Re: Major dns issues
On Monday 14 December 2009 10:16:30 am Seth Vidal wrote: > On Mon, 14 Dec 2009, Toshio Kuratomi wrote: > > On Mon, Dec 14, 2009 at 09:27:18AM -0600, Mike McGrath wrote: > >> So I woke up today and we're still having dns issues on at least one of > >> my hosts. > >> > >> > >> Could everyone that has access please do a dig fedoraproject.org on all > >> their hosts and tell me if any of them cannot resolve? > > > > Working from three US sites I have access to. > > > > -Toshio > > Not working from slicehost's nameservers. > > dig @67.207.128.4 fedoraproject.org > > ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5 <<>> @67.207.128.4 > fedoraproject.org > ; (1 server found) > ;; global options: printcmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 9804 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;fedoraproject.org. IN A > > ;; Query time: 1 msec > ;; SERVER: 67.207.128.4#53(67.207.128.4) > ;; WHEN: Mon Dec 14 11:16:03 2009 > ;; MSG SIZE rcvd: 35 > > -sv FWIW its working from home, my dedicated box and my box in .au two of those I run my own resolvers and not my isps. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Suitability of Python for daemon processes
On Sunday 25 October 2009 06:26:49 pm Jeroen van Meeuwen wrote: > On 10/25/2009 11:51 PM, Mike McGrath wrote: > > With all my babbling I forgot to mention we do already run python daemons > > in Fedora Infrastructure. Func is one, TurboGears (though it's wrapped > > in mod_wsgi) and one that we wrote ourselves[1] is our mirrorlist server. > > It's the backend that powers: > > > > http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-11&arch=i386 > > And koji.fedoraproject.org, no? koji is a mod_python app. it doesnt run as a daemon at all. but it it all python. signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: old torrents
On Wednesday 21 October 2009 02:23:28 pm Seth Vidal wrote: > Hi, > I'm working on some torrent statistics an I noticed that we still have > fedora8 and fedora9 on the torrent. Would anyone cry if we deleted them > from the torrent? No tears here. have at it Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Emergency Change Freeze Request
On Monday 19 October 2009 09:55:50 pm Luke Macken wrote: > On Mon, Oct 19, 2009 at 08:06:08PM -0500, Dennis Gilmore wrote: > > We notcied that there was no apache logging on cvs1. this is because the > > selinux policy was preventing apache from writing log files. For now i > > have set selinux to permissive mode until we can fix the policy > > correctly. > > What were the specific SELinux denials? > > I don't see any AVCs on cvs1, nor have I seen any since we flipped it to > enforcing mode. > > How did you come to this conclusion? the bunch of httpd messages i got while tailing /var/log/audit/audit.log however looking at it now it doesnt seem related to logging. doing a graceful of httpd after setting enforcing to permissive enabled logs to work again. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Emergency Change Freeze Request
On Monday 19 October 2009 09:07:59 pm Seth Vidal wrote: > On Mon, 19 Oct 2009, Dennis Gilmore wrote: > > We notcied that there was no apache logging on cvs1. this is because the > > selinux policy was preventing apache from writing log files. For now i > > have set selinux to permissive mode until we can fix the policy > > correctly. > > +1 > > out of curiosity how long has the no logging been going on? long enough that the log files that were there are gone. my guess is since Date: Mon Sep 21 08:43:31 2009 -0500 when enforcing mode was turned on. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Emergency Change Freeze Request
We notcied that there was no apache logging on cvs1. this is because the selinux policy was preventing apache from writing log files. For now i have set selinux to permissive mode until we can fix the policy correctly. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] Add sigul and lftp packages to compose hosts
On Thursday 15 October 2009 06:00:07 pm Mike McGrath wrote:
> On Thu, 15 Oct 2009, Jesse Keating wrote:
> > ---
> > manifests/servergroups/compose.pp |2 ++
> > 1 files changed, 2 insertions(+), 0 deletions(-)
> >
> > diff --git a/manifests/servergroups/compose.pp
> > b/manifests/servergroups/compose.pp index b2cb3ab..49c78f4 100644
> > --- a/manifests/servergroups/compose.pp
> > +++ b/manifests/servergroups/compose.pp
> > @@ -11,6 +11,8 @@ class composer {
> > include rsync::server
> > include mock
> > include git::package
> > +include sigul::package
> > +include lftp::package
> >
> > # Firewall Rules,
> > $tcpPorts = [ 80, 8887, , 8889 ]
>
> +1
+1 also
Dennis
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] Add a module for lftp package
On Thursday 15 October 2009 05:59:47 pm Mike McGrath wrote:
> On Thu, 15 Oct 2009, Jesse Keating wrote:
> > On Thu, 2009-10-15 at 22:48 +, Jesse Keating wrote:
> > > +++ b/modules/lftp/manifests/init.pp
> > > @@ -0,0 +1,5 @@
> > > +class sigul {
> > > +
> > > +package { "lftp":
> > > +ensure => installed,
> > > +}
> > > --
> >
> > Mike pointed out that this is wrong. It now reads:
> >
> > class lftp::package {
> >
> > package { "lftp":
> > ensure => installed,
> > }
>
> +1
+1 also
Dennis
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] shared session data
On Tuesday 25 August 2009 03:25:39 pm Mike McGrath wrote:
> My smolt change requires shared session data
>
> can I get 2 +1's
> ---
> manifests/servergroups/appRhel.pp |9 +
> 1 files changed, 9 insertions(+), 0 deletions(-)
>
> diff --git a/manifests/servergroups/appRhel.pp
> b/manifests/servergroups/appRhel.pp index c249973..aba5fdf 100644
> --- a/manifests/servergroups/appRhel.pp
> +++ b/manifests/servergroups/appRhel.pp
> @@ -34,6 +34,15 @@ class appRhel {
> wikipath => "smolt-wiki",
> }
> include mediawiki-confirmedit::confirmEdit
> +mount { "/srv/web/sessiondata":
> +device =>
> "ntap-fedora1.fedora.phx.redhat.com:/vol/fedora/app/sessiondata", +
>fstype => "nfs",
> +ensure => "mounted",
> +options => "defaults,ro,soft,intr",
> +atboot => true,
> +require => File["/srv/web/sessiondata"]
> +}
> +
> }
>
> # Firewall rules
+1
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] Enabling confirm-edit again for smolt
On Tuesday 25 August 2009 01:06:56 pm Mike McGrath wrote:
> This had gotten disabled during a conversion process of making
> mediawiki-ConfirmEdit a package I think These files will enable the math
> based captcha again
+1
> ---
> modules/mediawiki-ConfirmEdit/README | 22 ++
> .../mediawiki-ConfirmEdit/files/ConfirmEdit.php| 222
> modules/mediawiki-ConfirmEdit/manifests/init.pp|
> 13 ++
> modules/mediawiki/manifests/init.pp|2 +-
> 4 files changed, 258 insertions(+), 1 deletions(-)
> create mode 100644 modules/mediawiki-ConfirmEdit/README
> create mode 100644 modules/mediawiki-ConfirmEdit/files/ConfirmEdit.php
> create mode 100644 modules/mediawiki-ConfirmEdit/manifests/init.pp
>
> diff --git a/modules/mediawiki-ConfirmEdit/README
> b/modules/mediawiki-ConfirmEdit/README new file mode 100644
> index 000..b4f281e
> --- /dev/null
> +++ b/modules/mediawiki-ConfirmEdit/README
> @@ -0,0 +1,22 @@
> +=
> +mediawiki-ConfirmEdit
> +=
> +
> +---
> +Usage
> +---
> +
> +The ConfirmEdit extension enables a simple text Captcha that will probably
> +catch most bots. It was designed largely by Brion Vibber. The FancyCaptcha
> and +reCAPTCHA addons create more complex image captchas.
> +
> +Captchas are a way of combating automated edits, helping to ensure that
> wiki +edits are being made by real humans rather than bots. This can be
> particularly +useful for reducing the problem of wiki spam, but captchas
> reduce accessibility +and cause inconvenience to human users. In addition,
> it will not completely +spam-proof your wiki (nor will it protect it from
> human spammers). You may wish +to use this in conjunction with other
> anti-spam features. Remember to clean up +any spam which might slip through
> the net (keep an eye on your 'recent changes' +page). Captcha's can also be
> used to foil automated login attempts that try to +guess passwords.
> +
> diff --git a/modules/mediawiki-ConfirmEdit/files/ConfirmEdit.php
> b/modules/mediawiki-ConfirmEdit/files/ConfirmEdit.php new file mode 100644
> index 000..0c33bc9
> --- /dev/null
> +++ b/modules/mediawiki-ConfirmEdit/files/ConfirmEdit.php
> @@ -0,0 +1,222 @@
> + +
> +
> +/**
> + * Experimental captcha plugin framework.
> + * Not intended as a real production captcha system; derived classes
> + * can extend the base to produce their fancy images in place of the
> + * text-based test output here.
> + *
> + * Copyright (C) 2005-2007 Brion Vibber
> + * http://www.mediawiki.org/
> + *
> + * This program is free software; you can redistribute it and/or modify
> + * it under the terms of the GNU General Public License as published by
> + * the Free Software Foundation; either version 2 of the License, or
> + * (at your option) any later version.
> + *
> + * This program is distributed in the hope that it will be useful,
> + * but WITHOUT ANY WARRANTY; without even the implied warranty of
> + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
> + * GNU General Public License for more details.
> + *
> + * You should have received a copy of the GNU General Public License along
> + * with this program; if not, write to the Free Software Foundation, Inc.,
> + * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
> + * http://www.gnu.org/copyleft/gpl.html
> + *
> + * @addtogroup Extensions
> + */
> +
> +if ( !defined( 'MEDIAWIKI' ) ) {
> + exit;
> +}
> +
> +global $wgExtensionFunctions, $wgGroupPermissions;
> +
> +$wgExtensionFunctions[] = 'confirmEditSetup';
> +$wgExtensionCredits['other'][] = array(
> + 'name' => 'ConfirmEdit',
> + 'author' => 'Brion Vibber',
> + 'svn-date' => '$LastChangedDate: 2008-07-02 23:09:26 + (Wed, 02 Jul
> 2008) $', + 'svn-revision' => '$LastChangedRevision: 36959 $',
> + 'url' => 'http://www.mediawiki.org/wiki/Extension:ConfirmEdit',
> + 'description' => 'Simple captcha implementation',
> + 'descriptionmsg' => 'captcha-desc',
> +);
> +
> +/**
> + * The 'skipcaptcha' permission key can be given out to
> + * let known-good users perform triggering actions without
> + * having to go through the captcha.
> + *
> + * By default, sysops and registered bot accounts will be
> + * able to skip, while others have to go through it.
> + */
> +$wgGroupPermissions['*']['skipcaptcha'] = false;
> +$wgGroupPermissions['user' ]['skipcaptcha'] = false;
> +$wgGroupPermissions['autoconfirmed']['skipcaptcha'] = false;
> +$wgGroupPermissions['bot' ]['skipcaptcha'] = true; // registered
> bots +$wgGroupPermissions['sysop']['skipcaptcha'] = true;
> +$wgAvailableRights[] = 'skipcaptcha';
> +
> +/**
> + * List of IP ranges to allow to skip the captcha, similar to the group
> setting: + * "$wgGroupPermission[...]['skipcaptcha'] = true"
> + *
> + * Specific IP addresses or CIDR-style ranges may be used,
> + * for instance:
> + * $wgCaptchaWhitelistIP = array('19
Re: [PATCH] Temporary setting for galgoci
On Monday 24 August 2009 05:08:37 pm Mike McGrath wrote:
> ---
> manifests/servergroups/proxy.pp |3 ++-
> 1 files changed, 2 insertions(+), 1 deletions(-)
>
> diff --git a/manifests/servergroups/proxy.pp
> b/manifests/servergroups/proxy.pp index bdea7b6..70bbcf4 100644
> --- a/manifests/servergroups/proxy.pp
> +++ b/manifests/servergroups/proxy.pp
> @@ -741,7 +741,8 @@ class proxy {
> # Firewall Rules, allow HTTP traffic through
> $tcpPorts = [ 80, 443, 873, 8080 ]
> $udpPorts = []
> -$custom = []
> +$custom = ['-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT',
> +'-A INPUT -p tcp -m tcp --sport 80 -j DROP']
>
> iptables { "/etc/sysconfig/iptables":
> content => template("system/iptables-template.conf.erb"),
+1
Dennis
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
[Change Request] koji theming
Id like to update the koji theming i need to install the rpms from http://koji.fedoraproject.org/koji/taskinfo?taskID=1629426 and apply a small hotfix to kojiweb https://fedorahosted.org/fedora-infrastructure/ticket/1628 the impact is minimal and easily reversed. all changes are upstream. Ill be publishing the hg repos on fedorapeople later today for the theming rpms. can i get 2 +1's please signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: changing tabs to spaces in pager.py
My opinion is have at it. Fixing things is always welcome. If you can't commit a fix prepare a patch. Its a great way to be involved and start to help. Darren VanBuren wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > > >On Aug 22, 2009, at 10:04 AM, Mike McGrath wrote: > >> On Sat, 22 Aug 2009, Darren VanBuren wrote: >> >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA1 >>> >>> I know that some of you dislike tabs, and when I was adding myself to >>> pager.py, I found there were tabs in the HTML portion as opposed to >>> spaces, >>> and tmz pointed out that several other lines are indented with tabs. >>> >>> I know it's pretty standard for us to use spaces for indentation, >>> but I wanted >>> to check whether it's okay to change pager.py further than adding >>> myself >>> (which ricky approved of on IRC earlier today). >>> >> >> This is correct, although at the moment unwritten. We prefer 4 >> spaces to >> a tab character. Or as Seth says "Tabs are a lie". >> >> -Mike >> >So what's your opinion on me changing it? > >Darren VanBuren >onekop...@gmail.com > >http://theoks.net/ >-BEGIN PGP SIGNATURE- >Version: GnuPG v1.4.9 (Darwin) > >iEYEARECAAYFAkqQJawACgkQBkMMSWb0YpYSJQCg4Ye64+aD7gHwsUWli2q9BCWR >gg4AoJ1xFzGxF033bopaekxLcpPepj90 >=euRS >-END PGP SIGNATURE- > >___ >Fedora-infrastructure-list mailing list >Fedora-infrastructure-list@redhat.com >https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list -- Dennis Gilmore___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [Change Request] Update xz on the builders
On Wednesday 19 August 2009 08:36:21 pm Toshio Kuratomi wrote: > A data corruption bug was found in the current xz package for certain > files. The xz package was updated to a snapshot in Fedora and EPEL. > We'd like to update the builders with the new xz to make sure we aren't > producing packages with corrupted payloads. > > The corruption bug report is here: > https://bugzilla.redhat.com/show_bug.cgi?id=517806 > > which includes confirmation that it fixes the bug and jnovy's > recommendation to update the buildsystem. > > The EPEL-5 update is here: > > https://admin.fedoraproject.org/updates/xz-4.999.8-0.10.beta.20090817git.el >5 > > Can I get two +1's for this? > > -Toshio +1 signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [Change Request]
On Wednesday 19 August 2009 06:19:06 pm Jesse Keating wrote: > On Wed, 2009-08-19 at 16:44 -0600, Stephen John Smoogen wrote: > > Both changes look of little impact from infrastructure side. > > Provisional +1 unless a release engineer says "OH MY ZOD, didnt you > > think about Kryptonite?" > > I don't know of any release engineering item that relies on buildsys. there is nothing. its only for buildsys-macros and buildsys-build packages for EL at this point. when RHEL5 goes away so can /buildgroups Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
[Change Request]
id like to make the following changes impact will be minimal /buildgroups is the only active service on buildsys.pfp.o where plague used to run. its only needed for mock building using epel targets so the increaded load will be insignificant. the change will be trasnparent to end users. the content is in place on /mnt/koji so its available to either hub. as well as kojipkgs i think it makes more sense to have buildsys be a cname to koji.fp.o rather than kojipkgs.fp.o diff --git a/configs/web/applications/kojiweb.conf.erb b/configs/web/applications/kojiweb.conf.erb index f6b35d4..cf4a868 100644 --- a/configs/web/applications/kojiweb.conf.erb +++ b/configs/web/applications/kojiweb.conf.erb @@ -88,4 +88,11 @@ Alias /static-repos "/mnt/koji/static-repos/" Options Indexes FollowSymLinks +Alias /buildgroups "/mnt/koji/buildgroups/" + + +Options Indexes FollowSymLinks + + + RewriteRule ^/packages(.+) http://kojipkgs.fedoraproject.org/packages$1 [R=301,L] diff --git a/modules/bind/files/master/fedoraproject.org b/modules/bind/files/master/fedoraproject.org index 4b30336..93bc55b 100644 --- a/modules/bind/files/master/fedoraproject.org +++ b/modules/bind/files/master/fedoraproject.org @@ -1,6 +1,6 @@ $TTL 3600 @INSOA ns1.fedoraproject.org. hostmaster.fedoraproject.org. ( -2009081201 ; Serial +2009081901 ; Serial 8H ; refresh 2H ; retry 4W ; expire @@ -74,7 +74,7 @@ bodhi IN CNAME admin bu1 IN A 128.197.185.45 bugzIN CNAME wildcard bugz.stgIN CNAME admin.stg.fedoraproject.org. -buildsysIN CNAME serverbeach1.fedoraproject.org. +buildsysIN CNAME koji.fedoraproject.org. bzr IN CNAME git certmaster IN CNAME puppet capp1 INA 172.17.255.29 signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: IPv6 for Fedora services?
On Monday 17 August 2009 09:33:15 am Matt Domsch wrote: > Do we know if native IPv6 connectivity is available in any of our colo > sites, or if we would need to use some form of tunnel? We would have to use tunnels. one or two of our sites may offer ipv6 but AFIAK the bulk do not. Dennis > > --Original Message-- > From: Mike McGrath > Sender: fedora-infrastructure-list-boun...@redhat.com > To: Fedora Infrastructure > ReplyTo: Fedora Infrastructure > Subject: Re: IPv6 for Fedora services? > Sent: Aug 17, 2009 10:01 AM > > On Mon, 17 Aug 2009, Jeff Garzik wrote: > > Is there any IPv6 plan for *.fedoraproject.org ? > > There is currently no plan. > > -Mike > > ___ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > -- > Matt Domsch > Technology Strategist, Dell Office of the CTO > linux.dell.com & www.dell.com/linux > > ___ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [Change Request] Enable rw /mnt/fedora on puppet1
+1 from me
Dennis
Toshio Kuratomi wrote:
>Currently we're mounting /mnt/fedora ro on puppet1. I think that this
>was a change committed in puppet that affected the /etc/fstab file.
>That didn't come into play until we rebooted puppet1 last night -- the
>reboot caused the new fstab to be used and mount /mnt/fedora ro.
>
>Here's the changeset that caused that:
>
>Date: Fri Jun 26 22:53:26 2009 +
>
>e mount instead of nfs.
>
>diff --git a/modules/puppet/manifests/init.pp
>b/modules/puppet/manifests/init.pp
>index 21b8d62..0af2273 100644
>--- a/modules/puppet/manifests/init.pp
>+++ b/modules/puppet/manifests/init.pp
>@@ -75,9 +75,12 @@ class puppet::master::mounts {
> ensure => directory,
> }
>
>-nfs { "/mnt/fedora":
>+mount { "/mnt/fedora":
> device => "ntap-fedora1.fedora.phx.redhat.com:/vol/fedora/",
>-require => File["/mnt/fedora/"],
>+fstype => "nfs",
>+ensure => "mounted",
>+options => "defaults,ro,soft,intr",
>+require => File["/mnt/fedora"],
> }
> }
>
>
>I'd like to make the following change to this:
>
>-options => "defaults,ro,soft,intr",
>+options => "defaults,rw,soft,intr",
>
>Can I get two +1's for my change?
>
>-Toshio
>
>___
>Fedora-infrastructure-list mailing list
>Fedora-infrastructure-list@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
--
Sent from my Android phone with K-9. Please excuse my brevity.___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
bash_history on x86-5
I just deleted my bas_history on x86-5 i typed my password on accident Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Cleanup/expansion of puppet/func
On Wednesday 24 June 2009 04:44:23 Nigel Jones wrote:
> - "Stephen John Smoogen" wrote:
> > Hi guys,
> >
> > As my first PFY job I am working on cleaning up the nodes list in
> > puppet and also working on getting func onto all systems. Expect that
> > I will be going over stuff that I should probably know, but forgot
> > (turning 40 or something does that to you )
> >
> > The following systems are listed in func but not in puppet
> >
> > buildsys.fedoraproject.org
> > compose-x86.fedora.phx.redhat.com
> > planet1.fedoraproject.org
> > ppc2.fedora.redhat.com
> > ppc3.fedora.redhat.com
ppc2 and ppc3.fedora.redhat.com are the public ips for
ppc2.fedora.phx.redhat.com and ppc3.fedora.phx.redhat.com they were needed
for plague so the can be removed. planet1.fedoraproject.org is the actual
hostname of planet.fedoraproject.org, compose-x86.fedora.phx.redhat.com is
also known as x86-8.fedora.phx.redhat.com and its assigned to releng along
with ppc1.fedora.phx.redhat.com buildsys.fedoraproject.org is where plague
was running. the only thing there now that we do need is
http://buildsys.fedoraproject.org/buildgroups/ we should move it somewhere
else then reprovision the box which is serverbeach1.fedoraproject.org
buildsys.fedoraproject.org is a cname
> Dennis, any comments on these, from memory they are still active
>
> > value1.fedora.phx.redhat.com
>
> value1 should be fine and from what I can see is in both func and puppet,
> in fact, 'git blame' returns good results for this: $ git-blame
> manifests/nodes/value1.fedora.phx.redhat.com.pp
> c5d6847f (Nigel Jones 2008-12-11 04:14:58 + 1) node value1{
> c5d6847f (Nigel Jones 2008-12-11 04:14:58 + 2) include phx
> c5d6847f (Nigel Jones 2008-12-11 04:14:58 + 3) include valueadd
> c5d6847f (Nigel Jones 2008-12-11 04:14:58 + 4) }
>
> > vpn1.fedora.phx.redhat.com
> > vpn2.fedoraproject.org
>
> These have been Ricky's project
>
> > xenbuilder2.fedora.redhat.com
>
> Again, iirc active builder
its in puppet as xenbuilder2.fedora.phx.redhat.com
the plague stuff im planning to remove completely i need to make sure that
puppet removes all the bits for a few days before doing so though.
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Travelling
On Sunday 21 June 2009 11:35:24 am Toshio Kuratomi wrote: > I'm going to be going to Brazil for FISL and a FUDCon this week. I'm > not sure what my Internet situation is going to be but if anything comes > up send me a message and I'll work on it once I get the message. > > -Toshio I will be there also. Internet access should be ok. but there will be periods that we are disconnected. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Bad cvs commit
On Monday 15 June 2009 07:30:13 am Xavier Lamien wrote: > We currently having a bad commit into cvs pkgs dir : > http://cvs.fedoraproject.org/viewvc/?root=pkgs > against the package openscada. > > Actually, this dir has write access due to group membership on packager > group. > > If an cvsadmin can have a look and fix this, that would be great. ive removed the extra directories. packages access is needed to ensure all users can commit. access is not controlled via the filesystem but via the acls setup in cvs. Ill look over them today. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] Add proxy1.stg to staging separation rules.
On Tuesday 09 June 2009 04:49:05 pm Ricky Zhou wrote: > On 2009-06-09 04:43:46 PM, Dennis Gilmore wrote: > > On Tuesday 09 June 2009 04:24:01 pm Ricky Zhou wrote: > > > --- > > > configs/system/iptables-template.conf.erb |1 + > > > 1 files changed, 1 insertions(+), 0 deletions(-) > > > > > > diff --git a/configs/system/iptables-template.conf.erb > > > b/configs/system/iptables-template.conf.erb index 0b33ff0..45bb9ee > > > 100644 --- a/configs/system/iptables-template.conf.erb > > > +++ b/configs/system/iptables-template.conf.erb > > > @@ -35,6 +35,7 @@ > > > -A INPUT -s 10.8.34.114 -j REJECT --reject-with icmp-host-prohibited > > > -A INPUT -s 10.8.34.99 -j REJECT --reject-with icmp-host-prohibited > > > -A INPUT -s 10.8.34.116 -j REJECT --reject-with icmp-host-prohibited > > > +-A INPUT -s 10.8.34.83 -j REJECT --reject-with icmp-host-prohibited > > > <% end %> > > > > > > # SSH > > > > why are youremoving the three hosts to add 1? if you were just adding a > > host would you not have a single + line? not 3 - lines and one + > > > > -1 for now > > Those aren't removals, they're dashes that were already part of the > lines :-) > > Thanks, > Ricky indeed going back now i see it. stupid computers, and there stupid owners. sorry for the noise, nothing to see here. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] Add proxy1.stg to staging separation rules.
On Tuesday 09 June 2009 04:24:01 pm Ricky Zhou wrote: > --- > configs/system/iptables-template.conf.erb |1 + > 1 files changed, 1 insertions(+), 0 deletions(-) > > diff --git a/configs/system/iptables-template.conf.erb > b/configs/system/iptables-template.conf.erb index 0b33ff0..45bb9ee 100644 > --- a/configs/system/iptables-template.conf.erb > +++ b/configs/system/iptables-template.conf.erb > @@ -35,6 +35,7 @@ > -A INPUT -s 10.8.34.114 -j REJECT --reject-with icmp-host-prohibited > -A INPUT -s 10.8.34.99 -j REJECT --reject-with icmp-host-prohibited > -A INPUT -s 10.8.34.116 -j REJECT --reject-with icmp-host-prohibited > +-A INPUT -s 10.8.34.83 -j REJECT --reject-with icmp-host-prohibited > <% end %> > > # SSH why are youremoving the three hosts to add 1? if you were just adding a host would you not have a single + line? not 3 - lines and one + -1 for now Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] Re-enable rawhide compose.
On Sunday 07 June 2009 10:41:33 pm Nigel Jones wrote: > +1 +1 > - "Jesse Keating" wrote: > > Massive rawhide for start of F12 finally finished. > > > > Also increase the number of random chars for mktemp and ensure it > > worked > > before continuing. > > --- > > configs/build/rawhide |2 +- > > 1 files changed, 1 insertions(+), 1 deletions(-) > > > > diff --git a/configs/build/rawhide b/configs/build/rawhide > > index eab9097..4a90bb3 100644 > > --- a/configs/build/rawhide > > +++ b/configs/build/rawhide > > @@ -1,3 +1,3 @@ > > # rawhide compose > > mailto=jkeat...@fedoraproject.org > > -#15 6 * * * masher TMPDIR=`mktemp -d /tmp/rawhide.X`; cd $TMPDIR; > > git clone -n git://git.fedorahosted.org/git/releng; cd releng; git > > checkout -b rawhide-stable; LANG=en_US.UTF-8 ./scripts/buildrawhide > > $(date "+\%Y\%m\%d"); sudo -u ftpsync > > /usr/local/bin/update-fullfilelist fedora > > +15 6 * * * masher TMPDIR=`mktemp -d /tmp/rawhide.XX` && cd > > $TMPDIR; git clone -n git://git.fedorahosted.org/git/releng; cd > > releng; git checkout -b rawhide-stable; LANG=en_US.UTF-8 > > ./scripts/buildrawhide $(date "+\%Y\%m\%d"); sudo -u ftpsync > > /usr/local/bin/update-fullfilelist fedora > > -- > > 1.5.5.6 > > > > ___ > > Fedora-infrastructure-list mailing list > > Fedora-infrastructure-list@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > ___ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] the new package name is perl-DateManip
On Friday 05 June 2009 02:23:41 pm Mike McGrath wrote:
> I should explain this better, I want to change it because it's causing
> some issues in staging, but it will cause this package to get updated on
> bapp1. Should be low risk.
>
> -Mike
>
> On Fri, 5 Jun 2009, Mike McGrath wrote:
> > ---
> > manifests/services/maps.pp |2 +-
> > 1 files changed, 1 insertions(+), 1 deletions(-)
> >
> > diff --git a/manifests/services/maps.pp b/manifests/services/maps.pp
> > index 72d498c..f4d2934 100644
> > --- a/manifests/services/maps.pp
> > +++ b/manifests/services/maps.pp
> > @@ -8,7 +8,7 @@ class maps {
> > package { python-basemap:
> > ensure => present
> > }
> > -package { perl-Date-Manip:
> > +package { perl-DateManip:
> > ensure => present
> > }
> > }
> > --
> > 1.5.5.6
>
> ___
> Fedora-infrastructure-list mailing list
> Fedora-infrastructure-list@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
+1
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Request backup1
On Friday 05 June 2009 12:44:27 pm Mike McGrath wrote: > We've got a tech on site that needs to take backup1 down to install an SAS > adapter and new tape drive. You may remember this was requested before, > we didn't have the right cable / card on site so the request was approved > but the change wasn't made. > > 2+1's? +1 signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [PATCH] Updated new staging hosts in ssh_known_keys
On Friday 05 June 2009 12:42:41 pm Mike McGrath wrote: > Can I get 2 +1's > --- > modules/ssh/files/ssh_known_hosts |5 +++-- > 1 files changed, 3 insertions(+), 2 deletions(-) > > diff --git a/modules/ssh/files/ssh_known_hosts > b/modules/ssh/files/ssh_known_hosts index d99fbc8..5ab5a25 100644 > --- a/modules/ssh/files/ssh_known_hosts > +++ b/modules/ssh/files/ssh_known_hosts > @@ -5,7 +5,8 @@ app4,10.8.34.48 ssh-rsa > B3NzaC1yc2EBIwAAAQEA0cbc0AhUL0vAhKZz7QrPNeJ/o8y1 app5,192.168.1.13 > ssh-rsa > B3NzaC1yc2EBIwAAAQEAywNK0LXCaimjLd094G72QVFGGrNA6IdUtVaO5RGXMt0eQeK >3o59jaSdgIwz1aDw7jbvP8Iu28kQj9du/RkGh9RGOY2kn2wwHru3D58pyXK23KdWyZwlvkSwz8vE >BySzSghXbh4Jiglzr6wdSzkLNwio6xD8GqnJX9iO+dyWjQ3E/v1RQo42kX62GcaUob3jFi49Yhox >u064oupuq5PL5qZvfDH6QMWhW7rxQj+a7by5YgBU6UAGwND46arxhag7x3t+9PghKTx725dr+hw8 >XhGoW3MrKnElh6Pj97B0qPOVcXAoveZUeaPTmvBeusR97Uoulpc5Q0Ctovj99xVvEtQ== > app6,192.168.1.24 ssh-rsa > B3NzaC1yc2EBIwAAAQEAzfWOx94ZhtetSGGE543cyMvdnP6jLtAgma3HbSZdX3/NaGN >6lvIdbPwiaR78FH3XTiZHnzujgGZJ+wybfaYHsxkNOHiEhgYGdlLYzGVppQHLzUDoGE9fYCj3EVB >1Y5JXfgaFCVMFEWe7uTVHWsSgB9iUzkuLWjfTL7+J/BNyCfWPv50Gnh6YELwjHuTtRX8Wl+Gbj4A >At/J0aWqAgima940+9oEPxnk5QzXOkVym0EXeNoBNTEEU/SlvNEy/u85wE+/xfsa6WgqtZI/KlM4 >LXveRkZcH5Zwn0aK7W7j9uzs1KTHxnjfb3pA4FcfHW1zxtliaM4EHvKyNpFzViASWQQ== > bapp1,10.8.34.124 ssh-rsa > B3NzaC1yc2EBIwAAAQEAvuD479APThoqX12HxbXfN80C4J3aN7+2X/oVF+un5tIG21D >wRfPuJu/9uJKJM72X9zGAI9/DGVLyRPtzQOoBWA75N2NQjR2RKTJc2Jcl4/HVr98UN9bAVqgGU50 >OpONsgbncP4yadRLEkeLFYA6Bn5p/PhIrJ1TSYT0Vr9RcLy0GINqor3aMAICRYlRUrsWeCBnue7X >RAsvWg5O7DX3bVf9Rwu4HQpIpvDzzXDvX33DWJUbN7Q8Lgb+1cyUsYh37eMeo79evj4VeMpOykDM >L4TGcmjkbF4hkt5kJJwrQSjaqVMtWeB6bDDX5zbYhuuCwCoYGA6WeDJJpv8M1d79I0Q== > -app1.stg,10.8.34.113 ssh-rsa > B3NzaC1yc2EBIwAAAQEAxYavmpopcIbcLS8m3hcqLt9UBsmHH5M9kJ6/j+dzJ2VlSN+ >204xfafIBo1iHspppK8ctkN1899V7JyCnIqOYDWQd5Q98Xbum8fn5oaRjHL+AlbAFAh8zH1nxr0h >gDRVZCahqIFJeWospzXaEbmCBG52VZJkp3vlA5endOUjFML/YkJpoXfjND3+rL4ZweaeW202OH7t >ixQV8uGGQTlbzvAt2zpeO3D0ATKES9efMCH+DUOKk7Tvrpr2oqiiqkPMZBzOyhsfhLXKcxrnKluj >1v1/ZtqOeyP8QK1lvZ9MohLRor/y3v9D3ci0ifwPVCK2egL2hz2/PDtdQ5tvbAblVLw== > +app1.stg,10.8.34.113 ssh-rsa > B3NzaC1yc2EBIwAAAQEA3q1llw6x3Iuoym0SHEZnMYG87/g+zF49rnxPwnd7En1Kcu0 >aIACw8DxmgDpToiOYPwPNDGWyPEsnyGNVC5slxGnlmsLQP3BZ8ZCgAhQNLg5+QyGNjgzDRHLaUH8 >e+g9Av4oz17Sudw/kfv+ZcU/YRw8nfkQBZMtoORZF6x+D1fuME/HtcVFkS/GQNjUsea/iU30gypF >O2b0r6VR/A4xQ6Nbvr11zsx+5R0/lWNbk1ODAVyBTXFbk2VxF3g/MYV7S+9R2ggoWZsNWsvgCam0 >/dGruMG1vIGiql8XIfIX1IeBizVDZJOY4lWVM0HpndZypSPQwt1ZW9YNtek+EYTLv8Q== > +app2.stg,10.8.34.114 ssh-rsa > B3NzaC1yc2EBIwAAAQEAol7fqrP+11Wb142bCLZ2YWfW3JQTCKeJSTwvN06V+KjMTb4 >abi9t7JnVCcJKUrEt94rVIE/fNfbUMxTpSNX0wuE38aFavfMuYUZ2Fvp47UOESVNZLSC3VvpoCQm >QA1+7HmuPwwvRsFFrtjGnQdF/h04Gu7E7ucdMnxVuVRIdEOuCkUU8cDpYmyIa7dbrYh2XZHw+Ry6 >rIt+szZcQqxJ0b/cOHPkQDgX7JaGGXRX0M3qI+/MYGdtrJVDE29G9Cu/sIP0mHfgY+bwKbomg8Dr >+MNc2rpDnvsxjVnTVPle8IxnDRGAZQl9FxbiEwtw8iYwpeTct06ZHTuBMhncJqcanrQ== > asterisk1,192.168.1.34 ssh-rsa > B3NzaC1yc2EBIwAAAQEA9K8imSdywSbQv9twrVRUA9zVtUeDQAa6sTXK+y0zz3Ct7L+ >6YtyonprgXA42JcRdg5WiKsmcTDC9T2GSc4GvyKqXvmaZN5V7Ry608vHDWyv639Y8r9IjMbSIEGb >Su3Q8WpbxYYgqQ5PE8pWRi7Qu3/hTNU49y+sQ5qPHjZ7Y/0QHMnQDkn1xWdaUdq8ahkkDAECIUU1 >5Cmj7ClRO01V+T+sP0VitsCaa3T2RfDsmxEtnCr9e0dG9jovalfO1aEvzpstClOzYoxLvr32hxm1 >qHMr5wxmSUc1ymLL6Llil1oTJ8WyCimGlZFMSU0HkRohbzPGdV3YfOp+AKj6CEI67IQ== > asterisk2,192.168.1.36 ssh-rsa > B3NzaC1yc2EBIwAAAQEA2+kJvYuTDFEkKVAiohgA0G1m5InxoVdqaHqkl9NWQIDsebL >Ee0wvfGEs83APEEqUNOL+TarC9B5vR0XowhGiekuHkSXYD0U/T+GGLOk9PCqsWEYCkeNPED38cGp >EkO5tmM5rNy4Ol0CMQ7t7lFJCTZtgKc/C5IBPiuouDw4Sfxag3Yj2P8IPRQ49zY73p/NqyTvc3mg >fxnJB7gqzh91bsE7DINuhD82dryYVrXrqlT1DVR++B7HdiWX44kAQE0l6BD4VcszfBJ5Mg+dGP/z >7swiIbRTgQ4ZiOefyiHwC6iLoEs17Hq35CJOUpZLYo26wDrp9UBIlti78ZrtZVbeCVw== > backup1,10.8.34.219 ssh-rsa > B3NzaC1yc2EBIwAAAQEAwYSCsVH8hFlBsGDYw1FzsQEA98EwU25gJMhzyNir8QkWTPz >oaZ5ncD0PY1jRAWc4ye8fCzzgsre8knwqyDrCEz3LLJkSEspELsuBNT7F5c4XsON5uS57W7Nufr5 >pf18ePXUbztLVdHhzx5xIuRXpW3UrI8qcxTeYnfsh4LMaofCDer60KvFQ/9oUHAV//pIiUc8hKKS >nkjjdha12mBrTuTXfg5sslLReugcyv3zYQNrQmG/B1hwI1gMcf3gHUccJ+Cm648pErnSh26Tl1rz >is5p/ipSehM68eIsfRdz2vMwEY4jeA++yJ+JiqpPgzrd1IoGo1oAH61fPUVz+lLYahw== @@ > -46,7 +47,7 @@ ppc7,10.8.34.230 ssh-rsa > B3NzaC1yc2EBIwAAAQEA0CLk4k56ZKw+bDUd7cmSbrG5aes ppc8,10.8.34.231 > ssh-rsa > B3NzaC1yc2EBIwAAAQEAqPy1UptflYSQQB7lrFlp5YY+KY1jJTLmNEB5mMI0lfqlrtI >pOLdh45VcAZCWtUNG1DifDsO66Zdv10syo/8X98nP0MLd2yLnpZdA9I4GflSO/CAqRGNNqRI7pXQ >r7J/JpiMBJV16qF6WCn2QXsDj+nX7nrVVCKqyontkksrypdqqS2S9c9kTCDihyZ6gBM0oyTFx1By >qPlMzleMcsGX2xaoEcjmrQXIEjrLLuB7zU+e5mhq0io0JtZXTfdb5pWu/hGHwvIt7qUOjl+y5DeU >dRQ1/kceIbnZHP9Fz59g/BOS8kSlZj1Fpy6Ybc+6R+hwfCWiMnHjz6FkYRtxPa0ARFw== > ppc9,10.8.34.232 ssh-rsa > B3NzaC1yc2EBIwAAAQEAx3efirQRHCKYgZSEbxti7NekcalP5gECICqx/bBYsLm8zgF >7n5mzd/vrGBz/XKffAo48nPRQM06tB4begynFwuussDVw+wtMO7mAO0DPcHcD2qrDXg0qJt9voHI >1JO2aUue5qo8N2KSCP/geVsTH5qjsRDu+ZYkmYt+0/G/Rz3Usvn90+WkyI++s68enSEl9bVw5G9w >ydweUXhPuJMIaD+
Re: [PATCH] Added hosted-content group to secondary1
On Thursday 04 June 2009 02:05:12 pm Mike McGrath wrote:
> ---
> .../nodes/secondary1.fedora.phx.redhat.com.pp |2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/manifests/nodes/secondary1.fedora.phx.redhat.com.pp
> b/manifests/nodes/secondary1.fedora.phx.redhat.com.pp index
> 0b98229..04701bf 100644
> --- a/manifests/nodes/secondary1.fedora.phx.redhat.com.pp
> +++ b/manifests/nodes/secondary1.fedora.phx.redhat.com.pp
> @@ -1,5 +1,5 @@
> node secondary1{
> -$groups='sysadmin-main,sysadmin-noc,alt-sugar,alt-k12linux,altvideos'
> +
> $groups='sysadmin-main,sysadmin-noc,alt-sugar,alt-k12linux,altvideos,hosted
>-content' include global
> include fas::fas
> include secondaryMirror
+1
Dennis
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Freeze
On Wednesday 27 May 2009 04:38:13 pm Mike McGrath wrote: > I'd like to clean up some old plague cruft on ppc2 (which has started > throwing storage warnings) > > rm -rf /mnt/build/builder_work/* > > +1's? +1 signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Request - Stop puppet on releng2 for the night.
On Wednesday 13 May 2009 20:30:55 Jesse Keating wrote: > I want to start the rawhide compose early, since I'm done > tagging/signing things for today, so that it will finish maybe in time > for me to compose out pre-RCs from it for more intensive testing > tomorrow. To do this, I need to modify the cron job that kicks off > rawhide on releng2, and stop the puppet service from updating that cron > job for the evening. I'll turn on puppet again in my morning. +1 from me signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
More auth options
So doing a liitle looking around I cane across some options that look interesting, the following options would mean you need to physically have something to login. yubikey http://www.yubico.com/products/yubikey/ It would require a pam module and for us to setup a server for managing keys. it looks to be fairly low cost. it would implement a 2 facter authentication. etoken http://www.aladdin.com/etoken/devices/pro-usb.aspx it moves the public key from your hard drive to something you physically need to have ubikey is max USD$25 where the etoken is probably at least USD$30. I would think that with yubikey we could work out a deal with them to get a discount in return for us being a case study/prominent user of there product. all of the software for yubikey AFAICT is open source. some of it would require packaging. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Pycon people
On Thursday 26 March 2009 11:29:54 pm Seth Vidal wrote: > On Thu, 26 Mar 2009, Stephen John Smoogen wrote: > > On Thu, Mar 26, 2009 at 8:57 PM, Mike McGrath wrote: > >> Just a heads up, many of the Infrastructure Team members (including > >> myself) will be at pycon (http://us.pycon.org/) so our online > >> availability will be scarce. > > > > Who are the backups in case of emergency. I can probably work out some > > time off if you need it. > > I'm here and around and I get the pages. Im here also Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: hosts for rawhide build chroots - different rpm versions?
On Sunday 22 March 2009 05:02:41 am Axel Thimm wrote: > Hi, > > AFAIK the build hosts are RHEL5 (or maybe F10 by now?). At any rate > the rpm used in rawhide is quite different than the ones from the > hosts, how has this been solved in the build hosts? Has the hosting OS > upgraded its rpm to be compatible to all hosted chroots? Or is the rpm > within the chroot used? > > I'm asking in a double context: First I'd like to understand if smart > can properly handle chroots of rawhide/F11 on F10/RHEL5 hosts. Anders > Björklund (in the Cc, please keep him there on replies) has put a > great deal of effort to have smart working on F10 and F11, and a smart > version for managing F11 and later chroots on F10 or earlier would be > great. > > And second I'd like to know how to setup a build environment for F11 > for getting some ATrpms packages out. we are running a version of rpm 4.6.0 on rhel5. This is only so mock can populate chroots with rpms with stronger hashes rhel5's rpm doesnt support. All srpm creation now takes place in chroots so features of the target rpm are always available. rpm in F-10 updates is compatible with the new rpm features. but rpm from F-9 and RHEL4 and 5 can not handle the new rpm at all. you cannot make chroots on them with rawhide rpms. you could use koji on F-10/rawhide or F-9/RHEL5 by replacing the hosts rpm to build your packages. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [Change Request] Add redirect from /legal/trademarks/guidelines to http://fedoraproject.org/wiki/Legal:Trademark_guidelines.
+1 Ricky Zhou wrote: >As requested by Paul at >https://fedorahosted.org/fedora-infrastructure/ticket/1269. I tested >this on staging, so this should be relatively safe. >--- > configs/web/fedoraproject.org/modRewrite.conf |1 + > 1 files changed, 1 insertions(+), 0 deletions(-) > >diff --git a/configs/web/fedoraproject.org/modRewrite.conf >b/configs/web/fedoraproject.org/modRewrite.conf >index ad12573..037cd35 100644 >--- a/configs/web/fedoraproject.org/modRewrite.conf >+++ b/configs/web/fedoraproject.org/modRewrite.conf >@@ -15,6 +15,7 @@ RewriteRule ^/docs/(.*) http://docs.fedoraproject.org/$1 >[R=301,L] > RewriteRule ^/Download/(.*) http://rhold.fedoraproject.org/Download/$1 > [R=301,L] > RewriteRule ^/download/(.*) http://rhold.fedoraproject.org/Download/$1 > [R=301,L] > RewriteRule ^/extras/(.*) > http://download.fedora.redhat.com/pub/fedora/linux/extras/$1 [R=302,L] >+RewriteRule ^/([^/]+/)?legal/trademarks/guidelines$ >http://fedoraproject.org/wiki/Legal:Trademark_guidelines [R=301,L] > # RedirectMatch ^/wiki/Releases/7 http://fedoraproject.org/static-tmp/7 > # RedirectMatch ^/wiki/$ http://fedoraproject.org/static-tmp/ > # RedirectMatch ^/wiki/FedoraMain$ http://fedoraproject.org/static-tmp/ >-- >1.5.5.6 > >___ >Fedora-infrastructure-list mailing list >Fedora-infrastructure-list@redhat.com >https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list -- Sent from my Android phone with K-9. Please excuse my brevity.___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: change request
On Tuesday 10 March 2009 05:53:04 pm Mike McGrath wrote: > for translate website: > > diff --git a/configs/web/translate.fedoraproject.org.conf > b/configs/web/translate.fedoraproject.org.conf > index 7bcb9c5..407b799 100644 > --- a/configs/web/translate.fedoraproject.org.conf > +++ b/configs/web/translate.fedoraproject.org.conf > @@ -10,6 +10,7 @@ > >RewriteEngine On >RewriteRule ^/submit(.*) > https://translate.fedoraproject.org/submit$1 [R=301,L] > + RewriteRule ^/tx(.*) https://translate.fedoraproject.org/tx$1 > [R=301,L] > >include "conf.d/translate.fedoraproject.org/*.conf" > > @@ -21,6 +22,7 @@ > >RewriteEngine On >RewriteRule ^/submit(.*) > https://translate.fedoraproject.org/submit$1 [R=301,L] > + RewriteRule ^/tx(.*) https://translate.fedoraproject.org/tx$1 > [R=301,L] > >include "conf.d/translate.fedoraproject.org/*.conf" > > ___ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list@redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list +1 Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change request
On Tuesday 10 March 2009 01:11:28 pm Mike McGrath wrote: > I'd like to upgrade transifex on app1. this will not impact the live > transifex install. Just the new one on app1. > +1 signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: error syncing from secondary
On Thursday 26 February 2009 03:04:19 pm Mike McGrath wrote: > On Thu, 26 Feb 2009, Dennis Gilmore wrote: > > On Thursday 26 February 2009 09:41:38 am Adrian Reber wrote: > > > rsyncing from secondary I get following error: > > > > > > rsync: send_files failed to open > > > "/releases/test/9-Beta/Fedora/source/SRPMS/.kernel-2.6.27.12-78.2.9.fc9 > > >.src .rpm.U3tJXy" (in fedora-secondary): Permission denied (13) > > > > > > Adrian > > > > Fixed thanks > > I wonder how these keep popping up. interupted rsyncs I need to fully automate the process Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: error syncing from secondary
On Thursday 26 February 2009 09:41:38 am Adrian Reber wrote: > rsyncing from secondary I get following error: > > rsync: send_files failed to open > "/releases/test/9-Beta/Fedora/source/SRPMS/.kernel-2.6.27.12-78.2.9.fc9.src >.rpm.U3tJXy" (in fedora-secondary): Permission denied (13) > > Adrian Fixed thanks Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Outage Notification - Koji, plague 2009-02-21 15:00 UTC
Dennis Gilmore wrote: Xavier Lamien wrote: 2009/2/14 Dennis Gilmore : There will be an outage starting at 2009-02-21 15:00 UTC, which will last approximately 48 hours. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2009-02-21 15:00 UTC' Affected Services: Buildsystem (koji and plague) Unaffected Services: CVS / Source Control Database DNS Fedora Hosted Fedora People Fedora Talk Mail Mirror System Torrent Translation Services Websites Ticket Link: https://fedorahosted.org/fedora-infrastructure/ticket/1187 Reason for Outage: Maintenance of /mnt/koji filesystem, koji DB Maintainence Upgrade koji to support EPEL, noarch subpackages, srpm's built in a chroot. along with lots of bug fixes. Contact Information: Please join #fedora-admin in irc.freenode.net or respond to this email to track the status of this outage. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list Just a heads-up The outage is still going This is still ongoing. A final Done email will be sent when you can submit builds again. Thanks for your paitence. Dennis This has been completed and building is back to normal. please report any odd failures. there has been a very large change in koji. noarch subpackages are now supported, which needs srpms to be built in a chroot. the last of F-11's features that needed koji chanes are now ready to deploy. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Outage Notification - Koji, plague 2009-02-21 15:00 UTC
Xavier Lamien wrote: 2009/2/14 Dennis Gilmore : There will be an outage starting at 2009-02-21 15:00 UTC, which will last approximately 48 hours. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2009-02-21 15:00 UTC' Affected Services: Buildsystem (koji and plague) Unaffected Services: CVS / Source Control Database DNS Fedora Hosted Fedora People Fedora Talk Mail Mirror System Torrent Translation Services Websites Ticket Link: https://fedorahosted.org/fedora-infrastructure/ticket/1187 Reason for Outage: Maintenance of /mnt/koji filesystem, koji DB Maintainence Upgrade koji to support EPEL, noarch subpackages, srpm's built in a chroot. along with lots of bug fixes. Contact Information: Please join #fedora-admin in irc.freenode.net or respond to this email to track the status of this outage. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list Just a heads-up The outage is still going This is still ongoing. A final Done email will be sent when you can submit builds again. Thanks for your paitence. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Outage Notification - Koji, plague 2009-02-21 15:00 UTC
On Friday 13 February 2009 09:54:58 pm Dennis Gilmore wrote: > There will be an outage starting at 2009-02-21 15:00 UTC, which will last > approximately 48 hours. > > To convert UTC to your local time, take a look at > http://fedoraproject.org/wiki/Infrastructure/UTCHowto > or run: > > date -d '2009-02-21 15:00 UTC' > > Affected Services: > > Buildsystem (koji and plague) > > Unaffected Services: > CVS / Source Control > Database > DNS > Fedora Hosted > Fedora People > Fedora Talk > Mail > Mirror System > Torrent > Translation Services > Websites > > Ticket Link: > https://fedorahosted.org/fedora-infrastructure/ticket/1187 > > Reason for Outage: > Maintenance of /mnt/koji filesystem, > koji DB Maintainence > Upgrade koji to support EPEL, noarch subpackages, srpm's built in a chroot. > along with lots of bug fixes. > > Contact Information: > > Please join #fedora-admin in irc.freenode.net or respond to this email to > track the status of this outage. Just a reminder that koji and plague will both be down for the entirety of this weekend. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Outage Notification - Koji, plague 2009-02-21 15:00 UTC
On Friday 13 February 2009 09:54:58 pm Dennis Gilmore wrote: > There will be an outage starting at 2009-02-21 15:00 UTC, which will last > approximately 48 hours. > > To convert UTC to your local time, take a look at > http://fedoraproject.org/wiki/Infrastructure/UTCHowto > or run: > > date -d '2009-02-21 15:00 UTC' > > Affected Services: > > Buildsystem (koji and plague) > > Unaffected Services: > CVS / Source Control > Database > DNS > Fedora Hosted > Fedora People > Fedora Talk > Mail > Mirror System > Torrent > Translation Services > Websites > > Ticket Link: > https://fedorahosted.org/fedora-infrastructure/ticket/1187 > > Reason for Outage: > Maintenance of /mnt/koji filesystem, > koji DB Maintainence > Upgrade koji to support EPEL, noarch subpackages, srpm's built in a chroot. > along with lots of bug fixes. > > Contact Information: > > Please join #fedora-admin in irc.freenode.net or respond to this email to > track the status of this outage. Just a reminder that koji and plague will both be down for the entirety of this weekend. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Outage Notification - Koji, plague 2009-02-21 15:00 UTC
There will be an outage starting at 2009-02-21 15:00 UTC, which will last approximately 48 hours. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2009-02-21 15:00 UTC' Affected Services: Buildsystem (koji and plague) Unaffected Services: CVS / Source Control Database DNS Fedora Hosted Fedora People Fedora Talk Mail Mirror System Torrent Translation Services Websites Ticket Link: https://fedorahosted.org/fedora-infrastructure/ticket/1187 Reason for Outage: Maintenance of /mnt/koji filesystem, koji DB Maintainence Upgrade koji to support EPEL, noarch subpackages, srpm's built in a chroot. along with lots of bug fixes. Contact Information: Please join #fedora-admin in irc.freenode.net or respond to this email to track the status of this outage. signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: rsync errors on secondary
On Friday 13 February 2009 04:01:44 am Adrian Reber wrote: > Since 2009-02-11 I get following errors syncing from > secondary.fedoraproject.org::fedora-secondary/ > > rsync: send_files failed to open > "/development/arm/os/Packages/.VLGothic-fonts-proportional-20080908-1.fc10. >noarch.rpm.pBjp2o" (in fedora-secondary): Permission denied (13) > > rsync: send_files failed to open > "/development/arm/os/Packages/.gcc-debuginfo-4.3.2-7.fa4.armv5tel.rpm.Hulh6 >2" (in fedora-secondary): Permission denied (13) > > rsync: send_files failed to open > "/development/arm/os/Packages/.gettext-devel-0.17-8.fc10.fa1.armv5tel.rpm.T >Hlo5A" (in fedora-secondary): Permission denied (13) > > Would be great if someone could delete those temporary files. > > Adrian removed thanks. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: change request: python-hashlib install on fedorapeople.org and new yum
On Wednesday 28 January 2009 02:42:35 pm seth vidal wrote: > in order to stop the rss feed generator from kvetching I'd like to > install the new python-hashlib and new yum pkgs (from rhel 5.3) on > fedorapeople. > > Can I get a couple of +1's? Amen, umm +1 :) Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: koji and package dependencies
On Thursday 08 January 2009 09:48:35 am Doug Reiland wrote: > Is this list the right place to ask koji releated questions? > > If so: > > I am playing with koji by setting up a local build system. > I have am able to do some examples like build the bash package. > > I am now attempting to setup a large collection of packages and wondering > about package dependencies and ordering. How do you prepare a koji-builder > system or is that taken care of? For example, if package X requires program > foo to build, do I need to be aware of this and make sure foo is on > koji-builder system. you need to have either built/imported all packages that you need to build against. and they need to be available via inheritance to the build tag. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: rsync errors on fedora-secondary
On Thursday 25 December 2008 01:56:45 am Adrian Reber wrote: > I get following rsync errors on syncing fedora-secondary on the last few > runs: > > rsync: send_files failed to open > "/development/sparc/os/images/.initrd.img.pupy3y" (in fedora-secondary): > Permission denied (13) rsync: send_files failed to open > "/releases/9/Everything/source/SRPMS/.supertuxkart-0.4-1.fc9.src.rpm.omf19j >" (in fedora-secondary): Permission denied (13) rsync: send_files failed to > open > "/releases/test/9-Beta/Fedora/source/SRPMS/.geronimo-specs-1.0-1.M2.2jpp.12 >.src.rpm.quHnuo" (in fedora-secondary): Permission denied (13) > > Maybe someone can delete those files. Thanks! > > Adrian Fixed, thanks for the heads up Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: noc1 moved house
On Tuesday 16 December 2008 07:27:08 pm Nigel Jones wrote: > Hi All, > > Just FYI, noc1 moved from xen2 to xen5 today which frees up xen1 and > xen2 to be dedicated for releng :) you mean releng/buildsys right? Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: OpenSuSE Buildsystem
On Tuesday 16 December 2008 10:48:48 am Mike McGrath wrote: > I've been talking with some of the SuSE guys and we agree there's some > overlap or at least coordination between their buildsystem and ours. The > first obvious low hanging fruit is common macros. For those who wonder > "why would we help OpenSuSE?" the answer is common goals, and better user > experiences. > > The problem is time and coordination. So on a whim I thought I'd send > this email out. Do we have any contributors out there who are both > members of Fedora and SuSE who would be willing to lead this charge, find > similarities and places for coordination? I think that common macros needs to be solved at rpm.org level. not a buildsystem level. koji has no say in any of the macros it uses what is defined inside the distro. the macros fedora uses are defined in rpm and redhat- rpm-config, the disttag macro is defined in fedora-release. I see great benefit to everyone by having that problem solved at the rpm.org level. it will make it much easier to pickup packages and fixes cross distro. that is not a bad thing. especially for ISV's and upstreams supporting all distros they only need to do the work once and build everywhere. Working directly with them to fix issues for there buildsystem however I feel causes some conflicts. namely it legitimises the use of there buildsystem for building fedora/RHEL packages. I know people use it and will continue to do so. but I would ask why? is there some service that fedora could provide and is not? is it because you can be lazy and sloppy in the packaging and it lets you? is it just being able to do it in a single place? We do need to get out of the business of running two buildsystems. we really do need to be able to build EPEL in koji. I have scheduled a koji hackfest for fudcon. so if your there and interested then come help. there is always #koji on freenode for discussion on koji, so if you cant make it in person you can be there virtually :) Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Custom planets / Fedora Art
On Thursday 11 December 2008 02:05:13 am Nicu Buculei wrote: > One of the reasons for the change of planet infrastructure (.planet user > files) was to enable the ability to create customized aggregators > (language based or interest based). AFAIK it was done only to make planet self service and to take the slow and tedious manual handling of out of the equation. > As I am not aware about any such customization deployed yet, here is my > question: what should I formally do for the creation of a "Planet Fedora > Art"[*] aggregation? I envision it as an aggregation of not only blogs > of the member of the Art team (some don't have their blogs on the main > Planet yet) but also other feeds, like from flickr/picasaweb/gallery or > YouTube/BlipTv. not sure if that could be done or how to do that. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change request
On Tuesday 25 November 2008 03:03:52 pm Mike McGrath wrote: > I need to add the following: > > AddType image/svg+xml .svg > AddType image/svg+xml .svgz > AddEncoding gzip .svgz > > > mod_gzip_on No > > > > Into a general config file for our app servers. At present it is in our > wiki config. This is causing problems for some of our docs sites that use > svg that are not on a machine that are on the wiki. +1 Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Informal survey
On Monday 24 November 2008 11:01:38 am Stephen John Smoogen wrote: > On Sat, Nov 22, 2008 at 11:36 AM, Mike McGrath <[EMAIL PROTECTED]> wrote: > > Hey guys, completely voluntary but I thought I'd ask because I'm curious > > > > For personal use, how many of you use something like linode or slicehost > > or an individual provider? > > > > If you do use a provider which one is it? > > > > > > For me, I do use one and I use slicehost. > > For those who are out of touch with this whole "new Internet thing" > what do you use these sites for? irc, personal site, email, dns, aurora's wiki and bugzilla, I also have a sparc mirror on it, and rent out space to some friends. and a few other things. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Bodhi 10k bug
On Saturday 22 November 2008 05:41:34 pm Luke Macken wrote: > As some of you may have noticed, the last batch of updates contained 209 > updates with the ID of 'FEDORA-2008-1'. This is is due to a flaw in > the way bodhi's PackageUpdate.assign_id() method finds the current update > with the highest id. Presently, it does a PackageUpdate.select(..., > orderBy=PackageUpdate.q.updateid). Since PackageUpdate.updateid is a > unicode column, and due to the fact that u'FEDORA-2008-1' < > u'FEDORA-2008-', this started to fail miserably. > > Attached is a patch that has the assign_id method order the query by the > date_pushed DateTimeCol in order to find the highest updateid. However, it > seems that SQLObject completely ignore milliseconds: > > if datetime: > def DateTimeConverter(value, db): > return "'%04d-%02d-%02d %02d:%02d:%02d'" % ( > value.year, value.month, value.day, > value.hour, value.minute, > value.second) > > The problem with this is that we must now take into account multiple > updates that were pushed at the same second. > > The "proper" way to fix this is at the model level, and probably to use an > integer for the updateid column. I'm in the process of finishing up the > SQLAlchemy port, which will properly solve this problem. In the mean time, > this hack will not require any database changes. > > This patch also includes a test case for this 10k bug. > > [EMAIL PROTECTED] bodhi]$ nosetests > bodhi/tests/test_model.py:TestPackageUpdate.test_id > . > -- > Ran 1 test in 0.084s > > OK > > Once approved and applied, I will push out a fixed package (to releng2 > only), fix the existing updates from the last push, and send out an errata > containing the new update IDs. > > +1's ? > > luke +1 ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Request [mod_rewrite/wiki]
On Saturday 22 November 2008 10:27:49 pm Nigel Jones wrote: > When proxy5 got added, the IP didn't get added to Mediawiki which meant > MW associated changes by anonymous users got credited to the proxy IP > address. ARGH! > > Last two patches fix it, and the first is just to fix a weird thing in > Apache's mod_rewrite. > > Can I get two amens? (+1s will do) > > - Nigel +1 Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Informal survey
On Saturday 22 November 2008 12:36:29 pm Mike McGrath wrote: > Hey guys, completely voluntary but I thought I'd ask because I'm curious > > For personal use, how many of you use something like linode or slicehost > or an individual provider? > > If you do use a provider which one is it? > > > For me, I do use one and I use slicehost. I have a dedicated server with cari.net Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Fwd: [Fedora-sysadmin-list] Web Security
forwarding to the correct list -- Forwarded Message -- Subject: [Fedora-sysadmin-list] Web Security Date: Friday 21 November 2008 From: "Damian Myerscough" <[EMAIL PROTECTED]> To: "Fedora Administration and Infrastructure project" Hello All, I have managed to get a bit of free time to create some simple rules for mod_security which would be suitable for the web servers which we are currently running. I have wrote some generic rules which should be compatible with all the web servers. However, we could write rules which are much stricter for the web applications that are hosted off the web servers. Let me know what people think about the rules that I have attached. Just a note, the final rule should point to maybe a security notice... it would currently just redirect users to fedoraproject.org. -- Regards, Damian Myerscough --- # Basic configuration options SecRuleEngine On SecRequestBodyAccess On SecResponseBodyAccess Off # Debug log SecDebugLog /var/log/httpd/modsec_debug.log SecDebugLogLevel 0 # Make sure URL Encoding/Decoding is valid SecFilterCheckURLEncoding On SecFilterCheckUnicodeEncoding On # Check POST payload SecFilterScanPOST On # Prevent XSS Attacks SecFilter "<(.|\n)+" # Prevent SQL injection SecFilter "(delete|insert)[[:space:]]+(from|into)" # Prevent SSI Injection SecFilter "\<\!--|#" # Filter out the keywords /bin, /etc and /usr SecFilter "/bin" SecFilter "/etc" SecFilter "/usr" # Maximum request body size we will accept for buffering SecRequestBodyLimit 131072 # Store up to 128 KB in memory SecRequestBodyInMemoryLimit 131072 # Buffer response bodies of up to 512 KB in length SecResponseBodyLimit 524288 # Set Server Signature SecServerSignature "Fedora Web Server" # Insepect the output for keywords "Defaced, hacked/h4cked, own/0wn" # Once a keyword has been detected then redirect them to somewhere and don't allow them to see the # defacers message SecFilterSelective OUTPUT "(deface|h[a4]ck]|[o0]wn\.)" deny,log,redirect:http://fedoraproject.org ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: change request (docs)
On Wednesday 12 November 2008 03:02:17 pm Mike McGrath wrote: > Karsten noticed this. Its a minor cange and minor problem but: > > http://docs.fedoraproject.org/selinux-guide > > Isn't redirecting properly, I need a proxypassreverse section in the docs > config. 2+1's? +1 ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Request Koji
On Wednesday 12 November 2008 12:39:38 pm Mike McGrath wrote: > On Wed, 12 Nov 2008, Dennis Gilmore wrote: > > inside of phx all machines are using koji2 for koji.fp.o koji2 is the > > new 32 bit guest. which is working fine except that it has 2gb ram. > > currently it is seeing a higher load than id like. > > > > 17:54:50 up 5 days, 22:11, 3 users, load average: 8.69, 6.68, 5.06 > > > > total used free sharedbuffers cached > > Mem: 20973282042660 54668 0 3868 704116 > > -/+ buffers/cache:1334676 762652 > > Swap: 2096472 2552241841248 > > > > its not heavily swapping but swapping enough. id like to change phx to > > point at koji1 when they are all back over to koji1 ill then take koji2 > > down allocate it 4gb ram koji1 has 8gb ram (and is 64 bit) then point > > everything inside phx back at koji2 > > > > koji1 has not been rebuilt yet as we are still waiting on load balancing > > to be setup. kojihub on koji1 is used only by people submitting builds. > > kojiweb and the builders are using koji2 as its hub. > > > > > > this change should have no visible user impact, but will lower the load > > on koji2. > > This one's tricky, whats the harm if we don't do it? Also whats the worst > impact this could have on the release? Right now koji is sluggish, if we do nothing it continues to remain sluggish and may hold up composes waiting for a build to finish. It could potentially use more ram than is available on xen2 and cause it to oom and bring down xen2 and its guests. xen2 has 3gb available so we should be ok. The first part of the change request will put things back to how they always were. everything on koji1. the second part will help koji2 perform better, i had meant to make the change before feature freeze and it crept up on me. when koji1 is rebuilt I plan to give it 4gb ram also. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Change Request Koji
inside of phx all machines are using koji2 for koji.fp.o koji2 is the new 32 bit guest. which is working fine except that it has 2gb ram. currently it is seeing a higher load than id like. 17:54:50 up 5 days, 22:11, 3 users, load average: 8.69, 6.68, 5.06 total used free sharedbuffers cached Mem: 20973282042660 54668 0 3868 704116 -/+ buffers/cache:1334676 762652 Swap: 2096472 2552241841248 its not heavily swapping but swapping enough. id like to change phx to point at koji1 when they are all back over to koji1 ill then take koji2 down allocate it 4gb ram koji1 has 8gb ram (and is 64 bit) then point everything inside phx back at koji2 koji1 has not been rebuilt yet as we are still waiting on load balancing to be setup. kojihub on koji1 is used only by people submitting builds. kojiweb and the builders are using koji2 as its hub. this change should have no visible user impact, but will lower the load on koji2. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Request: AWStats on log1
On Tuesday 11 November 2008 03:17:47 pm Mike McGrath wrote:
> On Tue, 11 Nov 2008, Ricky Zhou wrote:
> > AWStats has been going crazy on log1, so I'd like to make the cronjob
> > run less often, and on far fewer log files:
> >
> > diff --git a/modules/awstats/manifests/site.pp
> > b/modules/awstats/manifests/site.pp index 4df7974..6cb2944 100644
> > --- a/modules/awstats/manifests/site.pp
> > +++ b/modules/awstats/manifests/site.pp
> > @@ -1,5 +1,5 @@
> > define awstats::site($log_dir="proxy*", $record_redirects=false,
> > $record_query_string=false) { -file {
> > "/etc/cron.hourly/awstats.$name":
> > +file { "/etc/cron.daily/awstats.$name":
> > mode => 0755,
> > content => template('awstats/awstats.cron.erb'),
> > }
> > diff --git a/modules/awstats/templates/awstats.conf.erb
> > b/modules/awstats/templates/awstats.conf.erb index 66d2a66..931cbeb
> > 100644
> > --- a/modules/awstats/templates/awstats.conf.erb
> > +++ b/modules/awstats/templates/awstats.conf.erb
> > @@ -1,4 +1,4 @@
> > -LogFile="/usr/share/awstats/tools/logresolvemerge.pl /var/log/hosts/<%=
> > log_dir %>/*/*/*/http/<%= name %>-access.log |"
> > +LogFile="/usr/share/awstats/tools/logresolvemerge.pl /var/log/hosts/<%=
> > log_dir %>/%-24/%MM-24/%DD-24/http/<%= name %>-access.log |"
> > LogType=W
> > LogFormat=1
> > LogSeparator=" "
> >
> > Can I get two +1s for this?
>
> +1 from me, this is activly causing problems.
+1 for everyones sanity :)
Dennis
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change freeze request
On Tuesday 11 November 2008 12:57:46 pm Mike McGrath wrote: > We need to update httpd on our servers. I'm not totally ready for this > change yet but I'd like to get the approval for when its time. > +1 ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Change Request
Id like to enable creating static repos for dist-olpc4-build the patch bellow
is the change to the cronjob needed. Can I get a +1
diff --git a/configs/build/update-static-repos.py b/configs/build/update-static-
repos.py
index a6cd334..16ee6ac 100755
--- a/configs/build/update-static-repos.py
+++ b/configs/build/update-static-repos.py
@@ -4,7 +4,7 @@ import os
import sys
import koji
-TAGS = ('dist-olpc2-build', 'dist-olpc3-build', 'dist-f8-build', 'dist-f9-
build', 'dist-f10-build', 'dist-f11-build', 'dist-rawhide', 'olpc2-update1',
'olpc2-ship2')
+TAGS = ('dist-olpc2-build', 'dist-olpc3-build', 'dist-olpc4-build', 'dist-f8-
build', 'dist-f9-build', 'dist-f10-build', 'dist-f11-build', 'dist-rawhide',
'olpc2-update1', 'olpc2-ship2')
STATICPATH = '/mnt/koji/static-repos'
SUFFIX = '-current'
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: another rsync change
On Tuesday 11 November 2008 11:24:16 am Mike McGrath wrote: > Another borked host from the rsync changes yesterday. secondary1 just > needs to have rsync enabled in its xinetd.d/rsync file. > > +1? +1 since i use it Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change freeze request
On Tuesday 11 November 2008 10:28:23 am Mike McGrath wrote: > One of my changes yesterday had a typo in it. on cvs1 I'd like to change > line 14-15 from: > > [cvs] > path = /srv/cache/lookaside > > to > > [pkgs] > path = /cvs/pkgs/ > > 2+1's? +1 signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Freeze Breakage
On Tuesday 04 November 2008 12:41:44 pm Toshio Kuratomi wrote: > Dennis Gilmore wrote: > > Id like to get started on load balancing koji. First step will be a soc > > request to have koji's IP put on the load balancer. and pointed at koji1 > > and koji2 > > How will this affect people doing last minute rebuilds (I'm guessing it > should be transparent if koji2 works fine)? Is it easy to revert/work > around if something goes wrong? ill shut down koji1 and make sure things work off of koji2, if koji2 doesnt work right ill bring back koji1 and shut down koji2 > Since koji won't affect the distribution of the pre-release, I'm > inclined to say the sooner we do this the less disruptive it will be. > > > second step will be to rebuild koji1 as a 32 bit guest. this should be > > transparent to users since the existing koji2 will be up and serving > > builders/users. > > If we do the first part, this part gets my +1 We wont rebuild koji1 until we are sure koji2 is working correctly. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Freeze Breakage
On Tuesday 04 November 2008 10:36:47 am Mike McGrath wrote: > The freeze doesn't technically end until tomorrow but because of the small > window between this freeze and the next I'd like to get some bits done. > > > 1) Change the smolt api to point to its new location in > /var/www/smolt-wiki/ instead of /usr/share/mediawiki/ > > 2) fas-server update. This is a yum update with some testing. > > -Mike oh and +1 Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Freeze Breakage
On Tuesday 04 November 2008 10:36:47 am Mike McGrath wrote: > The freeze doesn't technically end until tomorrow but because of the small > window between this freeze and the next I'd like to get some bits done. > > > 1) Change the smolt api to point to its new location in > /var/www/smolt-wiki/ instead of /usr/share/mediawiki/ > > 2) fas-server update. This is a yum update with some testing. > > -Mike Id like to get started on load balancing koji. First step will be a soc request to have koji's IP put on the load balancer. and pointed at koji1 and koji2 second step will be to rebuild koji1 as a 32 bit guest. this should be transparent to users since the existing koji2 will be up and serving builders/users. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Using fedoraproject.org email addr in bugzilla?
On Wednesday 29 October 2008 05:08:32 am Michael Schwendt wrote: > I wonder whether it is possible to use a fedoraproject.org email > alias in bugzilla without decoupling it from FAS? no > The connection between a bugzilla account and a Fedora account is > based on the primary email address in FAS, right? So, if I update my > bugzilla preferences to use the fedoraproject mail alias, does that > disconnect my bugzilla account from FAS? Yes. if you use the @fedoraproject.org alias you will lose all of your privileges in bugzilla. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
oops sorry.
i forgot we are in the infrastructure freeze, and made a change. We were using the default koji-gc config file which sent out email from "Koji Build System <[EMAIL PROTECTED]>" i added the config to puppet and set the email to "Koji Build System <[EMAIL PROTECTED]>" can i please get a pair of +1's for this. and a slap for being bad. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: change freeze ruby update
On Tuesday 21 October 2008 11:42:48 am Mike McGrath wrote: > https://rhn.redhat.com/errata/RHSA-2008-0897.html > > Can I get 2 +1's to update ruby on all the servers? > > -Mike +1 ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [Fwd: Problem with ssh to fedorapeople.org]
On Tuesday 21 October 2008 01:14:02 pm Ignacio Vazquez-Abrams wrote: > For your consideration. passwd auth is not allowed. they need to use ssh key auth Dennis > Forwarded Message > > > From: [EMAIL PROTECTED] > > To: [EMAIL PROTECTED] > > Subject: Problem with ssh to fedorapeople.org > > Date: Tue, 21 Oct 2008 20:33:40 +0530 > > > > Hello, > > > > > > > > I am trying to ssh to fedorapeople.org to commit some of my packages > > which have been reviewed. > > > > The ssh session with fedorapeople.org refuses to accept my password. > > > > Can anyone help me with this. > > > > > > > > My details: > > > > > > > > Username: srini > > > > > > > > ssh [EMAIL PROTECTED] is what I am trying and the session denies > > my password although the password is keyed in correctly. > > > > > > > > Thanks in advance. > > > > Srini ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: func logrotate fix
On Sunday 28 September 2008 05:29:14 pm Mike McGrath wrote: > I'd like to implement the following global fix (its generating cron spam) > > in /etc/logrotate.d/func_rotate I'd like to change line 8 from > > /etc/init.d/funcd condrestart > > to > > /etc/init.d/funcd condrestart > /dev/null > > Can I get 2 +1's? +1 reducing un-needed spam is good Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Outage Notification - 2008-09-13 01:00 UTC
On Friday 12 September 2008 09:28:12 pm Dennis Gilmore wrote: > On Wednesday 10 September 2008 12:11:07 pm Dennis Gilmore wrote: > > > > Reason for Outage: > > update koji to 1.2.6. it will enable us to turn garbage collection back > > on. ok as a follow up there are a few quirks/bugs to be looked into. * browsing via ssl without a cert - you can only access https:// if you have a user cert installed in your browser. it would be nice for those that want to use ssl to be able to do so even if they are not a fedora contributor. * fixing it so that construct_url calls will work - the mod_python we have does not have the construct_url function , at the moment it means that the rss feed is broken. as well as login if you directly enter the login url. if you click login/logout it does work. * fixing so you dont get asked over and over for your user cert - while browsing you will be asked frequently to authenticate with your user cert. this has happened for awhile now if you browse using ssl. 1.2.6 now forces ssl browsing while logged in. so its much more obvious. Dennis ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Emergency update to kojiweb.conf
I just made a minor change to kojiweb.conf RewriteRule ^/koji/login$ https://koji.fedoraproject.org/koji/login koji-1.2.6 only allows you to use ssl when logged in. by rewriting the login you end up using https without the change a user would need to go to https before trying to login or they would get a traceback trying to login. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Outage Notification - 2008-09-13 01:00 UTC
On Wednesday 10 September 2008 12:11:07 pm Dennis Gilmore wrote: > There will be an outage starting at Y2008-09-13 01:00 UTC, which will > last approximately 1 hour. > > To convert UTC to your local time, take a look at > http://fedoraproject.org/wiki/Infrastructure/UTCHowto > or run: > > date -d '2008-09-13 01:00 UTC' > > Affected Services: > Buildsystem > > Unaffected Services: > Websites > Database > CVS / Source Control > DNS > Mail > Torrent > > > Ticket Link: > https://fedorahosted.org/fedora-infrastructure/ticket/830 > > Reason for Outage: > update koji to 1.2.6. it will enable us to turn garbage collection back > on. > > Contact Information: > > Please join #fedora-admin in irc.freenode.net or respond to this email > to track > the status of this outage. This work has been completed, all build services restored. Please report any unusual things that you see. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Outage Notification - 2008-09-13 01:00 UTC
There will be an outage starting at Y2008-09-13 01:00 UTC, which will last approximately 1 hour. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2008-09-13 01:00 UTC' Affected Services: Buildsystem Unaffected Services: Websites Database CVS / Source Control DNS Mail Torrent Ticket Link: https://fedorahosted.org/fedora-infrastructure/ticket/830 Reason for Outage: update koji to 1.2.6. it will enable us to turn garbage collection back on. Contact Information: Please join #fedora-admin in irc.freenode.net or respond to this email to track the status of this outage. signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: More puppet training!
On Monday 08 September 2008 10:16:28 am Mike McGrath wrote: > So I'm going to hold a couple more training seminars for Puppet in > Fedora's Infrastructure. I was hoping you guys could also throw some > questions together so i make sure I don't miss anything. Id like to know where should i put a script in the puppet tree. where should I put config files etc. what if its something needed on 2 systems that have different purposes should i create a new class? or just add it to each of the two groups?. but a shared group. that kind of thing. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Maintaining a partial cvs workarea
On Sunday 24 August 2008 04:16:33 pm Chris Weyl wrote: > 2008/8/24 Axel Thimm <[EMAIL PROTECTED]>: > > Hi, > > > > I'm keeping only a partial checkout of the packages, e.g. the ones I'm > > maintaining. Now I'd like to be able to cvs up and have all updates > > flow in, but if I do so cvs will want to get all other thousand > > packages in. > > > > Until now I'm using a poor man's solution with a for loop and > > pushd/popd, but it's extremely slow due to login in for each package. > > > > Is there a more clever way to get cvs up running w/o pulling in all of > > the cvsroot? I could probably manually edit CVS/Entries, but this feels > > a bit dirty. What are other packagers doing? > > With respect to the ssh logins required for each cvs operation, I tend > to use opportunistic connection multiplexing. e.g., in my > ~/.ssh/config I have: > > > ControlMaster auto > ControlPath ~/.ssh/sockets/%h_%p_%r_multi.sock > > Host cvs.fedora.redhat.com > Compression yes > CompressionLevel 3 > > > And then I just do a "ssh -f -N cvs.fedora.redhat.com". It > authenticates me once, then just kicks around in the background until > I perform a network operation though CVS, at which point the "new" > connection is routed through the existing one. If I haven't forked > off a connection to c.f.r.c, no biggie, ssh just connects per usual. > > This won't help with selectively pulling down CVS, but it should make > each operation a smidge faster :-) > > -Chris That shouldnt work with the Makefiles. since they all use cvs.fedoraproject.org not the old legacy address :) Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: EnableSendfile on koji
On Tuesday 29 July 2008, Matthew Galgoci wrote: > Can someone please check and let me know what the EnableSendfile setting is > on the koji apache configs? > > Thanks! there is no setting EnableSendfile in kojis apache configs -- Dennis Gilmore signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: [Fwd: Re: Announcing the Fedora EDU Spin Preview]
On Friday 11 July 2008, Jeffrey Ollie wrote: > 2008/7/11 Paul W. Frields <[EMAIL PROTECTED]>: > > Anyone have insight into this? > > The issue is that something in postfix on collab1 (where the > lists.fedoraproject.org mailing lists run) and/or bastion (which > serves as a central mail gateway) is rewriting > "@lists.fedoraproject.org" addresses in the message > headers to "@fedoraproject.org". When someone then tries > to reply to a mailing list post the message is bounced as > "@fedoraproject.org" is an invalid address. I don't have > enough postfix-fu to fix the problem and no one with enough postfix-fu > has had the time, access, and/or interest in fixing the problem. The issue is not postfix. the issue is mailman setting the replyto wrong. Even when i explicitly set the reply to correctly on the secondary arch list it is still wrong. > Until this problem is fixed I've been hesitant to create any (more) > lists.fedoraproject.org mailing lists. > > lists.fedorahosted.org has a similar problem, except that > "@fedorahosted.org" works due to some quirks of how > postfix interprets email addresses (AFAIK without a some hackery > postfix can't treat "@lists." differently from "@"). im pretty sure it only works because lists.fedorahosted.org and fedorahosted.org are on the same box. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Fedoranews.org - Old blog still online
On Friday 27 June 2008, Gianluca Varisco wrote: > Hi guys, > > Due to FedoraNews [ http://fedoranews.org/blog/ ] old blog platform > still public, I think that would be better to update it (actually using > a very old version of WordPress released on June 29th 2005: 1.5.1.3) or > put it off-line. > > The reasons? > > # http://secunia.com/product/3978/?task=advisories > > # 1.5.x branch is unmaintained, as it's the legacy 2.0. > > I'm CC:ing Thomas Chung, as he's also the domain maintainer. > > Best Regards, That would be all Thomas, it is not a fedora infrastructure controlled domain. -- Dennis Gilmore signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Logging #fedora-meeting
On Tuesday 27 May 2008, Mike McGrath wrote: > There's been some requests to log #fedora-meeting automatically. There's > technical issues there like where to store them, is there a way to auto > start / stop meetings, etc. > > Lets discuss. thoughts? A bot that you can issue commands to such as startmeeting , endmeeting. and postmeeting would be good. It would really want a very limited set of commands. we would need a host for the bots to run on. then we could export meetings via http. Dennis. signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: F10?
On Monday 19 May 2008, Mike McGrath wrote: > So F9 is out the door and we had a very exciting last 6 months. Here's > the short list: > > * FAS2 > * /mnt/koji migration and deployment > * Backup system up and running > * Collaboration servers brought up (gobby and asterisk POC) > * UTC switch > > The focus for this last release was mostly around sanity. Cleaning up > some configs, things like that. We actually did a very good job of that. > > All in all I feel it was a good release. So my question to the team, what > would you all like to see over the next 6 months? new ca infrastructure. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Disk Space Issues - cvs-int/build hosts - (includes general note on Nagios Disk notifications)
On Tuesday 13 May 2008, Nigel Jones wrote: > Hey guys, > > I seem to have deleted the nagios notification that I want to mention in > particular, but as I noted in SOP/Nagios the %ages noted in the e-mails > are what is left, so inode=99% doesn't mean that 99% of the inodes are > used, it means 99% are still free. > > Anyway, what this means, is that when nagios has been complaining about > cvs-int recently, in particular the fact that /git has reached WARNING. > After a bit of hunting around, I found /repo/pkgs using 168GiB of the > 192GiB available, which is understandable, Fedora has got huge. > > Problem here, is that there are a LOT of old tarballs in that folder, > which leaves me wondering if we should do a spring clean ~1 mo after > release. We already have plans to move the lookaside cache to the netapp. at least that was the last plan i was aware of. > Diskspace isn't cheap, so I like delete old tarballs, I also like this > option because it's not like they disappear completely, they should be > in the src.rpm's already on archive.fp.o and if we accidentally delete 1 > or 2 that are still needed, well grab it from src.rpm... > > This leads on to my second item... > > xenbuilder2 has run out of diskspace in /, it's down to 32M, thankfully > koji has disabled it so it's safe for now, but wouldn't it be nice to > throw say a 50GB partition dedicated solely for /var/lib/mock & > /mnt/build? Yes, yes, I know money, but once again, builds are getting > bigger so 'it'd be nice'. xenbuilder1 and hammer2 are the oldest boxes we have in the buildsystem. closely followed by ppc1 xenbuilder2 is also quite an old box now. im cleaning up /var/lib/mock on xenbuilder2 now. failed builds dont get cleaned up automatically. we probably should reap them more often. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change request: add dist-f10-build as a static repo
On Monday 12 May 2008, Jesse Keating wrote:
> When we created the dist-f10 build targets I forgot to create a
> corresponding static-repo for it. This diff will create one, and allow
> people who are working on F10 actually be able to populate buildroots
> from the f10 content and match koji.
>
> RCS file: /cvs/puppet/configs/build/update-static-repos.py,v
> retrieving revision 1.4
> diff -u -r1.4 update-static-repos.py
> --- build/update-static-repos.py 14 Mar 2008 03:17:42 - 1.4
> +++ build/update-static-repos.py 12 May 2008 14:20:38 -
> @@ -4,7 +4,7 @@
> import sys
> import koji
>
> -TAGS = ('dist-olpc2-build', 'dist-fc7-build', 'dist-f8-build',
> 'dist-f9-build', 'dist-rawhide', 'olpc2-trial3', 'olpc2-update1',
> 'olpc2-ship2')
> +TAGS = ('dist-olpc2-build', 'dist-fc7-build', 'dist-f8-build',
> 'dist-f9-build', 'dist-f10-build', 'dist-rawhide', 'olpc2-trial3',
> 'olpc2-update1', 'olpc2-ship2')
> STATICPATH = '/mnt/koji/static-repos'
> SUFFIX = '-current'
I forgot to add one for dist-olpc3-build when i set it up. can we add it
also ?
we can drop olpc2-trial3
Dennis
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: xen5 change request
On Thursday 08 May 2008, seth vidal wrote: > On Thu, 2008-05-08 at 12:33 -0500, Dennis Gilmore wrote: > > On Thursday 08 May 2008, seth vidal wrote: > > > On Thu, 2008-05-08 at 11:58 -0500, Dennis Gilmore wrote: > > > > prior to the network maintenance outage, we had puppet disbaled on > > > > xen5 and iptables stopped. as an interim measure i would like to > > > > return to that state so that backups will run again. longer term, we > > > > need to adjust iptables. > > > > > > > > But for right now just wanting to do the minimum to have backups > > > > functioning again. nothing else runs on xen5 so its low impact. > > > > > > what else is running on xen5? > > > > just bacula > > Then I'd say +1. > -sv Done Thanks Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: xen5 change request
On Thursday 08 May 2008, seth vidal wrote: > On Thu, 2008-05-08 at 11:58 -0500, Dennis Gilmore wrote: > > prior to the network maintenance outage, we had puppet disbaled on xen5 > > and iptables stopped. as an interim measure i would like to return to > > that state so that backups will run again. longer term, we need to > > adjust iptables. > > > > But for right now just wanting to do the minimum to have backups > > functioning again. nothing else runs on xen5 so its low impact. > > what else is running on xen5? just bacula [EMAIL PROTECTED] ~]# xm list Name ID Mem(MiB) VCPUs State Time(s) Domain-0 0 3886 2 r- 3431.6 [EMAIL PROTECTED] ~]# ps axf PID TTY STAT TIME COMMAND 1 ?Ss 0:03 init [3] 2 ?S 0:00 [migration/0] 3 ?SN 0:00 [ksoftirqd/0] 4 ?S 0:00 [watchdog/0] 5 ?S 0:00 [migration/1] 6 ?SN 0:00 [ksoftirqd/1] 7 ?S 0:00 [watchdog/1] 8 ?S< 0:00 [events/0] 9 ?S< 0:00 [events/1] 10 ?S< 0:00 [khelper] 11 ?S< 0:00 [kthread] 13 ?S< 0:00 \_ [xenwatch] 14 ?S< 0:00 \_ [xenbus] 17 ?S< 0:00 \_ [kblockd/0] 18 ?S< 0:00 \_ [kblockd/1] 19 ?S< 0:00 \_ [kacpid] 125 ?S< 0:00 \_ [cqueue/0] 126 ?S< 0:00 \_ [cqueue/1] 130 ?S< 0:00 \_ [khubd] 132 ?S< 0:00 \_ [kseriod] 194 ?S 0:00 \_ [pdflush] 195 ?S 0:00 \_ [pdflush] 196 ?S< 0:00 \_ [kswapd0] 197 ?S< 0:00 \_ [aio/0] 198 ?S< 0:00 \_ [aio/1] 336 ?S< 0:00 \_ [kpsmoused] 377 ?S< 0:00 \_ [scsi_eh_0] 378 ?S< 0:00 \_ [scsi_eh_1] 391 ?S< 0:00 \_ [ksnapd] 396 ?S< 0:00 \_ [md2_raid1] 399 ?S< 0:00 \_ [md1_raid1] 402 ?S< 0:00 \_ [md0_raid1] 407 ?S< 0:00 \_ [kjournald] 434 ?S< 0:00 \_ [kauditd] 869 ?S< 0:00 \_ [ata/0] 870 ?S< 0:00 \_ [ata/1] 871 ?S< 0:00 \_ [ata_aux] 884 ?S< 0:00 \_ [kedac] 946 ?S< 0:00 \_ [scsi_eh_2] 1420 ?S< 0:00 \_ [scsi_eh_3] 2140 ?S< 0:02 \_ [md3_raid5] 2152 ?S< 0:00 \_ [kmpathd/0] 2153 ?S< 0:00 \_ [kmpathd/1] 2177 ?S< 0:00 \_ [kjournald] 2179 ?S< 0:05 \_ [kjournald] 2335 ?S< 0:00 \_ [ib_mcast] 2339 ?S< 0:00 \_ [local_sa] 2343 ?S< 0:00 \_ [ib_addr_wq] 2347 ?S< 0:00 \_ [iw_cm_wq] 2352 ?S< 0:00 \_ [ib_cm/0] 2353 ?S< 0:00 \_ [ib_cm/1] 2357 ?S< 0:00 \_ [rdma_cm_wq] 2815 ?S< 0:00 \_ [scsi_eh_4] 2816 ?S< 0:00 \_ [scsi_wq_4] 3016 ?SN 0:36 \_ [kipmi0] 463 ?Shttps://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
xen5 change request
prior to the network maintenance outage, we had puppet disbaled on xen5 and iptables stopped. as an interim measure i would like to return to that state so that backups will run again. longer term, we need to adjust iptables. But for right now just wanting to do the minimum to have backups functioning again. nothing else runs on xen5 so its low impact. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: change request (CROND)
On Tuesday 06 May 2008, Mike McGrath wrote: > This weekends outage we disabled crond on a bunch of the boxes. We forgot > to re-enable them on a few. I'd like to enable them. > > Risk: Moderate > > I can't think of anything that'd break per-say.. Its just a couple of > boxes though. None of them in Fedora's critical path except for our > torrent server. > > anyone want to +1? > +1 cron is pretty important Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: archive.fp.o
On Monday 05 May 2008, seth vidal wrote: > Hey folks, > The machine at bu is all setup, kickstarted, puppetized and the data > from archives.fp.o has been xferred to it. I'd like to get a +1 to the > following changes: > > 1. cname archives.fp.o -> archive.fp.o > 2. delete all the archives.fp.o stuff in puppet > 3. figure out where to get the rest of the data from for fc2,3,4,5,6, > etc and put it over there. > > the risk is extremely low here b/c, well, this is not a critical server. > > thanks, > -sv +1 from me Jesse has copies of everything. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Request: Setup Awstats for download.fp.o (and fix the torrent.fp.o one)
On Saturday 03 May 2008, Jesse Keating wrote: > On Sun, 2008-05-04 at 12:46 -0400, Ricky Zhou wrote: > > It'd be really useful to have awstats track download.fp.o and > > torrent.fp.o. Normally, I wouldn't mention this until after the change > > freeze, but it's really low risk, and we could use this to get a lot of > > valuable statistics during the mass downloading following the release. > > I don't think download.fp.o is in the config yet, and torrent.fp.o is at > > http://fedoraproject.org/awstats/torrent/, but it doesn't seem to be > > working (no stats). > > > > Thanks, > > Ricky > > ___ > > Fedora-infrastructure-list mailing list > > Fedora-infrastructure-list@redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > Unless something has changed with awstats, as long as you have the old > log files around you can always process previous times to get past info. > So perhaps all we need to change is to make sure we have the log files > and don't remove them. Then later we can process them with awstats. I agree with Jesse here. lets process the logs post release. Just need to ensure we still have them. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change Request: Modify apache config on publictest10 for Transifex testing
On Wednesday 30 April 2008, Ricky Zhou wrote: > I'd like to modify the Apache configs on publictest10 so that Diego can > have a separate test instance of Transifex running. The change would > look something like this (in > /etc/httpd/conf.d/publictest10.fedoraproject.org/transifex.conf): > > ProxyPass /submit-diegobz http://localhost:8089/submit-diegobz > ProxyPassReverse /submit-diegobz http://localhost:8089/submit-diegobz > > > Header unset Set-Cookie > > > Thanks, > Ricky +! from me Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change request
On Tuesday 29 April 2008, Mike McGrath wrote: > On Tue, 29 Apr 2008, Bill Nottingham wrote: > > Mike McGrath ([EMAIL PROTECTED]) said: > > > > Assuming we're not going to run out of space once we have 2/3/4 > > > > secondary arches, +1. > > > > > > Actually I have no space requirements for anything other then ia64 > > > right now so I cannot say whether we will or won't run out of space for > > > the other arches. > > > > Do we want to spec out for this build (ia64 requirements) x 3? Do we > > have that sort of space available? > > Not sure if we do or not. Dennis, is ia64 the benchmark for secondary > archs? Can we just multiply it * 3? Also what are the updates > requirements / release for these archs? +1 from me as far as requirements sparc/sparc64 will be ~ same as ppc/ppc64 ia64, alpha, arm should be close to i386 s390 im not sure but im guessing similar to sparc unless they only build for s390x and drop support for s390 though alpha, arm, and s390 lag behind sparc which is behind ia64. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Koji backups
On Tuesday 29 April 2008, Mike McGrath wrote: > We now have all the tapes we need to do koji backups of /mnt/koji. Can I > get a +1? +1 and the backup has started Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: get.fedoraproject.org -> fedoraproject.org/get-fedora
On Monday 28 April 2008, Mike McGrath wrote: > There's been a request to redirect get.fedoraproject.org to /get-fedora > (pauls request) > > Can I get a +1? > > -Mike +1 ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change freeze tomorrow!
On Monday 28 April 2008, Mike McGrath wrote: > Just a reminder... The real change freze starts tomorrow. If you've got > something to do... DO IT! :) I did just update the epel mock configs. we really have RHEL updates in the epel buildroots now. Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change requests
On Thursday 24 April 2008, Mike McGrath wrote: > I'd like to complete the following changes. > > Ticket 333: spam headers on bastion +1 > Ticket 54: move to postgres on bastion +1 i assume you mean postfix > Ticket 280: move dhcp from lockbox to somewhere else. +1 also.i hope lockbox can die soon Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: configs/build/mock epel-4-i386-extras.cfg, 1.1, 1.2 epel-4-ppc-extras.cfg, 1.1, 1.2 epel-4-x86_64-extras.cfg, 1.1, 1.2 epel-5-i386-extras.cfg, 1.1, 1.2 epel-5-ppc-extras.cfg, 1.1, 1.2 epel-5-x86_6
On Thursday 24 April 2008, Jeffrey Ollie wrote: > On Thu, Apr 24, 2008 at 1:28 PM, Dennis Gilmore <[EMAIL PROTECTED]> wrote: > > --- epel-4-i386-extras.cfg 18 Apr 2007 19:55:07 - 1.1 > > +++ epel-4-i386-extras.cfg 24 Apr 2008 18:28:52 - 1.2 > > @@ -43,10 +43,9 @@ > > name=core > > baseurl=file:///mnt/ntap-fedora1/scratch/RHEL4/en/os/RPMS/i386/ > > > > -# We dont have an updates tree but probably should add it > > -#[updates-released] > > -#name=updates > > -#baseurl=file:///pub/fedora/linux/core/updates/5/i386/ > > +[updates-released] > > +name=updates > > +baseurl=file:///pub/fedora/linux/core/updates/5/i386/ > > Shouldn't these be pointing to the version 4 updates? They were completely wrong i'm fixing now Dennis signature.asc Description: This is a digitally signed message part. ___ Fedora-infrastructure-list mailing list Fedora-infrastructure-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
Re: Change freeze request: Add zh_CN on fedorahosted.org
On Saturday 19 April 2008, Mike McGrath wrote:
> On Sat, 19 Apr 2008, Ricky Zhou wrote:
> > I'd like to add zh_CN (and a few other languages) to the fedorahosted
> > site (they're currently listed on the site, but does not work without
> > these apache conf changes).
> >
> > Index: languages.conf
> > ===
> > RCS file: /cvs/puppet/configs/web/fedorahosted.org/languages.conf,v
> > retrieving revision 1.4
> > diff -u -r1.4 languages.conf
> > --- languages.conf 9 Mar 2008 20:40:18 - 1.4
> > +++ languages.conf 19 Apr 2008 16:58:31 -
> > @@ -4,22 +4,29 @@
> > AddLanguage de .de
> > AddLanguage el .el
> > AddLanguage en .en
> > +AddLanguage es .es
> > +AddLanguage hu .hu
> > +AddLanguage id .id
> > AddLanguage it .it
> > AddLanguage pl .pl
> > +AddLanguage ru .ru
> > +AddLanguage sr .sr
> > AddLanguage pt-br .pt_BR
> > +AddLanguage zh-cn .zh_CN
> >
> > LanguagePriority en
> > ForceLanguagePriority Prefer Fallback
> >
> > RewriteEngine on
> > -RewriteCond %{QUERY_STRING} ^lang=(bal|de|el|en|it|pl|pt_BR)$
> > -RewriteRule ^/web(?:/(?:bal|de|el|en|it|pl|pt_BR))?(/.*)$ /web/%1$1?
> > [R=301]
> > -AliasMatch ^/web(?:/(?:bal|de|el|en|it|pl|pt_BR))(/.*)?$
> > /srv/web/fedorahosted.org$1
> > +RewriteCond %{QUERY_STRING}
> > ^lang=(bal|de|el|en|es|hu|id|it|pl|ru|sr|pt_BR|zh_CN)$
> > +RewriteRule
> > ^/web(?:/(?:bal|de|el|en|es|hu|id|it|pl|ru|sr|pt_BR|zh_CN))?(/.*)$
> > /web/%1$1? [R=301]
> > +AliasMatch
> > ^/web(?:/(?:bal|de|el|en|es|hu|id|it|pl|ru|sr|pt_BR|zh_CN))(/.*)?$
> > /srv/web/fedorahosted.org$1
> >
> >
> >Options MultiViews
> >
> > - SetEnvIf Request_URI ^/web/(bal|de|el|en|it|pl)/ prefer-language=$1
> > + SetEnvIf Request_URI ^/web/(bal|de|el|en|es|hu|id|it|pl|ru|sr)/
> > prefer-language=$1
> >SetEnvIf Request_URI ^/web/pt_BR/ prefer-language=pt-br
> > + SetEnvIf Request_URI ^/web/zh_CN/ prefer-language=zh-cn
> >
>
> +1 to this.
>
> -Mike
+1 from me also
Dennis
signature.asc
Description: This is a digitally signed message part.
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
