Hi openSUSE heroes,
I was told you are maintaining the redmine instance for
progress.opensuse.org.
We are in the need of an agile board for better managing of tickets.
Would it be possible for you to install this plugin?
https://www.redmine.org/plugins/redmine_agile
Kind Regards
--
Sergio Lindo Mansilla <slindomansilla(a)suse.com>
QA Engineer
SUSE Software Solutions Germany GmbH
Maxfeldstr. 5
90409 Nürnberg
Germany
https://www.suse.com/
(HRB 36809, AG Nürnberg)
Geschäftsführer: Felix Imendörffer
Hello Team,
openSUSE Leap 15.2 GA is this Thursday.
This is a task* to very that the HA proxy can handle the load.
[0]https://progress.opensuse.org/issues/61347
Thank you
Lubos
Hi heroes,
I am making a new design for www.opensuse.org <http://www.opensuse.org> (20% in progress). The GitHub link is https://github.com/openSUSE/www.opensuse.org . It is a Jekyll site.
Can anyone help to deploy it as www-test.opensuse.org ? (pull and rebuild every hour)
Thanks!
--
Guo Yunhe / @guoyunhe / guoyunhe.me
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
I have just received number 10 of these today, what's the story?
--
Per Jessen, Zürich (28.4°C)
Member, openSUSE Heroes
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Dear all,
We will proceed with our Nuremberg cut-over from Microfocus during the
following timeframe:
- Friday 19th of June, starting 17PM
- Saturday /Sunday 20-21th of June.
Thus we would like to inform you for planned downtime for all external
services and R&D network.
Affected services within our DMZ and Opensuse network will undergo a
slight change:
- All public facing IPv6 range will be changed to be within the
following new range IPV6: 2001:67C:2178::/48
Once Accenture and SUSE-IT take over the new range from MF-IT, we will
provide a list of machines in a confluence wiki with all details.
Thank you for your patience,
On Behalf of Engineering Infrastructure Team,
Fatma Ghariani
With kind regards,
Fatma Ghariani
Fatma Ghariani <fghariani(a)suse.de>
System & Network Administrator
SUSE-IT Mail: fghariani(a)suse.com
Phone: +49 911 7405 3238
- - -
SUSE Software Solutions Germany GmbH
Maxfeldstr. 5
90409 Nuremberg
Germany
(HRB 36809, AG Nürnberg)
Managing Director: Felix Imendörffer
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hi
We need to move to a new IPv6 subnet (2001:67c:2178::/48) with all
opensuse.org machines at: 2020-06-15
All machines switch from 2620 to 2001 at this date.
At the moment, they are running in both networks and should be
reachable via their old and new address.
If you are using DNS, no change is needed on your side.
The most important machines that might have some ACL settings on some of
your firewalls are:
# scanner.opensuse.org
2620:113:80c0:8::20 => 2001:67c:2178:8::20
# stage.opensuse.org
2620:113:80c0:8::10 => 2001:67c:2178:8::10
# ftp.opensuse.org
2620:113:80c0:8::13 => 2001:67c:2178:8::13
# downloadcontent.opensuse.org
2620:113:80c0:8::27 => 2001:67c:2178:8::27
Note: this does not affect ACL settings for stage.opensuse.org on our
side. If your mirror
has an entry which allows him to sync from stage.opensuse.org,
everything is fine.
You might just notice scans from the different IPv6 addresses above.
With kind regards,
Lars
--
Lars Vogdt <Lars.Vogdt(a)suse.com>
- BuildOPS Engineering Team Lead -
SUSE Software Solutions Germany GmbH
(HRB 36809, AG Nürnberg), GF: Felix Imendörffer
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
I got timeouts trying to zypper dup TW now that 20200612 was announced over 5
hours ago, until fumbling through repo configuration to find download.opensuse.org
was the primary obstacle and switching to something else. This is hardly the first
time in the past month. It's got to be turning would-be openSUSE users off. I've
been trying for days to help someone in a forum with a cantankerous laptop trying
hopelessly to get a bootable installation of Xubuntu. Finally I convinced him to
try openSUSE instead, which was anything but easy to do. He got an installation
initiated finally after multiple failed starts, but his download speed is now
trickling along at "about 100 kb/s so it's taking forever":
<https://www.linuxquestions.org/questions/linux-newbie-8/sos-facing-the-blac…>
--
Evolution as taught in public schools is religion, not science.
Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!
Felix Miata *** http://fm.no-ip.com/
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
see https://progress.opensuse.org/issues/68042
--
Per Jessen, Zürich (18.6°C)
Member, openSUSE Heroes
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Content-ID: <alpine.LSU.2.21.2006082312380.11364(a)Telcontar.valinor>
Hi,
I'm trying to setup the heroes VPN setup per instructions on
<https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/VPN>. It
is the first time I setup an VPN connection, and I stuck a problem.
My computer was using named; seeing no instructions for named, I migrated
the named server to another computer, and setup dnsmasq instead.
I can connect, but I get no name resolution of the heroes network.
But first I had to add "script-security 2" to /etc/openvpn/heroes.conf or I get this error:
● openvpn(a)heroes.service - OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf
Loaded: loaded (/usr/lib/systemd/system/openvpn@.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2020-06-08 22:19:22 CEST; 18s ago
Process: 6829 ExecStart=/usr/sbin/openvpn --daemon --suppress-timestamps --writepid /run/openvpn/heroes.pid --cd /etc/openvpn/ --config heroe>
Main PID: 6990 (code=exited, status=1/FAILURE)
Jun 08 22:19:21 Telcontar openvpn[6990]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Jun 08 22:19:21 Telcontar openvpn[6990]: /bin/ip link set dev tun0 up mtu 1500
Jun 08 22:19:21 Telcontar openvpn[6990]: /bin/ip addr add dev tun0 local 192.168.252.185 peer 192.168.252.1
Jun 08 22:19:22 Telcontar openvpn[6990]: heroes/client.up tun0 1500 1553 192.168.252.185 192.168.252.1 init
Jun 08 22:19:22 Telcontar openvpn[6990]: WARNING: External program may not be called unless '--script-security 2' or higher is enabled. See --h>
Jun 08 22:19:22 Telcontar openvpn[6990]: WARNING: Failed running command (--up/--down): external program fork failed
Jun 08 22:19:22 Telcontar openvpn[6990]: Exiting due to fatal error
Jun 08 22:19:22 Telcontar systemd[1]: openvpn(a)heroes.service: Main process exited, code=exited, status=1/FAILURE
Jun 08 22:19:22 Telcontar systemd[1]: openvpn(a)heroes.service: Unit entered failed state.
Jun 08 22:19:22 Telcontar systemd[1]: openvpn(a)heroes.service: Failed with result 'exit-code'.
Perhaps that tidbit can be added to the wiki, or I did something wrong? :-?
Current result is this:
Telcontar:/etc/openvpn # systemctl start openvpn@heroes
Enter Auth Username: *****
Enter Auth Password: ***********
Telcontar:/etc/openvpn # systemctl status openvpn@heroes
● openvpn(a)heroes.service - OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf
Loaded: loaded (/usr/lib/systemd/system/openvpn@.service; disabled; vendor preset: disabled)
Active: active (running) since Mon 2020-06-08 22:25:54 CEST; 2s ago
Process: 7303 ExecStart=/usr/sbin/openvpn --daemon --suppress-timestamps --writepid /run/openvpn/heroes.pid --cd /etc/openvpn/ --config heroe>
Main PID: 7327 (openvpn)
Tasks: 1
CGroup: /system.slice/system-openvpn.slice/openvpn(a)heroes.service
└─7327 /usr/sbin/openvpn --daemon --suppress-timestamps --writepid /run/openvpn/heroes.pid --cd /etc/openvpn/ --config heroes.conf
Jun 08 22:25:54 Telcontar openvpn[7327]: [scar.opensuse.org] Peer Connection Initiated with [AF_INET]195.135.221.151:1194
Jun 08 22:25:55 Telcontar openvpn[7327]: TUN/TAP device tun0 opened
Jun 08 22:25:55 Telcontar openvpn[7327]: do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Jun 08 22:25:55 Telcontar openvpn[7327]: /bin/ip link set dev tun0 up mtu 1500
Jun 08 22:25:55 Telcontar openvpn[7327]: /bin/ip addr add dev tun0 local 192.168.252.185 peer 192.168.252.1
Jun 08 22:25:55 Telcontar openvpn[7327]: heroes/client.up tun0 1500 1553 192.168.252.185 192.168.252.1 init
Jun 08 22:25:55 Telcontar root[7336]: client-up starts for tun0, found DNS servers 192.168.47.101 192.168.47.102 and wrote them into /etc/dnsma>
Jun 08 22:25:55 Telcontar openvpn[7327]: GID set to nobody
Jun 08 22:25:55 Telcontar openvpn[7327]: UID set to nobody
Jun 08 22:25:55 Telcontar openvpn[7327]: Initialization Sequence Completed
Telcontar:/etc/openvpn # route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default router.valinor 0.0.0.0 UG 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.47.0 192.168.252.1 255.255.255.0 UG 0 0 0 tun0
192.168.67.0 192.168.252.1 255.255.255.0 UG 0 0 0 tun0
192.168.252.0 192.168.252.1 255.255.255.0 UG 0 0 0 tun0
192.168.252.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
Telcontar:/etc/openvpn # host freeipa.infra.opensuse.org
Host freeipa.infra.opensuse.org not found: 2(SERVFAIL)
Telcontar:/etc/openvpn # host -v freeipa.infra.opensuse.org
Trying "freeipa.infra.opensuse.org"
Host freeipa.infra.opensuse.org not found: 2(SERVFAIL)
Received 44 bytes from 127.0.0.1#53 in 1770 ms
Telcontar:/etc/openvpn # host opensuse.orgopensuse.org has address 195.135.221.140
opensuse.org has IPv6 address 2001:67c:2178:8::16
opensuse.org mail is handled by 42 mx1.suse.de.
opensuse.org mail is handled by 42 mx2.suse.de.
Telcontar:/etc/openvpn #
The clue is in the log:
<3.6> 2020-06-08T22:25:19.166052+02:00 Telcontar systemd 1 - - Starting OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf...
<3.5> 2020-06-08T22:25:19.207636+02:00 Telcontar openvpn 7303 - - OpenVPN 2.4.3 x86_64-suse-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 20 2017
<3.5> 2020-06-08T22:25:19.207862+02:00 Telcontar openvpn 7303 - - library versions: OpenSSL 1.1.0i-fips 14 Aug 2018, LZO 2.10
<3.4> 2020-06-08T22:25:54.471881+02:00 Telcontar openvpn 7327 - - NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
<3.6> 2020-06-08T22:25:54.472307+02:00 Telcontar systemd 1 - - Started OpenVPN tunneling daemon instance using /etc/openvpn/heroes.conf.
<3.5> 2020-06-08T22:25:54.473074+02:00 Telcontar openvpn 7327 - - TCP/UDP: Preserving recently used remote address: [AF_INET]195.135.221.151:1194
<3.5> 2020-06-08T22:25:54.473228+02:00 Telcontar openvpn 7327 - - UDP link local: (not bound)
<3.5> 2020-06-08T22:25:54.473354+02:00 Telcontar openvpn 7327 - - UDP link remote: [AF_INET]195.135.221.151:1194
<3.5> 2020-06-08T22:25:54.473469+02:00 Telcontar openvpn 7327 - - NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
<3.4> 2020-06-08T22:25:54.523161+02:00 Telcontar openvpn 7327 - - WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
<3.5> 2020-06-08T22:25:54.711623+02:00 Telcontar openvpn 7327 - - [scar.opensuse.org] Peer Connection Initiated with [AF_INET]195.135.221.151:1194
<3.5> 2020-06-08T22:25:55.764114+02:00 Telcontar openvpn 7327 - - TUN/TAP device tun0 opened
<3.5> 2020-06-08T22:25:55.764383+02:00 Telcontar openvpn 7327 - - do_ifconfig, tt->did_ifconfig_ipv6_setup=0
<3.5> 2020-06-08T22:25:55.764557+02:00 Telcontar openvpn 7327 - - /bin/ip link set dev tun0 up mtu 1500
<3.6> 2020-06-08T22:25:55.764774+02:00 Telcontar systemd-udevd 7331 - - link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
<3.5> 2020-06-08T22:25:55.765377+02:00 Telcontar openvpn 7327 - - /bin/ip addr add dev tun0 local 192.168.252.185 peer 192.168.252.1
<3.5> 2020-06-08T22:25:55.766533+02:00 Telcontar openvpn 7327 - - heroes/client.up tun0 1500 1553 192.168.252.185 192.168.252.1 init
<1.5> 2020-06-08T22:25:55.800899+02:00 Telcontar root - - - client-up starts for tun0, found DNS servers 192.168.47.101 192.168.47.102 and wrote them into /etc/dnsmasq.servers.conf
<3.6> 2020-06-08T22:25:55.832258+02:00 Telcontar systemd 1 - - Stopping DNS caching server....
<3.6> 2020-06-08T22:25:55.832516+02:00 Telcontar dnsmasq 23896 - - exiting on receipt of SIGTERM
<3.6> 2020-06-08T22:25:55.837409+02:00 Telcontar systemd 1 - - Stopped DNS caching server..
<3.6> 2020-06-08T22:25:55.838505+02:00 Telcontar systemd 1 - - Starting DNS caching server....
<3.6> 2020-06-08T22:25:55.874424+02:00 Telcontar dnsmasq 7339 - - dnsmasq: syntax check OK.
<3.6> 2020-06-08T22:25:55.904044+02:00 Telcontar systemd 1 - - Started DNS caching server..
<3.6> 2020-06-08T22:25:55.904671+02:00 Telcontar dnsmasq 7341 - - started, version 2.78 cachesize 2000
<3.6> 2020-06-08T22:25:55.904843+02:00 Telcontar dnsmasq 7341 - - compile time options: IPv6 GNU-getopt DBus i18n IDN DHCP DHCPv6 Lua TFTP conntrack ipset auth DNSSEC loop-detect inotify
<3.6> 2020-06-08T22:25:55.904955+02:00 Telcontar dnsmasq 7341 - - DBus support enabled: connected to system bus
<3.6> 2020-06-08T22:25:55.905060+02:00 Telcontar dnsmasq 7341 - - asynchronous logging enabled, queue limit is 5 messages
<3.6> 2020-06-08T22:25:55.905167+02:00 Telcontar dnsmasq 7341 - - using local addresses only for domain valinor
<3.6> 2020-06-08T22:25:55.905288+02:00 Telcontar dnsmasq 7341 - - using nameserver 192.168.1.16#53 for domain valinor
<3.6> 2020-06-08T22:25:55.905434+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.0.0.1#53
<3.6> 2020-06-08T22:25:55.905574+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.1.1.1#53
<3.6> 2020-06-08T22:25:55.905723+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.254#53
<3.6> 2020-06-08T22:25:55.905868+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.250#53
<3.6> 2020-06-08T22:25:55.906010+02:00 Telcontar dnsmasq 7341 - - reading /etc/resolv.conf
<3.6> 2020-06-08T22:25:55.906139+02:00 Telcontar dnsmasq 7341 - - using local addresses only for domain valinor
<3.6> 2020-06-08T22:25:55.906240+02:00 Telcontar dnsmasq 7341 - - using nameserver 192.168.1.16#53 for domain valinor
<3.6> 2020-06-08T22:25:55.906351+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.0.0.1#53
<3.6> 2020-06-08T22:25:55.906455+02:00 Telcontar dnsmasq 7341 - - using nameserver 1.1.1.1#53
<3.6> 2020-06-08T22:25:55.906574+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.254#53
<3.6> 2020-06-08T22:25:55.906687+02:00 Telcontar dnsmasq 7341 - - using nameserver 80.58.61.250#53
<3.4> 2020-06-08T22:25:55.906798+02:00 Telcontar dnsmasq 7341 - - ignoring nameserver 127.0.0.1 - local interface
<3.6> 2020-06-08T22:25:55.906922+02:00 Telcontar dnsmasq 7341 - - read /etc/hosts - 38 addresses
<3.5> 2020-06-08T22:25:55.907041+02:00 Telcontar openvpn 7327 - - GID set to nobody
<3.5> 2020-06-08T22:25:55.907181+02:00 Telcontar openvpn 7327 - - UID set to nobody
<3.5> 2020-06-08T22:25:55.913284+02:00 Telcontar openvpn 7327 - - Initialization Sequence Completed
<3.6> 2020-06-08T22:28:31.643404+02:00 Telcontar smartd 1375 - - Device: /dev/sda [SAT], SMART Usage Attribute: 190 Airflow_Temperature_Cel changed from 62 to 63
Notice it says:
... client-up starts for tun0, found DNS servers 192.168.47.101 192.168.47.102 and wrote them into /etc/dnsmasq.servers.conf
but that file does not exist:
Telcontar:/etc/openvpn # l /etc/dnsmasq.servers.conf
ls: cannot access '/etc/dnsmasq.servers.conf': No such file or directory
Telcontar:/etc/openvpn #
There are no aa-logprof entries.
I have connectivity:
Telcontar:/etc/openvpn # ping 192.168.47.101
PING 192.168.47.101 (192.168.47.101) 56(84) bytes of data.
64 bytes from 192.168.47.101: icmp_seq=1 ttl=63 time=49.7 ms
64 bytes from 192.168.47.101: icmp_seq=2 ttl=63 time=50.0 ms
^C
- --- 192.168.47.101 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 49.712/49.884/50.057/0.282 ms
Telcontar:/etc/openvpn #
Where do I look? Clues, ideas, errors? :-)
I see something confusing in /etc/openvpn/heroes/client.up
...
for server in ${dns_server[*]}; do
echo "server=/infra.opensuse.org/$server"
echo "server=/.47.168.192.in-addr.arpa/$server"
done >/etc/dnsmasq.opensuseservers.conf
# for the debug enable this:
#cat /etc/dnsmasq.servers.conf |logger
fi
echo "client-up starts for "${dev}", found DNS servers "${dns_server[*]}" and wrote them into /etc/dnsmasq.servers.conf" |logger
It writes to /etc/dnsmasq.opensuseservers.conf, then mentions /etc/dnsmasq.servers.conf? :-?
Another unrelated question: should I close the tunnel when sending the
machine on suspend/hibernation?
- --
Cheers.
-----BEGIN PGP SIGNATURE-----
iHYEARECADYWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCXt6p0xgcY2FybG9zLmUu
ckBvcGVuc3VzZS5vcmcACgkQtTMYHG2NR9UWNACfdexuXyIpQG/wE8bhewMyRNtJ
wEkAnRM7jeqM0cV2yZ8HrDgjOa5eZdIB
=h3XB
-----END PGP SIGNATURE-----
Have received a report via the Facebook page that some repos are
reporting the following error:
SSL: no alternative certificate subject name matches target host name
'download.opensuse.org
I've seen this myself on my system, but only with my home: repo, the main
repos so far have seemed OK.
Can someone take a look, or let me know if this is related to any ongoing
work?
Thanks!
--
Jim Henderson
Please keep on-topic replies on the list so everyone benefits
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
