Re: [foreman-dev] Getting Foreman and Smart-Proxy to run in FIPS environment.

2017-11-20 Thread Dmitri Dolguikh
On Mon, Nov 20, 2017 at 2:05 AM, Lukas Zapletal wrote: > Perhaps - can you bit elaborate the GDB > thing? Is this some kind of hook that use used for FIPS stack to > report "mistakes" (e.g. signal or exception when you attempt to use > md5 hash)? I wonder if there is a way to catch these without

Re: Re: Re: [foreman-dev] Re: 1.15.4 - 1.16 RC.1 - 1.17 status

2017-11-20 Thread Ivan Necas
po 20. 11. 2017 v 13:36 odesílatel Daniel Lobato Garcia napsal: > On 11/20, Ohad Levy wrote: > > On Sun, Nov 19, 2017 at 10:35 PM, Ewoud Kohl van Wijngaarden < > > ew...@kohlvanwijngaarden.nl> wrote: > > > > > On Sun, Nov 19, 2017 at 11:27:57AM +0200, Ohad Levy wrote: > > > > > >> > > >> Can anyo

Re: [foreman-dev] Foreman instrumentation for telemetry proposal

2017-11-20 Thread Bryan Kearney
How would folks disable it opt out of sending this data? On Nov 20, 2017 9:46 AM, "Lukas Zapletal" wrote: > Hey, > > on the last demo I presented my proposal for telemetry (it is actually > a separate video). I am looking for non-intrusive approach with broad > integration possibilities: > > htt

[foreman-dev] Foreman instrumentation for telemetry proposal

2017-11-20 Thread Lukas Zapletal
Hey, on the last demo I presented my proposal for telemetry (it is actually a separate video). I am looking for non-intrusive approach with broad integration possibilities: https://www.youtube.com/watch?v=gCLSI9-4QpE This was also showed on our demo last week (the same content): https://www.yout

Re: Re: Re: [foreman-dev] Re: 1.15.4 - 1.16 RC.1 - 1.17 status

2017-11-20 Thread Ohad Levy
On Mon, Nov 20, 2017 at 2:36 PM, Daniel Lobato Garcia wrote: > On 11/20, Ohad Levy wrote: > > On Sun, Nov 19, 2017 at 10:35 PM, Ewoud Kohl van Wijngaarden < > > ew...@kohlvanwijngaarden.nl> wrote: > > > > > On Sun, Nov 19, 2017 at 11:27:57AM +0200, Ohad Levy wrote: > > > > > >> > > >> Can anyone

Re: Re: Re: [foreman-dev] Re: 1.15.4 - 1.16 RC.1 - 1.17 status

2017-11-20 Thread Daniel Lobato Garcia
On 11/20, Ohad Levy wrote: > On Sun, Nov 19, 2017 at 10:35 PM, Ewoud Kohl van Wijngaarden < > ew...@kohlvanwijngaarden.nl> wrote: > > > On Sun, Nov 19, 2017 at 11:27:57AM +0200, Ohad Levy wrote: > > > >> > >> Can anyone shed some light on ETA for 1.16 GA? > >> > >> > > I should have given an update

Re: [foreman-dev] CDN for the theforeman.org

2017-11-20 Thread Evgeni Golov
FWIW, deb.d.o runs on a custom LE cert, not on a wildcard, so you can't really compare that. And cdn-fastly.deb.debian.org (which is the "real" Fastly host apt hits) does not have SSL enabled at all. On Mon, Nov 20, 2017 at 11:58 AM, Greg Sutcliffe wrote: > On 20/11/17 10:08, Lukas Zapletal wrote

Re: [foreman-dev] CDN for the theforeman.org

2017-11-20 Thread Greg Sutcliffe
On 20/11/17 10:08, Lukas Zapletal wrote: > Great, thanks. Before moving on, I'd check if yum/deb accepts these > kind of certificates. I *think* so, but I've heard from security guys > they don't like these certs at all :-) Thanks for the heads up, good to know. I believe Fastly is used by the Deb

Re: [foreman-dev] CDN for the theforeman.org

2017-11-20 Thread Lukas Zapletal
Great, thanks. Before moving on, I'd check if yum/deb accepts these kind of certificates. I *think* so, but I've heard from security guys they don't like these certs at all :-) LZ On Fri, Nov 17, 2017 at 4:14 PM, Greg Sutcliffe wrote: > Hi all, > > I've signed the contact with our newest sponsor

Re: [foreman-dev] Koji repo sync metadata problem

2017-11-20 Thread Lukas Zapletal
Sorry we had public holiday here. We use mirrorselect with mrepo, sometimes it can pick slower mirror. Would be safer to pick particular mirrors if we plan to sync regularly, ideally something within AWS datacenters if there's any. LZ On Fri, Nov 17, 2017 at 4:53 PM, Eric D Helms wrote: > The u

Re: [foreman-dev] Getting Foreman and Smart-Proxy to run in FIPS environment.

2017-11-20 Thread Lukas Zapletal
Thanks for proposal. I have no comments on our findings, looks like a good approach to the problem. Perhaps - can you bit elaborate the GDB thing? Is this some kind of hook that use used for FIPS stack to report "mistakes" (e.g. signal or exception when you attempt to use md5 hash)? I wonder if the

Re: Re: [foreman-dev] Re: 1.15.4 - 1.16 RC.1 - 1.17 status

2017-11-20 Thread Ohad Levy
On Sun, Nov 19, 2017 at 10:35 PM, Ewoud Kohl van Wijngaarden < ew...@kohlvanwijngaarden.nl> wrote: > On Sun, Nov 19, 2017 at 11:27:57AM +0200, Ohad Levy wrote: > >> >> Can anyone shed some light on ETA for 1.16 GA? >> >> > I should have given an update earlier. > > So far we've been wanting to inc

Re: [foreman-dev] Discourse summary week 2 (ish)

2017-11-20 Thread Ohad Levy
+1 On Fri, Nov 17, 2017 at 10:54 PM, Dmitri Dolguikh wrote: > Another +1 from me -- quite like the UI, email integration seems to be (or > will be?) good enough. As long as the amount of maintenance isn't too big, > I think the move is a good idea. > -d > > On Wed, Nov 15, 2017 at 7:05 AM, John