Also, for reference, I solved the issue in a new Salt repo with 9002:9002

A quick note for reference, as I was looking this task to recreate the same issue in a new Salt environment, the core role provides:

After pinning Salt version with D4113:

Our Salt state core/sshd does not set PubkeyAcceptedAlgorithms, so ssh-rsa (SHA-1) is blocked by default — this has been the case since OpenSSH 8.8 (released 2021-09-26, see https://www.openssh.com/txt/release-8.8).

With Salt, sudo files content are now managed from rOPS.

Bruteforce attack scenario possible, so we're only interested by usernames defined in users.sls, not by "root" (can't login by SSH) or generic accounts like "docker" (doesn't exist):

Did a run this night to update Certbot files, states are currently correct:

Here we are with D3812 build:

That builds properly:

In T1098#21963, @dereckson wrote:

Tested a build manually successfully with:

$ git clone https://github.com/Learath2/sBNC.git
$ cd sBNC
$ cc *.c -o sbnc
$ sudo cp sbnc /usr/local/bin

Une fois que tu as retrouvé les accès SSH pour le web statique:

• WindRiver: automatiquement https://windriver.nasqueron.org/~xcombelle est disponible si tu places des fichiers dans /var/home-wwwroot/xcombelle (je ne sais plus si ça se crée automatiquement avec symlink vers $HOME/public_html, à vérifier)
• Eglide: https://www.eglide.org/~xcombelle pour $HOME/public_html

If as an Eglide user you need this

Crossed-out files no longer needing Shellcheck.

Odderon is on Libera since 2023-09-04, so this seems it doesn't happen currently.

To help restore the IP, the default routes and the DNS:

root@zonegrey:~# resolvectl status
Failed to get global data: Unit dbus-org.freedesktop.resolve1.service not found.

Check https://devcentral.nasqueron.org/P343 for quickfix

The woof package is for Python 2.7, so code isn't up-to-date.

So, Dorian updated configuration for eggdrop, and I handled this week the Darkbot one.

Server log

SASL capability has been added to darkbot, I'm going to deploy Vault to Eglide, so we can store credentials there.