- Git do Root C3SL

[Git][root/dbroot/postgresql-sync-config][main] update
by bpt22 (＠bpt22) 02 Ago '25

02 Ago '25

bpt22 pushed to branch main at Root / DBRoot / PostgreSQL Commits: a52c8b06 by Bernardo Pavloski Tomasi at 2025-08-01T21:31:14-03:00 update - - - - - 2 changed files: - ansible/Containerfile - ansible/verify-hostnames.sh Changes: ===================================== ansible/Containerfile ===================================== @@ -6,7 +6,9 @@ RUN apt-get update RUN apt-get install --no-install-recommends -y \ python3 \ ansible \ + jq \ openssh-client \ + curl \ dnsutils ===================================== ansible/verify-hostnames.sh ===================================== @@ -36,7 +36,7 @@ verify_reverse_lookup() { local host="$1" local ip_addr="$2" - reverse=$(nslookup "$ip_addr" 2>/dev/null | awk '$2 == "name" { print $4 }') + reverse=$(dig -x "$ip_addr" @"$DNS_SERVER" +short 2>/dev/null) if [ -z "$reverse" ]; then echo " ! No reverse DNS found for $ip_addr" return 1 @@ -61,7 +61,9 @@ verify_hostname() { echo "Checking $host" local host=$1 - local ip_addrs=$(nslookup "$host" 2> /dev/null | awk '/^Address: / { print $2 }') + local ipv4=$(dig A "$host" @"$DNS_SERVER" +short 2> /dev/null) + local ipv6=$(dig AAAA "$host" @"$DNS_SERVER" +short 2> /dev/null) + local ip_addrs=("${ipv4[@]}" "${ipv6[@]}") if [ -n "$ip_addrs" ]; then for ip_addr in $ip_addrs; do View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/a52… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/a52… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dbroot/postgresql-sync-config][main] Containerfile added
by bpt22 (＠bpt22) 01 Ago '25

01 Ago '25

bpt22 pushed to branch main at Root / DBRoot / PostgreSQL Commits: 687d6e0b by Bernardo Pavloski Tomasi at 2025-08-01T20:21:20-03:00 Containerfile added - - - - - 2 changed files: - .gitlab-ci.yml - + ansible/Containerfile Changes: ===================================== .gitlab-ci.yml ===================================== @@ -5,6 +5,7 @@ stages: default: + image: "harbor.c3sl.ufpr.br/root/postgresql-sync-base:latest" tags: - default-kube ===================================== ansible/Containerfile ===================================== @@ -0,0 +1,35 @@ +FROM debian:stable-slim + +ARG DEBIAN_FRONTEND=noninteractive + +RUN apt-get update +RUN apt-get install --no-install-recommends -y \ + python3 \ + ansible \ + openssh-client \ + dnsutils + + +RUN apt-get clean && \ + apt-get autoremove && \ + rm -rf /var/lib/apt/lists/* + + +RUN rm -rf \ + /usr/share/doc/* \ + /usr/share/doc-base/* \ + /usr/share/man/* \ + /usr/share/locale/* \ + /usr/share/info/* \ + /usr/share/lintian/* \ + /var/cache/* \ + /var/lib/apt/lists/* \ + /var/tmp/* \ + /tmp/* + + +WORKDIR / + + +CMD ["tail", "-f", "/dev/null"] + View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/687… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/687… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dbroot/postgresql-sync-config][main] gitlab-ci updated
by bpt22 (＠bpt22) 01 Ago '25

01 Ago '25

bpt22 pushed to branch main at Root / DBRoot / PostgreSQL Commits: 69a4a10e by Bernardo Pavloski Tomasi at 2025-08-01T19:40:10-03:00 gitlab-ci updated - - - - - 1 changed file: - .gitlab-ci.yml Changes: ===================================== .gitlab-ci.yml ===================================== @@ -43,12 +43,11 @@ sync: - | cd ansible - ansible-playbook main.yml -i inv.ini --private-key ../key - #if ./verify-hostnames.sh ../pg_hba.conf; then - # ansible-playbook main.yml -i inv.ini --private-key ../key - #else - # exit 1 - #fi + if ./verify-hostnames.sh ../pg_hba.conf; then + ansible-playbook main.yml -i inv.ini --private-key ../key + else + exit 1 + fi rules: - if: '$CI_COMMIT_BRANCH == "main"' View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/69a… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/69a… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dbroot/postgresql-sync-config][main] hostname verification added
by bpt22 (＠bpt22) 01 Ago '25

01 Ago '25

bpt22 pushed to branch main at Root / DBRoot / PostgreSQL Commits: bb54e8c1 by Bernardo Pavloski Tomasi at 2025-08-01T19:37:27-03:00 hostname verification added - - - - - 1 changed file: - ansible/verify-hostnames.sh Changes: ===================================== ansible/verify-hostnames.sh ===================================== @@ -1,17 +1,29 @@ #!/bin/sh -set -x - pg_hba="$1" # Extrair hostnames não-IP e não-localhost hostnames=$( awk ' - $1 == "hostssl" && - $4 != "" && - $4 != "localhost" && - $4 !~ /^([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]+)?$/ && - $4 !~ /:/ { print $4 } +function is_ipv4(addr) { + return (addr ~ /^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+(\/[0-9]+)?$/) +} + +$1 == "hostssl" { + addr = $4 + + # Ignora se for vazio, localhost ou conter ":" + if (addr == "" || addr == "localhost" || index(addr, ":") > 0) { + next + } + + # Ignora se for IP (com ou sem máscara) + if (is_ipv4(addr)) { + next + } + + print addr +} ' "$pg_hba" ) View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/bb5… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/bb5… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dbroot/postgresql-sync-config][main] gitlab-ci hostname verification removed [skip ci]
by bpt22 (＠bpt22) 01 Ago '25

01 Ago '25

bpt22 pushed to branch main at Root / DBRoot / PostgreSQL Commits: a6fda0ce by Bernardo Pavloski Tomasi at 2025-08-01T18:16:14-03:00 gitlab-ci hostname verification removed [skip ci] - - - - - 1 changed file: - .gitlab-ci.yml Changes: ===================================== .gitlab-ci.yml ===================================== @@ -43,11 +43,12 @@ sync: - | cd ansible - if ./verify-hostnames.sh ../pg_hba.conf; then - ansible-playbook main.yml -i inv.ini --private-key ../key - else - exit 1 - fi + ansible-playbook main.yml -i inv.ini --private-key ../key + #if ./verify-hostnames.sh ../pg_hba.conf; then + # ansible-playbook main.yml -i inv.ini --private-key ../key + #else + # exit 1 + #fi rules: - if: '$CI_COMMIT_BRANCH == "main"' View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/a6f… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/a6f… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] add honey.c3local (J. Armenio - 118)
by Bruno Sime Ferreira Nunes (＠bsfn19) 01 Ago '25

01 Ago '25

Bruno Sime Ferreira Nunes pushed to branch main at Root / Serviços / DNS Commits: 9151e31a by Bruno Sime at 2025-08-01T16:45:10-03:00 add honey.c3local (J. Armenio - 118) - - - - - 2 changed files: - interna-254.10.in-addr.arpa.zone - interna-c3local.zone Changes: ===================================== interna-254.10.in-addr.arpa.zone ===================================== @@ -263,6 +263,7 @@ $TTL 21600 32.228 IN PTR b16.c3local. 32.229 IN PTR feio.c3local. 32.234 IN PTR k32.c3local. +33.221 IN PTR honey.c3local. 33.223 IN PTR h5.c3local. 33.228 IN PTR b17.c3local. 33.229 IN PTR murilo.c3local. @@ -447,4 +448,4 @@ $TTL 21600 249.227 IN PTR mojito7.c3local. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754073272 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754077314 86400 7200 2592000 3600 ===================================== interna-c3local.zone ===================================== @@ -71,7 +71,7 @@ brioja IN A 10.254.221.54 buxfox IN A 10.254.237.8 @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754073272 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754077314 86400 7200 2592000 3600 caio IN A 10.254.221.1 calvin IN A 10.254.229.6 carate IN A 10.254.221.43 @@ -187,6 +187,7 @@ hardy IN A 10.254.241.6 harley IN A 10.254.241.8 hipes-cockpit IN A 10.254.249.74 hipes13 IN A 10.254.227.244 +honey IN A 10.254.221.33 hyme IN A 10.254.229.5 i21 IN A 10.254.224.48 i22 IN A 10.254.224.49 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/9151e31a558b970c38ae… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/9151e31a558b970c38ae… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dhcp][main] add honey (J. Armenio - 118)
by Bruno Sime Ferreira Nunes (＠bsfn19) 01 Ago '25

01 Ago '25

Bruno Sime Ferreira Nunes pushed to branch main at Root / Serviços / DHCP Commits: 27701e5e by Bruno Sime at 2025-08-01T16:43:18-03:00 add honey (J. Armenio - 118) - - - - - 1 changed file: - kea-dhcp4.conf Changes: ===================================== kea-dhcp4.conf ===================================== @@ -4206,6 +4206,12 @@ "ip-address": "10.254.221.32", "user-context": { "nextbox_ip_address_id": 2728 } }, + { + "hostname": "honey", + "hw-address": "60:C7:27:2C:79:47", + "ip-address": "10.254.221.33", + "user-context": { "nextbox_ip_address_id": 2729 } + }, { "hostname": "argon", "hw-address": "70:85:C2:08:87:02", View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/27701e5e85dc30dfbca… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/27701e5e85dc30dfbca… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dbroot/postgresql-sync-config][main] teste
by bpt22 (＠bpt22) 01 Ago '25

01 Ago '25

bpt22 pushed to branch main at Root / DBRoot / PostgreSQL Commits: c9dda222 by Bernardo Pavloski Tomasi at 2025-08-01T16:29:51-03:00 teste - - - - - 1 changed file: - ansible/verify-hostnames.sh Changes: ===================================== ansible/verify-hostnames.sh ===================================== @@ -1,5 +1,7 @@ #!/bin/sh +set -x + pg_hba="$1" # Extrair hostnames não-IP e não-localhost View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/c9d… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/c9d… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dbroot/postgresql-sync-config][main] hostname verification added [skip ci]
by bpt22 (＠bpt22) 01 Ago '25

01 Ago '25

bpt22 pushed to branch main at Root / DBRoot / PostgreSQL Commits: 01114cf1 by Bernardo Pavloski Tomasi at 2025-08-01T16:23:45-03:00 hostname verification added [skip ci] - - - - - 3 changed files: - .gitlab-ci.yml - + ansible/verify-hostnames.sh - pg_hba.conf Changes: ===================================== .gitlab-ci.yml ===================================== @@ -41,13 +41,21 @@ sync: exit 1 fi - - cd ansible - - ansible-playbook main.yml -i inv.ini --private-key ../key + - | + cd ansible + if ./verify-hostnames.sh ../pg_hba.conf; then + ansible-playbook main.yml -i inv.ini --private-key ../key + else + exit 1 + fi rules: - - changes: - - "pg_hba.conf" - - "postgresql.conf" + - if: '$CI_COMMIT_BRANCH == "main"' + changes: + - "pg_hba.conf" + - "postgresql.conf" + when: always + - when: never variables: ===================================== ansible/verify-hostnames.sh ===================================== @@ -0,0 +1,72 @@ +#!/bin/sh + +pg_hba="$1" + +# Extrair hostnames não-IP e não-localhost +hostnames=$( +awk ' + $1 == "hostssl" && + $4 != "" && + $4 != "localhost" && + $4 !~ /^([0-9]{1,3}\.){3}[0-9]{1,3}(\/[0-9]+)?$/ && + $4 !~ /:/ { print $4 } +' "$pg_hba" +) + + +# +# verify_reverse_lookup +# +verify_reverse_lookup() { + + local host="$1" + local ip_addr="$2" + + reverse=$(nslookup "$ip_addr" 2>/dev/null | awk '$2 == "name" { print $4 }') + if [ -z "$reverse" ]; then + echo " ! No reverse DNS found for $ip_addr" + return 1 + fi + + echo " Reverse: $reverse" + if expr "$reverse" : ".*$host" > /dev/null; then + echo " ✔ Reverse DNS matches hostname" + return 0 + else + echo " ✘ Reverse DNS does NOT match hostname" + return 1 + fi +} + + +# +# verify_hostname +# +verify_hostname() { + + echo "Checking $host" + + local host=$1 + local ip_addrs=$(nslookup "$host" 2> /dev/null | awk '/^Address: / { print $2 }') + + if [ -n "$ip_addrs" ]; then + for ip_addr in $ip_addrs; do + echo " > Resolved IP: $ip_addr" + if ! verify_reverse_lookup "$host" "$ip_addr"; then + return 1 + fi + done + else + echo " > Could not resolve any IP addresses" + return 1 + fi +} + + +for host in $hostnames; do + if ! verify_hostname "$host"; then + echo "Verification failed" + exit 1 + fi +done + ===================================== pg_hba.conf ===================================== @@ -71,9 +71,9 @@ hostssl pnld_administrativo painelpnld pnldprod.c3sl.ufpr.br s # Ademir hostssl ademir ademir 10.254.221.0/24 scram-sha-256 hostssl ademir_dev ademir 10.254.221.0/24 scram-sha-256 -hostssl ademir ademir ademir.c3sl.ufpr.br scram-sha-256 -hostssl ademir_dev ademir ademir.c3sl.ufpr.br scram-sha-256 -hostssl ademir_dev ademir gitlabrunner.c3sl.ufpr.br scram-sha-256 +#hostssl ademir ademir ademir.c3sl.ufpr.br scram-sha-256 +#hostssl ademir_dev ademir ademir.c3sl.ufpr.br scram-sha-256 +#hostssl ademir_dev ademir gitlabrunner.c3sl.ufpr.br scram-sha-256 hostssl ademir_dev ademir wrk1-k8stest.c3sl.ufpr.br scram-sha-256 hostssl ademir_dev ademir wrk2-k8stest.c3sl.ufpr.br scram-sha-256 hostssl ademir_dev ademir wrk3-k8stest.c3sl.ufpr.br scram-sha-256 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/011… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/011… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] add new machines (lenovo)
by Bruno Sime Ferreira Nunes (＠bsfn19) 01 Ago '25

01 Ago '25

Bruno Sime Ferreira Nunes pushed to branch main at Root / Serviços / DNS Commits: 8d5b3e6c by Bruno Sime Ferreira Nunes at 2025-08-01T15:43:14-03:00 add new machines (lenovo) - - - - - 2 changed files: - interna-254.10.in-addr.arpa.zone - interna-c3local.zone Changes: ===================================== interna-254.10.in-addr.arpa.zone ===================================== @@ -112,6 +112,7 @@ $TTL 21600 11.222 IN PTR swamp.c3local. 11.225 IN PTR j7.c3local. 11.228 IN PTR a7.c3local. +11.229 IN PTR todt25.c3local. 11.234 IN PTR k11.c3local. 11.237 IN PTR melchior.c3local. 11.238 IN PTR rantanplan.c3local. @@ -228,30 +229,36 @@ $TTL 21600 26.229 IN PTR zappa.c3local. 26.234 IN PTR k26.c3local. 26.236 IN PTR odin.c3local. +27.221 IN PTR apsrc3.c3local. 27.225 IN PTR j23.c3local. 27.228 IN PTR b11.c3local. 27.234 IN PTR k27.c3local. 27.236 IN PTR nidhogg.c3local. +28.221 IN PTR loski.c3local. 28.225 IN PTR j24.c3local. 28.228 IN PTR b12.c3local. 28.234 IN PTR k28.c3local. 28.236 IN PTR random.c3local. +29.221 IN PTR perdido.c3local. 29.223 IN PTR h1.c3local. 29.225 IN PTR j25.c3local. 29.228 IN PTR b13.c3local. 29.234 IN PTR k29.c3local. 29.236 IN PTR batatinha.c3local. +30.221 IN PTR tapan.c3local. 30.223 IN PTR h2.c3local. 30.228 IN PTR b14.c3local. 30.232 IN PTR shorty.c3local. 30.234 IN PTR k30.c3local. 30.236 IN PTR montaro.c3local. +31.221 IN PTR alanpa.c3local. 31.223 IN PTR h3.c3local. 31.225 IN PTR j27.c3local. 31.228 IN PTR b15.c3local. 31.229 IN PTR elenice.c3local. 31.234 IN PTR k31.c3local. 31.236 IN PTR pegasus.c3local. +32.221 IN PTR hambre.c3local. 32.223 IN PTR h4.c3local. 32.228 IN PTR b16.c3local. 32.229 IN PTR feio.c3local. @@ -440,4 +447,4 @@ $TTL 21600 249.227 IN PTR mojito7.c3local. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1753994147 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754073272 86400 7200 2592000 3600 ===================================== interna-c3local.zone ===================================== @@ -12,6 +12,7 @@ a8 IN A 10.254.228.12 a9 IN A 10.254.228.13 a10 IN A 10.254.228.14 a11 IN A 10.254.228.15 +alanpa IN A 10.254.221.31 algoritmo IN A 10.254.241.14 alpha137 IN A 10.254.221.5 amanda-097 IN A 10.254.221.4 @@ -19,6 +20,7 @@ amanda IN A 10.254.237.12 amantino IN A 10.254.227.213 anter IN A 10.254.221.2 apophis IN A 10.254.221.62 +apsrc3 IN A 10.254.221.27 argon IN A 10.254.221.34 auditoriopos IN A 10.254.254.5 averell IN A 10.254.238.13 @@ -69,7 +71,7 @@ brioja IN A 10.254.221.54 buxfox IN A 10.254.237.8 @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1753994148 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754073272 86400 7200 2592000 3600 caio IN A 10.254.221.1 calvin IN A 10.254.229.6 carate IN A 10.254.221.43 @@ -180,6 +182,7 @@ h59 IN A 10.254.223.87 h60 IN A 10.254.223.88 hades IN A 10.254.236.23 halls IN A 10.254.221.18 +hambre IN A 10.254.221.32 hardy IN A 10.254.241.6 harley IN A 10.254.241.8 hipes-cockpit IN A 10.254.249.74 @@ -300,6 +303,7 @@ l12 IN A 10.254.250.22 l13 IN A 10.254.250.23 leffe IN A 10.254.222.14 loki IN A 10.254.236.33 +loski IN A 10.254.221.28 lucas IN A 10.254.232.7 mah IN A 10.254.226.5 mamao IN A 10.254.237.10 @@ -340,6 +344,7 @@ penkal IN A 10.254.232.9 penkal2 IN A 10.254.255.14 penkal3 IN A 10.254.255.15 penkal4 IN A 10.254.232.8 +perdido IN A 10.254.221.29 perseu IN A 10.254.248.5 pilheira1-ipmi IN A 10.254.249.62 pilheira1 IN A 10.254.249.1 @@ -389,6 +394,7 @@ stranger IN A 10.254.249.2 swamp IN A 10.254.222.11 talisker IN A 10.254.222.18 tane IN A 10.254.241.12 +tapan IN A 10.254.221.30 terminallarsis IN A 10.254.237.13 tesla1 IN A 10.254.249.80 tevelisao IN A 10.254.221.25 @@ -396,6 +402,7 @@ thanatos IN A 10.254.221.19 ticomico IN A 10.254.241.9 timao IN A 10.254.246.16 todt IN A 10.254.229.4 +todt25 IN A 10.254.229.11 trinca-ferro IN A 10.254.221.82 tuco IN A 10.254.222.17 turmalina IN A 10.254.221.46 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/8d5b3e6c0f5d346b092b… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/8d5b3e6c0f5d346b092b… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0