DokuWiki

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

====== Infrastructure Team ======

The Infrastructure-Team manages the DokuWiki server and makes sure all services like this wiki, the forums or the IRC logs are up and running.

===== Members =====

[[user>ploeger|Dennis Ploeger]] is working as a systems and network administrator for about fifteen years now, specialized in Linux systems administration and open source development. He's an Open Source enthusiast, but not religious -- if the available Open Source thingies don't work, he won't use them just "because". He worked with several linux distributions, but feels home in the debian-ish distributions. Bash-Scripting and "Piping", Perl and PHP is naturally all in the package.

[[user>gajda|Frank Jørgensen]] has been working as a UNIX-admin for the past 12-13 years focusing on Linux system administration for the most part. He worked a couple of years at a largeish ISP where he got to know the usual suspects (apache, MySQL, Sendmail, Postfix, Bind etc...) and also did a bit of development work (mainly Perl, PHP and Bash). Red Hat (CentOS, Fedora) and SuSE is where he feels most at home - but he worked with other distros as well.

[[user>ChrisS|Christopher Smith]] doesn't have much formal Linux sysadmin experience, but regularly deploys web applications on Linux servers (predominantly Ubuntu on AWS these days) and keeps those sites operational. He's also an active DokuWiki developer for several years now.

[[user>andi|Andreas Gohr]] worked for some years as a Linux system administrator and managed the old DokuWiki server on his own. He's trying to keep his role in the infrastructure team low to have more time for his other DokuWiki work.

[[user>andrwe|Andrwe]] works as a system administrator since 2010. He learned Linux using Gentoo and now uses Arch Linux for all his systems and administrates debian-ish systems at work. He's specialized in Bash and has knowlegde about the usual stuff (apache, MySQL, Postfix, nginx, Lighttpd, Bind, etc...).
===== Current Tasks =====

* Check apache and php error logs if there are any errors
    * we might have missed things on the move
    * if unsure ask at the mailinglist

* systemd services
    * shorewall.service displays as failed
      * it tried to add a chain "fooX813" which doesn't exists, can't see why but is working manually
    * irclog bot did not come up after boot. A service stop, start worked
      * enabled in systemd, should work now
    * graphical.target is active?
    * are there more services we can disable?
  * do we still use zabbix?
  * according to https://askubuntu.com/questions/422265/what-is-console-kit-daemon-for we don't need console-kit.daemon running, why do we have it?
    * purged, see below
  * can we switch from fastcgi to php-fpm?
  * we have a growing number of zombie processes for PHP!
  * Apache Error log shows lots of errors:
    * mod_fcgid: process 4092 graceful kill fail, sending SIGKILL
    * AH00288: scoreboard is full, not at MaxRequestWorkers
    * server reached MaxRequestWorkers setting, consider raising the MaxRequestWorkers setting
    * (35)Resource deadlock avoided: AH00273: apr_proc_mutex_lock failed. Attempting to shutdown process gracefully.
  * purged unused packages
    * linux-image-2.6.26-2-amd64
    * linux-image-2.6-amd64
    * linux-image-3.2.0-4-amd64
    * samba
    * libkdc2-heimdal
    * libhdb9-heimdal
    * python-dnspython
    * samba-dsdb-modules
    * samba-vfs-modules
    * tdb-tools
    * acpid & acpi-support-base (handling of buttons is now done by systemd-logind[8])
    * consolekit (after purging acpid, this one is marked as obsolete)
    * libck-connector0
    * libdbus-glib-1-2
    * libpam-ck-connector
    * libpolkit-gobject-1-0
===== Archived tasks =====

* <del>Optimize system monitoring [[user>ploeger]]</del>
    * <del>Integrate aacraid-status into Zabbix</del>
  * <del>Setup a working backup system [[user>ploeger]]</del>
    * <del>Should work with [[http://wiki.hetzner.de/index.php/Backup|Hetzner backup space]]</del>
      * <del>Access credentials are at ''/root/backup-access.txt''</del>
    * <del>Keep a week of MySQL dumps</del>
    * <del>Backup all relevant data to restore the site</del>
    * <del>Standard unix formats (tar, gzip/ bzip) preferred over special backup formats</del>
  * <del>Check if logrotate is setup for all webservices</del>
    * <del>increase keep time?</del>
  * <del>Setup rootkit checks [[user>ploeger]]</del>
  * <del>Setup system monitoring [[user>ploeger]]</del>
    * <del>Monitor load internally</del>
    * <del>Monitor service availability externally (can someone provide this?)</del>
    * <del>Internal alerts can go to admin@dokuwiki.org (forwards to all team members)</del>
  * <del>Improve PHP error logging [[user>ploeger]]</del>
    * <del>currently goes to syslog (/var/log/messages)</del>
    * <del>each vhost should have it's own PHP error log</del>
    * <del>probably needs to have the fast cgi wrappers load an addtional php.ini (or use a command line switch for the PHP processor)</del>
  * <del>Setup some notification on available package updates</del>
    * <del>we could use [[http://notes.splitbrain.org/aptchecker|this script]] unless you know something better</del>
    * regularly update the packages
  * <del>Setup SSL for the webserver [[user>ploeger]]</del>
    * <del>Do we need to use server name indication? [[user>adrianlang]] has some experience with it, if in doubt, contact him</del>
    * <del>Or would a wild card certificate for *.dokuwiki.org work?</del>
    * <del>[[user>andi]] will create a CACert certificate as soon as this is decided</del>
    * <del>SSL should be optionally available on all web services where users login (wiki, forum, bugtracker)</del> done. 
  * <del>Check if mails sent from the server are correct</del> seems okay
  * <del>Change the firewall system to something better manageable. Perhaps something like [[http://www.shorewall.net/]]</del> changed to shorewall
  * <del>implement some scripts which automaticaly update the documentation of the server (package status, hardware, mainly this site: [[serversetup|Server Setup]] )</del> -- cronjob ''/etc/cron.daily/sysinfo.sh''
  * <del>install and configure smartd</del>

===== Info =====

* [[serversetup]]
  * [[remote access]]
  * [[backup]]
    * [[REAR BMR backup]]
  * [[rootkit]]
  * [[monitoring]]
  * [[dokubot]]
  * [[top nav toolbar]]
  * [[Upgrade to Jessie]]
  * [[translate-tool]]

Please fill all the letters into the box to prove you're human. B O X B V Please keep this field empty:

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Share Alike 4.0 International