Scientific Linux Inventory Project (SLIP) Troy Dawson Connie Sieh

What is SLIP? SLIP: (Scientific Linux Inventory Project) A set of programs to collect Software Inventory. SLIP: (Scientific Linux Inventory Project) A set of programs to collect Software Inventory. Based on the OCSInventory package: ( Based on the OCSInventory package: (

Why are we doing this? Motivated by a requirement from the DOE to provide hardware and software for all DOE- owned computers. Motivated by a requirement from the DOE to provide hardware and software for all DOE- owned computers. Planning to do this before DOE requirement, this is information we want tracked anyway. Planning to do this before DOE requirement, this is information we want tracked anyway.

Requirements - UI UI with standard web-based reports: UI with standard web-based reports: Security Queries Security Queries Example: Show all systems with rpm below version Example: Show all systems with rpm below version Hardware Queries Hardware Queries Example: Show systems with processor speed of Example: Show systems with processor speed of Software Queries Software Queries Example: Show all systems running version # of a specific software product Example: Show all systems running version # of a specific software product

Requirements - Database Database Database Needed standard database supported by the Computing Division. Needed standard database supported by the Computing Division. OCSInventory uses mysql, which is supported. OCSInventory uses mysql, which is supported.

Requirements – Software Tracking System needed to provide key information about the kernel and packages installed. Specifically: System needed to provide key information about the kernel and packages installed. Specifically: Date/Time RPM installed Date/Time RPM installed RPM Version RPM Version Where the RPM was built Where the RPM was built RPM Version History RPM Version History RPM’s installed but not found in SLF tree. RPM’s installed but not found in SLF tree.

Requirements – Hardware Tracking System needs to provide a detailed list of hardware such as: System needs to provide a detailed list of hardware such as: Processor type Processor type Speed Speed Amount of RAM Amount of RAM Disk Configuration Disk Configuration Sound Card Sound Card Video Card Video Card Network Card Network Card Etc… Etc…

Requirements – Network Information Inventory system must provide network information about SLF machines. Inventory system must provide network information about SLF machines. IP address IP address MAC address MAC address Open ports Open ports Firewall settings Firewall settings tcpwrapper’s settings. tcpwrapper’s settings.

Requirements – Linux Distribution Information The inventory system should provide the contents of the release directory and what workgroup the machine belongs to. The inventory system should provide the contents of the release directory and what workgroup the machine belongs to.

Why we chose OCSInventory Opensource package allows us to include in SLF, therefore users get it installed automatically. Opensource package allows us to include in SLF, therefore users get it installed automatically. Met most of our requirements with minor modifications. Met most of our requirements with minor modifications. Third party solution (Quest VMX) was cost prohibitive. Third party solution (Quest VMX) was cost prohibitive. Needed something we could get running in a short period of time to report to the DOE. Needed something we could get running in a short period of time to report to the DOE.

OCSInventory Keeps track of computer configuration and software installed on the network. Keeps track of computer configuration and software installed on the network. Allows deploying software, commands or files on Windows and Linux client computers. Allows deploying software, commands or files on Windows and Linux client computers. Dialog between client computers and management server is based on actual standards, HTTP/HTTPS protocols and XML data formatting. Dialog between client computers and management server is based on actual standards, HTTP/HTTPS protocols and XML data formatting. Management server runs on Apache/MySQL/PHP/PERL server, under Linux or Windows based computers. Management server runs on Apache/MySQL/PHP/PERL server, under Linux or Windows based computers.

Main Components Client written in Perl Client written in Perl Added "open network ports" to data collected Added "open network ports" to data collected Run daily via cron Run daily via cron Can create a local file for admin use Can create a local file for admin use Server Server Perl Module for Apache Perl Module for Apache Verifies data and stores in a mysql database. Verifies data and stores in a mysql database. Added “software history” Added “software history” Reporting Reporting Done via mysql queries Done via mysql queries Reporting tool in OCSInventory needed too many changes to be useful. Reporting tool in OCSInventory needed too many changes to be useful.

Architecture

Current Status Testing has been completed. Testing has been completed. Will rollout on a workgroup by workgroup basis during the month of October. Will rollout on a workgroup by workgroup basis during the month of October.

Future Better reporting tools that system administrators can use. Currently only the security team and SLF development team has access to these reports. Better reporting tools that system administrators can use. Currently only the security team and SLF development team has access to these reports. Port changes to "released" version of OCS InventoryNG. Changes were based on RC2, vendor made major changes for RC3 Port changes to "released" version of OCS InventoryNG. Changes were based on RC2, vendor made major changes for RC3

Summary A mandated request from DOE, plus a desire to have this information anyway, inspired this project. A mandated request from DOE, plus a desire to have this information anyway, inspired this project. OCSInventory was deteremined to meet our requirements. OCSInventory was deteremined to meet our requirements. Small modifications were easily added, and testing has gone well. Small modifications were easily added, and testing has gone well. Will be rolled out this month. Will be rolled out this month.