infrastructure May 2015

infrastructure@lists.fedoraproject.org

55 participants
80 discussions

[freeze break request] Mark localhost as a ServerAlias of fp.o on proxies
by Ricky Elrod 25 May '15

25 May '15

Right now collectd is not logging apache stats for any of our proxies... The reason why is this: [root@proxy01 conf.d]# curl "http://localhost/apache-status?auto" <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://localhost/apache-status?auto">here</a>.</p> <hr> <address>Apache/2.4.6 (Red Hat Enterprise Linux) Server at localhost Port 80</address> </body></html> I'd like to apply the following patch to allow localhost to be a ServerAlias for a VirtualHost that doesn't force redirects to https rather than defaulting to the first VirtualHost alphabetically. This has been tested on proxy01.stg and nothing catastrophic seems to have happened. Patch follows. diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index c398a23..febfc83 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -49,7 +49,9 @@ - role: httpd/website name: fedoraproject.org cert_name: "{{wildcard_cert_name}}" - server_aliases: [stg.fedoraproject.org] + server_aliases: + - stg.fedoraproject.org + - localhost # This is for all the other domains we own # that redirect to http://fedoraproject.org

3 2

mote, the next MeetBot log wrangler
by Chaoyi Zha 24 May '15

24 May '15

Hey Fedora Infrastructure! Over the past couple of weeks, I've built a new MeetBot log wrangler and have recently filed an RFR on Trac, located here: https://fedorahosted.org/fedora-infrastructure/ticket/4763 It contains much more information pertaining to mote and its uses. I won't bloat this email with information located in the ticket, but interested parties can take a look at the link. In short, mote provides much-needed search, browse, friendly-name, aliasing, and date categorisation features in terms of meeting logs. Its interface is much easier to use and is essentially a drop-in replacement. The Git repo can be found here, http://github.com/fedora-infra/mote If anyone has questions, comments, concerns, please reply to this email or preferably ping me in #fedora-apps. Thanks! Chaoyi

1 0

Fedora Hubs meetup time & info
by David Gay 23 May '15

23 May '15

Hi, everyone! The time has been decided for the next Fedora Hubs meetup. It will be Thursday, May 21 at 19:00 UTC, and is listed on Fedocal[1]. I've listed the location of the meeting as #fedora-hubs on Freenode, but I expect that the conversation will mostly go down in BlueJeans[2]. I also expect that this BlueJeans conference will be recorded, just as the last one was. I will make this recording publicly available after the meeting. As always, you can dial into this conference from your computer, a phone, or other device. If you'd like to prepare for the meeting, you can check out mizmo's discussion ideas[3], as well as the Fedora Hubs development wiki page[4]. I'm excited to keep moving forward on this project. Hope to see you there! -- David [1]: https://apps.fedoraproject.org/calendar/infrastructure/#m2543 [2]: https://bluejeans.com/472318221 [3]: https://raw.githubusercontent.com/fedoradesign/fedora-hubs/master/meta/diag… [4]: https://fedoraproject.org/wiki/Fedora_Hubs

2 1

Freeze Break request: switch bodhi over for 0 day updates
by Kevin Fenzi 23 May '15

23 May '15

With our release, we need to switch bodhi over to making regular 0 day updates and prep it for f23 updates someday. I'd apply this patch and then the 0 day release actions in the bodhi sop at https://infrastructure.fedoraproject.org/infra/docs/bodhi.rst +1s? kevin -- diff --git a/modules/bodhi/templates/bodhi-masher-jobrunner.cfg.erb b/modules/bodhi/templates/bodhi-masher-jobrunner.cfg.erb index 022d67a..408a110 100644 --- a/modules/bodhi/templates/bodhi-masher-jobrunner.cfg.erb +++ b/modules/bodhi/templates/bodhi-masher-jobrunner.cfg.erb @@ -9,16 +9,16 @@ # Release status # pre-beta enforces the 'Pre Beta' policy defined here: # https://fedoraproject.org/wiki/Updates_Policy -f22.status = 'pre_beta' +f23.status = 'pre_beta' -f22.post_beta.mandatory_days_in_testing = 7 -f22.post_beta.critpath.num_admin_approvals = 0 -f22.post_beta.critpath.min_karma = 2 -f22.post_beta.critpath.stable_after_days_without_negative_karma = 14 +f23.post_beta.mandatory_days_in_testing = 7 +f23.post_beta.critpath.num_admin_approvals = 0 +f23.post_beta.critpath.min_karma = 2 +f23.post_beta.critpath.stable_after_days_without_negative_karma = 14 -f22.pre_beta.mandatory_days_in_testing = 3 -f22.pre_beta.critpath.num_admin_approvals = 0 -f22.pre_beta.critpath.min_karma = 1 +f23.pre_beta.mandatory_days_in_testing = 3 +f23.pre_beta.critpath.num_admin_approvals = 0 +f23.pre_beta.critpath.min_karma = 1 sqlobject.dburi="notrans_postgres://bodhi:<%= bodhiPassword %>@db-bodhi/bodhi" diff --git a/modules/bodhi/templates/bodhi-prod.cfg.erb b/modules/bodhi/templates/bodhi-prod.cfg.erb index c166c65..2853a96 100644 --- a/modules/bodhi/templates/bodhi-prod.cfg.erb +++ b/modules/bodhi/templates/bodhi-prod.cfg.erb @@ -9,16 +9,16 @@ # Release status # pre-beta enforces the 'Pre Beta' policy defined here: # https://fedoraproject.org/wiki/Updates_Policy -f22.status = 'post_beta' +f23.status = 'pre_beta' -f22.post_beta.mandatory_days_in_testing = 7 -f22.post_beta.critpath.num_admin_approvals = 0 -f22.post_beta.critpath.min_karma = 2 -f22.post_beta.critpath.stable_after_days_without_negative_karma = 14 +f23.post_beta.mandatory_days_in_testing = 7 +f23.post_beta.critpath.num_admin_approvals = 0 +f23.post_beta.critpath.min_karma = 2 +f23.post_beta.critpath.stable_after_days_without_negative_karma = 14 -f22.pre_beta.mandatory_days_in_testing = 3 -f22.pre_beta.critpath.num_admin_approvals = 0 -f22.pre_beta.critpath.min_karma = 1 +f23.pre_beta.mandatory_days_in_testing = 3 +f23.pre_beta.critpath.num_admin_approvals = 0 +f23.pre_beta.critpath.min_karma = 1 # Bodhi Defaults: #

4 3

[release] pagure: 0.1.7
by Pierre-Yves Chibon 22 May '15

22 May '15

Good morning, I just cut and pushed a new pagure releases providing a number of bugfixes. Here is the changelog: * Fri May 22 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.1.7-1 - Update to 0.1.7 - Drop debugging code on the milter and the hooks - Adjust the search_issues method to support filter for some tags, excluding some others (for example ?tags=easfix&tags=!0.2) - Support groups when searching an user's projects (ie: finding the projects an user has access to via the group their are in) - Do not load the git repo from the FS when loading an user's page - Present and document the SSH keys in a dedicated documentation page We now also present the ssh key of the server: https://pagure.io/ssh_info Enjoy! Pierre

1 0

Fedora Meeting 2015-05-21
by Stephen John Smoogen 21 May '15

21 May '15

============================================ #fedora-meeting: Infrastructure (2015-05-21) ============================================ Meeting started by nirik at 18:01:24 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2015-05-21/infrastructure.2… . Meeting summary --------------- * aloha (nirik, 18:01:25) * New folks introductions / Apprentice feedback (nirik, 18:01:25) * GSoC student update - kushal (smooge, 18:06:01) * LINK: https://fedoraproject.org/wiki/Planet?rd=Planet_HowTo (decause, 18:20:08) * LINK: http://dgplug.org/summertraining15.html (decause, 18:21:18) * LINK: http://jmap.io/ (decause, 18:24:19) * announcements and information (smooge, 18:24:27) * pagure now being backed up and in production - kevin (smooge, 18:24:28) * download-ib02 was full, dropped 22-alpha/beta content - kevin (smooge, 18:24:28) * Lots of work on mirrormanager2 to make it more robust - patrick/adrianr/pingou (smooge, 18:24:28) * copr now moved to the new cloud - msuchy (smooge, 18:24:28) * Added cpu's to proxy11 after it was not keeping up - kevin (smooge, 18:24:29) * rework of the monitoring status on pkgdb2 coming up after freeze - pingou (smooge, 18:24:43) * get pagure's milter feature to work, took 3 releases but is working - pingou (smooge, 18:24:43) * work on pagure's API has started - pingou (smooge, 18:24:43) * pagure now has a fedmsg bus available at tcp://pagure.io:9940 -- this will get looped into our prod bus after freeze - ralph (smooge, 18:24:43) * a dev taiga instance is available at http://209.132.184.60/ to mess around with. currently writing fas-openid authn plugin for it - ralph (smooge, 18:24:43) * phabricator role is working, deployed as phab.qadevel.stg.fedoraproject.org - tflink (smooge, 18:24:46) * dell box for beaker has been wired up, still waiting on beaker devs for fix that will allow deployment on el7 - tflink (smooge, 18:24:48) * LINK: https://pagure.io/pagure/issues?tags=easyfix (pingou, 18:26:08) * What are we going to do about meetbot (whither supybot)? - ralph (smooge, 18:26:36) * LINK: https://irc3.readthedocs.org/en/latest/ (decause, 18:29:51) * LINK: https://github.com/fedora-infra/supybot-fedora (decause, 18:31:10) * HELP: Build a plugin for supybot-fedora to provide voting like OpenStack has in their bot -- decause (decause, 18:33:32) * Learn about: Fedora People server - kevin (smooge, 18:36:53) * ACTION: fedora-infra decide on a name for our supybot replacement (meatbot is the current front-runner :P) (decause, 18:37:27) * Open Floor (nirik, 18:48:16) * LINK: https://github.com/decause/wordcloudbot (decause, 18:50:39) * LINK: https://github.com/rossdylan/libfab (decause, 18:54:16) * LINK: https://github.com/ryansb/tremendous (decause, 18:55:09) * LINK: https://github.com/decause/feedcloud (decause, 18:55:57) Meeting ended at 19:01:11 UTC. Action Items ------------ * fedora-infra decide on a name for our supybot replacement (meatbot is the current front-runner :P) Action Items, by person ----------------------- * **UNASSIGNED** * fedora-infra decide on a name for our supybot replacement (meatbot is the current front-runner :P) People Present (lines said) --------------------------- * nirik (70) * smooge (56) * decause (48) * kushal (46) * pingou (33) * threebean (26) * sonalkr132 (15) * sshagarwal (14) * sgallagh (14) * zodbot (10) * prth (8) * Shad0w_Crux (6) * AnuradhaW__ (6) * puiterwijk (4) * d3prof3t (4) * nyazdani (3) * tflink (2) * abompard (1) * dotEast2015 (1) * Southern_Gentlem (1) * dgilmore (1) * pbrobinson (0) * relrod (0) * mdomsch (0) * abadger1999 (0) * lmacken (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -- Stephen J Smoogen.

1 0

Plan for tomorrow's Fedora Infrastructure meeting (2015-05-21)
by Kevin Fenzi 20 May '15

20 May '15

The infrastructure team will be having it's weekly meeting tomorrow, 2015-05-21 at 18:00 UTC in #fedora-meeting on the freenode network. This week we are continuing to try something new. We have a gobby document (see: https://fedoraproject.org/wiki/Gobby ) fedora-infrastructure-meeting-next is the document. Please try and review and edit that document before the meeting and we will use it to have our agenda of things to discuss. A copy as of this morning is included in this email. If you have something to discuss, add the topic to the discussion area with your name. If you would like to teach other folks about some application or setup in our infrastructure, please add that topic and your name to the learn about section. kevin -- = Introduction = This shared document is for the next fedora infrastructure meeting. We will use it over the week before the meeting to gather status and info and discussion items and so forth, then use it in the irc meeting to transfer information to the meetbot logs. = Meeting start stuff = #startmeeting Infrastructure (2015-05-21) #meetingname infrastructure #topic aloha #chair smooge relrod nirik abadger1999 lmacken dgilmore mdomsch threebean pingou puiterwijk pbrobinson #topic New folks introductions / Apprentice feedback = Status / information / Trivia / Announcements = (We put things here we want others on the team to know, but don't need to discuss) (Please use #info <the thing> - your name) #topic announcements and information #info pagure now being backed up and in production - kevin #info download-ib02 was full, dropped 22-alpha/beta content - kevin #info Lots of work on mirrormanager2 to make it more robust - patrick/adrianr/pingou #info copr now moved to the new cloud - msuchy #info Added cpu's to proxy11 after it was not keeping up - kevin #info = Things we should discuss = We use this section to bring up discussion topics. Things we want to talk about as a group and come up with some consensus or decision or just brainstorm a problem or issue. If there are none of these we skip this section. (Use #topic your discussion topic - your username) #topic What are we going to do about meetbot (whither supybot)? - ralph #topic = Learn about some application or setup in infrastructure = (This section, each week we get 1 person to talk about an application or setup that we have. Just going over what it is, how to contribute, ideas for improvement, etc. Whoever would like to do this, just add the info in this section. In the event we don't find someone to teach about something, we skip this section and just move on to open floor.) #topic Learn about: Fedora People server - kevin = Meeting end stuff = #topic Open Floor #endmeeting

1 0

Freeze break request: Add nagios internal monitoring for mm2 publiclist and fix mm2 static alias
by Patrick Uiterwijk 20 May '15

20 May '15

Hi all, Any +1s for these changes? The static change is because currently all static assets are served through Flask (which is highly inefficient and disables caching as it sends session cookies). With kind regards, Patrick Uiterwijk Fedora Infra diff --git a/roles/mirrormanager/frontend2/templates/mirrormanager.conf b/roles/mirrormanager/frontend2/templates/mirrormanager.conf index ce6b082..6f12c24 100644 --- a/roles/mirrormanager/frontend2/templates/mirrormanager.conf +++ b/roles/mirrormanager/frontend2/templates/mirrormanager.conf @@ -1,6 +1,6 @@ # Apache configuration file for mirrormanager2 -Alias /mirrormanager2/static /usr/lib/python2.7/site-packages/mirrormanager2/static/fedora/ +Alias /mirrormanager/static /usr/lib/python2.7/site-packages/mirrormanager2/static/fedora/ WSGIDaemonProcess mirrormanager user=apache maximum-requests=1000 display-name=mirrormanager processes=2 threads=1 WSGISocketPrefix run/wsgi diff --git a/roles/nagios_server/files/nagios/services/websites.cfg b/roles/nagios_server/files/nagios/services/websites.cfg index 67f49e9..a9f4e70 100644 --- a/roles/nagios_server/files/nagios/services/websites.cfg +++ b/roles/nagios_server/files/nagios/services/websites.cfg @@ -44,6 +44,14 @@ define service { } define service { + host_name mm-frontend01,mm-frontend01.stg + service_description mm-publiclist-internal + check_command check_website!localhost!/mirrormanager/ + use internalwebsitetemplate + event_handler restart_httpd +} + +define service { host_name proxy01-wildcard, proxy02-wildcard, proxy03-fpo, proxy04-fpo, proxy06-fpo, proxy07-wildcard, proxy08-wildcard, proxy09-wildcard, proxy05-fpo, proxy10-fpo, proxy11-fpo service_description start.fedoraproject.org check_command check_website!start.fedoraproject.org!/!The Fedora Project is maintained

3 2

Re: Freeze break request: push mirrormanager2-0.1.0-3
by Michael Hampton 20 May '15

20 May '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 05/20/2015 04:11 AM, Pierre-Yves Chibon wrote: > We were leaning to wait for after the freeze to push this, but Adrian Reber > reported that the issue of mirrorlist being sometime un-available is causing > problem with the report-mirror script. > As an aside, I reported a problem with the report_mirror script crashing when the mirrorlist is unavailable some months ago as BZ#1162275, where a trivial patch is available. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJVXKHtAAoJEJICkBIKCqxcnIQQANgxhnuPYJowVYMlZ6rD2vE5 NBR2CyPNZuaxzCOhS6yL/rwzK7rDpSPc2LvGeQb7ysWsPtEBP5SKqffRZBUOzcYH /wH4uOByhB1CkZnkT2bAoxp8HLdDopiHtjrCNtPHORMft9xusS2ESchLGSp3XzDI AUzL+qb8RkdQdHS450BymRb6sUXdgjAzscCMk3LmMzSTilCwAEoWaW+St9vHMccR YVkTbFYDZTCZ4GxXJvXRNrRXhZ1c/kYcf+xiWDsThgeE3c6fl3pNLFsDywoO1IKu GK+dGEgxIjqFLzZIf4NZxxMFVpFzkjIRV15pW5318YOOBjPzbr6tT2U3iBBcz8z0 Cmj7gcyGQn7vuM9HPA2E1KvFMdKslV+FeeC6ZOCWB5oa/qQ6n8UczfmoSkMfIJeU A/U1dsm6JaZFKdzNj7D3ot8Lk+SR2vKWyKh6EyVjnkKcl/0HvpvTJtnC7iJ7AhuX wCAkxe0/jmZfaI2XEphgAn4a6EOgNf9VXKpCpsQwfQspaeSLnlXfK6JwMYavkSYs d5VWE5CStUfW5Cjytbr++snRhN2nNAIy4UHW89aA+vOforz54Zcg4WUlZeIC34+d 9Nq3PyfTCT6ZmG330zGjhpVqxp4XwwikoFEqdJz9nkQ1KQTx74/W0gz9dnqao5/N 7PfoQLKBH/IrvWBDsXcg =YH1a -----END PGP SIGNATURE-----

1 0

Freeze Break request: add 2 cpus to proxy11
by Kevin Fenzi 20 May '15

20 May '15

This morning we had a few reports of mirrorlists timing out, and noticed that load on proxy11 was very high. It was using all 4 of it's cpus 100% and may have been dropping or timing out requests. I'd like to add 2 to it: +1s? kevin -- diff --git a/inventory/host_vars/proxy11.fedoraproject.org b/inventory/host_vars/proxy11.fedoraproject.org index 4c412de..d07e698 100644 --- a/inventory/host_vars/proxy11.fedoraproject.org +++ b/inventory/host_vars/proxy11.fedoraproject.org @@ -2,7 +2,7 @@ nm: 255.255.255.0 gw: 67.219.144.1 dns: 8.8.8.8 -num_cpus: 4 +num_cpus: 6 ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-7-ext ks_repo: http://209.132.181.6/repo/rhel/RHEL7-x86_64/

3 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure May 2015