NetworkInfrastructure » History » Version 155
Denis 'GNUtoo' Carikli, 04/19/2023 11:03 PM
Update FSF director
1 | 125 | dl lud | h1. Network Infrastructure |
---|---|---|---|
2 | 1 | Denis 'GNUtoo' Carikli | |
3 | 141 | dl lud | |_. What |_. Where |_. Access type | Who | Comments | |
4 | 151 | Denis 'GNUtoo' Carikli | | "Redmine instance":https://redmine.replicant.us |/5. OSUOSL | Redmine manager | * "Paul Kocialkowski":https://redmine.replicant.us/projects/replicant/wiki/People#Paul-Kocialkowski |
5 | * "Wolfgang Wiedmeyer":https://redmine.replicant.us/projects/replicant/wiki/People#Wolfgang-Wiedmeyer |
||
6 | * "GNUtoo":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli |
||
7 | * "Joonas Kylmälä":https://redmine.replicant.us/projects/replicant/wiki/People#Joonas-Kylmälä |
||
8 | * "Fil Bergamo":https://redmine.replicant.us/projects/replicant/wiki/People#Fil-Bergamo |
||
9 | * "Kurtis Hanna":https://redmine.replicant.us/projects/replicant/wiki/People#Kurtis-Hanna |
||
10 | 133 | dl lud | * @dllud |
11 | 1 | Denis 'GNUtoo' Carikli | * @GrimKriegor |
12 | 141 | dl lud | * OSUOSL system administrators | Since we only have one project, OSUOSL put in a redirect from the main page of our Redmine instance to /project/replicant |
13 | 1 | Denis 'GNUtoo' Carikli | OSUOSL keeps 2 weeks worth of backups for restoration purposes. | |
14 | 150 | Denis 'GNUtoo' Carikli | | "Mailing list":https://lists.osuosl.org/mailman/listinfo/replicant | Mailing list administrator | * @dllud |
15 | 151 | Denis 'GNUtoo' Carikli | * "GNUtoo":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli |
16 | * "Joonas Kylmälä":https://redmine.replicant.us/projects/replicant/wiki/People#Joonas-Kylmälä |
||
17 | * "Kurtis Hanna":https://redmine.replicant.us/projects/replicant/wiki/People#Kurtis-Hanna |
||
18 | * "Paul Kocialkowski":https://redmine.replicant.us/projects/replicant/wiki/People#Paul-Kocialkowski |
||
19 | * "Wolfgang Wiedmeyer":https://redmine.replicant.us/projects/replicant/wiki/People#Wolfgang-Wiedmeyer |
||
20 | 141 | dl lud | * OSUOSL system administrators | OSUOSL keeps 2 weeks worth of backups for restoration purposes. | |
21 | 151 | Denis 'GNUtoo' Carikli | | "Wordpress instance":https://blog.replicant.us/ | Wordpress administator | * "Paul Kocialkowski":https://redmine.replicant.us/projects/replicant/wiki/People#Paul-Kocialkowski |
22 | * "Wolfgang Wiedmeyer":https://redmine.replicant.us/projects/replicant/wiki/People#Wolfgang-Wiedmeyer |
||
23 | * "GNUtoo":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli |
||
24 | * "Joonas Kylmälä":https://redmine.replicant.us/projects/replicant/wiki/People#Joonas-Kylmälä |
||
25 | * "Fil Bergamo":https://redmine.replicant.us/projects/replicant/wiki/People#Fil-Bergamo |
||
26 | * "Kurtis Hanna":https://redmine.replicant.us/projects/replicant/wiki/People#Kurtis-Hanna |
||
27 | 141 | dl lud | * @dllud |
28 | * OSUOSL system administrators |
||
29 | 110 | Denis 'GNUtoo' Carikli | * Add your name here if you have access and want to be mentioned | This instance is auto-updated automatically with the help of a plugin. | |
30 | 151 | Denis 'GNUtoo' Carikli | | "Releases":https://ftp-osl.osuosl.org/pub/replicant/ | SSH | * "Paul Kocialkowski":https://redmine.replicant.us/projects/replicant/wiki/People#Paul-Kocialkowski |
31 | * "Wolfgang Wiedmeyer":https://redmine.replicant.us/projects/replicant/wiki/People#Wolfgang-Wiedmeyer |
||
32 | * "GNUtoo":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli |
||
33 | * "Joonas Kylmälä":https://redmine.replicant.us/projects/replicant/wiki/People#Joonas-Kylmälä |
||
34 | 142 | dl lud | * OSUOSL system administrators | We should not use too much space. | |
35 | 141 | dl lud | | The replicant.us (mostly-static) front website |\2. None: there is an automatic hook managed by OSUOSL. | * "Source code":https://git.replicant.us/replicant/website/ |
36 | * Patches should be sent to the Replicant mailing list. |
||
37 | * There is a jenkins hook with a token to pull and deploy the website source code. | |
||
38 | 151 | Denis 'GNUtoo' Carikli | | "Replicant Source code":https://git.replicant.us/ |/2. Virtual machine at FSF | SSH root access | * "Paul Kocialkowski":https://redmine.replicant.us/projects/replicant/wiki/People#Paul-Kocialkowski |
39 | * "GNUtoo":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli |
||
40 | * "Joonas Kylmälä":https://redmine.replicant.us/projects/replicant/wiki/People#Joonas-Kylmälä |
||
41 | 120 | Denis 'GNUtoo' Carikli | * Several FSF system administrators |
42 | 52 | Denis 'GNUtoo' Carikli | * FSF backup server |
43 | 141 | dl lud | * FSF Ansible deployment server | Resources kindly offered by the FSF. |
44 | 152 | Denis 'GNUtoo' Carikli | The git configuration has "some documentation":https://redmine.replicant.us/projects/replicant/wiki/ReplicantInfrastructure#git-hosting-infrastructure-on-this-machine . |
45 | 38 | Denis 'GNUtoo' Carikli | Before handling SSH (root) access to this machine: |
46 | 141 | dl lud | * Make sure that the person really needs it. |
47 | 1 | Denis 'GNUtoo' Carikli | * Make sure that the person already contributed to Replicant. |
48 | 152 | Denis 'GNUtoo' Carikli | * Ask one other person that has SSH access and/or the "SteeringCommittee":https://redmine.replicant.us/projects/replicant/wiki/SteeringCommittee to also agree on it. | |
49 | | "Private contact address":https://redmine.replicant.us/projects/replicant/wiki/PrivateContact | IMAP access | * "GNUtoo":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli |
||
50 | 151 | Denis 'GNUtoo' Carikli | * "Joonas Kylmälä":https://redmine.replicant.us/projects/replicant/wiki/People#Joonas-Kylmälä |
51 | * "Fil Bergamo":https://redmine.replicant.us/projects/replicant/wiki/People#Fil-Bergamo |
||
52 | * "Kurtis Hanna":https://redmine.replicant.us/projects/replicant/wiki/People#Kurtis-Hanna |
||
53 | 141 | dl lud | * @dllud |
54 | 152 | Denis 'GNUtoo' Carikli | * @GrimKriegor | You can write to the contact address (all the members of "SteeringCommittee":https://redmine.replicant.us/projects/replicant/wiki/SteeringCommittee receive it) if for some reasons you need to receive it as well. | |
55 | 151 | Denis 'GNUtoo' Carikli | |/2. #replicant IRC channel | Freenode | Channel operator | * "Paul Kocialkowski":https://redmine.replicant.us/projects/replicant/wiki/People#Paul-Kocialkowski |
56 | * "GNUtoo":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli |
||
57 | * "Joonas Kylmälä":https://redmine.replicant.us/projects/replicant/wiki/People#Joonas-Kylmälä |
||
58 | * "Kurtis Hanna":https://redmine.replicant.us/projects/replicant/wiki/People#Kurtis-Hanna | Quiet mode for unregistered users is disabled for the time being. If SPAM comes back use: @/mode #replicant +qe $~a *!*@gateway/web/*@ and @/mode #replicant +qe $~a *!*@gateway/shell/matrix.org/*@ to re-apply it. These commands whitelist users coming through web based IRC clients and via the Matrix.org IRC bridge. | |
||
59 | | OFTC | Channel operator | * "Kurtis Hanna":https://redmine.replicant.us/projects/replicant/wiki/People#Kurtis-Hanna |
||
60 | 148 | Kurtis Hanna | * @JeremyRand | Bridged with the Freenode IRC channel and #freenode_#replicant:matrix.org Matrix channel through the NCBridge bot operated by @JeremyRand | |
61 | 29 | Denis 'GNUtoo' Carikli | | The replicant.us domain name | gandi.net | * Web inteface through gandi website |
62 | 151 | Denis 'GNUtoo' Carikli | * The DNS entries are configured to use gandi's DNS server | * "Bradley Kuhn (administrative contact)":https://redmine.replicant.us/projects/replicant/wiki/People#Bradley-M-Kuhn : Can do everything (including designating the technical contact or transferring the domain) |
63 | * "GNUtoo (technical contact)":https://redmine.replicant.us/projects/replicant/wiki/People#Denis-GNUtoo-Carikli : can do DNS zone changes |
||
64 | * Other people? "Paul Kocialkowski":https://redmine.replicant.us/projects/replicant/wiki/People#Paul-Kocialkowski ? | | |
||
65 | 13 | Denis 'GNUtoo' Carikli | | The replicant.us TLS certificate | Let's Encrypt | Access probably by controlling the respective domain name | * https://www.replicant.us: OSUOSL |
66 | 7 | Denis 'GNUtoo' Carikli | * https://blog.replicant.us: OSUOSL |
67 | 16 | Denis 'GNUtoo' Carikli | * https://redmine.replicant.us: OSUOSL |
68 | 19 | Denis 'GNUtoo' Carikli | * https://git.replicant.us: ? | History: CA-cert -> GlobalSign -> LetsEncrypt | |
69 | 153 | Denis 'GNUtoo' Carikli | | "Mastodon account":https://mamot.fr/@replicant | Administred by "La quadrature du net":https://en.wikipedia.org/wiki/La_Quadrature_du_Net | Account only | * TODO: ask the person who created the account |
70 | * The "Private contact address":https://redmine.replicant.us/projects/replicant/wiki/PrivateContact address was used as the mail | See the [[Mastodon]] page for more details | |
||
71 | 56 | Denis 'GNUtoo' Carikli | |
72 | h2. OSUOSL |
||
73 | 92 | Denis 'GNUtoo' Carikli | |
74 | 144 | dl lud | The OSUOSL is the "Oregon State University Open Source Lab":https://osuosl.org/. |
75 | 130 | Denis 'GNUtoo' Carikli | |
76 | 1 | Denis 'GNUtoo' Carikli | Contact: |
77 | 129 | Denis 'GNUtoo' Carikli | * They can be contacted on #osuosl on the Freenode IRC network |
78 | 1 | Denis 'GNUtoo' Carikli | * They also have a 'support' mail address at osuosl.org |
79 | 66 | Denis 'GNUtoo' Carikli | |
80 | 75 | Denis 'GNUtoo' Carikli | h2. Virtual machine in FSF's infrastructure |
81 | 76 | Denis 'GNUtoo' Carikli | |
82 | * The virtual machine is hosted in a server that is in their office or in a datacenter. |
||
83 | 75 | Denis 'GNUtoo' Carikli | * Several FSF network administrator also have access to the virtual machine |
84 | 66 | Denis 'GNUtoo' Carikli | |
85 | 67 | Denis 'GNUtoo' Carikli | Contact: |
86 | 69 | Denis 'GNUtoo' Carikli | * The 'sysadmin' mail address at gnu.org |
87 | 66 | Denis 'GNUtoo' Carikli | * The FSF system administrators can also be contacted on #fsfsys on the Freenode IRC network for more urgent matters |
88 | |||
89 | h3. Virtual machine specifications |
||
90 | |||
91 | 154 | Denis 'GNUtoo' Carikli | See [[VMSpecifications]] for the VM specifications. |
92 | 62 | Denis 'GNUtoo' Carikli | |
93 | h3. Virtual machine backup policies |
||
94 | |||
95 | The virtual machine is backed up daily. The backup procedure excludes the following path at the time of writing: |
||
96 | <pre> |
||
97 | /dev |
||
98 | /proc |
||
99 | /tmp |
||
100 | /sys |
||
101 | /run |
||
102 | /mnt |
||
103 | /mnt0 |
||
104 | /mnt1 |
||
105 | /mnt2 |
||
106 | /mnt3 |
||
107 | /mnt4 |
||
108 | /mnt5 |
||
109 | /mnt6 |
||
110 | /mnt7 |
||
111 | /mnt8 |
||
112 | /mnt9 |
||
113 | /floppy/ |
||
114 | /cdrom/ |
||
115 | /media/ |
||
116 | /net/ |
||
117 | /var/spool/squid/ |
||
118 | /var/spool/squid3/ |
||
119 | /var/spool/squid3_bak/ |
||
120 | /var/spool/squid-tbd/ |
||
121 | /var/spool/squid*/ |
||
122 | /var/spool/django/ |
||
123 | /var/spool/exim/ |
||
124 | /var/cache/ |
||
125 | /srv/chroot/ |
||
126 | /t |
||
127 | 44 | Denis 'GNUtoo' Carikli | /srv/to-tape |
128 | 81 | Denis 'GNUtoo' Carikli | /var/lib/ceph/osd/ |
129 | 80 | Denis 'GNUtoo' Carikli | /var/lib/apt/lists/ |
130 | /var/cache/apt/ |
||
131 | </pre> |
||
132 | |||
133 | 1 | Denis 'GNUtoo' Carikli | h3. git hosting infrastructure on this machine |
134 | |||
135 | 80 | Denis 'GNUtoo' Carikli | The source code is in /srv/git/git-data/repositories and is divided in several groups: |
136 | 115 | Denis 'GNUtoo' Carikli | ** Replicant source code |
137 | 116 | Denis 'GNUtoo' Carikli | ** LineageOS mirror |
138 | 82 | Denis 'GNUtoo' Carikli | ** AOSP mirror |
139 | 84 | Denis 'GNUtoo' Carikli | ** Various developers repositories |
140 | 116 | Denis 'GNUtoo' Carikli | |
141 | 115 | Denis 'GNUtoo' Carikli | |_. function |_. software |_. documentation |_. comments | |
142 | 152 | Denis 'GNUtoo' Carikli | | authorization | gitolite | "UpstrreamSourceCodeMirrors":https://redmine.replicant.us/projects/replicant/wiki/UpstrreamSourceCodeMirrors | | |
143 | 79 | Denis 'GNUtoo' Carikli | | read access | * git:// -> git daemon |
144 | 1 | Denis 'GNUtoo' Carikli | * ssh:// -> ssh daemon |
145 | * https:// -> ? (TODO: document the software/configuration) | | | |
||
146 | 152 | Denis 'GNUtoo' Carikli | | web | cgit | "Cgit":https://redmine.replicant.us/projects/replicant/wiki/Cgit | | |
147 | 79 | Denis 'GNUtoo' Carikli | |
148 | 46 | Denis 'GNUtoo' Carikli | h2. Gandi |
149 | 126 | Denis 'GNUtoo' Carikli | |
150 | * See https://en.wikipedia.org/wiki/Gandi for more details |
||
151 | |||
152 | h2. Freenode |
||
153 | 79 | Denis 'GNUtoo' Carikli | |
154 | 47 | Denis 'GNUtoo' Carikli | h2. GDPR |
155 | 1 | Denis 'GNUtoo' Carikli | |
156 | 152 | Denis 'GNUtoo' Carikli | * For GDPR related inquiries, you can write to the "PrivateContact":https://redmine.replicant.us/projects/replicant/wiki/PrivateContact mail address. |
157 | 1 | Denis 'GNUtoo' Carikli | |
158 | 47 | Denis 'GNUtoo' Carikli | h2. TODO: |
159 | 50 | Denis 'GNUtoo' Carikli | |
160 | 48 | Denis 'GNUtoo' Carikli | * Ask the OSUOSL about backup policies. |
161 | 55 | Denis 'GNUtoo' Carikli | * Document public spaces like Freenode IRC channel. |
162 | 54 | Denis 'GNUtoo' Carikli | * Do our own backup policies and do some backups ourselves. |
163 | 77 | Denis 'GNUtoo' Carikli | * Contact the people that have some control of the resources above and ask for permission to mention them here |
164 | * Fill the gaps (mentioned with '?') in this page |
||
165 | 78 | Denis 'GNUtoo' Carikli | * Look what happens when an account is deleted |
166 | 99 | Denis 'GNUtoo' Carikli | * Fix the related issues in the "tracker":https://redmine.replicant.us/projects/replicant/issues?utf8=%E2%9C%93&set_filter=1&f%5B%5D=status_id&op%5Bstatus_id%5D=o&f%5B%5D=category_id&op%5Bcategory_id%5D=%3D&v%5Bcategory_id%5D%5B%5D=57&f%5B%5D=&c%5B%5D=tracker&c%5B%5D=status&c%5B%5D=priority&c%5B%5D=subject&c%5B%5D=assigned_to&c%5B%5D=updated_on&c%5B%5D=category&c%5B%5D=cf_21&group_by=&t%5B%5D= |
167 | 94 | Denis 'GNUtoo' Carikli | * Move the entries of this TODO list to the tracker when it makes sense |
168 | |||
169 | h1. Funding and legal entity |
||
170 | |||
171 | 152 | Denis 'GNUtoo' Carikli | See the "SteeringCommittee":https://redmine.replicant.us/projects/replicant/wiki/SteeringCommittee for more details. |
172 | 94 | Denis 'GNUtoo' Carikli | |
173 | 135 | Denis 'GNUtoo' Carikli | h1. Legal advise |
174 | |||
175 | 155 | Denis 'GNUtoo' Carikli | Contact Zoë Kooyman the FSF. |
176 | 136 | Denis 'GNUtoo' Carikli | |
177 | 155 | Denis 'GNUtoo' Carikli | Note that Zoë Kooyman is not a lawyer but the FSF has lawyers. |
178 | 1 | Denis 'GNUtoo' Carikli | |
179 | h1. Documentation |
||
180 | |||
181 | The "replicant-infrastructure redmine project":https://redmine.replicant.us/projects/replicant-infrastructure has a "wiki":https://redmine.replicant.us/projects/replicant-infrastructure/wiki with more documentation in it. |