In T1924#28790, @dereckson wrote:router-001 update would cut network connections between Ysul, WindRiver, CloudHugger and IntraNought VMs.
I think that's actually acceptable, as production services can reach web-001/db-*/ directly through their dedicated network card.
Impact:
- IRC bots wouldn't be able to reach MySQL or Vault as they're still on Ysul
- Services still on Ysul can't reach
- Development servers can't reach production services, or Dwellers
Another issue is we lose connections to all those machines, as router-001 is used to route traffic to them.
Probably best to ship router-002 under FreeBSD 14 so we can prepare to minimize this impact if we need more hypervisors in the future.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 10 2024
Jan 10 2024
dereckson lowered the priority of T1939: Implement blue/green deployment or immutable artefacts for router-001 from Normal to Low.
dereckson added a comment to T1939: Implement blue/green deployment or immutable artefacts for router-001.
dereckson updated the task description for T1939: Implement blue/green deployment or immutable artefacts for router-001.
router-001 is out of scope as long as T1939 is implemented
dereckson triaged T1939: Implement blue/green deployment or immutable artefacts for router-001 as Normal priority.
Complector
$ salt -G 'os:FreeBSD' state.apply roles/core/motd […] db-A-001: ---------- ID: motd Function: file.managed Name: /etc/motd.template Result: True Comment: File /etc/motd.template updated Started: 21:59:23.854873 Duration: 574.128 ms Changes: ---------- diff: --- +++ @@ -1,7 +1,7 @@ ____ ______ ___ / )/ \/ \ db-A-001.nasqueron.drake ( / __ _\ ) - \ (/ o) ( o) ) IP: 172.27.27.8 OS: FreeBSD 13 + \ (/ o) ( o) ) IP: 172.27.27.8 OS: FreeBSD 14 \_ (_ ) \ ) / GW: 172.27.27.1 Cluster A | PostgreSQL \ /\_/ \)_/ \/ //| |\\ This server hosts databases for Nasqueron projects. […]
Bump FreeBSD version in MOTD
Use Etherpad /health endpoint
dereckson committed rOPS1304de63d3af: Add non-free-firmware repository component on Debian (authored by dereckson).
Add non-free-firmware repository component on Debian
Update copyright date
Jan 8 2024
Jan 8 2024
dereckson committed rOPS72f249f5686b: Disable Terrapin sensible ciphers and algorithms (authored by dereckson).
Disable Terrapin sensible ciphers and algorithms
dereckson added a revision to T1935: OPENSSH 9.6: D3265: Disable Terrapin sensible ciphers and algorithms.
Can be automated with grain osmajorrelease.
seem good for me,
Is there a way to make this change automatic ?
based on the version of the os in the server ?
Jan 7 2024
Jan 7 2024
router-001 update would cut network connections between Ysul, WindRiver, CloudHugger and IntraNought VMs.
dereckson added a revision to T1924: Upgrade servers to FreeBSD 14: D3264: Bump FreeBSD version in MOTD.
dereckson committed rDETHERd09fdd64691c: Merge branch 'main' into production (authored by dereckson).
Merge branch 'main' into production
Fix whitespace issue
Refresh installation method
dereckson committed rDETHER9c5d27f38b23: Upgrade to Debian Bookworm and Node 18 (authored by dereckson).
Upgrade to Debian Bookworm and Node 18
Other changes seem needed:
Jan 6 2024
Jan 6 2024
dereckson added a revision to T1868: NetBox to .db: D3258: Export Netbox IPAM information for darkbot.
Configure Arcanist
dereckson committed rDARKDBNETBOXd71379b7142d: Export Netbox IPAM information for darkbot (authored by dereckson).
Export Netbox IPAM information for darkbot
This is a draft prepared last June for the script which prepared the database currently live in Odderon.
Small fixes from flake8
Jan 5 2024
Jan 5 2024
Complector done.
done for db-B-001
Done for Hervil
FreeBSD integrates OpenSSH to the base OS.
cloudhugger:
OpenSSH_8.4p1 Debian-5+deb11u3, OpenSSL 1.1.1w 11 Sep 2023
windriver:
OpenSSH_9.5p1, OpenSSL 3.0.12 24 Oct 2023
dwellers:
OpenSSH_8.7p1, OpenSSL 3.0.7 1 Nov 2022
windriver:
OpenSSH_9.5p1, OpenSSL 3.0.12 24 Oct 2023
windriver:
OpenSSH_9.5p1, OpenSSL 3.0.12 24 Oct 2023
docker-002:
OpenSSH_8.7p1, OpenSSL 3.0.7 1 Nov 2022
hervil:
OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd 7 Feb 2023
complector:
OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd 7 Feb 2023
db-A-001:
OpenSSH_9.3p2, OpenSSL 1.1.1t-freebsd 7 Feb 2023
db-B-001:
OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd 7 Feb 2023
web-001:
OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd 7 Feb 2023
router-001:
OpenSSH_9.3p1, OpenSSL 1.1.1t-freebsd 7 Feb 2023
ysul:
Minion did not return. [Not connected]
thrayce:
Minion did not return. [Not connected]
Jan 2 2024
Jan 2 2024
dereckson awarded T949: Add a call for action button to the Docker images workboard on the site a Doubloon token.
dereckson closed T949: Add a call for action button to the Docker images workboard on the site as Resolved.
Code change merged, thanks for the task :)
dereckson committed rDOCKERWWW2518fe6bc585: Add action button to the Docker images workboard (authored by basakankit).
Add action button to the Docker images workboard
dereckson retitled D3255: Add action button to the Docker images workboard from action button to the Docker images workboard to Add action button to the Docker images workboard.
Checked the rendering with arc patch D3255 (to get the branch) then python3 -m http.server, looks good to me.
dereckson added a comment to T949: Add a call for action button to the Docker images workboard on the site.
Good idea to have chosen the same size, that will give a more coherent look.
basakankit added a comment to T949: Add a call for action button to the Docker images workboard on the site.
I have made the correction and made the button size, same as the the other button "Report an issue". or is a bigger size required
- action button to the Docker images workboard
Jan 1 2024
Jan 1 2024
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator