Re: Bugzilla components of retired packages

2015-04-02 Thread Pierre-Yves Chibon
On Wed, Apr 01, 2015 at 05:02:35PM -0500, Michael Cronenworth wrote: On 04/01/2015 03:29 PM, Cole Robinson wrote: But if someone from pkgdb side could give an example of how to query for fully retired packages, that would help. Even if it's not part of pkgdb in the short term, if there's a

Re: FREEZE BREAK REQUEST: Add DNS zones to ns servers

2015-04-02 Thread Kevin Fenzi
sure. +1 kevin pgpslhouXRVol.pgp Description: OpenPGP digital signature ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure

FREEZE BREAK REQUEST: Add DNS zones to ns servers

2015-04-02 Thread Stephen John Smoogen
https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=408399b diff --git a/roles/dns/files/zones.conf b/roles/dns/files/zones.conf index cfdda70..93d1d00 100644 --- a/roles/dns/files/zones.conf

Re: FREEZE BREAK REQUEST: Add DNS zones to ns servers

2015-04-02 Thread Pierre-Yves Chibon
On Thu, Apr 02, 2015 at 01:46:54PM -0600, Stephen John Smoogen wrote: https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=408399b diff --git a/roles/dns/files/zones.conf b/roles/dns/files/zones.conf index cfdda70..93d1d00 100644

Re: FREEZE BREAK REQUEST: Add DNS zones to ns servers

2015-04-02 Thread Patrick Uiterwijk
+1 from me - Original Message - sure. +1 kevin ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure ___

MM2 crawler bisect run

2015-04-02 Thread Adrian Reber
I have set up a git bisect run on mm-crawler01 in hope to find the commit which fixes curl. This means that mm-crawler01 will scan our mirrors in the next few hours continuously. I just want to mention it here in case one of the mirror admins is asking why their mirror is scanned over and over

Re: Bugzilla components of retired packages

2015-04-02 Thread Michael Cronenworth
On 04/02/2015 01:48 PM, Pierre-Yves Chibon wrote: Well, still is since the package must then be retired on all the Fedora branch, so my script might be a little too conservative at the moment but I still think the 3000+ list is not enough:) The pkgdb-cli run is done. Final count: 2665

Re: Freeze break request: Mediawiki update

2015-04-02 Thread Kevin Fenzi
+1 here. kevin pgpzuhfB3STFu.pgp Description: OpenPGP digital signature ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure

Freeze break: exclude session data from db dumps

2015-04-02 Thread Kevin Fenzi
It was noted yesterday that the koji db dump we have published contained the 'sessions' table in it. Sessions are cleared every 24 hours (a cron job on koji02) and also only contain a session key, which is tied to a specific IP address. While the exposure is small/close to 0 here, I would still

Freeze break: fix ssh_known_hosts

2015-04-02 Thread Kevin Fenzi
When we moved our proxies from puppet to ansible, we forgot to setup something to copy the ssh_known_hosts file over to them, so anyone who goes to https://admin.fedoraproject.org/ssh_known_hosts gets a no such file. I'd like to add the following patch to the proxies playbook and run that

Re: Freeze break: exclude session data from db dumps

2015-04-02 Thread Stephen John Smoogen
+1 from me. On 2 April 2015 at 09:41, Kevin Fenzi ke...@scrye.com wrote: It was noted yesterday that the koji db dump we have published contained the 'sessions' table in it. Sessions are cleared every 24 hours (a cron job on koji02) and also only contain a session key, which is tied to a

Freeze break request: Mediawiki update

2015-04-02 Thread Patrick Uiterwijk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, A new mediawiki security update was released, and I'd like +1s for applying it. It's working fine in stg, and doesn't need database updates, just package update. Patrick -BEGIN PGP SIGNATURE- Version: GnuPG v1

Re: Freeze break request: Mediawiki update

2015-04-02 Thread Stephen John Smoogen
+1 This should be done. On 2 April 2015 at 09:18, Patrick Uiterwijk puiterw...@redhat.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, A new mediawiki security update was released, and I'd like +1s for applying it. It's working fine in stg, and doesn't need database

Re: Bugzilla components of retired packages

2015-04-02 Thread Cole Robinson
On 04/02/2015 10:04 AM, Michael Cronenworth wrote: On 04/02/2015 03:37 AM, Pierre-Yves Chibon wrote: Retrieving the list of retired packages from pkgdb is the easy step: https://admin.fedoraproject.org/pkgdb/api/#list_packages So this should do it:

UserKnownHostsFile for copr-*-dev machines

2015-04-02 Thread Miroslav Suchý
Valentin and me are now playing quite a lot with copr-*-dev as part of new OpenStack testing and I always have to ask somebody to wipe the entry from known_hosts on lockbox otherwise rbac will refuse to connect. Can I suggest to put into ssh_config on lockbox: Host

Re: Freeze break: fix ssh_known_hosts

2015-04-02 Thread Stephen John Smoogen
+1 This looks good. Do we need to do any sort of selinux to get it readable by http? On 2 April 2015 at 09:40, Kevin Fenzi ke...@scrye.com wrote: When we moved our proxies from puppet to ansible, we forgot to setup something to copy the ssh_known_hosts file over to them, so anyone who goes to

Re: Bugzilla components of retired packages

2015-04-02 Thread Michael Cronenworth
On 04/02/2015 03:37 AM, Pierre-Yves Chibon wrote: Retrieving the list of retired packages from pkgdb is the easy step: https://admin.fedoraproject.org/pkgdb/api/#list_packages So this should do it: https://admin.fedoraproject.org/pkgdb/api/packages?status=Retiredeol=True Thanks. I got a

Re: Bugzilla components of retired packages

2015-04-02 Thread Michael Cronenworth
On 04/02/2015 09:22 AM, Pierre-Yves Chibon wrote: hm, looking through the pkgdb code it iterates through the branch instead of asking for the specified status on all the specified branches. So maybe do one request per branch and find the list of packages present in all requests. I can probably

Re: Bugzilla components of retired packages

2015-04-02 Thread Pierre-Yves Chibon
On Thu, Apr 02, 2015 at 04:22:27PM +0200, Pierre-Yves Chibon wrote: On Thu, Apr 02, 2015 at 09:04:38AM -0500, Michael Cronenworth wrote: On 04/02/2015 03:37 AM, Pierre-Yves Chibon wrote: Retrieving the list of retired packages from pkgdb is the easy step:

Re: UserKnownHostsFile for copr-*-dev machines

2015-04-02 Thread Kevin Fenzi
On Thu, 02 Apr 2015 18:06:05 +0200 Miroslav Suchý msu...@redhat.com wrote: Valentin and me are now playing quite a lot with copr-*-dev as part of new OpenStack testing and I always have to ask somebody to wipe the entry from known_hosts on lockbox otherwise rbac will refuse to connect. Can

Re: Bugzilla components of retired packages

2015-04-02 Thread Pierre-Yves Chibon
On Thu, Apr 02, 2015 at 12:23:29PM -0500, Michael Cronenworth wrote: On 04/02/2015 12:17 PM, Pierre-Yves Chibon wrote: 2207 packages fully retired That doesn't seem correct. My script is up to 2634 and counting. The API calls we were using before were above 3000. But these were returning

Re: Bugzilla components of retired packages

2015-04-02 Thread Michael Cronenworth
On 04/02/2015 12:17 PM, Pierre-Yves Chibon wrote: 2207 packages fully retired That doesn't seem correct. My script is up to 2634 and counting. The API calls we were using before were above 3000. ___ infrastructure mailing list

Re: Freeze break: fix ssh_known_hosts

2015-04-02 Thread Pierre-Yves Chibon
On Thu, Apr 02, 2015 at 09:40:54AM -0600, Kevin Fenzi wrote: When we moved our proxies from puppet to ansible, we forgot to setup something to copy the ssh_known_hosts file over to them, so anyone who goes to https://admin.fedoraproject.org/ssh_known_hosts gets a no such file. I'd like to

Re: Bugzilla components of retired packages

2015-04-02 Thread Michael Cronenworth
On 04/02/2015 12:29 PM, Pierre-Yves Chibon wrote: But these were returning packages that were Retired at least on one branch. So for example: https://admin.fedoraproject.org/pkgdb/package/4ti2/ was returned because it is retired on master, but it is still maintained on EPE6 and EPEL7. That's

Re: Freeze break: fix ssh_known_hosts

2015-04-02 Thread Kevin Fenzi
On Thu, 2 Apr 2015 10:04:32 -0600 Stephen John Smoogen smo...@gmail.com wrote: +1 This looks good. Do we need to do any sort of selinux to get it readable by http? Doesn't seem so, it works in stg: https://admin.stg.fedoraproject.org/ssh_known_hosts kevin pgp_1IzjaoV0D.pgp Description:

Re: Bugzilla components of retired packages

2015-04-02 Thread Pierre-Yves Chibon
On Thu, Apr 02, 2015 at 04:34:35PM +0200, Pierre-Yves Chibon wrote: On Thu, Apr 02, 2015 at 04:22:27PM +0200, Pierre-Yves Chibon wrote: On Thu, Apr 02, 2015 at 09:04:38AM -0500, Michael Cronenworth wrote: On 04/02/2015 03:37 AM, Pierre-Yves Chibon wrote: Retrieving the list of retired

Re: Freeze break: exclude session data from db dumps

2015-04-02 Thread Pierre-Yves Chibon
On Thu, Apr 02, 2015 at 09:41:02AM -0600, Kevin Fenzi wrote: It was noted yesterday that the koji db dump we have published contained the 'sessions' table in it. Sessions are cleared every 24 hours (a cron job on koji02) and also only contain a session key, which is tied to a specific IP

Re: Freeze break: fix ssh_known_hosts

2015-04-02 Thread Kevin Fenzi
Pushed live. thanks. kevin pgpLJpuaLYtNb.pgp Description: OpenPGP digital signature ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure

Re: Freeze break: exclude session data from db dumps

2015-04-02 Thread Kevin Fenzi
Pushed out. Thanks. kevin pgpWPmpHby24R.pgp Description: OpenPGP digital signature ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure