Activity
From 05/19/2020 to 06/17/2020
06/16/2020
- 02:52 PM Task #8176 (Seen): Verify/update our HSTS, SPF and starttls settings
- * See https://www.hardenize.com/report/ungleich.ch/1592309898
06/15/2020
- 04:35 PM Task #7027: Add new command to cdist / extend cdist to easily generate preos with ssh pubkey
- Basically the expected outcome is a pre-os image that can directly be
used to run cdist config/install.
redmine@ung... - 04:19 PM Task #7027: Add new command to cdist / extend cdist to easily generate preos with ssh pubkey
- Nico,
I am not sure I got this right.
Essentially you need some kind of a wrapper command in front of specific preo... - 11:42 AM Task #7162 (In Progress): Submit a patch for the alpine bird2 package to run as user bird
- Patch sent to alpine: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/9267
- 10:25 AM Task #7162: Submit a patch for the alpine bird2 package to run as user bird
- ll nu wrote:
> need to verify if its still not implemented
It is not (https://gitlab.alpinelinux.org/alpine/aport... - 11:04 AM Task #7553 (Rejected): Setup conntrackd to allow active active firewalls
Not needed atm
redmine@ungleich.ch writes:- 09:31 AM Task #7553 (New): Setup conntrackd to allow active active firewalls
- Not a priority at the moment - moving to low.
- 10:21 AM Task #8091: Alpine-based Opennebula workers
- Upstreaming RBD support for qemu in alpine is being discussed on https://gitlab.alpinelinux.org/alpine/aports/-/merge...
- 09:59 AM Task #8111 (In Progress): Monitor unbound nodes
- Everything's in prometheus/grafana: we just need alerts.
- 09:58 AM Task #7992 (Closed): Make TURN server usable to matrix/synapse instances
- Fixed a long time ago :-) Closing.
- 09:57 AM Task #7930: Monitoring LAN in place6
- Up and running! It still need:
* Documentation.
* Testing/checking on cdist-backed vlan creation on ONe workers. - 09:56 AM Task #7982 (Closed): Build DCL image for F32
- Deployed some time ago. Closing.
- 09:55 AM Task #6671 (Closed): Setup mastodon/pleroma for ungleich
- Mastodon is deployed at social.ungleich.ch.
https://redmine.ungleich.ch/projects/open-infrastructure/wiki/Socialun... - 09:50 AM Task #7545: Switch production LDAPs to cdist-managed alpine
- This is at the top of my TODO next time I come to Glarus, I don't want this to be delayed anymore.
- 09:48 AM Task #7641 (Waiting): create images for uncloud
- We already have the Fedora and Ubuntu images, which is good enough for the time being. Let's put this on hold for now...
- 09:33 AM Task #8110 (Closed): Investigate unbound{1,2}.place6.ungleich.ch crashes
- I updated the unbounds ~ 1 week ago and they have been up and running since then (there's monitoring now, althought n...
06/11/2020
- 09:36 AM Task #7317 (Rejected): Create placeA @Diesbach
- 09:36 AM Task #7312 (Rejected): Ensure that all available disks are correctly used in ceph
- 09:36 AM Task #7261 (Rejected): Create ipv6-spoofing nebula n-interface for place5 and understand how and why it exists
- 09:35 AM Task #7182 (Closed): Update router configuration for place5
- 09:35 AM Task #7097 (Rejected): Recompile alpine-extended iso for usb booting
- 09:34 AM Task #6901 (Rejected): Describe on how to configure the files service
- 09:33 AM Task #7239 (Rejected): Explain to Nico how a data block is distributed / saved in ceph and relate it to our missing space problem
- 09:33 AM Task #7114 (Rejected): Test performance of tayga-mt
- 09:32 AM Task #6972 (Rejected): Learn how to rebuild the server OS with cdist preos and document it in the wiki
06/08/2020
- 10:52 AM Task #8129: Phase in AS207996 for place6
- Current route objects in the ripe database from AS209898:...
06/07/2020
- 03:17 PM Task #8129: Phase in AS207996 for place6
- * Added ROAs
!2020-06-07-151647_1329x916_scrot.png! - 10:22 AM Task #8129: Phase in AS207996 for place6
- Test config:...
- 10:11 AM Task #8129 (Closed): Phase in AS207996 for place6
- * Splitting AS
* Treating other side as eBGP
* Test network: https://netbox.ungleich.ch/ipam/prefixes/232/...
06/06/2020
- 09:57 AM Task #8048: Unable to log in to matrix/riot
- Removing one is easy but you'll loose access to the related services. If you give a list of linked services I might b...
06/05/2020
- 11:01 AM Task #8123 (Rejected): Document how to update the BGP configuration
- * checkout latest cdist commit
* Upstream contacts are in netbox
* We need to update OUR ripe objects to say that w...
06/03/2020
- 09:42 AM Task #8090 (Closed): DCL image for Alpine 3.12
- Deployed to production - closing.
- 09:39 AM Task #8091: Alpine-based Opennebula workers
- Currently working on alpine CEPH packaging for rbd support.
- 08:11 AM Task #6671: Setup mastodon/pleroma for ungleich
- I played a bit with Pleroma a few days/weeks ago: IPv6 support is totally broken. Erlang/elixir often separate calls/...
- 08:06 AM Task #8111 (Rejected): Monitor unbound nodes
- There's a prometheus exporter for unbound: https://github.com/wish/unbound_exporter
TODO: deploy it against servic... - 08:02 AM Task #8110 (Closed): Investigate unbound{1,2}.place6.ungleich.ch crashes
- I increased log verbosity on unbound1.p6, and will try to see if there's anything amiss.
06/02/2020
05/30/2020
- 09:18 AM Task #8093 (Closed): Spring cleaning in dot-cdist/manifest
- Our dot-cdist manifest/ directory is a mess!
TODO:
* Define a policy: what goes where and why.
* Move thin... - 09:13 AM Task #8091: Alpine-based Opennebula workers
- Note:
Ceph is to 85-95% in our cdist. It's basically
a) install 3 monitors
b) install 1+ manager
c) have the ... - 08:57 AM Task #8091 (Closed): Alpine-based Opennebula workers
- Plan: move our ONE workers from devuan to alpine.
* I managed to get an alpine node to join my test ONE cluster.
... - 08:03 AM Task #8090 (Feedback): DCL image for Alpine 3.12
- Alpine 3.12 VM templates are now available in ONE.
- 07:52 AM Task #8090 (In Progress): DCL image for Alpine 3.12
- Currently building.
- 07:39 AM Task #8090 (Closed): DCL image for Alpine 3.12
05/29/2020
- 04:34 PM Task #7930: Monitoring LAN in place6
- Adding vxlan 33 to apu-routers:...
- 03:02 PM Task #7930: Monitoring LAN in place6
- Vlan communication works:...
- 02:49 PM Task #7930: Monitoring LAN in place6
- Check #1 vxlan communication doesn't work:...
- 09:45 AM Task #8048: Unable to log in to matrix/riot
- Hi,
Thanks for the feedback.
Obviously I don't need two accounts. Is there a way to merge them into one?
-Stefan
... - 09:00 AM Task #8048 (Feedback): Unable to log in to matrix/riot
- Hello Sefan!
You have two entries in our internal directory:
* uid=mynameisretro,ou=customer,dc=ungleich,dc=c... - 09:03 AM Task #7553 (Waiting): Setup conntrackd to allow active active firewalls
- Is this still relevant? A lot of things changed since it has been opened.
- 09:02 AM Task #8069 (Waiting): Investigate potential bottleneck on storage/CEPH at DCL
- Waiting for @llnu to test a RAID controller with passthrough.
https://redmine.ungleich.ch/issues/8063?issue_count=...
05/27/2020
- 12:42 PM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
- I'll be AFK for a little while: the big pain point is the hardware RAID controller.
* Unknown effect on IOPS (need... - 11:46 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
- Regarding PCIe AND SAS/SATA:
* Controllers are connected on x8 PCIe 2.0 => 500 MB/s per-lane for PCIe 2.0 -> x8 =... - 11:26 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
- Regarding the RAID controllers:
* RAID0 (striping - redundancy is handled by CEPH across physical servers).
*... - 11:09 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
- Some questions we should be able to answer:
h2. Real scenarios
NOTE: assuming all disks running at 'full speed'... - 10:59 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
- Our hardware:
* RAID controllers: perc h700, perc h800
- Technical manual: https://www.dell.com/learn/us/en/04/... - 10:54 AM Task #8069 (Closed): Investigate potential bottleneck on storage/CEPH at DCL
- 12:25 PM Task #8048: Unable to log in to matrix/riot
- Can you coordinate with Stefan to get his account in order? :-)
05/25/2020
- 05:07 PM Task #8048 (Closed): Unable to log in to matrix/riot
- Hi Nico, hi folks,
It seems I can't sign in to matrix/riot at https://matrix.ungleich.ch
What I tried:
X2Go-ML...
05/24/2020
- 11:36 AM Task #6930 (Rejected): cdist configuration for etcd
Not needed atm
redmine@ungleich.ch writes:- 11:08 AM Task #6930: cdist configuration for etcd
- Afaik it's not urgent anymore.
If it is let me know. - 11:20 AM Task #7108: Document / update ceph documentation to bootstrap from zero
- Currently I deploy DCL in place10, and I assume ceph will deployed too.
I could deploy and document at the same ti...
Also available in: Atom