infrastructure March 2017

infrastructure@lists.fedoraproject.org

48 participants
84 discussions

Freeze break: set pagure serveradmin
by Kevin Fenzi 17 Mar '17

17 Mar '17

This is a simple little tweak that fixes pagure saying: "Contact root@localhost" when it emits a 500 error. This would fix ticket: https://pagure.io/fedora-infrastructure/issue/5906 +1s? kevin -- diff --git a/roles/pagure/frontend/templates/0_pagure.conf b/roles/pagure/frontend/templates/0_pagure.conf index 6350c5f..a7b7e70 100644 --- a/roles/pagure/frontend/templates/0_pagure.conf +++ b/roles/pagure/frontend/templates/0_pagure.conf @@ -61,6 +61,8 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na WSGIScriptAlias / /var/www/pagure.wsgi + ServerAdmin admin(a)fedoraproject.org + SSLEngine on SSLProtocol all -SSLv2 -SSLv3 # Use secure TLSv1.1 and TLSv1.2 ciphers

4 3

[PATCH] add new fedora-bootstrap release 1.0.3 to apps.fp.o/global
by Ryan Lerch 17 Mar '17

17 Mar '17

Just spun up a new release of fedora-bootstrap that rebases the version of bootstrap it uses to v4-alpha.6 Attached is the patch for the ansible setup. cheers, ryanlerch

1 0

SOP for Package Review
by InvalidPath 17 Mar '17

17 Mar '17

I'm going to attempt to write this, Im looking for any info anyone currently has: hosting nodes? backend db? application names? Anything at all would be appreciated. Ben

3 2

Best practice for 3rd party playbook
by Miroslav Suchý 17 Mar '17

17 Mar '17

Hi, I am in process in writing playbook for retrace.fedoraproject.org ABRT team created: https://github.com/abrt/ansible-role-retrace-server Which we can use. I just wonder what is best practise for using such 3rd party roles? Should I just copy it into our ansible.git? Or should I use ansible-galaxy command to sync it? Manually? Or when the playbook is run? -- Miroslav Suchy, RHCA Red Hat, Senior Software Engineer, #brno, #devexp, #fedora-buildsys

2 1

Freeze Break Request: increase threads for resultsdb_frontend wsgi daemon
by Tim Flink 17 Mar '17

17 Mar '17

Production resultsdb_frontend is also really slow and I'd like to bump it's resources at the same time I bump resultsdb from the other FBR. +1s? Tim From 9757a01edfe14a2455f523d0ac7cb8cfb4e92f8e Mon Sep 17 00:00:00 2001 From: Tim Flink <tflink(a)fedoraproject.org> Date: Fri, 17 Mar 2017 16:23:12 +0000 Subject: [PATCH 2/2] bump resources for resultsdb_frontend as well --- .../taskotron/resultsdb-frontend/templates/resultsdb_frontend.conf.j2 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/roles/taskotron/resultsdb-frontend/templates/resultsdb_frontend.conf.j2 b/roles/taskotron/resultsdb-frontend/templates/resultsdb_frontend.conf.j2 index 16fbc89..e71cf58 100644 --- a/roles/taskotron/resultsdb-frontend/templates/resultsdb_frontend.conf.j2 +++ b/roles/taskotron/resultsdb-frontend/templates/resultsdb_frontend.conf.j2 @@ -1,4 +1,8 @@ +{% if deployment_type in ['stg', 'prod'] %} +WSGIDaemonProcess resultsdb_frontend user=apache group=apache threads=100 processes=10 +{% else %} WSGIDaemonProcess resultsdb_frontend user=apache group=apache threads=5 +{% endif %} WSGIScriptAlias /{{ resultsdb_fe_endpoint }} /usr/share/resultsdb_frontend/resultsdb_frontend.wsgi WSGISocketPrefix run/wsgi -- 1.8.3.1

3 2

Freeze Break Request: enable package-specific tasks for Taskotron production
by Tim Flink 17 Mar '17

17 Mar '17

This has been pending for a long time and now that the bureaucratic stuff has been figured out and our dev/stg instances are running well, we'd like to enable package-specific tasks in Taskotron production. This will involve: - Updating to latest execdb * This involves a db change of one column from String(20) to Text() - Updating to latest taskotron-trigger - Configuring trigger to look for tasks in dist-git on koji_build The primary risks are: - Something goes wrong with the execdb db update (unlikely) * This is easily mitigated by either replacing the db (the data in it isn't critical) or reverting - New Trigger doesn't work properly * Revert to older trigger build and config This setup is running in both our dev and stg environments. We have not seen any stability issues as the change on our systems is rather small. I have attached diffs for the execdb, trigger and ansible changes. +1s? Tim

4 5

FBR: Fix koji monitoring from noc02
by Patrick Uiterwijk 17 Mar '17

17 Mar '17

Hi all, So, our noc02 monitoring of Koji build targets broke because the modularity stuff pushed rawhide to the second page :). Can I get +1s to start testing for "infra" instead, which should match $release-infra and such? Patrick commit dd4583fff2ca0739dee955197be02551373a23f5 Author: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Fri Mar 17 13:27:04 2017 +0000 Check for *-infra target, since rawhide comes after modularity build targets Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com> diff --git a/roles/nagios/server/files/nagios-external/services/websites.cfg b/roles/nagios/server/files index d571a95..3a96003 100644 --- a/roles/nagios/server/files/nagios-external/services/websites.cfg +++ b/roles/nagios/server/files/nagios-external/services/websites.cfg @@ -45,7 +45,7 @@ define service { define service { host_name koji-phx2 service_description koji - check_command check_website!koji.fedoraproject.org!/koji/buildtargets!rawhide + check_command check_website!koji.fedoraproject.org!/koji/buildtargets!infra use websitetemplate }

4 3

503 Responses From 8.43.85.67
by Jonathan Steffan 17 Mar '17

17 Mar '17

Team, The community has been experiencing issues with the FPO infrastructure intermittently. I believe I've found the destination causing the issue: $ curl -vso /dev/null --resolve fedoraproject.org:443:8.43.85.67 https://fedoraproject.org/wiki/Fedora_Project_Wiki * Added fedoraproject.org:443:8.43.85.67 to DNS cache * Hostname fedoraproject.org was found in DNS cache * Trying 8.43.85.67... * TCP_NODELAY set * Connected to fedoraproject.org (8.43.85.67) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * ALPN/NPN, server did not agree to a protocol * SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 * Server certificate: * subject: CN=*.fedoraproject.org,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US * start date: Feb 01 00:00:00 2017 GMT * expire date: May 01 12:00:00 2020 GMT * common name: *.fedoraproject.org * issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US > GET /wiki/Fedora_Project_Wiki HTTP/1.1 > Host: fedoraproject.org > User-Agent: curl/7.51.0 > Accept: */* > < HTTP/1.1 503 Service Unavailable < Date: Fri, 17 Mar 2017 06:46:33 GMT < Server: Apache/2.4.6 (Red Hat Enterprise Linux) < Content-Length: 400 < Connection: close < Content-Type: text/html; charset=iso-8859-1 < { [400 bytes data] * Curl_http_done: called premature == 0 * Closing connection 0 I pinged in #fedora-admin but wanted to let everyone know there is an intermittent failure right now. Mar 16 22:08:45 MDT is the first concrete time I can state this issue started. -- Jonathan Steffan jonathansteffan(a)gmail.com

2 1

FBR: Add proxy10 and proxy14 to noc02
by Patrick Uiterwijk 17 Mar '17

17 Mar '17

Hi all, Last night, we've found that proxy14 was not up "up" the last few days (since it was rebooted for the RDU migration). Can I get +1s to get it added to noc02? Patch after the break. Patrick commit 0e69fbf106b7e5ce361f561de028e8e716825a32 Author: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Fri Mar 17 08:47:14 2017 +0000 Add proxy10 and proxy14 Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com> diff --git a/roles/nagios/server/files/nagios-external/hosts/admin.fedoraproject.org.cfg b/roles/nagios/server/files/nagios-external/hosts/admin.fedoraproject.org.cfg index 57d6759..359b5cd 100644 --- a/roles/nagios/server/files/nagios-external/hosts/admin.fedoraproject.org.cfg +++ b/roles/nagios/server/files/nagios-external/hosts/admin.fedoraproject.org.cfg @@ -16,6 +16,39 @@ define host { address 209.132.181.16 } +define host { + host_name 209.132.181.15-phx2 + alias 209.132.181.15-phx2 + use defaulttemplate + address 209.132.181.15 + parents proxy10.fedoraproject.org +} + +define host { + host_name proxy10.fedoraproject.org + alias proxy10.fedoraproject.org + use defaulttemplate + address 209.132.181.15 +} + +# +# rdu2 +# +define host { + host_name 8.43.85.67-rdu2 + alias 8.43.85.67-rdu2 + use defaulttemplate + address 8.43.85.67 + parents proxy14.fedoraproject.org +} + +define host { + host_name proxy14.fedoraproject.org + alias proxy14.fedoraproject.org + use defaulttemplate + address 8.43.85.67 +} + # # tummy # diff --git a/roles/nagios/server/files/nagios-external/services/websites.cfg b/roles/nagios/server/files/nagios-external/services/websites.cfg index 180cdd2..d571a95 100644 --- a/roles/nagios/server/files/nagios-external/services/websites.cfg +++ b/roles/nagios/server/files/nagios-external/services/websites.cfg @@ -3,7 +3,7 @@ # define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description https max_check_attempts 2 normal_check_interval 2 @@ -13,7 +13,7 @@ define service { define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description bodhi max_check_attempts 8 check_command check_website_ssl!bodhi.fedoraproject.org!/!Fedora @@ -21,14 +21,14 @@ define service { } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description pkgdb check_command check_website_ssl!admin.fedoraproject.org!/pkgdb/collections/!EPEL use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description packages max_check_attempts 8 check_command check_website_ssl!apps.fedoraproject.org!/packages/!Packages @@ -36,7 +36,7 @@ define service { } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description elections check_command check_website_ssl!admin.fedoraproject.org!/voting/!Last 5 elections use websitetemplate @@ -50,35 +50,35 @@ define service { } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description accounts check_command check_website_ssl!admin.fedoraproject.org!/accounts/help/get_help/user_telephone!emergency use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description ask check_command check_website_ssl!ask.fedoraproject.org!/en/questions/!RSS use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description blockerbugs check_command check_website_ssl!qa.fedoraproject.org!/blockerbugs/!Currently Active Milestones use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description fedocal check_command check_website_ssl!apps.fedoraproject.org!/calendar/list/infrastructure-outages/!Description use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description taskotron_taskmaster max_check_attempts 8 check_command check_website_ssl!taskotron.fedoraproject.org!/taskmaster/ @@ -86,7 +86,7 @@ define service { } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description taskotron_resultsdb max_check_attempts 8 check_command check_website_ssl!taskotron.fedoraproject.org!/resultsdb/ @@ -94,7 +94,7 @@ define service { } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description taskotron_resultsdb_api max_check_attempts 8 check_command check_website_ssl!taskotron.fedoraproject.org!/resultsdb_api/ @@ -106,7 +106,7 @@ define service { # define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description http max_check_attempts 2 normal_check_interval 2 @@ -115,49 +115,49 @@ define service { } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description fedoraproject.org check_command check_website_ssl!fedoraproject.org!/!getfedora.org use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description fedoraproject.org - wiki check_command check_website!fedoraproject.org!/wiki/Special:Statistics!Active users use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description docs.fedoraproject.org check_command check_website_ssl!docs.fedoraproject.org!/en-US/index.html!Fedora Documentation use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description mirrors.fedoraproject.org - mirrorlist check_command check_website!mirrors.fedoraproject.org!/mirrorlist?repo=rawhide&arch=x86_64&country=global!development use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, proxy03.fedoraproject.org, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description mirrors.fedoraproject.org - publiclist check_command check_website_publiclist_ssl!admin.fedoraproject.org!/mirrormanager/api/mirroradmins/?name=dl.fedoraproject.org!admins use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description start.fedoraproject.org check_command check_website_ssl!start.fedoraproject.org!/!The Fedora Project is maintained use websitetemplate } define service { - host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica + host_name 209.132.181.16-phx2, 85.236.55.6-internetx, 66.35.62.162-tummy, 152.19.134.142-ibiblio, 152.19.134.198-ibiblio, proxy06.fedoraproject.org, proxy09.fedoraproject.org, 67.203.2.67-coloamerica, 209.132.181.15-phx2, 8.43.85.67-rdu2 service_description paste.fedoraproject.org check_command check_website_ssl!paste.fedoraproject.org!/!UserRegisterInterfaceURI use websitetemplate

3 2

Freeze Break Request: Enabling Nested Virt for Production Taskotron Virthosts
by Tim Flink 17 Mar '17

17 Mar '17

This is less important than the other FBR that I submitted but I'd like to do it while things are paused for the other change. I'd like to enable nested virt on the virthosts that run the Taskotron production clients. What I'd be doing is: - adding the 'virthost' role in ansible - running the playbook for the Taskotron client virthosts - rebooting the machines (qa12.qa and qa13.qa) The change is small and since jobs are already stopped, there should be little impact other than nagios warnings if I forget to schedule downtime :) If something goes wrong, we can remove the nested virt enablement and reboot the hosts again. If all else fails, we can sub in the dev and stg virthosts because all of the Taskotron virthosts are pretty much identical. I think that this is incredibly unlikely, though. +1s? Tim

3 2

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure March 2017