= Meta =

Date: Sunday, November 18, 2007

Time: 19:00 UTC

Type: Admin-only

= Agenda =

== Joining HCoop procedure ==

Re-opening membership requires a few more fine-tunings of our social processes.  The following need to work, though they've not been tested  in a while:

 * Prospective members apply on the web via SSL.  They get to choose username.
 * They get a randomly-generated password.  Save a copy to {{{/var/lib/portal/passwords/$USER}}}.
 * A majority of board members approve their applications.
 * They get an automated e-mail with instructions on what to do next.
 * They make a payment.
 * Their initial payment is processed.
 * An admin runs {{{create-user $USER}}}.
   * This gets password from {{{/var/lib/portal/passwords/$USER}}} and deletes the file.
   * Create .forward file?  Would need to get their email address somehow, and whether they indicated that they want this on web form.
   * User should be automatically subscribed to hcoop-announce mailing list, in the case that they provided an email address.

Once we figure this out, we can re-open membership.

Other related issues:

 * Passwords and join procedure:
   * Shouldn't have users give a public SSH key anymore.  Too confusing for them.
   * Several TODO bug reports filed about it.
   * Make join.hcoop.net SSL, and have them enter password there, after applying.
   * This password is 

== DNS ==

 * Go with [http://worldwidedns.net] for backup DNS?
 * When do we want to migrate DNS for domain {{{hcoop.net}}}?
   * MichaelOlson thinks we should do this after forced migration ends, to minimize the possibility of member uncertainty while migrating.

Procedure proposed by Adam Megacz:

  1. Make sure NO DNS SERVER is running on deleuze or other (port 53 closed)
  2. Create ns5.hcoop.net and ns6.hcoop.net, point them at deleuze+other
  3. Add ns5.hcoop.net and ns6.hcoop.net to the root servers
  4. Wait 48 hours
  5. Simultaneously:
     * shut down tinydns on fyodor
     * shut down tinydns on krunk
     * start bind on deleuze
     * start bind on other
  6. Confirm that everything is happy; if not, revert #5
  7. Wait a week
  8. Remove ns[1-4].hcoop.net from the root servers

The important part about this is that every potentially problematic step (mostly #6) can be reverted instantaneously.

== New Machine Readiness ==

 * AdamChlipala has finished his non-wishlist items for Domtool.
 * MichaelOlson finished Mailman stuff, needs to double-check new Domtool Mailman directives and write them up in manual.
 * Abulafia?
   * Bug: [https://bugzilla.hcoop.net/show_bug.cgi?id=168]
   * MichaelOlson thinks we should wait until after forced migration.
 * IPKVM?
   * Bug: [https://bugzilla.hcoop.net/show_bug.cgi?id=176]
   * AdamMegacz says no deadline, but we will wish we had at some point.
   * Particulars being worked out on the bug report.

== Bugzilla/email ==

 * Need to remove {{{admins AT hcoop.net}}} from Cc: to avoid annoying duplicates.
   * Removed from all default settings now.
   * Admins should add themselves to whichever components they want notifications.
 * Send portal emails to addresses other than {{{admins AT hcoop}}}?
   * Needs aliases?

== Other things ==