Re: congrats to another new sysadmin-mainer

2023-08-09 Thread Seth
Congrats! Great news :) Original Message On 9 Aug 2023, 18:15, Kevin Fenzi < ke...@scrye.com> wrote: > I'm happy to announce that We have approved a new member in our sysadmin-main > group: adamwill - Adam Williamson This is the core group of trusted folks > that high level

Re: Introduction: Seth Maurice-Brant

2023-08-07 Thread Seth
Hi Kevin, That's great to hear. I look forward to getting started. Sent from Proton Mail mobile Original Message On 6 Aug 2023, 19:33, Kevin Fenzi wrote: > On Fri, Aug 04, 2023 at 01:29:17PM +0000, Seth wrote: > Hi there, > > I'm > Seth, an A level st

Introduction: Seth Maurice-Brant

2023-08-04 Thread Seth
Hi there, I'm Seth, an A level student in the UK, currently studying Computer Science, Business Studies and Biology. I've been using Linux for a good few years and Fedora has been the distribution I've stuck with the longest, mainly because it is really smooth and just works. Over the past

Re: Wiki edit statistics - past few months

2013-07-02 Thread seth vidal
On Tue, 2 Jul 2013 04:15:36 -0400 (EDT) Robyn Bergeron rberg...@redhat.com wrote: Hi, A bit of background regarding this page: https://fedoraproject.org/wiki/Statistics Once a week I get an automated email from a script that Paul has had set up since his FPL days, which contains the

Re: apache and app logs retrieval

2013-06-27 Thread seth vidal
On Thu, 27 Jun 2013 13:12:49 -0600 Stephen John Smoogen smo...@gmail.com wrote: On 25 June 2013 13:16, seth vidal skvi...@fedoraproject.org wrote: Last week when we were talking about spawning rdiff-backup to backup our systems, we diverged into discussing app/apache logs

apache and app logs retrieval

2013-06-25 Thread seth vidal
Last week when we were talking about spawning rdiff-backup to backup our systems, we diverged into discussing app/apache logs and the somewhat complicated system we currently have for grabbing those logs. Right now we have a list of hosts on log02 that it should grab logs from. Those hosts need

Re: [HOTFIX request] mirrormanager] v1.4: model.py: fix user_sites() variable name (80dd827)

2013-06-21 Thread seth vidal
On Fri, 21 Jun 2013 07:17:48 -0500 matt_dom...@dell.com wrote: Fix one bug yesterday with a hotfix, only to hit a second bug later. Here's the fix to the second bug... This keeps a non-sysadmin user from logging into the admin interface. +1s please. +1 -sv

freeze break - change process/thread count on mirrorlist-* servers

2013-06-20 Thread seth vidal
Hi, I'd like to change the number of processes/threads on the mirrorlist-servers. This morning we encountered a situation where mirrorlist-osuosl stopped being able to answer due to not being able to get responses back from the wsgi process server. After talking with Mdomsch he's suggested

Freeze break: edit up our nrpe procs default

2013-06-20 Thread Seth Vidal
need 2 +1's so we can avoid noise from the process count after some changes to our mirrorlist servers see below: ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[PATCH] - template our nrpe.cfg - setup vars for nrpe_procs_crit and nrpe_procs_warn - set the value for crit and warn higher for mirrorlists to stop their whining

2013-06-20 Thread Seth Vidal
--- files/nagios/client/nrpe.cfg|2 +- inventory/group_vars/all|4 inventory/group_vars/mirrorlist |3 ++- tasks/nagios_client.yml |4 ++-- 4 files changed, 9 insertions(+), 4 deletions(-) diff --git a/files/nagios/client/nrpe.cfg

Re: Where to keep the badges repo?

2013-06-18 Thread seth vidal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 18 Jun 2013 08:49:19 -0400 Stephen Gallagher sgall...@redhat.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/17/2013 02:50 PM, seth vidal wrote: On Mon, 17 Jun 2013 11:40:35 -0700 Toshio Kuratomi a.bad...@gmail.com

nagios and ansible

2013-06-17 Thread seth vidal
I've been thinking about how we should handle nagios in the ansible world. our current nagios config in puppet has a number of issues: 1. it's a bit cumbersome b/c you edit nagios independent of adding the host's config 2. when you remove a host the nagios config doesn't automatically go away 3.

Re: Freeze break request: mediawiki security upgrade

2013-05-22 Thread seth vidal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 22 May 2013 21:02:28 +0200 Patrick Uiterwijk puiterw...@gmail.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello, I would like to request +1's to upgrade mediawiki on our app servers to 1.19.7. This is a security

Re: Freeze break request: mediawiki security upgrade

2013-05-22 Thread seth vidal
On Wed, 22 May 2013 13:38:29 -0600 Kevin Fenzi ke...@scrye.com wrote: On Wed, 22 May 2013 15:14:14 -0400 seth vidal skvi...@fedoraproject.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 22 May 2013 21:02:28 +0200 Patrick Uiterwijk puiterw...@gmail.com wrote

Re: [Freeze break] Rewrite of bz-make-components.py

2013-05-21 Thread seth vidal
On Tue, 21 May 2013 13:17:42 -0700 Toshio Kuratomi a.bad...@gmail.com wrote: In infrastructure we have a script called bz-make-components.py that syncs the l10n and docs products (and owners) into bugzilla. This code is what the pkgdb-sync-bugzilla script is based on and performs a very

Re: Freeze break: small exclude change for backups

2013-05-17 Thread seth vidal
On Fri, 17 May 2013 10:36:21 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. Backups of lockbox01 are unfortunately backing up .snapshot directories and their contents. This pulls in a ton of stuff and makes backups take forever and contain things we don't want. This one line

Re: Freeze break: add backup storage to backup03

2013-05-16 Thread seth vidal
On Thu, 16 May 2013 09:55:06 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. I'd like to add a interface on our storage network and mount the new backup volume we now have allocated to us on backup03. This is in prep for redoing backups (see previous mail to the list). There's

Re: Freeze break request for new storage (take two)

2013-05-16 Thread seth vidal
On Thu, 16 May 2013 10:30:09 -0600 Kevin Fenzi ke...@scrye.com wrote: Here's a better freeze break request that has actual changes. ;) Basically I need to get the new storage mounted on nfs01 and backup03. On nfs01: - add route to netapp network - add directories to mount on -

Re: Freeze break request: add rsync for httpd logs

2013-05-14 Thread seth vidal
On Tue, 14 May 2013 10:45:18 -0600 Kevin Fenzi ke...@scrye.com wrote: So, first freeze break request. ;) I added a number of applications to have log02 pull httpd logs from, but some of them do not have rsync installed, so pulling logs from them is failing. I'd like to have them include

Re: backups planning

2013-05-13 Thread seth vidal
On Thu, 9 May 2013 15:35:44 -0600 Kevin Fenzi ke...@scrye.com wrote: Another fun mail to start some discussion. ;) The topic this time is backups. Currently, we do backups two ways: 1. We have a backup server in phx2 with a tape drive running bacula. It backs up machines and spools

Re: sslonly and stg

2013-05-01 Thread seth vidal
On Wed, 1 May 2013 10:50:07 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. There's been a long standing issue with sslonly sites and stg. When you go to 'http://site.stg.whatever; you are redirected to 'https://site.whatever' which is anoying. The current sslonly template has:

Re: FAS password on 3rd party pages?

2013-04-25 Thread seth vidal
On Thu, 25 Apr 2013 10:57:54 +0200 Pierre-Yves Chibon pin...@pingoured.fr wrote: On Thu, 2013-04-25 at 10:31 +0200, Vít Ondruch wrote: Dne 25.4.2013 10:09, Pierre-Yves Chibon napsal(a): On Thu, 2013-04-25 at 10:07 +0200, Vít Ondruch wrote: Hi guys, Since you want to push Fedocal

Re: Freeze break request: retire legacy-openid01

2013-04-15 Thread seth vidal
On Mon, 15 Apr 2013 11:30:12 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. We set today (2013-04-15) as the day to retire our legacy openid provider. See: https://fedoraproject.org/wiki/Legacy-OpenID for more info. This requires a change to proxy servers as they have the redirect

Re: Fedora 19 Alpha Freeze in effect.

2013-04-02 Thread seth vidal
On Tue, 2 Apr 2013 09:13:34 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. we are now in the infrastructure freeze leading up to the Fedora 19 Alpha release. This is a pre-release freeze. Please see:

Re: Freeze Break Request - koji fedmsg plugin

2013-04-02 Thread seth vidal
On Tue, 2 Apr 2013 12:23:35 -0400 Ralph Bean rb...@redhat.com wrote: dgilmore noted in channel that the koji fedmsg plugin is producing tracebacks like the following: Error running postBuildStateChange callback from _koji_plugin__fedmsg-koji-plugin: Traceback (most recent call last): File

Re: Plan for tomorrow's Fedora Infrastructure meeting (2013-03-21)

2013-03-20 Thread seth vidal
On Wed, 20 Mar 2013 21:51:10 -0600 Kevin Fenzi ke...@scrye.com wrote: The infrastructure team will be having it's weekly meeting tomorrow, 2013-03-21 at 19:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any

Re: Plan for tomorrow's Fedora Infrastructure meeting (2013-03-21)

2013-03-20 Thread seth vidal
On Wed, 20 Mar 2013 21:59:37 -0600 Kevin Fenzi ke...@scrye.com wrote: On Wed, 20 Mar 2013 23:55:40 -0400 seth vidal skvi...@fedoraproject.org wrote: Should we go ahead and put hosted on the agenda for some input from folks? Especially if we have any people who are well-versed in git

backups

2013-03-18 Thread seth vidal
After a super-fun-time debacle restoring a single file today I'd like to talk about our backups a bit. Right now our backups are: - bacula to a few central servers and then off to tape. That seems like it is not scaling super-duper well for our size of disk storage. It also seems like it is a

Re: Setting up GitLab for fedorahosted.org

2013-03-12 Thread seth vidal
On Tue, 12 Mar 2013 01:33:07 -0600 Dan Allen dan.j.al...@gmail.com wrote: On Sun, Mar 3, 2013 at 10:24 AM, Kevin Fenzi ke...@scrye.com wrote: On Sat, 02 Mar 2013 04:44:39 +0200 Axilleas Pipinellis axill...@archlinux.gr wrote: Greetings from a newly registered member! I've seen

vfad - virtual fedora activity day ideas

2013-03-07 Thread seth vidal
Hi, We discussed this today in the infra meeting: We've had some success with FADs - fedora activity days - most recently for 2-factor-auth. FADs let us focus on a specific task and knock it out by having all the stakeholders together in one place and all ready to only do achieve one goal. The

Re: New Fedora openid provider (fas-openid) in service

2013-03-05 Thread seth vidal
On Tue, 05 Mar 2013 23:45:04 -0500 Rahul Sundaram methe...@gmail.com wrote: On 03/05/2013 07:19 PM, Kevin Fenzi wrote: Code for this provider (under GPLv2+) is available at: https://github.com/fedora-infra/fas-openid Congrats! I was wondering if we have relaxed the infrastructure policy

Re: New Fedora openid provider (fas-openid) in service

2013-03-05 Thread seth vidal
On Tue, 5 Mar 2013 21:22:19 -0800 Toshio Kuratomi a.bad...@gmail.com wrote: I think that Raul is talking about the code being hosted on github. Toshio, I see - seeing as he replied to the openid announcement I thought it was about openid. My bad. thanks for clarifying that, -sv

Re: ansible musings...

2013-02-22 Thread Seth Vidal
On Fri, 22 Feb 2013, Xavier Lamien wrote: How about a dedicated branch for staging where we can merge it into master when ready (just like puppet's) Also, I think git flow coud be a good candidate here to work on a specific 'role' or such. ie, you have staging branch in sync with master,

Re: fedora hosted, sharding and openid

2013-02-13 Thread Seth Vidal
On Wed, 13 Feb 2013, Kevin Fenzi wrote: I think we could also look at getting a wildcard cert and just stay with https. But I agree thats a detail... either way is probibly fine. shrug I'm fine with either way. I think we might want to setup a hosted01.stg at some point for testing things

fedora hosted, sharding and openid

2013-02-12 Thread Seth Vidal
Today Patrick got the trac plugin for openid working pretty well with the new openid service. This effectively breaks our tight bind to the fas db (and mod_auth_pgsql) from the hosted boxes. A while back we discussed the possibility of scaling the hosted service out horizontally somewhat by

Re: [PATCH 2/2] make hosted send emails with an address of fedoraproject.org - not fedorahosted.org for users, etc

2013-01-15 Thread Seth Vidal
On Tue, 15 Jan 2013, Mike McLean wrote: I just got the following error pushing to fedorahosted remote: Traceback (most recent call last): remote: File /usr/bin/send-unicode-email.py, line 32, in module remote: smtp.sendmail(sender, recipients, msg.as_string()) remote: File

Re: [PATCH] kill off references to app07

2013-01-04 Thread Seth Vidal
I need 2 +1's to push this change -sv On Fri, 4 Jan 2013, skvi...@fedoraproject.org wrote: From: Seth Vidal skvi...@fedoraproject.org --- manifests/nodes/app07.phx2.fedoraproject.org.pp | 18 -- manifests/nodes/proxy01.phx2.fedoraproject.org.pp |3 +-- manifests

redirect hits to admin.fp.o/community to apps.fp.o/packages

2012-12-21 Thread Seth Vidal
This is the first step to decommissioning app07 and the old /community path. diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp index 24fdd98..79466fd 100644 --- a/manifests/services/proxy.pp +++ b/manifests/services/proxy.pp @@ -535,10 +535,10 @@ class proxy {

Proposal: decommision fedoracommunity/stats running on app07

2012-12-20 Thread Seth Vidal
Hi, We have one remaining RHEL5 host - app07. It is being kept alive in order to keep running the fedoracommunity/stats page. After talking with Luke about it I went looking through the http logs for fedoracommunity on app07. In the last year the number of connections hitting a url

Re: tools for building cloud images in the buildsystem

2012-11-14 Thread Seth Vidal
On Tue, 13 Nov 2012, Garrett Holmstrom wrote: On 2012-11-12 12:38, Seth Vidal wrote: What I mean is: when I build a package for Fedora, I go through the Koji build system. I can't just kludge up a binary RPM and have it get sent out into the mirror. And, anyone can go into Koji and see

Re: tools for building cloud images in the buildsystem

2012-11-14 Thread Seth Vidal
On Wed, 14 Nov 2012, Matthew Miller wrote: On Wed, Nov 14, 2012 at 09:31:44AM -0500, Seth Vidal wrote: But we do for releases, from which all previous release images have been spun, AFAIK. The cloud SIG made sure of that quite early on in its lifetime to keep everything GPL-compliant

Re: tools for building cloud images in the buildsystem

2012-11-12 Thread Seth Vidal
On Mon, 12 Nov 2012, Matthew Miller wrote: Background: appliance-creator, as part of Thincrust, isn't really maintained anymore. It'd be nice to switch to something else. There's two main options that I can see: 1. ami-creator, as maintained by the Eucalyptus project. This basically works

Re: tools for building cloud images in the buildsystem

2012-11-12 Thread Seth Vidal
On Mon, 12 Nov 2012, Kevin Fenzi wrote: Trivial and disposable. For short term/testing I think this is a great idea. Longer term, we really need to figure out what official cloud images are going to be made with and where. I guess thats a conversation with koji upstream and rel-eng and

Re: tools for building cloud images in the buildsystem

2012-11-12 Thread Seth Vidal
What I mean is: when I build a package for Fedora, I go through the Koji build system. I can't just kludge up a binary RPM and have it get sent out into the mirror. And, anyone can go into Koji and see the packages I've built -- and see how they were built, if they want. And although the GPG

Re: Freeze break request: allow https with ask.fedoraproject.org

2012-10-29 Thread Seth Vidal
On Mon, 29 Oct 2012, Toshio Kuratomi wrote: On Mon, Oct 29, 2012 at 12:24:35PM -0600, Kevin Fenzi wrote: We have a request at: https://fedorahosted.org/fedora-infrastructure/ticket/3535 to allow https for ask.fedoraproject.org. This is a pretty simple change: diff --git

Re: tracking cloud instances

2012-10-18 Thread Seth Vidal
On Thu, 18 Oct 2012, Matthew Miller wrote: On Tue, Oct 16, 2012 at 05:02:00PM -0400, Seth Vidal wrote: I'm thinking we need a tool that would poll the cloudlet(s), retrieve all the basic, available, info about the running instances. Unfortunately, neither Eucalpytus or OpenStack support

Re: tracking cloud instances

2012-10-18 Thread Seth Vidal
On Thu, 18 Oct 2012, Matthew Miller wrote: On Thu, Oct 18, 2012 at 06:24:10PM -0400, Seth Vidal wrote: I bring this up not just to be annoying :) but wanted to make sure you're aware of it when designing anything. (I think practically that means: store things as key value pair per resource

tracking cloud instances

2012-10-16 Thread Seth Vidal
So - as we noodle around with cloud instances more the most obvious problem I have seen is getting a list of instance ids like: i-F7AA3F96 i-77B34039 i-B1EB403D i-2C294684 and then trying to figure out which ones are jenkins slaves, the torrent seed test and the fedocal instance. And which

Re: i have cloud

2012-10-11 Thread Seth Vidal
On Wed, 10 Oct 2012, Garrett Holmstrom wrote: On 2012-10-08 14:17, Seth Vidal wrote: On Mon, 8 Oct 2012, Garrett Holmstrom wrote: On Mon, Oct 8, 2012 at 8:08 AM, Seth Vidal skvi...@fedoraproject.org wrote: Any ideas how well things will fare if I apply the updates to a live cloud and kick

Re: Fedora/Infra/Gluster halp? Fwd: cloud disk benchmarks

2012-10-08 Thread Seth Vidal
the same between the two cloudlets. I'm inclined to think that the read results - as bad as they might be - aren't the problem here because reads can benefit from caching and locality of reference. Seth, let me know if that's not true for your workload. The real problem is writes

Re: cloud disk benchmarks

2012-10-08 Thread Seth Vidal
On Sun, 7 Oct 2012, Robyn Bergeron wrote: - AIUI gluster can be less than optimal for lots of small writes - esp. when doing replication - I don't know if you have looked at all of the translators, there are a few performance/write translators that can help improve this. Indeed - we're

Re: cloud disk benchmarks

2012-10-08 Thread Seth Vidal
On Sun, 7 Oct 2012, David Nalley wrote: Gluster currently doesn't proclaim running VM images as one of its strong points, although many do use it in that capacity. A few months back a well funded group attempted to use Gluster as storage for their CloudStack instance and were unable to tune

Re: i have cloud

2012-10-08 Thread Seth Vidal
On Sun, 7 Oct 2012, Garrett Holmstrom wrote: On 2012-10-04 8:17, Seth Vidal wrote: 1. running ftbfs on euca with 8 (now 5 :() instances - this succeeded in exercising libvirt enough to break it on one NC - I have assurances from euca folks that this is being addressed in 3.1.2 due out

Re: i have cloud

2012-10-08 Thread Seth Vidal
On Mon, 8 Oct 2012, Garrett Holmstrom wrote: On Mon, Oct 8, 2012 at 8:08 AM, Seth Vidal skvi...@fedoraproject.org wrote: Any ideas how well things will fare if I apply the updates to a live cloud and kick the daemons? It's one piece I'm still a bit fuzzy on - how well euca surives daemon

cloud disk benchmarks

2012-10-06 Thread Seth Vidal
When running a ftbfs run on both euca and openstack I started to see some pretty big differences in performance. CPU and mem were all the same or close enough so I decided to look at disk performance. euca is backed by local disks in a raid/lvm layout and/or exported via iscsi through the

Re: i have cloud

2012-10-04 Thread Seth Vidal
On Thu, 27 Sep 2012, Matthew Miller wrote: I launched a F17 instance in our Eucalyptus system. It works. (Awesome!) I have not done anything to try and break it. Let me know if I should. :) break away, if you'd like. Here's what I've been doing to break the clouds. 1. running ftbfs

Re: Cloud status report and request for feedback on policies

2012-08-30 Thread Seth Vidal
On Thu, 30 Aug 2012, Xavier Lamien wrote: Yes. We have a class C of external IP's. Of course there may be some instances that will not need to use external ip's, but many will. hrm...so do we really want to let user to be fully responsible for the contents of the instance? I mean, how the

using ansible to do status checks on systems from remote

2012-08-04 Thread Seth Vidal
Want to check on a set of hosts but you don't have root/sudo access on lockbox? Want to do it in a way that you can hit the host quickly w/o having to do them one by one? Here's how you can use ansible from your local computer to do it: 1. check out ansible: git clone

Re: builders of the future!!!!!

2012-07-24 Thread Seth Vidal
On Wed, 21 Mar 2012, Kevin Fenzi wrote: I'd agree collectd off probibly. Or at least a seperate one if we needed to monitor them. I'm not sure what benefit we get from collectd on transient builders, though. On our long-running hosts I understand but not on the builders. Yeah, the

Re: mulling the idea of a Infrastructure Security FAD (fedora activity day)

2012-06-13 Thread seth vidal
On Wed, 13 Jun 2012 10:07:11 -0400 Konstantin Ryabitsev i...@fedoraproject.org wrote: On Wed, Jun 13, 2012 at 12:14 AM, seth vidal skvi...@fedoraproject.org wrote: Possible locations: Red Hat HQ in RDU?     pros: can probably get a room/network and pull in other RH folks

Re: mulling the idea of a Infrastructure Security FAD (fedora activity day)

2012-06-12 Thread seth vidal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 12 Jun 2012 22:54:54 -0500 Dennis Gilmore den...@ausil.us wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 El Tue, 12 Jun 2012 17:03:48 -0600 Kevin Fenzi ke...@scrye.com escribió: Greetings. I've been toying with the idea of

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-10 Thread seth vidal
On Fri, 8 Jun 2012 11:41:12 -0600 Kevin Fenzi ke...@scrye.com wrote: On Fri, 8 Jun 2012 10:18:14 -0400 seth vidal skvi...@fedoraproject.org wrote: Here's a first cut - seems to work in my tests http://fedorapeople.org/gitweb?p=skvidal/public_git/scripts.git;a=tree;f=dns/fedora

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-08 Thread seth vidal
On Fri, 8 Jun 2012 01:40:14 -0400 seth vidal skvi...@fedoraproject.org wrote: On Thu, 7 Jun 2012 16:40:26 -0400 seth vidal skvi...@fedoraproject.org wrote: * Dns (nirik, 18:29:03) * skvidal to work on more automated/dynamic zone updates for our primary zone (nirik, 18:39

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-07 Thread seth vidal
* Dns (nirik, 18:29:03) * skvidal to work on more automated/dynamic zone updates for our primary zone (nirik, 18:39:35) Here's the pseudo-code I promised: # read in a config file(execfile?) # domain name # list of A records to be created (@, wildcard) # list of records to be

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-07 Thread seth vidal
On Thu, 7 Jun 2012 16:40:26 -0400 seth vidal skvi...@fedoraproject.org wrote: * Dns (nirik, 18:29:03) * skvidal to work on more automated/dynamic zone updates for our primary zone (nirik, 18:39:35) Here's the pseudo-code I promised: # read in a config file(execfile

cron jobs and puppet

2012-05-31 Thread seth vidal
From now on -PLEASE- no one use the cron {} keyword in puppet. If you need to put a cron job in place via puppet you do it either using /etc/cron.[hourly|daily] or you put a .cron file in /etc/cron.d and reference it that way. I am so tired of having to chase through /var/spool/cron for system

gitweb[-caching] vs cgit

2012-05-30 Thread seth vidal
We're currently using gitweb[-caching] on fedorahosted and on fedorapeople. A discussion today suggested maybe we should move to cgit in its lieu. First things first: 1. cgit means we break old links to gitweb urls 2. cgit is a different pkg - maintained by other folks 3. gitweb-caching

torrent json stats

2012-05-29 Thread seth vidal
accidentally pushed this change but I updated the torrents stats generator to generate the old .json files from the old tracker - so that the spins site will work. -sv ___ infrastructure mailing list infrastructure@lists.fedoraproject.org

Re: Fedora Account Change

2012-05-28 Thread Seth Vidal
On Mon, 28 May 2012, Larry Brower wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 05/28/2012 05:32 PM, David Nalley wrote: There is such a feature already. It does require access to email though. If he has contacts that still control access to the email - surely he could use

Re: [Change Request] Fix pkgdb privileged operations for old python-bugzilla

2012-05-24 Thread seth vidal
On Thu, 24 May 2012 08:01:28 -0700 Toshio Kuratomi a.bad...@gmail.com wrote: As part of two situations I've pushed out a hotfix to pkgdb and would like two +1's for the change. The situations: * Continuing work to get our apps working with the old python-bugzilla package from yesterday's

Freeze Break: shutdown search01-dev on virthost05 - setup db-fas01 on virthost05

2012-05-24 Thread seth vidal
This will be a first step to migrate to a private fas postgres instance. In order to free up mem and procs I would like to shutdown search01-dev on virthost05 and bring up db-fas01 on there. The goal would be a private postgres db server for fas alone. I will be kickstarting a vm on virthost05

Re: [PATCH] Typos...

2012-05-23 Thread seth vidal
On Wed, 23 May 2012 14:40:03 + pin...@pingoured.fr wrote: From: Pierre-Yves Chibon pin...@pingoured.fr --- modules/review-stats/files/review-stats.py |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/modules/review-stats/files/review-stats.py

Re: [PATCH] No cookie for easyfix

2012-05-23 Thread seth vidal
On Wed, 23 May 2012 14:50:37 + pin...@pingoured.fr wrote: From: Pierre-Yves Chibon pin...@pingoured.fr --- modules/gather-easyfix/files/gather_easyfix.py |3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/modules/gather-easyfix/files/gather_easyfix.py

Re: [Freeze break Request] Disable bugzilla integration

2012-05-23 Thread seth vidal
On Wed, 23 May 2012 08:39:23 -0700 Toshio Kuratomi a.bad...@gmail.com wrote: The bugzilla admins at redhat notified us that they were having load issues since the bugzilla upgrade caused by infrastructure's hosts. It seems that at least one of our scripts is exercising bugs in the new

Re: Freeze break request: Update python-bugzilla on fas*, bapp01, app*

2012-05-21 Thread seth vidal
On Mon, 21 May 2012 20:38:42 +0200 Pierre-Yves Chibon pin...@pingoured.fr wrote: On Mon, 2012-05-21 at 19:14 +0200, Pierre-Yves Chibon wrote: On Mon, 2012-05-21 at 10:38 -0600, Kevin Fenzi wrote: 2) gather easyfix needs more changes and is not fixed by python-bugzilla update. Look for

Re: freeze break request: install trac-agilo-plugin on hosted

2012-05-15 Thread seth vidal
On Tue, 15 May 2012 09:58:41 -0600 Kevin Fenzi ke...@scrye.com (by way of Kevin Fenzi ke...@scrye.com) wrote: Since trac-agilo-plugin is now through review and available in EPEL, I'd like to install it on hosted for https://fedorahosted.org/fedora-infrastructure/ticket/3081 I have tested it

attempted hosted migration to gluster back end post-mortem

2012-04-27 Thread seth vidal
As most/all people know we attempted to migrate hosted to using a gluster backend across two systems on wednesday evening. Thursday we awoke to a host of problems and tackled solving them. Thursday evening we migrated back to our previous configuration. Thanks for the patience on thursday

Re: meeting times

2012-04-13 Thread seth vidal
On Fri, 13 Apr 2012 09:45:58 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. We moved the meeting time to 20UTC a while back to leave time for folks with other meetings that were taking place earlier. I think some of these meetings no longer meet then, so... Should we move to

kickstarts, installs and root ssh keys

2012-04-10 Thread seth vidal
Hi all, Need some feedback. Since I've been playing with/working on ansible(http://ansible.github.com) it has raised some questions as to what we will allow/not allow for setting up hosts. Here's what I'd like to do: 1. allow lockbox01-only and ssh-key-only access, as root, via ssh to our

Re: kickstarts, installs and root ssh keys

2012-04-10 Thread seth vidal
On Tue, 10 Apr 2012 23:38:30 +0200 Jan-Frode Myklebust janfr...@tanso.net wrote: On Tue, Apr 10, 2012 at 05:11:14PM -0400, seth vidal wrote: 1. allow lockbox01-only and ssh-key-only access, as root, via ssh to our systems. This would be an ssh key only on lockbox and owned by root

Re: kickstarts, installs and root ssh keys

2012-04-10 Thread seth vidal
On Wed, 11 Apr 2012 05:54:16 +0200 Jan-Frode Myklebust janfr...@tanso.net wrote: On Tue, Apr 10, 2012 at 11:25:46PM -0400, seth vidal wrote: Wouldn't it be better to have root's authorized_keys file contain the pubkeys of each individual admin that should be allowed to ssh from

Re: qa machine management

2012-03-31 Thread seth vidal
On Sat, 31 Mar 2012 14:25:35 -0600 Stephen John Smoogen smo...@gmail.com wrote: On 30 March 2012 17:17, Kevin Fenzi ke...@scrye.com wrote: Greetings. Just had a talk with tflink on IRC about the management of the qa network machines. Long ago when we setup those machines we were

default user context on fedorapeople.org

2012-03-27 Thread seth vidal
We are debating the default user context for fedorapeople.org: Right now users are unconfined_t. This would, ostensibly, let them do a lot. However, we have fedorapeople set up to isolate user tempdirs and every place a user can write to is mounted noexec,nosuid - so there is no place to run

Re: default user context on fedorapeople.org

2012-03-27 Thread seth vidal
On Tue, 27 Mar 2012 17:33:26 -0400 Konstantin Ryabitsev i...@fedoraproject.org wrote: On Tue, 2012-03-27 at 17:17 -0400, seth vidal wrote: And that is the more or less it - does anyone have any suggestions/thoughts? You don't have to limit yourself to picking between user_u or guest_u

Re: Freeze break request: Disable puppet on compose-x86-01

2012-03-26 Thread seth vidal
On Mon, 26 Mar 2012 08:51:50 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. I'd like to disable the puppet cron job on compose-x86-01. This machine is our Fedora 17/rawhide compose machine. Sadly, puppet is currently broken in f17/rawhide due to the ruby 1.9.3 upgrade there. So,

Re: Freeze Break request: set httponly True in all our TG1 apps

2012-03-23 Thread seth vidal
On Fri, 23 Mar 2012 12:22:04 -0600 Kevin Fenzi ke...@scrye.com wrote: Greetings. See this ticket for some background: https://fedorahosted.org/fedora-infrastructure/ticket/3022 I have tested all these in staging, so I don't think there will be any issues with anything, but if so we

add pkg on lockbox01

2012-03-23 Thread seth vidal
I don't think I need the +1's for this but I'll ask anyway. I need to install python-paramiko on lockbox so I can test out something for the builder reinstall process I'm working on. I don't want it permanently installed (yet) just trying it out. can I get two +1s? -sv

Re: builders of the future!!!!!

2012-03-21 Thread seth vidal
On Tue, 20 Mar 2012 21:38:13 -0500 Dennis Gilmore den...@ausil.us wrote: Today there is not a way to do an anaconda install on any arm system. though hopefully we will have that for deployment. I would hope so. :) probably we would be adding 100-300 systems. not only do we need to

Re: GSoC idea to setup Gitlab for Fedora Hosted

2012-03-20 Thread seth vidal
On Tue, 20 Mar 2012 06:31:51 -0600 Jeffrey S. Haemer jeffrey.hae...@gmail.com wrote: Stas, Looks like fun. Fedora Hosted supports a variety of SCM tools, not just git. Is there a way to fit Gitlab in with that? Tools used on fedora hosted do NOT have to support every SCM. We have the

Re: GSoC idea to setup Gitlab for Fedora Hosted

2012-03-20 Thread seth vidal
On Tue, 20 Mar 2012 16:32:54 +0200 Stas Sușcov s...@nerd.ro wrote: În data de Tue, 20 Mar 2012 14:31:51 +0200, Jeffrey S. Haemer jeffrey.hae...@gmail.com a scris: Stas, Looks like fun. Fedora Hosted supports a variety of SCM tools, not just git. Is there a way to fit Gitlab in

Re: GSoC idea to setup Gitlab for Fedora Hosted, looking for mentors

2012-03-20 Thread seth vidal
On Tue, 20 Mar 2012 16:39:42 +0200 Stas Sușcov s...@nerd.ro wrote: Not sure passenger is the problem. Gitlab uses the awesome Resque[1], so you will need something like foreman[2] to run the app with it's workers all together (at least this is the easiest way to do that). I would go with

builders of the future!!!!!

2012-03-20 Thread seth vidal
The discussion on devel list about ARM and my work last week on reinstalling builders quickly and commonly has raised a number of issues with how we manage our builders and how we should manage them in the future. It is apparent that if we add arm builders they will be lots of physical systems

Re: GSoC idea to setup Gitlab for Fedora Hosted, looking for mentors

2012-03-08 Thread seth vidal
On Thu, 8 Mar 2012 14:46:01 -0500 Dan Allen dan.j.al...@gmail.com wrote: Hello everyone, Since this is my first post, I'll start with a quick introduction. I'm a core developer in the JBoss Community. I've been working for Red Hat for 3+ years. Down to business. I proposed an idea on the

Re: [CHANGE REQUEST] Update country-code script on bapp01

2012-02-28 Thread seth vidal
On Tue, 28 Feb 2012 17:01:19 + (UTC) Toshio Kuratomi tos...@tiki-lounge.com wrote: On bapp01 we have a script that checks whether the country code that people have in FAS is known to GeoIP. This script runs once a week. The script sends out email if the country code is not known to GeoIP

disable prelink from global.pp

2012-02-27 Thread seth vidal
in our global services puppet recipe we have include prelink::prelink I'd like 2 +1s to nuke that from orbit and do away with prelink on our boxes thanks -sv ___ infrastructure mailing list infrastructure@lists.fedoraproject.org

Re: disable prelink from global.pp

2012-02-27 Thread seth vidal
On Mon, 27 Feb 2012 17:20:43 -0500 Konstantin Ryabitsev i...@fedoraproject.org wrote: On Mon, 2012-02-27 at 15:58 -0500, seth vidal wrote: in our global services puppet recipe we have include prelink::prelink I'd like 2 +1s to nuke that from orbit and do away with prelink on our

Re: Freeze break request: update boot.fedoraproject.org for pxe install workaround for f17

2012-02-22 Thread seth vidal
On Wed, 22 Feb 2012 10:22:06 -0700 Kevin Fenzi ke...@scrye.com wrote: To work around bug https://bugzilla.redhat.com/show_bug.cgi?id=785815 we need to pass a root= option to pxe installs for now. This fixes things so boot.fedoraproject.org can do installs. Without it you get a 'root= not

add a cron job to lockbox01

2012-02-22 Thread seth vidal
I'd like +1's to add a cron job to lockbox01. The cron job will generate /etc/func/groups based on the virthost and their func minions. it is this script, dropped into /etc/cron.hourly http://fedorapeople.org/gitweb?p=skvidal/public_git/scripts.git;a=blob;f=func/func-groups-by-virthost This

Re: moving fedorapeople.org

2012-02-20 Thread seth vidal
On Mon, 20 Feb 2012 14:34:15 -0700 Stephen John Smoogen smo...@gmail.com wrote: My one concern is that both backup02 and fedorapeople can have a large IO needs and we can have the starvation issues we had last year with backup02... where it would mysteriously crash when it was doing lvm items

Re: kill prelink

2012-02-06 Thread seth vidal
On Mon, 6 Feb 2012 20:00:02 +0100 Jan-Frode Myklebust janfr...@tanso.net wrote: On Mon, Feb 06, 2012 at 11:59:53AM -0500, Bill Nottingham wrote: Stephen John Smoogen (smo...@gmail.com) said: Discussion from irc today pointed out the. difficulty with our security with prelink

  1   2   3   >