Warning Livedoc is no longer being updated and will be deprecated shortly. Please refer to https://documentation.tjhsst.edu.

Difference between revisions of "Current Program Goals"

From Livedoc - The Documentation Repository
Jump to: navigation, search
(Short-Term Goals)
(Add a bunch of stuff)
Line 16: Line 16:
 
# Set up an additional [[www]] VM and load balance the two VMs. Our web traffic is steadily increasing and webserver reliability would receive a significant boost from such load balancing.
 
# Set up an additional [[www]] VM and load balance the two VMs. Our web traffic is steadily increasing and webserver reliability would receive a significant boost from such load balancing.
 
# Use Salt to streamline the Workstation imaging process.
 
# Use Salt to streamline the Workstation imaging process.
 +
# Identify unknown systems, document them and add them to RDNS.                                                                                           
 +
# Give observium more resources, and give it permission to query libvirt.
 +
# Move iodine-ldap and openldap1/2 to the lmdb backend, as well as generating valid ssl certs and using them.
 +
# Audit backup system, and ensure disaster recovery plan is complete.
 +
# Make sure mirror is up-to-date, and that it remains so.
 +
# Make sure the mailservers support tls fully, and use it.
 +
# Integrate nagios with livedoc.
 +
# Setup a central syslog collector.
 +
# Make sure nagios is monitoring everything.
 +
# Create additional nagios distribution lists so that people can receive only the events they care about.
 +
# Setup a CSL Play Store account.
  
 
=== Long-Term Goals ===
 
=== Long-Term Goals ===
Line 21: Line 32:
 
# Move web files outside of AFS, possibly to a shared NFS mount stored on [[Sonic]], to decrease latency.
 
# Move web files outside of AFS, possibly to a shared NFS mount stored on [[Sonic]], to decrease latency.
 
# Improve security for user web sandboxes.
 
# Improve security for user web sandboxes.
 +
# Migrate lists to mailman 3.0.
 +
# Setup a SSO system: auth livedoc, observium, etc against the main ldap servers.
 +
# Investigate setting up eduroam Wi-Fi
 +
# Develop a self-service system to create web-docs and other website spaces after approval.

Revision as of 12:06, 20 April 2016

This page is a working version of the Sysadmin program's current high-level short, medium, and long-term goals. Small tasks which are part of these high-level goals should be put on [1], not here.

Short-Term Goals

  1. Migrate VM storage still on Fryingpan to Apocalypse. Multiple VMs located on Fryingpan have recently been encountering I/O errors, so this is a top priority to ensure no loss of data occurs.
    1. Acquire more storage for Apocalypse. Right now, Apocalypse is over 70% capacity. More disks should be purchased and we should add an additional vdev to the Apocalypse pool.
  2. Fix issues we have been experiencing with Kerberos/our cross-domain trust by moving to a MIT Kerberos KDCs from our Heimdal KDCs.
    1. Fix related LDAP issues. These are placing a significant burden on use of Intranet student directory features for students and staff.
  3. Set up / finish setting up the three new G6s we acquired as VM servers.
  4. Migrate VMs from and decommission Vega, due to aging hardware.
  5. Develop official tool to update LDAP from SIS data ready for the start of the 2017 school year

Medium-Term Goals

  1. Put the finishing touches on the new HPC cluster and open it up for use by the general student/staff body.
    1. Streamline home directory and slurm account creation
    2. Write usage policy
  2. Set up an additional www VM and load balance the two VMs. Our web traffic is steadily increasing and webserver reliability would receive a significant boost from such load balancing.
  3. Use Salt to streamline the Workstation imaging process.
  4. Identify unknown systems, document them and add them to RDNS.
  5. Give observium more resources, and give it permission to query libvirt.
  6. Move iodine-ldap and openldap1/2 to the lmdb backend, as well as generating valid ssl certs and using them.
  7. Audit backup system, and ensure disaster recovery plan is complete.
  8. Make sure mirror is up-to-date, and that it remains so.
  9. Make sure the mailservers support tls fully, and use it.
  10. Integrate nagios with livedoc.
  11. Setup a central syslog collector.
  12. Make sure nagios is monitoring everything.
  13. Create additional nagios distribution lists so that people can receive only the events they care about.
  14. Setup a CSL Play Store account.

Long-Term Goals

  1. Migrate from a joint Nginx/Apache setup to Nginx-only on WWW.
  2. Move web files outside of AFS, possibly to a shared NFS mount stored on Sonic, to decrease latency.
  3. Improve security for user web sandboxes.
  4. Migrate lists to mailman 3.0.
  5. Setup a SSO system: auth livedoc, observium, etc against the main ldap servers.
  6. Investigate setting up eduroam Wi-Fi
  7. Develop a self-service system to create web-docs and other website spaces after approval.