Issues · Arch Linux / infrastructure

New issue

Configure gitlab.com as identity provider for Keycloak

#40 · opened May 26, 2020 by Sven-Hendrik Haase
- 1
- 0
updated Jun 17, 2020
Clean up docker images periodically on gitlab.archlinux.org

#24 · opened May 10, 2020 by Jelle van der Waa
- 4
updated Nov 16, 2020
Modernize mail server setup 12 of 38 tasks completed

#50 · opened Jun 29, 2020 by Sven-Hendrik Haase in progress migration security
- 10
updated Jan 25, 2021
Use Prometheus to monitor Gitlab 0 of 6 tasks completed

#14 · opened May 09, 2020 by Jelle van der Waa in progress
- 1
- 0
updated Sep 24, 2020
Update documentation about mirroring to use the Arch Github 1 of 2 tasks completed

#77 · opened Jul 26, 2020 by Jelle van der Waa documentation in progress
- 2
updated Jan 26, 2021
Setup monitoring for keycloak 3 of 4 tasks completed

#23 · opened May 10, 2020 by Jelle van der Waa in progress migration
- 1
- 1
updated Sep 09, 2020
Write "New Staff Handbook"

#22 · opened May 10, 2020 by Jelle van der Waa in progress
- 1
- 4
updated Oct 03, 2020
Investigate giving out SSH access via Keycloak

#17 · opened May 09, 2020 by Jelle van der Waa security
- 4
updated Oct 14, 2020
Migrate archweb to Keycloak

#25 · opened May 10, 2020 by Jelle van der Waa migration
- 0
updated Aug 06, 2020
Migrate arch-security-tracker to keycloak

#26 · opened May 10, 2020 by Jelle van der Waa migration
- 0
updated Jul 27, 2020
Setup a prometheus box with alertmanager 2 of 7 tasks completed

#31 · opened May 16, 2020 by Jelle van der Waa in progress
- 3
updated Dec 22, 2020
Move all active git.archlinux.org and Github hosted projects to the Arch Linux namespace 21 of 38 tasks completed

#6 · opened May 09, 2020 by Jelle van der Waa in progress migration
- 1
- 2
updated Dec 28, 2020
Move utilities out of infrastructure.git 1 of 5 tasks completed

#34 · opened May 19, 2020 by Jelle van der Waa migration
- 1
updated Sep 09, 2020
Open up account registrations to the public 17 of 19 tasks completed

#39 · opened May 26, 2020 by Sven-Hendrik Haase help wanted in progress security
- 1
- 8
updated Dec 23, 2020
Migrate the wiki to keycloak

#38 · opened May 25, 2020 by Jelle van der Waa migration security
- 2
updated Sep 08, 2020
Create a GitLab bot

#33 · opened May 19, 2020 by Sven-Hendrik Haase in progress migration
- 1
updated Jun 29, 2020
archweb role can't be deployed on a new box

#47 · opened Jun 25, 2020 by Jelle van der Waa help wanted
- 4
updated Jan 10, 2021
Improve disk monitoring to detect broken disks with smartctl 0 of 2 tasks completed

#48 · opened Jun 27, 2020 by Jelle van der Waa enhancement
- 1
updated Dec 14, 2020
use irker to post notifications to IRC channels

#49 · opened Jun 29, 2020 by David Runge enhancement
- 4
updated Nov 26, 2020
Consider raid1c4 on gemini

#52 · opened Jun 30, 2020 by Sven-Hendrik Haase
- 3
updated Aug 16, 2020
Consider removing firewall rules and re-applying them for postgresql

#55 · opened Jul 03, 2020 by Jelle van der Waa security
- 2
updated Sep 09, 2020
Write onboarding/offboarding guidelines/checklists for various roles 0 of 8 tasks completed

#53 · opened Jul 02, 2020 by Sven-Hendrik Haase documentation help wanted in progress security
- 5
updated Sep 19, 2020
Apply more kernel hardening 1 of 3 tasks completed

#57 · opened Jul 08, 2020 by Jelle van der Waa
- 1
updated Oct 18, 2020
Research pacman development requirements

#27 · opened May 11, 2020 by Jelle van der Waa
- 1
- 1
- 2
updated Jul 27, 2020
Fix dbscripts role to symlink the dbscripts config.local for community and packages repository.

#63 · opened Jul 12, 2020 by Jelle van der Waa
- 0
updated Jul 12, 2020
Think about finely grained secret access

#64 · opened Jul 15, 2020 by Sven-Hendrik Haase security
- 9
updated Nov 14, 2020
Migrate to mailman 3

#59 · opened Jul 09, 2020 by Jelle van der Waa migration
- 1
- 1
- 2
updated Dec 29, 2020
Decide on a password manager

#65 · opened Jul 16, 2020 by Giancarlo Razzolini security
- 1
- 3
updated Aug 26, 2020
Investigate using Tower/AWX

#66 · opened Jul 16, 2020 by Giancarlo Razzolini enhancement security
- 2
updated Nov 16, 2020
Keycloak shortcomings

#67 · opened Jul 17, 2020 by Sven-Hendrik Haase help wanted security
- 1
- 2
updated Sep 06, 2020
Notes for GitLab + Keycloak announcement

#69 · opened Jul 17, 2020 by Sven-Hendrik Haase documentation security
- 1
- 3
updated Jul 30, 2020
Harden AUR systemd services and fpm configuration 0 of 7 tasks completed

#72 · opened Jul 23, 2020 by Jelle van der Waa security
- 0
updated Jul 23, 2020
Improve mysqld server configuration 0 of 9 tasks completed

#73 · opened Jul 23, 2020 by Jelle van der Waa
- 3
updated Sep 30, 2020
Disable 2FA options in Gitlab

#79 · opened Jul 27, 2020 by Caleb Maclennan enhancement help wanted
- 7
updated Sep 02, 2020
Provide a bot to close GitHub PRs of read-only mirrors

#80 · opened Jul 27, 2020 by hashworks enhancement
- 19
updated Oct 03, 2020
Follow-up from "Add description templates for user onboarding and offboarding" 0 of 6 tasks completed

#82 · opened Jul 27, 2020 by Sven-Hendrik Haase documentation
- 0
updated Jul 27, 2020
Document keycloak debugging

#83 · opened Jul 28, 2020 by Sven-Hendrik Haase documentation
- 1
updated Sep 09, 2020
Move away from luna 0 of 2 tasks completed

#86 · opened Jul 28, 2020 by Jelle van der Waa migration
- 0
updated Aug 14, 2020
Create template for adding external contributor 0 of 2 tasks completed

#91 · opened Jul 31, 2020 by Sven-Hendrik Haase
- 0
updated Jul 31, 2020
Switch matrix authentication to Keycloak 0 of 2 tasks completed

#94 · opened Aug 02, 2020 by Jelle van der Waa help wanted security
- 8
updated Nov 11, 2020
Onboard missing staff members 0 of 5 tasks completed

#99 · opened Aug 20, 2020 by Jelle van der Waa
- 0
updated Aug 22, 2020
Evaluate using a CDN / creating a "smart mirror"

#101 · opened Aug 22, 2020 by Kristian Klausen enhancement good first issue help wanted
- 3
updated Oct 29, 2020
mkinitcpio-archiso 0 of 24 tasks completed

#103 · opened Aug 25, 2020 by David Runge
- 2
updated Sep 09, 2020
Investigate building containers to test setups locally

#104 · opened Aug 25, 2020 by Jelle van der Waa enhancement help wanted
- 2
- 1
updated Oct 18, 2020
Provide aurweb performance issue data 1 of 6 tasks completed

#105 · opened Aug 25, 2020 by Jelle van der Waa help wanted
- 12
updated Sep 09, 2020
aurweb issues 1 of 3 tasks completed

#106 · opened Aug 26, 2020 by Jelle van der Waa bug
- 2
updated Jan 27, 2021
Look into Kata Containers for GitLab runners

#108 · opened Aug 28, 2020 by Kristian Klausen enhancement help wanted
- 1
- 8
updated Nov 19, 2020
offload-build should create subvolumes in /var/lib/archbuild

#109 · opened Aug 29, 2020 by Jelle van der Waa enhancement
- 2
updated Sep 06, 2020
Store GitLab database on its own filesystem

#111 · opened Sep 02, 2020 by Kristian Klausen enhancement
- 0
updated Sep 28, 2020
sourceballs.service systemd unit should check if repos are locked

#117 · opened Sep 05, 2020 by Jelle van der Waa bug help wanted
- 0
updated Sep 09, 2020
Add reset password gauge to keycloak metrics and monitoring

#124 · opened Sep 09, 2020 by Jelle van der Waa enhancement
- 0
updated Sep 09, 2020
Add node exporter dashboard to Grafana

#125 · opened Sep 09, 2020 by Jelle van der Waa
- 0
updated Sep 09, 2020
Add mysql dashboard to Grafana

#126 · opened Sep 09, 2020 by Jelle van der Waa
- 0
updated Sep 09, 2020
Monitor btrfs errors with a textfile collector

#127 · opened Sep 09, 2020 by Jelle van der Waa
- 1
updated Sep 25, 2020
Document monitoring solution 3 of 4 tasks completed

#128 · opened Sep 10, 2020 by Sven-Hendrik Haase documentation
- 0
updated Oct 13, 2020
Add a Gitlab dashboard for Grafana

#129 · opened Sep 10, 2020 by Jelle van der Waa
- 0
updated Sep 10, 2020
Consider making a staging Keycloak for toying around

#130 · opened Sep 10, 2020 by Sven-Hendrik Haase security
- 0
updated Sep 10, 2020
Adjust the Keycloak theme to warn about removing all MFA

#132 · opened Sep 10, 2020 by Jelle van der Waa
- 15
updated Sep 19, 2020
Show Terms and Conditions on Keycloak 0 of 6 tasks completed

#134 · opened Sep 11, 2020 by Sven-Hendrik Haase
- 1
- 8
updated Sep 24, 2020
Git Migration 1 of 6 tasks completed

#135 · opened Sep 11, 2020 by Morten Linderud
- 0
updated Sep 14, 2020
Add alert for Prometheus mysqld exporter being up

#137 · opened Sep 12, 2020 by Jelle van der Waa
- 0
updated Sep 20, 2020
Setup mumble server for Arch Linux 0 of 2 tasks completed

#139 · opened Sep 14, 2020 by Jelle van der Waa enhancement
- 12
updated Oct 02, 2020
Add GitLab link to archweb

#142 · opened Sep 15, 2020 by Sven-Hendrik Haase
- 2
updated Sep 16, 2020
Add Prometheus metrics dashboard

#147 · opened Sep 21, 2020 by Jelle van der Waa
- 0
updated Sep 21, 2020
Remove inactive testers

#148 · opened Sep 23, 2020 by Sven-Hendrik Haase
- 0
updated Jan 14, 2021
Add total Keycloak users on Grafana

#150 · opened Sep 24, 2020 by Sven-Hendrik Haase
- 1
updated Oct 03, 2020
Setup custom pre-receive hook for important repositories

#156 · opened Sep 26, 2020 by Kristian Klausen
- 2
updated Oct 03, 2020
Enable Advanced Search on Gitlab (ElasticSearch integration)

#159 · opened Oct 11, 2020 by Martin Rys
- 6
updated Jan 26, 2021
aur-dev: improvements

#162 · opened Oct 15, 2020 by Jelle van der Waa
- 0
updated Oct 15, 2020
Monitor nginx active/max connections and total memory usage

#167 · opened Oct 18, 2020 by Frederik Schwan
- 5
updated Dec 20, 2020
Disable public display of php errors on aur-dev and possibly other sites

#168 · opened Oct 18, 2020 by Frederik Schwan
- 3
updated Oct 18, 2020
Figure out replication for MySQL and PGSQL for manual failover

#169 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Test our roles with testkitchen/inspec

#171 · opened Oct 18, 2020 by Frederik Schwan
- 3
updated Oct 21, 2020
Public grafana for server status

#172 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Set up smokeping with distributed probes to triage network issues

#173 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Determine why wiki exception are not logged to syslog

#174 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Check if ARA works for us

#175 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Think about removing firewall rules

#176 · opened Oct 18, 2020 by Frederik Schwan
- 1
updated Oct 18, 2020
Setup wireguard for database server connections

#177 · opened Oct 18, 2020 by Frederik Schwan
- 2
updated Oct 18, 2020
Setup security@archlinux.org mailing list for the Security Team

#178 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Update php-pfm related nginx configuration due to CVE-2019-11043

#181 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Switch mediawiki to short urls

#182 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Oct 18, 2020
Secure SSH setup, especially on build servers

#184 · opened Oct 18, 2020 by Frederik Schwan
- 0
updated Nov 02, 2020
Monitor postgres

#185 · opened Oct 18, 2020 by Frederik Schwan
- 1
updated Dec 18, 2020
Create playbook for user removal

#186 · opened Oct 18, 2020 by Frederik Schwan
- 2
updated Jan 05, 2021
Add Secure Header for all our sites

#187 · opened Oct 18, 2020 by Frederik Schwan
- 5
updated Jan 18, 2021
Harden services with systemd sandboxing

#188 · opened Oct 18, 2020 by Frederik Schwan
- 2
updated Oct 18, 2020
Add the pacman public keyring to root user gpg.conf

#190 · opened Oct 19, 2020 by Giancarlo Razzolini
- 0
updated Oct 19, 2020
Group security alerts in alertmanager

#191 · opened Oct 19, 2020 by Jelle van der Waa
- 0
updated Oct 19, 2020
Check gitlab-runner configs into ansible

#193 · opened Oct 22, 2020 by Sven-Hendrik Haase
- 0
updated Oct 22, 2020
Rename terraform mail server DNS resources

#198 · opened Oct 24, 2020 by Frederik Schwan
- 0
updated Oct 24, 2020
postfix relayhost configuration prints warnings in log

#202 · opened Oct 26, 2020 by Jelle van der Waa
- 0
updated Oct 26, 2020
Consider running our own authoritative DNS server

#204 · opened Oct 29, 2020 by Kristian Klausen
- 0
updated Oct 31, 2020
disable pop3 for dovecot 0 of 2 tasks completed

#205 · opened Oct 29, 2020 by Jelle van der Waa
- 1
- 0
updated Oct 29, 2020
Let the world mirror our (encrypted) backup

#206 · opened Nov 03, 2020 by Kristian Klausen
- 0
updated Dec 20, 2020
Switch to new Hetzner nameservers

#207 · opened Nov 04, 2020 by Sven-Hendrik Haase
- 0
updated Nov 04, 2020
Switch to ECDSA certificate or provide dual ECDSA/RSA certificates

#208 · opened Nov 05, 2020 by Kristian Klausen
- 1
- 4
updated Jan 06, 2021
Use Terraform to configure UptimeRobot

#209 · opened Nov 09, 2020 by Sven-Hendrik Haase
- 0
updated Nov 09, 2020
Prepare virtual user setup for dovecot and OpenSMTPD 0 of 2 tasks completed

#214 · opened Nov 14, 2020 by Frederik Schwan
- 0
updated Nov 15, 2020
create main opensmtpd config

#215 · opened Nov 14, 2020 by Frederik Schwan
- 0
updated Dec 29, 2020