Index: /branches/fc11-dev/server/doc/install-xen =================================================================== --- /branches/fc11-dev/server/doc/install-xen (revision 1246) +++ /branches/fc11-dev/server/doc/install-xen (revision 1246) @@ -0,0 +1,44 @@ +# install Hardy +# this involves complicated partitioning (with lvm) +# the popular version of Grub doesn't cope with this. +# Thus, we need a boot partition not under LVM +# allocate about 1G for /root ext3 filesystem +# partition the two disks the same way +# that means you have two disks, each with a 1G partition and +# a "rest-of-the-space"G partition +# now, combine the two 1G partitions into a RAID 1 (as /boot ext3) +# take the two other partitions, another RAID 1 (set up as lvm) +# create one volume group the same as the host +# in that volume group, create two lvs one of them named root (ext3) +# and one named swap (copy sizes, 10G root and 2G swap) +# F11 will suggest ext4, DON'T USE IT. +# - New filesystem, so it's scary +# - The hosts can't mount it +# - Grub can't cope with it + +# enable backports (because Xen 3.3 is in hardy backports) + apt-get update + apt-get dist-upgrade +# install Xen + apt-get install ubuntu-xen-server +# download Debathena archive key, verify + apt-key add ... +# add Debathena repos to etc/apt.d/sources.list +# install Debathena software + apt-get install debathena-clients +# compare packages with another server +dpkg -l +# reconfigure so that we can get an MTA, although we don't +# want the hosts to accept mail (smart host, does not take mail) +# outgoing.mit.edu + dpkg reconfigure xm4-config + # answer questions properly +# change root alias in /etc/aliases to be the same as scripts server +# reload it + newaliases +# ssh key for host... +# install host keytab +# copy conserver config (we need to version this) +# clone the xen config (/etc/xen) + git clone ssh://scripts@scripts.mit.edu/mit/scripts/git/xen.git /etc/xen + Index: /branches/fc11-dev/server/fedora/config/etc/hosts =================================================================== --- /branches/fc11-dev/server/fedora/config/etc/hosts (revision 1245) +++ /branches/fc11-dev/server/fedora/config/etc/hosts (revision 1246) @@ -14,4 +14,5 @@ 18.181.0.167 bees-knees.mit.edu bees-knees sx-blade-4.mit.edu sx-blade-4 scripts3.mit.edu scripts3 18.181.0.228 cats-whiskers.mit.edu cats-whiskers scripts4.mit.edu scripts4 +18.181.0.237 pancake-bunny.mit.edu pancake-bunny scripts6.mit.edu scripts6 172.21.0.53 old-faithful.mit.edu @@ -19,2 +20,3 @@ 172.21.0.167 bees-knees.mit.edu 172.21.0.228 cats-whiskers.mit.edu +172.21.0.237 pancake-bunny.mit.edu Index: /branches/fc11-dev/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf =================================================================== --- /branches/fc11-dev/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (revision 1245) +++ /branches/fc11-dev/server/fedora/config/etc/httpd/conf.d/scripts-vhost-names.conf (revision 1246) @@ -1,2 +1,2 @@ ServerName scripts.mit.edu -ServerAlias scripts 18.181.0.43 scripts-vhosts.mit.edu scripts-vhosts 18.181.0.46 scripts-test.mit.edu scripts-test 18.181.0.229 better-mousetrap.mit.edu better-mousetrap b-m.mit.edu b-m scripts1.mit.edu scripts1 18.181.0.57 old-faithful.mit.edu old-faithful o-f.mit.edu o-f scripts2.mit.edu scripts2 18.181.0.53 bees-knees.mit.edu bees-knees b-k.mit.edu b-k sx-blade-4.mit.edu sx-blade-4 scripts3.mit.edu scripts3 18.181.0.167 cats-whiskers.mit.edu cats-whiskers c-w.mit.edu c-w scripts4.mit.edu scripts4 18.181.0.228 localhost 127.0.0.1 ::1 +ServerAlias scripts 18.181.0.43 scripts-vhosts.mit.edu scripts-vhosts 18.181.0.46 scripts-test.mit.edu scripts-test 18.181.0.229 better-mousetrap.mit.edu better-mousetrap b-m.mit.edu b-m scripts1.mit.edu scripts1 18.181.0.57 old-faithful.mit.edu old-faithful o-f.mit.edu o-f scripts2.mit.edu scripts2 18.181.0.53 bees-knees.mit.edu bees-knees b-k.mit.edu b-k sx-blade-4.mit.edu sx-blade-4 scripts3.mit.edu scripts3 18.181.0.167 cats-whiskers.mit.edu cats-whiskers c-w.mit.edu c-w scripts4.mit.edu scripts4 18.181.0.228 pancake-bunny.mit.edu pancake-bunny p-b.mit.edu p-b scripts6.mit.edu scripts6 18.181.0.237 localhost 127.0.0.1 ::1 Index: /branches/fc11-dev/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem =================================================================== --- /branches/fc11-dev/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (revision 1245) +++ /branches/fc11-dev/server/fedora/config/etc/pki/tls/certs/scripts-cert.pem (revision 1246) @@ -2,11 +2,12 @@ Data: Version: 3 (0x2) - Serial Number: 2872 (0xb38) + Serial Number: + bf:ae:ff:3a:cd:d8:29:65:eb:c7:3a:7a:57:81:3e:fb Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=Massachusetts, O=Massachusetts Institute of Technology, OU=MIT Certification Authority Validity - Not Before: Jul 23 16:00:00 2008 GMT - Not After : Jul 23 16:00:00 2009 GMT - Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=Student Information Processing Board, CN=scripts-cert.mit.edu/Email=scripts@mit.edu + Not Before: Jul 6 16:00:00 2009 GMT + Not After : Jul 8 16:00:00 2010 GMT + Subject: C=US, ST=Massachusetts, L=Cambridge, O=Massachusetts Institute of Technology, OU=Student Information Processing Board, CN=scripts-cert.mit.edu/emailAddress=scripts@mit.edu Subject Public Key Info: Public Key Algorithm: rsaEncryption @@ -34,31 +35,35 @@ X509v3 Subject Key Identifier: 54:11:7C:09:55:44:1C:94:45:A9:A2:76:46:2B:2C:24:26:6A:44:E8 + X509v3 CRL Distribution Points: + URI:http://ca.mit.edu/ca/mitserver.crl + Signature Algorithm: sha1WithRSAEncryption - 38:a3:3b:c2:d6:cb:5b:36:65:89:c4:c1:fc:c8:5f:b5:07:a2: - 85:0b:59:22:f7:b3:a9:97:b7:81:32:4d:3f:17:69:6c:6f:f3: - 64:de:75:bf:e6:16:98:88:cf:24:f2:07:10:fe:d2:e8:66:42: - 10:2d:42:d5:80:14:e6:55:0e:8f:c4:28:e9:39:f1:cd:a4:4a: - c5:93:15:45:08:c9:b6:3e:7e:4c:e7:1f:ee:0d:53:91:37:1f: - dd:e2:da:97:f0:a9:ce:98:c0:5d:46:11:12:66:5f:7f:11:fc: - 80:2a:36:d8:ca:68:ad:5c:3d:12:5b:32:af:1b:ad:e0:36:6d: - e2:f1 + 2b:39:ba:b0:36:13:fc:c1:bb:f5:34:95:d4:5a:0c:08:2a:db: + 62:a0:7b:ea:9c:3b:a2:ed:21:22:6d:49:cb:78:b9:fd:7a:de: + aa:3e:19:d1:22:0a:09:f1:c8:9b:20:80:af:0c:9a:76:c6:cf: + 8e:d3:1c:dd:e2:32:c2:da:9f:20:62:23:17:68:d6:da:0d:6d: + 88:18:3e:4e:cb:2d:74:b0:af:23:38:ba:14:b5:1a:e7:8e:bd: + 21:be:39:07:30:76:8e:71:7c:c9:f0:ad:f0:d5:d7:69:2f:7a: + ab:35:d8:4f:17:2b:ed:a7:fc:b4:1c:e2:fc:9e:00:af:51:2c: + 46:28 -----BEGIN CERTIFICATE----- -MIIDPzCCAqigAwIBAgICCzgwDQYJKoZIhvcNAQEFBQAwezELMAkGA1UEBhMCVVMx -FjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoTJU1hc3NhY2h1c2V0dHMg -SW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsTG01JVCBDZXJ0aWZpY2F0 -aW9uIEF1dGhvcml0eTAeFw0wODA3MjMxNjAwMDBaFw0wOTA3MjMxNjAwMDBaMIHX -MQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czESMBAGA1UEBxMJ -Q2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRzIEluc3RpdHV0ZSBvZiBU -ZWNobm9sb2d5MS0wKwYDVQQLEyRTdHVkZW50IEluZm9ybWF0aW9uIFByb2Nlc3Np -bmcgQm9hcmQxHTAbBgNVBAMTFHNjcmlwdHMtY2VydC5taXQuZWR1MR4wHAYJKoZI -hvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ -AoGBALU+IU3BiWsBjEeA/rM3J3b4UkHmoj1Ldnjl8mY8D7Gt+5ePLqK2U9O2DuJm -+bkLt8601fUcH28ifUj1bfAWzY5IedEUShQvL/jEvR2Hz32LXHetWCSwDqFt1grH -2LwvZ2XIXdjYMcJnS0r0oaVUgq/LNAgqBH+OfEy329xqil2BAgMBAAGjdTBzMAkG -A1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgXgMCcGA1UdJQQgMB4GCCsGAQUFBwMB -BggrBgEFBQcDBAYIKwYBBQUHAwIwCwYDVR0PBAQDAgXgMB0GA1UdDgQWBBRUEXwJ -VUQclEWponZGKywkJmpE6DANBgkqhkiG9w0BAQUFAAOBgQA4ozvC1stbNmWJxMH8 -yF+1B6KFC1ki97Opl7eBMk0/F2lsb/Nk3nW/5haYiM8k8gcQ/tLoZkIQLULVgBTm -VQ6PxCjpOfHNpErFkxVFCMm2Pn5M5x/uDVORNx/d4tqX8KnOmMBdRhESZl9/EfyA -KjbYymitXD0SWzKvG63gNm3i8Q== +MIIDhTCCAu6gAwIBAgIRAL+u/zrN2Cll68c6eleBPvswDQYJKoZIhvcNAQEFBQAw +ezELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxLjAsBgNVBAoT +JU1hc3NhY2h1c2V0dHMgSW5zdGl0dXRlIG9mIFRlY2hub2xvZ3kxJDAiBgNVBAsT +G01JVCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wOTA3MDYxNjAwMDBaFw0x +MDA3MDgxNjAwMDBaMIHXMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz +ZXR0czESMBAGA1UEBxMJQ2FtYnJpZGdlMS4wLAYDVQQKEyVNYXNzYWNodXNldHRz +IEluc3RpdHV0ZSBvZiBUZWNobm9sb2d5MS0wKwYDVQQLEyRTdHVkZW50IEluZm9y +bWF0aW9uIFByb2Nlc3NpbmcgQm9hcmQxHTAbBgNVBAMTFHNjcmlwdHMtY2VydC5t +aXQuZWR1MR4wHAYJKoZIhvcNAQkBFg9zY3JpcHRzQG1pdC5lZHUwgZ8wDQYJKoZI +hvcNAQEBBQADgY0AMIGJAoGBALU+IU3BiWsBjEeA/rM3J3b4UkHmoj1Ldnjl8mY8 +D7Gt+5ePLqK2U9O2DuJm+bkLt8601fUcH28ifUj1bfAWzY5IedEUShQvL/jEvR2H +z32LXHetWCSwDqFt1grH2LwvZ2XIXdjYMcJnS0r0oaVUgq/LNAgqBH+OfEy329xq +il2BAgMBAAGjgaswgagwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBeAwJwYD +VR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMEBggrBgEFBQcDAjALBgNVHQ8EBAMC +BeAwHQYDVR0OBBYEFFQRfAlVRByURamidkYrLCQmakToMDMGA1UdHwQsMCowKKAm +oCSGImh0dHA6Ly9jYS5taXQuZWR1L2NhL21pdHNlcnZlci5jcmwwDQYJKoZIhvcN +AQEFBQADgYEAKzm6sDYT/MG79TSV1FoMCCrbYqB76pw7ou0hIm1Jy3i5/Xreqj4Z +0SIKCfHImyCArwyadsbPjtMc3eIywtqfIGIjF2jW2g1tiBg+TsstdLCvIzi6FLUa +5469Ib45BzB2jnF8yfCt8NXXaS96qzXYTxcr7af8tBzi/J4Ar1EsRig= -----END CERTIFICATE----- Index: /branches/fc11-dev/server/fedora/config/etc/ssh/shosts.equiv =================================================================== --- /branches/fc11-dev/server/fedora/config/etc/ssh/shosts.equiv (revision 1245) +++ /branches/fc11-dev/server/fedora/config/etc/ssh/shosts.equiv (revision 1246) @@ -3,6 +3,8 @@ bees-knees.mit.edu cats-whiskers.mit.edu +pancake-bunny.mit.edu 172.21.0.53 172.21.0.57 172.21.0.167 172.21.0.228 +172.21.0.237 Index: /branches/fc11-dev/server/fedora/config/etc/ssh/ssh_known_hosts =================================================================== --- /branches/fc11-dev/server/fedora/config/etc/ssh/ssh_known_hosts (revision 1245) +++ /branches/fc11-dev/server/fedora/config/etc/ssh/ssh_known_hosts (revision 1246) @@ -1,2 +1,3 @@ +pancake-bunny.mit.edu,pancake-bunny,p-b.mit.edu,p-b,scripts6.mit.edu,scripts6,18.181.0.237,172.21.0.237 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuEpkEgaIgjK7F1gV81lLSYTwSqIZX/9IJs37VaJCsJFv3D86uuJSdfI3Y94fPn2OH6AxfdaqGNksVdi27mKQfzvCB4ogjQgxmM391MIDLd+izZDY0YvCb4DqJLMJUpX49cNUMkj+/rJg1O0K2w/lb8DGr7wdoLSPKCUJNJv5WMMDxpFL253lPELsmnds4T+R6LpTt6W9+FalHl84me51sEjV9PbmhcTaNwuoJStAjhrKPfgHHDIKNyCUvaVkoHPXEsdzz00yY7i57djyZlzPV/jM7LKar+Xw2LB0Z3098IQcdbD8zmz2DdakPTlShxavNPC6kZDZ3WVqziC+bszaSQ== cats-whiskers.mit.edu,cats-whiskers,c-w.mit.edu,c-w,scripts4.mit.edu,scripts4,18.181.0.228,172.21.0.228 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuEpkEgaIgjK7F1gV81lLSYTwSqIZX/9IJs37VaJCsJFv3D86uuJSdfI3Y94fPn2OH6AxfdaqGNksVdi27mKQfzvCB4ogjQgxmM391MIDLd+izZDY0YvCb4DqJLMJUpX49cNUMkj+/rJg1O0K2w/lb8DGr7wdoLSPKCUJNJv5WMMDxpFL253lPELsmnds4T+R6LpTt6W9+FalHl84me51sEjV9PbmhcTaNwuoJStAjhrKPfgHHDIKNyCUvaVkoHPXEsdzz00yY7i57djyZlzPV/jM7LKar+Xw2LB0Z3098IQcdbD8zmz2DdakPTlShxavNPC6kZDZ3WVqziC+bszaSQ== bees-knees.mit.edu,bees-knees,b-k.mit.edu,b-k,scripts3.mit.edu,scripts3,18.181.0.167,172.21.0.167 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuEpkEgaIgjK7F1gV81lLSYTwSqIZX/9IJs37VaJCsJFv3D86uuJSdfI3Y94fPn2OH6AxfdaqGNksVdi27mKQfzvCB4ogjQgxmM391MIDLd+izZDY0YvCb4DqJLMJUpX49cNUMkj+/rJg1O0K2w/lb8DGr7wdoLSPKCUJNJv5WMMDxpFL253lPELsmnds4T+R6LpTt6W9+FalHl84me51sEjV9PbmhcTaNwuoJStAjhrKPfgHHDIKNyCUvaVkoHPXEsdzz00yY7i57djyZlzPV/jM7LKar+Xw2LB0Z3098IQcdbD8zmz2DdakPTlShxavNPC6kZDZ3WVqziC+bszaSQ== Index: /branches/fc11-dev/server/fedora/config/etc/ssh/sshd_config =================================================================== --- /branches/fc11-dev/server/fedora/config/etc/ssh/sshd_config (revision 1245) +++ /branches/fc11-dev/server/fedora/config/etc/ssh/sshd_config (revision 1246) @@ -19,3 +19,3 @@ IgnoreRhosts yes IgnoreUserKnownHosts yes -DenyUsers root@old-faithful.mit.edu root@better-mousetrap.mit.edu root@bees-knees.mit.edu root@cats-whiskers.mit.edu +DenyUsers root@old-faithful.mit.edu root@better-mousetrap.mit.edu root@bees-knees.mit.edu root@cats-whiskers.mit.edu root@pancake-bunny.mit.edu Index: /branches/fc11-dev/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 =================================================================== --- /branches/fc11-dev/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (revision 1245) +++ /branches/fc11-dev/server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (revision 1246) @@ -6,2 +6,3 @@ 18.181.0.167 via 172.21.0.167 18.181.0.228 via 172.21.0.228 +18.181.0.237 via 172.21.0.237