====== PHP Systems ====== PHP is supported by a number of machines provided by a number of generous sponsors. This is a basic inventory of those machines and what services they provide. Note: this list is not (yet) up to date. There is also information in the [[https://github.com/php/systems|systems repo]] on GitHub that may be more up to date. Or out of date in different ways. It's all very exciting and in the process of being updated. ===== Machine Access ===== Ansible maintained properties, some of which live on the same machine: * ''jump-ams-1.internal.php.net'' (European Jump Host) * ''jump-sfo-1.internal.php.net'' (American Jump Host) * ''downloads.internal.php.net'' (QA builds and Windows Downloads) * ''museum.internal.php.net'' (Old downloads) * ''shared.internal.php.net'' (Shared CSS files) * ''wiki.internal.php.net'' (The PHP wiki) ==== SSH jump hosts ==== People with SSH accounts on the above machines must use one of our jump hosts to connect to them. Add this to your ''~/.ssh/config'': Host jump*.internal.php.net ProxyJump none # IdentityFile /home/derick/.ssh/phpservers-ed25519 Host *.internal.php.net ProxyJump @jump-ams-1.internal.php.net User # IdentityFile /home/derick/.ssh/phpservers-ed25519 Replace ''ams-1'' with ''sfo-1'' depending on where you are. The jump hosts require 2FA using Google Authenticator. Tip, you can tell ssh to use a php-specific key for php-related things by adding something like this to your ''Host *.internal.php.net'' and ''Host jump*.internal.php.net'' sections: ''IdentityFile /home/derick/.ssh/phpservers-ed25519''. These lines are currently commented out in the snippet above. Reference: https://en.wikibooks.org/wiki/OpenSSH/Cookbook/Proxies_and_Jump_Hosts === Old Infra Jump Hosts === * [[systems/downloads|downloads.php.net]] (downloads.php.net, shared.php.net) * [[systems/bk2|bk2.php.net]] * [[systems/bugs.php.net|bugs.php.net]] * [[systems/euk2|euk2.php.net]] (doc, docs) * [[systems/euk3|euk3.php.net]] (PEAR) * [[systems/idle|idle.php.net]] (IRC) * [[systems/museum|museum.php.net]] (Museum) * [[systems/pecl|pecl.php.net]] * [[systems/php-git1|php-git1.php.net]] (git.php.net) * [[systems/php-jump2|php-jump2.php.net]] (europe.jump.php.net) * [[systems/php-jump3|php-jump3.php.net]] * [[systems/php-jump4|php-jump4.php.net]] (americas.jump.php.net) * [[systems/php-smtp2|php-smtp2.php.net]] (MX) * [[systems/php-web4|php-web4.php.net]] (web) * [[systems/svn2|svn2.php.net]] (SVN, PHP-GTK, people.php.net, talks.php.net) * [[systems/wiki|wiki.php.net]] (wiki) * [[systems/windows|windows.php.net]] People with SSH accounts on the above machines must use one of our jump hosts to connect to them. Add this to your ''~/.ssh/config'': Host git.php.net americas.jump.php.net europe.jump.php.net ProxyJump none Port 9022 Host *.php.net ProxyJump @europe.jump.php.net:9022 User Replace ''americas'' with ''europe'' depending on where you are. The jump hosts require 2FA using Google Authenticator. ==== 2FA setup instructions ==== - Install the [[https://github.com/google/google-authenticator-libpam|google-authenticator]] package on a local machine (I used a docker container to avoid contaminating my real machine, but it's probably not necessary). - Run ''google-authenticator'' command. You need to select to use time based tokens and rate limiting if asked. This will output a QA code that you can use to create a new entry in your OTP app (Google Authenticator or Authy work). - Email the ''.google_authenticator'' file and your SSH key file to ''systems@php.net''. - Wait until you have a confirmation that it has been set up. ===== Machine Status ===== We use [[http://www.nagios.org/|Nagios]] and [[systems:munin|Munin]] to monitor the machines. There is a [[http://monitoring.php.net/status/|public network status]] page as well as a [[http://monitoring.php.net/nagios/|protected area]] (log in with your SVN credentials) with more detailed information. The Munin web interface is [[http://monitoring.php.net/munin/|available here]]. ===== FreeBSD upgrades ===== Note regarding FreeBSD machines: Upgrades should be performed according to [[http://main.php.net/fbsd_upgrade.txt|this guide]]. ===== Social Networks ===== * [[systems:social|Social Networks]] ===== IRC/Discord ===== * [[systems:irc|IRC and Discord]] ===== History ===== * [[systems/rl2|rl2.php.net]] * [[systems/k1|k1.php.net]] (rmtools) * [[systems/oti1|oti1.php.net]] (CHM docs) * [[systems/oti2|oti2.php.net]] * [[systems/dp1|dp1.php.net]] (PPC testing) * [[systems/pb1|pb1.php.net]] (mailing lists) * [[systems/sc2|sc2.php.net]] (rsync) * [[systems/osu1php|osu1php.php.net]] (master) * [[systems/nex2|nex2.php.net]] (gcov) * [[systems/euk1|euk1.php.net]] (PEAR) * [[systems/ez1|ez1.php.net]] * [[systems/micfo1|micfo1.php.net]] * [[systems/micfo2|micfo2.php.net]] * [[systems/nex1|nex1.php.net]] * [[systems/osu1|osu1.php.net]] * [[systems/ovh|ovh.php.net]] * [[systems/pb11|pb11.php.net]] (edit.php.net) * [[systems/pb12|pb12.php.net]] * [[systems/php-jump1|php-jump1.php.net]] * [[systems/rl|rl.php.net]] (old wiki) * [[systems/rs1|rs1.php.net]] * [[systems/sc1|sc1.php.net]] * [[systems/sgrv1|sgrv1.php.net]] * [[systems/sgvr2|sgrv2.php.net]] (old bugs.php.net) * [[systems/sgrv3|sgrv3.php.net]] (pear.php.net testing infrastructure) * [[systems/sgrv4|sgrv4.php.net]] (old shared.php.net) * [[systems/sp1|sp1.php.net]] * [[systems/y1|y1.php.net]] * [[systems/y2|y2.php.net]] * [[systems/y3|y3.php.net]] * [[systems/sp2|sp2.php.net]] (OpenGrok, Munin) * [[systems/bk1|bk1.php.net]] * [[systems/sph1|sph1.php.net]] (qa, snaps) * [[systems/edit-new|edit.php.net]] * [[systems/php-web2|php-web2.php.net]] (web)