<<TableOfContents>>

== Status ==

SL7, CentOS7 installable, the rest is more or less unknown to me.

Target systems are:
 * Servers
 * WGS
 * Farm nodes
 * '''NO''' desktops

AFS client is optional.

=== Completed ===

 * AFS client works
 * sue/CfEngine works
 * VAMOS client works
 * ssh GSSAPI authentication works
 * UGE batch nodes basically work
  * including a native systemd unit file for sge_execd
 * UGE batch system client on WGS nodes
 * arcx client
 * Heimdal packages (currently only installed on test batch farm nodes via dependency)
 * Ganglia monitoring (gmond) works (with EPEL packages)
 * CVMFS client works (active on sl7-wgs-def, sl7-farm-def)
 * PNFS client (incl. GSSAPI authentication) works
  * configuration mostly handled by rpm DL_nfs-client
 * Lustre client (version 2.7.0) works
  * mainly untested, though
 * Nagios monitoring works
 * KVM Host works
  * but there's a strong suspicion that shutting down the host will '''not''' properly shutdown the guests


=== Next Steps ===

 * provide a public "SL7 preview" system
  * test wgs with cname '''sl7''' exists but not announced, yet

=== Known issues ===

 * DELL firmware updates basically work
  * BIOS updates are still broken!
  * Update March 2016: latest BIOS updates seem to work on EL7, finally!

=== Open Questions ===
 * Finally remove `ini` before going public?
  * most existing targets are nonsense anyway
 * Really keep the symlink '''/etc/yum.conf -> yum.conf.user'''?
  * no. done.
 * Make aaru.yum.create.v2 default?
  * sw: no
 * Default to install Registry accounts on non-AFS nodes? They won't have $HOME directory anyway.
 * Deinstall tuned?
 * Keep on Heimdal as default Kerberos5 client software?
  * Automatically creating/renewing AFS tokens still only works with Heimdal without additional modifications
  * Use Heimdal EPEL packages?
 * Make /etc/sudoers modular (/etc/sudoers.d/...)?
 * How to deal with IPv6 - it does not seem to be completely disabled:
 {{{
[wgs1d] /root # netstat -ltnp | grep :::
tcp6       0      0 :::111                  :::*                    LISTEN      5221/rpcbind        
tcp6       0      0 :::53239                :::*                    LISTEN      5903/rpc.statd      
}}}
  * This is expected, normal and harmless. IPv6 is disabled to the extent possible.

== yumsel configuration ==

||<rowbgcolor="#E0E0FF">file ||installed on||comment||
|| default.ys||all nodes||||
||interactive.ys||all nodes with user access (farm nodes, wgs)||please keep it clean from graphics applications that not needed on farm nodes - put these into graphical.ys||
||development.ys||(probably) all nodes with user access (farm nodes, wgs)|| might be merged with interactive.ys but let's keep the development stuff separately for now||
||graphical.ys||all nodes providing "real" user logins (wgs)||||
||desktop.ys||desktops only (if they ever exist ...)||desktops will install everything from interactive.ys, development.ys & graphical.ys, additionally||

== SUE feature status ==

||<rowbgcolor="#E0E0FF">Feature||finished?||comment||
||aaru|| (./) || ||
||afs_client|| (./) || ||
||arcx|| (./) || ||
||cfengine|| (./) || ||
||cups|| (./) || ||
||group|| (./) || ||
||hosts|| (./) || ||
||iptables|| (./) || ||
||kerberos|| (./) || ||
||kernel|| (./) || ||
||klogin|| (./) || ||
||linux|| (./) || ||
||motd|| (./) || ||
||nagios|| (./) || ||
||name_srv|| (./) || client only, currently ||
||netgroup|| (./) || ||
||nsswitch|| (./) || ||
||pam|| (./) || ||
||passwd_prog|| (./) || Packaged into rpm, rest to go soon ||
||passwd|| (./) ||  ||
||scout|| {X} || obsolete? ||
||security|| (./) || ||
||ssh|| (./) || ||
||sudo|| {X} || Make /etc/sudoers less monolithic (/etc/sudoers.d)? Only install configuration needed on this host? ||
||sue|| {X} || Obsolete this feature completely and put everything into the DL_sue rpm? ||
||syslog|| (./) || ||
||tcp_wrapper|| (./) || ||
||tidy_up|| (./) || ||
||vamos|| {X} || ||
||xntp|| (./) || SL7 comes with chrony ||
||zzz|| (./) || ||

== Suggested Reading ==

 * http://0pointer.de/blog/projects/systemd-for-admins-1.html
 * https://fedoramagazine.org/systemd-converting-sysvinit-scripts/