Activity
From 05/27/2019 to 06/25/2019
06/25/2019
- NS 10:25 PM Task #6683 (Rejected): Fix OpenNebula vxlan creation / check differences to manual creation
Will not do -- we will implement this in ucloud
redmine@ungleich.ch writes:- MR 10:06 PM Task #6683: Fix OpenNebula vxlan creation / check differences to manual creation
- Jin-Guk Kwon, can you update the status of the task, please?
- MR 09:51 PM Task #6671: Setup mastodon/pleroma for ungleich
- Jin-Guk, update the status of the task and comment, please.
- MR 09:46 PM Task #6541 (New): Monitor fans and power supplies
- MR 07:49 PM Task #6386: Add a 6to4 relay to our infrastructure
- Yury Komarov, could you please update the status of the task?
- NS 06:49 PM Task #6414: Expose the console of the VM to the users (noVNC or spice)
- Update from my side:
we should go with guacamole for this
redmine@ungleich.ch writes: - MR 06:44 PM Task #6414: Expose the console of the VM to the users (noVNC or spice)
Mondi Ravi, can you update the status of the task, please?- MR 05:31 PM Task #6468: When creating an account: Explain to the user that they get an activation mail
William Colmenares, can you update the status of the task, please?- MR 03:11 PM Task #6466: Fix the link in the password reset E-Mail [dynamicweb]
- William Colmenares, update the status of the task, please.
- MR 02:33 PM Task #6465: Expire the password reset link [datacenterlight, dynamicweb]
- Mondi Ravi, update the status of the task, please.
- MR 02:18 PM Task #6406: Document our LDAP setup and make it publicly available
- Dominique, check the task and update the status, please.
- AB 01:55 PM Task #6875: Create ucloud-scheduler
- **v1** is ready. It can be found "here":https://code.ungleich.ch/ungleich-public/ucloud-scheduler
@william and @llnu is notified to verify its working. - AB 12:15 PM Task #6876: Define ucloud JSON formats
- h2. VM JSON
- NS 11:54 AM Task #6876: Define ucloud JSON formats
- Ahmed, please fill in current format used for VMs
- NS 12:01 PM Task #6660 (Closed): Create new Devuan Beowulf pre-release image
redmine@ungleich.ch writes:- SK 09:52 AM Task #6660 (Resolved): Create new Devuan Beowulf pre-release image
- released on prod now.
- SH 09:50 AM Task #6873 (Seen): Ensure that all new 9 servers are running by end of week
- SH 09:36 AM Task #6709 (Seen): Configure IPv6 only netbooting
- SH 09:35 AM Task #6652 (Seen): Install 2 Linux routers with Alpine Linux
- SH 09:35 AM Task #6651 (Seen): The network documentation ticket
- SH 09:34 AM Task #6650 (Seen): Make Mikrotik a router for the fiber network, enable the server network (vlan), use vlan tagging on the mikrotik to be able to be a router
- SH 09:34 AM Task #6649 (Seen): Create new internal VLAN for place9 WITH a router and move servers to the internal VLAN
06/24/2019
- MR 07:43 PM Task #6279: Implement different payment cycles for VMs
- Mondi, what is the status of this task, please?
- AB 07:21 PM Task #6871: Create ucloud-api
- Now, using "etcd3":https://github.com/kragniz/python-etcd3 instead of using "coreos/etcd python binding":https://python-etcd.readthedocs.io/en/latest/ because the latter does not have support to watch a prefix e.g /v1/vm
This has impl... - AB 05:09 PM Task #6871: Create ucloud-api
- uuid is used instead of increasing number for Virtual Machine IDs.
- AB 01:48 PM Task #6871: Create ucloud-api
- * v1 is deployed on my vm *ssh root@2a0a:e5c0:2:12:0:f0ff:fea9:c3d9*
* @william and @llnu notified
- AB 11:36 AM Task #6871 (In Progress): Create ucloud-api
- AB 05:57 PM Task #6875: Create ucloud-scheduler
- Now, using "etcd3":https://github.com/kragniz/python-etcd3 instead of using "coreos/etcd python binding":https://python-etcd.readthedocs.io/en/latest/ because the latter does not have support to watch a prefix e.g /v1/vm
This has impl... - AB 05:33 PM Task #6875 (In Progress): Create ucloud-scheduler
- NS 02:27 PM Task #6875: Create ucloud-scheduler
- To be solved / undefined at the moment:
* Which component writes information about hosts? Do we have a key prefix /v1/host/<id>?
** If yes, do we need ucloud-host?
* Or do we use (existing) consul?
** consul is indeed an alternativ... - AB 02:22 PM Task #6875 (Seen): Create ucloud-scheduler
- NS 02:18 PM Task #6875 (Closed): Create ucloud-scheduler
- Reads / watches keys below /v1/vm (later probably as well /v1/networks?)
The JSON of the VM should contain a "status" field. On submit, the status should be "REQUESTED_NEW" (-> need to update ucloud-api).
h2. Creating VM
The sch... - MR 05:49 PM Task #5770: Create a howto: how we maintain our disks and ceph cluster(s)
- Samuel, what is the status of this task now, please?
- NS 04:05 PM Task #6877 (Rejected): Start the first VMs on place9 cluster using ucloud (ucloud v1)
- * Take 3+ systems (apu, r710) in place9
* Boot them w/ either Alpine (preferred) or Devuan
* Install ucloud-* on the appropriate hosts
** Use existing VMs where no physical hosts are required
h2. Task done criteria
Task is don... - NS 02:19 PM Task #6876 (Closed): Define ucloud JSON formats
- For VMs, networks, etc.
h2. VMs
06/23/2019
- NS 05:50 PM Task #6707 (Closed): Find a router suitable for IPv6 workshops
- Using APUs - easy to use and not too expensive
- NS 05:49 PM Task #6873 (Rejected): Ensure that all new 9 servers are running by end of week
- * Connected with copper and fiber
* All in the new place9
* All connected twice with fiber
* Have 2 new Arista switches configured
** with vlans
** with port channels for servers
** with an mlag
* All servers should be booted as u... - NS 05:47 PM Task #6681: Create a distributed firewall PoC based on uncloud/nft
- Balazs,
please read and close afterwards -- this is a duplicate ticket of ucloud-firewall. - NS 05:11 PM Task #6872 (Closed): Create ucloud-vm
- This service will run on EVERY vm host and will do the heavy lifting / creating of VMs
For v1, implement the following:
* Watch etcd on key prefix /v1/vm/
* If there is a change, check whether
** an existing VM on the current hos... - NS 04:48 PM Task #6871: Create ucloud-api
- * v1 due this week, v2 due next week
* Have William and Balazs verify after deploying - NS 04:44 PM Task #6871 (Closed): Create ucloud-api
- This is the user facing API for managing ucloud.
The main job of the API is to
* a) verify that the user can execute the task
** cannot delete other people's VMs
** if creating a paid service, request an a verification from payme... - EH 12:43 AM Task #6869: Challenge OpenStack and OpenNebula with ucloud
- I think payment method --> pluggable thing that let's the system know sth can be processed.
That can be: codes, credit in account, credit card, bank transfer (aka manual validation because banks live in the 20th century (note: openbanki...
06/22/2019
- NS 11:27 PM Task #6869 (Rejected): Challenge OpenStack and OpenNebula with ucloud
- {{toc}}
h2. Introduction
For proper growth and stability, we need to challenge our setup. We will try to replace opennebula with ucloud and at the same time challenge OpenStack.
This is not only a technical, but also a public pr... - JK 05:31 PM Task #6672 (Closed): implementation of ungleich-cli setup reverse to users
- JK 05:31 PM Task #6658 (Closed): Rest interface accont ungleich for otp
- JK 05:31 PM Task #6629 (Closed): REST interface that supports creating users with email validation in account.ungleich.ch
- JK 05:31 PM Task #5984 (Closed): Document gitlab setup
- JK 05:29 PM Task #6756 (Closed): mini flask project inside ungleich-otp
- JK 05:29 PM Task #6757 (Closed): Ungleich-Cli: Add subcommand account-register for users
- JK 05:28 PM Task #6795 (Closed): extend ungleich-cli to read from a configuration file
06/21/2019
- WC 04:12 AM Task #6795 (Resolved): extend ungleich-cli to read from a configuration file
- changes deployed.
06/19/2019
- LN 02:02 PM Task #6857 (Rejected): Create ucloud-firewall
- -extract all the relevant¹ infos from vm-hosts about the vms (William) VM-firewall service
-store it in etcd, in json
-send the json to the vm-hosts where nftables will be generated from it
-have a mechanism that automatically detects...
06/18/2019
06/17/2019
- NS 05:45 PM Task #6724 (Closed): Add FreeBSD 12 image to datacenterlight.ch
redmine@ungleich.ch writes:- MR 04:07 PM Task #6724 (Resolved): Add FreeBSD 12 image to datacenterlight.ch
- We put FreeBSD 12 on datacenterlight and ipv6onlyhosting today.
- NS 02:28 PM Task #6662 (Closed): Create and publish new Alpine 3.8 image
redmine@ungleich.ch writes:- SK 01:28 PM Task #6662 (Resolved): Create and publish new Alpine 3.8 image
- Released on datacenterlight.ch and IPV6onlyhosting.com as per schedule
- NS 02:28 PM Task #6663 (Closed): Create and publish new Alpine 3.9 image
redmine@ungleich.ch writes:- SK 01:28 PM Task #6663 (Resolved): Create and publish new Alpine 3.9 image
- Released on datacenterlight.ch and IPV6onlyhosting.com as per schedule
06/15/2019
- SK 05:49 PM Task #5679: [user request] [web] Implement VM reset
- There was another user request for this issue today.
- DR 11:11 AM Task #5984 (Resolved): Document gitlab setup
06/13/2019
- NS 11:33 AM Task #6764 (Closed): Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
Perfect!
redmine@ungleich.ch writes:- JK 10:22 AM Task #6764: Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- @nico
yorked was already ungleich pass member. so i sent ungleich pass uri.
and he wanted more easy way. so i tried to find another way and i added admin access right to his account on support web.
06/12/2019
- JK 04:58 PM Task #6613 (Closed): upgrade dynamicweb to debian 9
- JK 04:31 PM Task #6841 (Closed): ungleich-otp automatically create seed when creating user
- WC 12:56 PM Task #6841 (Closed): ungleich-otp automatically create seed when creating user
- On user creation/register, create a valid otp seed in the realm ungleich-user
show to the user its list of seed through the web interface - NS 02:38 PM Task #6764 (Feedback): Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- ping Jin-Guk
- NS 02:38 PM Task #6764: Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- For root access, please get in touch with Jin-Guk
redmine@ungleich.ch writes: - YK 01:44 PM Task #6764: Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- Now arcticles is accesible on creating tickets. And it looks like we need to setup access rights for groups - to make 'Articles' menu item visible for users.
I need root access (at RT GUI).
- NS 02:29 PM Task #6632 (Closed): Setup all servers physically and BIOS / idrac
- YK 01:41 PM Task #6794: Find out why request tracker crashes from time to time and fix it
- Still trying to find a reason. Debug info does not consist errors about this crashes. Probably, it could be some email headers.
- WC 12:18 PM Task #6795 (Resolved): extend ungleich-cli to read from a configuration file
06/11/2019
- WC 04:50 AM Task #6795: extend ungleich-cli to read from a configuration file
- working in list-delete conf
06/10/2019
- WC 03:47 PM Task #6795: extend ungleich-cli to read from a configuration file
- Read configuration done, awaiting for deployment
- WC 03:47 PM Task #6658: Rest interface accont ungleich for otp
- deployed in account.ungleich.ch/otp/
- WC 03:45 PM Task #6658 (Resolved): Rest interface accont ungleich for otp
- WC 03:44 PM Task #6672 (Resolved): implementation of ungleich-cli setup reverse to users
- Fixed verification against dynamicweb
06/06/2019
- NS 03:10 PM Task #6724: Add FreeBSD 12 image to datacenterlight.ch
- Mondi, can you check, verify & release?
- NS 01:21 PM Task #6795: extend ungleich-cli to read from a configuration file
- * support multiple user/realm/seed, maybe give each an "id" that the user can select in ungleich-cli
* support managing this file via `ungleich-cli config account-add ...` and `ungleich-cli config account-del ...`
* support listing `un... - WC 12:54 PM Task #6795 (Closed): extend ungleich-cli to read from a configuration file
- Support ungleich-cli to read user/realm/seed from a configuration file
- YK 12:57 PM Task #6794 (In Progress): Find out why request tracker crashes from time to time and fix it
- NS 12:25 PM Task #6794 (Closed): Find out why request tracker crashes from time to time and fix it
- From time to time the request tracker tasks crashes and is restarted by monit at the moment.
However when editing tickets and posting information, the workflow is interrupted because the backend process (RT) is not available.
Please ...
06/05/2019
- WC 08:17 PM Task #6756 (Resolved): mini flask project inside ungleich-otp
- WC 08:17 PM Task #6756: mini flask project inside ungleich-otp
- Created two routes /flask & /flask/protected
06/04/2019
- NS 06:38 PM Task #6780 (Rejected): Create an RFC for ungleich-otp
- ...and submit it. Explain motivation and differences to jwt.
- YK 08:51 AM Task #6764 (Seen): Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- YK 08:49 AM Task #6763 (Seen): Mirror debian (maybe from / with help of debian.ethz.ch)
06/03/2019
- NS 04:52 PM Task #6764 (Closed): Reconfigure RT / support.ungleich.ch so that staff users can create "articles"
- Articles are a concept of request tracker that allows us to document standard answers that we can use for responding.
If logged in as root, the article management is available, however if logged in as regular staff, the article menu d... - NS 04:45 PM Task #6763 (Rejected): Mirror debian (maybe from / with help of debian.ethz.ch)
- Attention: we should first cleanly rebalance the ceph cluster, as it approaches 80% usage without a real usage in the area of 60%) => get in touch with Jin-Guk first.
- NS 04:18 PM Task #6762 (Rejected): Allow IPv6 only hosts to properly send emails to IPv4 only hosts
- Currently IPv6 only hosts get NAT64'ed to one of our IPv4 addresses. When there is a mail server running on an IPv6 only host that connects to an IPv4 host using the source address 185.203.114.1 .
This again is reverse DNS based mappe...
06/01/2019
- WC 01:48 PM Task #6757 (Closed): Ungleich-Cli: Add subcommand account-register for users
- Add a subcommand that registers an account on account.ungleich.ch and shows message that the person needs to check email for verification)
repo with unlgeich-cli: https://code.ungleich.ch/ungleich-public/ungleich-cli - WC 01:46 PM Task #6756 (Closed): mini flask project inside ungleich-otp
- Create a mini flask app inside a sub directory in ungleich-otp that:
- Users has one public route and one route that is protected by ungleich-otp.
- Add a configuration option for which realm to use for protection
05/28/2019
- MA 09:54 AM Task #6632 (Resolved): Setup all servers physically and BIOS / idrac
- MA 09:54 AM Task #6632: Setup all servers physically and BIOS / idrac
- We have now:
1 - 2 RAM Sticks are broken
1 - 2 Warnings, RAM DIMM Geometric Warning (now only warning)
8 Servers with 128 GB RAM