This commit is contained in:
Ben Harris 2019-02-11 02:44:18 -05:00
parent 6e5760cafb
commit 08378e9f62
105 changed files with 422 additions and 112 deletions

Binary file not shown.

View File

@ -1,2 +0,0 @@
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>
generated with <a href="https://tildegit.org/team/bashblog">bashblog</a>, a single bash script to easily create blogs like this one</div>

View File

@ -1,15 +0,0 @@
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="x-ua-compatible" content="ie=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<meta name="theme-color" content="#00cc00">
<link rel="icon" type="image/png" sizes="192x192" href="https://tilde.team/apple-touch-icon-precomposed.png">
<link rel="icon" type="image/png" sizes="96x96" href="https://tilde.team/favicon-96x96.png">
<link rel="stylesheet" href="https://tilde.team/css/dracula.css">
<link rel="stylesheet" href="extra.css">
<link rel="alternate" type="application/rss+xml" title="subscribe to this page..." href="feed.rss" />

View File

@ -1,2 +0,0 @@
<h1 class="nomargin"><a class="ablack" href="https://tilde.team/~ben/blog/index.html">blog // ~ben</a></h1>
<div id="description">a blog about tildes and other things</div>

Binary file not shown.

View File

@ -86,6 +86,7 @@ tildeman
<!-- text end -->

View File

@ -34,6 +34,7 @@
</div>
<!-- text begin -->
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -60,6 +60,7 @@ ben
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -25,8 +25,13 @@
</div></div></div>
<div id="divbody"><div class="content">
<h3>all posts</h3>
<h4 class='allposts_header'>February 2019</h4>
<ul>
<li><a href="./networking-nonsense.html">networking nonsense</a> &mdash; February 11, 2019</li>
</ul>
<h4 class='allposts_header'>January 2019</h4>
<ul>
<li><a href="./764.html"></a> &mdash; January 15, 2019</li>
<li><a href="./raid-nonsense.html">raid nonsense</a> &mdash; January 13, 2019</li>
</ul>
<h4 class='allposts_header'>November 2018</h4>

View File

@ -50,7 +50,7 @@
<li><a href="tag_jokes.html">jokes</a> &mdash; 2 posts</li>
<li><a href="tag_linguistics.html">linguistics</a> &mdash; 1 post</li>
<li><a href="tag_links.html">links</a> &mdash; 1 post</li>
<li><a href="tag_linux.html">linux</a> &mdash; 8 posts</li>
<li><a href="tag_linux.html">linux</a> &mdash; 9 posts</li>
<li><a href="tag_lyrics.html">lyrics</a> &mdash; 1 post</li>
<li><a href="tag_mastodon.html">mastodon</a> &mdash; 1 post</li>
<li><a href="tag_music.html">music</a> &mdash; 1 post</li>
@ -66,8 +66,8 @@
<li><a href="tag_snow.html">snow</a> &mdash; 1 post</li>
<li><a href="tag_social-networks.html">social-networks</a> &mdash; 1 post</li>
<li><a href="tag_ssh.html">ssh</a> &mdash; 1 post</li>
<li><a href="tag_sysadmin.html">sysadmin</a> &mdash; 7 posts</li>
<li><a href="tag_tilde.html">tilde</a> &mdash; 8 posts</li>
<li><a href="tag_sysadmin.html">sysadmin</a> &mdash; 8 posts</li>
<li><a href="tag_tilde.html">tilde</a> &mdash; 9 posts</li>
<li><a href="tag_travel.html">travel</a> &mdash; 1 post</li>
<li><a href="tag_ubuntu.html">ubuntu</a> &mdash; 2 posts</li>
<li><a href="tag_update.html">update</a> &mdash; 1 post</li>

View File

@ -69,6 +69,7 @@ ben
<!-- text end -->

View File

@ -53,6 +53,7 @@ bashblog and your gopherhole
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -63,6 +63,7 @@ ben
<!-- text end -->

View File

@ -119,6 +119,7 @@ Und dabei die Zeitung las.</p>
<!-- text end -->

View File

@ -58,6 +58,7 @@ ben
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -73,6 +73,7 @@ as soon as it all propagates through the fickle beast that is dns.</p>
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -66,6 +66,7 @@ don't be a coconut</p>
<!-- text end -->

View File

@ -54,6 +54,7 @@ already exists.</p>
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -2,10 +2,33 @@
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel><title>blog // ~ben</title><link>https://tilde.team/~ben/blog/index.html</link>
<description>a blog about tildes and other things</description><language>en</language>
<lastBuildDate>Sun, 13 Jan 2019 13:29:11 -0500</lastBuildDate>
<pubDate>Sun, 13 Jan 2019 13:29:11 -0500</pubDate>
<lastBuildDate>Mon, 11 Feb 2019 02:41:30 -0500</lastBuildDate>
<pubDate>Mon, 11 Feb 2019 02:41:30 -0500</pubDate>
<atom:link href="https://tilde.team/~ben/blog/feed.rss" rel="self" type="application/rss+xml" />
<item><title>
networking nonsense
</title><description><![CDATA[
<p>i've recently been working on setting up <a href="https://drone.tildegit.org">drone ci</a>
on the tilde.team machine. however, there's been something strange going on
with the networking on there.</p>
<hr />
]]></description><link>https://tilde.team/~ben/blog/networking-nonsense.html</link>
<guid>https://tilde.team/~ben/blog/./networking-nonsense.html</guid>
<dc:creator>~ben</dc:creator>
<pubDate>Mon, 11 Feb 2019 02:40:20 -0500</pubDate></item>
<item><title>
</title><description><![CDATA[
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/764.html</link>
<guid>https://tilde.team/~ben/blog/./764.html</guid>
<dc:creator>~ben</dc:creator>
<pubDate>Tue, 15 Jan 2019 10:36:22 -0500</pubDate></item>
<item><title>
raid nonsense
</title><description><![CDATA[
@ -91,6 +114,7 @@ utterances
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/utterances.html</link>
<guid>https://tilde.team/~ben/blog/./utterances.html</guid>
@ -127,6 +151,7 @@ one.</p>
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/no-more-google.html</link>
<guid>https://tilde.team/~ben/blog/./no-more-google.html</guid>
@ -149,6 +174,7 @@ upsides of new dns nameservers
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/upsides-of-new-dns-nameservers.html</link>
<guid>https://tilde.team/~ben/blog/./upsides-of-new-dns-nameservers.html</guid>
@ -197,6 +223,7 @@ as soon as it all propagates through the fickle beast that is dns.</p>
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/dns-shenanigans-post-mortem.html</link>
<guid>https://tilde.team/~ben/blog/./dns-shenanigans-post-mortem.html</guid>
@ -226,6 +253,7 @@ that the main config in /etc/netplan says that the network config is handled by
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/lxd-networking-and-additional-ips.html</link>
<guid>https://tilde.team/~ben/blog/./lxd-networking-and-additional-ips.html</guid>
@ -255,6 +283,7 @@ already exists.</p>
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/dotfiles.html</link>
<guid>https://tilde.team/~ben/blog/./dotfiles.html</guid>
@ -283,6 +312,7 @@ bashblog and your gopherhole
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/bashblog-and-your-gopherhole.html</link>
<guid>https://tilde.team/~ben/blog/./bashblog-and-your-gopherhole.html</guid>
@ -311,6 +341,7 @@ more drone photos
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/more-drone-photos.html</link>
<guid>https://tilde.team/~ben/blog/./more-drone-photos.html</guid>
@ -341,6 +372,7 @@ tildeverse.org
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/tildeverseorg.html</link>
<guid>https://tilde.team/~ben/blog/./tildeverseorg.html</guid>
@ -378,6 +410,7 @@ i never get enough personal mail. it's all still privacy policy update notices.
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/tildeteam-news.html</link>
<guid>https://tilde.team/~ben/blog/./tildeteam-news.html</guid>
@ -416,6 +449,7 @@ white pride vs black pride
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/white-pride-vs-black-pride.html</link>
<guid>https://tilde.team/~ben/blog/./white-pride-vs-black-pride.html</guid>
@ -460,6 +494,7 @@ convincing use case to force us to learn it.</p>
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/phoenix.html</link>
<guid>https://tilde.team/~ben/blog/./phoenix.html</guid>
@ -488,6 +523,7 @@ otm
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/otm.html</link>
<guid>https://tilde.team/~ben/blog/./otm.html</guid>
@ -514,6 +550,7 @@ quote of the day
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/quote-of-the-day.html</link>
<guid>https://tilde.team/~ben/blog/./quote-of-the-day.html</guid>
@ -553,6 +590,7 @@ of loading javascript completely before being able to parse and compile it. </p>
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/webassembly.html</link>
<guid>https://tilde.team/~ben/blog/./webassembly.html</guid>
@ -584,6 +622,7 @@ pop quiz
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/pop-quiz.html</link>
<guid>https://tilde.team/~ben/blog/./pop-quiz.html</guid>
@ -638,6 +677,7 @@ User ben
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/git-remotes-with-ssh-aliases.html</link>
<guid>https://tilde.team/~ben/blog/./git-remotes-with-ssh-aliases.html</guid>
@ -671,6 +711,7 @@ cold
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/cold.html</link>
<guid>https://tilde.team/~ben/blog/./cold.html</guid>
@ -706,6 +747,7 @@ cold
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/8values.html</link>
<guid>https://tilde.team/~ben/blog/./8values.html</guid>
@ -744,6 +786,7 @@ mastodon
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/mastodon.html</link>
<guid>https://tilde.team/~ben/blog/./mastodon.html</guid>
@ -794,6 +837,7 @@ const loadingmsgs = [
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/loading.html</link>
<guid>https://tilde.team/~ben/blog/./loading.html</guid>
@ -840,6 +884,7 @@ vr
<!-- text end -->
]]></description><link>https://tilde.team/~ben/blog/vr.html</link>
<guid>https://tilde.team/~ben/blog/./vr.html</guid>
@ -890,6 +935,7 @@ Seriously, this is simple and so important. Do it.</p>
<!-- text end -->
@ -947,6 +993,7 @@ pan galactic gargle blaster
<!-- text end -->
@ -990,6 +1037,7 @@ don't be a coconut</p>
<!-- text end -->
@ -1028,6 +1076,7 @@ thought of the day
<!-- text end -->
@ -1077,6 +1126,7 @@ where to find me elsewhere on the web
<!-- text end -->
@ -1117,6 +1167,7 @@ blog update
<!-- text end -->
@ -1155,6 +1206,7 @@ thought of the day
<!-- text end -->
@ -1201,6 +1253,7 @@ antiwitze
<!-- text end -->
@ -1239,6 +1292,7 @@ thought of the day
<!-- text end -->
@ -1277,6 +1331,7 @@ Nonsense
<!-- text end -->
@ -1315,6 +1370,7 @@ Thought of the Day
<!-- text end -->
@ -1411,6 +1467,7 @@ Und dabei die Zeitung las.</p>
<!-- text end -->
@ -1449,6 +1506,7 @@ Joe on Sporty-ball-z
<!-- text end -->
@ -1491,6 +1549,7 @@ fun words in german
<!-- text end -->
@ -1529,6 +1588,7 @@ Thought of the day
<!-- text end -->
@ -1569,6 +1629,7 @@ links to save for later
<!-- text end -->
@ -1618,6 +1679,7 @@ hi there
<!-- text end -->
@ -1681,6 +1743,7 @@ hi there
<!-- text end -->

View File

@ -65,6 +65,7 @@ ben
<!-- text end -->

View File

@ -79,6 +79,7 @@ User ben
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -73,6 +73,7 @@ ben
<!-- text end -->

View File

@ -72,6 +72,7 @@ tildeman
<!-- text end -->

View File

@ -24,6 +24,31 @@
<div id="description">a blog about tildes and other things</div>
</div></div></div>
<div id="divbody"><div class="content">
<h3><a class="ablack" href="networking-nonsense.html">
networking nonsense
</a></h3>
<!-- bashblog_timestamp: #201902110240.20# -->
<div class="subtitle">February 11, 2019 &mdash;
~ben
</div>
<!-- text begin -->
<p>i've recently been working on setting up <a href="https://drone.tildegit.org">drone ci</a>
on the tilde.team machine. however, there's been something strange going on
with the networking on there.</p>
<p class="readmore"><a href="./networking-nonsense.html">read more...</a></p>
<h3><a class="ablack" href="764.html">
</a></h3>
<!-- bashblog_timestamp: #201901151036.22# -->
<div class="subtitle">January 15, 2019 &mdash;
~ben
</div>
<!-- text begin -->
<!-- text end -->
<h3><a class="ablack" href="raid-nonsense.html">
raid nonsense
</a></h3>
@ -120,6 +145,7 @@ utterances
<!-- text end -->
<h3><a class="ablack" href="no-more-google.html">
no more google
@ -157,6 +183,7 @@ one.</p>
<!-- text end -->
<h3><a class="ablack" href="upsides-of-new-dns-nameservers.html">
upsides of new dns nameservers
@ -180,84 +207,6 @@ upsides of new dns nameservers
<!-- text end -->
<h3><a class="ablack" href="dns-shenanigans-post-mortem.html">
dns shenanigans post-mortem
</a></h3>
<!-- bashblog_timestamp: #201808141503.49# -->
<div class="subtitle">August 14, 2018 &mdash;
~ben
</div>
<!-- text begin -->
<p>let's start by saying i probably should have done a bit more research before
diving head-first into this endeavor.</p>
<p>i've been thinking about transferring my domains off google domains for some
time now, as part of my personal goal to self host and limit my dependence on
google and other large third-party monstrosities. along that line, i asked for
registrar recommendations. <a href="https://tomasino.tilde.team">~tomasino</a> responded
with <a href="https://namesilo.com">namesilo</a>. i found that they had $3.99 registrations
for .team and .zone domains, which is 1/10th the cost of the $40 registration
on google domains.</p>
<p>i started out by getting the list of domains from the google console. 2 or 3
of them had been registered within the last 60 days, so i wasn't able to
transfer those just yet. i grabbed all the domain unlock codes and dropped
them into namesilo. i failed to realize that the dns panel on google domains
would disappear as soon as it went through, but more importantly that the
nameservers would be left pointing to the old defunct google domains ones.</p>
<p>i updated the nameservers as soon as i realized this error from the namesilo
panel. some of the domains propagated quickly. others, not so much. tilde.team
was still in a state of flux between the old and new nameservers.</p>
<p>in a rush to get the dns problem fixed, and under recommendation from several
people on irc, i decided to switch the nameservers for tilde.team and tilde.zone
to cloudflare, leaving another layer of flux for the dns to be stuck in...</p>
<p>of the five domains that i moved to cloudflare, 3 returned with a dnssec error,
claiming that i needed to remove the DS record from that zone. d'oh!</p>
<p>i removed the dnssec from those affected domains, so we should be good to go
as soon as it all propagates through the fickle beast that is dns.</p>
<p>tags: <a href='tag_linux.html'>linux</a>, <a href='tag_sysadmin.html'>sysadmin</a>, <a href='tag_tilde.html'>tilde</a>, <a href='tag_dns.html'>dns</a></p>
<!-- text end -->
<h3><a class="ablack" href="lxd-networking-and-additional-ips.html">
lxd networking and additional IPs
</a></h3>
<!-- bashblog_timestamp: #201807261534.50# -->
<div class="subtitle">July 26, 2018 &mdash;
~ben
</div>
<!-- text begin -->
<p>now that tilde.team is on a fancy-shmancy new dedi server, i've tried to get a secondary IP address
assigned to a lxd container (which i plan to use for my personal stuff). lxd shows that the secondary
IP is being picked up by that container, but i'm still seeing the host machine's IP as the external
address.</p>
<p>i'm not sure how i'll need to configure the network settings on the host machine (now that we're running
ubuntu 18.04 and it uses netplan for configs and not /etc/network/interfaces). another confusing thing is
that the main config in /etc/netplan says that the network config is handled by systemd-networkd...</p>
<p>at least i have through the end of the year when my current vps runs out to get this up and running.</p>
<p>ping me on <a href="https://tilde.chat">irc</a> or <a href="mailto:ben@tilde.team">email</a> if you have experience with this.</p>
<p>tags: <a href='tag_linux.html'>linux</a>, <a href='tag_sysadmin.html'>sysadmin</a>, <a href='tag_ubuntu.html'>ubuntu</a></p>
<!-- text end -->
<div id="all_posts"><a href="all_posts.html">archive</a> &mdash; <a href="all_tags.html">all tags</a> &mdash; <a href="feed.rss">rss</a></div>

View File

@ -90,6 +90,7 @@ italy
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -61,6 +61,7 @@ ben
<!-- text end -->

View File

@ -63,6 +63,7 @@ ben
<!-- text end -->

View File

@ -75,6 +75,7 @@ const loadingmsgs = [
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -54,6 +54,7 @@ that the main config in /etc/netplan says that the network config is handled by
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -63,6 +63,7 @@ ben
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -53,6 +53,7 @@ more drone photos
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -75,6 +75,7 @@ Seriously, this is simple and so important. Do it.</p>
<!-- text end -->

View File

@ -0,0 +1,102 @@
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<meta http-equiv="x-ua-compatible" content="ie=edge">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<meta name="theme-color" content="#00cc00">
<link rel="icon" type="image/png" sizes="192x192" href="https://tilde.team/apple-touch-icon-precomposed.png">
<link rel="icon" type="image/png" sizes="96x96" href="https://tilde.team/favicon-96x96.png">
<link rel="stylesheet" href="https://tilde.team/css/dracula.css">
<link rel="stylesheet" href="extra.css">
<link rel="alternate" type="application/rss+xml" title="subscribe to this page..." href="feed.rss" />
<title>networking nonsense</title>
</head><body>
<div class="container">
<div id="divbodyholder">
<div class="headerholder"><div class="header">
<div id="title">
<h1 class="nomargin"><a class="ablack" href="https://tilde.team/~ben/blog/index.html">blog // ~ben</a></h1>
<div id="description">a blog about tildes and other things</div>
</div></div></div>
<div id="divbody"><div class="content">
<!-- entry begin -->
<h3><a class="ablack" href="networking-nonsense.html">
networking nonsense
</a></h3>
<!-- bashblog_timestamp: #201902110240.20# -->
<div class="subtitle">February 11, 2019 &mdash;
~ben
</div>
<!-- text begin -->
<p>i've recently been working on setting up <a href="https://drone.tildegit.org">drone ci</a>
on the tilde.team machine. however, there's been something strange going on
with the networking on there.</p>
<hr />
<p>starting up drone with <a href="https://tildegit.org/tildeverse/drone/src/branch/master/docker-compose.yml">docker-compose</a>
didn't seem to be working: <code>netstat -tulpn</code> showed the port binding properly
to 127.0.0.1:8888 but i was completely unable to get anything from it (using
curl the nginx proxy that was to come).</p>
<p>i ended up scrapping docker on the ~team box itself and moving it into a lxd
container (pronounced "lex-dee") with nesting enabled.</p>
<p>this got us in to another problem that had been seen before when using nginx
to proxy to apps running in other containers. requests were dropped
intermittently, sometimes hanging for upwards of 30 seconds.</p>
<p>getting frustrated with this error, i tried to reproduce it on another host.
both the docker-proxy and nginx->lxd proxies work on the first try yielded no
clues as to where things were going wrong.</p>
<p>in a half-awake stupor last saturday evening, i decided to try rule out ipv6
by disabling it system-wide. as is expected for sleepy work, it didn't fix the
problem and created more in the process. </p>
<p>feeling satisfied that the problem didn't lie with ipv6, i re-enabled it, only
to find that i was unable to bind nginx to my allocated /64. i may or may not
have ranted a bit about this on irc but i was able to get it back up and
running by restarting systemd-networkd.</p>
<p>one step forwards broke something and now we're back to where we started with
the original problem of the intermittent hangups to the lxd container.</p>
<p>seeing my troubles on irc, <a href="https://tilde.team/~jchelpau/">jchelpau</a> offered
to help dig in to the problem with a a fresh set of eyes. he noted right away
that pings over ipv6 to the containers worked fine, but ipv4 did not.</p>
<p>we ended up looking at the firewall configurations, only to find that one of
the subnets i blocked after november's <a href="november-13-post-mortem.html">nmap incident</a>
included lxdbr0's subnet (the bridge device used by lxd).</p>
<p>now that i made the exeption for lxdbr0, everything is working as expected!</p>
<p>thanks to <a href="https://tilde.team/~fosslinux/">fosslinux</a> and <a href="https://tilde.team/~jchelpau/">jchelpau</a>
for their debugging help!</p>
<p>tags: <a href='tag_tilde.html'>tilde</a>, <a href='tag_linux.html'>linux</a>, <a href='tag_sysadmin.html'>sysadmin</a></p>
<!-- text end -->
<!-- entry end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>
generated with <a href="https://tildegit.org/team/bashblog">bashblog</a>, a single bash script to easily create blogs like this one</div>
</div></div>
<script src="https://utteranc.es/client.js"
repo="benharri/tilde"
issue-term="title"
crossorigin="anonymous"
theme="github-dark"
async>
</script>
</div>
<br>
</body></html>

View File

@ -0,0 +1,50 @@
networking nonsense
i've recently been working on setting up [drone ci](https://drone.tildegit.org)
on the tilde.team machine. however, there's been something strange going on
with the networking on there.
---
starting up drone with [docker-compose](https://tildegit.org/tildeverse/drone/src/branch/master/docker-compose.yml)
didn't seem to be working: `netstat -tulpn` showed the port binding properly
to 127.0.0.1:8888 but i was completely unable to get anything from it (using
curl the nginx proxy that was to come).
i ended up scrapping docker on the ~team box itself and moving it into a lxd
container (pronounced "lex-dee") with nesting enabled.
this got us in to another problem that had been seen before when using nginx
to proxy to apps running in other containers. requests were dropped
intermittently, sometimes hanging for upwards of 30 seconds.
getting frustrated with this error, i tried to reproduce it on another host.
both the docker-proxy and nginx->lxd proxies work on the first try yielded no
clues as to where things were going wrong.
in a half-awake stupor last saturday evening, i decided to try rule out ipv6
by disabling it system-wide. as is expected for sleepy work, it didn't fix the
problem and created more in the process.
feeling satisfied that the problem didn't lie with ipv6, i re-enabled it, only
to find that i was unable to bind nginx to my allocated /64. i may or may not
have ranted a bit about this on irc but i was able to get it back up and
running by restarting systemd-networkd.
one step forwards broke something and now we're back to where we started with
the original problem of the intermittent hangups to the lxd container.
seeing my troubles on irc, [jchelpau](https://tilde.team/~jchelpau/) offered
to help dig in to the problem with a a fresh set of eyes. he noted right away
that pings over ipv6 to the containers worked fine, but ipv4 did not.
we ended up looking at the firewall configurations, only to find that one of
the subnets i blocked after november's [nmap incident](november-13-post-mortem.html)
included lxdbr0's subnet (the bridge device used by lxd).
now that i made the exeption for lxdbr0, everything is working as expected!
thanks to [fosslinux](https://tilde.team/~fosslinux/) and [jchelpau](https://tilde.team/~jchelpau/)
for their debugging help!
tags: tilde, linux, sysadmin

View File

@ -61,6 +61,7 @@ one.</p>
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -61,6 +61,7 @@ ben
<!-- text end -->

View File

@ -66,6 +66,7 @@ Please take all necessary measures to avoid this in the future and to solve the
<p>it's definitely time to research redundancy options!</p>
<p>tags: <a href='tag_post-mortem.html'>post-mortem</a>, <a href='tag_linux.html'>linux</a>, <a href='tag_sysadmin.html'>sysadmin</a></p>
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -53,6 +53,7 @@ otm
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -65,6 +65,7 @@ ben
<!-- text end -->

View File

@ -69,6 +69,7 @@ convincing use case to force us to learn it.</p>
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -56,6 +56,7 @@ pop quiz
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -58,6 +58,7 @@ the impact if tilde.team were to go down. it's still a large spof (single-point-
<p><strong>update</strong>: the round robin host is now <em>irc</em>.tilde.chat, which resolves the site issues that we were having, due to the duplicated deployments.</p>
<p>tags: <a href='tag_sysadmin.html'>sysadmin</a>, <a href='tag_tilde.html'>tilde</a></p>
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -51,6 +51,7 @@ quote of the day
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -89,6 +89,7 @@ as expected and we were good to go!</p>
space. thanks for tuning in to this episode of sysadmin adventures!</p>
<p>tags: <a href='tag_tilde.html'>tilde</a>, <a href='tag_sysadmin.html'>sysadmin</a></p>
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -85,6 +85,7 @@ tildeman
<!-- text end -->

View File

@ -59,6 +59,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -68,6 +68,7 @@ ben
<!-- text end -->

View File

@ -64,6 +64,7 @@ ben
<!-- text end -->

View File

@ -43,6 +43,7 @@ utterances
<!-- text end -->
<h3><a class="ablack" href="bashblog-and-your-gopherhole.html">
bashblog and your gopherhole
@ -72,6 +73,7 @@ bashblog and your gopherhole
<!-- text end -->
<h3><a class="ablack" href="blog-update.html">
blog update
@ -111,6 +113,7 @@ ben
<!-- text end -->

View File

@ -62,6 +62,7 @@ ben
<!-- text end -->

View File

@ -57,6 +57,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -68,6 +68,7 @@ convincing use case to force us to learn it.</p>
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -52,6 +52,7 @@ more drone photos
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -46,6 +46,7 @@ upsides of new dns nameservers
<!-- text end -->
<h3><a class="ablack" href="dns-shenanigans-post-mortem.html">
dns shenanigans post-mortem
@ -95,6 +96,7 @@ as soon as it all propagates through the fickle beast that is dns.</p>
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -53,6 +53,7 @@ already exists.</p>
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -52,6 +52,7 @@ more drone photos
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -68,6 +68,7 @@ ben
<!-- text end -->
@ -165,6 +166,7 @@ Und dabei die Zeitung las.</p>
<!-- text end -->
@ -208,6 +210,7 @@ ben
<!-- text end -->

View File

@ -53,6 +53,7 @@ already exists.</p>
<!-- text end -->
<h3><a class="ablack" href="git-remotes-with-ssh-aliases.html">
git remotes with ssh aliases
@ -108,6 +109,7 @@ User ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -85,6 +85,7 @@ tildeman
<!-- text end -->

View File

@ -64,6 +64,7 @@ ben
<!-- text end -->

View File

@ -74,6 +74,7 @@ const loadingmsgs = [
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -59,6 +59,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -68,6 +68,7 @@ convincing use case to force us to learn it.</p>
<!-- text end -->
<h3><a class="ablack" href="net-neutrality-vote-today.html">
net neutrality vote today
@ -119,6 +120,7 @@ Seriously, this is simple and so important. Do it.</p>
<!-- text end -->

View File

@ -39,7 +39,7 @@ weechat setup
<p>i'll go over some of the most essential of these, and share my full configs.</p>
<p class="readmore"><a href="weechat-setup.html">read more...</a></p>
<p class="readmore"><a href="./weechat-setup.html">read more...</a></p>
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>
generated with <a href="https://tildegit.org/team/bashblog">bashblog</a>, a single bash script to easily create blogs like this one</div>

View File

@ -74,6 +74,7 @@ const loadingmsgs = [
<!-- text end -->
<h3><a class="ablack" href="antiwitze.html">
antiwitze
@ -119,6 +120,7 @@ ben
<!-- text end -->

View File

@ -64,6 +64,7 @@ ben
<!-- text end -->

View File

@ -62,6 +62,7 @@ ben
<!-- text end -->

View File

@ -24,6 +24,20 @@
<div id="description">a blog about tildes and other things</div>
</div></div></div>
<div id="divbody"><div class="content">
<h3><a class="ablack" href="networking-nonsense.html">
networking nonsense
</a></h3>
<!-- bashblog_timestamp: #201902110240.20# -->
<div class="subtitle">February 11, 2019 &mdash;
~ben
</div>
<!-- text begin -->
<p>i've recently been working on setting up <a href="https://drone.tildegit.org">drone ci</a>
on the tilde.team machine. however, there's been something strange going on
with the networking on there.</p>
<p class="readmore"><a href="./networking-nonsense.html">read more...</a></p>
<h3><a class="ablack" href="weechat-setup.html">
weechat setup
</a></h3>
@ -39,7 +53,7 @@ weechat setup
<p>i'll go over some of the most essential of these, and share my full configs.</p>
<p class="readmore"><a href="weechat-setup.html">read more...</a></p>
<p class="readmore"><a href="./weechat-setup.html">read more...</a></p>
<h3><a class="ablack" href="november-13-post-mortem.html">
november 13 post mortem
</a></h3>
@ -55,7 +69,7 @@ november 13 post mortem
<p>tilde.team was at the least inaccessible, and at the worst, down completely. according the message in my inbox, there hade been an attempted "attack" from my IP.</p>
<p class="readmore"><a href="november-13-post-mortem.html">read more...</a></p>
<p class="readmore"><a href="./november-13-post-mortem.html">read more...</a></p>
<h3><a class="ablack" href="no-more-google.html">
no more google
</a></h3>
@ -92,6 +106,7 @@ one.</p>
<!-- text end -->
<h3><a class="ablack" href="upsides-of-new-dns-nameservers.html">
upsides of new dns nameservers
@ -115,6 +130,7 @@ upsides of new dns nameservers
<!-- text end -->
<h3><a class="ablack" href="dns-shenanigans-post-mortem.html">
dns shenanigans post-mortem
@ -164,6 +180,7 @@ as soon as it all propagates through the fickle beast that is dns.</p>
<!-- text end -->
<h3><a class="ablack" href="lxd-networking-and-additional-ips.html">
lxd networking and additional IPs
@ -194,6 +211,7 @@ that the main config in /etc/netplan says that the network config is handled by
<!-- text end -->
<h3><a class="ablack" href="dotfiles.html">
dotfiles
@ -224,6 +242,7 @@ already exists.</p>
<!-- text end -->
<h3><a class="ablack" href="hi-there.html">
hi there
@ -272,6 +291,7 @@ tildeman
<!-- text end -->

View File

@ -65,6 +65,7 @@ don't be a coconut</p>
<!-- text end -->

View File

@ -62,6 +62,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -65,6 +65,7 @@ don't be a coconut</p>
<!-- text end -->

View File

@ -60,6 +60,7 @@ one.</p>
<!-- text end -->
<h3><a class="ablack" href="net-neutrality-vote-today.html">
net neutrality vote today
@ -111,6 +112,7 @@ Seriously, this is simple and so important. Do it.</p>
<!-- text end -->

View File

@ -60,6 +60,7 @@ ben
<!-- text end -->
@ -157,6 +158,7 @@ Und dabei die Zeitung las.</p>
<!-- text end -->

View File

@ -85,6 +85,7 @@ tildeman
<!-- text end -->

View File

@ -52,6 +52,7 @@ more drone photos
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -52,6 +52,7 @@ otm
<!-- text end -->
<h3><a class="ablack" href="hey-dere-bub.html">
hey dere bub!

View File

@ -118,6 +118,7 @@ Und dabei die Zeitung las.</p>
<!-- text end -->

View File

@ -59,6 +59,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -39,7 +39,7 @@ november 13 post mortem
<p>tilde.team was at the least inaccessible, and at the worst, down completely. according the message in my inbox, there hade been an attempted "attack" from my IP.</p>
<p class="readmore"><a href="november-13-post-mortem.html">read more...</a></p>
<p class="readmore"><a href="./november-13-post-mortem.html">read more...</a></p>
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>
generated with <a href="https://tildegit.org/team/bashblog">bashblog</a>, a single bash script to easily create blogs like this one</div>

View File

@ -62,6 +62,7 @@ ben
<!-- text end -->

View File

@ -57,6 +57,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -62,6 +62,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -78,6 +78,7 @@ User ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -24,6 +24,20 @@
<div id="description">a blog about tildes and other things</div>
</div></div></div>
<div id="divbody"><div class="content">
<h3><a class="ablack" href="networking-nonsense.html">
networking nonsense
</a></h3>
<!-- bashblog_timestamp: #201902110240.20# -->
<div class="subtitle">February 11, 2019 &mdash;
~ben
</div>
<!-- text begin -->
<p>i've recently been working on setting up <a href="https://drone.tildegit.org">drone ci</a>
on the tilde.team machine. however, there's been something strange going on
with the networking on there.</p>
<p class="readmore"><a href="./networking-nonsense.html">read more...</a></p>
<h3><a class="ablack" href="raid-nonsense.html">
raid nonsense
</a></h3>
@ -37,7 +51,7 @@ raid nonsense
on the tilde.team box. probably should have written about it sooner but i didn't
make time for it until now.</p>
<p class="readmore"><a href="raid-nonsense.html">read more...</a></p>
<p class="readmore"><a href="./raid-nonsense.html">read more...</a></p>
<h3><a class="ablack" href="proactive-redundancy.html">
proactive redundancy
</a></h3>
@ -50,7 +64,7 @@ proactive redundancy
<p>after the <a href="november-13-post-mortem.html">fiasco</a> earlier this week, i've been taking steps to minimize
the impact if tilde.team were to go down. it's still a large spof (single-point-of-failure), but i'm reasonably certain that at least the irc net will remain up and functional in the event of another outage. </p>
<p class="readmore"><a href="proactive-redundancy.html">read more...</a></p>
<p class="readmore"><a href="./proactive-redundancy.html">read more...</a></p>
<h3><a class="ablack" href="november-13-post-mortem.html">
november 13 post mortem
</a></h3>
@ -66,7 +80,7 @@ november 13 post mortem
<p>tilde.team was at the least inaccessible, and at the worst, down completely. according the message in my inbox, there hade been an attempted "attack" from my IP.</p>
<p class="readmore"><a href="november-13-post-mortem.html">read more...</a></p>
<p class="readmore"><a href="./november-13-post-mortem.html">read more...</a></p>
<h3><a class="ablack" href="dns-shenanigans-post-mortem.html">
dns shenanigans post-mortem
</a></h3>
@ -115,6 +129,7 @@ as soon as it all propagates through the fickle beast that is dns.</p>
<!-- text end -->
<h3><a class="ablack" href="lxd-networking-and-additional-ips.html">
lxd networking and additional IPs
@ -145,6 +160,7 @@ that the main config in /etc/netplan says that the network config is handled by
<!-- text end -->
<h3><a class="ablack" href="tildeteam-news.html">
tilde.team news
@ -183,6 +199,7 @@ i never get enough personal mail. it's all still privacy policy update notices.
<!-- text end -->
<h3><a class="ablack" href="hi-there.html">
hi there
@ -231,6 +248,7 @@ tildeman
<!-- text end -->

View File

@ -24,6 +24,20 @@
<div id="description">a blog about tildes and other things</div>
</div></div></div>
<div id="divbody"><div class="content">
<h3><a class="ablack" href="networking-nonsense.html">
networking nonsense
</a></h3>
<!-- bashblog_timestamp: #201902110240.20# -->
<div class="subtitle">February 11, 2019 &mdash;
~ben
</div>
<!-- text begin -->
<p>i've recently been working on setting up <a href="https://drone.tildegit.org">drone ci</a>
on the tilde.team machine. however, there's been something strange going on
with the networking on there.</p>
<p class="readmore"><a href="./networking-nonsense.html">read more...</a></p>
<h3><a class="ablack" href="raid-nonsense.html">
raid nonsense
</a></h3>
@ -37,7 +51,7 @@ raid nonsense
on the tilde.team box. probably should have written about it sooner but i didn't
make time for it until now.</p>
<p class="readmore"><a href="raid-nonsense.html">read more...</a></p>
<p class="readmore"><a href="./raid-nonsense.html">read more...</a></p>
<h3><a class="ablack" href="proactive-redundancy.html">
proactive redundancy
</a></h3>
@ -50,7 +64,7 @@ proactive redundancy
<p>after the <a href="november-13-post-mortem.html">fiasco</a> earlier this week, i've been taking steps to minimize
the impact if tilde.team were to go down. it's still a large spof (single-point-of-failure), but i'm reasonably certain that at least the irc net will remain up and functional in the event of another outage. </p>
<p class="readmore"><a href="proactive-redundancy.html">read more...</a></p>
<p class="readmore"><a href="./proactive-redundancy.html">read more...</a></p>
<h3><a class="ablack" href="upsides-of-new-dns-nameservers.html">
upsides of new dns nameservers
</a></h3>
@ -73,6 +87,7 @@ upsides of new dns nameservers
<!-- text end -->
<h3><a class="ablack" href="dns-shenanigans-post-mortem.html">
dns shenanigans post-mortem
@ -122,6 +137,7 @@ as soon as it all propagates through the fickle beast that is dns.</p>
<!-- text end -->
<h3><a class="ablack" href="bashblog-and-your-gopherhole.html">
bashblog and your gopherhole
@ -151,6 +167,7 @@ bashblog and your gopherhole
<!-- text end -->
<h3><a class="ablack" href="tildeteam-news.html">
tilde.team news
@ -189,6 +206,7 @@ i never get enough personal mail. it's all still privacy policy update notices.
<!-- text end -->
<h3><a class="ablack" href="mastodon.html">
mastodon
@ -228,6 +246,7 @@ ben
<!-- text end -->
<h3><a class="ablack" href="hi-there.html">
hi there
@ -276,6 +295,7 @@ tildeman
<!-- text end -->

View File

@ -53,6 +53,7 @@ that the main config in /etc/netplan says that the network config is handled by
<!-- text end -->
<h3><a class="ablack" href="hi-there.html">
hi there
@ -101,6 +102,7 @@ tildeman
<!-- text end -->

View File

@ -62,6 +62,7 @@ ben
<!-- text end -->

View File

@ -57,6 +57,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -39,7 +39,7 @@ weechat setup
<p>i'll go over some of the most essential of these, and share my full configs.</p>
<p class="readmore"><a href="weechat-setup.html">read more...</a></p>
<p class="readmore"><a href="./weechat-setup.html">read more...</a></p>
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>
generated with <a href="https://tildegit.org/team/bashblog">bashblog</a>, a single bash script to easily create blogs like this one</div>

View File

@ -57,6 +57,7 @@ ben
<!-- text end -->
</div>
<div id="footer">CC by-nc-nd <a href="https://tilde.team/~ben/">~ben</a> &mdash; <a href="mailto:ben&#64;tilde&#46;team">ben&#64;tilde&#46;team</a><br/>

View File

@ -65,6 +65,7 @@ don't be a coconut</p>
<!-- text end -->
@ -104,6 +105,7 @@ ben
<!-- text end -->
@ -201,6 +203,7 @@ Und dabei die Zeitung las.</p>
<!-- text end -->
@ -244,6 +247,7 @@ ben
<!-- text end -->

View File

@ -61,6 +61,7 @@ ben
<!-- text end -->

View File

@ -61,6 +61,7 @@ ben
<!-- text end -->

View File

@ -61,6 +61,7 @@ ben
<!-- text end -->

View File

@ -61,6 +61,7 @@ ben
<!-- text end -->

View File

@ -61,6 +61,7 @@ ben
<!-- text end -->

View File

@ -62,6 +62,7 @@ i never get enough personal mail. it's all still privacy policy update notices.
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -55,6 +55,7 @@ tildeverse.org
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -47,6 +47,7 @@ upsides of new dns nameservers
<!-- text end -->
<!-- entry end -->
</div>

View File

@ -44,6 +44,7 @@ utterances
<!-- text end -->
<!-- entry end -->
</div>

Some files were not shown because too many files have changed in this diff Show More