= Meltdown Mitigation = The patched jessie kernels have not been released (see [https://security-tracker.debian.org/tracker/CVE-2017-5754 this debian page for status info]) however... the back ported stretch kernel has been released. == How to upgrade == Check disk space on /. {{{ df -h / }}} If it's a 3.7GB partition, then upgrading the kernel may cause the root partition to fill up. If you have space available in the volume group (`vgs`), then increase root to 5GB: {{{ lvresize --size 5GB vg_$(hostname)0/root resize2fs /dev/mapper/vg_$(hostname)0-root }}} Then upgrade: {{{ apt-get update && apt-get install linux-image-amd64/jessie-backports linux-image-4.9.0-0.bpo.5-amd64/jessie-backports linux-base/jessie-backports shutdown -h }}} When prompted to restart services, you can say no to all services (since they will all be restarted when you shutdown the guest). After reboot, check with: {{{ 0 chavez:~# uname -a Linux chavez 4.9.0-0.bpo.5-amd64 #1 SMP Debian 4.9.65-3+deb9u2~bpo8+1 (2017-01-05) x86_64 GNU/Linux 0 chavez:~# }}} == Steps == * ~~[https://status.mayfirst.org/2018/1/ released service advisory]~~ * Upgrade and reboot all MOSH'es * Upgrade and reboot all other guests * Upgrade and reboot physical servers (wait for Jamie in case a colo trip is needed). == Server List == Here is the server list (in order). Please put your initials after a server that you are working on, then strike-out when it is completed. Once the service advisory is out, you don't have to wait for confirmation on IRC or any coordination - just start upgrading (provided we are in off hours). == MOSHES == * ~~albizu - jamie~~ * ~~annapurna - jaimev~~ * ~~annette - jamie~~ * ~~bety - jamie~~ * ~~biko - jaimev~~ * ~~binh - jaimev~~ * ~~boggs - jaimev~~ * ~~brown - jaimev~~ * ~~buffy - jaimev~~ * ~~chavez - jamie~~ * ~~chelsea - jaimev~~ * ~~clara - jaimev~~ * ~~claudette - jaimev~~ * ~~colin - JL~~ * ~~daza - jamie~~ * ~~debs - jamie~~ * ~~didier - jamie~~ * ~~dorothy - jamie~~ * ~~eagle - jaimev~~ * ~~ekpo - jaimev~~ * ~~ella - jaimev~~ * ~~emma - jaimev~~ * ~~erica - jaimev~~ * ~~floriberto~~ * ~~foucault - JL~~ * ~~gaspar - jamie~~ * ~~gilkey - jaimev~~ * ~~ginsberg - jaimev~~ * ~~goldman - jaimev~~ * ~~hashmi - jaimev~~ * ~~jacobs - jaimev~~ * ~~jones - jaimev~~ * ~~juanita - jaimev~~ * ~~julia - jaimev~~ * ~~june - jamie~~ * ~~kahlo - jaimev~~ * ~~kerr - jaimev~~ * ~~kinoy - jaimev~~ * ~~larkin - jaimev~~ * ~~lewis - jaimev~~ * ~~magon - jaimev~~ * ~~malcolm - jamie~~ * ~~mandela - jaimev~~ * ~~marx - jaimev~~ * ~~menchu - jaimev~~ * ~~molina - jaimev~~ * ~~mumia - jaimev~~ * ~~octavia - jamie~~ * ~~ossie - jaimev~~ * ~~pauline - jaimev~~ * ~~peery - jaimev~~ * ~~proudhon - jamie~~ * ~~randolph - jaimev~~ * ~~resnick - jaimev~~ * ~~rivera - jaimev~~ * ~~rodolpho - jaimev~~ * ~~roe - jaimev~~ * ~~rose - jaimev~~ * ~~rushdie - jaimev~~ * ~~sarah - jaimev~~ * ~~slaapbeen - dkg~~ * ~~smith - jaimev~~ * ~~sojourner - jaimev~~ * ~~stokely - jaimev~~ * ~~stone - jaimev~~ * ~~stoney - jaimev~~ * ~~susana - jaimev~~ * ~~tresca - jaimev~~ * ~~viewsic - jaimev~~ * ~~wolf - jaimev~~ * ~~yippie - jaimev~~ * ~~yser - jaimev~~ == Non MOSH guests == * ~~abernathy - jaimev~~ * ~~achebe - jaimev~~ * ~~acholonu - jaimev~~ * ~~allende - jaimev~~ * ~~assata - jaimev~~ * ~~augusto - jaimev~~ * ~~banksy - jaimev~~ * ~~barghouti - jaimev~~ * ~~belen - jaimev~~ * ~~borges - jaimev~~ * ~~cero - jaimev~~ * cesar - erq * chico - jamie * ~~cleveland - jaimev~~ * ~~deadeasy - jaimev~~ * ~~dee - jaimev~~ * ~~dolores - jaimev~~ * ~~dorvalina - jaimev~~ * ~~douglass - jaimev~~ * ~~elizabeth - jaimev~~ * ~~fuller - dkg~~ * ~~galeano - jaimev~~ * ~~gamiz - jamie~~ * ~~gil - jamie~~ * ~~graciela - jaimev~~ * ~~hammer - jaimev~~ * ~~hay - jamie~~ * ~~howard - srevilak~~ * ~~iz - jaimev~~ * ~~jojobe - jaimev~~ * juana - jamie * ~~keller - jaimev~~ * ~~kennedy - jamie~~ * ~~kramer - jaimev~~ * ~~leslie - jaimev~~ * ~~lucius - jaimev~~ * ~~marti - jaimev~~ * ~~mcchesney - jaimev~~ * ~~morales - jaimev~~ * ~~moses - jaimev~~ * ngugi - ross * olivera - jamie * ~~paul - srevilak~~ * ~~paulo - jamie~~ * ~~peltier - srevilak~~ * ~~ranciere - srevilak~~ * ~~rustin - srevilak~~ * saadawi - ross * ~~sankara - srevilak~~ * ~~septima~~ * ~~stallman - srevilak~~ * ~~toussaint - srevilak~~ (note: I gave all vgs free space to /. toussaint currently has 88% of a 1.1GB root partition used) * ~~woodhull - srevilak~~ * zimmermann == Physical servers == * ~~barron~~ * ~~cleaver~~ * ~~clr~~ * florence * ~~linda * ~~malaka~~ * ~~parsi~~ * ~~pietri~~ * vilma * wiwa * robideau - save for last (console server) * victoria - save for PTP * severo - save for PTP * gabriela - save for PTP * franz - sahara reporters, save for ross * minnie - save for monday (in sunset park office) * banks - save for monday (in sunset park office) * baubo - yes men, managed by koumbit