Difference between revisions of "Equatower"
|Line 1:||Line 1:|
'''Equatower''' an infrastructure server used to serve Docker containers. It's hosted on [[Dreadnought]] hypervisor.
New services, by SaltStack through our rOPS repository, should be deployed to .
== PaaS Docker ==
== PaaS Docker ==
Latest revision as of 12:32, 24 September 2020
Equatower was an infrastructure server used to serve Docker containers. It's hosted on Dreadnought hypervisor.
It has been superseded by docker-001. This page is valid for docker-001, with the only need to replace 18.104.22.168 by 22.214.171.124.
New services, provisioned by SaltStack through our rOPS repository, should be deployed to this docker-001 or to Kubernetes cluster.
|jenkins_cd||jenkins||jenkinsci/jenkins||Jenkins master for CD|
|phpbb||phpbb_db||nasqueron/mysql||MySQL server for phpBB PaaS|
|phpbb||phpbb_ook||nasqueron/nginx-php7-fpm||QA container for phpBB PaaS|
|phpbb||phpbb_test||nasqueron/nginx-php7-fpm||dev container for phpBB PaaS|
|3478||Openfire||STUN / TURN|
|38080||Jenkins||back-end web server|
Acquisitariat (MySQL server)
To connect to the MySQL server, you can run a temporary container linked to our production server.
ssh -t dwellers.nasqueron.org mysql acquisitariat
If you need more control tweak this line:
docker run -it --rm --link acquisitariat:mysql nasqueron/mysql sh -c 'exec mysql -h"$MYSQL_PORT_3306_TCP_ADDR" -P"$MYSQL_PORT_3306_TCP_PORT" -uroot -p"$MYSQL_ENV_MYSQL_ROOT_PASSWORD"'
If you need to work with SQL files, connect directly to the server:
docker exec -it acquisitariat bash
Finally, some containers allow direct access. From a Phabricator container, for example, you can get a MySQL client with:
Let's Encrypt certificates renewal fail
Let's Encrypt resolves in IPv6 first, so if IPv6 is down, renewal will be slow and unsuccessful with timeout messages.
No network at boot time
Access the machine on the hypervisor, then:
- Check the interface is up
ip addr ifup ens192 # to bring it up
The interface to use is the one connected to the main network, with 00:50:56:0c:53:94 as MAC address. It normally should be defined at ens192.
- If you've reset the configuration and need to add again the IP
ip addr add 126.96.36.199/32 dev ens192
- Routing is probably the issue
ip route add 188.8.131.52 dev ens192 ip route add default via 184.108.40.206
- Same for the case we can ping/ssh (slowly) from Ysul but not from the world
ip route change 220.127.116.11 dev ens192 ip route change default via 18.104.22.168
- Reconfigure the IPv6 tunnel
At some point, the Linux route2 method stopped to work, but the Linux net-tools method still work.
ip tunnel del he-ipv6 /sbin/ipv6-setup-tunnel
Could be broken, if so, use old ifconfig commands like in Dwellers.