Debian 12 (bookworm) container for AI/ML services, media, and experimental applications.
Gallery is a container on [[SAC_Service_Status#osgeo7|osgeo7]] host.

'''Resources:''' 8 vCPUs, 12GB RAM
'''System services:''' nginx, redis, PostgreSQL 17, turnserver, php-fpm

'''Brian's services (darkblueb):'''
* GalleryVM media library
* llamafile experiments
* photoprism configuration

'''Lorenzo's services (ominiverdi):'''
* [[LLM-based Chat Assistant]]
* '''BGE-M3 Embedding Server''' - Semantic search embeddings via llama.cpp
** Port: 8094 (localhost only), Model: bge-m3-Q8_0.gguf
* [[Osgeo-library]]
* [[Osgeo-knowledge-base]]

The embedding model running on osgeo7-gallery is BGE-M3 (bge-m3-Q8_0.gguf), a multilingual model from BAAI supporting 100+ languages. It produces 1024-dimensional vectors and runs via llama-server on port 8094 (localhost only). The Q8_0 quantization keeps it light: 606 MB on disk, ~457 MB RAM, ~12ms per query.

'''Contact:''' darkblueb (Brian Hamlin), ominiverdi (Lorenzo Becchi) or SAC channel

[[Category:Infrastructure]]

Osgeo-library

2026-06-05T16:10:32Z

Strk:

osgeo-library''' - PDF figure/table/equation extraction and semantic search

** GitHub: https://github.com/ominiverdi/osgeo-library
** CLI command: <code>osgeo-library</code> (as ominiverdi user)

Osgeo-knowledge-base

2026-06-05T16:10:02Z

Strk: Created page with "OSGeo Knowledge Base - Automated wiki/WordPress/Planet content sync and processing GitHub: https://github.com/ominiverdi/osgeo-knowledge Cron: wiki (6h), WordPress (d..."

OSGeo Knowledge Base - Automated wiki/WordPress/Planet content sync and processing

GitHub: https://github.com/ominiverdi/osgeo-knowledge
Cron: wiki (6h), WordPress (daily), Planet (4h), chunk processing (hourly)

LLM-based Chat Assistant

2026-06-05T16:09:37Z

Strk: /* Usage */

An LLM-based chat assistant bot available in the [[Matrix|OSGeo Matrix space]].

== Access ==

The bot is available in the [[Matrix]] room <code>#lounge:osgeo.org</code>.
Its Matrix identifier is <code>@llm-assitant:matrix.org</code>.
The bot responds when mentioned (@llm-assitant:matrix.org) or when a line starts with <code>!oc</code> or <code>bot</code>.

== Administration ==

TBD

== Technical Details ==

* Host: [[SAC_Service_Status#osgeo7|osgeo7]]
* Container: [[Gallery_Container|Gallery]]
* Maintainer: [[User:Ominiverdi]]
* Source: https://github.com/ominiverdi/opencode-chat-bridge
* Language model: opencode/big-pickle (may change — ask the bot for current info)

== Usage ==

Ask a question, prefixing your question with <code>!oc</code> or <code>bot</code> or mentioning <code>@llm-assitant:matrix.org</code>;
the bot will respond, possibly using "tools", when it does, it prints the name of the tool too, among these:

* <code>[osgeo-knowledge_search_content]</code> -- TODO link to the corresponding service
* <code>[osgeo-knowledge_search_wiki]</code> -- TODO link to the corresponding service

... lorenzo ...

'''AI chat / MCP integration:'''

The chat assistant uses MCP servers to query local OSGeo services. Tool calls may be visible in chat logs using the pattern:

<pre>
> query=spam, limit=10 [osgeo-knowledge_search_content]
> query=spam, limit=10 [osgeo-knowledge_search_wiki]
</pre>

The prefix identifies the MCP server, and the suffix identifies the tool.

'''[[osgeo-knowledge-base]] MCP tools:'''
* <code>osgeo-knowledge_search_wiki</code> - Search AI-generated summaries and keywords
* <code>osgeo-knowledge_search_content</code> - Search raw page content chunks
* <code>osgeo-knowledge_search_entities</code> - Search people, projects, organizations, events
* <code>osgeo-knowledge_get_entity_relationships</code> - Query entity relationships
* <code>osgeo-knowledge_get_page</code> - Retrieve a full page by title
* <code>osgeo-knowledge_get_wiki_stats</code> - Show database and sync statistics

'''[[osgeo-library]] / doclibrary MCP tools:'''
* <code>search_documents</code> - Semantic search over document text and visual elements
* <code>search_visual_elements</code> - Search figures, tables, equations, charts, and diagrams
* <code>list_elements</code> - Browse document elements without semantic search
* <code>get_element_details</code> - Retrieve metadata for a visual element
* <code>get_element_image</code> - Retrieve a cropped element image
* <code>get_page_image</code> - Retrieve a full page image
* <code>get_document_info</code> - Show document metadata
* <code>find_document</code> - Find a document by name or query
* <code>list_documents</code> - List indexed documents
* <code>get_library_status</code> - Check document library service status

[[Category:Services]]

LLM-based Chat Assistant

2026-06-05T16:08:53Z

Strk: /* Usage */

An LLM-based chat assistant bot available in the [[Matrix|OSGeo Matrix space]].

== Access ==

The bot is available in the [[Matrix]] room <code>#lounge:osgeo.org</code>.
Its Matrix identifier is <code>@llm-assitant:matrix.org</code>.
The bot responds when mentioned (@llm-assitant:matrix.org) or when a line starts with <code>!oc</code> or <code>bot</code>.

== Administration ==

TBD

== Technical Details ==

* Host: [[SAC_Service_Status#osgeo7|osgeo7]]
* Container: [[Gallery_Container|Gallery]]
* Maintainer: [[User:Ominiverdi]]
* Source: https://github.com/ominiverdi/opencode-chat-bridge
* Language model: opencode/big-pickle (may change — ask the bot for current info)

== Usage ==

Ask a question, prefixing your question with <code>!oc</code> or <code>bot</code> or mentioning <code>@llm-assitant:matrix.org</code>;
the bot will respond, possibly using "tools", when it does, it prints the name of the tool too, among these:

* <code>[osgeo-knowledge_search_content]</code> -- TODO link to the corresponding service
* <code>[osgeo-knowledge_search_wiki]</code> -- TODO link to the corresponding service

... lorenzo ...

'''AI chat / MCP integration:'''

The chat assistant uses MCP servers to query local OSGeo services. Tool calls may be visible in chat logs using the pattern:

<pre>
> query=spam, limit=10 [osgeo-knowledge_search_content]
> query=spam, limit=10 [osgeo-knowledge_search_wiki]
</pre>

The prefix identifies the MCP server, and the suffix identifies the tool.

'''osgeo-knowledge MCP tools:'''
* <code>osgeo-knowledge_search_wiki</code> - Search AI-generated summaries and keywords
* <code>osgeo-knowledge_search_content</code> - Search raw page content chunks
* <code>osgeo-knowledge_search_entities</code> - Search people, projects, organizations, events
* <code>osgeo-knowledge_get_entity_relationships</code> - Query entity relationships
* <code>osgeo-knowledge_get_page</code> - Retrieve a full page by title
* <code>osgeo-knowledge_get_wiki_stats</code> - Show database and sync statistics

'''[[osgeo-library]] / doclibrary MCP tools:'''
* <code>search_documents</code> - Semantic search over document text and visual elements
* <code>search_visual_elements</code> - Search figures, tables, equations, charts, and diagrams
* <code>list_elements</code> - Browse document elements without semantic search
* <code>get_element_details</code> - Retrieve metadata for a visual element
* <code>get_element_image</code> - Retrieve a cropped element image
* <code>get_page_image</code> - Retrieve a full page image
* <code>get_document_info</code> - Show document metadata
* <code>find_document</code> - Find a document by name or query
* <code>list_documents</code> - List indexed documents
* <code>get_library_status</code> - Check document library service status

[[Category:Services]]

Osgeo-library

2026-06-05T16:08:41Z

Strk: Created page with "OSGeo Knowledge Base - Automated wiki/WordPress/Planet content sync and processing GitHub: https://github.com/ominiverdi/osgeo-knowledge Cron: wiki (6h), WordPress (d..."

2026-06-05T14:32:01Z

Strk: /* Access */

LLM-based Chat Assistant

2026-06-05T14:31:24Z

Strk: /* Technical Details */

LLM-based Chat Assistant

2026-06-05T14:30:21Z

Strk: /* Technical Details */

Gallery Container

2026-06-05T14:28:41Z

Strk:

Gallery Container

2026-06-05T14:27:28Z

Strk: Created page with "Debian 12 (bookworm) container for AI/ML services, media, and experimental applications. Gallery is a container on OSGeo7 host. '''Resources:''' 8 vCPUs, 12GB RAM '''Syst..."

Debian 12 (bookworm) container for AI/ML services, media, and experimental applications.
Gallery is a container on [[OSGeo7]] host.

'''Resources:''' 8 vCPUs, 12GB RAM
'''System services:''' nginx, redis, PostgreSQL 17, turnserver, php-fpm

'''Brian's services (darkblueb):'''
* GalleryVM media library
* llamafile experiments
* photoprism configuration

'''Lorenzo's services (ominiverdi):'''
* '''matrix-llmagent''' - Matrix chat bot with LLM integration (uses OpenRouter API)
** GitHub: https://github.com/ominiverdi/matrix-llmagent
* '''BGE-M3 Embedding Server''' - Semantic search embeddings via llama.cpp
** Port: 8094 (localhost only), Model: bge-m3-Q8_0.gguf
* '''osgeo-library''' - PDF figure/table/equation extraction and semantic search
** GitHub: https://github.com/ominiverdi/osgeo-library
** CLI command: <code>osgeo-library</code> (as ominiverdi user)
* '''osgeo_wiki_bot''' - Automated wiki/WordPress/Planet content sync and processing
** GitHub: https://github.com/ominiverdi/osgeo_wiki_bot
** Cron: wiki (6h), WordPress (daily), Planet (4h), chunk processing (hourly)

The embedding model running on osgeo7-gallery is BGE-M3 (bge-m3-Q8_0.gguf), a multilingual model from BAAI supporting 100+ languages. It produces 1024-dimensional vectors and runs via llama-server on port 8094 (localhost only). The Q8_0 quantization keeps it light: 606 MB on disk, ~457 MB RAM, ~12ms per query.

'''Contact:''' darkblueb (Brian Hamlin), ominiverdi (Lorenzo Becchi) or SAC channel

SAC Service Status

2026-06-05T14:26:53Z

Strk: /* gallery */

Infrastructure of OSGeo System Administration Committee ([[SAC]])

For emergency plans see: [[SAC:Admin and Troubleshooting]]

= Servers at OSL =
[[OSL | Open Source Labs]] - 6 physical machines that are lxd hosts containing ''x'' virtual machines/containers. 1 is currently shutdown

history:
* 7 physical machines of which 5 ar lxd hosts containing ''x'' virtual machines/containers.
* As part of migration of data center 2025)
** 2 machines: [[SAC_Service_Status#Backup_.28osgeo5.29| backup]], [[SAC_Service_Status#osgeo3|osgeo3]] are historical servers.

== Logging into Physical Machines ==

Currently we do not have physical machines under LDAP control.<del>

All [[SAC#Members|SAC administrators]] have LDAP auth to the OSL Machines.

<del>To ssh into a server using your LDAP account, you can do the following replacing '''your_osgeo_login''' with your OSGeo login and '''vmname''' with the vm name of the server at OSL.<del>

<del>ssh '''your_osgeo_login'''@'''servername'''.osgeo.osuosl.org<del>

<del>When prompted for password, use your OSGeo Login password.<del>

<del>[[SAC:Primary Administrators]] also have ssh key access in case LDAP is down and that will also apply to the physical machines. Worst case scenario use the information on [[OSL | Open Source Labs]] to file a ticket (SAC members only). Direct connection to virtual machines is by appending it's vm alias to .osgeo.osuosl.org.<del>

== Logging into LXD Hosts ==

[[SAC_Service_Status#osgeo4|osgeo4]], [[SAC_Service_Status#osgeo7|osgeo7]], [[SAC_Service_Status#osgeo8|osgeo8]], and [[SAC_Service_Status#osgeo9|osgeo9]] are all Ubuntu servers running LXD.
LXD is a management system for LXC containers and QEMU VMS. LXD has a [https://www.youtube.com/channel/UCuP6xPt0WTeZu32CkQPpbvA channel] that covers its features.

To directly access the host, you go thru port 2222

ssh tech_dev@''server_name''.osgeo.osuosl.org -p 2222

Only [[SAC:Primary Administrators]] have their ssh key installed under that account. In order to access via KVM of these in event servers do not come up on a reboot, you need to go thru OSU OSL OpenVPN. To get an OpenVPN account, you need to put in a support ticket to support@osuosl.org. In order to qualify for an OpenVPN account, you need to be an OSGeo SAC administrator. You will also need to install [https://openvpn.net/community-downloads/ OpenVPN client]) to use your OpenVPN account.

Each host on the private KVM side is named https://'''osgeo8'''.osuosl.oob -- where replace '''osgeo8''' with the relevant host. The .oob is the private network, so doesn't work unless you are connected to via OpenVPN.

The browser interface is sometimes clunky, so you might want to use '''ipmitool''' installable on linux/unix or wsl using relevant package manager. KVM passwords are stored in [https://git.osgeo.org/gitea/sac/password-store SAC password-store].

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD/Incus hosts follows:

Host osgeo?
User tech_dev
HostName %h.osgeo.osuosl.org
Port 2222

Then you would be able to log into those hosts with commands like:

ssh osgeo7

== Logging into LXD/Incus Containers and VMs ==

A convenient block to add to your ~/.ssh/config to easily login to osgeo's LXD hosted containers and vms is the following:

# This stanza is only needed if you have an IdentityFile configured below.
# The IdentityFile from a target host is not automatically applied to the hop host, so we need to make it explicit:
Host hop.*.osgeo.org
IdentityFile "path/to/your/private/key"

Host osgeo*-*
ProxyCommand ssh yourusername@hop.$(sed -e "s/-.*//" <<< "%h").osgeo.org -W $(sed -e "s/^osgeo[^-*]-//" <<< "%h"):%p
# this is only needed if you you use different private keys for different servers
IdentityFile "path/to/your/private/key"

Then you'll be able to access a LXC Container or QEMU VM on machine `osgeo9` with:

ssh yourusername@osgeo9-matrix

And one on machine `osgeo7` with:

ssh yourusername@osgeo7-download

Note you still need to know where each LXC host is hosted... See successive sections to know what's on which machine.

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!
== osgeo 6 ==
This was reformated March 2026 to be incus host
See [[osgeo6]]

=== services running on osgeo6 ===
==== hop ====

hop.osgeo6.osgeo.org - this is the jump host to access the instances on osgeo6

==== nginx ====
Proxies all http and https traffic to instances on this host

==== secure (LDAP ) ====
[https://git.osgeo.org/gitea/sac/osgeo9/wiki/secure-container secure] -- ldap.osgeo.org [[SAC:LDAP]] used for ldap service (a rebuild of old secure.osgeo.osuosl.org) now on Debian 11
Moved from osgeo9
* ldap.osgeo.org

==== ldap-web ====

Currently housing https://id.osgeo.org/ for LDAP management.
Deployed via ansible
Moved from osgeo9

* id.osgeo.org

==== jitsi ====

See [[SAC:Jitsi]] (for video meetings) - moved from osgeo9
https://meet.osgeo.org

==== wordpress ====

See [[SAC:Wordpress]]
www.osgeo.org

==== pretalx ====
Ubuntu 20.04 with OSGeo LDAP and Docker installed. pretalx software runs in Docker.
https://talks.osgeo.org - for OSGeo Talk collection and voting See [[Pretalx]]

==== weblate ====
'''Container Name:''' weblate (for doc translation)

Houses: https://weblate.osgeo.org (for document translation to different languages)

For further details refer to [[SAC:Weblate]]

== osgeo 8 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203036/https://hardware.openstreetmap.org/servers/stormfly-01.openstreetmap.org/

LXD host

[[osgeo8|Configuration Details]]

=== Services running on osgeo8 ===

==== hop ====
hop.osgeo8.osgeo.org - jump host for accessing containers/vms on osgeo8

==== nginx ====
http, https Proxy for all containers on osgeo8 and also provides mirror proxy for download.osgeo.org

==== download8 ====

Replica of download that is on osgeo7.
Mirrors download and home folders from osgeo7.
https://download-cache.osgeo.org

See [[Download Server]]

==== geoserver-cite ====
Houses OGC site certification for geoserver https://cite.geoserver.org

==== grass-wiki ====

See [[SAC:GrassWiki]]

==== grass ====
https://grass.osgeo.org upgraded to Bullseye debian 11.

GRASS GIS server

Current DNS name: grass.osgeo.org

Debian 11 Bullseye

Web: Apache + Hugo (generated through cronjob from https://github.com/OSGeo/grass-website/), see https://github.com/OSGeo/grass-addons/tree/grass8/utils/cronjobs_osgeo_lxd

`unattended-upgrades` for automatic installation of security upgrades is installed and running

ssh: reachable via jumphost.

==== meshcentral ====
https://remote.osgeo.org
This is a remoting tool currently setup to test livecd vms via a web browser.

4 VMS currently set up on osgeo8 accessible from this. Currently based on livecd 16rc1 snapshots, with wm install script run.

==== woodie-server ====

See [[Woodie]]

== osgeo 9 ==
Server added April 2021, donated by OpenStreetMap project.

Likely machine: https://web.archive.org/web/20191112203042/https://hardware.openstreetmap.org/servers/stormfly-02.openstreetmap.org/

Is an LXD host. Also Stores lxd images used by other lxd hosts.

[[osgeo9|Configuration Details]]

=== Services running on osgeo9 ===
==== hop ====
hop.osgeo9.osgeo.org. For LDAP users allows them to hop thru to get to other containers.

==== nextcloud ====
https://nextcloud.osgeo.org

Ubuntu 22.04 LXD/nginx/postgresql 14 container for document sharing similar to dropbox/google drive - nextcloud.lxd - https://nextcloud.osgeo.org [https://git.osgeo.org/gitea/sac/osgeo9/wiki/Nextcloud-container Nextcloud Setup]

home of https://nextcloud.osgeo.org
This server does not use ssh osgeo-ldap as it was the first container built. However nextcloud.osgeo.org does authenticate with osgeo ldap.

TODO: add special page for this

==== nginx ====
nginx (for web proxy of traffic of osgeo9 containers) additional mirror proxy for download.osgeo.org

==== adventure (WIP)====
https://adventure.osgeo.org runs https://github.com/thecodingmachine/workadventure software

==== dronie-client ====
a ci bot for dronie.osgeo.org which is used for git.osgeo.org/gitea ci jobs

==== limesurvey ====
Debian 10, PostgreSQL 13, PHP 8 with ldap/ssh. https://limesurvey.osgeo.org
Setup detailed on [https://git.osgeo.org/gitea/sac/osgeo3/wiki/limesurvey-container limesurvey container]

==== mail ====
mailman: lists.osgeo.org
mail.osgeo.org
tilechache web: tilecache.osgeo.org
mailserver: postfix

==== matrix ====
'''Container Name:''' matrix - lxd container with ldap/ssh.
Hosts [[Matrix]] homeserver ([[SAC:MatrixSynapse]]) and IRC bridges ([[SAC:Heisenbridge]])

https://gitea.osgeo.org/sac/osgeo9/wiki/matrix-container for full detail on how the container is setup

==== pixelfed ====

SHUT OFF (both container and website) cause of lack of interest. Container is still there.
[[Pixelfed]] instance reachable on https://photo.osgeo.org to house community photos

==== peertube ====

[[Peertube]] instance reachable on https://video.osgeo.org

==== geo-docs container ====

Houses:
* https://blog.geoserver.org
* https://geos.osgeo.org
* https://geotools.org
* https://geowebcache.osgeo.org
* https://lastools.osgeo.org
* https://planet.osgeo.org

==== wiki ====

See [[OSGeo Wiki]]

==== mail ====

Hosts: lists.osgeo.org, mail.osgeo.org and a few other services.
See [[Mail server]] for more details.

== osgeo 10 ==
Server added March 2026, donated by OSUOSL.
This is an incus host

[[osgeo10|Configuration Details]]

=== Services running on osgeo10 ===
==== hop ====
hop.osgeo10.osgeo.org. For LDAP users allows them to hop thru to get to other instances on this machine.

==== nginx ====
Acts as nginx proxy to all sites on instances of this server

==== discourse ====

See [[SAC:Discourse]]

==== woodie-client-vm ====

Separate agent for woodie-server, this one is a true VM rather than container.

== osgeo 7 ==

Server added June 2018. Intended to replace [[SAC_Service_Status#osgeo3|osgeo3]] and old osgeo4 (before reformat).
See [[Osgeo7]] for configuration details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages Container setup of all the osgeo7 servers is located in https://git.osgeo.org/gitea/sac/osgeo7/wiki/_pages]

Running LXD 3 snap based container management -- LXD version 3.17 as of 2019-09-15

=== Accessing osgeo7 containers via ssh ===

Only the download.osgeo.org is directly exposed ssh via port 22. To access the other containers, you can tunnel thru
download.osgeo.org -- You need to be in the shell group to be able to access download and the other servers. If you are not already put in a [https://trac.osgeo.org/osgeo/newticket SAC Ticket Request]. You also need to have your public key registered. To do so edit your profile [https://id.osgeo.org/ldap/edit] (and put in your public key)

A convenient block to add to your own `.ssh/config` file follows:

Host osgeo7-*
ProxyCommand ssh your_osgeo_id@hop.osgeo7.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"

With the above in place, you can connect to any container using:

ssh your_id@osgeo7-<container_name>

'''Troubleshooting:''' In case of "Permission denied (publickey)." after an update to a modern openSSH version, it might well be that your ssh key (RSH key) is disabled in your client in favour of more modern cyphers.

Ugly workaround: add one line `PubkeyAcceptedKeyTypes ...` in `.ssh/config`, to re-enable RSA keys for now (consider to generate a new key):

vim .ssh/config
...
Host *
...
PubkeyAcceptedKeyTypes +ssh-rsa

... but better read e.g. [https://dev.to/bowmanjd/upgrade-ssh-client-keys-and-remote-servers-after-fedora-33-s-new-crypto-policy-47ag here]!

=== Services on osgeo7 ===

==== Monitor ====

debian10 lxd container with ldap/ssh. https://monitor.osgeo.org (houses grafana dashboard (for all servers) and prometheus server for <del>[[SAC_Service_Status#osgeo3|osgeo3]]<del> containers and pulls basic container metrics using node exporters pulled via prometheus servers. Requirs ldap to log into the web console.

Configuring servers for monitoring is detailed [https://git.osgeo.org/gitea/sac/prometheus-config Git Prometheus Config]

==== Download ====

See [[Download Server]]

==== dronie-client-osgeo3 ====
STOPPED See [https://trac.osgeo.org/osgeo/ticket/3415 #3415]
Its a copy of dronie-client that was on [[SAC_Service_Status#osgeo3|osgeo3]] which has been shutdown
This is a debian 10 lxd container running docker. Currently has just one running docker osgeo-drone-agent to serve as a client for dronie-server (dronie.osgeo.org running on osgeo7)

==== gallery ====

See [[Gallery Container]]

==== live ====
Home of [http://live.osgeo.org live.osgeo.org] ;
Running Ubuntu 24.04.3 LTS with OSGeo LDAP SSH

==== mapserver ====

See [[MapServer_at_osgeo7]]

==== nexus (repo.osgeo.org, docker.osgeo.org) ====
See [[SAC:Repo]] this is a debian 10 lxd container running docker 19.
It currently has one docker container running within it called nexus -- exposed as repo.osgeo.org on nginx.

Also exposed as project dockers for pushing images: postgis-docker.osgeo.org, geoserver-docker.osgeo.org, geos-docker.osgeo.org, sac-docker.osgeo.org

==== nginx ====
Proxy that routes all http/https traffic for the other containers (can be accessed via osgeo7 host lxc or ubuntu@osgeo7-nginx if your key is installed on ubuntu user).
The nginx container holds the letsencrypt https SSL certs for all the containers and handles the renewal of the letsencrypt certs using certbot renew cronjob.
Prometheus server to collect all monitoring logs from OSGeo7 <del>(only accessible by [[SAC_Service_Status#osgeo3|osgeo3]]), these get queried via monitor.osgeo.org (running on [[SAC_Service_Status#osgeo3|osgeo3]]) via grafana server.<del>

==== tracsvn (trac, svn, git) ====

Home of [[Trac]], [[SAC:Git Service|Git]] and [[Subversion]] services.

See [[TracSVN]] for full details.

==== photoprism ====
Picture gallery. Syncs with https://nextcloud.osgeo.org
But pictures are shown here https://photoprism.osgeo.org

==== old-wiki (stopped) ====
This used to be housed on [[SAC_Service_Status#osgeo3|osgeo3]], and was moved 2019-09-14 to osgeo7 as old-wiki container.
wiki.osgeo.org moved back to [[SAC_Service_Status#osgeo3|osgeo3]] on 2020-05-22 and in wiki container. The wiki container is a complete rebuild with files and database restored and upgraded.
Refer to the [[SAC_Service_Status#osgeo3|osgeo3]] section for more details.

[https://git.osgeo.org/gitea/sac/osgeo7/wiki/old-wiki-container old wiki container] -- used for wiki service (it is an lxd2pc created image of wiki.osgeo.osuosl.org VM that was on [[SAC_Service_Status#osgeo3|osgeo3]])

See [[OSGeo Wiki]]

==== nextcloud-ubuntu (stopped) ====
Moved to osgeo9

==== dronie-server ====

See [[Dronie]]

==== old-projects (stopped) ====
-- this is the old projects.osgeo.osuosl.org migrated from osgeo4 as an lxd container, so more or less the same as it was before, with the exception that all the websites are now proxied thru the nginx container. Websites on it are community-review.foss4g.org and spatialreference.org

To access you need to go thru download.osgeo.org -> old-projects

==== old-web (stopped) ====
The old web.osgeo.osuosl.org (was on [[SAC_Service_Status#osgeo3|osgeo3]])

* mapguide.osgeo.org

==== old-webextra ====
This is a replica of webextra.osgeo.osuosl.org that was hosted on [[SAC_Service_Status#osgeo3|osgeo3]]

Started move on November 29th 2019 and completed December 8th, 2019
* foss4g.org
* europe.foss4g.org
* video.foss4g.org
* planet.osgeo.org
* various old foss4g.org years
* <del>live.osgeo.org</del> moved to dedicated container
* journal.osgeo.org (not sure what this is for, should be retired?)
* <del>vmap0.tiles.osgeo.org</del> #removed site

Information from webextra on [[SAC_Service_Status#osgeo3|osgeo3]]

** Retired December 8th, 2019 -- and moved to osgeo7 as container old-webextra

* See [[WebExtraVM]] for full details (server: http://webextra.osgeo.osuosl.org)
* hosts http://planet.osgeo.org, http://mum03.mapserver.org, http://live.osgeo.org
* http://foss4g.org (main portal) and archive of old sites 2006-2014
* http://conference.osgeo.org - [[Conference System]] (also: [[SAC:Setup_OCS]])
* http://journal.osgeo.org / osgeo.org/ojs - [[Journal System]]
* Redirects for many chapter and other urls handled via /etc/httpd/conf.d/rewrite.conf

==== pycsw ====
'''Container Name:''' pycsw

* https://demo.pycsw.org
* '''OGC CSW Reference Implementation and Server demo'''
* deployment setup at https://github.com/geopython/demo.pycsw.org
* running hourly teardown/setup cron via docker-compose
* migrated from [[AdhocVM#Existing_services_hosted_on_the_Ad-hoc_VM:|Adhoc VM]] thanks to [https://trac.osgeo.org/osgeo/ticket/2452 SAC] (May 2020)

=== osgeo7 decommissioned containers ===

==== <del>old-adhoc</del> ====

'''SHUTOFF as of 2022-01-29'''

[[AdhocVM|old-adhoc]] -- this is the old adhoc.osgeo.osuosl.org migrated 2019-05-08 from osgeo4 as an lxd container.
Used by osgeo-live for there test docs and by grass for earthquake, and mapserver for demo.
Note that there is a new live (container that osgeo-live will more to), there is also a mapserver container (which mapserver have started to move their demo to)

To access via ssh you should go thru download.osgeo.org -> old-adhoc.lxd
It is accessible via https://adhoc.osgeo.org and http://adhoc.osgeo.osuosl.org

* VM used for projects for various adhoc purposes. Risks to system stability that would be unacceptable on the Projects VM may be ok here.
* See [[AdhocVM]] for full details, and some notes on services running here.
* eg http://adhoc.osgeo.osuosl.org/livedvd/docs/en/quickstart/

== osgeo4 ==

osgeo4 is a real server managed by OSUOSL - can be access via ssh tech_dev@osgeo4.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.

In August 2019 the server had new power supply put in and replacement disks. It was reformatted with Ubuntu 18.04.3 to serve as secondary LXD host to osgeo7
zfsutils-linux was installed so lxd can use zfs for storage.

=== sshing into osgeo4 containers ===
Note that all the containers are closed off from direct ssh access except for the hop.osgeo4.osgeo.org. To access the other containers, you need to hop through hop.
hop container has port 22 open but requires ssh access so users who’ve been granted rights can hop thru it to other containers using hop.osgeo4.osgeo.org as name.

A convenient block to add to your own .ssh/config file follows where your_id could be your osgeo id or a local account on that container

Host osgeo4-*
ProxyCommand ssh your_osgeo_id@hop.osgeo4.osgeo.org -W $(sed -e "s/^osgeo4-//;s/$/.lxd/" <<< "%h"):%p
IdentityFile "path/to/your/private/key"
User your_id

Then to access say the wordpress-dev container, you'd do the below

ssh osgeo4-wordpress-dev

=== osgeo4 baremetal features ===
It's makeup is as follows:
{| class="wikitable"
|-
! Item !! Settings
|-
| Disks || 6 1.8 TB drives
|-
| Memory || 48 GB
|-
| CPUs || 8 Intel(R) Xeon(R) CPU E5540 @ 2.53GHz (8192kb cache)
|}
<pre>lsblk -i
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 1.8T 0 disk
|-sda1 8:1 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sda2 8:2 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdb 8:16 0 1.8T 0 disk
|-sdb1 8:17 0 953M 0 part
| `-md0 9:0 0 952M 0 raid1 /boot
`-sdb2 8:18 0 46.6G 0 part
`-md1 9:1 0 46.5G 0 raid1
|-lvm-root 253:0 0 37.3G 0 lvm /
`-lvm-swap 253:1 0 7.5G 0 lvm [SWAP]
sdc 8:32 0 1.8T 0 disk
sdd 8:48 0 1.8T 0 disk
sde 8:64 0 1.8T 0 disk
sdf 8:80 0 1.8T 0 disk
</pre>

<pre>
sdc,sdd,sde,sdf form a zfs osgeo4_lxd partition (sdc,sdd) mirrors sde,sdf for total lxd capacity of 3.62 TB
</pre>

Nightly backups of osgeo7, and osgeo4 containers are kept here and named <container>-backup and be kept in a stopped state.

=== Services running on osgeo4 ===

==== hop ====
'''Container Name:''' hop - this is the only container with direct ssh access via ssh hop.osgeo4.osgeo.org. To get to other containers, you need to hop thru this one. Requires ssh key access

==== ansible-dev ====
'''Container Name:''' ansible-dev, has ansible 2.9.27 installed and all plugins needed to manage OSGeo ansible infrastructure.
DEPRECATED, use `ansible-dev`

==== ansible-control ====
'''Container Name:''' ansible-control, can be used to deploy OSGeo ansible infrastructure. Replaces `ansible-dev`

==== osgeo4-nginx ====
'''Container Name:''' osgeo4-nginx ->> all web traffick from other containers on osgeo4 get proxied thru here

==== old-web-staging ====
'''Container Name:''' old-web-staging - used primarily for experimenting with changes to id.osgeo.org (old-web on osgeo7) like testing out OS and software upgrade etc, changes to LDAP forms and registration, before applying to id.osgeo.org. - https://id.staging.osgeo.org

==== pretalx-staging ====
'''Container Name:''' pretalx-staging - used primarily for experimenting with changes to talks.osgeo.org (pretalx on [[SAC_Service_Status#osgeo9|osgeo9]]) like testing out Docker builds and software upgrade etc, before applying to talks.osgeo.org. - https://talks.staging.osgeo.org

==== wordpress-dev ====
'''Container Name:''' wordpress-dev - used primarily for osgeo.org main website development - https://staging.www.osgeo.org, https://dev.www.osgeo.org

==== wiki-dev ====
'''Container Name:''' wiki-dev - used primarily for experimenting with changes to wiki.osgeo.org like testing out OS and software upgrade etc before appying to wiki.osgeo.org. - https://dev.wiki.osgeo.org

==== wiki-staging ====
'''Container Name:''' wiki-staging - used primarily for upgrade changes to wiki.osgeo.org like testing out OS and software upgrade etc before applying to wiki.osgeo.org. - https://staging.wiki.osgeo.org. The construction of this container is managed by sac ansible-deployment.

==== tracsvn-dev ====
'''Container Name:''' tracsvn-dev - This is a 2019-09-05 lxd2pc image of tracsvn.osgeo.osuosl.org (now on osgeo7 as tracsvn) used primarily for experimenting like testing out OS, git and software upgrade etc before appying to production. -- https://dev.git.osgeo.org, https://dev.tracsvn.osgeo.org Has the following sites: https://dev.trac.osgeo.org, https://dev.git.osgeo.org/gitea, https://dev.svn.osgeo.org.

It was upgraded to Debian 11 on 2024-08-21.

==== dronie-client ====
'''Container Name:''' dronie-client - This is a debian 10 machine, with OSGeo LDAP authentication and a drone-agent docker running. To be used with https://dronie.osgeo.org

= Cloud Hosted Servers and other external under SAC Control =

== Future Hosting Plans for Windows / Mac Building ==

[[SAC_Shared_Building_Services|SAC Shared Building Services]]

== Atlantic.net ==

* host.postgis.net -p 2222 is an LXD Ubuntu 18.04 16GB RAM/ 6 vCPU, 350GB data, 250GB block storage
* Currenlty running two lxd containers:
debbie: debian 10 postgis.net, planet.postgis.net, debbie.postgis.net (jenkins build bot)
debbie-docker.host.postgis.net - runs docker and serves as a 1.0 agent for dronie.osgeo.org

= QGIS off OSGeo =
Services on separated machines rented and managed by the QGIS project at hetzner

* website including documentation http://www.qgis.org
* website building, documentation building, debian/ubuntu nightlies, plugins.qgis.org
* issues.qgis.org: redmine

= Historical servers (not more in use) =

- [[Telascience Blades (Historical)]]

== web18a.osgeo.osuosl.org ==
NO LONGER USED - turned off
'''2019-09-03 Production services www.osgeo.org, 2018.foss4g.org moved to wordpress container on [[osgeo7]]
Staging services (staging.www.osgeo.org, dev.www.osgeo.org move to wordpress-dev container on [[osgeo4]]
Grass wordpress is disabled as grass decided to go with another solution, so have grass container on osgeo7'''
(Cloud hosted server on OSUOSL hardware (not ours) )
* Debian 9.3 4GB server, host name: web18a.osgeo.osuosl.org require ssh key to log in.
* Hosts wordpress sites staging.www.osgeo.org,www.osgeo.org, staging.grass.osgeo.org, foss4g2018.osgeo.org
* Setup details on [https://git.osgeo.org/gitea/osgeo/www_apache_configs/wiki/Web18a-setup Web18a setup]

== OSGeo funtoo ==

For lxd experimentation it's an lxd container running other lxd containers and provided by funtoo.org.

OSGeo is paying funtoo via treasurer at osgeo.org.

* [https://git.osgeo.org/gitea/sac/osgeo_funtoo OSGeo Funtoo] osgeo.host.funtoo.org

* funtoo LXDs currently running:
** <del>[https://limesurvey.osgeo.org LimeSurvey] -this may be in future migrated to osgeo7 or osgeo3</del>
Migrated to [[SAC_Service_Status#osgeo3|osgeo3]] 2020-11-28 -- see [[https://trac.osgeo.org/osgeo/ticket/2362|#2362]]

== osgeo3 ==

osgeo3 physical server refer to [[osgeo3|Configuration Details]] for hardware specs. It was used to run production, but moderately risky things. Refer to [[SAC:Old-osgeo3]] for past history before osgeo3 was rebuilt.
osgeo3 was a hosted by OSUOSL - No longer accessible <del>can be accessed via ssh tech_dev@osgeo3.osgeo.osuosl.org -p 2222 (only people with their access keys installed can log in and doesn't allow password access) - password for tech_dev is in the secure container (on osgeo7) / access folder.<del>

== Backup (osgeo5) ==

* <del>Backup now runs on dedicated hardware<del>
* <del>Provides Rsync backups of download.osgeo.org<del>
* <del>Provides Bacula backups of various VMs.<del>
* See [[SAC:Backups]] for details.

[[Category:Infrastructure]]
[[Category:Services]]

LLM-based Chat Assistant

2026-06-05T14:09:28Z

Strk: Create LLM-based Chat Assistant page

SAC:Gitea

2025-11-20T13:39:22Z

Strk: /* Administration */

Gitea is an instance of the [https://gitea.io/ Go Git Service] that runs on [[TracSVN]] as part of the [[SAC:Git Service|OSGeo Git Services]].

It can be accessed via https://gitea.osgeo.org/ (login with your [[SAC:LDAP|OSGeo Userid]])

Until September 2025 it was accessible also as https://git.osgeo.org/gitea/ - it should still be for backward compatibility

= Files location and configuration =

It is installed in <code>/home/git/gitea</code>.
Its configuration is in the ''custom/'' subdir and controlled via ansible.

Repositories are in <code>/home/git/gitea-repositories</code> and all files are created as readable for any user in the ''git'' group.
Apache running user (''www-data'') is made part of the group to allow for browsing ''gitea-managed'' repositories via existing [[Trac_Instances|trac instances]].

Attachment and session data are in <code>/home/git/gitea/data</code>.

It is configured to use [[SAC:LDAP|LDAP]] for authentication and ''PostgreSQL'' as the backend, see the configuration for access parameters.

Backups are currently automated for the database and data directory via scripts in <code>/osgeo/backup/</code> (start from <code>/osgeo/backup/bacula_before.sh</code>). No repositories are backed up (what's a distributed code version control system worth otherwise?:). Refer to [[SAC:Backups]] for other backup info.

It listens on IP <code>127.0.0.1</code> and TCP port <code>3001</code> via HTTP. Apache is configured to deal with HTTPS and act as a proxy.
See [[TracSVN]] for info about the apache configuration.

Gitea is built to be composed by a single binary.
See https://gitea.io/ for more info.

= Administration =

At the moment [[User:Strk|Sandro Santilli]] (promoter of the initiative) and Martin Spott have admin privileges from the web UI.
[[User:Robe|Regina Obe]] and [[Jeff McKenna]] are willing to help.

Server configuration is done via https://gitea.osgeo.org/sac/ansible-deployment
(requires login and authorization to see)

As of 2025 we're debating whether to switch to [[Forgejo]] instead

== Starting and stopping the service ==

The service is managed via systemctl:

- systemctl start gitea
- systemctl stop gitea
- systemctl restart gitea

= Continuous integration =

A CI server is associated to the hosting service,
see [[Dronie]] and [[Woodie]]

[[Category:Infrastructure]]
[[Category:Services]]

SAC:Gitea

2025-11-20T13:37:40Z

Strk:

Gitea is an instance of the [https://gitea.io/ Go Git Service] that runs on [[TracSVN]] as part of the [[SAC:Git Service|OSGeo Git Services]].

It can be accessed via https://gitea.osgeo.org/ (login with your [[SAC:LDAP|OSGeo Userid]])

Until September 2025 it was accessible also as https://git.osgeo.org/gitea/ - it should still be for backward compatibility

= Files location and configuration =

It is installed in <code>/home/git/gitea</code>.
Its configuration is in the ''custom/'' subdir and controlled via ansible.

Repositories are in <code>/home/git/gitea-repositories</code> and all files are created as readable for any user in the ''git'' group.
Apache running user (''www-data'') is made part of the group to allow for browsing ''gitea-managed'' repositories via existing [[Trac_Instances|trac instances]].

Attachment and session data are in <code>/home/git/gitea/data</code>.

It is configured to use [[SAC:LDAP|LDAP]] for authentication and ''PostgreSQL'' as the backend, see the configuration for access parameters.

Backups are currently automated for the database and data directory via scripts in <code>/osgeo/backup/</code> (start from <code>/osgeo/backup/bacula_before.sh</code>). No repositories are backed up (what's a distributed code version control system worth otherwise?:). Refer to [[SAC:Backups]] for other backup info.

It listens on IP <code>127.0.0.1</code> and TCP port <code>3001</code> via HTTP. Apache is configured to deal with HTTPS and act as a proxy.
See [[TracSVN]] for info about the apache configuration.

Gitea is built to be composed by a single binary.
See https://gitea.io/ for more info.

= Administration =

At the moment [[User:Strk|Sandro Santilli]] (promoter of the initiative) and Martin Spott have admin privileges from the web UI.
[[User:Robe|Regina Obe]] and [[Jeff McKenna]] are willing to help.

Server configuration is done via https://gitea.osgeo.org/sac/ansible-deployment
(requires login and authorization to see)

== Starting and stopping the service ==

The service is managed via systemctl:

- systemctl start gitea
- systemctl stop gitea
- systemctl restart gitea

= Continuous integration =

A CI server is associated to the hosting service,
see [[Dronie]] and [[Woodie]]

[[Category:Infrastructure]]
[[Category:Services]]

Forgejo

2025-11-20T13:37:13Z

Strk:

Forgejo was [https://forgejo.org/2022-12-15-hello-forgejo/ created] in October 2022 after a for profit company took over the [[SAC:Gitea|Gitea]] project. It exists under the umbrella of a non-profit organization, Codeberg e.V. and is developed in the interest of the general public.

Comparison with Gitea, as seen by Forgejo: https://forgejo.org/compare-to-gitea/

As of 2025 SAC is [https://trac.osgeo.org/osgeo/ticket/3414 debating] whether we should switch the [[SAC:Git Service|OSGeo Git Services]] over.

Forgejo

2025-11-20T13:35:30Z

Strk: Created page with "Forgejo was [https://forgejo.org/2022-12-15-hello-forgejo/ created] in October 2022 after a for profit company took over the Gitea project. It exists under the umbrella of..."

Forgejo was [https://forgejo.org/2022-12-15-hello-forgejo/ created] in October 2022 after a for profit company took over the [[Gitea]] project. It exists under the umbrella of a non-profit organization, Codeberg e.V. and is developed in the interest of the general public.

Comparison with Gitea, as seen by Forgejo: https://forgejo.org/compare-to-gitea/

As of 2025 SAC is [https://trac.osgeo.org/osgeo/ticket/3414 debating] whether we should switch the [[OSGeo Git Service]] over.