Please put all build info in the build/ namespace. If you're on this page, start the name with "build/" and then the rest of the name of the page. If you're on a page already in a "build" page, just reference the page using the name.
Please don't post any passwords on the wiki!
Here are our current build documents:
Goals -- what we're trying to accomplish in building the new servers
-
TODO -- what's left to do before moving to production
Timeline -- order in which things need to proceed
IPs -- what needs to be changed when changing IP addresses and/or domains
Here's the order that the build should generally proceed:
Hardware -- description of the hardware configuration
Debian -- base
OS installation and configuration (including hard drive partitioning)
Firewall -- we're using Shorewall to configure iptables
SSH -- a more secure remote access method
Security -- security changes to base installation
IMAP -- Courier
IMAP email access
Mailing Lists -- mailing list server (Mailman) and web archival (Pipermail)
Users - how to add/migrate users to the new systems
Postfix -- email transport (
SMTP MTA)
-
Apache -- installation and configuration of Apache web server, including
PHP, virtual hosts, etc.
Misc -- miscellaneous packages installed
Logging -- what is logged, to where, reports, and to whom
-
DNS -- caching-only name server (using BIND 9 in a chrooted environment)
NTP -- Network Time Protocol configuration
Backups -- how we back up our important data
Domain Names -- how authoratative
DNS for SLUUG.ORG is handled (hosted externally)
The following are works in progress:
OpenLDAP -- integrating LDAP into all services requiring user authentication
MySQL -- database required by most Open Source projects
-
-
Kernel -- our custom kernel build (no longer using custom build)
-
Webmin -- Web-based system administration
Web Forum -- Online web-based forums to dicuss various topics (similar to DISCUSS mailing list)
Blog -- currently testing
WordPress, to see if we can use it as a
CMS
PostgreSQL -- database required by some Open Source projects
Sudo - we WERE using sudo to grant access without giving away root password, but it did not work out well