new interface
mhh the visual-editor is not working well in opera 9.5 on OSX …..

• extracted and modified for new home into Roy
• Loaded up and running
• Databases extracted…
• Tech tech fed and watered (thanks to Delfine)

Things left to do: resolve the Bind <–> LDAP connection, set up Roy as DNS, try it all…

happy blogging.

yours, bernhard

Present: binsh, foo, martin, suntzu, stefan
Also: pablo, julia

• Matthias G: It’s all done, Virtually speaking! VMs are set up awaiting…
• Admins should request SSH passwords on all services …
• Sonance core applications => Candy !!!! this is the area for Martin.
  Drupal, PHP5 only!!
  ISPagent also installed.
• install a new Mediawiki version on Candy.
  get it going with LDAP.
• Need an SVN repository. How to run it? … Stefan could experiment from summer.
  Onto candy.
• Instiki-wiki … Matthias can identify who top users are and tell them it is going to be shut off.
• Martin wants to be “taken off” Roy (DNS, LDAP, ISPman).
• Hoss (databases) is installed MySQL … running on localhost only so far.
• Users to get new passwords.
• How to move the users? Do the users move themselves….. Decide this when DNS is going, below ===>
• If they show no sign, they disappear?????…… If they show up on wednesday or move it themselves, we can help! Board decision or not?

DNS

• Talked to Subik, sent him all the stuff. List of VMs, plan of split services.
• Subik should be preparing the DNS.
  This is now a critical blocking action!!!
• DNS is to go onto Roy.
• Question to DNS/team: how are internal names set up like hoss and roy/ldap?
  Internal /etc/hosts file?
  ldap.sonance.net, mysql.sonance.net, ?

Stream

• Gernot for typo3
• But it needs ImageMagic
• ImageMagic needs fopen() which is what caused the hack.
• Therefore not on candy as yet!
• In 1.5 months exactly, Matthias G and Oliver will complete Stage 1 of
  the Streaming and Converting Booster rocket.
• onto adam/stream.
• Then we have to think about how to integrate it to drupal….
• Streaming server had Flash converter,
  streams video … can either embed Quicktime or use a Flash player …
  Only streaming tech that Flash supports is RTMP (sp?)
  only streaming service that is free/not open source is
  “Flash Streaming Server” and possibly Helix.
  This way we can stream video in flash.
  is useful because it supports Quicktime …
• But we shall instead wait 1.5 months and then it will be solved.
  The installed copy had a dodgy past…

Misc

• (Martin) Antony was mentioned by Martin, is PHP/UN/CC/BG.
  Can he be brought in … YES!
• (SunTzu) CAcert might ask for support from sonance when they bring in a new guy to manage system moves: machines, space, net, sysadms, etc. More as it develops.
• (binsh) Pooool migration work is done, moved to sing.
• Pooool main portal is PHP, wordpress, mediabase (problem security wise)
  Needs ISPman Management tool … on Sing
• Should go on Clem.
  ISPman

Zentrix hacked again and again …

• Zentrix VM got hacked last friday night.
• Cleanup lasted minutes and it was hacked again by monday.
• vector of attack was either mod_perl or mod_php, no clarity on this point
• PHP was opened up again last September.
• Only active sysadms now have access, and new security policy is in place.
• subik moving dns to new VM with assistance from FF’s Wolfgang
• subik will solve ldap domains change problem.

• M1: Bonanza had a hardware / config error fixed
  • changed a network card, shut off BIOS/USB/Fireware
• M2: Blackadder is on the bench
  • ex pooool machine
  • how to use is a work in progress
• M3: is delivered
  • machine of games company, will
  • how to use this machine is also a work in progress.
  • We need a new name for this machine.  B-something?
• all old machines going to Matthias’ work place
  • zentrix there
  • mediatix is still at philip’s place
  • mx1 to be picked up from FF
  • simon leaving friday, back 25th, Matthias to pick up machines from simon’s place
• might have a request for some temporary machines from CAcert
• requested FF dropping of all additional contracts
  • should be now just Bonanza for Sonance
  • also CAcert 1+2 to be billed
• support telephone needs to be handed over
  • it will likely be dead while Simon is away
  • it is likely dead anyway
  • requested 300pm in next budget

From now on, we’ll try and do the protokol on the blog and see how it goes. Open Governance rocks.

Before, we had a smattering of white machines that were continually giving problems in late 2006. Although they pretty much performed flawlessly during 2007, we suffered from ever-present fear as these old constructed-from-old-parts machines rumbled and rattled on, always treating the next day as their last.

Now we have two primary systems in place: a new big black machine called Bonanza which operates as the host for lots of virtual machines, located here in Funkfeuer, and a remotely hosted machine in Germany for reliable mail transport.

Sonance is now in much better shape to offer serious services, as at least the hardware is solid. We still have a lot of software re-organisation to do, we want to gradually strip all the services out of the old core machine (Zentrix) and move them into separated virtual machines for independence and robustness.

Also, hardware will continue to grow. It looks like over the next year we will field another big VM machine, and possibly two. This will give us the ability to failover for critical VMs. We also would like to purchase an independent file server for the data, giving us even more flexibility. Budget willing!

Things that were broken and then got fixed: Imap webmail services, DNS, backups to /BKP.

There might be more problems, please send problems to support at lists.support.net