Internal documents for Linux.Support

While this page should not contain any secrets, it is probably not very interesting to anybody outside of the Linux Support team ...

IT-OIS -> IT-CM

Meetings

Internal Procedures (access restricted to Linux Support members for most of these)

Current Projects

New in 2010

Ongoing

  • Unify Linuxsoft and SWrep software repositories
  • KernelModuleRPM : Procedure to create rpm for kernel module.

Older projects - would need some revisiting/updating perhaps ...

  • DUPAddOns: RHEL5/SLC5 Driver Update Program Addons (new framework for addon kernel-modules).
  • LinuxSmartCard: as triggered by IT-IS "pilot" and CNIC, look how/whether we can use Smartcards with Linux

Older (but still useful and used) Projects

  • LinuxStatistics: collect usage info from various sources, generate shiny graphs.
  • PrintingRevisitedAgain: do sthg about unfortunate (windows) CERN printing service...
  • aims2: try to integrate AIMS better into the modern world: IT-CS DHCP server (done), CDB, frequent changes to images, (Dan)
  • DistFsEval: network/distributed filesystems and clustering, (theoretical) evaluation
  • LocalFsEval: local filesystems, access via RFIO (and some local test for Peter to show off)
  • IncomingUpdateWorkflow: automate RPM incoming updates except for decisions, propagate to CDB/SWrep/Pakiti (Leszek, then Jarek)
  • Lemonize reference machines and install servers (Jan)
  • RootKitChecker: run checkrootkit (or something like it) on more machines: remove false positives, but stay with mainstream version. Integrate L.Cons tools.
  • provide patch status overview to sec team (perhaps Pakiti can be used)
  • IDSNetConnectionLogger: replace existing IDS (overloaded syscalls) (Alex)
  • LinuxHardening: various things to prevent or limit (root-level) compromises
  • FeatureListForSLC5: collecting point for new things that need to go into SLC5
  • KerberosFuture: where should we go with the existing AFS KDC, user management etc
  • UnifiedKerberos: look at what we can do against the two competing Kerberos realms at CERN
  • LinuxTraining: draft proposal for a formal (HR) training curriculum
  • GrubStage2Issues: the dreaded "grub loading stage 2" (and nothing later) error..
  • improve NetDump: move to linuxsoft; do some automatic analysis of crashes, aggregate per crash type, feed back "XYZ crashed" to LEMON
  • SysReqDiagnosis: how to interpret various SysReq-* things, such as collected by the operators on a stuck machine

Broken things and longstanding issues

(some overlap with the projects above (for things that actually work now), the things to add/fix for SLC4 and long-standing REMEDY tickets. All the broken things behind your OS you never wanted to know about...)

  • CompsXmlShortcomings: missing group requirements and/or badly placed packages make this almost unusable for anything else than the "Friss oder stirb" cern_recommended_setup.
  • GlibcDnsLoadBalancing: getaddrinfo() sorts multiple A records according to longest matching prefix

Previous projects

(this is where completed or just "works-for-me" things end up)
  • KerberosViaSSHNoAFS: end of June 2008 we see a marked increase of issues such as "no X11 forwarding after SSH" or "no AFS access after SSH" - believed to be fixed.
  • instantclient RPMification (including tnsnames.ora)
  • UcoRewrite: the venerable "uco" command needs updating/modularizing, still being used by user support

  • NetDump: set up network crash dumps: requires new disk server, ncm-whatever for client-side config and some experience with the analysis tools.
  • RH73Machines: make list of RH73 (and older) machines from various sources

Obsolete docs (kept here just 'in case')

This part of documentation is NOT UPDATED anymore, and most (it not all) of it is obsolete.

-- JaroslawPolok - 17-Feb-2010

Edit | Attach | Watch | Print version | History: r112 < r111 < r110 < r109 < r108 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r112 - 2016-02-11 - JaroslawPolok
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    LinuxSupport All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback