infrastructure September 2010

infrastructure@lists.fedoraproject.org

29 participants
36 discussions

/usr/bin/git-update-server-info on hosted1
by Todd Zullinger 20 Sep '10

20 Sep '10

Does anyone know why /usr/bin/git-update-server-info on hosted1 has different owner and mode from what's in the git rpm? $ rpm -Vf /usr/bin/git-update-server-info .M...U.. /usr/bin/git-update-server-info $ ls -l /usr/bin/git-update-server-info -rwxrwsr-x 1 bobmcwhirter root 178588 Jun 19 2009 /usr/bin/git-update-server-info I asked in IRC earlier, but it's less likely to be missed here. We symlink hooks/post-update to this file in most, if not all, git repositories. Perhaps someone got the ln syntax wrong and then restored the file but forgot the owner and mode? Whatever the case, unless someone knows of a good reason why the file has the owner and mode that it currently has, we probably want to fix this (e.g. sudo chown root. /usr/bin/git-update-server-info; sudo chmod 644 /usr/bin/git-update-server-info). -- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Hard work never killed anybody, but it is illegal in some places. -- Demotivators (www.despair.com)

2 2

Upcoming Fedora 14 Tasks
by John Poelstra 20 Sep '10

20 Sep '10

Start End Name Tue 14-Sep Tue 28-Sep Beta Infrastructure Change Freeze Tue 28-Sep Tue 28-Sep Beta Release Public Availability

1 0

RE: Opening subscriptions to mirror-list{,-d} ?
by Matt Domsch 20 Sep '10

20 Sep '10

Marek, there were no objections that I saw. Can you open this up now? We may still move it to @lists.fedoraproject.org, but for now, let's just open the perms. Thanks, Matt -- Matt Domsch Technology Strategist Dell | Office of the CTO -----Original Message----- From: Marek Mahut [mailto:mmahut@redhat.com] Sent: Friday, August 27, 2010 9:54 AM To: Domsch, Matt Cc: cmacleod(a)redhat.com; csmith(a)redhat.com; sbathe(a)redhat.com; salagond(a)redhat.com; Will Foster; infrastructure(a)lists.fedoraproject.org; adrian(a)lisas.de Subject: Re: Opening subscriptions to mirror-list{,-d} ? On 08/27/2010 04:48 PM, Matt_Domsch(a)Dell.com wrote: > I would like to propose we remove the subscription administrative confirmation for mirror-list and mirror-list-d. > > As best as I can tell, the primary users of these lists are Fedora mirrors, with a few RHEL source and beta mirrors subscribed too, though for those tracked by MirrorManager, they are all also Fedora mirrors. > > We no longer are adding new mirrors to the master mirror rsync ACLs, and have not added anyone to the ACLs for at least a year. Therefore, the only "benefit" an admin gets to being on mirror-list from a Red Hat corporate perspective would be advanced notice of new bits being staged or made available, at most 1 week advance notice. > > It would simplify the process for mirror admins to sign up, and remove an administrative duty that Adrian Reber and I have carried for several years. > > Please advise. This is fine with me, if no one objects I will open the list next week on Tue. I would also like to thank Matt and Adrian for their awesome work. > Thanks, > Matt > Fedora Mirror Wrangler > > -- > Matt Domsch > Technology Strategist > Dell | Office of the CTO -- Where open source multiplies http://opensource.com Marek Mahut Red Hat IT Red Hat Czech Tel.: +420-532-294-666 Purkynova 99 GSM: +420-739-636-703 612 00 Brno Email: mmahut(a)redhat.com Czech Republic Web: http://cz.redhat.com ____________________________________________________________________ Registered Address: Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic Registered in Brno under identification number CZ27690016

1 0

[PATCH] make nagios-external work again
by Ricky Elrod 19 Sep '10

19 Sep '10

I sent this to the wrong place - if some people got this twice, I apologize: Can I get a +1 or two, for this: diff --git a/modules/httpd/files/nagios.conf b/modules/httpd/files/nagios.conf index 50ba52f..22fd319 100644 --- a/modules/httpd/files/nagios.conf +++ b/modules/httpd/files/nagios.conf @@ -1,5 +1,5 @@ -ProxyPass /nagios http://noc1/nagios -ProxyPassReverse /nagios http://noc1/nagios +ProxyPass /nagios http://noc01/nagios +ProxyPassReverse /nagios http://noc01/nagios -ProxyPass /nagios-external http://noc03/nagios-external -ProxyPassReverse /nagios-external http://noc03/nagios-external +ProxyPass /nagios-external http://noc02/nagios-external +ProxyPassReverse /nagios-external http://noc02/nagios-external

4 5

Introduction
by p sena 19 Sep '10

19 Sep '10

Hi Team, Please find my introductory details below:- * Name - Prabir Senapati * Time Zone / Country - IST / India * Basic skills and experiences - Unix (Scripting & moderate admin skills), Perl/CGI (advance level), PHP, HTML, Javascript, C, Apache, MySQL, SCM (version control) tooling. * Why you're joining - To experience the art of distributed contribution in software/IT development & maintenance. To leverage on critical thinking in this software field by open shared ideas and solutions. * What you're looking to do - Maintaining the server farms. Know the fundamental setup in various fields like web, packaging, release etc, handle activities and develop web or CLI tools and provide automation applying processes. Contribute to the Perl things. Handle the advance things (handle modules, release, pkg, dist, putting Perl to go with Fedora...). And ofcourse Learn new things... * How much time you can contribute (usually hours per week) - At first I would like to spend around 6-8 hours in total per week. Work days(like sat, sun, wed, fri...) might not be consistent. Thanks, Prabir

2 4

hi, i newly joined fedora infrastructure group
by p sena 17 Sep '10

17 Sep '10

Hi, I am new to the fedora infrastructure group. I am going throug few of the links in the site to get a feel of the work. I have submitted my .ssh_rsa_key.pub from the site. I think I will get some intimation on this. Please someone can let me know further proceedings from here onwards. Cheers. Regards & Thanks Prabir Senapati mailto: senapati2001(a)yahoo.com

3 5

[PATCH] Fix noc02 IP in global iptables/nrpe templates.
by Ricky Zhou 15 Sep '10

15 Sep '10

--- configs/system/nrpe.cfg | 2 +- modules/iptables/templates/iptables.erb | 1 - 2 files changed, 1 insertions(+), 2 deletions(-) diff --git a/configs/system/nrpe.cfg b/configs/system/nrpe.cfg index 04f2e4a..ae69684 100644 --- a/configs/system/nrpe.cfg +++ b/configs/system/nrpe.cfg @@ -70,7 +70,7 @@ nrpe_group=nrpe # NOTE: This option is ignored if NRPE is running under either inetd or xinetd #allowed_hosts=127.0.0.1,192.168.0.2 -allowed_hosts=10.5.126.41,127.0.0.1,192.168.1.10,192.168.1.20,209.132.182.50,192.168.1.75 +allowed_hosts=10.5.126.41,127.0.0.1,192.168.1.10,192.168.1.20,209.132.182.50,192.168.1.20 diff --git a/modules/iptables/templates/iptables.erb b/modules/iptables/templates/iptables.erb index b38615a..74319ae 100644 --- a/modules/iptables/templates/iptables.erb +++ b/modules/iptables/templates/iptables.erb @@ -137,7 +137,6 @@ COMMIT -A INPUT -p tcp -m tcp -s 10.5.126.41 --dport 5666 -j ACCEPT -A INPUT -p tcp -m tcp -s 192.168.1.10 --dport 5666 -j ACCEPT -A INPUT -p tcp -m tcp -s 192.168.1.20 --dport 5666 -j ACCEPT --A INPUT -p tcp -m tcp -s 192.168.1.75 --dport 5666 -j ACCEPT -A INPUT -p tcp -m tcp -s 209.132.182.50 --dport 5666 -j ACCEPT # SNMP allows from our monitoring systems -- 1.5.5.6

3 2

Change request: new bodhi release
by Luke Macken 15 Sep '10

15 Sep '10

I've been trying to get this new bodhi release out the door for a while now. It fixes a lot of important bugs and adds a bunch of new features. I've added many new unit tests for a lot of these fixes/features, i've been poking it in staging for a while, and it does not contain any db schema changes so it can be reverted with a `yum downgrade bodhi-server` if things go south. Thanks, luke ===================================================================== bodhi v0.7.9 - Email the proventesters with stale unapproved critical path updates after 2 weeks - Allow people to revert their karma vote more than once - Download and inject the pkgtags sqlite db into our repodata from the pkgdb (which will be used by `yum search`) - Improved editing functionality - Only unpush edited updates when builds are added/removed - Make a note in the comments of which builds were added/removed - Add the new 'dist-fN-updates{-testing,}-pending' tags to builds so AutoQA can start testing them before they get pushed - Get the 'suggest reboot' flag working again - List security & critpath testing updates in our updates-testing digest emails - Allow non-critpath updates to be pushed to stable after meeting our critpath requirements - Add mouseover tooltips to the update status with more details - Prevent conflicting builds from being added to the same update (eg: 2 different versions of the same package) - Handle more types of bugzilla auto-linking in comments - Link to newer update in the obsoleted one - Remove our pagination query limit of 1000 - Add a new 'author_group' field to each comment in our JSON API - Properly capture stderr from our mash subprocess - Add --stablekarma, --unstablekarma, and --disable-autokarma client args - Fix a bug in using `bodhi --push-build=` on multi-build updates - Link to gitweb instead of viewvc - Set default (un)stable karma values if autokarma re-enabled - Mark anonymous karma as being ignored - Add a --bodhi-url command-line option - Instead of requiring only one arg with a comma separated list of updates, support several builds as several args. - Improved metrics report generator (soon to be integrated into the web interface)

4 3

[PATCH] Enable icon caching for pkgdb
by Mike McGrath 15 Sep '10

15 Sep '10

Toshio and I worked through this yesterday and agreed the change was worth it. It's very easy to revert. Can I get 2 +1's? diff --git a/manifests/servergroups/proxy.pp b/manifests/servergroups/proxy.pp index 43e0c69..099305c 100644 --- a/manifests/servergroups/proxy.pp +++ b/manifests/servergroups/proxy.pp @@ -401,7 +401,7 @@ class proxy { fedora-packagedb::proxy { "admin.fedoraproject.org/pkgdb": website => "admin.fedoraproject.org", path => "/pkgdb", - proxyurl => "http://localhost:10003", + proxyurl => "http://localhost:6081", } bodhi::proxy { "admin.fedoraproject.org/updates": diff --git a/modules/varnish/files/proxy.vcl b/modules/varnish/files/proxy.vcl index 2ba7414..327e1be 100644 --- a/modules/varnish/files/proxy.vcl +++ b/modules/varnish/files/proxy.vcl @@ -112,8 +112,9 @@ sub vcl_recv { if (req.url ~ "^/w/") { set req.backend = wiki; } - if (req.url ~ "^/pkgdb/") { + if (req.url ~ "^/pkgdb/appicon/show/") { set req.backend = pkgdb; + unset req.http.cookie; } if (req.url ~ "^/mirrorlist/") { set req.backend = mirrorlists; @@ -187,6 +188,13 @@ sub vcl_recv { lookup; } +# When requesting application icons, don't allow cherrypy to set cookies +sub vcl_fetch { + if (req.url ~ "^/pkgdb/appicon/show/") { + unset obj.http.set-cookie; + } +} + # Called if the cache has a copy of the page. #sub vcl_hit { # if (req.request == "PURGE")

3 2

Introduction
by Jason Brown 15 Sep '10

15 Sep '10

Hello everyone, my name is Jason Brown and I would like to contribute to the infrastructure team. I am an RHCE and have 5 years experience as a systems administrator mainly working with Red Hat and Fedora. I have knowledge configuring and working with Apache, Puppet, MySQL, BIND, Postfix, and Dovecot along with writing scripts in Python and Bash. I would like to work with the sysadmin or the sysadmin-releng groups, however any place the infrastructure team needs help is fine with me. I live in Michigan and work until 4:30 so making the meetings sometimes maybe difficult. I can work about 5-10 hours a week on projects. Thanks, Jason

3 5

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure September 2010