Commit Graph

1406 Commits (master)

Author SHA1 Message Date
radex 2f93220889 hswaw: add kasownik
Change-Id: I48739f9d4ecb8244a2baff5d38a308f7612940eb
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1990
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-07-25 07:50:29 +00:00
ar 5249a9aa06 h/m/customs: refactor dhcp & dns configuration for waw.
waw.hackerspace.pl dns zone is now generated from the same source of
truth as kea reservations.
drive-by changes:
  * did a bit of cleanup of the zone file by not copying/converting
    some records.
  * added entry for craptrap's ipmi interface

Change-Id: I17cfea966e6199ebbef408c8172030b9b43d1a99
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1992
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-07-20 12:21:55 +00:00
q3k 15e7348a0b cluster: remove dead machines
Change-Id: I3ff6680bc7212341ca626b0f560e1fe93efe3a35
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1987
Reviewed-by: ar <ar@hackerspace.pl>
2024-07-20 12:18:00 +00:00
q3k 168f84b69b ops: apply CVE-2024-6387 patch on critical machines
Instead of waiting for backports or even rolling forward unstable, let's
just patch the bug out.

This has been deployed on:

 - dcr01s22.hswaw.net
 - dcr01s24.hswaw.net
 - dcr03s16.hswaw.net
 - snowflake.hswaw.net

Change-Id: I0ad8ea37bd15bc9bd4e814cdf3eda7b2c47bb03e
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1988
Reviewed-by: implr <implr@hackerspace.pl>
2024-07-20 12:17:55 +00:00
ar 21700c98f6 app/mastodon: bump to 4.2.10
Change-Id: I9392332e05798395fe8d9c54826440ec1aadaf0b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1989
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-07-06 22:26:32 +00:00
ar 39f9d171c4 h/m/snowflake, matrix: postgresql config
prep for postgresql database migration from the instance running on old
dell blade server.

on snowflake side, mostly a copy-paste of configuration from bc01n05,
from which the database instance will be migrated from, with a few
adjustments for newer nixpkgs/nixos.

on matrix/k8s side, just a change of host.

and a drive-by rename from `.hackerspace.pl` to `.hswaw.net`

Change-Id: I0e78162270ebb3244078e34dee0cd4629d5598ca
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1986
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-06-14 19:06:52 +00:00
ar 6bdf80237e h/m/snowflake: add libvirt and vm networking configuration
attempts were made for the following:
 * routed network - would require changes in more places
 * macvtap - getting host/guest connectivity is annoying
 * sriov with NICs hidden from host - some virtual functions randomly
   wouldn't get hidden/assigned the vfio-pci driver
 * basic sriov - what's here currently, works well enough for libvirt

Change-Id: Ifa5ff1ccafd5ea1d9b2c360b897390378398662d
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1983
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-06-14 00:04:57 +00:00
ar c1a5dd943b h/m/snowflake: some basic utilities added
Change-Id: I4a043aeb11fc3772705b4447196d739cef8db01a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1982
Reviewed-by: ar <ar@hackerspace.pl>
2024-06-14 00:04:31 +00:00
ar f9faf30ac4 h/m/customs: dhcp/dns updates
SIP/dect things that weren't added before.

Change-Id: I11fb8084fb525f8f26decb0e5787f037a7da646a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1985
Reviewed-by: ar <ar@hackerspace.pl>
2024-06-12 19:01:18 +00:00
ar 7119c4b86f h/m/customs: dhcp/dns updates
New esp32 in teletype.

Change-Id: I6195fc3c1ccdce830febdaadf7350264d064d0d3
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1984
Reviewed-by: ar <ar@hackerspace.pl>
2024-06-12 18:43:05 +00:00
ar ad179def49 hswaw/machines: add snowflake
This adds one of the 4 new fast machines that will run various one-off
workloads, initially mostly migrated off of the old dell m1000e blade
chassis, such as a virtualized boston-packets.

Change-Id: I4a85f8e14cd79257ad41bbe1519f33595f4e497a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1981
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-06-11 16:58:05 +00:00
radex 5800cfc146 hswaw/labelmaker: deploy
Change-Id: Ia52f7dd939032287d33b6d26562774626ce94d1f
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1966
Reviewed-by: ptrc <ptrc@hackerspace.pl>
2024-06-10 12:33:22 +00:00
radex 9669ee3e1a hswaw/printservant: update config
Change-Id: I2889402f73b64b6f91a11a5e4ddfc4b8fb8dd75e
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1964
Reviewed-by: etorameth <etorameth@hackerspace.pl>
2024-06-08 19:12:39 +00:00
radex c2fff7677a hswaw/labelmaker: deploy labelmaker
Change-Id: If137bd7595c41aa38450f9a49d399f4a686729f2
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1958
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-06-07 07:41:42 +00:00
radex 506252f2b4 hswaw/labelmaker: require authentication to vector/pixel
Due to multiple cases of abuse and lack of real need to have it accessible unauthenticated (we don't have a public terminal), force users of vector/pixel labelmakers to authenticate

Change-Id: Ib8c7e2a921251b5d0cf6a0e8c488256aa9935e86
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1957
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-06-07 07:41:42 +00:00
q3k 46a8fff711 hswaw/site: deploy
Change-Id: Ia1c701f240f9a63b320c5f221b863589d9f87939
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1946
Reviewed-by: radex <radex@hackerspace.pl>
2024-06-07 06:51:15 +00:00
q3k 1d1aafb5b0 hswaw/site: add badapple
Change-Id: I650ac3bf2a6b499c13c18ad05c26c9e18bbaaa24
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1945
Reviewed-by: radex <radex@hackerspace.pl>
Reviewed-by: pl <pl@hackerspace.pl>
2024-06-07 06:51:15 +00:00
radex e8c0952f45 hswaw/site: show PIT banner only during tax season
Change-Id: Ida4b9e3a1efca19b6570ea33d217850fd351964f
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1961
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-06-07 06:50:53 +00:00
q3k c1f60e0a22 hswaw/site: add merch page
Change-Id: Ic6e1b5366706e62648cc8e1524751afc22912a45
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1944
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-06-07 06:50:53 +00:00
ar b1f274fd6f h/m/customs: explicitly assign subnet identifiers
Auto-generated subnet identifiers are deprecated. not a problem yet with
the kea version in the pinned nixpkgs, but we're bound to hit it sooner
or later.
See: https://kea.readthedocs.io/en/kea-2.5.8/arm/dhcp4-srv.html#ipv4-subnet-identifier

Change-Id: Id4abb9e8f85b3e77f0ec33806cc64bd2b15ab972
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1963
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-06-06 21:56:26 +00:00
implr b953e6a48d app/mastodon: bump to 4.2.9
Change-Id: Ied7501380d7de3d69ce0a134d48b8cc0ebb09e28
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1962
Reviewed-by: pl <pl@hackerspace.pl>
2024-05-30 20:21:15 +00:00
radex 6bb11a98ed cluster/admittomatic: admit additional annotations
Change-Id: Ic80a97d6969c46335a83ca0bcfc7833b74cf578a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1960
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-05-28 13:49:27 +00:00
radex 3b2b0f0327 personal/radex: add gadzber
Change-Id: Ia9d008a3fad8a2a99f05af5648a95a1f7d01fc58
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1959
2024-05-13 19:49:24 +00:00
radex a88a679f64 hswaw/printservant: update printers
Change-Id: Id35a543bab2d7e0424118c508c909ea72477f123
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1955
Reviewed-by: etorameth <etorameth@hackerspace.pl>
2024-05-13 17:29:51 +00:00
etorameth bc46f2371e personal: add etorameth
Change-Id: I8b1e81af16fc68fe6356c1cf45548f9a94e43a8b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1953
2024-05-13 16:56:07 +00:00
ar 6a57e4fee4 h/m/customs: dhcp/dns updates
bridgeport is gone
kodak MAC changed
kst brought a rpi3 she wants to keep at hs for flashing things

Change-Id: I8500e0e761e1c47840b6b5cd7b2c1245e2f7c284
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1951
Reviewed-by: ar <ar@hackerspace.pl>
2024-04-30 15:34:30 +00:00
noisersup d843b782a1 hswaw/sound: add esphome integration
Change-Id: I535256056aed6dfec4ddf4843203990324f49564
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1950
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-04-27 20:35:55 +00:00
noisersup cf37d62a24 hswaw/sound: add noisersup's key
Change-Id: I89266060f5084b985dd75b7719c492b2fb25505c
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1949
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-04-27 20:35:55 +00:00
informatic c1b7fe4ce5 hswaw/paperless: fix signed document ingest
Change-Id: I6abc7ebab9a3026710f3908e5eeb0e765df0b932
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1941
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-04-19 15:56:11 +00:00
ar d055238030 h/m/customs: dhcp updates for printers
Moved voron static ip allocation to wired ethernet.
Added entries for Czechu's prusa mini which will be staying here for a
few months at least.
Removed oki allocation.
Added entries for new kyocera.
Kodak SBC upgrade -> new mac.

Change-Id: I503f2c1cffa913543102ee4d91a16548f9126d2d
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1947
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-04-11 19:28:09 +00:00
ar aa4b72e50e h/m/customs: migration from isc-dhcp4 to kea
Kea configuration added in its own file for general cleanness.
Migrated only lan and bms subnets; others appear to be legacy leftovers.
IP reservations migrated as-is; "one-liner" for that in comments.
Hopefully legacy "bootp" is not actually needed as that's behind a
paywall.
Generated config tested using `kea-dhcp4 -tT -c ./generated/dhcp4.conf`
Drive-by fix for checkinator to keep it working with old config with no
DHCP_SERVER config key.
Added myself to OWNERS as I'm making frequent changes here recently, and
vuko is absent.

Change-Id: I5d5dd71ab4fd3fb498bd8bc95428984b3b08f092
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1943
Reviewed-by: q3k <q3k@hackerspace.pl>
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-03-24 14:05:42 +00:00
ar 1bcaa97d87 hswaw/checkinator: implement support for kea dhcp server
Also bump version number and fix typo in README.

Change-Id: I116ef706d99df4ace70ccceefc6a23d41fd1adb6
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1942
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-03-20 16:31:53 +00:00
informatic 0aec638400 hswaw/machines/sound: spejsiot-polycom service, use full pulseaudio
Change-Id: Ia41ff02bf217a7116b4be87450723a7bbd549c0b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1909
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-03-14 19:00:08 +00:00
informatic 7b3a2f1820 hswaw/machines/printmaster: bring back legacy content, labelmaker redirect
Change-Id: I193b0a3e1161bc200c94cd9cda2b56bbd5855d53
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1922
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-03-14 18:59:51 +00:00
informatic c1a8c2dfd6 app/matrix: bump synapse, riot, mediarepo, coturn...
Change-Id: Ib1cedd7b679ea8091c03565b3bd85306fa891782
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1912
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-03-07 22:47:08 +00:00
informatic ebae01636e shell: fix colmena run
Somehow SHELL variable from host was still kept in pure shell.

This should prevent colmena deploys failing when host is built against
libc newer than the one in our fhsuserenv.

Change-Id: Ia98e35e71d8d3a0ae2920a18ff2fe6a2e8ed2d53
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1910
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-03-07 22:47:01 +00:00
ar e9965d38f5 h/m/customs: static ip + dns for kodak and voron 3d printers
Change-Id: Ifb200fb703dc3180bd4d7c4efa9c4138e5d434fc
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1921
Reviewed-by: informatic <informatic@hackerspace.pl>
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-03-07 16:20:04 +00:00
informatic cebcddfbfa hswaw/paperless: bump to v2.5.4
Change-Id: I2da532b06587344b0faf3d8028dc0e7796f9769a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1911
Reviewed-by: radex <radex@hackerspace.pl>
2024-03-01 21:17:16 +00:00
ar 2589ce6e82 h/m/customs: ulogd pcap logrotate compression fix
Misunderstood the logrotate.conf manual and somehow missed lack of the
"delaycompress" option in the output. "compress" needs to be specified
explicitly, despite the presence of other compression-related options,
and nix configuration generator requires "true", not "null", for entries
with no options to be present in output.

Change-Id: Ibe0c41a4b657ff598b2a0613f1ff6fe67f20ca3b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1908
Reviewed-by: q3k <q3k@hackerspace.pl>
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-02-28 07:02:10 +00:00
informatic c8d1d51c11 hswaw/machines/printmaster: cups server box
Change-Id: Ibf75d9bad789521bfab77fb17017b20030deed52
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1894
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-02-28 06:55:45 +00:00
ar d63ed67aa7 h/m/customs: compress connection logs
We need to keep a year's worth of connection logs for legal reasons, and
in uncompressed form they took around 170G, but only around 25G
compressed, while rootfs on the machine is a bit over 180G.

Also a drive-by build fix for laserproxy which also removes a workaround
that (IMHO) introduced more problems than it solved.

Change-Id: If91224b0c3bc5ccdd096f0c722e82dbe4de29b95
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1907
Reviewed-by: informatic <informatic@hackerspace.pl>
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-02-25 10:35:22 +00:00
q3k 51788262af mastodon: bump to 4.2.7
Change-Id: Ic2e51449e801b5446ebd0bd0e7af2d6f8cbf4f13
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1906
Reviewed-by: ar <ar@hackerspace.pl>
2024-02-18 23:52:41 +00:00
q3k a6f2ccf344 mastodon: bump to 4.2.6
Change-Id: Ib849b360888988eeb3fab10b10779e2204aef147
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1904
Reviewed-by: ar <ar@hackerspace.pl>
2024-02-16 11:35:49 +00:00
q3k faf8a41a83 ops/k0: bump runc to 1.1.12 (CVE-2024-21626)
Change-Id: I204f0a296b600143da43b8c8e34d70d4dcb1b8aa
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1903
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-02-08 12:03:49 +00:00
q3k 1b3774b584 ops: remove reference to non-existent machine
Change-Id: I0d4ea1a0d99f7b177a3fe526a7f435ea6b161bb7
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1902
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-02-08 12:03:49 +00:00
radex 7bde2d4f0c hswaw/labelmaker: deploy OG labelmaker
Change-Id: Ibe0e334f1c5faabeba14c8dce1afabe6a8095d4e
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1901
Reviewed-by: informatic <informatic@hackerspace.pl>
2024-02-07 22:06:54 +00:00
informatic ff8a50cb02 ops: colmena integration
Change-Id: I18b9218f2c29a84f7fa769e1a9f561a4385578ca
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1757
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-02-07 18:12:12 +00:00
viq 9340a3933d Playing around with gethomepage
Change-Id: I96e69f31eb90c017500ee5450b06e30bb9e068da
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1882
2024-02-06 19:58:40 +00:00
palid 6c6fda3076 walne: bump deps to properly re-deploy
Change-Id: I56d5a8b058586f02aabf1b395243339c754a6bc1
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1899
Reviewed-by: radex <radex@hackerspace.pl>
2024-02-04 15:56:20 +00:00
radex a4411e57e2 devtools/sourcegraph: migrate away from mirko.libsonnet
Change-Id: I842db50b49a5fbcc11e13d250e88c0d6bfc068be
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1769
Reviewed-by: q3k <q3k@hackerspace.pl>
2024-02-04 14:26:03 +00:00