• extracted and modified for new home into Roy
• Loaded up and running
• Databases extracted…
• Tech tech fed and watered (thanks to Delfine)

Things left to do: resolve the Bind <–> LDAP connection, set up Roy as DNS, try it all…

Present: binsh, foo, martin, suntzu, stefan
Also: pablo, julia

• Matthias G: It’s all done, Virtually speaking! VMs are set up awaiting…
• Admins should request SSH passwords on all services …
• Sonance core applications => Candy !!!! this is the area for Martin.
  Drupal, PHP5 only!!
  ISPagent also installed.
• install a new Mediawiki version on Candy.
  get it going with LDAP.
• Need an SVN repository. How to run it? … Stefan could experiment from summer.
  Onto candy.
• Instiki-wiki … Matthias can identify who top users are and tell them it is going to be shut off.
• Martin wants to be “taken off” Roy (DNS, LDAP, ISPman).
• Hoss (databases) is installed MySQL … running on localhost only so far.
• Users to get new passwords.
• How to move the users? Do the users move themselves….. Decide this when DNS is going, below ===>
• If they show no sign, they disappear?????…… If they show up on wednesday or move it themselves, we can help! Board decision or not?

DNS

• Talked to Subik, sent him all the stuff. List of VMs, plan of split services.
• Subik should be preparing the DNS.
  This is now a critical blocking action!!!
• DNS is to go onto Roy.
• Question to DNS/team: how are internal names set up like hoss and roy/ldap?
  Internal /etc/hosts file?
  ldap.sonance.net, mysql.sonance.net, ?

Stream

• Gernot for typo3
• But it needs ImageMagic
• ImageMagic needs fopen() which is what caused the hack.
• Therefore not on candy as yet!
• In 1.5 months exactly, Matthias G and Oliver will complete Stage 1 of
  the Streaming and Converting Booster rocket.
• onto adam/stream.
• Then we have to think about how to integrate it to drupal….
• Streaming server had Flash converter,
  streams video … can either embed Quicktime or use a Flash player …
  Only streaming tech that Flash supports is RTMP (sp?)
  only streaming service that is free/not open source is
  “Flash Streaming Server” and possibly Helix.
  This way we can stream video in flash.
  is useful because it supports Quicktime …
• But we shall instead wait 1.5 months and then it will be solved.
  The installed copy had a dodgy past…

Misc

• (Martin) Antony was mentioned by Martin, is PHP/UN/CC/BG.
  Can he be brought in … YES!
• (SunTzu) CAcert might ask for support from sonance when they bring in a new guy to manage system moves: machines, space, net, sysadms, etc. More as it develops.
• (binsh) Pooool migration work is done, moved to sing.
• Pooool main portal is PHP, wordpress, mediabase (problem security wise)
  Needs ISPman Management tool … on Sing
• Should go on Clem.
  ISPman

Zentrix hacked again and again …

• Zentrix VM got hacked last friday night.
• Cleanup lasted minutes and it was hacked again by monday.
• vector of attack was either mod_perl or mod_php, no clarity on this point
• PHP was opened up again last September.
• Only active sysadms now have access, and new security policy is in place.
• subik moving dns to new VM with assistance from FF’s Wolfgang
• subik will solve ldap domains change problem.

• M1: Bonanza had a hardware / config error fixed
  • changed a network card, shut off BIOS/USB/Fireware
• M2: Blackadder is on the bench
  • ex pooool machine
  • how to use is a work in progress
• M3: is delivered
  • machine of games company, will
  • how to use this machine is also a work in progress.
  • We need a new name for this machine.  B-something?
• all old machines going to Matthias’ work place
  • zentrix there
  • mediatix is still at philip’s place
  • mx1 to be picked up from FF
  • simon leaving friday, back 25th, Matthias to pick up machines from simon’s place
• might have a request for some temporary machines from CAcert
• requested FF dropping of all additional contracts
  • should be now just Bonanza for Sonance
  • also CAcert 1+2 to be billed
• support telephone needs to be handed over
  • it will likely be dead while Simon is away
  • it is likely dead anyway
  • requested 300pm in next budget

From now on, we’ll try and do the protokol on the blog and see how it goes. Open Governance rocks.

Main point of this is to figure out what the structure of the evolve page is. Should this be used for all tech team doco in the future? We want to figure out the doco strategy for the future, and it seems that werkstattext wiki isn’t part of that future.

Comments?