Dwellers - Revision history

Dereckson at 00:22, 25 May 2023

2023-05-25T00:22:22Z

← Older revision		Revision as of 00:22, 25 May 2023
Line 1:		Line 1:
	'''Dwellers''' is an VMWare ~~EXSi~~ instance installed on [[~~Dreadnought~~]].		'''Dwellers''' is an VMWare ESXi instance installed on [[hyper-001]].

	The goal of this server is to provide a Docker / OpenShift / Geard CentOS PaaS service.		The goal of this server is to provide a development environment for Docker images and deployments.

			The historical goal of this server were to provide a Docker / OpenShift / Geard CentOS PaaS service, and host LXC.

	== Basic information ==		== Basic information ==
	* '''IPs:'''		* '''IPs:'''
	** 51.255.124.11		** 51.255.124.11 (SSH doesn't listen to public IPv4)
	** 2001:470:1f13:30b:ca5:cade:fab:1e		** 2001:470:1f13:30b:ca5:cade:fab:1e
			** 172.27.27.4 (use this for SSH)
	* '''Hostname:''' dwellers.nasqueron.org		* '''Hostname:''' dwellers.nasqueron.org
	* '''Homepage:''' https://dwellers.nasqueron.org/		* '''Homepage:''' https://dwellers.nasqueron.org/
	* '''Configuration:''' 10 GB RAM and 4 core~~, burstable on request to 6 cores~~		* '''Configuration:''' 8 GB RAM and 8 core
	* '''OS:''' CentOS 8		* '''OS:''' CentOS Stream
	* '''ISP~~:''' SoYouStart (FR)~~		* '''ISP:''' OVH (FR)
	* '''Network:''' OVH (FR)
	* '''Status:''' Used for Docker development and testing		* '''Status:''' Used for Docker development and testing
	* '''Policy:''' Access for any Nasqueron or Wolfplex project		* '''Policy:''' Access for any Nasqueron or Wolfplex project
Line 18:		Line 20:

	== Services ==		== Services ==
	* SSH (*:22)		* SSH (172.27.27.4:22)
	* Docker		* Docker
	** [[Operations grimoire/Mastodon]]		** [[Operations grimoire/Mastodon]]

Dereckson at 09:17, 27 May 2022

2022-05-27T09:17:42Z

← Older revision		Revision as of 09:17, 27 May 2022
Line 6:		Line 6:
	* '''IPs:'''		* '''IPs:'''
	** 51.255.124.11		** 51.255.124.11
	** 2001:470:1f13:~~ce7~~:ca5:cade:fab:1e		** 2001:470:1f13:30b:ca5:cade:fab:1e
	* '''Hostname:''' dwellers.nasqueron.org		* '''Hostname:''' dwellers.nasqueron.org
	* '''Homepage:''' https://dwellers.nasqueron.org/		* '''Homepage:''' https://dwellers.nasqueron.org/
Line 63:		Line 63:
	For your domains:		For your domains:
	* subdomain.domain.tld A 51.255.124.11		* subdomain.domain.tld A 51.255.124.11
	* subdomain.domain.tld AAAA 2001:470:1f13:~~ce7~~:ca5:cade:fab:1e		* subdomain.domain.tld AAAA 2001:470:1f13:30b:ca5:cade:fab:1e

	To request a DNS update for domains using extensively the Nasqueron servers infrastructure:		To request a DNS update for domains using extensively the Nasqueron servers infrastructure:
Line 112:		Line 112:
	ifconfig sit0 inet6 tunnel ::216.66.84.42		ifconfig sit0 inet6 tunnel ::216.66.84.42
	ifconfig sit1 up		ifconfig sit1 up
	ifconfig sit1 inet6 add 2001:470:1f12:~~ce7~~::2/64		ifconfig sit1 inet6 add 2001:470:1f12:30b::2/64
	ifconfig sit1 inet6 add 2001:470:1f13:~~ce7~~:ca5:cade:fab:1e/64		ifconfig sit1 inet6 add 2001:470:1f13:30b:ca5:cade:fab:1e/64
	route -A inet6 add ::/0 dev sit1		route -A inet6 add ::/0 dev sit1

Dereckson: IP update, OS version update, ISP inforamtion update, rm part moved to Equatower

2020-02-15T00:32:19Z

IP update, OS version update, ISP inforamtion update, rm part moved to Equatower

← Older revision		Revision as of 00:32, 15 February 2020
Line 5:		Line 5:
	== Basic information ==		== Basic information ==
	* '''IPs:'''		* '''IPs:'''
	** ~~212~~.~~129~~.32.~~223~~		** 51.255.124.11
	** 2001:470:1f13:ce7:ca5:cade:fab:1e		** 2001:470:1f13:ce7:ca5:cade:fab:1e
	* '''Hostname:''' dwellers.nasqueron.org		* '''Hostname:''' dwellers.nasqueron.org
	* '''Homepage:''' ~~http~~://dwellers.nasqueron.org/		* '''Homepage:''' https://dwellers.nasqueron.org/
	* '''Configuration:''' ~~Access to 3.5~~ GB RAM and 4 core, burstable on request to 8 cores~~/+-6 Gb (to be negotiated according [[Ysul]] use)~~		* '''Configuration:''' 10 GB RAM and 4 core, burstable on request to 6 cores
	* '''OS:''' CentOS 7		* '''OS:''' CentOS 8
	* '''ISP:''' ~~[http://www.online.net Online]~~ (FR)		* '''ISP:''' SoYouStart (FR)
	* '''Network:''' ~~Illiad~~ (FR)		* '''Network:''' OVH (FR)
	* '''Status:''' ~~Installing.~~		* '''Status:''' Used for Docker development and testing
	* '''Policy:''' Access for any Nasqueron or Wolfplex project		* '''Policy:''' Access for any Nasqueron or Wolfplex project
	* '''Started:''' 2014-07-13		* '''Started:''' 2014-07-13
Line 20:		Line 20:
	* SSH (*:22)		* SSH (*:22)
	* Docker		* Docker
	* OpenShift		** [[Operations grimoire/Mastodon]]
			** RabbitMQ, Nasqueron Notifications intelligent bus
			* <strike>OpenShift</strike>
			* <strike>LXC</strike>

	== Containers ==		== Containers ==
Line 55:		Line 58:

	Also at launch time, the web container will populate config directory with missing config files before to create symlinks of these files to the Discourse web config folder. So, if you found a Discourse instance trying to find a database at localhost, don't forget to generate from discourse.conf.tmpl a discourse.conf file following instructions given above in update the configuration step.		Also at launch time, the web container will populate config directory with missing config files before to create symlinks of these files to the Discourse web config folder. So, if you found a Discourse instance trying to find a database at localhost, don't forget to generate from discourse.conf.tmpl a discourse.conf file following instructions given above in update the configuration step.

	~~== Administration tasks ==~~
	~~=== Acquisitariat (MySQL server) ===~~

	~~To connect to the MySQL server, you can run a temporary container linked to our production server.~~

	~~ssh -t ops@dwellers.nasqueron.org mysql-acquisitariat-client~~

	~~If you need more control tweak this line:~~

	~~docker run -it --rm --link acquisitariat:mysql nasqueron/mysql sh -c 'exec mysql -h"$MYSQL_PORT_3306_TCP_ADDR" -P"$MYSQL_PORT_3306_TCP_PORT" -uroot -p"$MYSQL_ENV_MYSQL_ROOT_PASSWORD"'~~

	~~If you need to work with SQL files, connect directly to the server:~~

	~~docker exec -it acquisitariat bash~~

	~~Finally, some containers allow. From a Phabricator container, for example, you can get a MySQL client with:~~

	~~/opt/phabricator/bin/storage shell~~

	~~You could contribute a MySQL client image with only a MySQL client, and tools to perform operations like a dump for backup purpose.~~

	== Troubleshoot ==		== Troubleshoot ==
	=== How to point a domain here? ===		=== How to point a domain here? ===
	For your domains:		For your domains:
	* subdomain.domain.tld A ~~212~~.~~129~~.32.~~223~~		* subdomain.domain.tld A 51.255.124.11
	* subdomain.domain.tld AAAA 2001:470:1f13:ce7:ca5:cade:fab:1e		* subdomain.domain.tld AAAA 2001:470:1f13:ce7:ca5:cade:fab:1e

Line 112:		Line 94:

	;If you've reset the configuration and need to add again the IP:		;If you've reset the configuration and need to add again the IP:
	ip addr add ~~212~~.~~129~~.32.~~223~~/32 dev ens192		ip addr add 51.255.124.11/32 dev ens192

	;Routing is probably the issue:		;Routing is probably the issue:
Line 162:		Line 144:
	If you need to recreate the forwarding map ([http://devcentral.nasqueron.org/P91 P91]):		If you need to recreate the forwarding map ([http://devcentral.nasqueron.org/P91 P91]):

	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 25 -j DNAT --to-destination 10.0.3.8:25		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 25 -j DNAT --to-destination 10.0.3.8:25
	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 21080 -j DNAT --to-destination 10.0.3.8:80		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 21080 -j DNAT --to-destination 10.0.3.8:80
	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 110 -j DNAT --to-destination 10.0.3.8:110		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 110 -j DNAT --to-destination 10.0.3.8:110
	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 143 -j DNAT --to-destination 10.0.3.8:143		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 143 -j DNAT --to-destination 10.0.3.8:143
	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 465 -j DNAT --to-destination 10.0.3.8:465		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 465 -j DNAT --to-destination 10.0.3.8:465
	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 587 -j DNAT --to-destination 10.0.3.8:587		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 587 -j DNAT --to-destination 10.0.3.8:587
	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 993 -j DNAT --to-destination 10.0.3.8:993		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 993 -j DNAT --to-destination 10.0.3.8:993
	iptables -t nat -I PREROUTING -i ens192 -p TCP -d ~~212~~.~~129~~.32.~~223~~/32 --dport 995 -j DNAT --to-destination 10.0.3.8:995		iptables -t nat -I PREROUTING -i ens192 -p TCP -d 51.255.124.11/32 --dport 995 -j DNAT --to-destination 10.0.3.8:995

	[[Category:Dwellers]]		[[Category:Dwellers]]

Dereckson at 00:24, 15 February 2020

2020-02-15T00:24:02Z

← Older revision		Revision as of 00:24, 15 February 2020
Line 1:		Line 1:
	'''Dwellers''' is an VMWare EXSi instance installed on [[~~DreadNought~~]].		'''Dwellers''' is an VMWare EXSi instance installed on [[Dreadnought]].

	The goal of this server is to provide a Docker / OpenShift / Geard CentOS PaaS service.		The goal of this server is to provide a Docker / OpenShift / Geard CentOS PaaS service.

Dereckson: new hypervisor

2020-02-15T00:23:40Z

new hypervisor

← Older revision		Revision as of 00:23, 15 February 2020
Line 1:		Line 1:
	'''Dwellers''' is an VMWare EXSi instance installed on [[~~Stormshear~~]].		'''Dwellers''' is an VMWare EXSi instance installed on [[DreadNought]].

	The goal of this server is to provide a Docker / OpenShift / Geard CentOS PaaS service.		The goal of this server is to provide a Docker / OpenShift / Geard CentOS PaaS service.

Dereckson: /* No network at boot time */ Update GW. This server is on OVH, not Online now.

2020-02-15T00:13:54Z

No network at boot time: Update GW. This server is on OVH, not Online now.

← Older revision		Revision as of 00:13, 15 February 2020
Line 115:		Line 115:

	;Routing is probably the issue:		;Routing is probably the issue:
	ip route add 62.~~210~~.76.1 dev ens192		ip route add 91.121.86.254 dev ens192
	ip route add default via 62.~~210~~.76.1		ip route add default via 91.121.86.254

	;Same for the case we can ping/ssh (slowly) from [[Ysul]] but not from the world:		;Same for the case we can ping/ssh (slowly) from [[Ysul]] but not from the world:
	ip route change 62.~~210~~.76.1 dev ens192		ip route change 91.121.86.254 dev ens192
	ip route change default via 62.~~210~~.76.1		ip route change default via 91.121.86.254

	;Reconfigure the IPv6 tunnel		;Reconfigure the IPv6 tunnel

Dereckson: /* No network at boot time */

2020-02-15T00:11:04Z

No network at boot time

← Older revision		Revision as of 00:11, 15 February 2020
Line 133:		Line 133:
	ifconfig sit1 inet6 add 2001:470:1f13:ce7:ca5:cade:fab:1e/64		ifconfig sit1 inet6 add 2001:470:1f13:ce7:ca5:cade:fab:1e/64
	route -A inet6 add ::/0 dev sit1		route -A inet6 add ::/0 dev sit1

			Issue reproducible on a fresh CentOS 8.1 installation.

	=== A port on the host doesn't reply (but does in Docker) ===		=== A port on the host doesn't reply (but does in Docker) ===

Dereckson: /* From Docker and LXC, it's not possible to connect outside */ Don't edit iptables -t nat while Docker is up

2020-02-13T23:43:52Z

From Docker and LXC, it's not possible to connect outside: Don't edit iptables -t nat while Docker is up

← Older revision		Revision as of 23:43, 13 February 2020
Line 153:		Line 153:
	Or it could be an issue with iptables:		Or it could be an issue with iptables:

			systemctl stop docker
	iptables -t nat -F POSTROUTING		iptables -t nat -F POSTROUTING
	iptables -t nat -A POSTROUTING -o ens192 -j MASQUERADE		iptables -t nat -A POSTROUTING -o ens192 -j MASQUERADE
			systemctl start docker

	If you need to recreate the forwarding map ([http://devcentral.nasqueron.org/P91 P91]):		If you need to recreate the forwarding map ([http://devcentral.nasqueron.org/P91 P91]):

Dereckson: /* Basic information */

2020-02-13T19:23:36Z

Basic information

← Older revision		Revision as of 19:23, 13 February 2020
Line 9:		Line 9:
	* '''Hostname:''' dwellers.nasqueron.org		* '''Hostname:''' dwellers.nasqueron.org
	* '''Homepage:''' http://dwellers.nasqueron.org/		* '''Homepage:''' http://dwellers.nasqueron.org/
	* '''Configuration:'''Access to 3.5 GB RAM and 4 core, burstable on request to 8 cores/+-6 Gb (to be negotiated according [[Ysul]] use)		* '''Configuration:''' Access to 3.5 GB RAM and 4 core, burstable on request to 8 cores/+-6 Gb (to be negotiated according [[Ysul]] use)
	* '''OS:''' CentOS 7		* '''OS:''' CentOS 7
	* '''ISP:''' [http://www.online.net Online] (FR)		* '''ISP:''' [http://www.online.net Online] (FR)

Dereckson: /* phabricator.nasqueron.org */ container migrated to Equatower, documentation at Operations grimoire/DevCentral

2018-09-25T12:42:39Z

phabricator.nasqueron.org: container migrated to Equatower, documentation at Operations grimoire/DevCentral

← Older revision		Revision as of 12:42, 25 September 2018
Line 26:		Line 26:

	The ports table is composed of the ''reserved-for-legacy-docker-migration-'' entries in {{Ops file\|PORTS}}.		The ports table is composed of the ''reserved-for-legacy-docker-migration-'' entries in {{Ops file\|PORTS}}.

	~~=== phabricator.nasqueron.org ===~~
	~~'''Port prefix:''' 31~~

	~~Provides a Phabricator instance for Nasqueron projects at [http://phabricator.nasqueron.org http://phabricator.nasqueron.org].~~

	~~To run a new container:~~
	~~docker run -p 31080:80 nasqueron-phabricator~~

	~~'''Known issues'''~~

	* At startup, we need to set the base URI: ./bin/config set phabricator.base-uri 'http://devcentral.nasqueron.org/'

	=== forum.nasqueron.org ===		=== forum.nasqueron.org ===