Page MenuHomeDevCentral
Feed Advanced Search

Aug 3 2024

dereckson added a subtask for T1991: Context has again been lost on /var/log/www: T1992: Install patch on redhat family as part of core.
Aug 3 2024, 12:04 · upstream, Regression, Servers, Salt
dereckson triaged T1993: Salt migration to 3007, 3008 and extensions as Normal priority.
Aug 3 2024, 11:16 · Nasqueron Operations Squad, discussion, Salt
dereckson lowered the priority of T1991: Context has again been lost on /var/log/www from High to Normal.
Aug 3 2024, 10:11 · upstream, Regression, Servers, Salt
dereckson added a comment to T1991: Context has again been lost on /var/log/www.

I've applied P352 to replace egrep by grep -E on dwellers and docker-002.

Aug 3 2024, 10:11 · upstream, Regression, Servers, Salt

Jul 31 2024

dereckson moved T1991: Context has again been lost on /var/log/www from Backlog to Bug and issues on the Salt board.
Jul 31 2024, 16:30 · upstream, Regression, Servers, Salt
dereckson added a project to T1991: Context has again been lost on /var/log/www: upstream.
Jul 31 2024, 16:30 · upstream, Regression, Servers, Salt
dereckson added a comment to T1991: Context has again been lost on /var/log/www.

Already reported upstream: https://github.com/saltstack/salt/issues/65608

Jul 31 2024, 16:30 · upstream, Regression, Servers, Salt
dereckson added a comment to T1991: Context has again been lost on /var/log/www.
Complector
$ cd /opt/salt/nasqueron-operations
$ salt dwellers state.apply roles/webserver-core/nginx/config
[…]
----------                                                                                                                                                                                                                                    [3/295]
          ID: selinux_context_nginx_logs
    Function: selinux.fcontext_policy_present
        Name: /var/log/www
      Result: False
     Comment: An exception occurred in this state: Traceback (most recent call last):
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/state.py", line 2428, in call
                  ret = self.states[cdata["full"]](
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 160, in __call__
                  ret = self.loader.run(run_func, *args, **kwargs)
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1269, in run
                  return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1284, in _run_as
                  return _func_or_method(*args, **kwargs)
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1317, in wrapper
                  return f(*args, **kwargs)
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/selinux.py", line 326, in fcontext_policy_present
                  current_state = __salt__["selinux.fcontext_get_policy"](
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 160, in __call__
                  ret = self.loader.run(run_func, *args, **kwargs)
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1269, in run
                  return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/loader/lazy.py", line 1284, in _run_as
                  return _func_or_method(*args, **kwargs)
                File "/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/selinux.py", line 507, in fcontext_get_policy
                  "filespec": parts.group(1).strip(),
              AttributeError: 'NoneType' object has no attribute 'group'
     Started: 16:25:51.413301
    Duration: 391.186 ms
     Changes:
----------
          ID: selinux_context_nginx_logs_applied
    Function: selinux.fcontext_policy_applied
        Name: /var/log/www
      Result: True
     Comment: SElinux policies are already applied for filespec "/var/log/www"
     Started: 16:25:51.804764
    Duration: 6.322 ms
     Changes:
----------
[…]
Jul 31 2024, 16:27 · upstream, Regression, Servers, Salt
dereckson added a comment to T1991: Context has again been lost on /var/log/www.

Issue can be repro on Dwellers:

Jul 31 2024, 16:23 · upstream, Regression, Servers, Salt
dereckson added a project to T1991: Context has again been lost on /var/log/www: Regression.
Jul 31 2024, 16:22 · upstream, Regression, Servers, Salt
dereckson triaged T1991: Context has again been lost on /var/log/www as High priority.
Jul 31 2024, 16:21 · upstream, Regression, Servers, Salt

Jul 27 2024

dereckson moved T1757: docker-001 routing for drake doesn't work on boot from IntraNought to IntraNought / GRE tunnels on the Drake network board.
Jul 27 2024, 20:33 · Operations sprints (Ignite Alkane Propulsion), Salt, Drake network, Servers, Nasqueron Docker deployment squad
dereckson added a revision to T1767: Provision /etc/hosts: D3382: Exclude reserved addresses from /etc/hosts Drake entries.
Jul 27 2024, 18:35 · Salt, Drake network

Jul 23 2024

dereckson moved T1978: Document monitoring checks from Backlog to Checks on the Monitoring and reporting board.
Jul 23 2024, 20:58 · Salt, Monitoring and reporting
dereckson added a comment to T1877: Evaluate Alcali - Salt front-end.

It could be easier to deploy https://github.com/kpetremann/salt-exporter

Jul 23 2024, 17:56 · security, Salt, Servers, Product evaluation
dereckson added a comment to T1978: Document monitoring checks.

In D2648, NRPE directory has been set to dirs.share + "/monitoring/checks/nrpe", resolved on FreeBSD to /usr/local/share/monitoring/checks/nrpe directory.

Jul 23 2024, 17:30 · Salt, Monitoring and reporting

Jul 21 2024

dereckson triaged T1978: Document monitoring checks as High priority.
Jul 21 2024, 13:39 · Salt, Monitoring and reporting
dereckson moved T1971: Avoid to use user.present or group.present without stable UID/GID from Backlog to Ops on the good-first-issue board.
Jul 21 2024, 13:24 · good-first-issue, Salt

Jul 7 2024

dereckson added a revision to T1975: Allow ops to login to Vault: D3357: Allow to issue Vault token with admin policy.
Jul 7 2024, 14:23 · Salt, Vault
dereckson triaged T1976: Update Salt to 3007 on FreeBSD servers as Normal priority.
Jul 7 2024, 13:29 · Salt, Vault
dereckson added a revision to T1975: Allow ops to login to Vault: D3355: Allow Salt policy to create admin-level tokens.
Jul 7 2024, 13:19 · Salt, Vault
dereckson moved T1975: Allow ops to login to Vault from Backlog to Services to add on the Salt board.
Jul 7 2024, 13:17 · Salt, Vault
dereckson triaged T1975: Allow ops to login to Vault as High priority.
Jul 7 2024, 13:17 · Salt, Vault

Jun 28 2024

dereckson added a revision to T752: Salt configuration for White Rabbit: D3347: Fix tests for RabbitMQ password hash.
Jun 28 2024, 17:59 · Salt, Servers, Nasqueron Docker deployment squad

Jun 25 2024

dereckson updated the task description for T1971: Avoid to use user.present or group.present without stable UID/GID.
Jun 25 2024, 17:07 · good-first-issue, Salt
dereckson updated the task description for T1971: Avoid to use user.present or group.present without stable UID/GID.
Jun 25 2024, 17:05 · good-first-issue, Salt
dereckson added a revision to T1971: Avoid to use user.present or group.present without stable UID/GID: D3340: Allow permanent static UIDs for webserver accounts.
Jun 25 2024, 17:02 · good-first-issue, Salt
dereckson triaged T1971: Avoid to use user.present or group.present without stable UID/GID as Normal priority.
Jun 25 2024, 17:02 · good-first-issue, Salt

Jan 18 2024

dereckson triaged T1947: nginx resolver defined at 127.0.0.1 doesn't work on Docker engines as Normal priority.
Jan 18 2024, 01:17 · Nasqueron Docker deployment squad, Servers, Salt
dereckson created T1947: nginx resolver defined at 127.0.0.1 doesn't work on Docker engines.
Jan 18 2024, 01:17 · Nasqueron Docker deployment squad, Servers, Salt

Jan 17 2024

dereckson closed T1946: Fix Docker library on docker-002 as Resolved by committing rOPS2a254b429e67: Allow docker library to be installed in Salt Python, not system Python.
Jan 17 2024, 23:56 · Salt, Docker images
dereckson added a revision to T1946: Fix Docker library on docker-002: D3294: Allow docker library to be installed in Salt Python, not system Python.
Jan 17 2024, 23:55 · Salt, Docker images
dereckson added a comment to T1946: Fix Docker library on docker-002.

Fix is salt-call pip.install docker==5.0.3 to force the installation of the package to be at onedir level.

Jan 17 2024, 23:50 · Salt, Docker images
dereckson added a comment to T1946: Fix Docker library on docker-002.

Ah, yes, as stated on 12b77d6da046, the current solution to still provide old version works only for Python, not for the Salt one installation.

Jan 17 2024, 23:44 · Salt, Docker images
dereckson added a comment to T1946: Fix Docker library on docker-002.

Probably worthwhile a fix in hotfixes/ because Salt still miss support for recent library.

Jan 17 2024, 23:40 · Salt, Docker images
dereckson triaged T1946: Fix Docker library on docker-002 as High priority.
Jan 17 2024, 23:39 · Salt, Docker images

Jan 15 2024

dereckson added a comment to T1877: Evaluate Alcali - Salt front-end.

Alcali is still alive.

Jan 15 2024, 21:50 · security, Salt, Servers, Product evaluation
dereckson moved T1942: Allow Jenkins to trigger deployment through Salt from Backlog to Services to add on the Salt board.
Jan 15 2024, 21:50 · Continous integration and delivery, Salt
dereckson moved T1944: Ensure portsnap is available where we use ports from Backlog to Servers config on the Salt board.
Jan 15 2024, 21:50 · Salt, Servers
dereckson triaged T1944: Ensure portsnap is available where we use ports as Normal priority.
Jan 15 2024, 21:50 · Salt, Servers

Jan 14 2024

dereckson added a revision to T1942: Allow Jenkins to trigger deployment through Salt: D3280: Configure Salt reactor to provision Airflow pipeline for datasources.
Jan 14 2024, 11:06 · Continous integration and delivery, Salt
dereckson added a revision to T1942: Allow Jenkins to trigger deployment through Salt: D3279: Configure reactor on Salt primary server.
Jan 14 2024, 11:04 · Continous integration and delivery, Salt
dereckson updated the task description for T1942: Allow Jenkins to trigger deployment through Salt.
Jan 14 2024, 01:54 · Continous integration and delivery, Salt

Jan 13 2024

dereckson added a revision to T1942: Allow Jenkins to trigger deployment through Salt: D3278: Deploy REST API for Salt using rest_cherrypy.
Jan 13 2024, 23:47 · Continous integration and delivery, Salt
dereckson triaged T1942: Allow Jenkins to trigger deployment through Salt as Normal priority.
Jan 13 2024, 22:22 · Continous integration and delivery, Salt

Jul 2 2023

dereckson closed T1196: Automate the mailserver lxc container through Salt as Wontfix.

Mail will be deployed to a VM, per T1475.

Jul 2 2023, 19:38 · Mail, Servers, Salt

Jun 16 2023

dereckson updated subscribers of T1877: Evaluate Alcali - Salt front-end.
Jun 16 2023, 14:06 · security, Salt, Servers, Product evaluation

May 29 2023

dereckson moved T1098: Install sbnc on Eglide from Backlog to Services to add on the Salt board.
May 29 2023, 00:06 · Salt, debian-package-needed, Eglide, Servers
dereckson moved T1098: Install sbnc on Eglide from Packaging to Server config on the Eglide board.
May 29 2023, 00:05 · Salt, debian-package-needed, Eglide, Servers
dereckson added a project to T1098: Install sbnc on Eglide: Salt.
May 29 2023, 00:05 · Salt, debian-package-needed, Eglide, Servers

May 25 2023

dereckson moved T1767: Provision /etc/hosts from Backlog to Features / Services on the Drake network board.
May 25 2023, 01:34 · Salt, Drake network
dereckson moved T1757: docker-001 routing for drake doesn't work on boot from Backlog to IntraNought on the Drake network board.
May 25 2023, 01:34 · Operations sprints (Ignite Alkane Propulsion), Salt, Drake network, Servers, Nasqueron Docker deployment squad
dereckson moved T1741: Wrong GRE tunnel configuration Ysul on boot from Backlog to IntraNought / GRE tunnels on the Drake network board.
May 25 2023, 01:32 · Salt, Drake network, Servers

May 20 2023

dereckson triaged T1877: Evaluate Alcali - Salt front-end as Normal priority.
May 20 2023, 14:25 · security, Salt, Servers, Product evaluation

May 18 2023

dereckson closed T1779: Provision docker-002 Docker Engine as Resolved.
May 18 2023, 12:00 · Salt, Docker images, Servers, security
dereckson added a comment to T1779: Provision docker-002 Docker Engine.

Server is live and stable.

May 18 2023, 12:00 · Salt, Docker images, Servers, security
dereckson moved T1310: Merge deploy and deployment groups from Backlog to Not for this sprint on the Operations sprints (Consolidate them all) board.
May 18 2023, 11:53 · Operations sprints (Consolidate them all), Technical debt, Eglide, Salt
dereckson moved T1620: Decide if we keep staging repository from Backlog to Not for this sprint on the Operations sprints (Consolidate them all) board.
May 18 2023, 11:53 · discussion, documentation, Salt, Operations sprints (Consolidate them all), Servers
dereckson moved T1563: Declare MKV as video format in nginx configuration from Backlog to Next on the Operations sprints (Consolidate them all) board.
May 18 2023, 11:53 · Operations sprints (Consolidate them all), Servers, Salt
dereckson closed T1702: Deploy Complector aka la source as Resolved.
May 18 2023, 11:44 · Salt, Vault, security, Servers
dereckson added a revision to T1871: Provision Etherpad configuration: D3106: Don't escape new line in Etherpad welcome message.
May 18 2023, 11:31 · Salt, Etherpad
dereckson closed T1871: Provision Etherpad configuration as Resolved by committing rOPSdda0e01728ce: Provision Etherpad configuration.
May 18 2023, 10:59 · Salt, Etherpad
dereckson added a comment to T1871: Provision Etherpad configuration.

We've a correct no-op change deployed, but perhaps should we consider to modernize it a little bit:

May 18 2023, 10:52 · Salt, Etherpad
dereckson added a revision to T1871: Provision Etherpad configuration: D3104: Provision Etherpad configuration.
May 18 2023, 10:32 · Salt, Etherpad
dereckson added a parent task for T1871: Provision Etherpad configuration: T687: Document on Etherpad default message the installation is shared between Wolfplex and Nasqueron.
May 18 2023, 09:50 · Salt, Etherpad
dereckson triaged T1871: Provision Etherpad configuration as High priority.
May 18 2023, 09:50 · Salt, Etherpad
dereckson closed T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org as Resolved.
May 18 2023, 09:43 · Operations sprints (Consolidate them all), Servers, Salt, security
dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D3103: Supersede Equatower references by docker-002.
May 18 2023, 09:42 · Operations sprints (Consolidate them all), Servers, Salt, security
dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D3102: Supersede Equatower references by docker-002.
May 18 2023, 09:38 · Operations sprints (Consolidate them all), Servers, Salt, security
dereckson added a revision to T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org: D3101: Supersede Equatower references by docker-002.
May 18 2023, 09:35 · Operations sprints (Consolidate them all), Servers, Salt, security
dereckson renamed T1627: Supersede equatower.nasqueron.org by docker-002.nasqueron.org from Supersede equatower.nasqueron.org by docker-001.nasqueron.org to Supersede equatower.nasqueron.org by docker-002.nasqueron.org.
May 18 2023, 09:35 · Operations sprints (Consolidate them all), Servers, Salt, security
dereckson closed T1601: Install bats on devserver role as Resolved.
May 18 2023, 09:31 · Salt, Operations sprints (Consolidate them all), Servers
dereckson added a revision to T1601: Install bats on devserver role: D2402: Install bats on shellserver and devserver.
May 18 2023, 09:30 · Salt, Operations sprints (Consolidate them all), Servers
dereckson added a revision to T1268: Reprovision Ysul: D3100: Update MOTD to advertise Ysul EOL status.
May 18 2023, 09:21 · Operations sprints (The Dreadnought will produce new officers), Salt, Servers

May 14 2023

dereckson triaged T1869: Deploy credentials for irssi as Wishlist priority.
May 14 2023, 14:11 · Salt, IRC, User-Dereckson

May 13 2023

dereckson closed T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode as Resolved by committing rOPSc6ea8cdd4d8f: Run portsnap in interactive mode.
May 13 2023, 17:59 · Servers, Salt
dereckson moved T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode from Backlog to Pending review on the Servers board.
May 13 2023, 11:55 · Servers, Salt
dereckson added a revision to T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode: D3093: Run portsnap in interactive mode.
May 13 2023, 11:52 · Servers, Salt
dereckson added a comment to T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode.

According recent portsnap man:

May 13 2023, 11:47 · Servers, Salt
dereckson closed T1865: pam_nologin.so isn't available in FreeBSD 13.2 as Resolved by committing rOPS0e1b21e5a499: Ignore a failure to find pam_nologin\.so in SSH PAM configuration.
May 13 2023, 10:37 · Salt, Servers
dereckson added a revision to T1865: pam_nologin.so isn't available in FreeBSD 13.2: D3092: Ignore a failure to find pam_nologin\.so in SSH PAM configuration.
May 13 2023, 10:34 · Salt, Servers

May 12 2023

dereckson closed T1866: Core dotfiles must be provisioned after user creation as Resolved by committing rOPScdb89bc4b192: Copy user dotfiles AFTER user creation in core role.
May 12 2023, 20:45 · Salt, Servers
dereckson added a revision to T1866: Core dotfiles must be provisioned after user creation: D3086: Copy user dotfiles AFTER user creation in core role.
May 12 2023, 20:44 · Salt, Servers
dereckson triaged T1866: Core dotfiles must be provisioned after user creation as High priority.
May 12 2023, 20:41 · Salt, Servers
dereckson moved T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode from Backlog to Bug and issues on the Salt board.
May 12 2023, 20:40 · Servers, Salt
dereckson moved T1865: pam_nologin.so isn't available in FreeBSD 13.2 from Backlog to Bug and issues on the Salt board.
May 12 2023, 20:40 · Salt, Servers
dereckson added projects to T1865: pam_nologin.so isn't available in FreeBSD 13.2: Servers, Salt.
May 12 2023, 20:40 · Salt, Servers
dereckson triaged T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode as High priority.
May 12 2023, 20:39 · Servers, Salt

May 7 2023

dereckson moved T1858: Ensure salt-minion is up at boot time from Backlog to Backlog - Monitoring / misc on the Operations sprints (Ignite Alkane Propulsion) board.
May 7 2023, 20:57 · Salt, Servers, Operations sprints (Ignite Alkane Propulsion)
dereckson moved T1858: Ensure salt-minion is up at boot time from Backlog to Services to add on the Salt board.
May 7 2023, 20:57 · Salt, Servers, Operations sprints (Ignite Alkane Propulsion)
dereckson triaged T1858: Ensure salt-minion is up at boot time as High priority.
May 7 2023, 20:57 · Salt, Servers, Operations sprints (Ignite Alkane Propulsion)

May 6 2023

dereckson moved T1757: docker-001 routing for drake doesn't work on boot from Backlog - Docker to Backlog - Monitoring / misc on the Operations sprints (Ignite Alkane Propulsion) board.
May 6 2023, 18:01 · Operations sprints (Ignite Alkane Propulsion), Salt, Drake network, Servers, Nasqueron Docker deployment squad
dereckson moved T1757: docker-001 routing for drake doesn't work on boot from Backlog to Backlog - Docker on the Operations sprints (Ignite Alkane Propulsion) board.
May 6 2023, 15:55 · Operations sprints (Ignite Alkane Propulsion), Salt, Drake network, Servers, Nasqueron Docker deployment squad
dereckson moved T1770: Drop credentials from MySQL containers' environment from Backlog to Backlog - Docker on the Operations sprints (Ignite Alkane Propulsion) board.
May 6 2023, 15:55 · Operations sprints (Ignite Alkane Propulsion), Nasqueron Docker deployment squad, Salt, security
dereckson moved T1765: SELinux context is missing for /etc/nginx configuration files from Backlog to Backlog - Docker on the Operations sprints (Ignite Alkane Propulsion) board.
May 6 2023, 15:55 · Operations sprints (Ignite Alkane Propulsion), Salt, security, Nasqueron Docker deployment squad, Servers
dereckson updated the task description for T1757: docker-001 routing for drake doesn't work on boot.
May 6 2023, 14:27 · Operations sprints (Ignite Alkane Propulsion), Salt, Drake network, Servers, Nasqueron Docker deployment squad
dereckson placed T1757: docker-001 routing for drake doesn't work on boot up for grabs.

[ Avoid cookie-licking ]

May 6 2023, 14:24 · Operations sprints (Ignite Alkane Propulsion), Salt, Drake network, Servers, Nasqueron Docker deployment squad

Apr 16 2023

dereckson added a comment to T1831: Update login.conf for FreeBSD server.

Deployed everywhere, excepted on Ysul, still on FreeBSD 12.

Apr 16 2023, 20:41 · Salt
dereckson closed T1831: Update login.conf for FreeBSD server as Resolved.
Apr 16 2023, 20:41 · Salt
dereckson added a revision to T1831: Update login.conf for FreeBSD server: D3033: Align login class capability database to upstream.
Apr 16 2023, 20:41 · Salt