Page MenuHomeDevCentral

dereckson (Sébastien Santoro)
Nasqueron founderAdministrator

Projects (83)

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Wednesday

  • Clear sailing ahead.

User Details

User Since
Nov 11 2014, 04:38 (274 w, 6 d)
Roles
Administrator
Availability
Available

At Nasqueron, I maintain this Phabricator instance, and overview the operations infrastructure.

Website: https://www.dereckson.be/

Individual board: User-Dereckson

Recent Activity

Today

dereckson updated the task description for T1104: Create a mail desk service.
Mon, Feb 17, 06:36 · Nasqueron Operations Squad, Mail
dereckson closed T424: Prepare a OTRS Docker image as Wontfix.

Zammad - T1105 - looks better nowadays and a better fit for modern ticketing desk.

Mon, Feb 17, 06:36 · Docker images, Mail
dereckson closed T424: Prepare a OTRS Docker image, a subtask of T1104: Create a mail desk service, as Wontfix.
Mon, Feb 17, 06:36 · Nasqueron Operations Squad, Mail
dereckson committed rOPSd7ea0b4404c6: Create docker group on Dwellers (authored by dereckson).
Create docker group on Dwellers
Mon, Feb 17, 06:33
dereckson closed D2221: Create docker group on Dwellers.
Mon, Feb 17, 06:33
dereckson accepted D2221: Create docker group on Dwellers.
$ salt dwellers state.sls roles/paas-docker/devel
dwellers:
----------
          ID: docker_group
    Function: group.present
        Name: docker
      Result: True
     Comment: The following group attributes are set to be changed:
              members: ['dereckson', 'sandlayth']
     Started: 02:07:57.678065
    Duration: 330.523 ms
     Changes:
              ----------
              Final:
                  All changes applied successfully
Mon, Feb 17, 06:33
dereckson added a comment to T1105: Evaluate if Zammad wouldn't be useful.

A new version 3.2.0 has been released 2019-12-03 and contains an interesting part:

Mon, Feb 17, 06:22 · Product evaluation, Nasqueron Docker deployment squad, Mail
dereckson added a comment to T728: Deploy a MongoDB container.

A small note about why dedicated instances seem a better fit, here the resources consumed by a new container:

Mon, Feb 17, 06:10 · User-Sandlayth, Nasqueron Docker deployment squad
dereckson updated the diff for D2221: Create docker group on Dwellers.

{{ }}

Mon, Feb 17, 02:07
dereckson updated the diff for D2221: Create docker group on Dwellers.

Add missing group file

Mon, Feb 17, 02:05
dereckson added a revision to T1595: Reprovision Dwellers: D2221: Create docker group on Dwellers.
Mon, Feb 17, 02:00 · Operations sprints (Consolidate them all)
dereckson requested review of D2221: Create docker group on Dwellers.
Mon, Feb 17, 02:00
dereckson closed D2220: WIP: Install Docker development tools on Dwellers.
Mon, Feb 17, 01:29
dereckson committed rOPSa09a8ec40a3e: WIP: Install Docker development tools on Dwellers (authored by dereckson).
WIP: Install Docker development tools on Dwellers
Mon, Feb 17, 01:29
dereckson accepted D2220: WIP: Install Docker development tools on Dwellers.
Dwellers
$ sudo salt-call state.sls roles/paas-docker/devel
[ERROR   ] DNS lookup or connection check of 'ysul.nasqueron.org' failed.
[ERROR   ] Master hostname: 'ysul.nasqueron.org' not found or not responsive. Retrying in 30 seconds
local:
----------
          ID: docker_development_utilities
    Function: pkg.installed
      Result: True
     Comment: All specified packages are already installed
     Started: 01:22:53.750840
    Duration: 1107.63 ms
     Changes:
----------
          ID: docker_development_utilities
    Function: pip.installed
        Name: docker-compose
      Result: True
     Comment: Python package docker-compose was already installed
              All specified packages are already installed
     Started: 01:22:55.322302
    Duration: 1386.003 ms
     Changes:
Mon, Feb 17, 01:28
dereckson committed rOPSe74fa7db23e0: Don't allow direct login as root through SSH (authored by dereckson).
Don't allow direct login as root through SSH
Mon, Feb 17, 01:20
dereckson closed D2219: Don't allow direct login as root through SSH.
Mon, Feb 17, 01:20
dereckson updated the diff for D2220: WIP: Install Docker development tools on Dwellers.

Remove sudo, the group will be created in another change (that's a group, not a sudoers rule)

Mon, Feb 17, 01:19

Yesterday

dereckson closed T1034: Switch from root@ SSH login to sudo capabilities on every server as Resolved.
Sun, Feb 16, 04:23 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson moved T1303: Allow _documents.xml to define a status code from Backlog to Feature requests on the Keruald board.
Sun, Feb 16, 04:22 · Keruald, Nasqueron Tools
dereckson moved T1398: Allow to extract class name from a fully qualified class name expression from Backlog to Feature requests on the Keruald board.
Sun, Feb 16, 04:22 · Keruald
dereckson moved T1399: Migrate globalfunctions calls to OmniTools from Backlog to Debt on the Keruald board.
Sun, Feb 16, 04:22 · Technical debt, Auth Grove, Keruald
dereckson moved T1544: Use PHP 7.4 mb_str_split in OmniString::getBigrams from Backlog to Debt on the Keruald board.
Sun, Feb 16, 04:22 · easy, Keruald
dereckson moved T1576: Methods to count by and group by arrays from Backlog to Feature requests on the Keruald board.
Sun, Feb 16, 04:21 · easy, Keruald, Nasqueron Tools
dereckson moved T1577: Arcanist ignores phpunit.xml to run unit tests in OmniTools from Backlog to Bugs on the Keruald board.
Sun, Feb 16, 04:21 · Keruald
dereckson moved T1596: Revisit Sørensen–Dice coefficient from Backlog to Feature requests on the Keruald board.
Sun, Feb 16, 04:21 · easy, Keruald
dereckson moved T1596: Revisit Sørensen–Dice coefficient from Backlog to Dev on the easy board.
Sun, Feb 16, 04:21 · easy, Keruald
dereckson created T1596: Revisit Sørensen–Dice coefficient.
Sun, Feb 16, 04:21 · easy, Keruald
dereckson requested review of D2220: WIP: Install Docker development tools on Dwellers.
Sun, Feb 16, 03:32
dereckson added a revision to T1595: Reprovision Dwellers: D2220: WIP: Install Docker development tools on Dwellers.
Sun, Feb 16, 03:32 · Operations sprints (Consolidate them all)
dereckson accepted D2219: Don't allow direct login as root through SSH.
Sun, Feb 16, 03:31
dereckson requested review of D2219: Don't allow direct login as root through SSH.
Sun, Feb 16, 03:30
dereckson added a revision to T1034: Switch from root@ SSH login to sudo capabilities on every server: D2219: Don't allow direct login as root through SSH.
Sun, Feb 16, 03:30 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson added a project to T635: Add a VCS informative prompt to `arc shell`: Operations sprints (Consolidate them all).

zsh + starship looks a good solution too, but it's not packaged for Debian.

Sun, Feb 16, 03:28 · Operations sprints (Consolidate them all), Docker images
dereckson moved T824: Tests for SuEXEC on Ysul from Backlog to Pending review on the Operations sprints (Consolidate them all) board.
Sun, Feb 16, 03:25 · Operations sprints (Consolidate them all), Servers
dereckson added a project to T824: Tests for SuEXEC on Ysul: Operations sprints (Consolidate them all).

Tests should be extended to development servers and made optional, as we don't currently have an Apache working.

Sun, Feb 16, 03:25 · Operations sprints (Consolidate them all), Servers
dereckson closed T1162: 2017-03-01 eglide.org server outage as Resolved.
Sun, Feb 16, 03:22 · User-Sandlayth, Eglide, Servers
dereckson renamed T1034: Switch from root@ SSH login to sudo capabilities on every server from Switch from root@ SSH login to sudo capabilities on Eglide to Switch from root@ SSH login to sudo capabilities on every server.
Sun, Feb 16, 03:17 · Operations sprints (Consolidate them all), Servers, Eglide
dereckson claimed T1034: Switch from root@ SSH login to sudo capabilities on every server.

So, it works for two years. Let's restrict root login.

Sun, Feb 16, 03:17 · Operations sprints (Consolidate them all), Servers, Eglide

Sat, Feb 15

dereckson created Blog Post: New SSH keys for servers.
Sat, Feb 15, 23:50 · security, Servers
dereckson committed rOPS0e05505a365a: Normalize spaces (authored by dereckson).
Normalize spaces
Sat, Feb 15, 01:42
dereckson closed D2218: Normalize spaces.
Sat, Feb 15, 01:42
dereckson accepted D2218: Normalize spaces.
Sat, Feb 15, 01:42
dereckson requested review of D2218: Normalize spaces.
Sat, Feb 15, 01:42
dereckson committed rOPS6411e69c98b8: Use pillar information for IP and gateway in MOTD (authored by dereckson).
Use pillar information for IP and gateway in MOTD
Sat, Feb 15, 01:35
dereckson closed D2217: Use pillar information for IP and gateway in MOTD.
Sat, Feb 15, 01:35
dereckson accepted D2217: Use pillar information for IP and gateway in MOTD.
Sat, Feb 15, 01:35
dereckson requested review of D2217: Use pillar information for IP and gateway in MOTD.
Sat, Feb 15, 00:50
dereckson added a revision to T1595: Reprovision Dwellers: D2217: Use pillar information for IP and gateway in MOTD.
Sat, Feb 15, 00:50 · Operations sprints (Consolidate them all)
dereckson committed rOPS15199849f8e4: Use net-tools to setup Dwellers IPv6 tunnel (authored by dereckson).
Use net-tools to setup Dwellers IPv6 tunnel
Sat, Feb 15, 00:23
dereckson closed D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Sat, Feb 15, 00:23
dereckson accepted D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Sat, Feb 15, 00:22
dereckson added a revision to T1595: Reprovision Dwellers: D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Sat, Feb 15, 00:22 · Operations sprints (Consolidate them all)
dereckson requested review of D2216: Use net-tools to setup Dwellers IPv6 tunnel.
Sat, Feb 15, 00:22
dereckson committed rOPSefec566fbdf8: Enable Docker service (authored by dereckson).
Enable Docker service
Sat, Feb 15, 00:20
dereckson closed D2215: Enable Docker service.
Sat, Feb 15, 00:20
dereckson accepted D2215: Enable Docker service.
Sat, Feb 15, 00:20
dereckson updated the diff for D2215: Enable Docker service.

Imports are generally more at top

Sat, Feb 15, 00:18
dereckson added a revision to T1595: Reprovision Dwellers: D2215: Enable Docker service.
Sat, Feb 15, 00:04 · Operations sprints (Consolidate them all)
dereckson requested review of D2215: Enable Docker service.
Sat, Feb 15, 00:04

Fri, Feb 14

dereckson updated the task description for T1595: Reprovision Dwellers.
Fri, Feb 14, 23:58 · Operations sprints (Consolidate them all)
dereckson updated the task description for T1595: Reprovision Dwellers.
Fri, Feb 14, 23:58 · Operations sprints (Consolidate them all)
dereckson updated the task description for T1595: Reprovision Dwellers.
Fri, Feb 14, 23:56 · Operations sprints (Consolidate them all)
dereckson committed rOPSc0d212c71380: Ensure pip is installed in order to invoke it (authored by dereckson).
Ensure pip is installed in order to invoke it
Fri, Feb 14, 23:56
dereckson closed D2214: Ensure pip is installed in order to invoke it.
Fri, Feb 14, 23:56
dereckson accepted D2214: Ensure pip is installed in order to invoke it.
Dwellers
$ salt-call -ldebug state.sls roles/paas-docker/salt
[...]
local:
----------
          ID: required_python_packages_for_docker_and_salt
    Function: pkg.installed
        Name: python3-pip
      Result: True
     Comment: The following packages were installed/updated: python3-pip
     Started: 22:17:40.253082
    Duration: 9016.292 ms
     Changes:
              ----------
              python3-pip:
                  ----------
                  new:
                      9.0.3-15.el8
                  old:
              python3-setuptools:
                  ----------
                  new:
                      39.2.0-5.el8
                  old:
              python36:
                  ----------
                  new:
                      3.6.8-2.module_el8.1.0+245+c39af44f
                  old:
----------
          ID: required_python_packages_for_docker_and_salt
    Function: pip.installed
        Name: docker
      Result: True
     Comment: All packages were successfully installed
     Started: 22:17:59.460883
    Duration: 5336.004 ms
     Changes:
              ----------
              docker==4.2.0:
                  Installed
Fri, Feb 14, 23:15
dereckson updated the diff for D2214: Ensure pip is installed in order to invoke it.

Fix SLS syntax

Fri, Feb 14, 22:17
dereckson updated the diff for D2214: Ensure pip is installed in order to invoke it.

Rebase

Fri, Feb 14, 22:09
dereckson updated the diff for D2214: Ensure pip is installed in order to invoke it.

Fix syntax

Fri, Feb 14, 21:59
dereckson requested review of D2214: Ensure pip is installed in order to invoke it.
Fri, Feb 14, 21:57
dereckson added a revision to T1595: Reprovision Dwellers: D2214: Ensure pip is installed in order to invoke it.
Fri, Feb 14, 21:57 · Operations sprints (Consolidate them all)
dereckson committed rOPSf5d41ce2de3a: Don't try to install last docker-ce version on CentOS (authored by dereckson).
Don't try to install last docker-ce version on CentOS
Fri, Feb 14, 21:49
dereckson closed D2213: Don't try to install last docker-ce version on CentOS.
Fri, Feb 14, 21:49
dereckson accepted D2213: Don't try to install last docker-ce version on CentOS.
Fri, Feb 14, 21:49
dereckson updated the diff for D2213: Don't try to install last docker-ce version on CentOS.

+creates

Fri, Feb 14, 21:38
dereckson updated the diff for D2213: Don't try to install last docker-ce version on CentOS.

Confirm with -y to avoid it hangs out with salt-call

Fri, Feb 14, 21:37
dereckson updated the summary of D2213: Don't try to install last docker-ce version on CentOS.
Fri, Feb 14, 21:21
dereckson requested review of D2213: Don't try to install last docker-ce version on CentOS.
Fri, Feb 14, 21:21
dereckson added a revision to T1595: Reprovision Dwellers: D2213: Don't try to install last docker-ce version on CentOS.
Fri, Feb 14, 21:21 · Operations sprints (Consolidate them all)
dereckson committed rOPS4223a88649d2: Ignore containers if zr isn't available (authored by dereckson).
Ignore containers if zr isn't available
Fri, Feb 14, 21:10
dereckson closed D2212: Ignore containers if zr isn't available.
Fri, Feb 14, 21:10
dereckson accepted D2212: Ignore containers if zr isn't available.
Fri, Feb 14, 21:10
dereckson added a revision to T1595: Reprovision Dwellers: D2212: Ignore containers if zr isn't available.
Fri, Feb 14, 21:09 · Operations sprints (Consolidate them all)
dereckson updated the summary of D2212: Ignore containers if zr isn't available.
Fri, Feb 14, 21:09
dereckson requested review of D2212: Ignore containers if zr isn't available.
Fri, Feb 14, 21:09
dereckson moved T275: Nginx proxies request with 127.0.0.1 as IP address from Working on to Backlog on the Forum board.
Fri, Feb 14, 17:44 · DevCentral, Forum, Servers
dereckson updated the task description for T275: Nginx proxies request with 127.0.0.1 as IP address.
Fri, Feb 14, 17:43 · DevCentral, Forum, Servers
dereckson added a subtask for T275: Nginx proxies request with 127.0.0.1 as IP address: T915: Preamble script for Phabricator.
Fri, Feb 14, 17:42 · DevCentral, Forum, Servers
dereckson added a parent task for T915: Preamble script for Phabricator: T275: Nginx proxies request with 127.0.0.1 as IP address.
Fri, Feb 14, 17:42 · Docker images
dereckson added a comment to T275: Nginx proxies request with 127.0.0.1 as IP address.

Proxy is fine for DevCentral and other Phabricator containers, per T915 / D484 / 892cd0a35934.

Fri, Feb 14, 17:42 · DevCentral, Forum, Servers
dereckson closed T667: Mitigate CVE-2016-0777 in SSH clients configuration files as Resolved.

OpenSSH now mitigates this.

Fri, Feb 14, 17:40 · security, Servers
dereckson closed T1154: Etherpad containers floods journald as Resolved.

Can't repro with current Etherpad version.

Fri, Feb 14, 17:39 · Nasqueron Docker deployment squad, Servers, Technical debt
dereckson closed T1343: Migrate Salt to Python 3 as Resolved.

Done everywhere now, I've installed Salt 3000 and Python 3.6 on Dwellers.

Fri, Feb 14, 17:38 · Servers, Salt
dereckson closed T693: Add dwellers.nasqueron.org to Ysul sshguard whitelist as Wontfix.

We do'nt use sshguard anymore, as login by password is disabled, keys are required.

Fri, Feb 14, 17:37 · security, Nasqueron Docker deployment squad, Servers, Restricted Project
dereckson merged task T1517: dwellers.nasqueron.org load is too heavy into T1478: Improve Dwellers hypervisor configuration.
Fri, Feb 14, 17:37 · Servers
dereckson merged T1517: dwellers.nasqueron.org load is too heavy into T1478: Improve Dwellers hypervisor configuration.
Fri, Feb 14, 17:37 · Operations sprints (Consolidate them all), Servers
dereckson merged T309: Review Dwellers' iptables configuration into T1244: Saltize default iptables for Dwellers.
Fri, Feb 14, 17:36 · Operations sprints (Consolidate them all), Servers
dereckson merged task T309: Review Dwellers' iptables configuration into T1244: Saltize default iptables for Dwellers.
Fri, Feb 14, 17:36 · Servers
dereckson closed T744: Recycle containers on Dwellers to mitigate CVE-2015-7547, a subtask of T743: Mitigate CVE-2015-7547 DNS glibc issue, as Resolved.
Fri, Feb 14, 17:35 · Servers, Docker images, Nasqueron Docker deployment squad
dereckson closed T744: Recycle containers on Dwellers to mitigate CVE-2015-7547 as Resolved.
Fri, Feb 14, 17:35 · security, Nasqueron Docker deployment squad