Commit graph

1221 commits

Author SHA1 Message Date
3b0887397a machines/bc01n05: postgres tuning
Change-Id: I30925a84216b45bde9e92b67b007f15b2cdf58e8
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1481
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-26 12:16:20 +00:00
821b839b16 machines/bc01n05: zfsify; initial postgres
Change-Id: I355ac4aa3c56a1e6a564b7a3c7cfc4e67b072dae
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1470
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-11 21:33:14 +00:00
3320155d23 cluster/machines/base: enable microcode loading
This will happen at next boot via early microcode - no risk to currently
running processes.

Change-Id: I88553fa9a1350ebb80aaf978e29e8f1156783a2c
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1469
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-11 21:33:05 +00:00
98604701ab bgpwtf: customer cleanup
Change-Id: Idb2e66a1d75d713fc3c73cc9af41d66883bf6366
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1472
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-10 21:15:55 +00:00
8f0842341a ops: repin edge01.waw to old nixpkgs
We accidentally bumped nixpkgs at https://gerrit.hackerspace.pl/1441 and
forgot to upgrade it. We don't wanna upgrade it right now.

This doesn't give us back a zero-diff, but it's close enough.

Change-Id: I1a9f50df88e564cd4de76f67adfaa1e88a746f2e
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1471
Reviewed-by: patryk <patryk@hackerspace.pl>
2023-03-10 20:17:15 +00:00
712a5dc3e3 cluster: add bc01n05.hswaw.net
This will be our postgres pet machine.

Change-Id: Ifff6648394ca6407fb5b5daa853f4abc42541703
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1467
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-04 22:26:46 +00:00
3a9562ecfd cluster: k0: remove native ceph
After installing HBJ11s and spreading out the mons we're going full
Rook.

Change-Id: Ia00cbe953548f06cf27343371fc67890619c8262
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1466
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-04 22:26:39 +00:00
ef3aab6a14 k0: host os bump wip
This bumps it on bc01n01, but nowhere else yet.

We have to vendor some more kubelet bits unfortunately.

Change-Id: Ifb169dd9c2c19d60f88d946d065d4446141601b1
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1465
Reviewed-by: implr <implr@hackerspace.pl>
2023-03-04 22:26:14 +00:00
45394bf3b0 app/matrix: enable wal=logical for postgres, add tmp mount
This is quite hacky, but we intend to remove that postgres soon anyway.
The changes to synapse's resource limits are to reflect current state of
prod.

Change-Id: Ic7beaa3e7ee378c0e10ba24f9a5a3aee67c2ccf2
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1468
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-01 20:38:24 +00:00
0156ab24ca cluster/kube/k0: remove implr-spark bucket, add implr bucket
the spark one has been an abandoned experiment from years ago, and
I could use a personal one right now

Change-Id: I78a706c3371d441b2f8460fd796d0cfd9a198cc6
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1464
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-02-26 16:41:23 +00:00
f21ca388ba WORKSPACE: rules_python->0.13; switch to hermetic interpreter
Change-Id: I0145f9db6a71fa9080b166dd75ff2c1b93e2b241
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1462
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-02-19 17:12:35 +00:00
0173f501d7 cockroach: v20.2 -> v21.1
Following https://www.cockroachlabs.com/docs/v21.1/upgrade-cockroach-version?filters=linux
--logtostderr is deprecated/removed, but AFAICT from the default config
it will still log there: https://www.cockroachlabs.com/docs/v21.1/configure-logs#default-logging-configuration

Change-Id: I7fb3f835693f955b37de24dc581140ea34b11630
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1461
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-01-30 21:16:42 +00:00
9836999652 allow passing system to default.nix
This is needed to use hscloud in builds invoked from flakes.

Change-Id: I7551b97dfeedb9399866cd2c16cc573ee60359cc
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1452
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-01-29 16:22:37 +00:00
aa077968f9 hswaw/customs: hotfix laserproxy build by using old hscloud
Change-Id: I5a00d138ed7e5080e55997912413bf2f776cd295
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1451
Reviewed-by: vuko <vuko@hackerspace.pl>
2023-01-29 16:22:37 +00:00
32624090e4 hswaw/customs use ip address in spejsiot proxy
Change-Id: I2148783d9470c09234feaa59e935606bdb21f6f4
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1450
Reviewed-by: vuko <vuko@hackerspace.pl>
2023-01-29 16:22:37 +00:00
740a52dec9 hswaw/customs: fix warnings after nixpkgs update
Change-Id: I4d62e8fa73f16dbb51a1cacfa1bc70183b6bff2d
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1449
Reviewed-by: vuko <vuko@hackerspace.pl>
2023-01-29 16:22:37 +00:00
8fcffb2fa2 hswaw/laserproxy: improve username suggestions
Change-Id: I64a683d83ec383fa1cf289c1795cc9ed61144239
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1454
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-01-29 16:21:36 +00:00
9851b38608 WORKSPACE,third_party/py: bump rules_{python,docker} and some py packages
Those are far from the latest versions still, but this change should be
non-breaking.

Change-Id: Ieeb9d6b301184f46677d821fe8276391346d6285
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1459
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-01-29 01:40:25 +00:00
3b2a2a2ce1 cluster/k0: add paperless to admitomatic config
Change-Id: I54df444cddca8a05febfb96af07b9e2f614639fc
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1453
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-01-05 09:12:18 +00:00
142c8e6504 hswaw/sound: add password file to mosquitto
Change-Id: Ifda90bb0fb6be681a04381335d18d19ffab81298
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1448
Reviewed-by: vuko <vuko@hackerspace.pl>
2022-12-27 21:04:12 +00:00
6204ccdf92 hswaw/sound: open mosquitto firewall port
Change-Id: Ie46cbe27b1d47bc0ad90bde193283f134ba767be
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1447
Reviewed-by: vuko <vuko@hackerspace.pl>
2022-12-27 21:04:00 +00:00
f0ab6c498a hswaw/sound: add spejsiot-api
Change-Id: If40cdbeadb570d8c33b4c950482c01f4b2bbd1c4
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1446
Reviewed-by: vuko <vuko@hackerspace.pl>
2022-12-27 21:03:49 +00:00
aa7303ec45 hswaw/sound: use officiall ip address
Change-Id: I7b99762e280884eb83f69a6803eddbb86fedc3b3
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1445
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-12-27 21:03:34 +00:00
4fe6e02942 hswaw/sound: refactor home-assistant
Change-Id: I80442defc97fc7aaf4422f8e2fe6b956b1e130cf
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1444
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-12-27 21:03:26 +00:00
a2bcfeaf0b cluster: bump vm.max_map_count sysctl tunable to a higher value
This is needed for running some memory-intensive workloads, like
ElasticSearch/OpenSearch.

Change-Id: I7b00ec5faca73ec69bdbf1ca41c025d7efeae55c
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1443
Reviewed-by: implr <implr@hackerspace.pl>
2022-12-11 20:28:51 +00:00
3c9b825ec7 games/valheim: create serviceaccount for external users/systems
q3k uses this to give access to someone who plays on the valheim server
so that they can get logs / restart things / etc.

Change-Id: If205709142d386c460eeb835829888957d28a654
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1442
Reviewed-by: patryk <patryk@hackerspace.pl>
2022-11-27 16:35:56 +00:00
28742b8106 Make golang deps fetching go faster
This commit aims to increase the speed of hscloud rebuild process
by optimizing the behavior of Go dependency fetching routines.

Gazelle v0.25.0 introduced a new dependency resolution mode
where it does not reach out for external dependencies; instead,
it operates solely on what is contained inside the workspace.

Because static dependency resolution mode is now the default
behavior in go_repository() rules, we are also updating the
contents of //third_party/go/repositories.bzl.

Also, I changed some of the bigger Go dependencies to be downloaded
by a tarball fetch in order to speed up the rebuild process.

Other changes:
  * Bump nixpkgs to a fresh snapshot
  * Upgrade to Bazel v5

Change-Id: Icfe752411b3128bcd5b25fa28bb76bec45ae2f71
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1441
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-11-27 16:27:53 +00:00
d171263d6e k0: remove waw-hdd-yolo-3
This was never used and only caused scary warnings during OSDs reboots
due to lack of availability.

Change-Id: I14eacd88855bc56e06f2a61cc2d914d985330852
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1423
Reviewed-by: implr <implr@hackerspace.pl>
2022-11-20 12:28:20 +00:00
4d98cf5ca8 calico: move from etcd to crd
Leaving the CRD definitions as YAML, extracted without modifications
from the original install file - this should make upgrades simpler.

Change-Id: I7211d2711e2af014b36dd887a951abb9e1032eb9
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1179
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-11-19 21:40:34 +00:00
e3dd96adb0 app/mastodon: complete migration to versioned postgres
Change-Id: Ib09a42e60cc3bf7a0388b5199a22df6a1271b5a3
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1424
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-11-19 12:38:55 +00:00
65b30af78e kube/postgres: add versioned library
also use in mastodon-qa

Change-Id: I628293fcfe9081c350087572ecda9e51ee18238f
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1422
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-11-18 14:52:05 +00:00
16842119d1 app/mastodon: deploy
Change-Id: I88c104d1a8d5627355b01a8c48dc235635fca5ed
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1421
Reviewed-by: implr <implr@hackerspace.pl>
2022-11-18 12:15:22 +00:00
08c32996e5 hswaw: deploy 1405
Change-Id: If765bdc35d662d644701d2b81a3817ac56ccecb9
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1406
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-11-07 00:24:09 +00:00
15b5bc1783 hswaw/site: fix catch-all, add robots.txt
Change-Id: I23db4e18185f029a094ea4f69ac0f469d3dd8a8e
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1405
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-11-07 00:24:09 +00:00
9171451c53 bgpwtf: delegate /29 to customer
Change-Id: I3607580126477560f642ec5d9c4ccba7022de559
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1404
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-11-06 17:05:02 +00:00
ee41e94e0a k0: bump certs
Change-Id: I9d7a48d64de5d1aa82a134a8c22bfc50ba8ad270
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1402
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-10-09 20:22:43 +00:00
deeeff861e hswaw/machines: add sound.waw.hackerspace.pl
Change-Id: Id0e6a02d9ae4cf61d758713a99d21c6da0c72b66
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1401
Reviewed-by: vuko <vuko@hackerspace.pl>
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-10-09 19:35:18 +00:00
0d22d0bcb6 bgpwtf/m/edge01: allow 10.10.32.0/24 (dcr03 mgmt)
Change-Id: Ide36e7fbcb39c178b0d51dd0da8534c6bf60954b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1403
Reviewed-by: patryk <patryk@hackerspace.pl>
2022-10-08 18:12:21 +00:00
aa67387717 hswaw/machines/tv: enable avahi
This fixes webrtc mdns discovery. (to be used sometime later for desktop
casting in a separate tool)

Change-Id: Ic3d454c67ff930d13990481b7ed33f9bf1f5c5e0
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1341
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-09-28 23:01:55 +00:00
dc1878c3cc app/matrix: bump element-web to v1.11.8
Change-Id: I667d694f39ff75ec98fb68620037c06b1475ae9e
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1392
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-09-28 23:01:35 +00:00
d3c14e5cbc app/matrix: bump appservice-irc to v0.35.1
Change-Id: Ie884f75dd9c068363f160598d23e21de49f8a95d
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1393
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-09-28 23:01:35 +00:00
654dd80e03 app/matrix: bump matrix-media-repo to v1.2.12
Change-Id: I4192c6a54537c10724c63c373083eca5bd0c298e
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1391
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-09-28 23:01:35 +00:00
a8bb615464 app/matrix: adjust resources configuration for prod changes
Change-Id: Ib81847bd65e254cbd650d60456185e681e2b1e88
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1390
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-09-28 23:01:35 +00:00
3f0bc2083b app/matrix: bump appservice-irc to v0.35.0
Change-Id: Ie1b7c014e46fc1e06e434ad9394cf591248c92cb
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1389
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-09-28 23:01:35 +00:00
690ed45f66 app/matrix: add coturn deployment
TURN server is required for proper cross-NAT voice/video calls via
Matrix.

Change-Id: I8182292dd8ef30690ae4b9487c22aedcff098710
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1387
Reviewed-by: informatic <informatic@hackerspace.pl>
2022-09-28 23:01:35 +00:00
b39edc3256 shell.nix: pin bazel version
Change-Id: I34e665bf19069162a5ee671147eaf057a26e6381
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1388
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-09-28 23:01:35 +00:00
3c31f32307 cluster: bump prodvider certs
Change-Id: Ieefe3c733dd40a94c13a5e1c1648dd43d27c180a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1386
Reviewed-by: implr <implr@hackerspace.pl>
2022-09-10 15:46:39 +00:00
467ff086f1 hswaw/site: deploy
Change-Id: If2589a5fdf0e7fdedbce0cfac7c73e36ef96341b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1383
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-08-30 17:30:50 +00:00
a63c315f7d prodimage: bump to focal
Change-Id: I502ef4bbc593dae4db900eb10dc4ad93daad3985
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1382
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-08-30 17:30:50 +00:00
a8f3efc410 hswaw/site: update visiting info
Change-Id: I1f2ca212224343db76064963cf447937aa128ce5
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1361
Reviewed-by: woju <woju@hackerspace.pl>
2022-08-26 11:24:28 +00:00