lilypad issueshttps://0xacab.org/leap/container-platform/lilypad/-/issues2021-01-28T18:43:18Zhttps://0xacab.org/leap/container-platform/lilypad/-/issues/2[meta] Library VPN test deployment of platform from scratch2021-01-28T18:43:18Zmcy100[meta] Library VPN test deployment of platform from scratch- [ ] have lebanon techs reproduce float deployment in libraries infra
- [ ] ensure documentation is correct, process is smooth
- [ ] produce branded binaries configured for this deployment- [ ] have lebanon techs reproduce float deployment in libraries infra
- [ ] ensure documentation is correct, process is smooth
- [ ] produce branded binaries configured for this deploymenthttps://0xacab.org/leap/container-platform/lilypad/-/issues/1Add stunnel service and alerting2021-03-02T14:33:21ZmicahAdd stunnel service and alertingFor the libraries vpn, we have to have a functional stunnel client that connects to a server. We want to also monitor that and alert when it is not working to detect problems there.For the libraries vpn, we have to have a functional stunnel client that connects to a server. We want to also monitor that and alert when it is not working to detect problems there.micahmicahhttps://0xacab.org/leap/container-platform/lilypad/-/issues/3evaluate if the "leapcli2" approach is useful to be continued2021-03-02T14:34:03ZKali Kanekoevaluate if the "leapcli2" approach is useful to be continuedsome months ago some experimental implementation of leap-cli was made https://0xacab.org/kali/leapcli2/ as a light wrapper around float (basically a first-run wizard with the ability to create the credentials, and store them, config etc ...some months ago some experimental implementation of leap-cli was made https://0xacab.org/kali/leapcli2/ as a light wrapper around float (basically a first-run wizard with the ability to create the credentials, and store them, config etc in separate repos, per project).
I'd like to get input from the people in charge of deploying this about its usefulness. as a cli tool, and maybe as something with its own GUI in the future.Kali KanekoKali Kanekohttps://0xacab.org/leap/container-platform/lilypad/-/issues/6submit mr for compatibility issues with pwgen.py/ubuntu2021-03-02T14:34:53ZKali Kanekosubmit mr for compatibility issues with pwgen.py/ubuntuwhile testing current float, I found some slight incompatibility issues when generating TSIG keys for bind.
From the script:
```
older bind versions use dnssec-keygen to generate TSIG keys.
In newer versions, the utility to generate TS...while testing current float, I found some slight incompatibility issues when generating TSIG keys for bind.
From the script:
```
older bind versions use dnssec-keygen to generate TSIG keys.
In newer versions, the utility to generate TSIG keys is not
dnssec-keygen anymore, but tsig-keygen.
```
The problem is that (a) ubuntu ships a newer version of dnnsec-keygen than buster, which breaks with the param invocation in the script, and (b) tsig-keygen comes with bind9, not bind9-utils (which is the one listed as dependency).
So, short-term workaround is to install bind9, but I think it's fine not to have to introduce bind9 as a dependency, so I should send ale a patch that checks the dnssec-keygen version and passes the right params accordingly.Kali KanekoKali Kaneko