Location: NodeLuckyLab
Date and Time: Wednesday, October 25, 2017, 6:30-8:00 p.m.
Scribe: You
Roll Call: RussellSenior,SteveTree,JasonBergstrom

Agenda

• CanvasHost explusion fallout

  • The general plan is this:
    • VM-ize iris, temporarily on green
    • rebuild iris as a VM host, tentatively named purple to stick with the color theme, reinstall in Stephouse
    • move three VMs from green to purple, fixing up ipaddrs along the way

    • go unplug green from CanvasHost before November 1

  • Work continues on VM-izing iris, temporarily on green
    • Services iris provides:
      • bind slave -- configured
      • openvpn client (to knod) and server (to nodes) -- on hold
      • cacti -- needs moving, implies php and mysql moves as well
      • olsrd -- olsrd is built from AUR, installed, but not yet configured or started
  • We should automate the startup of the ptp-api server, currently started manually (when people eventually remember)
  • Moved personaltelco domains to Russell's DNSimple:
    • personaltelco.com, personaltelco.net and personaltelco.org are now moved
    • three of Russell's domain nameservers now registered:
      • ns0.klickitat.com 74.85.245.161 (knod, master)
      • ns1.klickitat.com 199.223.125.94 (iris, slave)
      • ns2.klickitat.com 199.223.125.93 (knod, after the transition to Stephouse)
    • TTL changed in /etc/bind/include/header from 1d to 10m to facilitate changes. Immediately before transition, shorten this up even more.
    • Three new public ipaddrs obtained from Stephouse, will be allocated as follows:
      • 199.223.125.88 purple (VM host)
      • 199.223.125.89 spare (unallocated)
      • 199.223.125.90 drei
      • 199.223.125.93 knod
      • 199.223.125.94 iris (where it lives currently)
      Name servers are changed to the klickitat ones above during the transition, for better control, then switch back after the dust settles and personaltelco.net glue records can be reasonably set.
  • OpenVPN node management network -- most nodes have been re-aimed at drei, so that iris can be moved to the VM, exceptions are:

    • NodeMatt -- pad has been offline since Sep 2

    • NodeLabarre -- metal has been offline since Oct 5

    • NodeKnow -- herb has been offline since Aug 22

    • NodeCedarHillsCrossing -- has been offline since Oct 17 for electrical work

    • NodePotatoChampion -- has been offline since July-something

    • NodeEdison -- no upstream yet, due on Oct 26

    These can probably be left to recover until after the transition
  • Consider installing green in a Portland State/OIT rack for ~$25/month.
    • pros:
      • provides resiliency in case of damage, allows a place to hop if one host is damaged or lost;
      • provides practically unlimited online storage at fixed cost;
      • provides privacy benefits over cloud storage that could be seized without notice.
    • cons:
      • costs some money, $433 first year, $308/year after that.

      • we haven't yet clarified what that buys us, exactly, but see here: https://computing.pdx.edu/servicecatalog#ServerHostingPhysical and https://computing.pdx.edu/sla0

    • alternatives:

      • Russell's or Jason's or FreeGeek's CL fiber -- downside is mostly that we get no SLA, and in my experience CL decides to take outages at their whim and with no notice, sometimes short, but sometimes lasting hours.

      Russell feels like the money could be raised, people are often willing to help out for concrete things. In any case, immediate action is not needed, it will take longer anyway
• None Yet

Notes

• Discussion about iris migration plan
  • not sure about 4TB boot drives
  • IPv6 node connectivity
  • Need to start cleaning up disks/DBs
  • How to start API server on boot?
    • needs parameters to create manifest
• Hosting replacement
  • bkero on IRC - PSU/OSLab hosting?

  • RussellSenior will contact Sandy Net to see if they have a hosting option (or can we create one?)

• Possible DNS Simple role account
  • Need to revisit next year - Russell re-upped for a year
• Node notes:

  • NodeEdison - should be plugged in Thursday

  • NodeLabarre - need followup

  • NodeKnow - need followup

  • NodePotatoChampion - need followup

  • WDR3600 - small flash - OpenVPN uses PolarTLS which causes 2 sets of SSL libs to be included images - EmbedTLS

• Next week's meeting is NodeLuckyLabNorthwest

[CategoryMeetingNotes]