infrastructure August 2018

infrastructure@lists.fedoraproject.org

25 participants
51 discussions

About JS framework
by Pierre-Yves Chibon 14 Sep '22

14 Sep '22

Good Morning Everyone, Our infrastructure is mostly a python store, meaning almost all our apps are written in python and most using wsgi. However in python we are using a number of framework: * flask for most * pyramid for some of the biggest (bodhi, FAS3) * Django (askbot, Hyperkitty) * TurboGears2 (fedora-packages) * aiohttp (python3, async app: mdapi) While this makes sometime things difficult, these are fairly standard framework and most of our developers are able to help on all. However, as I see us starting to look at JS for some of our apps (fedora-hubs, wartaa...), I wonder if we could start the discussion early about the different framework and eventually see if we can unify around one. This would also allow those of us not familiar with any JS framework to look at the recommended one instead of picking one up semi-randomly. So has anyone experience with one or more JS framework? Do you have one that would you recommend? Why? Thanks for your inputs, Pierre

15 19

Fedora 29 Beta Freeze now in effect
by Kevin Fenzi 26 Sep '18

26 Sep '18

(sorry this email was delayed, it didn't seem to send yesterday when I thought I sent it). Greetings. we are now in the infrastructure freeze leading up to the Fedora 29 Beta release. This is a pre release freeze. We do this to ensure that our infrastructure is stable and ready to release the Fedora 29 Beta when it's available. You can see a list of hosts that do not freeze by checking out the ansible repo and running the freezelist script: git clone https://infrastructure.fedoraproject.org/infra/ansible.git ansible/scripts/freezelist -i inventory Any hosts listed as freezes is frozen until 2018-09-18 (or later if release slips). Frozen hosts should have no changes made to them without a sign-off on the change from at least 2 sysadmin-main or rel-eng members, along with (in most cases) a patch of the exact change to be made to this list. Thanks, kevin

1 1

suggested patch for review - issue 7158
by Zach Villers 18 Sep '18

18 Sep '18

As discussed in infra meeting 16 aug around the 14:30 mark <https://meetbot.fedoraproject.org/teams/infrastructure/infrastructure.2018-…> regarding Issue #7158: Planet Fedora doesn't have a valid certificate <https://pagure.io/fedora-infrastructure/issue/7158>. I created two patches (attached) based on my reading/understanding of the certbot role README. Text below. I think we are in Freeze right now and I probably have _many_ things to fix. Thanks to everyone that guided me (hopefully I'm on the right track :) diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index 8013c539e..5cd82375c 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -932,3 +932,15 @@ tags: - pkgs.fedoraproject.org when: env == "staging" and "phx2" in inventory_hostname +# cert for https://fedoraplanet.org which redirects to http://fedoraplanet.org + + - role: httpd/website + site_name: fedoraplanet.org + server_aliases: + - www.fedoraplanet.org + ssl: true + sslonly: true + certbot: true + certbot_addhost: fedoraplanet.org + tags: + - fedoraplanet.org --------------------------------------- diff --git a/roles/planet/templates/planet.conf b/roles/planet/templates/planet.conf index 319923d2a..f4f1eb622 100644 --- a/roles/planet/templates/planet.conf +++ b/roles/planet/templates/planet.conf @@ -15,6 +15,10 @@ ErrorLog logs/planet-error.log CustomLog logs/fedoraplanet.org-access.log common + RewriteEngine on + RewriteRule ^/\.well-known/(.*) /srv/web/acme-challenge/.well-known/$1 [L] + RewriteRule "^/?(.*)" "https://%{HTTP_HOST}/$1" [L,R=301,NE] + UserDir disable AddCharset UTF-8 .xml @@ -79,3 +83,32 @@ RedirectMatch permanent /(.*) http://fedoraplanet.org/$1 </VirtualHost> +<VirtualHost {{public_ip}}:443 _default_:443> + ## + # Domain: fedoraplanet.org + # Owner: admin(a)fedoraplanet.org + # + ServerName fedoraplanet.org + + SSLEngine on + SSLCertificateFile /etc/letsencrypt/live/fedoraplanet.org/cert.pem + SSLCertificateKeyFile /etc/letsencrypt/live/fedoraplanet.org/privkey.pem + SSLCertificateChainFile /etc/letsencrypt/live/fedoraplanet.org/fullchain.pem + SSLHonorCipherOrder On + SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!ADH:!EXP:!LOW:!MD5:!SSLV2:!NULL + SSLProtocol ALL -SSLv2 + + ServerAdmin admin(a)fedoraplanet.org + ServerName fedoraplanet.org + + DocumentRoot "/srv/planet/site/" + + ErrorLog logs/planet-error.log + CustomLog logs/planet.fedoraproject.org-access.log common + + UserDir disable + AddCharset UTF-8 .xml + + RedirectMatch permanent /(.*) http://fedoraplanet.org/$1 + +</VirtualHost>

2 4

Call for users of statscache
by Clement Verna 03 Sep '18

03 Sep '18

Dear all, During our last meeting [0], we have talked about retiring the statscache service [1]. This is in line with an on going effort to reduce the number of application the infrastructure team has to maintain. The motivation behind this service was to generate statistics using the data of the fedmsg bus. We believe that this service has very little users if not none. Also the commops groups is currently working on another solution to generated statistics using fedmsg [2], this solution is based on GrimoireLab [3]. If there is little interest for this project, we will likely to retire it after the F29 beta freeze [4] Regards, Clément [0] - https://meetbot.fedoraproject.org/teams/infrastructure/infrastructure.2018-… [1] - https://apps.fedoraproject.org/statscache/web/getting-started [2] - https://pagure.io/fedora-commops/issue/114 [3] - https://chaoss.github.io/grimoirelab/ [4] - https://fedoraproject.org/wiki/Releases/29/Schedule?rd=Schedule

2 1

FBR: Fix mediawiki page creation
by Patrick Uiterwijk 31 Aug '18

31 Aug '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, Can I get +1s for the underneath patch to fix mediawiki not calling their own API correctly? This breaks creating new pages on the wiki (and I should've fixed it way earlier, but forgot). - From caa8183ffa572ee6ded823e3d1e895d1dcc6a466 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <patrick(a)puiterwijk.org> Date: Fri, 31 Aug 2018 19:31:58 +0200 Subject: [PATCH] Fix creating of new wiki pages This breaks because mediawiki doesn't follow their own documented API[1] and doesn't pass a base revision ID when creating new pages. Signed-off-by: Patrick Uiterwijk <patrick(a)puiterwijk.org> [1]: https://www.mediawiki.org/wiki/Manual:Hooks/PageContentSaveComplete - --- roles/mediawiki/files/fedmsg-emit.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/mediawiki/files/fedmsg-emit.php b/roles/mediawiki/files/fedmsg-emit.php index c62bd3ee7..846d28e8a 100644 - --- a/roles/mediawiki/files/fedmsg-emit.php +++ b/roles/mediawiki/files/fedmsg-emit.php @@ -205,7 +205,7 @@ function article_save( &$flags, $revision, &$status, - - $baseRevId, + $baseRevId=0, $undidRevId ) { - -- 2.17.1 -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJbiXwnAAoJEIZXmA2atR5Qr7AQAKmSRzW5OOCmeA1PkVZefxmR prWeM6t0CoDcr5Oo6Tsg+fmbFn0LBgkz6qV/PtBMtVT0/roK3HQ1h3pXgoq1sH3Q JB2BTrE/QiEfvCnzQ7LHoJhY2MNDv7hTcEzZyxglhL6I/a+8I5e6Lb0b5I4PZFKe e2FjGW0bmJk4XFqClI6ZTr2ahvIfiBeM02MEEybZT04avk6h1E4s0oyl7kvZvS1h L8kJHLWCT6Xan8bv+scwJT0jPhvyQId4rs3X/ENufn6vFiKhGOv1LVY8Yh3RIoTb z6KAdTuhXVv6aurhixbrBnaJthvVCwfX2A4rhlh6ouF2bBNBPZJLV3R/ZAUdM3KN 9VNytpwlINh2VQyQ2A7O1VqTPRZaI16fKDNNIyHI0YaG0iLnDUFG1PwqocE2QODN BdaORmLv5KzeIBBisehrVWkT4N8iY6PhyGAdsUrnGtAiduro+obBTO2tGt/vtagA rjfiJHG5bPTLWXlNo3GZJIfXGsJq0sOnIwX2qJyYwxdP+MHOiYZQMe1Q6aOI/Gr3 wKxsWnlpIxNtK+sft7qtHyxosFDZSMhI2rakxaVJAk/PFNikEMRvXZiwG98F7FrJ TS77i+Ij6pSf44ywbuCvLxKTd4k39myplhlKNj/d0SJRI/RAMg4Qy2iqWegTsuRm /05MNRNvHMW4DqW+VAQs =NZMI -----END PGP SIGNATURE-----

3 2

Freeze break request: update/reboot aarch64-c23n1/c24n1
by Kevin Fenzi 31 Aug '18

31 Aug '18

Greetings. We are trying to install a aarch64 osbs node for staging so we can get multi-arch containers building, but for some reason the install is not completing correctly. It seems to hang at: [ OK ] Started Service enabling compressing RAM with zRam. I'd like to: * disable buildvm-arvm7-23/24 in koji * update / reboot aarch64-c23n1/c24n1 * re-enable the armv7 builders. Hopefully this will allow us to get a working install for osbs aarch64 in staging. kevin

3 2

FBR add containers.fpo on Openshift (#7120)
by Michael Scherer 31 Aug '18

31 Aug '18

Hi, So as discussed on https://pagure.io/fedora-infrastructure/issue/7120 , here is the 2nd part for the website. That's cut/paste/sed of the 2 others (silverblue, and coreos). It shouldn't impact negatively anything on openshift, but the master in prod are frozen, hence the FBR. Proxies, etc, are already done. -- Michael Scherer

3 2

FBR: Add hosts to DNS for osbs-aarch64
by Stephen John Smoogen 31 Aug '18

31 Aug '18

diff --git a/master/129.5.10.in-addr.arpa b/master/129.5.10.in-addr.arpa index 7390cc0..cd26bf0 100644 --- a/master/129.5.10.in-addr.arpa +++ b/master/129.5.10.in-addr.arpa @@ -3,7 +3,7 @@ $TTL 86400 @ IN SOA 129.5.10.in-addr.arpa. hostmaster.fedoraproject.org. ( ; Make SURE to update the serial # when changes are made. Format is YYYYMMDDNN ; (NN is just a counter to handle multiple changes in one day). - 2018060501 ; Serial + 2018083003 ; Serial 28800 ; Refresh 14400 ; Retry 1000000 ; Expire @@ -40,12 +40,12 @@ $TTL 86400 27 IN PTR virthost-comm04.arm.fedoraproject.org. 28 IN PTR unused. 29 IN PTR unused. -30 IN PTR unused. -31 IN PTR unused. -32 IN PTR unused. -33 IN PTR unused. -34 IN PTR unused. -35 IN PTR unused. +30 IN PTR osbs-aarch64-master01.stg.arm.fedoraproject.org. +31 IN PTR osbs-aarch64-node01.stg.arm.fedoraproject.org. +32 IN PTR osbs-aarch64-node02.stg.arm.fedoraproject.org. +33 IN PTR osbs-aarch64-master01.arm.fedoraproject.org. +34 IN PTR osbs-aarch64-node01.arm.fedoraproject.org. +35 IN PTR osbs-aarch64-node02.arm.fedoraproject.org. 36 IN PTR unused. 37 IN PTR unused. 38 IN PTR unused. diff --git a/master/arm.fedoraproject.org b/master/arm.fedoraproject.org index 7c8a70b..9a0f774 100644 --- a/master/arm.fedoraproject.org +++ b/master/arm.fedoraproject.org @@ -4,7 +4,7 @@ $TTL 3600 ; Make SURE to update the serial # when changes are made. Format is ; YYYYMMDDNN (NN is just a counter to handle multiple changes in one ; day). - 2018060501 ; Serial + 2018083000 ; Serial 3600 ; Refresh 600 ; Retry 1000000 ; Expire @@ -350,3 +350,10 @@ buildvm-armv7-01.stg IN A 10.5.129.233 ;; virthost-comm03 IN A 10.5.129.26 virthost-comm04 IN A 10.5.129.27 + +osbsworker-aarch64-master01.stg IN A 10.5.129.30 +osbsworker-aarch64-node01.stg IN A 10.5.129.31 +osbsworker-aarch64-node02.stg IN A 10.5.129.32 +osbsworker-aarch64-master01 IN A 10.5.129.33 +osbsworker-aarch64-node01 IN A 10.5.129.34 +osbsworker-aarch64-node02 IN A 10.5.129.35 diff --git a/master/stg.phx2.fedoraproject.org b/master/ stg.phx2.fedoraproject.org index 512d81c..d42e649 100644 --- a/master/stg.phx2.fedoraproject.org +++ b/master/stg.phx2.fedoraproject.org @@ -4,7 +4,7 @@ $TTL 3600 ; Make SURE to update the serial # when changes are made. Format is ; YYYYMMDDNN (NN is just a counter to handle multiple changes in one ; day). - 2018082800 ; Serial + 2018083003 ; Serial 3600 ; Refresh 600 ; Retry 1000000 ; Expire -- Stephen J Smoogen.

4 10

FBR Add OSBS to aarch64.
by Stephen John Smoogen 31 Aug '18

31 Aug '18

This needs review by both infrastructure and people who are familiar with osbs. I am mostly copya pasta editing here so it may or may not work. It is also not clear if we need both a master and a node or just a master. -- Stephen J Smoogen.

4 8

Freeze break request: upgrade qemu on buildvm-ppc64le-01/02
by Kevin Fenzi 30 Aug '18

30 Aug '18

Greetings. Right before freeze we got a security qemu update (which was auto applied) on buildvm-ppc64le-01/02. Unfortunately this broke creating images and since those two are our ppc64le image builder machines it's not been fun. I'd like to update them with qemu-2.11.2-3.fc28 which fixes the problem commit (hopefully). If it doesn't it cannot make it worse, as they always fail image building now anyhow. Bug https://bugzilla.redhat.com/show_bug.cgi?id=1614948 has details and https://pagure.io/releng/issue/7703 has information on all the images that haven't been building. +1s? kevin

3 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure August 2018