Differences between revisions 17 and 54 (spanning 37 versions)

One day, it would be nice to have a standard operating environment for UCC clubroom machines. Currently the state of them could be described as varying degrees of broken, partly due to having no defined procedure for setting them up. The purpose of this page is to brainstorm what this procedure should be.

Contents

Windows Profiles
Windows 7
Windows XP
Linux machines

Steps marked with require a wheel member, anything else can be done by a winadmin.

Windows Profiles

Please see WindowsProfiles for more information on how these work / how you should manage them.

Windows 7

Steps to do before/during installation

Add forward and reverse DNS entries for the machine. Not essential for setup
Add the machine to DHCP. Not essential for setup
Add the machine template to Samba. As root on Mylah, run /home/wheel/bin/ucc-addwinpc computername. <!> no longer necessary, automagically created

During/after installation

Install Win7 Pro, not the home edition, or you won't be able to add it to the domain
Enable the Administrator account and set a password, nuke the user you created during install
- Handy hint: Instead of logging in with LOCALMACHINENAME\Administrator, log in with .\Administrator
Install F-Prot antivirus, You will need a wheel member to give you the registration key
Run the registry hack from http://wiki.samba.org/index.php/Windows7 - you won't be able to add the machine to the domain without doing this)
Configure it to be part of the domain 'UCCDOMAIN'. (Control Panel, System, Advanced System Settings, Computer Name) Ignore the error message
- Once it's added to the domain, make sure you click on 'more' and correct the domain name suffix to ucc.gu.uwa.edu.au
Install and configure wpkg.
- The default profile is Win7x86, for Win7x64 machines you will need to make an entry in /wpkg/hosts.xml. Both the client installer and the config files will be in //Mylah/wpkg
- Import settings using the "import settings" button from //Mylah/wpkg/settings.xml
- Go into service management and change the WPKG Service startup type to Automatic (Delayed Start) This step is essential, wpkg will not work without it
- Restart the computer
Install device drivers (graphics and sound most importantly).
Run the Windows Experience Index test (Control Panel, Performance Information and Tools)
Set up printing.
Add Winadmins to computer administrators.
Add static route for 130.95.13.0/26: at a command prompt, type

route add -p 130.95.13.0 MASK 255.255.255.192 130.95.13.65

This prevents a snap connection from trying to steal the default route to users home directories.

Software to install

Software in this list should either be free to download and install, or something that the UCC has a license for. Some preference is given to software which is easily deployed with WPKG.

CD Burning Software: InfraRecorder (isorecorder is no longer needed, as infrarecorder can do images)
VLC
Daemon Tools (v3.46 was the last release before it was bundled with spyware, see http://www.daemon-tools.cc/dtcc/download.php?mode=Download&id=70)
Steam
winscp
OCS inventory
GIMP
Adobe reader
GIMP

Installed automatically via WPKG

Putty
OpenOffice
Firefox
Security policy to hide last logged in user

Not installed via WPKG

WolfET

Windows XP

Steps to do before/during installation

Add forward and reverse DNS entries for the machine. Not essential for setup
Add the machine to DHCP. Not essential for setup
Add the machine template to Samba. As root on Mylah, run /home/wheel/bin/ucc-addwinpc computername.

During/after installation

Install Windows XP SP3 and configure it to be part of the domain 'UCCDOMAIN'.
Install device drivers (graphics and sound most importantly).
Set up printing.
Add Winadmins to computer administrators.
Configure WPKG. Install WPKG Client 1.3.9.msi, and load settings.xml using 'import settings', both in //mylah/wpkg
- As winxp is no longer the default profile, you will need to edit /wpkg/hosts.xml and make an entry for the machine
Turn Windows Updates on to fully-automatic.
Add static route for 130.95.13.0/26: at a command prompt, type

route add -p 130.95.13.0 MASK 255.255.255.192 130.95.13.65

Software to install

Software in this list should either be free to download and install, or something that the UCC has a license for. Some preference is given to software which is easily deployed with WPKG.

OpenOffice
Media Player 11
CD Burning Software such as? possibilities include http://www.deepburner.com/ and http://infrarecorder.sourceforge.net/
F-Prot Antivirus \\musundo\fprot\ contains installers (use the MSI packages) and license codes in licenses.txt. You will need a handy wheel member to open licences.txt for you.
VLC
Daemon Tools (v3.46 was the last release before it was bundled with spyware, see http://www.daemon-tools.cc/dtcc/download.php?mode=Download&id=70)
Windows Live messenger
Steam
Audacity
Google Talk
irfanview (and the plugin that knows about jpeg orientation jfif tags)
winscp
DirectX 9 runtime
Notepad++

What about...

ActiveState ActivePython and/or ActivePerl
Eclipse? Massive but apparently Java programmers love it
NetBeans? Not nearly as massive (but still quite large)
Komodo Edit, a rather nice lightweight programmers' editor
gVim, the logical alternative to the above
TortoiseSVN
Cygwin I vote no, it's horrible [DAA]
sequoiaview?
Hardware design tools like ..
SwitcherCADIII (free download with very active support list)
Ultium Designer (on at least one machine) or Free (limited) version of Eagle
Pushing the UCC CA out over WPKG? http://wpkg.org/SSL_CA_Install
Inkscape
The GIMP

Installed automatically via WPKG

Java Runtime Environment
Firefox 3
Flash player
PuTTY (also add the binary directory to %PATH% [RVS] - not done yet)
Xming
GTK+ 2.14
7zip
FileZilla
Thunderbird
ISORecorder
Ario (MPD client: http://ario-player.sourceforge.net/)
BZFlag
Adobe Reader 9
InfraRecorder

Linux machines

Add a root user and nuke the initial unprivileged user
Change sources.list to use UWA's mirror %s/au.archive.ubuntu.com/mirrors.uwa.edu.au\/ubuntu/
Install packages: nfs-common zsh ncurses-term vim screen
Set up NFS:
- Add the machine to DNS if it isn't there already
- Add the ethernet (MAC) address to madako's /etc/dhcp3/dhcpd.conf if it isn't there already
- Add the machine to the 'sharemgr share' output on Musundo
- Add the fstab line (copy off martello or something)
- mount -a and hope
Set up LDAP
Ensure nsswitch.conf uses ldap for groups, passwd, and services - the latter is not done by default on most configurations.
Install dispense: copy /usr/local/bin/dispense, /usr/local/lib/libucc.so and /usr/share/man/man1/dispense.1.gz off a machine with a similar architecture
Add the UCC root SSH keys: add the hostname to /home/wheel/bin/uccroot/push.sh, then run that script.
Install the UCC motd system on machines which mount /home: add the following line to /etc/inetd.conf:

motda   stream  tcp     nowait  root    /home/wheel/bin/motd.update.sh motda

Other packages to install if available and sufficient storage space:
- build-essential
- cvs
- subversion
- sun-java6-jdk or openjdk-6-jdk
- susv2
- susv3
- bzflag

CategorySystemAdministration

-  ⇤ ← Revision 17 as of 2008-09-15 22:47:43 → 
  Size: 2894
  Editor: DavidAdam
  Comment:
+   ← Revision 54 as of 2010-06-22 09:50:48 → ⇥
  Size: 7948
  Editor: BobAdamson
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 2:
+<<TableOfContents(2)>>
-Line 5:
+Line 7:
+= Windows Profiles =

Please see WindowsProfiles for more information on how these work / how you should manage them.

= Windows 7 =
-Line 9:
+Line 16:
- * Add the machine to Samba (create a local account for it on musundo). <!> ''Probably only needs to be added in LDAP, and thus could be made available to winadmins via ACLs''
+ * --(Add the machine template to Samba.  As root on Mylah, run `/home/wheel/bin/ucc-addwinpc computername`. <!>)-- ''no longer necessary, automagically created''
-Line 12:
+Line 19:
- * Install Windows XP SP2 and configure it to be part of the domain 'UCCDOMAIN'. <!> ''why does this require wheel rights?''
+ * Install Win7 Pro, not the home edition, or you won't be able to add it to the domain
 * Enable the Administrator account and set a password, nuke the user you created during install
  * Handy hint: Instead of logging in with LOCALMACHINENAME\Administrator, log in with .\Administrator
 * Install F-Prot antivirus, <!> You will need a wheel member to give you the registration key
 * Run the registry hack from [[http://wiki.samba.org/index.php/Windows7]] - you won't be able to add the machine to the domain without doing this)
 * Configure it to be part of the domain 'UCCDOMAIN'. (Control Panel, System, Advanced System Settings, Computer Name) ''Ignore the error message'' 
  * Once it's added to the domain, make sure you click on 'more' and correct the domain name suffix to ucc.gu.uwa.edu.au
 * Install and configure wpkg. 
  * The default profile is Win7x86, for Win7x64 machines you will need to make an entry in /wpkg/hosts.xml. Both the client installer and the config files will be in //Mylah/wpkg
  * Import settings using the "import settings" button from //Mylah/wpkg/settings.xml
  * Go into service management and change the WPKG Service startup type to Automatic (Delayed Start) '''This step is essential, wpkg will not work without it'''
  * Restart the computer
 * Install device drivers (graphics and sound most importantly).
 * Run the Windows Experience Index test (Control Panel, Performance Information and Tools)
 * Set up printing.
 * Add Winadmins to computer administrators.
 * Add static route for 130.95.13.0/26: at a command prompt, type
{{{route add -p 130.95.13.0 MASK 255.255.255.192 130.95.13.65}}}
 . ''This prevents a snap connection from trying to steal the default route to users home directories.''

== Software to install ==
Software in this list should either be free to download and install, or something that the UCC has a license for. Some preference is given to software which is [[http://wpkg.org/Category:Silent_Installers|easily deployed with WPKG]].

 * CD Burning Software: Infra''''''Recorder (isorecorder is no longer needed, as infrarecorder can do images)
 * VLC
 * Daemon Tools (v3.46 was the last release before it was bundled with spyware, see http://www.daemon-tools.cc/dtcc/download.php?mode=Download&id=70)
 * Steam
 * winscp
 * OCS inventory
 * GIMP
 * Adobe reader
 * GIMP

== Installed automatically via WPKG ==
 * Putty
 * Open``Office
 * Firefox
 * Security policy to hide last logged in user

== Not installed via WPKG ==
 * WolfET

= Windows XP =

== Steps to do before/during installation ==
 * Add forward and reverse DNS entries for the machine. <!> ''Not essential for setup''
 * Add the machine to DHCP. <!> ''Not essential for setup''
 * Add the machine template to Samba.  As root on Mylah, run `/home/wheel/bin/ucc-addwinpc computername`. <!>

== During/after installation ==
 * Install Windows XP SP3 and configure it to be part of the domain 'UCCDOMAIN'.
-Line 16:
+Line 73:
- * Configure WPKG. ''Install WPKG Client 1.2.1.msi, and load settings.xml, both in //musundo/wpkg''
+ * Configure WPKG. ''Install WPKG Client 1.3.9.msi, and load settings.xml using 'import settings', both in //mylah/wpkg''
  * As winxp is no longer the default profile, you will need to edit /wpkg/hosts.xml and make an entry for the machine
-Line 18:
+Line 76:
- * Add static route for 130.95.13.0/24: at a command prompt, type
+ * Add static route for 130.95.13.0/26: at a command prompt, type
-Line 22:
+Line 80:
-Software in this list should either be free to download and install, or something that the UCC has a license for. Some preference is given to software which is [http://wpkg.org/Category:Silent_Installers easily deployed with WPKG].
+Software in this list should either be free to download and install, or something that the UCC has a license for. Some preference is given to software which is [[http://wpkg.org/Category:Silent_Installers|easily deployed with WPKG]].
-Line 24:
+Line 82:
- * 7zip
 * OpenOffice
+ * Open''''''Office
-Line 27:
+Line 84:
- * Adobe Reader
 * Firefox
 * PuTTY ''also add the binary directory to %PATH% [RVS]''
-Line 31:
+Line 85:
- * F-Prot Antivirus ''more details coming once [DAA] fixes the ACLs''
+ * F-Prot Antivirus \\musundo\fprot\ contains installers (use the MSI packages) and license codes in licenses.txt. You will need a handy wheel member to open licences.txt for you.
-Line 33:
+Line 87:
- * Flash player
 * Daemon Tools
+ * Daemon Tools (v3.46 was the last release before it was bundled with spyware, see http://www.daemon-tools.cc/dtcc/download.php?mode=Download&id=70)
-Line 37:
+Line 90:
- * Java Runtime Environment
-Line 41:
+Line 93:
- * winscp ''filezilla is probably a better option [DAA]''
+ * winscp
-Line 43:
+Line 95:
- * Xming [http://wpkg.org/Xming wpkg]
+ * Notepad++
-Line 46:
+Line 98:
- * ActiveState ActivePython and/or ActivePerl
+ * Active''''''State Active''''''Python and/or Active''''''Perl
-Line 48:
+Line 100:
- * NetBeans? Not nearly as massive (but still quite large)
+ * Net''''''Beans? Not nearly as massive (but still quite large)
-Line 53:
+Line 105:
- * Thunderbird or another mail client ''Second [RVS]''
 * an MPD client (http://sccs.swarthmore.edu/~cbr/PlayGUI/)  ''how about gmpc + gtk? [RVS]'' or gtk + http://ario-player.sourceforge.net/
-Line 56:
+Line 106:
+ * Hardware design tools like ..
 * SwitcherCADIII (free download with very active support list)
 * Ultium Designer (on at least one machine) or Free (limited) version of Eagle 
 * Pushing the UCC CA out over WPKG? http://wpkg.org/SSL_CA_Install
 * Inkscape
 * The GIMP
-Line 57:
+Line 113:
+== Installed automatically via WPKG ==
 * Java Runtime Environment
 * Firefox 3
 * Flash player
 * PuTTY (''also add the binary directory to %PATH% [RVS]'' - not done yet)
 * Xming
 * GTK+ 2.14
 * 7zip
 * FileZilla
 * Thunderbird
 * [[http://isorecorder.alexfeinman.com/isorecorder.htm|ISORecorder]]
 * Ario (MPD client: http://ario-player.sourceforge.net/)
 * BZFlag
 * Adobe Reader 9
 * InfraRecorder

= Linux machines =
 * Add a root user and nuke the initial unprivileged user
 * Change sources.list to use UWA's mirror %s/au.archive.ubuntu.com/mirrors.uwa.edu.au\/ubuntu/
 * Install packages: nfs-common zsh ncurses-term vim screen
 * Set up NFS:
  * Add the machine to DNS if it isn't there already
  * Add the ethernet (MAC) address to madako's /etc/dhcp3/dhcpd.conf if it isn't there already
  * Add the machine to the 'sharemgr share' output on Musundo
  * Add the fstab line (copy off martello or something)
  * mount -a and hope
 * Set up [[LDAP]]
 * Ensure nsswitch.conf uses ldap for groups, passwd, and services - the latter is not done by default on most configurations.
 * Install dispense: copy /usr/local/bin/dispense, /usr/local/lib/libucc.so and /usr/share/man/man1/dispense.1.gz off a machine with a similar architecture
 * Add the UCC root SSH keys: add the hostname to /home/wheel/bin/uccroot/push.sh, then run that script.
 * Install the UCC motd system on machines which mount /home: add the following line to /etc/inetd.conf:
{{{
motda   stream  tcp     nowait  root    /home/wheel/bin/motd.update.sh motda
}}}
 * Other packages to install if available and sufficient storage space:
  * build-essential
  * cvs
  * subversion
  * sun-java6-jdk or openjdk-6-jdk
  * susv2
  * susv3
  * bzflag

Wiki

Page

User

Windows Profiles

Windows 7

Steps to do before/during installation

During/after installation

Software to install

Installed automatically via WPKG

Not installed via WPKG

Windows XP

Steps to do before/during installation

During/after installation

Software to install

What about...

Installed automatically via WPKG

Linux machines