infrastructure September 2013

infrastructure@lists.fedoraproject.org

46 participants
55 discussions

Freeze Break Request - Fixing Blocker Proposal in Blockerbugs App (third and hopefully final try)
by Tim Flink 14 Sep '13

14 Sep '13

Hopefully third time's the charm for this freeze break request. I changed the code so that it no longer uses cookies for python-bugzilla calls. I've deployed the new code to stg and it is working properly. A bug was filed the other day claiming that it was impossible to propose bugs as FE or blockers in the blockerbugs app. I have a fix ready that's already deployed to stg and I'd like to move it into prod. After some triage today, it turns out that there were selinux denials on httpd writing to a cookiefile which is required by python-bugzilla and used as part doing the actual proposal. The fix is in two places: - the code was modified to not use cookiefiles when calling python-bugzilla code changes for this is at: https://git.fedorahosted.org/cgit/blockerbugs.git/commit/?id=488c2f12e47769… - the config file in puppet needs to be modified so that it no longer references the bugzillacookie value diff --git a/modules/blockerbugs/templates/blockerbugs-settings.py.erb b/modules/blockerbugs/templates/blockerbugs-settings.py.erb index 8c33d6f..5b58b7a 100644 --- a/modules/blockerbugs/templates/blockerbugs-settings.py.erb +++ b/modules/blockerbugs/templates/blockerbugs-settings.py.erb @@ -3,7 +3,6 @@ SQLALCHEMY_DATABASE_URI = 'postgresql+psycopg2://<%= blockerbugs_app %>:<%= bloc FAS_ADMIN_GROUP = "qa-admin" FAS_USER = "<%= blockerbugs_fas_user %>@fedoraproject.org" FAS_PASSWORD = "<%= blockerbugs_fas_password %>" -BUGZILLA_COOKIE = "" # this should be blank for production <% if environment == "staging" %> FAS_HTTPS_REQUIRED = False FAS_CHECK_CERT = False Thanks, Tim

3 2

Intro to Infra Videos
by Ralph Bean 13 Sep '13

13 Sep '13

At Flock, there was some discussion about creating more videos to introduce new contributors to different fedora teams. I volunteered there to make some for the infra team. Nitesh has volunteered to add nice intro/outro theming stuff and to do other editing (like superimposing text and links where appropriate). I came up with these two: - http://threebean.org/videos/fedora-infra-introduction-general.ogv - http://threebean.org/videos/fedora-infra-introduction-apps.ogv Is this stuff off base? I want to make a third introducing the -noc side of stuff. I was thinking it should include: - How to apply for fi-apprentice - How to log in to lockbox - How to find your way around the puppet and ansible repos. - How to find the list of SOPs Any feedback? Anything I should add/leave out/do differently? Anyone else want to do the -noc one instead of me? It would be better to have a variety I think.

3 5

[PATCH] Replace http link by https link as we deploy behind https
by Pierre-Yves Chibon 13 Sep '13

13 Sep '13

--- I would like to request a freeze break to apply this change in the template of easyfix. It will avoid mixing http and https while we only use https. +1? Thanks, Pierre modules/gather-easyfix/files/template.html | 66 ++++++++++++++-------------- 1 files changed, 33 insertions(+), 33 deletions(-) diff --git a/modules/gather-easyfix/files/template.html b/modules/gather-easyfix/files/template.html index c6f433f..5114c1f 100644 --- a/modules/gather-easyfix/files/template.html +++ b/modules/gather-easyfix/files/template.html @@ -4,17 +4,17 @@ <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> - <link rel="stylesheet" type="text/css" href="http://fedoraproject.org/static/css/reset.css" media="screen" /> - <link rel="stylesheet" type="text/css" href="http://fedoraproject.org/static/css/text.css" media="screen" /> - <link rel="stylesheet" type="text/css" href="http://fedoraproject.org/static/css/960.css" media="screen" /> - <link rel="stylesheet" type="text/css" href="http://fedoraproject.org/static/css/fedora960.css" media="screen" /> - <link rel="stylesheet" type="text/css" href="http://fedoraproject.org/static/css/fedora960-lang.css" media="screen" /> + <link rel="stylesheet" type="text/css" href="https://fedoraproject.org/static/css/reset.css" media="screen" /> + <link rel="stylesheet" type="text/css" href="https://fedoraproject.org/static/css/text.css" media="screen" /> + <link rel="stylesheet" type="text/css" href="https://fedoraproject.org/static/css/960.css" media="screen" /> + <link rel="stylesheet" type="text/css" href="https://fedoraproject.org/static/css/fedora960.css" media="screen" /> + <link rel="stylesheet" type="text/css" href="https://fedoraproject.org/static/css/fedora960-lang.css" media="screen" />  - <link rel="shortcut icon" href="http://fedoraproject.org/static/images/favicon.ico" type="image/vnd.microsoft.icon" /> + <link rel="shortcut icon" href="https://fedoraproject.org/static/images/favicon.ico" type="image/vnd.microsoft.icon" /> - <link rel="stylesheet" type="text/css" media="print" href="http://fedoraproject.org/static/css/print.css" /> + <link rel="stylesheet" type="text/css" media="print" href="https://fedoraproject.org/static/css/print.css" /> </div> <div class="grid_6" id="site-heading-rh"> <a href="http://redhat.com">A Red Hat-Sponsored Community Project - <img id="rh-community" src="http://fedoraproject.org/static/images/sponsors/redhat-community.png" + <img id="rh-community" src="https://fedoraproject.org/static/images/sponsors/redhat-community.png" alt="Red Hat Logo" /></a> </div> <div class="clear"></div> @@ -173,28 +173,28 @@ <div class="grid_2 sitelinks"> <dl> <dt>Fedora</dt> - <dd><a href="http://fedoraproject.org/en/about-fedora">About Fedora</a></dd> + <dd><a href="https://fedoraproject.org/en/about-fedora">About Fedora</a></dd> <dd><a href="http://planet.fedoraproject.org/">Planet Fedora</a></dd> - <dd><a href="http://fedoraproject.org/wiki/FWN/LatestIssue">Fedora Weekly News</a></dd> + <dd><a href="https://fedoraproject.org/wiki/FWN/LatestIssue">Fedora Weekly News</a></dd> <dd><a href="http://docs.fedoraproject.org/">Documentation</a></dd> - <dd><a href="http://fedoraproject.org/wiki/">Fedora Wiki</a></dd> - <dd><a href="http://fedoraproject.org/wiki/FedoraEvents">Events</a></dd> + <dd><a href="https://fedoraproject.org/wiki/">Fedora Wiki</a></dd> + <dd><a href="https://fedoraproject.org/wiki/FedoraEvents">Events</a></dd> </dl> </div> <div class="grid_2 sitelinks"> <dl> <dt>Download</dt> - <dd><a href="http://fedoraproject.org/en/get-fedora">Get Fedora</a></dd> - <dd><a href="http://fedoraproject.org/en/get-fedora-options">Full Download List</a></dd> + <dd><a href="https://fedoraproject.org/en/get-fedora">Get Fedora</a></dd> + <dd><a href="https://fedoraproject.org/en/get-fedora-options">Full Download List</a></dd> </dl> </div> <div class="grid_2 sitelinks"> <dl> <dt>Support</dt> - <dd><a href="http://fedoraproject.org/en/get-help">Get Help</a></dd> + <dd><a href="https://fedoraproject.org/en/get-help">Get Help</a></dd> <dd><a href="irc://irc.freenode.org/#fedora">IRC Help</a></dd> <dd><a href="https://admin.fedoraproject.org/mailman/listinfo/users">Mailing List Help</a></dd> <dd><a href="http://www.fedoraforum.org/">Forums</a></dd> @@ -205,9 +205,9 @@ <div class="grid_2 sitelinks"> <dl> <dt>Join</dt> - <dd><a href="http://fedoraproject.org/en/join-fedora">Join Fedora</a></dd> + <dd><a href="https://fedoraproject.org/en/join-fedora">Join Fedora</a></dd> - <dd><a href="http://fedoraproject.org/wiki/SIGs">Fedora SIGs</a></dd> + <dd><a href="https://fedoraproject.org/wiki/SIGs">Fedora SIGs</a></dd> <dd><a href="https://admin.fedoraproject.org/accounts/">Fedora Account System</a></dd> <dd><a href="https://admin.fedoraproject.org/community/">Fedora Community</a></dd> </dl> @@ -216,40 +216,40 @@ <dl> <dt>Subprojects</dt> - <dd><a href="http://fedoraproject.org/wiki/DocsProject">Documentation</a></dd> - <dd><a href="http://fedoraproject.org/wiki/L10N">Translation</a></dd> - <dd><a href="http://fedoraproject.org/wiki/Marketing">Marketing</a></dd> - <dd><a href="http://fedoraproject.org/wiki/Ambassadors">Ambassadors</a></dd> - <dd><a href="http://fedoraproject.org/wiki/Design">Design</a></dd> + <dd><a href="https://fedoraproject.org/wiki/DocsProject">Documentation</a></dd> + <dd><a href="https://fedoraproject.org/wiki/L10N">Translation</a></dd> + <dd><a href="https://fedoraproject.org/wiki/Marketing">Marketing</a></dd> + <dd><a href="https://fedoraproject.org/wiki/Ambassadors">Ambassadors</a></dd> + <dd><a href="https://fedoraproject.org/wiki/Design">Design</a></dd> - <dd><a href="http://fedoraproject.org/wiki/Infrastructure">Infrastructure</a></dd> + <dd><a href="https://fedoraproject.org/wiki/Infrastructure">Infrastructure</a></dd> </dl> </div> <div class="grid_2 sitelinks"> <dl> <dt> </dt> - <dd><a href="http://fedoraproject.org/wiki/Websites">Websites</a></dd> + <dd><a href="https://fedoraproject.org/wiki/Websites">Websites</a></dd> - <dd><a href="http://fedoraproject.org/wiki/I18N">Internationalization</a></dd> - <dd><a href="http://fedoraproject.org/wiki/NewsProject">News</a></dd> - <dd><a href="http://fedoraproject.org/wiki/Distribution/Project">Distribution</a></dd> - <dd><a href="http://fedoraproject.org/wiki/SIGs">Special Interest Groups (SIGs)</a></dd> + <dd><a href="https://fedoraproject.org/wiki/I18N">Internationalization</a></dd> + <dd><a href="https://fedoraproject.org/wiki/NewsProject">News</a></dd> + <dd><a href="https://fedoraproject.org/wiki/Distribution/Project">Distribution</a></dd> + <dd><a href="https://fedoraproject.org/wiki/SIGs">Special Interest Groups (SIGs)</a></dd> </dl> </div> <div class="clear"></div> <div id="footer" class="grid_12"> <a href="http://www.redhat.com/"><img class="rh-logo" - src="http://fedoraproject.org/static/images/sponsors/sidebar/redhat.png" alt="Red Hat Logo" /></a> + src="https://fedoraproject.org/static/images/sponsors/sidebar/redhat.png" alt="Red Hat Logo" /></a> <p class="sponsor">Fedora is sponsored by Red Hat.</p> <p class="sponsor"><a href="http://www.redhat.com/rhel/fedora/">Learn more about the relationship between Red Hat and Fedora ></a></p> <p class="copy">(C) 2011 Red Hat, Inc. and others.</p> <ul> <li class="first"><a href="/en/contact">Contact</a></li> - <li><a href="http://fedoraproject.org/sponsors">Sponsors</a></li> - <li><a href="http://fedoraproject.org/wiki/Legal:Main">Legal</a></li> - <li class="last"><a href="http://fedoraproject.org/wiki/Legal:Trademark_guidelines">Trademark Guidelines</a></li> + <li><a href="https://fedoraproject.org/sponsors">Sponsors</a></li> + <li><a href="https://fedoraproject.org/wiki/Legal:Main">Legal</a></li> + <li class="last"><a href="https://fedoraproject.org/wiki/Legal:Trademark_guidelines">Trademark Guidelines</a></li> </ul> <p class="disclaimer">The Fedora Project is maintained and driven by the community. This is a community maintained site. Red Hat is not responsible for content.</p> </div> -- 1.7.2.1

3 2

freeze break request: simple alias update
by Kevin Fenzi 13 Sep '13

13 Sep '13

Here's another simple alias update: diff --git a/configs/system/smtp/aliases.template.erb b/configs/system/smtp/aliases.template.erb index ec44cec..337f08e 100644 --- a/configs/system/smtp/aliases.template.erb +++ b/configs/system/smtp/aliases.template.erb @@ -173,7 +173,7 @@ census: npmccallum,kevin,toshio,ianweller,tflink # User for openshift fedora-status instance fedora-status: kevin,codeblock,puiterwijk # User for openshift fedora magazine wordpress instance. -fedora-mag-admin: kevin,duffy,chrisroberts,mitzie +fedora-mag-admin: kevin,duffy,chrisroberts,mitzie,jzb endoflife: triage(a)lists.fedoraproject.org # Amazon cloud account, ticket #1903 +1s? kevin

3 2

freeze break: minor package adds to lockbox01
by Kevin Fenzi 13 Sep '13

13 Sep '13

I'd like to install: srm sslscan on lockbox01. Shouldn't cause any problems I wouldn't think... +1s? kevin

5 7

Meeting Agenda Item: Introduction Your Name
by Jones, Matt 12 Sep '13

12 Sep '13

Hello everyone my name is Matt. I have been using Linux for a while now and would like to put my skills to greater use. By day I am a monitoring systems engineer. I spend much of my time designing and maintaining a large distributed icinga environment and writing service checks and python scripts for nagios/icinga. By night I do bug testing and packaging for icinga with CentOS and am slowly porting nrpe to icinga. I am fairly good with Python, BASH, and RPM package management and would like to use these skills to help build out the fedora infrastructure. I can be found on IRC with the handle mattjones in #icinga, #icinga-devel, and now #fedora-admin. Matt NOTICE: This message, and any attachments, contain(s) information that may be confidential or protected by privilege from disclosure and is intended only for the individual or entity named above. No one else may disclose, copy, distribute or use the contents of this message for any purpose. Its unauthorized use, dissemination or duplication is strictly prohibited and may be unlawful. If you receive this message in error or you otherwise are not an authorized recipient, please immediately delete the message and any attachments and notify the sender.

2 2

change freeze request
by Dennis Gilmore 10 Sep '13

10 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I want to change sudoer on the compose boxes to enable members of the releng group to run "sudo cp -l" without a password this is to enable easily putting the livecds and disk images in place when staging a compose could I get some +1's please Dennis -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.21 (GNU/Linux) iEYEARECAAYFAlIrb1IACgkQkSxm47BaWfe9FwCeIwfydupB2qrCXzu5B4/k3JWy t7oAnjFK8ZMMJm8qfceEsVMDAOzeUl3z =ULcB -----END PGP SIGNATURE-----

3 4

freeze break request: sudoers for retrace02
by Kevin Fenzi 09 Sep '13

09 Sep '13

The sudoers file needs to be updated for the retrace02 instance so retrace folks can sudo there. This sudoers file is used by all our puppet machines. It would be adding retrace02 to the RETRACE group alias, and changing the members that have sudo to the 'retrace' group. It should be pretty easy to revert if needed and syntax can be checked with visudo. +1s? kevin

3 3

freeze break request - update mediawiki-FedoraBadges
by Ricky Elrod 08 Sep '13

08 Sep '13

I'd like to update mediawiki-FedoraBadges in production. The new code is running in staging and can be seen working here: https://stg.fedoraproject.org/wiki/User:Codeblock and here: https://stg.fedoraproject.org/wiki/User:Ralph The biggest change is that it makes the 'title' attribute work so you can hover over a badge to see which badge it is, without having to click on it. This is already in the infra repo, so I'm requesting +1's to do this following: sudo -i ansible app\* -m shell -a "yum clean expire-cache; yum -y update mediawiki-FedoraBadges" If anything were to fail, it should only affect user pages and is easily revertable by downgrading to the old version (i.e., remove the new RPM from the infra repo, yum remove mediawiki-FedoraBadges, yum clean expire-cache, yum install mediawiki-FedoraBadges). +1s?

3 3

Meeting Agenda Item: Introduction Anshu Prateek
by Anshu Prateek 08 Sep '13

08 Sep '13

hi all, My name is Anshu Prateek (anshprat on freenode). I am from Bangalore, India. I have been a Fedora user since Fedora Core 2/FC3. I have learnt almost eveything thanks to Fedora (managing about a dozen nodes in college lab and later hundreds to thousands of RHEL nodes at work). I would like to contribute to the infrastructure team @ Fedora so that I can give back what I have learnt and also to learn the latest in tech. I had worked for Drupal as a part of GSOC (OpenID AX implementation)[1] and I report bugs for firefox nightly. At my day work, I am a devops. Earlier I was with the search ops team at Yahoo! and have a pretty good knowledge of large scale production environments. Presently am also dabbling into release and QA environments. I am good at bash and php with moderate skills at perl,python and mysql. I have experience with svn and git as an end-user. I have been playing around a bit with ansible. IPv6 is one of my fields of interest.[2] The GettingSponsored doc talks about picking only one FIG. I can contribute the most with least onboarding time to sysadmin-web FIG. I can also contribute to the sysadmin-hosted and sysadmin-tools FIG as required later on. I will pitch in for a sponsorship request later but for the time being I will like to work on these https://fedorahosted.org/fedora-infrastructure/ticket/3617 https://fedorahosted.org/fedora-infrastructure/ticket/3936 https://fedorahosted.org/fedora-infrastructure/ticket/3984 https://fedorahosted.org/fedora-infrastructure/ticket/3987 I can contribute about 4 hours per week on the least. And more as it gets going. I blog at http://hackalyst.info. My name is unique enough that a decent search engine will get you to me. http://about.me/anshuprateek https://badges.fedoraproject.org/user/anshprat Looking forward to working with the Fedora community! regards Anshu Prateek [1] https://drupal.org/project/openid_ax [2] http://www.slideshare.net/anshprat/whatwhyhow-of-ipv6-2002323943c31

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure September 2013