Okay, no objections, and it's afternoon in Philly, so here it is. I
think the following snippet pretty much covers yesterday's discussion.
I don't think anyone said anything too incriminating. Please
excuse my
out-of-place Helen Thomas incrementing. Oh, and, mjgiarlo, I hope you
didn't mean for that exclamation point to be real.
2007-08-01T14:57:53 *** jaf changes topic to "discussion on
hosting code4lib.org"
2007-08-01T14:58:03 <ksclarke> the time has come, eh?
2007-08-01T14:58:09 <jaf> in a minute, yes :)
2007-08-01T14:58:28 <wtd> Attention! Attention! Discussion
beginning soon.
2007-08-01T14:58:35 <jaf> ok, the time is upon us
2007-08-01T14:58:36 <dbs> wtd: Sigh. Check my blog post.
2007-08-01T14:58:37 <wtd> Everyone load up their channel loggers.
2007-08-01T14:59:00 <jaf> roll call, please: let's make sure folks
are active
2007-08-01T14:59:02 <jaf> I'm here
2007-08-01T14:59:05 <ksclarke> here
2007-08-01T14:59:12 <rsinger> tom servo!
2007-08-01T14:59:12 <jbrinley> moo
2007-08-01T14:59:14 <jrochkind> I'm observing.
2007-08-01T14:59:16 <rsinger> croooooooooooooooooooow!
2007-08-01T14:59:25 <wtd> I'm here. I have an account on anvil (no
root) and host a Rails site on it.
2007-08-01T14:59:33 <ksclarke> edsu back yet?
2007-08-01T14:59:40 <wickr> I'm observing
2007-08-01T14:59:43 <wtd> anvil.lisforge.net, that is, the box
that got hacked.
2007-08-01T14:59:49 <jbrinley> .seen edsu
2007-08-01T14:59:49 <zoia> jbrinley: edsu was last seen in
#code4lib 4 hours, 18 minutes, and 31 seconds ago: <edsu> like the
librarything guys talk, and others
2007-08-01T15:00:09 <jaf> my local clock says 11:59, so let's wait
another minute or so
2007-08-01T15:00:17 <ksclarke> sounds good
2007-08-01T15:00:20 <wickr> edsu said he might be able to pop in
for a bit, and he might not
2007-08-01T15:00:35 <rsinger> plus, these are library types-- we
need to give the customary 5 minutes
2007-08-01T15:00:38 * rordway is here
2007-08-01T15:00:43 <ksclarke> rsinger++
2007-08-01T15:00:56 <jaf> ok, well, we probably should begin the
discussion
2007-08-01T15:00:57 <rordway> according to my Mac, it's now 12:00
2007-08-01T15:01:06 <jaf> the proposal on the table, as I
understand it, is thus:
2007-08-01T15:01:18 <jaf> move the production version of
code4lib.org over to a server here at OSU
2007-08-01T15:01:25 *** rob_desk has joined #code4lib
2007-08-01T15:01:30 <jaf> use anvil as a development enivornment
2007-08-01T15:01:41 <jaf> and set up policies for admin support
and access of code4lib.org
2007-08-01T15:01:51 <wtd> Is that *.code4lib.org? journal, planet,
etc?
2007-08-01T15:02:02 <jaf> wtd: yes, *.code4lib.org
2007-08-01T15:02:06 <rsinger> hrm
2007-08-01T15:02:12 <rsinger> dilettantes?
2007-08-01T15:02:15 <jaf> so, currently we are talking www,
planet, and journal
2007-08-01T15:02:16 *** tholbroo has quit IRC
2007-08-01T15:02:29 <rsinger> jaf: there's more -- svn
2007-08-01T15:02:35 <jaf> ok, and svn :)
2007-08-01T15:02:37 <ksclarke> and trac
2007-08-01T15:02:38 <jaf> and trac
2007-08-01T15:02:39 <rsinger> trac?
2007-08-01T15:02:40 <rsinger> yeah
2007-08-01T15:02:46 <jrochkind> ++
2007-08-01T15:02:52 <wtd> There are about, what, ten other more or
less production sites hosted on the box?
2007-08-01T15:03:01 <jaf> wtd: what are those?
2007-08-01T15:03:05 <jrochkind> Will OSU donate this service?
Does this include sysadmin staffing, or just hardware/network, or
what?
2007-08-01T15:03:17 <ksclarke> wtd, what, code4lib things or other
people's things?
2007-08-01T15:03:17 <rordway> [a-zA-Z+].code4lib? :-)
2007-08-01T15:03:38 <ksclarke> we're only talking code4lib stuff I
believe
2007-08-01T15:03:43 <wtd> Ah, OK.
2007-08-01T15:03:46 <jaf> jrochkind: we are donating the server
space, bandwith, and will support the software running on the box
in terms of security and uptime
2007-08-01T15:03:52 <jrochkind> Awesome.
2007-08-01T15:03:59 <wtd> So this is a sort of formalization and
Oregon State adoption of code4lib.org as an online presence.
2007-08-01T15:04:06 <ksclarke> osu++
2007-08-01T15:04:08 <jaf> but we'd also like some commitment from
the community for helping with the general admin of the software
2007-08-01T15:04:12 <rsinger> hmm
2007-08-01T15:04:17 <rsinger> i'm still not sure about this
2007-08-01T15:04:18 <jaf> wtd: no
2007-08-01T15:04:31 <ksclarke> so how will you manage letting
people have the privs for that help, jaf?
2007-08-01T15:04:33 <jbrinley> jaf: commitment of what sort?
2007-08-01T15:04:37 <rsinger> 1) my online presence is in the
code4lib.org domain
2007-08-01T15:04:49 <jaf> in other words, we're not going to set
policies on / about code4lib.org
2007-08-01T15:04:52 <bradl> jaf: sounds like you have it handled :)
2007-08-01T15:05:01 <jaf> we're going to commit to a level of
support to assure uptime
2007-08-01T15:05:09 <ksclarke> yeah, rsinger, yours is the
exception (personal in the domain)
2007-08-01T15:05:12 <jaf> but other than that, it's still the
community that controls c4l.org
2007-08-01T15:05:15 <rsinger> 2) what if, say, osu counsel (or
anyone in the chain) objected to something in the code4lib.org
domain and wanted it to be taken down?
2007-08-01T15:05:18 <jrochkind> We would want to make sure that
OSU disclaims any ownership of any 'intellectual property' on
*.code4lib.org. If minds are changed later, we want no legal
barriers to moving it somewhere else.
2007-08-01T15:05:43 <jaf> rsinger, jrochkind: no problems there.
We claim no copyright / ownership of the content
2007-08-01T15:06:01 <ksclarke> and not even any osu branding right
jaf?
2007-08-01T15:06:07 <wtd> OSU providing free hosting, bandwidth,
and tech support, and having no say over any content or
administration, sounds pretty damn useful.
2007-08-01T15:06:08 <rsinger> jaf: is that actually feasible? i
mean, legally?
2007-08-01T15:06:12 <jaf> rsinger: yes
2007-08-01T15:06:13 <ksclarke> but do you have policies for the
type of material that you all can host?
2007-08-01T15:06:14 <rsinger> isn't osu liable at some point?
2007-08-01T15:06:15 <jaf> ksclarke: yes
2007-08-01T15:06:29 <jrochkind> Also, that the DNS were set up so
things running on the current anvil can still run at
[various].code4lib.org . So if you prefer to run a code4lib
domained service not on OSU, you still could.
2007-08-01T15:06:30 <rordway> jaf is liable :-)
2007-08-01T15:06:31 <jaf> rsinger: are you going to make us liable
for something? ;-)
2007-08-01T15:06:43 <rsinger> don't i always?
2007-08-01T15:07:00 <ksclarke> jrochkind, that would be nec. for
rsinger's dila...
2007-08-01T15:07:05 <jaf> as long as truly illegal stuff doesn't
happen on c4l.org, we should be fine
2007-08-01T15:07:08 <jrochkind> That's what I'm thinking.
2007-08-01T15:07:16 <jaf> i.e. no pr0n, illegal filesharing, etc.
2007-08-01T15:07:23 <rsinger> jaf: i guess i'm trying to make sure
that all our t's are crossed and whatnot
2007-08-01T15:07:36 <jrochkind> anvil is still available for
hosting *.code4lib.org, so long as it's owners want to keep making
it available. But things that we want to be uptime-guaranteed, we
can put on the OSU server.
2007-08-01T15:07:39 <ksclarke> jaf: after all illegal filesharing
is why we have anvil
2007-08-01T15:07:41 <jaf> rsinger: you cross your t's? Sounds like
an a-type personality to me.....
2007-08-01T15:07:43 <rordway> ksclarke: we have policies for what
we can host, but I don't think there is anything that would be of
conflict
2007-08-01T15:07:44 <ksclarke> just joking
2007-08-01T15:08:07 <rsinger> jaf: the advantage to it having
lived in neutral territory thus far is that the issue of governance
hasn't been an issue
2007-08-01T15:08:15 <jrochkind> If OSU gives us problems---the
content on the OSU server can always be moved away. (Although of
course that would be a pain in the ass nobody would look forward to).
2007-08-01T15:08:17 <jaf> so, another thing: Domain ownership is
still with edsu
2007-08-01T15:08:32 <rsinger> jaf: since none of the owners of the
machine have cared to interfere
2007-08-01T15:08:35 <rsinger> (obviously)
2007-08-01T15:08:39 <jaf> so, yes, following up on jrochkind, if
problems arise, things can be copied and pointed elsewhere
2007-08-01T15:08:40 <wtd> This is the equivalent of code4lib.org
getting an unused office and a phone line and doing whatever it
wants, basically.
2007-08-01T15:08:50 <jaf> wtd: yes
2007-08-01T15:08:59 * ksclarke chuckles
2007-08-01T15:08:59 <zoia> ksclarke: true, true
2007-08-01T15:09:12 <rsinger> wtd: i guess i'm just skeptical that
there are no strings attached with that deal
2007-08-01T15:09:17 <jrochkind> wtd: And OSU pays for the
utilities, and for the plumber who needs to come biweekly for our
leaky plumbing.
2007-08-01T15:09:32 <jaf> rsinger: so, what strings are you
specifically worried about?
2007-08-01T15:09:38 <rsinger> or that somebody won't come in
eventually to explain that the strings have always been there
2007-08-01T15:09:38 <ksclarke> jaf: I'm curious who will have
login access to the box
2007-08-01T15:09:38 <jrochkind> Would a written contract make you
feel better? Would OSU be willing to sign such? (Who would they
sign it WITH, I don't know).
2007-08-01T15:10:04 <eby> finally around
2007-08-01T15:10:17 <jrochkind> As long as our content doesn't get
held hostage, the worst case doesn't seem that bad to me. As long
as the content can be moved elsewhere if strings do appear.
2007-08-01T15:10:20 <jaf> ksclarke: I think that's part of the
discussion here. That's for the folks in the c4l community to
decide, and Mr. Ordway to say, "that's doable"
2007-08-01T15:10:22 <ksclarke> not a having a who to sign it with
is why it's not at princeton (which I thought about at one point)
2007-08-01T15:10:28 <rsinger> jaf: again, it comes down to
governance -- government entities tend to be far more conservative
about the sorts of services they host
2007-08-01T15:10:51 <jaf> rsinger: this is oregon, dude.
2007-08-01T15:10:54 <jaf> :)
2007-08-01T15:10:57 <ksclarke> rsinger: well any service can still
be hosted from anvil if one of the box people want
2007-08-01T15:10:58 <rordway> haha
2007-08-01T15:11:00 *** caroldotou has quit IRC
2007-08-01T15:11:14 <mjgiarlo> "let's settle this over a case of PBR"
2007-08-01T15:11:20 <jaf> so, OSU has some precident here through
the open source lab hosting for a variety of projects
2007-08-01T15:11:24 <rsinger> jaf: that may be, but i bet you're
university lawyers are as chickenshit as any other university lawyers
2007-08-01T15:11:38 <rsinger> s/you're/your/
2007-08-01T15:11:44 <rordway> the only caveat that I'm aware of on
our side is Network Engineering/IS has to approve of the hosting of
the "domain", not even necessarily the content
2007-08-01T15:11:45 <eby> what's osu's policy on responding to
complaints
2007-08-01T15:11:58 <jaf> eby: what type of complaints?
2007-08-01T15:12:01 <eby> inform, shutoff, delete?
2007-08-01T15:12:04 *** danja has quit IRC
2007-08-01T15:12:06 <eby> content or legal
2007-08-01T15:12:07 <rsinger> eby: that's more what i'm getting, i
guess
2007-08-01T15:12:14 <ksclarke> rordway will this be on its own box
or a shared machine?
2007-08-01T15:12:17 <jaf> i haven't had much experience on such
2007-08-01T15:12:30 <jaf> we've had some issues with pr0n being
placed on our wiki via spammers
2007-08-01T15:12:39 <jaf> but those were handled directly
2007-08-01T15:13:03 <rordway> ksclarke: probably an isolated Xen
guest
2007-08-01T15:13:05 <jaf> i imagine if a complaint were to occur,
our network services would contact my boss, who would inform me
2007-08-01T15:13:11 <rordway> so effectively it would be dedicated
2007-08-01T15:13:28 <jaf> so, basically, at that point, it would
be my roll to deal with whatever situation would occur
2007-08-01T15:13:47 <ksclarke> how many people are you comfortable
with having access to the machine? is there a number?
2007-08-01T15:14:03 <rordway> and yes, usually NET gets a
complaint, they usually forward it along to my group, Library
Technology, and we handle it
2007-08-01T15:14:05 <jaf> but truly, are we anticipating some sort
of content that would cause this?
2007-08-01T15:14:20 <ksclarke> and is there a way to decide who
those people are? /me wonders aloud
2007-08-01T15:14:39 <rsinger> jaf: i think we need to to cover our
asses
2007-08-01T15:14:43 <wtd> ksclarke: Wouldn't you start with who
has codelib.org-related access to anvil, and grow from there?
2007-08-01T15:14:45 <eby> jaf: i don't expect directly but with a
semi-open drupal it could come up indirectly
2007-08-01T15:14:48 <jaf> i mean, if I'm understanding what eby
and rsinger are bringing up, is this the equivilant of a takedown
notice brought on by something like the DMCA?
2007-08-01T15:15:03 <rsinger> or libel
2007-08-01T15:15:44 *** caroldotou has joined #code4lib
2007-08-01T15:15:47 <jaf> so, one benefit of having this at a
public academic institution is that it's probably more difficult to
have abuse of takedown notices via DMCA then at a normal ISP
2007-08-01T15:16:01 <ksclarke> wtd: not all the folks on anvil
have any c4l leanings so I think that list would just be eby, me,
edsu, you, rsinger
2007-08-01T15:16:26 <ksclarke> am I forgetting anyone? I don't
think credding or dfox have any desire to
2007-08-01T15:16:32 <wtd> Good enough to start with.
2007-08-01T15:16:33 <jaf> and we (OSU) have to deal with this on
our wiki, with blogs, etc. so this issue wouldn't be particular to
c4l.org
2007-08-01T15:16:52 <jrochkind> We could, from the start, set up
some kind of mirroring routine to mirror OSU content to anvil. So
with the flip of a DNS entry, it could be switched back to anvil.
2007-08-01T15:16:56 <jbrinley> wtd, ksclarke: I would like to
request some sort of access for the journal, but it's not
absolutely necessary
2007-08-01T15:16:59 <jrochkind> But that would take someone to
work on setting that up. Not me.
2007-08-01T15:17:09 <ksclarke> jaf, but having access at the wiki
level is a bit different than machine level
2007-08-01T15:17:18 <wtd> Given codelib.org's growth over the past
n years, and foreseeable future, it sounds like it's just strange
edge conditions that are the concern here.
2007-08-01T15:17:19 <jaf> jrochkind: I believe that the journal
would be fine to be hosted on the production server
2007-08-01T15:17:49 <jrochkind> jaf: I assumed so. I really want a
more uptime-confident host for the journal.
2007-08-01T15:17:58 <ksclarke> jrochkind: yeah, mirroring sounds
good... I've had other offers as spots to mirror c4l too so we'd
have multiple redundancy
2007-08-01T15:17:59 <jaf> ksclarke: true, but I'm trying to
address rsinger's and eby's concerns. Command-line access is
another issue to decide
2007-08-01T15:18:10 <jbrinley> jaf: I'm meaning access to load
files, WP templates, etc., for admining the journal website.
2007-08-01T15:18:10 <rordway> ksclarke: oh, actually that would be
a pair of Xen guests behind our foundry serveriron
2007-08-01T15:18:13 <wtd> Would the box fit into any existing OSU
service level agreements?
2007-08-01T15:18:28 <ksclarke> osu --> anvil + others
2007-08-01T15:18:48 <jrochkind> jaf: Yeah, we'd need command line
access (although not root, of course) for many of these services, I
think. To provide the software management you want us to provide.
Otherwise it'll be way too much work for your admins responding to
our requests.
2007-08-01T15:18:56 <jbrinley> jaf: right now I give files to eby
and eby uploads them for me
2007-08-01T15:19:07 <eby> wtd: i think the community tends to be
open and there might be concerns by others about their freedom to
express. It doesn't really bother me
2007-08-01T15:19:09 <ksclarke> jbrinley, yeah you should have
machine access I think
2007-08-01T15:19:24 <ksclarke> on the prod
2007-08-01T15:19:32 <jaf> jrochkind, jbrinley: right, these are
details that can be worked out, I think. The policies wouldn't be
decided by OSU, but by us, the c4l community
2007-08-01T15:19:51 <jbrinley> jaf: good point. A discussion for
another day.
2007-08-01T15:20:04 <eby> jaf: are you still with innovative
2007-08-01T15:20:06 <njvack> jaf: There must be a University-wide
network use policy at OSU...? We'd probably need to follow that.
2007-08-01T15:20:07 <wtd> About the root question, OSU would have
root access, but just use it for adminning, and others would have
root as decided?
2007-08-01T15:20:07 <jrochkind> As long as it's clear that we will
not have constraints we do not want from OSU.
2007-08-01T15:20:15 <jaf> what I would recommend, putting my c4l
hat on, is that we set up policies that help us keep c4l.org secure
and up and running
2007-08-01T15:20:15 <gabe> helen_thomas++
2007-08-01T15:20:22 <jrochkind> jaf insists we will not. rsinger
is not entirely convinced.
2007-08-01T15:20:50 <jaf> eby: yes, we are still with innovative.
please don't hold it against us :-)
2007-08-01T15:21:11 <ksclarke> jaf: policies, heh, now see that's
why this will never work on anvil ;-)
2007-08-01T15:21:20 <jrochkind> To me, it's cost-benefit. I agree
with rsinger that is a risk of OSU attaching strings at a later
date. I think it's worth the risk, especially if we from the start
have a game plan as to what we'll do in that case (move the stuff
away if neccesary) and how (by setting up mirroring to make it
easy, etc.).
2007-08-01T15:21:20 <rordway> the only time that OSU would have to
step in is if something within the site were violating the
university AUP, which the only time that would happen I would
imagine would be if the system were somehow compromised and was
hosting pr0n or warez
2007-08-01T15:21:24 <jaf> njvack: I don't have any such policy
immediately handy, but as I've stated, there is precident here at
OSU for hosting these types of sites
2007-08-01T15:21:30 <gabe> oops, sorry for the interruption -- /me
reads scrollback
2007-08-01T15:21:40 <ksclarke> I'm for using osu as production as
long as we aren't tied in in anyway and can always do what we want
in the future
2007-08-01T15:21:59 <jaf> ksclarke: yes, I think that's key. There
is an exit policy if folks aren't happy with us hosting the site
2007-08-01T15:22:02 <rordway> and the way that is usually handled
is usually fairly informal. NET contacts Library Technology (me and
others), and we remove the offending content
2007-08-01T15:22:10 <jrochkind> rordway: Or cataloging records
that some Big Library claims are their IP? Same as warez to the
university lawyers. But I say, okay, so we put THOSE on anvil not
at OSU.
2007-08-01T15:22:26 <ksclarke> and as jrochkind says we have the
redundant servers in place to make that easy
2007-08-01T15:22:31 <rsinger> hrm
2007-08-01T15:22:32 <rordway> right
2007-08-01T15:22:45 <wtd> +1 from me too, "as long as we aren't
tied in any way and can always do what we want," as ksclarke put it.
2007-08-01T15:22:46 <jaf> So, I think the key here is that as long
as we keep the agreement with OSU informal, we have a lot of
flexibility and can make this work easily
2007-08-01T15:22:48 <rsinger> rordway: but who decides 'offending
content'?
2007-08-01T15:23:13 <wtd> What jaf and rordway sketch out sounds
appealing.
2007-08-01T15:23:16 <jrochkind> jaf: As long as you are still at
OSU, anyway, I think the risk is low. But you won't be there forever.
2007-08-01T15:23:19 <eby> rsinger: innovative calling their director?
2007-08-01T15:23:27 <rsinger> eby: that's what i'm getting at
2007-08-01T15:23:33 <jaf> jrochkind: is anything forever? ;-)
2007-08-01T15:23:53 <jrochkind> Despite what jaf and rordway say,
I think we should realize there is indeed some risk of University
Lawyers. I just think it's worth it, especially if we have a game
plan for dealing with it.
2007-08-01T15:23:55 *** Cicer0 has joined #code4lib
2007-08-01T15:23:58 * rordway is looking for the AUP
2007-08-01T15:24:04 <jaf> so, trust me on this, III has no
influence on what we say or do
2007-08-01T15:24:04 <rsinger> my point is that 'threat of
litigation' is generally enough to make university lawyers buckle
2007-08-01T15:24:16 <jaf> I mean, has anyone seen any of reeset's
presentations? ;-)
2007-08-01T15:24:22 <jrochkind> The university lawyers are
unlikely to object to journal.code4lib.org, or with code4lib
conference info. Those are the kinds of things we want more
confident uptime for.
2007-08-01T15:24:42 <jrochkind> For things that are risky, you can
keep hosting them on your own server---still with a *.code4lib.org
domain name even (just not www.).
2007-08-01T15:25:06 * mjgiarlo wonders if chat logs are risky :)
2007-08-01T15:25:10 <wtd> Wouldn't take long to swing over to
another box hosted elsewhere, in the worst case.
2007-08-01T15:25:11 <rsinger> mjgiarlo: YES
2007-08-01T15:25:12 <rordway> http://oregonstate.edu/aup.htm
2007-08-01T15:25:17 <njvack> Aha: http://oregonstate.edu/aup.htm
2007-08-01T15:25:18 <jaf> So, let me just repeat: I have no
worries about the content we put on c4l.org being censered
2007-08-01T15:25:19 <rsinger> that's what i'm getting at
2007-08-01T15:25:22 <eby> jrochkind: i could see some journal
articles that could cause some heckles with vendors
2007-08-01T15:25:34 <mjgiarlo> ! oh hai, III is teh sux0r. DOH!
2007-08-01T15:25:39 <jrochkind> eby: I suppose it's possible.
Violationg of NDA or whatever.
2007-08-01T15:25:56 <wtd> That's up to the journal to deal with.
2007-08-01T15:26:01 <jrochkind> eby: If the University wouldn't
stand up for it, we'd move the journal elsewhere. And get lots of
publicity ensuring that the journal's readership would double, in
the process. :)
2007-08-01T15:26:10 <jbrinley> jrochkind++
2007-08-01T15:26:15 <jaf> and I have total confidence in the folks
here working with the community to deal with any issues that crop up
2007-08-01T15:26:25 <jaf> if that means at some point moving to
another hosting site, that's fine
2007-08-01T15:26:34 <bradl> I know folks don't seem to like the
idea, but to me, I would think code4lib should form a non-profit
corp, and host the server where-ever it damn well pleases, with
money it makes from donations and the annual conference... just my
opinion
2007-08-01T15:26:51 <JodiS> bradl: +1
2007-08-01T15:26:57 <jaf> bradl: that would be fine
2007-08-01T15:27:01 <jaf> but we need the site back up
2007-08-01T15:27:02 <eby> bradl: i think many were for that idea,
none for the paper work
2007-08-01T15:27:05 <mjgiarlo> rsinger: yeah, maybe chat logs go
elsewhere. (wherever that crappy dilletantes thing goes)
2007-08-01T15:27:06 <jrochkind> bradl: Nobody wants to do the work
of sysadmining it in a way that will give us some uptime
confidence. I mean, that's basically the current situation, what
you just outlined.
2007-08-01T15:27:07 * jbrinley wonders if c4lj should sell ad space
2007-08-01T15:27:12 <jaf> or there will be no conference, becuase
no one will no about it
2007-08-01T15:27:16 <rordway> as long as we're not hosting
anything *illegal*, at least by Oregon law, or selling viagra,
we're good by the AUP
2007-08-01T15:27:20 <jdatema> seems to me ibiblio may also be a
natural home--only policy I know about is that content has to be
non-profit
2007-08-01T15:27:20 <dbs> jbrinley--
2007-08-01T15:27:22 <jrochkind> bradl: Money for hardware/
bandwidth isn't the issue. We are not lacking in that already.
2007-08-01T15:27:42 <bradl> jrochkind: I don't think we're lacking
in sysadmins around here, either...
2007-08-01T15:27:54 <jaf> so, can we take a straw vote right now?
2007-08-01T15:28:01 <bradl> I run around 90 servers. I can commit
to admin'ing 1 more
2007-08-01T15:28:02 <ksclarke> jdatema: but there has to be a
nonprofit to sign the papers right?
2007-08-01T15:28:06 <jrochkind> bradl: Are you volunteering to
sysadmin a code4lib server in such a way that we will have as much
uptime confidence as we would at OSU?
2007-08-01T15:28:08 <dbs> Sorry: jbrinley++ but c4lj_adspace--
2007-08-01T15:28:14 <jbrinley> :-)
2007-08-01T15:28:22 <jrochkind> Cause if you are, that's certainly
worth considering.
2007-08-01T15:28:25 *** got_a_bean_out is now known as got_a_bean
2007-08-01T15:28:33 <jaf> I propose a straw vote for/against
currently hosting *.code4lib.org at OSU, understanding that the c4l
community can at any time decide to move the site elsewhere
2007-08-01T15:28:43 <jdatema> ksclarke: good question—know
librarian.net is hosted there, but it's one person, etc. (you
thinking 403(b)?)
2007-08-01T15:28:44 <mjgiarlo> +1 to moving ahead on a vote
2007-08-01T15:28:45 <jaf> sites, that is
2007-08-01T15:28:47 <rsinger> dbs: what would be so bad about
adspace?
2007-08-01T15:28:48 <bradl> jrochkind: I think OSU's solution is
fine... I always prefer someone else do the work :)
2007-08-01T15:28:52 <wtd> +1
2007-08-01T15:28:53 <bradl> jaf++
2007-08-01T15:28:55 <jrochkind> bradl: My sentiments exactly.
2007-08-01T15:29:02 <njvack> jaf++
2007-08-01T15:29:08 <jrochkind> +1
2007-08-01T15:29:08 <rsinger> for the record, i am in agreement
with all this
2007-08-01T15:29:13 <ksclarke> jdatema: princeton would have given
us space but there had to be a real non-profit that could sign
2007-08-01T15:29:16 <jbrinley> +1
2007-08-01T15:29:22 <rsinger> i would just like to see something
in writing
2007-08-01T15:29:23 <ksclarke> 403b
2007-08-01T15:29:38 <jrochkind> I agree with rsinger that we
should be cognizant that University Lawyer Trouble IS a risk. Let
the record show. If it happens, we will take appropriate counter-
measures.
2007-08-01T15:29:39 <bradl> I think the longer-term solution is a
non-profit, though
2007-08-01T15:29:45 <dbs> +1 (osu hosts php.net servers, IIRC, and
lord knows _their_ code is offensive!)
2007-08-01T15:29:46 <jaf> so, let's pause the conversation for the
straw-vote:
2007-08-01T15:29:48 <jdatema> paul [EMAIL PROTECTED] (and simon spero
for backchannel information) could answer the non-profit question--
I'm not sure
2007-08-01T15:29:49 <jaf> +1 or -1, people
2007-08-01T15:29:55 * miker_ is a wonder twin and takes the form
of new york, circa 1776
2007-08-01T15:29:55 <jbrinley> ksclarke: why are we talking about
variable annuities?
2007-08-01T15:30:01 <rordway> dbs: sadly
2007-08-01T15:30:15 <njvack> +1
2007-08-01T15:30:17 <wickr> +1
2007-08-01T15:30:32 <mjgiarlo> that's six +1s in favor of a vote
2007-08-01T15:30:32 <jbrinley> +1
2007-08-01T15:30:34 <rsinger> +1
2007-08-01T15:30:38 <ksclarke> bradl: this is a good question I think
2007-08-01T15:30:39 <bradl> +1
2007-08-01T15:30:42 <rordway> +1
2007-08-01T15:30:53 <ksclarke> if we're formal enough for a prod
machine are we for a nonprofit
2007-08-01T15:30:57 <ksclarke> but yes +1
2007-08-01T15:31:06 <Cicer0> +1
2007-08-01T15:31:10 <bradl> ksclarke: I don't think the paperwork
is as scary as some think :)
2007-08-01T15:31:12 <jaf> ksclarke: we may be, but that's another
discussion :-)
2007-08-01T15:31:15 <dbs> +1
2007-08-01T15:31:16 <got_a_bean> pardon me, but OSU as in...?
2007-08-01T15:31:23 <rordway> Oregon State University
2007-08-01T15:31:23 <jbrinley> got_a_bean: Oregon
2007-08-01T15:31:29 <got_a_bean> o.k.
2007-08-01T15:31:30 <rordway> not Ohio
2007-08-01T15:31:32 <got_a_bean> +1
2007-08-01T15:31:32 <rordway> :-)
2007-08-01T15:31:41 *** tholbroo has joined #code4lib
2007-08-01T15:31:44 <ksclarke> if it had been ohio -1 ;-)
2007-08-01T15:31:48 <miker_> yeah, as long as it's not /Ohio/,
then +1
2007-08-01T15:31:49 <mjgiarlo> ksclarke++
2007-08-01T15:31:52 * bradl chuckles
2007-08-01T15:31:52 <zoia> bradl: true, true
2007-08-01T15:31:54 <rordway> haha
2007-08-01T15:31:57 <miker_> bah ... beat me to it
2007-08-01T15:32:06 <wtd> So that's all votes in favour, I think.
2007-08-01T15:32:06 <jaf> ok, so it's seemingly a concensus
2007-08-01T15:32:11 <jbrinley> so is anyone actually opposed at
this point?
2007-08-01T15:32:15 <jaf> but just to do a last check-in, any
objectors?
2007-08-01T15:32:26 <bradl> we want a shrubbery
2007-08-01T15:32:32 <jdatema> is libraryfind a company?
2007-08-01T15:32:37 <njvack> FWIW, I have a friend who recently
set up a nonprofit, and it's certainly do-able.
2007-08-01T15:32:38 <jaf> jdatema: nope
2007-08-01T15:32:45 <rordway> does anyone have any questions for
me? or can I mosey?
2007-08-01T15:32:47 <wtd> So what happens next?
2007-08-01T15:32:54 <wtd> rordway: Thanks.
2007-08-01T15:32:55 <jaf> rordway: one sec on that
2007-08-01T15:32:58 <rordway> k
2007-08-01T15:32:58 <jbrinley> njvack: setting it up is doable.
Maintaining the accounting is less desirable.
2007-08-01T15:33:00 <wickr> was there a consensus on where chat
logs go?
2007-08-01T15:33:03 <mjgiarlo> we just voted on having a vote,
correct, not on moving forward with OSU?
2007-08-01T15:33:04 <rsinger> rordway: one question
2007-08-01T15:33:16 <jrochkind> ksclarke: These days it costs $800
in filing fees for 501-c-3, sadly. It's gone up a lot in the past 5
years.
2007-08-01T15:33:18 <jdatema> jaf: thanks
2007-08-01T15:33:23 <jaf> mjgiarlo: no, we were voting on moving
forward with OSU
2007-08-01T15:33:26 <njvack> jbrinley: True... but our books can't
be too very complex.
2007-08-01T15:33:30 <jrochkind> The paperwork is a pain in the
ass, but do-able.
2007-08-01T15:33:33 <rsinger> rordway: this will live on a xen vm,
right?
2007-08-01T15:33:42 <rordway> rsinger: that's my current plan, yes
2007-08-01T15:33:47 <mjgiarlo> jaf: oh. +1 then.
2007-08-01T15:34:02 <jaf> so, the next step would be for ordway
and ksclarke to work out a migration plan?
2007-08-01T15:34:07 <rsinger> rordway: would the plan be that
code4lib.org (the thing we replicate elsewhere) will the be
entirety of that vm?
2007-08-01T15:34:15 <ksclarke> jaf: well edsu has the backups
2007-08-01T15:34:26 <rordway> if for some reason I decide against
a xen VM, it will be a dedicated system
2007-08-01T15:34:28 <ksclarke> I'm going to take out the old anvil
drive once I get access to the machine
2007-08-01T15:34:32 <jrochkind> Then there's probably no reason
that non-OSU code4libbers couldn't have root to the VM machine, yes?
2007-08-01T15:34:34 <ksclarke> but his should be good
2007-08-01T15:34:35 <rsinger> rordway: i.e., can we just make a
snapshot of that vm and put it on anvil (or whereever)?
2007-08-01T15:34:40 <jaf> ksclarke: ok, then rordway, ksclarke,
edsu would start talking about the migration plan
2007-08-01T15:34:44 <miker_> migration plan: 1) scp tarball to osu
2) untar
2007-08-01T15:34:45 <jrochkind> rsinger++
2007-08-01T15:34:46 <miker_> ;)
2007-08-01T15:34:57 <ksclarke> miker++
2007-08-01T15:34:59 <jrochkind> I like a nightly snapshot of that
vm backed up to non-OSU location.
2007-08-01T15:35:23 <miker_> rsinger: if it's a xen vm we can
migrate it to other xen servers at will :)
2007-08-01T15:35:25 <rordway> jrochkind: sudo would probably be
easiest, but yes
2007-08-01T15:35:26 <rsinger> of course, that assumes it's a
dedicated vm
2007-08-01T15:35:34 <jrochkind> [Our new sysadmin (hooray!) plans
to make a lot of use of VMs like that here. I love having a new
sysadmin!]
2007-08-01T15:35:44 <ksclarke> rsinger: should we do xen on the
new anvil?
2007-08-01T15:35:45 * miker_ installs xen HV on his home box
2007-08-01T15:36:05 <wickr> does anyone know if some specific
software was the culprit? do things need to be updated? or if they
are just moved straight over will we have cracking issues again?
2007-08-01T15:36:11 <jrochkind> Ah, I see in the scrollback that
dedicated system is not assured. That would certainly be preferable
to meet the concerns that were raised.
2007-08-01T15:36:17 <jrochkind> With a dedicated VM, I think it's
be almost perfect.
2007-08-01T15:36:21 * ksclarke wonders if ubuntu server does xen
2007-08-01T15:36:24 <rsinger> ksclarke: well, i don't really know
one way or the other -- but a vm would be an easy way to share the
'host'
2007-08-01T15:36:34 <rsinger> ksclarke: yeah, xen is in apt
2007-08-01T15:36:42 <jaf> ok, how about this as an approach:
2007-08-01T15:36:54 <miker_> ksclarke: I think it does
2007-08-01T15:37:24 <ksclarke> hmm
2007-08-01T15:37:36 <rsinger> also, i don't see any reason why the
logs and whatnot can't just stay on anvil
2007-08-01T15:37:43 <wtd> Does anyone have dates in mind for when
the server would be back up, when content could get loaded up?
2007-08-01T15:37:56 <mjgiarlo> logs_on_anvil++
2007-08-01T15:38:19 <ksclarke> wtd: I'm being scheduled for
getting my access pass so hopefully this week
2007-08-01T15:38:21 <jrochkind> If there's anything that someone
has a strong preference to keep on anvil, and the anvil owners get
it back up and allow it, I don't see any reason not to.
2007-08-01T15:38:37 <jrochkind> Unless there are others involved
who have a strong preference the other way, and then they've got to
duke it out.
2007-08-01T15:38:37 <ksclarke> but edsu has the logs so c4l could
go up anytime they're transferred to osu
2007-08-01T15:38:48 <rordway> how about jaf and I work with
ksclarke and edsu on a proposal, once that's ready we can float it
by the group as a whole?
2007-08-01T15:38:50 <ksclarke> s/logs/c4l backups/
2007-08-01T15:39:00 <wtd> Sounds great, rordway.
2007-08-01T15:39:02 <mjgiarlo> rordway++
2007-08-01T15:39:05 <ksclarke> sounds good
2007-08-01T15:39:06 <jrochkind> rordway++
2007-08-01T15:39:08 <jaf> rordway++
2007-08-01T15:39:24 <rsinger> yeah, i like that
2007-08-01T15:39:38 <wtd> I'll put a little update onto the planet
to assuage people's anxieties.
2007-08-01T15:39:40 <rordway> and FYI, this system would be backed
up nightly
2007-08-01T15:39:49 <jaf> ok, so, maybe to sum up the decision
points on this discussion:
2007-08-01T15:39:52 <mjgiarlo> wtd++ :)
2007-08-01T15:40:10 <rordway> monthly fulls, nightly incrementals
2007-08-01T15:40:14 <jaf> 1) General agreement that we will go
ahead withan approach for OSU hosting the *.c4l.org site
2007-08-01T15:40:15 <jrochkind> rordway: The 'backups' I was
talking to actually were 'in case of University Lawyer Trouble'. To
assuage the paranoid that with a flip of a switch we could put the
whole site up on a non-OSU machine, were it ever neccesary.
2007-08-01T15:40:27 <ksclarke> wtd: i see in my inbox I pick up my
pass tom. so anvil should be up tom. after that
2007-08-01T15:40:45 <jaf> 2) rordway will take the lead in working
with edsu, myself, and ksclarke on the actual details of a proposal
for moving forward with said hosting
2007-08-01T15:40:48 <rordway> jrochkind: for those purposes, we
could also do a periodic dump to someplace outside of OSU
2007-08-01T15:40:54 <jrochkind> rordway++
2007-08-01T15:41:04 <jaf> 3) proposal will be then floated to the
c4l community via the discussion list
2007-08-01T15:41:15 <dbs> jrochkind: Get a Canadian to host a copy
of the backup. Lots of copies keep things safe (from disaster, and
from fickle federal laws).
2007-08-01T15:41:25 <njvack> BTW, do we know what attack vector
the crackers used?
2007-08-01T15:41:31 <jrochkind> dbs: Canadian, pah. I'm going to
get an Iraqi to do it. Wait a second, nevermind.
2007-08-01T15:41:57 <rordway> a remote hot-site on Mars?
2007-08-01T15:41:57 <ksclarke> njvack: no
2007-08-01T15:42:13 <gabe> ksclarke: wasn't it drupal?
2007-08-01T15:42:14 <rordway> is that inter-planetary network up
and running yet?
2007-08-01T15:42:28 * dbs suspects it was edsu's weak username /
password combo of "edsu" / "edsu"
2007-08-01T15:42:37 * ksclarke chuckles
2007-08-01T15:42:37 <zoia> ksclarke: true, true
2007-08-01T15:42:46 <rordway> haha
2007-08-01T15:42:50 <ksclarke> gabe, I don't think anyone has
really done any real investigating
2007-08-01T15:42:54 <njvack> I ask, as I've found things like
Drupal and Wordpress to be much bigger targets than OS vulnerabilities
2007-08-01T15:43:13 <ksclarke> wp or drupal would be my random off
the cuff guess though
2007-08-01T15:43:18 *** lbjay has joined #code4lib
2007-08-01T15:43:21 <gabe> njvack: edsu seemed to think it was drupal
2007-08-01T15:43:24 <wickr> that's why I was wondering if
something needs to be updated/patched before it's put back up
elsewhere
2007-08-01T15:43:32 <rsinger> edsu was speculating
2007-08-01T15:43:52 <njvack> And if it was Drupal that got
hacked... is OSU gonna be keeping *that* patched, or just the Xen
client?
2007-08-01T15:44:11 <rordway> I'd probably import the data into a
fresh install of the latest drupal
2007-08-01T15:44:26 <jaf> njvack: these are the kind of details, I
think, that will be put into the proposed proposal
2007-08-01T15:44:40 <wickr> rordway: that may or may not go
smoothly, def. worth a try though
2007-08-01T15:44:41 <rordway> njvack: jaf will do it
2007-08-01T15:45:03 <rsinger> does osu already have drupal
installations?
2007-08-01T15:45:13 <jaf> rsinger: yeppers
2007-08-01T15:45:14 <rsinger> or should we consider migrating to
another platform?
2007-08-01T15:45:15 <rsinger> ah
2007-08-01T15:45:57 <gabe> +1 on the vote, btw
2007-08-01T15:45:58 <rordway> we're most likely moving the
library.o.e site to drupal, someday
2007-08-01T15:46:08 * gabe showed up late and got stuck in scrollback
2007-08-01T15:46:17 <rordway> and OSL runs drupal, as do some
other groups on campus
2007-08-01T15:46:20 <ksclarke> migrate!
2007-08-01T15:46:26 <jrochkind> To what?
2007-08-01T15:46:39 <ksclarke> abd
2007-08-01T15:46:39 <rordway> cold fusion!
2007-08-01T15:46:46 <ksclarke> :-)
2007-08-01T15:46:47 <rordway> whee!
2007-08-01T15:46:56 <ksclarke> well, and cold fusion
2007-08-01T15:47:10 <rordway> maybe even warm fusion
2007-08-01T15:47:32 <rsinger> cocoon
2007-08-01T15:47:45 <jaf> gopher
2007-08-01T15:47:53 <rsinger> gopher on rails
2007-08-01T15:48:04 <mjgiarlo> OSU++
2007-08-01T15:48:04 * jaf smacks rsinger
2007-08-01T15:48:14 <rordway> gopher on meth
2007-08-01T15:48:20 * njvack smacks rordway
2007-08-01T15:48:30 <rordway> it's high performance!
2007-08-01T15:48:35 <njvack> :)
2007-08-01T15:48:45 <rsinger> so, we're done?
2007-08-01T15:48:46 <gabe> if we wanted gopher we'd host at UofM
2007-08-01T15:49:26 <jaf> rsinger: i believe so, unless there are
any objections?
2007-08-01T15:49:39 <rordway> I object to gopher
2007-08-01T15:49:57 <rordway> and the 40 hour work week
2007-08-01T15:50:01 <gabe> more pointed objections can be raised
on the list
2007-08-01T15:50:04 <rordway> but I'm ok with everything else
2007-08-01T15:50:16 <gabe> re: the proposal
2007-08-01T15:50:21 <jaf> rordway: we can negotiate on the 40-hour
work week, I'll start at 80 :-)
2007-08-01T15:50:30 <jaf> gabe++
2007-08-01T15:50:34 <wtd> Well, good discussion.
2007-08-01T15:50:41 <rordway> maybe if I get paid for 80
2007-08-01T15:50:57 <jaf> rordway: hmmm, maybe in barbeque
2007-08-01T15:51:05 *** wtd has left #code4lib
2007-08-01T15:51:28 <rordway> I'd settle for some PC2700 DDR for
my Sun Blade 1500
2007-08-01T15:51:53 <jaf> ok, I need to eat. Later folks
2007-08-01T15:51:56 *** jaf is now known as jaf_lunch
2007-08-01T15:51:57 <rordway> me too
2007-08-01T15:52:36 *** mjgiarlo changes topic to "gopher! (Was:
discussion on hosting code4lib.org)"