Libera Chat has been the current IRC network use by Nasqueron projects since May 2021.
As the decision to stay there is stabilizing, we should move the bots too.
Description
Description
Revisions and Commits
Revisions and Commits
| rOPS Nasqueron Operations | |||
| D3155 | rOPS2112fc5c9b5d Configure Odderon | ||
| D2665 | rOPS8b40bcb95d30 Move IRC eggdrops from Freenode to Libera | ||
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | None | T1721 Move IRC bots from Freenode to Libera | |||
| Resolved | dereckson | T1739 Add SASL capability to Darkbot | |||
| Resolved | dereckson | T1890 Deploy Vault on Eglide |
Event Timeline
Comment Actions
Libera requires NickServ SASL authentication for Ysul IP range. Going to generate them in Vault under apps/viperserv/libera/nickserv/<bot name>.
A policy will allow eggdrops to read apps/vipserv/* that will allow to migrate credentials out from the registry (a MySQL database with credentials in cleartext).
Comment Actions
$ sudo -u odderon bash $ cd /opt/odderon $ /opt/odderon/bin/darkbot -DEBUG .: Connected to irc.libera.chat:6667! [2587268] OUT: NICK Darkbot NICK Darkbot OUT: USER darkbot 1656117385 1656117385 :http://darkbot.sourceforge.net 1 USER darkbot 1656117385 1656117385 :http://darkbot.sourceforge.net 1 OUT: PASS :nopass PASS :nopass OUT: PING :irc.libera.chat PING :irc.libera.chat
It pings the server, but doesn't print what the server says, and it doesn't really connect.
Let's reproduce connecting directly through netcat:
$ nc irc.libera.chat 6667 NICK Darkbot USER darkbot 1656117385 1656117385 :http://darkbot.sourceforge.net 1
That works correctly for /whois:
00:40:26 [Libera] -!- Darkbot [odderon@eglide.org] 00:40:26 [Libera] -!- ircname : http://darkbot.sourceforge.net 1 00:40:26 [Libera] -!- server : iridium.libera.chat [Stockholm, SE] 00:40:26 [Libera] -!- hostname : 2001:470:1f13:896:0:c0de:15:11fe
In IPv4:
$ nc -4 iridium.libera.chat 6667 [...] :iridium.libera.chat NOTICE Darkbot :*** Notice -- SASL authentication to a NickServ account with a verified email address is required to connect from your current network. Please see https://libera.chat/guides/sasl for configuration assistance.
SASL authentication is required for Iliad/Online/Scaleway network, but not for Hurricane Electric in IPv6, where it's fine.
Darkbot doesn't include SASL capability, nor IPv6 capability:
.: Connecting to 2001:6b0:78::100:6667 Can't create the connection!
.: Connecting to [2001:6b0:78::100]:6667 Can't create the connection!
Comment Actions
SASL capability has been added to darkbot, I'm going to deploy Vault to Eglide, so we can store credentials there.
Comment Actions
So, Dorian updated configuration for eggdrop, and I handled this week the Darkbot one.
We're good.
We can create nasqueron/bot/ cloaks if we're done with T1666, but meanwhile, we're good.