Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later

2024-03-21 Thread Patrick Uiterwijk
ncompatible to use with other licenses, in > particular GPL3-only. > ... Acked-by: Patrick Uiterwijk

Re: RFR: Zezere

2021-01-13 Thread Patrick Uiterwijk
On Mon, Jan 11, 2021 at 10:14 PM Kevin Fenzi wrote: > > On Fri, Jan 08, 2021 at 06:55:49PM +0100, Patrick Uiterwijk wrote: > > Hi all, > > > > Pierre-Yves reminded me that I forgot to send this. > > Last December, I opened an RFR for running Zezere on the Fedora

RFR: Zezere

2021-01-08 Thread Patrick Uiterwijk
Hi all, Pierre-Yves reminded me that I forgot to send this. Last December, I opened an RFR for running Zezere on the Fedora Infra Openshift instance[1]. If anyone wants to ask questions, feel free to let me know on IRC or reply on this thread. Regards, Patrick [1]:

[FBR] Bump the IoT stable keys to fedora-33

2020-10-28 Thread Patrick Uiterwijk
f73ec9ea99 (HEAD -> master) Author: Patrick Uiterwijk Date: Wed Oct 28 11:26:44 2020 +0100 Bump the IoT stable keys to fedora-33 Signed-off-by: Patrick Uiterwijk diff --git a/roles/robosignatory/templates/robosignatory.toml.j2 b/roles/robosignatory/templates/robosignatory.toml.j2 in

Re: OIDC authentication

2020-06-10 Thread Patrick Uiterwijk
Hi, This would imply that the redirect_uri you are providing in the actual request (see the exact id.fedoraproject.org URL when you see the error) doesn't match the one that's registered for the specified client ID. Look closely at the exact URL, including http/https (per the OpenID Connect

Re: Questions about possible ODCS migration to Openshift.

2020-02-26 Thread Patrick Uiterwijk
On Wed, 26 Feb 2020 at 22:15, Kevin Fenzi wrote: > On Wed, Feb 26, 2020 at 07:18:53AM +0100, Jan Kaluza wrote: > > Hi, > > > > I'm considering migration of ODCS > > (https://odcs.fedoraproject.org/api/1/composes/) to Openshift in order > > to make it more scalable and also to make it closer to

FBR: Change IoT devel/ keys to f31

2019-10-28 Thread Patrick Uiterwijk
Hi, Can I get +1s for the following patch? Regards, Patrick From e0a17965cfa9b6e25171821a3fa4964d8d99963a Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Mon, 28 Oct 2019 14:16:41 +0100 Subject: [PATCH] Update IoT devel/ keys to f31 Signed-off-by: Patrick Uiterwijk --- roles

Re: [Rpm-maint] [rpm-software-management/rpm] Fixes for some issues on Arm platforms (#901)

2019-10-17 Thread Patrick Uiterwijk
> > Would a list of architecture (arm/power/s390x/risc-v etc) people the rpm > > maintainers could reach out to be of assistance so that they know who to > > reach out to when an architecture change is posted so they can be clarified > > be of use moving forward. > > Works for me. > > I don't

Re: [Post Fact FBR] update repoSpanner's SSL cert for pagure01

2019-10-16 Thread Patrick Uiterwijk
On Wed, 16 Oct 2019 at 20:55 Stephen John Smoogen wrote: > On Wed, 16 Oct 2019 at 12:41, Kevin Fenzi wrote: > > > > On Wed, Oct 16, 2019 at 10:47:00AM +0200, Pierre-Yves Chibon wrote: > > > Good Morning Everyone, > > > > > > This morning I found out that https://pagure.io/fedora-infrastructure

Re: announcing HTTPS pushing to dist-git/src.fedoraproject.org for packagers and non-packagers

2019-04-22 Thread Patrick Uiterwijk
Hi Simo, On Mon, 22 Apr 2019 at 20:39, Simo Sorce wrote: > > Any reason why oidc is required instead of a simple GSSAPI (via > mod_auth_gssapi) ? > GSSAPI authentication won't require a graphical session to work. The main reasons for going with OIDS rather than GSSAPI are: 1. User support: we

FBR: Switch docs.fp.o over to openshift-built

2019-04-17 Thread Patrick Uiterwijk
Hi, Can I get +1s for the patch underneath? This will switch from /srv/web/docs (synced from externally built docs sources) to /srv/docs (mount point for doc build outputs built in openshift). This is tested in staging, and the contents in the new location have been confirmed. Regards, Patrick

Re: Can't login to fedora.zanata.org

2019-04-13 Thread Patrick Uiterwijk
Hi all, Just a quick update on this: I just pushed a change live that should fix this issue for now, for more details see the issue Kevin linked to. Please let me know if it's not working for you, and I'll see what I can do. Regards, Patrick ___

FBR: Make rabbitmq.fp.o go to proxy101/110 internally

2019-03-29 Thread Patrick Uiterwijk
Can I get +1s for the patch to the "dns" repo underneath? This should make "rabbitmq.fp.o" resolve to proxy101/proxy110 internally. Patrick diff --git a/fedoraproject.org.template b/fedoraproject.org.template index b0e659c..eac02a0 100644 --- a/fedoraproject.org.template +++

FBR: add proxy101/proxy110 to static syncHttpLogs.sh

2019-03-28 Thread Patrick Uiterwijk
Hi, So it would seem that even though there's a syncHttpLogs.sh.j2 template, that is not actually used... The one that's used is a static syncHttpLogs.sh file. Could I get +1s to add proxy101/proxy110 to that file (see patch underneath) until it gets replaced with the template? Thanks, Patrick

FBR: Enable central http logging for internal proxies

2019-03-28 Thread Patrick Uiterwijk
Hi, Can I get +1s for applying the underneath patch and running the logserver.yml playbook? This will make sure we also capture the proxy101/proxy110 http logs on log01. Patrick diff --git a/roles/base/templates/syncHttpLogs.sh.j2 b/roles/base/templates/syncHttpLogs.sh.j2 index

Re: What are we going to do about sigul?

2019-03-25 Thread Patrick Uiterwijk
On Mon, 25 Mar 2019 at 14:17, Miroslav Suchý wrote: > > Dne 21. 03. 19 v 13:57 Neal Gompa napsal(a): > > Forgive me, but what does sigul do that signd cannot? I'm unaware of > > any material differences between the two. Sigul has very strong network isolation against the server and protections

Re: What are we going to do about sigul?

2019-03-21 Thread Patrick Uiterwijk
> > > Do we want to port sigul to python3-gpg, switching Sigul to Python 3 > > > and the official gpgme bindings so that it works with GnuPG 2? > > > > I would think this would be the way to go, but of course it's up to Patrick. > > > > Is this in progress anywhere?

[FBR] Make RabbitMQ cluster publicly available via proxies

2019-03-06 Thread Patrick Uiterwijk
Hi all, Could I get +1s for the below patch? Thanks, Patrick From 46dc8281edb9b874075525b1756ed0cfa0f91575 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Wed, 6 Mar 2019 21:11:12 +0100 Subject: [PATCH] Add rabbitmq proxying to the proxies Signed-off-by: Patrick Uiterwijk

Re: FAS query question

2019-02-20 Thread Patrick Uiterwijk
On Wed, 20 Feb 2019 at 09:57, Brian (bex) Exelbierd wrote: > > On Sat, Feb 16, 2019 at 8:28 PM Matthew Miller > wrote: > > > > On Sat, Feb 16, 2019 at 02:18:52PM +0100, Patrick Uiterwijk wrote: > > > However, this will be changing in the near future when we move t

Re: FAS query question

2019-02-16 Thread Patrick Uiterwijk
Hi Ben, On Thu, 14 Feb 2019 at 23:07, Ben Cotton wrote: > > Infra team, > > In the interests of reducing our app load, I'm checking out possible > replacements for our elections app. One of the candidates is Helios, > which would apparently require me providing a CSV of eligible voters > for each

Re: [EPEL-devel] Re: Fedora project login

2019-01-07 Thread Patrick Uiterwijk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Fri, Jan 04, 2019 at 11:29:08AM -0800, Kevin Fenzi wrote: > On 1/2/19 10:59 AM, James Cassell wrote: > > On Wed, Jan 2, 2019, at 1:31 PM, Kevin Fenzi wrote: > >> On 1/2/19 12:44 AM, Michael A. Peters wrote: > >>> Hello, > >>> > >>> Extremely BAD

Re: FBR: Fix regeneration of dist-repos

2018-10-26 Thread Patrick Uiterwijk
+1 On Fri, 26 Oct 2018 at 22:09, Mikolaj Izdebski wrote: > > This fixes issue with regenerating dist-repos: > https://pagure.io/fedora-infrastructure/issue/7332 > > Works around Koji bug: > https://pagure.io/koji/issue/1114 > > > From 50d1c0ac60d39abfd194675ee40f8b5bc1c0dec5 Mon Sep 17 00:00:00

FBR: Add key for f29 modular

2018-09-21 Thread Patrick Uiterwijk
Hi all, Can I get +1s to merge the following, which should allow us to actually push out f29 module updates? Patrick commit b39a70e1f58bd3f7e9960499f23717bda7d01b06 (HEAD -> master) Author: Patrick Uiterwijk Date: Fri Sep 21 12:56:58 2018 +0200 Define the key for modular bodhi compo

Post-FBR: Force openvpn to use tun1

2018-09-17 Thread Patrick Uiterwijk
out to make sure this happens? (The second one was because I had the variable name wrong.) commit 8ad630412f6abd082d08a628260b408d88d99b21 Author: Patrick Uiterwijk Date: Tue Sep 18 05:49:15 2018 +0200 Make OpenVPN use tun1 for os-node's Signed-off-by: Patrick Uiterwijk diff

OpenShift logs now working on web

2018-09-12 Thread Patrick Uiterwijk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi all, Just wanted to inform people that as of a few minutes (after my last FBR went live), logs now work in the Production and Staging OpenShift web interfaces. This means that you can now click the Logs tab on the openshift web interface, or

FBR: Fix openshift websockets

2018-09-11 Thread Patrick Uiterwijk
for it...) - - Balancer protocols I'd like +1s to apply the underneath patch to fix this, and enable logs from the prod openshift web console. It is working in staging. commit 095fe0257320998e0f316787042cb4a0245ad345 (HEAD -> master) Author: Patrick Uiterwijk Date: Wed Sep 12 01:55:40 2018 +0

FBR: Fix mediawiki page creation

2018-08-31 Thread Patrick Uiterwijk
Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Fri, 31 Aug 2018 19:31:58 +0200 Subject: [PATCH] Fix creating of new wiki pages This breaks because mediawiki doesn't follow their own documented API[1] and doesn't pass a base revision ID when creating new pages. Signed-off-by: Patrick

Re: FBR: Autosigning for post bodhi activation of F29

2018-08-29 Thread Patrick Uiterwijk
+1 though I'd like it moved to the correct section ("Gated bodhi updates"), but I'll merge it so things get signed at least. On Tue, 28 Aug 2018 at 23:19, Kevin Fenzi wrote: > > +1 > > kevin > > ___ > infrastructure mailing list --

FBR: Set up docs.teamsilverblue.org

2018-08-28 Thread Patrick Uiterwijk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi all, So, teamsilverblue pointed their DNS to us without informing us, can I get +1s to add a redirect to docs.fp.o? Patrick commit b0f37902db5d46b9aac5af8ebaa92639e9d43f8f Author: Patrick Uiterwijk Date: Tue Aug 28 23:03:28 2018 +

Re: FAS: SSH key type: Is it still required to use a RSA key?

2018-05-31 Thread Patrick Uiterwijk
Hi, On 31 May 2018 at 23:22, Christian Stadelmann wrote: > Today I added a ssh key to my account on FAS [1]. It says I should upload a > RSA key, this is part of the help text: > > "Warning: In case of having ECDSA key please upload the two types of keys > because some of our servers may not

FBR: Make bodhi openshift logs a bit more sane

2018-04-30 Thread Patrick Uiterwijk
This should remove the filename headers in Bodhi's tail of logs. Any +1s? commit dd27d5bd55573c039f2cd809b1f0e124eb051cce (HEAD -> master) Author: Patrick Uiterwijk <puiterw...@redhat.com> Date: Mon Apr 30 17:39:42 2018 +0200 Make bodhi openshift logs slightly more sane S

FBR: Fix new-updates-sync typo

2018-04-26 Thread Patrick Uiterwijk
Hi, Can I get +1s for the following fix to my last version of the script? Patrick diff --git a/roles/bodhi2/backend/files/new-updates-sync b/roles/bodhi2/backend/files/new-updates-sync index b90c89384..7cfe15e5c 100755 --- a/roles/bodhi2/backend/files/new-updates-sync +++

Re: FBR move jenkins to point to centos

2018-04-25 Thread Patrick Uiterwijk
On Thu, Apr 26, 2018 at 12:10 AM, Stephen John Smoogen wrote: > diff --git a/playbooks/include/proxies-redirects.yml > b/playbooks/include/proxies-redirects.yml > index 159c071..2100208 100644 > --- a/playbooks/include/proxies-redirects.yml > +++

FBR: Make new-updates-sync print what it did and email to releng-cron

2018-04-25 Thread Patrick Uiterwijk
Any +1s? From a4b55b290d475769c6cdb076d56fca762a0ed289 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <puiterw...@redhat.com> Date: Wed, 25 Apr 2018 21:53:17 +0200 Subject: [PATCH] Make new-updates-sync always print status and email to releng-cron Signed-off-by: Patrick Uiterwijk &l

Re: [FBR] - Add OIDC scopes for pagure.io APIs

2018-03-30 Thread Patrick Uiterwijk
If it does not modify any production servers, you do not need an FBR. On Fri, Mar 30, 2018 at 7:59 PM, Clement Verna <cve...@fedoraproject.org> wrote: > I was not sure if I needed a FBR, but I preferred to be safe than sorry :) > > On 30 March 2018 at 17:39, Patrick Uit

Re: [FBR] - Add OIDC scopes for pagure.io APIs

2018-03-30 Thread Patrick Uiterwijk
Hum, is this ready to go into production? Since if you're just importing it into ansible, but not deploying to prod, you don't need an FBR. On Fri, Mar 30, 2018 at 11:41 AM, Pierre-Yves Chibon wrote: > On Fri, Mar 30, 2018 at 11:02:11AM +0200, Clement Verna wrote: >> This

Re: [PATCH] changes to releng-team email alias

2018-03-26 Thread Patrick Uiterwijk
+1 On Tue, Mar 27, 2018 at 12:05 AM, Kevin Fenzi wrote: > +1 > > kevin > > > ___ > infrastructure mailing list -- infrastructure@lists.fedoraproject.org > To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org >

Re: FBR: Update download servers to new kernel.org mirrors

2018-03-16 Thread Patrick Uiterwijk
+1, but they're not clearing the old ones, so just adding more? On Fri, Mar 16, 2018 at 9:50 PM, Stephen John Smoogen wrote: > Add the following to the tier1 mirrors > > [smooge@batcave01 ansible (master)]$ git diff origin/master > diff --git a/inventory/group_vars/download

Re: Freeze Break Request: update koji and oz_timeout on buildvm-s390x-02

2018-03-16 Thread Patrick Uiterwijk
+1 to try On Fri, Mar 16, 2018 at 8:51 PM, Kevin Fenzi wrote: > On 03/16/2018 12:42 PM, Ricky Elrod wrote: >> +1. Do we know 14400 will be enough? > > We don't, but I figured we could start there and adjust it if it wasn't > enough still. > > kevin > -- >> >> -re >> >> On Fri,

Re: Goodbye nvr.rsplit('-', 2), hello modularity

2018-03-15 Thread Patrick Uiterwijk
> > > This does not affect traditional RPM/SRPM packages, right? Correct, this only impacts modules. > > Thanks, > -Mat > ___ > devel mailing list -- devel@lists.fedoraproject.org > To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Goodbye nvr.rsplit('-', 2), hello modularity

2018-03-15 Thread Patrick Uiterwijk
Hi all, If you maintain any application in Fedora Infra (or outside) that tries to parse things out of RPM names, you might be interested in this. For those wondering where I've been spending most of my time the last few weeks: I've been deep in the internals of Bodhi fixing all kinds of issues

Goodbye nvr.rsplit('-', 2), hello modularity

2018-03-15 Thread Patrick Uiterwijk
Hi all, If you maintain any application in Fedora Infra (or outside) that tries to parse things out of RPM names, you might be interested in this. For those wondering where I've been spending most of my time the last few weeks: I've been deep in the internals of Bodhi fixing all kinds of issues

Retroactive FBR: Update Openshift production

2018-03-12 Thread Patrick Uiterwijk
Hi all, Due to the recently unembargoed openshift CVEs part of RHSA-2018:0475[1], one of which was marked Important, I have decided to update our production and staging os(.stg).fedoraproject.org clusters. This has caused exactly zero seconds downtime to both the control plane and any

Re: Freeze Break Request: More debugging on armv7 composer vm

2018-03-12 Thread Patrick Uiterwijk
On Mon, Mar 12, 2018 at 9:40 PM, Patrick Uiterwijk <puiterw...@redhat.com> wrote: > On Mon, Mar 12, 2018 at 9:35 PM, Kevin Fenzi <ke...@scrye.com> wrote: >> Greetings. >> >> For a long while we were plagued by a issue where our >> buildvm-armv7-01/02/03 vm

Re: Freeze Break Request: More debugging on armv7 composer vm

2018-03-12 Thread Patrick Uiterwijk
On Mon, Mar 12, 2018 at 9:35 PM, Kevin Fenzi wrote: > Greetings. > > For a long while we were plagued by a issue where our > buildvm-armv7-01/02/03 vm's would get 'stuck' on nightly rawhide and > branched composes. > > Laura found a workaround for this issue where we set a

Re: FBR: Restart collectd

2018-03-09 Thread Patrick Uiterwijk
And it's done. Let's hope that that'll fix all of them. ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org

FBR: Update config to mark primary f28 arches

2018-03-08 Thread Patrick Uiterwijk
Hi all, So, I just found that we were actually somewhat lucky in that the f28 push worked, because it checked with aarch64 on the primary location and aarch64 happens to be primary for f28. Can I get +1s to set the primary arch list in Bodhi for f28? Randy is going to work with releng to get it

Re: FBR: add exclude to mirror crawler

2018-03-08 Thread Patrick Uiterwijk
On Thu, Mar 8, 2018 at 4:37 PM, Adrian Reber wrote: > The rsync based crawler has two excludes hardcoded: > > cmd = "rsync --temp-dir=/tmp -r --exclude=.snapshot --exclude='*.~tmp~'" > > I am just in discussions with a new mirror and the rsync based crawler > fails there with:

FBR: Add f28 testing location

2018-03-08 Thread Patrick Uiterwijk
Hi all, Turns out in the last Bodhi 3.5 FBR, I'd added fedora_28_stable_master_repomd, but forgot the _testing one. Can I get +1s for this patch? Patrick diff --git a/roles/bodhi2/base/templates/production.ini.j2 b/roles/bodhi2/base/templates/production.ini.j2 index a49cfb306..65ba35911 100644

FBR: Update new-updates-sync for f28(m) updates-testing

2018-03-06 Thread Patrick Uiterwijk
Hi all, Can I get +1s to fix up new-updates-sync to fix syncing f28 to the correct directory, and f28m (modular) as well? Patrick diff --git a/roles/bodhi2/backend/files/new-updates-sync b/roles/bodhi2/backend/files/new-updates-sync index 9ca341d79..734e6faa5 100755 ---

Accidental mailing list owner password reset

2018-03-01 Thread Patrick Uiterwijk
Hi all, Due to a human error when running a script, multiple GNOME mailing lists got their owner password reset. This script was run because of a list ownership change, after which it is standard procedure to change the password of that list. The owners of the impacted mailing lists will have

Accidental mailing list owner password reset

2018-03-01 Thread Patrick Uiterwijk
Hi all, Due to a human error when running a script, multiple GNOME mailing lists got their owner password reset. This script was run because of a list ownership change, after which it is standard procedure to change the password of that list. The owners of the impacted mailing lists will have

Re: OpenStack endpoints in fed-cloud09

2017-12-11 Thread Patrick Uiterwijk
Hi, Due to known security issues, the current Fedora Cloud's API is not available from the public internet. Regards, Patrick On Sun, Dec 10, 2017 at 10:02 PM, Miroslav Suchy wrote: > Hi, > I am curious about current state of fed-cloud09. > > I wanted to use ansible module

FBR (retroactive): Create fedora websites live fedimg indicator file

2017-11-12 Thread Patrick Uiterwijk
? Regards, Patrick commit 0a0b58be97ea5e8abe44011f5e233dec74d5e543 Author: Patrick Uiterwijk <puiterw...@redhat.com> Date: Sun Nov 12 20:49:05 2017 + Create live fedimg indicator file on sundries Signed-off-by: Patrick Uiterwijk <puiterw...@redhat.com> diff --git a/role

FBR: Only sync drpms if repo has them

2017-11-10 Thread Patrick Uiterwijk
Source repos do not have drpms, and neither do new repos (aka, first time a release gets mashed). +1s? diff --git a/roles/bodhi2/backend/files/new-updates-sync b/roles/bodhi2/backend/files/new-updates-sync index a241eeb..7f3baae 100755 --- a/roles/bodhi2/backend/files/new-updates-sync +++

Re: FBR: Enable multi-arch ostree composes for F27+

2017-11-10 Thread Patrick Uiterwijk
; +"https://kojipkgs{{ env_suffix }}.fedoraproject.org/pub/[[ path ]]/releases/[[ release.version_int ]]/Everything/[[ arch ]]/os/" [% endif %] ] "ostree_repo": "/mnt/koji/compose/updates/atomic", "t

Re: FBR: Enable multi-arch ostree composes for F27+

2017-11-10 Thread Patrick Uiterwijk
"ostree_repo": "/mnt/koji/compose/updates/atomic", "tag_ref": False -} +}, +{% endfor %} }) ] [% endif %] On Fri, Nov 10, 2017 at 11:39 PM, Dusty Mabe <du...@dustymabe.com> wrote: > > > On 11/10/2017 05:18 PM,

FBR: Enable multi-arch ostree composes for F27+

2017-11-10 Thread Patrick Uiterwijk
Hi all, We can now do multi-arch ostrees for updates! \o/ Can I get +1s to apply this patch to enable that for Fedora 27 and up? Thanks, Patrick diff --git a/roles/bodhi2/backend/templates/pungi.rpm.conf.j2 b/roles/bodhi2/backend/templates/pungi.rpm.conf.j2 index 1c6dc02..b0f6ab7 100644 ---

FBR: Sync out drpms

2017-11-04 Thread Patrick Uiterwijk
Hi, Can I get +1s to update the updates sync script to sync out Pungi-generated drpms? Patrick diff --git a/roles/bodhi2/backend/files/new-updates-sync b/roles/bodhi2/backend/files/new-updates-sync index e3439a0a0..c1c4378d5 100755 --- a/roles/bodhi2/backend/files/new-updates-sync +++

FBR: Fix debuginfo repodata

2017-11-04 Thread Patrick Uiterwijk
Hi, Turns out my bodhi new-updates-sync script has a silly bug, ending the debug repodata in http://dl.fedoraproject.org/pub/fedora/linux/updates/26/x86_64/debug/repodata/repodata/. Can I get +1s for the following patch, which will fix that? Thanks, Patrick diff --git

FBR: Enable delta RPMs in Pungi+Bodhi

2017-11-01 Thread Patrick Uiterwijk
Seems that this is disabled by default. Any +1s? diff --git a/roles/bodhi2/backend/templates/pungi.rpm.conf.j2 b/roles/bodhi2/backend/templates/pungi.rpm.conf.j2 index 140f3438e..1c6dc02f2 100644 --- a/roles/bodhi2/backend/templates/pungi.rpm.conf.j2 +++

Re: FBR: bump compose-x86-01 to 16 GB

2017-11-01 Thread Patrick Uiterwijk
On Wed, Nov 1, 2017 at 4:29 PM, Stephen John Smoogen wrote: > The system is currently at 8 GB and the compose is failing due to OOM. > I am going to bump this to 16GB. If this not enough, we need to > re-engineer what this box is doing and deploy many of its tasks to > other

Re: Freeze Break Request: fix purge-ami's cron

2017-10-31 Thread Patrick Uiterwijk
On Wed, Nov 1, 2017 at 12:10 AM, Kevin Fenzi wrote: > Greetings. > > I happened to notice some cron output a while back and looked into it and > found a slight mistake in the purge-ami's cron. > > 'git clone -n' was being used which tells it to not bother checking out HEAD >

FBR: Signing f27-u-t ostrees

2017-10-31 Thread Patrick Uiterwijk
Hi, The Atomic SIG really wants the F27 atomic tree refs to be created, which only happens if robosignatory signs them. Could I get +1/-1s for the underneath patch? Patrick commit dfbd764b0ce16b9c4df190801bdc32a9e9b9b985 (HEAD -> master) Author: Patrick Uiterwijk <patr...@puiterwijk.org

FBR: update dist-git for namespaced lookaside

2017-10-27 Thread Patrick Uiterwijk
is a very small patch to allow this and default to rpms/ for older clients), and applying the following ansible patch? Patrick commit 58fcfbaca28ea1f370c53216916b2c053328bee7 (HEAD -> master) Author: Patrick Uiterwijk <patr...@puiterwijk.org> Date: Sat Oct 28 01:40:32 2017 +0200

FBR: Bodhi 3.0

2017-10-24 Thread Patrick Uiterwijk
a summary at the end? None of them should be hard to revert. Regards, Patrick commit e64d275f6ad1e830f2374b0309f85d5dda697944 (HEAD -> master) Author: Patrick Uiterwijk <patr...@puiterwijk.org> Date: Tue Oct 24 16:16:50 2017 +0200 Deploy Bodhi3 config to production S

Infra tags repos moved, delay REmoved

2017-10-06 Thread Patrick Uiterwijk
Hi all, TL;DR: Infra tags moved location, no user changes needed, delay in regenerating repos practically removed. Just a headsup that there have been a few changes to the Infra tags, but it should have almost no visible impact. The background is that the Infrastructure tag repos have now

Re: [FBR]: Updating fmn-web config

2017-09-27 Thread Patrick Uiterwijk
On Wed, Sep 27, 2017 at 5:00 PM, Stephen John Smoogen wrote: > Discussion on IRC has patch corrected to change http back to https so +1 > +1 with that change. > On 27 September 2017 at 05:28, Pierre-Yves Chibon wrote: >> Good Morning Everyone, >> >> While

FBR: Forward trees from docs-old

2017-09-27 Thread Patrick Uiterwijk
oldredirs.conf Regards, Patrick commit 65aafdc9c7303685cdec332f4ec09f44199a72bf (HEAD -> master) Author: Patrick Uiterwijk <patr...@puiterwijk.org> Date: Wed Sep 27 17:14:07 2017 +0200 Redirect old docs urls to docs-old Signed-off-by: Patrick Uiterwijk <patr...@puiterwijk.o

FBR: Allow emails to projectatomic.io

2017-09-27 Thread Patrick Uiterwijk
commit f8c14845315cd64adae36dbb6df93419699cd779 Author: Patrick Uiterwijk <puiterw...@redhat.com> Date: Wed Sep 27 14:49:28 2017 + Also use the internal shortcut for projectatomic.io Signed-off-by: Patrick Uiterwijk <puiterw...@redhat.com> diff --git a/roles/dns/files/named.conf b/roles/dns/file

FBR: Allow RH Brno to sync from tier0 mirrors

2017-09-27 Thread Patrick Uiterwijk
Hi all, Can I get +1s for the following patch to allow the new Red Hat Brno IP to sync from tier0 mirrors for QA purposes? Patrick commit 7adb2be60899a2f482f1e5cf9a2c012e1d4eb789 (HEAD -> master) Author: Patrick Uiterwijk <patr...@puiterwijk.org> Date: Wed Sep 27 16:18:33 2

Re: Retroactive FBR

2017-09-22 Thread Patrick Uiterwijk
On Fri, Sep 22, 2017 at 11:38 PM, Paul W. Frields wrote: > I want to apologize profusely -- I pushed a tiny change to the email > aliases and completely failed to consider they are covered by FBR > requirement. > >

Re: Freeze break: add compose-x86-02 compose machine

2017-09-22 Thread Patrick Uiterwijk
On Fri, Sep 22, 2017 at 11:14 PM, Kevin Fenzi wrote: > Greetings. > > In ticket https://pagure.io/fedora-infrastructure/issue/6383 releng asks > for a new machine that is like compose-x86-01 to do modular server > composes with. > > Attached is a patch to make such a machine. >

Re: [FBR] Update the fedfind package in fedimg box

2017-09-20 Thread Patrick Uiterwijk
On Wed, Sep 20, 2017 at 12:59 PM, Sayan Chowdhury wrote: >>> This is the patch[1] that would be fixing the issue >>> >>> [1] >>> https://pagure.io/fedora-qa/fedfind/c/c9e2f817e92615099095a440f38632cf63f79d18?branch=master >> >> And is that the only difference

Re: [FBR] Update the fedfind package in fedimg box

2017-09-20 Thread Patrick Uiterwijk
On Tue, Sep 19, 2017 at 12:31 PM, Sayan Chowdhury wrote: > Hi all, > > fedimg box has been throwing the error for some days now: > > File "/usr/lib/python2.7/site-packages/fedimg/consumers.py", line 71 in > consume > cmetadata =

FBR: Fix krb5

2017-09-15 Thread Patrick Uiterwijk
Hi all, After a lot of debugging, it seems IPA 4.5.0 broke active/active failover for krb5. While I wait on getting that fixed, I would like to request +1s for the following patch. commit 4005fd5929c034436e21c56af0322d53cef04e74 Author: Patrick Uiterwijk <puiterw...@redhat.com> Date: F

Re: FBR: Run nagios playbook to fix disable swap check on os-*-stg

2017-09-15 Thread Patrick Uiterwijk
On Fri, Sep 15, 2017 at 11:24 PM, Ricky Elrod wrote: > Already committed, but I'd like to actually run the playbook to put it in > place: > > Only affects stg checks, but nagios itself is prod, so looking for +1s. +1 ___

Re: FBR: Setup proxying and VPN for certgetter01

2017-09-09 Thread Patrick Uiterwijk
Thanks. It looks like I need one more thing to make sure the challenge doesn't get redirected to https (acme challenges are always over plain http). Can I also get +1s for: From fd0a29275ad4f37f42f6383e14a298adf1db0978 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <puiterw...@redhat.com>

FBR: Setup proxying and VPN for certgetter01

2017-09-09 Thread Patrick Uiterwijk
Hi, Could I get +1s for these patches: From 596ccf8bc44bad969a2ee9395c2c0ae7ee994a43 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <puiterw...@redhat.com> Date: Sat, 9 Sep 2017 22:25:08 + Subject: [PATCH 1/3] Allow setting up a vhost for certgetter Signed-off-by: Patrick Uit

SSH known_hosts changed

2017-08-16 Thread Patrick Uiterwijk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi all, As of right now, the ssh known_hosts file has been basically rewritten to use SSH CA certificates. The actual SSH keys for our servers should not have changed, but the known_hosts file has been shortened signifcantly. Do note that for

Re: Duplicates in package owner alias cronjob?

2017-08-09 Thread Patrick Uiterwijk
On Wed, Aug 9, 2017 at 7:32 PM, Patrick Uiterwijk <puiterw...@redhat.com> wrote: > On Wed, Aug 9, 2017 at 7:29 PM, Pierre-Yves Chibon <pin...@pingoured.fr> > wrote: >> On Wed, Aug 09, 2017 at 05:24:27PM -, Patrick マルタインアンドレアス Uiterwijk >> wrote: >>> &

Re: Duplicates in package owner alias cronjob?

2017-08-09 Thread Patrick Uiterwijk
On Wed, Aug 9, 2017 at 7:29 PM, Pierre-Yves Chibon wrote: > On Wed, Aug 09, 2017 at 05:24:27PM -, Patrick マルタインアンドレアス Uiterwijk > wrote: >> > I'm confused about something. Can any postfix experts help debug? >> > >> > On Friday I put a new package-owner-alias cronjob

2017-07-18 s390x build failures fixed

2017-07-18 Thread Patrick Uiterwijk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi all, This is a quick email to let you know that we have isolated a pretty bad bug in the buildroot for s390x. At Mon, 17 July 2017 17:13 UTC, binutils-2.28-11.fc27[1] was tagged into rawhide, which generated incorrect binaries for s390x. Some

Re: [PATCH] fedora-updates-push: sync F26 atomic content

2017-07-11 Thread Patrick Uiterwijk
On Tue, Jul 11, 2017 at 7:22 PM, Dusty Mabe wrote: > Signed-off-by: Dusty Mabe > --- > roles/bodhi2/backend/files/fedora-updates-push | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/roles/bodhi2/backend/files/fedora-updates-push

Re: FBR: run commands to enable f25->f26 ostree static delta creation

2017-07-10 Thread Patrick Uiterwijk
On Mon, Jul 10, 2017 at 7:48 PM, Dusty Mabe <du...@dustymabe.com> wrote: > > > On 07/10/2017 01:41 PM, Patrick Uiterwijk wrote: >> On Mon, Jul 10, 2017 at 7:26 PM, Dusty Mabe <du...@dustymabe.com> wrote: >>> >>> >>> On 07/10/2017 01:23 PM, Kevi

Re: FBR: run commands to enable f25->f26 ostree static delta creation

2017-07-10 Thread Patrick Uiterwijk
On Mon, Jul 10, 2017 at 7:26 PM, Dusty Mabe wrote: > > > On 07/10/2017 01:23 PM, Kevin Fenzi wrote: >> On 07/07/2017 03:48 PM, Dusty Mabe wrote: >>> For https://pagure.io/atomic-wg/issue/291 we'd like to create a static delta >>> from the last fedora 25 commit to the fedora

Re: Freeze break: fix bodhi to poll armhfp instead of aarch64

2017-07-07 Thread Patrick Uiterwijk
On Fri, Jul 7, 2017 at 8:17 PM, Kevin Fenzi wrote: > Greetings. > > Currently bodhi polls the master mirror when it's at the end of a push to > confirm updates have landed there. Unfortunately it checks the first arch in > the list, and currently thats aarch64, but the aarc64

Re: [PATCH] Removing branched composes

2017-07-07 Thread Patrick Uiterwijk
On Fri, Jul 7, 2017 at 8:50 PM, Mohan Boddu wrote: > As per Kevin's comment, just commenting the lines. > And, here's the new diff: +1 Patrick ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe

Re: Freeze Break Request - selinux policy for mirrorlist containers to allow logrotate to work.

2017-07-02 Thread Patrick Uiterwijk
+1 from me On Sun, Jul 2, 2017 at 8:54 PM, Kevin Fenzi wrote: > Greetings. > > Currently our mirrorlist containers on proxies aren't getting their logs > rotated due to selinux policy. This patch hopefully fixes that and allows > them to be rotated. > > I have tested this on

Retroactive FBR: Apply string patch to Pagure

2017-06-30 Thread Patrick Uiterwijk
Hi all, Last night I applied the patch from https://pagure.io/pagure/pull-request/2385#request_diff to proudction, which seems to have stabilized it completely. I just grabbed https://pagure.io/pagure/pull-request/2385.patch and applied it with "patch filter.py /root/2385.patch", and it can be

Re: [ansible] Add sfo-korg-mirror.kernel.org to tier1

2017-06-28 Thread Patrick Uiterwijk
+1 On Wed, Jun 28, 2017 at 10:29 PM, Stephen John Smoogen wrote: > +1 to the FBR > > On 28 June 2017 at 16:27, Nick Bebout wrote: >> Retroactive FBR please? nirik and smooge know about it on IRC, but I guess >> I should get +1's for the record. Also

Re: Freeze break request: increase max workers on kojipkgs apache

2017-06-28 Thread Patrick Uiterwijk
On Wed, Jun 28, 2017 at 10:07 PM, Kevin Fenzi wrote: > Greetings. > > We saw two issues in composes this morning (an ostree that failed to download > things and a server dvd compose that failed to download a package). > > looking at the time this happened, the apache on

Re: FBR: Need to do an emergency reboot of virthost15

2017-06-12 Thread Patrick Uiterwijk
On Mon, Jun 12, 2017 at 5:45 PM, Stephen John Smoogen wrote: > System has lost a drive and has 2 drives in potential fail. Needs a > reboot to see replacement drive. > > Outage will effect the following systems: > > badges-web02.phx2.fedoraproject.org >

Re: FBR: Down Apache static caching from 5 days to 30 minutes

2017-06-09 Thread Patrick Uiterwijk
+1 from me ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org

Re: FBR: Remove piwik from websites

2017-06-08 Thread Patrick Uiterwijk
+1 ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org

Re: FBR: Update Koji hubs to build with encoding patch

2017-06-03 Thread Patrick Uiterwijk
So, turns out we need one more small patch (https://pagure.io/koji/pull-request/449.patch). I have now submitted the koji builds. Can I get +1s for that patch addition? ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To

FBR: Update Koji hubs to build with encoding patch

2017-06-03 Thread Patrick Uiterwijk
Hi all, Can I get +1s to update Koji on the hubs to 1.12.0-4, as built on https://koji.fedoraproject.org/koji/buildinfo?buildID=900865? The added patch is the patch from https://pagure.io/koji/pull-request/403, which is needed to make pushes work again, since some pushes started hitting the

Retroactive FBR: Fix mailman3 "template" scheme

2017-05-31 Thread Patrick Uiterwijk
Hi, While I was debugging settings not saving for Mailman, I found out that this was caused by the schema of the "template" table being incorrect. It had the following gem: password | timestamp without time zone I've just ran the following query to make it be identical to what's in the code:

FBR: Apply patch to FMN to resume

2017-05-31 Thread Patrick Uiterwijk
Hi all, Can I get +1s to apply the patch for https://patch-diff.githubusercontent.com/raw/fedora-infra/fedmsg_meta_fedora_infrastructure/pull/430.patch on prod, so that FMN can continue running? Thanks, Patrick ___ infrastructure mailing list --

Re: FBR: up timeouts on kojipkgs varnish

2017-05-31 Thread Patrick Uiterwijk
+1 ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-le...@lists.fedoraproject.org

  1   2   3   4   5   >