Difference between revisions of "Sysadmin"

From Earlham CS Department
Jump to navigation Jump to search
(Sysadmin basic Training)
 
(670 intermediate revisions by 22 users not shown)
Line 1: Line 1:
__NOTOC__
+
This is the hub for the CS sysadmins on the wiki.
  
== Sysadmin Responsibilities ==
+
= Overview =
This is the basic list of tasks that Earlham CS system administrators are in charge of.
 
  
{| class="wikitable"
+
[https://docs.google.com/drawings/d/1XaULz5IxXV_BZQjrko3QJ8wV5aXsSTYcSWxxT49OyZk/edit If you're visually inclined, we have a colorful and easy-to-edit map of our servers here!]
|-
 
! Responsibilities !! Ben !! Collin !! Jordan !! Garrett
 
|-
 
| Install software on Debian (ACL) || ||  ||  ||
 
|-
 
| Install software on FreeBSD (servers) || ||  ||  ||
 
|-
 
| Make a CS user account || ||  ||  ||
 
|-
 
| Change users CS password || ||  ||  ||
 
|-
 
| Add DNS & DHCP entry || ||  || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> ||
 
|-
 
| Being able to edit wiki || ||  ||  ||
 
|-
 
| Make a CS wiki account || ||  ||  ||
 
|-
 
| Add people to different groups (ldap) || ||  ||  ||
 
|-
 
| Modification and maintenance of Nagios || ||  || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> ||
 
|-
 
| DD a new ACL image || ||  ||  ||
 
|-
 
| Set up a new ACL || ||  ||  ||
 
|-
 
| Shut down / start up of the entire machine room || ||  ||  ||
 
|-
 
| Creating and configuring mailing lists (electron) || ||  ||  ||
 
|-
 
| Admin list moderating || ||  ||  ||
 
|-
 
| Backups and restore (bacula) || ||  ||  ||
 
|-
 
| Create and configure jails || ||  || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> ||
 
|}
 
  
 +
== Server room ==
  
 +
Our servers are in Noyes, the science building that predates the CST. For general information about the server room and how to use it, check out [[Sysadmin:Server Room|this page]].
  
== Sysadmin basic Training ==
+
Columns: machine name, IPs, type (virtual, metal), purpose, dies, cores, RAM
This is the list of skills that our System Administrators are trained during their orientation.
 
  
{| class="wikitable"
+
== Compute Resources ==
|-
 
! Training Sections !! Ben !! Collin !! Jordan !! Garrett
 
|-
 
| | ||  ||  ||
 
|-
 
| Installing operating systems (Debian and FreeBSD), including single-user mode || ||  ||  ||
 
|-
 
| Installing packages || ||  ||  ||
 
|-
 
| *nix Filesystem layout ||  ||  ||
 
|-
 
| Command line tools including I/O redirections and pipes ||  ||  ||
 
|-
 
| TCP,  UDP and ICMP packets, including 3-way handshake || ||  ||  ||
 
|-
 
| Ports ||  ||  ||
 
|-
 
| DNS || ||  ||  ||
 
|-
 
| DHCP || ||  ||  ||
 
|-
 
| Network debugging tools (tcpdump, ping, traceroute, netstat) || ||  ||  ||
 
|-
 
| Simple shell scripting || ||  ||  ||
 
|}
 
  
== Sysadmin 2014 to do list: ==
+
[https://wiki.cs.earlham.edu/index.php/Sysadmin:Computer_Resources Machines and VMs related information here!]
  
* Installing X for Jim - XDM not gdm<br />
+
== Network ==
* Setting up an ACL machine in D128 for Galileo<br />
 
* Installing the rest of the ACL machinesin the ACl lab <br />
 
* John H. Windows software <br />
 
* CS user simpler password change<br />
 
* Sage<br />
 
* Getting rid of Quark <br />
 
* Hostname change on ACLs (4 places)<br />
 
* Removing mailman form quark <br />
 
* Mailman Heather (not all of them accepted the changes electron to cs.earlham.edu) <br />
 
  
== Systems Administration Documentation ==
+
We have two network fabrics linking the machines together. There are three subdomains.
  
{|
+
=== 10 Gb ===
|- valign="top"
 
|
 
<div style="border:10px solid #E3E0FA; padding:5px">
 
<div style="background-color:#D7D1F8; padding:5px;">
 
=== Works in Progress ===
 
</div>
 
  
* [[Sysadmin:todo13|To do before Fall 13 starts]]
+
We have 10Gb fabric to mount files over NFS. Machines with 10Gb support have an IP address in the class C range 10.10.10.0/24 and we want to add DNS to these addresses.
* [[Sysadmin:handbook|Handbook (WIP)]]
 
* [[Sysadmin:Temporary Page | Temporary Page for Wiki Adjustment]]
 
* [[Sysadmin: Upgrading FreeBSD | Upgrading FreeBSD]]
 
* [[Sysadmin:Fail2Ban on FreeBSD | Fail2Ban on FreeBSD]]
 
* [[Sysadmin:Running Nessus | Running Nessus]]
 
* [[Sysadmin:SrvcCheck|Things to check when things go down]]
 
* [[Sysadmin:AaronsHowTo| Aaron's How-To Pages]]
 
* [[Sysadmin:Sonresources| Son's "Cook" Pages]]
 
* [[Sysadmin:Installing ACLs]]
 
  
<!-- This has to stay as part of the formatting -->
+
=== 1 Gb (cluster, cs) ===
</div>
 
| style="width:50px;" |
 
|
 
<div style="border:10px solid #E0EAF8; padding:5px;">
 
<div style="background-color:#CEDEF4; padding:5px;">
 
  
=== Admin Tasks ===
+
We have two class C subnets on the 1Gb fabric: 159.28.22.0/24 (CS) and 159.28.23.0/24 (cluster). This means we have double the IP addresses on the 1Gb fabric that we have on the 10Gb fabric.
</div>
 
  
* [[Sysadmin: NEWAddComputer|NEW Add a computer]]
+
Any user accessing *.cluster.earlham.edu and *.cs.earlham.edu is making calls on a 1Gb network.
* [[Sysadmin:NEWStart/Shutdown|NEW Shutdown/Start]]
 
* [[Sysadmin:NEWMailman|NEW Mailman]]
 
* [[Sysadmin:NEWNagios|NEW Nagios]]
 
* [[Sysadmin:Backup|Backup]] (needs to be updated after new setup)
 
* [[Sysadmin:Contacting all users|Contacting all users]]
 
* [[Sysadmin:New Sysadmins|Welcoming a new sysadmin to the fold]]
 
* [[Sysadmin:RT Ticketing|RT Ticketing]]
 
* [[Sysadmin:AddComputer|Add a computer]]
 
  
 +
=== Intra-cluster fabrics ===
  
<!-- This has to stay as part of the formatting -->
+
The layout cluster has an Infiniband infrastructure. Wachowski has only a 1Gb infrastructure.
</div>
 
|}
 
  
 +
== Power ==
  
{|
+
We have a backup power supply, with batteries last upgraded in 2019 (?). We’ve had a few outages since then and power has held up well.
|- valign="top"
 
|
 
  
<div style="border:10px solid #FFDFFF; padding:5px;">
+
== HVAC ==
<div style="background-color:#FFCEFF; padding:5px;">
 
  
=== Services ===
+
HVAC systems are static and are largely managed by Facilities.
</div>
 
* [[Sysadmin:Services:Apache2|Apache2]]
 
* [[Sysadmin:Services:Databases|Databases]]
 
* [[Sysadmin:Services:DNS and DHCP|DNS and DHCP]]
 
* [[Sysadmin:Services:Email|Email]]
 
* [[Sysadmin:Services:SystemImager|System Imager]]
 
* [[Sysadmin:Services:LVM|LVM]]
 
* [[Sysadmin:positron|NFS]]
 
* [[Sysadmin:Services:Printers|Printers]]
 
* [[Sysadmin:Services:TracSVN|Trac + svn]]
 
* [[Sysadmin:User Management|User Management]]
 
* [[Sysadmin:Services:Virtualization | Virtualization]]
 
* [[Sysadmin:Services:ZFS | ZFS]]
 
  
<!-- This has to stay as part of the formatting -->
+
[[Topology|See full topology diagrams here.]]
</div>
 
| style="width:50px;" |
 
|
 
  
<div style="border:10px solid #DBF0F7; padding:5px;">
+
[[Sysadmin:Layers of abstraction for filesystems|A word about what's happening between files and the drives they live on.]]
<div style="background-color:#C9EAF3; padding:5px;">
 
  
=== Servers ===
+
= New sysadmins =
</div>
 
* [[Sysadmin:PhysicalServers | Physical Servers]]
 
* [[Sysadmin:VirtualServersAndJails | Virtual Servers and Jails]]
 
* [[Sysadmin:SvcChart|Service Chart]]
 
* [[Sysadmin:Monitoring|Monitoring]]
 
* [[Sysadmin:Quark | Quark]]
 
* [[Sysadmin:Forty-Two | Forty-two]]
 
* [[Sysadmin:Lovelace | Lovelace]]
 
* [[Sysadmin:Proto | Proto]]
 
* [[Sysadmin:RetiredServers | Retired Servers]]
 
  
<!-- This has to stay as part of the formatting -->
+
These pages will be helpful for you if you're just starting in the group:
</div>
 
| style="width:50px;" |
 
|
 
<div style="border:10px solid #FFFFC8; padding:5px;">
 
<div style="background-color:#FFFFB5; padding:5px;">
 
  
=== ACL Workstations ===
+
* [[Sysadmin:New Sysadmins | Welcoming a new sysadmin ]]
</div>
+
* [[Sysadmin:Troubleshooting|General troubleshooting tips for admins]]
* [[Sysadmin:ACL:Installation|ACL Installation procedure]]
+
* [[Sandbox Notes|Sandbox Notes]]
* [[Sysadmin:AclImage|ACL Package Information]]
+
* [[Password managers]]
* [[Sysadmin:Acl Locations|ACL Locations]]
+
* [[Server safety]]
* [[Sysadmin:Software for Chemistry ACLs|Software for Chemistry ACLs]]
+
* [https://code.cs.earlham.edu/sysadmin/ticket-tracker Ticket tracking for current projects]
* [[Sysadmin:ACL:UpProp|Proposed ACL Update policy]]
 
  
<!-- This has to stay as part of the formatting -->
+
Note: you'll need to log in with wiki credentials to see most Sysadmin pages.
</div>
 
|}
 
  
 +
= Additional information =
  
{|
+
These pages contain a lot of the most important information about our systems and how we operate.
|- valign="top"
 
|
 
<div style="border:10px solid #D6F8DE; padding:5px;">
 
<div style="background-color:#BDF4CB; padding:5px;">
 
=== Networking ===
 
</div>
 
* [[Sysadmin:Networking:NetworkLayout|Network Layout (as of 08/2006)]]
 
* [[Sysadmin:Networking:D224 cable plant|D224 cable plant]]
 
* [[Sysadmin:Networking:Fiber plans|Fiber plans]]
 
* [[Sysadmin:Networking:Switches|Switches]]
 
* [[Sysadmin:Networking:Rack notes|Rack notes]]
 
* [[Sysadmin:Networking:Public|Public Network]]
 
* [[Sysadmin:Networking:NetworkTopo|Old Network Topo Figures]]
 
* [[Sysadmin:Networking:NetworkDiagram|Network layout (May 2007)]]
 
* [[Sysadmin:Networking:Alternate Network Path|Alt Network path]]
 
* [[Sysadmin:UPS Setup]]
 
  
<!-- This has to stay as part of the formatting -->
+
===Handy Tools===
</div>
+
* [http://monitor.cluster.earlham.edu:8088/packages Porter's Package Explorer]
| style="width:50px;" |
 
|
 
<div style="border:10px solid #F0DDD5; padding:5px;">
 
<div style="background-color:#E4C0B1; padding:5px;">
 
  
=== Miscellaneous ===
+
===Technical docs===
</div>
 
* [[SysadminContactInfo|Contact Information]]
 
* [[Sysadmin:ImportantInfo:PhoneNumbers|Phone Numbers]]
 
* [[Sysadmin:ImportantInfo:WebSites|Web Sites]]
 
* [[Sysadmin:ImportantInfo:AuthenticationInfo|Authentication Information]]
 
* [[Sysadmin:ImportantInfo:PowerFailure|Power Failure]]
 
* [[Sysadmin:ImportantInfo:UPS|UPS]]
 
* [[Sysadmin:ImportantInfo:SSLcerts|Generating SSL Certificates]]
 
* [[Sysadmin:Power draws|Power draws]]
 
* [[Sysadmin:ImportantInfo:SunHardware|Working with Sun Hardware]]
 
* [[Sysadmin:Passwords]]
 
* Patching
 
** [[LinuxKernelPatching|Linux Kernel Patching]]
 
** [[FreeBSDKernelPatching|FreeBSD Kernel Patching]]
 
* [[Sysadmin:SerialConsoleCableEnds|Cable Ends]]
 
  
<!-- This has to stay as part of the formatting -->
+
* [https://code.cs.earlham.edu/sysadmin/ticket-tracker Ticket tracking for current projects]
</div>
+
* [[Server safety]]
|}
+
* [[Sysadmin:Backup|Backup]]
 +
* [[Sysadmin:Monitoring | Monitoring ]]
 +
* [[Sysadmin:SSH|SSH info relevant to admins]]
 +
* [[Sysadmin:User Management | User Management]] and [[Sysadmin:LDAP|LDAP]] generally
 +
* [[Sysadmin:Jupyterhub Notebook Server|Jupyterhub]] and [[Nbgrader notes|NBGrader]]
 +
* [[Sysadmin:MailStack|Email service]]
 +
* [[Sysadmin:XenDocs | Xen Server]]
 +
* [[Sysadmin:NFS|Network File System (NFS)]]
 +
* [[Sysadmin:Web Servers|Web Servers and Websites]]
 +
* [[Sysadmin:Services:Databases|Databases]]
 +
* [[Sysadmin:DNS & DHCP|DNS and DHCP]]
 +
* [[Sysadmin:AWS|AWS]]
 +
* [[Bash_start_up_script|Bash startup scripts]]
 +
* [[Sysadmin:VirtualBox | VirtualBox]]
 +
* [[X Applications]]
 +
* [[Sysadmin:Services:ClusterOverview|Cluster Overview]] and [[Sysadmin:Ccg-admin|additional details]]
 +
* [[Sysadmin:Firewall|Firewall]] running on babbage.cs.e.e
 +
* [[Sysadmin:Setting_up_Lovelace_Lab_Machines|Setting up Lab Machines]]
  
 +
===Common tasks===
 +
* [[Sysadmin:Recurring Tasks | Recurring tasks - e.g. software updates, hardware replacements]]
 +
* [[Sysadmin:Contacting all users|Contacting all users]]
 +
* [[Reset password]]
 +
* [[Sysadmin:Software installation | Software installation]]
 +
* [[Modules | Installing software under modules ]]
 +
* [[Sysadmin:AddComputer|Add a computer to CS or cluster domains]]
 +
* [[Senior projects|Supporting senior projects]]
 +
* [[ShutdownProcedure|How to do a planned shutdown and reboot of the system]]
 +
** [[Sysadmin:TestingServices | Testing services]] (after a reboot, upgrade, change in the phase of the moon, etc.)
 +
* [[Sysadmin:Upgrading SSL Certificate | Upgrading SSL Certificates ]]
 +
* [[Sysadmin:Launch at startup|Launch a process at startup]]
 +
* [[Sysadmin:Psql-setup | setup psql for cs430 students]]
  
 
+
===Group and institution information===
 
+
* [[Sysadmin:CS-ITS Interoperability|Working with ITS]]
 
+
* [[Sysadmin:Recurring spending | Recurring spending ]]
=== Old ===
+
* [[Sysadmin:SlackAndGitLab | Slack and GitLab integration]]
 
 
Important Notes:
 
* '''''ALL of the admin '''''  '''CVS/SVN stuff has been centralized to trac.cs.earlham.edu/admin'''.  You'll need to create a username/password for yourself by running (from quark):
 
:<code>htpasswd /usr/local/trac/adminontrac.htpasswd <username></code>
 
* To check out the repository, run (from quark):
 
:<code>svn checkout file:///clients/users/svn/admin</code>
 
* [[Sysadmin:IRC|Chatting on IRC]]
 
 
 
'''Curent Sysadmins 2013:'''
 
{| class="wikitable"
 
|-
 
! SysAdmin Name !! Year !! Working time !! Progress notes
 
|-
 
| Wilson || SO || 100% || link to notes
 
|-
 
| Demise || SR || 100% || link to notes
 
|-
 
| Craig || FR || 100% || link to notes
 
|-
 
| Zane || SO || 100% || link to notes
 
|-
 
| Jordan || SO || 100% || link to notes
 
|-
 
| Sonny || JU || 100% || link to notes
 
|-
 
| Elena || SR || 40% || link to notes
 
|-
 
| Kristin || JU || 40% || link to notes
 
|-
 
| Aaron || SR || 20% || link to notes
 
|-
 
| Michael || SR || 0% || link to notes
 
|}
 

Latest revision as of 08:32, 20 March 2024

This is the hub for the CS sysadmins on the wiki.

Overview

If you're visually inclined, we have a colorful and easy-to-edit map of our servers here!

Server room

Our servers are in Noyes, the science building that predates the CST. For general information about the server room and how to use it, check out this page.

Columns: machine name, IPs, type (virtual, metal), purpose, dies, cores, RAM

Compute Resources

Machines and VMs related information here!

Network

We have two network fabrics linking the machines together. There are three subdomains.

10 Gb

We have 10Gb fabric to mount files over NFS. Machines with 10Gb support have an IP address in the class C range 10.10.10.0/24 and we want to add DNS to these addresses.

1 Gb (cluster, cs)

We have two class C subnets on the 1Gb fabric: 159.28.22.0/24 (CS) and 159.28.23.0/24 (cluster). This means we have double the IP addresses on the 1Gb fabric that we have on the 10Gb fabric.

Any user accessing *.cluster.earlham.edu and *.cs.earlham.edu is making calls on a 1Gb network.

Intra-cluster fabrics

The layout cluster has an Infiniband infrastructure. Wachowski has only a 1Gb infrastructure.

Power

We have a backup power supply, with batteries last upgraded in 2019 (?). We’ve had a few outages since then and power has held up well.

HVAC

HVAC systems are static and are largely managed by Facilities.

See full topology diagrams here.

A word about what's happening between files and the drives they live on.

New sysadmins

These pages will be helpful for you if you're just starting in the group:

Note: you'll need to log in with wiki credentials to see most Sysadmin pages.

Additional information

These pages contain a lot of the most important information about our systems and how we operate.

Handy Tools

Technical docs

Common tasks

Group and institution information