Anything related to the Nasqueron server infrastructure at IaaS or PaaS levels.
Details
Details
Description
Sun, Sep 14
Sun, Sep 14
dereckson moved T1580: Deploy ACME-specific DNS server from DNS Server / KnotDNS to AcmeDNS on the DNS board.
dereckson moved T2021: Can't renew certificate with acme DNS plugin under Python 3.11 from Backlog to AcmeDNS on the DNS board.
dereckson moved T1580: Deploy ACME-specific DNS server from Backlog to DNS Server / KnotDNS on the DNS board.
dereckson moved T761: Automate to create subdomains DNS records from Backlog to DNS Server / KnotDNS on the DNS board.
dereckson moved T1925: No SRV record found for the repo 'Nasqueron' from Backlog to DNS records on the DNS board.
Not spot anymore. Python 3.11 is used on every FreeBSD systems now.
dereckson added a comment to T761: Automate to create subdomains DNS records.
Closing as a duplicate, as with T1217 task, automation is there:
- new records can be submitted as a commit against zone file
- new zones can be added by creating a new file and pillar entry
dereckson moved T1218: Provision primary DNS server from Backlog to DNS Server / KnotDNS on the DNS board.
dereckson closed T1219: Provision secondary DNS server, a subtask of T1217: Host our DNS servers, as Wontfix.
Per T2105, current solution is to use an external provider (Hurricane Electric?) to host our secondary zone.
dereckson moved T1219: Provision secondary DNS server from Backlog to DNS Server / KnotDNS on the DNS board.
dereckson moved T2014: Serve https://nasqueron.org from web-001 from Backlog to DNS records on the DNS board.
dereckson moved T2105: Use HE as secondary DNS server from Backlog to DNS Server / KnotDNS on the DNS board.
dereckson moved T1610: Deploy Jitsi Meet instance from Current focus to Backlog on the Product evaluation board.
dereckson renamed T2125: Review Vault policies from vault_secrets_by_role from Review Vault policies to Review Vault policies from vault_secrets_by_role.
Fri, Sep 12
Fri, Sep 12
dereckson moved T2123: Fix tests for operations repository from Backlog to Ops on the Technical debt board.
dereckson moved T2123: Fix tests for operations repository from Backlog to Pending review on the Servers board.
dereckson added a comment to T2123: Fix tests for operations repository.
dereckson added a revision to T2123: Fix tests for operations repository: D3664: Deploy the monitoring Vault policy.
dereckson added a revision to T2123: Fix tests for operations repository: D3663: Fix node.resolve_network tests.
Thu, Sep 11
Thu, Sep 11
dereckson added a revision to T2123: Fix tests for operations repository: D3662: Read flatter docker_networks pillar.
dereckson added a revision to T2123: Fix tests for operations repository: D3661: Avoid unittest deprecated aliases.
dereckson added a comment to T2123: Fix tests for operations repository.
Tests commits will be aggregates in datacube T2123-improve-tests-suite branch, so we can have a look of what's remaining to fix.
dereckson updated subscribers of T2123: Fix tests for operations repository.
Going to take this, as I wrote the tests suite, @DorianWinty will review.
Wed, Sep 10
Wed, Sep 10
dereckson added a comment to T2067: Deploy an OpenBSD server.
Why not port encrypt to FreeBSD?
dereckson added a comment to T2081: Deploy Snuffleupagus.
Support for PHP 8.4 is still there.
Uninstalled certbot.
Pruned old Python 3 dependencies.
Updated EPEL repo to epel-release-10-6
Updated packages
Reinstalled certbot, now running under Python 3.12 too.
dereckson added a comment to T2115: Update Dwellers packages.
Just for information, working on T2113, I've first updated the packages non related to that conflict, so I had fresh packages for both systemd and selinux config.
dereckson added a comment to T2122: Package starship for EPEL.
https://snapcraft.io/starship - last update: 27 April 2023 - latest/edge
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Was looking to offer a fix upstream, like read hostname from /proc/sys/kernel/hostname on Linux, but then I've realised this is an interaction issue with snap, starship, systemd and SELinux.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Decreasing priority, as it only occurs with Starship.
dereckson renamed T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship from systemd-hostnamed service can't be launched - SELinux blocks it to systemd-hostnamed service can't be launched - SELinux blocks it - starship.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Normal behavior observed with the policy:
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
Still an error with last packages versions.
dereckson added a comment to T2113: systemd-hostnamed service can't be launched - SELinux blocks it - starship.
audit2allow policy
dereckson added a comment to T2103: Upgrade servers to FreeBSD 14.3.
Bumping for 14.3, are still going on, it makes sense to target latest version