Activity
From 04/18/2019 to 05/17/2019
05/17/2019
- MA 01:08 PM Task #6697 (Closed): Dell R710 Server 5 fixing
- MA 12:35 PM Task #6697 (Closed): Dell R710 Server 5 fixing
- fix server 5 from the dell power edge 710
- MA 12:34 PM Task #6632 (Resolved): Setup all servers physically and BIOS / idrac
- MA 11:26 AM Task #6632: Setup all servers physically and BIOS / idrac
- Server 5 has some boot problems, i will fix this in a another ticket.
server 1 - 4 & 6 - 9 are good - NS 11:03 AM Task #6696 (Rejected): Update documentation / instructions on how to login to a new VM
- It is not always clear to users => maybe add documentation in redmine here and link it from login?
05/16/2019
- WC 09:50 PM Task #6672 (Feedback): implementation of ungleich-cli setup reverse to users
- Currently deployed in my dev machine
https://dev.william.ungleich.cloud - SK 05:26 PM Task #6663: Create and publish new Alpine 3.9 image
- to be release to prod on 05.20 together with alpine 3.8
- SK 05:25 PM Task #6662: Create and publish new Alpine 3.8 image
- to be released to prod on 05.20
- NS 05:23 PM Task #6694 (Closed): Setup matrix server and bridge matermost into it
- * ... and maybe on the way switch to matrix by default?
** unclear, needs testing before
* Requested by at least two users, last one on https://twitter.com/qryoxis/status/1129034888924016644
* As usual everything via cdist - NS 03:55 PM Task #6693 (In Progress): Document internal networking support, console features, floating IP options
- NS 03:48 PM Task #6693 (Rejected): Document internal networking support, console features, floating IP options
- What we do (not) support how. Based on input from https://twitter.com/gertvdijk/status/1129017514137198597
h2. Internal networking
Supported on IPv6 basis. We need to discuss / define how to best expose it automated to users. Meeti... - SK 11:21 AM Task #6661 (Closed): Create and publish new Ubuntu 19.04 image
- released to prod
05/13/2019
- DR 09:48 PM Task #6539 (Closed): Fix collabora integration in nextcloud
- DR 09:46 PM Task #6613 (Resolved): upgrade dynamicweb to debian 9
- nico did upgrade production
- NS 07:02 PM Task #6683 (Rejected): Fix OpenNebula vxlan creation / check differences to manual creation
h2. Creating manually
Creating vxlans manually works in our networks:- NS 05:55 PM Task #6681: Create a distributed firewall PoC based on uncloud/nft
- Watching on different servers nicely works:
- NS 05:51 PM Task #6681: Create a distributed firewall PoC based on uncloud/nft
- Checking mac addresses, inside != outside:
- NS 05:49 PM Task #6681 (In Progress): Create a distributed firewall PoC based on uncloud/nft
- * testing consul kv
- NS 05:35 PM Task #6681 (Rejected): Create a distributed firewall PoC based on uncloud/nft
- h2. Design
* uncloud needs to know about opennebula VMs
** we have an importer for this one
* uncloud needs to be able to extract mappings for
** mac <-> nic
** ip address <-> nic
** VM <-> host (?)
* uncloud needs to be able to...
05/10/2019
- NS 11:08 AM Task #6651: The network documentation ticket
- Good! If you correctly configure your router now, IPs in the networks will automatically be reachable!
- SH 11:04 AM Task #6651: The network documentation ticket
- 2a0a:e5c0:107::/48 (Routed-Network)
similar manner altering 4th section gives me /64s
The following are the networks
2a0a:e5c0:107:1::/64 ==> internal
2a0a:e5c0:107:2::/64 ==> server
2a0a:e5c0:107:3::/64 ==> coworking
- MA 10:44 AM Task #6632: Setup all servers physically and BIOS / idrac
- IDRAC User:
Root | ungleich
- Server with broken NIC fixed, old NIC should be broken
05/09/2019
- MA 07:22 PM Task #6632: Setup all servers physically and BIOS / idrac
- - 5 servers of 9 servers are ready by now
- 1 server has a broken Intel NIC Quad, "PCI SLOT Error"
- 3 servers needs a BIOS Update - i try to update them - WC 06:18 PM Task #6672: implementation of ungleich-cli setup reverse to users
- William Colmenares wrote:
> Implementation of unleich-cli, a service that let users setup their reverse dns
Create a service that commits/push the a file to dot-cdist/files/dns/zones in order to set up the reverse dns of the users
... - WC 05:40 PM Task #6672 (Closed): implementation of ungleich-cli setup reverse to users
- Implementation of unleich-cli, a service that let users setup their reverse dns
- NS 11:33 AM Task #6671 (Closed): Setup mastodon/pleroma for ungleich
- * See https://twitter.com/ungleich/status/1126419948274966528 for an explanation
* OS: your choice
* once manual for testing then port to cdist and create __mastodon type
* you don't have to use the mastodon server, but you can use an...
05/08/2019
- YK 11:44 PM Task #6663 (In Progress): Create and publish new Alpine 3.9 image
- Template ready
- YK 02:47 PM Task #6662 (In Progress): Create and publish new Alpine 3.8 image
- Template was published at staging portal
- YK 02:47 PM Task #6661 (In Progress): Create and publish new Ubuntu 19.04 image
- Template was published at staging portal
- MA 01:46 PM Task #6632 (In Progress): Setup all servers physically and BIOS / idrac
05/06/2019
- YK 10:58 PM Task #6660 (In Progress): Create new Devuan Beowulf pre-release image
- Template "devuan beowulf 20190506" created.
- YK 04:43 PM Task #6660 (Seen): Create new Devuan Beowulf pre-release image
- NS 04:00 PM Task #6660 (Closed): Create new Devuan Beowulf pre-release image
- * Take an existing Devuan Ascii
* Change the sources.list entries from ascii to beowulf
* apt update && apt dist-upgrade
* clean / unset the HISTFILE
* When done: Save image as => devuan beowulf 2019XXYY
* Create new template Devuan... - NS 07:28 PM Task #6632: Setup all servers physically and BIOS / idrac
- cc youngrong
- NS 04:44 PM Task #6663 (Closed): Create and publish new Alpine 3.9 image
- Should also be executed by Yury, similar to #6663.
Difference: This image needs to be updated from 3.8
Youngrong, your task to ensure it happens in time.
- NS 04:44 PM Task #6662 (Closed): Create and publish new Alpine 3.8 image
- Should also be executed by Yury, similar to #6660.
Difference: This image probably only needs to be downloaded/might already exist in opennebula.
Youngrong, your task to ensure it happens in time.
- YK 04:44 PM Task #6661 (Seen): Create and publish new Ubuntu 19.04 image
- NS 04:43 PM Task #6661 (Closed): Create and publish new Ubuntu 19.04 image
- Should also be executed by Yury, similar to #6660. Difference: This is not a pre-release.
Youngrong, your task to ensure it happens in time.
- WC 03:49 AM Task #6658 (In Progress): Rest interface accont ungleich for otp
- *Leaving it open for the feature to create/retrieve their realms seeds through the web interface
- WC 03:28 AM Task #6658 (Closed): Rest interface accont ungleich for otp
- Creation of a rest interface in account.ungleich.ch to create/retrieve users token.
05/05/2019
05/02/2019
- NS 01:26 PM Task #6601: Setup the arista switches at place6-east and place9
- Nice!
redmine@ungleich.ch writes: - SH 12:10 PM Task #6601: Setup the arista switches at place6-east and place9
- Setting up Switch in Place 9
* So this is how it looks like from the beginning.
* Frist we got the fibre-cable(up-stream) from the ISP (Nico), and we connected the fiber cable to our Arista switch (switch-1) in our side.
* Reseti...
05/01/2019
- NS 03:39 PM Task #6601 (In Progress): Setup the arista switches at place6-east and place9
- Please document how you updated the switch
- NS 03:09 PM Task #6601 (Closed): Setup the arista switches at place6-east and place9
- * It's reachable via IPv6, static route
- NS 03:33 PM Task #6652 (Closed): Install 2 Linux routers with Alpine Linux
- * Create a software raid 1 (or raid 6)
* Have mdadm running
* Install nftables
* Add public ssh keys of ungleich staff to root account
* Give both an IP address in the transfer network
- NS 03:30 PM Task #6651 (Closed): The network documentation ticket
- * Add your network separation in here / define which network is what
* You have a /48, you need to partition into /64s on your own
| 2a0a:e5c0:1:7::19 | switch1-place9 |
| 2a0a:e5c0:107:2::/64 | server |
| 2a0a:e5c0:107:... - NS 03:29 PM Task #6650 (Closed): Make Mikrotik a router for the fiber network, enable the server network (vlan), use vlan tagging on the mikrotik to be able to be a router
- Arista:
* create a new vlan
* reconfigure port of mikrotik to be a trunk port (= sending tagged frames)
Mikrotik:
* reconfigure the fiber port, make it send tagged frames
* add a new bridge for the server network
* add a new ... - NS 03:22 PM Task #6649 (Closed): Create new internal VLAN for place9 WITH a router and move servers to the internal VLAN
- Arista:
* vlan ... name ... (in arista)
Mikrotik:
* fiber = vlan 1, no tagging
* copper = internal vlan
* needs a bridge for the internal vlan
* does not need to do vlan tagging
* has ipv6 addresses on both bridges
Expect... - NS 03:19 PM Task #6648 (Closed): Configure (reset cleanly) a Mikrotik hapAC as a fiber2copper bridge, connect all servers with copper
- * Configure WiFi on it with essid = "place9"
** save password in pass, place9-dcl-rebuild/mikrotik
* Use it to bridge fiber2copper
* Connect all servers to it / another "dumb" switch
* Give it an IP address, :19 in the transfer netwo... - NS 03:08 PM Task #6559 (Closed): Understand the current networking infrustructure of place6
- NS 11:41 AM Task #6646 (Closed): Load iPXE from IPv4 and chainload ipxe configuration via IPv6
- * ipxe is loaded by IPv4
* ipxe itself only has support for IPv6
* ipxe loads configuration file via IPv6 + http from the bootserver - NS 11:39 AM Task #6645 (Closed): Setup APU as IPv6 boot server
- * Install radvd and configure
* Coordinate the network with Samuel
* Document the network in the wiki
* Setup dhcpv6 for netboot information
** dhcpv6 should not give out IPv6 addresses, but only handle netboot information - NS 11:38 AM Task #6644 (Closed): Netboot server via IPv4 / internal NIC
- * Task done when the server starts ipxe from network
- NS 11:37 AM Task #6643 (Closed): Reinstall / APU as tftp server
- * Take an APU from our stock
* Install Alpine Linux to it
* Connect eth0 to the dcl-rebuild network
* Install a DHCPv4 server
* Install a tftp server
* Configure the DHCPv4 server for netbooting
* Add the iPXE image to the tftp ser... - NS 11:33 AM Task #6437 (New): build opennebula ARM64 Packages
- NS 11:32 AM Task #5753 (New): Create Linux beginners guide
- NS 11:02 AM Task #6642 (Closed): Create iPXE image that boots in IPv6 only environment and burn it to the X520 NIC
04/30/2019
- NS 12:24 PM Task #6600 (Closed): Configure and define upstream networking
- NS 12:24 PM Task #6600: Configure and define upstream networking
- * switch2: fixed, DNS problem.
- NS 12:06 PM Task #6600: Configure and define upstream networking
- * switch2: access denied
* switch3: done
* switch4: done - NS 12:04 PM Task #6600 (In Progress): Configure and define upstream networking
- NS 12:03 PM Task #6601: Setup the arista switches at place6-east and place9
- Port 39 in switch1 is not connected:
- SH 11:57 AM Task #6601: Setup the arista switches at place6-east and place9
- How to Arista
* first reset the used Arista switch
* Set up username and password
04/29/2019
- NS 08:20 PM Task #6601: Setup the arista switches at place6-east and place9
- Note: switch1, port33 is a 1gbit trunk port -> seems not to be the right one!
- SH 03:27 PM Task #6601: Setup the arista switches at place6-east and place9
- * Correction Switch-1 Port-39 switch-1
- NS 11:58 AM Task #6601: Setup the arista switches at place6-east and place9
- Which switch on provider (=dcl old) side?
- SH 11:28 AM Task #6601: Setup the arista switches at place6-east and place9
- -* Fiber cable is in Port-33 in both sides-
- NS 03:20 PM Task #6600: Configure and define upstream networking
- * switch = :18 for the moment
- NS 10:54 AM Task #6600: Configure and define upstream networking
- ping for marc
- NS 09:48 AM Task #6600: Configure and define upstream networking
- Sami,
all network information is in here. I'll just need the switch+port combination again from your side. - NS 10:55 AM Task #6632 (Closed): Setup all servers physically and BIOS / idrac
- * Update BIOS to the latest version
* Configure BIOS correctly
** srv-io on
** dma virtualisation on
* configure raid controller
** all disks in individual raid0
* Enable IPMI with IPv6
* RAM >= 128GB working in each machine
* Di...
04/28/2019
- JK 03:12 PM Task #6598 (Closed): Add styles in account.ungleich.ch
- WC 02:09 PM Task #6598 (Resolved): Add styles in account.ungleich.ch
- WC 02:16 PM Task #6629: REST interface that supports creating users with email validation in account.ungleich.ch
- *Changing the views. Currently creating the user directly.
- WC 02:12 PM Task #6629 (Closed): REST interface that supports creating users with email validation in account.ungleich.ch
- add a REST interface that supports creating users with email validation
04/23/2019
- DR 12:03 PM Task #6613 (In Progress): upgrade dynamicweb to debian 9
- Upgraded:
* dynamicweb-development2
* dynamicweb-development
* dynamicweb-staging
The services were checked by mondi
dynamicweb-production will follow next week
04/19/2019
- DR 10:47 AM Task #6613 (Closed): upgrade dynamicweb to debian 9
- Upgrade all the dynamicweb environment from debian 8 to debian 9
affected VMs:
* dynamicweb-staging
* dynamicweb-production
* dynamicweb-development
* dynamicweb-development2