Activity
From 08/23/2019 to 09/21/2019
09/21/2019
- AB 08:31 PM Task #7129: Turn the netbox installation into a production setup
- It is working nicely on alpine linux.
I couldn't be able to make __ungleich_postgresql work on alpine correctly specifically there was some cron error.
@nico Backup thing is left and I need little bit guidance about it. LDAP is a...
09/20/2019
- NS 08:10 PM Task #7163 (Closed): Setup wireguard endpoints in place5
- * So that we can have ipv6 connectivity via any place
* Test how wireguard (client side) behaves with multiple wg devices up
** how is traffic shaped?
** which route is preferred?
** how does it behave if one peer is down - NS 07:15 PM Task #7156: Add new sunrise link to infrastrucure, introduce policy routing
- Saving config, updating with new bgp type
- NS 07:03 PM Task #7156: Add new sunrise link to infrastrucure, introduce policy routing
- NS 07:00 PM Task #7156: Add new sunrise link to infrastrucure, introduce policy routing
- Configuring network on router2.place5:
- NS 01:59 PM Task #7160: Phase in 2 new routers to avoid softirqd problem
- Setting up networking on replacement router1:
- NS 12:44 AM Task #7160 (Closed): Phase in 2 new routers to avoid softirqd problem
- * check/verify cdist config
* Maybe switch to jool
h2. Manual changes - NS 10:10 AM Task #7162 (Closed): Submit a patch for the alpine bird2 package to run as user bird
- * Currently bird runs as root unecessarily in alpine.
* Ensure a user bird (+group?) exists
* Ensure /etc/bird.conf is readable by the user bird
- NS 10:04 AM Task #7125: Implement "ordering" and "products" with ucloud
- If terminating X, because Y is terminated, we should add some kind of
flag for having the user verify.
This can be a client or server based check
redmine@ungleich.ch writes: - MR 06:45 AM Task #7138: Nico's open / next points for ucloud
- ucloud-pay: Added the functionality to handle one time payment in version 0.5.2 https://code.ungleich.ch/ucloud/ucloud-pay/-/tags/0.5.2
- NS 12:45 AM Task #7161 (Rejected): Create APKBUILD for jool, submit jool to alpine
- * dkms based
09/19/2019
- AB 09:54 PM Task #7129: Turn the netbox installation into a production setup
- cdist type done. Testing underway. Hopefully, create a PR tomorrow.
- NS 07:57 AM Task #7129: Turn the netbox installation into a production setup
- Looking forward to see your next cdist type, go ahead Ahmed!
redmine@ungleich.ch writes: - MR 06:51 PM Task #7125 (Feedback): Implement "ordering" and "products" with ucloud
- MR 06:47 PM Task #7125: Implement "ordering" and "products" with ucloud
- Made a release 0.5.2 https://code.ungleich.ch/ucloud/ucloud-pay/-/tags/0.5.2 that includes handling one-time payment products.
This makes the scope of this ticket almost done.
Only things that I see that would need to be implement... - MR 02:14 PM Task #7138: Nico's open / next points for ucloud
- I made a version 0.5.1 of ucloud-pay (https://code.ungleich.ch/ucloud/ucloud-pay) and deployed/tested it on ucloud-pay-dev.ungleich.ch and I think we are good to head over to the step where you should be able to "rock".
ucloud-pay: ht... - AB 01:31 PM Task #7122 (Seen): Setup production etcd cluster in place6
- AB 08:43 AM Task #7083: Survey Django App Installation and Test
- Please ping me when backup5 is usable again. Thanks
- NS 08:12 AM Task #7083: Survey Django App Installation and Test
- You can put the ticket to waiting OR assign it to llnu with status
"Feedback" that you need feedback when backup is usuable again
redmine@ungleich.ch writes:
09/18/2019
- AB 08:46 PM Task #7129: Turn the netbox installation into a production setup
- All instructions/commands are noted to install netbox on alpine. Just need to put it in cdist type.
- NS 08:36 AM Task #7156: Add new sunrise link to infrastrucure, introduce policy routing
- * 2019-09-18, ca. 1530 KST: enabled 0.0.0.0/3 to go through router2.place6 with full routing table
* 2019-09-18, ca. 1600 KST: enabled 32.0.0.0/3 to go through router2.place6 with full routing table
- NS 07:13 AM Task #7156: Add new sunrise link to infrastrucure, introduce policy routing
- * router2.place6 takes care of 100% of outgoing IPv6 traffic
* Phasing in IPv4 routing by preferring parts of the Internet step by step (see below)
** We split the IPv4 Internet into 8 parts and change 1/8 of the traffic each time to g... - NS 07:11 AM Task #7156 (Closed): Add new sunrise link to infrastrucure, introduce policy routing
- * We get a new uplink from Sunrise
** configure interfaces / peering
* We need to add the full routing table now
** We don't receive a default route anymore
** Adding full routing table caused router1.place6 to go to 100% cpu usage o...
09/17/2019
- AB 09:18 PM Task #7083: Survey Django App Installation and Test
- Can't backup to place5 as it is full.
- NS 12:05 PM Task #7153 (Rejected): Experiment with full routing tables
- * We want to be able to fine granular shape traffic
* Our Upstream ISPs will be switched from submitting default route to us to full routing table
* Last time I checked, full routing table in kernel = 100% cpu load
Let's try to do i... - AB 11:37 AM Task #7118: Test ucloud
- Integration test is done for most of the tasks. Migration testing is still remaining.
09/16/2019
- LN 06:24 PM Task #7120 (Closed): Distribute disks on hosts equally -ceph
- not neccessary now
- NS 05:04 PM Task #7139: Approach Azure, AWS, Softwayer, OpenStack and Cloudstack users and ask them about their opinion
- Softlayer, by IBM, sorry for the typo
redmine@ungleich.ch writes: - AB 04:30 PM Task #7139: Approach Azure, AWS, Softwayer, OpenStack and Cloudstack users and ask them about their opinion
- I couldn't find Softwayer
- AB 02:47 PM Task #7112: Userguide for ucloud
- > As a user, would I need to specify UCLOUD_API_SERVER ? If yes, I think its missing
> ...
It is already implemented (name, realm and seed is added now) - MR 02:00 PM Task #7112 (New): Userguide for ucloud
- Looks good to me for a first version.
Some points I don't understand/did not find/improvements in the doc are:
- As a user, would I need to specify UCLOUD_API_SERVER ? If yes, I think its missing
- I think we already discussed thi... - MR 01:44 PM Task #7112 (In Progress): Userguide for ucloud
- Oops, I seem to have missed this. Doing it right now.
09/15/2019
- MR 06:50 AM Task #7147 (Resolved): Add explanatory text to indicate "puffy" username on OpenBSD 6.5 VMs
- This was done in 2.6.4 and deployed to production today.
- MR 05:24 AM Task #7147 (In Progress): Add explanatory text to indicate "puffy" username on OpenBSD 6.5 VMs
09/14/2019
- MR 03:33 PM Task #7147: Add explanatory text to indicate "puffy" username on OpenBSD 6.5 VMs
- Du kannst Dich auf Deiner VM mit dem user *puffy* einloggen.
- MR 03:30 PM Task #7147: Add explanatory text to indicate "puffy" username on OpenBSD 6.5 VMs
- Mondi Ravi wrote:
> Sanghee suggests to add the following text at the end of the email in the screenshot.
> ...
https://chat.ungleich.ch/ungleich/pl/85yp13arbbbq5gofcg6ggyeyyy - MR 03:30 PM Task #7147 (Closed): Add explanatory text to indicate "puffy" username on OpenBSD 6.5 VMs
Sanghee suggests to add the following text at the end of the email in the screenshot.
EN: You can log in to your VM by the username *puffy* .
DE:
09/13/2019
- AB 07:23 AM Task #7138: Nico's open / next points for ucloud
- https://redmine.ungleich.ch/issues/7138#Ordering-a-VM-by-CLI
This is implemented but in a different way. Currently, user have to put his OTP credentials in ~/.bashrc. Like - AB 07:13 AM Task #7138: Nico's open / next points for ucloud
- https://redmine.ungleich.ch/issues/7138#CLI-web
Yes, our expertise is in Python. I don't have much experience working with Javascript. I think using Python to create website would be a better idea.
09/12/2019
- NS 06:30 PM Task #7139: Approach Azure, AWS, Softwayer, OpenStack and Cloudstack users and ask them about their opinion
- +watcher
- NS 06:29 PM Task #7139 (Closed): Approach Azure, AWS, Softwayer, OpenStack and Cloudstack users and ask them about their opinion
- After we have reviewed and ok'ed the first user manual version, checkout the chat/forum etc. of openstack and cloudstack users and ask them about their opinion about ucloud, what they like and what they dislike
- NS 05:49 PM Task #7138 (Rejected): Nico's open / next points for ucloud
- This ticket is about tracking how/where we should continue to develop or things that come to my mind. Anyone who is a watcher here, feel free to update it when things are implemented that I think should be implemented.
Many things mig... - TF 07:59 AM Task #7136 (Rejected): Create Git submodules
- -Create Git submodules for each of the cdist types
-Move Ungleich specific information out of the types to files/ - MR 07:12 AM Task #7135 (Rejected): Monitor nginx status codes in prometheus
- Something like https://www.martin-helmich.de/en/blog/monitoring-nginx.html but not limited to.
09/11/2019
- LN 10:33 PM Task #7108 (In Progress): Document / update ceph documentation to bootstrap from zero
- in progress here https://redmine.ungleich.ch/projects/datacenterlight/wiki/Ceph_on_Alpine
- NS 06:52 PM Task #7083: Survey Django App Installation and Test
- backup -> backing up essential data to our backup VM
redmine@ungleich.ch writes: - AB 09:42 AM Task #7083: Survey Django App Installation and Test
- What do you mean by backup?
09/10/2019
- LN 06:34 PM Task #6652 (Closed): Install 2 Linux routers with Alpine Linux
- duplicate of https://redmine.ungleich.ch/issues/6582 and partially https://redmine.ungleich.ch/issues/7026
- LN 06:26 PM Task #6709 (Closed): Configure IPv6 only netbooting
- duplicate of
https://redmine.ungleich.ch/issues/7026 - LN 06:25 PM Task #6650 (Closed): Make Mikrotik a router for the fiber network, enable the server network (vlan), use vlan tagging on the mikrotik to be able to be a router
- we are trying to phase copper out
will reopen if we fail with fiber booting - LN 06:24 PM Task #6649 (Closed): Create new internal VLAN for place9 WITH a router and move servers to the internal VLAN
- NS 05:42 PM Task #7083: Survey Django App Installation and Test
- ... not to mention: for production:
* setup with cdist
* letsencrypt
* backup
("the usual stuff") - NS 05:26 PM Task #7129 (Closed): Turn the netbox installation into a production setup
- * Create a new VM
* Configure it *only* using cdist
** No manual package installations/configs/etc.!
* Ensure that netbox is started automatically at boot
* Ensure that a DB dump is made once per 1h
** There is a cdist type / there ... - NS 04:40 PM Task #7112: Userguide for ucloud
- Can you proof read it && give Ahmed feedback?
- MR 11:51 AM Task #7125 (In Progress): Implement "ordering" and "products" with ucloud
- MR 11:50 AM Task #7125 (Rejected): Implement "ordering" and "products" with ucloud
h2. Discussion: https://chat.ungleich.ch/ungleich/pl/o8y3tz8wo7ytje7o8nk9suw4qo
> @mravi @ahmedbilal ping
> ...
h2. Hand over criteria
This task is done, if:
* I can order a VM and it is billed via credit card
* I can or...- NS 08:50 AM Task #7113 (Closed): ucloud without ceph
redmine@ungleich.ch writes:
09/09/2019
- NS 01:19 AM Task #7122 (Closed): Setup production etcd cluster in place6
- * 3 nodes
* Ensure that sufficient permissions are used to secure access to etcd
* Include hourly backup to place5
** Check whether we need to make a dump or can backup the data directory directly
* Probably include letsencrypt (?) f...
09/08/2019
- LN 01:32 AM Task #7120 (Closed): Distribute disks on hosts equally -ceph
- With ceph the more hosts the better. When a new host was added ceph started overusing it.
One article said that
09/07/2019
- AB 07:34 PM Task #7119: Alternative Blog Software Research
- If I have to use it for myself, I would go with Jekyll. It is easy to setup and use, have a lot of plugins, stable and mature. It supports all the things we initially needed. We should give it a try first (on some development VM maybe). ...
09/06/2019
- NS 12:49 PM Task #7119: Alternative Blog Software Research
- Hey Ahmed,
can you give a summary at the end and add your opinion about the various
tools?
Best,
Nico
redmine@ungleich.ch writes: - AB 08:30 AM Task #7119: Alternative Blog Software Research
- https://hexo.io/
* Easy to use
* Very Poor Default Theme
* Markdown (support special tags https://hexo.io/docs/tag-plugins. support plugins. I tested Sitemap plugins. https://hexo.io/plugins/index.html)
* Very Quick to Setup i.e ta... - AB 07:52 AM Task #7119: Alternative Blog Software Research
- https://www.getlektor.com
* Easy to use for simpler cases
* Markdown (support plugins https://www.getlektor.com/plugins/. I tested Sitemap plugins)
* Take too much trouble to install (most probably its my machine only)
* Sitemap (t... - AB 06:35 AM Task #7119 (In Progress): Alternative Blog Software Research
09/05/2019
- AB 08:10 PM Task #7119: Alternative Blog Software Research
- https://jekyllrb.com
* Easy to use
* Markdown (support many plugins. I tested Youtube and Sitemap plugins. Both works great - https://github.com/planetjekyll/awesome-jekyll-plugins)
* Very Quick to Setup i.e takes very few amount of... - AB 07:44 PM Task #7119: Alternative Blog Software Research
- https://blog.getpelican.com/ (Written in Python)
* Easy to use
* Markdown (support too many plugins although most of them are not very active on Github so, can't comment on their functionality https://github.com/getpelican/pelican-pl... - AB 07:07 PM Task #7119: Alternative Blog Software Research
- https://gohugo.io/
* Easy to use
* Markdown (also support short-codes that enable to embed tweets/gist/vimeo/youtube/instagram/) https://gohugo.io/content-management/shortcodes/
* Very Quick to Setup i.e takes very few amount of tim... - AB 06:27 PM Task #7119: Alternative Blog Software Research
- https://www.gatsbyjs.org
* Need knowledge of HTML, CSS, JS, React, and GraphQL
* Need to learn quite a few things.
* Probably, not a good choice.
* Matomo plugin available - AB 05:55 PM Task #7119 (Closed): Alternative Blog Software Research
- It would be good to have some or all of the following things
* should have some theming / design support -> so that we can re-apply / introduce our ungleich style to the blog
* should be easy to use with git / probably markdown or simi... - AB 05:47 PM Task #7118 (Closed): Test ucloud
- Create {Unit, Functional} Tests for all ucloud projects
- NS 01:55 PM Task #7117 (Rejected): Make ungleich-otp better usable for the public
- * Rename it to uotp
* Prepare an RFC for it
* Ensure we have a client side
** ... library (python)
** cli (uotp ...)
** configuration file: ~/.uotp
*** contains pairs of server URL + seed
*** instead of urls, it might also contain... - AB 08:28 AM Task #7113 (Resolved): ucloud without ceph
09/04/2019
- LN 03:44 PM Task #6681 (Closed): Create a distributed firewall PoC based on uncloud/nft
- AB 09:11 AM Task #7113 (In Progress): ucloud without ceph
09/03/2019
- AB 07:34 PM Task #7112 (Feedback): Userguide for ucloud
- AB 05:29 PM Task #7112: Userguide for ucloud
- https://code.ungleich.ch/ucloud/ucloud-docs/blob/wip/Userguide.md
- AB 03:44 PM Task #7112 (Closed): Userguide for ucloud
- "how to use ucloud"? from user's perspective.
With starting to install the CLI, getting a seed, etc? - NS 03:50 PM Task #7114 (Rejected): Test performance of tayga-mt
- The multithreading version from Chris Rock
- AB 03:46 PM Task #7113 (Closed): ucloud without ceph
- Single node ucloud without ceph for easy test case.
09/02/2019
- AB 09:40 AM Task #7083: Survey Django App Installation and Test
- It can be found at http://survey.hack4glarus.ungleich.cloud/
09/01/2019
08/31/2019
- AB 07:53 PM Task #6998 (Feedback): Install & Setup netbox on an IPv6 only VM and find out how to get / reserve the next free ip address
- For credentials, see channel org-ahmedbilal
I created a prefix 2a0a:e5c1:144:1::/64 using netbox web interface. It can be seen at http://netbox-dev.ungleich.ch/ipam/prefixes/1/ then use netbox's official Python library pynetbox to get...
08/30/2019
- AB 12:14 PM Task #6998: Install & Setup netbox on an IPv6 only VM and find out how to get / reserve the next free ip address
- Nico Schottelius wrote:
> ping. please create a proof of concept for getting the next free ip address of a network via the API. Test it for IPv6 and IPv4. Document the commands used.
OK. - NS 12:10 PM Task #6998 (Seen): Install & Setup netbox on an IPv6 only VM and find out how to get / reserve the next free ip address
- ping. please create a proof of concept for getting the next free ip address of a network via the API. Test it for IPv6 and IPv4. Document the commands used.
- NS 12:09 PM Task #6877 (In Progress): Start the first VMs on place9 cluster using ucloud (ucloud v1)
- checking this out now
- NS 11:49 AM Task #7026: place9 hacking for getting ceph + netboot running
- Note: we can/should remove the if clause, the first block is not needed
- NS 11:04 AM Task #7026: place9 hacking for getting ceph + netboot running
- ipxe related:
I'd even enable
* #define DOWNLOAD_PROTO_HTTPS
* #define REBOOT_CMD
* #define POWEROFF_CMD
* #define PING_CMD
and for usb boot:
@make bin/ipxe.usb@
@sudo dd if=bin/ipxe.usb of=/dev/sdb@
Setting up host con...
08/28/2019
- MR 07:16 PM Task #7032 (Closed): [dynamicweb] If a user inputs an existing key in the VM buy flow, he/she is alerted that the key exists and the user can't proceed
- This was merged in 2.6.3 and deployed to production today.
- LN 06:38 PM Task #7097 (Rejected): Recompile alpine-extended iso for usb booting
- to add support for:
zfs, console boot
maybe ungleich specific stuff: staff ssh keys, else?
08/27/2019
- LN 08:23 PM Task #7026: place9 hacking for getting ceph + netboot running
- ///unfinished
git clone git://git.ipxe.org/ipxe.git
cd ipxe/src/
vi config/general.h
should look like this:
#define NET_PROTO_IPV4 /* IPv4 protocol */
#define NET_PROTO_IPV6 /* IPv6 protocol */
#undef NET_PROT... - MR 04:02 PM Task #7032: [dynamicweb] If a user inputs an existing key in the VM buy flow, he/she is alerted that the key exists and the user can't proceed
- Sanghee and I faced a wierd issue yesterday, while trying out the test steps via hosting flow.
The second attempt (with a correct credit card) also failed.
However, when I tested it today; after clearing cache and logging myself ou... - NS 12:00 PM Task #7010: Fix Alpine Linux installer to support serial && push it upstream
- Can you add the upstream merge request url in here?
- LN 11:40 AM Task #7010 (Waiting): Fix Alpine Linux installer to support serial && push it upstream
08/26/2019
- SK 02:28 PM Task #7088 (Closed): [dynamicweb] Dashboard does not include a link to reset the password
- Duplicate with #7086
- MR 01:57 PM Task #7088 (Closed): [dynamicweb] Dashboard does not include a link to reset the password
- MR 01:59 PM Task #7089 (Rejected): [dynamicweb] Implement 2FA in dynamicweb with ungleich-otp
- Here's Nico's idea to do it:
> I was wondering
> ...
- MR 01:57 PM Task #7087 (Rejected): [dynamicweb] Remove password in email and replace it with a link to set it via dashboard
- We send user's password after a user who's never registered with us, creates a VM.
Sharing passwords via email is a bad practice. Sanghee;s proposed solution is to send a link to the user instead of the password, where he/she can set/... - SK 01:18 PM Task #7032: [dynamicweb] If a user inputs an existing key in the VM buy flow, he/she is alerted that the key exists and the user can't proceed
- I tested with the key I created and saved via generate key, and above flow works as expcted.
- SK 01:11 PM Task #7032: [dynamicweb] If a user inputs an existing key in the VM buy flow, he/she is alerted that the key exists and the user can't proceed
- While testing, the step 1 goes to 404 error page after card submit, is this as expected? I think the error should be handled differently.
- MR 12:48 PM Task #7032 (Feedback): [dynamicweb] If a user inputs an existing key in the VM buy flow, he/she is alerted that the key exists and the user can't proceed
- I proposed a fix for this issue in the merge request https://code.ungleich.ch/ungleich-public/dynamicweb/merge_requests/712
Basically, we had a check to not allow the user to input the same key again. I just removed this code.
The ... - MR 12:00 PM Task #7032 (In Progress): [dynamicweb] If a user inputs an existing key in the VM buy flow, he/she is alerted that the key exists and the user can't proceed
- LN 12:57 PM Task #6978: control server ran out of inodes
- mravi 05:05
we seem to have been running out of free inodes on control.ungleich.ch -- I've removed the cdist's cache folder fyi o - LN 12:56 PM Task #6978 (Closed): control server ran out of inodes
- AB 12:27 PM Task #7083: Survey Django App Installation and Test
- Nico Schottelius wrote:
> Corrected the project -> use Open Infrastructure whenever we don't have internal details that cannot be publicly shared
We have or we don't have?
OK. - NS 08:39 AM Task #7083: Survey Django App Installation and Test
- Corrected the project -> use Open Infrastructure whenever we don't have internal details that cannot be publicly shared
- AB 08:12 AM Task #7083: Survey Django App Installation and Test
- Setup https://djangopackages.org/packages/p/django-survey-and-report/ as follows:
* Create a new ipv6 only VM
* Configure it using cdist (ping @kjg and @llnu if you need help)
* Configure our IPv6-IPv4 proxy to proxy IPv4 requests to it - AB 08:04 AM Task #7083 (Closed): Survey Django App Installation and Test
- Distro: Debian or Devuan
h2. Tests
* Find out whether we can connect it easily to our ldap
** answer is "probably yes" - ping Mondi about it
* Find out how to manage the following flow:
** A person without an account on LDAP wan... - SK 12:11 PM Task #7086 (Rejected): [dynamicweb]Expose password reset option in the user dashboard
- Make it visible under /settings.
- AB 08:04 AM Task #7084 (Closed): Survey Django App Installation v2
Distro: Alpine