Hi, I did a number of changes over the past few weeks, and documented it in ChangeLog at petzi. I also setup 'diffmon' to send the diffs, but just realized they were sent to [email protected], which probably few people read. I reconfigured it to [email protected]. Below you'll find the recent changes.
To sum up:
- removed a lot of old/obsolete stuff,
- trimmed system to the minimum
(in term of services, by contrast you have Emacs everywhere ;)),
- merged arch/download/homepage
- moved Subversion to the 2nd RAID array to balance the I/O load,
- removed jobs from 'bart' and 'lisa' so that VMs can become
independent and can be moved to VServer (TODO: cvs),
- moved 'members' to VServer
- upgrade some apache v1 to apache v2
Next step is upgrading every system to Lenny. Note: while the above
required in-depth knowledge of the platform so as not to break
everything, I think other people can help with upgrading Debian.
We should look for more man-power - do you know who/where we could ask?
2010-03-13 Beuc
* Removed references to lists probeexplorer-users, jest-main and
hardbrown-commits in the DB (lists were removed and
sv_mailman_and_mailarchivedotcom complains).
* Moved gna-subversion from vg-raid1 to vg-raid2 in the hope that
the two RAID arrays will get a more equal share of the I/O
load (Munin that they currently don't).
* Moved 'members' chroot'd subsystem to 'gna-members' VServer; fix
passwd/group replication cron job; fix /home read-only bind-mounts
in cvs, download and gna-subversion.
* Cleaned-up very old dumps in 'db' some more, I missed some last
time (54G->32G)
* Move webalizer from bart to www and fix it (after only 3 years
of downtime :p)
2010-03-12 Beuc
* Merge arch and download to homepage. Rename arch->arch.old,
download->download.old, and homepage->download. Move Lisa's
webalizer to new 'download' (a.k.a. stop using chroots in
homepage-webalizer.pl).
2010-03-11 Beuc
* homepage: switched from apache1 to apache2
2010-03-10 Beuc
* Planning to merge arch, download and homepage (same basic http
publishing and generic sftp access); probably going to use
'homepage' as destination, as it looks it's the most complex one.
* download: moved logs to /var/log/apache2/download; updated
/var/log/apache symlink for lisa's stats; created separate
/etc/apache2/sites-available/download configuration file with
appropriate ServerAlias directives.
* arch: moved logs to /var/log/apache2/arch, moved /var/depot to
/srv/arch; removed /upload, /var/www, /var/ftp symlinks so we
don't clash with 'download' after the merge (and there were only 1
active sftp Arch user over last week, so this won't be a problem);
created separate /etc/apache2/sites-available/arch configuration
file with appropriate ServerAlias directives; updated CookBook
documentation; updated backup configuration on maggie; updated
/usr/local/bin/baksh.pl.
* ns10.fsffrance.org: put TTL to 60s, so we can change IP
addresses immediately when we merge servers. Will be effective
worldwide in 24h.
* homepage: installed munin-node; removed /var/www.old (from last
November); removed /var/www-mrtg (very old graphs that were not
accessible); same with /var/www-webalizer.
* lisa: removed pdbv (web-based view of dpkg database - still
updated but not published for a long time, and the Debian package
was removed in Squeeze); same with fwlogwatch
2010-03-04 Beuc
* Cleaned-up cvs' in prevision of upcoming upgrade to Lenny (done
with cleaning-up now).
2010-03-03 Beuc
* Re-add 'sshd' user in 'members' - as its /etc/passwd is
replicated to other chroots/vservers. It was removed yesterday
along with the 'openssh-server' package.
2010-03-02 Beuc
* Cleaned-up 'members' in prevision of upcoming upgrade to Lenny.
* Removed some very old dumps in /vservers/bart/chroot/db/dumps.l
* Installed munin-node on bart
2010-03-02 Vincent Caron
* /etc/ssmtp/ssmtp.conf: mailhub=smtp-out.bearstech.lan
2010-02-26 Beuc
* Cleaned-up 'download' in prevision of upcoming upgrade to Lenny,
and switched from apache to apache2. Sadly I just realised that
purging apache apparently also purge the logs...
Warning: 'lisa' is still responsible for computing webalizer
stats.
* Re-enabled permissions fixing in 'download', this will stop the
errors we get in the backup cron (among other niceties).
* Removed old copies of 'mail' and 'subversion' (back from before
the move to VServer in 9/10-20009)
* Removed what remained of 'ns9'
2010-02-25 Beuc
* Cleaned-up 'db' and 'www' in prevision of upcoming upgrade to
Lenny. 'homepage' was also already clean.
Warning: 'www' is still relying on PHP4, I don't think Savane was
tested with PHP5 (Savannah uses an improved version tested with
PHP5, but not Gna!).
* Installed libc6-i686 everywhere for performance.
* Reopened access port from Maggie to Petzi (line was commented
out in shorewall??)
2010-02-24 Beuc
* Cleaned-up 'arch', in prevision of upcoming upgrade to Lenny
* Switched from apache to apache2 for 'arch'
2010-02-19 Beuc
* Cleaned-up gna-mail and gna-subversion (debfoster), in prevision
of upcoming upgrade to Lenny
2010-02-16 Beuc
* Debian security updates
2010-02-08 Beuc
* APT upgrades (included updated kernel) + reboot
* Ran arpspoof for .77 (arch) and .78 (cvs), some devices
apparently still use the old MACs and this causes troubles.
2010-02-08 Vincent Caron
* Suppressions des regles concernant les IPs du subnet
78.40.121/24 (qui n'est plus routable depuis 2 mois)
* Echange des interfaces eth0/eth1 au niveau assignation: eth1
reste l'interface publique mais elle a change de MAC
2010-01-20 Beuc
* Removed lock for homepage replication (apparently something went
wrong when svn was not available). We need to check why there's
no mail notification when there's such an error.
* www-data mails got to postmaster, which is a Mailman list that
nobody reads. I added a MAILTO to the homepage cron job so that
such mails for to [email protected].
[...]
--
Sylvain
signature.asc
Description: Digital signature
_______________________________________________ Project mailing list [email protected] https://mail.gna.org/listinfo/project
