Hi Michael Am January 17, 2020 5:57:44 PM UTC schrieb "Michael Ströder" <michael@stroeder.com>:
Do you still want some help?
Yes, please! :-) We can even deploy additional DNS in Provo or on slimhat (so using different data centers). With a DNS in Provo, we could even think about how-based DNS (later). DNSsec or DNS over http and all the other "playgrounds" should also be on the table... ...and please do not forget that we could fill a book with the "Best practices to run openSUSE (in your) infrastructure" topic. I know some people who are interested to run their infra based on our documented setup! So someone should start to write a bestseller :-)
IIRC you've installed bind. At heroes meeting there was a tendency to go for PowerDNS. Backend was still to be decided.
As I wrote: I installed bind because I know it and I see the pressure to have something up and running to become independent. But I
I have some preference for launch=ldap to have authc/authz integration to another LDAP server [1] and use native LDAP replication for HA.
While I'm more a fan of KISS (means here: having a single, independent service which could run without any outside dependencies - so I would have the data in ldap, but use a local dump), this could of course also be done - and there are people like you, who have a way better knowledge than me on how to do this right. :-) The initial setup should definitively improve over time. And those who do decide.
I've tried to login to nue-ns1.infra.opensuse.org to have a look at the current setup but are probably not allowed to do so.
You could. But I have to admit that I did not really much to make this easy for you: I only got the machine known by the saltmaster and made sure that the machine accepted the saltmaster for deployments. The rest is on you... ;-). => Just add your ssh-key via Salt. If unsure, just ask how this can be done, and I'm sure that Christian (aeh: someone) is able to help. :-)) Regards, Lars -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org