Project

General

Profile

Activity

From 05/23/2020 to 06/21/2020

06/16/2020

02:52 PM Task #8176 (Seen): Verify/update our HSTS, SPF and starttls settings
* See https://www.hardenize.com/report/ungleich.ch/1592309898 Nico Schottelius

06/15/2020

04:35 PM Task #7027: Add new command to cdist / extend cdist to easily generate preos with ssh pubkey
Basically the expected outcome is a pre-os image that can directly be
used to run cdist config/install.
redmine@ung...
Nico Schottelius
04:19 PM Task #7027: Add new command to cdist / extend cdist to easily generate preos with ssh pubkey
Nico,
I am not sure I got this right.
Essentially you need some kind of a wrapper command in front of specific preo...
Darko Poljak
11:42 AM Task #7162 (In Progress): Submit a patch for the alpine bird2 package to run as user bird
Patch sent to alpine: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/9267 Timothée Floure
10:25 AM Task #7162: Submit a patch for the alpine bird2 package to run as user bird
ll nu wrote:
> need to verify if its still not implemented
It is not (https://gitlab.alpinelinux.org/alpine/aport...
Timothée Floure
11:04 AM Task #7553 (Rejected): Setup conntrackd to allow active active firewalls

Not needed atm
redmine@ungleich.ch writes:
Nico Schottelius
09:31 AM Task #7553 (New): Setup conntrackd to allow active active firewalls
Not a priority at the moment - moving to low. Timothée Floure
10:21 AM Task #8091: Alpine-based Opennebula workers
Upstreaming RBD support for qemu in alpine is being discussed on https://gitlab.alpinelinux.org/alpine/aports/-/merge... Timothée Floure
09:59 AM Task #8111 (In Progress): Monitor unbound nodes
Everything's in prometheus/grafana: we just need alerts. Timothée Floure
09:58 AM Task #7992 (Closed): Make TURN server usable to matrix/synapse instances
Fixed a long time ago :-) Closing. Timothée Floure
09:57 AM Task #7930: Monitoring LAN in place6
Up and running! It still need:
* Documentation.
* Testing/checking on cdist-backed vlan creation on ONe workers.
Timothée Floure
09:56 AM Task #7982 (Closed): Build DCL image for F32
Deployed some time ago. Closing. Timothée Floure
09:55 AM Task #6671 (Closed): Setup mastodon/pleroma for ungleich
Mastodon is deployed at social.ungleich.ch.
https://redmine.ungleich.ch/projects/open-infrastructure/wiki/Socialun...
Timothée Floure
09:50 AM Task #7545: Switch production LDAPs to cdist-managed alpine
This is at the top of my TODO next time I come to Glarus, I don't want this to be delayed anymore. Timothée Floure
09:48 AM Task #7641 (Waiting): create images for uncloud
We already have the Fedora and Ubuntu images, which is good enough for the time being. Let's put this on hold for now... Timothée Floure
09:33 AM Task #8110 (Closed): Investigate unbound{1,2}.place6.ungleich.ch crashes
I updated the unbounds ~ 1 week ago and they have been up and running since then (there's monitoring now, althought n... Timothée Floure

06/11/2020

09:36 AM Task #7317 (Rejected): Create placeA @Diesbach
Nico Schottelius
09:36 AM Task #7312 (Rejected): Ensure that all available disks are correctly used in ceph
Nico Schottelius
09:36 AM Task #7261 (Rejected): Create ipv6-spoofing nebula n-interface for place5 and understand how and why it exists
Nico Schottelius
09:35 AM Task #7182 (Closed): Update router configuration for place5
Nico Schottelius
09:35 AM Task #7097 (Rejected): Recompile alpine-extended iso for usb booting
Nico Schottelius
09:34 AM Task #6901 (Rejected): Describe on how to configure the files service
Nico Schottelius
09:33 AM Task #7239 (Rejected): Explain to Nico how a data block is distributed / saved in ceph and relate it to our missing space problem
Nico Schottelius
09:33 AM Task #7114 (Rejected): Test performance of tayga-mt
Nico Schottelius
09:32 AM Task #6972 (Rejected): Learn how to rebuild the server OS with cdist preos and document it in the wiki
Nico Schottelius

06/08/2020

10:52 AM Task #8129: Phase in AS207996 for place6
Current route objects in the ripe database from AS209898:... Nico Schottelius

06/07/2020

03:17 PM Task #8129: Phase in AS207996 for place6
* Added ROAs
!2020-06-07-151647_1329x916_scrot.png!
Nico Schottelius
10:22 AM Task #8129: Phase in AS207996 for place6
Test config:... Nico Schottelius
10:11 AM Task #8129 (Closed): Phase in AS207996 for place6
* Splitting AS
* Treating other side as eBGP
* Test network: https://netbox.ungleich.ch/ipam/prefixes/232/...
Nico Schottelius

06/06/2020

09:57 AM Task #8048: Unable to log in to matrix/riot
Removing one is easy but you'll loose access to the related services. If you give a list of linked services I might b... Timothée Floure

06/05/2020

11:01 AM Task #8123 (Rejected): Document how to update the BGP configuration
* checkout latest cdist commit
* Upstream contacts are in netbox
* We need to update OUR ripe objects to say that w...
Nico Schottelius

06/03/2020

09:42 AM Task #8090 (Closed): DCL image for Alpine 3.12
Deployed to production - closing. Timothée Floure
09:39 AM Task #8091: Alpine-based Opennebula workers
Currently working on alpine CEPH packaging for rbd support. Timothée Floure
08:11 AM Task #6671: Setup mastodon/pleroma for ungleich
I played a bit with Pleroma a few days/weeks ago: IPv6 support is totally broken. Erlang/elixir often separate calls/... Timothée Floure
08:06 AM Task #8111 (Rejected): Monitor unbound nodes
There's a prometheus exporter for unbound: https://github.com/wish/unbound_exporter
TODO: deploy it against servic...
Timothée Floure
08:02 AM Task #8110 (Closed): Investigate unbound{1,2}.place6.ungleich.ch crashes
I increased log verbosity on unbound1.p6, and will try to see if there's anything amiss. Timothée Floure

06/02/2020

07:51 PM Task #7244 (Closed): create CentOS8 image for dcl and ipv6onlyhosting
ll nu

05/30/2020

09:18 AM Task #8093 (Closed): Spring cleaning in dot-cdist/manifest
Our dot-cdist manifest/ directory is a mess!
TODO:
* Define a policy: what goes where and why.
* Move thin...
Timothée Floure
09:13 AM Task #8091: Alpine-based Opennebula workers
Note:
Ceph is to 85-95% in our cdist. It's basically
a) install 3 monitors
b) install 1+ manager
c) have the ...
Nico Schottelius
08:57 AM Task #8091 (Closed): Alpine-based Opennebula workers
Plan: move our ONE workers from devuan to alpine.
* I managed to get an alpine node to join my test ONE cluster.
...
Timothée Floure
08:03 AM Task #8090 (Feedback): DCL image for Alpine 3.12
Alpine 3.12 VM templates are now available in ONE. Timothée Floure
07:52 AM Task #8090 (In Progress): DCL image for Alpine 3.12
Currently building. Timothée Floure
07:39 AM Task #8090 (Closed): DCL image for Alpine 3.12
Timothée Floure

05/29/2020

04:34 PM Task #7930: Monitoring LAN in place6
Adding vxlan 33 to apu-routers:... Nico Schottelius
03:02 PM Task #7930: Monitoring LAN in place6
Vlan communication works:... Nico Schottelius
02:49 PM Task #7930: Monitoring LAN in place6
Check #1 vxlan communication doesn't work:... Nico Schottelius
09:45 AM Task #8048: Unable to log in to matrix/riot
Hi,
Thanks for the feedback.
Obviously I don't need two accounts. Is there a way to merge them into one?
-Stefan
...
Stefan Baur
09:00 AM Task #8048 (Feedback): Unable to log in to matrix/riot
Hello Sefan!
You have two entries in our internal directory:
* uid=mynameisretro,ou=customer,dc=ungleich,dc=c...
Timothée Floure
09:03 AM Task #7553 (Waiting): Setup conntrackd to allow active active firewalls
Is this still relevant? A lot of things changed since it has been opened. Timothée Floure
09:02 AM Task #8069 (Waiting): Investigate potential bottleneck on storage/CEPH at DCL
Waiting for @llnu to test a RAID controller with passthrough.
https://redmine.ungleich.ch/issues/8063?issue_count=...
Timothée Floure

05/27/2020

12:42 PM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
I'll be AFK for a little while: the big pain point is the hardware RAID controller.
* Unknown effect on IOPS (need...
Timothée Floure
11:46 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
Regarding PCIe AND SAS/SATA:
* Controllers are connected on x8 PCIe 2.0 => 500 MB/s per-lane for PCIe 2.0 -> x8 =...
Timothée Floure
11:26 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
Regarding the RAID controllers:
* RAID0 (striping - redundancy is handled by CEPH across physical servers).
*...
Timothée Floure
11:09 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
Some questions we should be able to answer:
h2. Real scenarios
NOTE: assuming all disks running at 'full speed'...
Nico Schottelius
10:59 AM Task #8069: Investigate potential bottleneck on storage/CEPH at DCL
Our hardware:
* RAID controllers: perc h700, perc h800
- Technical manual: https://www.dell.com/learn/us/en/04/...
Timothée Floure
10:54 AM Task #8069 (Closed): Investigate potential bottleneck on storage/CEPH at DCL
Timothée Floure
12:25 PM Task #8048: Unable to log in to matrix/riot
Can you coordinate with Stefan to get his account in order? :-) Nico Schottelius

05/25/2020

05:07 PM Task #8048 (Closed): Unable to log in to matrix/riot
Hi Nico, hi folks,
It seems I can't sign in to matrix/riot at https://matrix.ungleich.ch
What I tried:
X2Go-ML...
Stefan Baur

05/24/2020

11:36 AM Task #6930 (Rejected): cdist configuration for etcd

Not needed atm
redmine@ungleich.ch writes:
Nico Schottelius
11:08 AM Task #6930: cdist configuration for etcd
Afaik it's not urgent anymore.
If it is let me know.
ll nu
11:20 AM Task #7108: Document / update ceph documentation to bootstrap from zero
Currently I deploy DCL in place10, and I assume ceph will deployed too.
I could deploy and document at the same ti...
ll nu
 

Also available in: Atom