MTU LUG Wiki - User contributions [en]

Main Page

2026-08-30T16:22:41Z

Simone:

Welcome to the MTU LUG Wiki!

Our hope for this wiki is to be a source of information related to Michigan Tech, the Upper Peninsula, and Linux, to be used by current and prospective students at MTU (and anyone else who finds it useful).

If you'd like to edit the wiki, please email the LUG mailing list ([mailto:lug-l@mtu.edu lug-l@mtu.edu]) or shoot us a message in LUG's [https://discord.gg/5mZUgcNWAK Discord] or [ircs://lug.mtu.edu:6697 IRC] and we'll happily make you an account (spambotters were griefing pages).

Alternatively, anyone currently with an account can make new ones for others by going to [[Special:CreateAccount]].

As of Fall 2026, meetings are Thursdays 7-8pm in Rekhi G09 (in the basement).

Meeting minutes are available at: [[Meeting Minutes]] (2006-2025+)

Upcoming talks are available at: [[Upcoming Talks]]

== Who we are ==
The Linux Users Group is a student organization at Michigan Tech that was established in 2001 to further students' knowledge of Linux/UNIX based operating systems and discuss technological advancements in Operating Systems.

Each week, we gather to discuss current news about tech and open-source software, after which a member will give a presentation about a technical topic (typically pertaining to Linux, FOSS, or computer protocols) that's different each week.

Whether you're a GNU Wizard running a custom distro on your laptop or a total Linux beginner who hasn't ever touched a shell, our mission is to provide an environment for anyone to learn more about using Linux on their gadgets and gizmos!

== About LUG ==
* <s>[[Archived Wiki]] (Note, many links are broken here and requesting an account on here will do nothing.)</s> As of 2024-07-11, the wikis have been merged.
* [https://lug.mtu.edu/archive/mail/threads.html LUG mailing list archives]
* [[Members|LUG members (+alumni)]]
* [[Docs]] <- (Almost) all of our internal documentation, from our servers and services to the process we use to screen-print custom t-shirts and more (very WIP, will be done #soon)

== Computer stuffs ==

List of links that I find beneficial for anything related to computers. Add to it any more topics that you like.

[[Testing page]]

=== Internal tips ===

* [[Archiving emails]]

* [[IRC Bouncer]]

=== Lectures ===

* [[ASIC Design]]

* [[FFmpeg]]

* [[Storage management]]

* [[vim]]

* [[nginx]]

* [[email]]

=== Tips ===

* [[Web safety]]

=== Servers ===

* [[Servers]] is a page for the (hopefully) current configuration of our servers.
* [[LUG Services|Services]] for a (currently outdated) listing of all the services we offer

=== Programming ===
* [https://overthewire.org/wargames/bandit/ Overthewire Bandit CTF] - A CTF for learning the basics of Linux and simple exploits.

* [[Bash]] - Crappy Bash Crash Course

* [https://teachyourselfcs.com/ Teach yourself CS] - Textbook-based learning.

* [https://projecteuler.net/archives Project Euler] - Small project, math-based learning.

* [https://www.beej.us/guide/bgnet/ Beej's guide to network programming] - A good user guide in C-based network programming (surprise).

* [https://handmadehero.org/ Handmade Hero] - A very long tutorial on how to write your own game engine in C/C++. Utilizes the Windows message handler. Rewrites SDL (and other) libraries before using them for a much better understanding.

* [https://github.com/ashier/martyrs-mega-project/ Martyr's Mega Project] - A list of ideas/projects to write to give ideas on what to keep programming.

* [https://github.com/danistefanovic/build-your-own-x Building your own X] - A list of ways to building your own types of systems. Some are very challenging, while some are straightforward.

* (Intermediate) [https://web.eecs.utk.edu/~azh/blog/challengingprojects.html Challenging projects 1] [http://web.archive.org/web/20220801012604/https://austinhenley.com/blog/challengingprojects.html archive] - Small list of week-to-month long projects that create some fascinating applications.

* (Intermediate) [https://web.eecs.utk.edu/~azh/blog/morechallengingprojects.html Challenging projects 2] [http://web.archive.org/web/20220721081608/https://austinhenley.com/blog/morechallengingprojects.html archive] - Small list of week-to-month long projects that create some fascinating applications.

* (Intermediate) [https://adventofcode.com/ Advent of Code] - a fun challenge to do data analysis and data parsers with daily challenges from December 1st to 25th (it's an advent calendar).

* (Advanced) [https://cryptopals.com/ Cryptopals] - A set of challenges that get insanely challenging extremely quickly. Look at the final challenges to see they do not hold back on any aspect of cryptography.

* (Advanced) [https://github.com/agelastic/eudyptula/blob/master/README Eudypatula challenge] - A dead challenge to start programming for the Linux kernel. Can still be done locally, but answers won't be verified.

=== Social ===

* [https://www.gwern.net/docs/technology/2005-shirky-agroupisitsownworstenemy.pdf Internet communities]

== Michigan Tech stuffs ==

* [[MTU Jargon]]

* [[Cool places in the Keweenaw]]
* [[MTU Building Codes]]

Main Page

2026-08-30T16:19:11Z

Simone: update room number (fall 2026)

Welcome to the MTU LUG Wiki!

Our hope for this wiki is to be a source of information related to Michigan Tech, the Upper Peninsula, and Linux, to be used by current and prospective students at MTU (and anyone else who finds it useful).

If you'd like to edit the wiki, please email the LUG mailing list ([mailto:lug-l@mtu.edu lug-l@mtu.edu]) or shoot us a message in LUG's [https://discord.gg/5mZUgcNWAK Discord] or [ircs://lug.mtu.edu:6697 IRC] and we'll happily make you an account (spambotters were griefing pages).

Alternatively, anyone currently with an account can make new ones for others by going to [[Special:CreateAccount]].

As of Spring 2026, meetings are Thursdays 7-8pm in Rekhi G09 (in the basement).

Meeting minutes are available at: [[Meeting Minutes]] (2006-2025+)

Upcoming talks are available at: [[Upcoming Talks]]

== Who we are ==
The Linux Users Group is a student organization at Michigan Tech that was established in 2001 to further students' knowledge of Linux/UNIX based operating systems and discuss technological advancements in Operating Systems.

Each week, we gather to discuss current news about tech and open-source software, after which a member will give a presentation about a technical topic (typically pertaining to Linux, FOSS, or computer protocols) that's different each week.

Whether you're a GNU Wizard running a custom distro on your laptop or a total Linux beginner who hasn't ever touched a shell, our mission is to provide an environment for anyone to learn more about using Linux on their gadgets and gizmos!

== About LUG ==
* <s>[[Archived Wiki]] (Note, many links are broken here and requesting an account on here will do nothing.)</s> As of 2024-07-11, the wikis have been merged.
* [https://lug.mtu.edu/archive/mail/threads.html LUG mailing list archives]
* [[Members|LUG members (+alumni)]]
* [[Docs]] <- (Almost) all of our internal documentation, from our servers and services to the process we use to screen-print custom t-shirts and more (very WIP, will be done #soon)

== Computer stuffs ==

List of links that I find beneficial for anything related to computers. Add to it any more topics that you like.

[[Testing page]]

=== Internal tips ===

* [[Archiving emails]]

* [[IRC Bouncer]]

=== Lectures ===

* [[ASIC Design]]

* [[FFmpeg]]

* [[Storage management]]

* [[vim]]

* [[nginx]]

* [[email]]

=== Tips ===

* [[Web safety]]

=== Servers ===

* [[Servers]] is a page for the (hopefully) current configuration of our servers.
* [[LUG Services|Services]] for a (currently outdated) listing of all the services we offer

=== Programming ===
* [https://overthewire.org/wargames/bandit/ Overthewire Bandit CTF] - A CTF for learning the basics of Linux and simple exploits.

* [[Bash]] - Crappy Bash Crash Course

* [https://teachyourselfcs.com/ Teach yourself CS] - Textbook-based learning.

* [https://projecteuler.net/archives Project Euler] - Small project, math-based learning.

* [https://www.beej.us/guide/bgnet/ Beej's guide to network programming] - A good user guide in C-based network programming (surprise).

* [https://handmadehero.org/ Handmade Hero] - A very long tutorial on how to write your own game engine in C/C++. Utilizes the Windows message handler. Rewrites SDL (and other) libraries before using them for a much better understanding.

* [https://github.com/ashier/martyrs-mega-project/ Martyr's Mega Project] - A list of ideas/projects to write to give ideas on what to keep programming.

* [https://github.com/danistefanovic/build-your-own-x Building your own X] - A list of ways to building your own types of systems. Some are very challenging, while some are straightforward.

* (Intermediate) [https://web.eecs.utk.edu/~azh/blog/challengingprojects.html Challenging projects 1] [http://web.archive.org/web/20220801012604/https://austinhenley.com/blog/challengingprojects.html archive] - Small list of week-to-month long projects that create some fascinating applications.

* (Intermediate) [https://web.eecs.utk.edu/~azh/blog/morechallengingprojects.html Challenging projects 2] [http://web.archive.org/web/20220721081608/https://austinhenley.com/blog/morechallengingprojects.html archive] - Small list of week-to-month long projects that create some fascinating applications.

* (Intermediate) [https://adventofcode.com/ Advent of Code] - a fun challenge to do data analysis and data parsers with daily challenges from December 1st to 25th (it's an advent calendar).

* (Advanced) [https://cryptopals.com/ Cryptopals] - A set of challenges that get insanely challenging extremely quickly. Look at the final challenges to see they do not hold back on any aspect of cryptography.

* (Advanced) [https://github.com/agelastic/eudyptula/blob/master/README Eudypatula challenge] - A dead challenge to start programming for the Linux kernel. Can still be done locally, but answers won't be verified.

=== Social ===

* [https://www.gwern.net/docs/technology/2005-shirky-agroupisitsownworstenemy.pdf Internet communities]

== Michigan Tech stuffs ==

* [[MTU Jargon]]

* [[Cool places in the Keweenaw]]
* [[MTU Building Codes]]

Docs/Plans

2026-08-18T23:41:21Z

Simone: Removed completed plans and added new plans for server/infra upgrades

#Formally acquire and install new servers (R640s)
## Repair shipping damage on the 8-bay machines
### Put the bent metal back into shape so they can fit cleanly in the rack
### One of them has board damage and can only take a single X16 card, but it still works and shouldn't be an issue for our use case
#### Maybe make sure the damaged traces don't short out?
## Buy CPUs for the 10-bay machine
### Xeon Gold 6240s are cheap used
# Firewalls
## Migrate firewall duty to Okabe and Kurisu
## Decommission old firewall servers (lasagna and ravioli)
# Finish unlocking [[Locked HGST drives]]
## Replace all laptop drives in the cluster
# Proxmox
## Remove/decommission one of the R630s to make room
## Redistribute RAM and install new R640s, add them to the cluster
## 3D print needed 2.5" drive trays
## Ceph? (maybe)
### Change VM storage from NFS via Leskinen to Ceph on cluster
### Backup to Leskinen instead of cluster
## Figure out firewalling local network from VMs for VPS idea (able to give people an ""unmanaged VM"", it should not be able to access any other VMs on the local network)
### New subnet? (10.10.2.0/24)
### Reverse-NAT via OPNSense (and mandatory DHCP) so we don't have to trust people to statically assign themselves the right public IP?
# Mirrors
## Upgrade CPUs to the Xeon 2680 V4s from the decommissioned R630
## Try to do it with as little downtime as possible..
# Pterodactyl (?)
# Faceplates for servers
## Stickerbomb idea!
## Can 3D print some of the faceplates instead of buying them
# Finish OPNsense transition
##DNS for internal services
##1:1 NAT for public services (not mirrors)
##Consider hosting authoritative DNS resolver for linuxusers.group on our infra
### Automated domains via dhcp hostnames in opnsense (?)
##Network booting for servers/VMs (?)
# LDAP (on cluster)
## Integrate logins for Shell, LUG VMs, and other servers
## Already set up:
### OPNSense, Proxmox, and iDRACs
# Document, document, document.
## Netbox?

Docs/Infrastructure

2026-08-15T00:09:42Z

Simone: updates after reorganization (new IPs, OS changes, server assignments)

[[File:GLRC Server Rack.jpg|alt=Photo of the shared server rack in the GLRC as of 2023-12-11.|thumb|Shared server rack in the GLRC as of 2026-02-20. Starting below the yellow Google server, the servers are (from top-to-bottom): Ravioli, Lasagna, Shell, Kurisu, Okabe, Daru, Luka, Mayuri, Maho, Leskinen, Mirrors.]]
=== Kurisu, Okabe, Daru, Luka, Mayuri ===
All nodes in the LUG Proxmox Cluster to run VMs for services.

Current services run by VMs in the cluster include:

* [https://lug.mtu.edu LUG Homepage]
* [ircs://lug.mtu.edu:6697/#mtu IRC server]
* LUG IRC<->Discord<->Matrix Bridge ([https://github.com/prophetofxenu/discord-irc-matrix old bridge])
* This Wiki
* [https://matrix.to/#/#mtu-lug:lug.mtu.edu Matrix server] (soon)
* Other miscellaneous internal LUG services (PXEboot, LDAP, etc)

Nodes run [https://proxmox.com/en/ Proxmox], and all VMs run [[Debian]].

All nodes and VMs sit behind OPNSense and do not have public IP addresses or domain names.

=== Lasagna, Ravioli ===
Router/firewalls. Responsible for:

* DHCP, DNS, NAT for Server LAN
* DHCP for OOB LAN (no internet, restricted from Server LAN)
* Wireguard VPN ingress
* CARP for public services and internal network redundancy
* Port-forwarding traffic to VMs in Proxmox cluster

Runs on [https://opnsense.org/ OPNSense].

MTU Domain: <code>lug.mtu.edu</code>

MTU IP (CARP): <code>141.219.180.69</code>

MTU IP (Ravioli): <code>141.219.180.68</code>

MTU IP (Lasagna): <code>141.219.180.71</code>

=== Shell ===

The multi-tenant pubnix server all LUG members get lifetime access to.

Runs all services "by LUG, for LUG." Examples include:

* [https://shell.lug.mtu.edu LUG Member homepages]
* [https://shell.lug.mtu.edu:50000/ IRC bouncer]
* SSH jumphost from off-campus
* LUG fileshare host (soon)
* More to be added by user request

Runs on [[Debian]].

MTU Domain: <code>shell.lug.mtu.edu</code>

MTU IP: <code>141.219.180.72</code>

=== Mirrors ===

Runs Linux mirrors on FreeBSD.

Current distros hosted by Mirrors include:

* Arch Linux
* CentOS (+ CentOS AltArch)
* Debian (+ Debian ISOs)
* Fedora (+ Fedora EPEL and RPMfusion)
* gentoo Linux
* Ubuntu (+ Ubuntu ISOs)
* + More to come as Mirrors gets more storage.

Runs on [https://www.freebsd.org/ FreeBSD].

MTU Domain: <code>mirrors.lug.mtu.edu</code>

MTU IP: <code>141.219.180.70</code>

File:GLRC Server Rack.jpg

2026-08-14T23:48:31Z

Simone: Simone uploaded a new version of File:GLRC Server Rack.jpg

LUGs shared rack in the GLRC Datacenter.

User:Simone

2026-07-05T02:55:09Z

Simone: Created page with "i break servers"

i break servers

Meeting Minutes

2026-04-16T02:28:37Z

Simone: add Simone presentations: Qubes, bedrock, iOS jailbreaking

'''Note: This page exists to list meeting minutes in a more human-readable format. The original 'category' based listing is at [[:Category:Meeting Minutes]].'''

'''Visit [[Upcoming Talks]] for a list of scheduled talks.'''

=== Spring 2026 ===

* [[Minutes 2026-04-09]] — iOS Jailbreaking -- [https://lug.mtu.edu/archive/pdfs/2026-04-09.odp Presentation] [odp]
* [[Minutes 2026-04-02]] — Google Sheets 3D Rendering
* [[Minutes 2026-03-12]] — Bedrock Linux -- [https://lug.mtu.edu/archive/pdfs/2026-03-12.odp Presentation] [odp]
* [[Minutes 2026-02-19]] — Qubes OS -- [https://lug.mtu.edu/archive/pdfs/2026-02-19.odp Presentation] [odp]
* [[Minutes 2026-02-12]] — OpenStreetMap
* [[Minutes 2026-01-29]] -- Planning and State of the org
* [[Minutes 2026-01-22]] -- Kubernetes (Virtual Meeting)

=== Fall 2025 ===
* [[Minutes 2025-11-13]] -- Minecraft Server Administration [https://lug.mtu.edu/archive/pdfs/2025-11-13.pptx Presentation] [pptx]
* [[Minutes 2025-11-06]] -- Yap Session
* [[Minutes 2025-10-30]] -- Network Bound Disk Encryption -- [https://lug.mtu.edu/archive/pdfs/2025-10-30.odp Presentation] [odp]
* [[Minutes 2025-10-23]] -- Jellyfin and the new LUG GPU server -- [https://lug.mtu.edu/archive/pdfs/2025-10-23.odp Presentation] [odp]
*16th was during October Break, no meeting!
* [[Minutes 2025-10-09]] -- Keweenaw Computer Rescue Idea & UNIX Pipes -- [https://lug.mtu.edu/archive/pdfs/2025-10-09_1.pptx Presentation 1] [pptx] [https://lug.mtu.edu/archive/pdfs/2025-10-09_2.odp Presentation 2] [odp]
* [[Minutes 2025-10-02]] -- LUKS -- [https://lug.mtu.edu/archive/pdfs/2025-01-23.odp Presentation] [odp]
* [[Minutes 2025-09-25]] -- Hackintoshing -- [https://lug.mtu.edu/archive/pdfs/2025-09-25.odp Presentation] [odp]
* [[Minutes 2025-09-18]] -- RAID, ZFS, and Highly Availible Storage -- [https://lug.mtu.edu/archive/pdfs/2025-01-16.odp Presentation] [odp]
* [[Minutes 2025-09-11]] -- Intro to LUG and our Servers! -- [https://lug.mtu.edu/archive/pdfs/2025-09-11.odp Presentation] [odp]
* [[Minutes 2025-09-04]] -- Linux Commandline & SSH -- [https://lug.mtu.edu/archive/pdfs/2024-09-19.odp Presentation 1] [odp] [https://lug.mtu.edu/archive/pdfs/2024-09-26.odp Presentation 2] [odp]
* [[Minutes 2025-08-28]] -- Introduction to Linux -- [https://lug.mtu.edu/archive/pdfs/2024-09-12.odp Presentation] [odp]

=== Spring 2025 ===
*24th was on finals week, no meeting!
*[[Minutes 2025-04-17]] -- Final meeting of the semester!
*[[Minutes 2025-04-10]] -- FreeBSD -- [https://lug.mtu.edu/archive/pdfs/2025-04-10.odp Presentation] [odp]
*No Meeting on the 3rd (eboard at CypherCon)
*[[Minutes 2025-03-27]] -- RedTeam day!
*[[Minutes 2025-03-20]] -- Bedrock Linux (& eBoard elections!) -- [https://lug.mtu.edu/archive/pdfs/2025-03-20.pdf Presentation] [pdf]
*[[Minutes 2025-03-13]] -- Coreboot & BIOS Modding -- [https://lug.mtu.edu/archive/pdfs/2025-03-13.odp Presentation] [odp]
*[[Minutes 2025-03-06]] -- LUG Infrastructure -- [https://lug.mtu.edu/archive/pdfs/2025-03-06.odp Presentation] [odp]
*Spring break on the 27th, no meeting!
*[[Minutes 2025-02-20]] -- Wireguard / OpenVPN
*[[Minutes 2025-02-13]] -- Creating Mifare Classic Polyglot Cards (Programming the LUG IDs) -- [https://lug.mtu.edu/archive/pdfs/2025-02-13.odp Presentation] [odp]
*Winter Carnival on the 6th, no meeting!
*[[Minutes 2025-01-30]] -- Creating LUG IDs
*[[Minutes 2025-01-23]] -- LUKS and Disk Encryption -- [https://lug.mtu.edu/archive/pdfs/2025-01-23.odp Presentation] [odp]
*[[Minutes 2025-01-16]] -- RAID (and ZFS) -- [https://lug.mtu.edu/archive/pdfs/2025-01-16.odp Presentation] [odp]
*[[Minutes 2025-01-09]] -- Program Optimization -- [https://lug.mtu.edu/archive/pdfs/2025-01-09.odp Presentation] [odp]

===Fall 2024===
*The 12th was during finals week, the consensus was no meeting.
*[[Minutes 2024-12-05]] -- Linux buffer overflows -- [https://lug.mtu.edu/archive/pdfs/2024-12-05.odp Presentation] [odp]
*Fall Break on the 28th, no meeting!
*[[Minutes 2024-11-21]] -- X11/Wayland -- [https://lug.mtu.edu/archive/pdfs/2024-11-21.pdf Presentation] [pdf]
*[[Minutes 2024-11-14]] -- Regex (Regular Expressions) -- [https://lug.mtu.edu/archive/pdfs/2024-11-14.odp Presentation] [odp]
*[[Minutes 2024-11-07]] -- Ricing WMs (AwesomeWM+Hyprland) -- [https://lug.mtu.edu/archive/pdfs/2024-11-07.pdf Presentation] [pdf]
*[[Minutes 2024-10-31]] -- WireGuard (and Tailscale) -- [https://lug.mtu.edu/archive/pdfs/2024-10-31.odp Presentation] [odp]
*[[Minutes 2024-10-24]] -- Practical Cybersecurity (Guest Speaker!) -- [https://lug.mtu.edu/archive/pdfs/2024-10-24.webm Presentation] [webm]
*October Recess on the 17th, no meeting!
*[[Minutes 2024-10-10]] -- Pentesting on Linux (AKA intro to NCL) - [https://lug.mtu.edu/archive/pdfs/2024-10-10.odp Presentation] [odp]
*[[Minutes 2024-10-03]] -- Plan 9 (Guest Speaker!) - [https://lug.mtu.edu/archive/pdfs/2024-10-03.pdf Presentation] [pdf]
*[[Minutes 2024-09-26]] -- SSH - [https://lug.mtu.edu/archive/pdfs/2024-09-26.odp Presentation] [odp]
*[[Minutes 2024-09-19]] -- Introduction to the Linux Commandline - [https://lug.mtu.edu/archive/pdfs/2024-09-19.odp Presentation] [odp]
*[[Minutes 2024-09-12]] -- Introduction to Linux - [https://lug.mtu.edu/archive/pdfs/2024-09-12.odp Presentation] [odp]
*[[Minutes 2024-09-05]] -- LUG Servers & Services - [https://lug.mtu.edu/archive/pdfs/2024-09-05.odp Presentation] [odp]
*[[Minutes 2024-08-29]] -- Introductions!

===Spring 2024===
*[[Minutes 2024-04-11]] -- <-- Eboard elections
*[[Minutes 2024-03-21]] -- No meeting (eboard at CypherCon)
*[[Minutes 2024-03-14]]
*[[Minutes 2024-03-07]]
*[[Minutes 2024-02-22]]
*[[Minutes 2024-02-15]] -- Ansible - [https://lug.mtu.edu/archive/pdfs/2024-02-15.odp Presentation] [odp]
*[[Minutes 2024-02-01]] -- Linux Kernelmodding - [https://lug.mtu.edu/archive/pdfs/2024-02-01.odp Presentation] [odp]

===Fall 2023===
*[[Minutes 2023-10-26]]
*[[Minutes 2023-09-28]]

===Spring 2022===
*[[Minutes 2022-04-21]] -- Tiedyeing shirts.
*[[Minutes 2022-04-14]] -- [[ports]].
*[[Minutes 2022-04-07]] -- No talk.
*[[Minutes 2022-03-31]] -- [[email]]
*[[Minutes 2022-03-24]] -- Installathon explanation and stepping through Mediawiki
*[[Minutes 2022-03-17]] -- <-- Eboard elections.
*[[Minutes 2022-02-24]] -- [[nginx]]
*[[Minutes 2022-02-14]] -- [https://gitlab.com/osu-lug/activities/presentations/-/blob/main/rm-rf-resurrection/notes.md recovering after rm -rf]
*[[Minutes 2022-02-03]] -- [[ASIC Design#Layout]]
*[[Minutes 2022-01-27]] -- [[ASIC Design#Digital logic]]
*[[Minutes 2022-01-20]] -- Game night. COVID was too high to meet in person, so we didn't.
*[[Minutes 2022-01-13]] -- [[vim]] part 2.

===Fall 2021===
*[[Minutes 2021-12-09]] -- [[sed]]
*[[Minutes 2021-11-25]] -- [[File systems]]
*[[Minutes 2021-11-18]] -- [https://www.imdb.com/title/tt0366548/ Movie night]
*[[Minutes 2021-11-11]] -- [[neofetch]]
*[[Minutes 2021-11-02]] -- [[crontab]] (Unofficial meeting)
*[[Minutes 2021-10-28]] -- [[git]] (Unofficial meeting)
*[[Minutes 2021-10-21]] -- [[vim]] (Unofficial meeting)
*[[Minutes 2021-10-15]] -- Discussion on the [[servers]] (Unofficial meeting)
*[[Minutes 2021-10-08]] -- [https://www.imdb.com/title/tt0113243/ Movie night] (Unofficial meeting)
*[[Minutes 2021-10-03]] -- [[FFmpeg]] (Unofficial meeting)

===Fall 2019===
*[[Minutes 2019-10-15]] - [https://lug.mtu.edu/archive/pdfs/2019-10-15.odp Presentation] [odp]
*[[Minutes 2019-10-08]] - [https://lug.mtu.edu/archive/pdfs/2019-10-08.odp Presentation] [odp]
*[[Minutes 2019-09-24]] - [https://lug.mtu.edu/archive/pdfs/2019-09-24.odp Presentation] [odp]
*[[Minutes 2019-09-17]] - [https://lug.mtu.edu/archive/pdfs/2019-09-17.odp Presentation] [odp]
*[[Minutes 2019-09-10]] - [https://lug.mtu.edu/archive/pdfs/2019-09-10.odp Presentation] [odp]

===Spring 2019===
*[[Minutes 2019-04-25]]
*[[Minutes 2019-04-12]]
*[[Minutes 2019-04-03]]
*[[Minutes 2019-03-28]]
*[[Minutes 2019-01-24]]

===Fall 2018===
*[[Minutes 2018-12-04]]
*[[Minutes 2018-11-13]]
*[[Minutes 2018-11-07]]
*[[Minutes 2018-10-24]]
*[[Minutes 2018-10-16]]
*[[Minutes 2018-10-09]]

===Spring 2018===
Presentations are the only documentation here.
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2018/2018_04_25.pptx 2018-04-25] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2018/2018_04_18.pptx 2018-04-18] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2018/2018_04_11.pptx 2018-04-11] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2018/2018_04_04.pptx 2018-04-04] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2018/2018_03_28.pptx 2018-03-28] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2018/2018_03_21.pptx 2018-03-21] [pptx]

===Fall 2017===
Presentations are the only documentation here.
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/11_29_2017.pptx 2017-11-29] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/11_15_2017.pptx 2017-11-15] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/10_19_2017.pptx 2017-10-19] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/10_05_2017.pptx 2017-10-05] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/9_28_2017.pptx 2017-09-28] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/9_14_2017.pptx 2017-09-14] [pptx]

===Spring 2017===
Presentations are the only documentation here.
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/4_18_2017.pptx 2017-04-18] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/4_11_2017.pptx 2017-04-11] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/4_4_2017.pptx 2017-04-04] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/3_28_2017.pptx 2017-03-28] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/3_21_2017.pptx 2017-03-21] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/2_28_2017.pptx 2017-02-28] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/2_14_2017.pptx 2017-02-14] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/2_07_3017.pptx 2017-02-07] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/1_31_3017.pptx 2017-01-31] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/1_24_2017.pptx 2017-01-24] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2017/1_17_2017.pptx 2017-01-17] [pptx]

===Fall 2016===
Presentations are the only documentation here.
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/12_1_2016.pptx 2016-12-01] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/11_10_2016.pptx 2016-11-10] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/11_3_2016.pptx 2016-11-03] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/10_20_2016.pptx 2016-10-20] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/10_13_2016.pptx 2016-10-13] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/10_7_2016.pptx 2016-10-07] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/9_23_2016.pptx 2016-09-23] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/9_16_2016.pptx 2016-09-16] [pptx]
*[https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016/9_2_2016.pptx 2016-09-02] [pptx]

===Spring 2016===
*(2016-04-22 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-04-22.pptx Presentation] [pptx]
*(2016-04-08 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-04-08.pptx Presentation] [pptx]
*(2016-04-01 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-04-01.pptx Presentation] [pptx]
*(2016-03-25 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-03-25.pptx Presentation] [pptx]
*(2016-03-18 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-03-18.pptx Presentation] [pptx]
*(2016-03-04 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-03-04.pptx Presentation] [pptx]
*[[Minutes 2016-02-26]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-02-26.pptx Presentation] [pptx]
*[[Minutes 2016-02-19]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-02-19.pptx Presentation] [pptx]
*[[Minutes 2016-02-18]]
*[[Minutes 2016-02-12]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-02-12.pptx Presentation] [pptx]
*[[Minutes 2016-01-29]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-01-29.pptx Presentation] [pptx]
*[[Minutes 2016-01-22]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-01-22.pptx Presentation] [pptx]
*(2016-01-15 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2016-01-15.pptx Presentation] [pptx]

===Fall 2015===
*[[Minutes 2015-12-10]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-12-10.pptx Presentation] [pptx]
*[[Minutes 2015-12-04]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-12-04.pptx Presentation] [pptx]
*[[Minutes 2015-11-13]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-11-13.pptx Presentation] [pptx]
*[[Minutes 2015-11-06]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-11-06.pptx Presentation] [pptx]
*[[Minutes 2015-10-30]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-10-30.pptx Presentation] [pptx]
*[[Minutes 2015-10-23]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-10-23.pptx Presentation] [pptx]
*(2015-10-16 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-10-16.pptx Presentation] [pptx]
*(2015-10-02 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-10-02.pptx Presentation] [pptx]
*(2015-09-25 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-09-25.pptx Presentation] [pptx]
*(2015-09-18 missing) - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/2015-09-18.pptx Presentation] [pptx]

===Spring 2015===
*[[Minutes 2015-04-16]]
*[[Minutes 2015-04-09]]
*[[Minutes 2015-04-02]]
*[[Minutes 2015-03-26]]
*[[Minutes 2015-03-19]]
*[[Minutes 2015-03-05]]
*[[Minutes 2015-02-26]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/MTU-LUG-Nginx-Config.pdf Presentation] [pdf]
*[[Minutes 2015-02-19]]
*[[Minutes 2015-02-12]]
*[[Minutes 2015-01-22]]

===Fall 2014===
*[[Minutes 2014-12-09]]
*[[Minutes 2014-12-02]]
*[[Minutes 2014-11-11]]
*[[Minutes 2014-11-04]]
*[[Minutes 2014-10-28]]
*[[Minutes 2014-10-14]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/10-14-2014.LUG-Server.Presentation.pptx Presentation] [pptx]
*[[Minutes 2014-09-30]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/Linux%20Basics.pptx Presentation] [pptx]
*[[Minutes 2014-09-23]] - [https://lug.mtu.edu/archive/pdfs/Presentations_2013-2018/9-23-2014.LUG%20Linux%20Install%20_%20IRC%20Presentation.pptx Presentation] [pptx]
*[[Minutes 2014-09-16]]

===Spring 2014===
*[[Minutes 2014-02-14]]
*[[Minutes 2014-01-31]]
*[[Minutes 2014-01-24]]

===Fall 2013===
*[[Minutes 2013-12-02]]
*[[Minutes 2013-11-18]]
*[[Minutes 2013-11-11]]
*[[Minutes 2013-11-04]]
*[[Minutes 2013-10-21]]
*[[Minutes 2013-10-14]]
*[[Minutes 2013-10-07]]
*[[Minutes 2013-09-30]]
*[[Minutes 2013-09-23]]
*[[Minutes 2013-09-16]]
*[[Minutes 2013-09-09]]

===Spring 2013===
*[[Minutes 2013-04-16]]
*[[Minutes 2013-04-02]]
*[[Minutes 2013-03-27]]
*[[Minutes 2013-03-05]]
*[[Minutes 2013-02-26]]
*Snow day on February 19th, 2013! No meeting!
*[[Minutes 2013-02-12]]
*[[Minutes 2013-02-05]]
*[[Minutes 2013-01-29]]
*[[Minutes 2013-01-22]]
*[[Minutes 2013-01-13]]

===Fall 2012===
*[[Minutes 2012-10-17]]
*[[Minutes 2012-10-09]]
*[[Minutes 2012-09-25]]

===Spring 2012===
*[[Minutes 2012-04-05]]
*[[Minutes 2012-02-23]]
*[[Minutes 2012-02-02]]
*[[Minutes 2012-01-26]]
*[[Minutes 2012-01-12]]

===Fall 2011===
*[[Minutes 2011-12-08]]
*[[Minutes 2011-12-01]]
*[[Minutes 2011-11-10]]
*[[Minutes 2011-10-13]]
*[[Minutes 2011-10-06]] ([[Agenda20111006|Meeting Agenda)]]
*[[Minutes 2011-09-29]]
*[[Minutes 2011-09-22]]
*[[Minutes 2011-09-15]]
*[[Minutes 2011-09-08]]
*[[Minutes 2011-09-01]]

===Spring 2011===
*[[Minutes 2011-04-21]]
*[[Minutes 2011-04-14]]
*[[Minutes 2011-04-07]]
*[[Minutes 2011-03-31]]
*[[Minutes 2011-03-17]]
*[[Minutes 2011-03-03]]
*[[Minutes 2011-02-24]]
*[[Minutes 2011-02-17]]
*[[Minutes 2011-02-03]]
*[[Minutes 2011-01-27]]
*[[Minutes 2011-01-20]]
*[[Minutes 2011-01-13]]

===Fall 2010===
*[[Minutes 2010-12-02]]
*[[Minutes 2010-11-18]]
*[[Minutes 2010-11-11]]
*[[Minutes 2010-10-28]]
*[[Minutes 2010-10-21]]
*[[Minutes 2010-10-10]]
*[[Minutes 2010-10-07]]
*[[Minutes 2010-09-30]]
*[[Minutes 2010-09-16]]
*[[Minutes 2010-09-09]]
*[[Minutes 2010-09-02]]

===Spring 2010===
*[[Minutes 2010-04-22]]
*[[Minutes 2010-04-15]]
*[[Minutes 2010-04-08]]
*[[Minutes 2010-04-01]]
*[[Minutes 2010-03-25]]
*[[Minutes 2010-03-18]]
*[[Minutes 2010-02-25]]
*[[Minutes 2010-02-18]]
*[[Minutes 2010-02-11]]
*[[Minutes 2010-01-21]]

===Fall 2009===
*[[Minutes 2009-12-10]]
*[[Minutes 2009-12-03]]
*[[Minutes 2009-11-19]]
*[[Minutes 2009-11-12]]
*[[Minutes 2009-11-10]]
*[[Minutes 2009-11-05]]
*[[Minutes 2009-10-29]]
*[[Minutes 2009-10-22]]
*[[Minutes 2009-10-21 (Officers)]]
*[[Minutes 2009-10-01]]
*[[Minutes 2009-09-24]]

===Spring 2009===
*[[Minutes 2009-03-05]]
*[[Minutes 2009-02-26]]
*[[Minutes 2009-02-19]]
*[[Minutes 2009-02-12]]
*[[Minutes 2009-01-29]]
*[[Minutes 2009-01-15]]

===Fall 2008===
*[[Minutes 2008-12-11]]
*[[Minutes 2008-12-04]]
*[[Minutes 2008-11-20]]
*[[Minutes 2008-11-13]]
*[[Minutes 2008-11-06]]
*[[Minutes 2008-10-30]]
*[[Minutes 2008-10-23]]
*[[Minutes 2008-10-16]]
*[[Minutes 2008-10-09]]
*[[Minutes 2008-10-02]]
*[[Minutes 2008-09-25]]
*[[Minutes 2008-09-18]]
*[[Minutes 2008-09-11]]
*[[Minutes 2008-09-04]]

===Spring 2008===
*[[Minutes 2008-04-24]]
*[[Minutes 2008-04-17]]
*[[Minutes 2008-04-03]]
*[[Minutes 2008-03-27]]
*[[Minutes 2008-03-20]]
*[[Minutes 2008-03-06]]
*[[Minutes 2008-02-28]]
*[[Minutes 2008-02-07]]
*[[Minutes 2008-01-31]]
*[[Minutes 2008-01-24]]
*[[Minutes 2008-01-17]]
*[[Minutes 2008-01-15 (Officers)]]

===Fall 2007===
*[[Minutes 2007-12-13]]
*[[Minutes 2007-12-06]]
*[[Minutes 2007-11-29]]
*[[Minutes 2007-11-08]]
*[[Minutes 2007-11-01]]
*[[Minutes 2007-10-18]]
*[[Minutes 2007-10-11]]
*[[Minutes 2007-10-04]]
*[[Minutes 2007-09-27]]
*[[Minutes 2007-09-20]]
*[[Minutes 2007-09-13]]
*[[Minutes 2007-09-06]]

===Spring 2007===
*[[Minutes 2007-04-26]]
*[[Minutes 2007-04-19]]
*[[Minutes 2007-04-12]]
*[[Minutes 2007-04-05]]

===Fall 2006===
*[[Minutes 2006-01-19]]
__NOTOC__
__NOEDITSECTION__

Docs/OPNsense

2026-03-31T01:26:54Z

Simone: add section and subnet for pfsync

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 2 network details, see [[Docs/Switches]].'''

OPNsense is our router/firewall.

We have two OPNsense devices, Lasagna and Ravioli.

== Network ==

=== Management (OOB) ===
{| class="wikitable"
!Subnet
|-
|10.10.0.0/24
|}
OOB Management services like [https://www.dell.com/en-us/lp/dt/open-manage-idrac Dell iDRAC] / [https://www.hpe.com/us/en/hpe-integrated-lights-out-ilo.html HP iLO] and internal networking hardware.

Management cannot communicate with LAN/WAN.

Generally, Management should be restricted from everything else.

OOB services tend to be ''super'' vulnerable, there are dozens of [https://github.com/mgargiullo/cve-2018-1207 premade scripts] that instapwn iDRACs and give you a root shell by just pointing them at the IP address.

Because of this, the iDRAC web login interface should only be accessible to anyone you're okay having root on the server.

=== LAN ===
{| class="wikitable"
!Subnet
|-
|10.10.1.0/24
|}
Servers and Virtual Machines.

LAN cannot communicate with Management.

=== WAN ===
{| class="wikitable"
!Subnet
|-
|141.219.180.64/27
|}
Our public IP subnet under Tech's <code>141.219.0.0/16</code> block.

The plan is to use reverse-NAT to map the public IPs to select internal IPs, since we won't have enough IPs for every VM.

=== OpenVPN ===
{| class="wikitable"
!Subnet
|-
|10.10.10.0/24
|}

=== Wireguard ===
{| class="wikitable"
!Subnet
|-
|10.10.11.0/24
|}
<code>10.10.11.0/25</code> - Wireguard admin range (access to LAN+Management)

<code>10.10.11.128/25</code> - Wireguard user range (access to only LAN)

All members can be freely given 'user' wireguard configs. Only admin configs need to be restricted (due to the aforementioned iDrac exploit issues).

Neither wireguard config should have access to the internet.

=== pfsync ===
{| class="wikitable"
!Subnet
|-
|10.10.250.0/24
|}
Interface used for High Availability (HA) sync between the 2 firewalls.

Cannot communicate with any other subnet.

== OPNSense ==
<Rules for access, updates, generating wireguard configs, etc>

Docs/OPNsense

2026-03-06T18:33:26Z

Simone: fix wan range

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 2 network details, see [[Docs/Switches]].'''

OPNsense is our router/firewall.

We have two OPNsense devices, Lasagna and Ravioli.

== Network ==

=== Management (OOB) ===
{| class="wikitable"
!Subnet
|-
|10.10.0.0/24
|}
OOB Management services like [https://www.dell.com/en-us/lp/dt/open-manage-idrac Dell iDRAC] / [https://www.hpe.com/us/en/hpe-integrated-lights-out-ilo.html HP iLO] and internal networking hardware.

Management cannot communicate with LAN/WAN.

Generally, Management should be restricted from everything else.

OOB services tend to be ''super'' vulnerable, there are dozens of [https://github.com/mgargiullo/cve-2018-1207 premade scripts] that instapwn iDRACs and give you a root shell by just pointing them at the IP address.

Because of this, the iDRAC web login interface should only be accessible to anyone you're okay having root on the server.

=== LAN ===
{| class="wikitable"
!Subnet
|-
|10.10.1.0/24
|}
Servers and Virtual Machines.

LAN cannot communicate with Management.

=== WAN ===
{| class="wikitable"
!Subnet
|-
|141.219.180.64/27
|}
Our public IP subnet under Tech's <code>141.219.0.0/16</code> block.

The plan is to use reverse-NAT to map the public IPs to select internal IPs, since we won't have enough IPs for every VM.

=== OpenVPN ===
{| class="wikitable"
!Subnet
|-
|10.10.10.0/24
|}

=== Wireguard ===
{| class="wikitable"
!Subnet
|-
|10.10.11.0/24
|}
<code>10.10.11.0/25</code> - Wireguard admin range (access to LAN+Management)

<code>10.10.11.128/25</code> - Wireguard user range (access to only LAN)

All members can be freely given 'user' wireguard configs. Only admin configs need to be restricted (due to the aforementioned iDrac exploit issues).

Neither wireguard config should have access to the internet.

== OPNSense ==
<Rules for access, updates, generating wireguard configs, etc>

Docs/Switches

2026-02-05T21:51:58Z

Simone: update hostnames for both switches

[[Docs|~/Docs]]

'''For Layer 1 network details, see [[Docs/Cables|Docs/SFP+ Cables]].'''

'''For Layer 3 network details, see [[Docs/OPNsense|Docs/OPNSense]].'''

== VLANs ==
{| class="wikitable"
!Network
!VLAN ID
|-
|Management
|1
|-
|LAN
|2
|-
|WAN
|640
|}

== Switch Ports ==
Clyde - SFP+ switch:

Model: Ubiquiti EdgeSwitch 16 XG

IP: 10.10.0.6
{| class="wikitable"
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|N/A
|
|Excluded
|Untagged
|Tagged
|-
|2
|Leskinen
|eno1
|Excluded
|Untagged
|Tagged
|-
|3
|Shell
|eno1
|Excluded
|Untagged
|Tagged
|-
|4
|Mirrors
|bxe0
|Excluded
|Untagged
|Tagged
|-
|5
|Okabe
|
|Excluded
|Untagged
|Tagged
|-
|6
|Daru
|eno1
|Excluded
|Untagged
|Tagged
|-
|7
|Mayuri
|eno1
|Excluded
|Untagged
|Tagged
|-
|8
|Luka
|eno1
|Excluded
|Untagged
|Tagged
|-
|9
|Maho
|eno1
|Excluded
|Untagged
|Tagged
|-
|10
|Kurisu
|eno1
|Excluded
|Untagged
|Tagged
|-
|11
|ravioli
|ix1 (left SFP)
|Tagged
|Tagged
|Tagged
|-
|12
|lasagna
|
|Tagged
|Tagged
|Tagged
|-
|13
|Switch LAG
|Port 51
|Tagged
|Tagged
|Tagged
|-
|14
|Switch LAG
|Port 52
|Tagged
|Tagged
|Tagged
|-
|15
|MTU Uplink
|MTU LAG 1
|Excluded
|Excluded
|Untagged
|-
|16
|MTU Uplink
|MTU LAG 2
|Excluded
|Excluded
|Untagged
|}
Bonnie - 1gb RJ45 switch:

Model: Ubiquiti EdgeSwitch 48 Lite

IP: 10.10.0.5
{| class="wikitable"
|+
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|
|
|Untagged
|Excluded
|Excluded
|-
|2
|
|
|Untagged
|Excluded
|Excluded
|-
|3
|
|
|Untagged
|Excluded
|Excluded
|-
|4
|
|
|Untagged
|Excluded
|Excluded
|-
|5
|
|Untagged
|Excluded
|Excluded
|-
|6
|
|
|Untagged
|Excluded
|Excluded
|-
|7
|
|
|Untagged
|Excluded
|Excluded
|-
|8
|
|
|Untagged
|Excluded
|Excluded
|-
|9
|
|
|Untagged
|Excluded
|Excluded
|-
|10
|
|
|Untagged
|Excluded
|Excluded
|-
|11
|
|
|Untagged
|Excluded
|Excluded
|-
|12
|
|
|Untagged
|Excluded
|Excluded
|-
|13
|Mayuri-idrac
|iDRAC
|Untagged
|Excluded
|Excluded
|-
|14
|
|
|Untagged
|Excluded
|Excluded
|-
|15
|mirrors-idrac
|iDRAC
|Untagged
|Excluded
|Excluded
|-
|16
|Okabe-idrac
|iDRAC
|Untagged
|Excluded
|Excluded
|-
|17
|Daru-idrac
|iDRAC
|Untagged
|Excluded
|Excluded
|-
|18
|leskinen-idrac
|iDRAC
|Untagged
|Excluded
|Excluded
|-
|19
|shell-idrac
|
|Untagged
|Excluded
|Excluded
|-
|20
|
|
|Untagged
|Excluded
|Excluded
|-
|21
|Luka-idrac
|iDRAC
|Untagged
|Excluded
|Excluded
|-
|22
|
|
|Untagged
|Excluded
|Excluded
|-
|23
|
|
|Untagged
|Excluded
|Excluded
|-
|24
|
|
|Untagged
|Excluded
|Excluded
|-
|25
|
|
|Untagged
|Excluded
|Excluded
|-
|26
|
|
|Untagged
|Excluded
|Excluded
|-
|27
|
|
|Untagged
|Excluded
|Excluded
|-
|28
|
|
|Untagged
|Excluded
|Excluded
|-
|29
|
|
|Untagged
|Excluded
|Excluded
|-
|30
|
|
|Untagged
|Excluded
|Excluded
|-
|31
|
|
|Untagged
|Excluded
|Excluded
|-
|32
|
|
|Untagged
|Excluded
|Excluded
|-
|33
|
|
|Untagged
|Excluded
|Excluded
|-
|34
|
|
|Untagged
|Excluded
|Excluded
|-
|35
|
|
|Untagged
|Excluded
|Excluded
|-
|36
|
|
|Untagged
|Excluded
|Excluded
|-
|37
|
|
|Untagged
|Excluded
|Excluded
|-
|38
|
|
|Untagged
|Excluded
|Excluded
|-
|39
|
|
|Untagged
|Excluded
|Excluded
|-
|40
|
|
|Untagged
|Excluded
|Excluded
|-
|41
|
|
|Untagged
|Excluded
|Excluded
|-
|42
|
|
|Untagged
|Excluded
|Excluded
|-
|43
|
|
|Untagged
|Excluded
|Excluded
|-
|44
|
|
|Untagged
|Excluded
|Excluded
|-
|45
|
|
|Excluded
|Untagged
|Tagged
|-
|46
|
|
|Excluded
|Untagged
|Tagged
|-
|47
|
|
|Excluded
|Untagged
|Tagged
|-
|48
|
|
|Excluded
|Untagged
|Tagged
|-
|49
|
|
|Excluded
|Excluded
|Excluded
|-
|50
|
|
|Excluded
|Excluded
|Excluded
|-
|51
|Switch to Switch
|Fiber Switch 1 LAG
|Tagged
|Tagged
|Tagged
|-
|52
|Switch to Switch
|Fiber Switch 2 LAG
|Tagged
|Tagged
|Tagged
|}

=== WAN ===
Our WAN is a LAGG across two ports. The link needs '''LACP enabled''' ("Static mode" '''off''' in 1Gb Ubiquiti Switch) [https://www.reddit.com/r/Ubiquiti/comments/7xs70n/lag_dynamic_vs_static/duauolg/], and '''STP off'''.

IT configures their switches to automatically shut off ports if they detect STP advertisements.

Reference commands to make a Cisco switch satisfy the requirements:<syntaxhighlight lang="text">
(config-if)# spanning-tree bpdufilter enable
(config-if)# spanning-tree bpduguard disable
</syntaxhighlight>

Docs/Mirrors

2026-01-28T17:35:27Z

Simone: update hardware description

The LUG Mirror server mirrors a number of different Linux distros.

Currently, we mirror Debian (+ISOs), Arch Linux, CentOS (+AltArch), gentoo, Fedora (+EPEL &RPMfusion), and Ubuntu (+ISOs). The full list can be seen by going to https://mirrors.lug.mtu.edu/

=== Hardware ===
Mirrors is a standalone [https://www.dell.com/en-us/shop/povw/poweredge-r730xd/1000 Dell R730xd] server (3.5" drive bay variant), with 2x E5-2623 v3s, 128GB of RAM, and 12x 12TB hard drives.

=== Operating System ===
Mirrors runs FreeBSD.

It uses ZFS as the filesystem for the root pool and primary pool that's used for the distribution mirrors (the pool named <code>tank</code>)

It used to use salt, but it broke when upgrading from FreeBSD 12-14. Currently, all maintenance is done by hand (this is a good thing)

At its core, a mirror server performs two functions:
# Synchronizing the content from upstream mirrors to itself
# Hosting that downloaded content for end-users and other downstream mirrors to pull from

On our mirrors, this is accomplished with archvsync+cron to synchronize content with upstream, and vsftpd+rsyncd+nginx to handle hosting the content.

=== Maintenance ===

==== Certificates ====
Put the certificate (the 'intermediate' download option from our Certificate Authority) in <code>/usr/local/share/certs/mirrors_lug_mtu_edu_bundle.cer</code>, and the key in <code>/usr/local/share/certs/mirrors_lug_mtu_edu.key</code>

then run: <code>service nginx reload</code> Note: re'''load''' and NOT re'''start''', as re'''start''' kills all existing http(s) connections, while re'''load''' just applies the new settings for all future connections. It also won't kill the background daemon if the settings are not valid.

You can view the nginx configuration in <code>/usr/local/etc/nginx/nginx.conf</code> to view and change settings. This file is no longer managed by salt, and can be edited by hand.

=== Core tasks ===
At its core, a mirror server performs two functions:

# Synchronizing the content from upstream mirrors to itself
# Hosting that downloaded content for end-users and other downstream mirrors to pull from

On our mirrors, this is accomplished with archvsync+cron to synchronize content with upstream, and vsftpd+rsyncd+nginx to handle hosting the content.

==== Pulling from upstream ====

===== ftpsync =====
The ftpsync utility from the archvsync project is what we use to synchronize content on upstream servers to our local Mirror server.

archvsync is a script by the Debian project to provision mirror servers, and should be all-inclusive.

We don't use archvsync in full, only the ftpsync utility to handle synchronizing files.

It's nice because it prevents half-sync'd files from getting served to users, so they don't pull corrupted binaries that don't verify with the package signature.

This is especially important when acting as an upstream mirror for downstream mirror servers, as they do not typically check package authenticity, replying on end-user's package managers to check them.

Under the hood, ftpsync can use the ftp(?) or rsync protocols, and is determined by the ftpsync config for a distribution.

The upstream servers Mirrors pulls from, as well as what 'Tier' we are for that distribution, is as follows:
{| class="wikitable sortable"
!Distribution
!Tier
!Upstream
!Method
|-
|Arch Linux
|1
|rsync.archlinux.org
|rsync
|-
|CentOS AltArch
|1
|msync.centos.org
|rsync
|-
|CentOS Stream
|1
|rsync.stream.centos.org
|rsync
|-
|CentOS
|1
|msync.centos.org
|rsync
|-
|Debian CD
|1
|cdimage.debian.org
|rsync
|-
|Debian
|1
|syncproxy2.wna.debian.org
|rsync
|-
|EPEL
|1
|dl.fedoraproject.org
|rsync
|-
|Fedora
|1
|dl.fedoraproject.org
|rsync
|-
|gentoo
|2?
|ftp.ussg.iu.edu
|rsync
|-
|RPM Fusion
|1
|download1.rpmfusion.org
|rsync
|-
|Ubuntu Releases
|2?
|mirror.math.princeton.edu
|rsync
|-
|Ubuntu
|2?
|mirror.math.princeton.edu
|rsync
|}

archvsync.tar.gz contains all the archvsync configs and scripts.

It's just a repo that was <code>git pull</code>'d, and was not natively installed on the system via pkg.

If we rebuild mirrors, we should either install it via pkg (if available) or <code>git pull</code> it anew, and place it in <code>/opt/archvsync/</code>

===== cron =====
<code>cron</code> calls <code>ftpsync</code> to run at certain times.

This is what determines that Arch Linux is synced with upstream every ~15 minutes, while Debian is only synced four times a day.

This should be set according to each distribution's rules on mirror servers.

Most distros want tier 1's to sync 4 times a day, and want the exact hours/minutes set randomly so the Tier0's don't get every downstream Tier1 hammering requests all at once.

Currently, this is the schedule Mirrors uses (all times in EST):
{| class="wikitable sortable"
!Distribution
! colspan="4" |Sync Times
|-
|Arch Linux
|*:03
|*:13
|*:33
|*:43
|-
|CentOS AltArch'''*'''
|00:24 AM
|06:24 AM
|12:24 PM
|06:24 PM
|-
|CentOS Stream'''**'''
|00:24 AM
|06:24 AM
|12:24 PM
|06:24 PM
|-
|CentOS'''*'''
|00:24 AM
|06:24 AM
|12:24 PM
|06:24 PM
|-
|Debian CD
|00:12 AM
|06:12 AM
|12:12 PM
|06:12 PM
|-
|Debian
|00:03 AM
|06:03 AM
|12:03 AM
|06:03 PM
|-
|EPEL
|00:30 AM
|06:30 AM
|12:30 PM
|06:30 PM
|-
|Fedora
|00:15 AM
|06:15 AM
|12:15 PM
|06:15 PM
|-
|gentoo
|00:14 AM
|06:14 AM
|12:14 PM
|06:14 PM
|-
|RPM Fusion
|00:15 AM
|06:15 AM
|12:15 PM
|06:15 PM
|-
|Ubuntu Releases
|00:45 AM
|06:45 AM
|12:45 PM
|06:45 PM
|-
|Ubuntu
|00:30 AM
|06:30 AM
|12:30 PM
|06:30 PM
|}
'''* = Deprecated, should be removed'''

'''** = Suspected broken, needs to be investigated'''

'''*** = Maybe deprecated?'''

Keep in mind this is when syncing starts, it may take a moment before it's fully up-to-date with upstream.

==== Serving to downstream ====
<code>vsftpd</code> is the ftp daemon running on port <code>21</code>, and allows all recursive content inside <code>/lug</code> to be downloaded by anonymous users.

<code>rsyncd</code> does the same, but as the rsync daemon running on port <code>873</code>.

This is what many downstream mirrors use to pull from us, as we're a tier 1 for some distros.

<code>nginx</code> is again similar, but as the http daemon running on ports <code>80/443</code> (http/https, respectively).

This is what's used by most end-users to download packages from us for their installs.

It has a hardcoded <code>if</code> block pointing to each distro's dataset path, I'm almost certain could just be replaced with <code>root /lug</code> in the <code>server</code> block.
=== Salt ===
Salt used to administer these services, but it's half-broken at the moment and ''should not be reinstalled'' (in my opinion).

All salt did was functionally copy config files from it's 'special snowflake' directory (/usr/local/srv/salt/files) into the standard locations (like /etc/nginx and whatnot), so functionally replacing the established norm for administering a *NIX system with a custom setup.

The benefit of easing the process of adding new distributions to the mirror is not worth the consequence of having a brittle system that breaks when config files are manually edited or when upgrading the system.

As such, I think the way Mirrors is setup is essentially perfect, sans salt.

salt.tar.gz contains all the configuration for salt, and the config files it uses to overwrite the config files located in the standard location (as well as the template files it uses to 'build' configs for services like rsyncd and archvsync when a new distro is added to the primary salt config)