infrastructure April 2016

infrastructure@lists.fedoraproject.org

33 participants
75 discussions

[release] anitya: 0.9.1
by Pierre-Yves Chibon 19 Apr '16

19 Apr '16

Good Morning Everyone, I just cut and pushed a new version of anitya: 0.9.1 Here is the corresponding changelog: * Tue Apr 19 2016 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.9.1-1 - Update to 0.9.1 - Fix the stackage backend It should cut the list of failed update of ~200 projects :) Happy updating, Pierre

2 1

Hello World
by josh Sutton 18 Apr '16

18 Apr '16

Name: Josh TZ: US/Central IRC: j_shua Skills: Current Linux SysAd Tech: RHEL, Centos, Apache, Docker, Ansible, etc Employer: Rackspace - We love FOSS! Wanna learn: Python, bash, packaging, expanding on current linux knowledge, more ansible and Docker I am all setup in FAS (jshua), so feel free to reach out at anytime in IRC or email. Thanks, Josh

1 0

Is mailman@ active?
by Misha S. 18 Apr '16

18 Apr '16

Mail sent to mailman(a)lists.fp.o gets rejected. Where shall I submit problems with mailing lists? Misha https://fedoraproject.org/wiki/User:Misha English / Español / Italiano / Русский

2 1

Spanish L10N mailing list
by Misha S. 17 Apr '16

17 Apr '16

Hello. The existing mailing list trans-es@ is not on lists.fedoraproject.org. Is there a way to make it show there? Thanks. Misha https://fedoraproject.org/wiki/User:Misha English / Español / Italiano / Русский

1 0

[PATCH] Move ntp setup in a role
by Michael Scherer 16 Apr '16

16 Apr '16

From: Michael Scherer <misc(a)zarb.org> Since base install ntp on all platforms, we can skip the vars and place it by default (next step is to convert the few playbooks duplicating the role) --- roles/base/files/ntp/step-tickers | 7 ------- roles/base/meta/main.yml | 1 + roles/base/tasks/main.yml | 21 --------------------- roles/base/templates/ntp/ntp.conf.j2 | 34 ---------------------------------- roles/ntp/files/step-tickers | 7 +++++++ roles/ntp/tasks/main.yml | 27 +++++++++++++++++++++++++++ roles/ntp/templates/ntp.conf.j2 | 34 ++++++++++++++++++++++++++++++++++ vars/CentOS.yml | 2 +- vars/Fedora.yml | 2 +- vars/RedHat.yml | 2 +- 10 files changed, 72 insertions(+), 65 deletions(-) delete mode 100644 roles/base/files/ntp/step-tickers delete mode 100644 roles/base/templates/ntp/ntp.conf.j2 create mode 100644 roles/ntp/files/step-tickers create mode 100644 roles/ntp/tasks/main.yml create mode 100644 roles/ntp/templates/ntp.conf.j2 diff --git a/roles/base/files/ntp/step-tickers b/roles/base/files/ntp/step-tickers deleted file mode 100644 index d0fe7ab..0000000 --- a/roles/base/files/ntp/step-tickers +++ /dev/null @@ -1,7 +0,0 @@ -208.75.88.4 -216.93.242.12 -107.170.242.27 -108.166.189.70 -199.223.248.98 -# [loopback] -127.127.1.0 diff --git a/roles/base/meta/main.yml b/roles/base/meta/main.yml index 6ad8fad..afa39de 100644 --- a/roles/base/meta/main.yml +++ b/roles/base/meta/main.yml @@ -1,3 +1,4 @@ --- dependencies: + - { role: ntp } - { role: dnf-automatic } diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml index 5ddb308..3bb4bd8 100644 --- a/roles/base/tasks/main.yml +++ b/roles/base/tasks/main.yml @@ -300,27 +300,6 @@ - name: Setup postfix include: postfix.yml -- name: install ntp.conf - template: src=ntp/ntp.conf.j2 dest=/etc/ntp.conf - tags: - - ntp - - config - - base - -- name: install ntp step-tickers - copy: src=ntp/step-tickers dest=/etc/ntp/step-tickers - tags: - - ntp - - config - - base - -- name: Start ntpd - service: name=ntpd state=running enabled=true - tags: - - ntp - - service - - base - # # This task installs some common scripts to /usr/local/bin # scripts are under roles/base/files/common-scripts diff --git a/roles/base/templates/ntp/ntp.conf.j2 b/roles/base/templates/ntp/ntp.conf.j2 deleted file mode 100644 index e72371c..0000000 --- a/roles/base/templates/ntp/ntp.conf.j2 +++ /dev/null @@ -1,34 +0,0 @@ -## Set up restrictions for services. -restrict default kod nomodify notrap nopeer noquery -restrict -6 default kod nomodify notrap nopeer noquery -restrict 127.0.0.1 -restrict -6 ::1 - -# setup a set of servers that we all look at. -# use servers from 1/2/3.rhel.pool.ntp.org as they are allowed out of the firewall -# However, we need specific ip's to be allowed out from builders. -{% if datacenter == 'phx2' and not inventory_hostname.startswith('bastion0') %} -# -# in phx2 we want to use bastion01 and bastion02 for ntp service -# Unless we are bastion01/02, then we want to use the normal pool -# -server 10.5.126.12 -server 10.5.126.11 -{% else %} -server 1.rhel.pool.ntp.org -server 2.rhel.pool.ntp.org -server 3.rhel.pool.ntp.org -{% endif %} - -# [localhost] -# Undisciplined Local Clock. This is a fake driver intended for backup -# and when no outside source of synchronized time is available. -server 127.127.1.0 # local clock -fudge 127.127.1.0 stratum 10 - -# Key file containing the keys and key identifiers used when operating -# with symmetric key cryptography. -keys /etc/ntp/keys - -# Watch drift -driftfile /var/lib/ntp/drift diff --git a/roles/ntp/files/step-tickers b/roles/ntp/files/step-tickers new file mode 100644 index 0000000..d0fe7ab --- /dev/null +++ b/roles/ntp/files/step-tickers @@ -0,0 +1,7 @@ +208.75.88.4 +216.93.242.12 +107.170.242.27 +108.166.189.70 +199.223.248.98 +# [loopback] +127.127.1.0 diff --git a/roles/ntp/tasks/main.yml b/roles/ntp/tasks/main.yml new file mode 100644 index 0000000..809abc2 --- /dev/null +++ b/roles/ntp/tasks/main.yml @@ -0,0 +1,27 @@ +- name: install ntp + package: name=ntp state=present + tags: + - ntp + - package + - base + +- name: install ntp.conf + template: src=ntp.conf.j2 dest=/etc/ntp.conf + tags: + - ntp + - config + - base + +- name: install ntp step-tickers + copy: src=step-tickers dest=/etc/ntp/step-tickers + tags: + - ntp + - config + - base + +- name: Start ntpd + service: name=ntpd state=running enabled=true + tags: + - ntp + - service + - base diff --git a/roles/ntp/templates/ntp.conf.j2 b/roles/ntp/templates/ntp.conf.j2 new file mode 100644 index 0000000..e72371c --- /dev/null +++ b/roles/ntp/templates/ntp.conf.j2 @@ -0,0 +1,34 @@ +## Set up restrictions for services. +restrict default kod nomodify notrap nopeer noquery +restrict -6 default kod nomodify notrap nopeer noquery +restrict 127.0.0.1 +restrict -6 ::1 + +# setup a set of servers that we all look at. +# use servers from 1/2/3.rhel.pool.ntp.org as they are allowed out of the firewall +# However, we need specific ip's to be allowed out from builders. +{% if datacenter == 'phx2' and not inventory_hostname.startswith('bastion0') %} +# +# in phx2 we want to use bastion01 and bastion02 for ntp service +# Unless we are bastion01/02, then we want to use the normal pool +# +server 10.5.126.12 +server 10.5.126.11 +{% else %} +server 1.rhel.pool.ntp.org +server 2.rhel.pool.ntp.org +server 3.rhel.pool.ntp.org +{% endif %} + +# [localhost] +# Undisciplined Local Clock. This is a fake driver intended for backup +# and when no outside source of synchronized time is available. +server 127.127.1.0 # local clock +fudge 127.127.1.0 stratum 10 + +# Key file containing the keys and key identifiers used when operating +# with symmetric key cryptography. +keys /etc/ntp/keys + +# Watch drift +driftfile /var/lib/ntp/drift diff --git a/vars/CentOS.yml b/vars/CentOS.yml index e32f53a..bd4c73c 100644 --- a/vars/CentOS.yml +++ b/vars/CentOS.yml @@ -1,6 +1,6 @@ --- dist_tag: el{{ ansible_distribution_version[0] }} -base_pkgs_inst: [ 'ntp' ] +base_pkgs_inst: [] base_pkgs_erase: ['firstboot-tui','bluez-utils', 'sendmail'] service_disabled: [] service_enabled: [] diff --git a/vars/Fedora.yml b/vars/Fedora.yml index ad1434a..c985f44 100644 --- a/vars/Fedora.yml +++ b/vars/Fedora.yml @@ -1,6 +1,6 @@ --- dist_tag: f{{ ansible_distribution_version }} -base_pkgs_inst: ['iptables-services', 'ntp' ] +base_pkgs_inst: ['iptables-services' ] base_pkgs_erase: ['firewalld', 'PackageKit*', 'sendmail', 'at'] service_disabled: [ ] service_enabled: ['auditd'] diff --git a/vars/RedHat.yml b/vars/RedHat.yml index e32f53a..bd4c73c 100644 --- a/vars/RedHat.yml +++ b/vars/RedHat.yml @@ -1,6 +1,6 @@ --- dist_tag: el{{ ansible_distribution_version[0] }} -base_pkgs_inst: [ 'ntp' ] +base_pkgs_inst: [] base_pkgs_erase: ['firstboot-tui','bluez-utils', 'sendmail'] service_disabled: [] service_enabled: [] -- 1.8.3.1

2 1

Hello World
by josh Sutton 16 Apr '16

16 Apr '16

2 1

[release] anitya: 0.9.0
by Pierre-Yves Chibon 15 Apr '16

15 Apr '16

Good Morning Everyone, I just cut and pushed a new version of anitya: 0.9.0 Here is the corresponding changelog * Fri Apr 15 2016 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.9.0-1 - Update to 0.9.0 - Do not trigger the keyboard shortcut when in the search box (Prashant-Surya) - Improved UI for flash messages being shown (sudheesh001) - Add a maven-central backend (Michael Simacek) - Indicate that anitya is py2 only (sudheesh001) - Appended UTC as timezone (Jinank Jain) - Update the drupal backends to use updates.drupal.org as source of info (Dave Olsthoorn) Happy updating, Pierre

1 0

Plan for tomorrow's Fedora Infrastructure meeting - 2016-04-14
by Kevin Fenzi 13 Apr '16

13 Apr '16

The infrastructure team will be having it's weekly meeting tomorrow, 2016-04-14 at 18:00 UTC in #fedora-meeting on the freenode network. We have a gobby document (see: https://fedoraproject.org/wiki/Gobby ) fedora-infrastructure-meeting-next is the document. Please try and review and edit that document before the meeting and we will use it to have our agenda of things to discuss. A copy as of today is included in this email. If you have something to discuss, add the topic to the discussion area with your name. If you would like to teach other folks about some application or setup in our infrastructure, please add that topic and your name to the learn about section. kevin -- = Introduction = This shared document is for the next fedora infrastructure meeting. We will use it over the week before the meeting to gather status and info and discussion items and so forth, then use it in the irc meeting to transfer information to the meetbot logs. = Meeting start stuff = #startmeeting Infrastructure (2016-04-14) #meetingname infrastructure #topic aloha #chair smooge relrod nirik abadger1999 lmacken dgilmore threebean pingou puiterwijk pbrobinson #topic New folks introductions / Apprentice feedback = Status / information / Trivia / Announcements = (We put things here we want others on the team to know, but don't need to discuss) (Please use #info <the thing> - your name) #topic announcements and information #info mass update/reboot cycle mostly done, just a few groups left - kevin/patrick/smooge #info bodhi02.stg reinstalled as bodhi01.stg - kevin #info buildvm-02/03/04/05.stg added in staging - kevin #info bvirthost01 and autosign02 added in build network - kevin #info spammers still trying to get in, mostly being blocked by basset - everyone #info noc01/02 upgraded to nagios 4.0.8 - kevin/patrick #info = Things we should discuss = We use this section to bring up discussion topics. Things we want to talk about as a group and come up with some consensus or decision or just brainstorm a problem or issue. If there are none of these we skip this section. (Use #topic your discussion topic - your username) #topic = Learn about some application or setup in infrastructure = (This section, each week we get 1 person to talk about an application or setup that we have. Just going over what it is, how to contribute, ideas for improvement, etc. Whoever would like to do this, just add the info in this section. In the event we don't find someone to teach about something, we skip this section and just move on to open floor.) Schedule: unknown. Sign up now? #topic Learn about: = Meeting end stuff = #topic Open Floor #endmeeting

1 0

Hackfest on ansible repo during flock this summer ?
by Michael Scherer 13 Apr '16

13 Apr '16

Hi, so as people know, the ansible repository is quite old. Fedora was one of the first big public ansible user, and as such, has a rather huge repo. And going where no one has gone before has the downside of not being able to build on others people experience with the new tools, resulting in sometime less optimal solutions, or using older patterns, or just regular bitrot. And as people have seen on the list, I did sent a few patches for refactoring and cleaning things around as I did explore the repo, but I think it would be more efficient to work on that as a team. Therefor, I would like to know who would be interested by a hackfest during flock this year. The idea would be to focus on improving existing playbooks. And among the tasks, we could have: - convert tasks who are not to be roles (example, 2fa) - start using dependencies among roles (example, collectd, fedmsg) - move from yum modules to packages (to handle the yum to dnf change) - remove things < F21 (or EL 6 when applicable) - move handlers, vars, files to role (or role arguments) - move cronjob declaration to cron module (since currently, cron is not reloaded, so changes are not picked) and I think that alone would keep us busy. That's most of the time small tasks, so that would scale well to any number of participants, and with a low complexity, so open to everybody. I already did the proposal before the end of the Cfp, but I kinda forgot to send a email about it. Any people besides me interested ? -- Michael Scherer

2 2

[PATCH] Refactor xinetd in a separate role
by Michael Scherer 13 Apr '16

13 Apr '16

From: Michael Scherer <misc(a)zarb.org> --- handlers/restart_services.yml | 3 --- roles/git/server/meta/main.yml | 4 ++++ roles/git/server/tasks/main.yml | 5 ----- roles/rsyncd/meta/main.yml | 3 +++ roles/rsyncd/tasks/main.yml | 7 ------- roles/xinetd/handlers/main.yml | 2 ++ roles/xinetd/tasks/main.yml | 10 ++++++++++ 7 files changed, 19 insertions(+), 15 deletions(-) create mode 100644 roles/git/server/meta/main.yml create mode 100644 roles/rsyncd/meta/main.yml create mode 100644 roles/xinetd/handlers/main.yml create mode 100644 roles/xinetd/tasks/main.yml diff --git a/handlers/restart_services.yml b/handlers/restart_services.yml index 58396a0..d4ba5fe 100644 --- a/handlers/restart_services.yml +++ b/handlers/restart_services.yml @@ -90,9 +90,6 @@ - name: restart postfix action: service name=postfix state=restarted -- name: restart xinetd - action: service name=xinetd state=restarted - - name: restart netapproute action: command /etc/sysconfig/network-scripts/ifup-routes eth1 diff --git a/roles/git/server/meta/main.yml b/roles/git/server/meta/main.yml new file mode 100644 index 0000000..6bbd92f --- /dev/null +++ b/roles/git/server/meta/main.yml @@ -0,0 +1,4 @@ +--- +dependencies: +- role: xinetd + when: "ansible_distribution_major_version|int == 6" diff --git a/roles/git/server/tasks/main.yml b/roles/git/server/tasks/main.yml index ef9fe4f..81bc437 100644 --- a/roles/git/server/tasks/main.yml +++ b/roles/git/server/tasks/main.yml @@ -20,11 +20,6 @@ tags: git/server # If using xinetd -- name: install xinetd - yum: pkg=xinetd state=present - when: ansible_distribution_major_version|int == 6 - tags: git/server - - name: install the xinetd config file template: > src="git.j2" diff --git a/roles/rsyncd/meta/main.yml b/roles/rsyncd/meta/main.yml new file mode 100644 index 0000000..380b0d1 --- /dev/null +++ b/roles/rsyncd/meta/main.yml @@ -0,0 +1,3 @@ +--- +dependencies: +- role: xinetd diff --git a/roles/rsyncd/tasks/main.yml b/roles/rsyncd/tasks/main.yml index 7d1a83b..0898da8 100644 --- a/roles/rsyncd/tasks/main.yml +++ b/roles/rsyncd/tasks/main.yml @@ -7,7 +7,6 @@ yum: state=present name={{item}} with_items: - rsync - - xinetd - libsemanage-python tags: - packages @@ -17,7 +16,6 @@ dnf: state=present name={{item}} with_items: - rsync - - xinetd - libsemanage-python tags: - packages @@ -49,11 +47,6 @@ tags: - config -- name: make sure xinetd is started - service: name=xinetd state=started - tags: - - services - - name: set sebooleans so rsync can read dirs seboolean: name=rsync_export_all_ro state=true diff --git a/roles/xinetd/handlers/main.yml b/roles/xinetd/handlers/main.yml new file mode 100644 index 0000000..e910312 --- /dev/null +++ b/roles/xinetd/handlers/main.yml @@ -0,0 +1,2 @@ +- name: restart xinetd + action: service name=xinetd state=restarted diff --git a/roles/xinetd/tasks/main.yml b/roles/xinetd/tasks/main.yml new file mode 100644 index 0000000..8149be4 --- /dev/null +++ b/roles/xinetd/tasks/main.yml @@ -0,0 +1,10 @@ +--- +- name: install xinetd + package: state=present name=xinetd + tags: + - packages + +- name: make sure xinetd is started + service: name=xinetd state=started + tags: + - services -- 1.8.3.1

2 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure April 2016