infrastructure October 2015

infrastructure@lists.fedoraproject.org

37 participants
79 discussions

Start a nNew thread

Freeze Break Request - setup logging for fedimg cronjob
by Ralph Bean 29 Oct '15

29 Oct '15

This things warns about not being able to log and it emails pingou every half hour. Can I get two +1s to apply it?

6 7

new recruit
by Eden M 29 Oct '15

29 Oct '15

Hi Infrastructure team My name is Eden, I am a senior linux sysadmin working for GE Treasury, I am so exciting to contribute and help with the project. so I'm Up and Ready

3 2

Meeting Agenda Item: Introduction Sudeep Mukherjee
by Sudeep Mukherjee 29 Oct '15

29 Oct '15

Hi, My name is Sudeep Mukherjee. IRC handle: smdeep FAS account: smdeep I would love to contribute to the Infrastructure group. I am sure I will learn much more than what I know at present. I have admin experience with CentOS and I use Fedora on my PCs. I first started using RedHat in March 1998 when it used to be distributed by a Indian magazine named PC Quest. So it is around 17 years I have been using RedHat/Fedora. I am hanging out on IRC and reading the contributors blogs, the infrastructure website, to learn how everything is being done. I am at the present based out of Kolkata, India. Regards to all of you, Sudeep

1 0

[release] anitya: 0.7.0
by Pierre-Yves Chibon 28 Oct '15

28 Oct '15

Good morning everyone, I just cut and pushed a new release of anitya: 0.7.0 It significantly reduced the number of tickets opened against the project. Here is the corresponding changelog: * Wed Oct 28 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.7.0-1 - Update to 0.7.0 - Adjust the API to return nothing if the provided homepage is empty (Vivek Anand) - Add the latest version of the project in the search page (Vivek Anand) - Improve the edit endpoint to allow showing the examples and extra infos - Display the regex used in the custom backend when adding/editing a project (Vivek Anand) - Order the list of backends alphabetically (Farhaanbuksh) - Add a search box to the main menu - Make the search box better looking (Ralph Bean) - Add a BitBuckend backend (Vivek Anand) - Add the possibility to separate odd updates from failed updates - Add the possibility to specify a prefix to the versions found - Record and show the status of the cron job checking new releases Happy packaging! Pierre

1 0

Meeting Agenda Item: Introduction Kendrick Tan
by Kendrick Tan 27 Oct '15

27 Oct '15

Hello there! My name is Kendrick Tan (irc: kendricktan). I'm from Brisbane, Australia (UTC+10:00; Australian Eastern Time Zone), have been using fedora for the past 6 months or so and loving it. I'm comfortable with Python, C++, Javascript, HTML, and some others, but I'm particularly interested in machine learning and I'm neglecting my finals to learn more about it (tis bad, i know, but its only high school oh well). I've decided to contribute to fedora particularly because upon the 6 months of using Fedora 22, DNF has been particularly buggy on occasions and I would like to help resolve that. I also find that though GNOME is a great desktop environment, it drains my laptop battery life dramatically, and I would like to help resolve that. I can contribute around 4-12 hours a week after I finish my highschool exams at the end of November, at the time being i'll just sit back and hang around the meetings. Cheers :)

2 1

Meeting Agenda Item: Introduction James Anslow
by James Anslow 27 Oct '15

27 Oct '15

Hello, World! My name's James Anslow and I'm a developer from the United Kingdom. My IRC handle is janslow. My skills are focused on the web; development and maintenance of web systems both in terms of code and infrastructure. I have been working as a full time developer for some 5 years, almost entirely focused on private commercial projects. I have always used open source software; a mix of Fedora, CentOS, Debian and Ubuntu. I am now looking to contribute back to the communities that I have benefited from. I have experience working with many of the tools used by the Fedora infrastructure team. I recently implemented an Ansible environment for my employer, where there was formerly no automation system in place. Day to day I also work with apache, nginx, mysql, mongodb, varnish, memcache, nagios, observium and a plethora of development tools and misc. technologies. I currently manage a relatively small fleet of servers. (~30) I am most interested in learning more about managing infrastructure at scale. I think that I can contribute to the Fedora project and hopefully broaden my knowledge in a way that I would not otherwise be able to in my day job. In terms of tickets that I would like to look at, I would like to start here: * https://fedorahosted.org/fedora-infrastructure/ticket/4923 Because debugging APIs is a comfortable starting point to get my feet wet given my experience and skills. James

2 1

[PATCH] koji directory cleanup: shorten the time we keep things
by Dennis Gilmore 26 Oct '15

26 Oct '15

From: Dennis Gilmore <ausil(a)fedoraproject.org> keep data in the work for 2 weeks keep scratch builds 2 weeks keep koschei builds for 1 day Signed-off-by: Dennis Gilmore <ausil(a)fedoraproject.org> --- roles/koji_hub/files/koji-directory-cleanup | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/roles/koji_hub/files/koji-directory-cleanup b/roles/koji_hub/files/koji-directory-cleanup index 67a3018..4429235 100644 --- a/roles/koji_hub/files/koji-directory-cleanup +++ b/roles/koji_hub/files/koji-directory-cleanup @@ -1,2 +1,3 @@ -0 8 * * * apache find /mnt/koji/work -xdev -depth -mindepth 2 -mtime +28 $ -type f -o -type l $ -delete -o -type d -empty -delete -0 9 * * * apache find /mnt/koji/scratch -xdev -depth -mtime +21 $ -type f -o -type l $ -delete -o -type d -empty -delete +0 8 * * * apache find /mnt/koji/work -xdev -depth -mindepth 2 -mtime +14 $ -type f -o -type l $ -delete -o -type d -empty -delete +0 9 * * * apache find /mnt/koji/scratch -xdev -depth -mtime +14 $ -type f -o -type l $ -delete -o -type d -empty -delete +0 9 * * * apache find /mnt/koji/scratch/koschei -xdev -depth -mtime +1 $ -type f -o -type l $ -delete -o -type d -empty -delete -- 1.8.3.1

6 6

Freeze Break Request: add mirrorlist-ibiblio02
by Patrick Uiterwijk 24 Oct '15

24 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, I would like to setup mirrorlist-ibiblio02, to add one more node that can take the mirrorlist load. Can I get +1s for the following patches (and the corresponding private repo patches)? Ansible ~~~~~~~~~~~ 6 files changed, 21 insertions(+), 1 deletion(-) create mode 100644 inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org create mode 100644 roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg [puiterwijk@batcave01 ansible]$ git show HEAD commit d7f9975716c5894ca0f0b88a482318baa11b745a Author: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Sat Oct 24 23:54:35 2015 +0000 Add mirrorlist-ibiblio02 Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com> diff --git a/inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org b/inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org new file mode 100644 index 0000000..13387ea - --- /dev/null +++ b/inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org @@ -0,0 +1,10 @@ +--- +nm: 255.255.255.128 +gw: 152.19.134.129 +dns: 152.2.21.1 +ks_url: http://infrastructure.fedoraproject.org/repo/rhel/ks/kvm-rhel-7-ext +ks_repo: http://infrastructure.fedoraproject.org/repo/rhel/RHEL7-x86_64/ +volgroup: /dev/vg_guests +eth0_ip: 152.19.134.197 +vmhost: ibiblio05.fedoraproject.org +datacenter: ibiblio diff --git a/inventory/inventory b/inventory/inventory index 2b432d7..28a8ba4 100644 - --- a/inventory/inventory +++ b/inventory/inventory @@ -421,6 +421,7 @@ memcached01.stg.phx2.fedoraproject.org mirrorlist-dedicatedsolutions.fedoraproject.org mirrorlist-host1plus.fedoraproject.org mirrorlist-ibiblio.fedoraproject.org +mirrorlist-ibiblio02.fedoraproject.org mirrorlist-osuosl.fedoraproject.org mirrorlist-phx2.phx2.fedoraproject.org diff --git a/playbooks/groups/mirrorlist2.yml b/playbooks/groups/mirrorlist2.yml index 332b1bf..5908beb 100644 - --- a/playbooks/groups/mirrorlist2.yml +++ b/playbooks/groups/mirrorlist2.yml @@ -81,6 +81,7 @@ - mirrorlist-dedicatedsolutions.fedoraproject.org - mirrorlist-host1plus.fedoraproject.org - mirrorlist-ibiblio.fedoraproject.org + - mirrorlist-ibiblio02.fedoraproject.org - mirrorlist-osuosl.fedoraproject.org when: env != "staging" diff --git a/roles/haproxy/templates/haproxy.cfg b/roles/haproxy/templates/haproxy.cfg index 8404dc5..65c25d3 100644 - --- a/roles/haproxy/templates/haproxy.cfg +++ b/roles/haproxy/templates/haproxy.cfg @@ -45,6 +45,7 @@ listen mirror-lists 0.0.0.0:10002 server mirrorlist-dedicatedsolutions mirrorlist-dedicatedsolutions:80 check inter 5s rise 2 fall 3 server mirrorlist-host1plus mirrorlist-host1plus:80 check inter 5s rise 2 fall 3 server mirrorlist-ibiblio mirrorlist-ibiblio:80 check inter 5s rise 2 fall 3 + server mirrorlist-ibiblio02 mirrorlist-ibiblio02:80 check inter 5s rise 2 fall 3 server mirrorlist-osuosl mirrorlist-osuosl:80 check inter 5s rise 2 fall 3 server mirrorlist-phx2 mirrorlist-phx2:80 check inter 5s rise 2 fall 3 option httpchk GET /mirrorlist diff --git a/roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg b/roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg new file mode 100644 index 0000000..5ff77ef - --- /dev/null +++ b/roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg @@ -0,0 +1,7 @@ +define host { + host_name mirrorlist-ibiblio02 + alias mirrorlist-ibiblio02.fedoraproject.org + use defaulttemplate + address mirrorlist-ibiblio02.fedoraproject.org + parents ibiblio05 +} diff --git a/roles/nagios_server/files/nagios/services/file_age.cfg b/roles/nagios_server/files/nagios/services/file_age.cfg index 197e5c2..658ae56 100644 - --- a/roles/nagios_server/files/nagios/services/file_age.cfg +++ b/roles/nagios_server/files/nagios/services/file_age.cfg @@ -1,5 +1,5 @@ define service { - - host_name mirrorlist-osuosl, mirrorlist-ibiblio, mirrorlist-phx2, mirrorlist-host1plus, mirrorlist-dedicatedsolutions + host_name mirrorlist-osuosl, mirrorlist-ibiblio, mirrorlist-ibiblio02, mirrorlist-phx2, mirrorlist-host1plus, mirrorlist-dedicatedsolutions service_description Check MirrorList Cache check_command check_by_nrpe!check_mirrorlist_cache use defaulttemplate DNS ~~~~~~~ commit 3663572f0d63e12c604914919e9b3a8f070a965b Author: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Sat Oct 24 23:49:02 2015 +0000 Add DNS records for mirrorlist-ibiblio02 Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com> diff --git a/fedoraproject.org.template b/fedoraproject.org.template index de2374c..0c18c37 100644 - --- a/fedoraproject.org.template +++ b/fedoraproject.org.template @@ -240,6 +240,7 @@ meetbot-raw.stg IN CNAME admin.stg.fedoraproject.org. mirrorlist-dedicatedsolutions IN A 67.219.144.67 mirrorlist-host1plus IN A 5.175.150.49 mirrorlist-ibiblio IN A 152.19.134.194 +mirrorlist-ibiblio02 IN A 152.19.134.197 mirrorlist-osuosl IN A 140.211.169.228 mirrors IN CNAME wildcard mirrors.stg IN CNAME admin.stg.fedoraproject.org. diff --git a/master/168.192.in-addr.arpa b/master/168.192.in-addr.arpa index b44289b..473a887 100644 - --- a/master/168.192.in-addr.arpa +++ b/master/168.192.in-addr.arpa @@ -167,7 +167,7 @@ $TTL 86400 149.1 IN PTR mm-frontend02.vpn.fedoraproject.org. 150.1 IN PTR darkserver02.vpn.fedoraproject.org. 151.1 IN PTR mm-crawler03.vpn.fedoraproject.org. - -152.1 IN PTR unused. +152.1 IN PTR mirrorlist-ibiblio02.vpn.fedoraproject.org. 153.1 IN PTR unused. 154.1 IN PTR unused. 155.1 IN PTR unused. diff --git a/master/vpn.fedoraproject.org b/master/vpn.fedoraproject.org index d11f5f3..f2cb7b1 100644 - --- a/master/vpn.fedoraproject.org +++ b/master/vpn.fedoraproject.org @@ -108,6 +108,7 @@ log2 IN CNAME log02 mirrorlist-dedicatedsolutions IN A 192.168.1.140 mirrorlist-host1plus IN A 192.168.1.148 mirrorlist-ibiblio IN A 192.168.1.107 +mirrorlist-ibiblio02 IN A 192.168.1.152 mirrorlist-osuosl IN A 192.168.1.106 mirrorlist-phx2 IN A 192.168.1.108 mailman01 IN A 192.168.1.118 - -- With kind regards, Patrick Uiterwijk Fedora Infra -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJWLBqXAAoJEIZXmA2atR5QIwAQALMcOeC91fnrz3AS7vQzO5a1 PpjYXlaBVDTbO3NAHaKdeHUZMY0UpSHtJxxNBNI+AC9FetGfsGVbnemYsBrSULIi 6YCyPkPMk4zBdLfWz2xhJDX3Q/qGdFrwzXN9rp17H+qxYT9bXjG4S6jKVfMOmZGT jqu5NKk78QCvr+hjSWXOVrRAdajNoGo++OHsicCZ6v+Iswbk1RMGsTXH30yPLTMP zTJDOIdfq5TO3y49DTvon+ZxKgqn5iJFP/jKB5Bc1QBgixb+ko13jHaDyc5W43QI xouVWLeJ593B+/GTBiZ3/8gymfld67Fu/0WNKBiPyXJdeAmaf4GdFiOdEwmho9aR qWPi9/Jae6VRCuyectaX93iDv0VhzSJtXVsWROCr/vdherWEdx+0RMILrjtKc2se AVowapFe1Dy5B/bxSfaGdBRTspdW3xIiBto10ShE3bqgqiKeGQOEXoqo8esctBxF JMcPLbirsru93mTwuFsWc+Uc+FibGeNOVRzDj/n1Nv1RQyuM7CXrj+OqfZbTOT1a wSONSKdFz9Yt0iWUFNEV6rbjMNEnRgekRHEN88s3DuN/XyIc2kgs5Rndw479ZbcI vid5ZuRrvAyNgM/I5rO4Y1bJGbelVAo5rk9bFDZyOGNnWy3W6H5VVo80Nye/rb7T xhzvcYDlol/JwPhZXKTQ =FfgK -----END PGP SIGNATURE-----

3 4

Freeze break requeest: add script to make OpenVPN always fix its routes
by Patrick Uiterwijk 23 Oct '15

23 Oct '15

Can I get any +1s? This will guarantee that the routes will have been created when the OpenVPN link is up. commit e8f63323b4e236629f438a082422d61a37cc95af Author: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Thu Oct 22 21:06:38 2015 +0000 Add script to OpenVPN for VPN route fixing This will make sure that always after a start/restart the VPN routes are created Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com> diff --git a/roles/openvpn/client/files/client.conf b/roles/openvpn/client/files/client.conf index abb5d03..704becb 100644 --- a/roles/openvpn/client/files/client.conf +++ b/roles/openvpn/client/files/client.conf @@ -14,6 +14,9 @@ nobind persist-key +up /etc/openvpn/fix-routes.sh +up-restart + ca ca.crt cert client.crt key client.key diff --git a/roles/openvpn/client/files/fix-routes.sh b/roles/openvpn/client/files/fix-routes.sh new file mode 100644 index 0000000..a08e519 --- /dev/null +++ b/roles/openvpn/client/files/fix-routes.sh @@ -0,0 +1,12 @@ +#!/bin/sh +# First check if this server is actually an OpenVPN client +if [ -f /etc/openvpn/client.crt ]; +then + # Now the magic line + # This first checks whether there is a route, and if there isn't it will: + # 1. Get the local machine's VPN IP (up to and including awk) + # 2. Add a new route to 192.168.0.0/16 via that IP addres (from xargs on) + # 3. Print "Fixed VPN" and exit with code 2 to indicate that it changed + # Note: I've been told that the grep and awk can be in one command, and I believe that, but I find this clearer. + (ip route show | grep '192.168.0.0/16') || ((ip route show | grep '192.168.0.' | awk '{print $1}' | xargs ip route add 192.168.0.0/16 via) && echo "Fixed VPN" && exit 2); +fi diff --git a/roles/openvpn/client/tasks/main.yml b/roles/openvpn/client/tasks/main.yml index 76817a2..67e44b1 100644 --- a/roles/openvpn/client/tasks/main.yml +++ b/roles/openvpn/client/tasks/main.yml @@ -17,6 +17,9 @@ - { file: client.conf, dest: /etc/openvpn/openvpn.conf, mode: '0644' } + - { file: fix-routes.sh, + dest: /etc/openvpn/fix-routes.sh, + mode: '0755' } - { file: "{{ private }}/files/vpn/openvpn/keys/{{ inventory_hostname }}.crt", dest: "/etc/openvpn/client.crt", mode: '0600' } With kind regards, Patrick Uiterwijk Fedora Infra

5 7

Freeze Break Request - enable F23 updates/testing atomic composes in bodhi
by Luke Macken 22 Oct '15

22 Oct '15

There is a rel-eng request to enable F23 updates-testing atomic ostrees. https://fedorahosted.org/rel-eng/ticket/6279 I attached a patch that uncomments the existing configuration in ansible to enable this. https://fedorahosted.org/rel-eng/attachment/ticket/6279/0001-bodhi-Enable-F… This change affects bodhi-backend01 and can easily be reverted if the composes fail. Thanks, luke

3 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure October 2015