In T2123#32403, @dereckson wrote:Tests fix commits will be aggregated in datacube T2123-improve-tests-suite branch, so we can have a look of what's remaining to fix.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Today
Today
dereckson renamed T2125: Review Vault policies from vault_secrets_by_role from Review Vault policies to Review Vault policies from vault_secrets_by_role.
Fri, Sep 12
Fri, Sep 12
dereckson moved T2123: Fix tests for operations repository from Backlog to Ops on the Technical debt board.
dereckson moved T2123: Fix tests for operations repository from Backlog to Pending review on the Servers board.
dereckson added a revision to T2123: Fix tests for operations repository: D3664: Deploy the monitoring Vault policy.
dereckson added a revision to T2123: Fix tests for operations repository: D3663: Fix node.resolve_network tests.
Thu, Sep 11
Thu, Sep 11
dereckson added a revision to T2123: Fix tests for operations repository: D3662: Read flatter docker_networks pillar.
dereckson added a revision to T2123: Fix tests for operations repository: D3661: Avoid unittest deprecated aliases.
Tests commits will be aggregates in datacube T2123-improve-tests-suite branch, so we can have a look of what's remaining to fix.
Going to take this, as I wrote the tests suite, @DorianWinty will review.
Wed, Sep 10
Wed, Sep 10
Why not port encrypt to FreeBSD?
Support for PHP 8.4 is still there.
Uninstalled certbot.
Pruned old Python 3 dependencies.
Updated EPEL repo to epel-release-10-6
Updated packages
Reinstalled certbot, now running under Python 3.12 too.
Just for information, working on T2113, I've first updated the packages non related to that conflict, so I had fresh packages for both systemd and selinux config.
https://snapcraft.io/starship - last update: 27 April 2023 - latest/edge
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Was looking to offer a fix upstream, like read hostname from /proc/sys/kernel/hostname on Linux, but then I've realised this is an interaction issue with snap, starship, systemd and SELinux.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Decreasing priority, as it only occurs with Starship.
dereckson renamed T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship from systemd-hostnamed service can't be launched - SELinux blocks it to systemd-hostnamed service can't be launched - SELinux blocks it - starship.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Normal behavior observed with the policy:
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Still an error with last packages versions.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
audit2allow policy
Bumping for 14.3, are still going on, it makes sense to target latest version
dereckson renamed T2103: Upgrade servers to FreeBSD 14.3 from Upgrade servers to FreeBSD 14.2 to Upgrade servers to FreeBSD 14.3.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault HTTPS certificate automatically to Renew Vault web server certificate automatically.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault HTTP certificate automatically to Renew Vault HTTPS certificate automatically.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault certificate to Renew Vault HTTP certificate automatically.
First step is to create a script to renew all needed certificates:
Applied to Hervil, was missing there.
Tue, Sep 2
Tue, Sep 2
Sun, Aug 31
Sun, Aug 31
dereckson closed T2120: Don't allow infinite grow of MariaDB binary log as Resolved by committing rOPS9e78009934a7: Sets the MariaDB binary log expiration.
Find more easily the gateway
Jul 27 2025
Jul 27 2025
For reference, the configuration contains max_binlog_size = 1000M. This only affects the maximal size of ONE log file, but it can create as many as needed.
For dbserver-mysql role, configuration is located at roles/dbserver-mysql/mysql-server/files/conf.d/server.cnf
Jun 12 2025
Jun 12 2025
Jun 11 2025
Jun 11 2025
Jun 3 2025
Jun 3 2025
dereckson closed T2118: Load pefs module automatically on devserver role on boot as Resolved by committing rOPS5f9cc5dbd472: Load pefs module at boot time.
There is already a state to enable the module, freebsd_kernel_modules_enable but it only triggers when pefs-kmod is installed, and only to load the module right now.
Jun 2 2025
Jun 2 2025
dereckson renamed T2118: Load pefs module automatically on devserver role on boot from Load pefs module automatically on Windriver on boot to Load pefs module automatically on devserver role on boot.
dereckson triaged T2118: Load pefs module automatically on devserver role on boot as Normal priority.
To start using Knot DNS, you should complete the following tasks:
Same issue after 2025-06-02 reboot for kernel upgrade, route to 172.27.27.1 is still missing.
May 20 2025
May 20 2025
May 18 2025
May 18 2025
dereckson triaged T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship as Normal priority.
Apr 5 2025
Apr 5 2025
After arc land is successful:
Next one detected during arc land:
Next one:
Mar 28 2025
Mar 28 2025
Monitoring could be as simple as:`
dereckson updated the title for P370 windriver smartctl - ada0 from windriver smartctl to windriver smartctl - ada0.
Mar 27 2025
Mar 27 2025
dereckson renamed T2106: arcanist doesn't work on PHP 8.4 from arcanist doesn't work on PHP 8,4 to arcanist doesn't work on PHP 8.4.
Decreased priority as it was on my local laptop, WindRiver is still 8.3.16.
DorianWinty added a revision to T1931: Dovecot Provisioning: D3627: Provision custom build of dovecot.
dereckson added a parent task for T2105: Use HE as secondary DNS server: T1217: Host our DNS servers.
Knot uses also the same format, last dump for nasqueron.org available at P369.
Mar 12 2025
Mar 12 2025
Jan 28 2025
Jan 28 2025
WindRiver looks stable enough, green light for other servers (still router-001 excepted)
Jan 15 2025
Jan 15 2025
In T2103#32089, @dereckson wrote:False alert, server correctly booted but doesn't answer ICMP packets, see T2104.
Problem from the guest network firewall, not about WindRiver.
False alert, server correctly booted but doesn't answer ICMP packets, see T2104.
On WindRiver. 14.2 has been upgraded, not alive after reboot.
Jan 3 2025
Jan 3 2025
Jan 2 2025
Jan 2 2025
DorianWinty closed T1548: Update mailer configuration, a subtask of T1547: Consolidate DevCentral Docker image, as Wontfix.
DorianWinty added a project to T2098: acme.sh configure provisionning of the nginx check and reload: Servers.
Dec 3 2024
Dec 3 2024
dereckson added a project to T2096: WindRiver Route to Drake private network Ignored : Drake network.
Dec 2 2024
Dec 2 2024
Next step: nginx configuration inside the container
Dec 1 2024
Dec 1 2024
DNS change
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator