June 2020 - Heroes - openSUSE Mailing Lists

[heroes] Redmine plugin installation: redmine_agile
by sergio 25 Jul '20

25 Jul '20

Hi openSUSE heroes, I was told you are maintaining the redmine instance for progress.opensuse.org. We are in the need of an agile board for better managing of tickets. Would it be possible for you to install this plugin? https://www.redmine.org/plugins/redmine_agile Kind Regards -- Sergio Lindo Mansilla <slindomansilla(a)suse.com> QA Engineer SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nürnberg Germany https://www.suse.com/ (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer

2 3

[heroes] Reminder: openSUSE Leap 15.2 GA in two days
by Lubos Kocman 30 Jun '20

30 Jun '20

Hello Team, openSUSE Leap 15.2 GA is this Thursday. This is a task* to very that the HA proxy can handle the load. [0]https://progress.opensuse.org/issues/61347 Thank you Lubos

1 0

[heroes] Test new www.opensuse.org design
by Guo Yunhe 29 Jun '20

29 Jun '20

Hi heroes, I am making a new design for www.opensuse.org <http://www.opensuse.org> (20% in progress). The GitHub link is https://github.com/openSUSE/www.opensuse.org . It is a Jekyll site. Can anyone help to deploy it as www-test.opensuse.org ? (pull and rebuild every hour) Thanks! -- Guo Yunhe / @guoyunhe / guoyunhe.me -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

4 9

[heroes] [openSUSE admin - tickets #68404] Problem with mailing lists
by Per Jessen 25 Jun '20

25 Jun '20

I have just received number 10 of these today, what's the story? -- Per Jessen, Zürich (28.4°C) Member, openSUSE Heroes -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

2 2

[heroes] Nuremberg-Cutover Weekend 19th-20th June
by fatma ghariani 19 Jun '20

19 Jun '20

Dear all, We will proceed with our Nuremberg cut-over from Microfocus during the following timeframe: - Friday 19th of June, starting 17PM - Saturday /Sunday 20-21th of June. Thus we would like to inform you for planned downtime for all external services and R&D network. Affected services within our DMZ and Opensuse network will undergo a slight change: - All public facing IPv6 range will be changed to be within the following new range IPV6: 2001:67C:2178::/48 Once Accenture and SUSE-IT take over the new range from MF-IT, we will provide a list of machines in a confluence wiki with all details. Thank you for your patience, On Behalf of Engineering Infrastructure Team, Fatma Ghariani With kind regards, Fatma Ghariani Fatma Ghariani <fghariani(a)suse.de> System & Network Administrator SUSE-IT Mail: fghariani(a)suse.com Phone: +49 911 7405 3238 - - - SUSE Software Solutions Germany GmbH Maxfeldstr. 5 90409 Nuremberg Germany (HRB 36809, AG Nürnberg) Managing Director: Felix Imendörffer -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] FYI: New IPv6 addresses for scanner|download|stage|ftp.opensuse.org 2020-06-15
by Lars Vogdt 18 Jun '20

18 Jun '20

Hi We need to move to a new IPv6 subnet (2001:67c:2178::/48) with all opensuse.org machines at: 2020-06-15 All machines switch from 2620 to 2001 at this date. At the moment, they are running in both networks and should be reachable via their old and new address. If you are using DNS, no change is needed on your side. The most important machines that might have some ACL settings on some of your firewalls are: # scanner.opensuse.org 2620:113:80c0:8::20 => 2001:67c:2178:8::20 # stage.opensuse.org 2620:113:80c0:8::10 => 2001:67c:2178:8::10 # ftp.opensuse.org 2620:113:80c0:8::13 => 2001:67c:2178:8::13 # downloadcontent.opensuse.org 2620:113:80c0:8::27 => 2001:67c:2178:8::27 Note: this does not affect ACL settings for stage.opensuse.org on our side. If your mirror has an entry which allows him to sync from stage.opensuse.org, everything is fine. You might just notice scans from the different IPv6 addresses above. With kind regards, Lars -- Lars Vogdt <Lars.Vogdt(a)suse.com> - BuildOPS Engineering Team Lead - SUSE Software Solutions Germany GmbH (HRB 36809, AG Nürnberg), GF: Felix Imendörffer -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

2 1

[heroes] repos fubar again
by Felix Miata 15 Jun '20

15 Jun '20

I got timeouts trying to zypper dup TW now that 20200612 was announced over 5 hours ago, until fumbling through repo configuration to find download.opensuse.org was the primary obstacle and switching to something else. This is hardly the first time in the past month. It's got to be turning would-be openSUSE users off. I've been trying for days to help someone in a forum with a cantankerous laptop trying hopelessly to get a bootable installation of Xubuntu. Finally I convinced him to try openSUSE instead, which was anything but easy to do. He got an installation initiated finally after multiple failed starts, but his download speed is now trickling along at "about 100 kb/s so it's taking forever": <https://www.linuxquestions.org/questions/linux-newbie-8/sos-facing-the-blac…> -- Evolution as taught in public schools is religion, not science. Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

3 4

[heroes] widehat not sync'ing ?
by Per Jessen 14 Jun '20

14 Jun '20

see https://progress.opensuse.org/issues/68042 -- Per Jessen, Zürich (18.6°C) Member, openSUSE Heroes -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] VPN help
by Carlos E. R. 12 Jun '20

12 Jun '20

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Content-ID: <alpine.LSU.2.21.2006082312380.11364(a)Telcontar.valinor> Hi, I'm trying to setup the heroes VPN setup per instructions on <https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/VPN>. It is the first time I setup an VPN connection, and I stuck a problem. My computer was using named; seeing no instructions for named, I migrated the named server to another computer, and setup dnsmasq instead. I can connect, but I get no name resolution of the heroes network. But first I had to add "script-security 2" to /etc/openvpn/heroes.conf or I get this error: ● openvpn(a)heroes.service - OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf Loaded: loaded (/usr/lib/systemd/system/openvpn@.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Mon 2020-06-08 22:19:22 CEST; 18s ago Process: 6829 ExecStart=/usr/sbin/openvpn --daemon --suppress-timestamps --writepid /run/openvpn/heroes.pid --cd /etc/openvpn/ --config heroe> Main PID: 6990 (code=exited, status=1/FAILURE) Jun 08 22:19:21 Telcontar openvpn[6990]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0 Jun 08 22:19:21 Telcontar openvpn[6990]: /bin/ip link set dev tun0 up mtu 1500 Jun 08 22:19:21 Telcontar openvpn[6990]: /bin/ip addr add dev tun0 local 192.168.252.185 peer 192.168.252.1 Jun 08 22:19:22 Telcontar openvpn[6990]: heroes/client.up tun0 1500 1553 192.168.252.185 192.168.252.1 init Jun 08 22:19:22 Telcontar openvpn[6990]: WARNING: External program may not be called unless '--script-security 2' or higher is enabled. See --h> Jun 08 22:19:22 Telcontar openvpn[6990]: WARNING: Failed running command (--up/--down): external program fork failed Jun 08 22:19:22 Telcontar openvpn[6990]: Exiting due to fatal error Jun 08 22:19:22 Telcontar systemd[1]: openvpn(a)heroes.service: Main process exited, code=exited, status=1/FAILURE Jun 08 22:19:22 Telcontar systemd[1]: openvpn(a)heroes.service: Unit entered failed state. Jun 08 22:19:22 Telcontar systemd[1]: openvpn(a)heroes.service: Failed with result 'exit-code'. Perhaps that tidbit can be added to the wiki, or I did something wrong? :-? Current result is this: Telcontar:/etc/openvpn # systemctl start openvpn@heroes Enter Auth Username: ***** Enter Auth Password: *********** Telcontar:/etc/openvpn # systemctl status openvpn@heroes ● openvpn(a)heroes.service - OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf Loaded: loaded (/usr/lib/systemd/system/openvpn@.service; disabled; vendor preset: disabled) Active: active (running) since Mon 2020-06-08 22:25:54 CEST; 2s ago Process: 7303 ExecStart=/usr/sbin/openvpn --daemon --suppress-timestamps --writepid /run/openvpn/heroes.pid --cd /etc/openvpn/ --config heroe> Main PID: 7327 (openvpn) Tasks: 1 CGroup: /system.slice/system-openvpn.slice/openvpn(a)heroes.service └─7327 /usr/sbin/openvpn --daemon --suppress-timestamps --writepid /run/openvpn/heroes.pid --cd /etc/openvpn/ --config heroes.conf Jun 08 22:25:54 Telcontar openvpn[7327]: [scar.opensuse.org] Peer Connection Initiated with [AF_INET]195.135.221.151:1194 Jun 08 22:25:55 Telcontar openvpn[7327]: TUN/TAP device tun0 opened Jun 08 22:25:55 Telcontar openvpn[7327]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0 Jun 08 22:25:55 Telcontar openvpn[7327]: /bin/ip link set dev tun0 up mtu 1500 Jun 08 22:25:55 Telcontar openvpn[7327]: /bin/ip addr add dev tun0 local 192.168.252.185 peer 192.168.252.1 Jun 08 22:25:55 Telcontar openvpn[7327]: heroes/client.up tun0 1500 1553 192.168.252.185 192.168.252.1 init Jun 08 22:25:55 Telcontar root[7336]: client-up starts for tun0, found DNS servers 192.168.47.101 192.168.47.102 and wrote them into /etc/dnsma> Jun 08 22:25:55 Telcontar openvpn[7327]: GID set to nobody Jun 08 22:25:55 Telcontar openvpn[7327]: UID set to nobody Jun 08 22:25:55 Telcontar openvpn[7327]: Initialization Sequence Completed Telcontar:/etc/openvpn # route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default router.valinor 0.0.0.0 UG 0 0 0 eth0 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 192.168.47.0 192.168.252.1 255.255.255.0 UG 0 0 0 tun0 192.168.67.0 192.168.252.1 255.255.255.0 UG 0 0 0 tun0 192.168.252.0 192.168.252.1 255.255.255.0 UG 0 0 0 tun0 192.168.252.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 Telcontar:/etc/openvpn # host freeipa.infra.opensuse.org Host freeipa.infra.opensuse.org not found: 2(SERVFAIL) Telcontar:/etc/openvpn # host -v freeipa.infra.opensuse.org Trying "freeipa.infra.opensuse.org" Host freeipa.infra.opensuse.org not found: 2(SERVFAIL) Received 44 bytes from 127.0.0.1#53 in 1770 ms Telcontar:/etc/openvpn # host opensuse.org opensuse.org has address 195.135.221.140 opensuse.org has IPv6 address 2001:67c:2178:8::16 opensuse.org mail is handled by 42 mx1.suse.de. opensuse.org mail is handled by 42 mx2.suse.de. Telcontar:/etc/openvpn # The clue is in the log: <3.6> 2020-06-08T22:25:19.166052+02:00 Telcontar systemd 1 - - Starting OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf... <3.5> 2020-06-08T22:25:19.207636+02:00 Telcontar openvpn 7303 - - OpenVPN 2.4.3 x86_64-suse-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 20 2017 <3.5> 2020-06-08T22:25:19.207862+02:00 Telcontar openvpn 7303 - - library versions: OpenSSL 1.1.0i-fips 14 Aug 2018, LZO 2.10 <3.4> 2020-06-08T22:25:54.471881+02:00 Telcontar openvpn 7327 - - NOTE: the current --script-security setting may allow this configuration to call user-defined scripts <3.6> 2020-06-08T22:25:54.472307+02:00 Telcontar systemd 1 - - Started OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf. <3.5> 2020-06-08T22:25:54.473074+02:00 Telcontar openvpn 7327 - - TCP/UDP: Preserving recently used remote address: [AF_INET]195.135.221.151:1194 <3.5> 2020-06-08T22:25:54.473228+02:00 Telcontar openvpn 7327 - - UDP link local: (not bound) <3.5> 2020-06-08T22:25:54.473354+02:00 Telcontar openvpn 7327 - - UDP link remote: [AF_INET]195.135.221.151:1194 <3.5> 2020-06-08T22:25:54.473469+02:00 Telcontar openvpn 7327 - - NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay <3.4> 2020-06-08T22:25:54.523161+02:00 Telcontar openvpn 7327 - - WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this <3.5> 2020-06-08T22:25:54.711623+02:00 Telcontar openvpn 7327 - - [scar.opensuse.org] Peer Connection Initiated with [AF_INET]195.135.221.151:1194 <3.5> 2020-06-08T22:25:55.764114+02:00 Telcontar openvpn 7327 - - TUN/TAP device tun0 opened <3.5> 2020-06-08T22:25:55.764383+02:00 Telcontar openvpn 7327 - - do_ifconfig, tt->did_ifconfig_ipv6_setup=0 <3.5> 2020-06-08T22:25:55.764557+02:00 Telcontar openvpn 7327 - - /bin/ip link set dev tun0 up mtu 1500 <3.6> 2020-06-08T22:25:55.764774+02:00 Telcontar systemd-udevd 7331 - - link_config: autonegotiation is unset or enabled, the speed and duplex are not writable. <3.5> 2020-06-08T22:25:55.765377+02:00 Telcontar openvpn 7327 - - /bin/ip addr add dev tun0 local 192.168.252.185 peer 192.168.252.1 <3.5> 2020-06-08T22:25:55.766533+02:00 Telcontar openvpn 7327 - - heroes/client.up tun0 1500 1553 192.168.252.185 192.168.252.1 init <1.5> 2020-06-08T22:25:55.800899+02:00 Telcontar root - - - client-up starts for tun0, found DNS servers 192.168.47.101 192.168.47.102 and wrote them into /etc/dnsmasq.servers.conf <3.6> 2020-06-08T22:25:55.832258+02:00 Telcontar systemd 1 - - Stopping DNS caching server.... <3.6> 2020-06-08T22:25:55.832516+02:00 Telcontar dnsmasq 23896 - - exiting on receipt of SIGTERM <3.6> 2020-06-08T22:25:55.837409+02:00 Telcontar systemd 1 - - Stopped DNS caching server.. <3.6> 2020-06-08T22:25:55.838505+02:00 Telcontar systemd 1 - - Starting DNS caching server.... <3.6> 2020-06-08T22:25:55.874424+02:00 Telcontar dnsmasq 7339 - - dnsmasq: syntax check OK. <3.6> 2020-06-08T22:25:55.904044+02:00 Telcontar systemd 1 - - Started DNS caching server.. <3.6> 2020-06-08T22:25:55.904671+02:00 Telcontar dnsmasq 7341 - - started, version 2.78 cachesize 2000 <3.6> 2020-06-08T22:25:55.904843+02:00 Telcontar dnsmasq 7341 - - compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify <3.6> 2020-06-08T22:25:55.904955+02:00 Telcontar dnsmasq 7341 - - DBus support enabled: connected to system bus <3.6> 2020-06-08T22:25:55.905060+02:00 Telcontar dnsmasq 7341 - - asynchronous logging enabled, queue limit is 5 messages <3.6> 2020-06-08T22:25:55.905167+02:00 Telcontar dnsmasq 7341 - - using local addresses only for domain valinor <3.6> 2020-06-08T22:25:55.905288+02:00 Telcontar dnsmasq 7341 - - using nameserver 192.168.1.16#53 for domain valinor <3.6> 2020-06-08T22:25:55.905434+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.0.0.1#53 <3.6> 2020-06-08T22:25:55.905574+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.1.1.1#53 <3.6> 2020-06-08T22:25:55.905723+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.254#53 <3.6> 2020-06-08T22:25:55.905868+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.250#53 <3.6> 2020-06-08T22:25:55.906010+02:00 Telcontar dnsmasq 7341 - - reading /etc/resolv.conf <3.6> 2020-06-08T22:25:55.906139+02:00 Telcontar dnsmasq 7341 - - using local addresses only for domain valinor <3.6> 2020-06-08T22:25:55.906240+02:00 Telcontar dnsmasq 7341 - - using nameserver 192.168.1.16#53 for domain valinor <3.6> 2020-06-08T22:25:55.906351+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.0.0.1#53 <3.6> 2020-06-08T22:25:55.906455+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.1.1.1#53 <3.6> 2020-06-08T22:25:55.906574+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.254#53 <3.6> 2020-06-08T22:25:55.906687+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.250#53 <3.4> 2020-06-08T22:25:55.906798+02:00 Telcontar dnsmasq 7341 - - ignoring nameserver 127.0.0.1 - local interface <3.6> 2020-06-08T22:25:55.906922+02:00 Telcontar dnsmasq 7341 - - read /etc/hosts - 38 addresses <3.5> 2020-06-08T22:25:55.907041+02:00 Telcontar openvpn 7327 - - GID set to nobody <3.5> 2020-06-08T22:25:55.907181+02:00 Telcontar openvpn 7327 - - UID set to nobody <3.5> 2020-06-08T22:25:55.913284+02:00 Telcontar openvpn 7327 - - Initialization Sequence Completed <3.6> 2020-06-08T22:28:31.643404+02:00 Telcontar smartd 1375 - - Device: /dev/sda [SAT], SMART Usage Attribute: 190 Airflow_Temperature_Cel changed from 62 to 63 Notice it says: ... client-up starts for tun0, found DNS servers 192.168.47.101 192.168.47.102 and wrote them into /etc/dnsmasq.servers.conf but that file does not exist: Telcontar:/etc/openvpn # l /etc/dnsmasq.servers.conf ls: cannot access '/etc/dnsmasq.servers.conf': No such file or directory Telcontar:/etc/openvpn # There are no aa-logprof entries. I have connectivity: Telcontar:/etc/openvpn # ping 192.168.47.101 PING 192.168.47.101 (192.168.47.101) 56(84) bytes of data. 64 bytes from 192.168.47.101: icmp_seq=1 ttl=63 time=49.7 ms 64 bytes from 192.168.47.101: icmp_seq=2 ttl=63 time=50.0 ms ^C - --- 192.168.47.101 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 49.712/49.884/50.057/0.282 ms Telcontar:/etc/openvpn # Where do I look? Clues, ideas, errors? :-) I see something confusing in /etc/openvpn/heroes/client.up ... for server in ${dns_server[*]}; do echo "server=/infra.opensuse.org/$server" echo "server=/.47.168.192.in-addr.arpa/$server" done >/etc/dnsmasq.opensuseservers.conf # for the debug enable this: #cat /etc/dnsmasq.servers.conf |logger fi echo "client-up starts for "${dev}", found DNS servers "${dns_server[*]}" and wrote them into /etc/dnsmasq.servers.conf" |logger It writes to /etc/dnsmasq.opensuseservers.conf, then mentions /etc/dnsmasq.servers.conf? :-? Another unrelated question: should I close the tunnel when sending the machine on suspend/hibernation? - -- Cheers. -----BEGIN PGP SIGNATURE----- iHYEARECADYWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCXt6p0xgcY2FybG9zLmUu ckBvcGVuc3VzZS5vcmcACgkQtTMYHG2NR9UWNACfdexuXyIpQG/wE8bhewMyRNtJ wEkAnRM7jeqM0cV2yZ8HrDgjOa5eZdIB =h3XB -----END PGP SIGNATURE-----

6 17

[heroes] Repo issues?
by Jim Henderson 04 Jun '20

04 Jun '20

Have received a report via the Facebook page that some repos are reporting the following error: SSL: no alternative certificate subject name matches target host name 'download.opensuse.org I've seen this myself on my system, but only with my home: repo, the main repos so far have seemed OK. Can someone take a look, or let me know if this is related to any ongoing work? Thanks! -- Jim Henderson Please keep on-topic replies on the list so everyone benefits -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

4 8