Next step is to actually deploy the SASL credential from secrets/nasqueron/odderon/nickserv
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
May 15 2023
May 15 2023
Add SASL capability
Views of addresses for a prefix shows relevant information we can extract: https://netbox.nasqueron.org/ipam/prefixes/3/ip-addresses/
Password truncation
Passwords are explicitly truncated to 25 characters in load_helpers functions:
dereckson closed T1870: Can't end network registration on Freenode as Resolved by committing rDARKBOT829d0e0bda75: Don't declare mutable variables as static.
dereckson committed rDARKBOT829d0e0bda75: Don't declare mutable variables as static (authored by dereckson).
Don't declare mutable variables as static
Where we see why global variables are evil.
Remove setup.ini SASL change, not in scope of this
SASL patch tested in T1739 works fine:
I don't know what's happen with darkbot 7, but with 6f6 it works like a charm:
May 14 2023
May 14 2023
Back to version 6f6, I can't repro the issue, it connects correctly:
I can repro while connecting to Libera through znc.
Blocked by T1870 to test correctly this.
dereckson moved T1738: Allow Darkbot to connect to IPv6 from Backlog to Dev on the good-first-issue board.
Secrets stored in Vault
Prune blank line at the top
Add C template
inidal renamed M14: ServPulse - System Design (Draft) from Status Page - System Design (Draft) to ServPulse - System Design (Draft).
inidal renamed M15: ServPulse - Database (Schema) from Status Page - Database (Schema) to ServPulse - Database (Schema).
inidal renamed M16: ServPulse - Index (Wireframe) from Status Page - Index (Wireframe) to ServPulse - Index (Wireframe).
Simple SASL implementation does NOT require a library.
May 13 2023
May 13 2023
In M15#201, @dereckson wrote:To be coherent with new table names, incident_post.step_id -> incident_post.status_id?
In M16#197, @dereckson wrote:Nice to see it takes shape :)
dereckson moved T1559: Figure how to deploy automatically /var/51-wwwroot credentials from Backlog to Working on on the Servers board.
Okay, let's do an easy thing to solve that for DevCentral repositories:
dereckson closed T1537: Migrate 2017 Ysul content to Windriver , a subtask of T1536: Provision a new development server, as Resolved.
dereckson closed T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode as Resolved by committing rOPSc6ea8cdd4d8f: Run portsnap in interactive mode.
Run portsnap in interactive mode
What's missing compared to https://devcentral.nasqueron.org/source/operations/browse/main/pillar/nodes/nodes.sls?
black
Rebased. Use default_gateways and default_gateways_virt fields. Add support for IPv6.
Done, with a migration script.
PHP configuration to improve:
DUID published in Vault under ops/secrets/network/DUID/2001:bc8:2e84:700::
Does Vikidia still needs this?
dereckson moved T1169: Postfix on ysul.nasqueron.org doesn't listen on IPv6 from Backlog to Analysis / under discussion on the Servers board.
dereckson moved T1861: Configure static IPv6 on WindRiver from Backlog to Analysis / under discussion on the Servers board.
2001:bc8:2e84:700:: /56 should be used for WindRiver addresses.
Autoconfig IP isn't in our block
The DUID of your prefix (and each of its subnets) is like a private key and grants you access to your prefix. Keep it secret and do not share it.
Through autoconfig we've an IP in our /64 block: 2001:bc8:6005:5:aa1e:84ff:fef3:5d9c
dereckson moved T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode from Backlog to Pending review on the Servers board.
dereckson added a comment to T1864: On FreeBSD 13.2, portsnap fetch refuses to work in non interactive mode.
According recent portsnap man:
dereckson committed rOPS0e1b21e5a499: Ignore a failure to find pam_nologin\.so in SSH PAM configuration (authored by dereckson).
Ignore a failure to find pam_nologin\.so in SSH PAM configuration
Complector
$ salt thrayce state.apply roles/core/sshd […] ID: pam_disable_nologin Function: file.comment Name: /etc/pam.d/sshd Result: True Comment: Pattern not found and ignore_missing set to True Started: 10:38:53.887257 Duration: 7.978 ms Changes: […]
dereckson requested review of D3092: Ignore a failure to find pam_nologin\.so in SSH PAM configuration.
dereckson committed rOPS598c0830fd3a: Enable Salt minion server on FreeBSD nodes (authored by dereckson).
Enable Salt minion server on FreeBSD nodes
dereckson committed rOPS93c6c0b7f45a: Enable OpenSSH server on FreeBSD nodes (authored by dereckson).
Enable OpenSSH server on FreeBSD nodes
router-001 IPv6
To be coherent with new table names, incident_post.step_id -> incident_post.status_id?
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator