[CentOS-announce] lists.centos.org scheduled migration
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, We'd just like to inform you that the current machine hosting all the CentOS mailing lists (on http://lists.centos.org) needs to be replaced and so the mailman service needs to be moved/migrated to a new host. Migration is scheduled for Monday September 1st, 7:30 AM, UTC time. You can convert to local time with $(date -d '2014-09-01 07:30 UTC') Expected downtime is ~1 hour but we hope to be able to restart the service earlier. If you have questions, comments or feedback, please join the #centos-devel channel on irc.freenode.net. Kind Regards, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlQAdCwACgkQnVkHo1a+xU5LnACeL2+2OX1o7qqK6zwDq6zPPQSA 2QsAnAuylNkFbqAccwBslS3Y11Cd0ohP =TinJ -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra - CentOS Wiki instance migration
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We have to do some hardware/software maintenance on the machine actually hosting the Wiki service (http://wiki.centos.org). Instead of just taking the wiki instance down during that maintenance, we've decided to relocate it to a temporary host, proceed to maintenance, and then migrate it back to the previous node. Migration is scheduled for Friday October 10th, 11:00 am UTC time. You can convert to local time with $(date -d '2014-10-10 11:00 UTC') Migration will happen in several steps: 1 - we freeze the wiki on the actual node, transfer data, update the A record, restore the service on the temporary node (disruption ~ 30min) 2 - we proceed to the needed maintenance on first node (no disruption in service, but no estimated time) 3 - depending on time needed for step [2], and assuming we have no hardware issue, we proceed like step [1], but in reverse (so disruption ~30 minutes again) Thanks for your comprehending and patience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlQ2g0kACgkQnVkHo1a+xU4flACfc1IjPeHelBntwt4eNTd6SBvM wXAAnAqtOg4Ko4nqd0QVUfX7ZcQevD5K =v15z -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Koji/CBS infra and sslv3/Poodle important notification
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, As most of you already know, there is an important SSLv3 vulnerability (CVE-2014-3566 - see https://access.redhat.com/articles/1232123) , known as Poodle. While it's easy to disable SSLv3 in the allowed Protocols at the server level (for example SSLProtocol All -SSLv2 -SSLv3 for apache), some clients are still defaulting to SSLv3, and Koji does that. We currently have disabled SSLv3 on our cbs.centos.org koji instance, so if you're a cbs/koji user, please adapt your local koji package (local fix !) At the moment, there is no available upstream package, but the following patch has been tested by Fedora people too (and credits go to https://lists.fedoraproject.org/pipermail/infrastructure/2014-October/014976.html) = - --- SSLCommon.py.orig 2014-10-15 11:42:54.747082029 +0200 +++ SSLCommon.py2014-10-15 11:44:08.215257590 +0200 @@ -37,7 +37,8 @@ if f and not os.access(f, os.R_OK): raise StandardError, %s does not exist or is not readable % f - -ctx = SSL.Context(SSL.SSLv3_METHOD) # SSLv3 only +#ctx = SSL.Context(SSL.SSLv3_METHOD) # SSLv3 only +ctx = SSL.Context(SSL.TLSv1_METHOD) # TLSv1 only ctx.use_certificate_file(key_and_cert) ctx.use_privatekey_file(key_and_cert) ctx.load_client_ca(ca_cert) @@ -45,7 +46,8 @@ verify = SSL.VERIFY_PEER | SSL.VERIFY_FAIL_IF_NO_PEER_CERT ctx.set_verify(verify, our_verify) ctx.set_verify_depth(10) - -ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1) +#ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1) +ctx.set_options(SSL.OP_NO_SSLv2 | SSL.OP_NO_TLSv1 | SSL.OP_NO_SSLv3) return ctx = We'll keep you informed about possible upstream koji packages that would default to at least TLSv1 If you encounter a problem, feel free to drop into #centos-devel channel on irc.freenode.net and have a chat with us on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlQ+TUUACgkQnVkHo1a+xU4JyQCfefp2h7yRdmljBqRc+M76jPTf z7wAn3dOkaNPNfEnV0pxWDFX7BDDqKuY =lxsg -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra - CentOS Bug tracker migration
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to a hardware replacement, we'll have to move the existing CentOS Bug tracker solution (aka https://bugs.centos.org) to a new node. Migration is scheduled for Friday November 7th, 1:00 pm UTC time. You can convert to local time with $(date -d '2014-11-7 13:00 UTC') The expected downtime is estimated to ~30 minutes , time needed to update/propagate updated dns A record + last mysql dump/restore on the new node. Thanks for your comprehending and patience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlRaN6oACgkQnVkHo1a+xU5t2wCfaEsAFNKx88yh6HMk1D2SLue7 YTUAnjUi56KESP4GwaGxNNI3k9MyHbvH =2yPP -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra - CentOS {www,seven}.centos.org downtime
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to a hardware maintenance (moving some gluster volumes to Infiniband, so adding/configuring the IB HBAs), we'll have to shutdown some nodes in the CentOS Infra. Migration is scheduled for Friday November 19th, 9:30 am UTC time. You can convert to local time with $(date -d '2014-11-19 09:30 UTC') The expected downtime is estimated to ~180 minutes (multiple things happening at the same time), but we hope to be able to restart the whole stack sooner. Impacted services : - - IPv6 traffic to www.centos.org (the server will remain online and accessible through IPv4, only the IPv6-to-v4 reverse proxy we use the moment will be offline, so record will even be removed during that maintenance) - - http://seven.centos.org Thanks for your comprehending and patience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlRsuRoACgkQnVkHo1a+xU47fwCgiKfV3kUtoKefqgpSEhK64CBp 09MAn0Qi3+N6qegcwRkjgghuEnYXijIC =5f3A -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
Re: [CentOS-announce] Infra - CentOS {www, seven}.centos.org downtime
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 19/11/14 16:36, Fabian Arrotin wrote: Due to a hardware maintenance (moving some gluster volumes to Infiniband, so adding/configuring the IB HBAs), we'll have to shutdown some nodes in the CentOS Infra. Migration is scheduled for Friday November 19th, 9:30 am UTC time. You can convert to local time with $(date -d '2014-11-19 09:30 UTC') The correct date is Thursday November 20th , 9:30 am UTC time. You can convert to local time with $(date -d '2014-11-20 09:30 UTC') Sorry for the error - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlRsun4ACgkQnVkHo1a+xU6B5wCaAxTeBn2RmibASkPhWxz9ckK8 qlQAnR1ImNkGeOwAKIArQhHR1e98/8kM =v4VK -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra - CentOS wiki migration
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to a hardware replacement, we'll have to move the existing CentOS wiki (aka http://wiki.centos.org) to a new node. Migration is scheduled for Thursday November 27th, 12:00 pm UTC time. You can convert to local time with $(date -d '2014-11-27 12:00 UTC') The expected downtime is estimated to ~15 minutes , time needed to update/propagate updated dns A record + data synchronisation on the new node. Thanks for your comprehending and patience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlR0hNcACgkQnVkHo1a+xU4gyQCcDgTwy6ZL33UM5wNUXKFCUy7V eU4Aniy4SF0ctJE0qX22UFN14vG/bMCB =/4d/ -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra - CentOS hardware move [cbs]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to a hardware move (machines needing to be powered off, moved in another rack) , some CentOS.org services will be unreachable for a short period of time. Impacted services : * cbs/Community Build System (aka http://cbs.centos.org) Koji web/hub and builders will be down Migration is scheduled for Thursday January 8th, 3:00 pm UTC time. You can convert to local time with $(date -d '2015-01-08 15:00 UTC') The expected downtime is estimated to ~30 minutes , time needed to power down, move machines in the rack, power back on Thanks for your comprehending and patience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlSrlVwACgkQnVkHo1a+xU6TagCfQkl3slznEBdQ8T8VYKEcY4AM SDYAnRC0zm+NmlsSVcHoc5b4nHZSN59P =DR4a -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra outage : bugs.centos.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Due to a network routing issue happening outside of our infra, we have decided to migrate the CentOS bug tracker system (aka bugs.centos.org) to a new node today. Yesterday, around 2PM UTC, the company hosting the bugs.centos.org suffered from network connectivity loss (whole subnet not being routed/announced on bgp, etc ..). We've exchanged several phone calls to have an ETA, but it seems it was impossible to get any estimate. So, we decided to move the service to another node. (and service is now active). We had to restore the last good backup from that node, before machine was unreachable, so that means that we've lost some bug reports, and/or modified status/comments in the bug tracker. We're sorry for the inconvenience. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlUftn8ACgkQnVkHo1a+xU5K9QCfd+7l8ZE3e5+0SkJRlcxOeIe4 qtUAn1KY0zRuXfQzyWBvMbnV4CAspwwc =ySbp -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra : TLS redirection for centos.org websites.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
The CentOS Project infra team has decided to implement TLS wherever we
can, so we decided to force a redirection of plain http traffic to
https version for the next websites :
- - https://{www}.centos.org (main website)
- - https://www.centos.org/forums (main forums)
- - https://fr.centos.org (French forums)
- - https://bugs.centos.org (CentOS Bugs tracker)
- - https://wiki.centos.org
Should you encounter an issue, feel free to either report it on
https://bugs.centos.org, or in #centos-devel on irc.freenode.net.
on behalf of the Infra team,
- --
Fabian Arrotin
The CentOS Project | http://www.centos.org
gpg key: 56BEC54E | twitter: @arrfab
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.22 (GNU/Linux)
iEYEARECAAYFAlXUdcgACgkQnVkHo1a+xU6hqgCePuVdwnQPWUz0ppS5rBUQUB8c
kNkAoIj2VIojQx1SWEf+bh1wSh69QKLz
=3Hof
-END PGP SIGNATURE-
___
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Release for CentOS-6.7 LiveCD and LiveDVD for i386 and x86_64
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We are pleased to announce the immediate availability of CentOS-6.7 LiveCD and LiveDVD for the i386 and x86_64 architectures. Detailed Release Notes are available at http://wiki.centos.org/Manuals/ReleaseNotes/CentOSLiveDVD6.7 http://wiki.centos.org/Manuals/ReleaseNotes/CentOSLiveCD6.7 +++ Overview The CentOS-6.7 LiveDVD and LiveCD are meant to be a Linux environment suited to be run directly from either Optical media or USB storage devices. It does not need any persistent storage on a machine, which also makes it a suitable recovery environment. The Live media are setup to run as full desktop environments and include most of the applications used in this role. +++ Download SHA256SUMs : b13e03dc9768178d749855eb5d9a6684d669b945f74a1fecb0a61fa248f2 CentOS-6.7-i386-LiveCD.iso ff73d6cd00f56ba08a607aab707e5000be5cdc67b5c65a7283c37c24f1b88198 CentOS-6.7-i386-LiveDVD.iso bc8e102f93982b311b1cfd61218113aa08a3b251bf7b4c4468cdbeb5e80dff0a CentOS-6.7-x86_64-LiveCD.iso 2f320093024cf586ad256d8ae41bef1fe2c03b79f3854d3e4500d9e76e052c09 CentOS-6.7-x86_64-LiveDVD.iso The CentOS-6.7 Live media images are released to all external mirrors and available for download now. List of mirrors is available at these urls : http://isoredirect.centos.org/centos/6/isos/i386/ http://isoredirect.centos.org/centos/6/isos/x86_64/ Due to the size of these DVDs, torrents have also been released and are being seeded at this time. The torrents are available at: http://mirror.centos.org/centos/6/isos/x86_64/CentOS-6.7-x86_64-LiveDVD.torrent http://mirror.centos.org/centos/6/isos/x86_64/CentOS-6.7-x86_64-LiveCD.torrent http://mirror.centos.org/centos/6/isos/i386/CentOS-6.7-i386-LiveDVD.torrent http://mirror.centos.org/centos/6/isos/i386/CentOS-6.7-i386-LiveCD.torrent Once you download the images, its important to verify contents using the sha256sum utility, against the published sums here. +++ Notes You can now install the Live environment to your hard disk. Please note that you need more that 512Mb of ram to be able to use that 'iinstall to hard drive' feature (If you have less than 512Mb of ram, you can install to disk but in text-mode, meaning that instead of clicking on the desktop icon, you have to launch a gnome-terminal and launch the 'liveinst' command from within the terminal) There is no upstream Live media product. The Live media produced within the CentOS Project is based on and around the livemedia tools from the Fedora Project. These LiveCD and LiveDVD only contains content found within the primary CentOS-6 distribution. No package from outside the distribution was included and no package has been changed from whats included in the base distribution. We appreciate all forms of feedback about these LiveDVD, including specific application inclusion requests or feature changes in future releases. The best place to provide this feedback is via the centos-devel mailing list ( http://lists.centos.org/ ) and feature requests via the issue tracker ( http://bugs.centos.org/ ). - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlXJ8CIACgkQnVkHo1a+xU4mUQCdE/jMS/7Le8yen/8RZ3vRYb6i +R4An3LbmVQQ9ZIZWSIp41HjYe8wyjRX =gDx4 -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra : TLS redirection for lists.centos.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 As we announced it already (see https://lists.centos.org/pipermail/centos-announce/2015-August/021341.html) , the CentOS Project infra tream decided to implement/enforce TLS on a maximum of websites/web services. We have so implemented it for the mailman website : https://lists.centos.org Should you encounter an issue, feel free to either report it on https://bugs.centos.org, or in #centos-devel on irc.freenode.net. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlXgJF4ACgkQnVkHo1a+xU7mMQCgjbMs2oNQ9WZaKjf4qkbLJ2xD TVgAn3eTiW8VOyyUHWbLOqVFEpmQo3rS =B5lj -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra: (START)TLS support for centos.org MX nodes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 As already announced in the last weeks, we started investigating the centos infra services/nodes on which we could add TLS support (if not already supporting it). After the work done at the http/https level, we decided to add TLS support for the mail servers within the CentOS.org infrastructure. We've so implemented today the STARTTLS feature on our MX nodes, both for incoming and outgoing mails. Please note that we've configured Postfix for "Opportunistic TLS", meaning that it should be transparent for you : * If your SMTP server is also configured for TLS support, traffic between your SMTP server (or the one from your ISP, that you're using as SMTP relay) and our servers will be encrypted. * If not, it will still be sent in clear, as before More information about "Opportunistic TLS" support for Postfix here : http://www.postfix.org/TLS_README.html#client_tls_may Should you encounter an issue, feel free to either report it on https://bugs.centos.org, or in #centos-devel on irc.freenode.net. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlXm9MYACgkQnVkHo1a+xU7GWwCfcoH3IymvwsC3v03H6Pdcvhev 9xIAn3vLgHzgCk6rq5r7sG9ifNR0wVDc =NHp8 -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] dev.centos.org redirection
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The CentOS Infra team would like you to know that the old node hosting the dev.centos.org vhost has been replaced. As all actual testing artifacts (RPM packages, iso images, cloud images, arm images, etc) are now pushed to buildlogs.centos.org, we've decided to just redirect dev.centos.org to buildlogs nodes. Should you encounter an issue, feel free to either report it on https://bugs.centos.org, or in #centos-devel on irc.freenode.net. on behalf of the Infra team, - -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlYLuRgACgkQnVkHo1a+xU7k7gCfd1A52o+VSUK4pwJUaAEtsnyN tA0AoJVybXm5SAT+hpbnMaqbpA6Ub0xm =aJai -END PGP SIGNATURE- ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Infra - CentOS forums migration
Just to inform you that we'll move some services to a new node, and so there will be a small impact for the following services : - https://www.centos.org (no real downtime, as it will just be redirected automatically) - https://www.centos.org/forums (see below) During that migration we'll also consolidate IPv6 and IPv4 connectivity and also we'll be able to implement higher protocol than TLS 1.0 (because we are/were still using a CentOS 5 based node in the previous setup) Migration is scheduled for """"Wednesday April 6th, 7:00 am UTC time"""". You can convert to local time with $(date -d '2016-04-06 7:00 UTC') The expected "downtime" is estimated to ~30 minutes , time needed to update/propagate updated dns A/ record[s] + last mysql dump/restore on the new node. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] : DevCloud maintenance window notification
Due to recent changes in the racks hosting the DevCloud nodes (https://wiki.centos.org/DevCloud), we'll have to reorganize the physical placement of those nodes. That means that we'll have to shut down/power off the whole DevCloud infra, migrate the nodes in another rack, and slowly restart all the services running on those nodes. Important notice : if you are a CentOS contributor/developer having some Virtual Machines in DevCloud, ensure that everything is correctly setup on your side, as we'll only (from an hypervisor PoV) issue acpi shutdown to the VMs Other impacted services: - http://planet.centos.org - http://seven.centos.org - http://armv7.dev.centos.org (plague-server, so no armhfp build during that maintenance window) Migration is scheduled for """"Tuesday April 26th, 2:30 pm UTC time"""". You can convert to local time with $(date -d '2016-04-26 14:30 UTC') We'll slowly restart services when possible and we expect everything to be back online before 8:00 pm UTC. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - Major outage for several services (please read)
As pre-announced earlier this year (https://lists.centos.org/pipermail/centos-devel/2016-May/014792.html) we'll have to move a part of our existing hardware to a new DC. That means that the following public services will be powered off and unreachable : - https://cbs.centos.org (Koji build farm front end and also builders/storage nodes behind) - https://accounts.centos.org (auth backend) - https://ci.centos.org (jenkins-driven CI environment and all nodes in that dedicated/isolated environment) What does that mean ? - Nobody from the SIGs (https://wiki.centos.org/SpecialInterestGroup) will be able to submit build jobs/tasks (so no update at all during that migration) - No CI job will be able to track CBS nor external repositories (and so that means also that http://artifacts.ci.centos.org will be unreachable) - Not possible for existing users to update their details on accounts.centos.org, and not possible to create new accounts either We're working on a plan to minimize the downtime/reconfiguration part, but at first sight, due to the hardware move of the racks/cabling parts/etc, the announced downtime will be probably ~48h. Migration is scheduled for """"Monday October 10th, 1:00 pm UTC time"""". You can convert to local time with $(date -d '2016-10-10 13:00 UTC') We'll start to restore services as soon as possible, while working in coordination with the DC people closely (and after validation about network ports, connection) During this period you can come talk to us in #centos-devel and we will be posting updates there. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - CentOS Bug tracker migration / maintenance window
We have to upgrade our current MantisBT instance for the CentOS bug tracker service (aka https://bugs.centos.org) Migration is scheduled for """"Friday october 7th, 12:15 pm UTC time"""". You can convert to local time with $(date -d '2016-10-7 12:15 UTC'') The expected "downtime" is estimated to ~15 minutes , time needed to update MantisBT code, run the mysql schema update, and then put the node back in production mode. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - {mail, lists}.centos.org scheduled migration
We'd just like to inform you that the current machine hosting all the CentOS mailing lists (on http://lists.centos.org) needs to be replaced and so the mailman service needs to be moved/migrated to a new host. Migration is scheduled for """"Monday November 21th, 8:00 am UTC time"""". You can convert to local time with $(date -d '2016-11-21 8:00 UTC') Expected downtime is ~1 hour (time for backup/archives to be restored, and DNS records propagation) but we hope to be able to restart the service earlier. The new mail host will be CentOS 7 based, so mailman will jump from version 2.1.12 to 2.1.15, and we'll have proper IPv6 connectivity, meaning records for mail.centos.org and lists.centos.org. If you have questions, comments or feedback, please join the #centos-devel channel on irc.freenode.net. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Release for CentOS userland 7(1611) on armhfp
I am pleased to announce the general availability of CentOS Linux 7 (1611) for armhfp compatible machines. This is the current release for CentOS Linux 7 and is tagged as 1611, derived from Red Hat Enterprise Linux 7.3 == Download You can download new images for armhfp boards on http://mirror.centos.org/altarch/7/isos/armhfp/ Images and sha256sums : 067b147ebdbaf7df04e8338e51de72dea87343992f1c29a03950ecf65a598869 CentOS-Userland-7-armv7hl-Minimal-1611-BananaPi.img.xz 81472c2b8497081b18d53a5cc07815df015eb9efd4303c228713c7b497ed637b CentOS-Userland-7-armv7hl-Minimal-1611-Cubieboard.img.xz 2ff7fad419a629f96fd9400e0cbaf96632d981de8e7d6f29b4b48999d0c7cfe4 CentOS-Userland-7-armv7hl-Minimal-1611-CubieTruck.img.xz 2237b41107707428c442e40fcea1ee594ab534644df3760d491fdbbfa7535603 CentOS-Userland-7-armv7hl-Minimal-1611-RaspberryPi2.img.xz deb8ec2e74d4cd084a566434652a95bf33c8e4edcb5d4a1e04435a0b6fce9dfb CentOS-Userland-7-armv7hl-Minimal-1611-RaspberryPi3.img.xz == What's new (specific to armhfp) As before, CentOS 7 userland for armhfp is still built from the CentOS 7 distribution, with some modified, added (or removed) packages. Here are some highlights for the 7.3.1611 release : - Kernel (for both rpi2/2 and generic boards) was bumped to 4.4.x (LTS version) to also follow the i386 AltArch kernel. - uboot images were updated to version 2016.09 - rootfs-resize (unmaintained) had issue when resizing FS bigger than 32Gb, and has been replaced by cloud-utils-growpart - default image[s] for rpi2/rpi3 now also support selinux directly More informations/details on the dedicated wiki page : https://wiki.centos.org/SpecialInterestGroup/AltArch/Arm32 == Getting help If you are searching for help, or would like to help the CentOS altarch/armhfp ecosystem, feel free to subscribe to the CentOS arm-dev list (https://lists.centos.org/mailman/listinfo/arm-dev) or chat with us in #centos-arm on irc.freenode.net -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - planned outage : CentOS forums
Due to a rack move in the DC where some CentOS services are hosted, some services will be unreachable. Affected services : - https://www.centos.org/forums (CentOS forums) When: Migration is scheduled for """"Tuesday August 1st, 7:00 am UTC time"""". You can convert to local time with $(date -d '2017-08-1 7:00 UTC') The expected "downtime" is estimated to ~60 minutes. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Release for CentOS Linux 7 (1708) on armhfp
I am pleased to announce the general availability of CentOS Linux 7 (1708) for armhfp compatible machines. This is the current release for CentOS Linux 7 and is tagged as 1708, derived from Red Hat Enterprise Linux 7.4 == Download You can download new images for armhfp boards on http://mirror.centos.org/altarch/7/isos/armhfp/ Images and sha256sums : CentOS-Userland-7-armv7hl-Minimal-1708-BananaPi.img.xz a4b7c1710b2c6c52d7f4d65ed67ed554f7c22832ea1929c72b21aa3b3e5a0fe5 CentOS-Userland-7-armv7hl-Minimal-1708-CubieTruck.img.xz d7fb3d385e303887cbe407520b552402ac81fcdfa53e3761a9865240e8b6ecf1 CentOS-Userland-7-armv7hl-Minimal-1708-RaspberryPi2.img.xz eed1863c6acd2df2860c3df4cb04281f87c105f2f818c358e7199c42130f5a58 CentOS-Userland-7-armv7hl-Minimal-1708-RaspberryPi3.img.xz 00ae483c505db0492994ca7055712635ad8e08fb7392e6b4b192bf3c8f201b2b More informations/details on the dedicated wiki page : https://wiki.centos.org/SpecialInterestGroup/AltArch/Arm32 == Getting help If you are searching for help, or would like to help the CentOS altarch/armhfp ecosystem, feel free to subscribe to the CentOS arm-dev list (https://lists.centos.org/mailman/listinfo/arm-dev) or chat with us in #centos-arm on irc.freenode.net -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] Release for CentOS Linux 7 (1804) on armhfp
I am pleased to announce the general availability of CentOS Linux 7 (1804) for armhfp compatible machines. This is the current release for CentOS Linux 7 and is tagged as 1804, derived from Red Hat Enterprise Linux 7.5 == Download You can download new images for armhfp boards on http://mirror.centos.org/altarch/7/isos/armhfp/ Images and sha256sums : CentOS-Userland-7-armv7hl-generic-GNOME-1804-sda.raw.xz 16ff588e04fae393671da6cc1336088201f5c633d66e519345eaf4b60e2818c3 CentOS-Userland-7-armv7hl-generic-KDE-1804-sda.raw.xz 950340fd8aec24651788897382f76d360c19a7f83c08dc9390637880413690f7 CentOS-Userland-7-armv7hl-generic-Minimal-1804-sda.raw.xz 1a9823b3148285a8aa8f07f49c23b4e6299aaa1f225d15334501687fb9c44398 CentOS-Userland-7-armv7hl-RaspberryPI-GNOME-1804-sda.raw.xz 23c3ec15d72e7b1934fa63ae1a7c8f4071f952c2d2c07da39c625e2559b86ccf CentOS-Userland-7-armv7hl-RaspberryPI-KDE-1804-sda.raw.xz f9ed70539ad4579a7ae7bbad777e4a2614ad9df13bfb577ac2de0c72dee9e7c1 CentOS-Userland-7-armv7hl-RaspberryPI-Minimal-1804-sda.raw.x 962264b4387a10cfd058b12b7ed1490fd3f65c9276c10a37c6746ffaabcc83f2 == What's new (specific to armhfp) As before, CentOS 7 userland for armhfp is still built from the CentOS 7 distribution, with some modified, added (or removed) packages. Here are some highlights for the 7.5.1804 release : - Kernel (for both rpi2/3 and generic boards) was bumped to 4.14.x (LTS version) to also follow the i386 AltArch kernel. - uboot images were updated to version 2018.03 to support more boards - we have now variants other than "minimal" (so GNOME and KDE) - selinux is working in enforcing mode and not in permissive mode by default so there is no need anymore to relabel filesystem and reboot) We have also changed the way we built the armhfp images, so please consider reading the dedicated wiki page to understand which steps are now mandatory to ensure that your armhfp will boot correctly (basically setting up uboot) More informations/details on the dedicated wiki page : https://wiki.centos.org/SpecialInterestGroup/AltArch/armhfp == Getting help If you are searching for help, or would like to help the CentOS altarch/armhfp ecosystem, feel free to subscribe to the CentOS arm-dev list (https://lists.centos.org/mailman/listinfo/arm-dev) or chat with us in #centos-arm on irc.freenode.net == Special thank you message I'd like to say thank you to Pablo Greco, who helped a lot for this release, with all the hard work he did during the CentOS 7.4.1708 days to catch up with all the packages that weren't able to build, work that permits now to have a armhfp release set as close as possible with the upstream x86_64 one. Kudos ! -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - planned outage : {bugs, fr, status}.centos.org
Due to a hardware replacement, we'll have to power down the hypervisor hosting several VMs, including the ones used for the following impacted services : * https://bugs.centops.org * https://status.centos.org * https://fr.centos.org Hardware maintenance is scheduled for """"Thursay May 24th, 12:00 pm UTC time"""". You can convert to local time with $(date -d '2018-05-24 12:00 UTC') Root cause : a HDD in the array used to host the VMs failed, and there is no hot-swap capabilities, so full "power off" is required to replace the failed HDD and then start the rebuild operation. That means that those services (already impacted) will be slower during the rebuild operation, but at least reachable Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - planned outage : bugs.centos.org (Bug Tracker)
This notification to let you know that we'll migrate our https://bugs.centos.org bug tracker service to a different node, and also updated to a new version of MantisBT (version 2.x) This migration will give us more possibilities, including soon trying to get SSO working even on our bug tracker (that part still need to be done though) Migration is scheduled for """"Tuesday February 20th, 8:00 am UTC time"""". You can convert to local time with $(date -d '2018-2-20 8:00 UTC') The expected "downtime" is estimated to ~10 minutes , time needed to update/propagate updated dns A/ records + last mysql dump/restore on the new node. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - planned outage : All services
Due to important security updates that we need to apply within the whole CentOS infra, please be aware that some nodes/services will be unresponsive during that maintenance window. As it targets both CentOS 6 and CentOS 7, we'll probably apply those updates ASAP but we'll not notify for each impacted service, so this announce will cover all impacted services during the next hours/days. Thanks for your comprehending and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] CentOS 8.0.1905 build status
Hi, As everybody is probably aware now, RHEL 8.0 was released earlier this week . Instead of publishing multiple blog posts here and then point to updated content, we decided this time to have a dedicated wiki page that can be used to track our current status : https://wiki.centos.org/About/Building_8 So now you can look at that page while we're busy on those tasks, and refresh from time to time. Let's spread the news about the wiki page and point people (on mailing-lists, irc, forums, etc) to that page to get all latest news about CentOS 8.0.1905 build status ! Cheers ! -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 56BEC54E | twitter: @arrfab signature.asc Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] ConfigManagement SIG : removal of old/unmaintained ansible versions
Notification: So far, the ConfigManagement SIG rebuilt and shipped some Ansible versions through different repos (per "branch") over the last months/years , so we currently still have on mirror.centos.org (and so external mirrors) the following repositories : For CentOS 7: - ansible 2.6 - ansible 2.7 - ansible 2.8 - ansible 2.9 For CentOS 8 (also working on 8-stream) : - ansible 2.9 Per Ansible EOL policy (see https://docs.ansible.com/ansible/devel/reference_appendices/release_and_maintenance.html) we'll continue to maintain 2.8 (security fixes if they appear) and 2.9 but we'll remove previous versions/repositories. Worth knowing that they'd still be available through vault.centos.org though, but not available directly through a centos-release-ansible*.rpm (configuring yum/dnf repositories on systems) So far I never had a chance/time to look at ansible 2.10, as there is a split between ansible-base and ansible-core and then collections. My goal would be to discuss with EPEL/Fedora maintainer (Kevin Fenzi) about the best way to have it working and then we can start (re)building through configmanagement tags on https://cbs.centos.org Kind Regards, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] : Planned outage : git.centos.org
Due to a scheduled pagure upgrade, we'll have to move the existing Pagure instance (aka https://git.centos.org) to a new node. Migration is scheduled for """"Monday June 13rd, 7:00 am UTC time"""". You can convert to local time with $(date -d '2022-06-13 07:00 UTC') The expected "downtime" is estimated to ~60 minutes , time needed to : - backup/restore last DB dump - import and convert DB schema for newer pagure version - last data (sources in lookaside cache and git repositories) sync - verify service and switch public IP to new host. Important note wrt that migration is that we're moving from pagure 5.8 running on CentOS 7 to pagure 5.13 on RHEL 8. It means it's a new host and so sshd host keys will change (we didn't want to import older host keys to comply with newer algo) The new fingerprint will be displayed at usual place (https://git.centos.org/ssh_info) but it only matters for SIGs users pushing to specific projects/branches over ssh. For people pulling through https, nothing changes. Here are in advance the new fingerprints : rsa=3072 SHA256:qeSehpwh3X7HI0D/jF7N4qZcergdr9tUCdaZ2EIdiLc (RSA) rsa_md5=3072 MD5:a9:a1:ba:83:96:71:28:ca:86:19:c0:5d:4f:48:9f:63 (RSA) ecdsa=256 SHA256:vIRsg5g/t/7ucYP4NKTkcPJdE7CWbFQVInscthHKihU (ECDSA) ecdsa_md5=256 MD5:8f:40:35:4f:b9:43:60:d9:09:c0:5f:80:52:69:c8:8d (ECDSA) Also worth knowing that we also present a signed cert for sshd host keys, so if you already trust our CA (https://github.com/CentOS/ansible-role-sshd/blob/master/defaults/main.yml#L33) in your ~/.ssh/known_hosts file, you'll not even have to accept new key Thanks for your understanding and patience. on behalf of the Infra team, -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab OpenPGP_0xA25DBAFB17F3B7A1.asc Description: OpenPGP public key OpenPGP_signature Description: OpenPGP digital signature ___ CentOS-announce mailing list CentOS-announce@centos.org https://lists.centos.org/mailman/listinfo/centos-announce
[CentOS-announce] [Infra] - Planned outage : lists.centos.org (migration to mailman3) : please read
Due to a needed upgrade , we'll have to move the existing CentOS
mailman instance (aka https://lists.centos.org) to a new server/host.
Migration is scheduled for """"Tuesday April 8th, 7:00 am UTC time"""".
You can convert to local time with $(date -d '2024-04-08 07:00 UTC')
The expected "downtime" is estimated to ~60 minutes , time needed to :
- take last mailman2 backup
- reimport / convert mailman2 archives to mailman3 DB
- DNS propagation for A//MX records
Here are also some important information about the mailman2 => mailman3
migration :
# Renamed lists
Worth knowing that, based on open discussion on the centos-devel list
(see whole thread at
https://lists.centos.org/pipermail/centos-devel/2024-March/165576.html),
existing lists will be *renamed* , so while we'll put aliases for
incoming mails, each list member will start receiving list mails from
new list name. So start updating your filters if you filter on email
address instead of "subject:"
Here is the overview of the new lists names :
arm-dev at centos.org => arm-dev at lists.centos.org
centos at centos.org => discuss at lists.centos.org
centos-devel at centos.org => devel at lists.centos.org
centos-announce at centos.org => announce at lists.centos.org
centos-automotive-sig at centos.org => automotive-sig at lists.centos.org
centos-{cz,de,es,fr,nl,pt-br,zh}@centos.org =>
discuss-{cz,de,es,fr,nl,pt-br,zh}@lists.centos.org
ci-users at centos.org => ci-users at lists.centos.org
centos-gsoc: => gsoc at lists.centos.org
centos-mirror at centos.org => mirror at lists.centos.org
centos-mirror-announce at centos.org => mirror-announce at lists.centos.org
centos-newsletter at centos.org => newsletter at lists.centos.org
centos-promo at centos.org => promo at lists.centos.org
centos-virt at centos.org => virt at lists.centos.org
# Authentication
Mailman2 had no real concept of authentication so you could just
subscribe to one or more lists, and have a password associated with your
email address for that/these subscription(s).
Mailman3 itself is split into "core" and "webui" components, so when
we'll import mailman2 lists/config into mailman3, your existing
subscriptions will continue to work *but* not your password.
Mailman3 will be configured to support SSO, and so if you already have a
FAS/ACO account (https://accounts.centos.org) you'll be able to login
directly into new webui and manage your settings/subscriptions *if* your
ACO email address of course matches the one you initially subscribed
with for lists.centos.org.
If that's not the case, either create an ACO/FAS account that will match
and you'll be then able to "link" your mailman3 account with FAS and so
manage your settings/subscriptions.
If you don't want to, there is always the documented process :
https://docs.mailman3.org/en/latest/userguide.html#making-a-mailman-account
Thanks for your understanding and patience.
on behalf of the Infra team,
--
Fabian Arrotin
The CentOS Project | https://www.centos.org
gpg key: 17F3B7A1 | @arrfab[@fosstodon.org]
OpenPGP_signature.asc
Description: OpenPGP digital signature
___
CentOS-announce mailing list
CentOS-announce@centos.org
https://lists.centos.org/mailman/listinfo/centos-announce
