Apr 1 14:01:39 router-002 kernel: carp: 2@vmx1: BACKUP -> MASTER (master timed out) Apr 1 14:01:39 router-002 carp-ovh[98049]: Detected MAC on vmx1: 00:50:56:09:3c:f2 Apr 1 14:01:39 router-002 carp-ovh[98053]: Checking current state... Apr 1 14:01:39 router-002 carp-ovh[98057]: Checking IPs for MAC 00:50:56:09:3c:f2 Apr 1 14:01:39 router-002 carp-ovh[98061]: OVH returned: ['178.32.70.110', '51.68.252.230'] Apr 1 14:01:39 router-002 carp-ovh[98065]: VIP is already on correct MAC -> nothing to do
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Mar 30 2026
Mar 30 2026
When router-003 (The MASTER) become unavailable :
repair branch
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra moved T2268: Configure IPsec tunnels on Saltstack from Working on to Done on the Secure HA tunnels board.
Duranzed moved T2268: Configure IPsec tunnels on Saltstack from WIP to Finished on the User-Duranzed board.
yousra committed rOPSdaf96182f8b6: Generate secretsmith Vault configuration for routers via Salt (authored by yousra).
Generate secretsmith Vault configuration for routers via Salt
Mar 29 2026
Mar 29 2026
dereckson updated the summary of D4031: Generate secretsmith Vault configuration for routers via Salt.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Enable rotation of Vault AppRole credentials on CARP routers
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the test plan for D4031: Generate secretsmith Vault configuration for routers via Salt.
yousra updated the test plan for D4031: Generate secretsmith Vault configuration for routers via Salt.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra moved T2290: Installation of CARP switch Python dependencies via Salt from Working on to Done on the Secure HA tunnels board.
yousra closed T2290: Installation of CARP switch Python dependencies via Salt, a subtask of T2276: Automate CARP VIP MAC reassignment using devd and OVH API, as Resolved.
Mar 25 2026
Mar 25 2026
Configuration deployed and running on router-002/router-003 and WindRiver
Tested locally with ripgrep. Configuration files like .arcconfig are now correctly included in search results !
I tested the Docker image locally and the image builds, the container starts correctly, and the test suite runs inside it.
dereckson moved T2096: WindRiver Route to Drake private network Ignored from Backlog to IntraNought / GRE tunnels on the Drake network board.
dereckson moved T2167: Implement Common Address Redundancy Protocol (CARP) from Backlog to IntraNought / GRE tunnels on the Drake network board.
dereckson moved T2276: Automate CARP VIP MAC reassignment using devd and OVH API from Backlog to IntraNought / GRE tunnels on the Drake network board.
dereckson moved T2290: Installation of CARP switch Python dependencies via Salt from Backlog to IntraNought / GRE tunnels on the Drake network board.
yousra committed rOPS88bee5959739: Sort more DevCentral projects in Notifications Center (authored by dereckson).
Sort more DevCentral projects in Notifications Center
Install GNU findutils
yousra committed rOPSdafd033ae37e: Allow role router to access ops/secrets/network/router/vault (authored by yousra).
Allow role router to access ops/secrets/network/router/vault
dereckson added a parent task for T2291: Configure explicitly php-fpm pool in nginx Docker image: T1294: Dockerize tools.nasqueron.org.
dereckson moved T2291: Configure explicitly php-fpm pool in nginx Docker image from Backlog to Infra / DevOps on the Nasqueron Tools board.
dereckson moved T2291: Configure explicitly php-fpm pool in nginx Docker image from Backlog to Need Dockerfile or config on the Docker images board.
dereckson updated the task description for T2291: Configure explicitly php-fpm pool in nginx Docker image.
Two actions to fix:
The nginx configuration doesn't seem the same for the Docker container and the development site:
dereckson moved T1294: Dockerize tools.nasqueron.org from Live on tools. to Infra / DevOps on the Nasqueron Tools board.
dereckson moved T1982: Upgrade from Python 3.9 to Python 3.11+ from Backlog to Let's Encrypt - legacy on the TLS certificates board.
dereckson moved T1599: Install TLS wildcard certificates for nginx fallback vhost from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T1167: Restart nginx on Ysul when renew certificates from Backlog to Let's Encrypt - legacy on the TLS certificates board.
dereckson moved T1966: Automate certificates renewal for Vault from Backlog to Vault / Nasqueron PKI on the TLS certificates board.
dereckson moved T1513: Propagate certificate to Openfire server from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T1602: Provision ACME DNS credentials for core domains on each servers from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T1505: Automate Let's Encrypt TLS certificates management for every server from Backlog to Let's Encrypt - legacy on the TLS certificates board.
dereckson moved T1342: Let's encrypt on Debian use logrotate from Backlog to Let's Encrypt - legacy on the TLS certificates board.
dereckson moved T2043: Switch to acme.sh instead of certbot from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T2062: Native TLS support from Backlog to Applications on the TLS certificates board.
dereckson moved T2112: Renew Vault web server certificate automatically from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T2155: Review rotation for acme.sh logs from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
dereckson moved T2196: Reload of dovecot and postfix when certif renew from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:30 · TLS certificates, Restricted Project, good-first-issue, Nasqueron Operations Squad, Mail
Mar 24 2026
Mar 24 2026
yousra committed rOPSef6ea0d9f929: Install dependencies to register MAC address to ISP (authored by yousra).
Install dependencies to register MAC address to ISP
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
The script to test if we can access to the OVH credentials (application_key, application_secret, consumer_key):
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
The script to test the connection to Vault, using a YAML configuration file that tells the secretsmith client how to connect to Vault :
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator