Page 2 of 2
Posted: Tue Jul 03, 2007 4:01 pm
by Lee Sharp
cordel wrote:Also the server I have open would only take me 10 minutes to replace if it was compromised and has nothing really on it except the yum packages that are accessable through the web port anyways. Also it's seperated o the net, So really the joke is on them
I agree here, after being bitten too many times... System security starts with good backups! I stress this to all my clients. (and occasionally forget it myself...)
But for the beginner, Ubuntu (default no root login at all, only sudo) and fail2ban from the repos can give a quite secure system with very little expertise required.
Not using 3ware
Posted: Wed Jul 04, 2007 7:48 am
by wildpossum
Hi.
I too have a SMP system using dual core CPU's. A Tyan board of course. It is stable and a rock with 8GB ram.
What I am really writing for is to let you know I went the same way ($ issues) but in the end bit the bullet. I was having untold problems with the drives (in the end it was 2 intermittent SATA cables - not the PSU/UPS that all the linux logs and diagnostics lead me). I use 9950SX on PCi-X slots. The 3ware in-machine service kept me up to date and best of all it gave me adequate time to advise me that not one but two 300GB drives were on the way out. I was able to save up and swap them in time.
The (somewhat secure) web interface is a big plus. Email linked of course.
The 3ware secret is to use the 3ware CLI/Browser manager to do out-of-hours individual drive self tests, and well as scheduled SMART testing. It WILL save your bacon, it did mine.
I am only a individual linux developer, but I thought I would mention my experiences as I felt for you (as I have had to do the same many times before getting the 9950SX's) especially when your server is failing and the pressure is on, and your sick of all the time wasting
Re: Not using 3ware
Posted: Wed Jul 04, 2007 8:47 am
by cordel
wildpossum wrote:
The 3ware secret is to use the 3ware CLI/Browser manager to do out-of-hours individual drive self tests, and well as scheduled SMART testing. It WILL save your bacon, it did mine.
I am only a individual linux developer, but I thought I would mention my experiences as I felt for you (as I have had to do the same many times before getting the 9950SX's) especially when your server is failing and the pressure is on, and your sick of all the time wasting
Thanks for that, Grahame. I was just about to go ahead and settle for the Rocket Raid, so now I'll count the pennies and hope for no problems mean time and go after the 3ware card.
Now if I could just get mock and plague going I'll be set. You would think that someone would have good online info for these projects
Regards,
Corey
Posted: Wed Jul 04, 2007 11:08 am
by wildpossum
No probs.
You maybe interested in that 3ware now has PCI-express cards too.
The one mistake I made (and still somewhat regretting it) is I didn't get more than a 4 port card, even thought I was only setting up a Raid 5 system.
I went the 2 x 9950SX direction as the sales manager lead me in this direction, but I found out just too late that he gave me incorrect advice for how I wanted to configure my system. I would have gone for a eight-port card over the four even for the slightly more cost - why? - then I could have gone for on-line hot-spare drives, or even Raid 50 in the end.
This way the self verification / self rebuild could have gone on with little input from me, other than swapping out the faulty drive later. As you can configure the controller from performance <-> rebuild/verify, I have always selected performance rather than even "balanced" approach - without any performance hits.
Another thing is to get the BBU option at the same time as when you purchase the controller. This way you can select "write-through cache" without worrying about any possibility of data loss.
Just my 2c.
Hope it assist you.
Posted: Fri Jul 06, 2007 5:02 am
by cordel
Bit of a update:
In case you missed the announcement in Contribs, ZM is now part of the fedora repo. Check that thread for more info. This is good but fedora will not include mpeg streaming since it's patent incumbered so....
ATM I decided to continue forward and see how things transpire since the money is already spent and the server is here.
The kinks for the most part for the build server are worked out:
Code: Select all
[root@localhost ~]# plague-client detail 1
Detail for Job ID 1 (mock):
--------------------------------------------------------------------------------
Source: /root/mock-0.6-4.el4.kb.1.src.rpm
Target: fedora-7-core
Submitter: foo@it.com
Status: building/
Archjobs:
x86_64: 127.0.0.1 done/done
i386: 127.0.0.1 running/prepping
[root@localhost ~]# plague-client detail 1
Detail for Job ID 1 (mock):
--------------------------------------------------------------------------------
Source: /root/mock-0.6-4.el4.kb.1.src.rpm
Target: fedora-7-core
Submitter: foo@it.com
Status: needsign/
Archjobs:
x86_64: 127.0.0.1 done/done
i386: 127.0.0.1 done/done
So there is the first package going through and building for both archs.
I'm surprised at the poor coding for the project and the lack of any instruction but I managed to get it going after adjusting the code and making the proper includes in the python modules. So we can now build packages for most Red Hat based distros. This does however run a bit slow as it creates the build environment in a chroot on each build (so it downloads from a remote repo each time all the packages needed to build the wanted package). What this means is it should be a clean build each time and I can't screw it up
Now just to figure out the tools to sign and move the completed packages to the respective repos test directory and a way to manage it all assuming that is part of the package but have yet to figure it out or find them
FYI some have already noticed that the packages have moved around a bit and the repo files are gone.... I'll recreate the repo once everything is finished setting up the build system as it's possible the structure might change again depending on the tools to automate this process as much as possible. I realize that everyone wants things now as that is why your here. Trust me, I want it all now too, so i'm trying to get this done ASAP so bear with me. At some point I'll probably need to distribute the processes amongst the servers but will deal with that when the time comes, I'm just tring to get up to speed on this right now.
So we can/will have packages for fc3 all the way up to rawhide