November 1st, 2021

Agenda

  • Core Update 161
  • Kernel 5.15 is out and it is LTS
  • Infrastructure Updates
  • Deprecation of 32-Bit

Attendees

  • Michael
  • Arne
  • Jonatan
  • Stefan
  • Adolf
  • Peter

Log

Kernel 5.15

  • Testing of patches necessary first
  • Arne: No patch only necessary for 32-bit ARM left, everything is available for 64-bit ARM as well
  • Better switch to new kernel sooner than later

Firewall crashes in Hanover and elsewhere (#12716)

  • We always assumed it was kernel-related, turns out it most likely is not
  • Lowest common denominator between two affected machines: SSD
  • SNMP monitoring was added with check_ide_smart (Correction: It wasn't, see #12716)
  • Seems to be a random corner-case crashing the SSD's firmware
  • No logs available as userspace goes down in such cases
  • Daniel volunteered to have a look at this in absentia

Core Update 161

  • Now in master, Michael writes a change log
  • No testing/installation feedback, yet
  • Big due to kernel and security-related updates

Future Core Updates

  • Peter will merge patches ready to go into a dedicated branch
  • Whoever is in charge of mastering a Core Update can just merge that branch then
  • Shifts some load away from Arne (and maybe Michael)
  • dhcpd 9.4.1 should be ready to go now, update was reverted due to seccomp filter problems on i586

OpenVPN

  • OpenVPN needs update/maintenance?
  • Stefan needs a testing buddy for OpenVPN N2N connection
  • A lot of work needs to be done on this end, people use OpenVPN heavily
  • CGI needs some clean up as well
  • Peter reaches out to Erik and sees if he is still around
  • Long-term future of OpenVPN unclear, but there are still use cases for it (RW clients sitting behind crappy WLANs)

Infrastructure Updates

  • Lots of machines have been upgraded to Debian Bullseye
  • web01, mail02, location01, LDAP and name servers TBD
  • Michael implemented multi-master LDAP
  • Dovecot index handling has been improved, searching mails is now faster
  • Patchwork is now connected to the LDAP

Deprecation of 32-Bit

  • Jonatan submits a patch for warning users still running 32-Bit systems
  • Core Update 162 will be the last version still supporting this architecture

Misc

  • Adolf works on BIND 9.16
  • Michael does some review at the end of 2021
Edit Page ‐ Yes, you can edit!

Older Revisions • November 2 at 9:31 am • Michael Tremer