TSL

TSL Todo list

• Set BIOS passwords
• Lock down network ports (MAC address)
• Install replaced / fixed computers
• Roll out Karmic

Current problems

Power Sockets

pc44

Security Lug on PC

pc44

Low Memory (256M)

pc55

Known Unreliable machines

pc59

Unknown (2 Oct 2009)

pc09

Bad network card, sensitive to cable position (2 Oct 2009)

pc69

Thermal event (9 Oct 2009)

pc07

BIOS Battery? (9 Oct 2009)

pc21

BIOS Battery? (9 Oct 2009)

pc76

Cold boot reqd (16 Oct 2009)

pc46

Broken facade (16 Oct 2009)

pc16

BIOS Battery? (16 Oct 2009)

Row 1

Working

7

Power

pc48

Row 2

Working

8

Row 3

Working

8

Row 4

Working

8

Row 5

Working

6

Missing

2

Row 6

Working

4

Long Row 1

(by windows)

Working

14

Missing

4

Long Row 2

Working

15

Missing

1

Wishlist for next rollout

arc-colors community-themes gdm-themes gnome-backgrounds gnome-colors gnome-themes gnome-themes-extras gnome-themes-more metacity-themes shiki-colors zgegblog-themes nexuiz

Image

Paste the source of the following into:

sed -ne 's/^* // p' | tr '\n' ' '; echo

to get a list you can install

Not available in Karmic, but wanted in future

• eclipse-cdt
• eclipse-pydev
• dillo
• trayer

Games

• bsdgames
• bzflag
• dosbox
• einstein
• frozen-bubble
• gnome-games
• gtetrinet
• kobodeluxe
• neverball
• nexuiz
• openarena
• openttd
• pingus
• scummvm
• teeworlds
• tetrinet-client
• wesnoth
• wormux
• xmoto

Themes

• arc-colors
• community-themes
• gdm-themes
• gnome-backgrounds
• gnome-colors
• gnome-themes
• gnome-themes-extras
• gnome-themes-more
• metacity-themes
• shiki-colors

Editors

• anjuta
• bluefish
• codeblocks
• eclipse
• eclipse-cdt
• eclipse-pydev
• emacs
• emacs-snapshot
• emacs-goodies-el
• eric
• geany
• idle
• idle-python2.5
• idle3
• joe
• kate
• kdevelop
• lyx
• monodevelop
• monodevelop-java
• netbeans
• scite
• spe
• vim-gtk
• vim-nox
• vim-latexsuite
• vim-vimoutliner
• xemacs21

Docs

• ant-doc
• apache2-doc
• aspell-doc
• autoconf-doc
• automake1.9-doc
• bash-doc
• cdrkit-doc
• ddd-doc
• devhelp
• diveintopython
• doxygen-doc
• flex-doc
• gawk-doc
• gcc-doc
• gdb-doc
• git-doc
• glut-doc
• gmp-doc
• gnuplot-doc
• graphviz-doc
• gtkmm-documentation
• haskell-doc
• jlint-doc
• libboost-doc
• manpages-dev
• octave-doc
• perl-doc
• php-doc
• python-doc
• python-matplotlib-doc
• python-numpy-doc
• python-qt4-doc
• qt4-doc
• r-doc-html
• rubybook
• splint-doc-html
• stl-manual
• sun-java6-doc
• tidy-doc
• xchm
• zsh-doc

Version Control

• cvs
• bzr
• bzr-gtk
• bzr-svn
• bzrtools
• darcs
• git-core
• meld
• mercurial
• subversion
• subversion-tools
• svk

Debugging

• ddd
• d-feet
• lsof
• ltrace
• strace
• valgrind

Programming

• ant
• ant-optional
• bicyclerepair
• bison
• bpython
• bsh
• build-essential
• clisp
• cmake
• csstidy
• devscripts
• dh-make
• docbook
• flex
• freeglut3-dev
• fpc
• gcc-4.1
• gdc
• g++-4.1
• gengetopt
• ghc
• gnome-devel
• gnuplot
• graphviz
• ipython
• jlint
• kiki
• libboost-dev
• libcurl4-openssl-dev
• libghc6-xmonad-dev
• libgtkmm-2.4-dev
• libphobos-4.2-dev
• libqt4-dev
• libqwt-dev
• libsdl-console-dev
• libsdl-dev
• libsdl-gfx1.2-dev
• libsdl-image1.2-dev
• libsdl-mixer1.2-dev
• libsdl-net1.2-dev
• libsdl-pango-dev
• libsdl-sound1.2-dev
• libsdl-stretch-dev
• libsdl-ttf2.0-dev
• linklint
• malbolge
• mesa-utils
• mono-debugger
• octave
• perltidy
• php5-cli
• php5-tidy
• posh
• pyflakes
• pylint
• python3
• python-all-dev
• python-beautifulsoup
• python-celementtree
• python-configobj
• python-crypto
• python-dateutil
• python-django
• python-fuse
• python-gmpy
• python-html5lib
• python-jinja
• python-matplotlib
• python-profiler
• python-psyco
• python-pydot
• python-pygame
• python-pysqlite2
• python-qt4
• python-sphinx
• python-simplejson
• python-scipy
• python-soappy
• python-sqlalchemy
• python-turbogears
• python-twisted
• python-visual
• qt4-designer
• r-recommended
• ruby-full
• ruby-gnome2
• ruby-kde4
• speedcrunch
• splint
• sun-java6-jdk
• sun-java6-plugin
• tidy
• texlive-full
• wxmaxima

Command Line

• ascii
• ack-grep
• cadaver
• clusterssh
• cowsay
• curl
• dot2tex
• elinks
• figlet
• fortune-mod
• hping3
• htop
• indent
• imagemagick
• irssi
• links
• links2
• lftp
• lynx
• manpages
• moreutils
• mtr-tiny
• openssl
• p7zip-full
• p7zip-rar
• pdfjam
• pdftk
• poppler-utils
• pssh
• pwgen
• qemu
• quota
• rsync
• screen
• sl
• socat
• star
• toilet
• traceroute
• tsocks
• units
• unrar
• unzip
• w3m
• whois
• zsh

System

• alien
• cntlm
• fusedav
• fuseiso
• fusesmb
• ldap-auth-client
• ldap-utils
• ncpfs
• nis
• nfs-common
• openntpd
• openssh-server
• smartmontools
• sshfs
• tmpreaper
• wbritish

Databases

• mysql-client
• mysql-doc-5.0
• libmysqlclient-dev
• libmysql++-dev
• libpg-java
• libpq-dev
• libpqxx-dev
• libsqlite-dev
• php5-mysql
• php5-sqlite
• php5-pgsql
• postgresql-client
• postgresql-doc
• python-mysqldb
• python-psycopg2
• sqlite3
• sqlite3-doc

Other

• abiword
• amarok
• blender
• dia
• dwm-tools
• epiphany-browser
• flashplugin-nonfree
• fluxbox
• gajim
• gnumeric
• gwibber
• impressive
• inkscape
• konsole
• konqueror
• konversation
• linuxdcpp
• midori
• openoffice.org-draw
• openoffice.org-pdfimport
• pcmanfm
• pdfedit
• pidgin-plugin-pack
• planner
• rdesktop
• scribus
• ubuntu-restricted-extras
• wine
• yakuake
• xchat
• xtightvncviewer
• xmonad

Multimedia

• ffmpeg
• non-free-codecs
• libavdevice-unstripped-52
• libavfilter-unstripped-0
• libavformat-unstripped-52
• mencoder
• mplayer
• vlc
• youtube-dl

Fonts

• ttf-aenigma
• ttf-atarismall
• ttf-beteckna
• ttf-breip
• ttf-droid
• ttf-dustin
• ttf-ecolier-court
• ttf-ecolier-lignes-court
• ttf-engadget
• ttf-essays1743
• ttf-f500
• ttf-fifthhorseman-dkg-handwriting
• ttf-georgewilliams
• ttf-goudybookletter
• ttf-inconsolata
• ttf-isabella
• ttf-jsmath
• ttf-junicode
• ttf-konatu
• ttf-larabie-deco
• ttf-larabie-straight
• ttf-larabie-uncommon
• ttf-linux-libertine
• ttf-marvosym
• ttf-mscorefonts-installer
• ttf-ocr-a
• ttf-oflb-asana-math
• ttf-oflb-euterpe
• ttf-radisnoir
• ttf-sil-gentium
• ttf-sil-gentium-basic
• ttf-sjfonts
• ttf-staypuft
• ttf-summersby
• ttf-tomsontalks
• ttf-tuffy
• ttf-ubuntu-title
• ttf-unifont
• ttf-xfree86-nonfree

Post Install

Get rid of:

• any MTA
• old kernels
• network-manager, gdm-guest-session
• shut down unnecessary services
• Spring clean /etc/xdg/autostart
• Use the PolicyKit Authorizations manager to disable suspend and hibernate for normal users.
• rm /etc/hostname
• Remove the 127.0.1.1 line from /etc/hosts

Configure:

• /etc/apt/sources.list

deb http://ftp.leg.uct.ac.za/ubuntu jaunty main universe multiverse restricted
deb http://ftp.leg.uct.ac.za/ubuntu jaunty-updates main universe multiverse restricted
deb http://ftp.leg.uct.ac.za/ubuntu jaunty-security main universe multiverse restricted
deb http://ftp.leg.uct.ac.za/medibuntu jaunty free non-free
deb http://tsl.uct.ac.za/repo tsl main

• /etc/network/interfaces

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp

• /etc/openntpd/ntpd.conf

server ntp1.uct.ac.za
server ntp2.uct.ac.za
server ntp3.uct.ac.za
server dreamcoat.che.uct.ac.za
server emperor.che.uct.ac.za

• visudo

Defaults        env_reset
root    ALL=(ALL) ALL
%admin ALL=(ALL) NOPASSWD: ALL

• /root/.ssh/authorized_keys

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw4nGVrw+0uJpjJecuL8qjhm0O67ZrXux79fgN2ChdJoiB47KrIfgbWbpdHQiBWWDQjm9ttyf48/kLWwWbSW/DYKxRAH2vSCbpPaabqHB+ixaDKX9Vh8S0fNiOrZnWLwKmgnsdUV08ivk25k5d4NFSjmKvr6Dsp8RyCr+1sZfpdKOu+J1thwlNVkOFJxKxWwezgfflc/+KGbhFCH8Ya0hzellYQiX3px659Ydx4PdSGhT/Td7MK0onC1lK5X2hU3QSr49fwji06lAig1dpHeS4dnOFu2gxFRvlLZqmj31rwIVXQqoZyiIUuAs9EnFKfUVR34k5v20baXQ1bRqd4HgEQ== TSL Key

• /etc/tmpreaper.conf

SHOWWARNING=false

• /etc/update-manager/meta-release

URI = http://ftp.leg.uct.ac.za/pub/linux/ubuntu-changelogs/leg/meta-release
URI_LTS = http://ftp.leg.uct.ac.za/pub/linux/ubuntu-changelogs/leg/meta-release-lts

• /etc/yp.conf

ypserver 137.158.56.6

• /etc/nsswitch.conf

passwd:         nis files
group:          compat nis files
shadow:         nis files

• /etc/fstab:

tsl.uct.ac.za:/home	/home	nfs	rw,sync		0	0

• /etc/ldap.conf:

uri ldaps://ucttldap1.uct.ac.za/ ldaps://ucttldap2.uct.ac.za/ ldaps://ucttldap3.uct.ac.za/
base  ou=main, o=uct
pam_filter objectclass=ndsloginproperties
pam_login_attribute cn
pam_password nds
tls_checkpeer no

• /etc/security/group.conf

*;*;*;Al0000-2400; audio,floppy,video,cdrom,plugdev,fuse

• /etc/firefox-3.[05]/pref/firefox.js

// UCT Proxy
pref("network.proxy.autoconfig_url", "http://www.uct.ac.za/cache.pac");
pref("network.proxy.type", 2);
pref("browser.cache.disk.capacity", 3000);

• /etc/firefox-3.[05]/pref/ubufox.js

pref("browser.startup.homepage", "file:/etc/firefox-homepage.properties");

• /etc/firefox-homepage.properties

browser.startup.homepage=http://www.tsl.uct.ac.za/

• sudo -u gdm gconftool-2 --set --type boolean /apps/gdm/simple-greeter/disable_user_list true
• /etc/gconf/gconf.xml.mandatory/%gconf-tree.xml

<?xml version="1.0"?>
 <gconf>
 	<dir name="apps">
 		<dir name="nautilus">
 			<dir name="preferences">
 				<entry name="thumbnail_limit" mtime="1252410114" type="int" value="512000"/>
 			</dir>
 		</dir>
 	</dir>
 	<dir name="desktop">
 		<dir name="gnome">
 			<dir name="applications">
 				<dir name="window_manager">
 					<entry name="default" mtime="1252403218" type="string">
 						<stringvalue>/usr/bin/metacity</stringvalue>
 					</entry>
 				</dir>
 			</dir>
 		</dir>
 	</dir>
 	<dir name="system">
 		<dir name="http_proxy">
 			<entry name="ignore_hosts" mtime="1252519008" type="list" ltype="string">
 				<li type="string">
 					<stringvalue>localhost</stringvalue>
 				</li>
 				<li type="string">
 					<stringvalue>127.0.0.0/8</stringvalue>
 				</li>
 				<li type="string">
 					<stringvalue>*.local</stringvalue>
 				</li>
 				<li type="string">
 					<stringvalue>137.158.0.0/16</stringvalue>
 				</li>
 				<li type="string">
 					<stringvalue>*.uct.ac.za</stringvalue>
 				</li>
 			</entry>
 			<entry name="host" mtime="1252518985" type="string">
 				<stringvalue>localhost</stringvalue>
 			</entry>
 			<entry name="use_http_proxy" mtime="1252519071" type="bool" value="true"/>
 		</dir>
 		<dir name="proxy">
 			<entry name="secure_port" mtime="1252518992" type="int" value="8080"/>
 			<entry name="secure_host" mtime="1252518987" type="string">
 				<stringvalue>localhost</stringvalue>
 			</entry>
 			<entry name="mode" mtime="1252518982" type="string">
 				<stringvalue>manual</stringvalue>
 			</entry>
 		</dir>
 	</dir>
 </gconf>

• /etc/cntlm.conf

Domain          WF
Proxy           campusnet.uct.ac.za:8080
Listen          8080
NTLMToBasic     yes

Groupwise

• extract to /tmp/ somewhere
• alien novell-groupwise-gwcheck-8.0.0HP-87328.i586.rpm
• dpkg -i novell-groupwise-gwclient_8.0.0HP-87329_i386.deb
• rm /opt/novell/groupwise/client/jre/
• ln -s /usr/lib/jvm/java-6-sun/jre /opt/novell/groupwise/client/
• Edit /usr/share/applications/gwclient.desktop

Exec=/opt/novell/groupwise/client/bin/groupwise --ipa=ngwnameserver.uct.ac.za

JGrasp

• Extract to /opt/jgrasp
• ln -s /opt/jgrasp/bin/jgrasp /usr/local/bin
• /usr/local/share/applications/jgrasp.desktop

[Desktop Entry]
Name=jGRASP IDE
Comment=Integrated Development Environment
Exec=/usr/local/bin/jgrasp
Icon=/opt/jgrasp/data/gric48.png
Categories=Development;Java;IDE;
Terminal=false
Type=Application
StartupNotify=true

ArgoUML

• Extract to /opt/argouml-0.28.1/
• unzip -j argouml.jar org/argouml/Images/ArgoIcon32x32.png
• ln -s /opt/argouml-0.28.1/argouml.sh /usr/local/bin/argouml
• /usr/local/share/applications/argouml.desktop

[Desktop Entry]
Name=ArgoUML
Comment=UML Modelling tool
Exec=/usr/local/bin/argouml
Icon=/opt/argouml-0.28.1/ArgoIcon32x32.png
Terminal=0
Type=Application
Categories=Java;Development;

CUDA Emulator

• Download cuda-toolkit from nvidia
• Install to /opt
• ln -s /opt/cuda/bin/* /usr/local/bin

Pre-imaging

• /usr/local/sbin/post-image

#!/bin/sh -e

echo Generating new OpenSSH host keys
rm /etc/ssh/ssh_host_[rd]sa_key*
ssh-keygen -q -f /etc/ssh/ssh_host_rsa_key -N  -t rsa
ssh-keygen -q -f /etc/ssh/ssh_host_dsa_key -N  -t dsa
rm /etc/rcS.d/S99post-image

• ln -s /usr/local/sbin/post-image /etc/rcS.d/S99post-image
• Remove the two lines from /etc/udev/rules.d/70-persistent-net.rules