From nick at ucc.gu.uwa.edu.au Thu Nov 1 16:55:43 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Thu, 1 Nov 2018 16:55:43 +0800 Subject: [tech] [wheel] Fwd: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> Message-ID: <20181101085542.lted47bpl3nabn2b@ucc.gu.uwa.edu.au> Matt Tavani wrote: > If you have any questions, would like to be involved in the working group or > just to be kept informed, please let me know. Hi Matt, all! Thanks for the heads up. Yes thanks - if you could keep wheel at ucc.gu.uwa.edu.au informed/in mind, as the UCC's tech-contact group, we'd appreciate it. We'll do testing and probably notice fairly soon if IPv6 (or IPv4) connectivity doesn't come back. :) Looking forward to accessing the old bogon 1.1.1.1 in due course! https://blog.cloudflare.com/announcing-1111/ ( We also have an open "tech" group, which includes wheel, our sysadmin group. https://en.wikipedia.org/wiki/Wheel_(computing) ) Thanks, Nick. UCC Wheel member On Thu, Nov 01, 2018 at 04:26:17PM +0800, Felix von Perger wrote: > -------- Forwarded Message -------- > Subject: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) > Date: Thu, 1 Nov 2018 08:17:20 +0000 > From: Matt Tavani > To: president at ucc.asn.au , secretary at ucc.asn.au > > CC: Goran Mitrovic , Leo Huang > , Peter Hodgson > > > > Hi Felix, William, > > University IT are planning two major upgrades of the key firewall devices > protecting the University???s network on Sundays 18^th of November and 9^th > of December. > > The change on the 18^th will mostly affect desktops, printing, Wi-Fi, > building management and access to the internet, whereas the change on the > 9^th will affect these/and/applications hosted in the University???s data > centres. > > The team running the project has convened a working group for the changes to > work through all the IT testing required on each of the days, however we are > also asking key business/student areas and affiliates who use the UWA > network to also consider any testing they may need to do. > > As a rule of thumb, we are asking these areas to test Wi-Fi access, > logon/logoff, internet access and printing just to make sure these have > returned to normal after each change, and for the 9^th Dec to check any of > their key UWA hosted applications as well. Uni IT and the Service Delivery > Centre (SDC) IT teams will also be performing testing. > > ** > > *It???s my understanding that UCC has some network devices using IPv6 and > this network will also be moved to the new firewalls. We recommend you test > these either on Sunday 18^th between 10AM and 12PM if you have any critical > IPv6 devices in use, or on the following Monday. *If you do plan on testing > on the Sunday, I???ll just need to get some further details off you so we > can add you to the list of people being communicated to on the day. > > Plans are already in place for notifications of these changes to be placed > in UWA Forward, student newsletter and social media. > > If you have any questions, would like to be involved in the working group or > just to be kept informed, please let me know. Further details below that can > also be used for wider comms if needed. > > * > Scheduled network???downtime:* > *Replacement of UWA's core and services firewalls:* > > *Sun Nov 18th: 6am - 12pm ??????**All University services impacted* > *Sun???Dec 9th: 6am - 1pm ??????All University services impacted* > > *What is Happening* > > ??Replacement of UWA???s Core and Services firewalls > > *Why* > > ??Approaching end of life > > ??Uplifting cyber capability to next-gen products > > *When* > > ??*Sun???Nov 18th: 6am - 12pm*, major Core migration ??????All University > services impacted > > ??*Sun???Dec 9th: 6am - 1pm*, major Services migration ??????All University > services impacted > > // > > /It is anticipated that the actual network outage will be limited to 6-8AM, > however testing activities will continue for several hours to ensure > services are restored. Please plan activities around this./ > ??? > > *Impacted services:* > > ??Internet (browsing and connected/cloud services) > > ??Sign-on for desktops/laptops > > ??Email, Calendars and SharePoint > > ??Active Directory and DNS > > ??Wi-Fi, VPN and printing > > ??System, network and server monitoring > > ??Remote sites, colleges and affiliate sites (using UWA as an ISP) > > ??Servers and most applications/websites (in the data centre, including > licensing servers) > > ??Labs, library, lecture theatres > > ??IP telephony (e.g. Zoom,Webex, Skype) > > ??Data stores and document shares > > ??Building management, CCTV, digital public displays and IoT devices > > *How:* > > ??Old and new firewalls to operate in parallel with a phased migration > > ??Testing of platforms and applications during each change > > ??Rollback to old firewalls if there are significant issues > > *Action:* > > ??You are responsible for ensuring that services and applications within > your area are tested during these dates > > Regards, Matt Tavani > > *Matt Tavani* > > *Project Manager - Cyber Security* > > University IT????????? M463, Perth WA 6009 Australia > > *M*+61 402 ??031 727??????? *Ematt.tavani at uwa.edu.au > * > > For guidance on how to stay safe online visit: > http://cybersecurity.it.uwa.edu.au > > The University of Western Australia > > > > Promo image UWA > on Facebook UWA > on Twitter UWA > on Youtube UWA > on Linked In UWA > on Instagram > > http://static.weboffice.uwa.edu.au/visualid/graphics/email/sig2015/campaign.gif > -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From nick at ucc.gu.uwa.edu.au Mon Nov 12 22:32:44 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Mon, 12 Nov 2018 22:32:44 +0800 Subject: [tech] Koha is Down In-Reply-To: <20181025041027.z3xgvnlxgoxxdkh6@ucc.gu.uwa.edu.au> References: <20181015135857.u7qwvrn36oi7h7sa@ucc.gu.uwa.edu.au> <20181020070541.j7cfn324yn4qhfys@ucc.gu.uwa.edu.au> <20181024081806.mskpoeu3gaoa2cjn@ucc.gu.uwa.edu.au> <20181025041027.z3xgvnlxgoxxdkh6@ucc.gu.uwa.edu.au> Message-ID: <20181112143244.lop5lgvgibhtm2mx@ucc.gu.uwa.edu.au> On Mon, Nov 05, 2018 at 03:40:19PM +0800, Finley Hoskins wrote in oh-so-close to https://en.wikipedia.org/wiki/ISO_8601 : > I'll post in the CCC group for anyone who is interested in > learning how to [run Koha] > If you would like to be on committee or CCC next year, please get in touch On Mon, Nov 12, 2018 at 03:38:26PM +0800, Finley Hoskins wrote: > Librarian/Library > When will Koha come back from the war? > Koha is still down so Katherine can't really do anything > about that Thank you for the prompt minutes, Fin! Sadly, yes, Koha's still down, it's been too long and we ought to to focus on getting it back again; but recording what it takes with an eye to a training session soon. I stopped by during some book sorting the previous weekend and spoke to Simon and Katherine. We reset the "unisfa" account on UCC machines; the password is in the UniSFA committee's store. There is also a separate "unisfa" account created on the VM unisfa-koha.ucc.asn.au , same password. We can browse the Koha backend database, and replicate the "error: 1932: Table 'koha.sessions' doesn't exist" message: https://secure.ucc.asn.au/phpmyadmin/ TODO: Clear or reset the sessions? (Very roughly - tried?) Compare the following, what has recent changes/data in it: * koha->koha * koha->koha_broken_20180505 * koha->koha_testing -rw------- 1 nick wheel 32809839 Nov 12 22:11 koha.sql * Contains a number of 2018 dates -rw------- 1 nick wheel 34019379 Nov 12 22:11 koha_broken_20180505.sql * Contains fewer 2018 dates -rw------- 1 nick wheel 40085188 Nov 12 22:11 koha_testing.sql * Contains no 2018 dates Blair, anyone: When's good to have another go at backup/restores, and then plan for showing it to a larger group? (Personally, evenings this week are not so good for me: Tue/Wed/Thu. Friday could work, or daytimes, or the weekend) While it was handy, I did an iperf/speed test on deepthought's 100Mbps ethernet, via its router, sharpchin. (a MikroTik RB951G-2HnD) 65MBps my laptop to murasoi(uccrouter) 32Mbps murasoi(uccrouter) to my laptop Nick. 0419 957 011 -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From 21321809 at student.uwa.edu.au Thu Nov 15 08:40:57 2018 From: 21321809 at student.uwa.edu.au (Blair Johnson) Date: Thu, 15 Nov 2018 08:40:57 +0800 Subject: [tech] Koha is Down In-Reply-To: <20181112143244.lop5lgvgibhtm2mx@ucc.gu.uwa.edu.au> References: <20181015135857.u7qwvrn36oi7h7sa@ucc.gu.uwa.edu.au> <20181020070541.j7cfn324yn4qhfys@ucc.gu.uwa.edu.au> <20181024081806.mskpoeu3gaoa2cjn@ucc.gu.uwa.edu.au> <20181025041027.z3xgvnlxgoxxdkh6@ucc.gu.uwa.edu.au> <20181112143244.lop5lgvgibhtm2mx@ucc.gu.uwa.edu.au> Message-ID: Hi Nick (et al), Sorry for the late reply, I'm hoping to have some time free to work on this next Monday evening, which I'm hoping you (Nick) are open to taking some time out of your project night? I'll waltz on over to UCC so you won't be too far from your other projects. Cheers, Blair On Mon, 12 Nov 2018 at 22:32, Nick Bannon wrote: > On Mon, Nov 05, 2018 at 03:40:19PM +0800, Finley Hoskins wrote in > oh-so-close to https://en.wikipedia.org/wiki/ISO_8601 : > > I'll post in the CCC group for anyone who is interested in > > learning how to [run Koha] > > If you would like to be on committee or CCC next year, please get in > touch > On Mon, Nov 12, 2018 at 03:38:26PM +0800, Finley Hoskins wrote: > > Librarian/Library > > When will Koha come back from the war? > > Koha is still down so Katherine can't really do anything > > about that > > Thank you for the prompt minutes, Fin! > > Sadly, yes, Koha's still down, it's been too long and we ought to to > focus on getting it back again; but recording what it takes with an eye > to a training session soon. > > I stopped by during some book sorting the previous weekend and spoke to > Simon and Katherine. > > We reset the "unisfa" account on UCC machines; the password is in the > UniSFA committee's store. There is also a separate "unisfa" account > created on the VM unisfa-koha.ucc.asn.au , same password. > > We can browse the Koha backend database, and replicate the > "error: 1932: Table 'koha.sessions' doesn't exist" message: > https://secure.ucc.asn.au/phpmyadmin/ > > TODO: Clear or reset the sessions? > (Very roughly - tried?) Compare the following, what has recent > changes/data in it: > * koha->koha > * koha->koha_broken_20180505 > * koha->koha_testing > > -rw------- 1 nick wheel 32809839 Nov 12 22:11 koha.sql > * Contains a number of 2018 dates > -rw------- 1 nick wheel 34019379 Nov 12 22:11 koha_broken_20180505.sql > * Contains fewer 2018 dates > -rw------- 1 nick wheel 40085188 Nov 12 22:11 koha_testing.sql > * Contains no 2018 dates > > Blair, anyone: > When's good to have another go at backup/restores, and then plan for > showing it to a larger group? > (Personally, evenings this week are not so good for me: Tue/Wed/Thu. > Friday could work, or daytimes, or the weekend) > > While it was handy, I did an iperf/speed test on deepthought's 100Mbps > ethernet, via its router, sharpchin. (a MikroTik RB951G-2HnD) > 65MBps my laptop to murasoi(uccrouter) > 32Mbps murasoi(uccrouter) to my laptop > > Nick. > 0419 957 011 > > -- > Nick Bannon | "I made this letter longer than usual because > nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal > -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.ucc.gu.uwa.edu.au/pipermail/tech/attachments/20181115/703c48e4/attachment.htm From nick at ucc.gu.uwa.edu.au Thu Nov 15 14:19:01 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Thu, 15 Nov 2018 14:19:01 +0800 Subject: [tech] Koha is Down In-Reply-To: References: <20181015135857.u7qwvrn36oi7h7sa@ucc.gu.uwa.edu.au> <20181020070541.j7cfn324yn4qhfys@ucc.gu.uwa.edu.au> <20181024081806.mskpoeu3gaoa2cjn@ucc.gu.uwa.edu.au> <20181025041027.z3xgvnlxgoxxdkh6@ucc.gu.uwa.edu.au> <20181112143244.lop5lgvgibhtm2mx@ucc.gu.uwa.edu.au> Message-ID: <20181115061900.x4dyyconmasscji2@ucc.gu.uwa.edu.au> On Thu, Nov 15, 2018 at 08:40:57AM +0800, Blair Johnson wrote: > I'm hoping to have some time free to work on this > next Monday evening, which I'm hoping you (Nick) are open to taking some > time out of your project night? I'll waltz on over to UCC so you won't be > too far from your other projects. Cool, let's. I will try to get there for some of the afternoon; then I will have an interruption that evening and have to go off for a meeting after dinner, but I'll try to make it short and come back. We should have other help available that evening. (if anyone else wants to get a little familiarisation going early, please do. Email or shout out on UCC chat at whatever point you get stuck, with whatever error you have. Important steps include logging in to a machine (any machine) as we did the previous weekend: * SSH * mariadb/mysql , mysqldump * phpmyadmin * proxmox! ...and having a browse. ) Nick. -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From clark.tegan at gmail.com Fri Nov 16 09:06:57 2018 From: clark.tegan at gmail.com (Tegan Clark) Date: Fri, 16 Nov 2018 09:06:57 +0800 Subject: [tech] [unisfa-committee] Koha is Down In-Reply-To: <20181115061900.x4dyyconmasscji2@ucc.gu.uwa.edu.au> References: <20181015135857.u7qwvrn36oi7h7sa@ucc.gu.uwa.edu.au> <20181020070541.j7cfn324yn4qhfys@ucc.gu.uwa.edu.au> <20181024081806.mskpoeu3gaoa2cjn@ucc.gu.uwa.edu.au> <20181025041027.z3xgvnlxgoxxdkh6@ucc.gu.uwa.edu.au> <20181112143244.lop5lgvgibhtm2mx@ucc.gu.uwa.edu.au> <20181115061900.x4dyyconmasscji2@ucc.gu.uwa.edu.au> Message-ID: Can someone fix the link to unsubscribe from this list? The one given currently (http://lists.ucc.gu.uwa.edu.au/mailman/listinfo/unisfa-committee) does not work. Kind regards, Tegan UniSFA Fresher Representative 2012 On Thu, 15 Nov 2018 at 14:19, Nick Bannon wrote: > On Thu, Nov 15, 2018 at 08:40:57AM +0800, Blair Johnson wrote: > > I'm hoping to have some time free to work on this > > next Monday evening, which I'm hoping you (Nick) are open to taking some > > time out of your project night? I'll waltz on over to UCC so you won't be > > too far from your other projects. > > Cool, let's. I will try to get there for some of the afternoon; then I > will have an interruption that evening and have to go off for a meeting > after dinner, but I'll try to make it short and come back. We should > have other help available that evening. > > (if anyone else wants to get a little familiarisation going early, > please do. Email or shout out on UCC chat at whatever point you get > stuck, with whatever error you have. > > Important steps include logging in to a machine (any machine) as we did > the previous weekend: > * SSH > * mariadb/mysql , mysqldump > * phpmyadmin > * proxmox! > ...and having a browse. > ) > > Nick. > > -- > Nick Bannon | "I made this letter longer than usual because > nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal > _______________________________________________ > UniSFA-Committee mailing list > https://lists.ucc.gu.uwa.edu.au/mailman/listinfo/unisfa-committee > > To unsubscribe, click the link above for the mailing list and follow the > prompts at the bottom of the page > -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.ucc.gu.uwa.edu.au/pipermail/tech/attachments/20181116/0cbffc31/attachment.htm From frekk at ucc.asn.au Fri Nov 16 22:40:53 2018 From: frekk at ucc.asn.au (Felix von Perger) Date: Fri, 16 Nov 2018 22:40:53 +0800 Subject: [tech] 10GbE upgrade for loveday Message-ID: Hi tech, I've looked into configuring ceph distributed storage for VM disks (http://docs.ceph.com/docs/master/releases/luminous/) on the Proxmox cluster using the 3 existing 500GB SSDs.In order to ensure failover is possible in case of one of the 3 hosts going offline, ceph requires a minimum data redundancy of 3 leaving a total storage capacity of around 500TB (from the total raw storage space of 1.5TB). The idea is to have at least our core VMs and filesystems (ie /services) on SSD-backed storage to make things more snappy. As per the documentation (http://docs.ceph.com/docs/master/start/hardware-recommendations/) ceph is limited to the bandwidth of the slowest network link, and given that we are using SSDs there would be a noticeable improvement upgrading to 10Gbps from the current bottleneck of 1Gbps on loveday. Hardware-wise, the cheapest option seems to be the Mellanox ConnectX-2 (such as https://www.ebay.com.au/itm/192421526775) for around $50 each. SFP+ cabling could either be passive (such as https://www.fs.com/au/products/30856.html for $17) or somewhat fancier active setup using fibre (such as 2 * https://www.fs.com/au/products/74668.html for $22 each). It seems that loveday is fussy when it comes to booting when certain types of PCIe cards are installed - should this be an issue and the above-mentioned hardware be effectively unusable then the ceph cluster could be configured using the other machines with 10GbE (ie. murasoi/medico/maltair), albeit with the loss of the convenient Proxmox ceph configuration UI, and the spare 10GbE card could be put to use elsewhere. BIOS/firmware upgrades on loveday permitting. Let me know if you have any thoughts about this. Best regards, Felix von Perger UCC President & Wheel member From frekk at ucc.asn.au Fri Nov 16 22:54:04 2018 From: frekk at ucc.asn.au (Felix von Perger) Date: Fri, 16 Nov 2018 22:54:04 +0800 Subject: [tech] Regulated benchtop power supply Message-ID: Hi tech, I'd like to suggest that UCC purchase a good quality, adjustable regulated benchtop power supply. They're very handy to have and noticeably something which is missing on the project bench. Some suggestions below: * 0-30V 5A regulated power supply from Jaycar (https://www.jaycar.com.au/0-to-30vdc-0-to-5a-regulated-power-supply/p/MP3840) - $179 * or from Altronics (https://www.altronics.com.au/p/m8305-powertran-30v-5a-regulated-bench-top-power-supply/) - $189 (but possibly down to $155 with VIP card) * Or even a 20A option from Altronics (https://www.altronics.com.au/p/m8310-powertran-30v-20a-regulated-bench-top-power-supply/) - $399 o Unless there's a very good reason to buy this I'll recommend the 5A options to committee. Any thoughts? Best regards, Felix von Perger UCC President & Wheel member -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.ucc.gu.uwa.edu.au/pipermail/tech/attachments/20181116/0f987ce9/attachment.htm From oxinabox at ucc.asn.au Mon Nov 19 02:23:17 2018 From: oxinabox at ucc.asn.au (Lyndon White) Date: Sun, 18 Nov 2018 18:23:17 +0000 Subject: [tech] Regulated benchtop power supply In-Reply-To: Message-ID: An HTML attachment was scrubbed... URL: https://lists.ucc.gu.uwa.edu.au/pipermail/tech/attachments/20181118/fb09d20b/attachment.htm From nick at ucc.gu.uwa.edu.au Tue Nov 20 11:39:00 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Tue, 20 Nov 2018 11:39:00 +0800 Subject: [tech] Outage report, was Re: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> Message-ID: <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> Matt Tavani wrote: > If you have any questions, would like to be involved in the working group or > just to be kept informed, please let me know. Hi Matt, all! Not sure if we've sent anyone so far, but there's a regular face-to-face meeting each Thursday? The Sunday outage was short and quick from our point of view, between 6am and 7am. IPv6 in particular was working fine that afternoon - although I see Cloudflare's 1.1.1.1 is still blocked on IPv4. *** The time is: Sun Nov 18 16:00:03 AWST 2018 + hostname motsugo + fping6 -Aen ipv6.google.com ipv6-test.com syd09s15-in-x0e.1e100.net (2404:6800:4006:809::200e) is alive (49.9 ms) agaric.t0x.net (2001:41d0:8:e8ad::1) is alive (342 ms) + fping -Aen 1.1.1.1 one.one.one.one (1.1.1.1) is unreachable However, sometime late on Monday? and continuing now, IPv6 connectivity between our part of UWA and the world has broken. Outside monitoring: https://www.ntppool.org/scores/2405:3c00:5200:100::1 Internal tests: *** The time is: Tue Nov 20 00:00:09 AWST 2018 + hostname motsugo + fping6 -Aen ipv6.google.com ipv6-test.com clownfish clownfish.ucc.gu.uwa.edu.au (2405:3c00:5200:101:16da:e9ff:fe71:be6d) is alive (0.78 ms) syd15s03-in-x0e.1e100.net (2404:6800:4006:804::200e) is unreachable agaric.t0x.net (2001:41d0:8:e8ad::1) is unreachable *** The time is: Tue Nov 20 11:00:21 AWST 2018 + hostname motsugo + fping6 -Aen murasoi ipv6.google.com ipv6-test.com www.facebook.com murasoi.ucc.gu.uwa.edu.au (2405:3c00:5200:100::1) is alive (0.27 ms) syd15s04-in-x0e.1e100.net (2404:6800:4006:805::200e) is unreachable agaric.t0x.net (2001:41d0:8:e8ad::1) is unreachable edge-star-mini6-shv-01-syd2.facebook.com (2a03:2880:f119:8083:face:b00c:0:25de) is unreachable motsugo$ traceroute6 ipv6-test.com traceroute to ipv6-test.com (2001:41d0:8:e8ad::1) from 2405:3c00:5200:100::7, port 33434, from port 46307, 30 hops max, 60 bytes packets 1 murasoi.ucc.gu.uwa.edu.au (2405:3c00:5200:100::1) 0.310 ms 0.176 ms 0.189 ms 2 2405:3c00:10:4::1 (2405:3c00:10:4::1) 0.795 ms 0.648 ms 0.586 ms 3 ::ffff:10.10.1.1 (::ffff:10.10.1.1) 1.180 ms 0.854 ms 1.330 ms 4 * * * 5 * * * [...] Nick. wheel at ucc.gu.uwa.edu.au -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From nick at ucc.gu.uwa.edu.au Tue Nov 20 11:49:53 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Tue, 20 Nov 2018 11:49:53 +0800 Subject: [tech] Outage report, was Re: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> Message-ID: <20181120034953.3hu4i7vkvqnqikdm@ucc.gu.uwa.edu.au> On Tue, Nov 20, 2018 at 03:40:53AM +0000, Matt Tavani wrote: > Hi Nick, > Yep it all went smoothly. Are you seeing the same IPv6 outages as us, currently? What is a good core: * UWA Crawley campus IPv6 address; and * UWA Crawley campus IPv4 address that I should be able to ping from outside UWA? Still having a weekly Thursday face-to-face meeting? Nick. wheel at ucc.gu.uwa.edu.au -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From nick at ucc.gu.uwa.edu.au Tue Nov 20 12:44:17 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Tue, 20 Nov 2018 12:44:17 +0800 Subject: [tech] [wheel] Outage report, was Re: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> <20181120034953.3hu4i7vkvqnqikdm@ucc.gu.uwa.edu.au> Message-ID: <20181120044417.y7rgq2jowl5dvtjm@ucc.gu.uwa.edu.au> On Tue, Nov 20, 2018 at 03:59:28AM +0000, Matt Tavani wrote: > Hi Nick, > Nothing reported on IPv6 so far but I believe you guys are the only ones using it. Wow! What is a good core: * UWA Crawley campus IPv6 address; and * UWA Crawley campus IPv4 address that I should be able to ping from outside UWA? DNS servers are usually a good default choice, but I think there's been some overenthusiastic and not-publically-documented firewalling of those done. > If you can provide the details below I can get a ticket raised to investigate if there is an issue. Just fill in as much as you can based on what you???re seeing/not seeing. Thank you. Can you add our usual contact address as an "external contact" in the service ticket? Could you also personally test Cloudflare 1.1.1.1 DNS and raise a similar issue for that? I imagine firewall rules in general have been held off until the recent upgrades; however I believe it's been against IETF recommendations to block that since November 2011. https://blog.cloudflare.com/announcing-1111/ https://en.wikipedia.org/wiki/Bogon_filtering > - Affected application/system: Provide name of affected application/system ICMP, NTP, HTTPS. > - Brief description of the issue: Provide a brief description of the issue All testable off-campus IPv6 connectivity broken. + hostname motsugo + fping6 -Aen ipv6.google.com ipv6-test.com syd15s03-in-x0e.1e100.net (2404:6800:4006:804::200e) is unreachable agaric.t0x.net (2001:41d0:8:e8ad::1) is unreachable *** The time is: Tue Nov 20 11:00:21 AWST 2018 + hostname motsugo + fping6 -Aen murasoi ipv6.google.com ipv6-test.com www.facebook.com murasoi.ucc.gu.uwa.edu.au (2405:3c00:5200:100::1) is alive (0.27 ms) syd15s04-in-x0e.1e100.net (2404:6800:4006:805::200e) is unreachable agaric.t0x.net (2001:41d0:8:e8ad::1) is unreachable edge-star-mini6-shv-01-syd2.facebook.com (2a03:2880:f119:8083:face:b00c:0:25de) is unreachable > - Time of when tested: Provide time in HH:MM AM/PM format when this was tested Since: Tuesday 2018-11-20 00:00 AM , UTC+0800 Ongoing at: Tuesday 2018-11-20 12:30 PM , UTC+0800 > - From (Source of the connection): Provide hostname and/or IP address of connection origin motsugo.ucc.gu.uwa.edu.au. 3600 IN AAAA 2405:3c00:5200:100::7 (also known as motsugo.ucc.gu.uwa.edu.au. 3600 IN A 130.95.13.7) > - To (Destination of the connection): Provide hostname or IP address of the connection destination syd15s04-in-x0e.1e100.net (2404:6800:4006:805::200e) agaric.t0x.net (2001:41d0:8:e8ad::1) edge-star-mini6-shv-01-syd2.facebook.com (2a03:2880:f119:8083:face:b00c:0:25de) > - Ports or Services: Provide ports for the connection All testable connectivity down. ICMP service. (ICMP echo request/reply, does not have a TCP/UDP port number) Expected firewalling: zero: all IPv6 to or from the UCC firewall host, any IP protocol. ( Also, NTP port 123 to host murasoi.ucc.gu.uwa.edu.au , for example ) > - Reporter: Name and phone of the person reporting the incident UCC Wheel Group, 08 6488 3901. (you can also contact me personally as a backup, but please direct primary technical followups to our standard email, as usual) Thank you, Nick. wheel at ucc.gu.uwa.edu.au -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From nick at ucc.gu.uwa.edu.au Tue Nov 20 17:05:04 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Tue, 20 Nov 2018 17:05:04 +0800 Subject: [tech] Resolved! Re: Outage report, was Re: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: <20181120044417.y7rgq2jowl5dvtjm@ucc.gu.uwa.edu.au> References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> <20181120034953.3hu4i7vkvqnqikdm@ucc.gu.uwa.edu.au> <20181120044417.y7rgq2jowl5dvtjm@ucc.gu.uwa.edu.au> Message-ID: <20181120090504.pi4ici6mkapsiltc@ucc.gu.uwa.edu.au> On Tue, Nov 20, 2018 at 12:44:17PM +0800, Nick Bannon wrote: > On Tue, Nov 20, 2018 at 03:59:28AM +0000, Matt Tavani wrote: > > Hi Nick, > > Nothing reported on IPv6 so far but I believe you guys are the only ones using it. > > Wow! What is a good core: * UWA Crawley campus IPv6 address; and * UWA Crawley campus IPv4 address that I should be able to ping from outside UWA? DNS servers are usually a good default choice, but I think there's been some overenthusiastic and not-publically-documented firewalling of those done. > > If you can provide the details below I can get a ticket raised to investigate if there is an issue. Just fill in as much as you can based on what you???re seeing/not seeing. > > Thank you. Can you add our usual contact address as an "external > contact" in the service ticket? Good news! The IPv6 outage appears to have been resolved - are you aware of any relevant changes? Approximately the window Monday 2018-11-19 21:21 -- Tue 2018-11-20 13:03. (local time) > Could you also personally test Cloudflare 1.1.1.1 DNS and raise a similar > issue for that? I imagine firewall rules in general have been held off > until the recent upgrades; however I believe it's been against IETF > recommendations to block that since November 2011. > https://blog.cloudflare.com/announcing-1111/ > https://en.wikipedia.org/wiki/Bogon_filtering Would you still be able to do this for us? It's not a UCC-specific issue, however we're not able to directly create our own issues, in any case. (for info on _that_, see ServiceNow issue INC0222454 ) The quick test is that 1.1.1.1 should be pingable (also DNS, HTTP, etc.). The main technical question is: is there an explicit legacy firewall entry concerning it; or has it been null-routed at another level? Thank you, Nick. -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From nick at ucc.gu.uwa.edu.au Wed Nov 21 12:11:37 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Wed, 21 Nov 2018 12:11:37 +0800 Subject: [tech] IPv6 outage has returned; was Re: UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> <20181120034953.3hu4i7vkvqnqikdm@ucc.gu.uwa.edu.au> <20181120044417.y7rgq2jowl5dvtjm@ucc.gu.uwa.edu.au> <20181120090504.pi4ici6mkapsiltc@ucc.gu.uwa.edu.au> Message-ID: <20181121041136.m7smhpawvqhjqlo5@ucc.gu.uwa.edu.au> On Wed, Nov 21, 2018 at 12:19:12AM +0000, Matt Tavani wrote: > The call says 'in progress' but no notes on there, so not sure anything has been changed as yet. Glad to hear it's working though. As of this morning, Wed 2018-11-21 01:00 , I'm afraid the issue has returned and is ongoing. $ hostname;fping6 -Aen ipv6.google.com ipv6-test.com www.facebook.com motsugo syd09s06-in-x0e.1e100.net (2404:6800:4006:802::200e) is unreachable agaric.t0x.net (2001:41d0:8:e8ad::1) is unreachable edge-star-mini6-shv-01-syd2.facebook.com (2a03:2880:f119:8083:face:b00c:0:25de) is unreachable By "the call" - you mean the status on an existing ServiceNow issue? Do you have a ticket ID? I don't believe we've seen emails regarding that issue. Were you able to add our usual contact address as an "external contact" in the service ticket (which requires an "analyst view" of the ticketing system)? > I can't assist on the 1.1.1.1 thing as that is beyond the scope of what I can get into from a project perspective. If you email the service desk with the issue they will forward it onto either Networks or Security for a response. > Cheers, Matt OK, will do. (Sorry: I had thought you might be in a better place to check the core question, not specific to US or that service: Has the new firewall been preloaded with legacy rules, e.g. * excluding the whole of 1.0.0.0/8 ) Also - I probably should have checked the following for testing/triage purposes in previous weeks; but it's very handy to have some clear answers for machines that are on the Crawley campus but not part of the UCC network: What is a good core: * UWA Crawley campus IPv6 address; and * UWA Crawley campus IPv4 address that I should be able to ping from outside UWA? Thank you, Nick. wheel at ucc.gu.uwa.edu.au -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From nick at ucc.gu.uwa.edu.au Wed Nov 21 19:19:21 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Wed, 21 Nov 2018 19:19:21 +0800 Subject: [tech] Resolved! Re: Koha is Down In-Reply-To: <20181115061900.x4dyyconmasscji2@ucc.gu.uwa.edu.au> <20181112143244.lop5lgvgibhtm2mx@ucc.gu.uwa.edu.au> Message-ID: <20181121111921.ucsdvpxglrx5h7ft@ucc.gu.uwa.edu.au> On Mon, Nov 19, 2018 at 03:22:31PM +0800, Finley Hoskins wrote: > Koha has gained sentience On Mon, Nov 12, 2018 at 10:32:44PM +0800, Nick Bannon wrote: > TODO: Clear or reset the sessions? Success! Thanks, Blair. We did a relatively surgical SQL fix: drop and recreate an empty koha.sessions table, we did not do a complete backup and restore. cron.daily "koha-run-backups --days 21 --output /var/spool/koha" on the unisfa-koha machine was clogged up with files from another instance; so new files were not being kept in any case. Fixed. However now we still need some kind of introduction and technical handover. Blair and I would like to propose Monday 2018-12-10. Has there been any interest expressed so far? or can we drum some up and see who might be available for that afternoon or evening? Ideally, we're after 1st or 2nd year members with an interest in CS, sysadmin, LAMP and/or programming. Any member of both UCC and UniSFA is a good candidate. * Testing checklist: _is_ Koha functional? What needs checking, with what logins? * Logins and familiarisation * http://unisfa-koha.ucc.asn.au/ * http://unisfa-koha.ucc.asn.au:8080/ admin interface * SSH * mariadb/mysql , mysqldump * phpmyadmin * proxmox * unisfa-koha VM * VM host interface (proxmox), can be checked with "unisfa" user * configure email (backups, overdue notifications) * /etc/cron.daily/koha-common * configure remote logging, fail2ban * prepare OS upgrade from oldstable to stable * prepare regular Koha upgrade deb http://debian.koha-community.org/koha stable main * offsite backups Nick. -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From matt.tavani at uwa.edu.au Tue Nov 20 11:40:53 2018 From: matt.tavani at uwa.edu.au (Matt Tavani) Date: Tue, 20 Nov 2018 03:40:53 +0000 Subject: [tech] Outage report, was Re: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> Message-ID: Hi Nick, Yep it all went smoothly. I'm not sure why 1.1.1.1 isn't accessible but that also wasn't part of the change. Matt ?On 20/11/18, 11:39 am, "Nick Bannon" wrote: Matt Tavani wrote: > If you have any questions, would like to be involved in the working group or > just to be kept informed, please let me know. Hi Matt, all! Not sure if we've sent anyone so far, but there's a regular face-to-face meeting each Thursday? The Sunday outage was short and quick from our point of view, between 6am and 7am. IPv6 in particular was working fine that afternoon - although I see Cloudflare's 1.1.1.1 is still blocked on IPv4. *** The time is: Sun Nov 18 16:00:03 AWST 2018 + hostname motsugo + fping6 -Aen ipv6.google.com ipv6-test.com syd09s15-in-x0e.1e100.net (2404:6800:4006:809::200e) is alive (49.9 ms) agaric.t0x.net (2001:41d0:8:e8ad::1) is alive (342 ms) + fping -Aen 1.1.1.1 one.one.one.one (1.1.1.1) is unreachable However, sometime late on Monday? and continuing now, IPv6 connectivity between our part of UWA and the world has broken. Outside monitoring: https://www.ntppool.org/scores/2405:3c00:5200:100::1 Internal tests: *** The time is: Tue Nov 20 00:00:09 AWST 2018 + hostname motsugo + fping6 -Aen ipv6.google.com ipv6-test.com clownfish clownfish.ucc.gu.uwa.edu.au (2405:3c00:5200:101:16da:e9ff:fe71:be6d) is alive (0.78 ms) syd15s03-in-x0e.1e100.net (2404:6800:4006:804::200e) is unreachable agaric.t0x.net (2001:41d0:8:e8ad::1) is unreachable *** The time is: Tue Nov 20 11:00:21 AWST 2018 + hostname motsugo + fping6 -Aen murasoi ipv6.google.com ipv6-test.com www.facebook.com murasoi.ucc.gu.uwa.edu.au (2405:3c00:5200:100::1) is alive (0.27 ms) syd15s04-in-x0e.1e100.net (2404:6800:4006:805::200e) is unreachable agaric.t0x.net (2001:41d0:8:e8ad::1) is unreachable edge-star-mini6-shv-01-syd2.facebook.com (2a03:2880:f119:8083:face:b00c:0:25de) is unreachable motsugo$ traceroute6 ipv6-test.com traceroute to ipv6-test.com (2001:41d0:8:e8ad::1) from 2405:3c00:5200:100::7, port 33434, from port 46307, 30 hops max, 60 bytes packets 1 murasoi.ucc.gu.uwa.edu.au (2405:3c00:5200:100::1) 0.310 ms 0.176 ms 0.189 ms 2 2405:3c00:10:4::1 (2405:3c00:10:4::1) 0.795 ms 0.648 ms 0.586 ms 3 ::ffff:10.10.1.1 (::ffff:10.10.1.1) 1.180 ms 0.854 ms 1.330 ms 4 * * * 5 * * * [...] Nick. wheel at ucc.gu.uwa.edu.au -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From matt.tavani at uwa.edu.au Wed Nov 21 08:19:12 2018 From: matt.tavani at uwa.edu.au (Matt Tavani) Date: Wed, 21 Nov 2018 00:19:12 +0000 Subject: [tech] Resolved! Re: Outage report, was Re: IMPORTANT: Upcoming UWA planned firewall upgrades (Sun 18/11 & 9/12) In-Reply-To: <20181120090504.pi4ici6mkapsiltc@ucc.gu.uwa.edu.au> References: <3dcc9af0-3e29-4fea-8d60-97b870dc37e1@ucc.asn.au> <20181120033859.bm7ylvkb5lzvcia3@ucc.gu.uwa.edu.au> <20181120034953.3hu4i7vkvqnqikdm@ucc.gu.uwa.edu.au> <20181120044417.y7rgq2jowl5dvtjm@ucc.gu.uwa.edu.au> <20181120090504.pi4ici6mkapsiltc@ucc.gu.uwa.edu.au> Message-ID: Hi Nick, The call says 'in progress' but no notes on there, so not sure anything has been changed as yet. Glad to hear it's working though. I can't assist on the 1.1.1.1 thing as that is beyond the scope of what I can get into from a project perspective. If you email the service desk with the issue they will forward it onto either Networks or Security for a response. Cheers, Matt ?On 20/11/18, 5:05 pm, "Nick Bannon" wrote: On Tue, Nov 20, 2018 at 12:44:17PM +0800, Nick Bannon wrote: > On Tue, Nov 20, 2018 at 03:59:28AM +0000, Matt Tavani wrote: > > Hi Nick, > > Nothing reported on IPv6 so far but I believe you guys are the only ones using it. > > Wow! What is a good core: * UWA Crawley campus IPv6 address; and * UWA Crawley campus IPv4 address that I should be able to ping from outside UWA? DNS servers are usually a good default choice, but I think there's been some overenthusiastic and not-publically-documented firewalling of those done. > > If you can provide the details below I can get a ticket raised to investigate if there is an issue. Just fill in as much as you can based on what you???re seeing/not seeing. > > Thank you. Can you add our usual contact address as an "external > contact" in the service ticket? Good news! The IPv6 outage appears to have been resolved - are you aware of any relevant changes? Approximately the window Monday 2018-11-19 21:21 -- Tue 2018-11-20 13:03. (local time) > Could you also personally test Cloudflare 1.1.1.1 DNS and raise a similar > issue for that? I imagine firewall rules in general have been held off > until the recent upgrades; however I believe it's been against IETF > recommendations to block that since November 2011. > https://blog.cloudflare.com/announcing-1111/ > https://en.wikipedia.org/wiki/Bogon_filtering Would you still be able to do this for us? It's not a UCC-specific issue, however we're not able to directly create our own issues, in any case. (for info on _that_, see ServiceNow issue INC0222454 ) The quick test is that 1.1.1.1 should be pingable (also DNS, HTTP, etc.). The main technical question is: is there an explicit legacy firewall entry concerning it; or has it been null-routed at another level? Thank you, Nick. -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal From zanchey at ucc.gu.uwa.edu.au Sat Nov 24 19:45:18 2018 From: zanchey at ucc.gu.uwa.edu.au (David Adam) Date: Sat, 24 Nov 2018 19:45:18 +0800 (AWST) Subject: [tech] RIP Planet UCC? Message-ID: Hi all I've been the maintainer of Planet UCC (http://planet.ucc.asn.au) for about 10 years and I either want to shut it down or hand over the maintenance. When everybody had a blog, or at least a LiveJournal, Planets were a popular way of collecting all the posts from everyone in a particular community. Most of the blogs on Planet UCC have long since stopped posting, and I haven't added any since 2012. If you still read Planet UCC, and you'd be interested in taking it over, let me know. I've stopped it updating and put a warning notice at the top to indicate that I'm going to cut it free. I'll give it until Christmas or so. David Adam zanchey at ucc.gu.uwa.edu.au From mtearle at ucc.asn.au Sun Nov 25 08:16:20 2018 From: mtearle at ucc.asn.au (Mark Tearle) Date: Sun, 25 Nov 2018 00:16:20 +0000 Subject: [tech] RIP Planet UCC? In-Reply-To: References: Message-ID: <1543104980.2001702.1587729376.4798AD47@webmail.messagingengine.com> I do occasionally glance it, as it seems to pick up UCC minutes and the occasional post from Adrian Chadd. Is it just a matter of moving it to one of the more modern(?) planet like aggregator platforms? Mark -- Mark Tearle On Sat, 24 Nov 2018, at 11:45 AM, David Adam wrote: > Hi all > > I've been the maintainer of Planet UCC (http://planet.ucc.asn.au) for > about 10 years and I either want to shut it down or hand over the > maintenance. > > When everybody had a blog, or at least a LiveJournal, Planets were a > popular way of collecting all the posts from everyone in a particular > community. Most of the blogs on Planet UCC have long since stopped > posting, and I haven't added any since 2012. > > If you still read Planet UCC, and you'd be interested in taking it over, > let me know. > > I've stopped it updating and put a warning notice at the top to indicate > that I'm going to cut it free. I'll give it until Christmas or so. > > David Adam > zanchey at ucc.gu.uwa.edu.au > _______________________________________________ > List Archives: http://lists.ucc.asn.au/pipermail/tech > > Unsubscribe here: > https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au From alex.dawson.3825 at gmail.com Sun Nov 25 12:16:10 2018 From: alex.dawson.3825 at gmail.com (Alex Dawson) Date: Sun, 25 Nov 2018 12:16:10 +0800 Subject: [tech] RIP Planet UCC? In-Reply-To: <1543104980.2001702.1587729376.4798AD47@webmail.messagingengine.com> References: <1543104980.2001702.1587729376.4798AD47@webmail.messagingengine.com> Message-ID: Are you volunteering to take it over Mark? ;) -- Alex Dawson -- Alex Dawson +61 4 3344 DUCK (+61 433443825) > On 25 Nov 2018, at 8:16 am, Mark Tearle wrote: > > I do occasionally glance it, as it seems to pick up UCC minutes and the occasional post from Adrian Chadd. > > Is it just a matter of moving it to one of the more modern(?) planet like aggregator platforms? > > Mark > > -- > Mark Tearle > >> On Sat, 24 Nov 2018, at 11:45 AM, David Adam wrote: >> Hi all >> >> I've been the maintainer of Planet UCC (http://planet.ucc.asn.au) for >> about 10 years and I either want to shut it down or hand over the >> maintenance. >> >> When everybody had a blog, or at least a LiveJournal, Planets were a >> popular way of collecting all the posts from everyone in a particular >> community. Most of the blogs on Planet UCC have long since stopped >> posting, and I haven't added any since 2012. >> >> If you still read Planet UCC, and you'd be interested in taking it over, >> let me know. >> >> I've stopped it updating and put a warning notice at the top to indicate >> that I'm going to cut it free. I'll give it until Christmas or so. >> >> David Adam >> zanchey at ucc.gu.uwa.edu.au >> _______________________________________________ >> List Archives: http://lists.ucc.asn.au/pipermail/tech >> >> Unsubscribe here: >> https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au > _______________________________________________ > List Archives: http://lists.ucc.asn.au/pipermail/tech > > Unsubscribe here: https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/alex%40theducks.org From mtearle at ucc.asn.au Mon Nov 26 17:25:11 2018 From: mtearle at ucc.asn.au (Mark Tearle) Date: Mon, 26 Nov 2018 09:25:11 +0000 Subject: [tech] RIP Planet UCC? In-Reply-To: References: <1543104980.2001702.1587729376.4798AD47@webmail.messagingengine.com> Message-ID: <1543224311.2044185.1588809688.3982334A@webmail.messagingengine.com> I'm certainly inclined to look at doing that. Also some thought about tidying up UCC's web hosting should occur over Christmas. Mark -- Mark Tearle On Sun, 25 Nov 2018, at 4:16 AM, Alex Dawson wrote: > Are you volunteering to take it over Mark? ;) > > -- > Alex Dawson > > > > -- > Alex Dawson > +61 4 3344 DUCK (+61 433443825) > > On 25 Nov 2018, at 8:16 am, Mark Tearle wrote: > > > > I do occasionally glance it, as it seems to pick up UCC minutes and the occasional post from Adrian Chadd. > > > > Is it just a matter of moving it to one of the more modern(?) planet like aggregator platforms? > > > > Mark > > > > -- > > Mark Tearle > > > >> On Sat, 24 Nov 2018, at 11:45 AM, David Adam wrote: > >> Hi all > >> > >> I've been the maintainer of Planet UCC (http://planet.ucc.asn.au) for > >> about 10 years and I either want to shut it down or hand over the > >> maintenance. > >> > >> When everybody had a blog, or at least a LiveJournal, Planets were a > >> popular way of collecting all the posts from everyone in a particular > >> community. Most of the blogs on Planet UCC have long since stopped > >> posting, and I haven't added any since 2012. > >> > >> If you still read Planet UCC, and you'd be interested in taking it over, > >> let me know. > >> > >> I've stopped it updating and put a warning notice at the top to indicate > >> that I'm going to cut it free. I'll give it until Christmas or so. > >> > >> David Adam > >> zanchey at ucc.gu.uwa.edu.au > >> _______________________________________________ > >> List Archives: http://lists.ucc.asn.au/pipermail/tech > >> > >> Unsubscribe here: > >> https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/mtearle%40ucc.gu.uwa.edu.au > > _______________________________________________ > > List Archives: http://lists.ucc.asn.au/pipermail/tech > > > > Unsubscribe here: https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/alex%40theducks.org From 21321809 at student.uwa.edu.au Tue Nov 27 10:46:33 2018 From: 21321809 at student.uwa.edu.au (Blair Johnson) Date: Tue, 27 Nov 2018 10:46:33 +0800 Subject: [tech] Resolved! Re: Koha is Down In-Reply-To: <20181121111921.ucsdvpxglrx5h7ft@ucc.gu.uwa.edu.au> References: <20181115061900.x4dyyconmasscji2@ucc.gu.uwa.edu.au> <20181112143244.lop5lgvgibhtm2mx@ucc.gu.uwa.edu.au> <20181121111921.ucsdvpxglrx5h7ft@ucc.gu.uwa.edu.au> Message-ID: Would somebody from UniSFA committee please acknowledge if you've read these emails? I haven't seen any advertising on the Facebook page or via email for somebody interested in taking on a Koha admin role. > However now we still need some kind > of introduction and technical > handover. Blair and I would like to > propose Monday 2018-12-10. > Ideally, we're after 1st or 2nd year > members with an interest in CS, > sysadmin, LAMP and/or programming. > Any member of both UCC and UniSFA > is a good candidate Admittedly I haven't been reading the committee meeting minutes, but I'd still have liked to see some further action. Cheers, Blair On Wed, 21 Nov. 2018, 7:19 pm Nick Bannon On Mon, Nov 19, 2018 at 03:22:31PM +0800, Finley Hoskins wrote: > > Koha has gained sentience > On Mon, Nov 12, 2018 at 10:32:44PM +0800, Nick Bannon wrote: > > TODO: Clear or reset the sessions? > > Success! Thanks, Blair. > We did a relatively surgical SQL fix: drop and recreate an empty > koha.sessions table, we did not do a complete backup and restore. > > cron.daily "koha-run-backups --days 21 --output /var/spool/koha" on the > unisfa-koha machine was clogged up with files from another instance; > so new files were not being kept in any case. Fixed. > > However now we still need some kind of introduction and technical > handover. Blair and I would like to propose Monday 2018-12-10. > > Has there been any interest expressed so far? or can we drum some up > and see who might be available for that afternoon or evening? > > Ideally, we're after 1st or 2nd year members with an interest in CS, > sysadmin, LAMP and/or programming. Any member of both UCC and UniSFA is > a good candidate. > > * Testing checklist: _is_ Koha functional? > What needs checking, with what logins? > * Logins and familiarisation > * http://unisfa-koha.ucc.asn.au/ > * http://unisfa-koha.ucc.asn.au:8080/ admin interface > * SSH > * mariadb/mysql , mysqldump > * phpmyadmin > * proxmox > * unisfa-koha VM > * VM host interface (proxmox), can be checked with "unisfa" user > * configure email (backups, overdue notifications) > * /etc/cron.daily/koha-common > * configure remote logging, fail2ban > * prepare OS upgrade from oldstable to stable > * prepare regular Koha upgrade > deb http://debian.koha-community.org/koha stable main > * offsite backups > > Nick. > > -- > Nick Bannon | "I made this letter longer than usual because > nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal > _______________________________________________ > List Archives: http://lists.ucc.asn.au/pipermail/tech > > Unsubscribe here: > https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/21321809%40student.uwa.edu.au > -------------- next part -------------- An HTML attachment was scrubbed... URL: https://lists.ucc.gu.uwa.edu.au/pipermail/tech/attachments/20181127/ff188002/attachment.htm From frekk at ucc.asn.au Wed Nov 28 18:03:27 2018 From: frekk at ucc.asn.au (Felix von Perger) Date: Wed, 28 Nov 2018 18:03:27 +0800 Subject: [tech] Conversion of samson to VM Message-ID: <805c16d5-1b11-aef3-430f-3c045e4b6022@ucc.asn.au> Hi tech, [CFE] and I spent an hour or so this afternoon to transfer the samba/AD and freeradius services (meaning copying the config files and data) from the samson container (using LXC on Proxmox) to a new VM named samson-rebuild. The IP addresses for samson are the same. The operation was successful and it will mean that we can perform live-migration of samson between VM hosts without having any additional AD downtime. The original samson container is still active in case anyone finds something that was missed (and needs to be pulled from the container) but its IP address has been changed (now 130.95.13.30 or samson-rebuild in DNS) to prevent conflicts. Regards, [FVP] UCC Wheel Member From nick at ucc.gu.uwa.edu.au Thu Nov 29 16:30:36 2018 From: nick at ucc.gu.uwa.edu.au (Nick Bannon) Date: Thu, 29 Nov 2018 16:30:36 +0800 Subject: [tech] UCC website, IPv6 outage, was Re: [wheel] Your ticket has been updated: INC0251606, INC0222454 In-Reply-To: References: <99b543fa-89b8-8ecd-ade6-232a319b6fd8@ucc.asn.au> <9c0231c5-078c-d232-f5e0-1981e8982973@ucc.asn.au> <20181129062509.bvjuwtsmkx3y4kh4@ucc.gu.uwa.edu.au> Message-ID: <20181129083036.qtyr7jznfyo6oari@ucc.gu.uwa.edu.au> UCC's had a somewhat intermittent IPv6 network outage since around Monday 2018-11-19 21:21:46 / @1542633706 - possibly fixed now? https://www.ntppool.org/scores/2405:3c00:5200:100::1 https://evil.ucc.asn.au/cgi-bin/smokeping.cgi?target=All.pcextreme6 ...and in the process we clarified a bit about how we can raise ServiceNow tickets: On 2018-11-16, Tony Harrison wrote via ServiceNow issue INC0222454: [...] > B. Raising support tickets for University IT.?? If you e-mail > ithelp-is at uwa.edu.au (see: http://www.it.uwa.edu.au/service-catalogue/help-support/service-desk#availability-and-support) > from your support e-mail address wheel at ... then the contact for > that ticket will get set to wheel at ... , all correspondence entered > into that ticket will then get sent to wheel at ... and any > responses you send will accordingly be updated within the ticket. That may be automated to recognise wheel at ucc.gu.uwa.edu.au as a magic external contact address in ServiceNow (thanks, Tony, Shane!). ...and that our website probably needs a nice obvious front page link like: https://www.ucc.asn.au/support We come close on a page like: https://www.ucc.asn.au/services/login.ucc (support at ucc goes to wheel at ucc), Of course, the typical followup now is to: * send an overlong email and forget about it for at least 6 months; [tick] * resurrect RT or similar and track the need for a website update; or * declare and half implement a grand website redesign that somehow involves deleting all our current content and changing all our URLs Nick. -- Nick Bannon | "I made this letter longer than usual because nick-sig at rcpt.to | I lack the time to make it shorter." - Pascal