This tag identifies security issue.
Details
Details
Description
Yesterday
Yesterday
dereckson updated subscribers of T2343: Validate privileged access - nasqueron-dev-docker.
Cohort 1. Users with access only to nasqueron-dev-docker but not to ops.
dereckson added a comment to T2343: Validate privileged access - nasqueron-dev-docker.
A. Keep access - currently maintaining PHP images.
dereckson added a comment to T2342: Validate privileged access - ops.
A. Keep access
Sat, Aug 15
Sat, Aug 15
Jul 4 2026
Jul 4 2026
dereckson added a comment to T2333: Upgrade OpenSSH version used on DevCentral.
- Updated to Debian 12, then 13
- /usr merge process done manually, with the help of statically compiled busybox
- reinstalled libwebp6_0.6.1-2.1+deb11u2_amd64.deb to avoid to update PHP
dereckson added a comment to T2333: Upgrade OpenSSH version used on DevCentral.
Currently runs under Debian 11, target would be Debian 13.
Jul 2 2026
Jul 2 2026
Jun 14 2026
Jun 14 2026
dereckson moved T2107: j'aimerais avoir une présence permanente sur internet from Backlog to Project on the Eglide board.
Our Salt state core/sshd does not set PubkeyAcceptedAlgorithms, so ssh-rsa (SHA-1) is blocked by default — this has been the case since OpenSSH 8.8 (released 2021-09-26, see https://www.openssh.com/txt/release-8.8).
Apr 22 2026
Apr 22 2026
yousra added a comment to T2318: Restart Salt minion service after configuration change.
The error occured is (T2315) :
dereckson updated subscribers of T2318: Restart Salt minion service after configuration change.
dereckson moved T2318: Restart Salt minion service after configuration change from Backlog to Bug and issues on the Salt board.
Apr 3 2026
Apr 3 2026
Mar 25 2026
Mar 25 2026
dereckson moved T1513: Propagate certificate to Openfire server from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T1602: Provision ACME DNS credentials for core domains on each servers from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T1342: Let's encrypt on Debian use logrotate from Backlog to Let's Encrypt - legacy on the TLS certificates board.
dereckson moved T2112: Renew Vault web server certificate automatically from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T2155: Review rotation for acme.sh logs from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 23 2026
Mar 23 2026
With Salt, sudo files content are now managed from rOPS.
Mar 22 2026
Mar 22 2026
dereckson triaged T2107: j'aimerais avoir une présence permanente sur internet as Wishlist priority.
dereckson added a comment to T1861: Configure static IPv6 on WindRiver.
Next: configure DNS records
dereckson changed the visibility for T2143: Hash Tomcat credentials.
dereckson shifted T2143: Hash Tomcat credentials from the Restricted Space space to the S1 Nasqueron space.
dereckson moved T1109: Switch all OAuth GitHub applications to Nasqueron organization accounts from Backlog to Infra on the Auth Grove board.
dereckson triaged T1109: Switch all OAuth GitHub applications to Nasqueron organization accounts as Normal priority.
dereckson placed T1513: Propagate certificate to Openfire server up for grabs.
Mar 21 2026
Mar 21 2026
dereckson added a parent task for T1513: Propagate certificate to Openfire server: T2043: Switch to acme.sh instead of certbot.
dereckson updated subscribers of T1513: Propagate certificate to Openfire server.
Will need to be revisited when we switch to acme.sh.
Mar 20 2026
Mar 20 2026
dereckson updated the title for P390 Anubis default botPolicies.yaml from botPolicies.yaml to Anubis default botPolicies.yaml.
Feb 5 2026
Feb 5 2026
dereckson closed T2210: fullchain.pem isn't automatically generated by acme.sh as Resolved by committing rOPSc9cb237e5e18: Automate acme.sh install-cert cmd.
Patched it live.
dereckson updated subscribers of T2210: fullchain.pem isn't automatically generated by acme.sh.
Feb 3 2026
Feb 3 2026
dereckson added a revision to T2198: Create new account for duranzed for Samy: D3899: Add duranzed to shell users.
dereckson renamed T2198: Create new account for duranzed for Samy from SSH pubkey to add to Create new account for duranzed for Samy.
Nov 10 2025
Nov 10 2025
dereckson added a comment to T2183: Detect legacy SHA-1 RSA keys.
Bruteforce attack scenario possible, so we're only interested by usernames defined in users.sls, not by "root" (can't login by SSH) or generic accounts like "docker" (doesn't exist):
dereckson updated the task description for T2183: Detect legacy SHA-1 RSA keys.