Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Jeroen van Meeuwen
Nigel Jones wrote: On Wed, 2008-08-27 at 21:52 -0700, Jesse Keating wrote: On Wed, 2008-08-27 at 21:44 -0700, Jesse Keating wrote: Comments? One comment just made on IRC by G: G f13: can't be allow masher to sudo to ftpsync and run a sync command? G = $me :) We would have to allow masher

Re: hello

2008-08-28 Thread Amitakhya Phukan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Amitakhya Phukan wrote: Mike McGrath wrote: On Wed, 2 Jul 2008, Amitakhya Phukan wrote: hi people! i was away for a long time and now i am back. i am looking forward to contributing to fedora infrastructure now and am looking for some work :)

Re: Introductions

2008-08-28 Thread Mike McGrath
On Wed, 27 Aug 2008, Mike Watters wrote: Hello, I have applied to the sysadmin group and would like to give you an overview my experience. I have been a systems admin or security analyst for 12 years at 3 major worldwide (US based) companies. the majority of the time I was a systems admin

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Mike McGrath
On Wed, 27 Aug 2008, Jesse Keating wrote: So I realized something last night. We created a user masher to have the ability to write to /mnt/koji/mash/ but not any of the other koji space. This is useful to prevent too much damage from a horribly wrong rawhide compose. To make things easier

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Seth Vidal
On Thu, 2008-08-28 at 08:42 -0500, Mike McGrath wrote: On Wed, 27 Aug 2008, Jesse Keating wrote: So I realized something last night. We created a user masher to have the ability to write to /mnt/koji/mash/ but not any of the other koji space. This is useful to prevent too much damage

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Jesse Keating
On Thu, 2008-08-28 at 11:57 +0200, Jeroen van Meeuwen wrote: You could configure sudoers to allow the masher user to only be able to execute whatever it sudo's as the ftpsync user: masher hostname.domain.tld=(ftpsync) NOPASSWD: rsync $rsync_opts foo.wildcardmatch-source bar Does that

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Jesse Keating
On Thu, 2008-08-28 at 08:52 +0200, Xavier Lamien wrote: yeah, you can easily do that by invoking : /bin/mail -r From_adress hope that mailx is up to date ;) Looks like that's not working in EL5. Pitty. -- Jesse Keating Fedora -- FreedomĀ² is a feature! identi.ca: http://identi.ca/jkeating

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Seth Vidal
On Thu, 2008-08-28 at 09:22 -0700, Jesse Keating wrote: On Thu, 2008-08-28 at 08:52 +0200, Xavier Lamien wrote: yeah, you can easily do that by invoking : /bin/mail -r From_adress hope that mailx is up to date ;) Looks like that's not working in EL5. Pitty. a simple python script to do

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Jeffrey Ollie
On Thu, Aug 28, 2008 at 11:27 AM, Seth Vidal [EMAIL PROTECTED] wrote: On Thu, 2008-08-28 at 09:22 -0700, Jesse Keating wrote: On Thu, 2008-08-28 at 08:52 +0200, Xavier Lamien wrote: yeah, you can easily do that by invoking : /bin/mail -r From_adress hope that mailx is up to date ;) Looks

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Till Maas
On Thu August 28 2008, Jesse Keating wrote: On Thu, 2008-08-28 at 08:52 +0200, Xavier Lamien wrote: yeah, you can easily do that by invoking : /bin/mail -r From_adress hope that mailx is up to date ;) Looks like that's not working in EL5. Pitty. This works for me on CentOS 5, after the --

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Xavier Lamien
2008/8/28 Jesse Keating [EMAIL PROTECTED] On Thu, 2008-08-28 at 08:52 +0200, Xavier Lamien wrote: yeah, you can easily do that by invoking : /bin/mail -r From_adress hope that mailx is up to date ;) Looks like that's not working in EL5. Pitty. hm... is installed rhel-5.2 working with

Re: Introductions

2008-08-28 Thread Toshio Kuratomi
Mike Watters wrote: Hello, I have applied to the sysadmin group and would like to give you an overview my experience. I have been a systems admin or security analyst for 12 years at 3 major worldwide (US based) companies. the majority of the time I was a systems admin for Solaris, AIX I

Re: Strange popen behavior on xen builders?

2008-08-28 Thread Orion Poplawski
Orion Poplawski wrote: Orion Poplawski wrote: Filed bug #459442 as I have a simple test case. Once everything is back up we can test again. It appears that the pipe2 syscall on the x86_64 xen kernels is broken and that rawhide glibc has moved to using pipe2 from pipe in rawhide. This

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Bill Nottingham
Jesse Keating ([EMAIL PROTECTED]) said: So I realized something last night. We created a user masher to have the ability to write to /mnt/koji/mash/ but not any of the other koji space. This is useful to prevent too much damage from a horribly wrong rawhide compose. To make things easier

Re: rawhide, /mnt/koji and /pub/fedora

2008-08-28 Thread Mike McGrath
On Thu, 28 Aug 2008, Bill Nottingham wrote: Jesse Keating ([EMAIL PROTECTED]) said: So I realized something last night. We created a user masher to have the ability to write to /mnt/koji/mash/ but not any of the other koji space. This is useful to prevent too much damage from a horribly

New Key Repo Locations

2008-08-28 Thread Warren Togami
This is the latest draft of New Key repo locations. Jesse Keating points out that the deep levels are necessary because mirrors exclude releases by directory name like 9/. Please let me know if you see any errors in the below. Release Before (no yum repo file)

publictest15

2008-08-28 Thread Mike McGrath
Publictest15 is up and ready. If you were using publictest10, start getting your stuff set back up on publictest15. If you need things restored create a ticket and let us know what and why. Remember, the pt servers don't get backed up, you should never be storing info there where it is the only

Re: New Key Repo Locations

2008-08-28 Thread Jeroen van Meeuwen
Warren Togami wrote: This is the latest draft of New Key repo locations. Jesse Keating points out that the deep levels are necessary because mirrors exclude releases by directory name like 9/. Please let me know if you see any errors in the below. If 9/ is excluded, wouldn't that mean

Re: New Key Repo Locations

2008-08-28 Thread Jon Stanley
Sorry for the top post, I'm on my crackberry. We need to male sure to CLEARLY communicate this to mirror admins. I'm sure that more than 1 excludes releases/9/ since it is considered to be static content after release in order to reduce the number of files for rsync to consider. On 8/28/08,

Re: New Key Repo Locations

2008-08-28 Thread Jesse Keating
On Thu, 2008-08-28 at 20:12 -0400, Jon Stanley wrote: Sorry for the top post, I'm on my crackberry. We need to male sure to CLEARLY communicate this to mirror admins. I'm sure that more than 1 excludes releases/9/ since it is considered to be static content after release in order to reduce the

Re: New Key Repo Locations

2008-08-28 Thread Jeroen van Meeuwen
Jesse Keating wrote: On Fri, 2008-08-29 at 01:51 +0200, Jeroen van Meeuwen wrote: If 9/ is excluded, wouldn't that mean 9/$releasever/*/os.newkey is also excluded? If it's not, then I guess there's no point in the new directory being created either. Yes, if 9 is excluded (or included) that

Re: New Key Repo Locations

2008-08-28 Thread Jesse Keating
On Fri, 2008-08-29 at 02:32 +0200, Jeroen van Meeuwen wrote: I'm not sure how that solves the net install use case, especially if mirrormanager is going to redirect to os.newkey/, as signatures used on os.newkey/ packages will not meet what the installer expects the signature to be on these