Page MenuHomeDevCentral
Projects security

securityTag
ActivePublic
Watch Project

Members (1)

Watchers

  • This project does not have any watchers.
  • View All

Details

Description

This tag identifies security issue.

Recent Activity
View All

Yesterday

dereckson updated the task description for T2362: Create a modular authentication tool.
Wed, Sep 16, 08:27 · Taak, security, Servers

Tue, Sep 15

dereckson triaged T2362: Create a modular authentication tool as Normal priority.
Tue, Sep 15, 14:54 · Taak, security, Servers

Sun, Sep 6

dereckson updated the task description for T2359: Manage properly Terraform states.
Sun, Sep 6, 21:11 · Vault, Salt, security, Servers
dereckson closed T2359: Manage properly Terraform states as Resolved.
Sun, Sep 6, 19:05 · Vault, Salt, security, Servers
dereckson added a comment to T2359: Manage properly Terraform states.

Terraform state files can contain both personal information (ovh/ovh) or credentials (ovh/ovh, hashicorp/vault).
As such, they'll benefit to be stored locally and encrypted as rest.

Sun, Sep 6, 19:02 · Vault, Salt, security, Servers
dereckson added a revision to T2359: Manage properly Terraform states: D4207: Wrap tofu or terraform command to manage encrypted state.
Sun, Sep 6, 09:17 · Vault, Salt, security, Servers

Sat, Sep 5

dereckson triaged T2359: Manage properly Terraform states as High priority.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson claimed T2359: Manage properly Terraform states.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson moved T2359: Manage properly Terraform states from Backlog to Servers config on the Salt board.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers
dereckson added projects to T2359: Manage properly Terraform states: security, Salt, Vault.
Sat, Sep 5, 23:28 · Vault, Salt, security, Servers

Sun, Aug 23

Sandlayth added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A. Keep access

Sun, Aug 23, 20:46 · security, Servers
ptdradmin added a comment to T2342: Validate privileged access - ops.

A. Keep access

Sun, Aug 23, 19:37 · security, Servers
dereckson moved T2340: Deploy Restic client to automate files backups from Backlog to Working on on the security board.
Sun, Aug 23, 11:57 · security, Servers, Backups
dereckson moved T2342: Validate privileged access - ops from Backlog to Working on on the security board.
Sun, Aug 23, 11:57 · security, Servers
dereckson moved T2343: Validate privileged access - nasqueron-dev-docker from Backlog to Working on on the security board.
Sun, Aug 23, 11:57 · security, Servers
dereckson updated subscribers of T2343: Validate privileged access - nasqueron-dev-docker.

Cohort 1 accounts have been successfully removed from Dwellers.

Sun, Aug 23, 11:56 · security, Servers

Sat, Aug 22

ptdradmin added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A-Keep acces - Anubis tester

Sat, Aug 22, 18:46 · security, Servers

Fri, Aug 21

DorianWinty added a comment to T2342: Validate privileged access - ops.

A. Keep access

Fri, Aug 21, 16:22 · security, Servers

Thu, Aug 20

dereckson added a revision to T2343: Validate privileged access - nasqueron-dev-docker: D4170: Remove inactive users from nasqueron-dev-docker group.
Thu, Aug 20, 19:32 · security, Servers

Aug 17 2026

dereckson triaged T2345: Scan FreeBSD packages and releases with Serpico as Wishlist priority.
Aug 17 2026, 15:48 · security, Product evaluation

Aug 16 2026

dereckson updated subscribers of T2343: Validate privileged access - nasqueron-dev-docker.

Cohort 1. Users with access only to nasqueron-dev-docker but not to ops.

Aug 16 2026, 18:49 · security, Servers
dereckson added a comment to T2343: Validate privileged access - nasqueron-dev-docker.

A. Keep access - currently maintaining PHP images.

Aug 16 2026, 18:46 · security, Servers
dereckson added a comment to T2342: Validate privileged access - ops.

A. Keep access

Aug 16 2026, 18:46 · security, Servers
dereckson triaged T2343: Validate privileged access - nasqueron-dev-docker as Normal priority.
Aug 16 2026, 18:45 · security, Servers
dereckson added projects to T2342: Validate privileged access - ops: Servers, security.
Aug 16 2026, 18:44 · security, Servers

Aug 15 2026

dereckson triaged T2340: Deploy Restic client to automate files backups as Normal priority.
Aug 15 2026, 06:52 · security, Servers, Backups

Jul 4 2026

dereckson closed T2333: Upgrade OpenSSH version used on DevCentral as Resolved.
Jul 4 2026, 13:12 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security
dereckson added a comment to T2333: Upgrade OpenSSH version used on DevCentral.
  • Updated to Debian 12, then 13
  • /usr merge process done manually, with the help of statically compiled busybox
  • reinstalled libwebp6_0.6.1-2.1+deb11u2_amd64.deb to avoid to update PHP
Jul 4 2026, 13:08 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security
dereckson claimed T2333: Upgrade OpenSSH version used on DevCentral.
Jul 4 2026, 12:17 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security
dereckson added a comment to T2333: Upgrade OpenSSH version used on DevCentral.

Currently runs under Debian 11, target would be Debian 13.

Jul 4 2026, 12:17 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security

Jul 2 2026

dereckson triaged T2333: Upgrade OpenSSH version used on DevCentral as High priority.
Jul 2 2026, 14:18 · Nasqueron security operations squad, Nasqueron Docker deployment squad, Docker images, security

Jun 14 2026

dereckson moved T2107: j'aimerais avoir une présence permanente sur internet from Backlog to Project on the Eglide board.
Jun 14 2026, 15:04 · Eglide, security
dereckson closed T2183: Detect legacy SHA-1 RSA keys as Wontfix.

Our Salt state core/sshd does not set PubkeyAcceptedAlgorithms, so ssh-rsa (SHA-1) is blocked by default — this has been the case since OpenSSH 8.8 (released 2021-09-26, see https://www.openssh.com/txt/release-8.8).

Jun 14 2026, 14:58 · security, Python, Eglide, Servers, Operations sprints (Echoes in the Void)

Apr 22 2026

yousra added a revision to T2318: Restart Salt minion service after configuration change: D4092: Add DNS SOA serial validation pre-commit hook.
Apr 22 2026, 22:06 · security, Vault, Salt
yousra added a comment to T2318: Restart Salt minion service after configuration change.

The error occured is (T2315) :

Apr 22 2026, 11:19 · security, Vault, Salt
dereckson updated subscribers of T2318: Restart Salt minion service after configuration change.
Apr 22 2026, 11:14 · security, Vault, Salt
dereckson moved T2318: Restart Salt minion service after configuration change from Backlog to Bug and issues on the Salt board.
Apr 22 2026, 11:14 · security, Vault, Salt
dereckson triaged T2318: Restart Salt minion service after configuration change as Normal priority.
Apr 22 2026, 11:14 · security, Vault, Salt

Apr 3 2026

dereckson triaged T2297: Serve HTTP 3 traffic as Normal priority.
Apr 3 2026, 19:54 · Alkane, security, Servers

Mar 25 2026

dereckson moved T1513: Propagate certificate to Openfire server from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:32 · TLS certificates, XMPP, security, Servers
dereckson moved T1602: Provision ACME DNS credentials for core domains on each servers from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, Operations sprints (Ignite Alkane Propulsion), security, Servers
dereckson moved T1342: Let's encrypt on Debian use logrotate from Backlog to Let's Encrypt - legacy on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, security, Servers, Eglide, Salt
dereckson moved T2112: Renew Vault web server certificate automatically from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:31 · TLS certificates, security, Servers
dereckson moved T2155: Review rotation for acme.sh logs from Backlog to Let's Encrypt - acme.sh on the TLS certificates board.
Mar 25 2026, 09:30 · TLS certificates, Restricted Project, security, Servers

Mar 23 2026

dereckson merged task T1524: Monitor sudo files on servers into T2286: Detect configuration drift by computing difference between Salt states and deployed.
Mar 23 2026, 09:09 · Eglide, security, Servers
dereckson closed T1524: Monitor sudo files on servers as Wontfix.

With Salt, sudo files content are now managed from rOPS.

Mar 23 2026, 09:09 · Eglide, security, Servers

Mar 22 2026

dereckson triaged T2107: j'aimerais avoir une présence permanente sur internet as Wishlist priority.
Mar 22 2026, 23:58 · Eglide, security
dereckson added a comment to T1861: Configure static IPv6 on WindRiver.

Next: configure DNS records

Mar 22 2026, 19:08 · security, Servers, IPv6
dereckson changed the visibility for T2143: Hash Tomcat credentials.
Mar 22 2026, 19:04 · Servers, Nasqueron Docker deployment squad, security
dereckson shifted T2143: Hash Tomcat credentials from the Restricted Space space to the S1 Nasqueron space.
Mar 22 2026, 19:03 · Servers, Nasqueron Docker deployment squad, security
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator