Differences between revisions 1 and 74 (spanning 73 versions)
Revision 1 as of 2019-03-15 09:17:30
Size: 330
Editor: JamesCox
Comment:
Revision 74 as of 2019-08-22 20:32:12
Size: 8722
Editor: MarkTearle
Comment:
Deletions are marked like this. Additions are marked like this.
Line 5: Line 5:
### Put new entries at the top and try to keep things in date order :)
Line 6: Line 8:
||[MTL]||2019-08-22||dpkg --add-architecture i386; apt update; apt install libpcre2-dev:i386 libncurses5-dev:i386 on motsugo for [DAA]. Also, free up space on full /var||
||[MPT]||2019-08-14||Implemented soft-blacklist for possibly-broken account names in ucc-adduser-ad||
||[FVP]||2019-08-13||Replaced faulty Microtik router sharpchin with spare OpenWRT device coromandel (in UniSFA)||
||[MPT]||2019-08-09||Changed ucc-adduser-ad to make new users' index.html readable by the webserver||
||[MPT]||2019-07-31||Updated MOTD to reflect [DBA]'s resignation from committee||
||[MPT]||2019-07-29||Removed ex-group members from their old groups on UCC systems (following group review)||
||[DAA]||2019-07-29||Tried and failed to upgrade Guacamole to 1.0.0 (using Postgres + RADIUS and then Postgres + LDAP), rolled back to 0.9.14||
||[333][NTU][TPG]||2019-07-22||Wifi - fix smallwing/nanoHD VLAN connectivity to kerosene, was curviceps||
||[MPT]||2019-07-20||Enabled daily updates of Linux desktops||
||[MPT]||2019-07-20||Created 90-ucc-desktops.conf for PolKit and deployed to all desktops, enabled unattended upgrades on all desktops||
||[MPT]||2019-07-18||Joined Catfish's Linux install to the domain, fixed network logins||
||[TPG][NTU]||2019-07-15||Switch complications?||
||[TRS][NTU]||2019-07-14||UWA DNS outage, check bind+dd/discord-irc, disable/enable mooneye DNS forwarders||
||[FVP][MPT][DAS]||2019-07-12||Replaced machine room switch with new chassis and supervisor with 10GE capability||
||[DAA]||2019-07-11||Enlarged `/backups` array, partition, logical volume and filesystem on Mollitz||
||[DAA]||2019-07-09||Installed FreeBSD updates to 11.2-RELEASE-p11 on Molmol & upgraded pkg set||
||[MPT]||2019-06-28||Reinstalled clownfish with updated Mint 19.1 on the new NVMe SSD||
||[BOB]||2019-06-25||Changed door mailing list settings to discard spam emails||
||[BOB][MPT][FVP][AJT][TRS]||2019-06-21 to 2019-06-22||Recovered murasoi from dual system disk failure||
||[MSH]||2019-06-18||Filtered SACK on murasoi ucc-fw to avoid SACK Panic||
||[MPT]||2019-06-10||Fixed /etc/fstab on pinball to boot new NVMe SSD||
||[MPT]||2019-06-10||Swapped in new fans to pinball and clownfish (with [AJT])||
||[MPT]||2019-06-09||Fixed network issues on upgraded clownfish||
||[AJT]||2019-06-07||Upgraded pinball, clownfish and porcupine with new components (with [MPT])||
||[DAA]||2019-05-27||Upgraded Samba on Samson from 4.9.2 to 4.9.5||
||[MTL]||2019-05-20||Some housekeeping done on mooneye /etc/aliases. All mailman mailing lists moved to bottom of file in prep for later mailman upgrade||
||[DAA]||2019-05-18||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-May/005169.html|Removed a stack of obsolete Python packages that were breaking things]]||
||[DAA]||2019-05-18||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-May/005168.html|Gitlab maintenance]] - fixed UCC user accounts to be internal, not external, and removed heaps of spam accounts||
||[DAA]||2019-05-15||Converted Apache on Mussel to Certbot and wildcard SSL; removed the acme-members scripts from crontab and zonemake; converted Dovecot on Motsugo to Certbot and wildcard SSL; converted IPsec on Murasoi to use DNS challenges; dropped acmetool on Mussel, Mooneye, Motsugo, Murasoi and Gitlab; wrote [[SSLCertificates]] page||
||[DAA]||2019-05-15||Security patches installed for Molmol, Meersau and Maaxen||
||[DAA]||2019-05-13||Converted inspircd on Mussel to Certbot||
||[DAA]||2019-05-13||Converted postfix and apache on Mooneye to Certbot and wildcard SSL||
||[DAA]||2019-05-12||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-May/005165.html|Set up infrastructure for wildcard SSL certificates]]||
||[BOB][DBA]||2019-05-03||Installed replacement system/slog disk SSD in molmol||
||[DAA]||2019-05-03||Removed a large number of obsolete packages (mostly libraries and old development tools) from Mussel||
||[DAA]||2019-05-02||Upgraded Molmol to FreeBSD 11.2-RELEASE<<BR>>Upgraded Samba to 4.8 (supported version) on molmol||
||[FVP]||2019-05-01||Refactored `uccpass` to put user keys in separate files, with committee and wheel directories||
||[MPT]||2019-04-30||Removed elliotnunn from local sudo /etc/group on clownfish to stop Polkit from asking everyone for his password||
||[MPT]||2019-04-30||Added [MLG] to committee user group, and updated motd||
||[DAA]||2019-04-29||Upgraded to Debian 9.9 on Mussel, Motsugo, Murasoi, Mooneye, Merlo, Samson, Mollitz, Gitlab, idle-Maltair, idle-Medico, Heathred, Medico, Maltair and Loveday; ceph restarted and checked for status||
||[BOB]||2019-04-27||Updated salmon and installed unattended upgrades. Sorted through VM cluster and tagged a heap of VM's for deletion||
||[BOB]||2019-04-26||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-March/005080.html|Specced and purchased replacement+upgrade disks for molmol]]||
||[MSH]||2019-04-23||Made DNS notifies/AXFR from secondaries work||
||[MSH]||2019-04-23||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-April/005151.html|Fixed member web subdomains and ssl]]||
||[DAA]||2019-04-20||Removed a bunch of obsolete packages from motsugo (`gcc-4.6 ruby1.8 ruby1.9.1 php5-cli postgresql-client-9.4 python2.6-minimal zlib-bin libjasper1 hardening-includes python-reportbug python-support sysvinit`)<<BR>>upgraded the backport of `lepton`<<BR>>upgraded Docker to a supported version||
||[BEN]||2019-04-18||Setup unisfa-freshers mailing list||
||[NTU][TEC]||2019-04-15||ocsinventory-agent deployed to corvo, napoli||
||[BOB]||2019-04-13||Set up ocsinventory.ucc.asn.au and deployed to most machines||
||[DAA]||2019-04-12||Upgraded idle-{medico,maltair} to Debian 9; installed Docker and Gitlab Runner on idle-medico||
||[DAA]||2019-04-10||Installed rust and cargo from testing on Motsugo||
||[SJH][MSH]||2019-04-09||Fixed user php7||
||[DAA]||2019-04-09||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-April/005144.html|Updated Roundcube to the version in Debian]]||
||[BOB]||2019-04-09||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-April/005143.html|Disabled php5 and enabled php7 on mussel]]||
||[DAA]||2019-04-09||[[https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-April/005142.html|Attempted to fix eggman mounting /mp3s on boot by enabling systemd-networkd-wait-online.service]]||
||[DAA]||2019-04-09||Removed motsugo pip packages for Pygments, Six, and youtube-dl as they were old and newer Debian packages were installed||
||[MTL]||2019-04-03||mussel package upgrades||
||[MSH]||2019-04-02||Removed and readded motsugo sdc and sde. Got rid of current-pending-sectors by overwriting them||
||[NTU] [MPT]||2019-04-01||Merge merlo:/var/log/dispense into ~coke/cokelog , restart rsyslogd on merlo, motsugo||
||[MPT]||2019-03-27||Remounted /home and /away on merlo to fix BAD PIN message||
||[BOB]||2019-03-26||Re-synced time on Loveday - clock drift was causing ceph to be unhealthy||
||[BOB]||2019-03-26||Installed LSI SAS card in new HP DL380 (maltair), updated assorted firmwares, fixed network interfaces and re-added to VM cluster||
||[DTA]||2019-03-26||Set passwords for flame users id, dos, linux - it might stop the problem with aserver.err filling up after a portscan ||
||[MSH]||2019-03-23||put semrushbot in secure.ucc, wiki.ucc robots.txt (not sure if wiki worked||
||[NTU] [MPT]||2019-03-18||reset napoli passwd, add sudoers||
||[MSH]||2019-03-18||Got arpwatch running again on murasoi, had to put br0.* in /etc/arpwatch.conf||
||[NTU] [TPG]||2019-03-16||merlo not remote logging and BAD PIN? reboot, remount home, restart rsyslogd on merlo, motsugo||
||[NTU] [FVP] [JGM]||2019-03-16||Server rack in corridor, temporary? switch to VT320 with a narrower keyboard until a narrow PS/2 keyboard is found for the VT510 https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-March/005091.html ||
||[MSH]||2019-03-16||Created mooneye:/var/log/journal so logs will persist across reboots||
||[RME]||2019-03-15||Created this page. Let's see if it sticks.||
||[BOB]||2019-03-14||Removed root keys of wheel members who are not current members ||
||[BOB]||2019-03-05||Attended Ross's auctions to inspect HP DL380 Gen 8 server for maltair replacement. Bid and won in auction. Delivered to UCC and installed||
||[TRS]||2019-02-05||Pointed SOGo to AD (was still LDAP.)||
Line 7: Line 81:
||[TRS]||2019-02-05||Pointed SOGo to AD (was still LDAP.)||
||[RME]||2019-03-15||Created this page. Let's see if it sticks.||
|| || || ||
||[FVP] [CFE]||2018-11 to 2019-02||Created portal.ucc.asn.au based on [DAA]'s Member``DB for membership information||

UCC Systems Change Log

Please enter a short description of any work performed on UCC systems here.

Whom

When

What

[MTL]

2019-08-22

dpkg --add-architecture i386; apt update; apt install libpcre2-dev:i386 libncurses5-dev:i386 on motsugo for [DAA]. Also, free up space on full /var

[MPT]

2019-08-14

Implemented soft-blacklist for possibly-broken account names in ucc-adduser-ad

[FVP]

2019-08-13

Replaced faulty Microtik router sharpchin with spare OpenWRT device coromandel (in UniSFA)

[MPT]

2019-08-09

Changed ucc-adduser-ad to make new users' index.html readable by the webserver

[MPT]

2019-07-31

Updated MOTD to reflect [DBA]'s resignation from committee

[MPT]

2019-07-29

Removed ex-group members from their old groups on UCC systems (following group review)

[DAA]

2019-07-29

Tried and failed to upgrade Guacamole to 1.0.0 (using Postgres + RADIUS and then Postgres + LDAP), rolled back to 0.9.14

[333][NTU][TPG]

2019-07-22

Wifi - fix smallwing/nanoHD VLAN connectivity to kerosene, was curviceps

[MPT]

2019-07-20

Enabled daily updates of Linux desktops

[MPT]

2019-07-20

Created 90-ucc-desktops.conf for PolKit and deployed to all desktops, enabled unattended upgrades on all desktops

[MPT]

2019-07-18

Joined Catfish's Linux install to the domain, fixed network logins

[TPG][NTU]

2019-07-15

Switch complications?

[TRS][NTU]

2019-07-14

UWA DNS outage, check bind+dd/discord-irc, disable/enable mooneye DNS forwarders

[FVP][MPT][DAS]

2019-07-12

Replaced machine room switch with new chassis and supervisor with 10GE capability

[DAA]

2019-07-11

Enlarged /backups array, partition, logical volume and filesystem on Mollitz

[DAA]

2019-07-09

Installed FreeBSD updates to 11.2-RELEASE-p11 on Molmol & upgraded pkg set

[MPT]

2019-06-28

Reinstalled clownfish with updated Mint 19.1 on the new NVMe SSD

[BOB]

2019-06-25

Changed door mailing list settings to discard spam emails

[BOB][MPT][FVP][AJT][TRS]

2019-06-21 to 2019-06-22

Recovered murasoi from dual system disk failure

[MSH]

2019-06-18

Filtered SACK on murasoi ucc-fw to avoid SACK Panic

[MPT]

2019-06-10

Fixed /etc/fstab on pinball to boot new NVMe SSD

[MPT]

2019-06-10

Swapped in new fans to pinball and clownfish (with [AJT])

[MPT]

2019-06-09

Fixed network issues on upgraded clownfish

[AJT]

2019-06-07

Upgraded pinball, clownfish and porcupine with new components (with [MPT])

[DAA]

2019-05-27

Upgraded Samba on Samson from 4.9.2 to 4.9.5

[MTL]

2019-05-20

Some housekeeping done on mooneye /etc/aliases. All mailman mailing lists moved to bottom of file in prep for later mailman upgrade

[DAA]

2019-05-18

Removed a stack of obsolete Python packages that were breaking things

[DAA]

2019-05-18

Gitlab maintenance - fixed UCC user accounts to be internal, not external, and removed heaps of spam accounts

[DAA]

2019-05-15

Converted Apache on Mussel to Certbot and wildcard SSL; removed the acme-members scripts from crontab and zonemake; converted Dovecot on Motsugo to Certbot and wildcard SSL; converted IPsec on Murasoi to use DNS challenges; dropped acmetool on Mussel, Mooneye, Motsugo, Murasoi and Gitlab; wrote SSLCertificates page

[DAA]

2019-05-15

Security patches installed for Molmol, Meersau and Maaxen

[DAA]

2019-05-13

Converted inspircd on Mussel to Certbot

[DAA]

2019-05-13

Converted postfix and apache on Mooneye to Certbot and wildcard SSL

[DAA]

2019-05-12

Set up infrastructure for wildcard SSL certificates

[BOB][DBA]

2019-05-03

Installed replacement system/slog disk SSD in molmol

[DAA]

2019-05-03

Removed a large number of obsolete packages (mostly libraries and old development tools) from Mussel

[DAA]

2019-05-02

Upgraded Molmol to FreeBSD 11.2-RELEASE
Upgraded Samba to 4.8 (supported version) on molmol

[FVP]

2019-05-01

Refactored uccpass to put user keys in separate files, with committee and wheel directories

[MPT]

2019-04-30

Removed elliotnunn from local sudo /etc/group on clownfish to stop Polkit from asking everyone for his password

[MPT]

2019-04-30

Added [MLG] to committee user group, and updated motd

[DAA]

2019-04-29

Upgraded to Debian 9.9 on Mussel, Motsugo, Murasoi, Mooneye, Merlo, Samson, Mollitz, Gitlab, idle-Maltair, idle-Medico, Heathred, Medico, Maltair and Loveday; ceph restarted and checked for status

[BOB]

2019-04-27

Updated salmon and installed unattended upgrades. Sorted through VM cluster and tagged a heap of VM's for deletion

[BOB]

2019-04-26

Specced and purchased replacement+upgrade disks for molmol

[MSH]

2019-04-23

Made DNS notifies/AXFR from secondaries work

[MSH]

2019-04-23

Fixed member web subdomains and ssl

[DAA]

2019-04-20

Removed a bunch of obsolete packages from motsugo (gcc-4.6 ruby1.8 ruby1.9.1 php5-cli postgresql-client-9.4 python2.6-minimal zlib-bin libjasper1 hardening-includes python-reportbug python-support sysvinit)
upgraded the backport of lepton
upgraded Docker to a supported version

[BEN]

2019-04-18

Setup unisfa-freshers mailing list

[NTU][TEC]

2019-04-15

ocsinventory-agent deployed to corvo, napoli

[BOB]

2019-04-13

Set up ocsinventory.ucc.asn.au and deployed to most machines

[DAA]

2019-04-12

Upgraded idle-{medico,maltair} to Debian 9; installed Docker and Gitlab Runner on idle-medico

[DAA]

2019-04-10

Installed rust and cargo from testing on Motsugo

[SJH][MSH]

2019-04-09

Fixed user php7

[DAA]

2019-04-09

Updated Roundcube to the version in Debian

[BOB]

2019-04-09

Disabled php5 and enabled php7 on mussel

[DAA]

2019-04-09

Attempted to fix eggman mounting /mp3s on boot by enabling systemd-networkd-wait-online.service

[DAA]

2019-04-09

Removed motsugo pip packages for Pygments, Six, and youtube-dl as they were old and newer Debian packages were installed

[MTL]

2019-04-03

mussel package upgrades

[MSH]

2019-04-02

Removed and readded motsugo sdc and sde. Got rid of current-pending-sectors by overwriting them

[NTU] [MPT]

2019-04-01

Merge merlo:/var/log/dispense into ~coke/cokelog , restart rsyslogd on merlo, motsugo

[MPT]

2019-03-27

Remounted /home and /away on merlo to fix BAD PIN message

[BOB]

2019-03-26

Re-synced time on Loveday - clock drift was causing ceph to be unhealthy

[BOB]

2019-03-26

Installed LSI SAS card in new HP DL380 (maltair), updated assorted firmwares, fixed network interfaces and re-added to VM cluster

[DTA]

2019-03-26

Set passwords for flame users id, dos, linux - it might stop the problem with aserver.err filling up after a portscan

[MSH]

2019-03-23

put semrushbot in secure.ucc, wiki.ucc robots.txt (not sure if wiki worked

[NTU] [MPT]

2019-03-18

reset napoli passwd, add sudoers

[MSH]

2019-03-18

Got arpwatch running again on murasoi, had to put br0.* in /etc/arpwatch.conf

[NTU] [TPG]

2019-03-16

merlo not remote logging and BAD PIN? reboot, remount home, restart rsyslogd on merlo, motsugo

[NTU] [FVP] [JGM]

2019-03-16

Server rack in corridor, temporary? switch to VT320 with a narrower keyboard until a narrow PS/2 keyboard is found for the VT510 https://lists.ucc.gu.uwa.edu.au/pipermail/tech/2019-March/005091.html

[MSH]

2019-03-16

Created mooneye:/var/log/journal so logs will persist across reboots

[RME]

2019-03-15

Created this page. Let's see if it sticks.

[BOB]

2019-03-14

Removed root keys of wheel members who are not current members

[BOB]

2019-03-05

Attended Ross's auctions to inspect HP DL380 Gen 8 server for maltair replacement. Bid and won in auction. Delivered to UCC and installed

[TRS]

2019-02-05

Pointed SOGo to AD (was still LDAP.)

[TRS]

2018-12-01

Upgraded SOGo on mussel to 4.0.4.

[FVP] [CFE]

2018-11 to 2019-02

Created portal.ucc.asn.au based on [DAA]'s MemberDB for membership information