• English version
  • Version française
  • Versión española

Latest news

TuxFamily to improve its security

Posted on Wednesday 1 April 2015

TuxFamily never ceased to drum it, security, and especially I.T. security, is everyone's matter ! The various vulnerabilities disclosed all throughout the epic year 2014 definitely proved that a careful monitoring of the subject is essential.

Alas, this matter too often remains neglected by many hostees with regards to web applications installed at TuxFamily's (blog engines, bugtrackers, Mediawiki, Drupal, WordPress, PunBB, etc.). Yet no one can deny that an outdated application is a vector to send massive amounts of spam as well as hosting phishing pages or even exploit local vulnerabilities that just ask to be discovered, published and exploited (not necessarily in this order)!

On the other hand, TuxFamily's resources, particularly human ones, remain limited: a single person hobbles along with the platform administration (as a benevolent on free time, of course) while the moderation process is statistically handled by 1.27 persons exactly. BEA figures, February 2015. Anyway, it has become vital to take action.

That's the reason why your beloved hosters are currently designing a tool basically named vhffs_rotvacuum. It will run every week on the plateform in order to detect and desactivate webspaces whose software may not be up-to-date.

Fully aware that such a change cannot be brought so suddenly, its deployment shall happen in several steps:

  • Apr 2015: simple notification to the owner of concerned group/project
  • May 2015: webspaces not updated are disabled after a grace delay of 15 days after security updates are published
  • Jun 2015: deletion of webspaces considered outdated, grace delay kept at 15 days
  • Sep 2015: grace delay will be lowered to 7 days for standard security updates, 1 day for critical ones.

The TuxFamily team kindly reminds you that their set of services does not include full-fledged backups.

We sincerely hope these measures will help keep the maintenance workload of the platform at its lowest and, hence, ensure its durability.

The TuxFamily.org team

Edit: Of course it was our yearly April fool joke ;-)

VHFFS 4.5.0 Released

Posted on Sunday 8 March 2015, at 13:43 UTC

VHFFS, the software which energize TuxFamily, was released a few months ago, featuring at least the new mail panel.

Of course, as TuxFamily follows almost day-to-day the VHFFS trunk, we are already running it !

Now using cgit instead of gitweb

Posted on Sunday 25 January 2015, at 22:52 UTC

This was planned a long time ago, here we are, we are now using cgit instead of gitweb, and really should have done that before !

Oh, by the way, while you are here, CVS pserver anonymous access no longer work (for months) because cvs-pserver was removed from Debian in Wheezy, looks like nobody care :P

Web service down

Posted on Sunday 23 November 2014, at 11:14 UTC

We are currently having an issue with the main storage server, which among other things host SQL servers. Luckily enough it is still able to provide data, so almost everything is up, except websites using SQL.

Edit 2014-11-23 12:25 UTC: Ok, out of memory killer finally killed MySQL, so it was no more than MySQL going nuts. Some databases are marked as crashed and must be repaired, which is currently in progress.

Edit 2014-11-23 13:30 UTC: MySQL repair finished, everything should be back.

Downloads master down

Posted on Saturday 19 July 2014, at 21:53 UTC

We are currently experiencing an outage on the download repositories master. We will keep you in touch.

Edit 2014-07-20 14:39 UTC: Not a good news, the server is dead, probably due to an overheat condition, we will try to reach the server tomorrow with new hardware.

Edit 2014-07-22 08:40 UTC: Yeah, we did not reach the server yesterday, we know, we know. We got the opportunity to be given new hardware way better than expected and we are currently testing it, furthermore we are going for a cheap shared trip at the end of the week to replace the server.

Edit 2014-07-25 10:00 UTC: New hardware in production, everything should be back ! :)

Edit 2014-07-25 16:48 UTC: Finally, all slaves finished syncing, they are all back in the download pool.

Everything upgraded to Debian Wheezy

Posted on Monday 14 July 2014, at 17:21 UTC

Here we are, all services are now running Debian Wheezy.

Web upgraded to Debian Wheezy

Posted on Sunday 6 July 2014, at 00:23 UTC

Here we are, we did the first step of the upgrade of everything to Debian Wheezy this evening which should have been done months ago, web servers are now running Debian Wheezy.

If anything goes wrong and if you cannot manage to fix your stuff yourself, contact us.

Secondary services down

Posted on Wednesday 4 June 2014, at 08:40 UTC

Secondary services, like ns2 and mx2 are down due to a planned work on the host facilities.

What we know is "Unfortunately, a problem prevents us to put your server back.", we let you understand the real meaning :-)

Edit: We moved those services on a new location, everything is back !

Tuxfamily will be at Solutions Linux 2014 !

Posted on Sunday 18 May 2014, at 16:08 UTC

TuxFamily.org will be to the Solutions Linux 2014 event in Paris on May 20-21

Solutions Linux 2014 Logo

It will be a great time for all of us to meet, talk about your projects and to have some feedbacks on our hosting platform. You are all welcome in our cubicle for a coffee (or more !) We always enjoy having a special time with our hosted people so don't hesitate, come and have a talk with us.

Air conditioning failure

Posted on Thursday 3 April 2014, at 08:03 UTC

Everything is down since 02:00 UTC, secondary services (ns2 and mx2) are up, we are currently waiting for storage servers to be back.

Edit 2014-04-03 10:14 UTC: Everything should be back online.

RSS Feed