.173.89.244|-|Matt's server|mjh.ece.vt.edu|128.173.88. TBD104|-Diagrams in progress|}

'''Note''': This secionsection's PoV does '''not''' taking into account the current state of service. Instead, it assumes services are being installed to a new infrastructure.

=== Urgent Essential ===

* Monitoring Routing (crashandburnjoey)*DNS (joey)* Firewall (joey)* NAS ("new" dell 2900 - dirtycow, dell 2900 - cyberdelia, r310 - shellshock)* Nagios or Prometheus Libvirt hosts (or both?meltdown, spectre)

* FreeIPA (zerocoolchimera) ==== K8s ====* sczi proxy Web services (sczi)** For proxying *.vtluug.org bc we don't have unlimited v4* vtluug.org (vtluug.org)* wiki.vtluug.org, gobblerpedia.org (wiki)** pSQL (should pSQL be in separate container??? TODO)* hokieprivacy.org Shell (hokieprivacyacidburn)

* VPS system (crashandburn)via Libvirt

** Possibly is really easy with oVirtGive each user an ipv6 address** Possibly do something like <user>.users.vtluug.orgNAS Backup

* shell (acidburn)* syslog elk (theplague)

* dns jitsi.vtluug.org (lordnikonjitsi)** Need to research this a bunchProxy through sczi* mail emby.vtluug.org (acidburnemby)** Possibly in Docker??? TODO==== K8s ====Proxy through sczi* Wadsworth (wadsworth)* duckhunter9000 (duckhunter)* truncatedcone mirror.vtluug.org (truncatedconemirror)* multimediamanv2 syncthing discovery server (multimediamansync)** produces /files/irc-vtluug.org 

* archive team warrior ==== K8s ====* linx.vtlug.org (linx)* bash.vtluug.org (bash)* foodfor.vtluug.org (foorfor)** .pickfood, .foodvote* emby.vtluug.org (emby)* mirror.vtluug.org (mirror)Archive Team Warrior

* finger (kerberos-based)

 == Migration ===== VTLUUG Site ===* member Setup on sczi via the web pages in vtluugansible role === VTLUUG & Gobblerpedia wiki ===* Backup content using dumpBackup.orgxml script* Setup on sczi via the web ansible role* Restore content to new wiki === Wadsworth/phenny ===* Use irc3 module instead* Setup on acidburn via the small-services ansible role === VTBash ===* Setup on sczi via the web ansible role === Hokieprivacy ===* Setup on sczi via the web ansible role === Linx ===* Setup on sczi via the web ansible role === Acidburn ===* Migrate homedirs to dirtycow NAS* Implement background tmux irc systemd service (or just tell people to use crontabs @reboot (sounds like u got a problem w/~usernamesystemd)) === User Accounts ===* Setup on chimera via freeipa-server ansible role* Import LDAP accounts to freeipa === /tank ===* Move main stuff to dirtycow* Clean up a bit

* we killed off all the Probably should be redesigned to be slightly more dynamic pump.io and identi.ca features that used using jekyll or flask or something === VTLUUG wiki ===* Need meeting script* Need to exist; we should bring these back or at least make the site not shitclean up a lot of old information === Gobblerpedia ===* Lots of out of date information* Building templates (populate automatically from database)

=== gopherspace Wadsworth/phenny ===* server doesnThings constantly break, but there't support IPv6s nothing we can really do about this* need Migrate to actually use /irc3 pythong library for a stable core* Migrate SysV scripts to systemd unit files on it

=== hokieprivacy VTBash ===out of date* Old shitty interface converted from python2 to python3** Nothing good seems to already exist, so we probably need to write one from scratch* Need to merge 2 old sqlite databases** Causes bug when only 1 quote author is entered, this is why they can't be merged

=== linx Hokieprivacy ===* Mobile formatting is fucked -- someone needs to update binaryshould look into the hugo templates and fix* Out of date

=== TOR services Linx ===linx, hokieprivacy, and the main site (hence vtluug.org) can be accessed over tor. advertise these urls or make them more memorable (or both)* Offload storage to NAS* Binaries need updating* Need to do reddit stress test

* need easier Need easy way for fo non-root to add stuff here???

=== ldap vtluug.org/users/~$USERNAME ===ldap sucks and needs to die. this is also a cent6 box* should document for users* maybe support dynamic server-side content (probably not; use js)

* train Train spamassassin against a (use corpus of spam so it filters better)* sieve Sieve doesn't seem to work at all; fix that

=== Most services (LDAP, others) gopherspace ===* Need standard place to put script for organization on physical server who tf uses gopher (aside from a git repo)** [[Wadsworth]] contains debian SysV init scripts in fwiw, gopher was 90% of the ircbot homedir** VTBash contains scripts in [[User:pew|pew]]'s homedir (which echarlie moved to a sane placegoal of project bringing sexy back)** router configs are on githublegacy IP only, as are old ldap configs and triggered in rc.localb/c pygopherd is shite

=== VTLUUG wiki TOR services ===* Need meeting script* Some meetings weren't added to category linx, hokieprivacy, and the main site (fixed??hence vtluug.org)* Lots of out of date information---should purge can be accessed over tor. advertise these urls or make them more memorable (or at least clean up* can't delete pages* Templates?both)