Meeting Agenda Item: Introduction Ausmarton Fernandes
by Ausmarton Fernandes
My IRC handle: ausmarton
I'm a Software Developer. I have experience with Puppet, Nagios, management
of LAMP servers, writing build scripts, configuring firewall
(iptables/netfilter), setting up IDS (tripwire) and mail servers
(sendmail/postfix).
I'm more interested in learning about security infrastructures.
Regards,
Ausmarton Fernandes
10 years, 11 months
2012-11-29 meeting canceled
by Kevin Fenzi
I know we didn't have a meeting last week (thanksgiving holiday in the
US) but we are going to skip today as well.
Many of us will be traveling back from the Security FAD, and will be
unable to be there. So, save up your news and questions and we will
meet again as normal next week.
Thanks,
kevin
11 years
I forgot my laptop charger
by Stephen John Smoogen
Hi guys.. made it safe to SC but realized I forgot my laptop
charger... so I will be spending today looking for someplace with a
90W lenovo charger. Hopefully I can get that and will be able to cover
stuff.
--
Stephen J Smoogen.
"Don't derail a useful feature for the 99% because you're not in it."
Linus Torvalds
"Years ago my mother used to say to me,... Elwood, you must be oh
so smart or oh so pleasant. Well, for years I was smart. I
recommend pleasant. You may quote me." —James Stewart as Elwood P. Dowd
11 years
Freeze break: sync download-ib01 from dl.fedoraproject.org
by Kevin Fenzi
We pointed our download-i2 mirrors over to download-ib01 while they are
in the process of being migrated. Sadly, we didn't notice that
download-ib01 was syncing from download-i2. ;(
The following repoints it and adds a lock wrapper around the sync job.
+1s?
kevin
--
diff --git a/modules/mirrormanager/files/sync.sh b/modules/mirrormanager/files/sync.sh
index 6a30d73..9a63adf 100755
--- a/modules/mirrormanager/files/sync.sh
+++ b/modules/mirrormanager/files/sync.sh
@@ -12,7 +12,7 @@ ALT_EXCLUDES="--exclude stage/deltaisos/archive"
EPL_EXCLUDES=""
FED_EXCLUDES=""
-SERVER=download-rdu02-I2.fedoraproject.org
+SERVER=dl.fedoraproject.org
# http://dl.fedoraproject.org/pub/alt/
${RSYNC} ${RS_OPT} ${RS_DEADLY} ${ALT_EXCLUDES} ${SERVER}::fedora-alt/ /srv/pub/alt/ | tail -n2 | logger -p
diff --git a/modules/mirrormanager/manifests/init.pp b/modules/mirrormanager/manifests/init.pp
index e5ceb4e..7dcc375 100644
--- a/modules/mirrormanager/manifests/init.pp
+++ b/modules/mirrormanager/manifests/init.pp
@@ -329,7 +329,7 @@ class mirrormanager::sync {
}
cron { 'sync-mirror':
- command => '/usr/local/bin/sync.sh',
+ command => '/usr/local/bin/lock-wrapper mirrorsync /usr/local/bin/sync.sh',
require => [File['/etc/mirrormanager-client/report_mirror.conf'], File['/usr/local/bin/sync.sh']],
user => "root",
hour => [ 13 ],
11 years
Você conhece o site do efacil? O site de compras do grupo Martins Atacadista!
by Nelio Carneiro
Olá! Você conhece o site efacil?
É o site de compras online do grupo Martins.
O site possui classificação 'Diamante' no e-bit.
É um site completo com várias categorias de produtos.
Eletrônicos, Informática, Celulares, Livros, Esportes e muito mais.
E é muito fácil ganhar descontos em todos os produtos do site. Utilize o
cupom:
*colab-54229*
*
*
E ganhe descontos em qualquer produto do site.
Informe aos seus familiares e amigos. Não perca essa oportunidade!
Acesse: *http://efacil.com.br*
Acesse também: http://descontoefacil.com.br para obter descontos exclusivos!
Aproveite!
=)
11 years
[CHANGE REQUEST] smolt retirement
by Toshio Kuratomi
We've been talking about retiring smolt and replacing it with a sinkhole
that accepts data (so older installs don't cause long timeouts when
attempting to send a smolt profile) for a while now. puiterwijk wrote the
files that we'd need to implement this a few weeks ago. I've now got those
changes we'll need into a patch against our puppet repo.
The changes touch the smolt server (value01) which is not covered by this
freeze and also the proxies which are. In addition, I've got a second patch
that updates nagios to no longer check smolt. The changes to main smolt are
applied in stg and seem to work well. (Have tried smoltSendProfile against
the stg server and the links you are given for public profiles)
Can I get a +1 to apply these changes?
Note after freeze we can also:
* Turn off the smolt wiki -- the changes on the proxy should mean it doesn't
see any more traffic but we should be able to stop it from running as
well.
* Turn off backups of the smolt db
* Look into making the last smolt db dump available for people who are
interested in the data.
* Remove the smolt db (and the smolt mediawiki db) from our mysql server.
-Toshio
11 years
collab migration plans/timeline
by Kevin Fenzi
Greetings.
We have a planned outage of lists.fedoraproject.org / collab starting
later tonight:
https://fedorahosted.org/fedora-infrastructure/ticket/3569
Here's my plan/changes. I'd appreciate any feedback. ;)
05:00 UTC - disable/stop/block all external services on collab03.
05:00 UTC - start final rsync
(syncs have been taking 10 hours or so. It's 83GB of small files)
XX:00 UTC - wait for sync to finish, check in morning.
Add attached first commit to puppet and puppet collab01.
Test email to list directly to collab01.
Test web archive access directly to collab01.
Test gobby.
Add attached second commit to redirect smtp-mm machines to collab01.
Push queued emails from one smtp-mm host and confirm all delivers ok.
Push queue on other two smtp-mm hosts.
Announce outage over.
kevin
---patch1---
diff --git a/manifests/nodes/collab01.fedoraproject.org.pp b/manifests/nodes/collab01.fedoraproject.org.pp
index 75fecf5..5eda603 100644
--- a/manifests/nodes/collab01.fedoraproject.org.pp
+++ b/manifests/nodes/collab01.fedoraproject.org.pp
@@ -1,29 +1,18 @@
node collab01 {
$bacula5 = "true"
+ include collab
-#
-# Add these for now here until we include collab
-#
- $fas_groups = [ 'sysadmin-main', 'sysadmin-noc', 'sysadmin-tools' , 'fi-apprentice' ]
- include global
- include fas::client
- include selinux-enforcing
- include openvpn::client
- include yum::repo::sfs
+ $mailman_default_url_proto = "https"
+ $mailman_default_url_host = "admin.fedoraproject.org"
+ $mailman_default_email_host = "lists.fedoraproject.org"
+ $mailman_archive_proto = "http"
+ $mailman_archive_host = "lists.fedoraproject.org"
+ $mailman_initial_sitelist_owner = "jcollie(a)fedoraproject.org"
+ $mailman_initial_sitelist_password = "changeme"
-# include collab
+ include mailman_server # This should only be enabled on active primary
-# $mailman_default_url_proto = "https"
-# $mailman_default_url_host = "admin.fedoraproject.org"
-# $mailman_default_email_host = "lists.fedoraproject.org"
-# $mailman_archive_proto = "http"
-# $mailman_archive_host = "lists.fedoraproject.org"
-# $mailman_initial_sitelist_owner = "jcollie(a)fedoraproject.org"
-# $mailman_initial_sitelist_password = "changeme"
-#
-# include mailman_server # This should only be enabled on active primary
-#
-# include mailman::rss
-# include spamassassin::server
-# $spamEnabled = true
+ include mailman::rss
+ include spamassassin::server
+ $spamEnabled = true
}
---end---
---patch2---
diff --git a/configs/system/smtp/aliases.template.erb b/configs/system/smtp/aliases.template.erb index 0244fde..5dd74f3 100644
--- a/configs/system/smtp/aliases.template.erb
+++ b/configs/system/smtp/aliases.template.erb
@@ -1,4 +1,4 @@
-<% mailman_server = (hostname == "collab03") || (hostname == "hosted01") || (hostname == "hosted02") -%>
+<% mailman_server = (hostname == "collab01") || (hostname == "hosted01") || (hostname == "hosted02") -%> # # Aliases in this file will NOT be expanded in the header from # Mail, but WILL be visible over networks or from /bin/mail.
diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp index 4a43c42..6956cc5 100644
--- a/manifests/services/proxy.pp
+++ b/manifests/services/proxy.pp
@@ -654,7 +654,7 @@ class proxy {
website => "admin.fedoraproject.org",
path => "/mailman",
iconpath => "/icons",
- proxyurl => "http://collab03.fedoraproject.org",
+ proxyurl => "http://collab01.fedoraproject.org",
}
httpd::status { "admin.fedoraproject.org/status":
diff --git a/modules/postfix/files/transports b/modules/postfix/files/transports index 93eef4f..567d1ba 100644
--- a/modules/postfix/files/transports
+++ b/modules/postfix/files/transports
@@ -1 +1 @@
-lists.fedoraproject.org relay:[collab03.fedoraproject.org]
+lists.fedoraproject.org relay:[collab01.fedoraproject.org]
---end-patch2---
11 years
Plan for today's Fedora Infrastructure meeting (2012-11-15)
by Kevin Fenzi
The infrastructure team will be having it's weekly meeting today,
2012-11-08 at 19:00 UTC in #fedora-meeting on the freenode network.
Suggested topics:
#topic New folks introductions and Apprentice tasks.
If any new folks want to give a quick one line bio or any apprentices
would like to ask general questions, they can do so in this part of the
meeting. Don't be shy!
#topic Applications status / discussion
Check in on status of our applications: pkgdb, fas, bodhi, koji,
community, voting, tagger, packager, dpsearch, etc.
If there's new releases, bugs we need to work around or things to note.
#topic Sysadmin status / discussion
Here we talk about sysadmin related happenings from the previous week,
or things that are upcoming.
#topic Private Cloud status update
#topic Security FAD update
#topic Upcoming Tasks/Items
#info 2012-11-13 to 2012-11-27 F18 Beta Freeze
#info 2012-11-20 FY2014 budget due
#info 2012-11-27 F18 Beta release
#info 2012-11-22 to 2012-11-23 Thanksgiving holiday
#info 2012-11-26 to 2012-11-29 Security FAD
#info 2012-12-18 to 2013-01-08 F18 Final Freeze
#info 2012-11-30 end of 3nd quarter
#info 2012-12-01 nag fi-apprentices
#info 2012-12-24 to 2013-01-01 Red Hat Shutdown for holidays.
#info 2013-01-08 F18 release.
#info 2013-01-18 to 2013-01-20 FUDCON Lawrence
#topic Open Floor
Submit your agenda items, as tickets in the trac instance and send a
note replying to this thread.
More info here:
https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings
Thanks
kevin
11 years
