Linux Working Group

• In General
  • Any progress on moving Dan Berry's /opt/csw? * RSG discuss moving to jerusalem directly * Configure an NFS share via gateways: lfolland will create ticket for ctucker

• • Any word from Isaac about use of Nettap for storing web logs? Ticket (a2brenna) for ijmorlan

• TEACHING - Progress reports on
  • old home directory snapshots on NetApp: Keep older than 16 months? a2brenna discuss with yc2lee
  • xhier regional trees: Destinations exist on DFSC.

• CS-GENERAL - Progress reports on
  • xhier regional trees
• Are we still on track for moving mail in December?
  • lfolland sent notification for move CS maill to IST on 2021-11-24
    • Do not move mail homes to DFSC until after move to IST
    • lfolland to discuss with sdinney

CS Teaching - slowness of systems - how to address? (All)

• Ceph:
  • New 420 systems online? Yes. Old MDS retired
  • Gateway systems (NFS/Samba) upgraded? block old client?
  • Client kernel updates (that includes CEPH patch): Looks like latest 5.11 contains relevant patch (a2brenna). Will need to test on 000/100 systems
• cgroup limiting of memory usage
  • Seems to be working as expected (a2brenna)
  • lfolland: Any improvement? Memory exhaustion problem solved. Still working MDS/cap recall issues
  • Report reboots/changes to production state in CSCF Teams Changes channel. In particular ubuntu2004-008 rebooted. Why?

Hosts for production DB (postgres) containers? (Lori and Nathan)

• review where we have suitable disk space that can be repurposed as xfs volume for this service: a2brenna No systems available with that storage
• Possibly recover 960GB Optane cards from 422 systems (ldpaniak)?

Changes to Regions:

• OpenEdx has requested modest increase in disk space for test environment. Not a problem.

Management of portable devices

BUMPED from last meeting

Review new pam stack setup and files. (Dave and Clayton) DONE

• deployment of /etc/ssh/sshd_config, /etc/pam.d/sshd, /usr/share/doc/pam-kerberos-yubikey-duo-message.txt, /usr/local/bin/pam_exec-internal_ip_test.sh script
• after the deployment of above file, need to run "systemctl reload ssh"

New business

Storage option catalogue:

OdysseyDB backup volume (s8weber) on DFSC

Dell firmware updates on iDRAC9 went smoothly

Limits to number of processes on CS-GENERAL systems?

• • Look into it and report back

Networking extension (dlgawley): https://cs.uwaterloo.ca/cscf/internal/infrastructure/services/network/ServerRooms/proposed/