You are here: NRAO Public Wiki>HPC Web>DirectorsOffice>WebChanges (2009-10-19, CarolynWhite) Edit wiki text Edit Attach Print version

50 recent changes in HPC Web retrieved at 10:25 (Local)

UsnoNodeBootMechanism2
Main.JimJacobs 2020 03 27
NEW - 2020-03-27 - 18:29 by JimJacobs
UsnoDifxOsPatchChecklistItemState
WARNING! THIS TOPIC IS GENERATED BY System.ChecklistPlugin PLUGIN. DO NOT EDIT THIS TOPIC (except table data)! Back to the checklist topic UsnoDifxOsPatch. *cont...
r453 - 2020-03-24 - 18:38 by MarkWainright
UsnoDifxLogging2
Logging Rsyslog Server 1 runs rsyslogd via the systemd rsyslog.service; the main configuration for the rsyslod is /etc/rsyslog.conf. In addtion, server 1 provide...
r4 - 2020-02-25 - 18:44 by JimJacobs
UsnoDifxOsPatch2
Neo Correlator Patching The patch process for the Neo correlator (installed at USNO on November 2019) is outlined below. A set of "checkboxes" is provided to assi...
r19 - 2020-02-25 - 17:29 by JimJacobs
UsnoDifxServerDiskLayout2
Disk Layout Server Disk Partitioning The disk layout is shown below as displayed using lsblk. The two disks are partitioned somewhat in parallel although the fir...
r5 - 2020-02-25 - 13:01 by JimJacobs
UsnoDifxEnvSensor2
Environment Monitor The environment monitor is positioned to read the temperature and humidity via a sensor mounted above the rack containing the correlator nodes...
NEW - 2020-02-18 - 16:31 by JimJacobs
UsnoDifxServers2
Admin Servers Introduction Each correlator has two administrative servers, server 1 and server 2. The servers are used to administer the correlator and take no d...
r3 - 2020-02-18 - 16:27 by JimJacobs
UsnoDifxNetworkingDiagram2
Main.JimJacobs 2018 12 11
r2 - 2020-02-18 - 14:23 by JimJacobs
UsnoDifxNetworking2
Contents Networking As of this writing the plan is to fold the new correlator into the existing correlator network layout. This will facilitate keeping the two i...
r4 - 2020-02-14 - 12:20 by JimJacobs
UsnoDifxOsPatch2ChecklistItemState
WARNING! THIS TOPIC IS GENERATED BY System.ChecklistPlugin PLUGIN. DO NOT EDIT THIS TOPIC (except table data)! Back to the checklist topic UsnoDifxOsPatch2. *con...
r9 - 2020-02-13 - 13:31 by JimJacobs
UsnoDifxSMTP2
Mail Service Overview Since the correlator is effectively a compute device, very little email service is required. The only exception is that the system administ...
NEW - 2020-01-23 - 18:16 by JimJacobs
UsnoDifxNTP2
Time Service Overview Time services is provided primarily by server 1 using the chronyd daemon. The configuraiton file for chronyd is /etc/chrony.conf. Service...
NEW - 2020-01-23 - 18:10 by JimJacobs
UsnoDifxDHCP2
DHCP Overview Server 1 provides DHCP service on the network admin network. The setting for the daemon are in /etc/dhcp/dhcpd.conf. The IP addresses on all of ne...
NEW - 2020-01-23 - 17:33 by JimJacobs
UsnoDifxTFTP2
Main.JimJacobs 2020 01 23
NEW - 2020-01-23 - 17:31 by JimJacobs
UsnoDifxInfiniband2
Infiniband Switches Overview The correlators use Infiniband (IB) network connections to pass data between the correlator nodes (SWCs) and also with the file serv...
NEW - 2020-01-23 - 17:23 by JimJacobs
UsnoMaintenanceLog2
USNO Maintenance Log 2 This log page allows significant maintenance/administration events to be logged for future use. The goal is to record information that migh...
NEW - 2020-01-23 - 13:04 by JimJacobs
UsnoDifxGbitSwitch2
Gigabit Switches Overview All hosts and devices making up the correlator are connected to the 1G Ethernet admin subnet (10.1.36) which will allow the admin serve...
NEW - 2020-01-23 - 12:53 by JimJacobs
UsnoDifxBgfsServer2
BGFS File Servers Overview At this writing (10/23/20) the BGFS file servers have not arrived. The goal is to replace the existing Lustre file servers with BGFS s...
NEW - 2020-01-23 - 12:47 by JimJacobs
UsnoDifxKVM2
KVM Console/Switchs ATEN Altusen (kvm 1) * ATEN KL1516Ai remote capable KVM with embeded 16 port switch. * This KVM serves server 1, server 2 and swc 000...
r4 - 2020-01-23 - 12:36 by JimJacobs
UsnoDifxComputeNodes2
Compute Nodes Basic System Specs The SWC (SoftWare correlator) hosts are Dell R640 systems. These have two Intel Xeon Gold 6132 CPUs which run at 2.60 GHz; each ...
r2 - 2020-01-21 - 18:15 by JimJacobs
UsnoDifxDNS2
Correlator DNS Service Server Configuration Both server 1 and server 2 provide DNS service to the correlator. Server 2 should be considered a backup to server 1....
NEW - 2020-01-21 - 13:47 by JimJacobs
UsnoVNC2
VNC and X Window Connections To launch an X application, make an ssh tunnel and then launch the X app an it'll appear locally. * ssh X J admin@usno serv 1t ...
NEW - 2019-10-24 - 17:38 by JimJacobs
UsnoDifxPdus2
Power Distribution Units Overview Nine 20amp 208V PDUs supply power to the devices within the USNO correlator racks. * Seven vertical mount zero U AP8959 PDU...
r3 - 2019-10-08 - 13:11 by JimJacobs
Rhel7Stig055Production
This rule requires the installation and continuous execution of a host based intrusion detection system. The preferred package is McAfee but apparently something ...
r2 - 2019-09-25 - 17:04 by JimJacobs
UsnoRhel7Stig2ProductionChecklistItemState
WARNING! THIS TOPIC IS GENERATED BY System.ChecklistPlugin PLUGIN. DO NOT EDIT THIS TOPIC (except table data)! Back to the checklist topic UsnoRhel7Stig2Productio...
r19 - 2019-09-24 - 18:48 by JimJacobs
Rhel7Stig001Production
Done, though future fiddling might throw it off.
r2 - 2019-09-20 - 14:18 by JimJacobs
Rhel7Stig242Production
Pending on firewall implementation.
NEW - 2019-09-20 - 13:35 by JimJacobs
Rhel7Stig245Production
The STIG requires multifactor access for all privleged accounts; it mentions using two government approved mechanisms (one is CAC) as examples. It's possible that...
NEW - 2019-09-20 - 13:34 by JimJacobs
Rhel7Stig241Production
This will occur as part of setting up the firewall.
NEW - 2019-09-20 - 13:06 by JimJacobs
Rhel7Stig239Production
The twoservers do not mount any NFS volumes. The SWCs have two mounts to server 1. We'll have to see if this causes any heartburn when it's enabled on the SWCs.
NEW - 2019-09-20 - 13:04 by JimJacobs
Rhel7Stig238Production
None of the hosts are currently doing any packet forwarding. On the old cluster the firewall had to be modified to allow packet forwarding to support some of the ...
NEW - 2019-09-20 - 12:58 by JimJacobs
Rhel7Stig237Production
Xwindows is used for remote administration purposes on server 1 and server 2. It is not installed on the SWCs.
NEW - 2019-09-20 - 12:55 by JimJacobs
Rhel7Stig236Production
The tftp server package is not installed on the SWCs. On the two servers, the service file is located in /etc/systemd/system/tftp.service and this starts the serv...
NEW - 2019-09-20 - 12:52 by JimJacobs
Rhel7Stig234Production
The two servers need TFTP server functionality to support diskless bootup. The daemon is invoked with a root, /opt/services/tftpboot, which limits its scope. The ...
NEW - 2019-09-19 - 15:58 by JimJacobs
Rhel7Stig216Production
Set it to 500 on the servers and at the 1000 limit on the SWCs as I'm worried that there might be a lot of traffic on them.
NEW - 2019-09-19 - 15:01 by JimJacobs
Rhel7Stig215Production
We'll need to tunnel back to the NRAO to get a clock sync. The SWCs will get their time from server 1.
NEW - 2019-09-19 - 14:57 by JimJacobs
Rhel7Stig204Production
Apply this one last since it'll make setup a lot harder.
NEW - 2019-09-18 - 18:42 by JimJacobs
Rhel7Stig190Production
FIPS stuff is on hold right now.
NEW - 2019-09-18 - 17:08 by JimJacobs
Rhel7Stig189Production
This rule should be revisited as part of firewall setup.
NEW - 2019-09-17 - 17:02 by JimJacobs
Rhel7Stig187Production
The servers provide SMTP service but act as relays so that alarm messages from within the cluster can propagate outside of the cluster to system administrators, e...
NEW - 2019-09-17 - 17:00 by JimJacobs
Rhel7Stig186Production
The two servers do allow remote messages over TCP. This allows them to capture syslog messages from the SWCs and other devices on the system. Thus they serve as l...
NEW - 2019-09-17 - 16:59 by JimJacobs
Rhel7Stig127Production
The config files for audit have changed since the STIG. They are now located in /etc/audit/rules.d though I think they're actually "compiled" into /etc/audit/audi...
NEW - 2019-09-17 - 15:12 by JimJacobs
Rhel7Stig115Production
Auditting is enabled on the systems and will be tweaked per STIG specs about coverage. The system must have high availability, so having a doomsday switch on audi...
NEW - 2019-09-17 - 14:15 by JimJacobs
Rhel7Stig112Production
There are a couple of other grub.cfg files located under /opt. These are served up to the diskless systems and are not part of the boot process for the server's t...
NEW - 2019-09-16 - 18:47 by JimJacobs
Rhel7Stig111Production
This appears to be related to FIPS installation, which we're skipping for the time being.
NEW - 2019-09-16 - 18:36 by JimJacobs
Rhel7Stig108Production
As soon as we do this one we'll lose the ability to use Radius to the switches, etc. Let's hold off for now.
NEW - 2019-09-16 - 17:13 by JimJacobs
Rhel7Stig105Production
The hard drives on the servers have a separate partition for /var. I'm not sure that this rule applies to the diskless systems since they have no disks.
NEW - 2019-09-16 - 17:02 by JimJacobs
Rhel7Stig057Production
The aide program is installed on server {1,2} and the swc diskless image. Cron should run it once a day on the servers. An email message will go out to usno admin...
NEW - 2019-09-12 - 16:44 by JimJacobs
Rhel7Stig056Production
This rule is moot if McAfee is installed and active; otherwise SELinux needs to be enabled and then configured appropriately.
NEW - 2019-09-12 - 14:54 by JimJacobs
Rhel7Stig052Production
Mandatory multifactor authentication is likely to be problematic for the cluster both for administration and DiFX usage because both actions require easy login to...
NEW - 2019-09-12 - 14:34 by JimJacobs
Number of topics: 50
Page 1 of 9 Next >

See also: rss-small RSS feed, recent changes with 50, 100, 200, 500, 1000 topics, all changes
Edit  | Attach | Print version | History: r3 < r2 < r1 | Backlinks | View wiki text | Edit wiki text | More topic actions
Topic revision: r3 - 2009-10-19, CarolynWhite
This site is powered by FoswikiCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding NRAO Public Wiki? Send feedback