re6stnet:6bae1ddb9bcdbfff84efe10eedacbda04fcb6c94 commitshttps://lab.nexedi.com/nexedi/re6stnet/-/commits/6bae1ddb9bcdbfff84efe10eedacbda04fcb6c942016-02-23T10:31:08+01:00https://lab.nexedi.com/nexedi/re6stnet/-/commit/6bae1ddb9bcdbfff84efe10eedacbda04fcb6c94doc: add file extension to CHANGES/README for automatic rendering in GitLab2016-02-23T10:31:08+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/f4427cf4744a929ac7201b9862123f61f7a4383eFix issues with DH parameters2016-01-25T14:17:06+01:00Julien Muchembledjm@nexedi.com
- registry: make --dh mandatory
- node: retry if the registry returns nothing (instead of writing an empty file)https://lab.nexedi.com/nexedi/re6stnet/-/commit/cc3b7794ca067caa42166c7abb9be5ab693c0126registry: remove incomplete migration code2016-01-21T12:08:51+01:00Julien Muchembledjm@nexedi.com
I forgot the case where 'config' has slightly different schema.
Now, we don't have any old network left to upgrade.https://lab.nexedi.com/nexedi/re6stnet/-/commit/2305d5e54c437424cf0dfd61787e98c389682d87debian: "invoke-rc.d re6stnet stop" must not recreate pyc files in prerm2016-01-21T12:02:43+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/cd21c7f9e0c4e8cf1b0220ac9e1bf8e94bc865a9upnp: fix hangs with routers that don't have any free port2016-01-20T19:15:57+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/50829b363a12b21cf046af403ecfea17bf241f16Revert "ship systemd services for Debian"2016-01-20T14:14:27+01:00Julien Muchembledjm@nexedi.com
The presence of /lib/systemd/system/*.service files masked the fact that the
/etc/init.d/ scripts were enabled, and services were not enabled under
systemd (no symlink in /etc/systemd/system/multi-user.target.wants/).
Reverting commit <a href="/kirr/re6stnet/-/commit/4c2284e2aa0e26ccbcb5e788c81afd6447979acc" data-original="4c2284e2aa0e26ccbcb5e788c81afd6447979acc" data-link="false" data-link-reference="false" data-project="338" data-commit="4c2284e2aa0e26ccbcb5e788c81afd6447979acc" data-reference-type="commit" data-container="body" data-placement="top" data-html="true" title="dist: refactoring, ship systemd services for Debian, fix section of re6stnet manpage" class="gfm gfm-commit has-tooltip">4c2284e2</a> partially is the
easiest way to handle the case of OS upgrade (with a switch to systemd).https://lab.nexedi.com/nexedi/re6stnet/-/commit/91f8fb8a779f748101e49939d8a4db1ed2d38fe5Fix parsing of --registry url with ipv6 host2016-01-20T11:05:29+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/0614d1d7ac85fcf722475b1f0f8afb335e0e8b47Document bug causing new version to not be propagated in --client mode2016-01-13T18:12:18+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/3ea6efe3e01b300d6a49a51adb62bf1e9cde2158Fix install of OpenVPN hooks2016-01-06T13:02:01+01:00Julien Muchembledjm@nexedi.com
This fixes a regression caused by commit
<a href="/rafael/re6stnet/-/commit/8df410f7744fd35b6584142dec3a15023cb4f6e0" data-original="8df410f7744fd35b6584142dec3a15023cb4f6e0" data-link="false" data-link-reference="false" data-project="501" data-commit="8df410f7744fd35b6584142dec3a15023cb4f6e0" data-reference-type="commit" data-container="body" data-placement="top" data-html="true" title="Use python2 instead python and fix install for a custom Python interpreter" class="gfm gfm-commit has-tooltip">8df410f7</a>https://lab.nexedi.com/nexedi/re6stnet/-/commit/65cda477292251ef0d4063553b8ee65db28f363fdist: fix manifest to not include generated manpages2016-01-04T03:17:39+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/5e6ece7290d558086daa4db6e2074497cc022455debian: make changelog more "stable"2015-12-30T15:03:26+01:00Julien Muchembledjm@nexedi.com
<a href="https://reproducible-builds.org/" rel="nofollow noreferrer noopener" target="_blank">https://reproducible-builds.org/</a>https://lab.nexedi.com/nexedi/re6stnet/-/commit/c73294c38f2078fff854374f66528a16a89e19a5debian: drop support for Python 2.62015-12-30T12:17:13+01:00Julien Muchembledjm@nexedi.com
Anyway, OpenVPN >= 2.3 was already missing on Squeeze, even via backports.https://lab.nexedi.com/nexedi/re6stnet/-/commit/8df410f7744fd35b6584142dec3a15023cb4f6e0Use python2 instead python and fix install for a custom Python interpreter2015-12-30T12:17:13+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/9f01d5d15e131d8a70ecbf324c8dda10712a9062doc: give examples of command to create key/dh files2015-12-28T21:01:21+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/e5d9c4b1d6d0489be8b91ab65c5e65bb3df4ccc7rpm: better systemd integration2015-12-28T21:00:44+01:00Julien Muchembledjm@nexedi.com
- Suse wants units in /usr/lib/systemd/system
- respect system-presethttps://lab.nexedi.com/nexedi/re6stnet/-/commit/4c2284e2aa0e26ccbcb5e788c81afd6447979accdist: refactoring, ship systemd services for Debian, fix section of re6stnet ...2015-12-27T17:56:22+01:00Julien Muchembledjm@nexedi.com
debian/rules is split into reusable parts for SlapOS-based packages.https://lab.nexedi.com/nexedi/re6stnet/-/commit/77c9df3b775ca5d8d920facdf8ca8ad79bd96ab3demo: don't show meaningless 'odot' arrows for routes2015-12-02T21:32:51+01:00Julien Muchembledjm@nexedi.com
Unexpectedly, and contrary to 'dot', Graphviz does not draw it with penwidth=0
(without, that of the other side is striked). And anyway, we can just look at
the label to see if there's a route.https://lab.nexedi.com/nexedi/re6stnet/-/commit/06f33ff2eb8142ab187ee5999e00c70bc47dd113demo: fix nemu with recent iproute2015-12-02T21:23:08+01:00Julien Muchembledjm@nexedi.com
iproute now shows the name of the paired interface for type veth. For example:
172: NETNSif-476f004@NETNSif-476f003: ...https://lab.nexedi.com/nexedi/re6stnet/-/commit/aed51ca6a238a0b1502c03cfc52f18707ceea962New upstream release of babeld2015-08-14T13:59:26+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/c7846fdcaf672550da599debd7bacea9aa9ee668Fix babeld-only setup so that 'lo' only accepts configured ipv4 and not the w...2015-07-09T11:57:59+02:00Julien Muchembledjm@nexedi.com
When 10.42.3.1/24 was configured on 'lo', the kernel accepted packets to
any ip of 10.42.3.0/24, instead of only 10.42.3.1https://lab.nexedi.com/nexedi/re6stnet/-/commit/f08512259a3bb8734c108e9e88abd9865a1bf3d6Add support for recent iproute, which now recognizes babel protocol2015-07-09T11:51:24+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/06b1340626271defe9314ead2178d6037f2e3b31Document the levels of --verbose option2015-07-08T17:34:07+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/285c7aebed5658d71a9fb507ae575a3f11d0fd47dist: fix inclusion of ovpn-* scripts for setuptools < 0.6.292015-06-11T18:50:47+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/1c354e6c5612548a3c60a1171699afb4880d6473dist: use new entry_points['console_scripts'] way to ship scripts2015-06-10T22:48:11+02:00Julien Muchembledjm@nexedi.com
The old distutils way is not compatible with zc.recipe.egg in develop mode,
because egg_info does not provide any information about such scripts.https://lab.nexedi.com/nexedi/re6stnet/-/commit/274d7bd2c7266084cf1596e3c7d4fbf439518ce6dist: fix typo in MANIFEST.in2015-06-10T21:13:04+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/45e4d3ca29884c32488d724bba93a2585382265fOpenVPN >= 2.3 is required2015-05-28T17:47:00+02:00Julien Muchembledjm@nexedi.com
2.2.x branch has a patch[1] that renders tls_serial_* environment variables
in base 16, causing a ValueError exception in ovpn-server hook.
[1] <a href="https://github.com/OpenVPN/openvpn/commit/7d5e26cbb53e2700c966e6b6e815f0c824da8956" rel="nofollow noreferrer noopener" target="_blank">https://github.com/OpenVPN/openvpn/commit/7d5e26cbb53e2700c966e6b6e815f0c824da8956</a>https://lab.nexedi.com/nexedi/re6stnet/-/commit/ab3300c30becbd517979a2b81f7801d9cf85f706Lower again MTU for UDPv4 tunnels2015-04-27T17:29:59+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/15471c016ef4634e8c85f5d9d517b63b08213aebdoc: update 'Troubleshooting' section2015-04-16T19:45:28+02:00Julien Muchembledjm@nexedi.com
It doesn't matter anymore if there are many off nodes, because the registry
only queries the addresses of nodes that are in the routing table.https://lab.nexedi.com/nexedi/re6stnet/-/commit/4a6580b1436f2341bebab2821c9743102df99b30doc: update 'Setting a new network' howto2015-04-16T16:49:19+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/79c1db1b5dbd4731b46f14ee0da8eecfc8cb4711New upstream release of babeld2015-04-14T16:51:18+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/abae0b5d4df37157b56859164f5479b07587d7c9Remove assert that was only there to debug the demo2015-04-14T16:18:59+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/358837993c5acf1fde141dc4a401aa11e859737dComment the method selecting the tunnel to kill2015-04-10T16:46:40+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/b4a9a612356b6fa321fc4d22618963aafa989ee1Change egg versioning scheme to comply with PEP 4402015-04-10T15:29:52+02:00Rafael Monneratrafael@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/766ad6c8751afc0dec7bb304a099d3a630a01783Increase strength of hashes used for certificate signing2015-04-09T14:50:28+02:00Julien Muchembledjm@nexedi.com
This does not increase of any packet because the size of certificate signature
only depends on the size of the certificate key.
With 512-bit hashes, it's still possible to use RSA keys as small as 768 bits.https://lab.nexedi.com/nexedi/re6stnet/-/commit/40d4e4969bbf8718fb7933b9514e77fcfab4f50bBackward compatibility for Python 2.62015-04-08T17:17:10+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/2fb63515d602b77c684c30dfc9b8e680ae427bbcAdd support for ipv4 payload2015-04-08T17:17:10+02:00Julien Muchembledjm@nexedi.com
There is no plan for a default ipv4 route.https://lab.nexedi.com/nexedi/re6stnet/-/commit/f128ba9ddb85ac162c85327340f23056e54af1c3demo: show default route on the route graph2015-04-08T17:17:10+02:00Julien Muchembledjm@nexedi.com
This is useful because the default one is not always the same as the route
to the registry.
Before, arrows were filled dot. Now only the default one is filled.https://lab.nexedi.com/nexedi/re6stnet/-/commit/9dc1707eb0e8ce18474e464531f0a7a3b40c3b7fOur fork of Babeld can now override RTA_(PREF)SRC locally2015-04-08T17:17:10+02:00Julien Muchembledjm@nexedi.com
This simplify network configuration a lot, and on recent kernels, this fixes
wrong source address for extra interfaces that already have a public IP.https://lab.nexedi.com/nexedi/re6stnet/-/commit/cfb2c159823f538472135f08682b8e5d89858a35demo: duplicate code from Nemu for future monkey-patching2015-04-03T18:21:04+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/16f87a3008735324c1c46996f9cdb7afa5f305a8Stop specifying a rxcost for old nodes since there's none left with the new p...2015-04-03T18:16:09+02:00Julien Muchembledjm@nexedi.com