Page MenuHomeDevCentral
Feed Advanced Search

Jun 9 2016

dereckson removed a parent task for T856: Allow YAML UTF-8 characters in Salt configuration: T855: Add admin accounts on Eglide.
Jun 9 2016, 01:23 · upstream, Salt, Servers
dereckson removed a subtask for T855: Add admin accounts on Eglide: T856: Allow YAML UTF-8 characters in Salt configuration.
Jun 9 2016, 01:23 · Eglide, Servers
dereckson claimed T858: MOTD is buggy on Eglide.

Deleting the ScaleWay image file /etc/update-motd.d/50-scw solves the issue.

Jun 9 2016, 01:06 · Eglide, Servers
dereckson placed T858: MOTD is buggy on Eglide up for grabs.

See https://wiki.debian.org/motd and https://oitibs.com/debian-jessie-dynamic-motd/

Jun 9 2016, 01:03 · Eglide, Servers
dereckson claimed T858: MOTD is buggy on Eglide.
Jun 9 2016, 01:01 · Eglide, Servers
dereckson lowered the priority of T856: Allow YAML UTF-8 characters in Salt configuration from Unbreak Now! to High.

Locally, we updated Salt and we enabled the yaml_utf8 option.

Jun 9 2016, 00:48 · upstream, Salt, Servers
dereckson closed T857: Upgrade Salt on Ysul, a subtask of T856: Allow YAML UTF-8 characters in Salt configuration, as Resolved.
Jun 9 2016, 00:24 · upstream, Salt, Servers
dereckson closed T857: Upgrade Salt on Ysul as Resolved.
Ysul
$ pkg upgrade
[…]
$ pkg upgrade py27-salt
[…]
$ salt --version
salt 2016.3.0 (Boron)
Jun 9 2016, 00:24 · Eglide, Salt, Servers
dereckson created T857: Upgrade Salt on Ysul.
Jun 9 2016, 00:21 · Eglide, Salt, Servers

Jun 8 2016

dereckson created T856: Allow YAML UTF-8 characters in Salt configuration.
Jun 8 2016, 23:23 · upstream, Salt, Servers
dereckson added a revision to T855: Add admin accounts on Eglide: D398: Provision ops accounts on Eglide.
Jun 8 2016, 23:14 · Eglide, Servers
dereckson moved T855: Add admin accounts on Eglide from Backlog to Working on on the Servers board.
Jun 8 2016, 22:42 · Eglide, Servers
dereckson triaged T855: Add admin accounts on Eglide as High priority.
Jun 8 2016, 22:41 · Eglide, Servers
dereckson added a project to T855: Add admin accounts on Eglide: Servers.
Jun 8 2016, 22:40 · Eglide, Servers

Jun 5 2016

dereckson added a comment to T771: Allow to send notifications from the command line.

Another use is for D372: it would be interesting to report nginx has been restarted and Let's encrypt certificates renewed.

Jun 5 2016, 23:33 · User-ieli, Notifications center, CLI, Servers, Dæghrefn
dereckson added a comment to T654: Apply Let's encrypt SSL certificates for *.nasqueron.org.

Testing D396 script, three domains have issues.

Jun 5 2016, 22:22 · TLS certificates, security, Servers
dereckson added a revision to T854: Write a Let's encrypt web server configuration checker: D396: Let's encrypt web server configuration checker.
Jun 5 2016, 22:17 · TLS certificates, security, Servers
dereckson closed T551: Test a Let's encrypt certificate on quux.nasqueron.org as Resolved.
Jun 5 2016, 21:15 · TLS certificates, Servers
dereckson added a comment to T363: Container launcher.

Not really practical for the forum, as it requires 1 minute to bootstrap.

Jun 5 2016, 21:14 · Servers, Nasqueron Docker deployment squad
dereckson created T854: Write a Let's encrypt web server configuration checker.
Jun 5 2016, 21:04 · TLS certificates, security, Servers

Jun 4 2016

dereckson lowered the priority of T853: Deploy a Let's encrypt certificate to the Mumble server from High to Normal.

We need a script to automate the process.

Jun 4 2016, 14:43 · TLS certificates, good-first-issue, Mumble, security, Servers
dereckson added a comment to T853: Deploy a Let's encrypt certificate to the Mumble server.

Done manually.

Jun 4 2016, 14:42 · TLS certificates, good-first-issue, Mumble, security, Servers
dereckson moved T853: Deploy a Let's encrypt certificate to the Mumble server from Backlog to Configuration requests on the Mumble board.
Jun 4 2016, 02:11 · TLS certificates, good-first-issue, Mumble, security, Servers
dereckson created T853: Deploy a Let's encrypt certificate to the Mumble server.
Jun 4 2016, 02:11 · TLS certificates, good-first-issue, Mumble, security, Servers
dereckson updated subscribers of T654: Apply Let's encrypt SSL certificates for *.nasqueron.org.

Following work this week by @Sandlayth (Dwellers) and me (Ysul), all *.nasqueron.org sites are migrated to Let's encrypt certificates.

Jun 4 2016, 02:07 · TLS certificates, security, Servers
dereckson added a comment to T852: Investigate matrix.nasqueron.org.

Still actively developed, as shown on https://github.com/matrix-org and a GSoC participation.

Jun 4 2016, 01:41 · Product evaluation, Nasqueron Docker deployment squad, Servers
dereckson created T852: Investigate matrix.nasqueron.org.
Jun 4 2016, 01:40 · Product evaluation, Nasqueron Docker deployment squad, Servers
dereckson closed T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content as Resolved by committing rTSWWWdedcc4e0e4a2: Serve https links.
Jun 4 2016, 00:58 · TrustSpace, security, Servers
dereckson closed T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content, a subtask of T654: Apply Let's encrypt SSL certificates for *.nasqueron.org, as Resolved.
Jun 4 2016, 00:58 · TLS certificates, security, Servers

Jun 3 2016

dereckson added a revision to T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content: D388: Serve https links.
Jun 3 2016, 21:52 · TrustSpace, security, Servers
dereckson created T849: https://trustspace.nasqueron.org/css/trustspace.css serves http:// content.
Jun 3 2016, 21:30 · TrustSpace, security, Servers
amj closed T847: Server outage: uncle-slovius.nasqueron.org:40080 as Resolved.

A restart of redis-server have resolved the problem

Jun 3 2016, 21:23 · Servers
dereckson closed T848: hotglue.nasqueron.org serves http:// content, a subtask of T654: Apply Let's encrypt SSL certificates for *.nasqueron.org, as Resolved.
Jun 3 2016, 18:02 · TLS certificates, security, Servers
dereckson closed T848: hotglue.nasqueron.org serves http:// content as Resolved.

Created a branch nasqueron_deploy on git@github.com:dereckson/hotglue2.git

Jun 3 2016, 18:02 · Servers
dereckson added a comment to T848: hotglue.nasqueron.org serves http:// content.

upstreamhttps://github.com/k0a1a/hotglue2/pull/8

Jun 3 2016, 17:47 · Servers
dereckson created T848: hotglue.nasqueron.org serves http:// content.
Jun 3 2016, 17:06 · Servers
dereckson closed T516: hotglue.nasqueron.org returns a 500 error as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson closed T517: Apache SuEXEC isn't configured on Ysul, a subtask of T516: hotglue.nasqueron.org returns a 500 error, as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson closed T517: Apache SuEXEC isn't configured on Ysul as Resolved.
Jun 3 2016, 17:04 · Servers
dereckson added a comment to T517: Apache SuEXEC isn't configured on Ysul.

Should normally definitively fixed with this:

Jun 3 2016, 17:01 · Servers
dereckson added a comment to T824: Tests for SuEXEC on Ysul.

Another thing to test: SuEXEC AP_DOC_ROOT should be /var/wwwroot.

Jun 3 2016, 16:59 · Operations sprints (Consolidate them all), Servers
dereckson added a comment to T214: Software security issues on Ysul.

So for reference, we can now customize SuEXEC settings.

Jun 3 2016, 16:58 · security, Servers
dereckson updated subscribers of T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
dereckson created T847: Server outage: uncle-slovius.nasqueron.org:40080.
Jun 3 2016, 16:15 · Servers
Sandlayth updated subscribers of T846: Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:11 · Servers, Nasqueron Docker deployment squad
Sandlayth renamed T846: Migrate Pootle from Ysul to a docker container on Dwellers from Migrate Pottle from Ysul to a docker container on Dwellers to Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:08 · Servers, Nasqueron Docker deployment squad
Sandlayth created T846: Migrate Pootle from Ysul to a docker container on Dwellers.
Jun 3 2016, 16:05 · Servers, Nasqueron Docker deployment squad
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul as "Open".

docroot switched back to /usr/local/www/data

Jun 3 2016, 15:44 · Servers
dereckson reopened T517: Apache SuEXEC isn't configured on Ysul, a subtask of T516: hotglue.nasqueron.org returns a 500 error, as Open.
Jun 3 2016, 15:44 · Servers
dereckson added a comment to T516: hotglue.nasqueron.org returns a 500 error.

Still the same error:

Jun 3 2016, 15:42 · Servers
dereckson created T845: Create a wiki farm.
Jun 3 2016, 15:31 · Servers

Jun 2 2016

dereckson closed T492: When using a front-end server with SSL termination, back-end serves http:// links., a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
Jun 2 2016, 04:59 · Nasqueron Docker deployment squad, Servers, Auth Grove

May 31 2016

Sandlayth added a comment to T824: Tests for SuEXEC on Ysul.

We can have the complete path to the executable through

httpd -V | grep SUEXEC_BIN | grep -o "/.*" | sed 's/.$//'
May 31 2016, 22:19 · Operations sprints (Consolidate them all), Servers
dereckson added a comment to T824: Tests for SuEXEC on Ysul.

So far, we've a minimal test checking for hard-coded value /usr/local/sbin/suexec.

May 31 2016, 21:28 · Operations sprints (Consolidate them all), Servers
dereckson closed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as Resolved.

That doesn't need any Postfix restart.

May 31 2016, 21:19 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers
dereckson raised the priority of T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from High to Unbreak Now!.
May 31 2016, 20:52 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers
dereckson added a subtask for T271: Deploy Auth Grove to login.nasqueron.org: T492: When using a front-end server with SSL termination, back-end serves http:// links..
May 31 2016, 18:52 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson renamed T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container from renew SSL certificate for mail.nasqueron.org to Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container.
May 31 2016, 17:10 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers

May 30 2016

dereckson triaged T817: Deploy renewed SSL certificate for mail.nasqueron.org to the mail server LXC container as High priority.
May 30 2016, 14:31 · TLS certificates, Nasqueron Docker deployment squad, Mail, Servers

May 23 2016

dereckson added projects to T841: Add a #nolog feature to PhabricatorBot: Servers, IRC, DevCentral.
May 23 2016, 16:37 · DevCentral, IRC, Servers

May 22 2016

dereckson added a comment to T271: Deploy Auth Grove to login.nasqueron.org.

1#!/bin/sh
2
3# -------------------------------------------------------------
4# Auth Grove
5# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6# Author: Sébastien Santoro aka Dereckson
7# Project: Nasqueron
8# Created: 2016-05-21
9# Description: SSO for Nasqueron services.
10# Image: nasqueron/auth-grove
11# Services used: MySQL server (acquisitariat)
12# Docker volume (/data/notifications/storage)
13# -------------------------------------------------------------
14
15# -------------------------------------------------------------
16# Container parameters
17# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
18
19INSTANCE_NAME=login
20PORT=25080
21MYSQL_INSTANCE=acquisitariat
22STORAGE=/data/login/storage
23CANONICAL_URL=http://login.nasqueron.org
24
25# -------------------------------------------------------------
26# Database parameters
27#
28# Get credentials from zr
29# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
30
31MYSQL_HOST=mysql
32MYSQL_USER=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67 username`
33MYSQL_PASS=`ssh -4 -i /root/.ssh/id_zr zr@ysul.nasqueron.org getcredentials 67`
34MYSQL_DB=$INSTANCE_NAME
35
36# -------------------------------------------------------------
37# Run the container
38# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
39
40# Checks container isn't running
41docker-container-status $INSTANCE_NAME > /dev/null
42if [ "$?" -lt 2 ]; then
43 echo "Container is already running."
44 echo "To force relaunch, try docker stop $INSTANCE_NAME ; docker rm $INSTANCE_NAME ; $0"
45 exit 1
46fi
47
48mkdir -p $STORAGE
49chcon -Rt svirt_sandbox_file_t $STORAGE
50chown 431:433 $STORAGE
51docker run -t -d \
52 --link $MYSQL_INSTANCE:$MYSQL_HOST \
53 -p $PORT:80 \
54 -e DB_HOST=$MYSQL_HOST \
55 -e DB_DATABASE=$MYSQL_DB \
56 -e DB_USERNAME=$MYSQL_USER \
57 -e DB_PASSWORD=$MYSQL_PASS \
58 -e CANONICAL_URL="$CANONICAL_URL" \
59 --name $INSTANCE_NAME nasqueron/auth-grove
60
61echo "Deployment done at `date`."
62exit 0

May 22 2016, 20:27 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson closed T839: Current URL detection code in views aren't coherent, a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
May 22 2016, 20:23 · Nasqueron Docker deployment squad, Servers, Auth Grove

May 21 2016

dereckson closed T838: Disable gulp-notify, a subtask of T271: Deploy Auth Grove to login.nasqueron.org, as Resolved.
May 21 2016, 22:13 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added subtasks for T271: Deploy Auth Grove to login.nasqueron.org: T838: Disable gulp-notify, T837: Investigate gulp issue to minimize CSS, T836: Update MySQL users table in migration, T835: Commit storage/ folder.
May 21 2016, 22:08 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added a comment to T271: Deploy Auth Grove to login.nasqueron.org.
Dwellers
$ mysql-acquisitariat-client 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 25258597
Server version: 5.7.11 MySQL Community Server (GPL)
May 21 2016, 16:08 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson added a revision to T271: Deploy Auth Grove to login.nasqueron.org: D376: 502 for login.nasqueron.org.
May 21 2016, 15:35 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson moved T271: Deploy Auth Grove to login.nasqueron.org from Backlog to Working on on the Servers board.
May 21 2016, 15:07 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson moved T271: Deploy Auth Grove to login.nasqueron.org from Backlog to Working on on the Nasqueron Docker deployment squad board.
May 21 2016, 15:06 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson claimed T271: Deploy Auth Grove to login.nasqueron.org.
May 21 2016, 15:03 · Nasqueron Docker deployment squad, Servers, Auth Grove
dereckson created T834: Upgrade vma.nasqueron.org from 3.0.12 to 3.0.15.
May 21 2016, 14:34 · Nasqueron Docker deployment squad, Servers, Mail
dereckson added a subtask for T833: Decommission bioty.co: T832: Decommission mail.bioty.co.
May 21 2016, 14:31 · Servers, bioty.co hosting
dereckson added a parent task for T832: Decommission mail.bioty.co: T833: Decommission bioty.co.
May 21 2016, 14:31 · Servers, Mail, bioty.co hosting
dereckson created T833: Decommission bioty.co.
May 21 2016, 14:31 · Servers, bioty.co hosting
dereckson closed T832: Decommission mail.bioty.co as Resolved.

Done, Let's encrypt certificates renewd successfully for mail servers (now independant certificates).

May 21 2016, 14:30 · Servers, Mail, bioty.co hosting
dereckson created T832: Decommission mail.bioty.co.
May 21 2016, 14:17 · Servers, Mail, bioty.co hosting

May 17 2016

dereckson added a project to T827: Install reptyr on Ysul: Servers.
May 17 2016, 15:55 · Servers

May 13 2016

Sandlayth removed a revision from T768: Create a HE tunnel for Eglide: Restricted Differential Revision.
May 13 2016, 11:31 · Eglide, IPv6, Servers
Sandlayth added a revision to T826: Create a systemd timer to renew letsencrypt certificat on Dwellers: Restricted Differential Revision.
May 13 2016, 11:26 · User-Sandlayth, Servers
Sandlayth added a revision to T768: Create a HE tunnel for Eglide: Restricted Differential Revision.
May 13 2016, 11:26 · Eglide, IPv6, Servers

May 12 2016

dereckson raised the priority of T826: Create a systemd timer to renew letsencrypt certificat on Dwellers from Normal to High.

We need that before June, the next renewal time window.

May 12 2016, 12:34 · User-Sandlayth, Servers
dereckson updated the task description for T826: Create a systemd timer to renew letsencrypt certificat on Dwellers.
May 12 2016, 12:33 · User-Sandlayth, Servers
Sandlayth created T826: Create a systemd timer to renew letsencrypt certificat on Dwellers.
May 12 2016, 10:50 · User-Sandlayth, Servers
dereckson closed T825: Renew Let's encrypt certificate for notifications.nasqueron.org as Resolved.
May 12 2016, 10:02 · TLS certificates, Servers
dereckson added a comment to T825: Renew Let's encrypt certificate for notifications.nasqueron.org.

I've ran letsencrypt renew on Dwellers, then reloaded nginx.

May 12 2016, 10:02 · TLS certificates, Servers
dereckson added a project to T825: Renew Let's encrypt certificate for notifications.nasqueron.org: Servers.
May 12 2016, 09:57 · TLS certificates, Servers
dereckson added a revision to T824: Tests for SuEXEC on Ysul: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:53 · Operations sprints (Consolidate them all), Servers
dereckson removed a revision from T823: Missing suexec on ysul: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:53 · Servers
dereckson removed a revision from T818: Add banner on Eglide: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:52 · Eglide, Servers
dereckson added a revision to T823: Missing suexec on ysul: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:52 · Servers
dereckson added a revision to T818: Add banner on Eglide: D371: Check if Apache is up and SuEXEC installed on Ysul.
May 12 2016, 09:49 · Eglide, Servers
dereckson created T824: Tests for SuEXEC on Ysul.
May 12 2016, 09:35 · Operations sprints (Consolidate them all), Servers
dereckson closed T823: Missing suexec on ysul as Resolved.

Same procedure than in

for T508:

May 12 2016, 09:31 · Servers

May 10 2016

Sandlayth added a revision to T768: Create a HE tunnel for Eglide: D370: Salt configuration for IPv6 for Debian.
May 10 2016, 07:19 · Eglide, IPv6, Servers

May 6 2016

dereckson added a comment to T823: Missing suexec on ysul.

Probably deinstalled during Apache update. Or maybe they don't ship
SuEXEC at all in the binary package:

May 6 2016, 07:02 · Servers

May 5 2016

amj created T823: Missing suexec on ysul.
May 5 2016, 21:58 · Servers
amj added projects to T822: SSL certificates: migrate from Startcom to Let's encrypt: security, Servers.
May 5 2016, 14:28 · TLS certificates, Servers, security

May 4 2016

dereckson created T819: Web hosting on Eglide.
May 4 2016, 17:53 · Eglide, Salt, IRC, Servers
dereckson added a project to T818: Add banner on Eglide: Servers.
May 4 2016, 17:50 · Eglide, Servers

Apr 28 2016

dereckson triaged T816: Install Python jenkinsapi module on Ysul as Normal priority.
Apr 28 2016, 13:59 · Servers
dereckson added a project to T816: Install Python jenkinsapi module on Ysul: Servers.

Trying a Python script to ask Jenkins to start a job:

Apr 28 2016, 13:58 · Servers