Fedora Torrent Tracker
by Frank Murphy
Posting here,
as uncertain of overall cause.
Using Azureus F-18 version.
On 3 torrents getting:
Error (Requested download is not authorized for use with this
tracker.)
Fedora-18-x86_64-Live-Desktop (may be mixing _ -)
Fedora-19-Alpha-i386-DVD
Fedora-17-i386-DVD
--
Regards,
Frank - I check for new mail app. 20min
www.frankly3d.com
11 years
Freeze break: small exclude change for backups
by Kevin Fenzi
Greetings.
Backups of lockbox01 are unfortunately backing up .snapshot directories
and their contents. This pulls in a ton of stuff and makes backups take
forever and contain things we don't want.
This one line change should hopefully make it exclude .snapshot dirs.
(Apparently it needs a trailing / to search directory names).
+1s?
kevin
--
diff --git a/modules/bacula5/templates/bacula-dir.conf.erb
b/modules/bacula5/templates/bacula-dir.co index 9f5b547..d2b8b2d 100644
--- a/modules/bacula5/templates/bacula-dir.conf.erb
+++ b/modules/bacula5/templates/bacula-dir.conf.erb
@@ -453,7 +453,7 @@ FileSet {
File = /dev
File = /sys
File = /.swap
- File = .snapshot
+ File = .snapshot/
File = /mnt/fedora/app/fi-repo/rhel
File = /var/tmp
}
11 years
Plan for tomorrow's Fedora Infrastructure meeting (2013-05-16)
by Kevin Fenzi
The infrastructure team will be having it's weekly meeting tomorrow,
2013-05-16 at 19:00 UTC in #fedora-meeting on the freenode network.
Suggested topics:
#topic New folks introductions and Apprentice tasks.
If any new folks want to give a quick one line bio or any apprentices
would like to ask general questions, they can do so in this part of the
meeting. Don't be shy!
#topic Applications status / discussion
Check in on status of our applications: pkgdb, fas, bodhi, koji,
community, voting, tagger, packager, dpsearch, etc.
If there's new releases, bugs we need to work around or things to note.
#topic Sysadmin status / discussion
Here we talk about sysadmin related happenings from the previous week,
or things that are upcoming.
#topic Private Cloud status update / discussion
#topic Upcoming Tasks/Items
#info 2013-05-14 to 2013-05-28 BETA infrastructure freeze
#info 2013-05-19 - bugzilla upgrade.
#info 2013-05-28 F19 beta release
#info 2013-05-31 end of 1st quarter
#info 2013-06-01 nag fi-apprentices
#info 2013-06-08 drop inactive apprentices
#info 2013-06-18 to 2013-07-02 FINAL infrastructure freeze.
#info 2013-07-01 nag fi-apprentices
#info 2013-07-02 F19 FINAL release
#topic Open Floor
Submit your agenda items, as tickets in the trac instance and send a
note replying to this thread.
More info here:
https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings
Thanks
kevin
11 years
Freeze break request for new storage (take two)
by Kevin Fenzi
Here's a better freeze break request that has actual changes. ;)
Basically I need to get the new storage mounted on nfs01 and backup03.
On nfs01:
- add route to netapp network
- add directories to mount on
- mount new space
On backup03:
- Add eth1 interface with route to netapp network.
- add directory to mount on
- mount new space
On netapp:
- change exports slightly to allow nfs01 access to koji space, and
allow backup03's new storage network ip access to the backup space.
(We had it with the normal net in there, but it cannot reach the
netapp).
+1s?
kevin
--
diff --git a/manifests/nodes/backup03.phx2.fedoraproject.org.pp b/manifests/nodes/backup03.phx2.fedo
index 4e1d9ee..2c96d8c 100644
--- a/manifests/nodes/backup03.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/backup03.phx2.fedoraproject.org.pp
@@ -19,5 +19,27 @@ node backup03 {
iptables::firewall { 'ipv4':
tcpPorts => [ 9101, 9102, 9103 ]
}
-}
+ eth { 'eth1':
+ ipaddr => '10.5.127.28',
+ netmask => '255.255.255.0',
+ }
+
+ route { 'eth1':
+ content => '10.5.88.0/24 dev eth1'
+ }
+
+ file { ['/fedora_backups']:
+ ensure => directory
+ }
+
+ mount { "/fedora_backups":
+ device => "vtap-fedora-nfs01.storage.phx2.redhat.com:/vol/fedora_backups",
+ fstype => "nfs",
+ ensure => "mounted",
+ options => "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3",
+ atboot => true,
+ require => File['/fedora_backups']
+ }
+
+}
diff --git a/manifests/nodes/nfs01.phx2.fedoraproject.org.pp b/manifests/nodes/nfs01.phx2.fedoraproj
index d31ede2..6e1ee4f 100644
--- a/manifests/nodes/nfs01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/nfs01.phx2.fedoraproject.org.pp
@@ -8,6 +8,23 @@ node nfs01{
include iscsi-initiator-utils::initiator
include rsync::server
+ route { 'eth0':
+ content => '10.5.88.0/24 dev eth1'
+ }
+
+ file { ['/mnt', '/mnt/fedora_koji']:
+ ensure => directory
+ }
+
+ mount { "/mnt/fedora_koji":
+ device => "vtap-fedora-nfs01.storage.phx2.redhat.com:/vol/fedora_koji",
+ fstype => "nfs",
+ ensure => "mounted",
+ options => "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3",
+ atboot => true,
+ require => File['/mnt/fedora_koji']
+ }
+
collectd::collectd { 'log02': }
iptables::firewall { 'ipv4':
diff --git a/files/ntap-fedora-nfs01.storage.phx2.redhat.com/exports b/files/ntap-fedora-nfs01.storage.phx2.redhat.com/exports
index 4c52a23..13561ac 100644
--- a/files/ntap-fedora-nfs01.storage.phx2.redhat.com/exports
+++ b/files/ntap-fedora-nfs01.storage.phx2.redhat.com/exports
@@ -36,8 +36,8 @@
/vol/fedora_app_staging/app -sec=sys,rw=10.5.127.29:10.5.127.30,root=10.5.127.29:10.5.127.30
# INC49937 - new fedora volumes
# koji
-/vol/fedora_koji -sec=sys,rw=10.5.127.59:10.5.127.60:10.5.127.38:10.5.127.39:10.5.127.53:10.5.127.54:10.5.127.55:10.5.127.67:10.5.127.68:10.5.127.70:10.5.127.41:10.5.127.190:10.5.127.69,root=10.5.127.59:10.5.127.60:10.5.127.38:10.5.127.39:10.5.127.53:10.5.127.54:10.5.127.55:10.5.127.67:10.5.127.68:10.5.127.70:10.5.127.41:10.5.127.190:10.5.127.69,ro=10.5.127.0/24
+/vol/fedora_koji -sec=sys,rw=10.5.127.11:rw=10.5.127.59:10.5.127.60:10.5.127.38:10.5.127.39:10.5.127.53:10.5.127.54:10.5.127.55:10.5.127.67:10.5.127.68:10.5.127.70:10.5.127.41:10.5.127.190:10.5.127.69,root=10.5.127.59:10.5.127.60:10.5.127.38:10.5.127.39:10.5.127.53:10.5.127.54:10.5.127.55:10.5.127.67:10.5.127.68:10.5.127.70:10.5.127.41:10.5.127.190:10.5.127.69,ro=10.5.127.0/24
# general fedora backups
-/vol/fedora_backups -sec=sys,rw=10.5.126.161,root=10.5.126.161
+/vol/fedora_backups -sec=sys,rw=10.5.127.28,root=10.5.127.28
# lookaside source cache
/vol/fedora_sourcecache -sec=sys,rw=10.5.127.67
11 years
Freeze Break Request: Fedora Tagger Schema
by Ralph Bean
This is a second freeze break request for Fedora Tagger. I haven't
actually carried out the first one yet, but Kevin's mention of the
broken bodhi sqlitebuildtags url took us down a rabbit hole.
This is the traceback that tagger logs when the bodhi masher tries to
pull down its sqlitebuildtags:
Traceback (most recent call last):
File "/usr/lib/python2.6/site-packages/flask/app.py", line 1687, in wsgi_app
response = self.full_dispatch_request()
File "/usr/lib/python2.6/site-packages/flask/app.py", line 1360, in full_dispatch_request
rv = self.handle_user_exception(e)
File "/usr/lib/python2.6/site-packages/flask/app.py", line 1358, in full_dispatch_request
rv = self.dispatch_request()
File "/usr/lib/python2.6/site-packages/flask/app.py", line 1344, in dispatch_request
return self.view_functions[rule.endpoint](**req.view_args)
File "/usr/lib/python2.6/site-packages/fedoratagger/api/api.py", line 461, in tag_pkg_sqlite
return fedoratagger.lib.sqlitebuildtags()
File "/usr/lib/python2.6/site-packages/fedoratagger/lib/sqlite_export.py", line 56, in sqlitebuildtags
conn.executemany(insert_statement, rows)
IntegrityError: columns name, tag are not unique
The problem is that the schema upgrade from tagger1 to tagger2 didn't
go smoothly in production, and we didn't notice. There is supposed to
be a DB constraint that disallows duplicate tags on packages, but it is
absent.
We can't just apply that new constraint, because there are now two
duplicate tags in the DB.
We need to:
1) Remove the duplicates
2) Apply the constraint so it doesn't happen again
Here's the constraint we need to apply in postgres:
ALTER TABLE tag ADD CONSTRAINT unique_package_label UNIQUE (package_id, label);
Here's a script to remove the duplicates:
#!/usr/bin/env python
import os
os.environ['FEDORATAGGER_CONFIG'] = '/etc/fedoratagger/fedoratagger.cfg'
from sqlalchemy import func, and_
import fedoratagger
import fedoratagger.lib.model as m
print 'Looking now for package tag dupes.'
query = fedoratagger.SESSION.query(m.Tag).all()
results = {}
for tag in query:
results[tag.label] = results.get(tag.label, {})
results[tag.label][tag.package_id] = \
results[tag.label].get(tag.package_id, 0) + 1
dupes = []
for label, packages in results.items():
for package, count in packages.items():
if count > 1:
dupes.append((label, package))
print "Found these package+tag dupes:", dupes
base_query = fedoratagger.SESSION.query(m.Tag)
for label, package_id in dupes:
query = base_query.filter(and_(
m.Tag.label==label,
m.Tag.package_id==package_id
)).all()
keep, rest = query[0], query[1:]
for dupe in rest:
fedoratagger.SESSION.delete(dupe)
fedoratagger.SESSION.commit()
11 years
Freeze break: add backup storage to backup03
by Kevin Fenzi
Greetings.
I'd like to add a interface on our storage network and mount the new
backup volume we now have allocated to us on backup03.
This is in prep for redoing backups (see previous mail to the list).
There's no backups happening right now, so it shouldn't disrupt things,
and should be easy to back out of.
+1s?
kevin
11 years
Ask Fedora hackfest?
by Rahul Sundaram
Hi
I was thinking of proposing a hackfest on Ask Fedora for Flock
(https://fedoraproject.org/wiki/Flock) . Would anyone be interested in
participating and if so, do you have any ideas on what you would like
to do? Let me know and if there is sufficient interest, I would submit
a proposal. Thanks
Rahul
11 years
Freeze break request: add rsync for httpd logs
by Kevin Fenzi
So, first freeze break request. ;)
I added a number of applications to have log02 pull httpd logs from,
but some of them do not have rsync installed, so pulling logs from them
is failing. I'd like to have them include rsync::server (which by
default only exposes logs to log02 for rsync) and allow that in
firewalls.
It's not urgent, but it would be nice to start collecting these sooner
rather than later.
kevin
--
diff --git a/manifests/nodes/ask01.phx2.fedoraproject.org.pp b/manifests/nodes/ask01.phx2.fedoraproject.org.pp
index 8a24a68..b85905c 100644
--- a/manifests/nodes/ask01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/ask01.phx2.fedoraproject.org.pp
@@ -17,7 +17,9 @@ node "ask01.phx2.fedoraproject.org" {
}
iptables::firewall { 'ipv4':
- tcpPorts => [ 80 ]
+ tcpPorts => [ 80 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
collectd::collectd { 'log02': }
diff --git a/manifests/nodes/ask01.stg.phx2.fedoraproject.org.pp b/manifests/nodes/ask01.stg.phx2.fedoraproject.org.pp
index e1abad9..661f5ac 100644
--- a/manifests/nodes/ask01.stg.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/ask01.stg.phx2.fedoraproject.org.pp
@@ -16,7 +16,9 @@ node "ask01.stg.phx2.fedoraproject.org" {
}
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 8888 ]
+ tcpPorts => [ 80, 443, 8888 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
}
diff --git a/manifests/nodes/ask02.phx2.fedoraproject.org.pp b/manifests/nodes/ask02.phx2.fedoraproject.org.pp
index bf7b259..6df2054 100644
--- a/manifests/nodes/ask02.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/ask02.phx2.fedoraproject.org.pp
@@ -17,7 +17,9 @@ node "ask02.phx2.fedoraproject.org" {
}
iptables::firewall { 'ipv4':
- tcpPorts => [ 80 ]
+ tcpPorts => [ 80 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
collectd::collectd { 'log02': }
diff --git a/manifests/nodes/blockerbugs01.phx2.fedoraproject.org.pp b/manifests/nodes/blockerbugs01.phx2.fedoraproject.org.pp
index 6647b05..61cf44e 100644
--- a/manifests/nodes/blockerbugs01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/blockerbugs01.phx2.fedoraproject.org.pp
@@ -12,7 +12,9 @@ node "blockerbugs01.phx2.fedoraproject.org" {
include blockerbugs::nobalance
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 8888 ]
+ tcpPorts => [ 80, 443, 8888 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db01
host { 'db-blockerbugs':
diff --git a/manifests/nodes/blockerbugs01.stg.phx2.fedoraproject.org.pp b/manifests/nodes/blockerbugs01.stg.phx2.fedoraproject.org.pp
index a034e3d..aa7eb45 100644
--- a/manifests/nodes/blockerbugs01.stg.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/blockerbugs01.stg.phx2.fedoraproject.org.pp
@@ -9,6 +9,8 @@ node "blockerbugs01.stg.phx2.fedoraproject.org" {
include blockerbugs::nobalance
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 8888 ]
+ tcpPorts => [ 80, 443, 8888 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
}
diff --git a/manifests/nodes/blockerbugs02.phx2.fedoraproject.org.pp b/manifests/nodes/blockerbugs02.phx2.fedoraproject.org.pp
index 61267e7..e558851 100644
--- a/manifests/nodes/blockerbugs02.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/blockerbugs02.phx2.fedoraproject.org.pp
@@ -12,7 +12,9 @@ node "blockerbugs02.phx2.fedoraproject.org" {
# include blockerbugs::nobalance
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 8888 ]
+ tcpPorts => [ 80, 443, 8888 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db01
host { 'db-blockerbugs':
diff --git a/manifests/nodes/datagrepper01.phx2.fedoraproject.org.pp b/manifests/nodes/datagrepper01.phx2.fedoraproject.org.pp
index 8198138..a2616d0 100644
--- a/manifests/nodes/datagrepper01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/datagrepper01.phx2.fedoraproject.org.pp
@@ -11,7 +11,9 @@ node "datagrepper01.phx2.fedoraproject.org" {
include openvpn::client
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
host { 'db-for-datagrepper':
diff --git a/manifests/nodes/datagrepper01.stg.phx2.fedoraproject.org.pp b/manifests/nodes/datagrepper01.stg.phx2.fedoraproject.org.pp
index c81a938..78e8f8d 100644
--- a/manifests/nodes/datagrepper01.stg.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/datagrepper01.stg.phx2.fedoraproject.org.pp
@@ -12,7 +12,9 @@ node "datagrepper01.stg.phx2.fedoraproject.org" {
include datagrepper::app
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
host { 'db-for-datagrepper':
diff --git a/manifests/nodes/datagrepper02.phx2.fedoraproject.org.pp b/manifests/nodes/datagrepper02.phx2.fedoraproject.org.pp
index 4a7c423..84b45ec 100644
--- a/manifests/nodes/datagrepper02.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/datagrepper02.phx2.fedoraproject.org.pp
@@ -11,7 +11,9 @@ node "datagrepper02.phx2.fedoraproject.org" {
include openvpn::client
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
host { 'db-for-datagrepper':
diff --git a/manifests/nodes/fedocal01.phx2.fedoraproject.org.pp b/manifests/nodes/fedocal01.phx2.fedoraproject.org.pp
index 14168c2..9567cec 100644
--- a/manifests/nodes/fedocal01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/fedocal01.phx2.fedoraproject.org.pp
@@ -9,7 +9,9 @@ node "fedocal01.phx2.fedoraproject.org" {
include fedocal::nobalance
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db01
diff --git a/manifests/nodes/fedocal01.stg.phx2.fedoraproject.org.pp b/manifests/nodes/fedocal01.stg.phx2.fedoraproject.org.pp
index fd13777..3c6adf8 100644
--- a/manifests/nodes/fedocal01.stg.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/fedocal01.stg.phx2.fedoraproject.org.pp
@@ -10,7 +10,9 @@ node "fedocal01.stg.phx2.fedoraproject.org" {
include fedocal::nobalance
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db02.stg
diff --git a/manifests/nodes/fedocal02.phx2.fedoraproject.org.pp b/manifests/nodes/fedocal02.phx2.fedoraproject.org.pp
index 090207c..d224fd1 100644
--- a/manifests/nodes/fedocal02.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/fedocal02.phx2.fedoraproject.org.pp
@@ -10,7 +10,9 @@ node "fedocal02.phx2.fedoraproject.org" {
#include fedocal::nobalance
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db01
diff --git a/manifests/nodes/openid01.phx2.fedoraproject.org.pp b/manifests/nodes/openid01.phx2.fedoraproject.org.pp
index 8db2feb..94daf55 100644
--- a/manifests/nodes/openid01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/openid01.phx2.fedoraproject.org.pp
@@ -9,7 +9,9 @@ node "openid01.phx2.fedoraproject.org" {
include openvpn::client
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db-fas01
diff --git a/manifests/nodes/openid01.stg.phx2.fedoraproject.org.pp b/manifests/nodes/openid01.stg.phx2.fedoraproject.org.pp
index e3527ce..40386d5 100644
--- a/manifests/nodes/openid01.stg.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/openid01.stg.phx2.fedoraproject.org.pp
@@ -9,7 +9,9 @@ node "openid01.stg.phx2.fedoraproject.org" {
include fas-openid
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db-fas01.stg
diff --git a/manifests/nodes/openid02.phx2.fedoraproject.org.pp b/manifests/nodes/openid02.phx2.fedoraproject.org.pp
index 3e95783..81142df 100644
--- a/manifests/nodes/openid02.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/openid02.phx2.fedoraproject.org.pp
@@ -9,7 +9,9 @@ node "openid02.phx2.fedoraproject.org" {
include openvpn::client
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
# This points to db-fas01
diff --git a/manifests/nodes/packages01.dev.fedoraproject.org.pp b/manifests/nodes/packages01.dev.fedoraproject.org.pp
index af87535..bb14b41 100644
--- a/manifests/nodes/packages01.dev.fedoraproject.org.pp
+++ b/manifests/nodes/packages01.dev.fedoraproject.org.pp
@@ -6,6 +6,8 @@ node "packages01.dev" {
include httpd::mod_wsgi
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 6996 ]
+ tcpPorts => [ 80, 443, 6996 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
}
diff --git a/manifests/nodes/packages01.phx2.fedoraproject.org.pp b/manifests/nodes/packages01.phx2.fedoraproject.org.pp
index 39d9036..691c5ed 100644
--- a/manifests/nodes/packages01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/packages01.phx2.fedoraproject.org.pp
@@ -26,7 +26,9 @@ node "packages01" {
}
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 6996 ]
+ tcpPorts => [ 80, 443, 6996 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
glusterfs::server::config { packages:
diff --git a/manifests/nodes/packages01.stg.phx2.fedoraproject.org.pp b/manifests/nodes/packages01.stg.phx2.fedoraproject.org.pp
index b0c2b9d..f96a4bd 100644
--- a/manifests/nodes/packages01.stg.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/packages01.stg.phx2.fedoraproject.org.pp
@@ -25,6 +25,8 @@ node "packages01.stg" {
netmask => '255.255.255.0',
}
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 6996 ]
+ tcpPorts => [ 80, 443, 6996 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
}
diff --git a/manifests/nodes/packages02.phx2.fedoraproject.org.pp b/manifests/nodes/packages02.phx2.fedoraproject.org.pp
index f6a5441..a66358b 100644
--- a/manifests/nodes/packages02.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/packages02.phx2.fedoraproject.org.pp
@@ -24,7 +24,9 @@ node "packages02" {
}
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 6996 ]
+ tcpPorts => [ 80, 443, 6996 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
glusterfs::server::config { packages:
diff --git a/manifests/nodes/paste01.phx2.fedoraproject.org.pp b/manifests/nodes/paste01.phx2.fedoraproject.org.pp
index 7708415..30d83e6 100644
--- a/manifests/nodes/paste01.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/paste01.phx2.fedoraproject.org.pp
@@ -9,7 +9,9 @@ node "paste01.phx2.fedoraproject.org" {
collectd::collectd { 'log02': }
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 8888 ]
+ tcpPorts => [ 80, 443, 8888 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
selboolean { [
diff --git a/manifests/nodes/paste01.stg.fedoraproject.org.pp b/manifests/nodes/paste01.stg.fedoraproject.org.pp
index fa05ef1..ad861b5 100644
--- a/manifests/nodes/paste01.stg.fedoraproject.org.pp
+++ b/manifests/nodes/paste01.stg.fedoraproject.org.pp
@@ -9,7 +9,9 @@ node "paste01.stg.phx2.fedoraproject.org" {
include sticky-notes
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 8888 ]
+ tcpPorts => [ 80, 443, 8888 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
selboolean { [
diff --git a/manifests/nodes/paste02.phx2.fedoraproject.org.pp b/manifests/nodes/paste02.phx2.fedoraproject.org.pp
index 091e894..14d694c 100644
--- a/manifests/nodes/paste02.phx2.fedoraproject.org.pp
+++ b/manifests/nodes/paste02.phx2.fedoraproject.org.pp
@@ -9,7 +9,9 @@ node "paste02.phx2.fedoraproject.org" {
collectd::collectd { 'log02': }
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443, 8888 ]
+ tcpPorts => [ 80, 443, 8888 ],
+ custom => [ "-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT",
+ ]
}
selboolean { [
diff --git a/modules/askbot/manifests/init.pp b/modules/askbot/manifests/init.pp
index 50bb7d2..98afdb0 100644
--- a/modules/askbot/manifests/init.pp
+++ b/modules/askbot/manifests/init.pp
@@ -1,5 +1,6 @@
class askbot {
include httpd::mod_wsgi
+ include rsync::server
package { "askbot":
ensure => installed,
diff --git a/modules/blockerbugs/manifests/init.pp b/modules/blockerbugs/manifests/init.pp
index c841ab4..2636819 100644
--- a/modules/blockerbugs/manifests/init.pp
+++ b/modules/blockerbugs/manifests/init.pp
@@ -19,6 +19,7 @@ class blockerbugs::app {
include httpd::mod_wsgi
include mod_ssl
+ include rsync::server
selboolean { [
"httpd_can_network_connect_db",
diff --git a/modules/datagrepper/manifests/init.pp b/modules/datagrepper/manifests/init.pp
index afc9b78..bbd10bc 100644
--- a/modules/datagrepper/manifests/init.pp
+++ b/modules/datagrepper/manifests/init.pp
@@ -19,6 +19,7 @@ class datagrepper::app {
include httpd::mod_wsgi
include httpd::mod_ssl
include fedmsg::config
+ include rsync::server
package { "datagrepper":
ensure => present,
diff --git a/modules/fas-openid/manifests/init.pp b/modules/fas-openid/manifests/init.pp
index 7c48d0d..3409781 100644
--- a/modules/fas-openid/manifests/init.pp
+++ b/modules/fas-openid/manifests/init.pp
@@ -3,6 +3,7 @@ class fas-openid {
include httpd::mod_ssl
include httpd::mod_wsgi
include hotfix::python-openid
+ include rsync::server
selboolean { [
"httpd_can_network_connect_db",
diff --git a/modules/fedocal/manifests/init.pp b/modules/fedocal/manifests/init.pp
index 6854c24..31809e5 100644
--- a/modules/fedocal/manifests/init.pp
+++ b/modules/fedocal/manifests/init.pp
@@ -2,6 +2,7 @@ class fedocal {
include selinux-enforcing
include httpd::mod_ssl
include httpd::mod_wsgi
+ include rsync::server
selboolean { [
"httpd_can_network_connect_db",
diff --git a/modules/packages/manifests/init.pp b/modules/packages/manifests/init.pp
index ede4331..7b211a7 100644
--- a/modules/packages/manifests/init.pp
+++ b/modules/packages/manifests/init.pp
@@ -35,6 +35,7 @@ class fedoracommunity::tagger {
include httpd::mod_wsgi
include httpd::mod_ssl
include fedmsg::config
+ include rsync::server
fedmsg::certificate { "fedoratagger":
service => "fedoratagger",
group => "fedoratagger",
diff --git a/modules/sticky-notes/manifests/init.pp b/modules/sticky-notes/manifests/init.pp
index ed78bf2..6fd8f71 100644
--- a/modules/sticky-notes/manifests/init.pp
+++ b/modules/sticky-notes/manifests/init.pp
@@ -1,6 +1,7 @@
class sticky-notes {
include httpd::base
include httpd::php
+ include rsync::server
package { "sticky-notes":
ensure => installed,
11 years
