At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.
Website: https://www.dereckson.be/
Individual board: User-Dereckson
User Details
User Details
- User Since
- Nov 11 2014, 04:38 (565 w, 2 d)
- Roles
- Administrator
- Availability
- Available
Yesterday
Yesterday
dereckson added a comment to T2067: Deploy an OpenBSD server.
Why not port encrypt to FreeBSD?
dereckson added a comment to T2081: Deploy Snuffleupagus.
Support for PHP 8.4 is still there.
dereckson committed rOPSe5ec87dfe258: Allow systemd-hostnamed to create socket when called from Varlink (authored by dereckson).
Allow systemd-hostnamed to create socket when called from Varlink
Deployed on Dwellers, works like a charm.
dereckson updated the diff for D3658: Allow systemd-hostnamed to create socket when called from Varlink.
Allow to remove the socket too
dereckson planned changes to D3658: Allow systemd-hostnamed to create socket when called from Varlink.
Uninstalled certbot.
Pruned old Python 3 dependencies.
Updated EPEL repo to epel-release-10-6
Updated packages
Reinstalled certbot, now running under Python 3.12 too.
dereckson added a comment to T2115: Update Dwellers packages.
Just for information, working on T2113, I've first updated the packages non related to that conflict, so I had fresh packages for both systemd and selinux config.
dereckson added a comment to T2122: Package starship for EPEL.
https://snapcraft.io/starship - last update: 27 April 2023 - latest/edge
dereckson retitled D3658: Allow systemd-hostnamed to create socket when called from Varlink from Allow systemd-hostnamed to create socket when started by snap starinstalled with snap to Allow systemd-hostnamed to create socket when called from Varlink.
dereckson requested review of D3658: Allow systemd-hostnamed to create socket when called from Varlink.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Was looking to offer a fix upstream, like read hostname from /proc/sys/kernel/hostname on Linux, but then I've realised this is an interaction issue with snap, starship, systemd and SELinux.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Decreasing priority, as it only occurs with Starship.
dereckson renamed T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship from systemd-hostnamed service can't be launched - SELinux blocks it to systemd-hostnamed service can't be launched - SELinux blocks it - starship.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Normal behavior observed with the policy:
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Still an error with last packages versions.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
audit2allow policy
dereckson updated the summary of D3657: Renew Vault intermediate authority certificate.
dereckson added a comment to T2103: Upgrade servers to FreeBSD 14.3.
Bumping for 14.3, are still going on, it makes sense to target latest version
dereckson renamed T2103: Upgrade servers to FreeBSD 14.3 from Upgrade servers to FreeBSD 14.2 to Upgrade servers to FreeBSD 14.3.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault HTTPS certificate automatically to Renew Vault web server certificate automatically.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault HTTP certificate automatically to Renew Vault HTTPS certificate automatically.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault certificate to Renew Vault HTTP certificate automatically.
dereckson updated the diff for D3657: Renew Vault intermediate authority certificate.
shellcheck
dereckson requested review of D3657: Renew Vault intermediate authority certificate.
dereckson added a comment to T2112: Renew Vault web server certificate automatically.
First step is to create a script to renew all needed certificates:
dereckson renamed T2117: Unexpected reboot of docker-002 from Unexpeted reboot of docker-002 to Unexpected reboot of docker-002.
dereckson closed T2111: Bump dependencies for API servers log PHP version, a subtask of T2015: Migrate remaining sites from ysul to Alkane, as Resolved.
Updated to PHPUnit 12.
Bump dependencies
dereckson added a revision to T2111: Bump dependencies for API servers log PHP version: D3635: Bump dependencies.
dereckson added a revision to T2111: Bump dependencies for API servers log PHP version: D3656: Bump dependencies.
dereckson requested review of D3656: Bump dependencies.
dereckson added a comment to T2116: Drop of OCSP Service.
Applied to Hervil, was missing there.
Prune OCSP nginx configuration
dereckson committed rOPS60c7955e1c0e: Allow to discover IPv6 gateway for Online servers (authored by dereckson).
Allow to discover IPv6 gateway for Online servers
dereckson added a comment to D3655: Enable TCP Fast Open on FreeBSD for role dns.
Applied to dns-001
dereckson committed rOPS0df5b8cc669a: Enable TCP Fast Open on FreeBSD for role dns (authored by dereckson).
Enable TCP Fast Open on FreeBSD for role dns
dereckson committed rQVR12ac9fc4c928: Allow to remove steerable saddle easily (authored by dereckson).
Allow to remove steerable saddle easily
Mon, Sep 8
Mon, Sep 8
dereckson committed rQVRd8adca5605f7: Avoid beds to explode in Nether or the End dimensions (authored by dereckson).
Avoid beds to explode in Nether or the End dimensions
dereckson committed rQVR4fd99128ceb1: Give relevant information about current region (authored by dereckson).
Give relevant information about current region
Wed, Sep 3
Wed, Sep 3
dereckson updated the test plan for D3655: Enable TCP Fast Open on FreeBSD for role dns.
dereckson awarded D3655: Enable TCP Fast Open on FreeBSD for role dns a Y So Serious token.
dereckson requested review of D3655: Enable TCP Fast Open on FreeBSD for role dns.
dereckson retitled D3654: Define nasqueron.org DNS zone from Define nasqueron.org dns to Define nasqueron.org DNS zone.
dereckson updated the diff for D3654: Define nasqueron.org DNS zone.
nbsp to space too
dereckson updated the diff for D3654: Define nasqueron.org DNS zone.
Variables to replace CNAME
Tue, Sep 2
Tue, Sep 2
dereckson added inline comments to D3652: Define testdom for ook.space to test on windriver dns.
dereckson added inline comments to D3652: Define testdom for ook.space to test on windriver dns.
dereckson added inline comments to D3640: Deploy KnotDNS on dns server.
dereckson requested changes to D3640: Deploy KnotDNS on dns server.
I like the identity field as a parameter by the way.
dereckson updated the test plan for D3652: Define testdom for ook.space to test on windriver dns.
Mon, Sep 1
Mon, Sep 1
dereckson retitled D3644: Configure dns-001 node from Configure dns-001 network to Configure dns-001 node.
dereckson retitled D3644: Configure dns-001 node from Configure dns-001 node to Configure dns-001 network.
Sun, Aug 31
Sun, Aug 31
dereckson committed rQVRe3f96bdbaffa: Ensure one and only one EOL before class end (authored by dereckson).
Ensure one and only one EOL before class end
Refactor InventoryEvent menu checks
dereckson awarded D3646: Add quality of life Suhayl plugin a Y So Serious token.
dereckson awarded D3647: Add commandment stick a Y So Serious token.
dereckson awarded D3648: Label chests with a quill a Y So Serious token.
dereckson awarded D3649: Move commandment stick l10n to resource pack a Y So Serious token.
dereckson awarded D3650: Update resource pack hash in remote server.properties a Y So Serious token.
dereckson added a comment to D3651: Allow to discover IPv6 gateway for Online servers.
The ndp parsing code has been written by a GPT model, offering to forget about awk.
dereckson awarded D3651: Allow to discover IPv6 gateway for Online servers a Y So Serious token.
dereckson requested review of D3651: Allow to discover IPv6 gateway for Online servers.
dereckson closed T2120: Don't allow infinite grow of MariaDB binary log as Resolved by committing rOPS9e78009934a7: Sets the MariaDB binary log expiration.
dereckson committed rOPS9e78009934a7: Sets the MariaDB binary log expiration (authored by dereckson).
Sets the MariaDB binary log expiration
dereckson added a comment to T2017: Install WindRiver replacement server.
Find more easily the gateway
dereckson committed rQVR5434289abb2c: Update resource pack hash in remote server.properties (authored by dereckson).
Update resource pack hash in remote server.properties
dereckson requested review of D3650: Update resource pack hash in remote server.properties.
dereckson committed rQVR08351984c322: Move commandment stick l10n to resource pack (authored by dereckson).
Move commandment stick l10n to resource pack
dereckson requested review of D3649: Move commandment stick l10n to resource pack.
Label chests with a quill
dereckson updated the diff for D3648: Label chests with a quill.
Prune redundant comments, unused imports/constant
dereckson added inline comments to D3648: Label chests with a quill.
dereckson updated the diff for D3648: Label chests with a quill.
EOL at EOF. Remove autogenerated. Clean imports