Sysadmin ToDo and Projects list
In progress
Planned
Important items
Wishlist
- Gerrit istance.
- Set up all the relevant websites hooks using fishpoll. (dropping set_buildflag.py / update_sites.py)
Remove shells from master.gnome.org. (https://mail.gnome.org/archives/release-team/2013-April/msg00038.html)
Done
- Mail server migration from menubar to a newer VM. Make the needed configurations in Puppet to include amavis, clamav, spamd.
Upgrade live.g.o to latest MoinMoin. (1.9.6)
- Set up a Services bot on GIMPNET to act as a Nickserv, Chanserv.
- Move our DNS configuration into Puppet
- Migrating our main NFS node from container to a newer machine.
- Retire old machines:
- container
- menubar
- button
- label
- window
- fixed
- Clean nagios a bit and put the relevant data on Puppet.
- Move all Mysql databases to one single server.
- Move all admin stuff into admin.g.o.
- Configure SSL on all the relevant services.
- Migrate LDAP to clipboard and create a slave.
- Increase monitoring on the hosted machines, especially for SSL certificates and relevant services. Set up a public view for Nagios.
- Update per-server documentation and make a map of the hosted services.
- Setup and configure Owncloud
- Set up the KGB bot for Git commits.
- Puppetize Ubuntu-based machines.
- Check each machine and clean the useless services to prevent leaving unmaintained software around. Apache standardization on every machine.
- Move cgit's css files to be a fishpoll's hook
- Clean puppet modules and rebuild some of the broken modules.
- CiviCRM setup
live.gnome.org's tuning and cleanup (https://mail.gnome.org/archives/infrastructure-announce/2013-May/msg00000.html)
- Upgrade all machines to RHEL6. (just combobox, vbox and drawable are currently missing, hardly we'll be upgrading them though)
- Set up a haproxy istance for separating frontend and backend machines. We can finally bind a wildcard SSL certificate to the istance without incurring in any security issue.
- Check for a central syslog facility.
- Set up a Bastion host for centralized SSH access and VPN.
- Customized MOTD on all the machines.
GitHub mirror.
- Set up a mysqld's replica on expander that replicates all the data from our main MySQL host, drawable.
- Make sure all the machines at PHX2 do have configured mgmt cards.
- Make sure all the machines at PHX2 do have configured PDU's.
- Move Bugzilla to a new VM and upgrade it.
- Ping all the gnome*.* (and related projects) domain owners and have all the domains transferred to the GNOME Foundation. (gnomehispano.{org,es}, guadec.es, gimp.{org,net}, gtk.org and gegl.org have been transferred)