Meeting Date

• TEAMS: 2024-05-15

Invited

Anthony (group leader), Lori, Clayton, Guoxiang, Nathan, Nick, Todd, Ed, Devon, Gwen

Attendees

• Anthony (group leader), Clayton, Nathan, Nick, Todd, Ed, Fraser

Review and accept previous meeting minutes.

CsLWGMeeting20240501

Review last meeting's Action Items

linux.cscf.uwaterloo.ca

• Still blocked on comprehensive review of authentication/authorization configuration, work stalled

New DFSc Hardware

• Has been racked
• Currently acquiring necessary additional (three) Network Card(s)

DFSc Performance

• Looking to re-enable snapshots (May 9) for GENERAL environment to provide some live testing
  • Relatively low traffic
• Blocked on cleanup of old homedirs
  • Work proceeding on cleanup here, Anthony will work with Guoxiang
  • Need direction on retention policy from school - after expiry or sponsorship? Should be added to documentation once it has been decided upon * need to configure warning emails to students before account expires
• Need to send message to users (login message (only applies to login shell), other?) when snapshots are re-enabled, links to appropriate end user documentation - Anthony
  • Will leverage MOTD to point to other more comprehensive documentation
  • Engage management on documentation location (Anthony)
    • Nick Lee maintains a useful page on www.cs.uwaterloo.ca about the general use TEACHING environment, collocating documentation there is an option.

Endpoint Protection

• IST wants to deploy SentinelOne end point security agents on all devices
• INF group to deploy on all workstations
• Planning test deployment to linux.student.cs (on a single node) in passive (watch and complain) mode for spring term,
  • IST controls the mode of the software and to provide CSCF with new token
    • Token acquired
• What if anything is sent to third-party/off site servers? For privacy reasons, we need an answer before we do a roll out
  • Try to get this in writing for future reference
• Any docs on what the program does and how it does it?
  • Not really, possible answers in the Knowledge Base, may need to create an account with vendor to get access
• Need clarification from upper management about pushing Sentinal One to previously deployed devices (Devon)
  • So far approach seems to be to get it on all "new" devices going out
  • CSCF staff to install themselves - instructions can be found here: ???? and should be communicated to staff
  • Mac workstations to be deployed remotely - see announcement in TOP channel * Waiting on Devon's return to send email out to staff
  • Windows workstations may need to be done "physically" by CSCF staff (optional)

End of Term Private Cloud reboots

• Mostly complete, along with some migrations to allow re-provisioning of *-203.cloud onboard storage

Reboot of linux.{student,}.cs

• Possibly April 29th (Guoxiang)
  • Complete

New Business

Cups

• RT: 1238949 - need to carry forward - still in use

Future of RT

• CSCF and MFCF to discuss - May 16
• Upgrade of RT 4 --> RT 5

Comments