nlnog / ring-puppet Goto Github PK

example:

[submodule "modules/munin"]
url = [email protected]:DavidS/puppet-munin.git

This way we don't have to pull all files from all modules into our main repo. At some point we need to move those files out, and refer to forked versions.

container04 VG needs to be renamed from 'vg01' to 'container04' because the scripts make assumptions what the vg is called

the vg contains the root partition so might be fun to do

purgekernels currently does not purge linux-headers packages. This may cause /usr to fill up over time.

the current root partition is too large, we cannot create new logical volumes. Given that its the root partition we need to do some hoolahoop with booting from virtual media or whatever

container01.ring.nlnog.net needs to be renamed to container01.infra.ring.nlnog.net.

• DNS
• puppet
• VM creation needs to be tested
• remove old nagios stuff
• ensure puppet cert still works or a new one is made

• reconfigure our looking glass to dump updates to file
• get some MTR dump collections stuff running
• create VM
• peer with other BGPMon instances (claranet?)

container05 needs to be converted to LVM setup

currently it has 2xdisk in hardware raid1, needs to be converted from plain partition setup to LVM partition setup

This currently does not work:

ring-pdns add record graphite.infra.ring.nlnog.net cname worker02.ring.nlnog.net

but this does work:

ring-pdns add record graphite.infra.ring.nlnog.net CNAME worker02.ring.nlnog.net

because that way everything is cleaner and better to read :-)

Sometimes puppet hangs. Nagios should tell us.

if our SSL certificate expires puppet will stop working. We gotta rollover with plenty of time ahead of us at some point.

I guess we'll be using powerdns because we love @Habbie

As detailed on http://marc.info/?l=openbsd-cvs&m=135163261632479&w=2, OpenSSH now supports a setting that calls out to a defined program to generate the authorized_keys list for a login. Perhaps this could make key management for the ring easier?

If we feel this has merit, I would be happy to look into building openssh packages with this feature.

[15:07] @cmouse # cat ring.nlnog.net.conf | pastebinit -b https://ring.nlnog.net/
[15:07] @cmouse https://ring.nlnog.net/paste/p/oehrxmsyxxney6u
[15:13] @cmouse pastebinit sets default hardcoded
[15:14] @cmouse which is somewhat bastard solution
[15:14] @cmouse you could do alias pastebinit="pastebinit -b https://ring.nlnog.net/"

content of the config file should be:

[pastebin]
basename = ring.nlnog.net
regexp = "https://ring.nlnog.net/"

[format]
content = content
expire_options = ttl
page = page

[defaults]
submit = "Save"
page = 'paste/'
expire_options = 86400

http://www.shibuvarkala.com/2009/04/howto-enable-process-accounting-in.html

• centralized logging

our KVM stuff used to work, but it doesnt create a machine that is bootable: example is db02.infra.ring.nlnog.net