[Systems] Hosting with SL
Stefan Unterhauser
stefan at unterhauser.name
Tue Aug 26 13:40:07 EDT 2014
hi all
I am on my way to debconf ... sorry walter no meeting this week ;(
will be back online in 10 hours or so
xo
dogi
PS: see you soon
On Tue, Aug 26, 2014 at 12:45 PM, Prasoon Shukla <prasoon92.iitr at gmail.com>
wrote:
> Sam made a few changes to my PR - I've merged them in. So, I suppose with
> Sam's approval, we are ready to go. Sam?
>
>
> On Tue, Aug 26, 2014 at 7:04 PM, Matthew Ciao <matthew at laptop.org.au>
> wrote:
>
>> Hi guys,
>>
>> just poking around to understand what's the latest news here?
>> Prasoon/Sam, are you already all up and running or...
>>
>> Cheers,
>> *Matthew*
>>
>>
>>
>>
>> On 21 August 2014 09:29, Matthew Ciao <matthew at laptop.org.au> wrote:
>>
>>> Hi dogi,
>>>
>>> nice email !! :)
>>>
>>> I just joined #treehouse - my nick is bashintosh on IRC. I am sysadmin
>>> @olpcau. :)
>>>
>>> Cheers,
>>>
>>> *Matthew*
>>>
>>>
>>> On 21 August 2014 08:22, Stefan Unterhauser <stefan at unterhauser.name>
>>> wrote:
>>>
>>>> Hi all,
>>>>
>>>>
>>>> I am dogi devops and take physically care of all the sugarlabs machines
>>>> hosted in the medialab
>>>> I am also the main user (virtually) of freedom
>>>>
>>>> sorry for my delay,
>>>> and sorry for this long email
>>>>
>>>>
>>>> but I was busy fixing all the boot issues in the VMs which was hosted
>>>> on freedom
>>>> <http://munin.treehouse.su/gar/DOMs/freedom.treehouse.su/libvirt.html>
>>>> this was due the reboot after the upgrade to 14.04
>>>> there are 23 VMs on this machine (17 of them are active)
>>>>
>>>> even it looks like 2 days of stable running we will know earliest by
>>>> the end of the month (monthly cron),
>>>> if all stuff we tweaked the virtual machine host (freedom) survived the
>>>> upgrade to 14.04
>>>>
>>>> anyway bernie thank you for all your help with upgrade :)
>>>>
>>>> but keeping in mind that disk I/O shortage is causing an average load
>>>> of 5
>>>> I wonder if our best bet for testing is freedom
>>>>
>>>> I think the best way of spooling this docker thing ;) down gracefully
>>>> is to do it at least for now treehouse.treehouse.su
>>>> <http://munin.treehouse.su/gar/DOMs/treehouse.treehouse.su/index.html>
>>>>
>>>> treehouse is as freedom and justice
>>>> <http://munin.treehouse.su/gar/DOMs/justice.treehouse.su/libvirt.html>
>>>> a 64GB ram machine, has 12cores in 2cpus instead of 8
>>>> and is right now in the last process of harddrive testing
>>>> one of the 2 refurbished hd-drives already failed :( -> I need only one
>>>> to last
>>>> I have there two raid1's over at least 3 (sometimes 4) harddrives one
>>>> in hd and the other in ssd ;)
>>>>
>>>> so far I run there some tiny experiments like http://chat.media.mit.edu
>>>> , http://genome.media.mit.edu:8003, farmier and dirt are both drupals
>>>> ...
>>>>
>>>> treehouse so far is a machine with a plain new ubuntu 14.04 install and
>>>> is supposed to be next production machine
>>>> for all the valuable experiments on freedom like http://publiclab.org
>>>>
>>>> some of you may wonder what treehouse(.su/gar) as an entity is,
>>>> it is a loose group of devops and ala
>>>> which are using the IRC channel #treehouse
>>>> <http://chat.media.mit.edu/?channels=treehouse&nick=> on oftc.net to
>>>> share and an learn about systems administration
>>>> and got created 2009 backed up by necsys
>>>> <http://web.media.mit.edu/~mbletsas/> of medialab with the intention
>>>> to middle between sugarlabs and olpc in form of 2 servers -> treehouse and
>>>> housetree
>>>>
>>>> anyway on #treehouse irc channel right now there are at least 4 people
>>>> with docker experience
>>>> isforinsects <https://github.com/GITenberg/> (former olpc sysadmin)
>>>> nicocesar <https://github.com/nicocesar> (fsf sysadmin)
>>>> itamarst <https://github.com/itamarst> (https://clusterhq.com/ and
>>>> flocker!)
>>>> and
>>>> myself ... yes did already do 18 months ago first experiments ...
>>>> I did end up scratching them -> not stable enough at the time ;(
>>>> -> but I have a lot of ssh tunnel experience :P
>>>>
>>>> also forgot freedom, justice, treehouse and housetree (-> working on a
>>>> clusterhq version with zfs) are all in the same serverroom
>>>>
>>>>
>>>> long email short
>>>> I strongly advise not shaking freedom right now more then necessary
>>>> (only one new thing (update to 14.04) at the time),
>>>> but can offer temporary access to treehouse which is a machine on its
>>>> way to be a new production machine
>>>>
>>>> Hereby I officially add bernie as root user on new treehouse ;)
>>>> if all of you send me sshkeys and perferred username I can hook you up
>>>>
>>>> xo
>>>> dogi
>>>>
>>>> PS: email is not my forte ... will try to be shorter next time ;) -> I
>>>> strongly prefer IRC or other sync media :P
>>>>
>>>>
>>>>
>>>>
>>>> On Wed, Aug 20, 2014 at 8:38 AM, Prasoon Shukla <
>>>> prasoon92.iitr at gmail.com> wrote:
>>>>
>>>>> Hey all. Just got back from classes.
>>>>>
>>>>> @Matthew, @Sam: I have no idea how ssh tunneling works and I've never
>>>>> done it before, so I guess if you guys think it's alright then it's fine
>>>>> by me, too.
>>>>> ᐧ
>>>>>
>>>>>
>>>>> On Wed, Aug 20, 2014 at 3:49 PM, Sam P. <sam.parkinson3 at gmail.com>
>>>>> wrote:
>>>>>
>>>>>> I like Matthew's the idea of ssh proxying it, but wouldn't a
>>>>>> nginx/apache proxy be more appropriate? That seems to be how all the other
>>>>>> SL stuff goes.
>>>>>>
>>>>>> Did you dockerify the redirector thing? Just wondering :)
>>>>>>
>>>>>>
>>>>>> On Wed, Aug 20, 2014 at 8:44 AM, Matthew Ciao <matthew at laptop.org.au>
>>>>>> wrote:
>>>>>>
>>>>>>> On Wednesday, 20 August 2014, Bernie Innocenti <bernie at sugarlabs.org>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> Status update: Freedom is now running Ubuntu 14.04 and still
>>>>>>>> holding well.
>>>>>>>>
>>>>>>>> I installed docker.io and tried setting up a simple container to
>>>>>>>> ensure
>>>>>>>> everything works. It did.
>>>>>>>
>>>>>>>
>>>>>>> Nice one!
>>>>>>>
>>>>>>>
>>>>>>>>
>>>>>>>> Now we'd be ready to deploy your image and experiment with it. Sam &
>>>>>>>> Matthew: what should I do next? I guess you need a public ip and a
>>>>>>>> dns
>>>>>>>> entry for it?
>>>>>>>
>>>>>>>
>>>>>>> For testing purpose I'd SSH tunnel into the system and use dynamic
>>>>>>> port forwarding to the application listening on localhost.
>>>>>>>
>>>>>>> That way you don't need to bind Docker to a WAN facing interface.
>>>>>>>
>>>>>>> It's a good security measure that avoids exposing the testing
>>>>>>> instance until is fully ready and secured.
>>>>>>>
>>>>>>> If security is not a concern in this case, then public IP and a DNS
>>>>>>> CNAME record should do the trick!
>>>>>>>
>>>>>>> Sam/Prasoon what do you think?
>>>>>>>
>>>>>>> Cheers
>>>>>>>
>>>>>>>
>>>>>>>>
>>>>>>>> For fast turnaround, please chat me on #sugar, as I don't check my
>>>>>>>> personal email very often during work days.
>>>>>>>>
>>>>>>>> On 08/18/2014 10:20 PM, Matthew Ciao wrote:
>>>>>>>> > Sure, I'm always on IRC #olpc-au (@freenode) but if you let me
>>>>>>>> know
>>>>>>>> > where you folks hang out I'll be there..
>>>>>>>> >
>>>>>>>> >
>>>>>>>> > On 19 August 2014 12:16, Bernie Innocenti <bernie at sugarlabs.org
>>>>>>>> > <mailto:bernie at sugarlabs.org>> wrote:
>>>>>>>> >
>>>>>>>> > Dogi and I are meeting at my place in 20 minutes to start
>>>>>>>> upgrading
>>>>>>>> > freedom to Ubuntu 14.04.
>>>>>>>> >
>>>>>>>> > Then we'll install Docker. If you'll be around in about 1h,
>>>>>>>> any help is
>>>>>>>> > welcome.
>>>>>>>> >
>>>>>>>> >
>>>>>>>> > On 08/18/2014 10:14 PM, Matthew Ciao wrote:
>>>>>>>> > > Hi folks,
>>>>>>>> > >
>>>>>>>> > > I have some experience with Docker on virtualized systems
>>>>>>>> (KVM) -
>>>>>>>> > we use
>>>>>>>> > > it to run our build/cross-compile environments for low
>>>>>>>> level driver
>>>>>>>> > > development here at OLPCAU.
>>>>>>>> > >
>>>>>>>> > > Glad to lend a hand if needed however Bernie was first so I
>>>>>>>> am
>>>>>>>> > second in
>>>>>>>> > > the queue of available people for this project :)
>>>>>>>> > >
>>>>>>>> > >
>>>>>>>> > > On 19 August 2014 07:06, Sam P. <sam.parkinson3 at gmail.com
>>>>>>>> > <mailto:sam.parkinson3 at gmail.com>
>>>>>>>> > > <mailto:sam.parkinson3 at gmail.com
>>>>>>>> > <mailto:sam.parkinson3 at gmail.com>>> wrote:
>>>>>>>> > >
>>>>>>>> > > Hey,
>>>>>>>> > >
>>>>>>>> > > > What access level do you need in order to setup and
>>>>>>>> > configure your
>>>>>>>> > > > container(s)? I'd rather not give out root access to
>>>>>>>> our
>>>>>>>> > production
>>>>>>>> > > > hosts, but several SL sysadmins can help you.
>>>>>>>> > >
>>>>>>>> > > Normally you need root but you can set up a docker
>>>>>>>> group:
>>>>>>>> > >
>>>>>>>> >
>>>>>>>> https://docs.docker.com/installation/binaries/#giving-non-root-access
>>>>>>>> > >
>>>>>>>> > > Sam
>>>>>>>> > >
>>>>>>>> > >
>>>>>>>> >
>>>>>>>> >
>>>>>>>> > --
>>>>>>>> > Bernie Innocenti
>>>>>>>> > Sugar Labs Infrastructure Team
>>>>>>>> > http://wiki.sugarlabs.org/go/Infrastructure_Team
>>>>>>>> >
>>>>>>>> >
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> Bernie Innocenti
>>>>>>>> Sugar Labs Infrastructure Team
>>>>>>>> http://wiki.sugarlabs.org/go/Infrastructure_Team
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Systems mailing list
>>>>> Systems at lists.sugarlabs.org
>>>>> http://lists.sugarlabs.org/listinfo/systems
>>>>>
>>>>>
>>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sugarlabs.org/private/systems/attachments/20140826/53bdacac/attachment.html>
More information about the Systems
mailing list