infrastructure November 2012

infrastructure@lists.fedoraproject.org

24 participants
23 discussions

Meeting Agenda Item: Introduction Ausmarton Fernandes
by Ausmarton Fernandes 15 Dec '12

15 Dec '12

My IRC handle: ausmarton I'm a Software Developer. I have experience with Puppet, Nagios, management of LAMP servers, writing build scripts, configuring firewall (iptables/netfilter), setting up IDS (tripwire) and mail servers (sendmail/postfix). I'm more interested in learning about security infrastructures. Regards, Ausmarton Fernandes

3 5

2012-11-29 meeting canceled
by Kevin Fenzi 29 Nov '12

29 Nov '12

I know we didn't have a meeting last week (thanksgiving holiday in the US) but we are going to skip today as well. Many of us will be traveling back from the Security FAD, and will be unable to be there. So, save up your news and questions and we will meet again as normal next week. Thanks, kevin

3 5

Fedora 18 Beta Freeze now in effect (again)
by Kevin Fenzi 28 Nov '12

28 Nov '12

Greetings. we are now in the infrastructure freeze leading up to the Fedora 18 Beta release. This is a pre-release freeze. Please see: https://fedorahosted.org/fedora-infrastructure/browser/architecture/Environ… Anything in the Pre Release freeze box is frozen until 2012-11-27 (or later if Beta further slips). This means there should be NO puppet changes to any hosts in there (including global ones) without signoff of the change from at least 2 folks in sysadmin-main and/or release-engineering. Thanks, kevin

1 1

I forgot my laptop charger
by Stephen John Smoogen 26 Nov '12

26 Nov '12

Hi guys.. made it safe to SC but realized I forgot my laptop charger... so I will be spending today looking for someplace with a 90W lenovo charger. Hopefully I can get that and will be able to cover stuff. -- Stephen J Smoogen. "Don't derail a useful feature for the 99% because you're not in it." Linus Torvalds "Years ago my mother used to say to me,... Elwood, you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant. You may quote me." —James Stewart as Elwood P. Dowd

3 4

Freeze break: sync download-ib01 from dl.fedoraproject.org
by Kevin Fenzi 23 Nov '12

23 Nov '12

We pointed our download-i2 mirrors over to download-ib01 while they are in the process of being migrated. Sadly, we didn't notice that download-ib01 was syncing from download-i2. ;( The following repoints it and adds a lock wrapper around the sync job. +1s? kevin -- diff --git a/modules/mirrormanager/files/sync.sh b/modules/mirrormanager/files/sync.sh index 6a30d73..9a63adf 100755 --- a/modules/mirrormanager/files/sync.sh +++ b/modules/mirrormanager/files/sync.sh @@ -12,7 +12,7 @@ ALT_EXCLUDES="--exclude stage/deltaisos/archive" EPL_EXCLUDES="" FED_EXCLUDES="" -SERVER=download-rdu02-I2.fedoraproject.org +SERVER=dl.fedoraproject.org # http://dl.fedoraproject.org/pub/alt/ ${RSYNC} ${RS_OPT} ${RS_DEADLY} ${ALT_EXCLUDES} ${SERVER}::fedora-alt/ /srv/pub/alt/ | tail -n2 | logger -p diff --git a/modules/mirrormanager/manifests/init.pp b/modules/mirrormanager/manifests/init.pp index e5ceb4e..7dcc375 100644 --- a/modules/mirrormanager/manifests/init.pp +++ b/modules/mirrormanager/manifests/init.pp @@ -329,7 +329,7 @@ class mirrormanager::sync { } cron { 'sync-mirror': - command => '/usr/local/bin/sync.sh', + command => '/usr/local/bin/lock-wrapper mirrorsync /usr/local/bin/sync.sh', require => [File['/etc/mirrormanager-client/report_mirror.conf'], File['/usr/local/bin/sync.sh']], user => "root", hour => [ 13 ],

4 4

Você conhece o site do efacil? O site de compras do grupo Martins Atacadista!
by Nelio Carneiro 23 Nov '12

23 Nov '12

Olá! Você conhece o site efacil? É o site de compras online do grupo Martins. O site possui classificação 'Diamante' no e-bit. É um site completo com várias categorias de produtos. Eletrônicos, Informática, Celulares, Livros, Esportes e muito mais. E é muito fácil ganhar descontos em todos os produtos do site. Utilize o cupom: *colab-54229* * * E ganhe descontos em qualquer produto do site. Informe aos seus familiares e amigos. Não perca essa oportunidade! Acesse: *http://efacil.com.br* Acesse também: http://descontoefacil.com.br para obter descontos exclusivos! Aproveite! =)

1 0

test post, please ignore
by Kevin Fenzi 22 Nov '12

22 Nov '12

Just testing, please go back to eating turkey or relaxing. kevin

1 0

[CHANGE REQUEST] smolt retirement
by Toshio Kuratomi 21 Nov '12

21 Nov '12

We've been talking about retiring smolt and replacing it with a sinkhole that accepts data (so older installs don't cause long timeouts when attempting to send a smolt profile) for a while now. puiterwijk wrote the files that we'd need to implement this a few weeks ago. I've now got those changes we'll need into a patch against our puppet repo. The changes touch the smolt server (value01) which is not covered by this freeze and also the proxies which are. In addition, I've got a second patch that updates nagios to no longer check smolt. The changes to main smolt are applied in stg and seem to work well. (Have tried smoltSendProfile against the stg server and the links you are given for public profiles) Can I get a +1 to apply these changes? Note after freeze we can also: * Turn off the smolt wiki -- the changes on the proxy should mean it doesn't see any more traffic but we should be able to stop it from running as well. * Turn off backups of the smolt db * Look into making the last smolt db dump available for people who are interested in the data. * Remove the smolt db (and the smolt mediawiki db) from our mysql server. -Toshio

4 4

collab migration plans/timeline
by Kevin Fenzi 21 Nov '12

21 Nov '12

Greetings. We have a planned outage of lists.fedoraproject.org / collab starting later tonight: https://fedorahosted.org/fedora-infrastructure/ticket/3569 Here's my plan/changes. I'd appreciate any feedback. ;) 05:00 UTC - disable/stop/block all external services on collab03. 05:00 UTC - start final rsync (syncs have been taking 10 hours or so. It's 83GB of small files) XX:00 UTC - wait for sync to finish, check in morning. Add attached first commit to puppet and puppet collab01. Test email to list directly to collab01. Test web archive access directly to collab01. Test gobby. Add attached second commit to redirect smtp-mm machines to collab01. Push queued emails from one smtp-mm host and confirm all delivers ok. Push queue on other two smtp-mm hosts. Announce outage over. kevin ---patch1--- diff --git a/manifests/nodes/collab01.fedoraproject.org.pp b/manifests/nodes/collab01.fedoraproject.org.pp index 75fecf5..5eda603 100644 --- a/manifests/nodes/collab01.fedoraproject.org.pp +++ b/manifests/nodes/collab01.fedoraproject.org.pp @@ -1,29 +1,18 @@ node collab01 { $bacula5 = "true" + include collab -# -# Add these for now here until we include collab -# - $fas_groups = [ 'sysadmin-main', 'sysadmin-noc', 'sysadmin-tools' , 'fi-apprentice' ] - include global - include fas::client - include selinux-enforcing - include openvpn::client - include yum::repo::sfs + $mailman_default_url_proto = "https" + $mailman_default_url_host = "admin.fedoraproject.org" + $mailman_default_email_host = "lists.fedoraproject.org" + $mailman_archive_proto = "http" + $mailman_archive_host = "lists.fedoraproject.org" + $mailman_initial_sitelist_owner = "jcollie(a)fedoraproject.org" + $mailman_initial_sitelist_password = "changeme" -# include collab + include mailman_server # This should only be enabled on active primary -# $mailman_default_url_proto = "https" -# $mailman_default_url_host = "admin.fedoraproject.org" -# $mailman_default_email_host = "lists.fedoraproject.org" -# $mailman_archive_proto = "http" -# $mailman_archive_host = "lists.fedoraproject.org" -# $mailman_initial_sitelist_owner = "jcollie(a)fedoraproject.org" -# $mailman_initial_sitelist_password = "changeme" -# -# include mailman_server # This should only be enabled on active primary -# -# include mailman::rss -# include spamassassin::server -# $spamEnabled = true + include mailman::rss + include spamassassin::server + $spamEnabled = true } ---end--- ---patch2--- diff --git a/configs/system/smtp/aliases.template.erb b/configs/system/smtp/aliases.template.erb index 0244fde..5dd74f3 100644 --- a/configs/system/smtp/aliases.template.erb +++ b/configs/system/smtp/aliases.template.erb @@ -1,4 +1,4 @@ -<% mailman_server = (hostname == "collab03") || (hostname == "hosted01") || (hostname == "hosted02") -%> +<% mailman_server = (hostname == "collab01") || (hostname == "hosted01") || (hostname == "hosted02") -%> # # Aliases in this file will NOT be expanded in the header from # Mail, but WILL be visible over networks or from /bin/mail. diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp index 4a43c42..6956cc5 100644 --- a/manifests/services/proxy.pp +++ b/manifests/services/proxy.pp @@ -654,7 +654,7 @@ class proxy { website => "admin.fedoraproject.org", path => "/mailman", iconpath => "/icons", - proxyurl => "http://collab03.fedoraproject.org", + proxyurl => "http://collab01.fedoraproject.org", } httpd::status { "admin.fedoraproject.org/status": diff --git a/modules/postfix/files/transports b/modules/postfix/files/transports index 93eef4f..567d1ba 100644 --- a/modules/postfix/files/transports +++ b/modules/postfix/files/transports @@ -1 +1 @@ -lists.fedoraproject.org relay:[collab03.fedoraproject.org] +lists.fedoraproject.org relay:[collab01.fedoraproject.org] ---end-patch2---

1 0

Plan for today's Fedora Infrastructure meeting (2012-11-15)
by Kevin Fenzi 15 Nov '12

15 Nov '12

The infrastructure team will be having it's weekly meeting today, 2012-11-08 at 19:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic Private Cloud status update #topic Security FAD update #topic Upcoming Tasks/Items #info 2012-11-13 to 2012-11-27 F18 Beta Freeze #info 2012-11-20 FY2014 budget due #info 2012-11-27 F18 Beta release #info 2012-11-22 to 2012-11-23 Thanksgiving holiday #info 2012-11-26 to 2012-11-29 Security FAD #info 2012-12-18 to 2013-01-08 F18 Final Freeze #info 2012-11-30 end of 3nd quarter #info 2012-12-01 nag fi-apprentices #info 2012-12-24 to 2013-01-01 Red Hat Shutdown for holidays. #info 2013-01-08 F18 release. #info 2013-01-18 to 2013-01-20 FUDCON Lawrence #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

2 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure November 2012