Hey all, I wanted to start a thread about doing more frequent Atomic releases in Fedora.
In particular I'd like to start building a new atomic release every two weeks that
includes the latest version of Docker, Kubernetes, and OSTree for the Fedora Atomic
images.
The problem I'm trying to solve here is that there is a lot of work going on upstream in
the Docker and Kubernetes communities and there isn't a very good way to consume that
upstream work on a Red Hat/Fedora/CentOS system today. By focusing on more regular
releases, we can fix some of the issues we've seen (like demoing new features at a
conference that people can't actually use).
There are still some details to work out like whether to base this image on Fedora
$CURRENT or rawhide and what to do when the builds fail. Fortunately, this can possibly
be done without much additional change to the release process. We're already rebuilding
the docker/kubernetes/ostree rpms almost daily, and there are nightly builds as well
(at least in rawhide).
If we can pull a 2 week process off, I'd like to see that followed by a 4 week process
in CentOS which will behave similarly but with the slightly slower-moving, more stable bits.
Thoughts?
[1] http://www.projectatomic.io/download/
--
Mike McGrath | mmcgrath(a)redhat.com | (312) 660-3547
Atomic | Red Hat Chicago | http://projectatomic.io/
Hi,
I will be in the PyCon this week and next week (mostly). So I will be
offline most of this time. Can anyone else please chair the meeting?
Kushal
--
Fedora Cloud Engineer
CPython Core Developer
Director Python Software Foundation
http://kushaldas.in
Dear all,
You are kindly invited to the meeting:
Fedora Cloud Workgroup on 2015-04-08 from 19:00:00 to 20:00:00 UTC
At fedora-meeting(a)irc.freenode.net
The meeting will be about:
Standing meeting for the Fedora Cloud Workgroup
Source: https://apps.fedoraproject.org/calendar/meeting/1999/
Hey fellow cloudies! Just wanted to give you all a heads up that
starting next week I'm going to be out of the office for a while - so
you'll see me less on IRC and for meetings. I'll still be monitoring
email and IRC though, so if you have something for me I'll still get to
it :) Thanks!
--
// Mike
--
Fedora QA
freenode: roshi
http://roshi.fedorapeople.org
For folks not subscribed to atomic-devel.
----- Forwarded Message -----
From: "Scott Collier" <emailscottcollier(a)gmail.com>
To: atomic-devel(a)projectatomic.io
Sent: Friday, April 3, 2015 1:34:38 AM
Subject: [atomic-devel] incorrect permissions
I was testing cockpit on the F22 Atomic image and ran into this issue.
Cockpit would start, but I could not connect to it because SSH was
having a problem. The error cockpit gave after trying to login to the
web interface was:
"Couldn't connect or authenticate: no-host"
This may have been brought up before, I didn't dig into existing issues.
The problem was permissions on these two files:
/etc/ssh/ssh_host_ecdsa_key
/etc/ssh/ssh_host_rsa_key
The message from "systemctl status sshd" was:
# systemctl status sshd
● sshd.service - OpenSSH server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled;
vendor preset: enabled)
Active: active (running) since Fri 2015-04-03 05:27:21 UTC; 7s ago
Docs: man:sshd(8)
man:sshd_config(5)
Main PID: 5183 (sshd)
Memory: 844.0K
CGroup: /system.slice/sshd.service
└─5183 /usr/sbin/sshd -D
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: @ WARNING:
UNPROTECTED PRIVATE KEY FILE! @
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Permissions 0640 for
'/etc/ssh/ssh_host_rsa_key' are too open.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: It is required that
your private key files are NOT accessible by others.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: This private key will
be ignored.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: key_load_private: bad
permissions
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Could not load host
key: /etc/ssh/ssh_host_rsa_key
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Server listening on
0.0.0.0 port 22.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Server listening on ::
port 22.
So, I changes the permissions on both files to 600 and restarted sshd,
then cockpit was able to connect.
Version:
# atomic host status
TIMESTAMP (UTC) VERSION ID OSNAME REFSPEC
* 2015-04-02 10:45:23 22.29 0db0777dfb fedora-atomic
fedora-atomic:fedora-atomic/f22/x86_64/docker-host
2015-03-05 11:02:11 22.6 e1e60980f1 fedora-atomic
fedora-atomic:fedora-atomic/f22/x86_64/docker-host
-scott
--
Joe Brockmeier | Principal Cloud & Storage Analyst
jzb(a)redhat.com | http://community.redhat.com/
Twitter: @jzb | http://dissociatedpress.net/
# F22 Blocker Review meeting
# Date: 2015-04-06
# Time: 1700 UTC
# Location: #fedora-blocker-review on irc.freenode.net
Greetings testers! Tomorrow we'll be having another blocker review
directly after the QA meeting. Currently we have 7 proposed blockers for
Beta and none proposed for Final. If you want to take a look at the
proposed or accepted blockers, the full list can be found here:
https://qa.fedoraproject.org/blockerbugs/
Make sure to click through the milestones to see how many we have before
the meeting!
We'll be evaluating these bugs to see if they violate any of the
Release Criteria and warrant the blocking of a release if they're not
fixed. Information on the release criteria for F22 can be found on the
wiki [0].
For more information about the Blocker and Freeze exception process,
check out these links:
- https://fedoraproject.org/wiki/QA:SOP_blocker_bug_process
- https://fedoraproject.org/wiki/QA:SOP_freeze_exception_bug_process
And for those of you who are curious how a Blocker Review Meeting
works - or how it's supposed to go and you want to run one - check out
the SOP on the wiki:
- https://fedoraproject.org/wiki/QA:SOP_Blocker_Bug_Meeting
See you Monday!
[0] https://fedoraproject.org/wiki/Fedora_Release_Criteria
--
// Mike
--
Fedora QA
freenode: roshi
http://roshi.fedorapeople.org
Hi all,
I am travelling to Montreal for PyCon in few hours, so I will be out
of Internet for few days.
Kushal
--
Fedora Cloud Engineer
CPython Core Developer
Director Python Software Foundation
http://kushaldas.in