infrastructure February 2014

infrastructure@lists.fedoraproject.org

36 participants
26 discussions

Problems with recent ansible
by Miroslav Suchý 03 Mar '14

03 Mar '14

FYI: https://groups.google.com/forum/#!topic/ansible-project/Mj6vmhqMED8 just beware before you do "yum upgrade". -- Miroslav Suchy, RHCE, RHCDS Red Hat, Senior Software Engineer, #brno, #devexp, #fedora-buildsys

2 6

Meeting Agenda Item: Introduction Achilleas Pipinellis
by Achilleas Pipinellis 28 Feb '14

28 Feb '14

Hey guys, I want to apply for the fi-apprentice group so here's a little introduction. I started contributing to Fedora almost a year ago, mainly through the GSoC program. I am now a packager (yay!) and still struggling to package ~80 rubygems for the GitLab project. Unfortunately, I don't have much time now so it's an ongoing progress. Good thing is I found a pair reviewer (thanks ktdreyer) that will speed things up :) Now, apart from packaging I was always interested in sysadmin tasks hence my application. From what I read in the wiki, I am interested mainly in sysadmin-hosted and sysadmin-web groups, but that doesn't mean that's final. I also really want to know more about ansible/puppet and how things are working internally. I can spare 3-4 hours a week mostly on weekends. I have yet to see the list of easyfixes on trac and pick one to work on. I have already dealt with an easyfix on fedmsg [0] but I don't count that, as it was reallyeasyfix :p Just mentioning though. On a side note, I'm studying to get the RHCE certificate sometime soon, so I believe my involvement in infra team will be beneficial both ways :) That's it, hope I will make it to today's irc meeting and get to know better! [0] https://github.com/fedora-infra/fedmsg/issues/130 -- FAS : axilleas GPG : 0xABF99BE5 Blog: http://axilleas.me

2 1

Scheduling a sprint? github2fedmsg
by Ralph Bean 28 Feb '14

28 Feb '14

Pierre and I were talking in #fedora-apps, and a tool we've been wanting to build is a service that republishes select github events on our fedmsg bus. It will be a webapp where you can login to and register your github repos. Behind the scenes it will tell github to notify it of events. When github pings our app, it will then publish a fedmsg message saying such and such event has occurred over at github.com/fedora-infra/python-fedora, or whatever. We can then use this to: - sync fedorahosted git repos - watch upstreams that opt-in for statistics - award badges for upstream development. Two questions: - What do people think about this idea? - If you're interested in hacking on it, do you have any preference for a sprint date? We would do it virtually in #fedora-apps. We were thinking of March 17th, 18th and 19th. https://apps.fedoraproject.org/calendar/infrastructure/2014/3/17/ -Ralph

2 1

Plan for tomorrow's Fedora Infrastructure meeting (2014-02-27)
by Kevin Fenzi 27 Feb '14

27 Feb '14

The infrastructure team will be having it's weekly meeting tomorrow, 2014-02-27 at 19:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

1 1

SCM cgit 500 error
by Christopher Meng 27 Feb '14

27 Feb '14

Hi, I've met many 500 internal server errors recently, want someone to confirm what's going on here. Thanks. Yours sincerely, Christopher Meng Noob here. http://cicku.me

3 4

Mailing lists http and smtp
by Kevin Fenzi 25 Feb '14

25 Feb '14

Greetings. So, we are getting closer to rolling out some hyperkitty goodness for production. Now we need to determine how we want to manage the rollout from a techincal angle. First, some history/description of how our current lists work: HTTP/HTTPS: Requests to admin.fedoraproject.org/mailman are proxied from any proxy to collab03 (located at osuosl). lists.fedoraproject.org is just a A record directly pointing to collab03, so requests go direct to it. SMTP: incoming: lists.fedoraproject.org has MX for our 3 smtp-mm machines. They are located in 3 places around the globe. They accept emails for lists and relay them to collab03. If collab03 is down or they can't reach it, they simply queue and wait. outgoing: collab03 relays everything to bastion01. bastion01 sends the emails out. This I think is to make sure all *.fedoraproject.org emails come from the same ip address and don't shift around. (Note that the path for non lists emails is a bit different). So, my hyperkitty migration plan: 1 Figure out how to get http and smtp to it with NO disruption of existing urls and emails. 2 Setup test list and do some testing. 3 Once that looks good, move on to migrating a list over (this list perhaps :) 4 Then, migrate a bunch more opt-in. 5 Then, set a sunset date on the old setup and migrate the rest. Options for item 1: 1) Setup forwards on collab03 for any lists going to mm3 and setup httpd redirects for admin.fedoraproject.org/mailman/*listname* and lists.fedoraproject.org/mailman/*listname*. This means a lot of monkeying with the config and apache redirects are sometimes very fragile. 2. Make a new 'mailman3.fedoraproject.org' hostname, set smtp-mm's to accept for it and send on to mailman01/02. Setup proxies to proxy mailman3 into mailman01/02. This makes it nice and seperate, but means list names change? 3) Hybrid: Setup mailman3.fedoraproject.org for the web interface only, use forwards for the smtp side. This means list names could stay the same, but web interface is different. Might confuse people where a list web interface is. 4) Your brilliant plan here. ;) Thoughts? kevin

5 13

Sync github projects on fedorahosted
by Pierre-Yves Chibon 25 Feb '14

25 Feb '14

Hi, For about a year now we have a bunch of project on github. With it, we benefit from its UI and easy access for new contributors. But github is proprietary so not so in line with our spirit. Although git is decentralized I think we should keep a clone of our projects on fedorahosted, just for the shake of saying, our infra does not depend on github and if github goes down tomorrow, one can still access the sources. With that I mind, I created the ticket #4212 [1], the idea is to run a cron job that would clone/pull all the projects under the fedora-infra group of github. Souradeep has worked on it and we have a first cron that we can run and that will update or clone all repos from github. However, currently it clones the repo w/o using --mirror, so the repo cloned are not bare repo. Meaning if we place them under /srv/git they will seat next to the bare repo we create (for example there would be a /srv/git/fedocal (clone from github) and a /srv/git/fedocal.git (canonical git repo)). They migth support git clone ssh://... but I have no idea how cgit would handle them. I see two solutions: * we use the current script: - place them in /srv/git/ or somewhere else? - see to place them somewhere where someone can clone them - see how cgit handles them * adjust the script - if the repo does not exists: git clone --mirrot - else: - check remote - if not github in remotes: add new remote github - update the clone: git update remote Do you have another idea/suggestion? Thanks, Pierre [1] https://fedorahosted.org/fedora-infrastructure/ticket/4212

6 12

Plan for tomorrow's Fedora Infrastructure meeting (2014-02-19)
by Kevin Fenzi 20 Feb '14

20 Feb '14

The infrastructure team will be having it's weekly meeting tomorrow, 2014-02-19 at 19:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

1 1

February status update for Fedora Infrastructure Apprentices
by Kevin Fenzi 18 Feb '14

18 Feb '14

Greetings. You are getting this email because you are in the 'fi-apprentice' group in the fedora account system (or are reading this on the infrastructure list). When you reply, please include your fedora account system login. Additionally, I am CC'ing the infrastructure list. If you would like to send your feedback there as well everyone can see and comment on it. It's up to you. https://fedoraproject.org/wiki/Infrastructure_Apprentice At the first of every month(or so), I am going to be sending out an email like this one. I would like feedback on how things are going for you. I'd like to ask for everyone to send me a quick reply with the following data or anything related you can think of that might help us make the apprentice program more useful. 0. Whats your fedora account system login? 1. Have you logged in and used your fi-apprentice membership to look at our machines/setup in the last month? Do you plan to? 2. Has it helped you decide any area you wish to focus on or contribute to more? 3. Have you looked at or been able to work on any of the fi-apprentice 'easyfix' tickets? https://fedorahosted.org/fedora-infrastructure/report/14 4. Do you still wish to be a member of the group? If not (for whatever reason) could you provide any hints to help others down the road? 5. Is there any help or communication or ideas you have that would help you do any of the above? 6. What do you find to be the hardest part of getting involved? Finding things to work on? Getting attention from others to help you? Finding tickets in your interest area? 7. Have you been able to make any weekly irc meetings? Do you find them helpful or interesting? 8. What is your favorite soup? :) Any other general feedback is also quite welcome, including improvements to this email, the wiki page, etc. Any folks I do not hear from in the next week will be removed from the group. (Note that it's easy to be readded when you have time or whatever and it's nothing at all personal, we just want to keep the group up to date with active folks). Thanks, and looking forward to your feedback! kevin

12 11

RE: infrastructure Digest, Vol 93, Issue 21
by dashcom 15 Feb '14

15 Feb '14

Just wanted to touch base with everyone since I didn't make the meeting Thursday. I found a new job, am in the process of relocating to Chicago and am finishing up the semester, so time is short, but once I get moved things should quickly settle into a routine and I'll be able to more regularly contribute. sart -----Original Message----- From: infrastructure-bounces(a)lists.fedoraproject.org [mailto:infrastructure-bounces@lists.fedoraproject.org] On Behalf Of infrastructure-request(a)lists.fedoraproject.org Sent: Saturday, February 15, 2014 6:00 AM To: infrastructure(a)lists.fedoraproject.org Subject: infrastructure Digest, Vol 93, Issue 21 Send infrastructure mailing list submissions to infrastructure(a)lists.fedoraproject.org To subscribe or unsubscribe via the World Wide Web, visit https://admin.fedoraproject.org/mailman/listinfo/infrastructure or, via email, send a message with subject or body 'help' to infrastructure-request(a)lists.fedoraproject.org You can reach the person managing the list at infrastructure-owner(a)lists.fedoraproject.org When replying, please edit your Subject line so it is more specific than "Re: Contents of infrastructure digest..." Today's Topics: 1. Re: Mailing-List Subscription Capta? (Michael Scherer) 2. Re: Mailing-List Subscription Capta? (Frank Murphy) 3. Re: ask.fp.o potential account hijacking with facebook oauth (Achilleas Pipinellis) 4. Re: February status update for Fedora Infrastructure Apprentices (Dan Mossor) ---------------------------------------------------------------------- Message: 1 Date: Fri, 14 Feb 2014 16:32:26 +0100 From: Michael Scherer <misc(a)zarb.org> To: Fedora Infrastructure <infrastructure(a)lists.fedoraproject.org> Subject: Re: Mailing-List Subscription Capta? Message-ID: <1392391946.28162.15.camel(a)liliana.cdg.redhat.com> Content-Type: text/plain; charset="UTF-8" Le vendredi 14 février 2014 à 07:46 +0000, Frank Murphy a écrit : > On Thu, 13 Feb 2014 23:38:56 +0100 > Michael Scherer <misc(a)zarb.org> wrote: > > > What is the issue that would be solved by it ? > > Script subscriptions, time wasting, while I understand theses 2 > trying to find the real person. I fail to understand this one. -- Michael Scherer ------------------------------ Message: 2 Date: Fri, 14 Feb 2014 15:39:49 +0000 From: Frank Murphy <frankly3d(a)gmail.com> To: infrastructure(a)lists.fedoraproject.org Subject: Re: Mailing-List Subscription Capta? Message-ID: <20140214153949.6bd0b259(a)frank01.frankly3d.home> Content-Type: text/plain; charset=US-ASCII On Fri, 14 Feb 2014 16:32:26 +0100 Michael Scherer <misc(a)zarb.org> wrote: > > trying to find the real person. > > I fail to understand this one. > Person applies to fas using: john(a)doe.com applies to ml using: jd(a)gmail.com same person, doesn't always even use the same "Real Name" John aka Jonathan aka some other version of it. but hard to spot with the other stuff, which has to be cleared first, and hope mistake is not made. ___ Regards Frank frankly3d.com ------------------------------ Message: 3 Date: Fri, 14 Feb 2014 17:42:11 +0200 From: Achilleas Pipinellis <axilleaspi(a)ymail.com> To: infrastructure(a)lists.fedoraproject.org Subject: Re: ask.fp.o potential account hijacking with facebook oauth Message-ID: <52FE3953.4020405(a)ymail.com> Content-Type: text/plain; charset=UTF-8 On 13/02/2014 08:42 μμ, Kevin Fenzi wrote: > On Sun, 09 Feb 2014 21:52:38 +0200 > Achilleas Pipinellis <axilleaspi(a)ymail.com> wrote: > >> Hello there! >> >> I bumped into a recent post that describes the way someone could get >> access to your account using facebook oauth. According to the >> vulnerability author: >> >>> Every website with "Connect Facebook account and log in with it" is >>> vulnerable to account hijacking. >> >> Source: >> http://homakov.blogspot.gr/2014/01/two-severe-wontfix-vulnerabilities-in.ht… >> >> Facebook will not fix this anytime soon. Should we disable facebook >> login until this gets resolved? > > So, we discussed this some, and it seems like a pretty complex > vulnerability. Additionally, ask isn't a particularly sensitive > application for us. > > So, we are just going to wait and see right now I think, and if it's > used against us, reevaluate. > > Thanks for bringing it up... I sure hope there's a fix at some point. > > kevin Yeap, I thought so :) I just reported it so that you know it's out there. -- FAS : axilleas GPG : 0xABF99BE5 Blog: http://axilleas.me ------------------------------ Message: 4 Date: Fri, 14 Feb 2014 14:17:00 -0600 From: Dan Mossor <dan.mossor(a)outlook.com> To: Fedora Infrastructure <infrastructure(a)lists.fedoraproject.org>, kevin(a)scrye.com Subject: Re: February status update for Fedora Infrastructure Apprentices Message-ID: <BLU0-SMTP203BE302675D4D59CC5F52A869C0(a)phx.gbl> Content-Type: text/plain; charset="UTF-8"; format=flowed On 02/03/2014 12:01 PM, Kevin Fenzi wrote: > Greetings. > > You are getting this email because you are in the 'fi-apprentice' group > in the fedora account system (or are reading this on the > infrastructure list). > > When you reply, please include your fedora account system login. > > Additionally, I am CC'ing the infrastructure list. If you > would like to send your feedback there as well everyone can see and > comment on it. It's up to you. > > https://fedoraproject.org/wiki/Infrastructure_Apprentice > > At the first of every month(or so), I am going to be sending out an > email like this one. I would like feedback on how things are going for > you. > > I'd like to ask for everyone to send me a quick reply with the > following data or anything related you can think of that might help us > make the apprentice program more useful. > > 0. Whats your fedora account system login? > > 1. Have you logged in and used your fi-apprentice membership to look at > our machines/setup in the last month? Do you plan to? > > 2. Has it helped you decide any area you wish to focus on or contribute > to more? > > 3. Have you looked at or been able to work on any of the fi-apprentice > 'easyfix' tickets? > https://fedorahosted.org/fedora-infrastructure/report/14 > > 4. Do you still wish to be a member of the group? If not (for whatever > reason) could you provide any hints to help others down the road? > > 5. Is there any help or communication or ideas you have that would help > you do any of the above? > > 6. What do you find to be the hardest part of getting involved? > Finding things to work on? Getting attention from others to help you? > Finding tickets in your interest area? > > 7. Have you been able to make any weekly irc meetings? Do you find them > helpful or interesting? > > 8. What is your favorite soup? :) > > Any other general feedback is also quite welcome, including > improvements to this email, the wiki page, etc. > > Any folks I do not hear from in the next week will be removed from the > group. (Note that it's easy to be readded when you have time or > whatever and it's nothing at all personal, we just want to keep the > group up to date with active folks). > > Thanks, and looking forward to your feedback! > > kevin > > > > _______________________________________________ > infrastructure mailing list > infrastructure(a)lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/infrastructure > 0. dmossor 1. Yes, I have looked at the network configuration on the Nagios machine. 2. Not really - I just haven't given thought to it. 3. I looked at the tickets (once, admittedly) , but didn't see any in my area of expertise. 4. Yes, I do, but my time is in extremely short supply at the moment. 5. None at this time - my problems with the group are my own, not the group's. 6. Most difficult: time, or lack thereof. Next most difficult: no tickets needing my skill set. 7. I made one or two of them. 8. Garlic Potato-Leek soup at Jim's Restaurant in Bahrain. Sorry I haven't been active since I requested membership - 18 credit hours of school on top of a full time job has proven to be more difficult than I first imagined. Now that I've been able to automate a couple things at work, though, I should be able to carve out a few hours a week if you'll still have me. -- Dan Mossor Systems Engineer at Large Fedora QA Team Volunteer FAS: dmossor IRC: danofsatx San Antonio, Texas, USA ------------------------------ _______________________________________________ infrastructure mailing list infrastructure(a)lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure End of infrastructure Digest, Vol 93, Issue 21 **********************************************

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure February 2014