minutes of ssdteam meeting 17/02/2010 @ montgallet

  • offer: i7-2T at http://www.kimsufi.it/ks/
    • adding: professional support and a /30 block (4 addresses)
    • blocks of IP addresses must be justified and can be denied
    • total: 942.15 €
  • social contract -> by mail (zack finalizes the text)
  • better name -> assignments for everybody !
  • initial setup: decide a date just after the "mixte" unvealing
  • IPs -> see above, block of 4
  • KVM vs XEN -> ask ovh.it if the processor has Intel VT
  • core services on the basic host
    • RAID 1 + LVM (above)
    • Debian stable (64 bits), no backports (except KVM-related), no volatile
    • virtualization infrastructure: -> give a try to virt-*
    • ssh
    • uptimed
    • munin node
    • etckeeper (+ sudo)
  • shared guest
    • nfs export (?) if needed
    • apache
    • postgresql
    • openvpn
    • bind
    • dovecot
    • postfix
    • spamassassin
    • postgrey
    • etckeeper (+ sudo)
  • encryption
    • no encryption on the basic host
    • we encrypt the mail partition of the shared guest
  • memory partitioning per vms
    • 2 GB -> shared guest
    • 1.4 GB -> personal guest
    • 1.4 GB -> personal guest
    • 1.4 GB -> personal guest
    • 1.4 GB -> personal guest
    • (~ 400 MB remaining)
    • additionally, each vm can swap on the real disk
  • questions to ask:
    • can IP blocks be denied?
    • does i7-2T mini have Intel VT? -> yes