+rust-nightly
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Oct 10 2024
Oct 10 2024
https://windriver.nasqueron.org/poudriere/base14-dereckson_dev/2024-10-10_22h17m23s/build.html rust-nightly is needed by Alkane
Refactor core userland-software unit
dereckson committed rOPS4e97bf8c15b3: Install modules2tuple on devserver role (authored by dereckson).
Install modules2tuple on devserver role
Self-review as it's a FreeBSD ports build tool.
dereckson moved T1999: Export metrics for php-fpm from Backlog to New port on the freebsd-port-wanted board.
We need a FreeBSD port for https://github.com/Lusitaniae/phpfpm_exporter
dereckson moved T1999: Export metrics for php-fpm from Backlog to Servers on the PHP 8.x support board.
dereckson moved T1999: Export metrics for php-fpm from Backlog to Bugs and features on the Alkane board.
Test of https://github.com/Lusitaniae/phpfpm_exporter available for WindRiver on Grafana:
Adding Temurin comment from joggee in the discussion example.
Oct 9 2024
Oct 9 2024
dereckson moved T2015: Migrate remaining sites from ysul to Alkane from Backlog to Sites migrations on the Alkane board.
dereckson moved T2053: Build a port for Alkane from Backlog to Bugs and features on the Alkane board.
Local cache is OK.
dereckson lowered the priority of T2051: Can't renew TLS certificates verified through HTTP on docker engines from High to Normal.
dereckson updated the task description for T2051: Can't renew TLS certificates verified through HTTP on docker engines.
dereckson added a comment to T2051: Can't renew TLS certificates verified through HTTP on docker engines.
Salt SELinux module issue
dereckson added a comment to T2052: Salt mixes Python and grep regular expressions for SELinux code.
Priority is high as it can affect our certificate renewal process.
dereckson triaged T2052: Salt mixes Python and grep regular expressions for SELinux code as High priority.
dereckson updated the task description for T2051: Can't renew TLS certificates verified through HTTP on docker engines.
Complector
$ salt docker-002 state.apply roles/core/certificates/letsencrypt […] ID: selinux_context_certbot_www Function: selinux.fcontext_policy_present Name: /var/letsencrypt-auto Result: True Comment: Started: 18:00:54.789434 Duration: 1865.606 ms Changes: ---------- new: ---------- /var/letsencrypt-auto: ---------- filetype: all files sel_type: httpd_sys_content_t old: ---------- ---------- ID: selinux_context_certbot_www_applied Function: selinux.fcontext_policy_applied Name: /var/letsencrypt-auto Result: True Comment: SElinux policies are already applied for filespec "/var/letsencrypt-auto" Started: 18:00:56.655250 Duration: 7.813 ms Changes: […]
+has_selinux
dereckson moved T2051: Can't renew TLS certificates verified through HTTP on docker engines from Backlog to Pending review on the Servers board.
dereckson moved T2051: Can't renew TLS certificates verified through HTTP on docker engines from Backlog to Working on on the Nasqueron Docker deployment squad board.
SELinux context was the default for anything created under /var, which we didn't allow and aren't interested to allow for nginx.
dereckson triaged T2051: Can't renew TLS certificates verified through HTTP on docker engines as High priority.
Oct 8 2024
Oct 8 2024
The same issue is triggered by projects_v2, again because there is no repository.
dereckson triaged T2050: organization.member_invited GitHub event triggers a 500 as Normal priority.
The documentation is now more comprehensive and include the steps to contribute.
dereckson moved T798: Add Signed-Off field to Differential from Backlog to Custom development on the DevCentral board.
Development switched to https://chaoss.github.io/grimoirelab/
That workflow has been added to the main documentation page.
dereckson moved T987: Add SSH support to Phabricator image from Next to Backlog on the User-Dereckson board.
dereckson moved T1678: Health check and reporting library from Next to Backlog on the User-Dereckson board.
code.nasqueron.org with Hound is stable enough to close this task.
dereckson moved T1676: Serve Zed on webserver-alkane from In progress to Backlog on the User-Dereckson board.
dereckson moved T1937: Update FreeBSD packages Nasqueron repository from Backlog to Pending review on the Servers board.
dereckson moved T1937: Update FreeBSD packages Nasqueron repository from Backlog to Code review / Peering on the User-Dereckson board.
dereckson moved T1681: Publish schema.nasqueron.org from Next to Backlog on the User-Dereckson board.
dereckson moved T2039: Automate Poudriere deployment from Backlog to Pending review on the Servers board.
Reference for ABI: https://wiki.osdev.org/System_V_ABI
Authoritative DNS
Oct 7 2024
Oct 7 2024
DNS change
For RHEL 8, we probably only need docker-processes, but roles/paas-docker/devel refers dive too.
Those two are indeed authoritative:
dereckson moved T2048: Setup reverse DNS for 195.154.30.15 from Working on to Pending review on the Servers board.
Done at the console, but DNS records aren't instantaneously updated, and I'm not even sure those are authoritative (they are for poneytelecom.eu):
dereckson moved T2048: Setup reverse DNS for 195.154.30.15 from Backlog to Working on on the Servers board.
2024-10 plan:
Choose to only support FreeBSD:14:amd64 ABI or to use /${ABI}/ in path
dereckson retitled D3495: Create datacube for FreeBSD Nasqueron packages repository from Create datacube for FreeBSD Nasqueron packages repository
Role freebsd-repo uses the /var/repo directory. It makes sense in the context
of the devserver this is a datacube ZFS dataset belonging to the builder user. to Create datacube for FreeBSD Nasqueron packages repository.
dereckson added a revision to T1850: Move packages from Ysul to WindRiver: D3496: Deploy freebsd-repo role on WindRiver.
dereckson added a subtask for T2046: Deploy Medusa on devserver role: T1850: Move packages from Ysul to WindRiver.
dereckson added a subtask for T2037: Provide roll on devserver role: T1850: Move packages from Ysul to WindRiver.
dereckson moved T2047: Dovecot :stats listen to world on port 9900 from Backlog to Pending review on the Servers board.
dereckson moved T2047: Dovecot :stats listen to world on port 9900 from Backlog - On hold pending T1475 to Pending review on the Mail board.
dereckson renamed T2047: Dovecot :stats listen to world on port 9900 from Dovecot :stats listen to world on port 9000 to Dovecot :stats listen to world on port 9900.
At first uwsgi.yml and api-exec.conf was two separate files. So the difference of spacing. Let's use 2 spaces everywhere, per .editorconfig.
Allow to customize mime-type so we can serve application/openmetrics-text for metrics. Set PATH so /usr/local/bin is always in path, regardless how the service is launched.
We also need a monitoring script to detect those cases:
I've put a live patch in WindRiver to use ccache-metrics with the correct header, Prometheus can then parse correctly the info type.
Tested with Prometheus, we can see the metrics at http://localhost:9090/graph
Adhere to OpenMetrics format
Need to customize header to adhere to OpenMetrics specification.
Spaces
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator