1
0
Fork 0
Commit Graph

65 Commits (b3c6770f8d52db57254cbfad0c359356af787027)

Author SHA1 Message Date
q3k 81e7fbaadd bgpwtf: edge01: fix ipv4 static routing for customers
Change-Id: I9c34d12a7947c9bb25331e38ea7ee03beede7e47
2021-09-08 23:40:29 +02:00
q3k 11248d88ab bgpwtf: edge01: add new client networks, remove old q3k network, limit nscd
Batch of small changes. Already deployed.

Change-Id: Ieb4f418699f497c7013e617fd7d1827e71a7a415
2021-09-06 12:07:42 +00:00
q3k e3ea97b76b bgpwtf/internet: new consumer ToC/pricelist
Change-Id: Ic7b03b04d59b3134aeff07a649c01e8745c46b1e
2021-08-29 18:19:53 +02:00
q3k 400e03fe00 bgpwtf/machines: allow new customer prefix from hscloud/dcr01sw37
Change-Id: Ieb742d3256aa6dd0c1bb28c298f3d2c41b093712
2021-07-21 14:56:29 +00:00
q3k 14f4a8b762 bgpwtf/machines/tests: fix edge01.waw test for new prefix
520f150134 changed the prefix exported
from a /23 to a /24, this broke this test.

Change-Id: I8e57bb58d816d441a17ec57ecd0881ad4facd38f
2021-07-19 22:12:30 +02:00
q3k 0fc01a969b bgpwtf/machines/modules: fix bird_exporter
v.1.2.5's hash broke, let's just swiftly ignore this and update to
1.2.6.

Change-Id: I19757abeb2f279be6f56ca429441503710ed433f
2021-07-19 22:12:30 +02:00
q3k 65d4bc5bff Merge "bgpwtf: add q3k's anycast subnet" 2021-07-10 13:55:29 +00:00
q3k 1cf2907450 Merge "bgpwtf/oob: document OOB setup" 2021-07-08 13:07:39 +00:00
q3k 1c80bd7563 bgpwtf: allow route with ptp to dcr03sw48
Change-Id: Ia1173deec1cd3bfc00d543c112df06b7b82dfad0
2021-06-30 21:23:24 +00:00
q3k 68e2b18d4d bgpwtf/oob: document OOB setup
Moved from the hackerspace wiki
(https://wiki.hackerspace.pl/staff:network:lte).

Change-Id: I44cc8d1b8d588df2a58874060b5d56e03f36660d
2021-06-21 11:01:29 +00:00
q3k 520f150134 bgpwtf: add q3k's anycast subnet
Change-Id: I66d449c94b27b741e71da047bb1901b8fba6eb80
2021-06-18 21:24:15 +02:00
q3k 87ede25bec bgpwtf/invoice: format for non-eu customers
Change-Id: I42ec23d911cd69a310a6de8ffe5dca5ff1b30f00
2021-05-12 21:09:47 +00:00
q3k fa818da7c6 bgpwtf/invoice: add recurrent billing tool
Change-Id: Ic3cc03d7b04304ae8c7aa76d8bb889ae8c144838
2021-05-06 00:12:53 +02:00
q3k 605aadbfa4 Merge "bgpwtf/invoice: render SP/GTU codes on invoices" 2021-05-05 20:48:12 +00:00
q3k ffb80d0ed6 bgpwtf: add ar's ssh keys to routers
Change-Id: I87247136052b5b7077cb7eed33f13b60b81b898e
2021-04-19 07:11:26 +00:00
q3k 772a133ca1 bgpwtf/invoice: render SP/GTU codes on invoices
Change-Id: I2f47595c67ae0c945fa680b394cb7d5212cd389a
2021-03-27 15:58:03 +00:00
q3k 5d2a70ac92 bgpwtf/machines: add netboot.xyz to bootstrap
This allows us to selectively boot some DC machines into netboot.xyz for
testing.

Change-Id: I5713b220ee986c3584fc68efaa7540bbe99680ba
2021-03-18 19:22:41 +00:00
q3k 225a5c7ee9 nixpkgs: bump
Fixes b/3.

Change-Id: I2f734422cdad00f78956477815c4aea645c6c49e
2021-02-14 14:43:07 +00:00
q3k cc769a56f3 bgpwtf: move tests from eoip to gretap
This removes our dependency on a userspace EoIP implementation that is
mildly broken, and that doesn't build correctly on new gcc versions.

Change-Id: I404c79585336ebaf3bc1761b54ee2433f0841324
2021-02-14 10:54:09 +00:00
q3k 856b284e29 bgpwtf: edge01: add radio rooftop circuit
Change-Id: I07d6f3cb9170e1b8c5c2d8ea429d847ffa87126c
2021-01-21 20:47:42 +00:00
q3k f70b1be78b Merge "invoice: bump year for new databases" 2021-01-19 18:59:41 +00:00
q3k d9670d739b invoice: bump year for new databases
Change-Id: I88918b103e7b128d5fc263873ce9d2ec9a739bd7
2021-01-19 19:59:09 +01:00
q3k 1ecf22da9a invoice: add GetInvoices to proto
This call will return a stream of repeated Invoices, in order to submit
monthly audit summaries to accounting, including PDFs and JPK_V7 codes
(ie. GTU and SP codes).

Change-Id: Id9da2952a6358c5c2c737eee08c473c1fbcfbe7d
2021-01-09 21:59:04 +00:00
q3k b456c18bb2 invoice: calculate GTU codes for invoice, implement some tests
Also drive-by fix two proto issues:
 - rename gtu_codes to gtu_code (following convention)
 - move denormalized Item.due_date field past denormalized comment.

Change-Id: Ibfe0a21aadc0a5d4e2f784b182e530b9603aae62
2021-01-09 21:58:59 +00:00
implr 67c86188d7 bgpwtf/edge01: as-deployed: add qemu-bridge-helper config to fix anchorvm
Change-Id: I305c498f8332de8addac435da57ba88e1b34c7f0
2020-12-21 15:14:13 +01:00
implr c726798ef7 edge01: systemd unit for running RIPE Atlas anchor VM
Change-Id: I5d91c3b3075c404af92d40f33a48a487b84ec7a5
2020-12-15 07:05:12 +01:00
implr 76de8f860d enable coredumpctl on edge01
Change-Id: Ibed8b4e9f453019e8857ef4e070d7efbcb1f13d4
2020-12-10 08:30:38 +01:00
q3k ced43bef12 Merge "invoice: move validation to separate layer, validate GTU/SP codes" 2020-11-18 10:58:14 +00:00
q3k 2f9e3cc7ef Merge "bgpwtf: bump net.ipv6.route_max_size on routers" 2020-11-18 10:57:34 +00:00
q3k 220c5d24a3 invoice: move validation to separate layer, validate GTU/SP codes
Change-Id: I0af85b054356eaae81b528e5e64bf74c10bd3ae4
2020-11-16 22:04:23 +01:00
q3k d9f912378d invoice: add GTU and SP codes
These are codes defined in JPK_V7, ie. the control file submitted to
Polish tax authorities for all invoices created in a given month. We
need to now tag our invoices with the appropriate codes when submitting
them to our accountants, which will pass them on over to the tax
authoritiex in a JPK_V7M file.

This only adds the relevant enums and adds them to proto messages, but
does not actually implement any control/model logic.

Change-Id: I695d05b55143a248dab9346151da3c572c7665d4
2020-11-16 20:38:08 +00:00
q3k 5100715a76 bgpwtf: bump net.ipv6.route_max_size on routers
This combats this:

    [126624.252775] Route cache is full: consider increasing sysctl net.ipv[4|6].route.max_size.

This used to be fixed manually on edge01.waw, but we forgot to actually
set this in configuration. Whoops

Change-Id: Ibd45f019a9f4d8d6c2bf1db27f438589acaffd77
2020-11-10 19:39:55 +01:00
q3k e9f2c9d21b bgpwtf: widen hswaw prefix
Change-Id: I6bf97db741af6cfb788a0e69227ea9e616afea15
2020-11-08 16:31:11 +01:00
q3k d9a6365f8b bgpwtf: add static v6 routes via bird
A customer was missing a static v6 route via their router. Since we
don't want to add them to networking.interfaces.routes.* (as this
restarts the whole scripted network stack in NixOS), we add them to
bird. This requires implementing hscloud.routing.static.

Change-Id: I0a205ed1e1f17a86de43aaf72ab6c2694a069112
2020-10-16 19:07:52 +02:00
q3k eb09c6a347 speedtest: fix mimetype on served JS
Change-Id: Ifcb1d4f8a58a5e6120f31373b2a8c0e307e414be
2020-10-06 15:29:08 +00:00
q3k 6abe4fa771 bgpwtf/machines: init edge01.waw
This configures our WAW edge router using NixOS. This replaces our
previous Ubuntu installation.

Change-Id: Ibd72bde66ec413164401da407c5b268ad83fd3af
2020-10-03 14:57:38 +00:00
q3k be89707ce1 bgpwtf/landing: import
This imports a snapshot of the current landing page (that used to be
versioned in a separate repository, but we want to pull into hscloud).

Change-Id: Ia98bca294ae64bfd57c4a4250d7d3a5a7e5f8145
2020-07-25 12:18:59 +02:00
implr cae27ecd99 Replace rules_pip with rules_python; use bazel built upstream grpc
instead of Python packages

As usual with Python sadness, the @pydeps wheels are built on the bazel
host, so stuffing them inside a container_image (or py_image) will cause
new and unexpected kinds of misery.

Change-Id: Id4e4d53741cf2da367f01aa15c21c133c5cf0dba
2020-07-08 18:55:34 +02:00
q3k de3d3fa641 bgpwtf/invoice: hide invoicee VAT number when not given
Also re-add go-bindata to WORKSPACE, something nuked it.

Change-Id: I723ebee7f843d0135a3e1121e2e93ae5fe56bc4b
2020-05-31 00:12:11 +02:00
q3k 006c1bf8f3 *: add more OWNERS
Change-Id: If2740a0aaee845160b38b8ea0b23fea7bab3bded
2020-04-13 01:46:15 +02:00
q3k 572d766096 bgpwtf/invoice: bump for 2020
This doesn't automatically bump generated numbers - however, new users
will at least have sensible IDs now :).

To bump an existing deployment, you will have to do some mild surgery:

 - edit the touched query to once generate a new, appropriate serial
   (eg. 20001)
 - run and seal one invoice
 - restore original code (now with the new 20000 default)

In the future we should have an RPC override for the new sealed final
UID with some basic sanity checks.

Change-Id: Idd8187618869f6ea76f1b187acfbdd2f1c94005b
2020-01-14 14:03:38 +01:00
q3k 4836dff19b bgpwtf/internet: fix prod diff
Change-Id: Ie967ef5fbfdb479b1251e2495a28edd09864730c
2019-10-11 16:10:14 +02:00
q3k 5f9b1ecd67 rules_pip: update to new version
rules_pip has a new version [1] of their rule system, incompatible with the
version we used, that fixes a bunch of issues, notably:
 - explicit tagging of repositories for PY2/PY3/PY23 support
 - removal of dependency on host pip (in exchange for having to vendor
   wheels)
 - higher quality tooling for locking

We update to the newer version of pip_rules, rename the external
repository to pydeps and move requirements.txt, the lockfile and the
newly vendored wheels to third_party/, where they belong.

[1] - https://github.com/apt-itude/rules_pip/issues/16

Change-Id: I1065ee2fc410e52fca2be89fcbdd4cc5a4755d55
2019-09-25 14:05:07 +02:00
Serge Bazanski ef93747aec cccampix: updates from camp
Change-Id: I77e6d9fb6e91b0b7e2d1f89e80164ee8116b5d50
2019-08-29 14:53:18 +02:00
Serge Bazanski a2960f526c birdie: use passwords
Change-Id: I2204ba0b09648799dfd5bd01bd15d2580b3cb3c8
2019-08-22 20:13:47 +02:00
Serge Bazanski ec71cb50bd Draw the actual rest of the fucking owl.
Change-Id: Ia04fb49ebbe3a5afccc57e62f6335e35b45192fe
2019-08-22 18:14:35 +02:00
Serge Bazanski 915b265b8a bgpwtf/cccampix: deploy pgpencryptor
Change-Id: I3714c81b663781d9b449695760d83c1b8841d0e0
2019-08-22 18:14:02 +02:00
Serge Bazanski 187c4bb60a pgpencryptor: potentially fix crash on encyptor close
We seem to be hitting a bug where the encryptor doesn't initialize
because of a lacking gpg binary, and then crashes on .Close().

This should fix the issue, but is untested.

    goroutine 70 [running]:
    code.hackerspace.pl/hscloud/bgpwtf/cccampix/pgpencryptor/gpg.(*CLIEncryptor).Close(0x0)
            bgpwtf/cccampix/pgpencryptor/gpg/gpg.go:144 +0x22
    main.(*service).Encrypt(0xc000345e00, 0x16d13a0, 0xc00047f260, 0x1688400, 0xc00003d4a0)
            bgpwtf/cccampix/pgpencryptor/main.go:132 +0x6f9
    code.hackerspace.pl/hscloud/bgpwtf/cccampix/proto._PGPEncryptor_Encrypt_Handler(0x133bf00, 0xc000345e00, 0x16c6300, 0xc0000d6000, 0x2247b78, 0xc0001f8000)
            bazel-out/k8-fastbuild/bin/bgpwtf/cccampix/proto/linux_amd64_stripped/ix_go_proto%/code.hackerspace.pl/hscloud/bgpwtf/cccampix/proto/ix.pb.go:1816 +0xad
    google.golang.org/grpc.(*Server).processStreamingRPC(0xc000160c00, 0x16d6ce0, 0xc000161500, 0xc0001f8000, 0xc0004244e0, 0x21b00e0, 0xc0000c6ff0, 0x0, 0x0)
            external/org_golang_google_grpc/server.go:1175 +0xacd
    google.golang.org/grpc.(*Server).handleStream(0xc000160c00, 0x16d6ce0, 0xc000161500, 0xc0001f8000, 0xc0000c6ff0)
            external/org_golang_google_grpc/server.go:1254 +0xcbe
    google.golang.org/grpc.(*Server).serveStreams.func1.1(0xc000404770, 0xc000160c00, 0x16d6ce0, 0xc000161500, 0xc0001f8000)
            external/org_golang_google_grpc/server.go:690 +0x9f
    created by google.golang.org/grpc.(*Server).serveStreams.func1
            external/org_golang_google_grpc/server.go:688 +0xa1
    created by google.golang.org/grpc.(*Server).serveStreams.func1
            external/org_golang_google_grpc/server.go:688 +0xa1

Change-Id: Idd167a120e157005f44d255a61ef13dc80e8eeed
2019-08-22 18:14:02 +02:00
q3k 73b96184c7 Merge "bgpwtf/cccampix: cronjobify ripe-sync" 2019-08-14 12:34:10 +00:00
Serge Bazanski 821fa5fcc4 bgpwtf/cccampix: cronjobify ripe-sync
Change-Id: I185c2702384941b6537a6a4048bdb2e1c4e183ba
2019-08-14 14:33:30 +02:00