2007-11-11 root * trac mkdir /usr/lib/cgi-bin ln -s /usr/share/trac/cgi-bin/trac.cgi /usr/lib/cgi-bin /var/lib/python-support/python2.5/trac/versioncontrol/api.py * python2.5 continues to get in the way, so we have to rebuild python-subversion sh-3.1# apt-get build-dep python-subversion Reading package lists... Done Building dependency tree... Done The following NEW packages will be installed: antlr apache2-threaded-dev autotools-dev doxygen dpatch ecj-bootstrap ecj-bootstrap-gcj fastjar fontconfig gappletviewer-4.1 gcj-4.1 gcj-4.1-base gij-4.1 gjdoc java-common java-gcj-compat java-gcj-compat-dev junit libapr1-dev libaprutil1-dev libasound2 libatk1.0-0 libcairo2 libdb4.4-dev libexpat1-dev libgcj-bc libgcj-common libgcj7-0 libgcj7-awt libgcj7-dev libgcj7-jar libglib2.0-0 libgtk2.0-0 libgtk2.0-common libldap2-dev libneon26-dev libpango1.0-0 libpango1.0-common libpcre3-dev libpcrecpp0 libperl-dev libperl5.8 libruby1.8 libsqlite3-dev libtool libxcursor1 libxfixes3 libxi6 libxinerama1 libxml2-dev libxrandr2 libxtst6 pkg-config ruby1.8 ruby1.8-dev swig uuid-dev ... which looks to be rebuilding subversion. Ok, back that out: ln -sf python2.4 /usr/bin/python trac works, and any actual dex code needs to be run agains python2.5 explicitly. (for now) cd /etc/apache2/mods-enabled; ln -s ../mods-available/ssl.* . openssl req -x509 -days 3650 -newkey rsa:2048 -keyout mitsfs.mit.edu.key -nodes -out mitsfs.mit.edu.crt -subj '/CN=mitsfs.mit.edu/emailAddress=mitsfs-machine-contact@mit.edu/OU=MIT Science Fiction Society/O=Massachusetts Institue of Technology/L=Cambridge/ST=Massachusetts/C=US' openssl req -key mitsfs.mit.edu.key -out mitsfs.mit.edu.req -subj '/CN=mitsfs.mit.edu/emailAddress=mitsfs-machine-contact@mit.edu/OU=MIT Science Fiction Society/O=Massachusetts Institue of Technology/L=Cambridge/ST=Massachusetts/C=US' -new fiddle apache configuration appropriately (ports.conf, sites-available/mitsfs) trac works with certs! trac-admin /mitsfs/trac permission add authenticated WIKI_CREATE trac-admin /mitsfs/trac permission remove anonymous WIKI_MODIFY trac-admin /mitsfs/trac permission remove anonymous TICKET_MODIFY trac-admin /mitsfs/trac permission remove anonymous TICKET_CREATE trac-admin /mitsfs/trac permission add authenticated WIKI_CREATE trac-admin /mitsfs/trac permission add authenticated WIKI_MODIFY trac-admin /mitsfs/trac permission add authenticated TICKET_MODIFY trac-admin /mitsfs/trac permission add authenticated TICKET_CREATE [set link in /mitsfs/trac/conf/trac.ini to http://mitsfs.mit.edu/Trac/; and other things] 2007-11-10 root * (postgres): create role "speaker-to-postgres" createdb createrole superuser; create role wheel noinherit; grant "speaker-to-postgres" to wheel; grant wheel to kcr; apt-get install postgresql-plpython-8.1 apt-get install python2.5 python-psycopg2 python2.5-doc python2.5-dev python-profiler python-doc ln -sf python2.5 /usr/bin/python apt-get install python-mode # python-psycopg2 doesn't seem to have python 2.5 support. apt-get build-dep python-psycopg2 sh-3.1# apt-get build-dep python-psycopg2 Reading package lists... Done Building dependency tree... Done The following NEW packages will be installed: autoconf comerr-dev libkrb5-dev libpq-dev libssl-dev python-all python-all-dev python-dev python-egenix-mx-base-dev python2.4-dev zlib1g-dev zope-debhelper apt-get install fakeroot dpkg-dev-el dpkg -i ~kcr/deb/python-psycopg2_2.0.5.1-6.1mitsfs_i386.deb 2007-11-09 root * normal human logins installed libpam-openafs-session and libpam-krb5 added them to common-auth 2007-10-11 Karl Ramm * actual things installing apache2, trac, postgresql-8.1 (apache docroot is /afs/athena.mit.edu/activity/m/mitsfs/) 2007-10-05 Karl Ramm * media retention installed cdparanoia, cddb, cd-discid, cdrecord (wodim) created /media installed bittornado cleaned up groups and added mitsfs group * emacs support installed emacs21-el, emacs21-common-non-dfsg added contrib and non-free to sources.list 2007-09-19 Karl Ramm * debugging installed hesiod utilities (apt-get install hesiod) installed tcpdump 2007-09-13 Karl Ramm * add users kevinr and ternus useradd -m -g 100 -u 39637 -G adm,dialout,cdrom,floppy,audio,video -c 'Kevin Riggle' kevinr useradd -m -g 100 -u 39041 -G adm,dialout,cdrom,floppy,audio,video -c 'Christian Ternus' ternus * installed screen * openafs m-a -it a-i openafs lvcreate -n cache -L 1G v mke2fs -j /dev/v/cache # add to /etc/fstab mount /var/cache/openafs mkdir -p /var/cache/openafs mount /var/cache/openafs apt-get install openafs-client openafs-krb5 # reconfigure for dynroot, fakestat, etc. * openafs apt-get install module-assistant m-a -it prepare apt-get install build-essential * basic stuff apt-get install memtest86+ apt-get remove --purge portmap apt-get install --purge exim- postfix apt-get install --purge vim-common- fingerd nvi pidentd- apt-get install python2.4 apt-get install ntpdate apt-get install ntpd apt-get install ntp added --directisa to hwclock options in /etc/init.d/hwclock.sh apt-get install bind9 apt-get install resolvconf apt-get install openssh-server apt-get install molly-guard apt-get install subversion static network config for csail edited /etc/adduser.conf to avoid user groups useradd -m -g 100 -u 6667 -G adm,dialout,cdrom,floppy,audio,video -c 'Karl Ramm' kcr apt-get install sudo (add kcr to sudo list) update-alternatives --config editor dpkg --purge nano sudo apt-get install emacs21 xterm krb5-user zephyr-clients libzephyr3-krb configure realm ATHENA.MIT.EDU get CSAIL keytab remove spurious monolith entry from /etc/hosts turn on GSSAPI in /etc/ssh/sshd_config noting /root/LOGFILE in /etc/motd add ternus and kevinr to /root/.k5login