Box-Admins December 2018

box-admins@lists.squeakfoundation.org

2 participants
5 discussions

Access to the new server(s)
by Tobias Pape 05 Apr '19

05 Apr '19

Dear all [ACTIONS AT END] with retroactive blessing of Levente, I have now prepared eight VMs on Rackspace. Here's the overview: ======================================================================================================================= Name Name (ext) intended use Unix Users Public Ports Private Ports Public IPv4 Private IPv4 ----------------------------------------------------------------------------------------------------------------------- ian ssh.squeak.org ssh-gateway ssh 1022 22 104.130.6.82 10.208.225.29 alan *.squeak.org webserver webteam 80, 443 22 104.239.229.92 10.176.200.8 adele lists.... mailinglists (tbd) 25, 587, 465 22, 8080 162.242.237.43 10.208.160.56 andreas -------- source.squeak chrismuller* -------- 22, 8080 irrelevant 10.208.161.222 dan -------- squeaksource davidlewis* -------- 22, 8080 irrelevant 10.176.197.150 ted -------- squeak wiki+map (tbd) -------- 22, 8080, 8081 irrelevant 10.176.130.111 david -------- jenkins (tbd) -------- 22, 8080 irrelevant 10.208.194.45 scott -------- misc (tbd) -------- 22, 8080, 8081 irrelevant 10.176.199.169 ======================================================================================================================= Currently, Levente and me have sudo on all these machines. Users with * also do. Note that _no_ server exposes SSH on port 22 on a public IP. This is intentional to narrow attack vectors for script kiddies. How to login? Ian is the ssh gateway so you have to connect to ian _first_ and use (1) local forwarding or (2) proxy jumping. I have installed the Public keys from most of you for the 'ssh' user on ian. Please verify by ssh -p1022 -lssh 104.130.6.82 you should see restrict shell, no commands # (you get out with crtl-d, ctrl-c, or killing ssh) How to reach the other servers? Example for 'andreas' variant (1): Do a local forward by ssh -AN -L22221:10.176.200.8:22 -p1022 -lssh 104.130.6.82 and then ssh -lYOURNAME -p22221 localhost (-N maybe optional, but then you see 'restrict shell, no commands #') Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 LocalForward 222221 10.176.200.8:22 Host andreas.squeak.org User YOURNAME Hostname localhost Port 222221 And then say 'ssh -AN ian.squeak.org' and then 'ssh andreas.squeak.org' variant (2): (a) You have OpenSSH >= 7.3 Do a Jump with ssh -J ssh@104.130.6.82:1022 YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyJump ian.squeak.org And then say 'ssh andreas.squeak.org' (b) You have OpenSSH >= 5.4 Do a Jump via ssh -o ProxyCommand="ssh -lssh -p1022 -W %h:%p 104.130.6.82" YOURNAME(a)10.176.200.8 Or in your .ssh/config you can put Host ian.squeak.org User ssh Hostname 104.130.6.82 Port 1022 Host andreas.squeak.org User YOURNAME Hostname 10.176.200.8 ProxyCommand ssh -W %h:%p ian.squeak.org And then say 'ssh andreas.squeak.org' (c) You have OpenSSH < 5.4 Use variant (1) We will shortly start RSYNC-ing over data from box3 and box4 as well as replicatiing DNS entries before switching over. [ACTION REQUIRED] - Who needs access to which servers? - Do we need Jenkins anymore? As always, questions appreciated. Best regards -Tobias

8 36

In case MS decides to spam-mark us again
by Tobias Pape 20 Dec '18

20 Dec '18

... see here: https://wiki.hetzner.de/index.php/Microsoft_Blacklist/en Maybe someone should write that down somewhere -t

1 0

Re: [Box-Admins] Something's strange
by Tobias Pape 12 Dec '18

12 Dec '18

Hi All > On 10.12.2018, at 11:43, Craig Latta <craig(a)blackpagedigital.com> wrote: > > > Hi Tobias-- > >> in addition to the high-rate SPAM-bounces for Squeak-dev I have just >> received 222 unsubscribe notifications for squeak-dev, too. Can >> someone please have a look? > > What should I be looking for? I very occasionally use the Postman > interface to clear out the spam queue, that's about it. The console interface (/var/lib/mailman and so on) as well as the logs give a clue. One of the Box-admins should have a look. > >> Also, Craig, can you please remove me as Moderator for squeak-dev? > > Done; thanks for being a moderator! Thank you. I hope we find someone with a bit of time at hand to help here. Best regards -Tobias > > > -C > > -- > Craig Latta > Black Page Digital > Amsterdam :: San Francisco > craig(a)blackpagedigital.com > +31 6 2757 7177 (SMS ok) > + 1 415 287 3547 (no SMS)

1 0

Something's strange
by Tobias Pape 10 Dec '18

10 Dec '18

Hi all in addition to the high-rate SPAM-bounces for Squeak-dev I have just received 222 unsubscribe notifications for squeak-dev, too. Can someone please have a look? Also, Craig, can you please remove me as Moderator for squeak-dev? Dear Board, can you please find a replacement squeak-dev moderator for me? Best regards -Tobias PS: Please note I am _not_ a postmaster for the server anyome and do not receive mails to postmaster@. Those who do are Levente Uzonyi, David Lewis and Chris Cunnington.

1 0

Restarting squeaksource.com on dan.box.squeak.org
by David T. Lewis 07 Dec '18

07 Dec '18

Squeaksource.com seems to be off line for some reason. I get 502 Bad Gateway from a web browser, no response when accessing it from an MC browser, and I cannot connect with VMC. I don't see anything obviously wrong, CPU and memory usage seem normal, and file descriptor count is in normal limits. The image was saved within the last 4 hours, and that image is working normally (I downloaded it to my PC and checked). I will restart the image and see if it comes back. Dave

1 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Box-Admins December 2018