infrastructure August 2007

infrastructure@lists.fedoraproject.org

41 participants
49 discussions

Re: Improving availability and guaranteeing integrity in ISO downloads
by Anthony Bryan 04 Sep '07

04 Sep '07

> http://www.getright.com/seedtorrent.html > > Supported by Azureus, among others. We already have an extensive > HTTP/FTP mirror system to leverage. > > I've noticed, after the initial release rush, torrents end up being > quite a bit slower than just downloading from a mirror. Especially on a > less popular arch. (cough ppc cough...) In the past I've just stopped > the torrent, downloaded the iso from a mirror, then restarted the > torrent to help seed. > > It would be nice to just have this happen automagically. That's how Metalink works with clients that also support P2P networks. GetRight supports this w/ metalink, hopefully KGet will eventually along with aria2. Phex also supports it over gnutella. (Sorry for the late reply) > On Tue, Jun 19, 2007 at 03:40:59PM -0400, Anthony Bryan wrote: > > >On Sat, Jun 09, 2007 at 07:51:20PM +0200, Ruben Kerkhof wrote: > > > > Have you had a chance to look over Ruben's additions? Any feedback? He > > said he re-licensed it to line up w/ mirrormanager. Any ideas/comments > > for features in Metalink that could be of use to Fedora? > > Yes, I took a quick look; I'll be able to do something with this, but > not for the next 4 weeks, as I'm out of the office moving houses and > on vacation, then catching up on real work. :-) checking in after 10 wks :) Will what Ruben submitted be usable? a few more metalink apps have been released. Free Download Manager (Win) has been released under GPL3. DownThemAll 1.0b2 firefox extension is out, and displays more of the info contained in a metalink to the person downloading, like a how many mirrors are listed, logo, description, version, os/arch, and other stuff that could be useful. here are some screenshots the DTA team put up: http://code.downthemall.net/maierman/metalink-test/metalink-feisty.png http://code.downthemall.net/maierman/metalink-test/metalink-xp.png http://code.downthemall.net/maierman/metalink-test/metalink-comment.png there's also Celerius, a GTK python downloader in progress at http://celerius.tuxfamily.org/ if anyone wants to help out. -- (( Anthony Bryan ... Metalink [ http://www.metalinker.org ] )) Easier, More Reliable, Self Healing Downloads

2 1

Private builds in koji
by Ignacio Vazquez-Abrams 03 Sep '07

03 Sep '07

A couple of questions that haven't been brought up yet but have recently passed through my mind: 1) Is it considered an acceptable use of resources to use koji to scratch-build private FOSS packages that will be hosted on fedorapeople.org? 2) What about pointing people to the builds hosted within koji? 3) What about building in koji but hosting elsewhere? I think it's safe to assume that building anything non-FOSS in koji is *completely* out of the question. -- Ignacio Vazquez-Abrams <ivazqueznet(a)gmail.com> PLEASE don't CC me; I'm already subscribed

4 4

Hi From a new Developer
by roopesh majeti 31 Aug '07

31 Aug '07

Hi , Iam Roopesh Majeti, a C/C++/Unix Developer working in a MNC in india. I am working in development environment from last 3 years and iam currently fedora core 6 Linux. I would like to express my wish to work with the Fedora Development team. Christian Iseli has suggested me to contact to this list, introducing myself to the team. I would be very much happy if you could involve me in the Fedora core development work. Awaiting for your reply.. Thanks Roopesh.

3 2

fedorapeople.org is now available
by Seth Vidal 31 Aug '07

31 Aug '07

Hi Everyone, fedorapeople.org is now available for general use. What is fedorapeople.org?: It is a site where fedora contributors can upload files for sharing out with the world. It is perfect for uploading specfiles, srpms, patches, etc, etc. Each fedora contributor has 150M of quota-controlled space. Users can upload using scp, sftp or rsync. Once uploaded into the users public_html directory the files are available via http at: http://your_username.fedorapeople.org/. To connect to fedorapeople.org just use the ssh key you uploaded to your fedora account and then you can login via ssh to: fedorapeople.org What fedorapeople.org is NOT: - it is not a place for you to upload confidential or copyright-violating files. - it is not a shell for you to login and stay logged into - it is not a place for you to run your favorite proxy of whatever kind - it is not a database server - it is not a mail server - it is not a run-my-favorite-cgi-server - it is not a blog server We've tried our best to minimize and secure the services. Don't make a lot of unreasonable requests asking for us to undo that. :) For reasonable requests please file put them in the fedora infrastructure ticketing system: http://fedoraproject.org/wiki/Infrastructure/Tickets Let us know what breaks, -sv -- fedora-announce-list mailing list fedora-announce-list(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-announce-list

3 3

Infratructure Meeting Log for 2007/08/23
by Ricky Zhou 31 Aug '07

31 Aug '07

16:04:39 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Role Call 16:04:41 < mmcgrath> Who's here? 16:04:43 * ricky 16:04:43 -!- jeremy [i=katzj@nat/redhat/x-4bc27ba525a17715] has quit Remote closed the connection 16:04:43 -!- warren [i=warren@nat/redhat/x-2dc6a46ecf6fecaa] has quit Remote closed the connection 16:04:48 < paulobanon_> me 16:05:00 < mmcgrath> and again jeremy and warren. Gone at the same time! 16:05:04 * lmacken 16:05:06 < mmcgrath> dgilmore: ? 16:05:08 * skvidal is on asterisk 16:05:10 < skvidal> and here 16:05:20 < lmacken> hah! why does that happen every week ? 16:05:36 < mmcgrath> lmacken: I have no idea, but its like clockwork :) 16:05:37 -!- jeremy [i=katzj@nat/redhat/x-48f778bf0db0139e] has joined #fedora-meeting 16:05:39 < lmacken> seriously 16:05:42 < ricky> Yay :) 16:05:47 < mmcgrath> and jeremy's back :) 16:06:08 < mmcgrath> Ok, I think we have enough to get started, lets take a look at tickets. 16:06:15 * jeremy waves 16:06:32 < mmcgrath> jeremy: why is it that you and warren both log off every time the infrastructure meetings start? 16:06:46 * mmcgrath not complaining, just amused by it. 16:07:12 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Tickets 16:07:13 < mmcgrath> https://hosted.fedoraproject.org/projects/fedora-infrastructure/query?statu… 16:07:29 < jeremy> not sure what's going on tbh 16:07:33 -!- warren [i=warren@nat/redhat/x-7b788734ded94462] has joined #fedora-meeting 16:07:36 < ricky> Woo. 16:07:44 < mmcgrath> Not much to talk about on the ticket side it looks like. 16:07:54 * ricky thought that the meeting keyword was removed from the wiki ticket. Hmm.. 16:08:00 < mmcgrath> VCS is there but jcollie isn't around right now (#14) 16:08:06 < mmcgrath> ricky: I thought we did to 16:08:35 < ricky> OK, it's gone now. 16:08:46 < paulobanon_> ricky: i think it was removed from the wiki things and passed to FAS 16:08:54 < paulobanon_> (that was the plan anyway) 16:09:02 < mmcgrath> either way we'll skip it for now. 16:09:31 < mmcgrath> One thing I don't really want to talk about but wanted to mention is ticket #137 16:09:59 < mmcgrath> As a group (Infrastructure) I think going forward and in order to ensure our continued growth we'll have to be more sponsorship aware. 16:10:20 -!- k0k [n=k0k@fedora/k0k] has quit "Abandonando" 16:10:37 < paulobanon_> mmcgrath: have u already started to look for other intl partners/sponsors ? 16:10:39 < mmcgrath> This means 1) keep your ears to the ground about opportunities for Fedora Infrastructure (and Fedora in general) and 2) we'll have to make sure to keep the relationships with our current sponsors good. 16:10:58 < mmcgrath> paulobanon_: yeah, some people have responded with some leads and I've contacted some other people. 16:11:30 < dgilmore> opps me is here now 16:11:48 < dgilmore> mmcgrath: sorry im late 16:11:51 < mmcgrath> To be blunt, I have very little experience in requesting this sort of things but I'm working on it and taking notes and will hopefully get good at it soon 16:11:53 < paulobanon_> mmcgrath: after the meeting save me 5mins 16:11:56 < mmcgrath> dgilmore: no worries, we're just getting started. 16:12:00 < mmcgrath> paulobanon_: sure thing 16:12:30 < mmcgrath> having said that, we're just getting started into activly looking for hosting sponsors so we can mold it any way we want. 16:13:00 < mmcgrath> Anyone have any questions regarding what I'm doing and whats going on there? I know I haven't really been cc'ing the list on emails I've sent out. That doesn't seem approperate I think. 16:13:07 < mmcgrath> And I don't want to scare off anyone :) 16:13:20 < paulobanon_> scare us then :) 16:13:21 < skvidal> yay for more options and decentralizing our infrastructure, imo 16:13:55 < mmcgrath> FYI all thats the general idea. Spreading the load a bit, bringing content faster (especially internationally) and lowering the cost from RH. 16:14:10 * mmcgrath notes RH hasn't asked for this, I'm just doing it because it makes 'cents' 16:14:11 < skvidal> it also increases the likelihood that we stay up 16:14:22 < mmcgrath> yep. and its always good to have options. 16:14:25 < skvidal> if we end up in a problem at one colo 16:14:49 < paulobanon_> skvidal: true 16:15:42 < skvidal> a fiber cut doesn't necessarily nuke us 16:15:47 < skvidal> which is, imo, good :) 16:15:49 < mmcgrath> The other thing is that it looks like a lot of hosting solutions out there already offer Fedora. 16:15:58 < mmcgrath> Ok, if there's no questions there I'll move on. 16:16:11 < glezos> mmcgrath, what's the Boards opinion on this? 16:16:18 < ricky> As long as they upgrade every ~13 months :) 16:16:35 < mmcgrath> glezos: I don't think they've formed an official opinion. 16:16:48 -!- G [n=nigel@wikipedia/NigelJ] has quit Connection timed out 16:16:50 < mmcgrath> skvidal and dgilmore are on the board, what do you two think? 16:17:14 < skvidal> yay for more options and decentralizing our infrastructure 16:17:33 < mmcgrath> heh 16:17:50 < skvidal> seriously 16:17:57 < skvidal> I think the general idea is this 16:18:02 * dgilmore is all for de centralising our infrastructure some 16:18:16 < skvidal> 1. fedora-infrastructure is really helping increase the interaction of community memebers in fedora admin 16:18:33 < skvidal> 2. the path we're taking is for sustainability and maintability - yay to both of those 16:19:03 < skvidal> 3. in general this is a good direction to go 16:19:13 * paulobanon_ yays to skvidal && dgilmore opinions 16:19:15 < glezos> I believe so too. 16:19:18 < skvidal> that's really it 16:19:25 < glezos> yay for it 16:19:31 * jima stumbles in 16:19:42 < mmcgrath> glezos: thats the sense I get from most people with the hesitation of not really knowing whats out there and the general adverse feelings towards 'advertising'. 16:19:50 < mmcgrath> so we go forward, but with caution :) 16:20:03 < skvidal> though 16:20:05 < skvidal> so far 16:20:12 < glezos> mmcgrath, +1 for caution on 'adviertising' 16:20:15 < skvidal> no one is pissy about the dell stamp at the bottom of the webpages 16:20:28 < skvidal> and I doubt if we had a rackspace or dreamhost or other thing down there 16:20:32 < skvidal> we'd gain a lot of ire 16:20:39 < ricky> After the reaction to smolt+Fedora branding, I see what mmcgrath means, though. 16:20:40 < skvidal> however, there are lines 16:20:45 < mmcgrath> I agree, especially since places like rackspace offer fedora hosting :) 16:21:18 < glezos> more choices are always better than one :) 16:21:41 < paulobanon_> we can always sell the idea of global load-balancing :) 16:21:46 < mmcgrath> You guys will hopefully be hearing a lot from me on this front over the next several weeks. I'll be contacting probably every lead that comes my way but won't be ccing everyone about it. I'm not trying to be secret or anything, its just a matter of being practical. Feel free to ask questions. 16:22:02 < mmcgrath> also suggest any hosting provider you might like or know of. 16:22:18 < mmcgrath> and if your company isn't a hosting provider but might be able to spare space and bandwidth in a rack in some colo, let me know. 16:22:30 < skvidal> mmcgrath: how about a report on the responses you've gotten every week or so? 16:22:40 < skvidal> mmcgrath: just so people know what's going on and also know who you've contacted or not? 16:22:51 < mmcgrath> That sounds very reasonable. 16:22:57 < paulobanon_> +1 16:23:21 < lmacken> +1 16:23:27 < mmcgrath> My goal is to have at least one other proxy server to use, thats not hosted in PHX before the F8 launch. 16:23:40 < mmcgrath> but certainly by F9 a fuller solution will hopefully be in place. 16:23:57 -!- G [n=nigel@wikipedia/NigelJ] has joined #fedora-meeting 16:24:09 < dgilmore> skvidal: indeed your right 16:24:14 < mmcgrath> Ok, so we'll move on for now if there aren't any other questions on that front? 16:24:32 < skvidal> dgilmore: in general I think that's true - about what in particular? :) 16:24:34 < mmcgrath> Anyone have any new sponsors? 16:24:43 < mmcgrath> I've added jima to the noc group. 16:24:59 < mmcgrath> jima: welcome 16:25:13 < paulobanon_> mmcgrath: not that many new requests :) 16:25:27 < mmcgrath> true 16:25:33 < dgilmore> skvidal: about de centralising 16:25:42 < mmcgrath> dgilmore: ? 16:25:44 < jima> yeah, i'm sure people are flocking to infrastructure 16:25:58 < mmcgrath> jima: we're a different breed of people :) 16:26:03 < dgilmore> mmcgrath: i was reading up got called away for a sec 16:26:05 < jima> mmcgrath: that we are 16:26:14 -!- bpepple|lt [n=bpepple|(a)rrcs-70-61-160-147.central.biz.rr.com] has joined #fedora-meeting 16:26:14 < mmcgrath> dgilmore: ahh 16:26:15 < dgilmore> mmcgrath: but please keep us in the loop 16:26:20 < mmcgrath> will do 16:26:32 < dgilmore> jima: about time :D 16:27:08 < mmcgrath> Well, thats really all that is on the schedule. No new SOP's. 16:27:13 -!- Renault [n=couretca(a)AToulon-151-1-131-130.w86-206.abo.wanadoo.fr] has quit "Quitte" 16:27:20 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor 16:27:26 < mmcgrath> Anyone have anything they'd like to discuss? 16:27:29 < paulobanon_> Noc 16:27:36 < mmcgrath> paulobanon_: have at it. 16:27:52 < paulobanon_> there has been a raise of alerts with the builders 16:28:01 < paulobanon_> regarding offline status 16:28:15 < paulobanon_> anything for us to worry about in general ? 16:28:20 < mmcgrath> ahh, good question 16:28:38 * jima kicks ekiga 16:28:47 * paulobanon_ wouldnt sleep if he had his blackberry on the pager app :) 16:29:08 < dgilmore> paulobanon_: generally its nothing to worry too much about 16:29:10 < mmcgrath> So the builders have been having issues 16:29:12 < mmcgrath> https://bugzilla.redhat.com/show_bug.cgi?id=260401 16:29:23 < dgilmore> right now builers are under a much heavier than normal load 16:29:29 < mmcgrath> We've actually hit a xen bug of some kind, I have someone internally (one of the virt guys) looking into it. 16:29:30 < paulobanon_> dgilmore: gotcha 16:29:32 < dgilmore> but we have that damn xen bug 16:30:06 < paulobanon_> k, makes sense 16:30:10 < mmcgrath> I would actually like to talk about the build system in general. 16:30:29 -!- Morph [i=gareth(a)mulder.wiked.org] has joined #fedora-meeting 16:30:32 < mmcgrath> In general I've been a little unhappy with the buildsystem over the last couple of months and its because of a lot of issues. 16:30:42 < mmcgrath> 1) capacity. We actually do have builders, but have been unable to find a place to put them. 16:31:07 < mmcgrath> This is mostly a failure of mine I guess since its my job to find places for this stuff but it's been difficult. 16:31:20 < paulobanon_> places == hardware? 16:31:47 < mmcgrath> yeah, we just haven't found a place to put the stuff and as a result its been sitting on the floor somewhere unpowered. 16:32:00 < paulobanon_> :/ 16:32:12 < mmcgrath> I'm hopeful this will be corrected within the next couple of months but at the same time when I ask GIT about it I get unclear, or different answers (if any) 16:32:31 < paulobanon_> whats GIT ? 16:32:46 < skvidal> Global Information Tech 16:32:49 < mmcgrath> 2) The missing dep issue on fedora-maintainers was annoying. It was one of those things that makes us look bad though it wasn't really our fault. 16:32:53 < skvidal> red hat's IS service 16:32:54 < paulobanon_> skvidal: thanks 16:32:56 < mmcgrath> paulobanon_: they're Red Hat's version of us :) 16:33:16 < skvidal> mmcgrath: they're not as fun as we are, though. :) 16:33:27 < paulobanon_> skvidal: ++1 16:33:35 < skvidal> heh 16:33:35 < paulobanon_> :) 16:33:37 < skvidal> I'm just kidding 16:33:44 < skvidal> I'm sure they're a blast 16:33:52 < mmcgrath> :) 16:33:56 < paulobanon_> heh 16:33:59 < mmcgrath> and 3) Successful failed builds. 16:34:04 < mmcgrath> dgilmore: do you have an update on that? 16:34:27 < mmcgrath> I don't know if it isn't happening as much now or if people just stopped complaining about it. 16:35:07 * nirik saw a report of it this morning in #epel. It's still happening I think. 16:35:35 < paulobanon_> mmcgrath: is #3 happening due to the capacity thing, koji, or any other unknown reason ? 16:35:47 < mmcgrath> I know dgilmore has been busy, I wonder if it would be possible to recruit another buildsys member to help. 16:35:53 < mmcgrath> its an unknown thing. 16:36:03 -!- G_ [n=nigel@wikipedia/NigelJ] has quit Connection timed out 16:36:06 < mmcgrath> a build will succeed, mock exits with 0 (as it should) but then plague thinks it failed. 16:36:54 < mmcgrath> dgilmore: ? 16:37:03 < mmcgrath> maybe $DAYJOB called :) 16:37:05 < paulobanon_> he prolly got called again 16:37:12 < mmcgrath> we can go back to that later. 16:37:36 < mmcgrath> So yeah, the builder outages are bad but they're being worked on. 16:37:45 < mmcgrath> Anyone else have something they would like to discuss? 16:38:10 * jima fields a phone call while trying to get sip software to work ;P 16:38:14 < mmcgrath> ricky: can you give us our weekly FAS2 round up? 16:38:56 < ricky> Well, I've attempted to move all access controll stuff into auth.py- it might need to be checked for some logic errors :) 16:38:59 < nirik> mmcgrath: is there any wiki page or other info about sponsoring? What is needed and what a sponsor gets? My company might be interested, but I would need info on what I am asking from them and what they get... 16:39:27 < ricky> I'll probably be asking a bit about the formalities surrounding the CLA process/how we plan to do that soon. 16:40:04 < mmcgrath> nirik: I'm new to that so I've been taking notes as I go. I've been getting spatterings of email from people and there was a thread on FAB about it but I hesitate to write anything down yet because I don't want to make false promises. 16:40:30 < mmcgrath> nirik: if you are interested send me an email and I'll give you the low down. 16:40:40 < ricky> Other than that, as mentioned before, I'm looking into using a separate database to manage stuff such as email changes and pending requests for groups. 16:40:50 < mmcgrath> ricky: cool, I had always thought of that as almost a wizard process. 16:40:50 < skvidal> mmcgrath: should we talk about start.fedoraproject.org? 16:40:55 < mmcgrath> I want to make it easier. 16:41:05 < mmcgrath> skvidal: yeah, we'll do that after FAS2. 16:41:06 < nirik> mmcgrath: ok. 16:41:13 < skvidal> ok 16:41:45 < ricky> So e-mail verification will be handled on creating an account- does that mean that we can do a sign/copy/paste process? 16:42:02 < ricky> (And just check the validity of the signature/that it matches the e-mail)? 16:42:03 < mmcgrath> ricky: yeah or a file upload or something. 16:42:12 < ricky> Ah, that easier, actually. 16:42:13 < warren> much easier than e-amil 16:42:15 < warren> e-mail 16:42:33 * dgilmore is here now 16:42:34 < mmcgrath> we'll still want to forward it as an email on. All CLA's get sent to some mailbox for legal (I don't even really know if they check it but even now they get forwarded there) 16:43:07 < mmcgrath> ricky: sounds like thats going well, anything else? 16:43:32 < ricky> That's it for now- I'm taking a tiny break and looking at possible website stuff at the moment. 16:43:40 < mmcgrath> cool 16:44:06 < mmcgrath> Ok, as skvidal mentioned, there's a possible new feature for F8. http://start.fedoraproject.org/ 16:44:11 < skvidal> 'feature' 16:44:22 * mmcgrath digs up FAB link 16:44:24 < skvidal> everyone go to start.fedoraproject.org 16:44:30 < paulobanon_> going 16:44:40 < skvidal> it's a google search page for fedora - like the firefox search page in default firefox browsers 16:44:59 < skvidal> the feature suggestion is to make that fedora's default homepage in firefox/konqueror/etc 16:45:28 < mmcgrath> https://www.redhat.com/archives/fedora-advisory-board/2007-August/msg00158.… 16:45:29 < warren> I hope we do keep it very simple like this. 16:45:29 < skvidal> now right now the website is at rackspace 16:45:36 < skvidal> warren: not likely 16:45:52 < skvidal> and it is a JSP 16:45:56 -!- mbonnet is now known as mbonnet_ 16:45:57 < skvidal> that will/can change 16:45:58 < warren> skvidal, with a prominent link to all the fedora info 16:46:18 < skvidal> again - it needs to be a bit busier than it is 16:46:30 < skvidal> but I agree - not confusingly so 16:46:35 < mmcgrath> skvidal: actually I think right now that is just a static page. 16:46:39 < ricky> JSP? Why does it need anything more than a static page? 16:46:43 < paulobanon_> skvidal, mmcgrath: whats the possibility for u guys to contact google to sponsor a minigoogle ? 16:46:44 < skvidal> the search results are jsp 16:46:57 < skvidal> a google bot? 16:46:59 < skvidal> no. 16:47:05 < skvidal> we don't want to host any non-open infrastructure 16:47:05 < warren> if the front page is kept simple like this, perhaps 1) people wont change the front page 2) we can easily display new info prominently 3) maybe Fedora can score some google ad revenue 16:47:07 * mmcgrath never did bother searching 16:47:11 < paulobanon_> it also works as a search engine 16:47:17 < ricky> Aha, I guess the JSP thing might not be active at the moment. 16:47:18 < skvidal> and a google bot is decidedly non-open 16:47:32 < skvidal> warren: the front page is not a decision for the infrastructure team to make 16:47:33 < paulobanon_> skvidal: thats true 16:47:42 < warren> skvidal, right, it was just an idea 16:47:52 < skvidal> what fedora gets out of this is some revenue 16:48:01 < skvidal> the adwords would pay back to us 16:48:32 < mmcgrath> skvidal: maybe thats the part I missed, where's the jsp come into play? I was under the impression that no serverside stuff was going on as of yet except for the handoff to google. 16:48:51 < warren> who decides what goes on the front page? 16:48:57 * warren wants to know who to talk to. 16:49:02 < dgilmore> mmcgrath: i think its just to add some dynamic contenet 16:49:04 < skvidal> mmcgrath: don was a bit fuzzy on that to me, too. but he was very clear it can be replaced with other languages 16:49:06 < jima> that sounds like policy to me ;) 16:49:08 < dgilmore> internal only stuff 16:49:15 < skvidal> warren: docs/websites/board 16:49:20 < dgilmore> it could be python from my understanding 16:49:26 < skvidal> warren: the same people who determine what goes on fp.org 16:49:28 < skvidal> dgilmore: yes 16:49:32 -!- rdieter_away [n=rdieter(a)sting.unl.edu] has quit Remote closed the connection 16:49:45 < warren> mmcgrath, it is possible for the page to be static (local) while using ajax for optionally displaying a dynamic headline 16:49:57 < skvidal> warren: yes- that was discussed on fab list 16:50:06 < skvidal> but the point for this discussion 16:50:08 < skvidal> is not that part 16:50:19 < warren> ajax, sorry for using you. 16:50:26 < mmcgrath> I guess its murky because the non-static stuff they are proposing doesn't exist. I don't know what its supposed to do. 16:50:31 < skvidal> the part is - if we get this - we'll need to have a place to put it 16:50:32 * ricky shudders a bit. 16:50:36 < skvidal> b/c we want it on machines WE control 16:50:50 < skvidal> WE == fedora infrastructure 16:50:56 < skvidal> WE != red hat, inc 16:51:08 < paulobanon_> skvidal: duke ? 16:51:10 < mmcgrath> which, right now, it is on RH, inc. 16:51:20 < skvidal> paulobanon_: they can be in the colo 16:51:24 < skvidal> but if max calls me and says 16:51:31 < skvidal> "take that ad box off there RIGHT NOW" 16:51:40 < skvidal> I don't want to have to go through seven layers of indirection to get it done 16:51:46 < ricky> Heh. 16:51:48 < skvidal> I want one of us to be able to ssh in, modify puppet and nuke it 16:51:53 < mmcgrath> paulobanon_: well I think we could host it, especially if we can get a few more proxy boxes. The question is I still don't know what the heck the 'server side' is supposed to do. 16:52:02 -!- gregdek is now known as gregdek_gone 16:52:13 < skvidal> mmcgrath: I'll get a firm answer on that 16:52:23 < mmcgrath> k 16:52:28 < skvidal> paulobanon_: hosted at the phx colo is fine - multiple sites is better 16:52:37 < skvidal> I'm not worried about rh being evil - it's clear rh is NOT being evil 16:52:43 < skvidal> my concern is with rh being busy 16:52:56 < skvidal> and not being able to get to something immediately b/c of other priorities 16:52:57 < paulobanon_> skvidal: understood 16:52:59 < warren> The non-static stuff could be very simple, simply serving the RSS data for display. Load would be relatively small. 16:53:06 < mmcgrath> <nod> the first rollout of start.fp.o is currently planned to be on A box in a rackspace datacenter. 16:53:07 < warren> All links from there go elsewhere 16:53:15 < dgilmore> skvidal: its currently in a colo AFAIK we should make sure don gives sysadmin-main access 16:53:36 < warren> mmcgrath, is rackspace a certainty? There are cheaper options 16:53:47 < skvidal> dgilmore: yah - it's only for f8t2 - I think bu t3 or GA we should have that fixed 16:53:48 < dgilmore> warren: don already has the server rented 16:53:51 < skvidal> warren: rackspace is where it is now 16:53:51 < warren> ah 16:54:00 < mmcgrath> dgilmore: we can do that, I've made it very clear that what is currently there is not 'live' or 'blessed' to be official. 16:54:30 < dgilmore> mmcgrath: reminds me i should setup access to sparc builders 16:55:26 < mmcgrath> So long story short, we as a group have a list of demands and we need to communicat that to Donald. 16:55:36 < skvidal> I'll do it 16:55:46 < skvidal> and I'll cc dgilmore and mmcgrath on it, kewl? 16:55:53 < mmcgrath> skvidal: k, if you change your mind let me know. 16:55:54 < dgilmore> skvidal: sounds perfect 16:56:16 < skvidal> dgilmore: you're ausil@ right? 16:56:21 < skvidal> mmcgrath: why would I change my mind? 16:56:23 * mmcgrath notes we're only talking about implementation here. What it is, does and any $$ that get exchanged is between the board I guess. 16:56:32 < mmcgrath> skvidal: no idea, just throwing it out there :0 16:56:38 < skvidal> mmcgrath: ok 16:57:26 < skvidal> dgilmore: yo uneed to get dgilmore@ as an alias :) 16:57:34 < mmcgrath> Ok, so it sounds like we have some action items to do there. 16:57:43 < mmcgrath> Anyone have anything else? we've got about 5min left in the meeting. 16:58:25 < mmcgrath> Ok, if no one has anything we'll close the meeting in 30 16:58:42 < mmcgrath> 15 16:58:52 < mmcgrath> 5 16:59:01 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting End 16:59:04 < mmcgrath> Thanks for coming everyone 16:59:09 < paulobanon_> thx mmcgrath 16:59:15 < ricky> Thanks. 16:59:39 -!- mmcgrath changed the topic of #fedora-meeting to: Channel is used by various Fedora groups and committees for their regular meetings | Note that meetings often get logged | For questions about using Fedora please ask in #fedora | See http://fedoraproject.org/wiki/Communicate/FedoraMeetingChannel for meeting schedule 17:00:49 * ricky finally finishes reading the mailing list thread :) 17:01:37 < dgilmore> skvidal: dgilmore@ works 17:01:43 < skvidal> ooo good 17:01:49 < dgilmore> skvidal: i am ausil@ though 17:02:44 < dgilmore> i should sign up for a second account or do something to blacklist dgilmore from becoming a fas account 17:03:08 < dgilmore> mmcgrath: we should add a blacklist feature to FAS 17:03:09 < ricky> Hm.. the same probably applies to all of those extra aliases in there :) 17:03:21 < mmcgrath> dgilmore: probably a good idea 17:03:23 * ricky adds a TODO for FAS2. 17:03:25 < warren> didn't we get rid of the aliases? 17:03:40 < mmcgrath> dgilmore: hey, I forgot to ask you have you had any more chance to debug the failed successful builds? 17:03:45 < mmcgrath> warren: just the Firstname.Lastname aliases. 17:03:47 < dgilmore> warren: there are aliases that are there for things not part of fas 17:03:51 < warren> ooh 17:04:02 < dgilmore> mmcgrath: no ill get some time tonight 17:04:03 * jima doesn't miss the firstname.lastname alias 17:04:11 < jima> but then, no one really uses my name anyway 17:04:24 < dgilmore> jima: alot of people probably dont know it 17:04:30 < jima> dgilmore: nope 17:07:29 < jima> heh, i guess i got a sip client to work, after the meeting ended ;)

1 0

xenbuilder2
by Mike McGrath 31 Aug '07

31 Aug '07

I've taken xenbuilder2 offline (out of koji and plague). Eduardo works on the virt team inside Red Hat and he's going to help us track down this bug: http://bugzilla.redhat.com/260401 If you see ehabkost thank him and let him do his thing :) -Mike

1 0

Securing our transifex instance
by Dimitris Glezos 29 Aug '07

29 Aug '07

Hi all. It's time to add some non-localhost repos to our transifex instance, so some advices on the security front would be greatly appreciated. We're doing everything over SSH, with encrypted keys. Before starting the TG app, tha admin needs to run ssh-agent and ssh-add. The goal would be to have a different service actually handling the keys and the commits, but that would have to wait for someone to submit the patchset. With each repository (host) having its own key pair, `~/.ssh/config` right now looks like this: Host localhost User transifex-testuser IdentityFile ~/.ssh/id_dsa #Host cvs.fedoraproject.org # User transifex # IdentityFile ~/.ssh/id_dsa-cvsfpo Host repo.or.cz User yumex-trans IdentityFile ~/.ssh/id_dsa-yumex Host * ForwardX11 no ForwardAgent no RhostsAuthentication no RhostsRSAAuthentication no PasswordAuthentication no StrictHostKeyChecking yes BatchMode yes CheckHostIP yes On the web front, I tried my best to validate properly any input/output from/to the user. Since transifex accepts user input, writes files on our server, runs OS commands on the server, uses SSH keys to communicate with other machines and writes to disks across the Internet, we better make sure everything is OK before launching. It would be great if some of you python hackers take a look at the code, or anyone with the hobby of defacing websites run any injection/XSS-foo on our instance, in order to identify and any additional checks or reveal any mistakes I made (which I'm sure I did since it's my first big python and TG app). Our test instance dwells at http://publictest5.fedora.redhat.com/submit/ Short instructions to get the code and install a local instance to play around freely and with less lag can be found at: https://hosted.fedoraproject.org/projects/transifex/browser/INSTALL Bugs, reports, suggestions: https://hosted.fedoraproject.org/projects/transifex/newticket Thanks. -d -- Dimitris Glezos Jabber ID: glezos(a)jabber.org, GPG: 0xA5A04C3B http://dimitris.glezos.com/ "He who gives up functionality for ease of use loses both and deserves neither." (Anonymous) --

2 1

Puppet Training!
by Mike McGrath 27 Aug '07

27 Aug '07

puppet1 is ready to be used (right now everything is still on lockbox until after the training). I'm going to do some actual training this time around on how we're using it. Training is optional but strongly encouraged (as I'm interested in discussion from those of you who use it to find better ways of doing things) The training will be done over asterisk, and in #fedora-meeting. Since much of it is training you will only need to listen so no microphone is needed. I'll be handing out slides. See http://fedoraproject.org/wiki/Infrastructure/Asterisk for how to connect. Please let me know which of these times work best for you: Monday August 27th at 15:00 UTC Monday August 27th at 20:00 UTC Wednesday August 29th at 20:00 UTC Right now I'm scheduling it for the 27th at 20:00 UTC unless people can't make that time. -Mike

12 17

Puppet
by Mike McGrath 27 Aug '07

27 Aug '07

Just a reminder, I'm transitioning puppet right now, if you need to make changes please let me know, I'll get them in there. -Mike

1 0

Intro and a question about mirroring.
by susmit shannigrahi 27 Aug '07

27 Aug '07

Hi all, This is Susmit <http://www.fedoraproject.org/wiki/SusmitShannigrahi> here. Earlier my domain was only ambassador and free media, now joining infrastructure too. Still a student but configuring and testing things for a few years. Recently, I got access to hardware resources and bandwidth, so thought about joining infrastructure. I have a question, I think this should be the appropriate list. What is the minimum bandwidth required to set up a fedora public mirror? I am working at an university and seriously thinking of setting up a mirror. Thanks and regards, Susmit. -- ssh 0x86DD170A http://www.fedoraproject.org/wiki/SusmitShannigrahi

3 9

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure August 2007