372221 - Setup l10n.mozilla.org VM in .nl

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: Account Requests, task)

Description

[Reed Loden [:reed]]

As per bug 366890, comment #9, the new localization server is ready to be used. As I will be the server admin for it, I need to get access to it so I can start on getting it ready for the localizers, as Seth B. will be blogging about it soon. Please use the ssh key in attachment 209176 [details].

Comment 1

[matthew zeier [:mrz]]

More correctly, the vmware server was installed but there aren't any VMs yet.  

What are your disk requirements?  What ports need inbound access?  CentOS?

Comment 2

[Reed Loden [:reed]]

Well, considering some of the ideas being throw around for what may happen with this server, I'd prefer to have as much HD space as possible. What is the host machine's capacity?

As far as ports go, I would think 80, 443, 22, 25, and 2401 for now. This is just off the top of my head, so I'm probably forgetting something important that I'll need opened.

Actually, if at all possible, I would like to go with Ubuntu Edgy (server) for this. CentOS just doesn't have enough up-to-date packages to deal with some of the things we might want to do, and keeping up with RPMs will become a large pain very quickly.

Comment 3

[Justin Fitzhugh]

VM requests, disk space and resource allocations need to come from seth as it's his box to dole out.  Seth - please let us know what you want to do here.

Comment 4

[Axel Hecht [:Pike]]

Let me seek some common understanding, IT needs the specs for the VMs to be on the l10n server, together with the associated ports that are needed for those services and who's supposed to be admin on that VM?

I guess the current discussion went more along the lines of one big dumping ground, though I can surely see us having more than one VM on the l10n server. In particular when we offer resources for community administrated webtools, read, pootle.

Would this bug be the right place to discuss this, or should we rather do that offline?

Comment 5

[Seth Bindernagel]

Let's start with an initial VM with 1 GB of memory and 100 GB of space on the VM.  Does that sound reasonable to everyone?  

Reed can work with MRZ to finalize the set up of the VM.

Justin, please move forward with this set up.  

Thanks everyone!

Comment 6

[matthew zeier [:mrz]]

Where's this VM going?  .nl or .sj.ca.us ?

Comment 7

[Reed Loden [:reed]]

(In reply to comment #6)
> Where's this VM going?  .nl or .sj.ca.us ?

It's going on the new localization server that was bought and shipped to NL, afaik.

Comment 8

[matthew zeier [:mrz]]

Host is up @ l10n.nl.mozilla.org / 63.245.212.100 .  Note, l10n.mozilla.org is a CNAME to it. 

I stuffed reed's authorized_keys file from landfill into l10n:~root's . 

I did a default install of Ubuntu server plus traceroute and openssh.  

This box is wide open on the Internet so take appropriate measures.

Comment 9

[Reed Loden [:reed]]

By default, Ubuntu doesn't allow anybody to login as root, so I can't login. ;)

There's an option in /etc/ssh/sshd_config called "PermitRootLogin" that allows root to login. Please change that to "yes" and then run |/etc/init.d/sshd restart|.

Once I can login, I'll create a local account for myself and disallow root login again. Thanks for setting this up!

Comment 10

[Reed Loden [:reed]]

(In reply to comment #9)

justdave fixed this for me. He said my authorized_keys file was not on the server.

I've configured iptables to limit incoming ports to 22, 80, and 443 for now.

I will need the vmware guest tools installed and time synchronization turned on for this VM. Also, the host machine will need to have ntp installed and working so the VMs get the proper time.