Page MenuHomeDevCentral
Feed All Stories

Oct 30 2017

dereckson accepted D1132: Deploy html-directories tool on devservers.
Oct 30 2017, 01:38
dereckson updated the diff for D1132: Deploy html-directories tool on devservers.

Style

Oct 30 2017, 01:36
dereckson created D1132: Deploy html-directories tool on devservers.
Oct 30 2017, 01:35

Oct 29 2017

dereckson updated the diff for D1122: Provision MySQL.

Rebased against imagemagick map.jinja change

Oct 29 2017, 22:07
dereckson committed rOPS3c6b24c142a0: Install igal2, exiftool and ImageMagick on dev servers (authored by dereckson).
Install igal2, exiftool and ImageMagick on dev servers
Oct 29 2017, 22:06
dereckson closed D1131: Install igal2, exiftool and ImageMagick on dev servers.
Oct 29 2017, 22:06
dereckson accepted D1131: Install igal2, exiftool and ImageMagick on dev servers.
Oct 29 2017, 22:05
dereckson created D1131: Install igal2, exiftool and ImageMagick on dev servers.
Oct 29 2017, 22:05
dereckson updated the diff for D1122: Provision MySQL.

Rebased

Oct 29 2017, 20:45
dereckson added a comment to rOPSfcd72a664279: OpenSSH configuration.

Concern fixed in rOPS7b9dab.

Oct 29 2017, 20:42
dereckson committed rOPS7b9dab7b2b77: Print MOTD through OpenSSH when needed (authored by dereckson).
Print MOTD through OpenSSH when needed
Oct 29 2017, 20:40
dereckson closed D1130: Print MOTD through OpenSSH when needed.
Oct 29 2017, 20:40
dereckson accepted D1130: Print MOTD through OpenSSH when needed.
Oct 29 2017, 20:40
dereckson updated the diff for D1130: Print MOTD through OpenSSH when needed.

Simplify configuration ; it's more natural template takes care of the yes/no

Oct 29 2017, 20:13
dereckson updated the diff for D1130: Print MOTD through OpenSSH when needed.

Move to template (quote count: 1)

Oct 29 2017, 19:53
dereckson updated the diff for D1130: Print MOTD through OpenSSH when needed.

Protect yes/no to avoid substitution by a boolean

Oct 29 2017, 19:50
dereckson created D1130: Print MOTD through OpenSSH when needed.
Oct 29 2017, 19:42
dereckson added inline comments to rOPSfcd72a664279: OpenSSH configuration.
Oct 29 2017, 18:30
dereckson committed rOPS61518133abd8: Update akoe SSH key (authored by dereckson).
Update akoe SSH key
Oct 29 2017, 18:20
dereckson closed D1129: Update akoe SSH key.
Oct 29 2017, 18:20
dereckson accepted D1129: Update akoe SSH key.
Oct 29 2017, 18:20
dereckson created D1129: Update akoe SSH key.
Oct 29 2017, 18:20
dereckson updated the task description for T1292: userlist.db is saved in 644.
Oct 29 2017, 17:03 · good-first-issue, security, Odderon
dereckson moved T1292: userlist.db is saved in 644 from Backlog to Dev on the good-first-issue board.
Oct 29 2017, 17:02 · good-first-issue, security, Odderon
dereckson added a project to T1292: userlist.db is saved in 644: good-first-issue.
Oct 29 2017, 17:02 · good-first-issue, security, Odderon
dereckson updated subscribers of T1292: userlist.db is saved in 644.
Oct 29 2017, 17:02 · good-first-issue, security, Odderon
dereckson updated the task description for T1292: userlist.db is saved in 644.
Oct 29 2017, 17:02 · good-first-issue, security, Odderon
dereckson created T1292: userlist.db is saved in 644.
Oct 29 2017, 17:00 · good-first-issue, security, Odderon
dereckson committed rOPSca48d72bc8d8: Create akoe account on Eglide (authored by dereckson).
Create akoe account on Eglide
Oct 29 2017, 16:59
dereckson closed D1128: Create akoe account on Eglide.
Oct 29 2017, 16:59
dereckson accepted D1128: Create akoe account on Eglide.
Oct 29 2017, 16:59
dereckson updated the diff for D1128: Create akoe account on Eglide.

Remove akoe from revoked users

Oct 29 2017, 16:54
dereckson created D1128: Create akoe account on Eglide.
Oct 29 2017, 16:34
dereckson committed rOPS2ed01c9ec1c6: Declare missing shellserver role units to top state (authored by dereckson).
Declare missing shellserver role units to top state
Oct 29 2017, 16:24
dereckson closed D1127: Declare missing shellserver role units to top state.
Oct 29 2017, 16:24
dereckson accepted D1127: Declare missing shellserver role units to top state.

When highstate runs, it propagates the new SSL certificate for Bonjour chaton:

Oct 29 2017, 16:24
dereckson created D1127: Declare missing shellserver role units to top state.
Oct 29 2017, 16:22
dereckson committed rOPS715b85e5d950: Ensure userlist isn't world-readable (authored by dereckson).
Ensure userlist isn't world-readable
Oct 29 2017, 15:48
dereckson closed T1267: Set userlist.db chmod to avoid it's world readable as Resolved by committing rOPS715b85e5d950: Ensure userlist isn't world-readable.
Oct 29 2017, 15:48 · security, Odderon
dereckson closed D1069: Ensure userlist isn't world-readable.
Oct 29 2017, 15:48
dereckson added a comment to D1069: Ensure userlist isn't world-readable.

Works but the software itself rewrites periodically the file as 644.

Oct 29 2017, 15:46
dereckson closed T1286: Eglide Salt minion doesn't respond as Resolved.

Eglide highstate is correct, excepted for the PHP libraries and a former bug to the Let's encrypt timer we can solve independently.

Oct 29 2017, 15:41 · Servers
dereckson closed T1286: Eglide Salt minion doesn't respond, a subtask of T1034: Switch from root@ SSH login to sudo capabilities on every server, as Resolved.
Oct 29 2017, 15:41 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson closed T1286: Eglide Salt minion doesn't respond, a subtask of T1285: Update tomjerr SSH key, as Resolved.
Oct 29 2017, 15:41 · security, Servers
dereckson closed T1286: Eglide Salt minion doesn't respond, a subtask of T1287: New changes are currently blocked on Eglide, as Resolved.
Oct 29 2017, 15:41 · Eglide
dereckson accepted D1069: Ensure userlist isn't world-readable.
Salt master
$ salt eglide state.apply roles/shellserver/odderon/config
eglide:                              
----------                             
          ID: odderon_fix_permissions_and_ownership                            
    Function: cmd.run                  
        Name: chmod 640 /opt/odderon/var/darkbot/userlist.db                   
      Result: True                     
     Comment: Command "chmod 640 /opt/odderon/var/darkbot/userlist.db" run     
     Started: 15:22:18.005520          
    Duration: 47.53 ms                 
     Changes:                          
              ----------               
              pid:                     
                  32647                
              retcode:                 
                  0                    
              stderr:                  
              stdout:                  
----------                             
          ID: odderon_fix_permissions_and_ownership                            
    Function: cmd.run                  
        Name: chown odderon:nasqueron-irc /opt/odderon/var/darkbot/userlist.db 
      Result: True                     
     Comment: Command "chown odderon:nasqueron-irc /opt/odderon/var/darkbot/userlist.db" run                                                                   
     Started: 15:22:18.054366          
    Duration: 40.816 ms                
     Changes:                          
              ----------               
              pid:                     
                  32649                
              retcode:                 
                  0                    
              stderr:                  
              stdout:                  
Oct 29 2017, 15:28
dereckson updated the diff for D1069: Ensure userlist isn't world-readable.

Fix cmd.run multi command syntax

Oct 29 2017, 15:22
dereckson planned changes to D1069: Ensure userlist isn't world-readable.
$ salt-call state.apply roles/shellserver/odderon/config
    The function "chown odderon:nasqueron-irc /opt/odderon/var/darkbot/userlist.db" in state "odderon_fix_permissions_and_ownership" in SLS "roles/shellserver/odderon/config" has whitespace, a function with whitespace is not supported, perhaps this is an argument that is missing a ":"
Oct 29 2017, 01:54
dereckson accepted D1069: Ensure userlist isn't world-readable.
Oct 29 2017, 01:52
dereckson closed T1291: Renew robot.paysannerebelle.com as Resolved.

Apparently, was a network issue.

Oct 29 2017, 01:49 · upstream, Servers, Eglide
dereckson created T1291: Renew robot.paysannerebelle.com.
Oct 29 2017, 01:41 · upstream, Servers, Eglide
dereckson added a reverting change for rOPSc18cf34de2bb: Provision ops accounts on Eglide: rOPSd4a2340aa322: Drop wheel group configuration.
Oct 29 2017, 01:36
dereckson committed rOPSd4a2340aa322: Drop wheel group configuration (authored by dereckson).
Drop wheel group configuration
Oct 29 2017, 01:36
dereckson closed D1068: Drop wheel group configuration.
Oct 29 2017, 01:36
dereckson updated the diff for D1068: Drop wheel group configuration.

Rebased

Oct 29 2017, 01:35
dereckson committed rOPSf3a236a7afe4: Create an ops group with full sudo capability (authored by dereckson).
Create an ops group with full sudo capability
Oct 29 2017, 01:32
dereckson closed D1067: Create an ops group with full sudo capability.
Oct 29 2017, 01:32
dereckson accepted D1067: Create an ops group with full sudo capability.
Salt master
$ salt eglide state.apply roles/shellserver/users

----------                                                                                                                                                     
          ID: group_ops                                                                 
    Function: group.present                                                                                                                                    
        Name: ops                                                                                                                                            
      Result: True                                                                                                                                             
     Comment: New group ops created                                                                                                                            
     Started: 00:56:24.790152                                                                                                                                
    Duration: 835.725 ms                                                                    
     Changes:                                                                               
              ----------                                                                                                                                     
              gid:                                                                                                                                           
                  3001                                                            
              members:                                                                                                                                       
                  - dereckson                                                                                                                                
                  - sandlayth                                                                                                                                  
              name:                                                                                                                                          
                  ops                                                                       
              passwd:                                                                                                                                        
                  x                       

$ salt eglide state.apply roles/core/sudo
eglide:
----------
          ID: /etc/sudoers.d/ops
    Function: file.managed
      Result: True
     Comment: File /etc/sudoers.d/ops updated
     Started: 01:27:44.142002
    Duration: 217.149 ms
     Changes:   
              ----------
              diff:
                  New file
              mode:
                  0644
Oct 29 2017, 01:32
dereckson updated the diff for D1067: Create an ops group with full sudo capability.

Now we've a correct state

Oct 29 2017, 01:27
dereckson updated the diff for D1067: Create an ops group with full sudo capability.

Fix syntax

Oct 29 2017, 01:26
dereckson updated the diff for D1067: Create an ops group with full sudo capability.

Fix loop issue

Oct 29 2017, 01:23
dereckson added a comment to D1126: Set zsh as default shell for dereckson and amj.
          ID: dereckson                                                             
    Function: user.present                                                                                                                                   
      Result: True                                   
     Comment: Updated user dereckson   
     Started: 00:25:19.129254                                                                                                                                  
    Duration: 133.455 ms                                                                                                                                       
     Changes:                                                                                                                                                  
              ----------               
              shell:                                                                      
                  /bin/zsh      
----------                                           
          ID: amj                      
    Function: user.present                                                                                                                                     
      Result: True                                                                                                                                             
     Comment: Updated user amj                                                                                                                                 
     Started: 00:25:19.435983          
    Duration: 115.81 ms                                                                   
     Changes:                                                                                            
              ----------                         
              shell:                                                                                                                                           
                  /bin/zsh
Oct 29 2017, 00:31
dereckson committed rOPS0c5513912e52: Set zsh as default shell for dereckson and amj (authored by dereckson).
Set zsh as default shell for dereckson and amj
Oct 29 2017, 00:31
dereckson closed D1126: Set zsh as default shell for dereckson and amj.
Oct 29 2017, 00:31
dereckson accepted D1126: Set zsh as default shell for dereckson and amj.
Oct 29 2017, 00:30
dereckson created D1126: Set zsh as default shell for dereckson and amj.
Oct 29 2017, 00:10
dereckson created T1290: letsencrypt_renew_enable state fails on Eglide.
Oct 29 2017, 00:00 · Eglide, Salt, Operations sprints (The Dreadnought will produce new officers)

Oct 28 2017

dereckson created T1289: PHP libraries names aren't consistent between Debian and FreeBSD.
Oct 28 2017, 23:59 · Eglide, Salt, Operations sprints (The Dreadnought will produce new officers)
dereckson lowered the priority of T1286: Eglide Salt minion doesn't respond from Unbreak Now! to High.

Working now, some cleaning needed.

Oct 28 2017, 23:56 · Servers
dereckson closed T1287: New changes are currently blocked on Eglide as Resolved.

Changes have been applied.

Oct 28 2017, 23:56 · Eglide
dereckson committed rOPS2d06fab18fd0: Install Boost on dev servers (authored by dereckson).
Install Boost on dev servers
Oct 28 2017, 23:55
dereckson closed D1125: Install Boost on dev servers.
Oct 28 2017, 23:55
dereckson accepted D1125: Install Boost on dev servers.
Ysul
$ arc patch D1125
$ /home/dereckson/dev/nasqueron/operations
local:                                 
----------                                                                     
          ID: devserver_software_dev_c 
    Function: pkg.installed            
      Result: True                     
     Comment: All specified packages are already installed
     Started: 23:53:33.392554                                                  
    Duration: 339.279 ms               
     Changes:
----------

Summary for local                      
-------------                          
Succeeded: 12                          
Failed:     0                          
-------------                          
Total states run:     12               
Total run time:   12.461 s
Oct 28 2017, 23:54
dereckson created D1125: Install Boost on dev servers.
Oct 28 2017, 23:52
dereckson added a comment to T1288: Deploy clamav on mail.nasqueron.org.

[ Prioritized as low, as currently, noone received a virus to our installation. Feel free to switch this to normal for a sporadic mail, to high if you're flooded non stop. ]

Oct 28 2017, 23:08 · Mail
dereckson created T1288: Deploy clamav on mail.nasqueron.org.
Oct 28 2017, 23:07 · Mail
dereckson added a comment to T1286: Eglide Salt minion doesn't respond.

The minion has been restarted.

Oct 28 2017, 23:00 · Servers
dereckson updated the title for P266 Test run of highstate on Eglide from /tmp/T1286.log to Test run of highstate on Eglide.
Oct 28 2017, 22:59 · Eglide, Salt
dereckson updated the language for P266 Test run of highstate on Eglide from autodetect to text.
Oct 28 2017, 22:58 · Eglide, Salt
dereckson edited P266 Test run of highstate on Eglide.
Oct 28 2017, 22:52 · Eglide, Salt
dereckson committed rOPSaf951f183348: Don't rebuild darkbot when lock file is there (authored by dereckson).
Don't rebuild darkbot when lock file is there
Oct 28 2017, 22:51
dereckson closed D1124: Don't rebuild darkbot when lock file is there.
Oct 28 2017, 22:51
dereckson accepted D1124: Don't rebuild darkbot when lock file is there.
Oct 28 2017, 22:49
dereckson created D1124: Don't rebuild darkbot when lock file is there.
Oct 28 2017, 22:49
dereckson added a comment to T1286: Eglide Salt minion doesn't respond.

3 and 1 done. I'm watching the minion log to check it's well resolved

Oct 28 2017, 21:54 · Servers
dereckson added a parent task for T1286: Eglide Salt minion doesn't respond: T1287: New changes are currently blocked on Eglide.
Oct 28 2017, 20:51 · Servers
dereckson added a subtask for T1287: New changes are currently blocked on Eglide: T1286: Eglide Salt minion doesn't respond.
Oct 28 2017, 20:51 · Eglide
dereckson added a comment to T1285: Update tomjerr SSH key.

So last step is to propagate the change to Eglide restarting the minion.

Oct 28 2017, 20:50 · security, Servers
dereckson lowered the priority of T1285: Update tomjerr SSH key from High to Normal.
Oct 28 2017, 20:49 · security, Servers
dereckson added a comment to T1285: Update tomjerr SSH key.

I prepared such a change Wednesday, and committed now, as @tomjerr confirmed the key is working fine (per your manual add).

Oct 28 2017, 20:49 · security, Servers
dereckson committed rOPS90d97e1d6451: Update SSH key for tomjerr (authored by dereckson).
Update SSH key for tomjerr
Oct 28 2017, 20:48
dereckson closed D1119: Update SSH key for tomjerr.
Oct 28 2017, 20:48
dereckson committed rOPS21a19ced6083: Provide EditorConfig information (authored by dereckson).
Provide EditorConfig information
Oct 28 2017, 20:47
dereckson closed D1123: Provide EditorConfig information.
Oct 28 2017, 20:47
dereckson accepted D1123: Provide EditorConfig information.
Oct 28 2017, 20:47
dereckson created D1123: Provide EditorConfig information.
Oct 28 2017, 20:47
dereckson updated the task description for T1287: New changes are currently blocked on Eglide.
Oct 28 2017, 20:29 · Eglide
dereckson updated subscribers of T1254: Ensure non-Nasqueron domains DNS don't contain A records to old Dwellers IP.

@amj has noticed phabricator.wolfplex.be didn't respond to ping.

Oct 28 2017, 18:36 · Operations sprints (The Dreadnought will produce new officers), Servers
dereckson created D1122: Provision MySQL.
Oct 28 2017, 10:35
dereckson planned changes to D1122: Provision MySQL.
Oct 28 2017, 10:35