Anything related to the Nasqueron server infrastructure at IaaS or PaaS levels.
Details
Details
Description
Today
Today
dereckson renamed T2125: Review Vault policies from vault_secrets_by_role from Review Vault policies to Review Vault policies from vault_secrets_by_role.
Fri, Sep 12
Fri, Sep 12
dereckson moved T2123: Fix tests for operations repository from Backlog to Ops on the Technical debt board.
dereckson moved T2123: Fix tests for operations repository from Backlog to Pending review on the Servers board.
dereckson added a comment to T2123: Fix tests for operations repository.
dereckson added a revision to T2123: Fix tests for operations repository: D3664: Deploy the monitoring Vault policy.
dereckson added a revision to T2123: Fix tests for operations repository: D3663: Fix node.resolve_network tests.
Thu, Sep 11
Thu, Sep 11
dereckson added a revision to T2123: Fix tests for operations repository: D3662: Read flatter docker_networks pillar.
dereckson added a revision to T2123: Fix tests for operations repository: D3661: Avoid unittest deprecated aliases.
dereckson added a comment to T2123: Fix tests for operations repository.
Tests commits will be aggregates in datacube T2123-improve-tests-suite branch, so we can have a look of what's remaining to fix.
dereckson updated subscribers of T2123: Fix tests for operations repository.
Going to take this, as I wrote the tests suite, @DorianWinty will review.
Wed, Sep 10
Wed, Sep 10
dereckson added a comment to T2067: Deploy an OpenBSD server.
Why not port encrypt to FreeBSD?
dereckson added a comment to T2081: Deploy Snuffleupagus.
Support for PHP 8.4 is still there.
Uninstalled certbot.
Pruned old Python 3 dependencies.
Updated EPEL repo to epel-release-10-6
Updated packages
Reinstalled certbot, now running under Python 3.12 too.
dereckson added a comment to T2115: Update Dwellers packages.
Just for information, working on T2113, I've first updated the packages non related to that conflict, so I had fresh packages for both systemd and selinux config.
dereckson added a comment to T2122: Package starship for EPEL.
https://snapcraft.io/starship - last update: 27 April 2023 - latest/edge
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Was looking to offer a fix upstream, like read hostname from /proc/sys/kernel/hostname on Linux, but then I've realised this is an interaction issue with snap, starship, systemd and SELinux.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Decreasing priority, as it only occurs with Starship.
dereckson renamed T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship from systemd-hostnamed service can't be launched - SELinux blocks it to systemd-hostnamed service can't be launched - SELinux blocks it - starship.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Normal behavior observed with the policy:
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Still an error with last packages versions.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
audit2allow policy
dereckson added a comment to T2103: Upgrade servers to FreeBSD 14.3.
Bumping for 14.3, are still going on, it makes sense to target latest version
dereckson renamed T2103: Upgrade servers to FreeBSD 14.3 from Upgrade servers to FreeBSD 14.2 to Upgrade servers to FreeBSD 14.3.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault HTTPS certificate automatically to Renew Vault web server certificate automatically.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault HTTP certificate automatically to Renew Vault HTTPS certificate automatically.
dereckson renamed T2112: Renew Vault web server certificate automatically from Renew Vault certificate to Renew Vault HTTP certificate automatically.
dereckson added a comment to T2112: Renew Vault web server certificate automatically.
First step is to create a script to renew all needed certificates:
dereckson added a comment to T2116: Drop of OCSP Service.
Applied to Hervil, was missing there.
Tue, Sep 2
Tue, Sep 2
Sun, Aug 31
Sun, Aug 31
dereckson closed T2120: Don't allow infinite grow of MariaDB binary log as Resolved by committing rOPS9e78009934a7: Sets the MariaDB binary log expiration.
dereckson added a comment to T2017: Install WindRiver replacement server.
Find more easily the gateway
Jul 27 2025
Jul 27 2025
dereckson added a comment to T2120: Don't allow infinite grow of MariaDB binary log.
For reference, the configuration contains max_binlog_size = 1000M. This only affects the maximal size of ONE log file, but it can create as many as needed.
dereckson added a comment to T2120: Don't allow infinite grow of MariaDB binary log.
For dbserver-mysql role, configuration is located at roles/dbserver-mysql/mysql-server/files/conf.d/server.cnf
Jun 12 2025
Jun 12 2025
Jun 11 2025
Jun 11 2025
Jun 3 2025
Jun 3 2025
dereckson closed T2118: Load pefs module automatically on devserver role on boot as Resolved by committing rOPS5f9cc5dbd472: Load pefs module at boot time.