Meeting Date

• TEAMS: 2024-05-01

Invited

Anthony (group leader), Lori, Clayton, Guoxiang, Nathan, Nick, Todd, Ed, Devon, Gwen

Attendees

• Anthony (group leader), Clayton, Guoxiang, Nick, Todd, Ed, Devon, Fraser

Review and accept previous meeting minutes.

CsLWGMeeting20240417

Review last meeting's Action Items

linux.cscf.uwaterloo.ca

• Still blocked on comprehensive review of authentication/authorization configuration, work stalled

New DFSc Hardware

• Has been racked
• Currently acquiring necessary additional (three) Network Card(s)

DFSc Performance

• Looking to re-enable snapshots (May 9) for GENERAL environment to provide some live testing
  • Relatively low traffic
• Blocked on cleanup of old homedirs
  • Work proceeding on cleanup here, Anthony will work with Guoxiang
• Need to send message to users (login message (only applies to login shell), other?) when snapshots are re-enabled, links to appropriate end user documentation - Anthony
  • Will leverage MOTD to point to other more comprehensive documentation (confluence?)
  • Engage management on documentation location (Anthony)

Endpoint Protection

• IST wants to deploy SentinelOne end point security agents on all devices
• INF group to deploy on all workstations
• Planning test deployment to linux.student.cs in passive (watch and complain) mode for spring term,
  • IST controls the mode of the software and to provide CSCF with new token
• What if anything is sent to third-party/off site servers? For privacy reasons, we need an answer before we do a roll out
  • Try to get this in writing for future reference
• Any docs on what the program does and how it does it?
  • Not really, possible answers in the Knowledge Base, may need to create an account with vendor to get access
• Need clarification from upper management about pushing Sentinal One to previously deployed devices (Devon)
  • So far approach seems to be to get it on all "new" devices going out
  • CSCF staff to install themselves - instructions can be found here: ???? and should be communicated to staff
  • Mac workstations can be deployed remotely (if possible)
  • Windows workstations may need to be done "physically" by CSCF staff (optional)

End of Term Private Cloud reboots

• Not doing it all on one day, still computing a schedule, will reach out to individual Admin Contacts to schedule small downtime windows
  • Tickets have been created
  • Numerous LXCs handled, but many outstanding

Reboot of linux.{student,}.cs

• Possibly April 29th (Guoxiang)

New Business

Comments