Agosto 2025 - Git do Root C3SL

[Git][root/services/dhcp][main] Add imoral
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / Serviços / DHCP Commits: c6c5b21e by Fernando Monteiro Kiotheka at 2025-08-13T11:14:38-03:00 Add imoral - - - - - 1 changed file: - kea-dhcp4.conf Changes: ===================================== kea-dhcp4.conf ===================================== @@ -4537,6 +4537,12 @@ "ip-address": "10.254.221.86", "user-context": { "nextbox_ip_address_id": 99 } }, + { + "hostname": "imoral", + "hw-address": "60:C7:27:29:29:DC", + "ip-address": "10.254.221.87", + "user-context": { "nextbox_ip_address_id": 2786 } + }, { "hostname": "sherekhan", "hw-address": "D0:27:88:C2:30:56", View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/c6c5b21ef1eec712a6a… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/c6c5b21ef1eec712a6a… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] Add imoral
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / Serviços / DNS Commits: c5fd820e by Fernando Monteiro Kiotheka at 2025-08-13T11:14:10-03:00 Add imoral - - - - - 2 changed files: - interna-254.10.in-addr.arpa.zone - interna-c3local.zone Changes: ===================================== interna-254.10.in-addr.arpa.zone ===================================== @@ -459,6 +459,7 @@ $TTL 21600 85.223 IN PTR h57.c3local. 86.221 IN PTR fawkes.c3local. 86.223 IN PTR h58.c3local. +87.221 IN PTR imoral.c3local. 87.223 IN PTR h59.c3local. 88.221 IN PTR sherekhan.c3local. 88.223 IN PTR h60.c3local. @@ -479,4 +480,4 @@ $TTL 21600 249.227 IN PTR mojito7.c3local. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754933625 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1755094437 86400 7200 2592000 3600 ===================================== interna-c3local.zone ===================================== @@ -70,7 +70,7 @@ brioja IN A 10.254.221.54 buxfox IN A 10.254.237.8 @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754933626 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1755094437 86400 7200 2592000 3600 caio IN A 10.254.221.1 calvin IN A 10.254.229.6 carate IN A 10.254.221.43 @@ -221,6 +221,7 @@ i39 IN A 10.254.224.66 i40 IN A 10.254.224.67 i41 IN A 10.254.224.68 ihc1 IN A 10.254.240.10 +imoral IN A 10.254.221.87 impressora-lamir IN A 10.254.253.5 ironman IN A 10.254.221.41 j1 IN A 10.254.225.5 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/c5fd820e9559c0d3a712… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/c5fd820e9559c0d3a712… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dmarc-report][main] chore: remove binary file
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / DMARC Report Commits: 6f1b4253 by Fernando Monteiro Kiotheka at 2025-08-13T10:43:21-03:00 chore: remove binary file - - - - - 1 changed file: - − dmarc-viewer Changes: ===================================== dmarc-viewer deleted ===================================== Binary files a/dmarc-viewer and /dev/null differ View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/6f1b42533a80c3b16f59… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/6f1b42533a80c3b16f59… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dmarc-report][main] feat: upgrade to new bao config
by Fernando K (＠fmkiotheka) 13 Ago '25

13 Ago '25

Fernando K pushed to branch main at Root / DMARC Report Commits: 4ce72fa9 by Fernando Monteiro Kiotheka at 2025-08-13T10:37:03-03:00 feat: upgrade to new bao config - - - - - 2 changed files: - .gitlab-ci.yml - + get-key-from-bao.sh Changes: ===================================== .gitlab-ci.yml ===================================== @@ -3,32 +3,6 @@ stages: retrieve-key: stage : setup - script: - - | - - ssh-keygen -t ed25519 -f key -N '' -q <<<y > /dev/null 2>&1 - - UNSIGNED_SSH_KEY=$(cat key.pub) - - response=$(curl -X POST -H "X-Vault-Token: $CI_VAULT_TOKEN" -d "{\"public_key\": \"$UNSIGNED_SSH_KEY\"}" $CI_VAULT_ADDR/v1/$CI_VAULT_SIGNER_AUTHORITY_PATH) - if [ $? -eq 0 ]; then - SIGNED_KEY=$(echo $response | jq -r .data.signed_key) - if [ "$SIGNED_KEY" != "null" ]; then - echo $SIGNED_KEY > key-cert.pub - chmod 644 key-cert.pub - else - echo "Failed to retrieve SSH key: SSH key is empty" - exit 1 - fi - else - echo "Failed to retrieve SSH key: Request to Vault failed" - exit 1 - fi - - ssh -i key -o StrictHostKeyChecking=accept-new ansible(a)dmarc-report.c3sl.ufpr.br /home/ansible/dmarcts-report-parser/dmarcts-report-parser.pl -i - - artifacts: - paths: - - key - - key.pub - - key-cert.pub + script: |- + sh get-key-from-bao.sh + ssh -i key -o StrictHostKeyChecking=accept-new root(a)dmarc-report.c3sl.ufpr.br /home/ansible/dmarcts-report-parser/dmarcts-report-parser.pl -i ===================================== get-key-from-bao.sh ===================================== @@ -0,0 +1,11 @@ +#!/bin/sh +response=$(curl --no-progress-meter --request POST \ + --header "X-Vault-Token: $VAULT_TOKEN" --data '{"key_type": "ed25519"}' \ + "$VAULT_ADDR/v1/ssh-client-signer/issue/ansible") \ + || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } +private_key=$(printf "%s" "$response" | jq --raw-output .data.private_key) +signed_key=$(printf "%s" "$response" | jq --raw-output .data.signed_key) +[ "$signed_key" != "null" ] && [ "$private_key" != "null" ] \ + || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } +printf "%s\n" "$private_key" >key && chmod 600 key +printf "%s\n" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/4ce72fa9a6eda8009d82… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/4ce72fa9a6eda8009d82… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(ademir): add MAIL_ADDRESS env var
by yyvf22 (＠yyvf22) 13 Ago '25

13 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: a34b542a by yyvf at 2025-08-12T21:19:44-03:00 feat(ademir): add MAIL_ADDRESS env var - - - - - 1 changed file: - apps/base/ademir/deploy.yaml Changes: ===================================== apps/base/ademir/deploy.yaml ===================================== @@ -55,6 +55,8 @@ spec: value: smtp.c3sl.ufpr.br - name: MAIL_PORT value: "25" + - name: MAIL_ADDRESS + value: "ademir(a)c3sl.ufpr.br" - name: S3_ACCESS_KEY_ID valueFrom: secretKeyRef: View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/a34b542ad91e7c0ed89c5a… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/a34b542ad91e7c0ed89c5a… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/suporte][main] feat: add draft matrix support page
by Fernando K (＠fmkiotheka) 12 Ago '25

12 Ago '25

Fernando K pushed to branch main at Root / Suporte do Departamento de Informática Commits: 53703287 by ferk6a at 2025-08-12T13:55:54-03:00 feat: add draft matrix support page - - - - - 7 changed files: - + content/pt-br/matrix.md - + content/pt-br/matrix/1.jpg - + content/pt-br/matrix/2.jpg - + content/pt-br/matrix/3.jpg - + content/pt-br/matrix/4.jpg - + content/pt-br/matrix/5.jpg - + content/pt-br/matrix/6.jpg Changes: ===================================== content/pt-br/matrix.md ===================================== @@ -0,0 +1,19 @@ +--- +title: Chat com Matrix +type: docs +--- + +O Matrix é um protocolo de comunicação com criptografia ponta a ponta. O C3SL +possui um servidor matrix para comunicação interna acadêmica que visa substituir +a necessidade da utilização de serviços como o Discord. + +## Aplicativos de celular + +### Element (Android e iOS) + +O Element pode ser obtido na [loja F-Droid](https://f-droid.org/packages/im.vector.app/) +ou na [loja Play Store](https://play.google.com/store/apps/details?id=im.vector.app). +Ele é no momento a versão mais completa. Para utilizar o Matrix com o servidor +do C3SL: + +1. ![](1.jpg) ===================================== content/pt-br/matrix/1.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/1.jpg differ ===================================== content/pt-br/matrix/2.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/2.jpg differ ===================================== content/pt-br/matrix/3.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/3.jpg differ ===================================== content/pt-br/matrix/4.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/4.jpg differ ===================================== content/pt-br/matrix/5.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/5.jpg differ ===================================== content/pt-br/matrix/6.jpg ===================================== Binary files /dev/null and b/content/pt-br/matrix/6.jpg differ View it on GitLab: https://gitlab.c3sl.ufpr.br/root/suporte/-/commit/537032875bf8251ce47a811c8… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/suporte/-/commit/537032875bf8251ce47a811c8… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dhcp][main] Change baiken.c3local MAC address
by Bruno Sime Ferreira Nunes (＠bsfn19) 12 Ago '25

12 Ago '25

Bruno Sime Ferreira Nunes pushed to branch main at Root / Serviços / DHCP Commits: c46956dc by Bruno Sime at 2025-08-12T11:02:04-03:00 Change baiken.c3local MAC address - - - - - 1 changed file: - kea-dhcp4.conf Changes: ===================================== kea-dhcp4.conf ===================================== @@ -4479,7 +4479,7 @@ }, { "hostname": "baiken", - "hw-address": "70:85:C2:08:88:4C", + "hw-address": "60:C7:27:2C:7A:B6", "ip-address": "10.254.221.77", "user-context": { "nextbox_ip_address_id": 94 } }, View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/c46956dc4858d4cb701… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/c46956dc4858d4cb701… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/cli/mirror-monitor][main] Update .gitlab-ci.yml file
by Heric Camargo (＠hc20) 12 Ago '25

12 Ago '25

Heric Camargo pushed to branch main at Root / CLI / Mirror Monitor Commits: e068deb0 by Heric Camargo at 2025-08-12T10:52:04-03:00 Update .gitlab-ci.yml file - - - - - 1 changed file: - .gitlab-ci.yml Changes: ===================================== .gitlab-ci.yml ===================================== @@ -5,4 +5,4 @@ build: script: - buildah login -u "${REGISTRY_USERNAME}" -p "${REGISTRY_PASSWORD}" "harbor.c3sl.ufpr.br" - buildah build --tag ${CI_PROJECT_NAME} . - - buildah push ${CI_PROJECT_NAME} docker://harbor.c3sl.ufpr.br/root/${CI_PROJECT_NAME}:latest + - buildah push ${CI_PROJECT_NAME} docker://harbor.c3sl.ufpr.br/${CI_PROJECT_NAME}:latest View it on GitLab: https://gitlab.c3sl.ufpr.br/root/cli/mirror-monitor/-/commit/e068deb07d0a02… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/cli/mirror-monitor/-/commit/e068deb07d0a02… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/cli/mirror-monitor][main] Update .gitlab-ci.yml file
by Heric Camargo (＠hc20) 12 Ago '25

12 Ago '25

Heric Camargo pushed to branch main at Root / CLI / Mirror Monitor Commits: 271daba6 by Heric Camargo at 2025-08-12T10:30:05-03:00 Update .gitlab-ci.yml file - - - - - 1 changed file: - + .gitlab-ci.yml Changes: ===================================== .gitlab-ci.yml ===================================== @@ -0,0 +1,8 @@ +build: + stage: build + image: + name: quay.io/buildah/stable + script: + - buildah login -u "${REGISTRY_USERNAME}" -p "${REGISTRY_PASSWORD}" "harbor.c3sl.ufpr.br" + - buildah build --tag ${CI_PROJECT_NAME} . + - buildah push ${CI_PROJECT_NAME} docker://harbor.c3sl.ufpr.br/root/${CI_PROJECT_NAME}:latest View it on GitLab: https://gitlab.c3sl.ufpr.br/root/cli/mirror-monitor/-/commit/271daba614a3b5… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/cli/mirror-monitor/-/commit/271daba614a3b5… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/cli/mirror-monitor][main] 2 commits: build: switch base image from debian to alpine
by Heric Camargo (＠hc20) 12 Ago '25

12 Ago '25

Heric Camargo pushed to branch main at Root / CLI / Mirror Monitor Commits: 659ddef1 by Heric Camargo at 2025-08-12T09:55:36-03:00 build: switch base image from debian to alpine - - - - - 2e607e21 by Heric Camargo at 2025-08-12T09:55:44-03:00 fix: update container port to 80 in deployment, service, and ingress configurations - - - - - 4 changed files: - Containerfile - deploy/k8s/deployment.yaml - deploy/k8s/ingress.yaml - deploy/k8s/service.yaml Changes: ===================================== Containerfile ===================================== @@ -15,14 +15,13 @@ COPY . . # Compilando o binário da API RUN go build -o mirror-monitor ./cmd/api + # Etapa final: -FROM debian:bookworm-slim +FROM alpine:latest # Instalando o rsync e criando usuário não-root: -RUN apt-get update && \ - apt-get install -y rsync ca-certificates && \ - apt-get clean && rm -rf /var/lib/apt/lists/* && \ - useradd -r -u 1000 -s /bin/false appuser +RUN apk add --no-cache rsync ca-certificates && \ + adduser -D -u 1000 -s /sbin/nologin appuser # Copiando o binário compilado: COPY --from=builder /app/mirror-monitor /usr/local/bin/mirror-monitor @@ -33,9 +32,5 @@ RUN chmod +x /usr/local/bin/mirror-monitor # Mudando para usuário não-root USER 1000 -# Exponha a porta, se necessário: -#Atenção: se você mudar de porta, esse trecho do código deve-se mudar também! -EXPOSE 8080 - # Definindo o comando de entrada: CMD ["mirror-monitor"] ===================================== deploy/k8s/deployment.yaml ===================================== @@ -24,14 +24,14 @@ spec: image: mirror-monitor-api:latest imagePullPolicy: IfNotPresent ports: - - containerPort: 8080 + - containerPort: 80 env: - name: RSYNC_URL value: "rsync://sagres.c3sl.ufpr.br/" - name: POLLING_INTERVAL_SECONDS value: "300" - name: PORT - value: "8080" + value: "80" resources: requests: memory: "64Mi" @@ -42,7 +42,7 @@ spec: livenessProbe: httpGet: path: /modules - port: 8080 + port: 80 initialDelaySeconds: 30 periodSeconds: 30 timeoutSeconds: 5 @@ -50,7 +50,7 @@ spec: readinessProbe: httpGet: path: /modules - port: 8080 + port: 80 initialDelaySeconds: 5 periodSeconds: 10 timeoutSeconds: 3 ===================================== deploy/k8s/ingress.yaml ===================================== @@ -3,9 +3,6 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: mirror-monitor-api-ingress - annotations: - # Remove the rewrite rule since we want to preserve the API paths - nginx.ingress.kubernetes.io/ssl-redirect: "false" spec: rules: - host: mirror-monitor.local ===================================== deploy/k8s/service.yaml ===================================== @@ -10,4 +10,4 @@ spec: ports: - name: http port: 80 - targetPort: 8080 # Match the containerPort in your Deployment + targetPort: 80 # Match the containerPort in your Deployment View it on GitLab: https://gitlab.c3sl.ufpr.br/root/cli/mirror-monitor/-/compare/97f8a60463fbc… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/cli/mirror-monitor/-/compare/97f8a60463fbc… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0