Page MenuHomeDevCentral

Move packages from Ysul to WindRiver
Open, NormalPublic

Description

Current packages state

https://packages.nasqueron.org/ serves:

  • FreeBSD repository, with metadata done locally
  • RHEL repository, with metadata done on a Fedora machine?
  • Debian repository still to come for woof for example at D2446

Webserver and packages are both on Ysul.

There is also https://artifacts.nasqueron.org/ on Dwellers for build artifacts.

Simple migration plan

The easiest would be to keep artifacts. as is, and move packages roles + web content to WindRiver.

FTP alternative plan

We could also use a consolidated FTP with HTTPS mirror and serve from:

That would require a mechanism to transfer the packages / build release from devserver or paas-docker-dev server to the FTP server. Alkane CLI and HTTPS API are designed exactly for that.

Event Timeline

dereckson triaged this task as Normal priority.May 6 2023, 09:07
dereckson created this task.

[ Alkane tasks are prioritized to be handled in the next operations sprint. ]

Debian package repository isn't currently a need, but packages.nasqueron.org is needed for FreeBSD and Fedora downstreams.

2024-10 plan:

  • create a series of datacubes on WindRiver for FreeBSD and RHEL repositories
  • for FreeBSD repository
    • deploy on WindRiver freebsd-repo role
    • write the signing key into Vault, regardless of deprecation comment in T1937, that can be addressed later
    • publish packages referenced in rOPS: alkane, salt-tower
    • publish packages referenced in open tasks: roll, vault-medusa (temporary - those are submitted upstream and waiting to be committed)
  • for RHEL repository
    • create an empty RHEL repository - We needed some packages for CentOS 7, not sure we miss anything currently
  • review packages.nasqueron.org nginx configuration
  • deploy FreeBSD package configuration everywhere
    • check if "srv" doesn't need to be updated at roles/core/userland-software/files/Nasqueron.conf
    • run salt -G "os:freebsd" state.sls_id /usr/local/etc/pkg/repos/Nasqueron.conf roles/core/userland-software
    • check if router-001 is happy with the 13/14 situation (would be the reverse issue that the one documented at T1937)

For RHEL 8, we probably only need docker-processes, but roles/paas-docker/devel refers dive too.

RHEL list:

  • dive_0.9.2_linux_amd64.rpm 09-Feb-2020 20:26 4747452
  • docker-processes-0.0.1-1.x86_64.rpm 03-Oct-2018 20:24 3899964
  • tcl-8.6.5-2.el7.psychotic.x86_64.rpm 16-Mar-2018 00:45 3927608
  • tcl-devel-8.6.5-2.el7.psychotic.x86_64.rpm 16-Mar-2018 00:45 186108

DNS change

packages.nasqueron.org.	86400	IN	CNAME	www-dev.nasqueron.org.
_acme-challenge.packages.nasqueron.org.	172800	IN	CNAME	82f672a3-f626-45e8-95c0-525f2288cdcb.acme.nasqueron.org.
_https._tcp.packages.nasqueron.org.	300	IN	SRV	10 10 443 www-dev.nasqueron.org.