Sysadmin: Difference between revisions

From Earlham CS Department
Jump to navigation Jump to search
Tolkor (talk | contribs)
Pelibby16 (talk | contribs)
No edit summary
 
(673 intermediate revisions by 22 users not shown)
Line 1: Line 1:
__NOTOC__
This is the hub for the CS sysadmins on the wiki.


== Sysadmin Responsibilities ==
= Overview =
This is the basic list of tasks that Earlham CS system administrators are in charge of.
[https://docs.google.com/drawings/d/1XaULz5IxXV_BZQjrko3QJ8wV5aXsSTYcSWxxT49OyZk/edit | If you're visually inclined, we have a colorful and easy-to-edit map of our servers here!]


{| class="wikitable"
== Server room ==
|-
! Responsibilities !! Ben !! Collin !! Jordan !! Garrett
|-
| Install software on Debian (ACL) || ||  ||  ||
|-
| Install software on FreeBSD (servers) || ||  ||  ||
|-
| Make a CS user account || ||  ||  ||
|-
| Change users CS password || ||  ||  ||
|-
| Add DNS & DHCP entry || ||  || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> ||
|-
| Being able to edit wiki || ||  ||  ||
|-
| Make a CS wiki account || ||  ||  ||
|-
| Add people to different groups (ldap) || ||  ||  ||
|-
| Modification and maintenance of Nagios || ||  || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> ||
|-
| DD a new ACL image || ||  ||  ||
|-
| Set up a new ACL || ||  ||  ||
|-
| Shut down / start up of the entire machine room || ||  ||  ||
|-
| Creating and configuring mailing lists (electron) || ||  ||  ||
|-
| Admin list moderating || ||  ||  ||
|-
| Backups and restore (bacula) || ||  ||  ||
|-
| Create and configure jails || ||  || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> ||
|}


Our servers are in Noyes, the science building that predates the CST. For general information about the server room and how to use it, check out [[Sysadmin:Server Room|this page]].


Columns: machine name, IPs, type (virtual, metal), purpose, dies, cores, RAM


== Sysadmin basic Training ==
== Compute Resources ==
This is the list of skills that our System Administrators are trained during their orientation.  
[https://wiki.cs.earlham.edu/index.php/Sysadmin:Computer_Resources Machines and VMs related information here!]


{| class="wikitable"
|-
! Training Sections !! Ben !! Collin !! Jordan !! Garrett
|-
| | ||  ||  ||
|-
| Installing operating systems (Debian and FreeBSD), including single-user mode || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div> || <div style="text-align: center;"> [[File:StarIconBronze.png|20px]] </div>
|-
| Installing packages || ||  ||  ||
|-
| *nix Filesystem layout ||  ||  || ||
|-
| Command line tools including I/O redirections and pipes ||  ||  || ||
|-
| TCP,  UDP and ICMP packets, including 3-way handshake || ||  ||  ||
|-
| Ports ||  ||  || ||
|-
| DNS || ||  ||  ||
|-
| DHCP || ||  ||  ||
|-
| Network debugging tools (tcpdump, ping, traceroute, netstat) || ||  ||  ||
|-
| Simple shell scripting || ||  ||  ||
|}


== Sysadmin 2014 to do list: ==
== Network ==


* Installing X for Jim - XDM not gdm<br />
We have two network fabrics linking the machines together. There are three subdomains.
* Setting up an ACL machine in D128 for Galileo<br />
* Installing the rest of the ACL machinesin the ACl lab <br />
* John H. Windows software <br />
* CS user simpler password change<br />
* Sage<br />
* Getting rid of Quark <br />
* Hostname change on ACLs (4 places)<br />
* Removing mailman form quark <br />
* Mailman Heather (not all of them accepted the changes electron to cs.earlham.edu) <br />


== Systems Administration Documentation ==
=== 10 Gb ===


{|
We have 10Gb fabric to mount files over NFS. Machines with 10Gb support have an IP address in the class C range 10.10.10.0/24 and we want to add DNS to these addresses.
|- valign="top"
|
<div style="border:10px solid #E3E0FA; padding:5px">
<div style="background-color:#D7D1F8; padding:5px;">
=== Works in Progress ===
</div>


* [[Sysadmin:todo13|To do before Fall 13 starts]]
=== 1 Gb (cluster, cs) ===
* [[Sysadmin:handbook|Handbook (WIP)]]
* [[Sysadmin:Temporary Page | Temporary Page for Wiki Adjustment]]
* [[Sysadmin: Upgrading FreeBSD | Upgrading FreeBSD]]
* [[Sysadmin:Fail2Ban on FreeBSD | Fail2Ban on FreeBSD]]
* [[Sysadmin:Running Nessus | Running Nessus]]
* [[Sysadmin:SrvcCheck|Things to check when things go down]]
* [[Sysadmin:AaronsHowTo| Aaron's How-To Pages]]
* [[Sysadmin:Sonresources| Son's "Cook" Pages]]
* [[Sysadmin:Installing ACLs]]


<!-- This has to stay as part of the formatting -->
We have two class C subnets on the 1Gb fabric: 159.28.22.0/24 (CS) and 159.28.23.0/24 (cluster). This means we have double the IP addresses on the 1Gb fabric that we have on the 10Gb fabric.
</div>
| style="width:50px;" |
|
<div style="border:10px solid #E0EAF8; padding:5px;">
<div style="background-color:#CEDEF4; padding:5px;">


=== Admin Tasks ===
Any user accessing *.cluster.earlham.edu and *.cs.earlham.edu is making calls on a 1Gb network.
</div>


* [[Sysadmin: NEWAddComputer|NEW Add a computer]]
=== Intra-cluster fabrics ===
* [[Sysadmin:NEWStart/Shutdown|NEW Shutdown/Start]]
* [[Sysadmin:NEWMailman|NEW Mailman]]
* [[Sysadmin:NEWNagios|NEW Nagios]]
* [[Sysadmin:Backup|Backup]] (needs to be updated after new setup)
* [[Sysadmin:Contacting all users|Contacting all users]]
* [[Sysadmin:New Sysadmins|Welcoming a new sysadmin to the fold]]
* [[Sysadmin:RT Ticketing|RT Ticketing]]
* [[Sysadmin:AddComputer|Add a computer]]


The layout cluster has an Infiniband infrastructure. Wachowski has only a 1Gb infrastructure.


<!-- This has to stay as part of the formatting -->
== Power ==
</div>
|}


We have a backup power supply, with batteries last upgraded in 2019 (?). We�ve had a few outages since then and power has held up well.


{|
== HVAC ==
|- valign="top"
|


<div style="border:10px solid #FFDFFF; padding:5px;">
HVAC systems are static and are largely managed by Facilities.
<div style="background-color:#FFCEFF; padding:5px;">


=== Services ===
[[Topology|See full topology diagrams here.]]
</div>
* [[Sysadmin:Services:Apache2|Apache2]]
* [[Sysadmin:Services:Databases|Databases]]
* [[Sysadmin:Services:DNS and DHCP|DNS and DHCP]]
* [[Sysadmin:Services:Email|Email]]
* [[Sysadmin:Services:SystemImager|System Imager]]
* [[Sysadmin:Services:LVM|LVM]]
* [[Sysadmin:positron|NFS]]
* [[Sysadmin:Services:Printers|Printers]]
* [[Sysadmin:Services:TracSVN|Trac + svn]]
* [[Sysadmin:User Management|User Management]]
* [[Sysadmin:Services:Virtualization | Virtualization]]
* [[Sysadmin:Services:ZFS | ZFS]]


<!-- This has to stay as part of the formatting -->
[[Sysadmin:Layers of abstraction for filesystems|A word about what's happening between files and the drives they live on.]]
</div>
| style="width:50px;" |
|


<div style="border:10px solid #DBF0F7; padding:5px;">
= New sysadmins =
<div style="background-color:#C9EAF3; padding:5px;">


=== Servers ===
These pages will be helpful for you if you're just starting in the group:
</div>
* [[Sysadmin:PhysicalServers | Physical Servers]]
* [[Sysadmin:VirtualServersAndJails | Virtual Servers and Jails]]
* [[Sysadmin:SvcChart|Service Chart]]
* [[Sysadmin:Monitoring|Monitoring]]
* [[Sysadmin:Quark | Quark]]
* [[Sysadmin:Forty-Two | Forty-two]]
* [[Sysadmin:Lovelace | Lovelace]]
* [[Sysadmin:Proto | Proto]]
* [[Sysadmin:RetiredServers | Retired Servers]]


<!-- This has to stay as part of the formatting -->
* [[Sysadmin:New Sysadmins | Welcoming a new sysadmin ]]
</div>
* [[Sysadmin:Troubleshooting|General troubleshooting tips for admins]]
| style="width:50px;" |
* [[Sandbox Notes|Sandbox Notes]]
|
* [[Password managers]]
<div style="border:10px solid #FFFFC8; padding:5px;">
* [[Server safety]]
<div style="background-color:#FFFFB5; padding:5px;">
* [https://code.cs.earlham.edu/sysadmin/ticket-tracker Ticket tracking for current projects]


=== ACL Workstations ===
Note: you'll need to log in with wiki credentials to see most Sysadmin pages.
</div>
* [[Sysadmin:ACL:Installation|ACL Installation procedure]]
* [[Sysadmin:AclImage|ACL Package Information]]
* [[Sysadmin:Acl Locations|ACL Locations]]
* [[Sysadmin:Software for Chemistry ACLs|Software for Chemistry ACLs]]
* [[Sysadmin:ACL:UpProp|Proposed ACL Update policy]]


<!-- This has to stay as part of the formatting -->
= Additional information =
</div>
|}


These pages contain a lot of the most important information about our systems and how we operate.


{|
===Handy Tools===
|- valign="top"
* [https://explore.cluster.earlham.edu/packages Porter's Package Explorer]
|
<div style="border:10px solid #D6F8DE; padding:5px;">
<div style="background-color:#BDF4CB; padding:5px;">
=== Networking ===
</div>
* [[Sysadmin:Networking:NetworkLayout|Network Layout (as of 08/2006)]]
* [[Sysadmin:Networking:D224 cable plant|D224 cable plant]]
* [[Sysadmin:Networking:Fiber plans|Fiber plans]]
* [[Sysadmin:Networking:Switches|Switches]]
* [[Sysadmin:Networking:Rack notes|Rack notes]]
* [[Sysadmin:Networking:Public|Public Network]]
* [[Sysadmin:Networking:NetworkTopo|Old Network Topo Figures]]
* [[Sysadmin:Networking:NetworkDiagram|Network layout (May 2007)]]
* [[Sysadmin:Networking:Alternate Network Path|Alt Network path]]
* [[Sysadmin:UPS Setup]]


<!-- This has to stay as part of the formatting -->
===Technical docs===
</div>
| style="width:50px;" |
|
<div style="border:10px solid #F0DDD5; padding:5px;">
<div style="background-color:#E4C0B1; padding:5px;">


=== Miscellaneous ===
* [https://code.cs.earlham.edu/sysadmin/ticket-tracker Ticket tracking for current projects]
</div>
* [[Server safety]]
* [[SysadminContactInfo|Contact Information]]
* [[Sysadmin:Backup|Backup]]
* [[Sysadmin:ImportantInfo:PhoneNumbers|Phone Numbers]]
* [[Sysadmin:Monitoring | Monitoring ]]
* [[Sysadmin:ImportantInfo:WebSites|Web Sites]]
* [[Sysadmin:Access and Restrictions | Access and Restrictions ]]
* [[Sysadmin:ImportantInfo:AuthenticationInfo|Authentication Information]]
* [[Sysadmin:SSH|SSH info relevant to admins]]
* [[Sysadmin:ImportantInfo:PowerFailure|Power Failure]]
* [[Sysadmin:User Management | User Management]] and [[Sysadmin:LDAP|LDAP]] generally
* [[Sysadmin:ImportantInfo:UPS|UPS]]
* [[Sysadmin:Jupyterhub Notebook Server|Jupyterhub]] and [[Nbgrader notes|NBGrader]]
* [[Sysadmin:ImportantInfo:SSLcerts|Generating SSL Certificates]]
* [[Sysadmin:MailStack|Email service]]
* [[Sysadmin:Power draws|Power draws]]
* [[Sysadmin:XenDocs | Xen Server]]
* [[Sysadmin:ImportantInfo:SunHardware|Working with Sun Hardware]]
* [[Sysadmin:NFS|Network File System (NFS)]]
* [[Sysadmin:Passwords]]
* [[Sysadmin:Web Servers|Web Servers and Websites]]
* Patching
* [[Sysadmin:Services:Databases|Databases]]
** [[LinuxKernelPatching|Linux Kernel Patching]]
* [[Sysadmin:DNS & DHCP|DNS and DHCP]]
** [[FreeBSDKernelPatching|FreeBSD Kernel Patching]]
* [[Sysadmin:AWS|AWS]]
* [[Sysadmin:SerialConsoleCableEnds|Cable Ends]]
* [[Bash_start_up_script|Bash startup scripts]]
* [[Sysadmin:VirtualBox | VirtualBox]]
* [[X Applications]]
* [[Sysadmin:Services:ClusterOverview|Cluster Overview]] and [[Sysadmin:Ccg-admin|additional details]]
* [[Sysadmin:Firewall|Firewall]] running on babbage.cs.e.e
* [[Sysadmin:Setting_up_Lovelace_Lab_Machines|Setting up Lab Machines]]


<!-- This has to stay as part of the formatting -->
===Common tasks===
</div>
* [[Sysadmin:Recurring Tasks | Recurring tasks - e.g. software updates, hardware replacements]]
|}
* [[Sysadmin:Contacting all users|Contacting all users]]
 
* [[Reset password]]
 
* [[Sysadmin:Software installation | Software installation]]
 
* [[Modules | Installing software under modules ]]
 
* [[Sysadmin:AddComputer|Add a computer to CS or cluster domains]]
 
* [[Senior projects|Supporting senior projects]]
=== Old ===
* [[ShutdownProcedure|How to do a planned shutdown and reboot of the system]]
 
** [[Sysadmin:TestingServices | Testing services]] (after a reboot, upgrade, change in the phase of the moon, etc.)
Important Notes:
* [[Sysadmin:Upgrading SSL Certificate | Upgrading SSL Certificates ]]
* '''''ALL of the admin '''''  '''CVS/SVN stuff has been centralized to trac.cs.earlham.edu/admin'''.  You'll need to create a username/password for yourself by running (from quark):
* [[Sysadmin:Launch at startup|Launch a process at startup]]
:<code>htpasswd /usr/local/trac/adminontrac.htpasswd <username></code>
* [[Sysadmin:Psql-setup | setup psql for cs430 students]]
* To check out the repository, run (from quark):
:<code>svn checkout file:///clients/users/svn/admin</code>
* [[Sysadmin:IRC|Chatting on IRC]]


'''Curent Sysadmins 2013:'''
===Group and institution information===
{| class="wikitable"
* [[Sysadmin:CS-ITS Interoperability|Working with ITS]]
|-
* [[Sysadmin:Recurring spending | Recurring spending ]]
! SysAdmin Name !! Year !! Working time !! Progress notes
* [[Sysadmin:SlackAndGitLab | Slack and GitLab integration]]
|-
| Wilson || SO || 100% || link to notes
|-
| Demise || SR || 100% || link to notes
|-
| Craig || FR || 100% || link to notes
|-
| Zane || SO || 100% || link to notes
|-
| Jordan || SO || 100% || link to notes
|-
| Sonny || JU || 100% || link to notes
|-
| Elena || SR || 40% || link to notes
|-
| Kristin || JU || 40% || link to notes
|-
| Aaron || SR || 20% || link to notes
|-
| Michael || SR || 0% || link to notes
|}

Latest revision as of 14:54, 10 October 2025

This is the hub for the CS sysadmins on the wiki.

Overview

| If you're visually inclined, we have a colorful and easy-to-edit map of our servers here!

Server room

Our servers are in Noyes, the science building that predates the CST. For general information about the server room and how to use it, check out this page.

Columns: machine name, IPs, type (virtual, metal), purpose, dies, cores, RAM

Compute Resources

Machines and VMs related information here!


Network

We have two network fabrics linking the machines together. There are three subdomains.

10 Gb

We have 10Gb fabric to mount files over NFS. Machines with 10Gb support have an IP address in the class C range 10.10.10.0/24 and we want to add DNS to these addresses.

1 Gb (cluster, cs)

We have two class C subnets on the 1Gb fabric: 159.28.22.0/24 (CS) and 159.28.23.0/24 (cluster). This means we have double the IP addresses on the 1Gb fabric that we have on the 10Gb fabric.

Any user accessing *.cluster.earlham.edu and *.cs.earlham.edu is making calls on a 1Gb network.

Intra-cluster fabrics

The layout cluster has an Infiniband infrastructure. Wachowski has only a 1Gb infrastructure.

Power

We have a backup power supply, with batteries last upgraded in 2019 (?). We�ve had a few outages since then and power has held up well.

HVAC

HVAC systems are static and are largely managed by Facilities.

See full topology diagrams here.

A word about what's happening between files and the drives they live on.

New sysadmins

These pages will be helpful for you if you're just starting in the group:

Note: you'll need to log in with wiki credentials to see most Sysadmin pages.

Additional information

These pages contain a lot of the most important information about our systems and how we operate.

Handy Tools

Technical docs

Common tasks

Group and institution information