Box-Admins January 2018

box-admins@lists.squeakfoundation.org

3 participants
5 discussions

Access to the new server(s)
by Tobias Pape 05 Apr '19

05 Apr '19

Dear all [ACTIONS AT END] with retroactive blessing of Levente, I have now prepared eight VMs on Rackspace. Here's the overview: ======================================================================================================================= Name Name (ext) intended use Unix Users Public Ports Private Ports Public IPv4 Private IPv4 ----------------------------------------------------------------------------------------------------------------------- ian ssh.squeak.org ssh-gateway ssh 1022 22 104.130.6.82 10.208.225.29 alan *.squeak.org webserver webteam 80, 443 22 104.239.229.92 10.176.200.8 adele lists.... mailinglists (tbd) 25, 587, 465 22, 8080 162.242.237.43 10.208.160.56 andreas -------- source.squeak chrismuller* -------- 22, 8080 irrelevant 10.208.161.222 dan -------- squeaksource davidlewis* -------- 22, 8080 irrelevant 10.176.197.150 ted -------- squeak wiki+map (tbd) -------- 22, 8080, 8081 irrelevant 10.176.130.111 david -------- jenkins (tbd) -------- 22, 8080 irrelevant 10.208.194.45 scott -------- misc (tbd) -------- 22, 8080, 8081 irrelevant 10.176.199.169 ======================================================================================================================= Currently, Levente and me have sudo on all these machines. Users with * also do. Note that _no_ server exposes SSH on port 22 on a public IP. This is intentional to narrow attack vectors for script kiddies. How to login? Ian is the ssh gateway so you have to connect to ian _first_ and use (1) local forwarding or (2) proxy jumping. I have installed the Public keys from most of you for the 'ssh' user on ian. Please verify by ssh -p1022 -lssh 104.130.6.82 you should see restrict shell, no commands # (you get out with crtl-d, ctrl-c, or killing ssh) How to reach the other servers? Example for 'andreas' variant (1): Do a local forward by ssh -AN -L22221:10.176.200.8:22 -p1022 -lssh 104.130.6.82 and then ssh -lYOURNAME -p22221 localhost (-N maybe optional, but then you see 'restrict shell, no commands #') Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 LocalForward 222221 10.176.200.8:22 Host andreas.squeak.org User YOURNAME Hostname localhost Port 222221 And then say 'ssh -AN ian.squeak.org' and then 'ssh andreas.squeak.org' variant (2): (a) You have OpenSSH >= 7.3 Do a Jump with ssh -J ssh@104.130.6.82:1022 YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyJump ian.squeak.org And then say 'ssh andreas.squeak.org' (b) You have OpenSSH >= 5.4 Do a Jump via ssh -o ProxyCommand="ssh -lssh -p1022 -W %h:%p 104.130.6.82" YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyCommand ssh -W %h:%p ian.squeak.org And then say 'ssh andreas.squeak.org' (c) You have OpenSSH < 5.4 Use variant (1) We will shortly start RSYNC-ing over data from box3 and box4 as well as replicatiing DNS entries before switching over. [ACTION REQUIRED] - Who needs access to which servers? - Do we need Jenkins anymore? As always, questions appreciated. Best regards -Tobias

8 36

URGENT: who's going to look?
by Tobias Pape 27 Jan '18

27 Jan '18

Dear all, Due to sheer amount of work I am going to delete myself from all emails from the squeak servers. Please, who is going to - look after the logcheck mails? - Care for package updates? - reboot the servers[1]? Best -Tobias [1]: Actually, the severs need to be rebooted quite soonish.

2 2

please confirm, okay to restart squeaksource?
by Chris Muller 19 Jan '18

19 Jan '18

It appears the squeaksource image supporting source.squeak.org needs to be restarted. I'm happy to do that. Okay?

1 0

need password reset on andreas
by Chris Muller 13 Jan '18

13 Jan '18

Hi Tobias and all, It seems I have forgotten my password for "chrismuller" on andreas. While investigating a question for Eliot, I noticed /service/squeaksource/log does not seem to be started. I went to check its status, but requires sudo to do that. I was in sudoers but I can't remember my password. I tried several but quickly it said, "3 attempts". So I might have banned from sudoers, as well. Sorry for the inconvenience. Could someone help me? Thanks, Chris

2 1

Mail delivery from dan.box.squeak.org to mail.squeak.org at 162.242.237.43
by David T. Lewis 05 Jan '18

05 Jan '18

The squeaksource.com image runs on dan.box.squeak.org, and it occasionally tries to send SMTP mail to mail.squeak.org, which resolves to 162.242.237.43. The attempt to connect to the mail server results in a 503 service not available error. This in turn results in failures that hang the squeaksource image (but that is a subject for another discussion). For now, I am trying to understand how to get mail delivery working. I need some help to understand the source of the error. Is there something about our Rackspace server configuration (and network configurations) that would prevent mail delivery from working when the SMTP client connects from a Squeak image running on dan.box.squeak.org to the mail server at address 162.242.237.43? Background: For purposes of debugging, I am VNC connecting to a modified squeaksource.com image running on dan.box.squeak.org, and I am evaluating the following snippet to debug the SMTP connection issue: fromAddress := 'squeaksource(a)source.squeakfoundation.org'. recipientList := OrderedCollection new add: 'box-admins(a)lists.squeakfoundation.org'; yourself. recipientList := OrderedCollection new add: 'dtlewis290(a)gmail.com'; yourself. messageText := 'This is a test message from a squeaksource.com test image.'. smtpServer := 'mail.squeak.org'. SMTPClient deliverMailFrom: fromAddress to: recipientList text: messageText usingServer: smtpServer. The connection failure results in an error response '503 5.5.1 Error: send HELO/EHLO first'. Help and pointers appreciated. Dave

2 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Box-Admins January 2018