Hack Manhattan Wiki - Recent changes [en]

Raphael

Citybadger — Thu, 13 Aug 2026 18:42:09 GMT

acknowledged the changed hostname

← Older revision		Revision as of 18:42, 13 August 2026
Line 26:		Line 26:

	Had trouble booting. Power Supply was not providing enough power. In BIOS, I changed the System Profile to "Dense Configuration".		Had trouble booting. Power Supply was not providing enough power. In BIOS, I changed the System Profile to "Dense Configuration".

			Was originally named "rafael" because of a typo. fixed.

System Administration Group - Documentation

Citybadger — Thu, 13 Aug 2026 18:37:41 GMT

Undo revision 9827 by William (talk)

← Older revision		Revision as of 18:37, 13 August 2026
(One intermediate revision by the same user not shown)
Line 18:		Line 18:
	\|-		\|-
	\| [[DNS]] \|\| [[unbound]] \|\| [[april]]		\| [[DNS]] \|\| [[unbound]] \|\| [[april]]
	\|-
	~~\| Talking Cow \|\| [[cowsay-leonardo]] \|\| [[leonardo]]~~
	\|-		\|-
	\| [[Inventory Management]] \|\| [[Snipe-IT]] \|\| [[michelangelo]] \|\| http://michelangelo.sagroup.hackmanhattan.com/login		\| [[Inventory Management]] \|\| [[Snipe-IT]] \|\| [[michelangelo]] \|\| http://michelangelo.sagroup.hackmanhattan.com/login
	\|-		\|-
	\| [[Configuration Management]] \|\| [[git]] \|\| [[raphael]] \|\| user@192.168.42.170:sysadminrepo		\| [[Configuration Management]] \|\| [[git]] \|\| [[raphael]] \|\| user@192.168.42.170:sysadminrepo
	\|-
	~~\| [[Web server]] \|\| [[nginx-donatello]] \|\| [[donatello]]~~
	\|}		\|}

	~~Talking Cow~~

	=== ===		=== ===

Project Ideas

Citybadger — Thu, 13 Aug 2026 16:45:22 GMT

Added Progress and Issues lines for the projects that we've actually worked on.

← Older revision		Revision as of 16:45, 13 August 2026
Line 5:		Line 5:
	Solution: A centralized database of user information with a way of authenticating against it.<br>		Solution: A centralized database of user information with a way of authenticating against it.<br>
	Example technologies: LDAP via FreeIPA (requires Fedora or RHEL), Samba, or OpenLDAP. SSO via Keycloak,Authentik, or Authelia		Example technologies: LDAP via FreeIPA (requires Fedora or RHEL), Samba, or OpenLDAP. SSO via Keycloak,Authentik, or Authelia
	Questions: LDAP or SSO?		Questions: LDAP or SSO? <br>
			Progress: [[FreeIPA]] was installed on [[leatherhead]], client installed on [[donatello]], ssh login via password or key is working. <br>
			ISSUES: LDAP authentication isn't working. [[leatherhead]]'s networking/port forwarding situation is not setup right. Setting up a directory services replica would be good and interesting. A backup scheme is needed.

	⭐️Local DNS<br>		⭐️Local DNS<br>
Line 11:		Line 13:
	Solution: a local DNS server that supports dynamic name registration <br>		Solution: a local DNS server that supports dynamic name registration <br>
	Possible technologies: BIND9 or Technitium Questions: Use a hackmanhattan.com subdomain like sagroup.hackmanhattan.com? Implement a canary domain? Or otherwise deal with browser DNS over HTTPS?<br>		Possible technologies: BIND9 or Technitium Questions: Use a hackmanhattan.com subdomain like sagroup.hackmanhattan.com? Implement a canary domain? Or otherwise deal with browser DNS over HTTPS?<br>
			Progress: an [[unbound]] DNS server was installed on [[april]] for the subdomain sagroup.hackmanahttan.com. As part of the [[FreeIPA]] install [[leatherhead]] runs a [[BIND]] DNS server with the records necessary for FreeIPA's operation.<br>
			Issues: We should probably replace [[unbound]] on [[april]] with BIND secondary zone both to allow FreeIPA to operate from a directory service replica without [[leatherhead]] having to be up.

	⭐️VPN<br>		⭐️VPN<br>
Line 16:		Line 20:
	Solution: a host-to-network (remote-access) VPN perhaps using a Raspberry PI or other small platform to minimize idle energy use Possible technologies: Wireguard, OpenVPN, RaspberryPi, PiVPN <br>		Solution: a host-to-network (remote-access) VPN perhaps using a Raspberry PI or other small platform to minimize idle energy use Possible technologies: Wireguard, OpenVPN, RaspberryPi, PiVPN <br>
	Questions: Does Wireguard or OpenVPN better integrate with whatever centralized authentication system we implement? Can we restrict access to just sysadmin group equipment?yste Do we want to? Are we going to conflict with HM's VPN implementation?<br>		Questions: Does Wireguard or OpenVPN better integrate with whatever centralized authentication system we implement? Can we restrict access to just sysadmin group equipment?yste Do we want to? Are we going to conflict with HM's VPN implementation?<br>
			Progress: Wireguard has been installed on [[april]]. One person said the were able to connect remotely to [[april]] and start and ssh session.
			Issues: Other people have not been able to connect. Also does routing through [[april]] and to other equipment work? How about DNS settings for the remote tunnel?

	⭐️NTP:<br>		⭐️NTP:<br>
Line 21:		Line 27:
	Solution: a local NTP server to fetch accurate time from a reliable source and synchronize our local machines, on port 123.<br>		Solution: a local NTP server to fetch accurate time from a reliable source and synchronize our local machines, on port 123.<br>
	Doubts: can an always-on service like NTP be run on a raspberry pi<br>		Doubts: can an always-on service like NTP be run on a raspberry pi<br>
			Progress: [[chrony]] has been installed on all the machines.

	⭐️Configure Router to hand out reserved IP addresses to each server.		⭐️Configure Router to hand out reserved IP addresses to each server.
	Problem: currently ip's are dynamically assigned with a long lease; in principle we are one reboot away from the Wiki ip addresses being inaccurate.		Problem: currently ip's are dynamically assigned with a long lease; in principle we are one reboot away from the Wiki ip addresses being inaccurate.
			Progress: All the main server addresses and the some of the iDRAC addresses have been reserved on the router.
			Issues: The rest of the iDRAC's addresses should be reserved.

	🐣Figure out why "wall" command isn't working<br>		🐣Figure out why "wall" command isn't working<br>
Line 40:		Line 49:
	🪛Router		🪛Router
	Problem: We have a Cisco router it might be fun to play with or even use for something, but we don’t know if it works or how it’s configured.		Problem: We have a Cisco router it might be fun to play with or even use for something, but we don’t know if it works or how it’s configured.
	Solution: Connect up to it, reset it to its default configuration, mount it in the rack, connect it to the switch, set login credentials to the standard password.		Solution: Connect up to it, reset it to its default configuration, mount it in the rack, connect it to the switch, set login credentials to the standard password.<br>
	Possible technologies: serial cable, USB to serial adapter.		Possible technologies: serial cable, USB to serial adapter.

Line 58:		Line 67:
	Possible Technologies: PXE Boot, TFTP, Ventoy Server, LTSP or similar<br>		Possible Technologies: PXE Boot, TFTP, Ventoy Server, LTSP or similar<br>
	Resources: Archwiki has a good page on the subject Questions: Can we boot a Raspberry Pi via PXE? Can we boot Windows?<br>		Resources: Archwiki has a good page on the subject Questions: Can we boot a Raspberry Pi via PXE? Can we boot Windows?<br>
			Progress: set up on[[raphael]. See the [[Diskless Workstations]] progress page for details.<br>
			Issues: need an image that will actually fully boot from the network.

	🪛Install a Wiki<br>		🪛Install a Wiki<br>
Line 70:		Line 81:
	Solution: Automate tests and collect the data into a central dashboard.<br>		Solution: Automate tests and collect the data into a central dashboard.<br>
	Possible technologies: Nagios, Inciga.<br>		Possible technologies: Nagios, Inciga.<br>
			Progress: check_mk was installed on [[raphael]](?)<br>
			Issue: Doesn't work

	🪛VOIP<br>		🪛VOIP<br>

User:LambdaCalculus

LambdaCalculus — Wed, 12 Aug 2026 21:42:26 GMT

← Older revision		Revision as of 21:42, 12 August 2026
Line 8:		Line 8:
	<li>Old school crustpunk, sysadmin, network engineer, and plenty of good security knowledge. Hire me! <br>		<li>Old school crustpunk, sysadmin, network engineer, and plenty of good security knowledge. Hire me! <br>
	<li>Resident of hackers.town, member of DC212, frequents NYC2600 meetups, and will still hit a good punk show <br>		<li>Resident of hackers.town, member of DC212, frequents NYC2600 meetups, and will still hit a good punk show <br>
			<li>Spoke at various hacker confs, including HOPE, DEF CON, JawnCon, PumpCon, PhreakNIC, and more!<br>
	<br>		<br>
	<br>		<br>

Meeting 2026-07-26

LambdaCalculus — Wed, 12 Aug 2026 21:38:18 GMT

← Older revision		Revision as of 21:38, 12 August 2026
(2 intermediate revisions by the same user not shown)
Line 2:		Line 2:

	==Approve Minutes==		==Approve Minutes==
			No objections to last month’s minutes

	==Consensus Agenda==		==Consensus Agenda==
	~~None~~		Nothing on the agenda

	==Member Reports==		==Member Reports==

	=== Board Reports===		=== Board Reports===

	====President's Report====		====President's Report====
			Nothing to report except in New Business

	====Treasurer's Report====		====Treasurer's Report====
			We’re doing decent this month; we’re closing the gap and are only short $75 this month; dues largely stayed the same this month; had to make a $9 adjustment to May due to Stripe reports.

	====Secretary's Report====		====Secretary's Report====
			Nothing to report except in Member Reports

	====Directors-at-Large's Report====		====Directors-at-Large's Report====
			Nothing to report

	===Member and Project Reports===		===Member and Project Reports===
			Robert: Robert is speaking at DEF CON and HOPE in August; details will be posted in the Discord. He also has something planned for the Hack Manhattan table at HOPE.
			Citybadger: Citybadger is going to rebuild the main router with Jay; there’s a plethora of issues and security problems with it. He will try his best to preserve everything if at all possible. He has rebuilt the WiFi router but wants to continue fixing everything up.

	== Old Business ==		== Old Business ==
			No old business.

	== New Business ==		== New Business ==
			* 3D printer updates: someone wrecked the plastic shredder, and someone printed something and used an entire spool’s worth of filament. No donation was recorded via Venmo. Additionally, the printer has been jammed by using non-standard PLA filament.
			The 3D printers are a public service, and anything that damages them prevents others from being able to use them. We should adhere to using standard PLA colors, and not use odd colors (e.g. transparent, glow-in-the-dark). We should also be more accountable on who is printing and when, and what settings are used. We can tackle this in two parts: a) build a 3D print shelf and make it accessible to members only, b) create a system that accounts for every print job and ties it back to a member in good standing. We can also encourage a baseline of donations for filament costs.
			* HOPE is coming up on August 14th to August 16th and Hannah has two options:
			a) We should host a lobbycon, with food and drink, and let attendees come by to visit the space. Hannah would like to allot $200 for buying shelf-stable snacks for the event. (unanimous yes)
			b) We need to restock the T-shirts; Hannah is willing to make them via screen printing instead of vinyl cutting and needs $150 worth of shirts for supplies; we can get a better deal if we buy shirts in bulk; Hannah is willing to front $500 worth of shirts for this. Currently we are out of most sizes.
			* For HOPE, we’re getting one badge for the village, but we can rotate shifts as needed to be at both the space and the village.
			* Jay: 3 weeks ago, citybadger made a Costco order for paper towels but no toilet paper; Jay has purchased toilet paper and we are down to 1 roll. We should make sure no one is taking rolls home with them.
			* Reimbursement policy: Anything under $50 that is relevant to the space, the board can do a vote to reimburse for it.
			* Hack Manhattan is turning 15 in September! We need to plan an event!

	===Sponsored Members Induction===		===Sponsored Members Induction===
			New members: welcome David and Curtis! We have two people in for vote.

	~~========~~


	==Meeting Meta==		==Meeting Meta==
	* Members in Attendance: ~~member1~~, ~~member2~~		* Members in Attendance: Robert, Jay, Hannah, Amanda, Boost, David, Chris F, Robin M, Ed, citybadger, Grant, Curtis (digglesby), Mehir, Chris M
	* Visitors: none		* Visitors: none
	* Called to order at HH:MM by .		* Called to order at 19:35 by Hannah.
	* The meeting was adjourned at HH:MM by .		* The meeting was adjourned at 20:05 by Hannah.
	* Minutes taken and submitted by Robert.		* Minutes taken and submitted by Robert.

	[[Category:Meetings]]		[[Category:Meetings]]

Meeting 2026-07-26

LambdaCalculus — Wed, 12 Aug 2026 19:19:34 GMT

Created page with "Meetings are conducted according to MIBS_Rules. ==Approve Minutes== ==Consensus Agenda== None ==Member Reports== === Board Reports=== ====President's Report==== ====Treasurer's Report==== ====Secretary's Report==== ====Directors-at-Large's Report==== ===Member and Project Reports=== == Old Business == == New Business == ===Sponsored Members Induction=== ======== ==Meeting Meta== * Members in Attendance: member1, member2 * Visitors: none * Called to ord..."

New page

Meetings are conducted according to [[MIBS_Rules]].

==Approve Minutes==

==Consensus Agenda==
None

==Member Reports==
=== Board Reports===
====President's Report====

====Treasurer's Report====

====Secretary's Report====

====Directors-at-Large's Report====

===Member and Project Reports===

== Old Business ==

== New Business ==

===Sponsored Members Induction===

========

==Meeting Meta==
* Members in Attendance: member1, member2
* Visitors: none
* Called to order at HH:MM by .
* The meeting was adjourned at HH:MM by .
* Minutes taken and submitted by Robert.

[[Category:Meetings]]

Main Page

LambdaCalculus — Wed, 12 Aug 2026 19:16:27 GMT

Monthly Business Meetings

← Older revision		Revision as of 19:16, 12 August 2026
Line 29:		Line 29:
	Monthly meetings are held at 7:30PM on the last Wednesday of each month and are conducted in accordance with [[MIBS Rules]]. You can read the [[Meetings\|minutes of previous meetings]] or the next one:		Monthly meetings are held at 7:30PM on the last Wednesday of each month and are conducted in accordance with [[MIBS Rules]]. You can read the [[Meetings\|minutes of previous meetings]] or the next one:

			* [[Meeting_2026-07-26]]
	* [[Meeting_2026-06-24]]		* [[Meeting_2026-06-24]]
	* [[Meeting_2026-05-27]]

	== About the space and building==		== About the space and building==

System Administration Group - Documentation

William — Sun, 09 Aug 2026 19:37:03 GMT

sys admin activity

← Older revision		Revision as of 19:37, 9 August 2026
Line 24:		Line 24:
	\|-		\|-
	\| [[Configuration Management]] \|\| [[git]] \|\| [[raphael]] \|\| user@192.168.42.170:sysadminrepo		\| [[Configuration Management]] \|\| [[git]] \|\| [[raphael]] \|\| user@192.168.42.170:sysadminrepo
			\|-
			\| [[Web server]] \|\| [[nginx-donatello]] \|\| [[donatello]]
	\|}		\|}

User:William

Citybadger — Sun, 09 Aug 2026 19:30:06 GMT

User account William was created by Citybadger sysadmin group

Cowsay-leonardo

Ducky — Sun, 09 Aug 2026 19:26:27 GMT

Created page with "Test page"

New page

Test page

System Administration Group - Documentation

Ducky — Sun, 09 Aug 2026 19:25:59 GMT

← Older revision		Revision as of 19:25, 9 August 2026
Line 18:		Line 18:
	\|-		\|-
	\| [[DNS]] \|\| [[unbound]] \|\| [[april]]		\| [[DNS]] \|\| [[unbound]] \|\| [[april]]
			\|-
			\| Talking Cow \|\| [[cowsay-leonardo]] \|\| [[leonardo]]
	\|-		\|-
	\| [[Inventory Management]] \|\| [[Snipe-IT]] \|\| [[michelangelo]] \|\| http://michelangelo.sagroup.hackmanhattan.com/login		\| [[Inventory Management]] \|\| [[Snipe-IT]] \|\| [[michelangelo]] \|\| http://michelangelo.sagroup.hackmanhattan.com/login
Line 23:		Line 25:
	\| [[Configuration Management]] \|\| [[git]] \|\| [[raphael]] \|\| user@192.168.42.170:sysadminrepo		\| [[Configuration Management]] \|\| [[git]] \|\| [[raphael]] \|\| user@192.168.42.170:sysadminrepo
	\|}		\|}

			Talking Cow

	=== ===		=== ===

User:Ducky

Citybadger — Sun, 09 Aug 2026 19:21:50 GMT

User account Ducky was created by Citybadger and password was sent by email sysadmin group