Page MenuHomeDevCentral
Feed All Stories

Jan 12 2024

dereckson accepted D3268: Upgrade to AirFlow 2.8.0 and Python 3.11.
Jan 12 2024, 18:43
dereckson requested review of D3268: Upgrade to AirFlow 2.8.0 and Python 3.11.
Jan 12 2024, 18:43
dereckson closed D3267: Configure Arcanist.
Jan 12 2024, 18:39
dereckson committed rDAF1bc4aaf65c99: Configure Arcanist (authored by dereckson).
Configure Arcanist
Jan 12 2024, 18:39
dereckson accepted D3267: Configure Arcanist.
Jan 12 2024, 18:38
dereckson requested review of D3267: Configure Arcanist.
Jan 12 2024, 18:38
dereckson closed D3266: Create custom Docker image with Sentry.
Jan 12 2024, 18:37
dereckson committed rDAF201c7874ddae: Create custom Docker image with Sentry (authored by dereckson).
Create custom Docker image with Sentry
Jan 12 2024, 18:37
dereckson accepted D3266: Create custom Docker image with Sentry.

Not yet committed code from last March, so that explains the version lag. 2.5.2 is still what's currently deployed.

Jan 12 2024, 18:37
dereckson requested review of D3266: Create custom Docker image with Sentry.
Jan 12 2024, 18:36
dereckson added a revision to T1812: Deploy Airflow: D3266: Create custom Docker image with Sentry.
Jan 12 2024, 18:36 · Product evaluation, Continous integration and delivery, Nasqueron Databases

Jan 10 2024

dereckson updated the task description for T1938: Non open-source infrastructure software policy.
Jan 10 2024, 22:30 · discussion, Servers
dereckson added a comment to T1938: Non open-source infrastructure software policy.

Added RHEL question.

Jan 10 2024, 22:23 · discussion, Servers
dereckson updated the task description for T1938: Non open-source infrastructure software policy.
Jan 10 2024, 22:23 · discussion, Servers
dereckson lowered the priority of T1939: Implement blue/green deployment or immutable artefacts for router-001 from Normal to Low.
Jan 10 2024, 22:11 · Servers, Restricted Project
dereckson added a comment to T1939: Implement blue/green deployment or immutable artefacts for router-001.

router-001 update would cut network connections between Ysul, WindRiver, CloudHugger and IntraNought VMs.

I think that's actually acceptable, as production services can reach web-001/db-*/ directly through their dedicated network card.

Impact:

  • IRC bots wouldn't be able to reach MySQL or Vault as they're still on Ysul
  • Services still on Ysul can't reach
  • Development servers can't reach production services, or Dwellers

Another issue is we lose connections to all those machines, as router-001 is used to route traffic to them.

Probably best to ship router-002 under FreeBSD 14 so we can prepare to minimize this impact if we need more hypervisors in the future.

Jan 10 2024, 22:10 · Servers, Restricted Project
dereckson updated the task description for T1939: Implement blue/green deployment or immutable artefacts for router-001.
Jan 10 2024, 22:10 · Servers, Restricted Project
dereckson closed T1924: Upgrade servers to FreeBSD 14 as Resolved.

router-001 is out of scope as long as T1939 is implemented

Jan 10 2024, 22:09 · Servers
dereckson triaged T1939: Implement blue/green deployment or immutable artefacts for router-001 as Normal priority.
Jan 10 2024, 22:08 · Servers, Restricted Project
dereckson added a comment to D3264: Bump FreeBSD version in MOTD.
Complector
$ salt -G 'os:FreeBSD' state.apply roles/core/motd
[…]
db-A-001:
----------
          ID: motd
    Function: file.managed
        Name: /etc/motd.template
      Result: True
     Comment: File /etc/motd.template updated
     Started: 21:59:23.854873
    Duration: 574.128 ms
     Changes:
              ----------
              diff:
                  ---
                  +++
                  @@ -1,7 +1,7 @@
                       ____  ______  ___
                      /    )/      \/   \    db-A-001.nasqueron.drake
                     (     / __    _\    )
                  -   \    (/ o)  ( o)   )   IP: 172.27.27.8        OS: FreeBSD 13
                  +   \    (/ o)  ( o)   )   IP: 172.27.27.8        OS: FreeBSD 14
                       \_  (_  )   \ )  /    GW: 172.27.27.1        Cluster A | PostgreSQL
                         \  /\_/    \)_/
                          \/  //|  |\\       This server hosts databases for Nasqueron projects.
[…]
Jan 10 2024, 22:01
dereckson closed D3264: Bump FreeBSD version in MOTD.
Jan 10 2024, 21:57
dereckson committed rOPS573a4ba11ba8: Bump FreeBSD version in MOTD (authored by dereckson).
Bump FreeBSD version in MOTD
Jan 10 2024, 21:57
dereckson committed rOPS422ae85e9f5a: Use Etherpad /health endpoint (authored by dereckson).
Use Etherpad /health endpoint
Jan 10 2024, 21:56
dereckson closed D3263: Use Etherpad /health endpoint.
Jan 10 2024, 21:56
dereckson closed D3257: Add non-free-firmware repository component on Debian.
Jan 10 2024, 21:55
dereckson committed rOPS1304de63d3af: Add non-free-firmware repository component on Debian (authored by dereckson).
Add non-free-firmware repository component on Debian
Jan 10 2024, 21:55
dereckson closed D3256: Update copyright date.
Jan 10 2024, 21:54 · Docker images
dereckson committed rDOCKERWWWafe29e42862c: Update copyright date (authored by dereckson).
Update copyright date
Jan 10 2024, 21:54

Jan 8 2024

dereckson closed D3265: Disable Terrapin sensible ciphers and algorithms.
Jan 8 2024, 21:54
dereckson committed rOPS72f249f5686b: Disable Terrapin sensible ciphers and algorithms (authored by dereckson).
Disable Terrapin sensible ciphers and algorithms
Jan 8 2024, 21:54
DorianWinty accepted D3265: Disable Terrapin sensible ciphers and algorithms.
Jan 8 2024, 21:54
dereckson added a revision to T1935: OPENSSH 9.6: D3265: Disable Terrapin sensible ciphers and algorithms.
Jan 8 2024, 21:54 · security
dereckson requested review of D3265: Disable Terrapin sensible ciphers and algorithms.
Jan 8 2024, 21:54
DorianWinty closed T1935: OPENSSH 9.6 as Resolved.
Jan 8 2024, 21:13 · security
DorianWinty shifted T1935: OPENSSH 9.6 from the Restricted Space space to the S1 Nasqueron space.
Jan 8 2024, 21:13 · security
DorianWinty shifted T1935: OPENSSH 9.6 from the S1 Nasqueron space to the Restricted Space space.
Jan 8 2024, 21:11 · security
DorianWinty shifted T1935: OPENSSH 9.6 from the Restricted Space space to the S1 Nasqueron space.
Jan 8 2024, 21:11 · security
DorianWinty accepted D3256: Update copyright date.
Jan 8 2024, 20:34 · Docker images
dereckson added a comment to D3264: Bump FreeBSD version in MOTD.

Can be automated with grain osmajorrelease.

Jan 8 2024, 18:58
DorianWinty accepted D3257: Add non-free-firmware repository component on Debian.
Jan 8 2024, 18:44
DorianWinty accepted D3263: Use Etherpad /health endpoint.
Jan 8 2024, 18:43
DorianWinty accepted D3264: Bump FreeBSD version in MOTD.

seem good for me,
Is there a way to make this change automatic ?
based on the version of the os in the server ?

Jan 8 2024, 18:41

Jan 7 2024

dereckson updated the task description for T1935: OPENSSH 9.6.
Jan 7 2024, 18:05 · security
dereckson updated the task description for T1935: OPENSSH 9.6.
Jan 7 2024, 18:01 · security
dereckson added a comment to T1924: Upgrade servers to FreeBSD 14.

router-001 update would cut network connections between Ysul, WindRiver, CloudHugger and IntraNought VMs.

Jan 7 2024, 18:01 · Servers
dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 7 2024, 17:46 · Servers
dereckson requested review of D3264: Bump FreeBSD version in MOTD.
Jan 7 2024, 16:20
dereckson added a revision to T1924: Upgrade servers to FreeBSD 14: D3264: Bump FreeBSD version in MOTD.
Jan 7 2024, 16:20 · Servers
dereckson requested review of D3263: Use Etherpad /health endpoint.
Jan 7 2024, 00:40
dereckson committed rDETHERd09fdd64691c: Merge branch 'main' into production (authored by dereckson).
Merge branch 'main' into production
Jan 7 2024, 00:31
dereckson committed rDETHER694b1fde33d7: Fix whitespace issue (authored by dereckson).
Fix whitespace issue
Jan 7 2024, 00:29
dereckson closed D3262: Fix whitespace issue.
Jan 7 2024, 00:29
dereckson accepted D3262: Fix whitespace issue.
Jan 7 2024, 00:28
dereckson requested review of D3262: Fix whitespace issue.
Jan 7 2024, 00:28
dereckson committed rDETHER04fea0750f59: Refresh installation method (authored by dereckson).
Refresh installation method
Jan 7 2024, 00:21
dereckson closed D3261: Refresh installation method.
Jan 7 2024, 00:21
dereckson closed D3260: Upgrade to Debian Bookworm and Node 18.
Jan 7 2024, 00:21
dereckson committed rDETHER9c5d27f38b23: Upgrade to Debian Bookworm and Node 18 (authored by dereckson).
Upgrade to Debian Bookworm and Node 18
Jan 7 2024, 00:21
dereckson requested review of D3261: Refresh installation method.
Jan 7 2024, 00:21
dereckson requested review of D3260: Upgrade to Debian Bookworm and Node 18.
Jan 7 2024, 00:21
dereckson accepted D3260: Upgrade to Debian Bookworm and Node 18.
Jan 7 2024, 00:21
dereckson accepted D3261: Refresh installation method.
Jan 7 2024, 00:21
dereckson planned changes to D3260: Upgrade to Debian Bookworm and Node 18.

Other changes seem needed:

Jan 7 2024, 00:21
dereckson updated the task description for T1935: OPENSSH 9.6.
Jan 7 2024, 00:21 · security
dereckson added a comment to D3260: Upgrade to Debian Bookworm and Node 18.

The Etherpad projects offers a procedure to install Etherpad with npm link. That works well if we combine D3260 and D3261.

Jan 7 2024, 00:21
dereckson requested review of D3260: Upgrade to Debian Bookworm and Node 18.
Jan 7 2024, 00:21

Jan 6 2024

dereckson created P346 python-packages-netbox.txt.
Jan 6 2024, 18:51
dereckson claimed T1868: NetBox to .db.
Jan 6 2024, 18:04 · Odderon
dereckson added a task to D3258: Export Netbox IPAM information for darkbot: T1868: NetBox to .db.
Jan 6 2024, 18:03
dereckson added a revision to T1868: NetBox to .db: D3258: Export Netbox IPAM information for darkbot.
Jan 6 2024, 18:03 · Odderon
dereckson created T1938: Non open-source infrastructure software policy.
Jan 6 2024, 17:53 · discussion, Servers
dereckson committed rDARKDBNETBOX7b0362b6dbc7: Configure Arcanist (authored by dereckson).
Configure Arcanist
Jan 6 2024, 13:29
dereckson closed D3259: Configure Arcanist.
Jan 6 2024, 13:29
dereckson accepted D3259: Configure Arcanist.
Jan 6 2024, 13:28
dereckson requested review of D3259: Configure Arcanist.
Jan 6 2024, 13:28
dereckson closed D3258: Export Netbox IPAM information for darkbot.
Jan 6 2024, 13:26
dereckson committed rDARKDBNETBOXd71379b7142d: Export Netbox IPAM information for darkbot (authored by dereckson).
Export Netbox IPAM information for darkbot
Jan 6 2024, 13:26
dereckson accepted D3258: Export Netbox IPAM information for darkbot.
Jan 6 2024, 13:26
dereckson added a comment to D3258: Export Netbox IPAM information for darkbot.

This is a draft prepared last June for the script which prepared the database currently live in Odderon.

Jan 6 2024, 13:25
dereckson updated the diff for D3258: Export Netbox IPAM information for darkbot.

Small fixes from flake8

Jan 6 2024, 13:24
dereckson requested review of D3258: Export Netbox IPAM information for darkbot.
Jan 6 2024, 13:23

Jan 5 2024

dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 22:00 · Servers
dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 21:32 · Servers
dereckson added a comment to T1924: Upgrade servers to FreeBSD 14.

Complector done.

Jan 5 2024, 21:31 · Servers
dereckson updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 21:31 · Servers
DorianWinty updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 20:38 · Servers
DorianWinty updated the task description for T1935: OPENSSH 9.6.
Jan 5 2024, 19:55 · security
DorianWinty updated the task description for T1935: OPENSSH 9.6.
Jan 5 2024, 19:55 · security
dereckson added a project to T1937: Update FreeBSD packages Nasqueron repository : Servers.
Jan 5 2024, 19:42 · Servers, User-Dereckson
dereckson triaged T1937: Update FreeBSD packages Nasqueron repository as High priority.
Jan 5 2024, 19:41 · Servers, User-Dereckson
DorianWinty added a comment to T1924: Upgrade servers to FreeBSD 14.

done for db-B-001

Jan 5 2024, 19:40 · Servers
DorianWinty updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 19:40 · Servers
dereckson requested review of D3257: Add non-free-firmware repository component on Debian.
Jan 5 2024, 19:28
DorianWinty updated the task description for T1924: Upgrade servers to FreeBSD 14.
Jan 5 2024, 16:26 · Servers
DorianWinty added a comment to T1924: Upgrade servers to FreeBSD 14.

Done for Hervil

Jan 5 2024, 14:59 · Servers
DorianWinty added a comment to T1935: OPENSSH 9.6.

For Hervil

Jan 5 2024, 12:32 · security
DorianWinty created T1936: NetBox outage on WindRiver restart.
Jan 5 2024, 12:10 · Servers
dereckson added a comment to T1935: OPENSSH 9.6.

FreeBSD integrates OpenSSH to the base OS.

Jan 5 2024, 12:06 · security
DorianWinty added a comment to T1935: OPENSSH 9.6.
Jan 5 2024, 11:45 · security
DorianWinty added a comment to T1935: OPENSSH 9.6.

cloudhugger:

OpenSSH_8.4p1 Debian-5+deb11u3, OpenSSL 1.1.1w  11 Sep 2023

windriver:

OpenSSH_9.5p1, OpenSSL 3.0.12 24 Oct 2023

dwellers:

OpenSSH_8.7p1, OpenSSL 3.0.7 1 Nov 2022

windriver:

OpenSSH_9.5p1, OpenSSL 3.0.12 24 Oct 2023

windriver:

OpenSSH_9.5p1, OpenSSL 3.0.12 24 Oct 2023

docker-002:

OpenSSH_8.7p1, OpenSSL 3.0.7 1 Nov 2022

hervil:

OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd  7 Feb 2023

complector:

OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd  7 Feb 2023

db-A-001:

OpenSSH_9.3p2, OpenSSL 1.1.1t-freebsd  7 Feb 2023

db-B-001:

OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd  7 Feb 2023

web-001:

OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd  7 Feb 2023

router-001:

OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd  7 Feb 2023

ysul:

Minion did not return. [Not connected]

thrayce:

Minion did not return. [Not connected]
Jan 5 2024, 11:31 · security