• To_Do

To Do

Other

1. call Charlotte
2. add stuff to google calendar
3. Get XP home media from Eric
4. make hearing test apt

2010 Eval Goals

Documentation Self-Advertising Meta-Automation

Projects

• renew seattlecentral.org DNS registation

• Baba Brinkman
• CMS

• SVN for Shelly & Rick

• Dev1
• Wiki
• documentation
• better monitoring
• Shibboleth
• Google
• remove ftp from edison

Today

• remember to check voicemail from home every 2 hrs - 587-6999 2958# XXX#

• Organize (email, to-do, log, appts, etc...)
• reboot Xen hosts
  • make hosts on Marlinspike active.
  • figure out how to reverse the mysql cloning
  • make sure marlinspike hosts have same RPMS as Syldavia hosts
  • make sure mspike hosts have same perl/php libs as syld hosts
  • compare configs between hosts (httpd,mysql,ntp,dhcp,ftp,etc...)
  • crontabs

Near Term

• renew seattlecentral.org DNS registation
• add httpd and mysqld startup checker to cfrun
• addwebaccnt needs to send email to address not web accnt name when they are different
• milkweed needs to backup himself as well!
• make whoslive keep a log and make a way to check that log if arthur is down
• make way for nagios to check if accounts thingy and sysadmind are up on non-live servers - accept non-ssl ? make nagios accept bad SSL name/cert thingies?

• make rsync.pl ssh > /dev/null

• no servers should rely on DHCP! (if they boot before the DHCP servers, I can be SOL)
• make auto independent_wallclock
• make scripts for make-active and make-inactive - reduce human error
• what do I need to make sure systems are up and happy after boot up?
• serial access to syldavia and marlinspike?
• remote power cycle for syldavia and marlinspike?
• if I want autobundle not to update the access times of all the pm files, I need to edit ExtUtils/MM_Unix parse_version.
• make quotas not use soft limits
• make quota checker automatically up quotas if quotas are at minimum
• make quarterly web user emails
• nagios
  • add awstats checker
  • do I check the web user lists and wireless user lists? I should... They have time stamps
• work on docs
• cfrun
  • install git on every box
  • check root's crontab and make sure backups are made
• Thursdays - move getclextr to use new collector on c3po
  • how can it share with thingy for Rick?
    • join into one process?
    • make it so getclextr can tell if clextr files are indeed new. (stat -f ...)
  • can I test password expirations?
  • copying password to prngrabber?
  • clean office
    • keep desk clean
    • wipe disks on unused machines
  • backups
    • add Zephir

    • backup configs etc... from babar & celeste

    • make backups record installed RPMS in some way...
    • make backups record installed perl/python/php modules
  • update OSs
    • install new edison2 on Syldavia
      • add cron stuff

  • documentation - see Documentation Requirements

    • check existing docs
  • port infoserver to windows
  • make agassi provide goodies on infoserver
  • check out "denyhosts"

    • http://www.rfxnetworks.com
      http://shellter.sourceforge.net/
      http://en.wikipedia.org/wiki/IP_blocking
      

  • make all appropriate filesystems mount "noexec,nodev,nosuid" where appropriate (it's in the standard)
  • update IPR and hardware list
    • make sure recent purchases are checked out of IPR
      • ram for Syldavia

      • Hdds & backplane for backup machine

    • update IPR with exact location of all state-tag items
    • add state tags from IPR to hardware list
  • shibboleth
    1. see if student leadership folks want it
    2. make idp work with testshib
    3. make ldap auth work
    4. make work with own (non-testshib) config
  • make bzrbatch send warning if bzr is locked up
  • switches should be attached to UPS
  • make machines with oimap/stunnel authentication test and restart stunnel
  • add some sort of UPS status to nagios

OS Upgrades

1. For current status, see OpSysUpdateStatus

2. upgrade syldavia

3. upgrade anything on syldavia that hates life
4. upgrade everything else

Documentation Requirements

• Backups
• Documenting the process for restorations
• Documenting what you do for mission critical processes (Shelly has done this for keycards—a good example).
• Listing the locations of needed hardware and software
• Listing a person and/or vendor to contact for expertise beyond that of our remaining network staff - with you under the truck. This might be an expensive resource, but at that time we won’t care.

Infoserver

1. make install accept --noserver or something like that
2. make SCCC::Infoserver install the infoserver user when installing the server stuff
3. make Build test try connecting to non-encrypted server
4. deploy new client code (make sure it's backward compatable)
5. make infoserver use encryption
   1. if both lib and server use same config, how to make lib enc ready before servers?
   2. distribute password by hand
   3. make servers encrypt

Project Improvements

1. dhcpd-master
   1. print who made changes and what the changes were in emails
2. http-watcher
   1. use cfrun
   2. add 1 sec pause between launch and check
   3. make it list running http processes and netstat -an output when restarting
3. SCCC::Util
   1. make ps_to_test not die when #items not 11
   2. make ps_to_test use wantarray
4. scripto
   1. d_print and others should croak if passed bad options
5. infoserver
   1. shouldn't die when columns != 11 (could be from SCCC::Util)

   2. add machine info from  sysctl -a | grep hw  and similer

   3. make it encrypted, dammit!
   4. add everything from daily status mail to infoserver
      1. uptime
      2. are important processes running?
      3. processes running amuck
      4. what time does the system think it is?
      5. what kernel is running
6. Nagios
7. Web Redundancy
   1. how to keep cron synced
   2. keep rsync synced
8. cfrun -
   1. installer
      1. automatically give my gpg key ultimate trust
      2. put _cfrun's home in /home/system
   2. dependencies
      1. cfrun depends on cronadd.pl
      2. my perl mods depend on Module::Build rpm = perl-Module-Build
      3. something depends on YAML rpm = perl-YAML

      4. AppConfig

      5. BSD::Resource
      6. Readonly

Long Term Goals

1. Move away from daily status mail toward logging and nagios
2. Documentation
3. do something with daily output emails
4. do something with logwatch emails
5. tintin state isn't a happy thing - see if you can fix or if it fixed itself..

When I'm In

1. label power cables with cable number, not machine name

CategoryCategory