IMPORTANT NOTE: staging 2fa
by Kevin Fenzi
Greetings.
I've decided that this might be a good time to clear all the staging
(not production) 2fa tokens.
So:
- This doesn't affect production. Thats all the same.
- In staging only, you will need to go and get a new 2fa token for
freeotp if you use that:
https://admin.stg.fedoraproject.org/totpcgiprovision/
- If you use a yubikey, I didn't clear those tokens, so your production
yubikey will also work in staging right now. You can issue a new one
if you like with:
fedora-burn-yubikey
--url=https://admin.stg.fedoraproject.org/accounts/ -S2
Please let me know if there are any questions or problems.
kevin
7 years, 10 months
Request for setroubleshoot-server be installed by default in Fedora Infra
by Adam Miller
Hello all,
I was recently trying to dig into a selinux denial issue in stage
koji and noticed that the setroubleshoot-server package was not
installed. This provides some things that make troubleshooting selinux
pretty easy as outlined in dwalsh's blog post[0] and it doesn't appear
to pull in much in the way of dependencies.
$ sudo yum install setroubleshoot-server
Password+Token:
builder-infrastructure
| 2.9 kB 00:00:00
epel
| 4.4 kB 00:00:00
infrastructure
| 2.9 kB 00:00:00
rhel7-base
| 2.9 kB 00:00:00
rhel7-dvd
| 4.1 kB 00:00:00
rhel7-extras
| 2.9 kB 00:00:00
rhel7-ha
| 2.9 kB 00:00:00
rhel7-optional
| 2.9 kB 00:00:00
infrastructure/7Server/x86_64/primary_db
| 151 kB 00:00:00
Resolving Dependencies
--> Running transaction check
---> Package setroubleshoot-server.x86_64 0:3.2.17-4.1.el7_1 will be installed
--> Processing Dependency: systemd-python >= 206-1 for package:
setroubleshoot-server-3.2.17-4.1.el7_1.x86_64
--> Processing Dependency: setroubleshoot-plugins >= 3.0.14 for
package: setroubleshoot-server-3.2.17-4.1.el7_1.x86_64
--> Processing Dependency: pygobject2 for package:
setroubleshoot-server-3.2.17-4.1.el7_1.x86_64
--> Running transaction check
---> Package pygobject2.x86_64 0:2.28.6-11.el7 will be installed
---> Package setroubleshoot-plugins.noarch 0:3.0.59-1.el7 will be installed
---> Package systemd-python.x86_64 0:208-20.el7_1.2 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
=====================================================================================================================
Package Arch Version
Repository Size
=====================================================================================================================
Installing:
setroubleshoot-server x86_64
3.2.17-4.1.el7_1 rhel7-base 342 k
Installing for dependencies:
pygobject2 x86_64 2.28.6-11.el7
rhel7-base 226 k
setroubleshoot-plugins noarch 3.0.59-1.el7
rhel7-base 586 k
systemd-python x86_64
208-20.el7_1.2 rhel7-base 90 k
Transaction Summary
=====================================================================================================================
Install 1 Package (+3 Dependent packages)
Total download size: 1.2 M
Installed size: 7.4 M
Just thought I'd throw it out there and see what others thought of it.
Thank you,
-AdamM
[0] - http://danwalsh.livejournal.com/65777.html
7 years, 10 months
[release] fedocal 0.13.2
by Pierre-Yves Chibon
Hi Everyone,
I just cut a new release of fedocal: 0.13.2
Here is its changelog:
* Wed Apr 29 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.13.2-1
- Update 0.13.2
- Make fedocal prettier on high resolution displays
- Add fedmenu
- Clean the code with pylint
It's currently in stg, but I have to see with Ralph if we can change something
on the fedmenu for fedocal which means 0.13.2 might not make it to prod and we
may need a 0.13.3 instead.
Pierre
7 years, 10 months
[release] elections: 2.5.2
by Pierre-Yves Chibon
Good morning everyone,
I have just cut a new release of fedora elections: 2.5.2
Here is its changelog:
* Wed Apr 29 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 2.5.2-1
- Update to 2.5.2
- Make elections prettier on high resolution displays
- Add fedmenu
It's up in staging, I'll push to prod later today or tomorrow.
Thanks,
Pierre
7 years, 10 months
[release] nuancier 0.8.1-0.8.2
by Pierre-Yves Chibon
Good morning everyone,
I have just cut a new release of nuancier: 0.8.1 and pushed it to stg.
On this version I found a new bug, which got fixed and led to another release:
0.8.2, which is now running in stg.
Here are both changelog:
* Wed Apr 29 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.8.2-1
- Update to 0.8.2
- Fix the graph on the stats page
* Wed Apr 29 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.8.1-1
- Update to 0.8.1
- Improve documentation for new contributors
- Make the Results and Stats links more distringuisable (Shagufta)
- Make nuancier prettier on high resolution display
- Add fedmenu
I'll wait a little and push to prod later today or tomorrow.
Happy testing,
Pierre
7 years, 10 months
Meeting Agenda Item: Introduction Gilbert Morgan
by Gilbert Morgan
IRC Handle = gmm
I am a system administrator. I have some networking and web admin
experience, and I am comfortable with scripting. I really want to gain
some valuable experience as a volunteer, experience that I can't get on
the job.
Ideally, I'd like to touch things that jibe with my experience(middleware)
at least at first, but I am more than happy to tackle new things. I am
scanning over the tickets now, and I see some interesting ones. #4696
seems like a fun place to start.
Thanks for taking the time to read this.
Best Regards,
Gilbert
--
gilbertmm(a)sdf.org
SDF Public Access UNIX System - http://sdf.org
7 years, 10 months
FYI: staging fas and 2fa
by Kevin Fenzi
Greetings.
This morning I attempted to sync production fas over to staging.
In doing so, db-fas01.stg ran out of disk space and got very confused.
I tracked down the size issue (it was because we were missing a cron
job that was supposed to run every 10minutes and clear out the visits
tables. This has basically not been run since we moved to ansible from
puppet on those hosts).
After fixing that, I re-inited the db on db-fas01 and loaded in the
production fas2 db. However, the old totpcgi and yubikey db's were lost
in this move. ;(
So, I have synced them over from production for now, so your production
tokens should work now in staging. You should be able to reprovision
them anytime to get a proper staging one.
kevin
7 years, 10 months
Draft for talk about statscache in Flock 2015
by Ratnadeep Debnath
Hi all,
I want to propose a talk on our ongoing project: statscache[1] in
Flock 2015. I am sharing a draft of the proposal for your review:
Title
====
Statscache, a near realtime intelligent caching layer empowering
faster data representation
Summary
=======
Fedmsg and fedmsg based tools: datanommer, datagrepper, etc. have
indeed taken communication and coordination across various components
in the Fedora ecosystem to an all new level. Currently, we are using
the raw datagrepper APIs to render various widgets and data
visualization. However, due to the massive amount of data stored in
datagrepper backend, searches tend to be slower. Also, consuming the
raw datagrepper API leads to increased data payload over the network
and writing complex client side logic to format the data.
Statscache is an attempt to solve the above problems and also to
create a generic framework to empower powerful data visualization. It
achieves this by listening to fedmsg events and storing the
denormalized and clean data in desired format for faster retrieval. It
also aims to become an intelligent caching layer based on "Single
source of truth" model and publishing REST and websocket API around it
to enable faster and realtime data visualizations. This could become
the backbone for empowering various widgets in Fedora hub.
Topology diagram:
https://raw.githubusercontent.com/fedora-infra/statscache/develop/docs/di...
[1]: https://github.com/fedora-infra/statscache
Regards,
rtnpro
--
Ratnadeep Debnath,
https://www.waartaa.com
GPG Fingerprint: 033C 8041 A0E9 CDBA 2E02 B785 2119 5486 F245 DFD6
7 years, 10 months
Upcoming Mirrormanager 2 production deployment
by Kevin Fenzi
Greetings.·
As you may know we have been working on a new version of mirrormanager,
and we are finally ready to roll it out in production (barring any·
show stoppers).·
mirrormanager 2 is re-written in flask and has a number of improvements
over mirrormanager 1.·
We have a set of staging instances setup:·
https://admin.stg.fedoraproject.org/mirrormanager2/
Which is the new flask frontend. The data for mirror admins should·
be pretty much the same. You should be able to login and check your·
mirrors settings (which have been copied from the production instance).·
(Note that any changes made here will not be reflected in production
data)
and
https://mirrors.stg.fedoraproject.org/
Which is a mirrorlist server using the data from the staging database.
You should be able to use this in place of 'mirrors.fedoraproject.org'
in· yum config and the like.·
and
There is also an internal crawler instance, checking mirrors and·
removing out of date ones or readding up to date ones.·
Source is of course available at:·
https://github.com/fedora-infra/mirrormanager2
and bugs or issues can be reported at:·
https://fedorahosted.org/mirrormanager/
Please do let us know if you see any problems or issues.·
We will likely be scheduling a short outage next week to roll the new·
version out to production.·
Thanks,·
kevin
7 years, 10 months