OLPC:Volunteer Infrastructure Group/2008-09-23

Action Items

17:40 <@hhardy> ACTION ITEM: lfaraone to chair committee on single-signon options 17:53 <@hhardy> ACTION ITEM: find a volunteer to triage and characterize existing sysadmin tickets and come up with a useable list of custom fields to use 17:58 <@hhardy> ACTION ITEM: hhardy to set up shared calendar for Big Sister monitor scheduling

Agenda

17:16 <@hhardy> Proposal for single-signon to websites (ffm)
17:16 <@hhardy> SAGE ethics statement as a requirement for VIG membership proposal http://www.sage.org/ethics/ethics_vert.pdf
17:16 <@hhardy> Redeploying weka, owl, swan, awk to W-91 ASAP
17:16 <@hhardy> New rt instance on awk
17:16 <@hhardy> TSM backups
17:16 <@hhardy> DB triage and hot backups
17:16 <@hhardy> RT status (adric)
17:16 <@hhardy> Big sister monitoring and maintainence
17:16 <@hhardy> new business

single signon

17:17 -!- hiro [~439f0534@66.90.73.223] has joined #olpc-admin
17:18 -!- kimquirk [~kimquirk@wireless-56.media.mit.edu] has joined #olpc-admin
17:18 < isforinsects> I summon the mighty Arugula!
17:18 <@hhardy> lfaraone, wherefore art thou?
17:18 -!- CanoeBerry [CanoeBerry@1cc-dhcp-250.media.mit.edu] has joined #olpc-admin
17:19 <@hhardy> he was going to talk to us about openid
17:19 <@hhardy> give him 1 minute then we will table that
17:19 < adric> I think appointing a committee to investigate OpenID and SSO to report back _after_ G1G1 would be a lovely idea.
17:19 < adric> I might be willing to make sandwiches or a pot roast for that.
17:19 < CanoeBerry> :)
17:20 <@hhardy> another idea which has been booted around is supporting FAS
17:20 -!- is4 [~isforinse@dhcp-47-140.media.mit.edu] has joined #olpc-admin
17:20 < adric> which acronym is that?
17:20 < CanoeBerry> Fetal Alcohol Syndrome
17:20 < gregdek> Fedora Account System.
17:20 < gregdek> I presume.  :)
17:20 < is4> == Proposal for single signon / Open-id ==
17:20 < adric> Is that off F'd directory server?
17:20 <@hhardy> https://admin.fedoraproject.org/accounts/
17:20 < gregdek> Although I am a strong supporter of Fetal Alcohol Syndrome as well.
17:20 < CanoeBerry> ;)
17:20 < adric> oops, F's *sooowwwy*
17:21 -!- isforinsects [~isforinse@wireless-87.media.mit.edu] has quit [Read error: Connection reset by peer]
17:21 < adric> Formal motion to appoint investiagtory subcommitee.
17:21 < is4> Seconded
17:21 <@hhardy> who will be on the committee?
17:21 < is4> Nominate adric 
17:21 < adric> Luke, at least :)
17:21  * adric declines, politely.
17:22 < is4> and gregdek the Mighty Arugula 
17:22 < CanoeBerry> If regarding OpenID and SSO, I'd like to participate, if from a distance.
17:22 < is4> ...that's a hard word to spelll...
17:22 -!- Ian_Daniher [~it@69.61.230.246] has joined #olpc-admin
17:22 < adric> Do we need abot named after the vegetable so we can tab-complete that in here?
17:22 < is4> CanoeBerry, really?  There are privacy concerns, I though you were generally against it.
17:23 < adric> Motion to make CanoeBerry baliff of the subcommittee.
17:23 < CanoeBerry> Next topic?
17:23 < adric> s/baliff/sergant at arms/
17:24 < gregdek> So...

SAGE ethics statement as a requirement for VIG membership proposal

 < gregdek> ...what's the question again?
17:24 < is4> http://www.sage.org/ethics/ethics_vert.pdf
17:24 < is4> lfaraone, isn't here so we're tabling it.
17:24 -!- hhardy changed the topic of #olpc-admin to: SAGE ethics statement as a requirement for VIG membership proposal 
17:24 < hiro> what is VIG?
17:24 < is4> We're the VIG
17:24 < CanoeBerry> Ethics make you rich, I read it in the Wall Street Journal earlier this week, so I'm buying.
17:24 < adric> This is, Hiro
17:24 <@hhardy> Volunteer Infrastructure Group
17:25 < adric> CanoeBerry: Ouch.
17:25 <@hhardy> aka infrastructure-gang
17:25 < is4> Very Interesting Gang
17:25 < CanoeBerry> Seriously-- the WSJ had a piece titled exactly that ;)
17:25 <@hhardy> oi vey
17:25 < adric> Not having reviewed that Ethics statement lately, I'm in favour of this idea.
17:26 <@hhardy> http://www.sage.org/ethics/
17:26 <@hhardy> please take a few minutes, it is short
17:26 < is4> It's similar to the Code of Behavior at Ubuntu.  People sign it with their gpg key to become Ubuntuneros
17:26 < is4> I'm for it.
17:26 <@hhardy> I am proposing this as our VIG code of conduct
17:27 <@hhardy> I like the idea of gpg signing it
17:27 < adric> Okay, read, agree. (Sorry, the PDF link threw me off before)
17:28 < is4> It's a shame you can't/dont sign files with pub/private ssh keys.  It could become part of the process of providing your public key for various servers
17:28 < adric> Oh, well, sure. Should I generate an @l.o key ?
17:28 < is4> signing the document to verify your key
17:28 <@hhardy> adric: sure
17:28 <@hhardy> any objections?
17:29 <@hhardy> ok done Kim has approved

Redeploying weka, owl, swan, awk to W-91 ASAP

17:30 < is4> == Redeploying weka, owl, swan, awk to W-91 ASAP ==
17:30 <@hhardy> w-91 is the MIT colo
17:31 <@hhardy> weka is the new build server
17:31 <@hhardy> owl is dev/crank mirror
17:31 <@hhardy> swan is pedal mirror
17:32 <@hhardy> owl and swan can be general purpose machiens when they arent being used as hot backups
17:32 <@hhardy> awk is a new machine to contain the private rt instance
17:32 <@hhardy> and also a mirror for our chinese server
17:32 <@hhardy> I propose to do the move the weekend following the upcoming one
17:33 <@hhardy> I need to install awk yet
17:33 <@hhardy> and systematize my mirroring hack into a script and maybe an init state 4 to bring services up and down nicely
17:33 <@hhardy> there might be use for one or two volunteers in the boston area to help physically move the stuff
17:34 <@hhardy> the closet at 1cc is probably at the limits of what the power supply will tolerate and also it is very crowded and noisy in there
17:35 <@hhardy> we need to use the rack space at MIT before someone else slips in
17:35 <@hhardy> questions/comments?

tsm backups

17:36 < lfaraone> hhardy: I'm here.
17:36 < lfaraone> sorry.
17:36 <@hhardy> if someone wants to package a AMD-64 ubuntu package from the sources or alien from the fedora package that would be nice
17:37 -!- reubencaron [~reubenkca@dhcp-47-101.media.mit.edu] has joined #olpc-admin
17:38 <@hhardy> lfaraone lfaraone: in your absence we appointed a committee to study single sign-on options
17:38 < lfaraone> hhardy: I saw. Count me in.
17:38 <@hhardy> which will be you and me and who else?
17:38 < CanoeBerry> Me: we will study it to death (or almost ;)
17:39 <@hhardy> ok set a meeting time to follow up?
17:39 <@hhardy> lfaraone want to pick a time? or take it to email?
17:39 -!- reubencaron__ [~reubenkca@wireless-81.media.mit.edu] has joined #olpc-admin
17:40 <@hhardy> ACTION ITEM: lfaraone to chair committee on single-signon options

DB triage and hot backups

17:41 < adric> Offtopic: 2048 DSA/ElGamal ?
17:41 -!- reubencaron_ [~reubenkca@wireless-81.media.mit.edu] has quit [Read error: Connection reset by peer]
17:41 <@hhardy> I would deprecate dsa in favor of rsa
17:42 < is4> adric, chose a random number of bits, less likely to have rainbow tables pre-generated
17:42 <@hhardy> thus sayeth gnu
17:42 < is4> gnu{-
17:42 < lfaraone> hhardy: oh, then my privatekeys are screwed.
17:42 < adric> Wat we like RSA now? I can never keep up.
17:42 <@hhardy> lol
17:42 < is4> careful, if you say his name three times he appears and berates you for using base64...
17:42 < cjb> adric: yes, in fact :)
17:42 <@hhardy> we can take this after meeting
17:42 <@hhardy> lol
17:43 <@hhardy> if only he would update his sendmail...
17:43 < lfaraone> hhardy: email.
17:43 < adric> Indeed .. but I'm gen'ing a GnuPG key, so .. RSA really?
17:43 < lfaraone> hhardy: shall we make it a list, or simply a large CC block?
17:43 < cjb> five years ago RSA was patented and DSA was free, and now RSA is out of patent and DSA is broken.
17:43 <@hhardy> adric: yes
17:43 < cjb> (not broken, but more vulnerable than RSA.)
17:43 < adric> hhardy: Roger /OT
17:43 <@hhardy> I have an rsa license from MIT issued before RSA was formed :)
17:44 < lfaraone> cjb: so, what should I do vis-a-vis my GnuPG keys? (which are already signed by ppl)
17:44 <@hhardy> is4: has not had a chance it id and triage db
17:44 < cjb> lfaraone: no big deal, you can keep using them.
17:45 <@hhardy> lfaraone it is fine
17:45 <@hhardy> you should not sign with the same key you use to encrypt tho
17:45 <@hhardy> generally speaking
17:45 < lfaraone> hhardy:  why not?
17:45 -!- reubencaron [~reubenkca@dhcp-47-101.media.mit.edu] has quit [Ping timeout: 480 seconds]
17:46 < adric> Sorry, I know it's my fault.. End tangent please?
17:46 <@hhardy> lfaraone... later
17:46 -!- hhardy changed the topic of #olpc-admin to: RT status
17:46 <@hhardy> adric: hows RT and the RT subgang going?
17:47 < is4> didn't you mention you had minions?>
17:47 < adric> Well, you may know better than I. I can update on some things..
17:47 < adric> I might have minions, and they might be here. *waves*
17:48 < adric> Kim is working with management to get us some idea of what they need for categories and meta data, and then we'll need to comment on that and start implementation 
17:48 < adric> I haven't heard anything on Spam lately ..
17:48 < adric> .. other than, you know, it's still coming in :)
17:49 <@hhardy> we have continued to blacklist the most repeat offenders
17:49 < CanoeBerry> i'm back..oops
17:49 <@hhardy> plus email for rt goes through brracuda now so mail to help@l.o etc goes through brracuda twice now
17:49 < adric> Twice? Is that better?
17:49 <@hhardy> not necessarily
17:50 <@hhardy> at worst, it is no worse
17:50 < dogi> hi
17:50 <@hhardy> dogi: hi
17:50  * dogi read back
17:50 <@hhardy> adric: anything further to report on rt?
17:50 < CanoeBerry> Categories are easy, Mel & I tried to force this to happen Monday, but Kim ran out of time.
17:50 <@hhardy> are there blocking issues?
17:51 < adric> hhardy: What's the word on the pre-work for the upgrade?
17:51 < CanoeBerry> It will happen next Monday.  No biggie.
17:51 <@hhardy> we should come up with catagories for sysadmin tickets too
17:51 < adric> CanoeBerry: Cool, we can work on them next week then
17:51 <@hhardy> does someone want to triage and characterize the existing tickets to come up with a useable scheme?
17:51 <@hhardy> maybe cjl?
17:51 < CanoeBerry> Our Monday concludion:
17:51 < adric> Well that is a greater issue. Due to the way RT handles CustomFields, they can be shared, carefully
17:52 <@hhardy> I'd rather sysadmin used its own custom fields w/o reusing I think
17:52 < CanoeBerry> Conclusion: the main triage person should act as anthropolist.
17:52 <@hhardy> hey I have a degree in that! 
17:52 <@hhardy> :)
17:52 < CanoeBerry> PPL like Sandy for help@l.o, people like Caryl for volunteer@l.o etc.
17:53 < CanoeBerry> Anyway that's next Monday's topic, let's move along.
17:53 <@hhardy> ACTION ITEM: find a volunteer to triage and characterize existing sysadmin tickets and come up with a useable list of custom fields to use
17:53 < adric> hhardy: Agree on sysadmin having it's own fields

Big sister monitoring and maintenance

17:54 <@hhardy> We need a big sister maintainer or two and a lsit of oncall peoples
17:54 -!- mchua [~mchua@pool-70-20-20-16.bstnma.fios.verizon.net] has joined #olpc-admin
17:55 <@hhardy> perhaps we should make a google calendar for VIG where we could set up the times for the oncall monitors
17:55 < CanoeBerry> Aside: adric told me 10 days ago we're waiting for new HW to install RT 3.8.1, is this true?
17:56 <@hhardy> CanoeBerry: not exactly
17:57 <@hhardy> I've been holding off on giving adric root on the rt instance on the assumption that the finance queue would be on our existing rt
17:57 <@hhardy> but per Kim I am moving that to a new machine and leaving the existing rt where it is
17:57 <@hhardy> once I have adric'
17:57 <@hhardy> s
17:57 < adric> Okay, looking for that upgrade work ticket ..
17:58 <@hhardy> signed ethics statement I'll talk to kim about giving him root on the rt instance
17:58 < CanoeBerry> I just invited mattva01 to join our conversation on RT here... (DC guy who's helped Luke, and hangs out on #rt !)
17:58 <@hhardy> ok
17:58 < lfaraone> hhardy: what's bigsyster?
17:58 <@hhardy> ACTION ITEM: hhardy to set up shared calendar for Big Sister monitor scheduling
17:58 < hiro> anything I miss that has to do something with me personally?
17:59 < cjb> hiro: Who are you?
17:59 < cjb> and what might have something to do with you personally?  :)
17:59 < adric> CanoeBerry: Ah, ticket was merged: http://rt.laptop.org/Ticket/Display.html?id=20497
17:59 < hiro> I don't know, something in a small scale :P
17:59 -!- hiro is now known as Hiro2
17:59 <@hhardy> http://thinker.laptop.org/bigsis/
17:59 <@hhardy> login: olpc
18:00 < Hiro2> is this better cjb?
18:00 <@hhardy> pw: a1abast3r12
18:00 < lfaraone> hhardy: this isn't a secure channel, btw.
18:00 <@hhardy> I am going to change it momentarily after meeting
18:01 < CanoeBerry> Aside for Hiro2: do care for RT20959, IE learning how XO's survive underwater? PM me..
18:01 <@hhardy> thats a-one btw
18:02 <@hhardy> last saturday mock was down most of the day before mstone started investigating
18:02 < adric> hhardy: Which file to sign? The poster PDF? ;)
18:03 <@hhardy> send a message to olpc-admin saying you agree to follow the SAGE code of ethics and sign with your key how about?
18:03 < adric> hhardy: kk
18:03 < lfaraone> hhardy: again, public mailing lists...
18:03 < lfaraone> hhardy: IMHO, that list should be ala support-gang@l.o.
18:04 <@hhardy> there's nothing secret about saying you agree to follow code of ethics...
18:04 <@hhardy> it isnt a support gang list
18:04 <@hhardy> its infrastucture-gang list
18:04 <@hhardy> probably what you meant
18:04 < lfaraone> hhardy: ah, there's a infra-gang list? we have one?
18:04 <@hhardy> olpc-admin@lists.laptop.org
18:05 <@hhardy> http://lists.laptop.org/listinfo/olpc-sysadmin/
18:06 <@hhardy> http://wiki.laptop.org/go/Infrastructure_gang
18:06 <@hhardy> sorry olpc-sysadmin@ etc.
18:07 -!- Matthew_ [~Matthew@c-69-143-107-37.hsd1.va.comcast.net] has joined #olpc-admin
18:07 < adric> mail sent *whoosh*

new business

18:08 -!- Matthew_ is now known as mattva02
18:08 <@hhardy> welcome mattva02
18:08 <@hhardy> please say a few words to introduce self
18:09 < mattva02> well I'm mattva01 from the support gang , though I'm not that active  
18:09 <@hhardy> and you do rt?
18:10 < mattva02> yes
18:11 <@hhardy> adric: potential rt minion for you perhaps
18:11 < mattva02> well we are starting to use it at a much smaller scale at the Arlington Career Center
18:11 < mattva02> Having some dumb issues upgrading though :(
18:11 <@hhardy> we need to know about those I think
18:11 < lfaraone> mattva02: First I've heard of this project, you'll have to describe it to me later :)
18:11 <@hhardy> can you coordinate with adric pls?
18:12 <@hhardy> ok 4 minutes to time out, anything further?
18:13 < adric> mattva02: Please mail me or the list and I'll try and get you synced up. also wiki.laptop.org/go/RT
18:13 <@hhardy> http://wiki.laptop.org/go/Infrastructure_gang
18:14 < adric> hhardy: Did soemthing happen with Bigsis ?
18:15 <@hhardy> I took as an action item to post a google calendar to set up the rotation
18:15 <@hhardy> I will continue to own it till we get some maintainers
18:15 < CanoeBerry> Aside: I do hope all this talk of minions is tongue in cheek.  The only person I ever rejected from the Support Gang insisted on talking about minions all the time, instead of doing real work..
18:15 <@hhardy> last call, anything further?
18:16 <@hhardy> Minion is a term for favourites or protégés, especially those of a monarch or prince at a royal court. Unlike a henchman or lackey, although of subordinate rank to his patron a minion is likely to be of noble birth or to be raised to the nobility, and is more of a companion and confidant to him than a servant or bodyguard.
18:16 <@hhardy> no it isn't a joke, we actually mean to introduce titles of nobility and such :)
18:17 < is4> We reject Gods, Kings and Democracy!
18:17 <@hhardy> but point taken, its an inside joke at OLPC to some degree
18:17 <@hhardy> thanks folks, done for now!
18:17 < CanoeBerry> Just don't burn my ballot box plz..
18:17 -!- Hiro2 [~439f0534@66.90.73.223] has quit [Quit: CGI:IRC (EOF)]
18:18 < adric> Haha. Minion is a joke because it implies I'm in charge :D
18:18 <@hhardy> you canadians, such touching faith in the appearence of democracy :)
18:18 < adric> It's a bit more like throwing treats in front of the direction I'd like the cats to go, and then climbing a tree.
18:18 <@hhardy> lol
18:18 <@hhardy> whereupon each cat grabs a treat and heads in its own direction
18:19 < CanoeBerry> Til next week, I'll take your treats.  Over & out?
18:19 <@hhardy> cheers all
18:19 < adric> Cheers.
18:19 <@hhardy> ---END---