Activity
From 05/09/2019 to 06/07/2019
06/06/2019
- NS 03:10 PM Task #6724: Add FreeBSD 12 image to datacenterlight.ch
- Mondi, can you check, verify & release?
- NS 01:21 PM Task #6795: extend ungleich-cli to read from a configuration file
- * support multiple user/realm/seed, maybe give each an "id" that the user can select in ungleich-cli
* support managing this file via `ungleich-cli config account-add ...` and `ungleich-cli config account-del ...`
* support listing `un... - WC 12:54 PM Task #6795 (Closed): extend ungleich-cli to read from a configuration file
- Support ungleich-cli to read user/realm/seed from a configuration file
- YK 12:57 PM Task #6794 (In Progress): Find out why request tracker crashes from time to time and fix it
- NS 12:25 PM Task #6794 (Closed): Find out why request tracker crashes from time to time and fix it
- From time to time the request tracker tasks crashes and is restarted by monit at the moment.
However when editing tickets and posting information, the workflow is interrupted because the backend process (RT) is not available.
Please ...
06/05/2019
- WC 08:17 PM Task #6756 (Resolved): mini flask project inside ungleich-otp
- WC 08:17 PM Task #6756: mini flask project inside ungleich-otp
- Created two routes /flask & /flask/protected
06/04/2019
- NS 06:38 PM Task #6780 (Rejected): Create an RFC for ungleich-otp
- ...and submit it. Explain motivation and differences to jwt.
- YK 08:51 AM Task #6764 (Seen): Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- YK 08:49 AM Task #6763 (Seen): Mirror debian (maybe from / with help of debian.ethz.ch)
06/03/2019
- NS 04:52 PM Task #6764 (Closed): Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- Articles are a concept of request tracker that allows us to document standard answers that we can use for responding.
If logged in as root, the article management is available, however if logged in as regular staff, the article menu d... - NS 04:45 PM Task #6763 (Rejected): Mirror debian (maybe from / with help of debian.ethz.ch)
- Attention: we should first cleanly rebalance the ceph cluster, as it approaches 80% usage without a real usage in the area of 60%) => get in touch with Jin-Guk first.
- NS 04:18 PM Task #6762 (Rejected): Allow IPv6 only hosts to properly send emails to IPv4 only hosts
- Currently IPv6 only hosts get NAT64'ed to one of our IPv4 addresses. When there is a mail server running on an IPv6 only host that connects to an IPv4 host using the source address 185.203.114.1 .
This again is reverse DNS based mappe...
06/01/2019
- WC 01:48 PM Task #6757 (Closed): Ungleich-Cli: Add subcommand account-register for users
- Add a subcommand that registers an account on account.ungleich.ch and shows message that the person needs to check email for verification)
repo with unlgeich-cli: https://code.ungleich.ch/ungleich-public/ungleich-cli - WC 01:46 PM Task #6756 (Closed): mini flask project inside ungleich-otp
- Create a mini flask app inside a sub directory in ungleich-otp that:
- Users has one public route and one route that is protected by ungleich-otp.
- Add a configuration option for which realm to use for protection
05/28/2019
- MA 09:54 AM Task #6632 (Resolved): Setup all servers physically and BIOS / idrac
- MA 09:54 AM Task #6632: Setup all servers physically and BIOS / idrac
- We have now:
1 - 2 RAM Sticks are broken
1 - 2 Warnings, RAM DIMM Geometric Warning (now only warning)
8 Servers with 128 GB RAM
05/26/2019
- WC 11:08 PM Task #6658: Rest interface accont ungleich for otp
- Otp seed creation (ungleich-user) on user creation Done.
- WC 09:51 AM Task #6658: Rest interface accont ungleich for otp
- New milestone:
- automatically create ungleich-otp seed when creating user, realm = ungleich-user and show all seeds for a user in account.ungleich.ch ( - YK 03:30 PM Task #6724 (In Progress): Add FreeBSD 12 image to datacenterlight.ch
- FreeBSD 12 image is ready.
05/23/2019
- NS 04:12 PM Task #6727 (Rejected): Create a terraform provider
- Need to discuss/define which interfaces make most sense for exposing.
* https://www.terraform.io/docs/providers/index.html - NS 02:44 PM Task #6279: Implement different payment cycles for VMs
- I raised the priority to high, as we get more requests to change from monthly to more dynamic.
- NS 01:15 PM Task #6725 (Closed): Order new hardware for place9
- * 2x Arista 7050
* 2x UPS -> Sami
- NS 12:53 PM Task #6724 (Closed): Add FreeBSD 12 image to datacenterlight.ch
- * Either upgrade current or
* Rebuild new image
05/22/2019
- NS 04:22 PM Task #6720 (Rejected): Create a proxy to reduce latency of package downloads
- * proxy.placeX.ungleich.ch
** Users can potentially use http(s?)://proxy on their VMs
05/20/2019
- NS 09:27 PM Task #6712 (Rejected): Rework public key management on the DCL website
- Allow customers to have different sets of keys for different VMs. Sets can also be empty.
We will integrate this first in the CLI/API and later expose in the web interface. - SH 02:33 PM Task #6648 (In Progress): Configure (reset cleanly) a Mikrotik hapAC as a fiber2copper bridge, connect all servers with copper
- SH 02:32 PM Task #6648: Configure (reset cleanly) a Mikrotik hapAC as a fiber2copper bridge, connect all servers with copper
- 1 * Pinging from Client to router-internal
- NS 09:36 AM Task #6709 (Closed): Configure IPv6 only netbooting
- * Have 1 router installed
* Have 1 server boot via network
** get ipv6 address via RA (router advertisements)
** get boot information only via dhcpv6
* You might need to flash ipxe to the network card(s)
** copper
** fiber
h2. T...
05/19/2019
- NS 07:34 PM Task #6708 (Rejected): Create infrastructure usable for IPv6 workshops
- Instead of focusing on hardware, we could also change data center light a bit, so that people can do the workshop with virtual machines.
* Requirements:
** a /48 per participant
** capability to add "client" machines
*** to do real... - NS 06:04 PM Task #6707 (Closed): Find a router suitable for IPv6 workshops
- Next IPv6 workshop will be at https://www.cosin.ch/de/ in June. Participants should be able to *route* networks => need >= 2 interfaces.
Should be gigabit, should be affordable.
Possible devices:
| pcengines apu | board: ~110, cas...
05/18/2019
- NS 07:49 PM Task #6632: Setup all servers physically and BIOS / idrac
- Marc,
please fix all servers so that the DIMM issues are gone, each server has 128GB RAM and is connected 1x with power (not turned on though)
Please also the disk configuration so that each disk is in a raid0 with itself only. - NS 07:47 PM Task #6632 (In Progress): Setup all servers physically and BIOS / idrac
- Checking:
* All servers have 128+GB RAM => no
* Bios
* many servers not connected to power
* foreign disk configurations
** need to be cleared
** each disk should be in a raid0 on its own
* r710-1:
** dimm mismatches need to b... - WC 06:43 PM Task #6672: implementation of ungleich-cli setup reverse to users
- HOW TO:
In order to let users set up their reversedns it is required a valid ungleich account, you can register at https://account.ungleich.ch/register/
After the registration, you need a valid otp account and seed, to do this you ...
05/17/2019
- MA 01:08 PM Task #6697 (Closed): Dell R710 Server 5 fixing
- MA 12:35 PM Task #6697 (Closed): Dell R710 Server 5 fixing
- fix server 5 from the dell power edge 710
- MA 12:34 PM Task #6632 (Resolved): Setup all servers physically and BIOS / idrac
- MA 11:26 AM Task #6632: Setup all servers physically and BIOS / idrac
- Server 5 has some boot problems, i will fix this in a another ticket.
server 1 - 4 & 6 - 9 are good - NS 11:03 AM Task #6696 (Rejected): Update documentation / instructions on how to login to a new VM
- It is not always clear to users => maybe add documentation in redmine here and link it from login?
05/16/2019
- WC 09:50 PM Task #6672 (Feedback): implementation of ungleich-cli setup reverse to users
- Currently deployed in my dev machine
https://dev.william.ungleich.cloud - SK 05:26 PM Task #6663: Create and publish new Alpine 3.9 image
- to be release to prod on 05.20 together with alpine 3.8
- SK 05:25 PM Task #6662: Create and publish new Alpine 3.8 image
- to be released to prod on 05.20
- NS 05:23 PM Task #6694 (Closed): Setup matrix server and bridge matermost into it
- * ... and maybe on the way switch to matrix by default?
** unclear, needs testing before
* Requested by at least two users, last one on https://twitter.com/qryoxis/status/1129034888924016644
* As usual everything via cdist - NS 03:55 PM Task #6693 (In Progress): Document internal networking support, console features, floating IP options
- NS 03:48 PM Task #6693 (Rejected): Document internal networking support, console features, floating IP options
- What we do (not) support how. Based on input from https://twitter.com/gertvdijk/status/1129017514137198597
h2. Internal networking
Supported on IPv6 basis. We need to discuss / define how to best expose it automated to users. Meeti... - SK 11:21 AM Task #6661 (Closed): Create and publish new Ubuntu 19.04 image
- released to prod
05/13/2019
- DR 09:48 PM Task #6539 (Closed): Fix collabora integration in nextcloud
- DR 09:46 PM Task #6613 (Resolved): upgrade dynamicweb to debian 9
- nico did upgrade production
- NS 07:02 PM Task #6683 (Rejected): Fix OpenNebula vxlan creation / check differences to manual creation
h2. Creating manually
Creating vxlans manually works in our networks:- NS 05:55 PM Task #6681: Create a distributed firewall PoC based on uncloud/nft
- Watching on different servers nicely works:
- NS 05:51 PM Task #6681: Create a distributed firewall PoC based on uncloud/nft
- Checking mac addresses, inside != outside:
- NS 05:49 PM Task #6681 (In Progress): Create a distributed firewall PoC based on uncloud/nft
- * testing consul kv
- NS 05:35 PM Task #6681 (Rejected): Create a distributed firewall PoC based on uncloud/nft
- h2. Design
* uncloud needs to know about opennebula VMs
** we have an importer for this one
* uncloud needs to be able to extract mappings for
** mac <-> nic
** ip address <-> nic
** VM <-> host (?)
* uncloud needs to be able to...
05/10/2019
- NS 11:08 AM Task #6651: The network documentation ticket
- Good! If you correctly configure your router now, IPs in the networks will automatically be reachable!
- SH 11:04 AM Task #6651: The network documentation ticket
- 2a0a:e5c0:107::/48 (Routed-Network)
similar manner altering 4th section gives me /64s
The following are the networks
2a0a:e5c0:107:1::/64 ==> internal
2a0a:e5c0:107:2::/64 ==> server
2a0a:e5c0:107:3::/64 ==> coworking
- MA 10:44 AM Task #6632: Setup all servers physically and BIOS / idrac
- IDRAC User:
Root | ungleich
- Server with broken NIC fixed, old NIC should be broken
05/09/2019
- MA 07:22 PM Task #6632: Setup all servers physically and BIOS / idrac
- - 5 servers of 9 servers are ready by now
- 1 server has a broken Intel NIC Quad, "PCI SLOT Error"
- 3 servers needs a BIOS Update - i try to update them - WC 06:18 PM Task #6672: implementation of ungleich-cli setup reverse to users
- William Colmenares wrote:
> Implementation of unleich-cli, a service that let users setup their reverse dns
Create a service that commits/push the a file to dot-cdist/files/dns/zones in order to set up the reverse dns of the users
... - WC 05:40 PM Task #6672 (Closed): implementation of ungleich-cli setup reverse to users
- Implementation of unleich-cli, a service that let users setup their reverse dns
- NS 11:33 AM Task #6671 (Closed): Setup mastodon/pleroma for ungleich
- * See https://twitter.com/ungleich/status/1126419948274966528 for an explanation
* OS: your choice
* once manual for testing then port to cdist and create __mastodon type
* you don't have to use the mastodon server, but you can use an...