Page MenuHomeDevCentral

ServersFolder
ActivePublic

Watchers

  • This project does not have any watchers.
  • View All

Details

Description

Anything related to the Nasqueron server infrastructure at IaaS or PaaS levels.

Recent Activity

Fri, Nov 21

dereckson updated subscribers of T2129: Rotate nginx logs on FreeBSD servers.

Configuration is ready.

Fri, Nov 21, 23:56 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers
dereckson moved T2129: Rotate nginx logs on FreeBSD servers from Working on to To review/deploy on the Operations sprints (Echoes in the Void) board.
Fri, Nov 21, 23:52 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers
sandrined added a revision to T2129: Rotate nginx logs on FreeBSD servers: D3889: Rotate nginx logs on PaaS Alkane.
Fri, Nov 21, 09:28 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers

Wed, Nov 19

dereckson added a comment to T2130: Rotate nginx logs on PaaS Docker.

Next step: deploy to docker-002, and ensure D3622 is already deployed there too.

Wed, Nov 19, 23:19 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers
dereckson moved T2139: Deploy Zulip from Backlog to Working on on the Nasqueron Docker deployment squad board.
Wed, Nov 19, 23:18 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers, Grand Unified Theory, Product evaluation
dereckson moved T2139: Deploy Zulip from Backlog to Working on on the Operations sprints (Echoes in the Void) board.
Wed, Nov 19, 23:18 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers, Grand Unified Theory, Product evaluation
dereckson moved T2139: Deploy Zulip from Backlog to Current focus on the Product evaluation board.
Wed, Nov 19, 23:17 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers, Grand Unified Theory, Product evaluation
dereckson added a project to T2139: Deploy Zulip: Operations sprints (Echoes in the Void).
Wed, Nov 19, 23:17 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers, Grand Unified Theory, Product evaluation
dereckson assigned T2129: Rotate nginx logs on FreeBSD servers to sandrined.

@sandrined Could you publish the commit for this change for review?

Wed, Nov 19, 23:16 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers
dereckson moved T2129: Rotate nginx logs on FreeBSD servers from Backlog to Working on on the Operations sprints (Echoes in the Void) board.
Wed, Nov 19, 23:15 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers
dereckson moved T2130: Rotate nginx logs on PaaS Docker from Working on to To review/deploy on the Operations sprints (Echoes in the Void) board.
Wed, Nov 19, 23:15 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers
dereckson added a comment to T2130: Rotate nginx logs on PaaS Docker.

Current status: deployed to Dwellers

Wed, Nov 19, 23:14 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers

Tue, Nov 18

sandrined added a revision to T2139: Deploy Zulip: D3887: Add CNAME chat.nasqueron.org to www3.nasqueron.org.
Tue, Nov 18, 15:35 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers, Grand Unified Theory, Product evaluation

Mon, Nov 17

sandrined claimed T2139: Deploy Zulip.

Deployment on Dwellers

Mon, Nov 17, 15:59 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers, Grand Unified Theory, Product evaluation

Sat, Nov 15

dereckson updated the task description for T2129: Rotate nginx logs on FreeBSD servers.
Sat, Nov 15, 11:38 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers
dereckson updated the task description for T2129: Rotate nginx logs on FreeBSD servers.
Sat, Nov 15, 11:37 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers
sandrined added a project to T2129: Rotate nginx logs on FreeBSD servers: Operations sprints (Echoes in the Void).
Sat, Nov 15, 11:01 · Operations sprints (Echoes in the Void), privacy, Alkane, Servers

Thu, Nov 13

sandrined added a revision to T2130: Rotate nginx logs on PaaS Docker: D3884: Rotate nginx logs on PaaS Docker.
Thu, Nov 13, 09:00 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers

Wed, Nov 12

sandrined moved T2130: Rotate nginx logs on PaaS Docker from Backlog to Working on on the Operations sprints (Echoes in the Void) board.
Wed, Nov 12, 13:09 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers
sandrined claimed T2130: Rotate nginx logs on PaaS Docker.
Wed, Nov 12, 12:52 · Operations sprints (Echoes in the Void), Nasqueron Docker deployment squad, Servers

Tue, Nov 11

dereckson closed T2083: Drop PostgreSQL custom build with XML support on dbserver-role as Resolved.
Tue, Nov 11, 18:37 · Operations sprints (Echoes in the Void), Salt, Servers
dereckson added a revision to T2083: Drop PostgreSQL custom build with XML support on dbserver-role: D3882: Revert "Build PostgreSQL with XML support on FreeBSD".
Tue, Nov 11, 18:22 · Operations sprints (Echoes in the Void), Salt, Servers
dereckson moved T2186: Upgrade to PostgreSQL 17 from Working on to Next on the Operations sprints (Echoes in the Void) board.
Tue, Nov 11, 16:07 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson updated the task description for T2186: Upgrade to PostgreSQL 17.
Tue, Nov 11, 16:07 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson updated the task description for T2186: Upgrade to PostgreSQL 17.
Tue, Nov 11, 16:07 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson lowered the priority of T2186: Upgrade to PostgreSQL 17 from Unbreak Now! to High.

Decreasing priority as no wheelwar will exist on db-A: php83-pdo_pgsql isn't declared there.

Tue, Nov 11, 16:06 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson claimed T2083: Drop PostgreSQL custom build with XML support on dbserver-role.

Confirmed for recent package:

Tue, Nov 11, 13:57 · Operations sprints (Echoes in the Void), Salt, Servers
dereckson added a revision to T2186: Upgrade to PostgreSQL 17: D3874: Upgrade PostgreSQL version to 17.
Tue, Nov 11, 13:53 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson moved T2186: Upgrade to PostgreSQL 17 from Next to Working on on the Operations sprints (Echoes in the Void) board.
Tue, Nov 11, 13:50 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson claimed T2186: Upgrade to PostgreSQL 17.

Taking this, we've PostgreSQL deinstalled on WindRiver; as we're on a UNIX system, it still runs without any issue as long as it doesn't need to load dynamically a library, accepts connection, serves traffic but software isn't there anymore.

Tue, Nov 11, 13:50 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson closed T2185: Create PostgreSQL database on WindRiver to test keruald Keruald Database as Resolved.
Tue, Nov 11, 02:43 · Servers, DBA, Keruald
dereckson added a revision to T2185: Create PostgreSQL database on WindRiver to test keruald Keruald Database: D3872: Create PostgreSQL database for Keruald tests.
Tue, Nov 11, 02:37 · Servers, DBA, Keruald
dereckson added a comment to T2187: Create a separate PostgreSQL log.

Each test run produces this:

Nov 11 02:29:33 windriver postgres[63389]: [19-1] 2025-11-11 02:29:33.804 UTC [63389] ERROR:  relation "nonexisting" does not exist at character 13
Nov 11 02:29:33 windriver postgres[63389]: [19-2] 2025-11-11 02:29:33.804 UTC [63389] STATEMENT:  DELETE FROM nonexisting
Nov 11 02:29:34 windriver postgres[63402]: [19-1] 2025-11-11 02:29:34.181 UTC [63402] ERROR:  relation "nonexisting" does not exist at character 15
Nov 11 02:29:34 windriver postgres[63402]: [19-2] 2025-11-11 02:29:34.181 UTC [63402] STATEMENT:  SELECT * FROM nonexisting
Nov 11 02:29:34 windriver postgres[63403]: [19-1] 2025-11-11 02:29:34.209 UTC [63403] ERROR:  relation "nonexisting" does not exist at character 15
Nov 11 02:29:34 windriver postgres[63403]: [19-2] 2025-11-11 02:29:34.209 UTC [63403] STATEMENT:  SELECT * FROM nonexisting
Nov 11 02:29:34 windriver postgres[63408]: [19-1] 2025-11-11 02:29:34.357 UTC [63408] ERROR:  relation "not_existing_table" does not exist
Nov 11 02:29:34 windriver postgres[63408]: [19-2] 2025-11-11 02:29:34.357 UTC [63408] STATEMENT:  TRUNCATE not_existing_table
Nov 11 02:29:34 windriver postgres[63409]: [19-1] 2025-11-11 02:29:34.385 UTC [63409] ERROR:  relation "not_existing" does not exist
Nov 11 02:29:34 windriver postgres[63409]: [19-2] 2025-11-11 02:29:34.385 UTC [63409] STATEMENT:  TRUNCATE not_existing
Nov 11 02:29:34 windriver postgres[63416]: [19-1] 2025-11-11 02:29:34.591 UTC [63416] FATAL:  password authentication failed for user "notexisting"
Nov 11 02:29:34 windriver postgres[63416]: [19-2] 2025-11-11 02:29:34.591 UTC [63416] DETAIL:  Role "notexisting" does not exist.
Nov 11 02:29:34 windriver postgres[63416]: [19-3]       Connection matched pg_hba.conf line 22: "host    all             all             127.0.0.1/32            scram-sha-256"

I guess we could avoid to post PostgreSQL logs directly in /var/log/messages.

Tue, Nov 11, 02:33 · DBA, Servers, Salt, Operations sprints (Echoes in the Void)
dereckson triaged T2187: Create a separate PostgreSQL log as Normal priority.
Tue, Nov 11, 02:33 · DBA, Servers, Salt, Operations sprints (Echoes in the Void)
dereckson added a comment to T2185: Create PostgreSQL database on WindRiver to test keruald Keruald Database.

Each test run produces this:

Tue, Nov 11, 02:30 · Servers, DBA, Keruald
dereckson added projects to T2186: Upgrade to PostgreSQL 17: Servers, DBA.
Tue, Nov 11, 02:13 · DBA, Servers, Operations sprints (Echoes in the Void)
dereckson added a comment to T2185: Create PostgreSQL database on WindRiver to test keruald Keruald Database.

Actually, we use the same database name than for MariaDB / MySQl:

Tue, Nov 11, 01:47 · Servers, DBA, Keruald
dereckson triaged T2185: Create PostgreSQL database on WindRiver to test keruald Keruald Database as Normal priority.
Tue, Nov 11, 01:41 · Servers, DBA, Keruald

Mon, Nov 10

dereckson removed a project from T1600: Automate staging commit craft: good-first-issue.
Mon, Nov 10, 14:18 · documentation, Salt, Operations sprints (Consolidate them all), Servers
dereckson added a comment to T2183: Detect legacy SHA-1 RSA keys.

Bruteforce attack scenario possible, so we're only interested by usernames defined in users.sls, not by "root" (can't login by SSH) or generic accounts like "docker" (doesn't exist):

Mon, Nov 10, 01:57 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)
dereckson updated the task description for T2183: Detect legacy SHA-1 RSA keys.
Mon, Nov 10, 01:55 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)
dereckson updated the task description for T2183: Detect legacy SHA-1 RSA keys.
Mon, Nov 10, 01:47 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)
dereckson updated the task description for T2183: Detect legacy SHA-1 RSA keys.
Mon, Nov 10, 01:16 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)
dereckson added a project to T2183: Detect legacy SHA-1 RSA keys: Python.
Mon, Nov 10, 00:47 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)
dereckson moved T1633: Collect metrics from RabbitMQ from Backlog to Next on the Servers board.
Mon, Nov 10, 00:45 · Monitoring and reporting, Python, Operations sprints (Echoes in the Void), Servers
dereckson moved T1633: Collect metrics from RabbitMQ from Backlog to Prometheus on the Monitoring and reporting board.
Mon, Nov 10, 00:45 · Monitoring and reporting, Python, Operations sprints (Echoes in the Void), Servers
dereckson edited projects for T1633: Collect metrics from RabbitMQ, added: Operations sprints (Echoes in the Void), Python, Monitoring and reporting; removed Operations sprints (Consolidate them all).
Mon, Nov 10, 00:45 · Monitoring and reporting, Python, Operations sprints (Echoes in the Void), Servers
dereckson added a comment to T1633: Collect metrics from RabbitMQ.

Checking the RabbitMQ Monitoring with Prometheus guide:

  • we're OK for cluster name
  • to get sensible values for rate() in Grafana, we need to configure Prometheus to scrape RabbitMQ every 15s ; according Prometheus configuration, the value scrape_interval can be set at job level
Mon, Nov 10, 00:45 · Monitoring and reporting, Python, Operations sprints (Echoes in the Void), Servers
dereckson updated the task description for T1633: Collect metrics from RabbitMQ.
Mon, Nov 10, 00:32 · Monitoring and reporting, Python, Operations sprints (Echoes in the Void), Servers
dereckson updated the task description for T1633: Collect metrics from RabbitMQ.
Mon, Nov 10, 00:28 · Monitoring and reporting, Python, Operations sprints (Echoes in the Void), Servers