Machine

2018-11-25T07:19:47Z

AryanSharma: Removed the Machines added incorrectly by the script.

<noinclude>{{TeamHeader|Infrastructure Team}}</noinclude>

Computing hardware or virtual machines maintained by the Sugar Labs [[Infrastructure Team]].

== Physical ==

* [[Machine/justice]],
* [[Machine/freedom]],
== Virtual ==

* [[Machine/lightwave]], with [[Service/Nameservers]],
* [[Machine/pootle]], with [[Service/translate]], or https://translate.laptop.org,
* [[Machine/aslo]], with [[Service/activities]] aslo, or https://activities.laptop.org,
* [[Machine/library]],
* [[Machine/aslo3]], with [[Service/activities3]] aslo-v3, https://github.com/sugarlabs/aslo-v3,
* [[Machine/jita]], with [[Service/git]], [[Service/jabber]], [[Service/meeting]], [[Service/obs]], [[Service/chat]], [[Service/cgit]], [[Service/blacklist]], [[Service/stats]],
* [[Machine/amnesia]],
* [[Machine/beacon]], 

== Automatic Listing ==

This list is generated automatically from Wiki pages that have a prefix of "Machine". It may contain subpages of machines. It may contain machines that have been decommissioned; kept as historical data against future need.
* [https://wiki.sugarlabs.org/go/Machine/backup Machine/backup]

* [https://wiki.sugarlabs.org/go/Machine/bender Machine/bender]
* [https://wiki.sugarlabs.org/go/Machine/freedom Machine/freedom]
* [https://wiki.sugarlabs.org/go/Machine/jita Machine/jita]
* [https://wiki.sugarlabs.org/go/Machine/justice Machine/justice]
* [https://wiki.sugarlabs.org/go/Machine/lightwave Machine/lightwave]
* [https://wiki.sugarlabs.org/go/Machine/pootle Machine/pootle]
* [https://wiki.sugarlabs.org/go/Machine/schools Machine/schools]
* [https://wiki.sugarlabs.org/go/Machine/schoolserver Machine/schoolserver]
* [https://wiki.sugarlabs.org/go/Machine/trinity Machine/trinity]
[[Image:Sugarlabs systems.jpg|frame]]

Machine/justice

2018-11-15T14:13:45Z

AryanSharma: sugarlas.org was written instead of sugarlabs.org

<noinclude>{{TOCright}}</noinclude>

== Hostnames ==
* justice.sugarlabs.org
* freedom.sugarlabs.org

== Info ==

Freedom and Justice are two twin KVM hosts bought by Sugar Labs in 2012.

Justice is currently our primary VM hosting box, while freedom is a hot-standby running some secondary services in docker containers and backups.

== Machines ==

The following machines services are hosted:

* [[Machine/lightwave]], [[Service/Nameservers]],
* [[Machine/pootle]], [[Service/translate]],
* [[Service/activities]] aslo,
* [[Machine/library]],
* [[Machine/aslo3]],
* [[Machine/jita]], [[Service/git]], [[Service/jabber]], [[Service/meeting]], [[Service/obs]], [[Service/chat]], [[Service/cgit]], [[Service/blacklist]], [[Service/stats]],
* [[Machine/amnesia]],
* [[Machine/pye-zatoichi]],

== Hardware ==
* 2U rack-mountable case
* Motherboard Supermicro H8SGL (or maybe H8SGL-F)
* 8-core Opteron 6212 @ 1.7GHz
* 64GB RAM
* 2x1TB RAID1

== Management ==
The two servers have SMT management cards from Supermicro with a seriously awful web interface:
* [http://justice-mng.sugarlabs.org/ justice-mng.sugarlabs.org]
* [http://freedom-mng.sugarlabs.org/ freedom-mng.sugarlas.org]
Of course you need a separate account. Full KVM support requires the Java browser plugin (yuck!), so we mostly use them for the big reset button in case a server hangs (it happened about once per year).

'''Use a long, unguessable password, but not one you're also using elsewhere! A few years ago, a backdoor was discovered in this firmware which would reveal all passwords in plaintext with a simple telnet! Also, login uses unencrypted http.'''

It's also possible to talk to the management card from Linux using ipmitool.

Both cards are running firmware version 3.16, which patched a huge backdoor that would trivially reveal all passwords in plaintext. No kidding. There's a [https://www.supermicro.com/support/resources/bios_ipmi.php?vendor=2&keywords=H8S newer firmware version], but attempts to update to it failed with both Chrome and Firefox (error: "413 - Request Entity Too Large"). I suspect a bug in their http POST implementation :-(

== Software ==
* Justice: Ubuntu 16.04 LTS Xenial (needs update)
* Freedom: Ubuntu 16.04 LTS Xenial (needs update)

== Location ==
Hosted by the [http://media.mit.edu/ MIT Media Lab] in server room E15-243.

== Admins ==
* [[User:Bernie|Bernie Innocenti]], bernie on #sugar Freenode
* [[User:Quozl|James Cameron]], Quozl on #sugar Freenode
* [[User:Scg|Samuel Cantero]], scg on #sugar Freenode
* [[User:Dogi|Stefan Unterhauser]], dogi on #sugar or [http://mibbit.com/?channel=%23treehouse&server=irc.oftc.net #treehouse]
* [[User:SAMdroid|Sam]], samdroid on #sugar on Freenode

== Network configuration ==
Justice is globally accessible through public, static IPv4.
The IPv6 /64 subnet (6to4) is currently experimental and not associated with AAAA records.

The IP range 18.85.44.59-77 is available for hosted VMs.

== Hosted VMs ==
All KVM virtual machines are managed by libvirtd.

See [[Sysadmin/Add virtual machine]] for creating new VMs.

{{Special:PrefixIndex/{{PAGENAME}}/}}

Sugar Labs - User contributions [en]

Machine

Machine/justice