Lorenz Brun

There are a number of warts/open questions related to the blockdev design: See also code at https://review.monogon.dev/c/monogon/+/1873 1. Blocks vs bytes and alignment * Most arguments are bytes, which must...

BMDB Flake

1

``` INFO: From Testing //cloud/bmaas/bmdb:bmdb_test: ==================== Test output for //cloud/bmaas/bmdb:bmdb_test: I0420 22:04:35.221962 19 connection.go:21] Using default migrations source. W0420 22:04:35.222080 19 crdb.go:77] STARTING IN-MEMORY COCKROACHDB FOR TESTS W0420 22:04:35.222085 19...

There are a lot of non-Metropolis-specific packages currently in //metropolis/pkg like supervisor, logtree and a few kernel interfaces. We should go through them and decide which ones we should move...

We currently include our CA root store from curl, which while trustworthy in general is still suboptimal from a security PoV. Curl in turn generates them from Mozilla's certdata.txt which...

Currently the Bonding network configuration just supports LACP and Active/Backup modes, because these are the most common. Linux supports a whole bunch more, we should maybe support some of those...

Supervisor test flake

2

``` --- FAIL: TestResilience (6.94s) supervisor_test.go:457: one ping response timeout FAIL ```

Joining can get stuck

1

https://jenkins.monogon.dev/blue/rest/organizations/jenkins/pipelines/gerrit-presubmit-monogon/branches/18%252F818%252F2/runs/1/nodes/7/steps/33/log/?start=0 ``` 01| root.enrolment I0705 15:36:27.999995 cluster.go:111] Sealed configuration present. attempting to join cluster 01| root.enrolment I0705 15:36:28.000178 cluster_join.go:36] Joining an existing cluster. 01| root.enrolment I0705 15:36:28.000182 cluster_join.go:37] Node Join...

Binary releases

2

This is just a tracking issue to gauge interest in binary releases. If you're interested, please comment below (and how/if you want automatic updates).

node: patch out/disable etcd certificate PTR "validation"

2

etcd has this [weird extra client certificate verification step](https://github.com/etcd-io/etcd/blob/main/client/pkg/transport/listener_tls.go#L192) which looks up the PTR record of the connecting IP and checks if it is in the client certificate SAN. This...

metroctl: hangs if CA doesn't match

1

Since we now verify the cluster CA (with the TOFU work) metroctl operations hang silently if the CA doesn't match the cluster being connected to. ``` 2024/05/27 23:59:29 INFO: [core]...