Machine/justice

Hostnames

• justice.sugarlabs.org
• freedom.sugarlas.org

Info

Freedom and Justice are two twin KVM hosts bought by Sugar Labs in 2012.

Justice is currently our primary VM hosting box, while freedom is a hot-standby running some secondary services in docker containers and backups.

Hardware

• 2U rack-mountable case
• Motherboard Supermicro H8SGL (or maybe H8SGL-F)
• 8-core Opteron 6212 @ 1.7GHz
• 64GB RAM
• 2x1TB RAID1

Management

The two servers have awful SMT management cards from Supermicro:

• justice-mng.sugarlabs.org
• freedom-mng.sugarlas.org

Full KVM support requires the Java browser plugin (yuck!), so we mostly use them for the big reset button in case a server hangs (it happened about once per year).

Both cards are running firmware version 3.16, which patched a huge backdoor that would trivially reveal all passwords in plaintext. No kidding. There's a newer firmware version, but attempts to update to it failed with both Chrome and Firefox. I suspect a bug in their http POST implementation :-(

Software

• Ubuntu Precise (12.04) amd64 on justice
• Ubuntu 14.04 LTS on freedom

Location

Hosted by the MIT Media Lab, building E15.

Admins

• Bernie Innocenti, bernie on #sugar Freenode
• Samuel Cantero, scg on #sugar Freenode
• Stefan Unterhauser, dogi on #sugar or #treehouse
• Sam, samdroid on #sugar on Freenode

Network configuration

Justice is globally accessible through public, static IPv4. The IPv6 /64 subnet (6to4) is currently experimental and not associated with AAAA records.

IPs 18.85.44.59-77 are available for hosted VMs.

Hosted VMs

All KVM virtual machines are managed by libvirtd. Yes, that's scary.

See Sysadmin/Add virtual machine for creating new VMs.