Activity
From 11/14/2019 to 12/13/2019
12/10/2019
- 05:04 PM Open Infrastructure Task #7456 (Rejected): Prototype support for IPv6 only mail servers
- * incoming via bounce/transfer host
** whitelist of domains + smarthost settings?
* outgoing
** check whether MX ...
12/09/2019
- 03:04 PM Open Infrastructure Task #6601: Setup the arista switches at place6-east and place9
- place9 is no more/ partially moved to place10
- 11:54 AM Open Infrastructure Task #6601 (Closed): Setup the arista switches at place6-east and place9
- 03:02 PM Open Infrastructure Task #7185: Setup network monitoring system on new off-site VPS
- ABK is added to sre@
imap mailbox creation is pending - 11:46 AM Open Infrastructure Task #7185 (Seen): Setup network monitoring system on new off-site VPS
- 11:57 AM hack4glarus-2019-winter Task #7365 (Closed): Create an IPv6 only bootable network
- 11:33 AM hack4glarus-2019-winter Task #7365 (Resolved): Create an IPv6 only bootable network
- 11:54 AM Open Infrastructure Task #7026 (Closed): place9 hacking for getting ceph + netboot running
- 11:54 AM Open Infrastructure Task #6982 (Closed): Ensure that setting up a new ceph cluster is less than 5 minutes of work
- 11:54 AM Open Infrastructure Task #6582 (Closed): Setup the first router
- 11:46 AM Open Infrastructure Task #7438 (Seen): Explore local ucloud setup
- 11:46 AM Open Infrastructure Task #7437 (Seen): Run ucloud with a single authentication token
- 11:46 AM Open Infrastructure Task #7409 (Seen): Replace ipv4 on internal routes with multip protocol IPv6
- 11:46 AM Open Infrastructure Task #7312 (Seen): Ensure that all available disks are correctly used in ceph
- 11:46 AM Open Infrastructure Task #7261 (Seen): Create ipv6-spoofing nebula n-interface for place5 and understand how and why it exists
- 11:46 AM Open Infrastructure Task #7162 (Seen): Submit a patch for the alpine bird2 package to run as user bird
- 11:46 AM Open Infrastructure Task #7114 (Seen): Test performance of tayga-mt
12/07/2019
- 12:50 PM Open Infrastructure Task #7439 (Rejected): Add support for different authentication methods
- * local/no authentication
* remote
** uotp
** ldap
** etcd based (???) - 12:37 PM Open Infrastructure Task #7438 (Closed): Explore local ucloud setup
- * no public listeners
* all local
* no authentication
* no ceph by default - 12:35 PM Open Infrastructure Task #7437 (Closed): Run ucloud with a single authentication token
- * No uotp
* No ldap
* No nothing - 10:58 AM Open Infrastructure Task #7436 (In Progress): Hack-a-ucloud-weekend (2019-12-07)
- 10:57 AM Open Infrastructure Task #7436 (New): Hack-a-ucloud-weekend (2019-12-07)
- Doc/uotp seems to be outdated:...
- 10:47 AM Open Infrastructure Task #7436 (In Progress): Hack-a-ucloud-weekend (2019-12-07)
- 10:22 AM Open Infrastructure Task #7436 (Closed): Hack-a-ucloud-weekend (2019-12-07)
- h2. objective
* get ucloud into a customer usable state
h2. Tasks
* how does a user interact with ucloud?
*...
12/06/2019
- 12:44 AM Open Infrastructure Task #7427 (Rejected): Rough draft to support console on our VMs
- * Migrate dynamicweb user base to ldap
** write script to migrate users (passwords? do we have to reset / have them ...
12/05/2019
- 07:20 PM Open Infrastructure Task #7182 (Resolved): Update router configuration for place5
- 02:37 PM Open Infrastructure Task #7182: Update router configuration for place5
- done
- 06:09 PM Open Infrastructure Task #7156 (Closed): Add new sunrise link to infrastrucure, introduce policy routing
- Added long time ago
- 12:22 PM Open Infrastructure Task #7402 (Feedback): Reproduce issues in ucloud-pay
- Things are setup at 2a0a:e5c0:0:5:0:78ff:fe11:d75c
- 11:38 AM Open Infrastructure Task #7400: Switch all servers to IPv6 only netboot
- place5 setup is continuing on 12-05
12/04/2019
- 10:05 AM Open Infrastructure Task #7172 (Closed): Setup new VM/service: search.ungleich.ch
12/03/2019
- 11:00 PM hack4glarus-2019-winter Task #7366: Finish the first levels of the ungleich-game
- Files
- 04:23 PM Open Infrastructure Task #7400: Switch all servers to IPv6 only netboot
- place5 to de done on 2019-12-04
- 04:16 PM Open Infrastructure Task #7172 (Resolved): Setup new VM/service: search.ungleich.ch
- Verified and finished search.ungleich.ch so it's production ready.
cdist types are created, manifest is updated. - 04:16 PM Open Infrastructure Task #7409 (Closed): Replace ipv4 on internal routes with multip protocol IPv6
- Current limitation: need update to newer bird version
* https://gitlab.labs.nic.cz/labs/bird/commit/53401bef63013d... - 11:48 AM Open Infrastructure Task #7193 (Closed): Move switches in place8 to a different rack
- duplicate
https://redmine.ungleich.ch/issues/7340
- 10:08 AM Open Infrastructure Task #7122: Setup production etcd cluster in place6
- Dominique Roux wrote:
> ...
>
> Currently there are some small problems with nftables (not loaded at boot).
> Wi...
12/02/2019
- 09:41 PM Open Infrastructure Task #7345 (In Progress): Cleanup & upstream matrix-related types
- Works but need more testing. I haven't forgotten this issue, which will be updated soon (TM).
- 04:09 PM ipv6 Task #7405: Explore IPv6 compatible IoT devices
- * https://twinkly.com/
** https://twitter.com/NicoSchottelius/status/1201518786207272960 - 04:07 PM ipv6 Task #7405 (Rejected): Explore IPv6 compatible IoT devices
- 12:13 PM Open Infrastructure Task #7403 (Rejected): Create customer friendly guide for ucloud
- Where do I go to for creating a VM?
How can I pay?
Where do I store my ssh keys?
How to reboot my VM?
Can I / how... - 12:11 PM Open Infrastructure Task #7402 (Closed): Reproduce issues in ucloud-pay
- Reproduce issues in ucloud-pay and share it with mravi
- 12:09 PM Open Infrastructure Task #7401 (Rejected): Create ucloud package for python/alpine
- 12:02 PM Open Infrastructure Task #7400 (Closed): Switch all servers to IPv6 only netboot
- h2. Objective
* Remove one of the last IPv4 bits from our infrastructure (-> less complexity)
* Test that all ser...
12/01/2019
- 09:40 PM hack4glarus-2019-winter Task #7379: Explore an "any name DNS service"
- Wow, gandi is fast, this project can now be referred to here: weneeda.name
- 09:19 PM hack4glarus-2019-winter Task #7379: Explore an "any name DNS service"
- https://evilham.com/en/slides/2019-Hack4Glarus-winter
also, TBA soon: weneeda.name - 03:55 PM hack4glarus-2019-winter Task #7399 (Closed): presentations hack4glarus 2019 winter
- upload here hack4glarus 2019 winter presentations
- 11:46 AM hack4glarus-2019-winter Task #7398 (Closed): Add more Search Engines to ⚉ CopyScan
- ⚉ CopyScan is a Firefox Add-on for plagiarism detection. The add-on talks directy to search engines:
* Startpage (Go... - 11:41 AM hack4glarus-2019-winter Task #7376: Packer+Vagrant for OpenBSD (cont'd)
- Had no time/motivation for vagrant ports(7) (ruby hell + unknown go build)
- 11:40 AM hack4glarus-2019-winter Task #7382 (Waiting): Monitoring at a different level (BPF/Suricata/Cilium)
- Time ran out, VM too slow to install all necessary toolchain
- 03:34 AM hack4glarus-2019-winter Task #7366: Finish the first levels of the ungleich-game
- 7) Getting points for user: ``` curl -X POST -d user=sxiii ip/points ```
8) Challenge IPv6Address (checking if IP is... - 03:03 AM hack4glarus-2019-winter Task #7366: Finish the first levels of the ungleich-game
- Points now also work.
- 02:26 AM hack4glarus-2019-winter Task #7366: Finish the first levels of the ungleich-game
- Working for now with ETCD-3 and wrapper:
1) Information about the game: ("curl ip/index")
2) Registration of the n...
11/30/2019
- 11:29 PM hack4glarus-2019-winter Task #7397: Create a script to create a net-bootable alpine image
- Working:...
- 09:22 PM hack4glarus-2019-winter Task #7397: Create a script to create a net-bootable alpine image
- Current state:...
- 09:21 PM hack4glarus-2019-winter Task #7397 (Closed): Create a script to create a net-bootable alpine image
- 09:49 PM hack4glarus-2019-winter Task #7364 (Closed): Crash course in cdist
- 09:47 PM hack4glarus-2019-winter Task #7378: Document / explore on how to sensibly run docker with a /64
- This might benefit from #7379 :-D
- 09:18 PM hack4glarus-2019-winter Task #7378: Document / explore on how to sensibly run docker with a /64
- Some advices -> maybe that would help (*may be dependent on docker version):
1) Run docker with: ``` --ipv6 --fixed-... - 12:34 PM hack4glarus-2019-winter Task #7378 (In Progress): Document / explore on how to sensibly run docker with a /64
- 09:46 PM hack4glarus-2019-winter Task #7381 (Resolved): Monitor lorawan temperature sensors with prometheus + grafana
- https://github.com/AnotherKamila/ttn2prom
- 09:42 PM hack4glarus-2019-winter Task #7379 (Closed): Explore an "any name DNS service"
- https://github.com/evilham/twisted-dnslabs
Made by Kamila, Fnux and Evilham :-). Self-Host all the things with name! - 08:18 PM hack4glarus-2019-winter Task #7371: mozilla iot
- Tried hard to get the devices running with the mozilla stuff but failed... maybe we have to wait for better arduino/e...
- 08:14 PM hack4glarus-2019-winter Task #7375 (Closed): make a mozilla WebThings notifier (telegram bot)
- will not be made
- 08:13 PM hack4glarus-2019-winter Task #7373 (Closed): make a mozilla WebThings Framework
- 02:51 AM hack4glarus-2019-winter Task #7373: make a mozilla WebThings Framework
- Try it with 2X10 devices, good luck
- 02:49 AM hack4glarus-2019-winter Task #7373: make a mozilla WebThings Framework
- ...
- 08:12 PM hack4glarus-2019-winter Task #7374 (Closed): make a mozilla WebThings UI extension
- 08:12 PM hack4glarus-2019-winter Task #7374: make a mozilla WebThings UI extension
- !sc2.png!
- 08:11 PM hack4glarus-2019-winter Task #7374: make a mozilla WebThings UI extension
- !Bildschirmfoto 2019-11-30 um 20.07.22.png!
- 02:42 PM hack4glarus-2019-winter Task #7374: make a mozilla WebThings UI extension
- wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 15.33.25.60 netmask 255.255.0.0 broadcast... - 01:22 PM hack4glarus-2019-winter Task #7374: make a mozilla WebThings UI extension
- user ungleich, pwd ungleich
- 01:20 PM hack4glarus-2019-winter Task #7374: make a mozilla WebThings UI extension
- wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 169.254.13.141 netmask 255.255.0.0 broadc... - 07:36 PM hack4glarus-2019-winter Task #7390 (Closed): Boot alpine via IPv6 netboot from the arm64 servers
- 07:32 PM hack4glarus-2019-winter Task #7389: Setup a webserver on the APU, create an ipxe script and add bootable files
- ...
- 07:30 PM hack4glarus-2019-winter Task #7389 (Closed): Setup a webserver on the APU, create an ipxe script and add bootable files
- * install nginx
* download ipxescript
* download kernel
* download initramfs
* verify with wget or curl that the ... - 07:15 PM hack4glarus-2019-winter Task #7366: Finish the first levels of the ungleich-game
- What's done for now in porting to ETCD-3:
1) Information about the game
2) Registration of the new user with his IP... - 06:13 PM hack4glarus-2019-winter Task #7366 (In Progress): Finish the first levels of the ungleich-game
- 05:56 PM hack4glarus-2019-winter Task #7387 (Closed): Create an iPXE binary WITHOUT ipv4 support (only IPv6)
- 05:30 PM Open Infrastructure Task #7122 (Resolved): Setup production etcd cluster in place6
- This is done now
ETCD-Cluster available at:
etcd1.ungleich.ch
etcd2.ungleich.ch
etcd3.ungleich.ch
Currentl... - 02:04 PM Open Infrastructure Task #7377: Create an active-active NAT64 gateway
- I'll try some joold magic today...
- 01:45 PM hack4glarus-2019-winter Task #7385 (Closed): Create a new service named "ipv6" that offers in ipv6 networkservices
- * Reachable under http://ipv6/
* Be able to delegate a /64 network (why not dhcp-pd: too complex)
- 01:31 PM hack4glarus-2019-winter Task #7376: Packer+Vagrant for OpenBSD (cont'd)
- Working ports(7) Makefile for packer-builder-openbsd-vmm created
624cec4..4563cca master -> master
- 02:51 AM hack4glarus-2019-winter Task #7372 (Closed): make a mozilla WebThings gateway
- 01:07 AM hack4glarus-2019-winter Task #7382: Monitoring at a different level (BPF/Suricata/Cilium)
- The idea is to tproxy chain haproxy traffic and let suricata "inspect" the traffic.
Pull the eve.json output into EL... - 01:02 AM hack4glarus-2019-winter Task #7382: Monitoring at a different level (BPF/Suricata/Cilium)
- Cilium: https://docs.cilium.io/en/stable/
Suricata: https://suricata-ids.org/docs/
BPF:
http://www.brendangregg.c...
11/29/2019
- 11:02 PM hack4glarus-2019-winter Task #7382 (Closed): Monitoring at a different level (BPF/Suricata/Cilium)
- Traditional pull based monitoring (nagios et al) is DEAD>
Push based (partly Prometheus, Riemann) is cooler.
But ... - 10:49 PM hack4glarus-2019-winter Task #7381 (Closed): Monitor lorawan temperature sensors with prometheus + grafana
- * For conrod
- 10:37 PM hack4glarus-2019-winter Task #7380 (Closed): Checking out BorgBackup
- Learn to work with the deduplicating archiver with compression and encryption called *BorgBackup (short: Borg)*: http...
- 08:10 PM hack4glarus-2019-winter Task #7373: make a mozilla WebThings Framework
- box
- 08:09 PM hack4glarus-2019-winter Task #7373 (In Progress): make a mozilla WebThings Framework
- Does not work with ipv6 out of the boy
- 04:36 PM hack4glarus-2019-winter Task #7373 (Closed): make a mozilla WebThings Framework
- https://iot.mozilla.org/framework/
- 06:36 PM hack4glarus-2019-winter Task #7378: Document / explore on how to sensibly run docker with a /64
- Is that related to https://redmine.ungleich.ch/issues/7359 ?
- 06:08 PM hack4glarus-2019-winter Task #7378 (Closed): Document / explore on how to sensibly run docker with a /64
- h2. draft 1: "https only"
* Block everything incoming besides https
* Reasoning:
** containers by default insecu... - 06:28 PM Open Infrastructure Task #7377: Create an active-active NAT64 gateway
- ping
- 06:01 PM Open Infrastructure Task #7377 (Rejected): Create an active-active NAT64 gateway
- * session sync & co.
* I'd recommend jool + joold, but open to options - 06:24 PM hack4glarus-2019-winter Task #7366: Finish the first levels of the ungleich-game
- Hints:
* you have an IPv6 address on your computer
* if you let nico know the address, we can route a /64 - 04:31 PM hack4glarus-2019-winter Task #7366: Finish the first levels of the ungleich-game
- Nico Schottelius wrote:
> * Probably for Marc & Den
Den's here. I think I can work more on the task. At least I'v... - 11:53 AM hack4glarus-2019-winter Task #7366 (Closed): Finish the first levels of the ungleich-game
- * Probably for Marc & Den
The story:...
* smallest network: /64 -> 64 bit
* there is a (web)server
h2. step... - 06:09 PM hack4glarus-2019-winter Task #7379 (Closed): Explore an "any name DNS service"
- ... and probably have it as an self hosted offer, too
* similar to "what three words"? - 05:53 PM hack4glarus-2019-winter Task #7376 (Closed): Packer+Vagrant for OpenBSD (cont'd)
- Continuing https://redmine.ungleich.ch/issues/6736
- 04:44 PM hack4glarus-2019-winter Task #7372 (In Progress): make a mozilla WebThings gateway
- 04:36 PM hack4glarus-2019-winter Task #7372 (Closed): make a mozilla WebThings gateway
- https://iot.mozilla.org/gateway/
- 04:39 PM hack4glarus-2019-winter Task #7375 (Closed): make a mozilla WebThings notifier (telegram bot)
- https://hacks.mozilla.org/2019/08/using-webthings-gateway-notifications-as-a-warning-system-for-your-home/
- 04:37 PM hack4glarus-2019-winter Task #7374 (Closed): make a mozilla WebThings UI extension
- https://hacks.mozilla.org/2019/11/ui-extensions-webthings-gateway/
- 04:35 PM hack4glarus-2019-winter Task #7371 (Closed): mozilla iot
- mozilla iot, but they mean wot, they are not exatly sure about it...
you can build a gateway and connect some things... - 04:34 PM hack4glarus-2019-winter Task #7359: Define how to properly use docker in ipv6 only networks
- Nico Schottelius wrote:
> * How to do https?
> * How to do firewalling?
> * How to incorporate letsencrypt?
I c... - 11:58 AM hack4glarus-2019-winter Task #7368 (Closed): Setup an ARM64 virtualisation server with alpine
- * Running ucloud (?)
- 11:57 AM hack4glarus-2019-winter Task #7367 (Closed): Setup ARM64 IPv6 only netbooting
- * With the ARM64 dev servers
- 11:52 AM hack4glarus-2019-winter Task #7365 (Closed): Create an IPv6 only bootable network
- * bridging with ipxe/usb stick
* get 2 devices for netbooting
* get 4 usb sticks
* install ipxe to the usb stick
... - 11:50 AM hack4glarus-2019-winter Task #7364: Crash course in cdist
- /descr
- 11:39 AM hack4glarus-2019-winter Task #7364: Crash course in cdist
- ehem: https://cdi.st
- 11:35 AM hack4glarus-2019-winter Task #7364 (Closed): Crash course in cdist
- Shortish session generally addressing these questions:
- What is cdist?
https://cdi.st is a cross-platform provis... - 11:47 AM hack4glarus-2019-winter Task #7363 (Rejected): cdist crash course (~30m)
- Duplicate
- 11:30 AM hack4glarus-2019-winter Task #7363 (Rejected): cdist crash course (~30m)
- For anyone who is interested in learning about a shell based configuration management system
- 11:18 AM hack4glarus-2019-winter Task #7358: Compare mastodon servers && create cdist manifest of the easier one
- From an operational viewpoint Pleroma comes highly recommended, e.g.: https://blog.soykaf.com/post/what-is-pleroma/
... - 12:37 AM hack4glarus-2019-winter Task #7356: Provide the most awesome self hosted apps
- Cool stuff:
* https://github.com/pinry/pinry
11/28/2019
- 11:53 PM hack4glarus-2019-winter Task #7359 (Closed): Define how to properly use docker in ipv6 only networks
- * How to do https?
* How to do firewalling?
* How to incorporate letsencrypt? - 11:52 PM hack4glarus-2019-winter Task #7358 (Closed): Compare mastodon servers && create cdist manifest of the easier one
- 11:50 PM hack4glarus-2019-winter Task #7356 (Closed): Provide the most awesome self hosted apps
- * Loosely based on https://github.com/awesome-selfhosted/awesome-selfhosted.git/
* VMs with /64 provided by Balazs
... - 10:56 PM hack4glarus-2019-winter Task #7354 (Closed): Create a NAT4664 PoC
- Idea:...
- 08:33 PM Open Infrastructure Task #6872 (Closed): Create ucloud-vm
- 08:32 PM Open Infrastructure Task #6871 (Closed): Create ucloud-api
- 08:28 PM Open Infrastructure Task #6914 (Closed): ucloud-image-scanner
- 08:25 PM Open Infrastructure Task #6875 (Closed): Create ucloud-scheduler
- 04:01 PM hack4glarus-2019-winter Task #7352 (Closed): Find a way to update mikrotik routers in IPv6 only networks
- * Download packets && scp && ssh?
- 03:41 PM hack4glarus-2019-winter Task #7350 (Closed): Add automatic / scheduled configuration support to cdist
- To update list of hosts automatically
- 03:39 PM hack4glarus-2019-winter Task #7349 (Closed): Create a wifi bridge from Diesbach to Luchsingen
- * Using 6 access points
- 03:38 PM hack4glarus-2019-winter Task #7348 (Closed): Create a devuan ucloud image
- 03:38 PM hack4glarus-2019-winter Task #7347 (Closed): Create an Alpine ucloud image
- * Maybe packer?
- 03:37 PM hack4glarus-2019-winter Task #7346 (Closed): Create an OpenBSD ucloud image
- 03:36 PM Open Infrastructure Task #7345 (Closed): Cleanup & upstream matrix-related types
- * So that we can offer matrix-as-a-service
* Consider if it is possible to run matrix on a v6 only VM and proxy into... - 03:36 PM hack4glarus-2019-winter Task #7344 (Closed): Create a matrix/mattermost bridge to chat.ungleich.ch and a cdist type for it
- 01:48 PM hack4glarus-2019-winter Task #7343 (Closed): Create an automated routing daemon (IPv6)
- * User A wants to have a network
* Gets a new network
* Routers will update their routes
** maybe using bgp/bird?
... - 01:45 PM hack4glarus-2019-winter Task #7342 (Closed): Create an RFC for adding DoT and DoH options to IPv6 router advertisements
- 01:45 PM hack4glarus-2019-winter Task #7341 (Closed): Port ucloud to OpenBSD
11/27/2019
- 06:37 PM Open Infrastructure Task #7337 (Rejected): Import network documentation to Netbox
- 11:40 AM Open Infrastructure Task #7335 (Rejected): Add alpine ceph install/helper scripts to ungleich-tools
- Need to revise/polish before adding
11/25/2019
- 11:58 AM Open Infrastructure Task #7112 (Closed): Userguide for ucloud
- 11:58 AM Open Infrastructure Task #7283 (Closed): Cleanups for ucloud 0.0.2
11/20/2019
- 09:14 AM Open Infrastructure Task #7283 (Resolved): Cleanups for ucloud 0.0.2
11/17/2019
- 02:34 PM Open Infrastructure Task #7318 (Closed): Upgrade Alpine Linux to 3.10
- * UPdated django & pushed out.
11/16/2019
- 02:17 PM Open Infrastructure Task #7318: Upgrade Alpine Linux to 3.10
- * Adding Alpine 3.10 to ipv6onlyhosting
** add entry in the db
* updating vm template list... - 02:04 PM Open Infrastructure Task #7318: Upgrade Alpine Linux to 3.10
- * ensuring that opennebula permissions are ok
** use to group/other of the new template
** use to group/other of th... - 02:03 PM Open Infrastructure Task #7318: Upgrade Alpine Linux to 3.10
- * Image upgrade and saved in place5
Transferring to place6:... - 01:22 PM Open Infrastructure Task #7318 (Closed): Upgrade Alpine Linux to 3.10
- 01:21 PM Open Infrastructure Task #7161 (Rejected): Create APKBUILD for jool, submit jool to alpine
11/15/2019
- 03:59 PM Open Infrastructure Task #7317 (Rejected): Create placeA @Diesbach
- To seperate the datacenter and hackernet.
- Router: BPG, RA, ipv6 only, secured, dns
11/14/2019
- 07:10 PM Open Infrastructure Task #7304: Test NAT64 with distributed routers with joold on alpine
- Adding selected addresses instead of using only the existing one:...
- 07:01 PM Open Infrastructure Task #7304: Test NAT64 with distributed routers with joold on alpine
- Sessions w/ tcp visible:...
- 06:37 PM Open Infrastructure Task #7304: Test NAT64 with distributed routers with joold on alpine
- Testing from the 2nd router (locally created packets don't work):...
- 06:30 PM Open Infrastructure Task #7304: Test NAT64 with distributed routers with joold on alpine
- ...
- 06:20 PM Open Infrastructure Task #7304: Test NAT64 with distributed routers with joold on alpine
- ...
Also available in: Atom