infrastructure April 2017

infrastructure@lists.fedoraproject.org

50 participants
45 discussions

April status update for Fedora Infrastructure Apprentices
by Kevin Fenzi 10 Apr '17

10 Apr '17

You are getting this email because you are in the 'fi-apprentice' group in the fedora account system (or are reading this on the infrastructure list). Feel free to reply just directly to me, or cc the infrastructure list for everyone to see and comment on. https://fedoraproject.org/wiki/Infrastructure_Apprentice At the first of every month(or so), I am going to be sending out an email like this one. I would like feedback on how things are going for you. I'd like to ask for everyone to send me a quick reply with the following data or anything related you can think of that might help us make the apprentice program more useful. 0. Whats your fedora account system login? 1. Have you logged in and used your fi-apprentice membership to look at our machines/setup in the last month? Do you plan to? 2. Has it helped you decide any area you wish to focus on or contribute to more? 3. Have you looked at or been able to work on any of the fi-apprentice 'easyfix' tickets? https://pagure.io/fedora-infrastructure/issues?status=Open&tags=easyfix 4. Do you still wish to be a member of the group? If not (for whatever reason) could you provide any hints to help others down the road? 5. Is there any help or communication or ideas you have that would help you do any of the above? 6. What do you find to be the hardest part of getting involved? Finding things to work on? Getting attention from others to help you? Finding tickets in your interest area? 7. Have you been able to make any weekly irc meetings? Do you find them helpful or interesting? 8. Have you logged into our Gobby instance and read/seen/added to our meeting agenda? https://fedoraproject.org/wiki/Gobby 9. Have you used any containers in the last week or so? (docker, rocket, etc) Any other general feedback is also quite welcome, including improvements to this email, the wiki page, etc. Note that we recently revamped the getting started and other pages. Please do take a minute to re-read them and let me know if they are more clear or need further adjustments. Any folks I do not hear from in the next week will be removed from the group. (Note that it's easy to be readded when you have time or whatever and it's nothing at all personal, we just want to keep the group up to date with active folks). Thanks, and looking forward to your feedback! kevin

10 9

Weekly Koji Infra Tag Report
by Nobody 10 Apr '17

10 Apr '17

This is a list of packages in the various infrastructure koji tags Please check and make sure there are not any that can be removed/dropped epel6-infra (no matching packages) epel7-infra Package Tag Extra Arches Owner ----------------------- ----------------------- ---------------- --------------- freeipa-ktutils epel7-infra puiterwijk compose-utils epel7-infra ausil fedmsg-beaker-repoupdate epel7-infra tflink anitya epel7-infra jcline the-new-hotness epel7-infra jcline fedocal epel7-infra pingou python-IPy epel7-infra kevin python-robosignatory epel7-infra puiterwijk pdc-updater epel7-infra ralph python-pdc epel7-infra ralph glusterfs epel7-infra kevin mirrormanager2 epel7-infra puiterwijk blockerbugs epel7-infra tflink python-django-jsonfield epel7-infra ralph f23-infra Package Tag Extra Arches Owner ----------------------- ----------------------- ---------------- --------------- libphutil, f23-infra tflink arcanist, f23-infra tflink phabricator f23-infra tflink phabricator-extension-ipsilonauth f23-infra tflink libphutil f23-infra tflink arcanist f23-infra tflink f24-infra Package Tag Extra Arches Owner ----------------------- ----------------------- ---------------- --------------- mediawiki-openid f24-infra kevin phabricator-extension-oauth f24-infra tflink python-twill f24-infra codeblock stickynotes2modernpaste f24-infra codeblock python-flask-testing f24-infra codeblock modern-paste f24-infra codeblock mediawiki-skin-fedora f24-infra puiterwijk mediawiki-FedoraBadges f24-infra kevin basset f24-infra puiterwijk phabricator f24-infra tflink mediawiki-Lockdown f24-infra kevin libphutil f24-infra tflink arcanist f24-infra tflink mediawiki-RSS f24-infra kevin mirrormanager2 f24-infra puiterwijk f25-infra Package Tag Extra Arches Owner ----------------------- ----------------------- ---------------- --------------- python-flask-testing f25-infra codeblock modern-paste f25-infra codeblock python-coveralls f25-infra codeblock mdapi f25-infra pingou basset f25-infra puiterwijk mediawiki-FedoraBadges f25-infra kevin mediawiki-Lockdown f25-infra kevin mediawiki-RSS f25-infra kevin mediawiki-openid f25-infra kevin plus-plus-service f25-infra pingou python-pdc f25-infra ralph python-django-cors-headers f25-infra ralph python-django-rest-framework-composed-permissions f25-infra ralph patternfly1 f25-infra ralph fas f25-infra kevin libphutil, f25-infra tflink arcanist, f25-infra tflink phabricator f25-infra tflink phabricator-extension-ipsilonauth f25-infra tflink libphutil f25-infra tflink arcanist f25-infra tflink python-twill f25-infra codeblock stickynotes2modernpaste f25-infra codeblock mediawiki-skin-fedora f25-infra kevin f26-infra (no matching packages) f27-infra (no matching packages)

1 0

Meeting Agenda Item: Introduction 'Shailendra Yadav'
by Shailendra Yadav 09 Apr '17

09 Apr '17

Hi folks, IRC Handle: 'yadavShailendra' I would like to contribute to c/c++, java, shell scripting(Beginner) and Linux administration. I'm having RHCE participation certification and as well as one from edx. I'm open to work, but would be preferred for shell scripting. Thanks Shailendra Yadav

1 0

Checksum issues for mirrors in Brazil
by Davi Garcia 08 Apr '17

08 Apr '17

Hi team, Some users from Brazil identified a problem with our fedora-update mirrors for our region. After cleaning the DNF cache with "dnf clean all" and trying a "dnf update", they are getting error: Adding the -v flag, the output shows that the problem is "Downloading successful, but checksum doesn't match.". More detailed output at: https://paste.fedoraproject.org/paste/byFo88IC276CRT-NKEKLql5M1UNdIGYhyRLiv… We recommended to edit the fedora-updates.repo file, removing the comments of the "baseurl" line and commenting "metalink". This way they use the main repo and avoid bad mirrors, as a temporary workaround. Are we facing sync issues for our repos? Thanks in advance, Davi Garcia (aka mudblur)

3 3

Plan for tomorrow's Fedora Infrastructure meeting - 2017-04-07
by Stephen John Smoogen 06 Apr '17

06 Apr '17

The infrastructure team will be having it's weekly meeting tomorrow, 2017-04-07 at 18:00 UTC in #fedora-meeting on the freenode network. We have a gobby document (see: https://fedoraproject.org/wiki/Gobby ) fedora-infrastructure-meeting-next is the document. Please try and review and edit that document before the meeting and we will use it to have our agenda of things to discuss. A copy as of today is included in this email. If you have something to discuss, add the topic to the discussion area with your name. If you would like to teach other folks about some application or setup in our infrastructure, please add that topic and your name to the learn about section. = Introduction = We will use it over the week before the meeting to gather status and info and discussion items and so forth, then use it in the irc meeting to transfer information to the meetbot logs. = Meeting start stuff = #startmeeting Infrastructure (2017-04-06) #meetingname infrastructure #topic aloha #chair smooge relrod nirik abadger1999 lmacken dgilmore threebean pingou puiterwijk pbrobinson = Let new people say hello = #topic New folks introductions = Status / information / Trivia / Announcements = (We put things here we want others on the team to know, but don't need to discuss) (Please use #info <the thing> - your name) #topic announcements and information #info Fedora 26 Alpha is out - everyone! #info EPEL-4 and 5 has been mirrored to archives #info Freeze is done we will be freezing again soon. #info Kojipkgs is now using varnish vs squid = Things we should discuss = We use this section to bring up discussion topics. Things we want to talk about as a group and come up with some consensus /suor decision or just brainstorm a problem or issue. If there are none of these we skip this section. (Use #topic your discussion topic - your username) #topic Things we need to do before next freeze #info get varnish fully tested #info update/reboot servers 2017-04-11->2017-04-13 #info put new nagios into play #info ??? = Apprentice office hours = #topic Apprentice Open office hours Here we will discuss any apprentice questions, try and match up people looking for things to do with things to do, progress, testing anything like that. = Learn about some application or gsetup in infrastructure = (This section, each week we get 1 person to talk about an application or setup that we have. Just going over what it is, how to contribute, ideas for improvement, etc. Whoever would like to do this, just add the i/nfo in this section. In the event we don't find someone to teach about something, we skip this section and just move on to open floor.) #topic Learn about: ??? = Meeting end stuff = #topic Open Floor #endmeeting -- Stephen J Smoogen.

1 0

[PATCH] Add a cron job for rawhide nightly with DNF
by Lubomír Sedlář 05 Apr '17

05 Apr '17

In order to compare YUM and DNF compose, this will start a simplified compose (no extra deliverables, just the packages) and create logs with differences. The compose starts 12 hours after the real rawhide, which should prevent any negative effects on the production compose (while it's possible for the nightly to not finish yet, after 12 hours it would only be waiting on koji tasks and not needed local resources much). See https://pagure.io/pungi-fedora/pull-request/178 for details. Signed-off-by: Lubomír Sedlář <lsedlar(a)redhat.com> --- roles/releng/files/rawhide | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/releng/files/rawhide b/roles/releng/files/rawhide index bb72f76..62f4333 100644 --- a/roles/releng/files/rawhide +++ b/roles/releng/files/rawhide @@ -1,3 +1,4 @@ # rawhide compose MAILTO=releng-cron(a)lists.fedoraproject.org 15 5 * * * root TMPDIR=`mktemp -d /tmp/rawhide.XXXXXX` && cd $TMPDIR && git clone https://pagure.io/pungi-fedora.git && cd pungi-fedora && LANG=en_US.UTF-8 ./nightly.sh && sudo -u ftpsync /usr/local/bin/update-fullfiletimelist -l /pub/fedora-secondary/update-fullfiletimelist.lock -t /pub fedora fedora-secondary +15 17 * * * root TPMDIR=$(mktemp -d /tmp/rawhide-dnf.XXXXXX) && cd $TMPDIR && git clone https://pagure.io/pungi-fedora.git && cd pungi-fedora && LANG=en_US.UTF-8 ./nightly-dnf.sh -- 2.9.3

2 1

Fedora 26 Alpha Freeze now in effect
by Kevin Fenzi 05 Apr '17

05 Apr '17

Greetings. we are now in the infrastructure freeze leading up to the Fedora 26 Alpha release. This is a pre-release freeze. We do this to ensure that our infrastructure is stable and ready to release the Fedora 26 Alpha when it's available. You can see a list of hosts that do not freeze by checking out the ansible repo and running the freezelist script: git clone https://infrastructure.fedoraproject.org/infra/ansible.git scripts/freezelist -i inventory Any hosts listed as freezes is frozen until 2017-03-21 (or later if Alpha slips). Frozen hosts should have no changes made to them without a sign-off on the change from at least 2 sysadmin-main or rel-eng members, along with (in most cases) a patch of the exact change to be made to this list. Thanks, kevin

1 1

WhatCanIDoForFedora Hosting Server
by InvalidPath 05 Apr '17

05 Apr '17

Tossing this question out there for tomorrow.. Anyone know when I can look, or determine what server hosts WhatCanIDoForFedora? Not looking for the easy way out, but a hint would be grand.

3 4

[release] pdc-updater: 0.5.5
by Ralph Bean 05 Apr '17

05 Apr '17

New release includes a fix to support the module build service. The koji tag names we were constructing were too long. 0.5.5 ----- Pull Requests - #53, Merge pull request #53 from hanzz/module-hash https://github.com/fedora-infra/pdc-updater/pull/53 Commits - b0f14d1f8 Use hash instead of variant_uid for koji_tag, otherwise we hit the 50 characters limit for koji_tag used by Koji. https://github.com/fedora-infra/pdc-updater/commit/b0f14d1f8

1 0

Re: April status update for Fedora Infrastructure Apprentices
by Amitakhya Phukan 05 Apr '17

05 Apr '17

Hello, On Tue, Apr 4, 2017 at 4:04 AM, Kevin Fenzi <kfenzi(a)redhat.com> wrote: > You are getting this email because you are in the 'fi-apprentice' group > in the fedora account system (or are reading this on the infrastructure > list). > > Feel free to reply just directly to me, or cc the infrastructure list > for everyone to see and comment on. > > https://fedoraproject.org/wiki/Infrastructure_Apprentice > > At the first of every month(or so), I am going to be sending out an > email like this one. I would like feedback on how things are going for > you. I'd like to ask for everyone to send me a quick reply with the > following data or anything related you can think of that might help us > make the apprentice program more useful. > > 0. Whats your fedora account system login? > > aphukan > > 1. Have you logged in and used your fi-apprentice membership to look at > our machines/setup in the last month? Do you plan to? > > Yes > > 2. Has it helped you decide any area you wish to focus on or contribute > to more? > > > 3. Have you looked at or been able to work on any of the fi-apprentice > 'easyfix' tickets? > https://pagure.io/fedora-infrastructure/issues?status=Open&tags=easyfix > > Yes > > 4. Do you still wish to be a member of the group? If not (for whatever > reason) could you provide any hints to help others down the road? > > Yes > > 5. Is there any help or communication or ideas you have that would help > you do any of the above? > > > 6. What do you find to be the hardest part of getting involved? Finding > things to work on? Getting attention from others to help you? Finding > tickets in your interest area? > > > 7. Have you been able to make any weekly irc meetings? Do you find them > helpful or interesting? > > No > > 8. Have you logged into our Gobby instance and read/seen/added to our > meeting agenda? https://fedoraproject.org/wiki/Gobby > > > 9. Have you used any containers in the last week or so? > (docker, rocket, etc) > > No > Any other general feedback is also quite welcome, including improvements > to this email, the wiki page, etc. Note that we recently revamped the > getting started and other pages. Please do take a minute to re-read them > and let me know if they are more clear or need further adjustments. > > Any folks I do not hear from in the next week will be removed from the > group. (Note that it's easy to be readded when you have time or whatever > and it's nothing at all personal, we just want to keep the group up to > date with active folks). > > Thanks, and looking forward to your feedback! > > kevin > -- Best regards, Amitakhya Phukan

1 0

Re: April status update for Fedora Infrastructure Apprentices
by Ali Khalidi 05 Apr '17

05 Apr '17

On Mon, Apr 3, 2017 at 2:04 PM, Kevin Fenzi <kfenzi(a)redhat.com> wrote: > You are getting this email because you are in the 'fi-apprentice' group > in the fedora account system (or are reading this on the infrastructure > list). > > Feel free to reply just directly to me, or cc the infrastructure list > for everyone to see and comment on. > > https://fedoraproject.org/wiki/Infrastructure_Apprentice > > At the first of every month(or so), I am going to be sending out an > email like this one. I would like feedback on how things are going for > you. I'd like to ask for everyone to send me a quick reply with the > following data or anything related you can think of that might help us > make the apprentice program more useful. > > 0. Whats your fedora account system login? doteast > > > 1. Have you logged in and used your fi-apprentice membership to look at > our machines/setup in the last month? Do you plan to? no. yes. > > > 2. Has it helped you decide any area you wish to focus on or contribute > to more? yes. > > > 3. Have you looked at or been able to work on any of the fi-apprentice > 'easyfix' tickets? > https://pagure.io/fedora-infrastructure/issues?status=Open&tags=easyfix yes > > > 4. Do you still wish to be a member of the group? If not (for whatever > reason) could you provide any hints to help others down the road? yes, please. > > > 5. Is there any help or communication or ideas you have that would help > you do any of the above? no. > > > 6. What do you find to be the hardest part of getting involved? Finding > things to work on? Getting attention from others to help you? Finding > tickets in your interest area? 1, and 3 > > > 7. Have you been able to make any weekly irc meetings? Do you find them > helpful or interesting? yes. very interesting. > > > 8. Have you logged into our Gobby instance and read/seen/added to our > meeting agenda? https://fedoraproject.org/wiki/Gobby no. > > > 9. Have you used any containers in the last week or so? > (docker, rocket, etc) no. > > Any other general feedback is also quite welcome, including improvements > to this email, the wiki page, etc. Note that we recently revamped the > getting started and other pages. Please do take a minute to re-read them > and let me know if they are more clear or need further adjustments. > > Any folks I do not hear from in the next week will be removed from the > group. (Note that it's easy to be readded when you have time or whatever > and it's nothing at all personal, we just want to keep the group up to > date with active folks). > > Thanks, and looking forward to your feedback! Thank you kevin. > > kevin

1 0

Meeting Agenda Item: Introduction Denis Nutiu
by Denis Nuțiu 04 Apr '17

04 Apr '17

Hello, My name is Denis. I'm an second year undergraduate student at UPT majoring in Computer and Information Technology. I want to contribute to the Fedora Project in order to see what is it like to be apart of an open source community and to put the stuff I learned to good use. The programing languages that I'm familiar with are: Python, C, Java, C++, JavaScript, Go. (in that order) I do not have any certifications or advanced sys admin knowledge. I've managed to get a basic forum running on a VPS installing and configuring php7, mysql, let's enecrypt, apache2 and ufw. I'm looking to do some coding and learn more about networking, security, servers and Linux in general. :D My IRC handle: Meto My FAS ID: metonymy

1 0

[PATCH] unfreeze rawhide-composer
by dennis＠ausil.us 04 Apr '17

04 Apr '17

From: Dennis Gilmore <ausil(a)fedoraproject.org> rawhide-composer should never have been frozen. it has no impact on the release deliverables, and we may want to deploy changes needing changes on the compose box or update packages to account for rawhide changes at any point in time. So mark not freezing Signed-off-by: Dennis Gilmore <ausil(a)fedoraproject.org> --- inventory/host_vars/rawhide-composer.phx2.fedoraproject.org | 3 +++ 1 file changed, 3 insertions(+) diff --git a/inventory/host_vars/rawhide-composer.phx2.fedoraproject.org b/inventory/host_vars/rawhide-composer.phx2.fedoraproject.org index f12e921..f5a49ee 100644 --- a/inventory/host_vars/rawhide-composer.phx2.fedoraproject.org +++ b/inventory/host_vars/rawhide-composer.phx2.fedoraproject.org @@ -9,6 +9,9 @@ kojipkgs_url: kojipkgs.fedoraproject.org kojihub_url: koji.fedoraproject.org/kojihub kojihub_scheme: https +# rawhide is never frozen, the compose box should not be so we can make needed changes +freezes: false + fedmsg_certs: - service: releng owner: root -- 1.8.3.1

4 3

[Fedocal] Reminder meeting : Bodhi multi-type requirements gathering
by bowlofeggs＠fedoraproject.org 04 Apr '17

04 Apr '17

Dear all, You are kindly invited to the meeting: Bodhi multi-type requirements gathering on 2017-04-04 from 11:00:00 to 12:00:00 US/Eastern At fedora-meeting-1(a)irc.freenode.net The meeting will be about: We had a productive discussion about some of the requirements for Bodhi supporting multiple content types this week, but we ran out of time: https://meetbot.fedoraproject.org/fedora-meeting-1/2017-03-28/bodhi_stakeho… We should work to clarify some of the requirements at a high level so we can begin work on implementation. This etherpad can be used to capture the requirements: https://public.etherpad-mozilla.org/p/bodhi-multi-type Source: https://apps.fedoraproject.org/calendar/meeting/5870/

1 0

Re: April status update for Fedora Infrastructure Apprentices
by Athos Ribeiro 03 Apr '17

03 Apr '17

On Mon, Apr 03, 2017 at 12:04:43PM -0600, Kevin Fenzi wrote: > 0. Whats your fedora account system login? athoscr > > > 1. Have you logged in and used your fi-apprentice membership to look at > our machines/setup in the last month? Do you plan to? yes > > > 2. Has it helped you decide any area you wish to focus on or contribute > to more? yes > > 3. Have you looked at or been able to work on any of the fi-apprentice > 'easyfix' tickets? > https://pagure.io/fedora-infrastructure/issues?status=Open&tags=easyfix Not lately... > > 4. Do you still wish to be a member of the group? If not (for whatever > reason) could you provide any hints to help others down the road? yes > > 5. Is there any help or communication or ideas you have that would help > you do any of the above? not atm... > > 6. What do you find to be the hardest part of getting involved? Finding > things to work on? Getting attention from others to help you? Finding > tickets in your interest area? Finding interesting long term activities to perform is not easy... > > 7. Have you been able to make any weekly irc meetings? Do you find them > helpful or interesting? yes > > > 8. Have you logged into our Gobby instance and read/seen/added to our > meeting agenda? https://fedoraproject.org/wiki/Gobby yes > > > 9. Have you used any containers in the last week or so? > (docker, rocket, etc) Not the Fedora ones. I do use docker containers for a grader we write for this Coursera course we developed in my university. -- Athos Ribeiro http://www.ime.usp.br/~athoscr

1 0

Freeze break: cleanup some epel5 remnants
by Kevin Fenzi 03 Apr '17

03 Apr '17

Greetings. We are still trying to sync pkgdb to koji for epel5 packages as well as syncing the epel5 updates/updates-testing repos to pub. This patch stops both those since epel5 is EOL now. +1s? kevin -- > diff --git a/roles/bodhi2/backend/files/fedora-epel-push b/roles/bodhi2/backend/files/fedora-epel-push > index ba3cc46..bffaefd 100644 > --- a/roles/bodhi2/backend/files/fedora-epel-push > +++ b/roles/bodhi2/backend/files/fedora-epel-push > @@ -5,7 +5,7 @@ DEST=/pub/epel > > OPTIONS="-rlptDvHh --stats --delay-updates $RSYNC_OPTS" > > -for rel in 5 6; do > +for rel in 6; do > > OUTPUT1=$(rsync $OPTIONS --exclude "repodata/*" --exclude "headers/*" \ > $SOURCE/dist-${rel}E-epel/ $DEST/${rel}/) > @@ -83,7 +83,7 @@ for rel in 7; do > fi > done > > -for rel in 5 6 7; do > +for rel in 6 7; do > if [ ${rel} -eq 7 ]; then > TARGET_DIR=${DEST}/${rel}/x86_64/e > else > diff --git a/roles/bodhi2/backend/tasks/main.yml b/roles/bodhi2/backend/tasks/main.yml > index b09ee17..15e2883 100644 > --- a/roles/bodhi2/backend/tasks/main.yml > +++ b/roles/bodhi2/backend/tasks/main.yml > @@ -147,6 +147,7 @@ > cron: name="owner-sync-el5" minute="7,17,27,37,47,57" user="root" > job="/usr/local/bin/owner-sync-pkgdb dist-5E-epel" > cron_file=update-koji-owner-EL-5 > + disabled=true > when: inventory_hostname.startswith('bodhi-backend01') and env == "production" > tags: > - bodhi

3 2

Weekly Koji Infra Tag Report
by Nobody 03 Apr '17

03 Apr '17

1 0

Re: FBR: Fix paste and lists flapping redirects
by Stephen John Smoogen 01 Apr '17

01 Apr '17

Plus one On Apr 1, 2017 17:49, "Patrick Uiterwijk" <puiterwijk(a)redhat.com> wrote: Hi all, After some debugging, I just found the reason for the issue where paste sometimes displayed mailman et vica versa. Here my explanation on IRC: puiterwijk | So... It turns out that when Varnish computes the hash of a request to see if the "primary" request HTTP headers. These being host, path, method and then take into account anything that's mentioned in the Vary header. puiterwijk | It explicitly does *not* take into consideration any "random" HTTP headers. puiterwijk | And here comes the fun part: in our setup, the "host" header is always localhost because we don't set apache's PreseveHostHeader for *most* sites (I'll come back to this in a minute). puiterwijk | Instead, we send the hostname via X-Forwarded-Host, and we pick the backend based on that... puiterwijk | But since the Host header that Varnish sees is the same between paste and lists requests, it's actually hashing them to the same request object, returning each others responses puiterwijk | The reason this has not impacted any other sites, is because we actually don't depend on just the X-Forwarded-Host header for those requests, but instead use req.url: one of the fields taken into account in the request hash puiterwijk | So, a very simple fix would be to just set PreserveHostHeader in the Apache config (for lists and paste, but maybe for all?). That'd make the host header actually get into the request object hash puiterwijk | Current Status: puiterwijk | OK puiterwijk | Nagios agrees with me that this fixes the problem Can I get +1s for the fix: diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml index ac65440..e5720c9 100644 --- a/playbooks/include/proxies-reverseproxy.yml +++ b/playbooks/include/proxies-reverseproxy.yml @@ -70,6 +70,7 @@ localpath: / remotepath: / header_scheme: true + keephost: true proxyurl: "{{ varnish_url }}" - role: httpd/reverseproxy @@ -78,6 +79,7 @@ localpath: / remotepath: / header_scheme: true + keephost: true proxyurl: "{{ varnish_url }}" # The place for the raw originals @@ -150,6 +152,7 @@ - role: httpd/reverseproxy website: paste.fedoraproject.org destname: modernpaste + keephost: true proxyurl: "{{ varnish_url }}" - role: httpd/reverseproxy Regards, Patrick _______________________________________________ infrastructure mailing list -- infrastructure(a)lists.fedoraproject.org To unsubscribe send an email to infrastructure-leave(a)lists.fedoraproject.org

1 0

FBR: Fix paste and lists flapping redirects
by Patrick Uiterwijk 01 Apr '17

01 Apr '17

Hi all, After some debugging, I just found the reason for the issue where paste sometimes displayed mailman et vica versa. Here my explanation on IRC: puiterwijk | So... It turns out that when Varnish computes the hash of a request to see if the "primary" request HTTP headers. These being host, path, method and then take into account anything that's mentioned in the Vary header. puiterwijk | It explicitly does *not* take into consideration any "random" HTTP headers. puiterwijk | And here comes the fun part: in our setup, the "host" header is always localhost because we don't set apache's PreseveHostHeader for *most* sites (I'll come back to this in a minute). puiterwijk | Instead, we send the hostname via X-Forwarded-Host, and we pick the backend based on that... puiterwijk | But since the Host header that Varnish sees is the same between paste and lists requests, it's actually hashing them to the same request object, returning each others responses puiterwijk | The reason this has not impacted any other sites, is because we actually don't depend on just the X-Forwarded-Host header for those requests, but instead use req.url: one of the fields taken into account in the request hash puiterwijk | So, a very simple fix would be to just set PreserveHostHeader in the Apache config (for lists and paste, but maybe for all?). That'd make the host header actually get into the request object hash puiterwijk | Current Status: puiterwijk | OK puiterwijk | Nagios agrees with me that this fixes the problem Can I get +1s for the fix: diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml index ac65440..e5720c9 100644 --- a/playbooks/include/proxies-reverseproxy.yml +++ b/playbooks/include/proxies-reverseproxy.yml @@ -70,6 +70,7 @@ localpath: / remotepath: / header_scheme: true + keephost: true proxyurl: "{{ varnish_url }}" - role: httpd/reverseproxy @@ -78,6 +79,7 @@ localpath: / remotepath: / header_scheme: true + keephost: true proxyurl: "{{ varnish_url }}" # The place for the raw originals @@ -150,6 +152,7 @@ - role: httpd/reverseproxy website: paste.fedoraproject.org destname: modernpaste + keephost: true proxyurl: "{{ varnish_url }}" - role: httpd/reverseproxy Regards, Patrick

2 1

Meeting Agenda Item: Introduction Ian Cole
by Ian Cole 01 Apr '17

01 Apr '17

Hi everyone! I briefly joined this team a little over 5 years ago but unfortunately got swamped and had to back out. However I have much more free time for side projects and would love to try to help out again. I have been a long time Fedora user, and started using it in high school when it first became a distro and it has been my distro of choice ever since. I have worked as a build engineer, a full stack Ruby/Rails engineer, and a data engineer managing data pipelines and the infrastructure around them. I have experience with some Java, Python, and Scala, but have the most experience in Ruby. Have worked with Puppet, Chef, Jenkins, and most recently used Ansible extensively when I was working as a data engineer for 2 years (I still use Ansible to configure my local dev environment because I love it so much). I would really like to help contribute in whatever way I can and really my Python and Ansible, but love learning whatever is relevant. Look forward to joining in on a meeting soon! My nickname on IRC is icole. -Ian Cole

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure April 2017