|
Generic Localization Checklist
CU Generic Localization Checklist
MACHINENAME: generic
Catagories:
Man = Mandatory (may be there already)
Net = Mandatory - falls under unixops net support
Serv = Mandatory boot/swap server only
Cli = Mandatory diskless client only
Loc = Mandatory, applies only if there is a local admin hub
Man? = Mandatory, but ask customer.
Contr = only if they are going on contract
OnReq = On request
Obsol = Obsolete
Back = Only if they are getting ops backups
IfAcc = If applicable.
Before Beginning:
Man [ ] Obtain this checklist via anonftp from boulder
(pub/localization.cklst). Fill it out as the localization
procedes by entering the login name in the bracket of the
user that completes the step. Annotate freely.
Man [ ] All parts have arrived, final location known,
wiring asked to make any necessary connections.
Man [ ] has a valid CU-Boulder Internet adress and all host
attributes are in addhost database. Verify.
Man [ ] Get blessing from your boss (boss login in brackets)
Man This is characterized as a:
[ ] One-time install
[ ] Install and localize for Contract support
Checklist of basic system stuff:
Man [ ] This host has a nametag plastered on it and all its
peripherals including the device spec filename.
Man [ ] Install vanilla OS. Verify.
Man [ ] Move this file to hostname:/Localization and continue
to update it there.
Man [ ] Config YP (client, master, slave?) Verify.
Net [ ] Virus fixes (sendmail, fingerd) installed. Verify.
All fixes are in boulder anonftp pub/fixes.
Net [ ] Has required netadmin login. Verify.
Loc [ ] Has local required logins (operator, etc). Verify
Man [ ] root password is what it should be. Verify.
Man [ ] ifconfigs setup with a netmask of 0xffffff00, broadcast
with ones rather than zeros (except on campus backbone),
trailers, and the ip address explicit rather than specified
by hostname.
Man [ ] Has kustom kernel with desired options/devices. Verify.
Man [ ] This host has a name. Verify it is properly set in
/etc/hosts and /etc/rc*.
Man [ ] has 0 length /etc/hosts.equiv. Verify.
Man [ ] /tmp is linked to /var/tmp and mod 777. Verify.
Man [ ] /etc/utmp is mod 666. Verify.
Man [ ] /etc/group from anchor. Verify.
Net [ ] /etc/hosts from boulder anonftp pub and hosts distribution
if necessary. Verify.
Net [ ] /etc/networks from boulder anonftp pub. Verify.
Net [ ] resolves queries to sanctioned nameserver. Verify.
Contr [ ] localized syslog.conf - copied from localized system of
same OS and class config.
Verify.
Net [ ] /etc/setuproute installed and set to execute from
/etc/rc.local. Verify.
Net [ ] This host does not run routed and it is commented out of
/etc/rc*. Verify.
Net [ ] runs gated if the system is a gateway.
Net [ ] has valid CU-Boulder sendmail.cf from boulder anonftp
pub/generic.cf. Verify the mail system works completely
by sending test messages to/from users that live on this
host.
Contr [ ] has current /usr/lib/aliases and gets alias distribution
if necessary. Verify.
Contr [ ] has current /etc/motd and gets motd distribution if needed.
Server and clients should link /etc/motd to
/usr/share/etc/motd. Comment out motd update in
/etc/rc.local. Verify.
Loc [ ] has current local /etc/motd appends and gets local motd
distribution if needed. Verify.
Man [ ] /etc/termcap file from boulder anonftp. Verify.
Contr [ ] root trusts boulder and boulder.colorado.edu. Verify that
/.rhosts is root owned and mod 644.
Loc [ ] root trusts local hub and local hub.colorado.edu. Verify
owner/mod and doesn't trust anyone else.
Man [ ] has valid tech.alias, trouble.alias, admin.alias
in /usr/adm/unixops. Verify.
Loc [ ] has valid {local}.alias. Verify
Man [ ] has diary file as /usr/local/adm/logs/diary. Verify
mod 4600.
Man [ ] /usr/ucb/quota is replaced with link to /bin/true unless
quotas will be used.
Man [ ] has valid printcap, spooldirs, access to printers. Verify.
Back [ ] dump checklist completed.
Net [ ] nameserver was told about this host. Verify.
Net [ ] added to boulder:/usr/lib/sendmail.cf. Verify.
Contr [ ] how to reboot this host and the required downtime notice
is documented in "red" notebook and taped to machine.
Contr [ ] we have a concrete vendor service agreement on this host.
Contr [ ] added to boulder:/usr/local/etc/MACHINES. Verify.
Loc [ ] added to local hub netgroup.
Contr [ ] added to
boulder:/usr/local/adm/unixops/subscriber.info.
IfAcc [ ] this host has political blessing to mount cssun partitions
by: __________. Verify.
IfAcc [ ] this host has techinical blessing to mount cssun paritions
by: ___________. Verify.
IfAcc [ ] this host has received technical demerits to mount
cssun paritions by: _________. Verify.
Contr [ ] this host is covered in a unixops agreement. Verify.
Man [ ] political/technical OK to mount Club uniqUID. Verify.
Man [ ] blessed mounts are setup in /etc/fstab with soft,bg,grpid
options, create mount points, mount. Verify.
Man [ ] install/localize clients if server. Verify.
Man [ ] All vendor specific relevant security fixes patched. Verify.
Software Packages: (all source code can be found on cujo)
IfAcc [ ] adduser. W/client w/front end running on their machine.
IfAcc [ ] exabyte config stuff. Verify.
Man [ ] sudo(l). Verify and sudoers blessed and setup.
Man [ ] sreensaver installed and setup in /etc/rc.local
(wiped/bounce_icon). Verify.
Man [ ] compress. Verify.
Man [ ] uncompress (usually 'zcat'). Verify.
Man [ ] talk (groovy one from uunet ftp bsd-sources). Verify.
Contr [ ] rrn (usenet news). Verify
Man [ ] transcript (psroff, enscript, etc.). Verify.
Man [ ] eqn. Verify.
Contr [ ] settime(l). Verify.
Contr [ ] aliases(l). Verify.
Man [ ] umodem/xmodem. Verify.
Man [ ] rtar. Verify.
Man? [ ] kermit. Verify.
Man? [ ] ansi/ransi(l). Verify.
Man? [ ] remote(l). Verify.
Man? [ ] spacegripe(l). Verify.
Man? [ ] rcmdexec(l) (ruuq, uuhosts, etc.). Verify.
Man? [ ] dialups(l). Verify.
Man? [ ] bib/invert/lookup. Verify.
Man? [ ] dsee. Verify.
Man? [ ] NeWS. Verify.
Man? [ ] tex. Verify.
Man? [ ] shar. Verify.
Man? [ ] mkmake. Verify.
Man? [ ] RAND MH. Verify.
Man? [ ] Webster. Verify.
OnReq [ ] X11R3 (mount from X nfs server if blessed). Verify.
OnReq [ ] forms(l). Verify.
OnReq [ ] nag(l). Verify.
OnReq [ ] ideal. Verify.
OnReq [ ] emacs (gnu version: most recent). Verify.
OnReq [ ] rcs. Verify.
OnReq [ ] pic. Verify.
When done:
Man [ ] Mail checklist to boss and diary@hostname
Man [ ] Notify UnixOps Assistant Admin to recharge.
|
|
