Machine/justice: Difference between revisions

Line 9:

Freedom and Justice are two twin KVM hosts bought by Sugar Labs in 2012.

Justice is currently our primary VM hosting box, while freedom is a hot-standby ~~with~~ secondary services and backups.

Justice is currently our primary VM hosting box, while freedom is a hot-standby running some secondary services in docker containers and backups.

== Hardware ==

* 2U rack-mountable case

* Motherboard ~~ASUS KFSN5~~-D

* Motherboard Supermicro H8SGL (or maybe H8SGL-F)

* 8-core Opteron 6212 @ 1.~~4GHz~~

* 8-core Opteron 6212 @ 1.7GHz

* 64GB RAM

* 2x1TB RAID1

== Management ==

The two servers have awful SMT management cards from Supermicro:

* [http://justice-mng.sugarlabs.org/ justice-mng.sugarlabs.org]

* [http://freedom-mng.sugarlabs.org/ freedom-mng.sugarlas.org]

Full KVM support requires the Java browser plugin (yuck!), so we mostly use them for the big reset button in case a server hangs (it happened about once per year).

Both cards are running firmware version 3.16, which patched a huge backdoor that would trivially reveal all passwords in plaintext. No kidding. There's a [https://www.supermicro.com/support/resources/bios_ipmi.php?vendor=2&keywords=H8S newer firmware version], but attempts to update to it failed with both Chrome and Firefox. I suspect a bug in their http POST implementation :-(

== Software ==

@@ Line 9: / Line 9: @@
 Freedom and Justice are two twin KVM hosts bought by Sugar Labs in 2012.
-Justice is currently our primary VM hosting box, while freedom is a hot-standby with secondary services and backups.
+Justice is currently our primary VM hosting box, while freedom is a hot-standby running some secondary services in docker containers and backups.
 == Hardware ==
 * 2U rack-mountable case
-* Motherboard ASUS KFSN5-D
+* Motherboard Supermicro H8SGL (or maybe H8SGL-F)
-* 8-core Opteron 6212 @ 1.4GHz
+* 8-core Opteron 6212 @ 1.7GHz
 * 64GB RAM
 * 2x1TB RAID1
+== Management ==
+The two servers have awful SMT management cards from Supermicro:
+* [http://justice-mng.sugarlabs.org/ justice-mng.sugarlabs.org]
+* [http://freedom-mng.sugarlabs.org/ freedom-mng.sugarlas.org]
+Full KVM support requires the Java browser plugin (yuck!), so we mostly use them for the big reset button in case a server hangs (it happened about once per year).
+Both cards are running firmware version 3.16, which patched a huge backdoor that would trivially reveal all passwords in plaintext. No kidding.  There's a [https://www.supermicro.com/support/resources/bios_ipmi.php?vendor=2&keywords=H8S newer firmware version], but attempts to update to it failed with both Chrome and Firefox. I suspect a bug in their http POST implementation :-(
 == Software ==