Differences between revisions 67 and 69 (spanning 2 versions)
Revision 67 as of 2010-11-10 19:44:58
Size: 9238
Editor: BobAdamson
Comment:
Revision 69 as of 2010-12-06 22:51:19
Size: 9215
Editor: BobAdamson
Comment:
Deletions are marked like this. Additions are marked like this.
Line 136: Line 136:
 * Install packages: nfs-common zsh ncurses-term vim screen
Line 152: Line 151:
  * alpine
Line 166: Line 166:
  * logwatch
Line 185: Line 186:
 * gnome-desktop (includes Openoffice, Python, ???)  * gnome-desktop-environment (includes Openoffice, Python, ???)

One day, it would be nice to have a standard operating environment for UCC clubroom machines. Currently the state of them could be described as varying degrees of broken, partly due to having no defined procedure for setting them up. The purpose of this page is to brainstorm what this procedure should be.

Steps marked with <!> require a wheel member, anything else can be done by a winadmin.

Windows Profiles

Please see WindowsProfiles for more information on how these work / how you should manage them.

Windows 7

Steps to do before/during installation

  • Add forward and reverse DNS entries for the machine. <!> Not essential for setup

  • Add the machine to DHCP. <!> Not essential for setup

During/after installation

  • Install Win7 Pro, not the home edition, or you won't be able to add it to the domain
  • Make sure you create at least 3 disk partitions - one for windows, one for games/other, and one or more for linux
  • Enable the Administrator account and set a password, nuke the user you created during install
    • Handy hint: Instead of logging in with LOCALMACHINENAME\Administrator, log in with .\Administrator
  • Install F-Prot antivirus, <!> You will need a wheel member to give you the registration key

  • Install device drivers (graphics and sound most importantly).
  • Run the registry hack from http://wiki.samba.org/index.php/Windows7 - you won't be able to add the machine to the domain without doing this)

  • Configure it to be part of the domain 'UCCDOMAIN'. (Control Panel, System, Advanced System Settings, Computer Name) Ignore the error message

    • Once it's added to the domain, make sure you click on 'more' and correct the domain name suffix to ucc.gu.uwa.edu.au
  • Install and configure wpkg.
    • Both the client installer and the config files will be in //Mylah/wpkg
    • Import settings using the "import settings" button from //Mylah/wpkg/settings.xml
    • Go into service management and change the WPKG Service startup type to Automatic (Delayed Start) This step is essential, wpkg will not work without it

    • Restart the computer
  • Set up printing.
  • Add Winadmins to computer administrators.
  • Add static route for 130.95.13.0/26: at a command prompt, type

route add -p 130.95.13.0 MASK 255.255.255.192 130.95.13.65

  • This prevents a snap connection from trying to steal the default route to users home directories.

Software to install

Software in this list should either be free to download and install, or something that the UCC has a license for. Some preference is given to software which is easily deployed with WPKG.

Installed automatically via WPKG

  • Putty
  • OpenOffice

  • Firefox
  • Security policy to hide last logged in user
  • Windows experience index test after initial install
  • WinSCP

  • OCS Inventory
  • FoxIT Reader

  • GIMP
  • Ario (MPD client: http://ario-player.sourceforge.net/)

  • Xming
  • Inkscape

Install by hand

  • WolfET
  • Steam
  • MikTex then Lyx (in that order, be sure to enable auto-package downloads in MikTex)

  • Thunderbird
  • CD Burning Software: InfraRecorder (isorecorder is no longer needed, as infrarecorder can do images)

  • VLC
  • Daemon Tools (v3.46 was the last release before it was bundled with spyware, see http://www.daemon-tools.cc/dtcc/download.php?mode=Download&id=70)

  • PrimoPDF (a print to PDF utility)

Windows XP

Steps to do before/during installation

  • Add forward and reverse DNS entries for the machine. <!> Not essential for setup

  • Add the machine to DHCP. <!> Not essential for setup

  • Add the machine template to Samba. As root on Mylah, run /home/wheel/bin/ucc-addwinpc computername. <!>

During/after installation

  • Install Windows XP SP3 and configure it to be part of the domain 'UCCDOMAIN'.
  • Install device drivers (graphics and sound most importantly).
  • Set up printing.
  • Add Winadmins to computer administrators.
  • Configure WPKG. Install WPKG Client 1.3.9.msi, and load settings.xml using 'import settings', both in //mylah/wpkg

    • As winxp is no longer the default profile, you will need to edit /wpkg/hosts.xml and make an entry for the machine
  • Turn Windows Updates on to fully-automatic.
  • Add static route for 130.95.13.0/26: at a command prompt, type

route add -p 130.95.13.0 MASK 255.255.255.192 130.95.13.65

Software to install

Software in this list should either be free to download and install, or something that the UCC has a license for. Some preference is given to software which is easily deployed with WPKG.

What about...

  • ActiveState ActivePython and/or ActivePerl

  • Eclipse? Massive but apparently Java programmers love it
  • NetBeans? Not nearly as massive (but still quite large)

  • Komodo Edit, a rather nice lightweight programmers' editor
  • gVim, the logical alternative to the above
  • TortoiseSVN
  • Cygwin I vote no, it's horrible [DAA]

  • sequoiaview?
  • Hardware design tools like ..
  • SwitcherCADIII (free download with very active support list)
  • Ultium Designer (on at least one machine) or Free (limited) version of Eagle
  • Pushing the UCC CA out over WPKG? http://wpkg.org/SSL_CA_Install

  • Inkscape
  • The GIMP

Installed automatically via WPKG

Linux Servers

  • Add a root user and nuke the initial unprivileged user
  • Change sources.list to use UWA's mirror %s/au.archive.ubuntu.com/mirrors.uwa.edu.au\/ubuntu/
  • Set up NFS:
    • Add the machine to DNS if it isn't there already
    • Add the ethernet (MAC) address to madako's /etc/dhcp3/dhcpd.conf if it isn't there already
    • Add the machine to the 'sharemgr share' output on Musundo
    • Add the fstab line (copy off martello or something)
    • mount -a and hope
  • Set up LDAP - you may need to use libnss-ldapd and libpam-ldapd on newer Ubuntu and Debian (as opposed to the old libnss-ldap)

  • Ensure nsswitch.conf uses ldap for groups, passwd, and services - the latter is not done by default on most configurations.
  • Install dispense: copy /usr/local/bin/dispense, /usr/local/lib/libucc.so and /usr/share/man/man1/dispense.1.gz off a machine with a similar architecture
  • Add the UCC root SSH keys: add the hostname to /home/wheel/bin/uccroot/push.sh, then run that script.
  • Install the UCC motd system on machines which mount /home: add the following line to /etc/inetd.conf:

motda   stream  tcp     nowait  root    /home/wheel/bin/motd.update.sh motda
  • Packages to install:
    • alpine
    • nfs-common
    • zsh
    • ncurses-term
    • vim
    • screen
    • build-essential
    • cvs
    • subversion
    • sun-java6-jdk or openjdk-6-jdk
    • susv2
    • susv3
    • ocsinventory-agent (server is mussel.ucc.gu.uwa.edu.au)
    • nscd (for debian/ubuntu boxes that don't like sudo and root logins)
    • phonehome
    • logwatch

Linux Desktops

  • Add a root user and nuke the initial unprivileged user
  • Change sources.list to use UWA's mirror %s/au.archive.ubuntu.com/mirrors.uwa.edu.au\/ubuntu/
  • Set up LDAP - you may need to use libnss-ldapd and libpam-ldapd on newer Ubuntu and Debian (as opposed to the old libnss-ldap)

    • TODO: More ldap installation instructions plz
  • Modify /etc/fstab to mount /away
  • Ensure nsswitch.conf uses ldap for groups, passwd, and services - the latter is not done by default on most configurations.
  • Add the UCC root SSH keys: add the hostname to /home/wheel/bin/uccroot/push.sh, then run that script.

Ensure the following packages are installed:

  • build-essential
  • cvs
  • subversion
  • openjdk-6-jdk
  • vim
  • nscd (for debian/ubuntu boxes that don't like sudo and root logins)
  • ocsinventory-agent (server is mussel.ucc.gu.uwa.edu.au)
  • bzflag
  • gnome-desktop-environment (includes Openoffice, Python, ???)
  • google-chrome or chromium
  • thunderbird


CategorySystemAdministration