2 ** DONE Get tunnel & subnet from mur.at for testing [2/2]
3 *** DONE Get approval from mur.at
4 CLOSED: [2018-06-01 Fri 20:29]
8 IPv6: 2a02:3e0:4001::/48
9 IPIP Tunnel Endpoint: 10.12.240.246
10 ** TODO Create new VLANs [1/3]
11 *** DONE mgmt VLAN 32 (aka new managemnt VLAN)
13 *** TODO Finish converting plan to diagram & push to ikiwiki
15 *** TODO Remaining VLANs
16 Assigned: equinox (waiting for nicoo to upload the diagram)
17 ** TODO Bring gnocchi online [0/2]
18 *** TODO Move gnocchis to the rack in W1
21 **** DONE Adapt vm/setup to be able to bring up Gnocci VMs
22 CLOSED: [2018-06-17 Sun 12:32]
24 vm/setup had implicit assumptions about network which might not have
25 held when installing core network VMs on gnocci
27 It now only needs connectivity on the VM's primary interface,
28 to the configured debian mirror.
30 **** TODO Prepare preseed installs for gnocchis
33 Generate preseed in Ansible, concat to initramfs.
35 **** TODO 1 if -> mgmt, 2 if -> lacp -> tagged VLANs
36 **** TODO Basic services on hypervisor [2/3]
40 CLOSED: [2018-06-08 Sun 21:24]
41 ***** DONE Provide time & entropy to guests
42 CLOSED: [2018-06-08 Sun 21:24]
44 **** TODO Get the vm-host role working there
45 **** TODO Move gw to a gnocchi VM
46 Clone the VM, run with the legacy VLANs
47 **** TODO VMs for firewaling & basic net services (1/subnet)
48 Sit directly on the service LAN (original /27)
49 ***** TODO Figure out best way to virtualize OpenWRT
51 **** TODO VMs for critical services [0/4]
52 ***** TODO DNS resolver
54 ***** TODO Authoritative NS for realraum.at
56 ***** TODO Authn/authz [0/2]
59 ***** TODO netboot.xyz
61 ** Switch to a wireguard tunnel
62 *** Upgrade r2ko to LEDE
63 **** Forward-port murtun
66 ** Hardware RNG & key storage
67 *** Design miniPCIe PCB for Flying Stone 1
70 *** Forward key intarface to guests