infrastructure November 2013

infrastructure@lists.fedoraproject.org

24 participants
19 discussions

Meeting Agenda Item: Introduction Maciej Lasyk
by Maciej Lasyk 13 Nov '13

13 Nov '13

Hi Guys, It's really nice to write this post on this group :) I've been the sysadmin for the last 10+ years (with RHEL on servers, Fedora on desktop and Slackware on playboxes). I would love to help You :) I live in Poland, so my clock is set to CET (UTC+1). My freenode nick is: docent My skills consists of general sysadmin abilities (I'm currently RHCE, but also love to work with network issues, have quite good websecurity knowledge, currently doing RHCSS). I can write scripts in Python / Bash / Perl; I also know C (but in the beginning I'd rather focus on knowing You and Fedora project env, so I'm sure that low - level programming would not be the case at the beginning). I'm big fan of Ganglia monitoring system (I saw You're using CollectD - that's also great solution. I've got deep knowledge of Nagios. I also have experience in creating workflows in issue tracker systems like Jira (I've been Jira admin for a while, also I was a team leader in Ops, so have some general leadership knowledge - but honestly I'd rather focus on classical sysadmin work - but always can talk about team issues). My general goal in joining Fedora team is to find a way back to low - level programming. About 10 years ago I programmed a lot in C, knew much of syscalls but than just lost it during subsequent years. But until that - I'd like to help You with sysadmin work, see how it's in a such great team (I worked a lot with multi - cultural teams, but those were classical non - Open Source related jobs) and get some new challenges. I've checked issues under https://fedorahosted.org/fedora-infrastructure/report/1 and honestly there are some that I don't understand at all, but also there's quite a lot of those that I could take care of. But I'm little confused as there're issues which looks really outdated. Despite my family, job, hobbies (cycling, ARMs, also I've got server in my basement on which I do some developer work - did I write that I really love networking? I got some Cisco outdated hardware which I play sometimes) I think that in the beginning I could contribute about 2-3h per week and from this point check how it's going. I think that's all - it was really nice to see You guys in LinuxCon (I was there in Prague 2 years ago and Barcelona last year; unfortunately didn't make it this year). I'm really looking forward to see You next year, regards, Maciej Lasyk GPG key ID: 4FED49C5 GPG public key: http://maciek.lasyk.info/gpg_maciej_lasyk.asc

1 0

Fedora 20 Beta Freeze now in effect
by Kevin Fenzi 13 Nov '13

13 Nov '13

Greetings. we are now in the infrastructure freeze leading up to the Fedora 20 Beta release. This is a pre-release freeze. You can see a list of hosts that do not freeze by checking out the ansible repo and running the freezelist script: git clone http://infrastructure.fedoraproject.org/infra/ansible.git scripts/freezelist -i inventory/inventory Anything listed as freezes is frozen until 2013-10-29 (or later if Beta slips). Frozen hosts should have no changes made to them without a signoff on the change from at least 2 sysadmin-main or rel-eng members. Thanks, kevin

2 3

tickets #4039, #4046, #4045
by Janez Nemanič 12 Nov '13

12 Nov '13

Hi, could somebody have a look at the tickets #4039, #4046, #4045 and give me some feedback. I would like to know if my patches are ok or if I have to fix anything or if I have to add anything etc.. Janez Nemanic Best regards

2 2

Meeting Agenda Item: Introduction Sam Jorna
by Sam Jorna 11 Nov '13

11 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello People! My name (as you might have guess from the subject line) is Sam Jorna (irc: wraeth). I'm based on the east coast of Australia (UTC+1100 (normally UTC+1000 but we have Day Light Savings at the moment)). I've been wanting to join Fedora in some capacity for a while but have been unsure exactly where I would fit in. The Infrastructure team appeals to me both because it's the sort of thing that I'm interested in personally, and it's related to what I do professionally (server/platform technical support for web-based software, including both utility creation/maintenance and customer-side client/server work). With regard to my skill set, I consider myself something of a jack-of-many-trades (master-of-none), though I have practical experience in scripting (bash/perl), have some experience/understanding of SQL, and would like to learn python (everyone seems to be using it!). I'm happy to learn anything I can and often mess around with different programs just so I can figure them out. I have a solid understanding of Linux in general (I'm a previous Gentoo user, so getting my keys dirty isn't anything new) and have been using Fedora for a while now. One of our work platforms is RHEL, and myself and a few others use Fedora as a workstation since they're so closely related (that is, one of the platforms we deploy on, not that we have one RHEL box). I've also often been the 'go-to guy' when people have computer issues, and can generally find a way to explain things to people in a way they can understand. I'm honestly not sure what I would or should work on - I imagine that will come as I become more familiar with the operation and responsibilities of the group, though I'm quite familiar with remote administration through my duties at work. I'd also like to mention I'm no stranger to virtualization, and often have one or two VM's floating around to play around with. I hope I can prove to be a valuable member of the team, and look forward to working with everyone (assuming I'm accepted among the ranks). If you have any questions, feel free to shoot me an E-Mail or find me on freenode.net - I'm usually in #fedora{,-social} and will be lurking in #fedora-admin while I get a handle on things. Cheers; - -- Sam Jorna sam.t.jorna(a)gmail.com GnuPG Key ID: 12D3EE0C Fingerprint: 6D14 8366 16F5 638E 3A29 1FED 5D5C 62D9 12D3 EE0C Secure your E-mail: http://www.gnupg.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQGcBAEBAgAGBQJSgJ8eAAoJEF1cYtkS0+4M11sL/j6GLpyMsENtiX1oQ+7uIow/ 12nmZfO4QuKVbaAFllp4ytXegLoBdyaf6IH3iVghpgddtcJB+EEJ7neL9uF824Tq Ve+RXdFkxwl3X12w66uYykDsQKWogolwYHxdU0e3xcfof+QnJBd8ajHHi37X0gte Hp2ADjPkbQJRO7byX4+hd89ricC4Llen0h530Zhrx+o+Wv6w89DyLcoVWEAhfqPJ ZCUZWe2x01wjnKuQV0dui/lTbrUfqLHgQp1AEjRkDpsAyFidjk/s0l2AGK1FKIm7 6RoBjHD2SNkgsbUuXQgs977SzwSSwCWzWFVIRlAG4/QEBYGUJLMtT7jgaG+Ql0Ae XiDuFgrFKLjeDLLAaKv7Ely0GR4R5SH6tyyvaFUOJYs57vylMvXEnf29W4Tvoh6n Ll7mxeY0B474/LOWCoJDFWux2sZX0bFUzRT+Pgm1446TMOYcVwt3QyZ0gk9F5DjL F8X2yHG5L/B/tjKkghfd0qWpQ+p9c3eh4WlbNukytA== =+CjT -----END PGP SIGNATURE-----

1 0

Freeze Break Request: iptables rule for fedmsg+copr
by Ralph Bean 08 Nov '13

08 Nov '13

We're looking to publish fedmsg messages from the copr backend. The node that lives on is in the cloud and so will need to follow the same route as the secondary arch compose nodes. We have an inbound fedmsg relay running on busgateway01, port 9941, and haproxy proxies connections to it from hub.fedoraproject.org, port 9941. We have that external port firewalled to only allow connections from the secondary arch compose nodes, and the copr backend! I only discovered today, as we went to test this for the first time, that the IP listed in manifests/services/proxy.pp is incorrect. I'd like to make this change to set it straight: diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp index 01b39d3..529b242 100644 --- a/manifests/services/proxy.pp +++ b/manifests/services/proxy.pp @@ -1012,7 +1012,7 @@ if $puppetEnvironment == 'staging'{ tcpPorts => [ 80, 443, 873, 8080, 6081, 9939, 9940], custom => [ # Allow copr-be.cloud to talk to the inbound relay. - '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.184.142 -j ACCEPT', + '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.184.131 -j ACCEPT', # Also, ppc-composer.qa.fedoraproject.org (secondary arch) '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.33 -j ACCEPT', # Also, s390-hub01.qa.fedoraproject.org (secondary arch) This is potentially high impact in that it will be distributed to all of our proxies (which everything depends on). On the other hand, it is a really simple change that only modifies the last chunk of that ip address. Can I get two +1's? -Ralph

4 3

Plan for tomorrow's Fedora Infrastructure meeting (2013-11-07)
by Kevin Fenzi 07 Nov '13

07 Nov '13

The infrastructure team will be having it's weekly meeting tomorrow, 2013-11-07 at 19:00 UTC in #fedora-meeting on the freenode network. (PLEASE NOTE: Time has changed in the US away from daylight savings time. Please note the 19:00UTC time) Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

1 1

freeze break: bodhi masher update
by Luke Macken 06 Nov '13

06 Nov '13

I'd like to update the bodhi masher on releng04 and relepel01 to hopefully fix an annoying bug in the updateinfo.xml that causes a yum warning. https://bugzilla.redhat.com/show_bug.cgi?id=960642 The changes are isolated to the updateinfo metadata specific code, and it is easy to revert if it causes more problems. https://github.com/fedora-infra/bodhi/compare/70d990e88436...221b57220564 Thanks, luke

2 2

freeze break: server-wg email alias
by Kevin Fenzi 02 Nov '13

02 Nov '13

Greetings. In order to setup the server-wg email alias requested in ticket 4093, I need a freeze break. Should be a very simple change... +1s? kevin -- diff --git a/configs/system/smtp/aliases.template.erb b/configs/system/smtp/aliases.template.erb index 5c59465..90e5c80 100644 --- a/configs/system/smtp/aliases.template.erb +++ b/configs/system/smtp/aliases.template.erb @@ -176,6 +176,9 @@ fedora-status: kevin,codeblock,puiterwijk fedora-mag-admin: kevin,duffy,chrisroberts,mitzie,jzb endoflife: triage(a)lists.fedoraproject.org +# Fedora server working group. ticket 4093 +server-wg: sgallagh,jperrin,davidstrauss,tuanta,duffy,mitr,simo,johannbg + # Amazon cloud account, ticket #1903 community-cloud: rbergero@redhat.com,hpillay@redhat.com diff --git a/modules/fas/templates/fas.cfg.erb b/modules/fas/templates/fas.cfg.erb index 032994f..84bef68 100644 --- a/modules/fas/templates/fas.cfg.erb +++ b/modules/fas/templates/fas.cfg.erb @@ -62,7 +62,7 @@ tgcaptcha.jpeg_generator = 'vanasco_dowty' ### # Usernames that are unavailable for fas allocation -username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,bin,board,bodhi2,canna,census,chair,chairman,cvsdirsec,cvsdocs,cvseclipse,cvsextras,cvsfont,daemon,dbus,decode,desktop,dgilmore,directors,dovecot,dumper,fama,famsco,fax,fedora,fedorarewards,fesco,freemedia,ftbfs,ftp,ftpadm,ftpadmin,ftpsync,games,gdm,gopher,gregdek,halt,hostmaster,ident,info,ingres,jaboutboul,jan,keys,kojiadmin,ldap,legal,logo,lp,mail,mailnull,manager,marketing,mirrormanager,mysql,nagios,named,netdump,news,newsadm,newsadmin,nfsnobody,nobody,noc,nrpe,nscd,ntp,nut,openvideo,operator,packager,patrick,pcap,pkgdb,pkgsigner,postfix,postgres,postmaster,press,privoxy,pvm,quagga,radiusd,radvd,relnotes,rel-eng,root,rpc,rpcuser,rpm,rsc,s3-mirror,sales,scholarship,secalert,secondary-signer,security,shutdown,smmsp,spevack,squid,sshd,support,sync,system,tickets,toor,updates,usenet,uucp,vcsa,vendors,voting,webalizer,webmaster,wikiadmin,wnn,www,xfs,zabbix" +username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,bin,board,bodhi2,canna,census,chair,chairman,cvsdirsec,cvsdocs,cvseclipse,cvsextras,cvsfont,daemon,dbus,decode,desktop,dgilmore,directors,dovecot,dumper,fama,famsco,fax,fedora,fedorarewards,fesco,freemedia,ftbfs,ftp,ftpadm,ftpadmin,ftpsync,games,gdm,gopher,gregdek,halt,hostmaster,ident,info,ingres,jaboutboul,jan,keys,kojiadmin,ldap,legal,logo,lp,mail,mailnull,manager,marketing,mirrormanager,mysql,nagios,named,netdump,news,newsadm,newsadmin,nfsnobody,nobody,noc,nrpe,nscd,ntp,nut,openvideo,operator,packager,patrick,pcap,pkgdb,pkgsigner,postfix,postgres,postmaster,press,privoxy,pvm,quagga,radiusd,radvd,relnotes,rel-eng,root,rpc,rpcuser,rpm,rsc,s3-mirror,sales,scholarship,secalert,secondary-signer,security,server-wg,shutdown,smmsp,spevack,squid,sshd,support,sync,system,tickets,toor,updates,usenet,uucp,vcsa,vendors,voting,webalizer,webmaster,wikiadmin,wnn,www,xfs,zabbix" # admingroup has powers to change anything in the fas UI admingroup = 'accounts'

3 2

Freeze break request: Configuring backups for qadevel.cloud.fedoraproject.org
by Tim Flink 01 Nov '13

01 Nov '13

I've recently set up a phabricator instance to trial for qa work. Even though it's a dev host, we're still using it as our bug tracker etc. and I'd like to have it backed up. This patch adds qadevel.cloud.fedoraproject.org as a host to be backed up and adds /srv/backup (where the mysqldump goes) and /var/lib/phabricator/files (where file attachments to issues go) as additional directories to be backed up As it's still beta freeze, I'm requesting a freeze break to push this change into ansible. Thanks, Tim diff --git a/inventory/host_vars/qadevel.cloud.fedoraproject.org b/inventory/hos new file mode 100644 index 0000000..6bf9e9d --- /dev/null +++ b/inventory/host_vars/qadevel.cloud.fedoraproject.org @@ -0,0 +1,2 @@ +--- +host_backup_targets: ['/var/lib/phabricator/files', '/srv/backup'] diff --git a/inventory/inventory b/inventory/inventory index dc7675b..b68e44c 100644 --- a/inventory/inventory +++ b/inventory/inventory @@ -60,6 +60,7 @@ people03.vpn.fedoraproject.org pkgs01.phx2.fedoraproject.org log02.phx2.fedoraproject.org value03.phx2.fedoraproject.org +qadevel.cloud.fedoraproject.org [badges-backend] badges-backend01.phx2.fedoraproject.org

3 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure November 2013