sysadmin issueshttps://gitlab.tails.boum.org/tails/sysadmin/-/issues2020-09-02T13:43:53Zhttps://gitlab.tails.boum.org/tails/sysadmin/-/issues/16227Weird output when pushing to tails.git2020-09-02T13:43:53ZintrigeriWeird output when pushing to tails.git_Originally created by @intrigeri on [#16227 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16227)_
I see what looks like the `ikiwiki.cgi` binary wrapper printed on my
terminal in the “Requesting update of ”$“:htt..._Originally created by @intrigeri on [#16227 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16227)_
I see what looks like the `ikiwiki.cgi` binary wrapper printed on my
terminal in the “Requesting update of ”$“:https://tails.boum.org/”
section.
I don’t know what’s the impact apart of poor developer experience.
Might it be caused by the quick fix for tails/sysadmin#16220? I doubt it’s related
but the timing matches.
### Related issues
- **Related to** tails/sysadmin#16220Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16161optimise pv placement for io-performance2020-05-15T13:35:34Zgroenteoptimise pv placement for io-performance_Originally created by @groente on [#16161 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16161)_
lv’s should be spread across the different raid arrays for optimal i/o
performance.
### Related issues
..._Originally created by @groente on [#16161 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16161)_
lv’s should be spread across the different raid arrays for optimal i/o
performance.
### Related issues
- **Related to** tails/sysadmin#16041Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16197fix puppet-tails' vpn for masterless puppet2020-05-15T13:34:13Zgroentefix puppet-tails' vpn for masterless puppet_Originally created by @groente on [#16197 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16197)_
Trying to apply tails::base on a masterless setup results in the
following warnings:
Warning: You cannot collect ex..._Originally created by @groente on [#16197 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16197)_
Trying to apply tails::base on a masterless setup results in the
following warnings:
Warning: You cannot collect exported resources without storeconfigs
being set; the export is ignored at
/etc/puppet/code/modules/tails/manifests/vpn/instance.pp:105:3
Warning: You cannot collect exported resources without storeconfigs
being set; the collection will be ignored at
/etc/puppet/code/modules/tails/manifests/vpn/instance.pp:115:3
Parent Task: tails/sysadmin#16165
### Related issuesTails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16252Schleuder keys update cronjob fails for our lists at puscii2020-05-15T13:29:15ZintrigeriSchleuder keys update cronjob fails for our lists at puscii_Originally created by @intrigeri on [#16252 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16252)_
Last Sunday I got
this:
Refreshing all keys from the keyring of list tails-summit@boum.org resulted in th..._Originally created by @intrigeri on [#16252 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16252)_
Last Sunday I got
this:
Refreshing all keys from the keyring of list tails-summit@boum.org resulted in this:
gpg: keyserver refresh failed: Cannot assign requested address
Parent Task: tails/sysadmin#16121
### Related issues
- **Related to** tails/sysadmin#16217
- **Copied to** tails/sysadmin#16253Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16253Schleuder keys update cronjob fails for our lists on lizard2020-05-15T13:29:15ZintrigeriSchleuder keys update cronjob fails for our lists on lizard_Originally created by @intrigeri on [#16253 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16253)_
Last Sunday I got
this:
Refreshing all keys from the keyring of list tails-accounting@boum.org resulted i..._Originally created by @intrigeri on [#16253 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16253)_
Last Sunday I got
this:
Refreshing all keys from the keyring of list tails-accounting@boum.org resulted in this:
gpg: keyserver refresh failed: Connection timed out
Parent Task: tails/sysadmin#16218
### Related issues
- **Copied from** tails/sysadmin#16252Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16217Migrate some of our Schleuder lists to puscii2020-05-15T13:29:14ZintrigeriMigrate some of our Schleuder lists to puscii_Originally created by @intrigeri on [#16217 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16217)_
Parent Task: tails/sysadmin#16121
### Related issues
- **Related to** tails/sysadmin#16251
- *..._Originally created by @intrigeri on [#16217 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16217)_
Parent Task: tails/sysadmin#16121
### Related issues
- **Related to** tails/sysadmin#16251
- **Related to** tails/sysadmin#16252
- **Related to** tails/sysadmin#16256Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16255puscii fails to deliver email to boum.org2020-05-15T13:29:09Zintrigeripuscii fails to deliver email to boum.org_Originally created by @intrigeri on [#16255 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16255)_
I’ve received a few DSN’s about test email I’ve sent from puscii to
boum.org: certificate verification failed.
..._Originally created by @intrigeri on [#16255 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16255)_
I’ve received a few DSN’s about test email I’ve sent from puscii to
boum.org: certificate verification failed.
### Related issues
- **Related to** tails/sysadmin#16121Tails_3.12groentegroentehttps://gitlab.tails.boum.org/tails/sysadmin/-/issues/16218Migrate some of our Schleuder lists to lizard2020-05-15T13:29:07ZintrigeriMigrate some of our Schleuder lists to lizard_Originally created by @intrigeri on [#16218 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16218)_
And then:
- add monitoring of the MTA
- \-document on
<https://tails.boum.org/contribute/working_together..._Originally created by @intrigeri on [#16218 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16218)_
And then:
- add monitoring of the MTA
- \-document on
<https://tails.boum.org/contribute/working_together/roles/sysadmins/->
(tails/tails#16254)
Parent Task: tails/sysadmin#16121
### Subtasks
- [x] tails/sysadmin#16253
- [x] tails/sysadmin#16263
- [x] tails/sysadmin#16270
### Related issues
- **Related to** tails/sysadmin#16267Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16267WhisperBack reports are not delivered2020-05-15T13:28:43ZintrigeriWhisperBack reports are not delivered_Originally created by @intrigeri on [#16267 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16267)_
### Related issues
- **Related to** tails/sysadmin#16218_Originally created by @intrigeri on [#16267 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16267)_
### Related issues
- **Related to** tails/sysadmin#16218Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16270mail.lizard lacks memory2020-05-15T13:28:38Zintrigerimail.lizard lacks memory_Originally created by @intrigeri on [#16270 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16270)_
I’ve seen email delivery issues because amavis can’t allocate memory.
Parent Task: tails/sysadmin#16218_Originally created by @intrigeri on [#16270 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16270)_
I’ve seen email delivery issues because amavis can’t allocate memory.
Parent Task: tails/sysadmin#16218Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16251Fix tails@ configuration2020-05-15T13:27:22ZintrigeriFix tails@ configuration_Originally created by @intrigeri on [#16251 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16251)_
It seems that the tails@ list config has at least one issue: all
incoming messages, even sent by list members and ..._Originally created by @intrigeri on [#16251 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16251)_
It seems that the tails@ list config has at least one issue: all
incoming messages, even sent by list members and signed, have the
“Incoming message” subject when I receive them. My understanding of
the source code makes me think that the `forward_all_incoming_to_admins`
list setting is not set correctly. If there was indeed a problem in
importing this setting for this list, it would be good to check if other
settings, for this list and others, were correctly imported.
Parent Task: tails/sysadmin#16121
### Related issues
- **Related to** tails/sysadmin#16217Tails_3.12groentegroentehttps://gitlab.tails.boum.org/tails/sysadmin/-/issues/16263/etc/cron.daily/spamassassin fails on mail.lizard2020-05-15T13:26:58Zintrigeri/etc/cron.daily/spamassassin fails on mail.lizard_Originally created by @intrigeri on [#16263 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16263)_
See e.g. `<20190103070153.3F5F558B4`lizard.tails.boum.org\>@.
Parent Task: tails/sysadmin#16218
### ..._Originally created by @intrigeri on [#16263 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16263)_
See e.g. `<20190103070153.3F5F558B4`lizard.tails.boum.org\>@.
Parent Task: tails/sysadmin#16218
### Related issuesTails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16211move data away from virtual pv's2020-05-15T13:26:26Zgroentemove data away from virtual pv's_Originally created by @groente on [#16211 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16211)_
Currently a number of systems have the following storage configuration:
\- lizard has a logical volume DISKNAME and..._Originally created by @groente on [#16211 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16211)_
Currently a number of systems have the following storage configuration:
\- lizard has a logical volume DISKNAME and feeds it to a virtual
machine.
\- the virtual machine sees DISKNAME as /dev/vdb and treats this as an
LVM PV
\- the virtual machine uses this PV for a volume group
\- on this volume group is a logical volume, which is mounted in the
virtual machine.
This does not play very nice with our backup system and adds several
layers of complexity with close to zero benefits.
My plan is to get to the following situation:
\- lizard has a logical volume DISKNAME and offers it to the vm
\- the vm sees DISKNAME as /dev/vdb
\- /dev/vdb has ext4 on it and is mounted in the vm.
This desired situation is already what we do on www.
This situation allows for a backup procedure that simply takes a
snapshot of the logical volume on lizard, mounts it, and sends the data
to the backup server.
Affected vm’s are: apt-proxy, bitcoin, isobuilder1-4, puppet-git, rsync
Parent Task: tails/sysadmin#15071Tails_3.12https://gitlab.tails.boum.org/tails/sysadmin/-/issues/16235Fix sib's email setup2020-05-15T13:24:04ZintrigeriFix sib's email setup_Originally created by @intrigeri on [#16235 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16235)_
Since lizard now has a working MTA, sib’s email delivery failures are
sent to root i.e. sysadmins._Originally created by @intrigeri on [#16235 (Redmine)](https://public-redmine-archive.tails.boum.org/code/issues/16235)_
Since lizard now has a working MTA, sib’s email delivery failures are
sent to root i.e. sysadmins.Tails_3.12