rOPS1e9a54c10365 has worked like a charm on WindRiver to generate grafana.nasqueron.org through DNS.

DNS: grafana. CNAME www-dev.nasqueron.org

Deployment can be using sqlite3 as long as it's still performant
as we want our monitoring tools to be resiliant.

Probably a good part of roles/core/monitoring when grains["os_family"] == "RedHat". Eglide has "Debian" for that grain, but not sure if we've enough RAM there.

Just for reference, this was a test deployment. This is not currently installed on Dwellers, and needs to be in Salt as part of T650.

This task has been created in 2016 to publish metrics from PCP (Performance Co-Pilot) on RHEL-like servers, especially our Docker engines.

RabbitMQ exporters have been added to NetBox under the tag observability -> https://netbox.nasqueron.org/ipam/services/?tag=observability 🔒

Next: memcached

Pending container redeployment with D3374, we can reach metrics set in D3373 with socat:

Also, we need to declare Dovecot ports at https://netbox.nasqueron.org/virtualization/virtual-machines/10/ services table (on the public IP)

I suspect the version 1.6.1 (currently in packages) is compatible with FreeBSD 13 while the version 1.8.2 is compatible with FreeBSD 14.

Independently of the 2020 plan for a service mesh, we're going to deploy Prometheus right now to gain observability on currently deployed services.

It could be easier to deploy https://github.com/kpetremann/salt-exporter

DNS change

policy-spf package should be installed

Key confirmed to work.

Still some issue to connect, SSH2 RSA key not recognized.

It also needs PostgreSQL launched at startup, but that's already defined in the role dbserver-pgsql.

Queries from https://gist.github.com/barryo/8918488 have been checked against PostgreSQL mail database and works like a charm.

Adapted from https://gist.github.com/barryo/8918488:

In T1475#29341, @DorianWinty wrote:

Due to various problems with vimbadmin,
we will provision mailbox ourself with salt

pefs module has been rebuilt, /opt/python ruamel yaml clib fix updated

Userland ready for update, rebooting server to new kernel

In T1932#29348, @DorianWinty wrote:

misssing php-gettext extention
(installed by myself)

misssing php-gettext extention
(installed by myself)

vimbadmin not maintained anymore

Due to various problems with vimbadmin,
we will provision mailbox ourself with salt

As a follow-up, for shellserver and webserver-alkane roles, we need to bump s/php82/php83 for main package name.

• pprint isn't used anymore
• need to run black
• description needs to be updated
• TTL can be much shorter if we automate this procedure

sudo kill -1 $(cat /var/run/vault.pid)

Error management should be done to check if that pids exist or return an error code.

Needs hvac and pyyaml as packages to be installed on the server, Complector doesn't currently have hvac, only pyyaml.