Steady as a rock

…or so they say

 

[rant] nm + vpn sucks

Well, it actually is pretty neat but fails in insuspected ways.

  • It does not honor PUSH “dhcp-option DOMAIN”
  •  After a while it even reverts the nameservers in /etc/resolv.conf to the non-vpn values
  • After losing vpn connection (if I restart the vpn server for example) it won’t attempt to reconnect
  • There’s no way to say “only allow traffic if connected to vpn” or even “autoconnect to this vpn”
  • It just dropped all routes after disconnecting the vpn
  • It doesn’t make using RSA keyfobs easier (ideally it would remember the group password + static part of user password)

On the positive side, I now have a decent VPN connecting to all my desktop machines and all servers I administer. Allowing me to secure these servers just a tiny bit more (no SSH outside the tunnel etc.)

Filed under : Uncategorized
By Dennis Kaarsemaker
On August 10, 2007
At 07:55
Comments : 4
 
 

Package build coordination

A very important feature in the beta 3 release of falcon (which will happen when I finish the documentation) is automated package building. Yes, falcon is now becoming a full fledged repository manager where you can dput your package to and it will build your package and install it in its database.

Here’s what it looks like when run manually, only one package in the queue:

dennis@blackbird:/data1/src/falcon$ bin/falcon-build-queue
Falcon repository manager 2.0.0~beta3 (C)2005-2007 Dennis Kaarsemaker
*  Building casper_1.87.dsc on Blackbird, Starfreighter
*  Trying to build on Blackbird
*  Executing the build command, logging to buildlog_Seveas-feisty-i386.casper_1.87_BUILDING.txt
*  Downloading ubiquity-casper_1.87_all.deb
*  Downloading casper_1.87_i386.deb
*  Succeeded building casper 1.87 on i386 buildd Blackbird
*  Uploaded casper 1.87 for building on amd64 buildd Starfreighter
*  Build result for casper 1.87
*  ============================
*    amd64 Starfreighter        PENDING
*     i386 Blackbird            OK
*  Run falcon-build-queue to check for finished builds
dennis@blackbird:/data1/src/falcon$ ssh starfreighter ./falcon-build-local-queue
* Building casper_1.87.dsc, log will be written to /pbuilder/result/buildlog_Seveas-feisty-amd64.casper_1.87_BUILDING.txt
dennis@blackbird:/data1/src/falcon$ bin/falcon-build-queue
Falcon repository manager 2.0.0~beta3 (C)2005-2007 Dennis Kaarsemaker
*  Downloading casper_1.87_amd64.deb
*  Succeeded building casper 1.87 on amd64 buildd Starfreighter
*  Build result for casper 1.87
*  ============================
*     i386 Blackbird            OK
*    amd64 Starfreighter        OK

When this is run via cron, it will be fully automatic.

Filed under : Ubuntu, Personal, python
By Dennis Kaarsemaker
On August 3, 2007
At 22:37
Comments :1