into the home stretch

The great ibiblio move of 2006 is moving along nicely.  Here are the major components, and their current states:

  1. Sign contract with new hosting provider (done)
  2. Install initial server and test connectivity (done)
  3. Migrate multimedia streaming servers (done)
  4. Migrate distribution, Lyceum, Osprey and SVN/Trac servers (done)
  5. Migrate the rest of the servers, as they’re inter-dependent and can’t be broken apart:

… on this Friday evening, beginning around 8:00 p.m. EDT, the main ibiblio web site, all virtually hosted sites, and peripheral sites such as stats.ibiblio.org, torrent trackers, mailing list, e-mail, and login services will be unavailable as we make our final push to move ibiblio to its new home.  Internet radio streams, distro.ibiblio.org, lyceum.ibiblio.org, osprey.ibiblio.org and source.ibiblio.org will remain available.

To minimize downtime of web services, we are also migrating from our current web cluster hardware to the hardware donated for our new cluster, already installed and in testing stage in our new home.  The old cluster will remain up in a read-only capacity until all DNS has propagated to the new location.

Here’s to a smooth transition!

Notes from the Move

New Servers (well, sort of!), New Racks (very new), New Datacenter (again, very new). Here’s pics from the ultra fun move.


Jon Manages


Boxes are Moved


Boxes are Trucked


Another View


Don’t show this pic to OSHA


A little art


The new Racks

A New Look

Hey, how do you guys like the new look for Notes from the ‘Lab? I migrated a the Scandanavia 1.2 template to 1.5, but I just wasn’t happy with its look. This new template is the awesome MinimaPlus template, with a new masthead. I really dig this design.

Mod_security

If you work on web infrastructure or hosting, you might be familiar with mod_security, a GPL’d, regex based IDS for apache server instances.

Old code is a huge problem for ibiblio; as you know, we’re a repository, so that explains why code like Paul Jones first HTML page is still available, in the same place its been for the past ten years. However, with the rise of third party software applications, being a repository for code that exposes us to vulnerability seriously limits our mission.

We’re experimenting with mod_security, with hopes that we might be able to stop the next Santy worm (I’m still trying to forget Christmas 2004) with one line of code. Thanks to Ivan Ritsic for his work.

Blocking ad servers on *nix machines

Here is my homegrown ad blocking solution. Put this in a text file, name it something like “block”, stick it in ~/bin.

#!/bin/sh

echo “127.0.0.1 $1″ >> /private/etc/hosts
lookupd -flushcache
tail /private/etc/hosts

Now you can sudo block ads.example.com to your heart’s content.

Of course the location of your hosts file might vary depending on your system. The above works for OS X. Also, flushing the lookupd cache is just some added sugar, on systems that don’t use lookupd the blocking will still take effect eventually.

Downtime

After a little system crash, linked to our fileserver that we’re migrating from quite soon (to new NetApp hardware), we’re back online. Thanks for bearing with us.