The Doctor's to-do list - Revision history

Tslagle at 03:29, 4 April 2012

2012-04-04T03:29:39Z

← Older revision		Revision as of 03:29, 4 April 2012
Line 70:		Line 70:

	* In /network/wireless, do some kind of "please wait, this could take a while" popup.		* In /network/wireless, do some kind of "please wait, this could take a while" popup.

			[[Category:Byzantium]]

Drwho at 00:53, 20 November 2011

2011-11-20T00:53:55Z

Drwho at 00:48, 20 November 2011

2011-11-20T00:48:58Z

@@ Line 18: / Line 18: @@
 ** Look through the list of extensions in php.ini and turn all of the unnecessary ones off.
 *** calendar, ldap.
 * Set Porteus up to set its hostname to the IPv6 address of the primary wireless interface of the node.
@@ Line 36: / Line 28: @@
 *** Would have to reference the SQLite database which keeps track of the active and inactive web apps and modifies the output accordingly
 ** has to be mobile-friendly
 * <strike>Install [https://github.com/Pita/etherpad-lite etherpad-lite] on my development instance</strike>

Drwho at 00:21, 6 October 2011

2011-10-06T00:21:18Z

← Older revision		Revision as of 00:21, 6 October 2011
Line 18:		Line 18:
	** Look through the list of extensions in php.ini and turn all of the unnecessary ones off.		** Look through the list of extensions in php.ini and turn all of the unnecessary ones off.
	*** calendar, ldap.		*** calendar, ldap.
	**** <strike>Is SQLite enabled? Check on this.</strike> Yes!

	* Write a web app for the control panel that		* Write a web app for the control panel that
Line 81:		Line 80:
	* <strike>Installed the pre-converted MySQL Porteus package from the distro-download archive.</strike>		* <strike>Installed the pre-converted MySQL Porteus package from the distro-download archive.</strike>
	** <strike>Need to pre-configure MySQL for small-ish systems</strike>		** <strike>Need to pre-configure MySQL for small-ish systems</strike>
	** Need to pre-harden MySQL		** <strike>Need to pre-harden MySQL</strike>
	** Change the default password to something else.		** Change the default password to something else.
	** Need to pre-create accounts, databases for all web apps and give them strong passwords. They need to be ready to go when they're started up.		** Need to pre-create accounts, databases for all web apps and give them strong passwords. They need to be ready to go when they're started up.

	* Harden /etc/sysctl.conf!		* Harden /etc/sysctl.conf!

			* In /network/wireless, do some kind of "please wait, this could take a while" popup.

Drwho at 18:27, 1 October 2011

2011-10-01T18:27:52Z

Drwho at 19:25, 28 September 2011

2011-09-28T19:25:54Z

Drwho at 22:03, 17 September 2011

2011-09-17T22:03:33Z

← Older revision		Revision as of 22:03, 17 September 2011
Line 46:		Line 46:
	** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.		** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.

	* Install etherpad-lite on my development instance		* Install [https://github.com/Pita/etherpad-lite etherpad-lite] on my development instance
	** [http://slackbuilds.org/repository/13.37/network/node/ requires node.js, for which there exists a Slackpack]		** [http://slackbuilds.org/repository/13.37/network/node/ requires node.js, for which there exists a Slackpack]
	*** build a Slackpack of node.js, convert into Porteus package, check everything into SVN		*** build a Slackpack of node.js, convert into Porteus package, check everything into SVN

Drwho at 22:01, 17 September 2011

2011-09-17T22:01:17Z

← Older revision		Revision as of 22:01, 17 September 2011
Line 42:		Line 42:
	** will need its UI tweaked to be more mobile-friendly		** will need its UI tweaked to be more mobile-friendly
	** Create a crypto.cat Porteus package and check it into SVN		** Create a crypto.cat Porteus package and check it into SVN
	** index.php needs to be edited to remove the 'donate' DIV. Nothing personal, Kaepora, but we need to keep external links to a minimum because Byzantium meshes will probably be isolated from the global Net most of the time.		** index.php needs to be edited to remove the 'donate' DIV. Nothing personal, Kaepora, but we need to keep external links to a minimum because Byzantium meshes will probably be isolated from the global Net most of the time. You'll still get credit.
	** <strike>Change the default names in index.php into something more generic.</strike>		** <strike>Change the default names in index.php into something more generic.</strike>
	** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.		** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.

Drwho at 22:00, 17 September 2011

2011-09-17T22:00:46Z

Drwho at 21:42, 17 September 2011

2011-09-17T21:42:17Z

← Older revision		Revision as of 21:42, 17 September 2011
Line 38:		Line 38:
	** has to be mobile-friendly		** has to be mobile-friendly

	* Install crypto.cat on my development instance		* <strike>Install crypto.cat on my development instance</strike>
	** <strike>requires PHP</strike>		** <strike>requires PHP</strike>
	** will need its UI tweaked to be more mobile-friendly		** will need its UI tweaked to be more mobile-friendly
	** Create a crypto.cat Porteus package and check it into SVN		** Create a crypto.cat Porteus package and check it into SVN
			** index.php needs to be edited to remove the 'donate' DIV. Nothing personal, Kaepora, but we need to keep external links to a minimum because Byzantium meshes will probably be isolated from the global Net most of the time.
			** <strike>Change the default names in index.php into something more generic.</strike>
			** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.

	* Install etherpad-lite on my development instance		* Install etherpad-lite on my development instance

← Older revision		Revision as of 00:53, 20 November 2011
Line 33:		Line 33:
	*** <strike>build a Slackpack of node.js, convert into Porteus package, check everything into SVN</strike>		*** <strike>build a Slackpack of node.js, convert into Porteus package, check everything into SVN</strike>
	** <strike>write an initscript that can start up Etherpad-lite when called by the control panel</strike>		** <strike>write an initscript that can start up Etherpad-lite when called by the control panel</strike>
	** will have to be controlled by the control panel, store its configuration in a database		** <strike>will have to be controlled by the control panel, store its configuration in a database</strike>
	** write a sub-config file for Apache that passes through the /pad URL to localhost:9001		** <strike>write a sub-config file for Apache that passes through the /pad URL to localhost:9001</strike>
	** <strike>requires [http://npmjs.org NPM]</strike>		** <strike>requires [http://npmjs.org NPM]</strike>
	*** that will need to be packaged and checked in separately, I think.		*** <strike>that will need to be packaged and checked in separately, I think.</strike>
	*** run it in verbose mode to keep an eye on it		*** <strike>run it in verbose mode to keep an eye on it</strike>
	*** if it installs more stuff, we should bundle the whole mess into the NPM Porteus package		*** <strike>if it installs more stuff, we should bundle the whole mess into the NPM Porteus package</strike>
	** <strike>really should run as an unprivileged user</strike>		** <strike>really should run as an unprivileged user</strike>
	** ~~really should listen on the loopback interface only~~		** <strike>pay attention to the [https://github.com/Pita/etherpad-lite/wiki/How-to-put-Etherpad-Lite-behind-a-reverse-Proxy reverse-proxy howto]</strike>
	** pay attention to the [https://github.com/Pita/etherpad-lite/wiki/How-to-put-Etherpad-Lite-behind-a-reverse-Proxy reverse-proxy howto]
	** <strike>have to start it by hand a few times to figure out how to automate and package it</strike>		** <strike>have to start it by hand a few times to figure out how to automate and package it</strike>

Line 48:		Line 47:
	** <strike>PHP must have support for Curl, XMLwriter, MySQL, GD, mbstring, gettext (all required for status.net), SQLite (to read configuration databases)</strike>		** <strike>PHP must have support for Curl, XMLwriter, MySQL, GD, mbstring, gettext (all required for status.net), SQLite (to read configuration databases)</strike>
	** will need to pre-configure it for security and usability		** will need to pre-configure it for security and usability
	** Need to hack the mnml theme to be more mobile friendly.		** <strike>Need to hack the mnml theme to be more mobile friendly.</strike>
	** Delete the unneeded themes and add-ons to save space, reduce potential attack surface.		** Delete the unneeded themes and add-ons to save space, reduce potential attack surface.
	** Add-ons are not enabled by default. To turn one on you have to manually edit config.php and add lines for each one. This is moderately safe. Consider making config.php read-only with instructions for editing it later?		** Add-ons are not enabled by default. To turn one on you have to manually edit config.php and add lines for each one. This is moderately safe. Consider making config.php read-only with instructions for editing it later?
Line 54:		Line 53:
	** <strike>configure for longer messages - 560 characters?</strike>		** <strike>configure for longer messages - 560 characters?</strike>
	** configure to make it easy to set up accounts on a node - no e-mail verification		** configure to make it easy to set up accounts on a node - no e-mail verification
	** enable image upload and display		** <strike>enable image upload and display</strike>
	** There is a subtle problem: the hostname of the node ($config['site']['server'] = 'name of node here';) must be set correctly in config.php for themes to display properly. However, this requires that the clients have working DNS, which means three things:		** There is a subtle problem: the hostname of the node ($config['site']['server'] = 'name of node here';) must be set correctly in config.php for themes to display properly. However, this requires that the clients have working DNS, which means three things:
	*** DNS (dnsmasq) must be functional on the node.		*** <strike>DNS (dnsmasq) must be functional on the node.</strike>
	*** Clients must have hostnames configured by the node.		*** <strike>Clients must have hostnames configured by the node.</strike>
	*** Clients must have DNS configured as the node it got its information from so that hostnames can be resolved properly.		*** <strike>Clients must have DNS configured as the node it got its information from so that hostnames can be resolved properly.</strike>

	* Write a web app that (de-)configures gateway mode for babeld. I think it's a matter of pushing a route to 0.0.0.0 or not, have to read up on it.		* <strike>Write a web app that (de-)configures gateway mode for babeld. I think it's a matter of pushing a route to 0.0.0.0 or not, have to read up on it.</strike>

	* <strike>Installed the pre-converted MySQL Porteus package from the distro-download archive.</strike>		* <strike>Installed the pre-converted MySQL Porteus package from the distro-download archive.</strike>

← Older revision		Revision as of 18:27, 1 October 2011
Line 46:		Line 46:
	** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.		** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.

	* Install [https://github.com/Pita/etherpad-lite etherpad-lite] on my development instance		* <strike>Install [https://github.com/Pita/etherpad-lite etherpad-lite] on my development instance</strike>
	** <strike>[http://slackbuilds.org/repository/13.37/network/node/ requires node.js, for which there exists a Slackpack]</strike>		** <strike>[http://slackbuilds.org/repository/13.37/network/node/ requires node.js, for which there exists a Slackpack]</strike>
	*** <strike>build a Slackpack of node.js, convert into Porteus package, check everything into SVN</strike>		*** <strike>build a Slackpack of node.js, convert into Porteus package, check everything into SVN</strike>
	** write an initscript that can start up Etherpad-lite when called by the control panel		** <strike>write an initscript that can start up Etherpad-lite when called by the control panel</strike>
	** will have to be controlled by the control panel, store its configuration in a database		** will have to be controlled by the control panel, store its configuration in a database
	** write a sub-config file for Apache that passes through the /pad URL to localhost:9001		** write a sub-config file for Apache that passes through the /pad URL to localhost:9001
	** requires [http://npmjs.org NPM]		** <strike>requires [http://npmjs.org NPM]</strike>
	*** that will need to be packaged and checked in separately, I think.		*** that will need to be packaged and checked in separately, I think.
	*** run it in verbose mode to keep an eye on it		*** run it in verbose mode to keep an eye on it
	*** if it installs more stuff, we should bundle the whole mess into the NPM Porteus package		*** if it installs more stuff, we should bundle the whole mess into the NPM Porteus package
	** really should run as an unprivileged user		** <strike>really should run as an unprivileged user</strike>
	** really should listen on the loopback interface only		** really should listen on the loopback interface only
	** pay attention to the [https://github.com/Pita/etherpad-lite/wiki/How-to-put-Etherpad-Lite-behind-a-reverse-Proxy reverse-proxy howto]		** pay attention to the [https://github.com/Pita/etherpad-lite/wiki/How-to-put-Etherpad-Lite-behind-a-reverse-Proxy reverse-proxy howto]
	** have to start it by hand a few times to figure out how to automate and package it		** <strike>have to start it by hand a few times to figure out how to automate and package it</strike>

	* <strike>install status.net on my development instance</strike>		* <strike>install status.net on my development instance</strike>

← Older revision		Revision as of 19:25, 28 September 2011
Line 1:		Line 1:
	Stuff will be <strike>stricken out</strike> as I finish it. If anyone wants to jump in and help me with this, by all means do so, just put your initials at the end so I know who did what.		Stuff will be <strike>stricken out</strike> as I finish it. If anyone wants to jump in and help me with this, by all means do so, just put your initials at the end so I know who did what.

	In no particular order, this is the stuff I want to accomplish ~~over Labor Day weekend~~:		In no particular order, this is the stuff I want to accomplish:

	* <strike>[http://carroll.cac.psu.edu/pub/linux/distributions/slackware/slackware-13.37/slackware/n/ Official Slackware g package]</strike>		* <strike>[http://carroll.cac.psu.edu/pub/linux/distributions/slackware/slackware-13.37/slackware/n/ Official Slackware g package]</strike>
	** <strike>Default webroot is /srv/httpd/htdocs.</strike>		** <strike>Default webroot is /srv/httpd/htdocs.</strike>
	** Will need to rework module to clear out /var/www. We won't need that stuff.		** Will need to rework module to clear out /var/www. We won't need that stuff.
	** Custom config files are a given. I guess this pushes us back to using separate config files for each app.		** <strike>Custom config files are a given. I guess this pushes us back to using separate config files for each app.</strike>
	** Comment out authn, authz, dumpio_module, ldap_module, usertrack_module, proxy*, dav_module, status_module, cgi_module, status_module, cgi_module, dav_fs_module, vhost_alias_module, imagemap_module, userdir_module in /etc/httpd/httpd.conf.		** Comment out authn, authz, dumpio_module, ldap_module, usertrack_module, proxy*, dav_module, status_module, cgi_module, status_module, cgi_module, dav_fs_module, vhost_alias_module, imagemap_module, userdir_module in /etc/httpd/httpd.conf.
	** <strike>Uncomment ssl_module.</strike>		** <strike>Uncomment ssl_module.</strike>
Line 18:		Line 18:
	** Look through the list of extensions in php.ini and turn all of the unnecessary ones off.		** Look through the list of extensions in php.ini and turn all of the unnecessary ones off.
	*** calendar, ldap.		*** calendar, ldap.
	**** Is SQLite enabled? Check on this.		**** <strike>Is SQLite enabled? Check on this.</strike> Yes!

	* Write a web app for the control panel that		* Write a web app for the control panel that
	** store its configuration in a database		** store its configuration in a database
	** move sub-config files for Apache that represent PHP apps into and out of the /etc/httpd/enabled_apps directory		** <strike>move sub-config files for Apache that represent PHP apps into and out of the /etc/httpd/enabled_apps directory</strike>
	** force Apache to reload its config files every time an app is (de-)configured		** force Apache to reload its config files every time an app is (de-)configured
	* <strike>Write an initscript that</strike>		* <strike>Write an initscript that</strike>
Line 42:		Line 42:
	** will need its UI tweaked to be more mobile-friendly		** will need its UI tweaked to be more mobile-friendly
	** Create a crypto.cat Porteus package and check it into SVN		** Create a crypto.cat Porteus package and check it into SVN
	** index.php needs to be edited to remove the 'donate' DIV. Nothing personal, Kaepora, but we need to keep external links to a minimum because Byzantium meshes will probably be isolated from the global Net most of the time. You'll still get credit.		** <strike>index.php needs to be edited to remove the 'donate' DIV. Nothing personal, Kaepora, but we need to keep external links to a minimum because Byzantium meshes will probably be isolated from the global Net most of the time. You'll still get credit.</strike>
	** <strike>Change the default names in index.php into something more generic.</strike>		** <strike>Change the default names in index.php into something more generic.</strike>
	** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.		** Figure out where chats (value of $data, defaulting to /srv/data) are when that directory doesn't exist (it doesn't in my development VM) and either make it impossible for chat data to be cached to disk or write a daemon that shreds files older than 10 minutes or so for security.

	* Install [https://github.com/Pita/etherpad-lite etherpad-lite] on my development instance		* Install [https://github.com/Pita/etherpad-lite etherpad-lite] on my development instance
	** [http://slackbuilds.org/repository/13.37/network/node/ requires node.js, for which there exists a Slackpack]		** <strike>[http://slackbuilds.org/repository/13.37/network/node/ requires node.js, for which there exists a Slackpack]</strike>
	*** build a Slackpack of node.js, convert into Porteus package, check everything into SVN		*** <strike>build a Slackpack of node.js, convert into Porteus package, check everything into SVN</strike>
	** write an initscript that can start up ~~crypto.cat~~ when called by the control panel		** write an initscript that can start up Etherpad-lite when called by the control panel
	** will have to be controlled by the control panel, store its configuration in a database		** will have to be controlled by the control panel, store its configuration in a database
	** write a sub-config file for Apache that passes through the /pad URL to localhost:9001		** write a sub-config file for Apache that passes through the /pad URL to localhost:9001
Line 77:		Line 77:
	*** Clients must have DNS configured as the node it got its information from so that hostnames can be resolved properly.		*** Clients must have DNS configured as the node it got its information from so that hostnames can be resolved properly.

	* Write a dependency manager for apps
	** some web apps require MySQL, some don't
	** only start MySQL if it's not running already for the ones that don't
	* Write a web app that (de-)configures gateway mode for babeld. I think it's a matter of pushing a route to 0.0.0.0 or not, have to read up on it.		* Write a web app that (de-)configures gateway mode for babeld. I think it's a matter of pushing a route to 0.0.0.0 or not, have to read up on it.

	* <strike>Installed the pre-converted MySQL Porteus package from the distro-download archive.</strike>		* <strike>Installed the pre-converted MySQL Porteus package from the distro-download archive.</strike>
	** Need to pre-configure MySQL for small-ish systems		** <strike>Need to pre-configure MySQL for small-ish systems</strike>
	** Need to pre-harden MySQL		** Need to pre-harden MySQL
	** Change the default password to something else.		** Change the default password to something else.

← Older revision		Revision as of 22:00, 17 September 2011
Line 61:		Line 61:
	** have to start it by hand a few times to figure out how to automate and package it		** have to start it by hand a few times to figure out how to automate and package it

	* install status.net on my development instance		* <strike>install status.net on my development instance</strike>
	** <strike>requires PHP, MySQL</strike>		** <strike>requires PHP, MySQL</strike>
	** <strike>PHP must have support for Curl, XMLwriter, MySQL, GD, mbstring, gettext (all required for status.net), SQLite (to read configuration databases)</strike>		** <strike>PHP must have support for Curl, XMLwriter, MySQL, GD, mbstring, gettext (all required for status.net), SQLite (to read configuration databases)</strike>
	** will need to pre-configure it for security and usability		** will need to pre-configure it for security and usability
	** Need to hack the mnml theme to be more mobile friendly.		** Need to hack the mnml theme to be more mobile friendly.
	** Delete the unneeded themes and add-ons.		** Delete the unneeded themes and add-ons to save space, reduce potential attack surface.
	** Add-ons are not enabled by default. To turn one on you have to manually edit config.php and add lines for each one. This is moderately safe. Consider making config.php read-only with instructions for editing it later?		** Add-ons are not enabled by default. To turn one on you have to manually edit config.php and add lines for each one. This is moderately safe. Consider making config.php read-only with instructions for editing it later?
	** <strike>will need to write a sub-config file for Apache</strike>		** <strike>will need to write a sub-config file for Apache</strike>
Line 72:		Line 72:
	** configure to make it easy to set up accounts on a node - no e-mail verification		** configure to make it easy to set up accounts on a node - no e-mail verification
	** enable image upload and display		** enable image upload and display
			** There is a subtle problem: the hostname of the node ($config['site']['server'] = 'name of node here';) must be set correctly in config.php for themes to display properly. However, this requires that the clients have working DNS, which means three things:
			*** DNS (dnsmasq) must be functional on the node.
			*** Clients must have hostnames configured by the node.
			*** Clients must have DNS configured as the node it got its information from so that hostnames can be resolved properly.

	* Write a dependency manager for apps		* Write a dependency manager for apps