We're having a bit of a changed on the wired servers. We've just picked up another physical box, allowing us to segregate the services a bit better (we've not had much luck with virtualisation).
The current plan is to move the services in the wired VM onto the new physical box. This has been completed but is not yet in use as we're testing it (OMG wired testing something!?!). This new box is also running a VM that will only provide shell services. The benefit being that if the shell system is compromised (e.g. fork bomb, root exploit) the rest of our services should remain up.
But why the move from smoked to the new box? Well, the plan is to used smoked for storage services only (e.g. databases, nfs). So we have a split between services and data.
The migration will NOT be completed until we have tested the new setup. This will involve poking the committee to use the new services. And in Kieran's words "don't just log in, type ls and exit".
We did have a bit of fun with cron jobs running across two machines. Due to one updating the pid file then the other, we ended up with a huge number of GLaDOS instances on the IRC server.
No comments:
Post a Comment