According https://imagemagick.org/script/porting.php:

The role webserver-alkane instead of the role webserver-legacy can be deployed to WindRiver.

Account is now provided to the roles defined in _modules/node.py for the method node.has_deployment.

Those modules need to call a Salt function in __virtual__, and Salt minion configuration file was malformed.

The new ones seem now to work correctly, like https://purl.net/NET/Nasqueron/Support

Vhosts part done (thanks @DorianWinty)

Documentation says Zemke-Rhyme Phabricator account should be used.

Those issues are resolved now we use Vault to provision passwords.

Good to know: D2817 reverts D2208 / 9f24b9df2f443e4, as Docker now wants to create itself this rule, and fails at startup time if the rule already exists.

In T1627#23666, @dereckson wrote:

Perhaps replace references here too: https://code.nasqueron.org/?q=equatower&i=nope&literal=nope&files=&excludeFiles=&repos=

For Salt and Vault, we're already using the private network.

We're done here :)

Perhaps replace references here too: https://code.nasqueron.org/?q=equatower&i=nope&literal=nope&files=&excludeFiles=&repos=

All tasks seem done, as we've docker-001 running for more than one year without any issue.

If all we want are tunnels, Tinc could be overkill, as GRE tunnels work well at D2594 + D2595.

There is a concurrent approach through tinc deployed on devserver WindRiver:

In T1478#19710, @dereckson wrote:

A GRE tunnel between Equatower and Dwellers have been prepared while Dwellers isn't connected to IntraNought, so we can push to Equatower Docker registry from Dwellers.

T1624 progress: we've now an Elastic instance to store logs from the containers.

Reinstalling cloudhugger as Debian Bullseye (Debian 11).

Detaching from containers dependency: we can clearly install Elastic on baremetal.

Furthermore, Jenkins CD uses the deploy account to publish static website updates on Ysul through:

So Vault?

Let's rewire tunnels against router-001.nasqueron.org / 51.255.124.8 / 172.27.27.1

Phabricator config explicitly contained a reference to Equatower, it's now aphlict.nasqueron.org

Machine migration done with this workflow: