Activity
From 12/10/2019 to 01/08/2020
01/08/2020
- 08:21 PM Open Infrastructure Task #7583: Handle etcd leader change or temporary unavailability gracefully in uncloud
- We have to re-evaluate/re-check all the usage of etcd in uncloud to make sure we handle these events correctly/gracef...
- 07:34 AM Open Infrastructure Task #7583: Handle etcd leader change or temporary unavailability gracefully in uncloud
- The later unavailability is due to election for leader.
- 12:21 PM Open Infrastructure Task #7580: Preparing for matrix-as-a-service
- We can do-it in a second-stage, witout a TURN server VoIP might or might not work depending on the situation.
Note... - 11:27 AM Open Infrastructure Task #7580: Preparing for matrix-as-a-service
- Can we do voip in a second stage or will things "look weird" without it?
redmine@ungleich.ch writes: - 11:17 AM Open Infrastructure Task #7580: Preparing for matrix-as-a-service
- We'll also need a TURN server for VoIP.
- 11:29 AM ipv6 Task #7570 (Seen): Add more questions and answers to official FAQ
01/07/2020
- 06:38 PM Open Infrastructure Task #7555: Setup uncloud at server11 and server12
- uncloud deployed at server{11, 12}. There are still some issues that would be problem for reliably running uncloud fo...
- 06:33 PM Open Infrastructure Task #7582: Add hostname in uncloud file scanning
- Nico Schottelius wrote:
> For the example above: the host would probably often more something like "files1.datacente... - 04:19 PM Open Infrastructure Task #7582: Add hostname in uncloud file scanning
- For the example above: the host would probably often more something like "files1.datacenterlight.ch" or "username.dat...
- 04:18 PM Open Infrastructure Task #7582: Add hostname in uncloud file scanning
- We should have a "created_at" and "deleted_at" for every object.
- 02:44 PM Open Infrastructure Task #7582: Add hostname in uncloud file scanning
- Done. Sample
Before... - 01:41 PM Open Infrastructure Task #7582 (Closed): Add hostname in uncloud file scanning
- It is required as nico said that there would be multiple file hosts and not necessarily all files are available on so...
- 04:45 PM Open Infrastructure Task #7585 (Closed): Check whether uncloud-api break if some field is missing
- The behavior is seen in the past that uncloud-api breaks if we don't pass some fields like *name*, *realm* or *token*...
- 02:07 PM Open Infrastructure Task #7583 (Rejected): Handle etcd leader change or temporary unavailability gracefully in uncloud
- Here is leader change....
- 12:53 PM Open Infrastructure Task #7580 (Closed): Preparing for matrix-as-a-service
- Once matrix is deployed at ungleich:
* Build & document MaaS deployment and maintenance pipeline.
- Wiki page.
...
01/06/2020
- 02:33 PM ipv6 Task #7567 (Closed): Add support for all TLS encapsulated protocols to IPv4-to-IPv6 incoming proxy
- Thanks a lot for creating this and the other tickets. I'll close this one in favor for the more specific services tha...
- 12:12 PM ipv6 Task #7567: Add support for all TLS encapsulated protocols to IPv4-to-IPv6 incoming proxy
- There are other examples, such as running multiple sshd instances based on different authentication systems, each on ...
- 11:51 AM ipv6 Task #7567 (Waiting): Add support for all TLS encapsulated protocols to IPv4-to-IPv6 incoming proxy
- 11:48 AM ipv6 Task #7567: Add support for all TLS encapsulated protocols to IPv4-to-IPv6 incoming proxy
- The idea is that rather than implementing protocols one by one, implement all of them with a generic TLS proxy. Why b...
- 12:21 PM Open Infrastructure Task #7543 (In Progress): Write image definition script for ubuntu 19.10
- From Nico:...
- 12:09 PM Open Infrastructure Task #7543 (Waiting): Write image definition script for ubuntu 19.10
- There's already a 19.10 image deployed... ???
- 11:57 AM Open Infrastructure Task #7543 (In Progress): Write image definition script for ubuntu 19.10
- 12:19 PM ipv6 Task #7574 (Rejected): Create and setup VM for prototype Smarthost
- Choose mail server (exim? exim-heavy?)
Setup to enable read access to customer VM and IP-range ownership - 12:15 PM ipv6 Task #7573 (Rejected): Spamlike message filtering
- Add a spamfilter to the smarthost which blocks messages that will cause email providers to blacklist or graylist the ...
- 12:04 PM ipv6 Task #7566 (Waiting): Outgoing SMTP smarthost
- I think it would make more sense for your resident exim guru to implement it with me helping out.
I don't have any...
01/05/2020
- 07:09 PM Open Infrastructure Task #7555: Setup uncloud at server11 and server12
- Remaining things
[ ] IPv6 Prefix on Server 12
[ ] VM with Global IPv6 (2a0a:e5c0:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx)
[ ... - 07:02 PM Open Infrastructure Task #7555: Setup uncloud at server11 and server12
- uncloud filescanner has to be modified as it was using xattrs to track files which does not work on rootfs/tmpfs whic...
- 04:58 PM Open Infrastructure Task #7555: Setup uncloud at server11 and server12
- Devuan ascii has too old QEMU i.e 2.8 while the latest is 4.2.
It is a problem because it is showing error message... - 04:42 PM ipv6 Task #7570 (Rejected): Add more questions and answers to official FAQ
- List of questions that should be added and some answers are here:
https://redmine.ungleich.ch/projects/ipv6/wiki/FAQ - 04:26 PM ipv6 Task #7566 (Seen): Outgoing SMTP smarthost
- Moris,
are you interested in creating a prototype for this one? - 03:36 PM ipv6 Task #7566 (Rejected): Outgoing SMTP smarthost
- Implement a smarthost to complement the NAT64 gateway, although ideally also allowing relaying of messages to IPv6 de...
- 04:25 PM ipv6 Task #7567 (Feedback): Add support for all TLS encapsulated protocols to IPv4-to-IPv6 incoming proxy
- Hey Moris,
I am not sure if this ticket is sensible, as it contains a lot of unused protocols. I like the other ti... - 04:00 PM ipv6 Task #7567 (Closed): Add support for all TLS encapsulated protocols to IPv4-to-IPv6 incoming proxy
- Here is a partial list of protocols
nntps 563/tcp snntp
ldaps 636/tcp
ldaps ... - 04:12 PM ipv6 Task #7569 (Rejected): IPv6 only DNS
-
* Needs helper/proxy/delegated
* Setup
** Domain IN NS <nameserver>
** nameserver IN AAAA <IPv6 address of ... - 04:09 PM ipv6 Task #7568 (Rejected): Incoming SMTP IPv4 proxy
- Should allow relaying messages to any domain whose primary MX AAAA record is in our IPv6 range.
* Setup
> * Do... - 04:02 PM ipv6 Task #7523: TCP/UDP Services supported by IP4-to-IP6 incoming proxy and NAT64 outgoing gateway
- Added to wiki:
https://redmine.ungleich.ch/projects/ipv6/wiki/Making_an_IPv6-only_VM_a_useful_tool_in_an_IPv4_domi... - 11:03 AM Open Infrastructure Task #7565 (Rejected): uncloud run 2020-01-05
- h2. Objective
A test ride to get more nearby prod use
h2. What Nico wants to do us a customer
* register a...
01/03/2020
- 05:35 PM Open Infrastructure Task #7561: Update mystrom switches to support IPv6 only networks
- ...
- 05:35 PM Open Infrastructure Task #7561 (Rejected): Update mystrom switches to support IPv6 only networks
- Using an experimental firmware from mystrom directly:...
- 04:08 PM Open Infrastructure Task #7560 (Closed): Document DNS64 setup for VMs
- * After #7496
* Document on how to use it in the [[The_ungleich_DNS_infrastructure]]
* Reference it in [[The_unglei... - 11:38 AM Open Infrastructure Task #7555: Setup uncloud at server11 and server12
- Allow etcd prefix for developer role...
- 10:58 AM Open Infrastructure Task #7555 (Closed): Setup uncloud at server11 and server12
- Ensure that both server11 and server12 are running with uncloud today and can be used in production? And please note ...
01/02/2020
- 05:09 PM Open Infrastructure Task #7496: Create 2 new IPv6 only unbound based resolving DNS servers providing DNS64
- Merge request opened against dot-cdist: https://code.ungleich.ch/ungleich-intern/dot-cdist/merge_requests/65
- 03:30 PM Open Infrastructure Task #7436 (Closed): Hack-a-ucloud-weekend (2019-12-07)
- 03:30 PM Open Infrastructure Task #7438 (Closed): Explore local ucloud setup
- 03:30 PM Open Infrastructure Task #7437 (Closed): Run ucloud with a single authentication token
- 03:30 PM Open Infrastructure Task #7439 (Rejected): Add support for different authentication methods
- Postponed.
- 01:35 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls
- And config looks like this:...
- 01:33 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls
- Seems like the code is in read_config.yy.c:...
- 01:08 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls
- Added sync section, now getting an IPv6 exception:...
- 12:59 PM Open Infrastructure Task #7553: Setup conntrackd to allow active active firewalls
- router2.place6:...
- 12:50 PM Open Infrastructure Task #7553 (Rejected): Setup conntrackd to allow active active firewalls
- * So that firewall rules still work with state tracking
Change of objective: get this running on two IPv6 only Alp... - 12:47 PM Open Infrastructure Task #7552 (Closed): Add some non-critical traffic to router1.place6
- * might required conntrackd
Networks first stage:
* internal network
* server network
- 12:46 PM Open Infrastructure Task #7306 (Rejected): Phase in new routers
- Closing in favor of #7284
- 12:44 PM Open Infrastructure Task #7307 (Closed): Update __ungleich_bgp_router for IPv6 based multip bgp
- Not doing this atm, as routers still need IPv4 addresses for VMs
- 12:21 PM Open Infrastructure Task #7520 (Closed): Checkout whether OSPF can be helpful for DCL
- It works!
But not for eBGP routes. - 12:07 PM Open Infrastructure Task #6930: cdist configuration for etcd
- Current state I know of:
* there is etcd{1,2,3}.ungleich.ch
* They have an unknown configuration
* And they have...
01/01/2020
- 05:49 PM Open Infrastructure Task #7546: VM Security based on LDAP accounts
- We don't have any rate limiting to any of the apis that we have so far.
I think rate limiting would primarily be n... - 05:05 PM Open Infrastructure Task #7546: VM Security based on LDAP accounts
- * Moris, thanks for reporting.
* Mondi, can you start with your tasks and handover to Timothee when done?
- 05:05 PM Open Infrastructure Task #7546: VM Security based on LDAP accounts
- h2. Clarification 1: "shared login"
We use LDAP servers as a backend to redmine and django (the dashboard). Both s... - 04:53 PM Open Infrastructure Task #7546 (In Progress): VM Security based on LDAP accounts
12/31/2019
- 09:52 PM ipv6 Task #7523: TCP/UDP Services supported by IP4-to-IP6 incoming proxy and NAT64 outgoing gateway
- Readable list here
http://[2a0a:e5c0:2:10d:0:3:1bb:1]/ - 07:40 PM Open Infrastructure Task #7546 (Rejected): VM Security based on LDAP accounts
- Access to VM administration tools should be secured to the same level or higher as root access to the VM itself.
C... - 06:19 PM Open Infrastructure Task #6694 (In Progress): Setup matrix server and bridge matermost into it
- After discussion with nico, Matrix get priority over LDAP setup rebuild.
- 04:25 PM Open Infrastructure Task #6694 (Waiting): Setup matrix server and bridge matermost into it
- The matrix deployment works modulo:
* Federating with the IPv4 world (a few lines to add to haproxy's configuratio... - 04:26 PM Open Infrastructure Task #7345 (Waiting): Cleanup & upstream matrix-related types
- 03:20 PM Open Infrastructure Task #7545 (Closed): Switch production LDAPs to cdist-managed alpine
- Our production LDAP nodes do not seem to be managed by cdist (anymore?):
* No relevant mention in `grep -R __ungle... - 07:36 AM Open Infrastructure Task #7544 (Rejected): Write "beginner's guide" for datacenterlight customers
- Such a guide should cover:
* What is a VM? How do I choose CPU/Memory/Storage?
* How do I choose a GNU/Linux or...
12/30/2019
- 06:03 PM Open Infrastructure Task #6694: Setup matrix server and bridge matermost into it
- The matrix deployment is WIP in https://code.ungleich.ch/ungleich-intern/dot-cdist/merge_requests/64/diffs and is sta...
- 07:37 AM Open Infrastructure Task #6694 (In Progress): Setup matrix server and bridge matermost into it
- 02:40 PM Open Infrastructure Task #7543 (Closed): Write image definition script for ubuntu 19.10
- Similar to what have been done for fedora and CentOS.
- 07:37 AM Open Infrastructure Task #7345: Cleanup & upstream matrix-related types
- The project has been imported under https://code.ungleich.ch/ungleich-public/matrix-cdist-types. Moving to issue #669...
12/25/2019
- 05:55 PM Open Infrastructure Task #7427 (In Progress): Rough draft to support console on our VMs
12/24/2019
- 07:15 PM Open Infrastructure Task #7427 (Closed): Rough draft to support console on our VMs
- Django part done. LDAP account is created as soon as user login to datacenterlight.
- 02:36 PM ipv6 Task #7523: TCP/UDP Services supported by IP4-to-IP6 incoming proxy and NAT64 outgoing gateway
- h2. IPv6 only DNS
* Needs helper/proxy/delegated
* Setup
** Domain IN NS <nameserver>
** nameserver IN AAAA <I...
12/21/2019
- 05:37 PM ipv6 Task #7523 (Rejected): TCP/UDP Services supported by IP4-to-IP6 incoming proxy and NAT64 outgoing gateway
- List of services, as well as the following parameters:
Currently supported { officially unofficially partially uns... - 03:15 PM Swiss School of Digital Education Task #7521 (Rejected): Add IPv6 course offer
- * 1 week
* including food and sleeping
* On request
* For companies / teams who want to learn how to setup, use, m... - 02:53 PM Open Infrastructure Task #7520: Checkout whether OSPF can be helpful for DCL
- parameters mismatch between switch & routers: disable switch for the moment...
- 02:35 PM Open Infrastructure Task #7520: Checkout whether OSPF can be helpful for DCL
- Testing on arista:...
- 02:16 PM Open Infrastructure Task #7520: Checkout whether OSPF can be helpful for DCL
- Seems like these code blocks are already enough for internal route exchange:...
- 01:49 PM Open Infrastructure Task #7520 (Closed): Checkout whether OSPF can be helpful for DCL
- * testing with new routers
* Todo: find out how to limit route imports in arista via ospf - 12:25 PM Open Infrastructure Task #7519: uncloud test run 2019-12-21
- arch
* etcd3 error message might be improve / error out on import error
** fail only when it is required for oper... - 12:22 PM Open Infrastructure Task #7519 (Closed): uncloud test run 2019-12-21
- * Convince Nico that it works ;-)
* On Alpine and Arch
12/20/2019
- 09:47 PM Open Infrastructure Task #7304: Test NAT64 with distributed routers with joold on alpine
- * Configuring router1.place6 for NAT64
** Prefix 2a0a:e5c0:2:10::/96... - 04:10 PM Open Infrastructure Task #7514 (Closed): Investigate slow sshd start on Fedora/CentOS8 images
- * To investigate
- Likely due to low entropy => havegd should help. - 12:56 AM Open Infrastructure Task #7377: Create an active-active NAT64 gateway
- Session exist on one router, session does not exist on other one -> multicast issue?...
- 12:28 AM Open Infrastructure Task #7377: Create an active-active NAT64 gateway
- Using the new NAT64 IPv4 address on both machines:...
- 12:27 AM Open Infrastructure Task #7377: Create an active-active NAT64 gateway
- Need to add pool entries for each protocol:...
- 12:23 AM Open Infrastructure Task #7377 (In Progress): Create an active-active NAT64 gateway
- ...
12/19/2019
- 07:41 PM Open Infrastructure Task #7507 (Rejected): Monitor upstream releases / security advisories
- We deploy some application directly from upstream VCS, which means the underlying distribution does not provide us wi...
- 05:41 PM Open Infrastructure Task #7345: Cleanup & upstream matrix-related types
- Just added you to ungleich-public, please move there
- 04:57 PM Open Infrastructure Task #7345: Cleanup & upstream matrix-related types
- Both matrix-synapse and matrix-riot should be usable now, although they need some real-world testing which will handl...
- 05:29 PM Open Infrastructure Task #7504 (Rejected): Document OpenNebula image creation
- Peoples ask how to build new images from time to time, it would be easier if the requirements/workflow was documented...
- 05:14 PM Open Infrastructure Task #7478 (Closed): Create script to create centos8 image suitable for opennebula
Thanks!
redmine@ungleich.ch writes:- 04:46 PM Open Infrastructure Task #7478 (Resolved): Create script to create centos8 image suitable for opennebula
- From what I saw on #ungleich-web, the CentOS 8 image has been deployed.
- 05:11 PM Open Infrastructure Task #7496 (In Progress): Create 2 new IPv6 only unbound based resolving DNS servers providing DNS64
- 02:13 PM Open Infrastructure Task #7503: Create script to create new / updated OpenBSD image for OpenNebula
- Note by @kirill on chat.ungleich.ch // datacenterlight:
> regarding Task #7503 - remember to add family inet6 inet... - 09:58 AM Open Infrastructure Task #7503 (Rejected): Create script to create new / updated OpenBSD image for OpenNebula
- * Upgrading to 6.6
* The original image was made by @reyk
* The logic is basically the same as the other images, ho... - 09:55 AM Open Infrastructure Task #7502 (Closed): Create script to create new / updated FreeBSD image for OpenNebula
- * 12.1 is out for a while
* The original image was made by @kamila
* The logic is basically the same as the other i...
12/17/2019
- 06:45 PM Open Infrastructure Task #7478 (Feedback): Create script to create centos8 image suitable for opennebula
- Related Merge Request: https://code.ungleich.ch/ungleich-public/ungleich-tools/merge_requests/4
The image has been d... - 05:41 PM Open Infrastructure Task #7472 (Closed): Fix the fedora image for resize
Nice job!
redmine@ungleich.ch writes:- 05:23 PM Open Infrastructure Task #7472 (Resolved): Fix the fedora image for resize
- Solved by https://code.ungleich.ch/ungleich-public/ungleich-tools/commit/09a05b6a56f55fe27a37d26aaab13c65aa82a9f5.
- 12:49 PM Open Infrastructure Task #7345: Cleanup & upstream matrix-related types
- Moving ticket to Open Infrastructure
- 12:37 PM Open Infrastructure Task #6694: Setup matrix server and bridge matermost into it
- I've been working on matrix cdists types during the last H4G: https://redmine.ungleich.ch/issues/7345
It's not compl... - 12:00 PM Open Infrastructure Task #7496 (Closed): Create 2 new IPv6 only unbound based resolving DNS servers providing DNS64
- h2. Background
We want VPN users or anyone to be able to select if they get NAT64 or not. Currently our bind decid... - 11:14 AM Open Infrastructure Task #6671: Setup mastodon/pleroma for ungleich
- ack
redmine@ungleich.ch writes: - 10:54 AM Open Infrastructure Task #6671 (Seen): Setup mastodon/pleroma for ungleich
- I just gave a quick look at both the initial Mastodon implementation and Pleroma and will likely go with the later:
...
12/16/2019
- 02:02 PM Open Infrastructure Task #7478 (In Progress): Create script to create centos8 image suitable for opennebula
- 02:01 PM Open Infrastructure Task #7478: Create script to create centos8 image suitable for opennebula
- I bootstraped an initial image but there's still some cleanup to do.
- 10:07 AM Open Infrastructure Task #7482: On Alpine Linux the monit job for node-exporter uses the wrong path
- > Add an "os" check into manifest/dcl in the router section to use a different __ungleich_monit config depending on t...
12/15/2019
- 11:03 PM Open Infrastructure Task #7483 (Closed): Update the __consul cdist type for alpine
- seems like the configuration place is different on current alpine that what we assumed/what is in our normal config f...
- 11:01 PM Open Infrastructure Task #7482 (Closed): On Alpine Linux the monit job for node-exporter uses the wrong path
- Current state is:...
- 05:31 PM Open Infrastructure Task #7478 (Closed): Create script to create centos8 image suitable for opennebula
- * centos8-build-opennebula.sh or similar
* goes into ungleich-tools - 11:47 AM Open Infrastructure Task #7472 (Closed): Fix the fedora image for resize
- * In theory the opennebula scripts *should* do that
** I think I have even seen scripts in /etc/one-context.d that *...
12/10/2019
- 05:04 PM Open Infrastructure Task #7456 (Rejected): Prototype support for IPv6 only mail servers
- * incoming via bounce/transfer host
** whitelist of domains + smarthost settings?
* outgoing
** check whether MX ...
Also available in: Atom