infrastructure August 2015

infrastructure@lists.fedoraproject.org

41 participants
45 discussions

[FBR] Pagure configuration change
by Pierre-Yves Chibon 05 Aug '15

05 Aug '15

Hi everyone, I would like to push this patch and run pagure's playbook. All this do is changing the order of the vhost in the apache configuration file (and adds a couple of comments). This will allow to serve the SSL cert for pagure.io by default to client that do not support SNI. This will also fix the milter (the mechanism used to reply to a ticket via email), which is currently hotfix to not check the SSL cert. +1? Thanks, Pierre

3 3

[release] pagure: 0.1.21
by Pierre-Yves Chibon 05 Aug '15

05 Aug '15

Hi everyone, I just released a new version of pagure: 0.1.21. Here is its changelog: * Wed Aug 05 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.1.21 - Update to 0.1.21 - Make SSH protocol explicit for SSH URLs (Till Maas) - Adjust the documentation (layout and content) - Rework the doc server to allow showing html files directly - Fix installing the pagure hook correctly (tickets and requests) - Give proper attribution to the pagure logo to Micah Deen in the documentation - Increase pull request text field lengths to 80 (Till Maas) - Fix who can open a remote PR and the check that the repo allows PR - If there is no commit and no content, it means we didn't find the file: 404 It's currently running in stg and apparently it's doing fine :) Happy testing! Pierre

1 0

Meeting Agenda Item: Introduction Zach Villers
by Zach Villers 04 Aug '15

04 Aug '15

ehlo Infra team, I'm interested in joining the infra group as an apprentice. I recently passed the RHCSA, am semi-proficient in bash-scripting, and am working on learning Python. I would like to learn more about packaging and managing servers. irc handle: aikidouke (Aikido is a martial art, uke is the person that falls down) github mess: https://github.com/Aikidouke Look forward to talking to you all soon! *in case you have a really good memory, I did join and dropped out right away about six months ago. I was way too busy and a little overwhelmed. I have time now to at least come to the meetings and really want to find a way to contribute and learn.*

1 0

Freeze break request: fix backups for qadevel.qa.fedoraproject.org
by Kevin Fenzi 04 Aug '15

04 Aug '15

qadevel.qa.fedoraproject.org uses port 222 for ssh shell access. ansible is happy using port 222 just fine, but rdiff-backup isn't. It uses port 22 by default, and fails. The following patch should fix this issue. +1s? I would apply this, run the backup playbook and then watch tomorrow's backups to confirm they work. If not we could revert this. kevin -- diff --git a/playbooks/rdiff-backup.yml b/playbooks/rdiff-backup.yml index 9accda6..fd9dec7 100644 --- a/playbooks/rdiff-backup.yml +++ b/playbooks/rdiff-backup.yml @@ -20,11 +20,11 @@ tasks: - name: run rdiff-backup hitting all the global targets - local_action: "shell rdiff-backup --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org" + local_action: "shell rdiff-backup --remote-schema 'ssh -p {{ ansible_ssh_port }} -C %s rdiff-backup --server' --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org" with_items: global_backup_targets when: global_backup_targets is defined - name: run rdiff-backup hitting all the host targets - local_action: "shell rdiff-backup --exclude='**git-seed*' --exclude='**git_seed' --exclude='**.snapshot' --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org" + local_action: "shell rdiff-backup --remote-schema 'ssh -p {{ ansible_ssh_port }} -C %s rdiff-backup --server' --exclude='**git-seed*' --exclude='**git_seed' --exclude='**.snapshot' --create-full-path --print-statistics {{ inventory_hostname }}::{{ item }} /fedora_backups/{{ inventory_hostname }}/`basename {{ item }}` | mail -r sysadmin-backup-members(a)fedoraproject.org -s 'rdiff-backup: {{ inventory_hostname }}:{{ item }}' sysadmin-backup-members(a)fedoraproject.org" with_items: host_backup_targets when: host_backup_targets is defined

3 3

Freeze Break Request - give compose fedmsg certs to s390-koji01
by Ralph Bean 03 Aug '15

03 Aug '15

The s390 koji hub was rebuilt and ansibilized shortly before freeze set in. It had a fedmsg_certs dictionary defined in the koji ansible group which gave it the certs it needed for koji stuff, but it was missing an extra cert definition for the compose process it carries out. This patch over writes that original var with a setup specific to the s390 node. Can I get two +1s to push this out? diff --git a/inventory/host_vars/s390-koji01.qa.fedoraproject.org b/inventory/host_vars/s390-koji01.qa.fedoraproject.org index 795fa9f..e355230 100644 --- a/inventory/host_vars/s390-koji01.qa.fedoraproject.org +++ b/inventory/host_vars/s390-koji01.qa.fedoraproject.org @@ -34,3 +34,41 @@ koji_server_url: "http://s390.koji.fedoraproject.org/kojihub" koji_weburl: "http://s390.koji.fedoraproject.org/koji" fedmsg_koji_instance: s390 + +# Overload the fedmsg_certs definition from the ansible koji group, since the +# s390 hub *also* does compose stuff, not just koji stuff. +fedmsg_certs: +- service: shell + owner: root + group: sysadmin +- service: koji + owner: root + group: apache + can_send: + - buildsys.build.state.change + - buildsys.package.list.change + - buildsys.repo.done + - buildsys.repo.init + - buildsys.rpm.sign + - buildsys.tag + - buildsys.task.state.change + - buildsys.untag +- service: bodhi + owner: root + group: masher + can_send: + - compose.branched.complete + - compose.branched.mash.complete + - compose.branched.mash.start + - compose.branched.pungify.complete + - compose.branched.pungify.start + - compose.branched.rsync.complete + - compose.branched.rsync.start + - compose.branched.start + - compose.epelbeta.complete + - compose.rawhide.complete + - compose.rawhide.mash.complete + - compose.rawhide.mash.start + - compose.rawhide.rsync.complete + - compose.rawhide.rsync.start + - compose.rawhide.start

3 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure August 2015