Activity
From 11/08/2019 to 12/07/2019
12/07/2019
- NS 12:50 PM Task #7439 (Rejected): Add support for different authentication methods
- * local/no authentication
* remote
** uotp
** ldap
** etcd based (???) - NS 12:37 PM Task #7438 (Closed): Explore local ucloud setup
- * no public listeners
* all local
* no authentication
* no ceph by default - NS 12:35 PM Task #7437 (Closed): Run ucloud with a single authentication token
- * No uotp
* No ldap
* No nothing - NS 10:58 AM Task #7436 (In Progress): Hack-a-ucloud-weekend (2019-12-07)
- NS 10:57 AM Task #7436 (New): Hack-a-ucloud-weekend (2019-12-07)
- Doc/uotp seems to be outdated:
- NS 10:47 AM Task #7436 (In Progress): Hack-a-ucloud-weekend (2019-12-07)
- NS 10:22 AM Task #7436 (Closed): Hack-a-ucloud-weekend (2019-12-07)
- h2. objective
* get ucloud into a customer usable state
h2. Tasks
* how does a user interact with ucloud?
* where to deploy it
* the usual production things (security, availability, ...)
* etcd instalation
* monitoring
h2...
12/06/2019
- NS 12:44 AM Task #7427 (Rejected): Rough draft to support console on our VMs
- * Migrate dynamicweb user base to ldap
** write script to migrate users (passwords? do we have to reset / have them set it up again?)
*** maybe implement "soft reset": change user to ldap after they successfully logged in
* Connect gu...
12/05/2019
- LN 07:20 PM Task #7182 (Resolved): Update router configuration for place5
- LN 02:37 PM Task #7182: Update router configuration for place5
- done
- NS 06:09 PM Task #7156 (Closed): Add new sunrise link to infrastrucure, introduce policy routing
- Added long time ago
- AB 12:22 PM Task #7402 (Feedback): Reproduce issues in ucloud-pay
- Things are setup at 2a0a:e5c0:0:5:0:78ff:fe11:d75c
- LN 11:38 AM Task #7400: Switch all servers to IPv6 only netboot
- place5 setup is continuing on 12-05
12/04/2019
12/03/2019
- NS 04:23 PM Task #7400: Switch all servers to IPv6 only netboot
- place5 to de done on 2019-12-04
- DR 04:16 PM Task #7172 (Resolved): Setup new VM/service: search.ungleich.ch
- Verified and finished search.ungleich.ch so it's production ready.
cdist types are created, manifest is updated. - NS 04:16 PM Task #7409 (Closed): Replace ipv4 on internal routes with multip protocol IPv6
- Current limitation: need update to newer bird version
* https://gitlab.labs.nic.cz/labs/bird/commit/53401bef63013dfee01b65d071ffbd88e457539f
* Subject "Re: Multi protocol route handling (IPv4 via IPv6)" on the bird mailing list
* wa... - LN 11:48 AM Task #7193 (Closed): Move switches in place8 to a different rack
- duplicate
https://redmine.ungleich.ch/issues/7340
- DR 10:08 AM Task #7122: Setup production etcd cluster in place6
- Dominique Roux wrote:
> ...
> ...
nft problem is fixed now.
Problem was: Alpine has it's own init.d script (which works ;-) ). The cdist type was already updated but the submodule was not.
The submodule is now updated too, therefore,...
12/02/2019
- TF 09:41 PM Task #7345 (In Progress): Cleanup & upstream matrix-related types
- Works but need more testing. I haven't forgotten this issue, which will be updated soon (TM).
- AB 12:13 PM Task #7403 (Rejected): Create customer friendly guide for ucloud
- Where do I go to for creating a VM?
How can I pay?
Where do I store my ssh keys?
How to reboot my VM?
Can I / how can I access the console? - AB 12:11 PM Task #7402 (Closed): Reproduce issues in ucloud-pay
- Reproduce issues in ucloud-pay and share it with mravi
- AB 12:09 PM Task #7401 (Rejected): Create ucloud package for python/alpine
- NS 12:02 PM Task #7400 (Closed): Switch all servers to IPv6 only netboot
- h2. Objective
* Remove one of the last IPv4 bits from our infrastructure (-> less complexity)
* Test that all servers are in a good state (regular reboot)
h2. Steps
* Setup ipxe USB sticks
* Modify the internal network to prov...
11/30/2019
- DR 05:30 PM Task #7122 (Resolved): Setup production etcd cluster in place6
- This is done now
ETCD-Cluster available at:
etcd1.ungleich.ch
etcd2.ungleich.ch
etcd3.ungleich.ch
Currently there are some small problems with nftables (not loaded at boot).
Will contact alpine linux dev team
- NS 02:04 PM Task #7377: Create an active-active NAT64 gateway
- I'll try some joold magic today
11/29/2019
- NS 06:28 PM Task #7377: Create an active-active NAT64 gateway
- ping
- NS 06:01 PM Task #7377 (Rejected): Create an active-active NAT64 gateway
- * session sync & co.
* I'd recommend jool + joold, but open to options
11/28/2019
- AB 08:33 PM Task #6872 (Closed): Create ucloud-vm
- AB 08:32 PM Task #6871 (Closed): Create ucloud-api
- AB 08:28 PM Task #6914 (Closed): ucloud-image-scanner
- AB 08:25 PM Task #6875 (Closed): Create ucloud-scheduler
- NS 03:36 PM Task #7345 (Closed): Cleanup & upstream matrix-related types
- * So that we can offer matrix-as-a-service
* Consider if it is possible to run matrix on a v6 only VM and proxy into the IPv4 world
** I am not sure how the protocol functions, but if it uses TLS/SNI, it should be possible on our ipv6-...
11/27/2019
- LN 06:37 PM Task #7337 (Rejected): Import network documentation to Netbox
- LN 11:40 AM Task #7335 (Rejected): Add alpine ceph install/helper scripts to ungleich-tools
- Need to revise/polish before adding
11/25/2019
- AB 11:58 AM Task #7112 (Closed): Userguide for ucloud
- AB 11:58 AM Task #7283 (Closed): Cleanups for ucloud 0.0.2
11/20/2019
- AB 09:14 AM Task #7283 (Resolved): Cleanups for ucloud 0.0.2
11/17/2019
- NS 02:34 PM Task #7318 (Closed): Upgrade Alpine Linux to 3.10
- * UPdated django & pushed out.
11/16/2019
- NS 02:17 PM Task #7318: Upgrade Alpine Linux to 3.10
- * Adding Alpine 3.10 to ipv6onlyhosting
** add entry in the db
* updating vm template list - NS 02:04 PM Task #7318: Upgrade Alpine Linux to 3.10
- * ensuring that opennebula permissions are ok
** use to group/other of the new template
** use to group/other of the new image - NS 02:03 PM Task #7318: Upgrade Alpine Linux to 3.10
- * Image upgrade and saved in place5
Transferring to place6: - NS 01:22 PM Task #7318 (Closed): Upgrade Alpine Linux to 3.10
- NS 01:21 PM Task #7161 (Rejected): Create APKBUILD for jool, submit jool to alpine
11/15/2019
- LN 03:59 PM Task #7317 (Rejected): Create placeA @Diesbach
- To seperate the datacenter and hackernet.
- Router: BPG, RA, ipv6 only, secured, dns
11/14/2019
- NS 07:10 PM Task #7304: Test NAT64 with distributed routers with joold on alpine
- Adding selected addresses instead of using only the existing one:
- NS 07:01 PM Task #7304: Test NAT64 with distributed routers with joold on alpine
- Sessions w/ tcp visible:
- NS 06:37 PM Task #7304: Test NAT64 with distributed routers with joold on alpine
- Testing from the 2nd router (locally created packets don't work):
- NS 06:30 PM Task #7304: Test NAT64 with distributed routers with joold on alpine
- NS 06:20 PM Task #7304: Test NAT64 with distributed routers with joold on alpine
11/11/2019
- NS 02:51 PM Task #7312 (Rejected): Ensure that all available disks are correctly used in ceph
- 1. Create a graph / promotheus query to list the disk sizes of each host
2. Create a graph / promotheus query to list the osd sizes of each host
3. Create a graph with both queries
4. Create an alert if they differ
11/09/2019
- NS 05:29 PM Task #7307 (Closed): Update __ungleich_bgp_router for IPv6 based multip bgp
- * This can remove the dependency on IPv4 internally
- NS 03:59 PM Task #7306: Phase in new routers
- NS 03:53 PM Task #7306 (Rejected): Phase in new routers
- * This will replace router{1,2}.place5
* Based on alpine, no keepalived
h2. Features / steps
* create initial / new cdist manifest
* check consul membership
* -check resolv.conf-
* check interface / network configuration
* che...