ungleich redmine

01/03/2020

05:35 PM Open Infrastructure Task #7561: Update mystrom switches to support IPv6 only networks

... Nico Schottelius

05:35 PM Open Infrastructure Task #7561 (Rejected): Update mystrom switches to support IPv6 only networks

Using an experimental firmware from mystrom directly:... Nico Schottelius

04:08 PM Open Infrastructure Task #7560 (Closed): Document DNS64 setup for VMs

* After #7496
* Document on how to use it in the [[The_ungleich_DNS_infrastructure]]
* Reference it in [[The_unglei... Nico Schottelius

01/02/2020

03:30 PM Open Infrastructure Task #7436 (Closed): Hack-a-ucloud-weekend (2019-12-07)

Nico Schottelius

03:30 PM Open Infrastructure Task #7438 (Closed): Explore local ucloud setup

Nico Schottelius

03:30 PM Open Infrastructure Task #7437 (Closed): Run ucloud with a single authentication token

Nico Schottelius

03:30 PM Open Infrastructure Task #7439 (Rejected): Add support for different authentication methods

Postponed. Nico Schottelius

01:35 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls

And config looks like this:... Nico Schottelius

01:33 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls

Seems like the code is in read_config.yy.c:... Nico Schottelius

01:08 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls

Added sync section, now getting an IPv6 exception:... Nico Schottelius

12:59 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls

router2.place6:... Nico Schottelius

12:50 PM Open Infrastructure Task #7553 (Rejected): Setup conntrackd to allow active active firewalls

* So that firewall rules still work with state tracking
Change of objective: get this running on two IPv6 only Alp... Nico Schottelius

12:47 PM Open Infrastructure Task #7552 (Closed): Add some non-critical traffic to router1.place6

* might required conntrackd
Networks first stage:
* internal network
* server network
Nico Schottelius

12:46 PM Open Infrastructure Task #7306 (Rejected): Phase in new routers

Closing in favor of #7284 Nico Schottelius

12:44 PM Open Infrastructure Task #7307 (Closed): Update __ungleich_bgp_router for IPv6 based multip bgp

Not doing this atm, as routers still need IPv4 addresses for VMs Nico Schottelius

12:21 PM Open Infrastructure Task #7520 (Closed): Checkout whether OSPF can be helpful for DCL

It works!
But not for eBGP routes. Nico Schottelius

12:07 PM Open Infrastructure Task #6930: cdist configuration for etcd

Current state I know of:
* there is etcd{1,2,3}.ungleich.ch
* They have an unknown configuration
* And they have... Nico Schottelius

01/01/2020

05:05 PM Open Infrastructure Task #7546: VM Security based on LDAP accounts

* Moris, thanks for reporting.
* Mondi, can you start with your tasks and handover to Timothee when done?
Nico Schottelius

05:05 PM Open Infrastructure Task #7546: VM Security based on LDAP accounts

h2. Clarification 1: "shared login"
We use LDAP servers as a backend to redmine and django (the dashboard). Both s... Nico Schottelius

04:53 PM Open Infrastructure Task #7546 (In Progress): VM Security based on LDAP accounts

Nico Schottelius

12/24/2019

02:36 PM ipv6 Task #7523: TCP/UDP Services supported by IP4-to-IP6 incoming proxy and NAT64 outgoing gateway

h2. IPv6 only DNS
* Needs helper/proxy/delegated
* Setup
** Domain IN NS <nameserver>
** nameserver IN AAAA <I... Nico Schottelius

12/21/2019

03:15 PM Swiss School of Digital Education Task #7521 (Rejected): Add IPv6 course offer

* 1 week
* including food and sleeping
* On request
* For companies / teams who want to learn how to setup, use, m... Nico Schottelius

02:53 PM Open Infrastructure Task #7520: Checkout whether OSPF can be helpful for DCL

parameters mismatch between switch & routers: disable switch for the moment... Nico Schottelius

02:35 PM Open Infrastructure Task #7520: Checkout whether OSPF can be helpful for DCL

Testing on arista:... Nico Schottelius

02:16 PM Open Infrastructure Task #7520: Checkout whether OSPF can be helpful for DCL

Seems like these code blocks are already enough for internal route exchange:... Nico Schottelius

01:49 PM Open Infrastructure Task #7520 (Closed): Checkout whether OSPF can be helpful for DCL

* testing with new routers
* Todo: find out how to limit route imports in arista via ospf Nico Schottelius

12:25 PM Open Infrastructure Task #7519: uncloud test run 2019-12-21

arch
* etcd3 error message might be improve / error out on import error
** fail only when it is required for oper... Nico Schottelius

12:22 PM Open Infrastructure Task #7519 (Closed): uncloud test run 2019-12-21

* Convince Nico that it works ;-)
* On Alpine and Arch Nico Schottelius

12/20/2019

09:47 PM Open Infrastructure Task #7304: Test NAT64 with distributed routers with joold on alpine

* Configuring router1.place6 for NAT64
** Prefix 2a0a:e5c0:2:10::/96... Nico Schottelius

12:56 AM Open Infrastructure Task #7377: Create an active-active NAT64 gateway

Session exist on one router, session does not exist on other one -> multicast issue?... Nico Schottelius

12:28 AM Open Infrastructure Task #7377: Create an active-active NAT64 gateway

Using the new NAT64 IPv4 address on both machines:... Nico Schottelius

12:27 AM Open Infrastructure Task #7377: Create an active-active NAT64 gateway

Need to add pool entries for each protocol:... Nico Schottelius

12:23 AM Open Infrastructure Task #7377 (In Progress): Create an active-active NAT64 gateway

... Nico Schottelius

12/19/2019

05:41 PM Open Infrastructure Task #7345: Cleanup & upstream matrix-related types

Just added you to ungleich-public, please move there Nico Schottelius

05:14 PM Open Infrastructure Task #7478 (Closed): Create script to create centos8 image suitable for opennebula

Thanks!
redmine@ungleich.ch writes: Nico Schottelius

09:58 AM Open Infrastructure Task #7503 (Rejected): Create script to create new / updated OpenBSD image for OpenNebula

* Upgrading to 6.6
* The original image was made by @reyk
* The logic is basically the same as the other images, ho... Nico Schottelius

09:55 AM Open Infrastructure Task #7502 (Closed): Create script to create new / updated FreeBSD image for OpenNebula

* 12.1 is out for a while
* The original image was made by @kamila
* The logic is basically the same as the other i... Nico Schottelius

12/17/2019

05:41 PM Open Infrastructure Task #7472 (Closed): Fix the fedora image for resize

Nice job!
redmine@ungleich.ch writes: Nico Schottelius

12:49 PM Open Infrastructure Task #7345: Cleanup & upstream matrix-related types

Moving ticket to Open Infrastructure Nico Schottelius

12:00 PM Open Infrastructure Task #7496 (Closed): Create 2 new IPv6 only unbound based resolving DNS servers providing DNS64

h2. Background
We want VPN users or anyone to be able to select if they get NAT64 or not. Currently our bind decid... Nico Schottelius

11:14 AM Open Infrastructure Task #6671: Setup mastodon/pleroma for ungleich

ack
redmine@ungleich.ch writes: Nico Schottelius

12/15/2019

11:03 PM Open Infrastructure Task #7483 (Closed): Update the __consul cdist type for alpine

seems like the configuration place is different on current alpine that what we assumed/what is in our normal config f... Nico Schottelius

11:01 PM Open Infrastructure Task #7482 (Closed): On Alpine Linux the monit job for node-exporter uses the wrong path

Current state is:... Nico Schottelius

05:31 PM Open Infrastructure Task #7478 (Closed): Create script to create centos8 image suitable for opennebula

* centos8-build-opennebula.sh or similar
* goes into ungleich-tools Nico Schottelius

11:47 AM Open Infrastructure Task #7472 (Closed): Fix the fedora image for resize

* In theory the opennebula scripts *should* do that
** I think I have even seen scripts in /etc/one-context.d that *... Nico Schottelius

12/10/2019

05:04 PM Open Infrastructure Task #7456 (Rejected): Prototype support for IPv6 only mail servers

* incoming via bounce/transfer host
** whitelist of domains + smarthost settings?
* outgoing
** check whether MX ... Nico Schottelius

12/07/2019

12:50 PM Open Infrastructure Task #7439 (Rejected): Add support for different authentication methods

* local/no authentication
* remote
** uotp
** ldap
** etcd based (???) Nico Schottelius

12:37 PM Open Infrastructure Task #7438 (Closed): Explore local ucloud setup

* no public listeners
* all local
* no authentication
* no ceph by default Nico Schottelius

12:35 PM Open Infrastructure Task #7437 (Closed): Run ucloud with a single authentication token

* No uotp
* No ldap
* No nothing Nico Schottelius

10:58 AM Open Infrastructure Task #7436 (In Progress): Hack-a-ucloud-weekend (2019-12-07)

Nico Schottelius

10:57 AM Open Infrastructure Task #7436 (New): Hack-a-ucloud-weekend (2019-12-07)

Doc/uotp seems to be outdated:... Nico Schottelius

10:47 AM Open Infrastructure Task #7436 (In Progress): Hack-a-ucloud-weekend (2019-12-07)

Nico Schottelius

10:22 AM Open Infrastructure Task #7436 (Closed): Hack-a-ucloud-weekend (2019-12-07)

h2. objective
* get ucloud into a customer usable state
h2. Tasks
* how does a user interact with ucloud?
*... Nico Schottelius

12/06/2019

12:44 AM Open Infrastructure Task #7427 (Rejected): Rough draft to support console on our VMs

* Migrate dynamicweb user base to ldap
** write script to migrate users (passwords? do we have to reset / have them ... Nico Schottelius

12/05/2019

06:09 PM Open Infrastructure Task #7156 (Closed): Add new sunrise link to infrastrucure, introduce policy routing

Added long time ago Nico Schottelius