Network Infrastructure¶

What	Where	Access type	Who	Comments
Redmine instance	OSUOSL	Redmine manager	* Paul Kocialkowski * Wolfgang Wiedmeyer * GNUtoo * Joonas Kylmälä * Fil Bergamo * Kurtis Hanna * David Ludovino * OSUOSL system administrators	Since we only have one project, OSUOSL put in a redirect from the main page of our Redmine instance to /project/replicant OSUOSL keeps 2 weeks worth of backups for restoration purposes.
Mailing list		Mailing list administrator	* David Ludovino * GNUtoo * Joonas Kylmälä * Kurtis Hanna * Paul Kocialkowski * Wolfgang Wiedmeyer * OSUOSL system administrators	OSUOSL keeps 2 weeks worth of backups for restoration purposes.
Wordpress instance		Wordpress administator	* Paul Kocialkowski * Wolfgang Wiedmeyer * GNUtoo * Joonas Kylmälä * Fil Bergamo * Kurtis Hanna * David Ludovino * OSUOSL system administrators * Add your name here if you have access and want to be mentioned	This instance is auto-updated automatically with the help of a plugin.
Releases		SSH	* Paul Kocialkowski * Wolfgang Wiedmeyer * GNUtoo * Joonas Kylmälä * OSUOSL system administrators	We should not use too much space.
The replicant.us (mostly-static) front website		None: there is an automatic hook managed by OSUOSL.		* Source code * Patches should be sent to the Replicant mailing list. * There is a jenkins hook with a token to pull and deploy the website source code.
Replicant Source code	Virtual machine at FSF	SSH root access	* Paul Kocialkowski * GNUtoo * Joonas Kylmälä * Several FSF system administrators * FSF backup server * FSF Ansible deployment server	Resources kindly offered by the FSF. The git configuration has some documentation . Before handling SSH (root) access to this machine: * Make sure that the person really needs it. * Make sure that the person already contributed to Replicant. * Ask one other person that has SSH access and/or the SteeringCommittee to also agree on it.
Private contact address	Virtual machine at FSF	IMAP access	* GNUtoo * Joonas Kylmälä * Fil Bergamo * Kurtis Hanna * David Ludovino * Grim Kriegor	You can write to the contact address (all the members of SteeringCommittee receive it) if for some reasons you need to receive it as well.
#replicant IRC channels (all bridged)	Libera.Chat	Channel operator	* GNUtoo
	OFTC	Channel operator	* Kurtis Hanna * Jeremy Rand	Bridged to Matrix. Access via `#_oftc_#replicant:matrix.org`
	HackInt	Channel operator
	~~Freenode~~	Channel operator	* Paul Kocialkowski * GNUtoo * Joonas Kylmälä * Kurtis Hanna	Deprecated in favour of Libera.Chat Quiet mode for unregistered users is disabled for the time being. If SPAM comes back use: `/mode #replicant +qe $~a !@gateway/web/` and `/mode #replicant +qe $~a !@gateway/shell/matrix.org/` to re-apply it. These commands whitelist users coming through web based IRC clients and via the Matrix.org IRC bridge.
The replicant.us domain name	gandi.net	* Web inteface through gandi website * The DNS entries are configured to use gandi's DNS server	* Bradley Kuhn (administrative contact) : Can do everything (including designating the technical contact or transferring the domain) * GNUtoo (technical contact) : can do DNS zone changes * Other people? Paul Kocialkowski ?
The replicant.us TLS certificate	Let's Encrypt	Access probably by controlling the respective domain name	* https://www.replicant.us: OSUOSL * https://blog.replicant.us: OSUOSL * https://redmine.replicant.us: OSUOSL * https://git.replicant.us: ?	History: CA-cert -> GlobalSign -> LetsEncrypt
Mastodon account	Administred by La quadrature du net	Account only	* TODO: ask the person who created the account * The Private contact address address was used as the mail	See the Mastodon page for more details

OSUOSL¶

The OSUOSL is the Oregon State University Open Source Lab.

Contact:

They can be contacted on #osuosl on the Freenode IRC network
They also have a 'support' mail address at osuosl.org

Virtual machine in FSF's infrastructure¶

The virtual machine is hosted in a server that is in their office or in a datacenter.
Several FSF network administrator also have access to the virtual machine

Contact:

The 'sysadmin' mail address at gnu.org
The FSF system administrators can also be contacted on #fsfsys on the Freenode IRC network for more urgent matters

Virtual machine specifications¶

See VMSpecifications for the VM specifications.

Virtual machine backup policies¶

The virtual machine is backed up daily. The backup procedure excludes the following path at the time of writing:

/dev
/proc
/tmp
/sys
/run
/mnt
/mnt0
/mnt1
/mnt2
/mnt3
/mnt4
/mnt5
/mnt6
/mnt7
/mnt8
/mnt9
/floppy/
/cdrom/
/media/
/net/
/var/spool/squid/
/var/spool/squid3/
/var/spool/squid3_bak/
/var/spool/squid-tbd/
/var/spool/squid*/
/var/spool/django/
/var/spool/exim/
/var/cache/
/srv/chroot/
/t
/srv/to-tape
/var/lib/ceph/osd/
/var/lib/apt/lists/
/var/cache/apt/

git hosting infrastructure on this machine¶

The source code is in /srv/git/git-data/repositories and is divided in several groups:

Replicant source code
LineageOS mirror
AOSP mirror
Various developers repositories

function	software	documentation
authorization	gitolite	UpstrreamSourceCodeMirrors
read access	* git:// -> git daemon * ssh:// -> ssh daemon * https:// -> ? (TODO: document the software/configuration)
web	cgit	Cgit

Gandi¶

See https://en.wikipedia.org/wiki/Gandi for more details

GDPR¶

For GDPR related inquiries, you can write to the PrivateContact mail address.

TODO:¶

~~Ask the OSUOSL about backup policies.~~ The OSUOSL will do backup of the FTP for us.
Do our own backup policies and do some backups ourselves.
Contact the people that have some control of the resources above and ask for permission to mention them here
Fill the gaps (mentioned with '?') in this page
Look what happens when an account is deleted
Fix the related issues in the tracker
Move the entries of this TODO list to the tracker when it makes sense

Funding and legal entity¶

See the SteeringCommittee for more details.

Legal advise¶

Contact Zoë Kooyman at the FSF.

Note that Zoë Kooyman is not a lawyer but the FSF has lawyers.

Documentation¶

The Replicant infrastructure project has a Wiki with more documentation in it.