OSGeo - User contributions [en]

Osgeo3

2025-12-18T17:34:40Z

Cvvergara: changing phrase

'''decommissioned''' date: December 2025

'''Osgeo3''' is an Ubuntu 20.04 LTS machine administered by [[SAC]], hosted on [[SAC_Service_Status#Servers_at_OSL|OSU OSL servers]] for a long time. It in the past was running Ganeti, but was reformatted in March 2020, had fresh new disks put in and LXD installed for managing containers.

Up-to-date info about containers can be found (password-protected) in https://git.osgeo.org/gitea/sac/osgeo9/wiki/

== Hardware ==
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| Processors ||2 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache) (each processor has 4 cores for total of 8 cpus)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
loop0 7:0 0 91.4M 1 loop /snap/core/8689
loop1 7:1 0 67M 1 loop /snap/lxd/13901
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part /boot
`-sda2 8:2 0 1.8T 0 part
|-osgeo3-root 253:0 0 800G 0 lvm /
`-osgeo3-swap 253:1 0 32G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 1.8T 0 part
`-sdb9 8:25 0 8M 0 part
sdc 8:32 0 1.8T 0 disk
|-sdc1 8:33 0 1.8T 0 part
`-sdc9 8:41 0 8M 0 part
sdd 8:48 0 1.8T 0 disk
|-sdd1 8:49 0 1.8T 0 part
`-sdd9 8:57 0 8M 0 part
sde 8:64 0 1.8T 0 disk
|-sde1 8:65 0 1.8T 0 part
`-sde9 8:73 0 8M 0 part
sr0 11:0 1 1024M 0 rom

</pre>

<pre>
sdb,sdc,sdd,sdd form a zfs osgeo3_lxd partition (sdb,sdc) mirrors sdd,sdf for total lxd capacity of 3.62 TB
sda (composed of 2 1.8TB disks) is under hardware RAID1 - root lvm partition is 800GB, 1TB unallocated for future use
</pre>

== Setup ==
As of 2021-03 the ssh port of the main host (the physical server) is 2222 and there is only one non-root account on it
and can only be accessed via key access. Keys are deployed using [[AnsibleDeployment]] repo of gitea

It has an LXD installed from snap.

So to SSH - ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222

It has 2 public ips:

* 140.211.15.26 ( osgeo3.osgeo.osuosl.org ) = not currently mapped to anything aside from 2222 ssh) planned for disaster should say osgeo7 go down and all need to be remapped
* 140.211.15.6 web-osgeo3.osgeo.osuosl.org

For console access, you need to have OpenVPN installed and vpn config for OSUOSL.
Once connected it can be accessed via:

```
apt install ipmitool
ipmitool -I lanplus -H osgeo3.osuosl.oob -U tech_dev -P passwordhere sol activate
```
or web interface:

http://osgeo3.osuosl.oob

Some configurations of this machine are deployed using [[AnsibleDeployment]]
It was upgraded in 2021 from Ubuntu 18 to Ubuntu 20.04.

* Ubuntu [http://releases.ubuntu.com/20.04/ 20.04] [https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes (Release Notes)]. [https://git.osgeo.org/gitea/sac/osgeo3 more details about install steps]

==== Containers and Services ====

Refer to [[SAC Service Status#osgeo_3]]

[[Category:Infrastructure]]

Election 2025 Candidate Manifestos

2025-12-16T03:35:05Z

Cvvergara: Fixing original number to match limesurvey links

A space for the candidates for election to the Board to share some information about themselves, their aspirations for OSGeo, what they would like to change, improve or introduce and what role they would like to play on the board.

You are welcome to follow the template, and add further relevant info as you need:

== ''Name Template'' - ''Country'' ([https://www.osgeo.org/member/''name''/ OSGeo profile]) ==

=== About me ===

=== My vision ===

=== What you have done within the community in the past ===

=== What your interests are in terms of the board ===

=== Any things that you would like to change or introduce ===

=== What role you would wish to fulfill on the board (if any) ===

== ''Vicky Vergara'' - ''Mexico'' ([https://www.osgeo.org/member/vicky-vergara/ OSGeo profile]) ==

=== About me ===

I haven't changed much from the last times I wrote a manifesto:
* On [https://wiki.osgeo.org/wiki/Election_2023_Candidate_Manifestos#Vicky_Vergara_-_Mexico_.28OSGeo_profile.29 2023] I wrote about my hobbies and what I like to do during a FOSS4G.
* On [https://wiki.osgeo.org/wiki/Election_2021_Candidate_Manifestos#Vicky_Vergara.2C_Mexico_.28OSGeo_profile.29 2021] I wrote about what the 9 year old me thought about where I live and how it has changed.
* On [https://wiki.osgeo.org/wiki/Election_2019_Candidate_Manifestos#5._Vicky_Vergara.2C_Mexico_.28OSGeo_profile.29 2019] I wrote about that my laziness make me do and redo things until I figure out how to do them efficient and fast, so the next time I do them I can be lazy.
* On [https://wiki.osgeo.org/wiki/Election_2017_Candidate_Manifestos#Vicky_Vergara 2017] I wrote about how I arrived to OSGeo

My conclusion re-reading the ''about me'' in those manifestos: I like to talk and write.

Some day I would like share with you the autographs I have gathered during the FOSS4G, that is I made people talk and write :-), in all languages, for example, this year I have in Nepali, Bengali, Japanese

This time I will leave my autograph in Spanish here:

Deseo que todo en su vida personal y profesional sea de lo mejor para todos.
Vicky

(Translation: I hope that everything in your personal or professional life is the best for you all.)

=== My vision ===

Summary if my Vision of OSGeo:

* OSGeo Foundation is here to serve the Flora of the world.
* OSGeo Foundation is here to serve the Fauna of the world.
* OSGeo Foundation is here to serve the Climate of the world.
* OSGeo Foundation is here to serve the People of the world.
* OSGeo Foundation is here to serve the Countries of the world.
* All OSGeo community members are PSC (Propose, Suggest and Comment)

=== What you have done within the community in the past ===

Normal life in front of the computer:
* Developing any of the pgRouting software:
** pgRouting
** vrpRouting
** osm2pgrouting
** pgRouting workshop
* Work on OSGeoLive:
** Documentation
** Checking the installed software
* Member of committees:
** Code of Conduct Committee
** System Administration Committee
** Board Member
* Other tasks
** Google Summer of Code mentor
** Read and answer mails

=== What your interests are in terms of the board ===

* The right to be the best one can be.
* Promote the development and use of Open Source Software.

=== Any things that you would like to change or introduce ===

'''Think''' about why things are not happening.

* Why "[abc] is NOT [xyz] OSGeo".
* Why do some projects do not start incubation?
* Why is there no local OSGeo chapter in X country?
* Why do we have mostly sponsors from North America and Europe?
* Why we only hear (and see) those, who raise their voice and shout out loud. But we miss to reach the silent majority?
* What causes the "inactivity"?
* Are we scalable?
* Why ....

=== What role you would wish to fulfill on the board (if any) ===

Vice president of the Latin America Area

== ''Jeroen Ticheler'' - ''The Netherlands'' ([https://www.osgeo.org/member/jeroen-ticheler/ OSGeo profile]) ==

=== About me ===

I’m Jeroen Ticheler, director and owner of ([https://www.geocat.net GeoCat]), founder of ([https://www.geonetwork-opensource.org GeoNetwork]) and current member of the board of directors of OSGeo.

I’m obsessed with helping organising and publishing (geospatial) data using free and open source software in a sustainable way. I started my career at the United Nations supporting Early Warning Systems with satellite imagery and quickly moved to also support the management of geospatial data.

Now, 25 years onwards, the GeoNetwork software we develop runs at over 85% of national geoportals in Europe (find thousands of harmonized, authoritative datasets ([https://inspire-geoportal.ec.europa.eu/srv/eng/catalog.search#/datathemes here]) ) and is in use at all levels in governments around the world.

A bit more background on me can be found in ([https://www.osgeo.org/member/jeroen-ticheler/ my OSGeo profile]) and in ([https://wiki.osgeo.org/w/index.php?title=Election_2023_Candidate_Manifestos#About_me the description]) for the 2023 elections.

=== My vision ===

For the coming two years I want to focus on change in OSGeo. For this I have written ([https://docs.google.com/document/d/1KRdCKB8HvI9FctF1Ulg6UfoCImjEYKaQkgg9l1HueZs '''a vision document''']) that is currently up for comments by the community. My goal is to ''Get Things Done''. More specifically those things described in the vision document that have traction within the community.

=== What you have done within the community in the past ===

Besides my involvement as PSC chair in the GeoNetwork opensource project, I have been involved as Charter member from 2006 onwards, served on the OSGeo Marketing and Conference Committees, as well as on the OSGeo Board (2007-2009 and 2023-now).

In the last 10+ years my involvement has also been in the form of a sponsor to OSGeo and FOSS4G (both global, regional and local) and by organising a yearly Code Sprint in Bolsena 2007-2023.

In the run up to the vision document mentioned above, I have taken time to talk face to face with numerous people and the current board membership.

=== What your interests are in terms of the board ===

As a member of the board I can help to '''make OSGeo future proof'''. This requires several concrete actions and needs our community to step up to the tasks to make that happen. As a community member with a long history, I'm convinced I can bring ideas to the table and move them forward.

=== Any things that you would like to change or introduce ===

Yes, many. But the main ones would be:

# Numbered list item to '''make OSGeo financially solid''' so it can support its mission: To foster global adoption of open geospatial technology by being an inclusive software foundation devoted to an open philosophy and participatory community driven development.
# make sure there are new options for '''paid/supporting membership''' and for '''sponsoring''' that are attractive for both the community, sponsors, OSGeo and FOSS4G conference organisers.
# make sure there is '''a European legal entity of OSGeo''' that can serve its European membership, Local Chapters and the global OSGeo mission.

Furthermore one of the things that absolutely has my attention is responsible entrepreneurship. OSGeo needs to be a well balanced community of people from all parts of society, including volunteers, students and scientists, public servants and businesses.

=== What role you would wish to fulfill on the board (if any) ===

The role of president or vice president.

== Marco Bernasocchi, Switzerland ([https://www.osgeo.org/member/bernasocchi/ OSGeo profile]) ==

=== About me ===
I am an open-source advocate, consultant, teacher, and developer. My background is in geography with a specialization in geographic information science. I live in Switzerland in a small Romansh speaking mountain village where I love scrambling around the mountains to enjoy the feeling of freedom it gives me. I’m a very communicative person, I fluently speak Italian, German, French English, and Spanish and love travelling.

I'm the QGIS.org Chair, serve on the OSGeo board as VP Europe and work as CEO of OPENGIS.ch which I founded in 2011. Since 2014 I share the company ownership with Matthias Kuhn. At OPENGIS.ch LLC we develop, train and consult our client on any aspect related to QGIS, QField, PostGIS and WebGIS technologies.

I first came in contact with the OSGEO world during my BSc when the University of Zurich was teaching us proprietary products and I started looking around for Open Source alternatives and started using QuantumGIS “Simon (0.6)”. In 2008, when starting my MSc, I made the definitive switch to Ubuntu and I started working more and more with QuantumGIS Metis (0.11) and ended developing some plugins and part of Globe as my Masters' thesis.

Since then my whole work has pivoted around QGIS and enabling people and companies to embrace opensource for their GIS needs.

=== My vision ===
Serving as a pragmatic community conciliator - collecting thoughts from people with differing opinions and trying to find the high road through difficult issues I want to focus my and the community's energies on being inclusive and forward-thinking.

I see FOSS as a very socially responsible way to develop software, but even more, I see the immense technological advantage that writing open-source code brings. This is why I always strive to allow both pragmatic and ideological views to respectfully coexist and enrich each other.

=== What you have done within the community in the past ===
* OSGeo Board member since 2021 (VP Europe)
* QGIS contributor since 2011
* QGIS.org Chair since 2020
* QGIS.org Vice-Chair 2018-2020
* QField (originally QGIS for android) creator
* FOSS4G Session Leader, various FOSS4G Talks and workshops
* Charter Member since 2018
* Google Summer of Code 2012: Mentor
* Google Summer of Code 2011: Student Developer

=== What your interests are in terms of the board ===

One of my main motivations to be part of the board is to help OSGeo keep its incredible growth rate by being even more attractive to new community members, sponsors and large/corporate users. To achieve this, to me the key is maintaining the right balance between sustainable processes and helping interesting and motivating grassroots projects.

=== Any things that you would like to change or introduce ===
As still fairly technical driven person, I like to understand the inner workings of things and projects before commenting on changes :)

=== What role you would wish to fulfil on the board (if any) ===
I am open to any role based on how I could best serve the board.

== Matthew Hanson - United States ([https://www.osgeo.org/member/hanson/ OSGeo profile]) ==

=== About me ===

I’m Matthew Hanson. I first attended FOSS4G in 2011 and have since participated in 10 international FOSS4G and 8 FOSS4G North America conferences. That first FOSS4G changed the course of my career, and made it clear this was the community and work I wanted to be part of.

I work in Earth observation and geospatial software, focusing on cloud‑native architectures, open standards, and open‑source tooling. I’m best known for my work on STAC and related efforts, and for talks and writing aimed at making interoperable geospatial systems more accessible. I currently work at Element 84 at the intersection of open source, commercial Earth observation, and operational systems.

=== My vision ===

I see OSGeo as a truly international foundation that brings together open‑source geospatial communities that have, over time, diverged across projects, regions, and domains. OSGeo has a unique role to play in helping these communities reconnect, share practices, and recognize their common ground.

I also believe OSGeo can help welcome people who are already using and contributing to open‑source geospatial software, but do not yet see themselves as part of the OSGeo community. By acting as a neutral, inclusive convening space, OSGeo can strengthen collaboration, elevate shared standards and values, and help the community adapt to a rapidly evolving geospatial ecosystem.

=== What you have done within the community in the past ===

My work has focused on standards, interoperability, and community education. I am a core contributor and long‑term advocate for STAC and have served on the STAC Steering Committee since its inception. I am also a member of the editorial board of the Cloud‑Native Geospatial Forum.

I regularly speak at FOSS4G (global and North America) and related events, and write about cloud‑native geospatial systems and open standards. Much of my work bridges open‑source projects, public agencies, and commercial satellite data providers to enable practical adoption and interoperability.

=== What your interests are in terms of the board ===

As a board member, I am interested in strengthening OSGeo’s international presence and supporting collaboration across the community. In particular, I want to help bring together open‑source geospatial communities that have grown apart, and help welcome practitioners who are already part of the ecosystem but may not yet identify with OSGeo.

I am also interested in how OSGeo can continue to evolve alongside emerging developer communities and modern software development practices, including the impact of cloud-native development and AI-assisted coding on how open-source projects are built, discovered, and sustained. I see OSGeo as a natural place to convene thoughtful, inclusive conversations around these changes.

Finally, I am interested in strengthening coordination between global and regional FOSS4G conferences, so that regional events and the global conference reinforce each other and contribute to a healthy, connected international community.

=== Any things that you would like to change or introduce ===

If elected, I would like to help OSGeo strengthen connections across its diverse projects and communities, including those that operate somewhat independently today. I would also like to focus on outreach to practitioners who already rely on open‑source geospatial software but are not yet engaged with OSGeo, and encourage more cross‑project dialogue to reduce fragmentation.

=== What role you would wish to fulfill on the board (if any) ===

As a first‑time board member, my focus would be on contributing, learning, and supporting the existing board and its leadership. I respect the work of current board members and am open to serving in whatever role best supports the board and the broader OSGeo community.

== Rajat Shinde - India (Currently, residing in the US) ([https://www.osgeo.org/member/shinde OSGeo profile]) ==

=== About me ===
I’m Rajat Shinde, a computer scientist and GIS practitioner from India, currently based in the United States, working with the NASA Office of Data Science and Informatics at NASA Marshall Space Flight Center (MSFC) and the University of Alabama in Huntsville. I hold a Ph.D. in Geographical Information Systems and have worked across academia and industry on geospatial data science, AI, and Earth observation applications.

I first joined the OSGeo community at FOSS4G in 2017. I was elected to the OSGeo Board in 2021 and re-elected in 2023. I focus on bridging communities through collaborations with OGC, IEEE (including IEEE GRSS), and MLCommons, and on strengthening contributor pathways via student programs. I serve as a Project Steering Committee (PSC) member for pgRouting and ZOO-Project, and I have been a long-term Google Summer of Code mentor and organization administrator.

=== My vision ===
My vision is to make OSGeo easier to join and easier to stay in, suggesting clear pathways to new members for contributing and growing into long-term community leaders.

I also want to strengthen a progressive, globally representative FOSS4G ecosystem that collaborates with other open-source communities to advance open standards and interoperability. I will continue supporting OSGeo India and GeoBharat to expand participation and sustained contributions in India along with other regional GIS initiatives.

=== What you have done within the community in the past ===
* OSGeo Board: Vice President (2023–2025); elected Board member (2021, re-elected 2023)
* FOSS4G-Asia Program Committee 2026
* Standards + collaboration: OSGeo Standards Committee representative at OGC Geo-Huntsville 2023; OSGeo–OGC–ASF joint code sprint participant
* FOSS4G: FOSS4G 2021 session leader; FOSS4G Asia workshop contributor/speaker
* Project governance: PSC member (ZOO-Project, pgRouting)
* Education + outreach: UN OSGeo Education Challenge 2021 mentor (pgRouting track); engaged with UN OpenGIS and UN GeoAI WGs
* OSGeo Initiatives: GSoC student (2017), mentor (2018–present), org admin (2020–present); Google Code-in mentor (2019)
* Community resources: Contributor to the Cloud-native Geospatial Guide
* GeoAI interoperability: Leading projects with other open source communities such as MLCommons and IEEE
* Open source quality: JOSS manuscript reviewer (geospatial/geoscience software)

=== What your interests are in terms of the board ===
* To strengthen OSGeo’s external collaborations and long-term sustainability. I want to bring in more partnerships, MoUs, and sponsorships—aligned with OSGeo values—to better support projects, events, and community programs, with a specific focus on expanding relationships across Asia (including India, Japan, Nepal, and other regional hubs).

* Finally, as GIS evolves rapidly (cloud-native, data/AI-driven, reproducibility, and open standards), I want OSGeo to continue serving as the foundation for spreading responsible and trustworthy FOSS4G practices through deeper collaboration with adjacent open-source communities and standards bodies. As OSGeo approaches its 20-year milestone in 2026, this will help in defining a roadmap towards stronger OSGeo family.

=== Any things that you would like to change or introduce ===
I would like to strengthen on two points-
* Stronger links between regional and global FOSS4G: lightweight coordination and shared practices so regional events gain visibility/support, and global activities reflect regional priorities.
* More joint work with peer communities: expand cross-community collaborations (e.g., OSGeo–OGC joint code sprints and standards-aligned activities) to strengthen interoperable, responsible FOSS4G.

=== What role you would wish to fulfill on the board (if any) ===
I am open to any role deemed fit by the board.

== ''Ariel Anthieni'' - ''Argentina'' ([https://www.osgeo.org/member/anthieni/ OSGeo profile]) ==

=== About me ===

Today is my second time writing this manifesto, to introduce you to the Board, with my two years of learning many, challenges were presented to me, such as language and opportunities to collaborate with the global and regional community.

I started, as a curiosity in 2007 when I started the SDI of the province of Santa Fe in Argentina, where I was born, where everything was new for me, in 2012 with others we founded Geoinquietos, in Buenos Aires, where it became my home, and from then on we said, thanks to the support of the OSGeo community, I organized FOSS4G in Argentina, in 2016 I chaired the FOSS4G Argentina, and participated in the organization of the 2017 and 2019 editions.
I was also part of the organization of SOTM Argentina 2017 and SOTM LATAM 2018. In 2018, I was part of the foundation of the Geolibres Association (https://geolibres.org.ar/), which supports the geospatial communities of Argentina (Geolibres Argentina, Openstreetmap Argentina, QGIS Argentina).
Our first great challenge was to organize the International FOSS4G 2021 Buenos Aires and then supporting the region and so that free software is increasingly used, accompanying the creation of the local OSGeo chapter in Brazil and the organization of the International FOSS4G 2024 Belém, coordinating the LOC along with the chairs, which marked the integration of OsGeo in other regions of the world.
Also over the last few years I had the great opportunity to participate in the International and Regional FOSS4G, as well as Code Sprint and SOTM events.

In Latin America, together with ECLAC, we were able to design, develop and implement Open source solutions for statistical institutes in more than 12 countries, for the construction of SDIs and to generate the technological solution of the SDI Americas for the entire American continent.

Apart from this, I am the CEO of ([https://kan.com.ar/ Kan Territory & IT]), where we specialize in creating open source tools for cities, companies, institutions for the integration of geospatial, statistical and alphanumeric data, enhancing their solutions.

He is also actively involved in UN, UNGGIM and the UN Open GIS Initiative.

**Representation and current positions**
* Chair of the OSGeo UN Committee
* Co-Chair UN Open GIS
* OSGeo representative in the UNGGIM network of Geospatial Societies
* President of Geolibres Argentina
* CEO of Territorio Kan & TI

**Communities in which I participate**
* IDERA – IDE of Argentina
* UN OPEN GIS
* OSM LATAM
* QGISArgentina
* OSM Argentina
* Geolibres Argentina
* UNGGIM
* OSGeo UN Committee

=== My vision ===

My vision is very simple, to be able to achieve the use of open source in every corner of the planet, integrating and growing local communities to be able to achieve greater insertion in people's lives, improving their quality of life. and that it is not a limit on language, technology or knowledge transfer. Also raise awareness for the evolution of a sustainable Foundation over time so that it can continue supporting the projects that are incubated and new projects.

=== What you have done within the community in the past ===

* OSGeo representative in the UNGGIM 2022 Geospatial Societies network - current
* President of the OSGeo 2024 UN Committee - current
* Collaborator in the State of the LATAM Map 2025
* VP LATAM of OSGeo 2024
* Member of the OSGeo Board of Directors 2023-2024
* Coordinator of FOSS4G 2024 Belém (International)
* Collaborator in FOSS4G-AR 2017 and 2019
* Chair of FOSS4G-AR 2016
* Coordinator of FOSS4G Buenos Aires 2021 (International)
* Founding Member of Ge@inquietos Argentina
* Founder and current President of Geolibres Argentina
* Responsible for the Local Chapter OSM Argentina and QGIS Argentina
* Member of the SDI of Argentina since 2012

=== What your interests are in terms of the board ===

To be able to generate greater insertion of the regions that do not currently participate with the creation of local chapters in the countries that are missing. Achieve the sustainability of the foundation, seeing the possibility of obtaining a sponsor for open source in general, and from different regions. Continue supporting integration with the governments of the UN member countries and that language is not a limitation to integration.

=== Any things that you would like to change or introduce ===

I would like to introduce more options so that open source developers from regions such as Latin America can easily access it, finish finalizing the local chapter of Colombia and strengthen links with the UN and its member countries through agreements and possible sponsorship. Then continue building with everything that has been achieved year after year to make the foundation increasingly more sustainable.

=== What role you would wish to fulfill on the board (if any) ===

I would like to be Vice President for Latin America, to be able to reach more countries and communities.

[[Category:Elections]]
[[Category:Election 2025]]

SAC Service Status

2025-12-15T16:38:29Z

Cvvergara: Using links where osgeo3 is mentioned

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: [[SAC_Service_Status#Backup_.28osgeo5.29| backup]], [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

[[SAC_Service_Status#osgeo4|osgeo4]], [[SAC_Service_Status#osgeo7|osgeo7]], [[SAC_Service_Status#osgeo8|osgeo8]], and [[SAC_Service_Status#osgeo9|osgeo9]] are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace [[SAC_Service_Status#osgeo3|osgeo3]] and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for <del>[[SAC_Service_Status#osgeo3|osgeo3]]<del> containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on [[SAC_Service_Status#osgeo3|osgeo3]] which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 <del>(only accessible by [[SAC_Service_Status#osgeo3|osgeo3]]), these get queried via monitor.osgeo.org (running on [[SAC_Service_Status#osgeo3|osgeo3]]) via grafana server.<del>

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on [[SAC_Service_Status#osgeo3|osgeo3]], and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to [[SAC_Service_Status#osgeo3|osgeo3]] on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the [[SAC_Service_Status#osgeo3|osgeo3]] section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on [[SAC_Service_Status#osgeo3|osgeo3]])

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on [[SAC_Service_Status#osgeo3|osgeo3]])

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on [[SAC_Service_Status#osgeo3|osgeo3]]

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on [[SAC_Service_Status#osgeo3|osgeo3]]

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

=== Services running on osgeo4 ===

==== hop ====
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

==== ansible-dev ====
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

==== ansible-control ====
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

==== osgeo4-nginx ====
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

==== old-web-staging ====
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

==== pretalx-staging ====
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on [[SAC_Service_Status#osgeo9|osgeo9]]) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

==== wordpress-dev ====
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

==== wiki-dev ====
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

==== wiki-staging ====
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

==== tracsvn-dev ====
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

==== dronie-client ====
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to [[SAC_Service_Status#osgeo3|osgeo3]] 2020-11-28 -- see [[https://trac.osgeo.org/osgeo/ticket/2362|#2362]]

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-15T16:29:19Z

Cvvergara: Adding link to osgeo3 mention

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: [[SAC_Service_Status#Backup_.28osgeo5.29| backup]], [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

[[SAC_Service_Status#osgeo4|osgeo4]], [[SAC_Service_Status#osgeo7|osgeo7]], [[SAC_Service_Status#osgeo8|osgeo8]], and [[SAC_Service_Status#osgeo9|osgeo9]] are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace [[SAC_Service_Status#osgeo3|osgeo3]] and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

=== Services running on osgeo4 ===

==== hop ====
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

==== ansible-dev ====
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

==== ansible-control ====
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

==== osgeo4-nginx ====
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

==== old-web-staging ====
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

==== pretalx-staging ====
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

==== wordpress-dev ====
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

==== wiki-dev ====
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

==== wiki-staging ====
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

==== tracsvn-dev ====
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

==== dronie-client ====
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-15T16:27:05Z

Cvvergara: /* Servers at OSL adding link to backup*/

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: [[SAC_Service_Status#Backup_.28osgeo5.29| backup]], [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

[[SAC_Service_Status#osgeo4|osgeo4]], [[SAC_Service_Status#osgeo7|osgeo7]], [[SAC_Service_Status#osgeo8|osgeo8]], and [[SAC_Service_Status#osgeo9|osgeo9]] are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

=== Services running on osgeo4 ===

==== hop ====
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

==== ansible-dev ====
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

==== ansible-control ====
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

==== osgeo4-nginx ====
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

==== old-web-staging ====
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

==== pretalx-staging ====
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

==== wordpress-dev ====
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

==== wiki-dev ====
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

==== wiki-staging ====
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

==== tracsvn-dev ====
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

==== dronie-client ====
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-15T16:25:22Z

Cvvergara: hop fixing alignment

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: backup, [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

[[SAC_Service_Status#osgeo4|osgeo4]], [[SAC_Service_Status#osgeo7|osgeo7]], [[SAC_Service_Status#osgeo8|osgeo8]], and [[SAC_Service_Status#osgeo9|osgeo9]] are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

=== Services running on osgeo4 ===

==== hop ====
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

==== ansible-dev ====
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

==== ansible-control ====
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

==== osgeo4-nginx ====
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

==== old-web-staging ====
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

==== pretalx-staging ====
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

==== wordpress-dev ====
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

==== wiki-dev ====
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

==== wiki-staging ====
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

==== tracsvn-dev ====
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

==== dronie-client ====
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-15T16:24:50Z

Cvvergara: /* Services running on osgeo4: fixing alignment */

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: backup, [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

[[SAC_Service_Status#osgeo4|osgeo4]], [[SAC_Service_Status#osgeo7|osgeo7]], [[SAC_Service_Status#osgeo8|osgeo8]], and [[SAC_Service_Status#osgeo9|osgeo9]] are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

=== Services running on osgeo4 ===

==== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

==== ansible-dev ====
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

==== ansible-control ====
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

==== osgeo4-nginx ====
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

==== old-web-staging ====
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

==== pretalx-staging ====
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

==== wordpress-dev ====
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

==== wiki-dev ====
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

==== wiki-staging ====
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

==== tracsvn-dev ====
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

==== dronie-client ====
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-15T16:21:54Z

Cvvergara: Removing osgeo3 from instructions of Logging into LXD Hosts

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: backup, [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

[[SAC_Service_Status#osgeo4|osgeo4]], [[SAC_Service_Status#osgeo7|osgeo7]], [[SAC_Service_Status#osgeo8|osgeo8]], and [[SAC_Service_Status#osgeo9|osgeo9]] are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-15T16:17:12Z

Cvvergara: Servers at OSL: updating number of servers and crossing out instructions on how to log into physical machines that we do not have

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: backup, [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

SAC:Backups

2025-12-14T21:42:21Z

Cvvergara:

```SHUTDOWN``` IS NO LONGER ON

= Backups =

== backup.osgeo.org (aka osgeo5, mirror) ==

This was the OSUOSL VM used for backups starting in 2010/04 and upgraded to dedicated hardware (very) early in 2014. It is used for Bacula backups of osgeo6.
* Admins: Frank Warmerdam (rsync), Martin Spott (bacula), Sandro Santilli (bacula)
* access is via SAC shell group.
* download.osgeo.org rsync mirroring runs nightly and is externally available at download2.osgeo.org.
* /backup/bacula/ contains the Bacula storage device
* /backup/rsync/ is for rsync backups
* /backup/longterm/ is for long term backups of static material (ie conference web sites)
* /backup/pgdump/ contains PostgreSQL dumps of the Bacula director database
* /etc/bacula contains Bacula configuration, is under local git repo

=== Hardware ===

<pre>
CPU: Intel Xeon E3-1220v2, 3.1GHz (4-Core, 8MB Cache, 69W) 22nm
RAM: 16GB (2 x 8GB DDR3-1600 ECC Unbuffered 2R DIMMs) Operating at 1600 MT/s Max
NIC: Two Gigabit Ethernet Controllers (Intel 82574L) - Integrated
Management: Integrated IPMI 2.0 & KVM with Dedicated LAN
Controller: 2 Ports 6Gb/s SATA, and 4 Ports 3Gb/s SATA via Intel C216 Chipset
PCIe 3.0 x16: No Item Selected
PCIe 2.0 x4 (x8): No Item Selected
NOTE: Drives will be connected to onboard SATA controller unless otherwise specified
Hot-Swap Drive - 1: 3TB Seagate Constellation ES.3 (6Gb/s, 7.2K RPM, 128MB Cache) 3.5-inch SATA
Hot-Swap Drive - 2: 3TB Seagate Constellation ES.3 (6Gb/s, 7.2K RPM, 128MB Cache) 3.5-inch SATA
Hot-Swap Drive - 3: 3TB Seagate Constellation ES.3 (6Gb/s, 7.2K RPM, 128MB Cache) 3.5-inch SATA
Hot-Swap Drive - 4: 3TB Seagate Constellation ES.3 (6Gb/s, 7.2K RPM, 128MB Cache) 3.5-inch SATA
Optical Drive: Blanking Panel, No Optical Drive
Front Input: Blanking Panel - No Front Inputs
Power Supply: Redundant 500W Power Supply with PMBus - 80 PLUS Platinum Certified
Rail Kit: 1U Sliding Rail Kit
OS: No Item Selected
Warranty: Standard 3-Year Warranty
Notes:
New quote with redundant power supply. Can I get a 2.5 inch spinning
disk instead of SSD in the Front Input slot (500 GB Seagate
Constellation 6 GB/s 2.5")?
</pre>

=== OS installation ===

* Create an empty partition at the beginning of every hard drive, use "Reserved BIOS boot area" on GPT-partitioned disks (typical with 2 GByte disks or bigger) or just "Unused" on DOS-type partition tables. By tradition I reserve 10 MByte on each disk, maybe 1 MByte would be sufficient as well, but these 9 MByte of difference don't cost that much and you're on the safe side ....
* Create a second partition on every disk - for use by MD - allocating all the remaining disk space
* MD RAID5 over all the 'second' partitions for use by LVM - '''8 TB''' usable space
* LVM volume group on top of the MD physical volume
* Volumes
** "boot" (256 MByte, Ext2, /boot/),
** "root" (20 GByte, XFS, /root/),
** "swap" (8 GByte),
** "var" (20 GByte, XFS, /var/)
* Install the base operating system, don't forget to set up SSH ;-)
* Volumes
** "backup" (2 TByte, XFS, /backup/),
** "mirror" (1 TByte, XFS, /mirror/)

=== Bacula ===

See [[SAC:Bacula]]

== osgeo3 & osgeo7 & osgeo8 & osgeo9 ==

osgeo3, osgeo7, osgeo8, osgeo9 are production LXD Hosts. osgeo8 and osgeo9 are donated by OSMF. All servers are are backed up to osgeo4, except for download on osgeo7. These are done nightly or weekly based on frequency of use and size. The scripts for these are in ansible under osgeo4 deployment and setup to run as a cronjob on osgeo4. download.osgeo.org is replicated to osgeo8 accessible via download8.osgeo.org.

Using the built in LXD scheduler snapshots of each container are done daily with a retention of 30 days.
This means each container in case of disaster such as virus/exploit/serious misconfiguration can be restored to up to 30 days before.

In addition the latest snapshots of each container are made on a daily or weekly basis by osgeo4.
osgeo4 serves as both a dev lxd host (e.g. it has wordpress-dev, wiki-dev, and tracsvn-dev) and a backup lxd host.

Smaller containers that change frequently such as secure are snapshot nightly and pushed to osgeo4 using cronjob - /etc/cron.d/osgeo4-lxd-maint on osgeo4. Only one container snapshots of each is kept on osgeo4.

Larger containers such as repo (on osgeo3) and download and tracsvn on osgeo7 are snapshotted weekly and pushed to osgeo4.
All backup containers are suffixed with -backup. So you will see on osgeo4 containers such as download-backup, grass-backup etc.

Right now a manual process - backups of key containers are made and stored on backup.osgeo.org in the /backup/osgeo7_containers/image_backups/ folder.
There is currently not enough space there to hold other backups. download is however rsync'ed to http://ftp.osuosl.org/pub/osgeo/download/ .

== download.osgeo.org ==

As noted in [[Download Server]] the contents of download.osgeo.org are rsync'ed to ftp.osuosl.org/osgeo.

== svn.osgeo.org ==

As noted in [[Subversion]] the subversion repository is mirrored using svn mirroring and does not need to be backed up otherwise.

= See also =

* [[SAC Service Status]]
[[Category:Infrastructure]]
[[Category:SysAdminProcedure]]

SAC Service Status

2025-12-14T21:40:44Z

Cvvergara: Moving backup to Historical servers

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

Osgeo3

2025-12-14T21:36:45Z

Cvvergara: Indicating that its no longer on

'''SHUTDOWN''' IS NO LONGER ON

'''Osgeo3''' is an Ubuntu 20.04 LTS machine administered by [[SAC]], hosted on [[SAC_Service_Status#Servers_at_OSL|OSU OSL servers]] for a long time. It in the past was running Ganeti, but was reformatted in March 2020, had fresh new disks put in and LXD installed for managing containers.

Up-to-date info about containers can be found (password-protected) in https://git.osgeo.org/gitea/sac/osgeo9/wiki/

== Hardware ==
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| Processors ||2 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache) (each processor has 4 cores for total of 8 cpus)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
loop0 7:0 0 91.4M 1 loop /snap/core/8689
loop1 7:1 0 67M 1 loop /snap/lxd/13901
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part /boot
`-sda2 8:2 0 1.8T 0 part
|-osgeo3-root 253:0 0 800G 0 lvm /
`-osgeo3-swap 253:1 0 32G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 1.8T 0 part
`-sdb9 8:25 0 8M 0 part
sdc 8:32 0 1.8T 0 disk
|-sdc1 8:33 0 1.8T 0 part
`-sdc9 8:41 0 8M 0 part
sdd 8:48 0 1.8T 0 disk
|-sdd1 8:49 0 1.8T 0 part
`-sdd9 8:57 0 8M 0 part
sde 8:64 0 1.8T 0 disk
|-sde1 8:65 0 1.8T 0 part
`-sde9 8:73 0 8M 0 part
sr0 11:0 1 1024M 0 rom

</pre>

<pre>
sdb,sdc,sdd,sdd form a zfs osgeo3_lxd partition (sdb,sdc) mirrors sdd,sdf for total lxd capacity of 3.62 TB
sda (composed of 2 1.8TB disks) is under hardware RAID1 - root lvm partition is 800GB, 1TB unallocated for future use
</pre>

== Setup ==
As of 2021-03 the ssh port of the main host (the physical server) is 2222 and there is only one non-root account on it
and can only be accessed via key access. Keys are deployed using [[AnsibleDeployment]] repo of gitea

It has an LXD installed from snap.

So to SSH - ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222

It has 2 public ips:

* 140.211.15.26 ( osgeo3.osgeo.osuosl.org ) = not currently mapped to anything aside from 2222 ssh) planned for disaster should say osgeo7 go down and all need to be remapped
* 140.211.15.6 web-osgeo3.osgeo.osuosl.org

For console access, you need to have OpenVPN installed and vpn config for OSUOSL.
Once connected it can be accessed via:

```
apt install ipmitool
ipmitool -I lanplus -H osgeo3.osuosl.oob -U tech_dev -P passwordhere sol activate
```
or web interface:

http://osgeo3.osuosl.oob

Some configurations of this machine are deployed using [[AnsibleDeployment]]
It was upgraded in 2021 from Ubuntu 18 to Ubuntu 20.04.

* Ubuntu [http://releases.ubuntu.com/20.04/ 20.04] [https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes (Release Notes)]. [https://git.osgeo.org/gitea/sac/osgeo3 more details about install steps]

==== Containers and Services ====

Refer to [[SAC Service Status#osgeo_3]]

[[Category:Infrastructure]]

SAC Service Status

2025-12-14T21:33:46Z

Cvvergara: Clenaup of osgeo3 Information

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-14T21:29:49Z

Cvvergara: Moving osgeo3 to historical servers

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo7-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-14T21:26:09Z

Cvvergara: Moving dronie-client on osgeo3 to osgeo7 with name dronie-client-osgeo3

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on osgeo3 which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo7-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-14T21:21:43Z

Cvvergara: Moving geoserver-cite from osgeo3 to osgeo8

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo7-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
STOPPED
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-09T16:25:04Z

Cvvergara: /* osgeo3 */

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo7-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
STOPPED
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-09T00:55:23Z

Cvvergara: webextra is no longer on osgeo3, moving documentation to section on osgeo7

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on osgeo3

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo7-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-09T00:50:15Z

Cvvergara: /* nexus (repo.osgeo.org, docker.osgeo.org) */

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo7-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-09T00:48:33Z

Cvvergara: Moving nexus from osgeo3 to osgeo7

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo7-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-09T00:26:53Z

Cvvergara: Moving monitor from osgeo3 to osgeo7

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-08T22:46:27Z

Cvvergara: Moving matrix from osgeo3 to osgeo9

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

- For monitoring servers
- monitor.osgeo.org

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

=== monitor ===
debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-08T22:39:58Z

Cvvergara: /* osgeo3 does not have geo-docs anymore*/

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo3` with:

ssh yourusername@osgeo3-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====

[[Matrix]]

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

- For monitoring servers
- monitor.osgeo.org

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== matrix ===
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

See https://git.osgeo.org/gitea/sac/osgeo3/wiki/matrix-container for full detail on how the container is setup

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

=== monitor ===
debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-08T22:30:50Z

Cvvergara: /* geo-docs container */

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo3` with:

ssh yourusername@osgeo3-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====

[[Matrix]]

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

- For monitoring servers
- monitor.osgeo.org

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geo-docs ===
Debian 11 houses the following:

* lastools.osgeo.org (as of 2021-10-06 snapshot of https://www.cs.unc.edu/~isenburg/lastools/ see [https://trac.osgeo.org/osgeo/ticket/2649 2649]
* https://planet.osgeo.org
* https://docs.geoserver.org
* https://docs.geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]
* https://geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]

planned home of ? docs.geowebcache.org

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== matrix ===
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

See https://git.osgeo.org/gitea/sac/osgeo3/wiki/matrix-container for full detail on how the container is setup

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

=== monitor ===
debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-08T22:29:47Z

Cvvergara: /* osgeo 9 adding geo-docs */

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo3` with:

ssh yourusername@osgeo3-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====

[[Matrix]]

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

=== geo-docs container ===

Houses:
- https://blog.geoserver.org
- https://geos.osgeo.org
- https://geotools.org
- https://geowebcache.osgeo.org
- https://lastools.osgeo.org
- https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

- For monitoring servers
- monitor.osgeo.org

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geo-docs ===
Debian 11 houses the following:

* lastools.osgeo.org (as of 2021-10-06 snapshot of https://www.cs.unc.edu/~isenburg/lastools/ see [https://trac.osgeo.org/osgeo/ticket/2649 2649]
* https://planet.osgeo.org
* https://docs.geoserver.org
* https://docs.geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]
* https://geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]

planned home of ? docs.geowebcache.org

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== matrix ===
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

See https://git.osgeo.org/gitea/sac/osgeo3/wiki/matrix-container for full detail on how the container is setup

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

=== monitor ===
debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-01T00:51:27Z

Cvvergara: /* Services on osgeo7 adding monitor*/

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo3` with:

ssh yourusername@osgeo3-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====

[[Matrix]]

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

- For monitoring servers
- monitor.osgeo.org

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geo-docs ===
Debian 11 houses the following:

* lastools.osgeo.org (as of 2021-10-06 snapshot of https://www.cs.unc.edu/~isenburg/lastools/ see [https://trac.osgeo.org/osgeo/ticket/2649 2649]
* https://planet.osgeo.org
* https://docs.geoserver.org
* https://docs.geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]
* https://geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]

planned home of ? docs.geowebcache.org

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== matrix ===
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

See https://git.osgeo.org/gitea/sac/osgeo3/wiki/matrix-container for full detail on how the container is setup

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

=== monitor ===
debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

SAC Service Status

2025-12-01T00:41:36Z

Cvvergara: /* Services running on osgeo9 addin matrix*/

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo3` with:

ssh yourusername@osgeo3-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====

[[Matrix]]

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geo-docs ===
Debian 11 houses the following:

* lastools.osgeo.org (as of 2021-10-06 snapshot of https://www.cs.unc.edu/~isenburg/lastools/ see [https://trac.osgeo.org/osgeo/ticket/2649 2649]
* https://planet.osgeo.org
* https://docs.geoserver.org
* https://docs.geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]
* https://geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]

planned home of ? docs.geowebcache.org

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== matrix ===
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

See https://git.osgeo.org/gitea/sac/osgeo3/wiki/matrix-container for full detail on how the container is setup

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

=== monitor ===
debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

Board Member Nominations 2025

2025-11-28T21:55:27Z

Cvvergara:

Election 2025 Candidate Manifestos

2025-11-28T21:49:49Z

Cvvergara: Adding Vicky manifesto

SAC Service Status

2025-11-26T23:10:06Z

Cvvergara: /* Services running on osgeo9 */

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.

== Logging into Physical Machines ==

Currently we have osgeo6 and backup.osgeo.osuosl.org that are physical machines under LDAP control.

'''Note this does not apply to osgeo3, osgeo4, osgeo7, osgeo8, osgeo9 lxd hosts'''. Refer to those sections for instructions on logging in.
If hanging, see [[OSL]] for how to open a ticket with OSUOSL's support.

This section currently only applies to '''osgeo6''' and '''backup'''.

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.

ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org

When prompted for password, use your OSGeo Login password.

[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.

== Logging into LXD Hosts ==

OSGeo3, OSGeo4, OSGeo7, OSGeo8, and OSGeo9 are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//;s/$/.lxd/" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo3` with:

ssh yourusername@osgeo3-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

Intended to provide additional LXD capacity and backup.

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== centtie-7-pgrouting ====
Centos 7 running PostgreSQL 15, PostGIS 3.3.2, gcc-4.8.5, cmake 3
Configured to be a github self-hosted runner for testing centos for pgrouting project

[https://github.com/pgRouting/admin/wiki/CI%3A-Centos-7-GHA-runner Details of Github Action runner setup]

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== pgrouting-dev ====
For pgrouting development use to do things like pushing docker images on a scheduled basis.
Perhaps later for demo sites. WIP.

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== Secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo7

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings)

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

==== wordpress ====

See [[SAC:Wordpress]]

==== wiki ====

See [[OSGeo Wiki]]

==== discourse ====

See [[SAC:Discourse]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 7 ==

Server added June 2018. Intended to replace osgeo3 and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Download ====

See [[Download Server]]

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 (only accessible by OSGeo3), these get queried via monitor.osgeo.org (running on osgeo3) via grafana server.

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== gallery ====
Brian's project files. Not really a gallery. Photoprism is the real gallery.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on osgeo3, and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to osgeo3 on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the osgeo3 section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on osgeo3)

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== live ====
Home of live.osgeo.org (created 2021-10-05ish
Running Ubuntu 20.04 with OSGeo LDAP SSH

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on osgeo3)

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on osgeo3

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

==== mapserver ====

See [[MapServer_at_osgeo7]]

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo6 ==

See [[osgeo6]]

== Backup (osgeo5) ==
* Backup now runs on dedicated hardware
* Provides Rsync backups of download.osgeo.org
* Provides Bacula backups of various VMs.
* See [[SAC:Backups]] for details.

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo3, osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

== Services running on osgeo4 ==

=== hop ===
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

=== ansible-dev ===
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

=== ansible-control ===
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

=== osgeo4-nginx ===
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

=== old-web-staging ===
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

=== pretalx-staging ===
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on osgeo3) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

=== wordpress-dev ===
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

=== wiki-dev ===
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

=== wiki-staging ===
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

=== tracsvn-dev ===
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

=== dronie-client ===
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

== osgeo3 ==
osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It is used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 is a hosted by OSUOSL - can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

=== sshing into osgeo3 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo3.osgeo.org. To access the other containers, you need to hop through hop.osgeo3.osgeo.org.
hop container has port 22 open but requires ssh key access, you need to be added to shell group and have your ssh keys registered on your profile https://id.osgeo.org/ldap/edit). Users who’ve been granted rights can hop thru it to other containers using hop.osgeo3.osgeo.org as name. Other containers may or may not allow password access. It's up to the those who manage the internal containers.

A convenient block to add to your own .ssh/config file follows
# this is only needed if you you use different private keys for different servers
Host hop.osgeo3.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo3-*
ProxyCommand ssh '''your_osgeo_id'''@hop.osgeo3.osgeo.org -W $(sed -e "s/^osgeo3-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

Then to access say the nexus container, you'd do the below where your_id could be your osgeo id or a local account on that container

ssh '''your_id'''@osgeo3-nexus

=== hop ===
This is the only container with direct ssh access via ssh hop.osgeo3.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access which you can register by editing your ldap profile.

=== osgeo3-nginx ===
nginx proxy all web-traffic via the (using IP: 140.211.15.6 web-osgeo3.osgeo.osuosl.org), the second ip is not in use, but may be used for a secondary nginx, to temporarily host osgeo7/osgeo8/osgeo9 containers in case of major hardware upgrades

=== dronie-client ===
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

=== geo-docs ===
Debian 11 houses the following:

* lastools.osgeo.org (as of 2021-10-06 snapshot of https://www.cs.unc.edu/~isenburg/lastools/ see [https://trac.osgeo.org/osgeo/ticket/2649 2649]
* https://planet.osgeo.org
* https://docs.geoserver.org
* https://docs.geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]
* https://geotools.org [https://trac.osgeo.org/osgeo/ticket/2944 2944]

planned home of ? docs.geowebcache.org

=== geoserver-cite ===
Houses OGC site certification for geoserver https://cite.geoserver.org

=== matrix ===
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

See https://git.osgeo.org/gitea/sac/osgeo3/wiki/matrix-container for full detail on how the container is setup

=== nexus (repo.osgeo.org, docker.osgeo.org) ===
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

=== monitor ===
debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for osgeo3 containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

== WebExtra ==
** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to osgeo3 2020-11-28 -- see https://trac.osgeo.org/osgeo/ticket/2362

[[Category:Infrastructure]]
[[Category:Services]]

Annual Report 2025

2025-10-28T19:35:09Z

Cvvergara:

== Executive ==
# [[Board of Directors Report 2025]]
# [[Finance Report 2025]]

== OSGeo Projects Reports ==

To create the report:
* Copy from the [[Project report template]]
* Click on the report to be created
* Paste the template and edit the report
* Save the page

=== Content Management Systems ===
# [[GeoNode Report 2025]]
=== Desktop Applications ===
# [[gvSIG Report 2025]]
# [[Marble Report 2025]]
# [[QGIS Report 2025]]
=== Geospatial Libraries ===
# [[GDAL/OGR Report 2025]]
# [[GEOS Report 2025]]
# [[GeoTools Report 2025]]
# [[GRASS Report 2025]]
# [[Orfeo ToolBox Report 2025]]
# [[pgRouting Report 2025]]
# [[PROJ Report 2025]]
=== Metadata Catalogs ===
# [[GeoNetwork opensource Report 2025]]
# [[pycsw opensource Report 2025]]
=== Spatial Databases ===
# [[PostGIS Report 2025]]
=== Web Mapping ===
# [[pygeoapi Report 2025]]
# [[MapServer Report 2025]]
# [[deegree Report 2025]]
# [[ZOO-Project Report 2025]]
# [[OpenLayers Report 2025]]
# [[GeoMoose Report 2025]]
# [[Mapbender Report 2025]]
# [[PyWPS Report 2025]]
# [[GeoServer Report 2025]]
=== Other ===
# [[OSGeoLive Report 2025]]

== OSGeo Community Projects Reports ==

To create the report:
* Copy from the [[Project report template]]
* Click on the report to be created
* Paste the template and edit the report
* Save the page

=== Desktop Applications ===
# [[OSGeo4W Report 2025]]
# [[Opticks Report 2025]]
=== Geospatial Libraries ===
# [[TorchGeo Report 2025]]
# [[mappyfile Report 2025]]
# [[ETF Report 2025]]
# [[PROJ-JNI Report 2025]]
# [[GeoStyler Report 2025]]
# [[Open Data Cube Report 2025]]
# [[MDAL Report 2025]]
# [[actinia Report 2025]]
# [[Pronto Raster Report 2025]]
# [[OWSLib Report 2025]]
# [[FDO Report 2025]]
# [[OSSIM Report 2025]]
=== Spatial Databases ===
# [[OSGeoLive Report 2025]]
# [[OSGeoLive Report 2025]]
# [[OSGeoLive Report 2025]]
=== Web Mapping ===
# [[XYZ / MAPP Report 2025]]
# [[GeoExt Report 2025]]
# [[GC2/Vidi Report 2025]]
# [[GeoWebCache Report 2025]]
# [[MapGuide Report 2025]]
# [[mapfish Report 2025]]
# [[istSOS Report 2025]]
=== Other ===
# [[EOEPCA+ Report 2025]]
# [[GeoServer Client Report 2025]]
# [[Loader Report 2025]]
# [[GeoHealthCheck Report 2025]]
# [[Portable GIS Report 2025]]
# [[TEAM Engine GIS Report 2025]]

[[Category:Annual Reports]]
[[Category: Reports 2025]]
[[Category:Newsletter]]
[[Category:Journal]]

Project report template

2025-10-28T19:31:46Z

Cvvergara: spacing

This is just a guide on the reports.

Please copy and paste the following into the report.

Adjust the report to what you need.

For example instead of "Project officer" It can be "Local Chapter Officer".

<pre>
= General information =

* Project officer: (Only for OSGeo Projects) Name of project officer
* Project contact: (Only for Community projects) Name of project contact
* Project page information: https://www.osgeo.org/projects/pgrouting/

= Key Accomplishments =

List the accomplishments, for example: about releases
* Main releases
* Other releases
** [https://github.com/pgRouting/pgrouting/releases/tag/v3.8.0 v3.8.0]

= Participation in X =

Where X can be conferences workshops, webinars, GSoC, etc

= Budget =

* Budget from OSGeo (might be a link to the wiki)
* [https://pgrouting.org/donate.html Link to page for sponsors for the project]

= Outlook for 2026 =

* Plan for this
* Plan for that

[[Category:Annual Reports]]
[[Category: Reports 2025]]
</pre>

Project report template

2025-10-28T19:31:15Z

Cvvergara:

This is just a guide on the reports
Please copy and paste the following into the report.
Adjust the report to what you need.
For example instead of "Project officer" It can be "Local Chapter Officer"

<pre>
= General information =

* Project officer: (Only for OSGeo Projects) Name of project officer
* Project contact: (Only for Community projects) Name of project contact
* Project page information: https://www.osgeo.org/projects/pgrouting/

= Key Accomplishments =

List the accomplishments, for example: about releases
* Main releases
* Other releases
** [https://github.com/pgRouting/pgrouting/releases/tag/v3.8.0 v3.8.0]

= Participation in X =

Where X can be conferences workshops, webinars, GSoC, etc

= Budget =

* Budget from OSGeo (might be a link to the wiki)
* [https://pgrouting.org/donate.html Link to page for sponsors for the project]

= Outlook for 2026 =

* Plan for this
* Plan for that

[[Category:Annual Reports]]
[[Category: Reports 2025]]
</pre>

Project report template

2025-10-28T19:25:42Z

Cvvergara: Created page with "Please copy and paste the following into the report. Adjust to your needs <pre> = General information = * Project officer: (Only for OSGeo Projects) Name of project officer..."

Please copy and paste the following into the report.
Adjust to your needs

<pre>
= General information =

* Project officer: (Only for OSGeo Projects) Name of project officer
* Project contact: (Only for Community projects) Name of project contact
* Project page information: https://www.osgeo.org/projects/pgrouting/

= Key Accomplishments =

* Main releases
* Other releases
** [https://github.com/pgRouting/pgrouting/releases/tag/v3.8.0 v3.8.0]

= Participation in X =

Where X can be conferences workshops, webinars, GSoC, etc

= Budget =

* Budget from OSGeo (might be a link to the wiki)
* [https://pgrouting.org/donate.html Link to page for sponsors for the project]

= Outlook for 2026 =

* Plan for this
* Plan for that
</pre>

Annual Report 2025

2025-10-28T18:55:41Z

Cvvergara: Adding OSGeo Community projects

== Executive ==
# [[Board of Directors Report 2025]]
# [[Finance Report 2025]]

== OSGeo Projects Reports ==

=== Content Management Systems ===
# [[GeoNode Report 2025]]
=== Desktop Applications ===
# [[gvSIG Report 2025]]
# [[Marble Report 2025]]
# [[QGIS Report 2025]]
=== Geospatial Libraries ===
# [[GDAL/OGR Report 2025]]
# [[GEOS Report 2025]]
# [[GeoTools Report 2025]]
# [[GRASS Report 2025]]
# [[Orfeo ToolBox Report 2025]]
# [[pgRouting Report 2025]]
# [[PROJ Report 2025]]
=== Metadata Catalogs ===
# [[GeoNetwork opensource Report 2025]]
# [[pycsw opensource Report 2025]]
=== Spatial Databases ===
# [[PostGIS Report 2025]]
=== Web Mapping ===
# [[pygeoapi Report 2025]]
# [[MapServer Report 2025]]
# [[deegree Report 2025]]
# [[ZOO-Project Report 2025]]
# [[OpenLayers Report 2025]]
# [[GeoMoose Report 2025]]
# [[Mapbender Report 2025]]
# [[PyWPS Report 2025]]
# [[GeoServer Report 2025]]
=== Other ===
# [[OSGeoLive Report 2025]]

== OSGeo Community Projects Reports ==
=== Desktop Applications ===
# [[OSGeo4W Report 2025]]
# [[Opticks Report 2025]]
=== Geospatial Libraries ===
# [[TorchGeo Report 2025]]
# [[mappyfile Report 2025]]
# [[ETF Report 2025]]
# [[PROJ-JNI Report 2025]]
# [[GeoStyler Report 2025]]
# [[Open Data Cube Report 2025]]
# [[MDAL Report 2025]]
# [[actinia Report 2025]]
# [[Pronto Raster Report 2025]]
# [[OWSLib Report 2025]]
# [[FDO Report 2025]]
# [[OSSIM Report 2025]]
=== Spatial Databases ===
# [[OSGeoLive Report 2025]]
# [[OSGeoLive Report 2025]]
# [[OSGeoLive Report 2025]]
=== Web Mapping ===
# [[XYZ / MAPP Report 2025]]
# [[GeoExt Report 2025]]
# [[GC2/Vidi Report 2025]]
# [[GeoWebCache Report 2025]]
# [[MapGuide Report 2025]]
# [[mapfish Report 2025]]
# [[istSOS Report 2025]]
=== Other ===
# [[EOEPCA+ Report 2025]]
# [[GeoServer Client Report 2025]]
# [[Loader Report 2025]]
# [[GeoHealthCheck Report 2025]]
# [[Portable GIS Report 2025]]
# [[TEAM Engine GIS Report 2025]]

[[Category:Annual Reports]]
[[Category: Reports 2025]]
[[Category:Newsletter]]
[[Category:Journal]]

Annual Report 2025

2025-10-28T18:45:35Z

Cvvergara: Adding Executive and OSGeo project's report

FOSS4G 2025/Community sprint

2025-10-20T17:06:57Z

Cvvergara:

== Community Events and Code Sprint ==

Participation is free of charge and anyone involved or interested in getting involved in OSGeo community projects is welcome.

You can choose to contribute to one or more projects. The sky is the limit. There’s always plenty to do – and it’s not all about programming. Translation, documentation, feedback, discussions, and testing are very important for projects! Conference registration is not a prerequisite for participation in the community sprint.

=== When ===

Community Events and Code Sprints will be held on

* '''Saturday 22nd November 2025, 9am - 5pm'''
* '''Sunday 23rd November 2025, 9am - 5pm'''

=== Where ===

The community sprint will be hosted at the Conference Venue at [https://2025.foss4g.org/attend/conference-venue AUT].

== Registered Attendees ==

The community sprint is free of charge but we kindly ask you to write down your name for better planning.

{| border="1" cellpadding="2" class="wikitable sortable"
!width="30"|No
!width="250"|Name
!width="250"|Email
!width="250"|Projects
!width="250"|Registered to FOSS4G conference
!width="250"|Present on Sat 22nd
!width="250"|Present on Sun 23rd
|-
|1 || [[User:SimonNitz|Simon Nitz]] || simon.nitz@whanganui.govt.nz || Helping out with QGIS Community Days|| Yes || Yes || Yes
|+
|2 || [[User:Jerstlouis|Jerome St-Louis]] || jerome@ecere.com || Code Sprint: DGGAL and libCartoSym || Yes || Yes || Yes
|+
|3 || Thomas Dowling || thomas.dowling@auckland.ac.nz || Earth Observation Lab Aotearoa Hackathon || Yes || Yes || Yes
|+
|4 || [[User:Mazingaro|Alen Mangafić]] || alen.mangafic AT gis.si || Improving i.hyper (GRASS) || Yes || Yes || Yes
|+
|5 || Dawn Hendrick || dawn_hendrick@hotmail.com || HOTOSM mapping || Yes || Yes || No
|+
|6 || Felix Palmer || felixpalmer@gmail.com || Code Sprint: Deck.gl || Yes || Yes || Yes
|+
|7 || Marco Bernasocchi|| marco@opengis.ch || Code Sprint: qgis/qfield || Yes || Yes || tbd
|+
|8 || Vicky Vergara|| vicky@erosion.dev || Code Sprint: pgRouting || Yes || Yes || tbd
|+
|N || my name || my email || projects I will work on || x || x || x ||
|}

-----

= Events =

== QGIS User Group ==

Information to come!

== Earth Observation Lab Aotearoa Hackathon ==

A hackathon, using the raw data that is coming down from the TPA-1 satellite(https://www.nanosats.eu/sat/tpa-1) to the UoA Space Institute.

UOA and EOLab are working together to get this data accessible to wider NZ. It is nothing fancy, RGB and fairly low res, needs everything done to it from geo-registration upwards. But could be a cool chance for the community to get a chance to play with raw data that is coming off the first Kiwi built, owned and operated satellite.

Thomas Dowling thomas.dowling@auckland.ac.nz

https://eolabaotearoa.co.nz/

-----

== HOTOSM mapping ==

Saturday Morning, to be confirmed.

-----

= Overall Organization =

The [https://2025.foss4g.org/organisers FOSS4G 2025 Team] is the proud organiser of the community event and code sprint days.

For any question you can contact [[User:SimonNitz|Simon Nitz]], the person in charge of the FOSS4G 2025 Program.

[[Category:FOSS4G2025]] [[Category:FOSS4G]] [[Category:Code_Sprints]]

New Member Nominations 2025

2025-10-15T21:23:36Z

Cvvergara: Added the categories

This list of nominees is maintained by the Chief Returning Officer (cro@osgeo.org). '''This page is write protected and can only be edited by CRO'''

{| class="wikitable sortable" border="1" cellpadding="5"
|-
!#
!Nominee Name
!Country
!Positive attributes
!Nominated by

|- valign='top'
| 6
| Carlos Eduardo Mota
| Brazil
| Carlos is graduated in Geology from Rio de Janeiro State University (UERJ), in 2005, Post Graduated in Basin Analysis and Mobile Belts from UERJ, with a Master’s Degree in Applied Geophysics (2008) and PhD in Petrology and Geochemistry (2012). He has 15 years of experience in using FOSS4G, acquired and applied at the Environmental and Water Resources Institute (IEMA/ES), from Espírito Santo State and at the Geological Survey of Brazil (SGB/CPRM). Carlos is currently one of the SGB/CPRM’s representatives at Spatial Data Infrastructure of Brazil (INDE) and member of Technical Implementation Group (TIG) of OneGeology. He is also leader of the Data Science Nucleus (NDS) of the SGB/CPRM. He works in research and development of new and disruptive technologies, in addition to proposing out-of-the-box solutions for internal geoscientific problems and those of partner institutions, with outstanding performance as an architect, developer, mediator and consultant in Spatial Data Infrastructures, desktop, server and mobile GIS, remote sensing, geographic database systems and OGC/ISO 19100 Series standards. He is also a specialist in Python, PHP and Javascript, geospatial APIs and Data Analytics – Including with training given to SGB/CPRM, IBGE and Embrapa’s employees. Carlos is part of the Brazil Local Chapter and has been a familiar face at recent FOSS4 events, including 2021 (Buenos Aires), 2022 (Firenze) as well as 2024 (Belém) where he was IT Co-Chair of the Local Committee. Carlos is engaging, a pleasure to collaborate with, and would be an asset to our community as a Charter Member.
* Profile: [https://www.osgeo.org/member/mota/ Carlos Eduardo Mota ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Cmotadev Carlos Eduardo Mota ]
|

[https://www.osgeo.org/member/tom-kralidis Tom Kralidis ]

|- valign='top'
| 7
| Luís Calisto
| Portugal
| Luis not only have been implementing Infrastructures based on Free and Open Source Software, but has been openly advocating for the use of Free Software on those organizations; he is a regular at FOSS4G events, presenting talks and workshops that teach FOSS tools to people in different parts of the world.

* Profile: [https://www.osgeo.org/member/calisto/ Luís Calisto ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Lcalisto Luís Calisto ]
|

[https://www.osgeo.org/member/simoes Joana Simoes ]

|- valign='top'
| 9
| Kateryna Konieva
| Portugal
| Kateryna has been bringing FOSS4G to the world of architectural applications, for many years; she is a savvy QGIS plugin developer and has participated in numerous QGIS and FOSS4G events; in recent years she has also been involved with OGC Standards, in particular the more modern breadth of OGC APIs, contributing towards modernizing the GIS world.

* Profile: [https://www.osgeo.org/member/konieva/ Kateryna Konieva ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Katkateryna Kateryna Konieva ]
|

[https://www.osgeo.org/member/simoes Joana Simoes ]

|- valign='top'
| 10
| Benjamin Webb
| United States of America
| Ben is a rising star in the FOSS4G ecosystem. He has been a top contributor to the pygeoapi project for many years, and has been doing a valuable job as maintainer. He has also attended FOSS4G conferences, where he taught others how to use pygeoapi, through the "Dive into pygeoapi" workshop.

* Profile: [https://www.osgeo.org/member/webb/ Benjamin Webb ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Benwebb Benjamin Webb ]
|

[https://www.osgeo.org/member/simoes Joana Simoes ]

|- valign='top'
| 11
| Joseph Emile Honour Percival
| Samoa
| Vicky Vergara: It is my pleasure to nominate Iosefa Percival to be a charter-member. A postdoctoral researcher at the University of Hawaii where his expertise includes, and not limited to, GIS with focus on routing algorithms, remote sensing with focus on ecology. He is a developer of pgRouting and his focus is on VRP algorithms, collaborating on the pgRouting sub-product vrpRouting. He is a member of the PSC of pgRouting. He understands that the main responsibility he is acquiring is to participate in the OSGeo Elections, and he is willing to study the nominated candidates to fill up the ballots he receives. He also understands that failing for two consecutive years on participating in the elections he will be classified as inactive.

* Profile: [https://www.osgeo.org/member/percival/ Joseph Emile Honour Percival ]
* Wiki: [https://wiki.osgeo.org/wiki/Joseph_(Iosefa)_%E2%80 Joseph Emile Honour Percival ]
|

[https://www.osgeo.org/member/vicky-vergara Vicky Vergara ]

|- valign='top'
| 14
| Weston Renoud
| Netherlands
| Weston is collaborating in the [https://proj.org/ PROJ] and [https://github.com/GeoPlegma/GeoPlegma DGGS/GeoPlegma] projects. He gave a talk in FOSS4G Mostar (https://talks.osgeo.org/foss4g-europe-2025/talk/C8EMH7/ ). He can give an interesting perspective to OSGeo with this deep knowledge in hydrography, both from the software development and scientific/technical point of view.

* Profile: [https://www.osgeo.org/member/renoud/ Weston Renoud ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Wrenoud Weston Renoud ]
|

[https://www.osgeo.org/member/jimenezshaw Javier Jimenez Shaw ]

|- valign='top'
| 16
| Felix Delattre
| Germany
| Felix has been an active contributor to the Geospatial Open Source community since 2009. He played a key role in mapping and building up the OpenStreetMap community in Nicaragua, used to be heavily involved in the Humanitarian OpenStreetMap Team, led the overhaul of the Taskig Manager software, has contributed to the Debian GIS packaging team, and has been a member of the FOSSGIS chapter since 2016. Felix feels truly at home at FOSS4G events and continues to dedicate his efforts to strengthening the open geospatial ecosystem. I had the opportunity to collaborate with Felix in the HOT OpenStreetMap Board of Directors, also last year as co-organizers of a STAC / STAPI sprint in Berlin in 2024 among other different projects, I just have positive words to describe Felix commitment with Open Source projects and how he helps and inspire people around him. I totally support his nomination, he will be a great asset to OsGeo members.

* Profile: [https://www.osgeo.org/member/delattre/ Felix Delattre ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Xamanu Felix Delattre ]
|

[https://www.osgeo.org/member/gonzalez Miriam González ]

|- valign='top'
| 20
| Julia Signell
| United States of America
| Alex Mandel: Julia has been an active member of the scientific Python community and over the past few years has become more engaged with the geospatial community as part of the Pangeo, STAC, Zarr, and Cloud Native Geospatial communities. She regularly attends and presents at FOSS4G-NA, SciPy, PyData, AGU (American Geophysical Union), and CNG (Cloud Native Geospatial) conferences. Julia also regularly participates in sprints and working meetings involving Pangeo, STAC, STAPI, Dask, and Bokeh and at various points has been a maintainer on the following FOSS Python libraries: pystac, pystac-client, xarray, dask, hvplot, bokeh, intake, intake-xarray. She is currently a member of the STAC Project Steering Committee.

Matthew Hanson: I nominate Julia Signell for OSGeo Charter Membership. Julia is a Senior Software Engineer at Element 84, active in the Pangeo community and a member of the STAC Steering Committee. She has contributed to widely used open-source libraries including Dask, HoloViz, and STAC tools, presented at FOSS4G, and consistently promotes interoperability and best practices in geospatial data. Her technical expertise, leadership, and commitment to open source make her an excellent candidate.

* Profile: [https://www.osgeo.org/member/signell/ Julia Signell ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Jsignell Julia Signell ]
|

[https://www.osgeo.org/member/mandel Alex Mandel ]

[https://www.osgeo.org/member/hanson/ Matthew Hanson ]

|- valign='top'
| 21
| Simon Nitz
| New Zealand
| I nominate Simon Nitz for his outstanding dedication to advancing OSGeo's mission in education and community building. As an active FOSS4G organizer and OSGeo Oceania member, Simon has helped organise FOSS4G events in Oceania, as well as led numerous QGIS training workshops. This year Simon is Co-Chair for the Global FOSS4G event being held in Auckland New Zealand. His tireless efforts have successfully introduced FOSS4G to a new generation of users and professionals, making him an ideal Charter Member to support the Foundation's governance and outreach efforts.

* Profile: [https://www.osgeo.org/member/nitz/ Simon Nitz ]
* Wiki: [https://wiki.osgeo.org/wiki/User:SimonNitz Simon Nitz ]
|

[https://www.osgeo.org/member/leith Alex Leith ]

|- valign='top'
| 22
| Pete Gadomski
| United States of America
| Pete is a member of the STAC Project Steering Committee, and has been presenting at OSGeo conferences since 2018 in St. Louis. He has been actively contributing to open source geospatial projects for over a decade, especially for point cloud processing and format translation (e.g. PDAL). He maintains several small open source geospatial projects, including a Rust implementation of the LAS specification (las-rs) and a Python package for correcting geometries that cross the antimeridian (https://joss.theoj.org/papers/10.21105/joss.07530). He actively maintains several key packages in the STAC software ecosystem, including pystac and pystac-client, and has a Rust implementation (with Python bindings) of the STAC specification at rustac. He regularly talks about geospatial software development at conferences and community events, including FOSS4G international and regional conferences, Pangeo meetups, and more.

* Profile: [https://www.osgeo.org/member/gadomski/ Pete Gadomski ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Gadomski Pete Gadomski ]
|

[https://www.osgeo.org/member/leong Wei Ji Leong ]

|- valign='top'
| 23
| Gabriel De Luca
| Argentina
| Gabriel actively contributes to the open source geospatial community through his involvement in the QGIS, Geoinquiet@s and OpenStreetMap Argentina communities. He is a Land Surveying Engineer with a strong background in geospatial sciences and is recognized for his generosity in sharing knowledge, his enthusiasm for free and open source software, and his commitment to supporting new users and improving their experience with OSGeo projects. He consistently demonstrates a responsible attitude and adapts well to teamwork.

* Profile: [https://www.osgeo.org/member/gabriel/ Gabriel De Luca ]
* Wiki: [https://wiki.osgeo.org/wiki/Gabrieldeluca Gabriel De Luca ]
|

[https://www.osgeo.org/member/anthieni Ariel Anthieni ]

|- valign='top'
| 24
| Ulrike Assmann
| Germany
| Ulrike Assmann is a familiar face at conferences like FOSS4G and the german language FOSSGIS. Ulrike Assmann is an active member of FOSSGIS e.V (since 2017) and a Member of the programme committee since 2021. Ulrike is good in networking and welcomes newcomer to our community. Ulrike organized several Geochicas meetings at FOSSGIS conferences. Ulrike Assmann has been working on the use of open-source geoinformation systems since several years. She supports OSGeo since many years and is a power user for QGIS and PostgreSQL/PostGIS. She is currently Senior Hydrographic Cartographer in the Hydrographic Office of Germany (BSH).

* Profile: [https://www.osgeo.org/member/assmann/ Ulrike Assmann ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Uass Ulrike Assmann ]
|

[https://www.osgeo.org/member/astrid-emde Astrid Emde ]

|- valign='top'
| 25
| Mikhaïl Jean de Dieu Dotou Padonou
| Benin
| I have known Mikhaïl since 2021, when he participated in the Free GIS ARES-CCI internship, I coordinate at the Université Libre de Bruxelles (ULB), where he was highly motivated and proactive. He is now pursuing a PhD at the University of Liège (ULg) in partnership with the University of Parakou, focusing on GIS, remote sensing, and landscape ecology. Mikhaïl is the promoter of the Atlas de l’environnement du Bénin (https://dotoupadonou.wixsite.com/mikhail-eportfolio/post/le-b%C3%A9nin-en-cartes-atlas-de-l-environnement-2025), an open-access atlas using QGIS and other FOSS4G tools, which has produced over 100 thematic maps widely used by researchers, NGOs, and public institutions. He continues to support capacity building in geospatial technologies, sharing his expertise in our internship for professionals from mostly Central African countries, but also mentoring new users, and collaborating with the informal OSGeo community in Benin (e.g., reflecting on the official recognition of a local chapter and contributing to the organization of a future FOSS4G event in West Africa). His proactive engagement, participation in several French FOSS4G events (last one https://conf.qgis.osgeo.fr/), and dedication to knowledge sharing make him an outstanding candidate for OSGeo Charter Membership.

* Profile: [https://www.osgeo.org/member/dotou/ Mikhaïl Jean de Dieu Dotou Padonou ]
* Wiki: [https://wiki.osgeo.org/wiki/Https://www.osgeo.org/member/dotou/ Mikhaïl Jean de Dieu Dotou Padonou ]
|

[https://www.osgeo.org/member/maelle Maëlle Vercauteren Drubbel ]

|- valign='top'
| 26
| Sunghoon Cha
| South Korea
| Sunghoon Cha is a highly capable technical leader and instructor dedicated to developing and deploying FOSS4G-based systems. He holds degrees in geography and information engineering, and brings more than 20 years of hands-on GIS experience encompassing programming, project management, and system architecture. His domain knowledge spans large-scale system integration. He regularly provides consulting and developer/user training tailored to government system needs, enabling open-source GIS solutions to be adopted in complex public environments. He has demonstrated consistent leadership in transferring FOSS4G best practices and know-how to large-scale systems—ensuring sustainable, scalable, and maintainable implementations. His work contributes meaningfully to addressing global priorities like carbon neutrality and green growth. As a long-standing member of the OSGeo Korean Chapter (since 2012) and an Open Source GIS Instructor at LX Spatial Information Academy (since 2018), Sunghoon has sustained his commitment to education, community building, and technical advocacy. His continued contributions in training, system deployment, and outreach reflect the very positive attributes expected of an OSGeo Charter Member: technical excellence, community leadership, commitment to open principles, and real-world impact.

* Profile: [https://www.osgeo.org/member/cha/ Sunghoon Cha ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Sunghoon_Cha Sunghoon Cha ]
|

[https://www.osgeo.org/member/lee-minpa MinPa Lee ]

|- valign='top'
| 27
| Max Jones
| United States of America
| Max has been contributing to the open source geospatial ecosystem since 2020 by building datasets, software, and educational resources. He led short courses for the EarthScope consortium on GMT for Geodesy, organized the 2021 ESWN Workshop Professional Development Workshop: Developing Free and Open Source Software with PyGMT (Max has been contributing to the open source geospatial ecosystem since 2020 by building datasets, software, and educational resources. He led short courses for the EarthScope consortium on GMT for Geodesy, organized the 2021 ESWN Workshop Professional Development Workshop: Developing Free and Open Source Software with PyGMT, taught tutorials on PyGMT at EGU 2022, Xarray at SciPy 2024, and Pangeo at EGU 2025. He has further demonstrated a commitment to outreach by leading the Earth Science Data Systems Working Group on Community Development Best Practices and the Pangeo Machine Learning working group. He serves as a Steering Council member on Pangeo and regularly helps with community engagement through website maintenance, showcase organization, and event coordination. He is a founding member of the Cloud Native Geospatial Forum’s Editorial Board. Lastly, he has maintained several open source geospatial software libraries including GMT, PyGMT, Xbatcher, Ndpyramid and Zarr.), taught tutorials on PyGMT at EGU 2022, Xarray at SciPy 2024, and Pangeo at EGU 2025. He has further demonstrated a commitment to outreach by leading the Earth Science Data Systems Working Group on Community Development Best Practices and the Pangeo Machine Learning working group. He serves as a Steering Council member on Pangeo and regularly helps with community engagement through website maintenance, showcase organization, and event coordination. He is a founding member of the Cloud Native Geospatial Forum’s Editorial Board. Lastly, he has maintained several open source geospatial software libraries including GMT, PyGMT, Xbatcher, Ndpyramid and Zarr.

* Profile: [https://www.osgeo.org/member/jones-2/ Max Jones ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Maxrjones Max Jones ]
|

[https://www.osgeo.org/member/leong Wei Ji Leong ]

|- valign='top'
| 28
| Huidae Cho
| United States of America
| Luca Delucchi: Huidae is a long time GRASS GIS developer, his contribution is related to water resources engineering and hydrology, optimization algorithms, and uncertainty analysis. He is really active in the community and he also mentored students in Google Summer of Code.

Helmut Kudrnovsky: For very long time, Huidae Cho is part of the GRASS development team. He has an outstanding knowledge of the GRASS source code; recently he pushes forward the cmake build of GRASS; he always a helping hand for the community and involves young members of his lab into GRASS development; he`s a member of the current GRASS PSC.

* Profile: [https://www.osgeo.org/member/huidae-cho/ Huidae Cho ]
* Wiki: [https://wiki.osgeo.org/wiki/User:HuidaeCho Huidae Cho ]
|

[https://www.osgeo.org/member/luca-delucchi Luca Delucchi ]

[https://www.osgeo.org/member/kudrnovsky Helmut Kudrnovsky ]

|- valign='top'
| 29
| Heather Hillers
| Germany
| Heather Hillers is a familiar face at conferences like FOSS4G and the german language FOSSGIS or QGIS User meeting. Heather is good in networking and very interested in new technologies and learning. She joins networking meetings for example the Geochicas meetings at conferences and welcomes newcomer to our community. Heather Hillers is working at Erftverband in Germany working in Open Source GIS since 10 years. She is an all-round talent and a programmer and has fun with writing QGIS plugins and is a power user for QGIS and PostgreSQL/PostGIS. She is successfully introducing Open Source technologies to the organisation she is workling for and manages to master the challenges she faces. It would be great to welcome Heather as a Charter member as she inspires others with her energy and her knowledge.

* Profile: [https://www.osgeo.org/member/hillers/ Heather Hillers ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Monstermushroom Heather Hillers ]
|

[https://www.osgeo.org/member/astrid-emde Astrid Emde ]

|- valign='top'
| 31
| Juan Pablo Duque Ordoñez
| Colombia
| Federica Gaspari: Juan Pablo is currently completing is Ph.D. journey in Geoinformatics at Politecnico di Milano, with research focused on open-source software application in the geospatial domain. Coming from Colombia with a computer science background, he is currently working on the usage of open source software, open data, and open geospatial standards for the development of Urban Digital Twins, in particular for street network analysis and active mobility. Passionate about new tools and impactful solutions, he is an enthusiast member of the community, having participated in multiple ISPRS and FOSS4G conferences both as presenter and volunteer, as well as developing and collaborating with open-source software projects regarding OSGeo and OGC tools.

Marco Minghini: His passion and enthusiasm would make him a great ambassador for open source geospatial software. Please welcome him as a Charter Member

* Profile: [https://wiki.osgeo.org/wiki/User:Diuke1347 Juan Pablo Duque Ordoñez ]
* Wiki: [https://www.osgeo.org/member/duque-2/ Juan Pablo Duque Ordoñez ]
|

[https://www.osgeo.org/member/gaspari Federica Gaspari ]

[https://www.osgeo.org/member/minghini Marco Minghini ]

|- valign='top'
| 32
| Evelyn Uuemaa
| Estonia
| Evelyn works at the University of Tartu, where she leads the Landscape Geoinformatics Lab since 2017. She is a Professor in Geoinformatics and Head of the Chair of Geoinformatics and Cartography since 2023. She is extremely passionate about open source geospatial software, strongly using and promoting it both in her research and teaching activities. She has attended several international FOSS4G conferences. Among these, she was one of the organisers of the very successful FOSS4G Europe 2024 and on that occasion, she co-chaired the conference Academic Track with me, showing a unique passion and dedication. She is an ambassador of FOSS4G values and principles and for this reason she would represent a great asset for OSGeo if elected as a Charter Member.

* Profile: [https://www.osgeo.org/member/uuemaa/ Evelyn Uuemaa ]
* Wiki: [https://wiki.osgeo.org/wiki/Evelyn_Uuemaa Evelyn Uuemaa ]
|

[https://www.osgeo.org/member/minghini Marco Minghini ]

|- valign='top'
| 33
| Jani Kylmäaho
| Finland
| Jani has been an active member of the FOSS4G community in Finland for many years. He has been a member of the Oskari development team (www.oskari.org). He has actively shared the message and value of open source software for the public and private sector. He also has held several talks about the value of FOSS4G in local and international events (including FOSS4G events). I think Jani will be a valuable charter member of OSGeo.

* Profile: [https://www.osgeo.org/member/kylmaaho/ Jani Kylmäaho ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Jkylmaaho Jani Kylmäaho ]
|

[https://www.osgeo.org/member/pekka-sarkola Pekka Sarkola ]

|- valign='top'
| 34
| Nicklas Larsson
| Hungary
| Nicklas Larsson is a very important member of the GRASS delevoper team and GRASS PSC, recently helping in building the Mac binaries of GRASS and pushing forward the GRASS cmake build system; he has always a helping hand for the community.

* Profile: [https://www.osgeo.org/member/larsson/ Nicklas Larsson ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Nila Nicklas Larsson ]
|

[https://www.osgeo.org/member/kudrnovsky Helmut Kudrnovsky ]

|- valign='top'
| 35
| Michael Barton
| United States of America
| Michael Barton is a very long member of the GRASS community; he had always a look at the Mac side of GRASS; he develeoped the Tcl/TK GUI interface of GRASS back then, later started on the wxpython GUI development for GRASS; he is former member of the GRASS PSC with a high focus of community building.

* Profile: [https://www.osgeo.org/member/barton/ Michael Barton ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Cmbarton Michael Barton ]
|

[https://www.osgeo.org/member/kudrnovsky Helmut Kudrnovsky ]

|- valign='top'
| 37
| Jarrett Keifer
| United States of America
| Jarrett is a Senior Geospatial Software Engineer at Element 84, active in the open-source geospatial community through his work on STAC, COG, Zarr, and orchestration frameworks such as Cirrus. He has presented at FOSS4G on cloud-native geospatial and data interoperability, and has contributed to advancing scalable, standards-based workflows for earth observation data. His open-source contributions, community involvement, and commitment to interoperability make him an excellent candidate.

* Profile: [https://www.osgeo.org/member/keifer/ Jarrett Keifer ]
|

[https://www.osgeo.org/member/hanson/ Matthew Hanson ]

|- valign='top'
| 38
| Céline Vilain
| Belgium
| Gaël Kruwialis: I am honored to nominate Céline Vilain as an OSGeo Charter Member, with the full support of Roel Huybrechts. Céline has been an increasingly active and influential member of OSGeo Belgium for the past three years, demonstrating a deep commitment to open-source geospatial solutions and open data. Céline’s journey began in agronomic sciences, but it was during her Master’s in Geomatics that she discovered the power and potential of open-source tools. Since then, she has become a strong advocate for free and open-source solutions within her professional role in public administration, where she promotes their adoption to enhance transparency, interoperability, and efficiency. Her contributions to OSGeo Belgium have grown significantly over time. She actively participates in community events, shares her expertise, and works to bridge the gap between public institutions and the open-source geospatial ecosystem. Céline’s dedication to fostering collaboration, her technical skills, and her passion for open data make her a valuable asset to our community. Her work not only advances the use of open-source geospatial technologies in Belgium but also inspires others in the public sector to embrace these solutions. Her ability to connect with both technical and non-technical stakeholders makes her an excellent candidate for Charter Membership.

* Profile: [https://www.osgeo.org/member/vilain/ Céline Vilain ]
* Wiki: [https://wiki.osgeo.org/wiki/C%C3%A9line_Vilain Céline Vilain ]
|

[https://wiki.osgeo.org/wiki/User:Gael1 Gaël Kruwialis ]

|- valign='top'
| 39
| Niklas Alt
| Germany
| Niklas is an active member of FOSSGIS e.V (since 2016). He is active in several working groups of FOSSGIS e.V. and helps to organize the annual FOSSGIS conference. He was involved in organizing and chairing panel discussions on the conference. He is currently employed at the Hessian Institute for Regional History in Marburg. He aims to foster the use and acceptance in historical academic research and public institutions on the federal, national and european level. His academic interest lies within the spatial humanities, using exlusively an OSGeo Software Stack and promoting the use of free and open software and a commitment to open historical geodata and open standards within this community. His work involves the reconstruction of historical boundaries, the georeferencing of historical maps and the reconstruction of historical spatial reference systems. To this end he is using PostGIS, GDAL, PROJ, QGIS, GRASS GIS and OpenLayers. He is coordinating an international data standardization group aiming to build an open data model to standardize the data structures in the Historical Town Atlas (HTA). The HTA aims to reconstruct the face of the premodern European cities using a critical cartographic edition of the first exact cadastral maps.

* Profile: [https://www.osgeo.org/member/alt/ Niklas Alt ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Hilmr Niklas Alt ]
|

[https://www.osgeo.org/member/astrid-emde Astrid Emde ]

|- valign='top'
| 40
| Christian Strobl
| Germany
| Christian Strobl is a familiar face at conferences like FOSS4G and the german language FOSSGIS. Christian is an active member of FOSSGIS e.V (since 2008) and a Member of the programme committee since 2021. He attended also often the international FOSS4G conferences, the last time at Prizren 2023. Christian is passionate about teaching open-source GIS. In addition to his teaching position at LMU Munich, where he trains geology students in developing geological applications and maps with QGIS, he has frequently given workshops at our FOSSGIS conference on remote sensing and GeoPython.. Christian has been working with open-source geoinformation systems for over 20 years, from PostGIS and GeoServer/UMN MapServer to QGIS and GeoPython. He is Geographical Information Officer at the Bavarian State Ministry of the Environment and Consumer Protection

* Profile: [https://www.osgeo.org/member/strobl/ Christian Strobl ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Christro Christian Strobl ]
|

[https://www.osgeo.org/member/astrid-emde Astrid Emde ]

|- valign='top'
| 41
| Andrés Gómez Casanova
| Colombia
| Andrés Gómez is a driving force behind collaborative mapping in Latin America, combining deep expertise in OpenStreetMap, workflow automation, and community-led geospatial initiatives. Through his leadership of AC3 and as an organizer of State of the Map Latam 2025, he has promoted inclusive participation, technical capacity building, and strategic outreach across diverse regions. His contributions range from scripting and systems optimization to multilingual documentation and event coordination —always grounded in the values of openness, transparency, and empowerment.

* Profile: [https://www.osgeo.org/member/gomez/ Andrés Gómez Casanova ]
* Wiki: [https://wiki.openstreetmap.org/wiki/User:Angoca Andrés Gómez Casanova ]
|

[https://www.osgeo.org/member/anthieni Ariel Anthieni ]

|- valign='top'
| 42
| Mirko Blinn
| Germany
| Astrid Emde: Mirko Blinn is a familiar face at conferences like FOSS4G and FOSSGIS. He supports OSGeo since many years promoting the foundation and software at the OSGeo booth at conferences. Mirko Blinn has been working on the use of open-source geionformation systems in the field of spatial planning and nature conservation since 2015. In his dissertation at the University of Bonn, he is currently researching, among other things, the use of open geodata in land use models to simulate sustainable settlement developments and their integration in spatial planning processes. Since 2018, he has been supporting 40 nature conservation associations in Nordrehein-Westpfalen, Germany, in the implementation of QGIS, QFIELD and the development of a central database for the consolidation of plant and animal data from various data sources (e.g. from portals such as Obersavation.org, GIS, etc.).

* Profile: [https://www.osgeo.org/member/blinn/ Blinn Mirko ]
|

[https://www.osgeo.org/member/astrid-emde Astrid Emde ]

|- valign='top'
| 43
| Alastair Graham
| United Kingdom
| Alistair has been an active Open Source supporter in the UK for a number of years, including being an OSGeo:UK committee member since 2019, he has co-organised FOSS4G:UK meetings in 2020, 2022 and 2024: He is keen to help coordinate the bid for and organization of the next FOSS4G international conference in the UK (2027). He has also previously organized the very successful Rasters Revealed conference series. He is an advocate of open-source and open-data and want to help healthy communities grow around tooling, data and ideals linked to these concepts.

* Profile: [https://www.osgeo.org/member/graham/ Alastair Graham ]
* Wiki: [https://wiki.osgeo.org/wiki/Alastair_Graham Alastair Graham ]
|

[https://www.osgeo.org/member/bearman Nick Bearman ]

|- valign='top'
| 44
| James Milner
| United Kingdom
| James is a open source developer living in East London, currently working remotely for Addresscloud. He is the founder and lead maintainer of the Terra Draw project, a JavaScript library for drawing on web maps. The library is currently a OSGeo community project and was selected to be worked on at the FOSS4G UK CodeSprint in 2024 in Dorset. The project was also recipient for the OSGeo UK’s GoFundGeo prize in 2023 and 2024. James was the co-chair for FOSS4G UK in 2018 and has spoken at many national, European and global FOSS4G events over the years. He is currently on the Space Advisory board for OpenUK, a not-for-profit company which supports open source collaboration and open technologies within the United Kingdom.

* Profile: [https://www.osgeo.org/member/milner/ James Milner ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Jameslmilner James Milner ]
|

[https://www.osgeo.org/member/bearman Nick Bearman ]

|- valign='top'
| 45
| Jonny Huck
| United Kingdom
| I am very happy to nominate Jonny Huck as a Charter Member. He is a Professor of Computational Geography at the University of Manchester and a Director of Lune Geographic Ltd GIS Consultancy. He maintains the Polygon Divider plugin for QGIS, alongside a range of other Open Source GIS scripts and software. He has been a committee member of OSGeo:UK since 2024, and was a local chair/co-chair for FOSS4G:UK in 2023 (Manchester) and 2024 (Lancaster), and also moderates the UK mailing list.

* Profile: [https://www.osgeo.org/member/huck/ Jonny Huck ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Jonnyhuck Jonny Huck ]
|

[https://www.osgeo.org/member/bearman Nick Bearman ]

|- valign='top'
| 46
| Michel Stuyts
| Belgium
| I am honored to nominate Michel Stuyts as an OSGeo Charter Member. Michel has been a pillar of the Belgian geospatial open-source community, making substantial contributions to projects like QGIS and MapGuide Open Source, and promoting the use of open geospatial web services. Through his blog (www.michelstuyts.be and geone.ws) and active presence on social media, he has played a crucial role in sharing resources, educating users, and making geospatial data more accessible in Belgium. His efforts in organizing and participating in community events, such as GeoDevEvening and FOSS4G Belgium, have helped grow and sustain the local open-source geospatial ecosystem. Michel’s technical skills, dedication to open data, and his ability to connect and support others in the community embody the qualities of an OSGeo Charter Member. His work has not only advanced the use of open-source tools but has also inspired others.

* Profile: [https://www.osgeo.org/member/michel-stuyts/ Michel Stuyts ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Mstuyts Michel Stuyts ]
|

[https://wiki.osgeo.org/wiki/User:Gael1 Gaël Kruwialis ]

|- valign='top'
| 47
| Marc Ducobu
| Belgium
| Marc has been a foundational member of the Belgian open-source geospatial community for many years, contributing significantly through his involvement in OSGeo.be as a founding member and his active role in organizing key events such as GeoDevEvening and FOSS4G Belgium. His dedication to fostering collaboration, promoting open-source geospatial tools, and supporting community growth aligns perfectly with the values and requirements of an OSGeo Charter Member. Marc’s leadership in building bridges between public institutions, private actors, and the open-source community has strengthened the ecosystem in Belgium. Recently, he also joined the OSGeo Belgium board, further demonstrating his commitment to advancing open geospatial technologies. His technical expertise, organizational skills, and passion for open data make him an excellent candidate for this recognition.

* Profile: [https://www.osgeo.org/member/ducobu/ Marc Ducobu ]
* Wiki: [https://wiki.osgeo.org/wiki/User:Marcu Marc Ducobu ]
|

[https://wiki.osgeo.org/wiki/User:Gael1 Gaël Kruwialis ]

|}

[[Category:Elections]]
[[Category:Election 2025]]

SAC:Budget

2025-09-24T01:11:46Z

Cvvergara: /* 2025 */

Please help fill in the based on this [https://drive.google.com/open?id=0ByfEHeRRT620SnliNDhJT25HTms pdf report] from the treasurer.
Budget allocations can be found via general budget pages on the wiki.

== 2025 ==

'''''[[OSGeo_Budget_2025]]'''''
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 55850 [16000] || 0 || Total Requested
|-
| Hosting || 6,500 [0] || 0 ||OSUOSL for hosting services $6500
|-
| Wordpress ACF Pro Plugin || 150[0] || 0 || https://www.advancedcustomfields.com/pro/?utm_source=ACF+PRO (needed for both prod and dev)
|-
| Limesurvey || 100 [0] || 0 || ComfUpdate payment
|-
| Hardware Supplies || 2,500 [0] || 0 || Emergency reserve for replacing parts as needed (drives, power supplies etc) and new hard drives, but not planned any change
|-
| Donations open source infra projects || 4,000 [0] || 0 || See https://wiki.osgeo.org/wiki/SAC:Budget#Donations_open_source_infra_projects
|-
| Domains || 300 [300] ||0 || Renewals, expect 5 domains (~$15 x 5 years each)
|-
| Sysadmin || 44800 [15,360] || 7680 (vicky) || 350 hrs contract time (120 hrs approved) to be split up as needed -- Specific or General support contracts. See [[SAC:Budget#SysAmin contracts]] for details.
|-
| General In-kind support || || || Discourse moderation (~25 hrs) , Mailman moderation (~15 hrs), Weblate Moderation (~5 hrs), Pretalx Moderation (~ 5 hrs) , Mantra Moderation ~90 hrs (guesstimate)
|}

=== SysAmin contracts ===
{| class="wikitable sortable"
|-
! Name !! Hours !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Sandro || 60 [0] || 7680 [0] || || New mail system (major upgrade to be used by mailman, discourse, gitea, and all other osgeo services), ansible standardization; General support. This should significantly reduce spam and also make our mail less prone to being flagged as spam by google etc
|-
| Vicky ||60 [0] || 7680 [0] || 7680|| Mailing lists to Discourse migration and mirroring, website/wordpress fixes to support newer PHP, General support
|}

== 2024 ==

'''''[[OSGeo_Budget_2024]]'''''
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 51950 [21500] || 0 || Total Requested
|-
| Hosting || 6,500 [0] || 0 ||OSUOSL for hosting services $6500
|-
| Wordpress ACF Pro Plugin || 150[0] || 0 || https://www.advancedcustomfields.com/pro/?utm_source=ACF+PRO (needed for both prod and dev)
|-
| Limesurvey || 100 [0] || 0 || ComfUpdate payment
|-
| Hardware Supplies || 2,500 [0] || 0 || Emergency reserve for replacing parts as needed (drives, power supplies etc) and new hard drives, but not planned any change
|-
| Donations open source infra projects || 4,000 [0] || 0 || See https://wiki.osgeo.org/wiki/SAC:Budget#Donations_open_source_infra_projects
|-
| Domains || 300 [0] ||341 || Renewals, 13 renewals and registrations for 1 year $21.85/year
|-
| Sysadmin || 38,400 [19200] || ~19200 || Specific or General support contracts. Can be used in any hours desired and rate/hr, to be approved by SAC PSC. Key items for this year: Upgrade LDAP, Osgeo6, OSGeo7, secure, pretalx, wiki, matrix, mail system, migrate mailing lists to discourse, standardize infra on ansible, update documentation on our system setup

|}

=== Donations open source infra projects ===
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Pretalx || 500 [0] || 0 ||
|-
| weblate || 500 [0] || 0 ||
|-
| Matrix || 500 [0] || 0 ||
|-
| LiberaChat || 500 [0] || 0 ||
|-
| Trac || 500 [0] || 0 ||
|-
| gitea || 500 [0] || 0 ||
|-
| LXD/Incus (main contributor) || 500 [0] || 0 ||
|-
| jitsi || 500 [0] || 0 ||
|}

=== SysAmin contracts ===
{| class="wikitable sortable"
|-
! Name !! Hours !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Regina || 100 [50] || 12800 [6400] || || Upgrades: wiki (major upgrade, our version is EOL), pretalx (major upgrade flip to postgres, new preferred db), osgeo7, osgeo6, ldap (this is a major upgrade since requires db upgrade); Other upgrades as needed; General support
|-
| Sandro || 100 [50] || 12800 [6400] || || Upgrade mail (major upgrade to be used by mailman and discourse), matrix (newer clients will not be able to use soon without upgrade); ansible standardization; General support
|-
| Vicky || 100 [50] || 12800 [6400] || || Discourse migration and mirroring, website/wordpress, ansible standardization, nginx, General support
|}

== 2023 ==

'''''[[OSGeo_Budget_2023| Submitted to Board]]'''''
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 32550 [32550] || ? || Total Requested
|-
| Hosting || 6000 [6000] || ? || Donation to OSUOSL for hosting services $6000
|-
| Hardware Supplies || 2,500 [0] || 0 ||Reserve for replacing parts as needed (drives, power supplies etc)
|-
| Cloud Hosting || 1,000 [1000] || 0 || Fund for utilizing 3rd party cloud services
|-
| Donations open source infra projects || 4,000 [4000] || $2582? || Given: Pretalx, weblate, Matrix, LiberaChat, Limesurvey, Trac, gitea, incus/lxd (main contributor), LimeSurvey Comfupdate ($82)
|-
| Domains || 300 [300] || 136 || Renewals, expect 3 domains (~$15 x 5 years each)
|-
| Sysadmin || 18750 [18750] || ~$18592 || 150 hours, ~3x 50 hour general support contracts (~6250 USD each)

|}

=== Donations open source infra projects ===
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Pretalx || 500 || 500 ||
|-
| weblate || 500 || 500 ||
|-
| Matrix || 500 || 0 ||
|-
| LiberaChat || 500 || 500 ||
|-
| Trac || 500 || ? ||
|-
| gitea || 500 [0] || ? ||
|-
| LXD/Incus (main contributor) || 500 [0] || 500 ||
|-
| jitsi || 500 [0] || ? ||
|-
| Limesurvey || 82 || 82 ||
|}

== 2022 ==

'''''[[OSGeo_Budget_2022| Submitted to Board]]'''''
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 32550 [32,550] || 26905.32 || Total Requested
|-
| Hosting || 5000 [5000] || 5000 || Donation to OSUOSL for hosting services $5000
|-
| Hardware Supplies || 2,500 [2,500] || ~$526 || Drives for osgeo8 and osgeo9
|-
| Cloud Hosting || 2,000 [2,000] || 0 || Fund for utilizing 3rd party cloud services
|-
| Donations open source infra projects || 4,000 [4,000] || ~2582 USD || Currently dispensed: Pretalx , Weblate, Limesurvey (78 Euro) for comfort update tool), gitea, LiberaChat , Matrix. Help keep software we use FOSS in particular projects with very few developers
|-
| Domains || 300 [300] || 22.65 + 377.5 + 22.65 = 422.80 || Renewals, expect 3 domains (~$15 x 5 years each)
|-
| Sysadmin || 18750 [18750] || 5975 + 6200 + 1891 + 1891 + 1580 + 713 + 124 ($18374) || 150 hours, ~3x 50 hour general support contracts (~6250 USD each)

|}

== 2021 ==

'''''[[OSGeo_Budget_2021| Submitted to Board]]''''' - [[http://osgeo-org.1560.x6.nabble.com/SAC-2021-Budget-Vote-td5454922.html vote]]
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 35100 [30,700] || 0 || Total Requested - New amount is $31600 + (with $3500 carried from 2020 contract - see below)
|-
| Hosting || 4,600 || 0 || Donation to OSUOSL for hosting services $4600
|-
| Hardware Supplies || 1,000 || 0 ||Reserve for replacing parts as needed (drives, power supplies etc)
|-
| Cloud Hosting || 6,000 || 0 || Fund for utilizing 3rd party cloud services as needed includes Travis ($5000) + $1000 set aside for others
|-
| Domains || 300 || 0 || Renewals, expect 3 domains (~$15 x 5 years each), expect a few transfers from Eclipse Foundation.
|-
| Sysadmin || 13200 [8800] || 0 || 120 hours, ~3x 40 hour general support contracts (~4400 USD each)
|-
| Wiki LDAP Completion || $6,500 || $8050 || Contract to complete migration Wiki logins to LDAP, OSGeo single sign on. This amount is the maximum, it could cost less based on actual hours required to complete.
|-
| Wiki LDAP || $3,500 || $3,500 || Existing contract commitment from 2020.
|}

* Regina - I think funtoo we should discontinue because we only had limesurvey on there and I have since moved that to osgeo3. We will be using more OSUOSL resources for the osgeo8 and osgeo9 so that $600 saved on funtoo should be allocated to OSUOSL to compensate for the extra rackspace and support we'll need.
* Alex - Wiki LDAP project was split for easier accounting and the need to carry an already contracted amount over. Compromise in terms of total support hours, +20 from 100 hours in light of budget constraints, and the ongoing Wiki LDAP project costs. We only spent 100 hours last year, the remaining being spent on the Wiki LDAP project. On mailing list somewhere between 2-4 contracts was suggested 100-200 hours.
* Jody - isolated prior commitment into a distinct line, board does not hold over budget annually so I wanted to phrase this as a existing contract commitment.

== 2020 ==

{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 28350 || ~12632 || Total Requested
|-
| Hosting || 4,600 || ? || Donation to OSUOSL for hosting services $4000, $500 to funtoo (as monthly payments of $50/mth).
|-
| Hardware Supplies || 1,000 || 742 ||Reserve for replacing parts as needed (drives, power supplies etc)
|-
| Cloud Hosting || 6,000 || ? || Fund for utilizing 3rd party cloud services as needed includes Travis ($5000) + $1000 set aside for others
|-
| Domains || 250 || 390 || Renewals and new ones: postgis.net, gdal.org, proj.org, geotools.org, mapserver.org
|-
| Sysadmin || 16500 || 16500[Contracted, ~$11,500 spent] || 3x 50 hour support contracts (~5500 USD each), 1 for Wiki/LDAP, 2 for general support/upgrade
|}

== 2019 ==
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 23750 || 15351.72 || Total Requested and Approved
|-
| Hosting || 5,000 || $4000+6*50?/month || Donation to OSUOSL for hosting services $4000, to make up for last year, $1000 to funtoo (as monthly payments of $50).
|-
| Hardware Supplies || 1,000 || 776 ||Reserve for replacing parts as needed (drives, power supplies etc)
|-
| Cloud Hosting || 1,000 || || Fund for utilizing 3rd party cloud services as needed
|-
| Domains || 250 || 275.72 (65+56+24.72+65+65) || Renewals and new ones: postgis.net, gdal.org, proj.org, geotools.org, mapserver.org
|-
| Sysadmin || 16500? || 10000 || 3x 50 hour support contracts (~5500 USD each), at least 1 for wordpress, 1 for wiki LDAP migration, and 1 for general server support.
|}

== 2018 ==
{| class="wikitable sortable"
|-
! Item !! Amount(Proposed)[Approved] !! Amount(Spent) !!Notes
|-
| Budget || 20,250[20,000] || 10201 ||
|-
| Hosting || 2,000 || 0 || Donation to OSUOSL for hosting services - Was held up waiting for board to add more funds.
|-
| OSGeo7 || 6,000 || 7,221 ||New machine to replace OSGeo3. Was budgeted last year but not spent/purchased due to logistics.
|-
| Cloud Hosting || 1,000 || Travis?? ||Fund for utilizing 3rd party cloud services as needed
|-
| Domains || 250 || 230 || Renewals and new ones (65+56+19+45+45)
|-
| Sysadmin || 11,000 || ~2,750 || 2x 50 hour support contracts
|}

== 2017 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| Budget || 15,000 || (+$3000 for new website if needed)
|-
| WebSite Hosting Transfer || -384.03 || GetInteractive
|-
| Cloud Hosting || -100.00 || 34.95 Euro/month, estimated cost 2.5 months.
|-
| Sysadmin || -5533.05 || strk, 5000 EUR (USD approximate)
|}

== 2016 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| Budget || 12,800 ||
|-
| SSL Certs || -744.51 || 3 yr.
|-
| Domains || -195.97 ||
|-
| Sysadmin || -5200 || strk, 5000 EUR (USD approximate)
|}

== 2015 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| [[OSGeo Budget 2015|Budget]] || 8,700.00 ||
|-
| OSGeo6 || -5,580.82 ||
|-
| Domains || -214.00 ||
|-
| CodeHaus Move Contract || -800.00 ||
|}

== 2014 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| [[OSGeo Budget 2014|Budget]] || 12054 ||
|-
| Hard Drive & PSU Replacement || -245.06 || 3 yr.
|-
| PEER1 Hosting || -1,903.73 ||
|}

== 2013 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| [[OSGeo Budget 2013|Budget]] || 12054 ||
|-
| Backup Server || -2,403.00 ||
|-
| PEER 1 Hosting || -1,204.51 ||
|-
| OSUOSL Hosting (Donation) || -3150.00 ||
|}

== 2012 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| [[OSGeo Budget 2012|Budget]] || 12600 ||
|-
| PEER 1 Hosting || -7,820.15 ||
|}

== 2011 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| Budget || ? ||
|-
| SSL Certs || -1,499 || 5 yr. OV
|-
| PEER 1 Hosting || -6,993.68 ||
|}

== 2010 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| [[OSGeo Budget 2010|Budget]] || 9900 ||
|-
| OSGeo 3/4 || -15,239.69 ||
|-
| Domains || -440.00 ||
|-
| Peer Directed Projects Center / Freenode || -77.00 || Anyone remember what this was for?
|-
| PEER 1 Hosting || -13,851.98 ||
|-
| Perflect / PSD2HTML || -533.00 || Anyone remember what this was for?
|}

== 2009 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| Budget || ? ||
|-
| SSL Certs || ? || 3 yr.
|-
| Domains || ? ||
|}

== 2008 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| Budget || ? ||
|-
| SSL Certs || ? || 3 yr.
|-
| Domains || ? ||
|}

== 2007 ==
{| class="wikitable sortable"
|-
! Item !! Amount !! Notes
|-
| Budget || ? ||
|-
| SSL Certs || ? || 3 yr.
|-
| Domains || ? ||
|}

[[Category:Budget]]
[[Category:Infrastructure]]

Board Meeting 2025-09-30

2025-09-22T22:15:56Z

Cvvergara: /* Current items */

This board meeting is '''scheduled Tuesday 30 September 2025''' at [https://www.timeanddate.com/worldclock/meetingdetails.html?year=2025&month=09&day=30&hour=06&min=0&sec=0&p1=250&p2=26&p3=49&p4=155&p5=16&p6=133 '''06:00''' UTC] through [https://meet.jit.si/OsgeoBoard Jitsi], a record of motions is preserved on [https://www.loomio.org/g/kdSmIwxu/osgeo-board Loomio] and actions on the [https://git.osgeo.org/gitea/osgeo/todo/issues OSGeo todo] issue tracker.

This is a F2F meeting during the [[OSGeo_Community_Sprint_2025]] event (9am local time).

== Agenda ==

=== Current items ===

# ''roll call''
# ''appoint meeting chair, meeting scribe/secretary''
# ''Review and approve past minutes''
#* [[Board_Meeting_2025-08-26]]
# ''Budget for physical move''
# ''Add your topic here''

== Minutes ==

* Presiding:
* Scribing:
* Attending:
* Guests:

=== Actions ===

* See https://git.osgeo.org/gitea/osgeo/todo/issues

== IRC Log ==
* no log, Jitsi meeting

== Next meeting ==
*[[Board Meeting 2025-10-28]]

[[Category:Board]]
[[Category:Board Meetings 2025]]

PgRouting Budget

2025-09-14T22:20:47Z

Cvvergara: Adding received amount

== 2025 ==

Budget asked
{| class="wikitable"
|-
| Budget request || $2000
|-
| Intended use: || Promotional material: Stickers, Postcards, magnets, etc. Traveling expenses to FOSS4G 2025 in Auckland, New Zealand
|-
| Budget approved: || $2000
|-
| Used Budget: || $2000 sent to Vicky Vergara
|-
| Used for: || traveling expenses to FOSS4G 2025 in Auckland, New Zealand
|}

== 2024 ==
Budget asked
{| class="wikitable"
|-
| Budget asked (to incubator)|| $2000
|-
| Intended use: || Incubation last tasks
|-
| Budget approved: ||
|-
| Used Budget: || 0
|-
| Used for: ||
|}

== 2023 ==

Budget asked
{| class="wikitable"
|-
| Budget asked (to incubator)|| $4000
|-
| Intended use: || Incubation, Code Sprint
|-
| Budget approved: || 4000
|-
| Used Budget: || 3000
|-
| Used for: || Incubation code sprint expenses
|}

== 2022 ==

Budget asked
{| class="wikitable"
|-
| Budget asked (to incubator)|| $4000
|-
| Intended use: || Incubation, Code Sprint
|-
| Budget approved: ||
|-
| Used Budget: || $3000 (from incubator)
|-
| Unused Budget: || $1000 (from incubator)
|-
| Used for: || pgRouting f2f incubation code sprint in Japan
|-
| Used Budget: || $300 (from OSGeo)
|-
| Used for: || pgRouting f2f incubation code sprint in Japan
|}

== 2021 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $4000
|-
| Intended use: || [[User:Cvvergara | Vicky Vergara]]: Incubation, Code Sprint, foss4G presentations & workshops
|-
| Used approved: || $300
|-
| Used Budget: || $300
|-
| Used for: || Mentor of UN-OSGeo challenge
|}

== 2020 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $4000
|-
| Intended use: || [[User:Cvvergara | Vicky Vergara]]: Incubation, Code Sprint
|-
| Used Budget: || $0
|-
| Used for: ||
|}

== 2019 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $2000
|-
| Intended use: || [[User:Cvvergara | Vicky Vergara]]: travel support to FOSS4G Bucharest (presentation, workshop, code sprint)
|-
| Used Budget: || $0
|-
| Used for: ||
|}

== 2018 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $500
|-
| Intended use: || Rohith Reddy to travel support to FOSS4G Dar Es Salaam
|-
| Used Budget: || $500
|-
| Used for: || Rohith Reddy to travel support to FOSS4G Dar Es Salaam, pgRouting presentation & paper presentation
|}

[[Category:Budget]]

PgRouting Budget

2025-09-06T01:32:12Z

Cvvergara: /* 2025 */

== 2025 ==

Budget asked
{| class="wikitable"
|-
| Budget request || $2000
|-
| Intended use: || Promotional material: Stickers, Postcards, magnets, etc. Traveling expenses to FOSS4G 2025 in Auckland, New Zealand
|-
| Budget approved: || $2000
|-
| Used Budget: ||
|-
| Used for: ||
|}

== 2024 ==
Budget asked
{| class="wikitable"
|-
| Budget asked (to incubator)|| $2000
|-
| Intended use: || Incubation last tasks
|-
| Budget approved: ||
|-
| Used Budget: || 0
|-
| Used for: ||
|}

== 2023 ==

Budget asked
{| class="wikitable"
|-
| Budget asked (to incubator)|| $4000
|-
| Intended use: || Incubation, Code Sprint
|-
| Budget approved: || 4000
|-
| Used Budget: || 3000
|-
| Used for: || Incubation code sprint expenses
|}

== 2022 ==

Budget asked
{| class="wikitable"
|-
| Budget asked (to incubator)|| $4000
|-
| Intended use: || Incubation, Code Sprint
|-
| Budget approved: ||
|-
| Used Budget: || $3000 (from incubator)
|-
| Unused Budget: || $1000 (from incubator)
|-
| Used for: || pgRouting f2f incubation code sprint in Japan
|-
| Used Budget: || $300 (from OSGeo)
|-
| Used for: || pgRouting f2f incubation code sprint in Japan
|}

== 2021 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $4000
|-
| Intended use: || [[User:Cvvergara | Vicky Vergara]]: Incubation, Code Sprint, foss4G presentations & workshops
|-
| Used approved: || $300
|-
| Used Budget: || $300
|-
| Used for: || Mentor of UN-OSGeo challenge
|}

== 2020 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $4000
|-
| Intended use: || [[User:Cvvergara | Vicky Vergara]]: Incubation, Code Sprint
|-
| Used Budget: || $0
|-
| Used for: ||
|}

== 2019 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $2000
|-
| Intended use: || [[User:Cvvergara | Vicky Vergara]]: travel support to FOSS4G Bucharest (presentation, workshop, code sprint)
|-
| Used Budget: || $0
|-
| Used for: ||
|}

== 2018 ==

Budget asked
{| class="wikitable"
|-
| Budget asked || $500
|-
| Intended use: || Rohith Reddy to travel support to FOSS4G Dar Es Salaam
|-
| Used Budget: || $500
|-
| Used for: || Rohith Reddy to travel support to FOSS4G Dar Es Salaam, pgRouting presentation & paper presentation
|}

[[Category:Budget]]

Election 2025

2025-08-22T18:22:07Z

Cvvergara: /* Requirements to be nominated */

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: website profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter member's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template for charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

=== Retirement during review and voting ===

The main responsibility of the charter Member is to submit a vote.

Ballots contain the following message:
If you do not want to participate in this survey and don't want to receive any more invitations regarding any OSGeo elections in the future, please click the following link:
<link>
At the end of the elections, you will receive a mail from cro@osgeo.org confirming that you are a retired Charter Member.

When the charter Member does not want to receive more invitations to vote in the future, it means they do not want to perform the main responsibility they gained as Charter members and they will be retired.
Clicking on the link will start the retirement process automatically.

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nominee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* '''Anyone''' is eligible to be nominated to the charter members election.
** [https://www.osgeo.org/about/charter-members/#retired-charter-members Retired Charter Members] are eligible.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Charter Members] are not eligible.
** [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible.
* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

==== Requirements to receive a ballot ====

Ballots are prepared by CRO once the nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Requirements for board election ===

==== Requirements from CRO for board elections ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate for board ====

* '''anybody''' can nominate a board member.
* Ask the nominee about accepting the nomination.
** The nominee will have to fulfill the [[#Requirements to be nominated for board]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated for board ====

* Must not be a CRO member
* Must be an active [https://www.osgeo.org/about/charter-members/#charter-members Charter Members]
* website profile page must exist
* website profile '''Email''' with a valid email
** this email will be used to send the ballots
* website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected for board ====

* To be elected, a charter member need a nomination and based on the the total sum of votes and seats available reach the position.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the member is not elected.

==== Requirements to receive a ballot for board elections ====

Ballots are prepared by CRO once the board nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the board nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nominate new Board Members (dates TBD) ===

* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
** See [[#Requirements to receive a ballot for board elections]]
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]

Election 2025

2025-08-22T18:21:34Z

Cvvergara: /* Requirements to be nominated */

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: website profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter member's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template for charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

=== Retirement during review and voting ===

The main responsibility of the charter Member is to submit a vote.

Ballots contain the following message:
If you do not want to participate in this survey and don't want to receive any more invitations regarding any OSGeo elections in the future, please click the following link:
<link>
At the end of the elections, you will receive a mail from cro@osgeo.org confirming that you are a retired Charter Member.

When the charter Member does not want to receive more invitations to vote in the future, it means they do not want to perform the main responsibility they gained as Charter members and they will be retired.
Clicking on the link will start the retirement process automatically.

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nominee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* Elegibility
** '''Anyone''' is eligible to be nominated to the charter members election.
** [https://www.osgeo.org/about/charter-members/#retired-charter-members Retired Charter Members] are eligible.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Charter Members] are not eligible.
** [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible.
* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

==== Requirements to receive a ballot ====

Ballots are prepared by CRO once the nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Requirements for board election ===

==== Requirements from CRO for board elections ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate for board ====

* '''anybody''' can nominate a board member.
* Ask the nominee about accepting the nomination.
** The nominee will have to fulfill the [[#Requirements to be nominated for board]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated for board ====

* Must not be a CRO member
* Must be an active [https://www.osgeo.org/about/charter-members/#charter-members Charter Members]
* website profile page must exist
* website profile '''Email''' with a valid email
** this email will be used to send the ballots
* website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected for board ====

* To be elected, a charter member need a nomination and based on the the total sum of votes and seats available reach the position.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the member is not elected.

==== Requirements to receive a ballot for board elections ====

Ballots are prepared by CRO once the board nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the board nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nominate new Board Members (dates TBD) ===

* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
** See [[#Requirements to receive a ballot for board elections]]
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]

Election 2025

2025-08-22T18:20:38Z

Cvvergara: /* Requirements to be nominated */

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: website profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter member's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template for charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

=== Retirement during review and voting ===

The main responsibility of the charter Member is to submit a vote.

Ballots contain the following message:
If you do not want to participate in this survey and don't want to receive any more invitations regarding any OSGeo elections in the future, please click the following link:
<link>
At the end of the elections, you will receive a mail from cro@osgeo.org confirming that you are a retired Charter Member.

When the charter Member does not want to receive more invitations to vote in the future, it means they do not want to perform the main responsibility they gained as Charter members and they will be retired.
Clicking on the link will start the retirement process automatically.

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nominee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* Elegibility
** '''Anyone''' is eligible to be nominated to the charter members election.
** [https://www.osgeo.org/about/charter-members/#retired-charter-members] are eligible.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members] are not eligible.
** [https://www.osgeo.org/about/charter-members/#charter-members] are not eligible.
* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

==== Requirements to receive a ballot ====

Ballots are prepared by CRO once the nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Requirements for board election ===

==== Requirements from CRO for board elections ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate for board ====

* '''anybody''' can nominate a board member.
* Ask the nominee about accepting the nomination.
** The nominee will have to fulfill the [[#Requirements to be nominated for board]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated for board ====

* Must not be a CRO member
* Must be an active [https://www.osgeo.org/about/charter-members/#charter-members Charter Members]
* website profile page must exist
* website profile '''Email''' with a valid email
** this email will be used to send the ballots
* website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected for board ====

* To be elected, a charter member need a nomination and based on the the total sum of votes and seats available reach the position.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the member is not elected.

==== Requirements to receive a ballot for board elections ====

Ballots are prepared by CRO once the board nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the board nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nominate new Board Members (dates TBD) ===

* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
** See [[#Requirements to receive a ballot for board elections]]
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]

Election 2025

2025-08-22T18:12:02Z

Cvvergara: adding a section about retirement

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: website profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter member's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template for charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

=== Retirement during review and voting ===

The main responsibility of the charter Member is to submit a vote.

Ballots contain the following message:
If you do not want to participate in this survey and don't want to receive any more invitations regarding any OSGeo elections in the future, please click the following link:
<link>
At the end of the elections, you will receive a mail from cro@osgeo.org confirming that you are a retired Charter Member.

When the charter Member does not want to receive more invitations to vote in the future, it means they do not want to perform the main responsibility they gained as Charter members and they will be retired.
Clicking on the link will start the retirement process automatically.

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nominee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

==== Requirements to receive a ballot ====

Ballots are prepared by CRO once the nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Requirements for board election ===

==== Requirements from CRO for board elections ====

* CRO members must be active [https://www.osgeo.org/about/charter-members Charter Members] list
* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate for board ====

* '''anybody''' can nominate a board member.
* Ask the nominee about accepting the nomination.
** The nominee will have to fulfill the [[#Requirements to be nominated for board]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated for board ====

* Must not be a CRO member
* Must be an active [https://www.osgeo.org/about/charter-members/#charter-members Charter Members]
* website profile page must exist
* website profile '''Email''' with a valid email
** this email will be used to send the ballots
* website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected for board ====

* To be elected, a charter member need a nomination and based on the the total sum of votes and seats available reach the position.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the member is not elected.

==== Requirements to receive a ballot for board elections ====

Ballots are prepared by CRO once the board nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the board nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nominate new Board Members (dates TBD) ===

* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
** See [[#Requirements to receive a ballot for board elections]]
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]

Election 2025

2025-08-22T17:52:14Z

Cvvergara: Adding requirements for board elections

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: website profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter member's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template for charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nominee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

==== Requirements to receive a ballot ====

Ballots are prepared by CRO once the nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Requirements for board election ===

==== Requirements from CRO for board elections ====

* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate for board ====

* '''anybody''' can nominate a board member.
* Ask the nominee about accepting the nomination.
** The nominee will have to fulfill the [[#Requirements to be nominated for board]]
* website profile page must exist and kept up to date
** website profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated for board ====

* Must be an active [https://www.osgeo.org/about/charter-members/#charter-members Charter Members]
* website profile page must exist
* website profile '''Email''' with a valid email
** this email will be used to send the ballots
* website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected for board ====

* To be elected, a charter member need a nomination and based on the the total sum of votes and seats available reach the position.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the member is not elected.

==== Requirements to receive a ballot for board elections ====

Ballots are prepared by CRO once the board nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the board nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nominate new Board Members (dates TBD) ===

* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
** See [[#Requirements to receive a ballot for board elections]]
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]

Election 2025

2025-08-22T17:42:28Z

Cvvergara: /* Requirements to be elected */

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: website profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter member's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template for charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nomenee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** websiste profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

==== Requirements to receive a ballot ====

Ballots are prepared by CRO once the nomination period ends.

* Only [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] '''by the time the nomination period ends''' are eligible to receive a ballot.
* [https://www.osgeo.org/about/charter-members/#charter-members Inactive Charter Members] are not eligible to receive a ballot.
** Read [[#About charter members]]

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Nominate new Board Members (dates TBD) ===

* '''anybody''' can nominate a board member.
* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]

Election 2025

2025-08-22T17:30:40Z

Cvvergara: /* About Charter Members */ fixing spelling

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: website profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: website profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter member's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template for charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nomenee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** websiste profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Nominate new Board Members (dates TBD) ===

* '''anybody''' can nominate a board member.
* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]

Election 2025

2025-08-22T17:27:54Z

Cvvergara: /* Vote for new Board Members (dates TBD) */

The 2025 [https://www.osgeo.org/about/charter-members Charter Members] election will take place in September-October
2025, followed by the [[Board]] nominations and elections in November-December 2025.

* [https://github.com/OSGeo/osgeo/blob/master/board/documents/Membership%20Process.pdf Membership process]
* List of [https://www.osgeo.org/about/charter-members/#charter-members Charter Members].
* List of [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members].
* The [[New Member Nominations 2025 | 2025 member nominations]] has the valid nominations for charter members election.
* The [[Board Member Nominations 2025 | 2025 board member nomintaions]] has the valid nominations for Board members election.

Note:

* Only active charter members can nominate a new charter member.
* Only active charter members can be nominated for board member.

== About Charter Members ==

On February 6, 2025 the [https://www.loomio.com/d/ypBTbXE0/create-a-category-for-inactive-charter-members Motion to create the category for inactive charter-members] passed.

This was discussed in the board meeting (2025-01-28) in order to include charter members that have not voted for the last 3 elections. Charter members in this category need to update their web site profile page, update their contact information and show some activity before they can vote again.

CRO interpretation of the motion:
;last 3 elections
: last 3 '''years''' elections
: Giving a total of 6 elections with 2 elections per year: charter and board elections
;need to update their website profile page
: Requirement: website profile page must exist
: Requirement: websiste profile '''Email''' with a valid email (this email will be used to send the ballots)
: Requirement: websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. And any other GIS related work. If possible with the appropriate links.
;Activity
: Charter member activities related with elections.
: CRO is conscious that many charter members are very active on other areas of OSGeo, this only applies to charter members's responsibilities.
; Show some Activity
: Contact CRO by mail to [mailto:cro@osgeo.org cro@osgeo.org] using the mail provided on the website profile, providing the following information:
: The website profile page link. (The mail and biography section will be verified)
: Your Charter member number.
: The Biography section contents on the profile page will be taken as the reason for continuing as a charter member.
: A Statement about participating on future elections.

The CRO will:
* Verify the mail you are used to communicate with CRO matches the one on on the profile page.
* Verify that the biography, on the profile page, has a list of the participation in other OSGeo activities.
* Read your statement.
* Update the [https://www.osgeo.org/about/charter-members Charter Members] list.
* Reply
** With the history of participation.
** And a statement about the update on the charter members list.

=== OSGeo bylaws Section 7.7 ===

[https://www.osgeo.org/about/bylaws OSGeo Bylaws]

Section 7.7 Automatic Termination.
Members shall have their membership status automatically terminated and their names removed by the Secretary of the corporation from all membership records of the corporation if they fail to participate, either in person or by proxy, in three (3) consecutive meetings of the members of the corporation, held electronically or otherwise.

Our '''meetings''' are held electronically, in the shape of elections, two per year.
Inactive members that fail to reactivate within the next 2 years they will be retired.

=== Template: For charter member reactivation ===
<pre>
Name:
Charter member number:
Profile page:
Statement:
</pre>

== Charter Member Elections ==

As every year we are electing new Charter Members into the Foundation.

* See the official [https://www.osgeo.org/about/charter-members Charter Members] list.
* The [[New Member Nominations 2025 | 2025 member nominations]] provide a list of valid nominations.

=== Requirements ===

==== Requirements from CRO ====

* An invitation will be made and posted on several communication channels
** Discuss mailing list
** Discourse
** OSGeo News

==== Requirements to nominate ====

* Be an active charter member
* Ask the nominee about accepting the nomination.
** The nomenee will have to fullfill the [[#Requirements to be nominated]]
* website profile page must exist and kept up to date
** websiste profile '''Email''' with a valid email
*** this email will be used to send the ballots
*** Use this email to send the nomination
** websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be nominated ====

* website profile page must exist
* websiste profile '''Email''' with a valid email
** this email will be used to send the ballots
* websiste profile '''Biography''' with a list of the participation in other OSGeo activities, projects, committees, presentations etc. and any other GIS related work. If possible with the appropriate links. And any other GIS related work.

==== Requirements to be elected ====

* To be elected, a charter member need a nomination by a current charter member and at least one other charter member seconding the nomination.
* Veto can be raised by sending a private e-mail to the CRO, in which case, CRO will inform the board for an anonymous review.
** If the veto is accepted by the board, then the CRO shall make it public and the charter member is not elected.

=== Nomination process ===

==== Nominate new Charter Members: (Dates TBD) ====

* Please confirm with the nominated person first!
* Please email [mailto:cro@osgeo.org cro@osgeo.org] using the [[#Charter member nomination template]] below.
** Use the e-mail registered on your profile page.
** Do not reply to any of the announcements
* For the Nomination statement use a '''paragraph describing why you are recommending this person as a Charter Member'''.
* Please include details about the positive attributes of the nominee:
** Members should believe in the general goals of the OSGeo Foundation: to support and promote the use of free and open source geospatial software, education and data in a collaborative manner.
** Previous participation in/or support of OSGeo activities.
** Previous contribution to free and open source geospatial software, education or open data.
** The person should be willing to put in time and effort on the OSGeo Foundation, perhaps joining committee(s), or volunteering in some other way that gets the Foundation going.
** Members should be prepared to work constructively and positively towards the goals of the Foundation. Good teamwork skills are an asset.

==== Nomination validation ====

The CRO will validate the nomination:

* The subject of the nomination contains the name of the nominee.
* All fields of the [#Charter-member-nomination-template] are filled.
* Nominating person
** is an active charter member.
** profile pages exist
*** ''e-mail'' used is the same one as in the profile page
*** ''biography'' up to date.
* Nominee
** profile pages exist
*** ''e-mail'' template is the same one as in the profile page
*** ''biography'' up to date.

Give feedback in case there is a problem with the information provided (aka the nomination is not valid)
* For example, bad links, mismatch e-mails.

For valid nominations, the CRO will:
* Contact the nominee for confirmation about them are willing to participate as OSGeo Charter Members.
** A couple of retries are sent if no response.
** If CRO does not get a response from the nominee about the confirmation then it is considered as negative confirmation.

For positive confirmations, the CRO will:
* Compile the nomination into the [[New Member Nominations 2025 | 2025 member nominations list]].
* Feed back to the nominating person about the nomination status.
** Nominating person: please verify the information on the [[New Member Nominations 2025 | 2025 member nominations list]].

For negative confirmations, the CRO will:

* Feedback to the nominated person will be done after the period nomination period ends.

At any point in time the nominating person can contact CRO about the status of the nomination.

==== Charter member nomination template ====

Use as subject: Nomination of (name) for charter member elections 2025
<pre>
Nominating person:
Nominating e-mail:
Nominating profile page:

Nominee name:
Nominee last name:
Nominee e-mail:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Community Review and voting: (dates TBA) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Community review the nominations:
** [[New Member Nominations 2025]]
* Online vote (to second nominations) using OSGeo [[Electronic Voting]] system based on ''Lime Survey''.

=== Final Status ===

* The CRO has to present candidate list to the board for approval
** Report to the board: (dates TBA)
** Board will process and announce the results by: (dates TBA)
* The CRO has to update the charter member list
** Update after board approval and before Nominations for board start.

== Board Election ==

* The current Board is composed by 9 people:
** Jeroen Ticheler,
** Tom Kralidis,
** Angelos Tzotsos,
** Michael Smith,
** Codrina Maria Ilie,
** Vicky Vergara,
** Joanna Simoes
** Rajat Shinde,
** Marco Bernasocchi.
* Following members have reached the end of their 2-year term.
** Jeroen Ticheler,
** Codrina Maria Ilie,
** Vicky Vergara,
** Rajat Shinde,
** Marco Bernasocchi.
* '''5''' seats are up for election this year.
** CRO will automatically nominate the board members that have reached the end of their 2-year term.
*** Any one can also nominate these members.
** Board members wishing '''not''' to stand in the 2025 election must inform CRO.

=== Nominate new Board Members (dates TBD) ===

* '''anybody''' can nominate a board member.
* Please '''confirm with the member''' that they would like to stand for election as a Board member.
* Email your nomination, with a paragraph describing why you think this person would make a good Board member, to [mailto:cro@osgeo.org cro@osgeo.org] by (time TBD) 23:59 GMT on '''date TBD'''
* Please use the [[#Board nomination template]]
* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible for a seat on the Board
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are not eligible.
* The final list will be collected at [[Board Member Nominations 2025]]

==== Board nomination template ====

Subject: Nomination of <Nominee name> for OSGeo Board
<pre>
Nominating person:
Nominating person profile page:
Nominee name:
Nominee country:
Nominee profile page:
Nomination statement:
</pre>

=== Campaign period (dates TBD) ===

Candidates are encouraged to put their vision and ideas for their term at [[Election 2025 Candidate Manifestos]] and
sending them to Discuss mailing list for further conversation.

=== Vote for new Board Members (dates TBD) ===

* Only the [https://www.osgeo.org/about/charter-members/#charter-members Charter Members] are eligible to vote.
** [https://www.osgeo.org/about/charter-members/#inactive-charter-members Inactive Charter Members] are '''not''' eligible to vote.
* Choose from [[Board Member Nominations 2025]] list
* Through the [[Electronic Voting]] system, every Charter Member will receive a personal link to access the election.
* You can cast up to '''5''' votes, for '''5''' different members.
* Voting closes by (time TBD) 23:59 GMT on '''(date TBD)'''.
* Results will be posted at [[Board Election 2025 Results]] at (Date TBD)
* Contact [mailto:cro@osgeo.org cro@osgeo.org] with questions.

[[Category:Elections]] [[Category:Election 2025]]