Activity
From 05/01/2019 to 05/30/2019
05/28/2019
- MA 09:54 AM Task #6632 (Resolved): Setup all servers physically and BIOS / idrac
- MA 09:54 AM Task #6632: Setup all servers physically and BIOS / idrac
- We have now:
1 - 2 RAM Sticks are broken
1 - 2 Warnings, RAM DIMM Geometric Warning (now only warning)
8 Servers with 128 GB RAM
05/26/2019
- WC 11:08 PM Task #6658: Rest interface accont ungleich for otp
- Otp seed creation (ungleich-user) on user creation Done.
- WC 09:51 AM Task #6658: Rest interface accont ungleich for otp
- New milestone:
- automatically create ungleich-otp seed when creating user, realm = ungleich-user and show all seeds for a user in account.ungleich.ch ( - YK 03:30 PM Task #6724 (In Progress): Add FreeBSD 12 image to datacenterlight.ch
- FreeBSD 12 image is ready.
05/23/2019
- NS 04:12 PM Task #6727 (Rejected): Create a terraform provider
- Need to discuss/define which interfaces make most sense for exposing.
* https://www.terraform.io/docs/providers/index.html - NS 02:44 PM Task #6279: Implement different payment cycles for VMs
- I raised the priority to high, as we get more requests to change from monthly to more dynamic.
- NS 01:15 PM Task #6725 (Closed): Order new hardware for place9
- * 2x Arista 7050
* 2x UPS -> Sami
- NS 12:53 PM Task #6724 (Closed): Add FreeBSD 12 image to datacenterlight.ch
- * Either upgrade current or
* Rebuild new image
05/22/2019
- NS 04:22 PM Task #6720 (Rejected): Create a proxy to reduce latency of package downloads
- * proxy.placeX.ungleich.ch
** Users can potentially use http(s?)://proxy on their VMs
05/20/2019
- NS 09:27 PM Task #6712 (Rejected): Rework public key management on the DCL website
- Allow customers to have different sets of keys for different VMs. Sets can also be empty.
We will integrate this first in the CLI/API and later expose in the web interface. - SH 02:33 PM Task #6648 (In Progress): Configure (reset cleanly) a Mikrotik hapAC as a fiber2copper bridge, connect all servers with copper
- SH 02:32 PM Task #6648: Configure (reset cleanly) a Mikrotik hapAC as a fiber2copper bridge, connect all servers with copper
- 1 * Pinging from Client to router-internal
- NS 09:36 AM Task #6709 (Closed): Configure IPv6 only netbooting
- * Have 1 router installed
* Have 1 server boot via network
** get ipv6 address via RA (router advertisements)
** get boot information only via dhcpv6
* You might need to flash ipxe to the network card(s)
** copper
** fiber
h2. T...
05/19/2019
- NS 07:34 PM Task #6708 (Rejected): Create infrastructure usable for IPv6 workshops
- Instead of focusing on hardware, we could also change data center light a bit, so that people can do the workshop with virtual machines.
* Requirements:
** a /48 per participant
** capability to add "client" machines
*** to do real... - NS 06:04 PM Task #6707 (Closed): Find a router suitable for IPv6 workshops
- Next IPv6 workshop will be at https://www.cosin.ch/de/ in June. Participants should be able to *route* networks => need >= 2 interfaces.
Should be gigabit, should be affordable.
Possible devices:
| pcengines apu | board: ~110, cas...
05/18/2019
- NS 07:49 PM Task #6632: Setup all servers physically and BIOS / idrac
- Marc,
please fix all servers so that the DIMM issues are gone, each server has 128GB RAM and is connected 1x with power (not turned on though)
Please also the disk configuration so that each disk is in a raid0 with itself only. - NS 07:47 PM Task #6632 (In Progress): Setup all servers physically and BIOS / idrac
- Checking:
* All servers have 128+GB RAM => no
* Bios
* many servers not connected to power
* foreign disk configurations
** need to be cleared
** each disk should be in a raid0 on its own
* r710-1:
** dimm mismatches need to b... - WC 06:43 PM Task #6672: implementation of ungleich-cli setup reverse to users
- HOW TO:
In order to let users set up their reversedns it is required a valid ungleich account, you can register at https://account.ungleich.ch/register/
After the registration, you need a valid otp account and seed, to do this you ...
05/17/2019
- MA 01:08 PM Task #6697 (Closed): Dell R710 Server 5 fixing
- MA 12:35 PM Task #6697 (Closed): Dell R710 Server 5 fixing
- fix server 5 from the dell power edge 710
- MA 12:34 PM Task #6632 (Resolved): Setup all servers physically and BIOS / idrac
- MA 11:26 AM Task #6632: Setup all servers physically and BIOS / idrac
- Server 5 has some boot problems, i will fix this in a another ticket.
server 1 - 4 & 6 - 9 are good - NS 11:03 AM Task #6696 (Rejected): Update documentation / instructions on how to login to a new VM
- It is not always clear to users => maybe add documentation in redmine here and link it from login?
05/16/2019
- WC 09:50 PM Task #6672 (Feedback): implementation of ungleich-cli setup reverse to users
- Currently deployed in my dev machine
https://dev.william.ungleich.cloud - SK 05:26 PM Task #6663: Create and publish new Alpine 3.9 image
- to be release to prod on 05.20 together with alpine 3.8
- SK 05:25 PM Task #6662: Create and publish new Alpine 3.8 image
- to be released to prod on 05.20
- NS 05:23 PM Task #6694 (Closed): Setup matrix server and bridge matermost into it
- * ... and maybe on the way switch to matrix by default?
** unclear, needs testing before
* Requested by at least two users, last one on https://twitter.com/qryoxis/status/1129034888924016644
* As usual everything via cdist - NS 03:55 PM Task #6693 (In Progress): Document internal networking support, console features, floating IP options
- NS 03:48 PM Task #6693 (Rejected): Document internal networking support, console features, floating IP options
- What we do (not) support how. Based on input from https://twitter.com/gertvdijk/status/1129017514137198597
h2. Internal networking
Supported on IPv6 basis. We need to discuss / define how to best expose it automated to users. Meeti... - SK 11:21 AM Task #6661 (Closed): Create and publish new Ubuntu 19.04 image
- released to prod
05/13/2019
- DR 09:48 PM Task #6539 (Closed): Fix collabora integration in nextcloud
- DR 09:46 PM Task #6613 (Resolved): upgrade dynamicweb to debian 9
- nico did upgrade production
- NS 07:02 PM Task #6683 (Rejected): Fix OpenNebula vxlan creation / check differences to manual creation
h2. Creating manually
Creating vxlans manually works in our networks:- NS 05:55 PM Task #6681: Create a distributed firewall PoC based on uncloud/nft
- Watching on different servers nicely works:
- NS 05:51 PM Task #6681: Create a distributed firewall PoC based on uncloud/nft
- Checking mac addresses, inside != outside:
- NS 05:49 PM Task #6681 (In Progress): Create a distributed firewall PoC based on uncloud/nft
- * testing consul kv
- NS 05:35 PM Task #6681 (Rejected): Create a distributed firewall PoC based on uncloud/nft
- h2. Design
* uncloud needs to know about opennebula VMs
** we have an importer for this one
* uncloud needs to be able to extract mappings for
** mac <-> nic
** ip address <-> nic
** VM <-> host (?)
* uncloud needs to be able to...
05/10/2019
- NS 11:08 AM Task #6651: The network documentation ticket
- Good! If you correctly configure your router now, IPs in the networks will automatically be reachable!
- SH 11:04 AM Task #6651: The network documentation ticket
- 2a0a:e5c0:107::/48 (Routed-Network)
similar manner altering 4th section gives me /64s
The following are the networks
2a0a:e5c0:107:1::/64 ==> internal
2a0a:e5c0:107:2::/64 ==> server
2a0a:e5c0:107:3::/64 ==> coworking
- MA 10:44 AM Task #6632: Setup all servers physically and BIOS / idrac
- IDRAC User:
Root | ungleich
- Server with broken NIC fixed, old NIC should be broken
05/09/2019
- MA 07:22 PM Task #6632: Setup all servers physically and BIOS / idrac
- - 5 servers of 9 servers are ready by now
- 1 server has a broken Intel NIC Quad, "PCI SLOT Error"
- 3 servers needs a BIOS Update - i try to update them - WC 06:18 PM Task #6672: implementation of ungleich-cli setup reverse to users
- William Colmenares wrote:
> Implementation of unleich-cli, a service that let users setup their reverse dns
Create a service that commits/push the a file to dot-cdist/files/dns/zones in order to set up the reverse dns of the users
... - WC 05:40 PM Task #6672 (Closed): implementation of ungleich-cli setup reverse to users
- Implementation of unleich-cli, a service that let users setup their reverse dns
- NS 11:33 AM Task #6671 (Closed): Setup mastodon/pleroma for ungleich
- * See https://twitter.com/ungleich/status/1126419948274966528 for an explanation
* OS: your choice
* once manual for testing then port to cdist and create __mastodon type
* you don't have to use the mastodon server, but you can use an...
05/08/2019
- YK 11:44 PM Task #6663 (In Progress): Create and publish new Alpine 3.9 image
- Template ready
- YK 02:47 PM Task #6662 (In Progress): Create and publish new Alpine 3.8 image
- Template was published at staging portal
- YK 02:47 PM Task #6661 (In Progress): Create and publish new Ubuntu 19.04 image
- Template was published at staging portal
- MA 01:46 PM Task #6632 (In Progress): Setup all servers physically and BIOS / idrac
05/06/2019
- YK 10:58 PM Task #6660 (In Progress): Create new Devuan Beowulf pre-release image
- Template "devuan beowulf 20190506" created.
- YK 04:43 PM Task #6660 (Seen): Create new Devuan Beowulf pre-release image
- NS 04:00 PM Task #6660 (Closed): Create new Devuan Beowulf pre-release image
- * Take an existing Devuan Ascii
* Change the sources.list entries from ascii to beowulf
* apt update && apt dist-upgrade
* clean / unset the HISTFILE
* When done: Save image as => devuan beowulf 2019XXYY
* Create new template Devuan... - NS 07:28 PM Task #6632: Setup all servers physically and BIOS / idrac
- cc youngrong
- NS 04:44 PM Task #6663 (Closed): Create and publish new Alpine 3.9 image
- Should also be executed by Yury, similar to #6663.
Difference: This image needs to be updated from 3.8
Youngrong, your task to ensure it happens in time.
- NS 04:44 PM Task #6662 (Closed): Create and publish new Alpine 3.8 image
- Should also be executed by Yury, similar to #6660.
Difference: This image probably only needs to be downloaded/might already exist in opennebula.
Youngrong, your task to ensure it happens in time.
- YK 04:44 PM Task #6661 (Seen): Create and publish new Ubuntu 19.04 image
- NS 04:43 PM Task #6661 (Closed): Create and publish new Ubuntu 19.04 image
- Should also be executed by Yury, similar to #6660. Difference: This is not a pre-release.
Youngrong, your task to ensure it happens in time.
- WC 03:49 AM Task #6658 (In Progress): Rest interface accont ungleich for otp
- *Leaving it open for the feature to create/retrieve their realms seeds through the web interface
- WC 03:28 AM Task #6658 (Closed): Rest interface accont ungleich for otp
- Creation of a rest interface in account.ungleich.ch to create/retrieve users token.
05/05/2019
05/02/2019
- NS 01:26 PM Task #6601: Setup the arista switches at place6-east and place9
- Nice!
redmine@ungleich.ch writes: - SH 12:10 PM Task #6601: Setup the arista switches at place6-east and place9
- Setting up Switch in Place 9
* So this is how it looks like from the beginning.
* Frist we got the fibre-cable(up-stream) from the ISP (Nico), and we connected the fiber cable to our Arista switch (switch-1) in our side.
* Reseti...
05/01/2019
- NS 03:39 PM Task #6601 (In Progress): Setup the arista switches at place6-east and place9
- Please document how you updated the switch
- NS 03:09 PM Task #6601 (Closed): Setup the arista switches at place6-east and place9
- * It's reachable via IPv6, static route
- NS 03:33 PM Task #6652 (Closed): Install 2 Linux routers with Alpine Linux
- * Create a software raid 1 (or raid 6)
* Have mdadm running
* Install nftables
* Add public ssh keys of ungleich staff to root account
* Give both an IP address in the transfer network
- NS 03:30 PM Task #6651 (Closed): The network documentation ticket
- * Add your network separation in here / define which network is what
* You have a /48, you need to partition into /64s on your own
| 2a0a:e5c0:1:7::19 | switch1-place9 |
| 2a0a:e5c0:107:2::/64 | server |
| 2a0a:e5c0:107:... - NS 03:29 PM Task #6650 (Closed): Make Mikrotik a router for the fiber network, enable the server network (vlan), use vlan tagging on the mikrotik to be able to be a router
- Arista:
* create a new vlan
* reconfigure port of mikrotik to be a trunk port (= sending tagged frames)
Mikrotik:
* reconfigure the fiber port, make it send tagged frames
* add a new bridge for the server network
* add a new ... - NS 03:22 PM Task #6649 (Closed): Create new internal VLAN for place9 WITH a router and move servers to the internal VLAN
- Arista:
* vlan ... name ... (in arista)
Mikrotik:
* fiber = vlan 1, no tagging
* copper = internal vlan
* needs a bridge for the internal vlan
* does not need to do vlan tagging
* has ipv6 addresses on both bridges
Expect... - NS 03:19 PM Task #6648 (Closed): Configure (reset cleanly) a Mikrotik hapAC as a fiber2copper bridge, connect all servers with copper
- * Configure WiFi on it with essid = "place9"
** save password in pass, place9-dcl-rebuild/mikrotik
* Use it to bridge fiber2copper
* Connect all servers to it / another "dumb" switch
* Give it an IP address, :19 in the transfer netwo... - NS 03:08 PM Task #6559 (Closed): Understand the current networking infrustructure of place6
- NS 11:41 AM Task #6646 (Closed): Load iPXE from IPv4 and chainload ipxe configuration via IPv6
- * ipxe is loaded by IPv4
* ipxe itself only has support for IPv6
* ipxe loads configuration file via IPv6 + http from the bootserver - NS 11:39 AM Task #6645 (Closed): Setup APU as IPv6 boot server
- * Install radvd and configure
* Coordinate the network with Samuel
* Document the network in the wiki
* Setup dhcpv6 for netboot information
** dhcpv6 should not give out IPv6 addresses, but only handle netboot information - NS 11:38 AM Task #6644 (Closed): Netboot server via IPv4 / internal NIC
- * Task done when the server starts ipxe from network
- NS 11:37 AM Task #6643 (Closed): Reinstall / APU as tftp server
- * Take an APU from our stock
* Install Alpine Linux to it
* Connect eth0 to the dcl-rebuild network
* Install a DHCPv4 server
* Install a tftp server
* Configure the DHCPv4 server for netbooting
* Add the iPXE image to the tftp ser... - NS 11:33 AM Task #6437 (New): build opennebula ARM64 Packages
- NS 11:32 AM Task #5753 (New): Create Linux beginners guide
- NS 11:02 AM Task #6642 (Closed): Create iPXE image that boots in IPv6 only environment and burn it to the X520 NIC