Page History

...

On a new build, old or new hardware

1.  check if firmware updates need to happen

   - BIOS, IDRAC, DISK/PERC

2. Determine the pxeboot-kickstart to use. There are many!

   and we should agree on which one to use. I'd recommend we make that part

   of the netdb record the way we do with some newer builds - I think it

   helps. See for instance comet2

   pxekickit: CentOS7/default.netboot.CentOS7.linux_desktop_2

3. Determine is there anything special about this machine that needs to be considered

   If this is rhel[56] node with a taylor.opts take a look and see if there

   is a one to one correstpondence between what taylor.opts is doing on the

   node and what we can do in chef.  For example, if pre-cheffed node is

   using automounter a conversation needs to happen.

References:

1. SLAC minimum security requirements:
   https://docs.slac.stanford.edu/sites/pub/Publications/701-I02-001-00_Min_Sec_Req_for_Comp.pdf

2. Stanford minimum security requirements:  
   https://uit.stanford.edu/guide/securitystandards

...