Page MenuHomeDevCentral

dereckson (Sébastien Santoro)
Nasqueron founderAdministrator

Projects (92)

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Wednesday

  • Clear sailing ahead.

User Details

User Since
Nov 11 2014, 04:38 (591 w, 5 d)
Roles
Administrator
Availability
Available

At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.

Website: https://www.dereckson.be/

Individual board: User-Dereckson

Recent Activity

Yesterday

dereckson added inline comments to D4006: Automate CARP activation and parameter preemption.
Sun, Mar 15, 21:26
dereckson accepted D4007: Use /boot/loader.conf.d/ for GRE module loading.
Sun, Mar 15, 20:56
dereckson requested changes to D4006: Automate CARP activation and parameter preemption.
Sun, Mar 15, 20:09

Sat, Mar 14

dereckson accepted D4004: Pemit acme.sh to run reload script.
Sat, Mar 14, 09:15
dereckson accepted D4005: Define reload CMD for mail.nasqueron.org certificate.
Sat, Mar 14, 09:15
dereckson retitled D4004: Pemit acme.sh to run reload script from Pemit acmesh to use sudo on script to Pemit acme.sh to run reload script.
Sat, Mar 14, 08:56
dereckson added a comment to D4004: Pemit acme.sh to run reload script.

(ah you did it: {{ dirs.bin }}/acmesh-dovecot_postfixReload is well without the extension in D4003)

Sat, Mar 14, 08:50
dereckson added inline comments to D4004: Pemit acme.sh to run reload script.
Sat, Mar 14, 08:49
dereckson added a comment to D4004: Pemit acme.sh to run reload script.

Oh just I notice here the .sh at line 17, but not at line 16.

Sat, Mar 14, 08:49
dereckson retitled D4003: Reload Dovecot, Postfix and nginx when certificate is renewed from Define script for reload of Dovecot and Postfix to Reload Dovecot, Postfix and nginx when certificate is renewed.
Sat, Mar 14, 08:42
dereckson accepted D4003: Reload Dovecot, Postfix and nginx when certificate is renewed.
Sat, Mar 14, 08:42

Fri, Mar 13

dereckson triaged T2273: Switch code file indent from tab to spaces as Wishlist priority.
Fri, Mar 13, 19:41 · documentation, Dæghrefn
dereckson requested review of D4002: Avoid timeout extracting info from video playlist.
Fri, Mar 13, 19:38
dereckson closed D3953: Switch to yt-dlp to get video metadata.
Fri, Mar 13, 19:36
dereckson committed rVIPER53ab9e7eb65e: Switch to yt-dlp to get video metadata (authored by dereckson).
Switch to yt-dlp to get video metadata
Fri, Mar 13, 19:36
dereckson requested review of D4001: Try to install Salt 3006.8 as test dependency.
Fri, Mar 13, 16:56
dereckson requested review of D4000: Install git-absorb on shellserver and devserver roles.
Fri, Mar 13, 16:50
dereckson closed T2267: Create PTR records for routers as Resolved.

Configured at OVH level.

Fri, Mar 13, 16:49 · DNS, Secure HA tunnels

Thu, Mar 12

dereckson accepted D3953: Switch to yt-dlp to get video metadata.
Thu, Mar 12, 22:06
dereckson retitled D3974: Synchronize nodes pillar with NetBox information from Synchronize nodes.sls with NetBox pillar to Synchronize nodes pillar with NetBox information.
Thu, Mar 12, 22:05
dereckson accepted D3974: Synchronize nodes pillar with NetBox information.
Thu, Mar 12, 22:01
dereckson accepted D3986: Configure CARP on routers.
Thu, Mar 12, 22:01
dereckson added a comment to D3988: Configure strongSwan as IPsec implementation.

Test to deploy this final version on Complector with a test=True to see if it's still no-op.

Thu, Mar 12, 22:00
dereckson requested changes to D3988: Configure strongSwan as IPsec implementation.
Thu, Mar 12, 21:59
dereckson triaged T2272: Avoid use of SELECT * in queries as Low priority.
Thu, Mar 12, 21:52 · DBA, ServPulse
dereckson triaged T2271: Refine the multiple choice fields in the schema as Normal priority.
Thu, Mar 12, 21:49 · DBA, ServPulse
dereckson triaged T1772: Design LDAP schema for Nasqueron login and identity services as High priority.

It has been asserted a LDAP is the easiest deployment road for Keycloak operation, supported out of the box, without any custom development needed. If we store users in a MariaDB or PostgreSQL database, we need custom development to explain to Keycloak how to use it.

Thu, Mar 12, 20:53 · Login and identity services
dereckson added a comment to T1771: Evaluate Keycloak as identity and access management solution.

One of the important thing to note is Keycloak federates user information from external storage.

Thu, Mar 12, 20:51 · Product evaluation, Login and identity services
dereckson placed T1771: Evaluate Keycloak as identity and access management solution up for grabs.
Thu, Mar 12, 20:06 · Product evaluation, Login and identity services

Wed, Mar 11

dereckson requested changes to D3943: Add MOTD for router-003 and router-002 to complete router configuration.

I'd suggest to use node.resolve_network to find public IP address.

Wed, Mar 11, 18:09
dereckson added inline comments to D3990: Standardize NTP configuration.
Wed, Mar 11, 17:56

Tue, Mar 10

dereckson abandoned D3179: Use 4 spaces as indent.

Done separately as part of early 2026 commits.

Tue, Mar 10, 18:31
dereckson abandoned D3243: Improved file organization in backend and frontend.

Superseded by the current stage of the project.

Tue, Mar 10, 18:30

Fri, Mar 6

dereckson closed D3954: Update dependencies for ViperServ video extraction.
Fri, Mar 6, 19:52
dereckson committed rOPS6302a43b3981: Update dependencies for ViperServ video extraction (authored by dereckson).
Update dependencies for ViperServ video extraction
Fri, Mar 6, 19:52
dereckson retitled D3996: Simplify autochmod-git from Use directly find without xargs to fix repository permissions to Simplify autochmod-git.
Fri, Mar 6, 19:50
dereckson updated the diff for D3996: Simplify autochmod-git.

I've discovered X option in chmod that solves the issue nicely, by setting executable bit only where needed (already executable files and directories), so we can keep the find approach and stay safe for whitespaces.

Fri, Mar 6, 19:49
dereckson closed D3993: Added missing " ".
Fri, Mar 6, 19:38
dereckson committed rOPSc14b09178d77: Added missing " " (authored by Duranzed).
Added missing " "
Fri, Mar 6, 19:38
dereckson added a comment to D3996: Simplify autochmod-git.

About shellcheck linter issues.

Fri, Mar 6, 19:31
dereckson requested review of D3996: Simplify autochmod-git.
Fri, Mar 6, 19:29

Thu, Mar 5

dereckson added a comment to D3994: Add Terminator plugin support for resolve-hash.

Duplicate of D3976.

Thu, Mar 5, 17:43
dereckson abandoned D3995: Add Terminator plugin support for resolve-hash.

Duplicate of D3976.

Thu, Mar 5, 17:43
dereckson added a comment to D3986: Configure CARP on routers.

OK, nice work, ready.

Thu, Mar 5, 17:43

Wed, Mar 4

dereckson added a comment to D3993: Added missing " ".

To deploy to all IntraNought VMs.

Wed, Mar 4, 11:49
dereckson accepted D3993: Added missing " ".
Wed, Mar 4, 11:49
dereckson requested changes to D3974: Synchronize nodes pillar with NetBox information.

Virtually OK, but one critical flag missing from pillarize for ongoing IPv6 connectivity

Wed, Mar 4, 07:37
dereckson added a comment to T2269: Failed to start Configure 4to6 tunnel through Hurricane Electric.

For context, when we apply Salt configuration, it currently checks if ipv6-setup-tunnel is running.

Wed, Mar 4, 07:34 · Salt, Servers, IPv6
dereckson updated the task description for T2269: Failed to start Configure 4to6 tunnel through Hurricane Electric.
Wed, Mar 4, 07:33 · Salt, Servers, IPv6
dereckson updated the task description for T2269: Failed to start Configure 4to6 tunnel through Hurricane Electric.
Wed, Mar 4, 07:32 · Salt, Servers, IPv6
dereckson moved T2269: Failed to start Configure 4to6 tunnel through Hurricane Electric from Backlog to Servers on the IPv6 board.
Wed, Mar 4, 07:32 · Salt, Servers, IPv6
dereckson edited the content of Python track.
Wed, Mar 4, 07:32 · Python
dereckson updated subscribers of T1694: Cache hash queries.

@Duranzed As a follow-up for the Terminator plugin, that one could be interesting too.

Wed, Mar 4, 07:31 · User-Dereckson, CLI, Resolve hash
dereckson requested changes to D3976: Add plugin for terminator to resolve hashes.

Plugin works, but now we need to polish the two README files.

Wed, Mar 4, 07:31
dereckson accepted D3979: Retrieve CARP configuration for a specific node.
Wed, Mar 4, 07:29
dereckson retitled D3979: Retrieve CARP configuration for a specific node from add helper get_carp_entries() to _modules/node.py and unit tests to Retrieve CARP configuration for a specific node.
Wed, Mar 4, 07:29
dereckson added a comment to D3986: Configure CARP on routers.

Configuration logic. Looks good to me.

Wed, Mar 4, 07:27
dereckson retitled D3986: Configure CARP on routers from Add CARP configuration to Configure CARP on routers.
Wed, Mar 4, 07:14
dereckson retitled D3986: Configure CARP on routers from Add CARP configuration in role/router/carp/carp.sls to Add CARP configuration.
Wed, Mar 4, 07:14
dereckson updated the summary of D3986: Configure CARP on routers.
Wed, Mar 4, 07:14
dereckson requested changes to D3988: Configure strongSwan as IPsec implementation.

Service part OK.

Wed, Mar 4, 07:14
dereckson accepted D3987: Allow all servers to read IPsec in Vault.
Wed, Mar 4, 07:03 · User-Duranzed
dereckson retitled D3987: Allow all servers to read IPsec in Vault from Vault configuration to read ipsec key to Allow all servers to read IPsec in Vault.
Wed, Mar 4, 07:01 · User-Duranzed
dereckson retitled D3988: Configure strongSwan as IPsec implementation from IPsec strongswan configuration to Configure strongSwan as IPsec implementation.
Wed, Mar 4, 06:49
dereckson updated the summary of D3989: Add dark mode toggle button.
Wed, Mar 4, 06:44
dereckson added a comment to D3992: Fix scrollbar layout shift on all pages.

Per https://cbea.ms/git-commit/ titles of your commit messages should be much shorter.

Wed, Mar 4, 06:42
dereckson requested changes to D3990: Standardize NTP configuration.
Wed, Mar 4, 06:38
dereckson added a comment to D3990: Standardize NTP configuration.

Pillar OK.

Wed, Mar 4, 06:34
dereckson added a reviewer for D3992: Fix scrollbar layout shift on all pages: ieli.
Wed, Mar 4, 06:18

Tue, Mar 3

dereckson added a comment to D3988: Configure strongSwan as IPsec implementation.

No link to a task in description?

Tue, Mar 3, 17:59
dereckson retitled D3990: Standardize NTP configuration from Standardize NTP configuration (T1223) to Standardize NTP configuration.
Tue, Mar 3, 17:58
dereckson added a revision to T1223: Configure NTP in rOPS: D3990: Standardize NTP configuration.
Tue, Mar 3, 17:58 · Servers, Salt
dereckson accepted D3991: Change db-A-001 to db-a-001 and db-B-001 to db-b-001 on all files.

OK for Wolfplex too.

Tue, Mar 3, 17:57

Mon, Mar 2

dereckson added a member for Trusted users: Chenani-MohamedAmine.
Mon, Mar 2, 07:25

Sat, Feb 28

dereckson added a comment to D3983: Add new SSH key for new ptdradmin PC-GUI computer.

Applied to WindRiver.

Sat, Feb 28, 17:00
dereckson closed D3983: Add new SSH key for new ptdradmin PC-GUI computer.
Sat, Feb 28, 16:58
dereckson committed rOPSa31b892b1d11: Add new SSH key for new ptdradmin PC-GUI computer (authored by ptdradmin).
Add new SSH key for new ptdradmin PC-GUI computer
Sat, Feb 28, 16:58
dereckson requested review of D3984: Help to install Arcanist dependencies.
Sat, Feb 28, 16:56
dereckson accepted D3983: Add new SSH key for new ptdradmin PC-GUI computer.

Request authenticated through IRC + DevCentral commit + prior knowledge of upcoming commit irl + familiar pattern of activity.

Sat, Feb 28, 16:52
dereckson retitled D3983: Add new SSH key for new ptdradmin PC-GUI computer from ptdradmin: Add new SSH key for PC-GUI to Add new SSH key for new ptdradmin PC-GUI computer.
Sat, Feb 28, 16:51

Thu, Feb 26

dereckson added a comment to T2266: Improve Python requirements for Operations repository.

@yousra I think pip install salt==3006.8 should work, with dependencies.

Thu, Feb 26, 00:45 · Python, Servers, Regression, Salt
dereckson added a reviewer for D3978: Use jdiff instead of jsondiff: yousra.

Caught this issue during dependencies test.

Thu, Feb 26, 00:17
dereckson requested review of D3978: Use jdiff instead of jsondiff.
Thu, Feb 26, 00:17
dereckson added a comment to T2266: Improve Python requirements for Operations repository.

Salt dependencies are reasonable enough to add to requirements.txt:

Thu, Feb 26, 00:11 · Python, Servers, Regression, Salt

Wed, Feb 25

dereckson moved T1695: Write a Terminator plugin to resolve hashes from Next to In progress on the Resolve hash board.
Wed, Feb 25, 23:44 · User-Duranzed, Python, good-first-issue, Resolve hash
dereckson awarded D3976: Add plugin for terminator to resolve hashes a Like token.
Wed, Feb 25, 23:42
dereckson requested changes to D3976: Add plugin for terminator to resolve hashes.
Wed, Feb 25, 23:42
dereckson added a comment to D3976: Add plugin for terminator to resolve hashes.

Plugin works, but we need more metadata:

Wed, Feb 25, 23:41
dereckson added a comment to T2266: Improve Python requirements for Operations repository.

If Salt dependencies are the issue, a possibility is to define requirements from https://github.com/saltstack/salt/tree/master/requirements

Wed, Feb 25, 23:37 · Python, Servers, Regression, Salt
dereckson claimed T2266: Improve Python requirements for Operations repository.
Wed, Feb 25, 23:35 · Python, Servers, Regression, Salt
dereckson triaged T2267: Create PTR records for routers as High priority.
Wed, Feb 25, 23:35 · DNS, Secure HA tunnels
dereckson raised the priority of T2266: Improve Python requirements for Operations repository from Normal to High.
Wed, Feb 25, 17:28 · Python, Servers, Regression, Salt
dereckson triaged T2266: Improve Python requirements for Operations repository as Normal priority.
Wed, Feb 25, 17:28 · Python, Servers, Regression, Salt
dereckson created P386 Packages for operations virtual environment.
Wed, Feb 25, 17:26

Mon, Feb 23

dereckson added a revision to T1695: Write a Terminator plugin to resolve hashes: D3976: Add plugin for terminator to resolve hashes.
Mon, Feb 23, 18:14 · User-Duranzed, Python, good-first-issue, Resolve hash
dereckson updated the summary of D3976: Add plugin for terminator to resolve hashes.
Mon, Feb 23, 18:14
dereckson requested changes to D3976: Add plugin for terminator to resolve hashes.
Mon, Feb 23, 17:57
dereckson added a comment to D3976: Add plugin for terminator to resolve hashes.

Repository move

Mon, Feb 23, 17:57
dereckson added a comment to D3976: Add plugin for terminator to resolve hashes.

Not for the operations repository, it's for rRESOLVEHASH.

Mon, Feb 23, 17:29

Sat, Feb 21

dereckson added a comment to T2263: Document GitLab token procedure.

For (1), it was disabled between March 2022 (D2569) and August 2024 (forum thread reporting the issue).

Sat, Feb 21, 14:36 · documentation, Resolve hash