Page MenuHomeDevCentral

dereckson (Sébastien Santoro)
Nasqueron founderAdministrator

Projects (92)

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Wednesday

  • Clear sailing ahead.

User Details

User Since
Nov 11 2014, 04:38 (586 w, 6 d)
Roles
Administrator
Availability
Available

At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.

Website: https://www.dereckson.be/

Individual board: User-Dereckson

Recent Activity

Today

dereckson added a comment to T2221: Create 2 new routers.

21:30:03 < yousra> [ERROR] Source file salt://roles/core/motd/files/router-002 not found in salt env 'base'

Mon, Feb 9, 21:41 · Servers, Secure HA tunnels
dereckson requested review of D3938: Fetch node configuration through node custom module.
Mon, Feb 9, 21:21
dereckson closed D3937: ops: add router-002 node.
Mon, Feb 9, 20:55
dereckson committed rOPS55bfd02a68b6: ops: add router-002 node (authored by yousra).
ops: add router-002 node
Mon, Feb 9, 20:55
dereckson accepted D3937: ops: add router-002 node.
Mon, Feb 9, 20:45
dereckson added a comment to T2221: Create 2 new routers.

Pillar configuration for nodes.sls:

Mon, Feb 9, 20:06 · Servers, Secure HA tunnels
dereckson added a comment to P381 Node entry for router-002 .

Generated from NetBox data using sudo utils/netbox/pillarize.py router-002 (from D2790)

Mon, Feb 9, 20:05 · Servers
dereckson edited P381 Node entry for router-002 .
Mon, Feb 9, 20:04 · Servers
dereckson created P381 Node entry for router-002 .
Mon, Feb 9, 19:54 · Servers
dereckson closed D3936: ops: add yousra to operations group.
Mon, Feb 9, 18:17
dereckson committed rOPS87ae6f04df9c: ops: add yousra to operations group (authored by yousra).
ops: add yousra to operations group
Mon, Feb 9, 18:17
dereckson accepted D3936: ops: add yousra to operations group.
Mon, Feb 9, 18:06
dereckson retitled D3936: ops: add yousra to operations group from ops: add yousra to operations group Make mtr available outside devservers to ops: add yousra to operations group.
Mon, Feb 9, 18:06

Yesterday

dereckson committed rINFRAWWW0fcf4f2c0649: Update IRC channel to Libera network (authored by dereckson).
Update IRC channel to Libera network
Sun, Feb 8, 22:24
dereckson closed D3935: Update IRC channel to Libera network.
Sun, Feb 8, 22:24
dereckson accepted D3935: Update IRC channel to Libera network.
Sun, Feb 8, 22:23
dereckson added a revision to T1701: Switch references from Freenode to Libera: D3935: Update IRC channel to Libera network.
Sun, Feb 8, 22:23 · IRC
dereckson requested review of D3935: Update IRC channel to Libera network.
Sun, Feb 8, 22:23
dereckson closed D3934: Include network projects in ops group for Notifications Center.
Sun, Feb 8, 22:17
dereckson committed rOPS0d9dc209ba36: Include network projects in ops group for Notifications Center (authored by dereckson).
Include network projects in ops group for Notifications Center
Sun, Feb 8, 22:17
dereckson accepted D3934: Include network projects in ops group for Notifications Center.
Sun, Feb 8, 22:17
dereckson retitled D3934: Include network projects in ops group for Notifications Center from Include network project in ops group for Notifications Center to Include network projects in ops group for Notifications Center.
Sun, Feb 8, 22:17
dereckson requested review of D3934: Include network projects in ops group for Notifications Center.
Sun, Feb 8, 22:17
dereckson added a comment to T2221: Create 2 new routers.

@yousra When you install the servers, you can document on IRC the main steps:

Sun, Feb 8, 22:10 · Servers, Secure HA tunnels
dereckson triaged T2221: Create 2 new routers as Normal priority.
Sun, Feb 8, 21:32 · Servers, Secure HA tunnels
dereckson added a comment to T2221: Create 2 new routers.

router-002 and router-003 have been created on hyper-001

Sun, Feb 8, 21:31 · Servers, Secure HA tunnels
dereckson moved T2218: Rhyne-Wyse tries to login on test.wikipedia.org instead of agora.nasqueron.org from Backlog to Next on the Operations sprints (Echoes in the Void) board.
Sun, Feb 8, 17:23 · Servers, Operations sprints (Echoes in the Void), Agora
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
Sun, Feb 8, 17:00 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
Sun, Feb 8, 16:33 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson added a comment to D3933: Listen for eggdrop users and bots in separate ports.
WindRiver
$ nc 2001:bc8:2e84:700:0:dead:c0de:b07 18000 
��This connection is in clear text, so ensure you use a SSH tunnel to the server.
Sun, Feb 8, 16:32
dereckson retitled D3933: Listen for eggdrop users and bots in separate ports from Llisten for eggdrop users and bots in separate ports to Listen for eggdrop users and bots in separate ports.
Sun, Feb 8, 16:25
dereckson moved T2220: Configure listening ports for telnet connections from Bugs to Working on on the Dæghrefn board.
Sun, Feb 8, 16:25 · Dæghrefn
dereckson updated the diff for D3933: Listen for eggdrop users and bots in separate ports.

Whitespace issues

Sun, Feb 8, 16:24
dereckson added a comment to D3933: Listen for eggdrop users and bots in separate ports.
Complector (diff for Wearg eggdrop.conf)
+listen 19010 bots                                                                                                                                                                                
+listen 18010 users
Sun, Feb 8, 16:22
dereckson added a revision to T2220: Configure listening ports for telnet connections: D3933: Listen for eggdrop users and bots in separate ports.
Sun, Feb 8, 16:20 · Dæghrefn
dereckson requested review of D3933: Listen for eggdrop users and bots in separate ports.
Sun, Feb 8, 16:20
dereckson triaged T2220: Configure listening ports for telnet connections as Normal priority.
Sun, Feb 8, 16:03 · Dæghrefn
dereckson moved T1898: Decommission Ysul from Backlog to Working on on the Dæghrefn board.
Sun, Feb 8, 16:01 · Dæghrefn, Alkane, discussion, Servers
dereckson added a comment to D3932: Listen to new IPv6 address for viperserv.n.o.
*** -HQ joined the party line.
[15:50:48] Trying server irc.libera.chat:+6697
[15:50:48] Failed connect to irc.libera.chat (Vhost set in config is not available on this machine)
Sun, Feb 8, 15:51
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
Sun, Feb 8, 15:46 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson added a comment to D3932: Listen to new IPv6 address for viperserv.n.o.

IP updated for the 4 configuration files (Dæghrefn, Wearg, TC2, Æschere).

Sun, Feb 8, 15:45
dereckson requested review of D3932: Listen to new IPv6 address for viperserv.n.o.
Sun, Feb 8, 15:43
dereckson added a revision to T2212: Move eggdrops from Ysul to WindRiver: D3932: Listen to new IPv6 address for viperserv.n.o.
Sun, Feb 8, 15:43 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson added a comment to D3931: Assign ViperServ IPv6 to WindRiver.
WindRiver
$ salt-call --local state.apply roles/core/network/ipv6
local:
----------
          ID: /etc/rc.conf.d/netif/ipv6_igb0
    Function: file.managed
      Result: True
     Comment: File /etc/rc.conf.d/netif/ipv6_igb0 updated
     Started: 15:37:56.041793
    Duration: 14.764 ms
     Changes:   
              ----------
              diff:
                  --- 
                  +++ 
                  @@ -14,3 +14,5 @@
                   #   </auto-generated>
Sun, Feb 8, 15:39
dereckson updated the diff for D3931: Assign ViperServ IPv6 to WindRiver.

Aliases are for netif_ipv6.rc

Sun, Feb 8, 15:37
dereckson requested review of D3931: Assign ViperServ IPv6 to WindRiver.
Sun, Feb 8, 15:33
dereckson added a revision to T2212: Move eggdrops from Ysul to WindRiver: D3931: Assign ViperServ IPv6 to WindRiver.
Sun, Feb 8, 15:33 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson requested review of D3930: Update AAAA record for viperserv.nasqueron.org.
Sun, Feb 8, 15:17
dereckson added a revision to T2212: Move eggdrops from Ysul to WindRiver: D3930: Update AAAA record for viperserv.nasqueron.org.
Sun, Feb 8, 15:17 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson added a comment to T2212: Move eggdrops from Ysul to WindRiver.

MariaDB issue fixed, but now we've some networking inforamation to do update too:

Sun, Feb 8, 14:17 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson closed D3929: Update host for eggdrop user on db-B-001.
Sun, Feb 8, 14:17
dereckson committed rOPS404cef789f72: Update host for eggdrop user on db-B-001 (authored by dereckson).
Update host for eggdrop user on db-B-001
Sun, Feb 8, 14:17
dereckson added a comment to D3929: Update host for eggdrop user on db-B-001.

During deployment, note MariaDB created a new user nasqueron@172.27.27.35 (username was the old eggdrop name) but didn't remove the nasqueron@172.27.27.33 user, we probably need a list of missing credentials to prune for that.

Sun, Feb 8, 14:16
dereckson accepted D3929: Update host for eggdrop user on db-B-001.
Sun, Feb 8, 14:15
dereckson added a revision to T2212: Move eggdrops from Ysul to WindRiver: D3929: Update host for eggdrop user on db-B-001.
Sun, Feb 8, 14:11 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson requested review of D3929: Update host for eggdrop user on db-B-001.
Sun, Feb 8, 14:11
dereckson added a comment to T2212: Move eggdrops from Ysul to WindRiver.

Access to Vault works fine, fetching secrets from there too, including after Terraform rotation.

Sun, Feb 8, 14:02 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
Sun, Feb 8, 13:54 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson closed D3928: Don't load DNS eggdrop module.
Sun, Feb 8, 13:54
dereckson closed T2217: Don't load dns module anymore as Resolved by committing rOPS2fbe0f8ff4d2: Don't load DNS eggdrop module.
Sun, Feb 8, 13:54 · Salt, Dæghrefn
dereckson committed rOPS2fbe0f8ff4d2: Don't load DNS eggdrop module (authored by dereckson).
Don't load DNS eggdrop module
Sun, Feb 8, 13:54
dereckson accepted D3928: Don't load DNS eggdrop module.
Sun, Feb 8, 13:53
dereckson requested review of D3928: Don't load DNS eggdrop module.
Sun, Feb 8, 13:53
dereckson added a revision to T2217: Don't load dns module anymore: D3928: Don't load DNS eggdrop module.
Sun, Feb 8, 13:53 · Salt, Dæghrefn
dereckson closed D3926: Don't store Terraform state and always rotate secrets.
Sun, Feb 8, 13:21
dereckson committed rOPSb7fcb1aa0342: Don't store Terraform state and always rotate secrets (authored by dereckson).
Don't store Terraform state and always rotate secrets
Sun, Feb 8, 13:21
dereckson closed D3927: Touch deployment log on deployment server.
Sun, Feb 8, 13:20
dereckson committed rOPSd81abfe1034d: Touch deployment log on deployment server (authored by dereckson).
Touch deployment log on deployment server
Sun, Feb 8, 13:20
dereckson accepted D3927: Touch deployment log on deployment server.
Sun, Feb 8, 13:19
dereckson requested review of D3927: Touch deployment log on deployment server.
Sun, Feb 8, 13:19
dereckson accepted D3926: Don't store Terraform state and always rotate secrets.
Sun, Feb 8, 13:18
dereckson updated the diff for D3926: Don't store Terraform state and always rotate secrets.

Fix AUDIT_LOG variable

Sun, Feb 8, 13:17
dereckson added a comment to D3926: Don't store Terraform state and always rotate secrets.

Code review with Claude Sonnet 4.5 gave two improvements to the Makefile: audit log, .PHONY targets.

Sun, Feb 8, 13:01
dereckson requested review of D3926: Don't store Terraform state and always rotate secrets.
Sun, Feb 8, 13:01
dereckson closed D3925: Update secret path for Rhyne-Wyse's Vault approle credential (part 2).
Sun, Feb 8, 12:56
dereckson committed rOPS9e441d8d256a: Update secret path for Rhyne-Wyse's Vault approle credential (part 2) (authored by dereckson).
Update secret path for Rhyne-Wyse's Vault approle credential (part 2)
Sun, Feb 8, 12:56
dereckson accepted D3925: Update secret path for Rhyne-Wyse's Vault approle credential (part 2).
Sun, Feb 8, 12:56
dereckson requested review of D3925: Update secret path for Rhyne-Wyse's Vault approle credential (part 2).
Sun, Feb 8, 12:56
dereckson committed rOPS793af5119fcc: Proofread Terraform variables definition (authored by dereckson).
Proofread Terraform variables definition
Sun, Feb 8, 11:37
dereckson closed D3924: Proofread Terraform variables definition.
Sun, Feb 8, 11:37
dereckson accepted D3924: Proofread Terraform variables definition.
Sun, Feb 8, 11:37
dereckson requested review of D3924: Proofread Terraform variables definition.
Sun, Feb 8, 11:37
dereckson closed D3923: Migrate viperserv Vault AppRole to Terraform.
Sun, Feb 8, 11:25
dereckson committed rOPSabe00f4a2633: Migrate viperserv Vault AppRole to Terraform (authored by dereckson).
Migrate viperserv Vault AppRole to Terraform
Sun, Feb 8, 11:25
dereckson accepted D3923: Migrate viperserv Vault AppRole to Terraform.
Sun, Feb 8, 11:23
dereckson updated the diff for D3923: Migrate viperserv Vault AppRole to Terraform.

Update credentials fields in Salt config. Fix header.

Sun, Feb 8, 11:20
dereckson updated the diff for D3923: Migrate viperserv Vault AppRole to Terraform.

Remove Terraform policy from Salt policies list

Sun, Feb 8, 11:06
dereckson planned changes to D3923: Migrate viperserv Vault AppRole to Terraform.
Sun, Feb 8, 11:05
dereckson requested review of D3923: Migrate viperserv Vault AppRole to Terraform.
Sun, Feb 8, 11:04
dereckson added a revision to T2212: Move eggdrops from Ysul to WindRiver: D3923: Migrate viperserv Vault AppRole to Terraform.
Sun, Feb 8, 11:04 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers
dereckson updated the task description for T2212: Move eggdrops from Ysul to WindRiver.
Sun, Feb 8, 10:59 · Operations sprints (Echoes in the Void), Salt, IRC, Dæghrefn, Servers

Sat, Feb 7

dereckson closed D3922: Install Terraform on Complector.
Sat, Feb 7, 21:40
dereckson committed rOPSa46f35d23430: Install Terraform on Complector (authored by dereckson).
Install Terraform on Complector
Sat, Feb 7, 21:40
dereckson accepted D3922: Install Terraform on Complector.
Sat, Feb 7, 21:40
dereckson requested review of D3922: Install Terraform on Complector.
Sat, Feb 7, 20:55
dereckson closed D3921: Reconfigure Vault provider for Terraform.
Sat, Feb 7, 20:52
dereckson committed rOPS177ce9cb89d8: Reconfigure Vault provider for Terraform (authored by dereckson).
Reconfigure Vault provider for Terraform
Sat, Feb 7, 20:52
dereckson accepted D3921: Reconfigure Vault provider for Terraform.
Sat, Feb 7, 20:52
dereckson updated the diff for D3921: Reconfigure Vault provider for Terraform.

Split

Sat, Feb 7, 20:52
dereckson added a comment to D3921: Reconfigure Vault provider for Terraform.

We need to split that one in two different concerns.

Sat, Feb 7, 20:43