infrastructure February 2010

infrastructure@lists.fedoraproject.org

44 participants
56 discussions

[PATCH] Add 13 to the updates-testing set to be synced
by Jesse Keating 17 Feb '10

17 Feb '10

Have to split the syncs into two loops because we don't have updates for 13 just yet. When 13 goes GA we'll collapse this back to a single loop. --- configs/system/fedora-updates-push | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/configs/system/fedora-updates-push b/configs/system/fedora-updates-push index 45346b1..b74695f 100755 --- a/configs/system/fedora-updates-push +++ b/configs/system/fedora-updates-push @@ -10,6 +10,10 @@ rsync -rlptDvHh --delay-updates $RSYNC_OPTS --exclude "repodata/*" \ rsync -rlptDvHh --delay-updates $RSYNC_OPTS --delete --delete-after \ $SOURCE/f$rel-updates/ $DEST/$rel/ &>/dev/null +done +# we don't have updates for 13 yet, just updates-testing. +for rel in 11 12 13; do + rsync -rlptDvHh --delay-updates $RSYNC_OPTS --exclude "repodata/*" \ $SOURCE/f$rel-updates-testing/ $DEST/testing/$rel/ &>/dev/null rsync -rlptDvHh --delay-updates $RSYNC_OPTS --delete --delete-after \ -- 1.5.5.6

3 3

[PATCH] Add ftpsync to the lock group for lock-wrapper.
by Ricky Zhou 17 Feb '10

17 Feb '10

I don't think the earlier lock-wrapper change will work, since the ftpsync user does not have write access to /var/lock. This patch adds the ftpsync user to the lock group, which should allow it to use lock-wrapper. Alternatively, we can run lock-wrapper as root and use sudo to run the command as ftpsync. --- manifests/services/mirrormaster.pp | 11 ++++++----- 1 files changed, 6 insertions(+), 5 deletions(-) diff --git a/manifests/services/mirrormaster.pp b/manifests/services/mirrormaster.pp index 001aec2..89af308 100644 --- a/manifests/services/mirrormaster.pp +++ b/manifests/services/mirrormaster.pp @@ -9,12 +9,13 @@ class mirrormaster { user { ftpsync: require => Group['ftpsync'], - uid => 263, - gid => 263, - shell => '/bin/bash', - home => '/tmp', + uid => 263, + gid => 263, + groups => [ "lock" ], + shell => '/bin/bash', + home => '/tmp', comment => 'ftpsync account', - ensure => present, + ensure => present, } script { "/usr/local/bin/update-fullfilelist": -- 1.5.5.6

3 4

[PATCH] Enabling the wrapper script and removing F10
by Mike McGrath 17 Feb '10

17 Feb '10

This was requested by jesse and will ensure the sync script is only running once and is no longer syncing F10 --- configs/system/fedora-updates-push | 2 +- manifests/services/mirrormaster.pp | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/configs/system/fedora-updates-push b/configs/system/fedora-updates-push index 94105d5..45346b1 100755 --- a/configs/system/fedora-updates-push +++ b/configs/system/fedora-updates-push @@ -3,7 +3,7 @@ SOURCE=/mnt/koji/mash/updates DEST=/pub/fedora/linux/updates/ -for rel in 10 11 12; do +for rel in 11 12; do rsync -rlptDvHh --delay-updates $RSYNC_OPTS --exclude "repodata/*" \ $SOURCE/f$rel-updates/ $DEST/$rel/ &>/dev/null diff --git a/manifests/services/mirrormaster.pp b/manifests/services/mirrormaster.pp index 513157a..001aec2 100644 --- a/manifests/services/mirrormaster.pp +++ b/manifests/services/mirrormaster.pp @@ -49,7 +49,7 @@ class mirrormaster::fedora { include mirrormaster cron { updates-sync: - command => "/usr/local/bin/fedora-updates-push && /usr/local/bin/update-fullfilelist fedora", + command => "/usr/local/bin/lock-wrapper fedora-updates-push '/usr/local/bin/fedora-updates-push && /usr/local/bin/update-fullfilelist fedora'", user => ftpsync, minute => [ 15, 45 ], ensure => present, -- 1.6.6

3 2

Change Request: spins1
by Mike McGrath 17 Feb '10

17 Feb '10

It's been determined that it would be better for spins1 to start following F13 now instead of rawhide so we're looking at disabling the rawhide repo and enabling the development F13 updates repo. I'll get to work on this now if I get 2 +1's. -Mike

3 2

[PATCH] Add 13 to the updates-testing set to be synced
by Jesse Keating 17 Feb '10

17 Feb '10

Have to split the syncs into two loops because we don't have updates for 13 just yet. When 13 goes GA we'll collapse this back to a single loop. --- configs/system/fedora-updates-push | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/configs/system/fedora-updates-push b/configs/system/fedora-updates-push index 94105d5..ac458f9 100755 --- a/configs/system/fedora-updates-push +++ b/configs/system/fedora-updates-push @@ -10,6 +10,10 @@ rsync -rlptDvHh --delay-updates $RSYNC_OPTS --exclude "repodata/*" \ rsync -rlptDvHh --delay-updates $RSYNC_OPTS --delete --delete-after \ $SOURCE/f$rel-updates/ $DEST/$rel/ &>/dev/null +done +# we don't have updates for 13 yet, just updates-testing. +for rel in 10 11 12 13; do + rsync -rlptDvHh --delay-updates $RSYNC_OPTS --exclude "repodata/*" \ $SOURCE/f$rel-updates-testing/ $DEST/testing/$rel/ &>/dev/null rsync -rlptDvHh --delay-updates $RSYNC_OPTS --delete --delete-after \ -- 1.5.5.6

2 1

Change Request - Bodhi bugfix
by Luke Macken 17 Feb '10

17 Feb '10

Hey guys, I pushed out a new version of bodhi yesterday, which has been working so far as expected. However, I did break the metrics section of the application. It doesn't break the core functionality of the application, and isn't crucial for the No Frozen Rawhide stuff, but it's a regression with a trivial fix. I'd like to push it out before PyCon, if possible. luke

3 3

local koji server - creating certificates
by Doug Reiland 17 Feb '10

17 Feb '10

I am going thru the step of creating the certs. for kojira, kojiadm, ... If I understand the directions correctly, the field for common name is "admin" for everybody except kojihub and kojiweb, which used my server name. I do the following steps: openssl genrsa .. openssl req ... openssl ca .. The openssl ca works for the first user (say kojira), but not the next, kojiadmin: failed to update database TXT_DB error number 2 So, /etc/pki/koji/certs/*.crt end up empty and when I restart httpd, it fails because /etc/http/conf.d/ssl.conf is including some of them. What am I missing?

1 0

[PATCH] Doing a mass branch, we don't want new ACLs during that time
by Jesse Keating 16 Feb '10

16 Feb '10

--- manifests/services/cvs.pp | 13 +++++++------ 1 files changed, 7 insertions(+), 6 deletions(-) diff --git a/manifests/services/cvs.pp b/manifests/services/cvs.pp index d9ed5f6..17dfb9c 100644 --- a/manifests/services/cvs.pp +++ b/manifests/services/cvs.pp @@ -79,12 +79,13 @@ class cvs-pkgs { script { '/usr/local/bin/genacls.sh': source => 'system/genacls.cron' } - cron { genacls: - command => "/usr/local/bin/genacls.sh &>/dev/null", - user => "toshio", - minute => [ 0, 10, 20, 30, 40, 50 ], - ensure => present, - } + # Disable this during mass branch + #cron { genacls: + #command => "/usr/local/bin/genacls.sh &>/dev/null", + #user => "toshio", + #minute => [ 0, 10, 20, 30, 40, 50 ], + #ensure => present, + #} script { '/usr/local/bin/updatecrl.sh': source => 'system/updatecrl.sh' -- 1.5.5.6

4 5

[MERGE] Fixing errors found with ReviewBoard integration
by Stephen Gallagher 16 Feb '10

16 Feb '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The attached patch resolves the following issues that were interfering with FAS integration in ReviewBoard. django/auth/middleware.py: If there are other authentication mechanisms in place, don't throw an exception on a missing session_id django/auth/models.py: connection.group_list returns a tuple, the second entry of which is the dict that we intended to be accessing. Trying to call gl['groups'] throws a KeyError userinfo in _get_name() contains a double-level dictionary. When requesting 'human_name', we need to access the 'person' dictionary first or we throw a KeyError - -- Stephen Gallagher RHCE 804006346421761 Delivering value year after year. Red Hat ranks #1 in value among software vendors. http://www.redhat.com/promo/vendor/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkt63FwACgkQeiVVYja6o6MO5wCbBxWmJ7bVn6FxzGuBOta+4IMI TdYAn20akaNKqn2ibHU2Oy6n17BKOR+Q =A2UF -----END PGP SIGNATURE-----

1 0

Introduction
by Mark Chappell 16 Feb '10

16 Feb '10

/me waves hello. My name's Mark, I'm a Sysadmin with 5 years commercial experience, Red Hat EL/CentOS and Fedora. I've been using Linux on the desktop for the last 10 years. Last December I finally got around to qualifying as RHCE. Over the last 5 years I've been responsible for the usual array of Web and Mail servers (mostly Exim), Kerberos, DNS, LDAP. I've been involved with desktop deployment of Fedora and Linux, and the supporting infrastructure, including installing and administering Koji and Mash for our internal builds and modifications, Puppet and Spacewalk for control and remote admin. I'm also starting to package various things that we require on site and trying to get them into Fedora/EPEL where possible. As with many sysadmins I'm part systems developer, Perl, Python, Bash, etc. I'm UK based, working 9-5 Europe/London. IRC is not a problem. Mark

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure February 2010