Linux Working Group

Meeting Date

• TEAMS: 2023-08-09

Invited

• Anthony (group leader), Lori, Dave, O, Clayton, Guoxiang, Nathan, Nick, Todd, Ed

Attendees

• Anthony, Clayton, Guoxian, Nathan, Devon, Nick

Review and accept previous meeting minutes.

• CsLWGMeeting20230726

Review last meeting's Action Items

• Homedirectory quotas (a2brenna) - RTs: 1112506, 1288354,1298614 et al
  • 100 GB quotas in staged roll out, plan detailed in tickets above
    • Backups finished, email ready, see RT: 1288354
  • Tooling to generate quota information
    • Calculate current quotas from sponsorship information (Clayton)
      • Need to determine when quota data will be populated in SAT
      • Clayton suggests adding up all sponsored quotes and giving them either that, or the minimum 100GB quota (whichever is bigger).
      • RT1298614
  • Good to proceed?
    • Nick: Nov 1st deadline should be enough time for users to bring their disk usage < 100GB
    • Anthony: Want to enable quotas for all users under 100GB for the start of term (in preparation of new accounts)
    • Anthony: The lack of sponsorship quota information should not block the 100GB quota deployment

• Sunsetting *-202.cloud.cs.uwaterloo.ca (18.04 Infrastructure Cloud hosts) (a2brenna)
  • Containers need to be migrated
    • mail-106.cs.uwaterloo.ca
    • mx-106.cs.uwaterloo.ca
    • dc-nfs-002.student.cs.uwaterloo.ca
    • dc-samba-002.student.cs.uwaterloo.ca
    • dc-samba-102.cs.uwaterloo.ca
    • dc-nfs-104.cs.uwaterloo.ca
    • m3-samba-002.student.cs.uwaterloo.ca
    • m3-samba-102.cs.uwaterloo.ca
    • m3-nfs-104.cs.uwaterloo.ca
    • mc-nfs-002.student.cs.uwaterloo.ca
    • mc-samba-002.student.cs.uwaterloo.ca
    • mc-samba-012.student.cs.uwaterloo.ca
    • mc-samba-102.cs.uwaterloo.ca
    • mc-nfs-006.student.cs.uwaterloo.ca
  • Upgrading from 18.04 to 20.04
  • Upgrading from 20.04 to 22.04

• CS VPN Issues
  • Initial failure caused by reliance on IST DNS (and failure of two domain controllers while patching)
    • "fixed" by adding a CS DNS server to each openvpn endpoint
  • RT 1301028
  • Fixed

* AMD Zenbleed vulnerability (CVE-2023-20539)

• • Updated amd-microcode package available
  • See RT 1300871 for more information and a sample exploit for testing system vulnerability
  • Anthony: Mostly patched in the general environment

New Business

• CVE-2022-40982 - Downfall
  • Information leak targeting all modern Intel chips via AVX instructions
  • See https://downfall.page/
  • RT#1302473

• CS Mailservers are going away
  • Fall will be the last term cs.uwaterloo.ca email will be available
  • Student mailservers are already gone

Comments