Page MenuHomeDevCentral
Feed All Stories

Feb 16 2020

dereckson added a revision to T1034: Switch from root@ SSH login to sudo capabilities on every server: D2219: Don't allow direct login as root through SSH.
Feb 16 2020, 03:30 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson added a project to T635: Add a VCS informative prompt to `arc shell`: Operations sprints (Consolidate them all).

zsh + starship looks a good solution too, but it's not packaged for Debian.

Feb 16 2020, 03:28 · Operations sprints (Consolidate them all), Docker images
dereckson moved T824: Tests for SuEXEC on Ysul from Backlog to Pending review on the Operations sprints (Consolidate them all) board.
Feb 16 2020, 03:25 · Operations sprints (Consolidate them all), Servers
dereckson added a project to T824: Tests for SuEXEC on Ysul: Operations sprints (Consolidate them all).

Tests should be extended to development servers and made optional, as we don't currently have an Apache working.

Feb 16 2020, 03:25 · Operations sprints (Consolidate them all), Servers
dereckson closed T1162: 2017-03-01 eglide.org server outage as Resolved.
Feb 16 2020, 03:22 · User-Sandlayth, Eglide, Servers
dereckson renamed T1034: Switch from root@ SSH login to sudo capabilities on every server from Switch from root@ SSH login to sudo capabilities on Eglide to Switch from root@ SSH login to sudo capabilities on every server.
Feb 16 2020, 03:17 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson claimed T1034: Switch from root@ SSH login to sudo capabilities on every server.

So, it works for two years. Let's restrict root login.

Feb 16 2020, 03:17 · Operations sprints (Consolidate them all), Servers, Eglide

Feb 15 2020

dereckson created Blog Post: New SSH keys for servers.
Feb 15 2020, 23:50 · security, Servers
dereckson committed rOPS0e05505a365a: Normalize spaces (authored by dereckson).
Normalize spaces
Feb 15 2020, 01:42
dereckson closed D2218: Normalize spaces.
Feb 15 2020, 01:42
dereckson accepted D2218: Normalize spaces.
Feb 15 2020, 01:42
dereckson requested review of D2218: Normalize spaces.
Feb 15 2020, 01:42
dereckson committed rOPS6411e69c98b8: Use pillar information for IP and gateway in MOTD (authored by dereckson).
Use pillar information for IP and gateway in MOTD
Feb 15 2020, 01:35
dereckson closed D2217: Use pillar information for IP and gateway in MOTD.
Feb 15 2020, 01:35
dereckson accepted D2217: Use pillar information for IP and gateway in MOTD.
Feb 15 2020, 01:35
dereckson requested review of D2217: Use pillar information for IP and gateway in MOTD.
Feb 15 2020, 00:50
dereckson added a revision to T1595: Reprovision Dwellers through Salt: D2217: Use pillar information for IP and gateway in MOTD.
Feb 15 2020, 00:50 · Salt, Operations sprints (Consolidate them all)
dereckson committed rOPS15199849f8e4: Use net-tools to setup Dwellers IPv6 tunnel (authored by dereckson).
Use net-tools to setup Dwellers IPv6 tunnel
Feb 15 2020, 00:23
dereckson closed D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Feb 15 2020, 00:23
dereckson accepted D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Feb 15 2020, 00:22
dereckson added a revision to T1595: Reprovision Dwellers through Salt: D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Feb 15 2020, 00:22 · Salt, Operations sprints (Consolidate them all)
dereckson requested review of D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Feb 15 2020, 00:22
dereckson committed rOPSefec566fbdf8: Enable Docker service (authored by dereckson).
Enable Docker service
Feb 15 2020, 00:20
dereckson closed D2215: Enable Docker service.
Feb 15 2020, 00:20
dereckson accepted D2215: Enable Docker service.
Feb 15 2020, 00:20
dereckson updated the diff for D2215: Enable Docker service.

Imports are generally more at top

Feb 15 2020, 00:18
dereckson added a revision to T1595: Reprovision Dwellers through Salt: D2215: Enable Docker service.
Feb 15 2020, 00:04 · Salt, Operations sprints (Consolidate them all)
dereckson requested review of D2215: Enable Docker service.
Feb 15 2020, 00:04

Feb 14 2020

dereckson updated the task description for T1595: Reprovision Dwellers through Salt.
Feb 14 2020, 23:58 · Salt, Operations sprints (Consolidate them all)
dereckson updated the task description for T1595: Reprovision Dwellers through Salt.
Feb 14 2020, 23:58 · Salt, Operations sprints (Consolidate them all)
dereckson updated the task description for T1595: Reprovision Dwellers through Salt.
Feb 14 2020, 23:56 · Salt, Operations sprints (Consolidate them all)
dereckson committed rOPSc0d212c71380: Ensure pip is installed in order to invoke it (authored by dereckson).
Ensure pip is installed in order to invoke it
Feb 14 2020, 23:56
dereckson closed D2214: Ensure pip is installed in order to invoke it.
Feb 14 2020, 23:56
dereckson accepted D2214: Ensure pip is installed in order to invoke it.
Dwellers
$ salt-call -ldebug state.sls roles/paas-docker/salt
[...]
local:
----------
          ID: required_python_packages_for_docker_and_salt
    Function: pkg.installed
        Name: python3-pip
      Result: True
     Comment: The following packages were installed/updated: python3-pip
     Started: 22:17:40.253082
    Duration: 9016.292 ms
     Changes:
              ----------
              python3-pip:
                  ----------
                  new:
                      9.0.3-15.el8
                  old:
              python3-setuptools:
                  ----------
                  new:
                      39.2.0-5.el8
                  old:
              python36:
                  ----------
                  new:
                      3.6.8-2.module_el8.1.0+245+c39af44f
                  old:
----------
          ID: required_python_packages_for_docker_and_salt
    Function: pip.installed
        Name: docker
      Result: True
     Comment: All packages were successfully installed
     Started: 22:17:59.460883
    Duration: 5336.004 ms
     Changes:
              ----------
              docker==4.2.0:
                  Installed
Feb 14 2020, 23:15
dereckson updated the diff for D2214: Ensure pip is installed in order to invoke it.

Fix SLS syntax

Feb 14 2020, 22:17
dereckson updated the diff for D2214: Ensure pip is installed in order to invoke it.

Rebase

Feb 14 2020, 22:09
dereckson updated the diff for D2214: Ensure pip is installed in order to invoke it.

Fix syntax

Feb 14 2020, 21:59
dereckson requested review of D2214: Ensure pip is installed in order to invoke it.
Feb 14 2020, 21:57
dereckson added a revision to T1595: Reprovision Dwellers through Salt: D2214: Ensure pip is installed in order to invoke it.
Feb 14 2020, 21:57 · Salt, Operations sprints (Consolidate them all)
dereckson committed rOPSf5d41ce2de3a: Don't try to install last docker-ce version on CentOS (authored by dereckson).
Don't try to install last docker-ce version on CentOS
Feb 14 2020, 21:49
dereckson closed D2213: Don't try to install last docker-ce version on CentOS.
Feb 14 2020, 21:49
dereckson accepted D2213: Don't try to install last docker-ce version on CentOS.
Feb 14 2020, 21:49
dereckson updated the diff for D2213: Don't try to install last docker-ce version on CentOS.

+creates

Feb 14 2020, 21:38
dereckson updated the diff for D2213: Don't try to install last docker-ce version on CentOS.

Confirm with -y to avoid it hangs out with salt-call

Feb 14 2020, 21:37
dereckson updated the summary of D2213: Don't try to install last docker-ce version on CentOS.
Feb 14 2020, 21:21
dereckson requested review of D2213: Don't try to install last docker-ce version on CentOS.
Feb 14 2020, 21:21
dereckson added a revision to T1595: Reprovision Dwellers through Salt: D2213: Don't try to install last docker-ce version on CentOS.
Feb 14 2020, 21:21 · Salt, Operations sprints (Consolidate them all)
dereckson committed rOPS4223a88649d2: Ignore containers if zr isn't available (authored by dereckson).
Ignore containers if zr isn't available
Feb 14 2020, 21:10
dereckson closed D2212: Ignore containers if zr isn't available.
Feb 14 2020, 21:10
dereckson accepted D2212: Ignore containers if zr isn't available.
Feb 14 2020, 21:10
dereckson added a revision to T1595: Reprovision Dwellers through Salt: D2212: Ignore containers if zr isn't available.
Feb 14 2020, 21:09 · Salt, Operations sprints (Consolidate them all)
dereckson updated the summary of D2212: Ignore containers if zr isn't available.
Feb 14 2020, 21:09
dereckson requested review of D2212: Ignore containers if zr isn't available.
Feb 14 2020, 21:09
dereckson moved T275: Nginx proxies request with 127.0.0.1 as IP address from Working on to Backlog on the Forum board.
Feb 14 2020, 17:44 · DevCentral, Forum, Servers
dereckson updated the task description for T275: Nginx proxies request with 127.0.0.1 as IP address.
Feb 14 2020, 17:43 · DevCentral, Forum, Servers
dereckson added a subtask for T275: Nginx proxies request with 127.0.0.1 as IP address: T915: Preamble script for Phabricator.
Feb 14 2020, 17:42 · DevCentral, Forum, Servers
dereckson added a parent task for T915: Preamble script for Phabricator: T275: Nginx proxies request with 127.0.0.1 as IP address.
Feb 14 2020, 17:42 · Docker images
dereckson added a comment to T275: Nginx proxies request with 127.0.0.1 as IP address.

Proxy is fine for DevCentral and other Phabricator containers, per T915 / D484 / 892cd0a35934.

Feb 14 2020, 17:42 · DevCentral, Forum, Servers
dereckson closed T667: Mitigate CVE-2016-0777 in SSH clients configuration files as Resolved.

OpenSSH now mitigates this.

Feb 14 2020, 17:40 · security, Servers
dereckson closed T1154: Etherpad containers floods journald as Resolved.

Can't repro with current Etherpad version.

Feb 14 2020, 17:39 · Nasqueron Docker deployment squad, Servers, Technical debt
dereckson closed T1343: Migrate Salt to Python 3 as Resolved.

Done everywhere now, I've installed Salt 3000 and Python 3.6 on Dwellers.

Feb 14 2020, 17:38 · Servers, Salt
dereckson closed T693: Add dwellers.nasqueron.org to Ysul sshguard whitelist as Wontfix.

We do'nt use sshguard anymore, as login by password is disabled, keys are required.

Feb 14 2020, 17:37 · security, Nasqueron Docker deployment squad, Servers, Restricted Project
dereckson merged task T1517: dwellers.nasqueron.org load is too heavy into T1478: Improve Dwellers hypervisor configuration.
Feb 14 2020, 17:37 · Servers
dereckson merged T1517: dwellers.nasqueron.org load is too heavy into T1478: Improve Dwellers hypervisor configuration.
Feb 14 2020, 17:37 · Operations sprints (Consolidate them all), Servers
dereckson merged T309: Review Dwellers' iptables configuration into T1244: Saltize default iptables for Dwellers.
Feb 14 2020, 17:36 · Operations sprints (Consolidate them all), Servers
dereckson merged task T309: Review Dwellers' iptables configuration into T1244: Saltize default iptables for Dwellers.
Feb 14 2020, 17:36 · Servers
dereckson closed T744: Recycle containers on Dwellers to mitigate CVE-2015-7547, a subtask of T743: Mitigate CVE-2015-7547 DNS glibc issue, as Resolved.
Feb 14 2020, 17:35 · Servers, Docker images, Nasqueron Docker deployment squad
dereckson closed T744: Recycle containers on Dwellers to mitigate CVE-2015-7547 as Resolved.
Feb 14 2020, 17:35 · security, Nasqueron Docker deployment squad
dereckson claimed T744: Recycle containers on Dwellers to mitigate CVE-2015-7547.

Done during the migration to EquaTower and Salt for aphlict cachet devcentral wolfphab acquisitariat etherpad tommy ci silly_bardeen.

Feb 14 2020, 17:35 · security, Nasqueron Docker deployment squad
dereckson updated the task description for T731: Configure docker autocompletion on Dwellers.
Feb 14 2020, 17:33 · Salt, Operations sprints (Consolidate them all), User-Sandlayth, CLI, Servers, Nasqueron Docker deployment squad
dereckson added a comment to T731: Configure docker autocompletion on Dwellers.

Now at https://github.com/docker/docker-ce/tree/master/components/cli/contrib/completion

Feb 14 2020, 17:32 · Salt, Operations sprints (Consolidate them all), User-Sandlayth, CLI, Servers, Nasqueron Docker deployment squad
dereckson added projects to T731: Configure docker autocompletion on Dwellers: Operations sprints (Consolidate them all), Salt.
Feb 14 2020, 17:30 · Salt, Operations sprints (Consolidate them all), User-Sandlayth, CLI, Servers, Nasqueron Docker deployment squad
dereckson moved T1244: Saltize default iptables for Dwellers from Backlog to Pending review on the Operations sprints (Consolidate them all) board.
Feb 14 2020, 17:29 · Operations sprints (Consolidate them all), Servers
dereckson edited projects for T1244: Saltize default iptables for Dwellers, added: Operations sprints (Consolidate them all); removed Operations sprints (The Dreadnought will produce new officers).

Probably fine now we've dropped support for LXC containers, and improved firewalld for Equatower in rOPS9f24b9df2f44.

Feb 14 2020, 17:29 · Operations sprints (Consolidate them all), Servers
dereckson claimed T1478: Improve Dwellers hypervisor configuration.
Feb 14 2020, 17:27 · Operations sprints (Consolidate them all), Servers
dereckson added a comment to T1478: Improve Dwellers hypervisor configuration.

Hypervisor configuration is now fine.

Feb 14 2020, 17:27 · Operations sprints (Consolidate them all), Servers
dereckson updated the task description for T1478: Improve Dwellers hypervisor configuration.
Feb 14 2020, 17:26 · Operations sprints (Consolidate them all), Servers
dereckson added a subtask for T1595: Reprovision Dwellers through Salt: T1351: Review network configuration for Dwellers.
Feb 14 2020, 17:16 · Salt, Operations sprints (Consolidate them all)
dereckson added a parent task for T1351: Review network configuration for Dwellers: T1595: Reprovision Dwellers through Salt.
Feb 14 2020, 17:16 · Operations sprints (The Dreadnought will produce new officers)
dereckson updated the task description for T994: MySQL statistics for acquisitariat.
Feb 14 2020, 17:13 · Monitoring and reporting, Servers, Docker images
dereckson created T1595: Reprovision Dwellers through Salt.
Feb 14 2020, 17:12 · Salt, Operations sprints (Consolidate them all)
dereckson added a comment to T1592: Upgrade Docker engines to CentOS 8.1.

Dwellers will use CentOS 8 Stream, to stay up to date in a rolling fashion.

Feb 14 2020, 16:27 · Salt, Operations sprints (Consolidate them all)
dereckson added a comment to T1594: Acquisitariat and Etherpad issue.

The option is the same for Etherpad and DevCentral:

Feb 14 2020, 15:52 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad
dereckson added a project to T1594: Acquisitariat and Etherpad issue: Operations sprints (Consolidate them all).
Feb 14 2020, 15:44 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad
dereckson updated the task description for T1594: Acquisitariat and Etherpad issue.
Feb 14 2020, 15:44 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad
dereckson created T1594: Acquisitariat and Etherpad issue.
Feb 14 2020, 15:42 · Operations sprints (Consolidate them all), Vault, security, Nasqueron Docker deployment squad
dereckson updated the task description for T1592: Upgrade Docker engines to CentOS 8.1.
Feb 14 2020, 15:11 · Salt, Operations sprints (Consolidate them all)
dereckson closed D2211: Fix nginx map syntax.
Feb 14 2020, 14:43
dereckson committed rOPSed66af7629ef: Fix nginx map syntax (authored by dereckson).
Fix nginx map syntax
Feb 14 2020, 14:43
dereckson accepted D2211: Fix nginx map syntax.
Feb 14 2020, 14:43
dereckson requested review of D2211: Fix nginx map syntax.
Feb 14 2020, 14:39
dereckson committed rOPS2f3bcdbec1fa: Provide placeholders for Sentry services containers (authored by dereckson).
Provide placeholders for Sentry services containers
Feb 14 2020, 05:47
dereckson closed D2210: Provide placeholders for Sentry services containers.
Feb 14 2020, 05:47
dereckson accepted D2210: Provide placeholders for Sentry services containers.
Feb 14 2020, 05:46
dereckson requested review of D2210: Provide placeholders for Sentry services containers.
Feb 14 2020, 04:51
dereckson closed T1593: Fix SLS id confflict, a subtask of T1592: Upgrade Docker engines to CentOS 8.1, as Resolved.
Feb 14 2020, 03:58 · Salt, Operations sprints (Consolidate them all)
dereckson committed rOPS044e8828b0ea: Ensure SLS IDs are unique (authored by dereckson).
Ensure SLS IDs are unique
Feb 14 2020, 03:58
dereckson closed D2209: Ensure SLS IDs are unique.
Feb 14 2020, 03:58
dereckson closed T1593: Fix SLS id confflict as Resolved by committing rOPS044e8828b0ea: Ensure SLS IDs are unique.
Feb 14 2020, 03:58 · Salt, Operations sprints (Consolidate them all)
dereckson accepted D2209: Ensure SLS IDs are unique.
Feb 14 2020, 03:58