Efficient HTML Organization and Distribution on Webservers? 13
rasjani asks: "I recently started working as sysadmin. First major thing i want to rearrange is page distribution. Currently we are using rsync over ssh to copy the stuff to production servers and no backlog of any kind. I would like to implement CVS (or the like) into this scheme, so that if the NOC notices that something is broken in the web, they can do a rollback from CVS if the webmasters or editors aren't around to fix the problem. So people, do you have any thoughts how to implement this? Has anyone done something similar and willing to share their experiences? What gotchas might I stumble upon? Should I still use rsync/ssh for file distribution and add the check-in for a few scripts or should I just make a cron job in production servers to poll CVS for updated material?"
GNOME uses CVS (Score:2, Informative)
Why not email the webmasters and get all the help you need.
Re:GNOME uses CVS (Score:3, Informative)
All the kde.org websites are done in open CVS - you can browse the setup and see how it's done. CVS as web repository is very very common all over the place.
On the client side, anybody know of any GUI CVS tools that Delphi coders and Photoshop on Mac Graphic Artists can use? Intelligent in their own fields, but leery of any CLI tools.
--
Evan
Setting up CVS over SSH (Score:3, Informative)
To set up CVS over SSH, use the following environment variables:
and set up CVS to use RSA Authentication (/etc/ssh/sshd_config)
plus similar for SSH2. This requires that each user and each host have its public SSH key on the CVS server, in their home directory and
Finally, there's some work on implementing SSL/TLS directly into the CVS server, to eliminate the need to provide local user accounts on the server. This should dramatically increase the security of the repositories since it allows them to be turned into closed systems without user shell access. In the most likely scenario, CVS will be able to function much like SSH - you can operate in anonymous mode, or you can require PKI authentication of either or both parties.
overkill (Score:3, Informative)
So we set up a staging server to which the developers have access, and only the sysadmins have access to the functions to move over files to production. This allows us to keep development separate from production, in addition to providing two sets of backups (one prod, one dev).
The next stage of this is to set up a box with lots of HD space, so we can keep "hot" backups of the html back through the days. We figured out that the backups for the various web servers would come to something like 9GB/wk. The boxes we eventually went with are attached to NAS boxes with 240GB each (mirrored, so functionally 120GB, which lets us keep roughly 3 months of backups on a hard drive, as opposed to tape.
Note that you could easily set up a *nix box with 300GB of space relatively cheaply. The processor and memory requirements are going to be practically nil, so we figured that it would be about $1200 for the box. This is beige boxed, which my boss threw out since we couldn't get HW support, so our system cost significantly more.
When we need to restore older files, we can just load up the old tar.gz, copy the files as needed, and we're outta there. No worries about tape drive screwups, and so on.
Hope this helps.
DaemonNews Article (Score:3, Informative)