Re: [Fedora-sysadmin-list] Web Security

2008-11-24 Thread Paulo Santos
Hi Damian,

Those look good to me, and you might want to add some extra ones just to
start.

# Log only relevant entries and log it
SecAuditEngine RelevantOnly
SecAuditLog /var/log/httpd/modsec_audit.log

# Filter only Dynamic content (to minimize performance impact) should be
tested to be sure that it does what is expected
SecFilter DynamicOnly



Just my 2 cents :)

Paulo


2008/11/21 Dennis Gilmore [EMAIL PROTECTED]

 forwarding to the correct list

 --  Forwarded Message  --

 Subject: [Fedora-sysadmin-list] Web Security
 Date: Friday 21 November 2008
 From: Damian Myerscough [EMAIL PROTECTED]
 To: Fedora Administration and Infrastructure project fedora-sysadmin-
 [EMAIL PROTECTED]
 Hello All,

 I have managed to get a bit of free time to create some simple rules
 for mod_security
 which would be suitable for the web servers which we are currently
 running. I have wrote
 some generic rules which should be compatible with all the web
 servers. However, we could
 write rules which are much stricter for the web applications that are
 hosted off the web servers.

 Let me know what people think about the rules that I have attached.

 Just a note, the final rule should point to maybe a security notice...
 it would currently just redirect users
 to fedoraproject.org.

 --
 Regards,
 Damian Myerscough

 ---

 ___
 Fedora-infrastructure-list mailing list
 Fedora-infrastructure-list@redhat.com
 https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: [Fedora-sysadmin-list] Web Security

2008-11-24 Thread Damian Myerscough
Hello Paulo,

I will add the extra fields and setup a virtual machine on my local host and use
the Apache bentchmark utility to simulate high levels of traffic.

2008/11/24 Paulo Santos [EMAIL PROTECTED]:
 Hi Damian,

 Those look good to me, and you might want to add some extra ones just to
 start.

 # Log only relevant entries and log it
 SecAuditEngine RelevantOnly
 SecAuditLog /var/log/httpd/modsec_audit.log

 # Filter only Dynamic content (to minimize performance impact) should be
 tested to be sure that it does what is expected
 SecFilter DynamicOnly


 Just my 2 cents :)

 Paulo


 2008/11/21 Dennis Gilmore [EMAIL PROTECTED]

 forwarding to the correct list

 --  Forwarded Message  --

 Subject: [Fedora-sysadmin-list] Web Security
 Date: Friday 21 November 2008
 From: Damian Myerscough [EMAIL PROTECTED]
 To: Fedora Administration and Infrastructure project fedora-sysadmin-
 [EMAIL PROTECTED]
 Hello All,

 I have managed to get a bit of free time to create some simple rules
 for mod_security
 which would be suitable for the web servers which we are currently
 running. I have wrote
 some generic rules which should be compatible with all the web
 servers. However, we could
 write rules which are much stricter for the web applications that are
 hosted off the web servers.

 Let me know what people think about the rules that I have attached.

 Just a note, the final rule should point to maybe a security notice...
 it would currently just redirect users
 to fedoraproject.org.

 --
 Regards,
 Damian Myerscough

 ---

 ___
 Fedora-infrastructure-list mailing list
 Fedora-infrastructure-list@redhat.com
 https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list






-- 
Regards,
Damian Myerscough

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Jon Ciesla

 Hey guys, completely voluntary but I thought I'd ask because I'm curious

 For personal use, how many of you use something like linode or slicehost
 or an individual provider?

Nope.  I run my stuff out of my basement. :)

 If you do use a provider which one is it?


 For me, I do use one and I use slicehost.

   -Mike

 ___
 Fedora-infrastructure-list mailing list
 Fedora-infrastructure-list@redhat.com
 https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list



-- 
in your fear, speak only peace
in your fear, speak only love

-d. bowie

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Self Introduction:Balaji

2008-11-24 Thread Mike McGrath
On Sun, 23 Nov 2008, G wrote:

 Hi

 My name is Balaji and i live in chennai which is a city in India. i am
 a software developer working for a private firm in chennai. I ve been
 contribtuting to fedora as a member of the bug-triage team, Testing
 packages from the bodhi repository, the Docs team(garderning and wiki
 editing) and also as one of the Fedora-Ambassadors for chennai. Though
 i must also admit honestly that the past few months were so hectic
 that i couldn't contribute much for fedora other than servicing the
 DVD requests and acknowledging them. I have again started off my
 contributions to fedora and on the verge of the Fedora 10 release as
 well as the planning for F11 release it would be a good time to enter
 this.  I would like to be part of the infrastructure team by testing
 few stuff like bodhi,koji etc using some virtualization stuff and
 ofcourse starting to solve trivial bugs in those allied tools as it
 would help me to learn python more better though i know little bit of
 python.

 I am really excited to be part of this team and hope i have a good and
 challenging time with you all.


Welcome Balaji!  If you're interested in some of the release stuff also
contact the rel-eng team.  There's a lot of overlap between this team and
that in terms of what we do affects them and what they do affects us.  Any
additional people on both of those teams is good.

-Mike

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: An introduction

2008-11-24 Thread Mike McGrath
On Mon, 24 Nov 2008, Mike McCarthy wrote:

 Hi all,

 My name is Mike and I'm a sysadmin based in the UK.  I work mainly with RHEL, 
 TRU64 and AIX systems professionally but
 have a few Fedora boxes at home that I experiment with generally to save me 
 trashing any of the corporate systems :) . 
 I moved into administration about 5 years ago from a development background 
 and so feel quite comfortable playing around
 with code and generally scripting too.  I started as a C developer and worked 
 with a few flavours of assembly but these
 days mostly lurk around Perl.  I understand that Python plays a big part in 
 the Fedora project and so would really like
 to learn a bit more about it.  If there is any way I can help and hopefully 
 at the same time pick up a few new skills
 that would be excellent but at the end of the day I'd really just like the 
 chance to contribute something of value to
 the project wherever I can. 


If you're looking to do more development there's a bunch of open bugs just
asking for patches on https://fedorahosted.org/  specifically in our
package database, bodhi and the accounts system.

-Mike___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


An introduction

2008-11-24 Thread Mike McCarthy
Hi all,

My name is Mike and I'm a sysadmin based in the UK.  I work mainly with
RHEL, TRU64 and AIX systems professionally but have a few Fedora boxes at
home that I experiment with generally to save me trashing any of the
corporate systems :) .  I moved into administration about 5 years ago from a
development background and so feel quite comfortable playing around with
code and generally scripting too.  I started as a C developer and worked
with a few flavours of assembly but these days mostly lurk around Perl.  I
understand that Python plays a big part in the Fedora project and so would
really like to learn a bit more about it.  If there is any way I can help
and hopefully at the same time pick up a few new skills that would be
excellent but at the end of the day I'd really just like the chance to
contribute something of value to the project wherever I can.

Hopefully speak to you all soon

Mike
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Mike McGrath
On Mon, 24 Nov 2008, Stephen John Smoogen wrote:

 On Sat, Nov 22, 2008 at 11:36 AM, Mike McGrath [EMAIL PROTECTED] wrote:
  Hey guys, completely voluntary but I thought I'd ask because I'm curious
 
  For personal use, how many of you use something like linode or slicehost
  or an individual provider?
 
  If you do use a provider which one is it?
 
 
  For me, I do use one and I use slicehost.

 For those who are out of touch with this whole new Internet thing
 what do you use these sites for?


slicehost provides me a dedicated virtual guest.  Not much ram but I use
it to host my wife's website, zodbot (go zodbot go!) and a screen + irssi
session where all my irc stuff happens.

-Mike

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Stephen John Smoogen
On Sat, Nov 22, 2008 at 11:36 AM, Mike McGrath [EMAIL PROTECTED] wrote:
 Hey guys, completely voluntary but I thought I'd ask because I'm curious

 For personal use, how many of you use something like linode or slicehost
 or an individual provider?

 If you do use a provider which one is it?


 For me, I do use one and I use slicehost.

For those who are out of touch with this whole new Internet thing
what do you use these sites for?


-- 
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. The Merchant of Venice

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Mike McGrath
On Mon, 24 Nov 2008, Stephen John Smoogen wrote:

 On Mon, Nov 24, 2008 at 10:04 AM, Mike McGrath [EMAIL PROTECTED] wrote:
  On Mon, 24 Nov 2008, Stephen John Smoogen wrote:
 
  On Sat, Nov 22, 2008 at 11:36 AM, Mike McGrath [EMAIL PROTECTED] wrote:
   Hey guys, completely voluntary but I thought I'd ask because I'm curious
  
   For personal use, how many of you use something like linode or slicehost
   or an individual provider?
  
   If you do use a provider which one is it?
  
  
   For me, I do use one and I use slicehost.
 
  For those who are out of touch with this whole new Internet thing
  what do you use these sites for?
 
 
  slicehost provides me a dedicated virtual guest.  Not much ram but I use
  it to host my wife's website, zodbot (go zodbot go!) and a screen + irssi
  session where all my irc stuff happens.

 Ahhh. I am so used to doing that from my basement.. kids these days.


Comcast[1] makes this difficult to do where I live now.

-Mike

[1] If you work for comcast, you do not work for a company that stands for
good.

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Stephen John Smoogen
On Mon, Nov 24, 2008 at 10:04 AM, Mike McGrath [EMAIL PROTECTED] wrote:
 On Mon, 24 Nov 2008, Stephen John Smoogen wrote:

 On Sat, Nov 22, 2008 at 11:36 AM, Mike McGrath [EMAIL PROTECTED] wrote:
  Hey guys, completely voluntary but I thought I'd ask because I'm curious
 
  For personal use, how many of you use something like linode or slicehost
  or an individual provider?
 
  If you do use a provider which one is it?
 
 
  For me, I do use one and I use slicehost.

 For those who are out of touch with this whole new Internet thing
 what do you use these sites for?


 slicehost provides me a dedicated virtual guest.  Not much ram but I use
 it to host my wife's website, zodbot (go zodbot go!) and a screen + irssi
 session where all my irc stuff happens.

Ahhh. I am so used to doing that from my basement.. kids these days.

-- 
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. The Merchant of Venice

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Seth Vidal



On Mon, 24 Nov 2008, Stephen John Smoogen wrote:


Ahhh. I am so used to doing that from my basement.. kids these days.



1. a machine in my house would draw a lot more power than the portion of a 
machine I get with slicehost
2. keeping that running all the time so my email works would take a lot 
more effort than I currently put out with the slicehost
3. I have a remote site I'm reasonably confident will be up and 
functional, useful for traceroutes, etc.
4. Offsite backups have saved my ass before, learn them, live them, love 
them :)



-sv

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Seth Vidal



On Mon, 24 Nov 2008, Stephen John Smoogen wrote:


On Sat, Nov 22, 2008 at 11:36 AM, Mike McGrath [EMAIL PROTECTED] wrote:

Hey guys, completely voluntary but I thought I'd ask because I'm curious

For personal use, how many of you use something like linode or slicehost
or an individual provider?

If you do use a provider which one is it?


For me, I do use one and I use slicehost.


For those who are out of touch with this whole new Internet thing
what do you use these sites for?



Personal email server, website, offsite backup for my laptop, irssi so I 
can permanently lurk on irc, etc.


-sv

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Informal survey

2008-11-24 Thread Dennis Gilmore
On Monday 24 November 2008 11:01:38 am Stephen John Smoogen wrote:
 On Sat, Nov 22, 2008 at 11:36 AM, Mike McGrath [EMAIL PROTECTED] wrote:
  Hey guys, completely voluntary but I thought I'd ask because I'm curious
 
  For personal use, how many of you use something like linode or slicehost
  or an individual provider?
 
  If you do use a provider which one is it?
 
 
  For me, I do use one and I use slicehost.

 For those who are out of touch with this whole new Internet thing
 what do you use these sites for?
irc, personal site, email, dns, aurora's wiki and bugzilla, I also have a 
sparc mirror on it, and rent out space to some friends.  and a few other 
things. 

Dennis

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Fixing CSRF exploits in Infrastructure

2008-11-24 Thread Toshio Kuratomi
Greetings all,

I've been researching the CSRF exploit and how it affects our web apps
recently.  The short story is that our code is pretty open to this at
the moment.  I've written up a proposal for fixing this but it will
require a lot of coding so I'd love to have some more eyes on it to make
sure I'm not making any stupid mistakes.

The proposal is here::
  https://fedorahosted.org/fas/wiki/CSRF

The ticket for the overall CSRF fixing is here::
  https://fedorahosted.org/fedora-infrastructure/ticket/992

I consider fixing this to be a fairly high priority so I'll be starting
work on implementing this for a few pkgdb methods very soon.  Assuming
the technique works we'll need to port every method that can change data
in every app to use this.

-Toshio



signature.asc
Description: OpenPGP digital signature
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Fixing CSRF exploits in Infrastructure

2008-11-24 Thread Mike McGrath
On Mon, 24 Nov 2008, Toshio Kuratomi wrote:

 Greetings all,

 I've been researching the CSRF exploit and how it affects our web apps
 recently.  The short story is that our code is pretty open to this at
 the moment.  I've written up a proposal for fixing this but it will
 require a lot of coding so I'd love to have some more eyes on it to make
 sure I'm not making any stupid mistakes.

 The proposal is here::
   https://fedorahosted.org/fas/wiki/CSRF

 The ticket for the overall CSRF fixing is here::
   https://fedorahosted.org/fedora-infrastructure/ticket/992

 I consider fixing this to be a fairly high priority so I'll be starting
 work on implementing this for a few pkgdb methods very soon.  Assuming
 the technique works we'll need to port every method that can change data
 in every app to use this.


This is well reasoned and inciteful.  After F10 ships I've got a couple of
things in the pipe to flush out but after that I'll work with you to get
the major issues fixed as quickly as possible.

-Mike

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Fixing CSRF exploits in Infrastructure

2008-11-24 Thread Mike McGrath
On Mon, 24 Nov 2008, Mike McGrath wrote:

 This is well reasoned and inciteful.  After F10 ships I've got a couple of
 things in the pipe to flush out but after that I'll work with you to get
 the major issues fixed as quickly as possible.


Ugh, inciteful?  really?  You'd think I'd spell check these things by now
:)

-Mike

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Fixing CSRF exploits in Infrastructure

2008-11-24 Thread Mike Putnam
On Mon, Nov 24, 2008 at 03:30:03PM -0600, Mike McGrath wrote:
 On Mon, 24 Nov 2008, Mike McGrath wrote:
 
  This is well reasoned and inciteful.  After F10 ships I've got a couple of
  things in the pipe to flush out but after that I'll work with you to get
  the major issues fixed as quickly as possible.
 
 
 Ugh, inciteful?  really?  You'd think I'd spell check these things by now
 :)
 
   -Mike
 
 ___
 Fedora-infrastructure-list mailing list
 Fedora-infrastructure-list@redhat.com
 https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list



That's a riot!

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Congratulations to Nigel Jones

2008-11-24 Thread Xavier Lamien
On Mon, Nov 24, 2008 at 11:38 PM, Mike McGrath [EMAIL PROTECTED] wrote:
 I'm happy to announce I've just approved Nigel Jones in to the
 sysadmin-main group.  He's the first new member we've had to that group
 since Ricky Zhou was approved in May earlier this year.


Congrats Dude for both your sysadmin-main membership and your new job.
I'm sure you'll keep doing such a great job.

-- 
Xavier.t Lamien
--
http://fedoraproject.org/wiki/XavierLamien
GPG-Key ID: F3903DEB
B

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


proper way to update /var/lib/puppet/application/mirrors/releases.txt

2008-11-24 Thread Jesse Keating
This looks like it is its own git repo, but apparently you need to be in
the sysadmin-web group to edit this.  I'm not in the group, so in order
for me to manage this we either need to add me to the group (yuck, more
groups) or move this to a different ownership set, or something else.

Either way a couple things need to be done to the file.

1) removing F10 Preview and Beta

2) adding F10 itself.

These will need to be done by the release tomorrow.

-- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating


signature.asc
Description: This is a digitally signed message part
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: proper way to update /var/lib/puppet/application/mirrors/releases.txt

2008-11-24 Thread Mike McGrath
On Mon, 24 Nov 2008, Jesse Keating wrote:

 This looks like it is its own git repo, but apparently you need to be in
 the sysadmin-web group to edit this.  I'm not in the group, so in order
 for me to manage this we either need to add me to the group (yuck, more
 groups) or move this to a different ownership set, or something else.

 Either way a couple things need to be done to the file.


Try again.

-Mike

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Congratulations to Nigel Jones

2008-11-24 Thread Paul W. Frields
On Mon, Nov 24, 2008 at 04:38:16PM -0600, Mike McGrath wrote:
 I'm happy to announce I've just approved Nigel Jones in to the
 sysadmin-main group.  He's the first new member we've had to that group
 since Ricky Zhou was approved in May earlier this year.
 
 For those that don't know sysadmin-main is for our core dedicated admins.
 It typically takes many months (sometimes years) of commitment to get in
 to this group.  Nigel is on his way to doing a great job with re-inventing
 our monitoring environment.  He's spent a lot of time on many of our bits
 of infrastructure and regularly puts in many hours a week doing Fedora
 related tasks.  He's a great volunteer and we're happy and lucky to have
 him on.
 
 Nigel is currently based out of Brisbane which makes him the first non-US
 member to be in sysadmin-main.  This is an important change in focus for
 us and greatly helps the stability/coverage of our environment.

Nigel, congrats and thanks again for all your work.  It's been great
seeing all the results you've brought to Fedora already and everyone
looks forward to working with you more in the coming months.

-- 
Paul W. Frieldshttp://paul.frields.org/
  gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233  5906 ACDB C937 BD11 3717
  http://redhat.com/   -  -  -  -   http://pfrields.fedorapeople.org/
  irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug


pgp3Xk7KHD7dV.pgp
Description: PGP signature
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: proper way to update /var/lib/puppet/application/mirrors/releases.txt

2008-11-24 Thread Jesse Keating
On Mon, 2008-11-24 at 18:18 -0600, Mike McGrath wrote:
 Try again.

I cheated and used sudo..

-- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating


signature.asc
Description: This is a digitally signed message part
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Congratulations to Nigel Jones

2008-11-24 Thread Luke Macken
On Mon, Nov 24, 2008 at 04:38:16PM -0600, Mike McGrath wrote:
 I'm happy to announce I've just approved Nigel Jones in to the
 sysadmin-main group.  He's the first new member we've had to that group
 since Ricky Zhou was approved in May earlier this year.
 
 For those that don't know sysadmin-main is for our core dedicated admins.
 It typically takes many months (sometimes years) of commitment to get in
 to this group.  Nigel is on his way to doing a great job with re-inventing
 our monitoring environment.  He's spent a lot of time on many of our bits
 of infrastructure and regularly puts in many hours a week doing Fedora
 related tasks.  He's a great volunteer and we're happy and lucky to have
 him on.
 
 Nigel is currently based out of Brisbane which makes him the first non-US
 member to be in sysadmin-main.  This is an important change in focus for
 us and greatly helps the stability/coverage of our environment.
 
 Thanks Nigel!

Congratulations, G :)

Thank you for all of your hard work and dedication!

luke

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list


Re: Bodhi 10k bug

2008-11-24 Thread Luke Macken
On Sat, Nov 22, 2008 at 06:41:34PM -0500, Luke Macken wrote:
 As some of you may have noticed, the last batch of updates contained 209
 updates with the ID of 'FEDORA-2008-1'.  This is is due to a flaw in the
 way bodhi's PackageUpdate.assign_id() method finds the current update with the
 highest id.  Presently, it does a PackageUpdate.select(...,
 orderBy=PackageUpdate.q.updateid).  Since PackageUpdate.updateid is a unicode
 column, and due to the fact that u'FEDORA-2008-1'  u'FEDORA-2008-',
 this started to fail miserably.
 
 Attached is a patch that has the assign_id method order the query by the
 date_pushed DateTimeCol in order to find the highest updateid.  However, it
 seems that SQLObject completely ignore milliseconds:
 
 if datetime:
 def DateTimeConverter(value, db):
 return '%04d-%02d-%02d %02d:%02d:%02d' % (
 value.year, value.month, value.day,
 value.hour, value.minute,
 value.second)
 
 The problem with this is that we must now take into account multiple updates
 that were pushed at the same second.
 
 The proper way to fix this is at the model level, and probably to use an
 integer for the updateid column.  I'm in the process of finishing up the
 SQLAlchemy port, which will properly solve this problem.  In the mean time,
 this hack will not require any database changes.
 
 This patch also includes a test case for this 10k bug.
 
 [EMAIL PROTECTED] bodhi]$ nosetests
 bodhi/tests/test_model.py:TestPackageUpdate.test_id
 .
 --
  Ran 1 test in 0.084s
 
  OK
 
 Once approved and applied, I will push out a fixed package (to releng2 only),
 fix the existing updates from the last push, and send out an errata containing
 the new update IDs.

Earlier today I pushed out a fixed bodhi-server to releng2, reassigned
209 update ids, and remashed the f10 updates repositories.

I also sent an errata to the fedora-package-announce list, but it has yet
to be moderated, so it is attached as well.

Cheers,

luke
From [EMAIL PROTECTED] Mon Nov 24 15:51:42 2008
Date: Mon, 24 Nov 2008 15:51:42 -0500
From: Luke Macken [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: ERRATA: Incorrect update IDs
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol=application/pgp-signature; boundary=y0ulUmNC+osPPQO6
Content-Disposition: inline
User-Agent: Mutt/1.5.18 (2008-05-17)
Status: RO
Content-Length: 10363
Lines: 242


--y0ulUmNC+osPPQO6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi,

Due to a bug in bodhi[0], the most recent push of updates contained many with
the ID of FEDORA-2008-1.  This bug has since been fixed, and new IDs have
been reassigned to those updates, which are listed below.

Sorry for the inconvenience,

luke

[0]: 
https://www.redhat.com/archives/fedora-infrastructure-list/2008-November/msg00150.html



FEDORA-2008-1 rpcbind-0.1.7-1.fc9
FEDORA-2008-10001 perl-IO-Socket-SSL-1.18-1.fc10
FEDORA-2008-10002 unikurd-web-font-20020502-1.fc10
FEDORA-2008-10003 gyachi-1.1.56-5.fc10
FEDORA-2008-10004 ifstat-1.1-8.fc10
FEDORA-2008-10005 libetpan-0.57-1.fc10
FEDORA-2008-10006 perl-Data-Visitor-0.21-1.fc10
FEDORA-2008-10007 postgresql-8.3.5-1.fc10
FEDORA-2008-10008 scim-chewing-0.3.2-1.fc10
FEDORA-2008-10009 gnome-gmail-notifier-0.9.4-3.fc10
FEDORA-2008-10010 geda-gnetlist-20080929-2.fc10
FEDORA-2008-10011 libpng-1.2.33-1.fc10
FEDORA-2008-10012 codeblocks-8.02-4.fc10
FEDORA-2008-10013 xdvik-22.84.14-4.fc10
FEDORA-2008-10014 darcs-2.1.0-1.fc10
FEDORA-2008-10015 rcssmonitor-13.0.0-2.fc10
FEDORA-2008-10016 bacula-2.4.3-3.fc10
FEDORA-2008-10017 basket-1.0.3.1-2.fc10
FEDORA-2008-10018 libnfnetlink-0.0.39-3.fc10
FEDORA-2008-10019 clipper-2.0-20.fc10
FEDORA-2008-10020 linux-libertine-fonts-4.1.8-1.fc10
FEDORA-2008-10021 pngnq-0.5-5.fc10
FEDORA-2008-10022 rpcbind-0.1.7-1.fc10
FEDORA-2008-10023 VLGothic-fonts-20081029-1.fc10
FEDORA-2008-10024 dvipng-1.11-1.fc10
FEDORA-2008-10025 gyachi-1.1.56-5.fc8
FEDORA-2008-10026 ochusha-0.5.99.67.1-0.4.cvs20081114T2135.fc10
FEDORA-2008-10027 file-browser-applet-0.6.0-1.fc10
FEDORA-2008-10028 em8300-0.17.2-1.fc10
FEDORA-2008-10029 grip-3.2.0-25.fc10
FEDORA-2008-10030 gnome-power-manager-2.24.2-2.fc10
FEDORA-2008-10031 ruby-libvirt-0.1.0-2.fc10
FEDORA-2008-10032 plt-scheme-4.1.2-1.fc10
FEDORA-2008-10033 perl-Crypt-DSA-0.14-7.fc10,perl-Crypt-DH-0.06-9.fc10
FEDORA-2008-10034 system-config-services-0.99.28-1.fc10
FEDORA-2008-10035 bind-9.5.1-0.9.b3.fc10
FEDORA-2008-10036 appliance-tools-003.9-1.fc10
FEDORA-2008-10037 eclipse-cdt-5.0.0-12.fc10
FEDORA-2008-10038 libxml2-2.7.2-2.fc10
FEDORA-2008-10039 perl-MooseX-Types-Path-Class-0.05-3.fc10
FEDORA-2008-10040 olpc-netutils-0.7-2.fc10
FEDORA-2008-10041 global-5.7.3-1.fc9

Re: Informal survey

2008-11-24 Thread Imre Gergely


On 11/22/2008 08:36 PM, Mike McGrath wrote:
 Hey guys, completely voluntary but I thought I'd ask because I'm curious
 
 For personal use, how many of you use something like linode or slicehost
 or an individual provider?
 
 If you do use a provider which one is it?
 
 
 For me, I do use one and I use slicehost.

Used to host mine at home on a desktop, but upload speed was very
limited, luckily I work at an ISP.

I'm running a vnc server on it with a lot of terminals open to other
servers and I'm connecting to it from home, kinda like a jump server
(ssh tunnel + vncserver on localhost ftw). Mail, DNS, couple of
websites, torrent tracker, some cacti.

Sidenote: I'm managing 1-2 dedicated servers at rackspace, and I'm
pretty satisfied with them.

-- 
Imre Gergely
gpg --keyserver subkeys.pgp.net --recv-keys 0x34525305

___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list