welcome: please sign in

Diff for "IrcMeetings/20071118"

Differences between revisions 11 and 12
Revision 11 as of 2007-11-18 19:30:52
Size: 2984
Editor: MichaelOlson
Comment:
Revision 12 as of 2007-11-18 19:41:06
Size: 3042
Editor: MichaelOlson
Comment:
Deletions are marked like this. Additions are marked like this.
Line 26: Line 26:
   * Make join.hcoop.net SSL, and have them enter password there.    * Make join.hcoop.net SSL, and have them enter password there, after applying.
   * Several bug reports filed about it.

1. Meta

Date: Sunday, November 18, 2007

Time: 19:00 UTC

Type: Admin-only

2. Agenda

2.1. Joining HCoop procedure

Re-opening membership requires a few more fine-tunings of our social processes. The following need to work, though they've not been tested in a while:

  • Prospective members apply on the web.
  • A majority of board members approve their applications.
  • They get e-mails with instructions on what to do next.
  • Somehow their initial payments are processed, and these are fed as some inputs to the user creation section of the portal.
    • AdamChlipala writes: This could be tricky because I'm still treasurer, but I don't want to be running UNIX commands to create users anymore, though that would naturally be part of this process. The portal also gives precise instructions on what to run on the main HCoop server, and these are out of date.

Once we figure this out, we can re-open membership.

Other related issues:

  • Shouldn't have users give a public SSH key anymore. Too confusing for them.
    • Make join.hcoop.net SSL, and have them enter password there, after applying.
    • Several bug reports filed about it.

2.2. DNS

  • Go with [http://worldwidedns.net] for backup DNS?

  • When do we want to migrate DNS for domain hcoop.net?

    • MichaelOlson thinks we should do this after forced migration ends, to minimize the possibility of member uncertainty while migrating.

Procedure proposed by Adam Megacz:

  1. Make sure NO DNS SERVER is running on deleuze or other (port 53 closed)
  2. Create ns5.hcoop.net and ns6.hcoop.net, point them at deleuze+other
  3. Add ns5.hcoop.net and ns6.hcoop.net to the root servers
  4. Wait 48 hours
  5. Simultaneously:
    • shut down tinydns on fyodor
    • shut down tinydns on krunk
    • start bind on deleuze
    • start bind on other
  6. Confirm that everything is happy; if not, revert #5
  7. Wait a week
  8. Remove ns[1-4].hcoop.net from the root servers

The important part about this is that every potentially problematic step (mostly #6) can be reverted instantaneously.

2.3. New Machine Readiness

2.4. Bugzilla/email

  • Need to remove admins AT hcoop.net from Cc: to avoid annoying duplicates.

    • Removed from all default settings now.
    • Admins should add themselves to whichever components they want notifications.
  • Send portal emails to addresses other than admins AT hcoop?

    • Needs aliases?

2.5. Other things

IrcMeetings/20071118 (last edited 2008-07-07 04:27:55 by localhost)