2023-09-10T00:05:18  <luc14n0> Does anyone know what purpose admin-auto at opensuse dot org is for?
2023-09-10T04:30:06  *** teepee_ is now known as teepee
2023-09-10T08:04:17  <acidsys> luc14n0 it's there system mail is sent to
2023-09-10T08:04:34  <acidsys> s/th/wh/
2023-09-10T12:36:22  <acidsys> cboltz: what is nftables-auto ?
2023-09-10T12:38:44  <acidsys> also I think nftables-service is overengineered. I use this on my nftables boxes: https://paste.opensuse.org/pastes/6292858fde0f, what do you think?
2023-09-10T12:38:53  <cboltz> good question, I'm not really sure
2023-09-10T12:39:21  <cboltz> if I get /usr/sbin/nftables-service right, the ruleset gets saved on "stop" and restored on "start"
2023-09-10T12:40:13  <cboltz> if in doubt, ask darix - AFAIK he's the author of that script/package
2023-09-10T12:40:54  <acidsys> diff-ing the two configs on scar shows a lot of differences
2023-09-10T12:41:25  <acidsys> hm okey
2023-09-10T12:41:56  <cboltz> big parts of the difference is probably that all the define $IP_LIST get inlined
2023-09-10T12:42:19  <cboltz> (but I didn't check if there are more/other differences)
2023-09-10T12:43:55  <acidsys> aha .. the list ruleset might just be reformatting it
2023-09-10T12:44:16  <acidsys> hmm I guess it's useful if you inject dynamic rules with nft
2023-09-10T12:44:33  <cboltz> right, reformatting also makes diffing harder
2023-09-10T12:44:33  <acidsys> but I personally rather have dynamic rules stay dynamic
2023-09-10T12:44:45  <acidsys> similar to firewall-cmd without --permanent.. I expect it to get lost on restart
2023-09-10T12:45:27  <acidsys> guess it's an opinionated wrapper
2023-09-10T15:28:27  *** teepee_ is now known as teepee
2023-09-10T17:25:54  <luc14n0> acidsys: OK. So system mails are sent to there. And then what, where does it end up?
2023-09-10T17:31:50  <cboltz> in your mailbox, if you subscribe to admin-auto@lists.o.o
2023-09-10T17:33:50  <luc14n0> Ah, we can subscribe. Thanks for the info.
2023-09-10T17:35:12  <luc14n0> BTW poor slimhat is bleeding all over Icinga and seems unreachable.
2023-09-10T17:36:50  <luc14n0> Yeah, no SSH-able.
2023-09-10T17:57:38  <acidsys> slimhat AFAIK is only reachable from a SUSE office network :-/
2023-09-10T17:57:45  <acidsys> (SSH that is)
2023-09-10T17:59:46  <acidsys> but you should be able to reach it via Salt
2023-09-10T18:04:21  <luc14n0> Alright, that's good to know (even though I don't think I can do much via Salt, anyway).
2023-09-10T18:05:39  <acidsys> pretty much everything because the salt minion runs as root .. whether it's convenient.. questionable :-)
2023-09-10T18:10:04  <luc14n0> Hmm, hmm, hmmmm! Didn't know that either.
2023-09-10T18:10:59  <luc14n0> I gotta level up my Salt skills :~p
2023-09-10T18:28:15  <acidsys> the salt formula is actually quite simple. do you know it?
2023-09-10T18:28:54  <luc14n0> I do not.
2023-09-10T18:29:02  <acidsys> take Na and add Cl
2023-09-10T18:30:22  <luc14n0> And do I need to run it on the salt-master?
2023-09-10T18:30:50  * luc14n0 already opened docs.saltproject.io in his browser.
2023-09-10T18:41:58  <luc14n0> I see minnie does have the salt-minion service running.
2023-09-10T18:45:57  * luc14n0 is learning that Salt formulas apparently are not run, but written!
2023-09-10T19:17:29  <acidsys> sorry, it was a bad chemistry joke :)
2023-09-10T19:18:23  <acidsys> but I see it got you into reading into Salt, so that's good I suppose
2023-09-10T19:20:59  <luc14n0> Actually that's a good one. You got me.
2023-09-10T19:23:40  <luc14n0> And I'm almost finishing DigitalOcean's intro on SaltStack Terminology and Concepts :~D
2023-09-10T20:23:09  <acidsys> :-)
2023-09-10T22:08:30  *** teepee_ is now known as teepee