Page MenuHomeDevCentral
Feed All Stories

All Stories
Use Results
Edit Query

Oct 29 2017

dereckson committed rOPS715b85e5d950: Ensure userlist isn't world-readable (authored by dereckson).
Ensure userlist isn't world-readable
Oct 29 2017, 15:48
dereckson closed T1267: Set userlist.db chmod to avoid it's world readable as Resolved by committing rOPS715b85e5d950: Ensure userlist isn't world-readable.
Oct 29 2017, 15:48 · security, Odderon
dereckson closed D1069: Ensure userlist isn't world-readable.
Oct 29 2017, 15:48
dereckson added a comment to D1069: Ensure userlist isn't world-readable.

Works but the software itself rewrites periodically the file as 644.

Oct 29 2017, 15:46
dereckson closed T1286: Eglide Salt minion doesn't respond as Resolved.

Eglide highstate is correct, excepted for the PHP libraries and a former bug to the Let's encrypt timer we can solve independently.

Oct 29 2017, 15:41 · Servers
dereckson closed T1286: Eglide Salt minion doesn't respond, a subtask of T1034: Switch from root@ SSH login to sudo capabilities on every server, as Resolved.
Oct 29 2017, 15:41 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson closed T1286: Eglide Salt minion doesn't respond, a subtask of T1285: Update tomjerr SSH key, as Resolved.
Oct 29 2017, 15:41 · security, Servers
dereckson closed T1286: Eglide Salt minion doesn't respond, a subtask of T1287: New changes are currently blocked on Eglide, as Resolved.
Oct 29 2017, 15:41 · Eglide
dereckson accepted D1069: Ensure userlist isn't world-readable.
Salt master
$ salt eglide state.apply roles/shellserver/odderon/config
eglide:                              
----------                             
          ID: odderon_fix_permissions_and_ownership                            
    Function: cmd.run                  
        Name: chmod 640 /opt/odderon/var/darkbot/userlist.db                   
      Result: True                     
     Comment: Command "chmod 640 /opt/odderon/var/darkbot/userlist.db" run     
     Started: 15:22:18.005520          
    Duration: 47.53 ms                 
     Changes:                          
              ----------               
              pid:                     
                  32647                
              retcode:                 
                  0                    
              stderr:                  
              stdout:                  
----------                             
          ID: odderon_fix_permissions_and_ownership                            
    Function: cmd.run                  
        Name: chown odderon:nasqueron-irc /opt/odderon/var/darkbot/userlist.db 
      Result: True                     
     Comment: Command "chown odderon:nasqueron-irc /opt/odderon/var/darkbot/userlist.db" run                                                                   
     Started: 15:22:18.054366          
    Duration: 40.816 ms                
     Changes:                          
              ----------               
              pid:                     
                  32649                
              retcode:                 
                  0                    
              stderr:                  
              stdout:
Oct 29 2017, 15:28
dereckson updated the diff for D1069: Ensure userlist isn't world-readable.

Fix cmd.run multi command syntax

Oct 29 2017, 15:22
dereckson planned changes to D1069: Ensure userlist isn't world-readable.
$ salt-call state.apply roles/shellserver/odderon/config
    The function "chown odderon:nasqueron-irc /opt/odderon/var/darkbot/userlist.db" in state "odderon_fix_permissions_and_ownership" in SLS "roles/shellserver/odderon/config" has whitespace, a function with whitespace is not supported, perhaps this is an argument that is missing a ":"
Oct 29 2017, 01:54
dereckson accepted D1069: Ensure userlist isn't world-readable.
Oct 29 2017, 01:52
dereckson closed T1291: Renew robot.paysannerebelle.com as Resolved.

Apparently, was a network issue.

Oct 29 2017, 01:49 · upstream, Servers, Eglide
dereckson created T1291: Renew robot.paysannerebelle.com.
Oct 29 2017, 01:41 · upstream, Servers, Eglide
dereckson added a reverting change for rOPSc18cf34de2bb: Provision ops accounts on Eglide: rOPSd4a2340aa322: Drop wheel group configuration.
Oct 29 2017, 01:36
dereckson committed rOPSd4a2340aa322: Drop wheel group configuration (authored by dereckson).
Drop wheel group configuration
Oct 29 2017, 01:36
dereckson closed D1068: Drop wheel group configuration.
Oct 29 2017, 01:36
dereckson updated the diff for D1068: Drop wheel group configuration.

Rebased

Oct 29 2017, 01:35
dereckson committed rOPSf3a236a7afe4: Create an ops group with full sudo capability (authored by dereckson).
Create an ops group with full sudo capability
Oct 29 2017, 01:32
dereckson closed D1067: Create an ops group with full sudo capability.
Oct 29 2017, 01:32
dereckson accepted D1067: Create an ops group with full sudo capability.
Salt master
$ salt eglide state.apply roles/shellserver/users
…
----------                                                                                                                                                     
          ID: group_ops                                                                 
    Function: group.present                                                                                                                                    
        Name: ops                                                                                                                                            
      Result: True                                                                                                                                             
     Comment: New group ops created                                                                                                                            
     Started: 00:56:24.790152                                                                                                                                
    Duration: 835.725 ms                                                                    
     Changes:                                                                               
              ----------                                                                                                                                     
              gid:                                                                                                                                           
                  3001                                                            
              members:                                                                                                                                       
                  - dereckson                                                                                                                                
                  - sandlayth                                                                                                                                  
              name:                                                                                                                                          
                  ops                                                                       
              passwd:                                                                                                                                        
                  x                       
…
$ salt eglide state.apply roles/core/sudo
eglide:
----------
          ID: /etc/sudoers.d/ops
    Function: file.managed
      Result: True
     Comment: File /etc/sudoers.d/ops updated
     Started: 01:27:44.142002
    Duration: 217.149 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644
Oct 29 2017, 01:32
dereckson updated the diff for D1067: Create an ops group with full sudo capability.

Now we've a correct state

Oct 29 2017, 01:27
dereckson updated the diff for D1067: Create an ops group with full sudo capability.

Fix syntax

Oct 29 2017, 01:26
dereckson updated the diff for D1067: Create an ops group with full sudo capability.

Fix loop issue

Oct 29 2017, 01:23
dereckson added a comment to D1126: Set zsh as default shell for dereckson and amj.
          ID: dereckson                                                             
    Function: user.present                                                                                                                                   
      Result: True                                   
     Comment: Updated user dereckson   
     Started: 00:25:19.129254                                                                                                                                  
    Duration: 133.455 ms                                                                                                                                       
     Changes:                                                                                                                                                  
              ----------               
              shell:                                                                      
                  /bin/zsh      
----------                                           
          ID: amj                      
    Function: user.present                                                                                                                                     
      Result: True                                                                                                                                             
     Comment: Updated user amj                                                                                                                                 
     Started: 00:25:19.435983          
    Duration: 115.81 ms                                                                   
     Changes:                                                                                            
              ----------                         
              shell:                                                                                                                                           
                  /bin/zsh
Oct 29 2017, 00:31
dereckson committed rOPS0c5513912e52: Set zsh as default shell for dereckson and amj (authored by dereckson).
Set zsh as default shell for dereckson and amj
Oct 29 2017, 00:31
dereckson closed D1126: Set zsh as default shell for dereckson and amj.
Oct 29 2017, 00:31
dereckson accepted D1126: Set zsh as default shell for dereckson and amj.
Oct 29 2017, 00:30
dereckson created D1126: Set zsh as default shell for dereckson and amj.
Oct 29 2017, 00:10
dereckson created T1290: letsencrypt_renew_enable state fails on Eglide.
Oct 29 2017, 00:00 · Eglide, Salt, Operations sprints (The Dreadnought will produce new officers)

Oct 28 2017

dereckson created T1289: PHP libraries names aren't consistent between Debian and FreeBSD.
Oct 28 2017, 23:59 · Eglide, Salt, Operations sprints (The Dreadnought will produce new officers)
dereckson lowered the priority of T1286: Eglide Salt minion doesn't respond from Unbreak Now! to High.

Working now, some cleaning needed.

Oct 28 2017, 23:56 · Servers
dereckson closed T1287: New changes are currently blocked on Eglide as Resolved.

Changes have been applied.

Oct 28 2017, 23:56 · Eglide
dereckson committed rOPS2d06fab18fd0: Install Boost on dev servers (authored by dereckson).
Install Boost on dev servers
Oct 28 2017, 23:55
dereckson closed D1125: Install Boost on dev servers.
Oct 28 2017, 23:55
dereckson accepted D1125: Install Boost on dev servers.
Ysul
$ arc patch D1125
$ /home/dereckson/dev/nasqueron/operations
local:                                 
----------                                                                     
          ID: devserver_software_dev_c 
    Function: pkg.installed            
      Result: True                     
     Comment: All specified packages are already installed
     Started: 23:53:33.392554                                                  
    Duration: 339.279 ms               
     Changes:
----------
…
Summary for local                      
-------------                          
Succeeded: 12                          
Failed:     0                          
-------------                          
Total states run:     12               
Total run time:   12.461 s
Oct 28 2017, 23:54
dereckson created D1125: Install Boost on dev servers.
Oct 28 2017, 23:52
dereckson added a comment to T1288: Deploy clamav on mail.nasqueron.org.

[ Prioritized as low, as currently, noone received a virus to our installation. Feel free to switch this to normal for a sporadic mail, to high if you're flooded non stop. ]

Oct 28 2017, 23:08 · Mail
dereckson created T1288: Deploy clamav on mail.nasqueron.org.
Oct 28 2017, 23:07 · Mail
dereckson added a comment to T1286: Eglide Salt minion doesn't respond.

The minion has been restarted.

Oct 28 2017, 23:00 · Servers
dereckson updated the title for P266 Test run of highstate on Eglide from /tmp/T1286.log to Test run of highstate on Eglide.
Oct 28 2017, 22:59 · Eglide, Salt
dereckson updated the language for P266 Test run of highstate on Eglide from autodetect to text.
Oct 28 2017, 22:58 · Eglide, Salt
dereckson edited P266 Test run of highstate on Eglide.
Oct 28 2017, 22:52 · Eglide, Salt
dereckson committed rOPSaf951f183348: Don't rebuild darkbot when lock file is there (authored by dereckson).
Don't rebuild darkbot when lock file is there
Oct 28 2017, 22:51
dereckson closed D1124: Don't rebuild darkbot when lock file is there.
Oct 28 2017, 22:51
dereckson accepted D1124: Don't rebuild darkbot when lock file is there.
Oct 28 2017, 22:49
dereckson created D1124: Don't rebuild darkbot when lock file is there.
Oct 28 2017, 22:49
dereckson added a comment to T1286: Eglide Salt minion doesn't respond.

3 and 1 done. I'm watching the minion log to check it's well resolved

Oct 28 2017, 21:54 · Servers
dereckson added a parent task for T1286: Eglide Salt minion doesn't respond: T1287: New changes are currently blocked on Eglide.
Oct 28 2017, 20:51 · Servers
dereckson added a subtask for T1287: New changes are currently blocked on Eglide: T1286: Eglide Salt minion doesn't respond.
Oct 28 2017, 20:51 · Eglide
dereckson added a comment to T1285: Update tomjerr SSH key.

So last step is to propagate the change to Eglide restarting the minion.

Oct 28 2017, 20:50 · security, Servers
dereckson lowered the priority of T1285: Update tomjerr SSH key from High to Normal.
Oct 28 2017, 20:49 · security, Servers
dereckson added a comment to T1285: Update tomjerr SSH key.

I prepared such a change Wednesday, and committed now, as @tomjerr confirmed the key is working fine (per your manual add).

Oct 28 2017, 20:49 · security, Servers
dereckson committed rOPS90d97e1d6451: Update SSH key for tomjerr (authored by dereckson).
Update SSH key for tomjerr
Oct 28 2017, 20:48
dereckson closed D1119: Update SSH key for tomjerr.
Oct 28 2017, 20:48
dereckson committed rOPS21a19ced6083: Provide EditorConfig information (authored by dereckson).
Provide EditorConfig information
Oct 28 2017, 20:47
dereckson closed D1123: Provide EditorConfig information.
Oct 28 2017, 20:47
dereckson accepted D1123: Provide EditorConfig information.
Oct 28 2017, 20:47
dereckson created D1123: Provide EditorConfig information.
Oct 28 2017, 20:47
dereckson updated the task description for T1287: New changes are currently blocked on Eglide.
Oct 28 2017, 20:29 · Eglide
dereckson updated subscribers of T1254: Ensure non-Nasqueron domains DNS don't contain A records to old Dwellers IP.

@amj has noticed phabricator.wolfplex.be didn't respond to ping.

Oct 28 2017, 18:36 · Operations sprints (The Dreadnought will produce new officers), Servers
dereckson created D1122: Provision MySQL.
Oct 28 2017, 10:35
dereckson planned changes to D1122: Provision MySQL.
Oct 28 2017, 10:35
dereckson created T1287: New changes are currently blocked on Eglide.
Oct 28 2017, 09:49 · Eglide
dereckson assigned T1286: Eglide Salt minion doesn't respond to Sandlayth.

@Sandlayth I don't currently have an access to Eglide, so you can do one of the following things:

Oct 28 2017, 09:43 · Servers
dereckson added a parent task for T1286: Eglide Salt minion doesn't respond: T1034: Switch from root@ SSH login to sudo capabilities on every server.
Oct 28 2017, 09:34 · Servers
dereckson added a subtask for T1034: Switch from root@ SSH login to sudo capabilities on every server: T1286: Eglide Salt minion doesn't respond.
Oct 28 2017, 09:34 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson moved T1034: Switch from root@ SSH login to sudo capabilities on every server from Eglide to Pending review on the Servers board.
Oct 28 2017, 09:34 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson added a subtask for T1285: Update tomjerr SSH key: T1286: Eglide Salt minion doesn't respond.
Oct 28 2017, 09:33 · security, Servers
dereckson updated subscribers of T1286: Eglide Salt minion doesn't respond.
Oct 28 2017, 09:33 · Servers
dereckson created T1286: Eglide Salt minion doesn't respond.
Oct 28 2017, 09:32 · Servers
dereckson updated the summary of D1119: Update SSH key for tomjerr.
Oct 28 2017, 09:29
dereckson added a revision to T1285: Update tomjerr SSH key: D1119: Update SSH key for tomjerr.
Oct 28 2017, 09:28 · security, Servers

Oct 27 2017

Sandlayth created T1285: Update tomjerr SSH key.
Oct 27 2017, 18:09 · security, Servers
dereckson committed rOPScb97f7e29d69: Ensure node.has always return a boolean (authored by dereckson).
Ensure node.has always return a boolean
Oct 27 2017, 09:32
dereckson closed D1121: Ensure node.has always return a boolean.
Oct 27 2017, 09:32
dereckson closed T1284: node.has doesn't return boolean when parameter is string as Resolved by committing rOPScb97f7e29d69: Ensure node.has always return a boolean.
Oct 27 2017, 09:32 · Salt, Operations sprints (The Dreadnought will produce new officers)
dereckson accepted D1121: Ensure node.has always return a boolean.
Oct 27 2017, 09:31
dereckson created D1121: Ensure node.has always return a boolean.
Oct 27 2017, 09:31
dereckson added a revision to T1284: node.has doesn't return boolean when parameter is string: D1121: Ensure node.has always return a boolean.
Oct 27 2017, 09:31 · Salt, Operations sprints (The Dreadnought will produce new officers)
dereckson created T1284: node.has doesn't return boolean when parameter is string.
Oct 27 2017, 09:27 · Salt, Operations sprints (The Dreadnought will produce new officers)

Oct 26 2017

tomjerr accepted D1119: Update SSH key for tomjerr.
Oct 26 2017, 07:13
dereckson committed rOPSc38bb0b7bf17: Install CLI browsers on dev servers (authored by dereckson).
Install CLI browsers on dev servers
Oct 26 2017, 03:28
dereckson closed D1120: Install CLI browsers on dev servers.
Oct 26 2017, 03:28
dereckson accepted D1120: Install CLI browsers on dev servers.
Oct 26 2017, 03:28
dereckson created D1120: Install CLI browsers on dev servers.
Oct 26 2017, 03:28

Oct 25 2017

dereckson created D1119: Update SSH key for tomjerr.
Oct 25 2017, 16:19
dereckson closed D1118: Improve Arcanist shell scripts.
Oct 25 2017, 02:35
dereckson committed rWK298b018a6ff3: Improve Arcanist shell scripts (authored by dereckson).
Improve Arcanist shell scripts
Oct 25 2017, 02:35
dereckson accepted D1118: Improve Arcanist shell scripts.

We're sure it only reads.

Oct 25 2017, 02:35
dereckson created D1118: Improve Arcanist shell scripts.
Oct 25 2017, 02:34
dereckson created D1117: Don't use a session.
Oct 25 2017, 02:23
dereckson committed rOPSf8e1febd536c: Assign webserver-core role to Ysul (authored by dereckson).
Assign webserver-core role to Ysul
Oct 25 2017, 02:18
dereckson closed D1116: Assign webserver-core role to Ysul.
Oct 25 2017, 02:18
dereckson accepted D1116: Assign webserver-core role to Ysul.
Oct 25 2017, 02:17
dereckson created D1116: Assign webserver-core role to Ysul.
Oct 25 2017, 02:17
dereckson committed rOPS9b5a9ef4e407: Allow a server not to have Let's encrypt domains in pillar (authored by dereckson).
Allow a server not to have Let's encrypt domains in pillar
Oct 25 2017, 00:47
dereckson closed D1115: Allow a server not to have Let's encrypt domains in pillar.
Oct 25 2017, 00:47
dereckson accepted D1115: Allow a server not to have Let's encrypt domains in pillar.
Oct 25 2017, 00:47
dereckson created D1115: Allow a server not to have Let's encrypt domains in pillar.
Oct 25 2017, 00:47
First
Prev
Next
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator