Workshop:2023/06/10 - Revision history

Drn1e09@soton.ac.uk: /* Task list */ Fixed typos

2023-06-12T19:13:19Z

Task list: Fixed typos

Drn1e09@soton.ac.uk: Added more notes about Anisble switch config

2023-06-12T19:11:07Z

Added more notes about Anisble switch config

← Older revision		Revision as of 19:11, 12 June 2023
Line 38:		Line 38:
	* Switch configuration automation		* Switch configuration automation
	** Tyler was looking at using Ansible to help deploy/check/maintain switch configuration.		** Tyler was looking at using Ansible to help deploy/check/maintain switch configuration.
			** Able to login to the switch through Ansible
			** Was able to read and compare the config
			** Able to generate the config out of netbox but some work needed to get these to align.
	** This may also be useful for backing up switch configuration so we won't need [https://github.com/ytti/oxidized Oxidized]		** This may also be useful for backing up switch configuration so we won't need [https://github.com/ytti/oxidized Oxidized]

Drn1e09@soton.ac.uk: /* Task list */ Updated what work we did on the task list

2023-06-11T11:28:42Z

Task list: Updated what work we did on the task list

← Older revision		Revision as of 11:28, 11 June 2023
Line 9:		Line 9:
	* Add exisiting web systems to Authentik		* Add exisiting web systems to Authentik
	** SUWS wiki		** SUWS wiki
			*** Done and Mediawiki upgraded to 1.39.3. New usernames will need to be used so they correspond with username in Authentik.
			*** Fixed the timelines for [[Workshops]], [[Meetings]], [[Outings]] and [[Socials]] so they now display like [[Events]]
			*** Given up with RSS / iCal exports for events as no one really uses them and they have been broken for a while.
	** SUWS WordPress		** SUWS WordPress
	* ~~Build new GW-B53~~		*** Done and fixed issues with upgrading WordPress, Now running 6.2.2.
	* ~~Build new SWITCH-B53~~		*** Also upgraded all plugins needing upgrading.
	** ~~Take a look at [https:~~//~~github~~.~~com/ytti/oxidized Oxidized] - For backup of switch configurations~~.		*** Removed all of the twenty... themes and upgraded the parent "Iconic One" theme.
			*** Removed the iCal link (from the wiki) as this has been discontinued.
			*** Updated RSGB icon, so "RSGB" is more readable.
			*** Installed WP Mail SMTP plugin. Configured to relay to Postfix on the server hosting the the WordPress Docker container (modified mynetworks and inet_interfaces in /etc/postfix/main.cf).
			*** Still issues sending emails to SUWS contact email address from the form. This looks to be an SPF issues with suws.org.uk (but not with sown.org.uk), which David Newman has raised a ticket with iSolutions to fix.


	* Sort out alerts reporting on Icinga2 (some we do not control, some we can fix):		* Sort out alerts reporting on Icinga2 (some we do not control, some we can fix):
	** GW-B53-NEW and KEYCLOAK report as down - Latter may benefit for a rename.
	** PROCS/GW-B32 - Should we change the procs checks more generally to not include kernel thread (e.g. check_procs -k)		** PROCS/GW-B32 - Should we change the procs checks more generally to not include kernel thread (e.g. check_procs -k)
	** IPMI checks for VMS-B32-1, GW-B32, GW-B53 and VMS-B53-1		*** Modified Ansible to generate new config to fix this - https://github.com/sown/ansible/pull/54
	** GW-~~B32 unknown check~~: ~~TEMP and RAID~~
	** EXT-PING checks - These are dependent on the UoS network, so really only need notifications in extreme circumstances and ideally one in total rather than one for every IP.		** EXT-PING checks - These are dependent on the UoS network, so really only need notifications in extreme circumstances and ideally one in total rather than one for every IP.
	* ~~Migrating VMs to LXD (from VMS-B32-1 to VMS-B53-1)~~ and ~~then install LXD on VMS-B32-1~~		*** Modified monitoring config on MONITOR2 matching on service's <tt>command_endpoint</tt> and setting <tt>times.begin = 15m</tt>.
	* ~~Take~~ a ~~look at [https://www~~.~~firezone.dev/ Firezone] - For provisioning VPN (WireGuard) tunnels~~		*** Only modified for Discord service notitfications and not IRC service notifications so they can be compared.
			*** Will create a pull request when we have confirmation this issue fixed.


	* Take a look at [https://github.com/warp-tech/warpgate Warpgate] - For SSO backed SSH login.		* Take a look at [https://github.com/warp-tech/warpgate Warpgate] - For SSO backed SSH login.
			** Tim and Dan took a look at this and found some aspects are not yet mature.
			** Need to consider whether to wait or maybe make the modifications we need ourselves?


			* Switch configuration automation
			** Tyler was looking at using Ansible to help deploy/check/maintain switch configuration.
			** This may also be useful for backing up switch configuration so we won't need [https://github.com/ytti/oxidized Oxidized]


			* KMIBot developments
			** Dan and Tim have made some modifications

DavidNewman: Added a task list

2023-06-10T09:38:46Z

Added a task list

New page

{{WorkshopInfo
|time=15:00
|date=2023-06-10
|endtime=19:00
|enddate=2023-06-10
|location=32/3089
}}
== Task list ==
* Add exisiting web systems to Authentik
** SUWS wiki
** SUWS WordPress
* Build new GW-B53
* Build new SWITCH-B53
** Take a look at [https://github.com/ytti/oxidized Oxidized] - For backup of switch configurations.
* Sort out alerts reporting on Icinga2 (some we do not control, some we can fix):
** GW-B53-NEW and KEYCLOAK report as down - Latter may benefit for a rename.
** PROCS/GW-B32 - Should we change the procs checks more generally to not include kernel thread (e.g. check_procs -k)
** IPMI checks for VMS-B32-1, GW-B32, GW-B53 and VMS-B53-1
** GW-B32 unknown check: TEMP and RAID
** EXT-PING checks - These are dependent on the UoS network, so really only need notifications in extreme circumstances and ideally one in total rather than one for every IP.
* Migrating VMs to LXD (from VMS-B32-1 to VMS-B53-1) and then install LXD on VMS-B32-1
* Take a look at [https://www.firezone.dev/ Firezone] - For provisioning VPN (WireGuard) tunnels
* Take a look at [https://github.com/warp-tech/warpgate Warpgate] - For SSO backed SSH login.

← Older revision		Revision as of 19:13, 12 June 2023
Line 7:		Line 7:
	}}		}}
	== Task list ==		== Task list ==
	* Add ~~exisiting~~ web systems to ~~Authentik~~		* Add existing web systems to authentik
	** SUWS wiki		** SUWS wiki
	*** Done and ~~Mediawiki~~ upgraded to 1.39.3. New usernames will need to be used so they correspond with username in ~~Authentik~~.		*** Done and MediaWiki upgraded to 1.39.3. New usernames will need to be used so they correspond with username in authentik.
	*** Fixed the timelines for [[Workshops]], [[Meetings]], [[Outings]] and [[Socials]] so they now display like [[Events]]		*** Fixed the timelines for [[Workshops]], [[Meetings]], [[Outings]] and [[Socials]] so they now display like [[Events]]
	*** Given up with RSS / iCal exports for events as no one really uses them and they have been broken for a while.		*** Given up with RSS / iCal exports for events as no one really uses them and they have been broken for a while.
Line 18:		Line 18:
	*** Removed the iCal link (from the wiki) as this has been discontinued.		*** Removed the iCal link (from the wiki) as this has been discontinued.
	*** Updated RSGB icon, so "RSGB" is more readable.		*** Updated RSGB icon, so "RSGB" is more readable.
	*** Installed WP Mail SMTP plugin. Configured to relay to Postfix on the server hosting the the WordPress Docker container (modified mynetworks and inet_interfaces in /etc/postfix/main.cf).		*** Installed WP Mail SMTP plugin. Configured to relay to Postfix on the server hosting the the WordPress Docker container (modified <tt>mynetworks</tt> and <tt>inet_interfaces</tt> in <b>/etc/postfix/main.cf</b>).
	*** Still issues sending emails to SUWS contact email address from the form. This looks to be an SPF issues with suws.org.uk (but not with sown.org.uk), which David Newman has raised a ticket with iSolutions to fix.		*** Still issues sending emails to SUWS contact email address from the form. This looks to be an SPF issues with suws.org.uk (but not with sown.org.uk), which David Newman has raised a ticket with iSolutions to fix.

Line 27:		Line 27:
	** EXT-PING checks - These are dependent on the UoS network, so really only need notifications in extreme circumstances and ideally one in total rather than one for every IP.		** EXT-PING checks - These are dependent on the UoS network, so really only need notifications in extreme circumstances and ideally one in total rather than one for every IP.
	*** Modified monitoring config on MONITOR2 matching on service's <tt>command_endpoint</tt> and setting <tt>times.begin = 15m</tt>.		*** Modified monitoring config on MONITOR2 matching on service's <tt>command_endpoint</tt> and setting <tt>times.begin = 15m</tt>.
	*** Only modified for Discord service ~~notitfications~~ and not IRC service notifications so they can be compared.		*** Only modified for Discord service notifications and not IRC service notifications so they can be compared.
	*** Will create a pull request when we have confirmation this issue fixed.		*** Will create a pull request when we have confirmation this issue fixed.

Line 40:		Line 40:
	** Able to login to the switch through Ansible		** Able to login to the switch through Ansible
	** Was able to read and compare the config		** Was able to read and compare the config
	** Able to generate the config out of ~~netbox~~ but some work needed to get these to align.		** Able to generate the config out of Netbox but some work needed to get these to align.
	** This may also be useful for backing up switch configuration so we won't need [https://github.com/ytti/oxidized Oxidized]		** This may also be useful for backing up switch configuration so we won't need [https://github.com/ytti/oxidized Oxidized]