Page MenuHomeDevCentral
Feed Advanced Search

Wed, Sep 16

dereckson updated the task description for T2362: Create a modular authentication tool.
Wed, Sep 16, 08:27 · Taak, security, Servers

Tue, Sep 15

dereckson triaged T2362: Create a modular authentication tool as Normal priority.
Tue, Sep 15, 14:54 · Taak, security, Servers

Sun, Sep 13

dereckson closed T295: Create a Vim default system configuration on Ysul, a subtask of T280: Prepare suitable a development server environment for Tasacora, as Resolved.
Sun, Sep 13, 11:41 · Tasacora, Servers
dereckson closed T295: Create a Vim default system configuration on Ysul as Resolved.
Sun, Sep 13, 11:41 · documentation, User-Sandlayth, CLI, Servers
dereckson added a comment to T295: Create a Vim default system configuration on Ysul.

AstroNvim documentation: https://agora.nasqueron.org/index.php?title=Devserver_reference&diff=2606&oldid=2603

Sun, Sep 13, 11:22 · documentation, User-Sandlayth, CLI, Servers
dereckson added a revision to T295: Create a Vim default system configuration on Ysul: D4214: Install AstroNvim dependencies on devserver role.
Sun, Sep 13, 09:01 · documentation, User-Sandlayth, CLI, Servers
dereckson added a comment to T305: Installed dictionaries on devserver.

Just a small note we've also rMD, currently not installed globally, to sync JetBrains IDE and Hunspell-compatible dictionaries:

Sun, Sep 13, 08:51 · Salt, Servers
dereckson added a comment to T295: Create a Vim default system configuration on Ysul.

The two integrated Vim distributions with current traction seems to be:

Sun, Sep 13, 08:48 · documentation, User-Sandlayth, CLI, Servers

Sat, Sep 12

dereckson lowered the priority of T2225: Reboot WindRiver from High to Normal.

Rebooted for FreeBSD 15.1-p3 kernel upgrade.

Sat, Sep 12, 22:38 · Servers
dereckson added a revision to T2361: Improve terminal experience with powerline support: D4212: Add Nord theme for irssi.
Sat, Sep 12, 19:06 · Servers
dereckson updated the task description for T2361: Improve terminal experience with powerline support.
Sat, Sep 12, 18:22 · Servers
dereckson updated the task description for T2361: Improve terminal experience with powerline support.
Sat, Sep 12, 18:21 · Servers
dereckson updated the task description for T2361: Improve terminal experience with powerline support.
Sat, Sep 12, 18:21 · Servers
dereckson added a revision to T2361: Improve terminal experience with powerline support: D4211: Propagate POWERLINE_SUPPORTED within SSH sessions.
Sat, Sep 12, 18:10 · Servers
dereckson added a revision to T2361: Improve terminal experience with powerline support: D4210: Install powerline-status on devserver.
Sat, Sep 12, 16:16 · Servers
dereckson triaged T2361: Improve terminal experience with powerline support as Low priority.
Sat, Sep 12, 06:07 · Servers

Sun, Sep 6

dereckson updated the task description for T2359: Manage properly Terraform states.
Sun, Sep 6, 21:11 · Vault, Salt, security, Servers
dereckson closed T2359: Manage properly Terraform states as Resolved.
Sun, Sep 6, 19:05 · Vault, Salt, security, Servers
dereckson added a comment to T2359: Manage properly Terraform states.

Terraform state files can contain both personal information (ovh/ovh) or credentials (ovh/ovh, hashicorp/vault).
As such, they'll benefit to be stored locally and encrypted as rest.

Sun, Sep 6, 19:02 · Vault, Salt, security, Servers
dereckson added a revision to T2359: Manage properly Terraform states: D4207: Wrap tofu or terraform command to manage encrypted state.
Sun, Sep 6, 09:17 · Vault, Salt, security, Servers

Sat, Sep 5

dereckson triaged T2359: Manage properly Terraform states as High priority.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson claimed T2359: Manage properly Terraform states.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson moved T2359: Manage properly Terraform states from Backlog to Servers config on the Salt board.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson added projects to T2359: Manage properly Terraform states: security, Salt, Vault.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson created T2359: Manage properly Terraform states.
Sat, Sep 5, 23:27 · Vault, Salt, security, Servers
dereckson added a comment to T2344: Craft a new naming system for an alphabet.

Need D and V for next backup object storage. As Darak and Vakor are in frozen status, that's perfect.

Sat, Sep 5, 12:17 · We are Nasqueron, Servers

Aug 29 2026

dereckson moved T2352: Provision hyper-002 with bhyve for FreeBSD servers from Backlog to Need budget on the FinOps board.
Aug 29 2026, 07:51 · FinOps, Servers
dereckson triaged T2352: Provision hyper-002 with bhyve for FreeBSD servers as Low priority.
Aug 29 2026, 07:51 · FinOps, Servers

Aug 23 2026

Sandlayth added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A. Keep access

Aug 23 2026, 20:46 · security, Servers
ptdradmin added a comment to T2342: Validate privileged access - ops.

A. Keep access

Aug 23 2026, 19:37 · security, Servers
dereckson moved T2340: Deploy Restic client to automate files backups from Backlog to Working on on the security board.
Aug 23 2026, 11:57 · security, Servers, Backups
dereckson moved T2342: Validate privileged access - ops from Backlog to Working on on the security board.
Aug 23 2026, 11:57 · security, Servers
dereckson moved T2343: Validate privileged access - nasqueron-dev-docker from Backlog to Working on on the security board.
Aug 23 2026, 11:57 · security, Servers
dereckson updated subscribers of T2343: Validate privileged access - nasqueron-dev-docker.

Cohort 1 accounts have been successfully removed from Dwellers.

Aug 23 2026, 11:56 · security, Servers

Aug 22 2026

ptdradmin added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A-Keep acces - I tested Anubis

Aug 22 2026, 18:46 · security, Servers

Aug 21 2026

DorianWinty added a comment to T2342: Validate privileged access - ops.

A. Keep access

Aug 21 2026, 16:22 · security, Servers

Aug 20 2026

dereckson added a revision to T2343: Validate privileged access - nasqueron-dev-docker: D4170: Remove inactive users from nasqueron-dev-docker group.
Aug 20 2026, 19:32 · security, Servers
dereckson closed T1766: Move transmission logs into a dedicated file as Resolved.

My upstream patch has been merged as part of https://cgit.freebsd.org/ports/commit/?id=f40cba02c2f877b8e9e5e1a591c49ff118831c19.

Aug 20 2026, 19:22 · upstream, Servers
dereckson closed T1991: Context has again been lost on /var/log/www as Resolved.

T1992 seems to solve this issue, we're good.

Aug 20 2026, 18:43 · upstream, Regression, Servers, Salt
dereckson moved T1505: Automate Let's Encrypt TLS certificates management for every server from Pending review to Analysis / under discussion on the Servers board.

Do we still need this one as we move to acme.sh?

Aug 20 2026, 18:41 · TLS certificates, Servers
dereckson reassigned T2226: oidentd isn't configured in rc from dereckson to DorianWinty.
Aug 20 2026, 18:35 · Salt, IRC, Restricted Project, Servers
dereckson closed T2226: oidentd isn't configured in rc as Resolved.

Code has been merged.

Aug 20 2026, 18:35 · Salt, IRC, Restricted Project, Servers

Aug 17 2026

dereckson added a comment to T2344: Craft a new naming system for an alphabet.

I was wondering how to handle collation if we chose the second system.

Aug 17 2026, 21:44 · We are Nasqueron, Servers
dereckson added a comment to T2344: Craft a new naming system for an alphabet.

Full table:

Aug 17 2026, 21:37 · We are Nasqueron, Servers

Aug 16 2026

dereckson moved T2344: Craft a new naming system for an alphabet from Backlog to Analysis / under discussion on the Servers board.
Aug 16 2026, 22:30 · We are Nasqueron, Servers
dereckson added a comment to T2344: Craft a new naming system for an alphabet.

If we're drawing from the foundational imagery of ancient Phoenician signs—simple, universal symbols like the ox or house—we're reimagining them through the lens of phonetic innovation and cultural detachment.

Aug 16 2026, 22:30 · We are Nasqueron, Servers
dereckson triaged T2344: Craft a new naming system for an alphabet as Normal priority.
Aug 16 2026, 21:46 · We are Nasqueron, Servers
dereckson updated subscribers of T2343: Validate privileged access - nasqueron-dev-docker.

Cohort 1. Users with access only to nasqueron-dev-docker but not to ops.

Aug 16 2026, 18:49 · security, Servers
dereckson added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A. Keep access - currently maintaining PHP images.

Aug 16 2026, 18:46 · security, Servers
dereckson added a comment to T2342: Validate privileged access - ops.

A. Keep access

Aug 16 2026, 18:46 · security, Servers
dereckson triaged T2343: Validate privileged access - nasqueron-dev-docker as Normal priority.
Aug 16 2026, 18:45 · security, Servers
dereckson added projects to T2342: Validate privileged access - ops: Servers, security.
Aug 16 2026, 18:44 · security, Servers

Aug 15 2026

dereckson triaged T2340: Deploy Restic client to automate files backups as Normal priority.
Aug 15 2026, 06:52 · security, Servers, Backups
dereckson added a comment to T461: Set up a Tahoe grid.

I'm going to disconnect Retz from our Nasqueron backup needs.

Aug 15 2026, 06:46 · Backups, Product evaluation, Retz, Servers
dereckson removed parent tasks for T461: Set up a Tahoe grid: T100: Prepare volume and backup for devcentral.nasqueron.org, T438: Backup dataroot folder on devserver.
Aug 15 2026, 06:45 · Backups, Product evaluation, Retz, Servers
dereckson removed a subtask for T100: Prepare volume and backup for devcentral.nasqueron.org: T461: Set up a Tahoe grid.
Aug 15 2026, 06:45 · Operations sprint 0, Servers
dereckson removed a subtask for T438: Backup dataroot folder on devserver: T461: Set up a Tahoe grid.
Aug 15 2026, 06:45 · Backups, Servers

Jul 26 2026

dereckson merged task T994: MySQL statistics for acquisitariat into T2337: Monitor MariaDB / MySQL databases.
Jul 26 2026, 21:30 · Monitoring and reporting, Servers, Docker images
dereckson moved T646: Upgrade MySQL database schema from Backlog to Servers on the DBA board.
Jul 26 2026, 21:25 · DBA, Nasqueron Docker deployment squad, Servers
dereckson added a project to T646: Upgrade MySQL database schema: DBA.
Jul 26 2026, 21:25 · DBA, Nasqueron Docker deployment squad, Servers
dereckson moved T2230: Evaluate Barman for PostgreSQL backups from Backlog to Services / Features on the DBA board.
Jul 26 2026, 21:21 · Servers, DBA, Product evaluation, Backups
dereckson moved T2186: Upgrade to PostgreSQL 17 from Backlog to Servers on the DBA board.
Jul 26 2026, 21:21 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson moved T2187: Create a separate PostgreSQL log from Backlog to Servers on the DBA board.
Jul 26 2026, 21:21 · DBA, Servers, Salt, Operations sprints (Echoes in the Void)

Jul 21 2026

dereckson added a comment to T1130: Tweak MariaDB configuration on devserver and dbserver-mysql roles.

Computed on db-B-001, got 1 Gb using POWER(1024,3) but only 139 Mb using POWER(1024,2), so we're good with the default value there for now.

Jul 21 2026, 20:35 · Servers
dereckson triaged T1130: Tweak MariaDB configuration on devserver and dbserver-mysql roles as Normal priority.
Jul 21 2026, 20:32 · Servers
ptdradmin added a revision to T1130: Tweak MariaDB configuration on devserver and dbserver-mysql roles: D4135: Make innodb_buffer_pool_size configurable per node.
Jul 21 2026, 04:15 · Servers
ptdradmin claimed T1130: Tweak MariaDB configuration on devserver and dbserver-mysql roles.
Jul 21 2026, 04:07 · Servers
ptdradmin added a revision to T2289: https://infra.nasqueron.org/cd/dashboard without trailing slash doesn't serve CSS: D4134: Fix missing CSS on /cd/dashboard without trailing slash.
Jul 21 2026, 03:38 · Jenkins, Tommy, Servers, Alkane
ptdradmin claimed T2289: https://infra.nasqueron.org/cd/dashboard without trailing slash doesn't serve CSS.
Jul 21 2026, 03:28 · Jenkins, Tommy, Servers, Alkane

Jul 18 2026

dereckson added a revision to T2312: Migrate web-001 TLS certificates to acme.sh: D4133: Serve TLS .nasqueron.org certificates from acme.sh paths on web-001.
Jul 18 2026, 21:34 · TLS certificates, Alkane, Servers
dereckson added a revision to T2043: Switch to acme.sh instead of certbot: D4133: Serve TLS .nasqueron.org certificates from acme.sh paths on web-001.
Jul 18 2026, 21:34 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), Servers
dereckson added a revision to T2312: Migrate web-001 TLS certificates to acme.sh: D4102: Deploy .nasqueron.org certificates with acme.sh on web-001.
Jul 18 2026, 21:33 · TLS certificates, Alkane, Servers
dereckson added a revision to T2043: Switch to acme.sh instead of certbot: D4103: Allow to provide default options for acme.sh certificates.
Jul 18 2026, 21:31 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), Servers
dereckson added a revision to T2043: Switch to acme.sh instead of certbot: D4102: Deploy .nasqueron.org certificates with acme.sh on web-001.
Jul 18 2026, 21:30 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), Servers
dereckson added a comment to T2043: Switch to acme.sh instead of certbot.

To help edit vhosts, I've used the following sed expressions:

Jul 18 2026, 21:27 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), Servers
dereckson added a comment to T2266: Improve Python requirements for Operations repository.

@yousra It seems better with last Salt versions on 3006 LTS branch.

Jul 18 2026, 20:45 · Python, Servers, Regression, Salt
ptdradmin added a revision to T1792: Docker registry HTTP / HTTPS mismatch: D4131: Document HTTP/HTTPS pitfall when pulling from the local Docker registry.
Jul 18 2026, 19:45 · good-first-issue, Operations sprints (Ignite Alkane Propulsion), Nasqueron Docker deployment squad, Servers, documentation
ptdradmin claimed T1792: Docker registry HTTP / HTTPS mismatch.
Jul 18 2026, 19:31 · good-first-issue, Operations sprints (Ignite Alkane Propulsion), Nasqueron Docker deployment squad, Servers, documentation

Jul 5 2026

dereckson added a comment to T2332: On FreeBSD, upgrade to FreeBSD 15.1 / Python 3.12 breaks Salt.

Next steps on complector:

Jul 5 2026, 10:52 · Salt, Servers
dereckson added a revision to T2332: On FreeBSD, upgrade to FreeBSD 15.1 / Python 3.12 breaks Salt: D4114: Provision Salt temporary packages repository for FreeBSD.
Jul 5 2026, 10:46 · Salt, Servers
dereckson added a comment to T2332: On FreeBSD, upgrade to FreeBSD 15.1 / Python 3.12 breaks Salt.

New poudriere run

Jul 5 2026, 10:25 · Salt, Servers
dereckson closed T2329: Downgrade Salt to 3006.25 as Resolved.
Jul 5 2026, 09:16 · Eglide, Salt, Servers
dereckson added a comment to T2329: Downgrade Salt to 3006.25.

After pinning Salt version with D4113:

Jul 5 2026, 09:14 · Eglide, Salt, Servers
dereckson added a revision to T2329: Downgrade Salt to 3006.25: D4113: Pin specific Salt version on Debian.
Jul 5 2026, 09:02 · Eglide, Salt, Servers
dereckson claimed T2329: Downgrade Salt to 3006.25.
Jul 5 2026, 08:37 · Eglide, Salt, Servers
dereckson added a comment to T2332: On FreeBSD, upgrade to FreeBSD 15.1 / Python 3.12 breaks Salt.

Instead of building packages by hand, we can also automate with Poudriere and create a temporary packages repository "15-salt".

Jul 5 2026, 05:54 · Salt, Servers
dereckson added a comment to T1850: Move packages from Ysul to WindRiver.

Ysul content restored to:

Jul 5 2026, 05:49 · Operations sprints (Ignite Alkane Propulsion), Alkane, Servers

Jul 4 2026

dereckson added a comment to T2332: On FreeBSD, upgrade to FreeBSD 15.1 / Python 3.12 breaks Salt.

On WindRiver, /usr/ports/sysutils/py-salt/work-py311/pkg/py311-salt-3006.26,1.pkg is Salt 3006.26 + Python 3.11, built on FreeBSD 15.1

Jul 4 2026, 14:51 · Salt, Servers

Jul 1 2026

dereckson added a revision to T2331: Use interface name, not description in dhclient6.conf: D4111: Configure dhclient6 with interface device.
Jul 1 2026, 23:14 · IPv6, Servers
dereckson added a comment to T2225: Reboot WindRiver.

Rebooted again for FreeBSD 15.1 upgrade.

Jul 1 2026, 23:11 · Servers
dereckson triaged T2332: On FreeBSD, upgrade to FreeBSD 15.1 / Python 3.12 breaks Salt as High priority.
Jul 1 2026, 22:58 · Salt, Servers
dereckson triaged T2331: Use interface name, not description in dhclient6.conf as High priority.
Jul 1 2026, 22:37 · IPv6, Servers

Jun 14 2026

dereckson closed T2183: Detect legacy SHA-1 RSA keys as Wontfix.

Our Salt state core/sshd does not set PubkeyAcceptedAlgorithms, so ssh-rsa (SHA-1) is blocked by default — this has been the case since OpenSSH 8.8 (released 2021-09-26, see https://www.openssh.com/txt/release-8.8).

Jun 14 2026, 14:58 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)
dereckson moved T2329: Downgrade Salt to 3006.25 from Backlog to Server config on the Eglide board.
Jun 14 2026, 14:20 · Eglide, Salt, Servers
dereckson moved T2330: Investigate PHP 8.4 / PHP 8.5 dual installation on Eglide from Backlog to Server config on the Eglide board.
Jun 14 2026, 14:20 · Servers, Salt, Eglide, PHP 8.x support
dereckson merged T1995: PHP 8.2 and PHP 8.3 seems both to be installed on Eglide into T2330: Investigate PHP 8.4 / PHP 8.5 dual installation on Eglide.
Jun 14 2026, 14:20 · Servers, Salt, Eglide, PHP 8.x support
dereckson closed Unknown Object (Maniphest Task), a subtask of T1162: 2017-03-01 eglide.org server outage, as Resolved.
Jun 14 2026, 14:20 · User-Sandlayth, Eglide, Servers
dereckson triaged T2330: Investigate PHP 8.4 / PHP 8.5 dual installation on Eglide as Low priority.
Jun 14 2026, 14:18 · Servers, Salt, Eglide, PHP 8.x support
dereckson triaged T2329: Downgrade Salt to 3006.25 as Normal priority.
Jun 14 2026, 14:12 · Eglide, Salt, Servers

May 20 2026

dereckson added a project to T2325: Server outage: Investigate Ysul.nasqueron.org network access and unresponsive Salt minion: Secure HA tunnels.
May 20 2026, 18:16 · Secure HA tunnels, Servers