Freifunk

Freifunk

• Forum
• Wiki
• Internes Wiki
• GitHub

Firmware signieren

cd ~/Freifunk/manifest-ffms
git pull
./sign.sh ../firmware-secret site-ffms 191 stable

Administration

• https://forum.freifunk-muensterland.de/t/admintagebuch-dokumentation-der-admintaetigkeiten/75/15
• https://freifunk-muensterland.de/wiki/doku.php?id=technik:gateway
• https://mpw.no-ip.biz/freifunk/münster-stadt/
• https://github.com/FreiFunkMuenster/site-ffms/tree/Münster-Stadt
• Backbone-Rechner:
  • ssh root@parad0x.gw.freifunk-muenster.de
• Des-Gateways: 5.9.86.144 und 5.9.86.145
• Ansible-Host: ssh root@ffhost01.yadn.de -p 222
• Map-Merger: ssh root@2a01:4f8:162:10d2:5:23:d0:0f http://ffms-map.fungur.eu/map/
• Service-VM: ssh root@89.163.231.228 http://89.163.231.228/map/
• Legacy-Servcie-VM: ssh root@217.79.181.126 -p 2210
• Firmware-Server: ssh root@firmware.freifunk-muensterland.org -p 223

Hosts

erzeugt durch cat /data/src/ffm/ansible-ffms/hosts | sed -e 's/ansible_ssh_host=/ssh root@/' -e 's/ansible_ssh_port=/-p /'

 
# Allgemeine Infrastruktur-Server 
[common]
buildserver ssh root@217.79.181.126 -p 2215
monitoring  ssh root@178.62.2.100
services-legacy ssh root@217.79.181.126 -p 2210
webserver   ssh root@89.163.231.227

# Service-VM für Zentrale Dienste (Karte, Statistik)  
[services]
services    ssh root@89.163.231.228

# Backbone Server 
[backbone]
c1024    ssh root@176.9.88.123
fanlin   ssh root@89.163.221.125 
parad0x  ssh root@5.9.67.189

# Supernode Server 
[supernodes]
sn-fanlin-1   ssh root@85.14.245.16
sn-fanlin-2   ssh root@213.202.222.143
fussel        ssh root@37.120.168.53
sn-parad0x-1  ssh root@5.9.166.66
sense         ssh root@176.221.46.161
sn-sense-4    ssh root@134.119.42.10 
sn-descilla-1 ssh root@5.9.86.154
# sn-descilla-2 ssh root@5.9.86.145
sn-kgbvax-2   ssh root@136.243.99.72
sn-kgbvax-3   ssh root@136.243.99.49

[domaene-01]
#remue-01	ssh root@148.251.208.170
greyworm-01     ssh root@89.163.247.45
sense-02	ssh root@134.119.20.233

[domaene-02]
greyworm-02     ssh root@89.163.247.46
sense-03	ssh root@134.119.36.210 

[domaene-test]
test-des1	ssh root@5.9.86.144
test-des2	ssh root@5.9.86.145

# Sonstige Server
[ffms-arbeitsmittel]
ffms-ansible    ssh root@148.251.208.168

[ffms-mapserver]
ffms-map    ssh root@2a01:4f8:162:10d2:5:23:d0:0f

Sonstiges

• https://freifunk-muensterland.de/wiki/doku.php?id=intern:ssh-logging
• Gateway-Einrichtung mit systemd-units in Fulda: https://wiki.mag.lab.sh/wiki/Freifunk_Fulda/Gateway/NG#Einwahlknoten_f.C3.BCr_fastd

Ausgeführte Befehle

git clone https://github.com/FreiFunkMuenster/ffmap-backend
apt install python3-bs4

Knoten umziehen

uci add_list autoupdater.stable.mirror=http://[2a01:4f8:162:10d2:5:23:d0:0f]/site-ffms/stable/sysupgrade
uci del_list autoupdater.stable.mirror=http://firmware.ffms/site-ffms/stable/sysupgrade
uci set autoupdater.stable.good_signatures=0
uci commit
autoupdater

Temp

letsencrypt-Zertifikat auf service einrichten:

cd /usr/src
git clone https://github.com/kuba/simp_le
cd simp_le/
./bootstrap.sh
  # macht eigentlich nur: apt-get install -y --no-install-recommends ca-certificates gcc libssl-dev libffi-dev python python-dev virtualenv
./venv.sh
export PATH=/usr/src/simp_le/venv/bin:$PATH
cd /etc/ssl
simp_le --email ffms@fungur.eu -f account_key.json -f key.pem -f fullchain.pem -d service.freifunk-muensterland.de:/var/www/html -d karte.freifunk-muensterland.org:/var/www/html/maps

Tunnel-Ping-Test

- name: execute gretunnel test on gateways                                                                                                      │·····
  command: ping -c1 192.168.{{domaenen_id*10 + hostvars[item].server_id}}.{{server_id*4+1}}                                                     │·····
  with_items: groups['backbone']                                                                                                                │·····
  register: localping_result                                                                                                                    │·····
  ignore_errors: yes                                                                                                                            │·····
  failed_when: "localping_result.rc == 1"                                                                                                       │·····
  changed_when: "1 == 'JustNeverBeStatusChanged'"       

---

KategorieWissen