Equatower

From Nasqueron Agora

Equatower is an infrastructure server used to serve Docker containers. It's hosted on Dreadnought hypervisor.

New services, provisionned by SaltStack through our rOPS repository, should be deployed to Equatower.

PaaS Docker

Containers

Group Container Image Purpose
jenkins_cd jenkins jenkinsci/jenkins Jenkins master for CD
jenkins_cd apsile nasqueron/jenkins-slave-php Jenkins slave
jenkins_cd elapsi nasqueron/jenkins-slave-php Jenkins slave
openfire openfire gizmotronic/openfire XMPP server
phpbb phpbb_db nasqueron/mysql MySQL server for phpBB PaaS
phpbb phpbb_ook nasqueron/nginx-php7-fpm QA container for phpBB PaaS
phpbb phpbb_test nasqueron/nginx-php7-fpm dev container for phpBB PaaS

Ports

Port Service Purpose
3478 Openfire STUN / TURN
5222 Openfire C2S XMPP
5263 Openfire S2S XMPP
38080 Jenkins back-end web server

Administration tasks

Acquisitariat (MySQL server)

To connect to the MySQL server, you can run a temporary container linked to our production server.

   ssh -t dwellers.nasqueron.org mysql acquisitariat

If you need more control tweak this line:

   docker run -it --rm --link acquisitariat:mysql nasqueron/mysql sh -c 'exec mysql -h"$MYSQL_PORT_3306_TCP_ADDR" -P"$MYSQL_PORT_3306_TCP_PORT" -uroot -p"$MYSQL_ENV_MYSQL_ROOT_PASSWORD"'

If you need to work with SQL files, connect directly to the server:

   docker exec -it acquisitariat bash

Finally, some containers allow direct access. From a Phabricator container, for example, you can get a MySQL client with:

   /opt/phabricator/bin/storage shell

Troubleshoot

Let's Encrypt certificates renewal fail

Let's Encrypt resolves in IPv6 first, so if IPv6 is down, renewal will be slow and unsuccessful with timeout messages.

No network at boot time

Access the machine on the hypervisor, then:

Check the interface is up
   ip addr
   ifup ens192 # to bring it up

The interface to use is the one connected to the main network, with 00:50:56:0c:53:94 as MAC address. It normally should be defined at ens192.

If you've reset the configuration and need to add again the IP
   ip addr add 51.255.124.10/32 dev ens192
Routing is probably the issue
   ip route add 91.121.86.254 dev ens192
   ip route add default via 91.121.86.254
Same for the case we can ping/ssh (slowly) from Ysul but not from the world
   ip route change 91.121.86.254 dev ens192
   ip route change default via 91.121.86.254
Reconfigure the IPv6 tunnel

At some point, the Linux route2 method stopped to work, but the Linux net-tools method still work.

   ip tunnel del he-ipv6
   /sbin/ipv6-setup-tunnel

Could be broken, if so, use old ifconfig commands like in Dwellers.