diff --git a/_toc.yml b/_toc.yml index 19368e5d..2ba6518e 100644 --- a/_toc.yml +++ b/_toc.yml @@ -176,7 +176,6 @@ chapters: - file: engineering-guide/icinga2 - file: engineering-guide/login - file: engineering-guide/lxsup - - file: engineering-guide/lxweb00 - file: engineering-guide/gitea - file: engineering-guide/gitea-dmz - file: engineering-guide/webhosting diff --git a/engineering-guide/_static/overview_linux.drawio.svg b/engineering-guide/_static/overview_linux.drawio.svg index d07e3644..8a3b7f62 100644 --- a/engineering-guide/_static/overview_linux.drawio.svg +++ b/engineering-guide/_static/overview_linux.drawio.svg @@ -1,4 +1,4 @@ - + @@ -69,28 +69,6 @@ - - - - - - - -
-
-
- http tcp:80 -
- https tcp:443 -
-
-
- - - http tcp:8... - - - @@ -129,48 +107,6 @@ - - - - - -
-
-
- network infra structure servers -
- (network team) -
-
-
- - - network infra structure servers... - - - - - - - - - - -
-
-
- subscribed via -
- subscription manager -
-
-
- - - subscribed via... - - - @@ -564,57 +500,6 @@ - - - - -
-
-
-
- lxweb00.psi.ch -
-
- linux.web.psi.ch -
-
- 129.129.190.46 -
-
-
-
- - - lxweb00.psi.ch... - - - - - - -
-
-
-
- - Services: - -
-
- - http server - -
-
-
-
- - - Services:... - - - - @@ -900,7 +785,7 @@ -
+
NFS4 @@ -910,7 +795,7 @@
- + NFS4... @@ -1063,7 +948,7 @@

- https://gitea.psi.ch/lx/network-boot + https://git.psi.ch/linux-infra/network-boot

@@ -1072,11 +957,10 @@
- https://gitea.psi.ch/lx/network-boot + https://git.psi.ch/linux-infra/network-boot - @@ -1099,36 +983,6 @@ - - - -
-
-
-

- - /ext/gpfs "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/GPFS" - -
-

-

- /ext/hpc-extra "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/hpc-extra" -

-

- /ext/ofed "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/OFED" -

-

- /ext/slurm "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/slurm" -

-
-
-
- - - /ext/gpfs "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/GPFS"... - - - @@ -1183,12 +1037,12 @@ - + -
+
8140 @@ -1196,17 +1050,17 @@
- + 8140 - + -
+
GET / grub/kickstart requests / only UEFI @@ -1214,16 +1068,16 @@
- + GET / grub/kickstart requests / only UEFI - + -
+
F5 @@ -1231,7 +1085,7 @@
- + F5 @@ -1279,7 +1133,7 @@ -
+
manual push @@ -1287,7 +1141,7 @@
- + manual push @@ -1301,7 +1155,7 @@

- https://gitea.psi.ch/lx/network-boot-dmz + https://git.psi.ch/linux-infra/network-boot-dmz

@@ -1314,12 +1168,12 @@ - - + + -
+
http/80 https/443 @@ -1327,7 +1181,7 @@
- + http/80 https/443 @@ -1335,7 +1189,7 @@ -
+
sysdb-dmz.psi.ch @@ -1343,7 +1197,7 @@
- + sysdb-dmz.psi.ch @@ -1367,7 +1221,7 @@ -
+
client certificate / puppet uses this to identify the machine ? Does this work with a reverse proxy? @@ -1375,7 +1229,7 @@
- + client certificate / puppe... @@ -1452,7 +1306,7 @@ -
+
@@ -1462,7 +1316,7 @@
- + puppet-dmz.psi.ch @@ -1470,7 +1324,7 @@ -
+
communication to be moved to F5 by May 2024 @@ -1478,7 +1332,7 @@
- + communication to be moved... @@ -1508,7 +1362,7 @@ -
+
mirror/sync @@ -1530,4 +1384,4 @@ - \ No newline at end of file + diff --git a/engineering-guide/infrastructure_systems.md b/engineering-guide/infrastructure_systems.md index b0841dfb..7eba290a 100644 --- a/engineering-guide/infrastructure_systems.md +++ b/engineering-guide/infrastructure_systems.md @@ -10,8 +10,6 @@ ---- 5. [lx-sync-01.psi.ch](sync_server.md) - System to mirror external yum repositories / packages / ... 6. lx-cache-pypi-01 - PYPI cache server ----- -7. [lxweb00](lxweb00) - http://linux.web.psi.ch - __legacy__ - 129.129.190.46 - Exports further repositories from AFS ### Dependencies diff --git a/engineering-guide/lxweb00.md b/engineering-guide/lxweb00.md deleted file mode 100644 index b4af038e..00000000 --- a/engineering-guide/lxweb00.md +++ /dev/null @@ -1,66 +0,0 @@ -# Repository Server - LEGACY - lxweb00 - -This is a RHEL7 machine and is puppet managed. The httpd configuration seem to be managed there as well: -https://gitea.psi.ch/puppet/data-lx/src/branch/master/default/lxweb00.psi.ch.yaml - -Exports various paths from AFS to http(s), see /etc/httpd/conf.d/ for details. -The AFS directories exported are: -``` - Alias /pxe "/afs/psi.ch/service/linux/tftpboot" - Alias /ext/cpt "/afs/psi.ch/project/cpt/repo/" - Alias /ext/gfa "/afs/psi.ch/project/gfa-controls-sw-repo" - Alias /ext/gpfs "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/GPFS" - Alias /ext/hpc-extra "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/hpc-extra" - Alias /ext/lmu "/afs/psi.ch/project/lmu/lmu_rpm/" - Alias /ext/ofed "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/OFED" - Alias /ext/slurm "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/slurm" - - Alias /dist/yfs "/afs/psi.ch/software/mirror/your-file-system.com/yfs" - Alias /dist/ks "/afs/psi.ch/software/mirror/ks" - Alias /dist/scientificlinux "/afs/psi.ch/software/mirror/scientificlinux" - Alias /dist/scientificlinux/epel "/afs/psi.ch/software/mirror/epel" - Alias /dist/scientificlinux/7x/x86_64/tier3 "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/tier3" -``` - - -The httpd config files are located here: -``` -[root@lxweb00 conf.d]# ls -la /etc/httpd/conf.d/25* --rw-r--r-- 1 root root 3294 Dec 3 07:55 /etc/httpd/conf.d/25-linux.web.psi.ch_non_ssl.conf --rw-r--r-- 1 root root 3559 Dec 3 07:55 /etc/httpd/conf.d/25-linux.web.psi.ch_ssl.conf -``` - -The content is served on port 80 and 443 -``` -[root@lxweb00 conf.d]# netstat -tulnp | grep http -tcp6 0 0 :::80 :::* LISTEN 19619/httpd -tcp6 0 0 :::443 :::* LISTEN 19619/httpd -``` - -The https certificate is located/installed in `/etc/pki/tls` - -# Questions -- who is taking care of this certificate, how is it installed? how is the expiration monitored? - - The owner/admin of this system must take care of the certificate. There is no monitoring or automation. The standard SWITCH procedure is to be used. -- Why is "/afs/psi.ch/service/linux/tftpboot" exported on this server as well? - - Don't know, could only guess. -- Who is responsible or the contact person for the different exported AFS directories? - - I don't know, it's not really formalized. I have some guesses for some parts: - -| AFS | Responsible / Contact Person | -| ------ | ------ | -| /afs/psi.ch/project/cpt/repo/ | Gilles Martin | -| /afs/psi.ch/project/gfa-controls-sw-repo | Rene Kapeller| -| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/GPFS | Leo's group | -| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/hpc-extra | Marc & Ivano | -| /afs/psi.ch/project/lmu/lmu_rpm/ | Andrea Raselli | -| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/OFED | Marc & Ivano | -| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/slurm | Marc & Ivano | -| -- | -- | -| /dist/yfs | Achim | -| /dist/ks | Achim | -| /dist/scientificlinux | Achim | -| /dist/scientificlinux/epel | Achim | -| /dist/scientificlinux/7x/x86_64/tier3 | Derek | - -All repos in the /dist path are Scientific Linux 7 !!!!