August 2019 - infrastructure - Fedora mailing-lists

About JS framework
by Pierre-Yves Chibon 17 Oct '22

17 Oct '22

Good Morning Everyone, Our infrastructure is mostly a python store, meaning almost all our apps are written in python and most using wsgi. However in python we are using a number of framework: * flask for most * pyramid for some of the biggest (bodhi, FAS3) * Django (askbot, Hyperkitty) * TurboGears2 (fedora-packages) * aiohttp (python3, async app: mdapi) While this makes sometime things difficult, these are fairly standard framework and most of our developers are able to help on all. However, as I see us starting to look at JS for some of our apps (fedora-hubs, wartaa...), I wonder if we could start the discussion early about the different framework and eventually see if we can unify around one. This would also allow those of us not familiar with any JS framework to look at the recommended one instead of picking one up semi-randomly. So has anyone experience with one or more JS framework? Do you have one that would you recommend? Why? Thanks for your inputs, Pierre

10 12

Infrastructure docs & apps.fp.o
by Timothée Floure 05 Feb '20

05 Feb '20

Hi, I wrote [1] to devel some time ago regarding the deprecation of the apps.fp.o index and plan to move its content to the main docs. Kevin mentionned that it could end up in the infrastructure docs and that the whole should be moved to docs.fp.o at some point. I will take a look at both since I have wanted to play with the new documentation pipeline for a while. I am not the best guy to meddle with the infrastructure doc but I might as well do something useful while playing with antora. Tell me if it's not or if I missed something. I might have something to show you at Flock if I have troubles sleeping in the train. [1] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org… See you in Budapest, -- Timothée

5 12

Re: Deprecating Autocloud
by Sinny Kumari 06 Dec '19

06 Dec '19

On Mon, Apr 29, 2019 at 4:47 PM Kamil Paral <kparal(a)redhat.com> wrote: > On Mon, Apr 29, 2019 at 11:39 AM Sinny Kumari <ksinny(a)gmail.com> wrote: > >> >> >> On Wed, Apr 24, 2019 at 12:19 AM Kevin Fenzi <kevin(a)scrye.com> wrote: >> >>> Or could we move f29+ all to whatever is replacing it? (taskotron?) >>> >> >> It will be nice but I am not aware of any other system in place which >> would >> replace checks performed by autocloud. >> >> (CC'ed tflink and kparal) >> Does taskotron provides capability to perform tests on Fedora cloud >> Images like booting images and other basic checks? >> > > Theoretically it is possible using nested virt. However, Taskotron is > going away as well. The replacement is Fedora CI: > https://docs.fedoraproject.org/en-US/ci/ > Thanks kamil! yeah, it doesn't make sense to move to Taskotron if it is going to be deprecated as well. > I recommend to ask in the CI list: > https://lists.fedoraproject.org/archives/list/ci%40lists.fedoraproject.org/ > > It should be possible for them to provide the infrastructure you need. > Hmm, I am not very sure if we should spend time investigating and setting up alternative to autocloud unless we have usecases for long run. Fedora Atomic Host Two Week releases ends with F29 EOL. -- http://sinny.io/

5 11

Fedora 31 Beta freeze now in effect
by Kevin Fenzi 19 Sep '19

19 Sep '19

Greetings. we are now in the infrastructure freeze leading up to the Fedora 31 Beta release. This is a pre release freeze. We do this to ensure that our infrastructure is stable and ready to release the Fedora 31 Beta when it's available. You can see a list of hosts that do not freeze by checking out the ansible repo and running the freezelist script: git clone https://infrastructure.fedoraproject.org/infra/ansible.git ansible/scripts/freezelist -i inventory Any hosts listed as freezes is frozen until 2019-09-17 (or later if release slips or uses the secondary target). Frozen hosts should have no changes made to them without a sign-off on the change from at least 2 sysadmin-main or rel-eng members, along with (in most cases) a patch of the exact change to be made to this list. Thanks, kevin

4 8

Sunset of infinote (Gobby) service
by Clement Verna 06 Sep '19

06 Sep '19

Dear all, The Fedora Infrastructure is planning to retire the infinote [0] service. This service allows text collaboration using the Gobby client[1] and was mainly used by the Infrastructure team to coordinate our weekly meeting and the mass update & reboot of the machines. The service will be taken offline on August 30th 2019. If you wish to backup some of the document currently hosted, you should make sure that you have downloaded them locally before that date. The Infrastructure team will most likely use the service provided by hackmd.io [2] for their needs. Other alternatives like public etherpad can also be used to replace this service. Thanks, Clément [0] - https://infinote.fedoraproject.org/infinote/ [1] - https://fedoraproject.org/wiki/Gobby [2] - https://opensource.com/article/19/7/enable-collaboration-hackmd

6 11

Meeting Agenda Item: Introduction Cristian
by Cristian Di Tomasso 01 Sep '19

01 Sep '19

Hi everyone! I'm Cristian, 27, and been working with Linux for the last 5 years or so. I've been looking for the right group for me to join and try to contribute even if it's a little bit to the project for the last few days and I think I finally did! In these 5 years I've worked with load balancers (haproxy), web servers (apache), NFS shares, FTP, DNS and a bunch of other technologies, also some automation with Ansible and monitoring with Zabbix/bit of Nagios. I have to admit I'm not good at all when it comes to scripting, although I can read code more or less. When it comes to certifications I recently passed my RHCSA and find myself studying for RHCE at the moment :) Anyways... I'm pretty sure my knowledge is not as big/broad as many of you people but I'd love to help with any tickets/issues if they are related to any of these things I have experience with, and also I'm keen on learning from anyone and all down for sharing knowledge. - My IRC username is: *cdt_* - What skills you have to offer? *Haproxy, FTP, DNS, web servers, managing users, permissions, ACL, a bit of Ansible, networking in linux, etc. Basically everything that is covered in the RH Certs + automation and loadbalancers.* - Certs: *RHCSA* What I'd like to learn? *I'm okay with learning anything from others. I'm interested in learning some SQL and improving my scripting skills, among others :)* I know it'll take some time for me to get used to everything and learn how everything is connected until I can actually do some work/help, but I'm willing to wait and also wouldn't mind introducing myself during next meeting? I have a question though, what's the primary IRC channel you guys use? Is it #fedora-admin? Believe it or not this is my first time using IRC haha so I'd like to know in case I need to reach out to someone. Well that's pretty much it for me, hope to be able to join you soon and hope you all enjoying your weekend! /Cristian

2 1

Freeze break request: h2 testing on rawhide
by Kevin Fenzi 30 Aug '19

30 Aug '19

Greetings. The curl folks think they might have finally tracked down the http/2 issues were were hitting with composes now. So, I'd like to: Apply this patch to enable h2 on kojipkgs again: diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index d66e829..47289ab 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -585,7 +585,7 @@ - kojipkgs01.fedoraproject.org - kojipkgs02.fedoraproject.org cert_name: "{{wildcard_cert_name}}" - use_h2: false + use_h2: true - role: httpd/website site_name: apps.fedoraproject.org Then, run the proxies playbook to enable it. Then, do a rawhide compose. If it fails with any h2 or cannot download errors, revert the change and let the curl folks know. If it doesn't leave it enabled. I'd likely do this testing over the weekend when no other composes are running. Can I get some +1s for this plan? kevin

3 2

[FBR] upgrade the koji fedora-messaging plugin in prod
by Pierre-Yves Chibon 30 Aug '19

30 Aug '19

Good Morning, I would like to propose to upgrade the koji plugin for fedora-messaging so it integrates these changes: https://pagure.io/koji-fedmsg-plugin/pull-request/5 which hopefully will fix https://pagure.io/fedora-infrastructure/issue/8158 Worst case they don't and we can revert and we're back to square one. Best case it works :) We tried testing this in staging but the way koji and bodhi are currently configured in koji is making it quite difficult (koji is still on rawhide=f31 while bodhi has already been synced from prod, and koji isn't configured to let robosignatory signs builds in the f30 tags...). Thoughts? Pierre

3 3

[FBR] Upgrade pagure in production
by Pierre-Yves Chibon 30 Aug '19

30 Aug '19

Good Morning, A bit before freeze started, we upgrade pagure to 5.7.4 on src.fp.o but forgot to do pagure.io Since then there has been 4 small bug fixes releases (most of which are related to src.fp.o), changelog is at: https://docs.pagure.org/pagure/changelog.html I'd like to upgrade src.fp.o from 5.7.4 to 5.7.8 which will also make Tomas Tomecek's life easier on packit and upgrade pagure.io to the latest version. Down time for src.fp.o is as small as an apache restart, on pagure.io there is a database migration to apply but it should be just a few minutes. Thoughts? Pierre

3 2

FBR: hotfix robosignatory to fix ostree signing issue
by Dusty Mabe 29 Aug '19

29 Aug '19

We hit a bug every release where the directories haven't yet been created for the refs we want to sign [1]. The bug has been fixed in the latest code [2] but hasn't been deployed to prod yet. We'd like to deploy that small patch to prod so we can make sure we never hit this again. Dusty [1] https://pagure.io/robosignatory/issue/19 [2] https://pagure.io/robosignatory/c/f462fc2c81b7cad15acb2da630c69114b30ef3d9?…

4 4

Freeze break Request: Add a cron job to delete dangling images from our OpenShift nodes
by Clement Verna 29 Aug '19

29 Aug '19

Hi all, I would like to apply the following patch to solve https://pagure.io/fedora-infrastructure/issue/8147. We start to quite often have build failing in OpenShift because the nodes are lacking of disk space. This patch creates a cron job that runs every weeks (on Monday) and deletes docker "dangling" images. A dangling image for docker is an image that is not used or as not been used by a container. +1s ? diff --git a/playbooks/groups/os-cluster.yml b/playbooks/groups/os-cluster.yml index 4b56286dc..52a4e2635 100644 @@ -248,3 +248,18 @@ - name: Enable wildcard routes command: oc -n default set env dc/router ROUTER_ALLOW_WILDCARD_ROUTES=true changed_when: false + + +- name: Add a cleanup cron job to the nodes + hosts: os_nodes_stg:os_nodes + tags: + - os-node-cleanup + tasks: + - name: Ensure a job that runs every Mondays to clean old docker images from the nodes. + cron: + name: "remove docker dangling images" + weekday: 1 #Monday + minute: "0" + hour: "0" + job: "docker rmi $(docker images --filter dangling=true -q)" + sate: present

3 3

prod -> staging fas db sync
by Kevin Fenzi 29 Aug '19

29 Aug '19

Greetings. Just a heads up that I am going to do a prod->staging fas database sync here soon (later this morning). This means that your groups/password in prod will all be your groups/password in staging with one exception: we can't sync the ipa database, so if you never had a stg account or you had a different password in staging you will need to go into the staging fas web interface and change your password to sync with ipa. Note that you need to do the normal password change, NOT the 'forgot my password' option. Sorry for any troubles and if you have any questions, let me know. kevin

1 0

Subject: 'Meeting Agenda Item: Introduction T.C. Williams'
by T.C. Williams 29 Aug '19

29 Aug '19

Greetings Fedora Infrastructure Team, My name is T.C. Williams and my IRC nick is austinpowered. I'm a semi-retired life-long learner looking to give back and learn some new skills. I know a little bit about a lot of things and I have a long history of learning how to solve the problem at hand. I would consider myself more of a sysadmin than a developer these days but that's mostly because of my recent experiences. In high school, I wrote my first program in BASIC to play blackjack on an ASR-33 teletype. After studying digital hardware design in college I worked for different companies writing software for automated test equipment. I was working for a storage sub-system company when I was tasked with writing a device driver to support our storage systems on the IBM PC and the recently released MS-DOS 2.0. After the first version was released, I wrote a custom BIOS for a SCSI host adapter (ISA bus) and an updated device driver in assembly. With this adapter and a custom disk partitioning utility (written in C), multiple physical drives could be pooled to provide multiple logical volumes under MS-DOS. This was 1985 and it would be many years before I got paid to write code again. The following years saw me move into sales where my technical background helped me learn new technologies as they were introduced. Over the years I have seen networking go from 10 Mb ethernet on coax to UTP at ever-increasing speeds. Always in sales, I've worked with mostly networking or network security vendors. Around 2011, I was working in sales for a small company that was trying to develop a custom security appliance. Seeing the need I stepped in to manage the engineering team. After doing some research, I introduced git for revision control, Jenkins for automated software build and test, PXE boot and kickstart files for system builds and a Trac server to manage tickets and milestones. The transition to agile development was in process when the company was acquired. After managing the transition I became a pre-sale engineer for an end-point security solution deployed as VM's on VMWare using puppet. I left that company almost 4 years ago and have not looked for a full-time position since. While I have been using open-source for years, I'm looking to learn more about how software and systems are deployed these days. It seems the Fedora Infrastructure Apprentice group might be a good place for me to start but I'm open to guidance. My home lab is two SuperMicro servers running CentOS 7. Both my desktop and laptop are running Fedora 31 with KDE. While I have done some work with both puppet and chef, I have recently been trying to become more proficient with Ansible. I have accounts with AWS, Digital Ocean and Linode. I look forward to giving back to a project I have been using since before it was called Fedora. Please let me know if you have any questions and I will see you at the meeting tomorrow. Thanks, T.C. Williams IRC: austinpowered

2 1

Freeze Break Request: also sign aarch64/ppc64le f31 silverblue testing/updates
by Kevin Fenzi 29 Aug '19

29 Aug '19

We need to apply this and restart robosignatory to get the currently in progress Fedora 31 uppdates-testing push to ever finish. (it's waiting for signatires here). +1s? kevin -- From f2935a8d91a8b0bfef5387fbe46263988727cebf Mon Sep 17 00:00:00 2001 From: Kevin Fenzi <kevin(a)scrye.com> Date: Thu, 29 Aug 2019 00:09:26 +0000 Subject: [PATCH] robosignatory / silverblue: also sign aarch64 and ppc64le f31 testing and updates. Signed-off-by: Kevin Fenzi <kevin(a)scrye.com> --- roles/robosignatory/files/robosignatory.production.py | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/roles/robosignatory/files/robosignatory.production.py b/roles/robosignatory/files/robosignatory. production.py index 10a6950..2d7013b 100644 --- a/roles/robosignatory/files/robosignatory.production.py +++ b/roles/robosignatory/files/robosignatory.production.py @@ -376,6 +376,22 @@ config = { 'directory': '/mnt/fedora_koji/koji/compose/ostree/repo/', 'key': 'fedora-31' }, + 'fedora/31/aarch64/updates/silverblue': { + 'directory': '/mnt/fedora_koji/koji/compose/ostree/repo/', + 'key': 'fedora-31' + }, + 'fedora/31/aarch64/testing/silverblue': { + 'directory': '/mnt/fedora_koji/koji/compose/ostree/repo/', + 'key': 'fedora-31' + }, + 'fedora/31/ppc64le/updates/silverblue': { + 'directory': '/mnt/fedora_koji/koji/compose/ostree/repo/', + 'key': 'fedora-31' + }, + 'fedora/31/ppc64le/testing/silverblue': { + 'directory': '/mnt/fedora_koji/koji/compose/ostree/repo/', + 'key': 'fedora-31' + }, 'fedora/rawhide/aarch64/silverblue': { 'directory': '/mnt/fedora_koji/koji/compose/ostree/repo/', 'key': 'fedora-32' -- 1.8.3.1

3 2

[Fedocal] Reminder meeting : Fedora Infrastructure
by smooge＠gmail.com 28 Aug '19

28 Aug '19

Dear all, You are kindly invited to the meeting: Fedora Infrastructure on 2019-08-29 from 15:00:00 to 16:00:00 UTC At fedora-meeting-1(a)irc.freenode.net The meeting will be about: Weekly Fedora Infrastructure meeting. See infrastructure list for agenda a day before or view it at https://infinote.fedoraproject.org/cgit/infinote/tree/fedora-infrastructure… Source: https://apps.fedoraproject.org/calendar/meeting/22/

2 1

Greenwave - New Release 1.3.0
by Lukas Holecek 28 Aug '19

28 Aug '19

Hi All, We're about to release new version of Greenwave to production. *Changes:* - RemoteRule has a new optional attribute required which allows to treat a missing gating.yaml file as a failed requirement. See Missing gating.yaml file <https://docs.pagure.org/greenwave/package-specific-policies.html#missing-ga…> . - Status code 500 is no longer returned if a gating.yaml file cannot be retrieved. Instead, status code 502 is returned with a specific error. - Documentation now contains recommendation for the maximum number of subjects in a single decision request. See sample requests for POST /api/v1.0/decision <https://docs.pagure.org/greenwave/api.html#post--api-v1.0-decision>. Thanks to all who contributed! Cheers, Lukas

1 2

Freeze Break Request: Content security policy on src.fp.o
by Julen Landa Alustiza 28 Aug '19

28 Aug '19

Good morning all! Due to pagure's new default content security policy src.fp.o users are getting a csp-error since the ui is trying to fetch a js file from apps.fp.o and the policy denies it. We need a configuration change on src.fp.o to modify the csp policy on src{.stg}.fp.o instances to allow clients to fetch js files from apps.fp.o I opened an issue on the tracker[0], but since we are on freeze now here goes the same patch for a FBR. Regards, [0]: https://pagure.io/fedora-infrastructure/issue/8121 -- Julen Landa Alustiza

3 3

Put package name in RSS/ATOM feed for Fedora (security) updates from bodhi
by Marcin Zajaczkowski 26 Aug '19

26 Aug '19

Hi. I'm subscribed to the feed with security updates for Fedora (to be aware what has to be upgraded and restarted on my server): https://bodhi.fedoraproject.org/rss/updates/?releases=F30&status=testing&ty… In general it works, but the thing I miss is a project/package name in the notification (in the feed in general). Sometimes you can figure out a project name from a description, but here I needed to click the link to get know it refers to graphite2 and python-slixmpp: > <item> > <title>FEDORA-2019-d0b1feb995</title> > <link>https://bodhi.fedoraproject.org/updates/FEDORA-2019-d0b1feb995</link> > <description>- New upstream 1.3.13 release > - Move to python3 for tests > - Fix CVE-2018-7999 (rhbz 1554383)</description> > <pubDate>Sun, 25 Aug 2019 11:28:54 +0000</pubDate> > </item> > <item> > <title>FEDORA-2019-5a947d8603</title> > <link>https://bodhi.fedoraproject.org/updates/FEDORA-2019-5a947d8603</link> > <description>Security fix for CVE-2019-1000021</description> > <pubDate>Sun, 25 Aug 2019 14:37:32 +0000</pubDate> > </item> It would be great to have that information available in the feed directly, e.g. in a title: FEDORA-2019-d0b1feb995 for graphite2 or FEDORA-2019-d0b1feb995 - graphite2. (as I see "security update in Fedora 29 for graphite2" on the webpage, that information should be available at the generation time) Marcin

3 2

Warning: bodhi, pyramid, cornice, python-fedora depending on orphaned packages
by Miro Hrončok 26 Aug '19

26 Aug '19

This is just a heads up that there is a dependency chain of orphaned packages that would lead to problems in bodhi when retired. They will be retired in less than a month if nobody takes them. See https://churchyard.fedorapeople.org/orphans.txt (I wonder who takes care of bodhi when Randy is not available, ccing Aurelien who made some commits recently.) -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok

3 3

Fedora 31: Noninstallable Python 2 packages to be retired just before the beta freeze
by Miro Hrončok 26 Aug '19

26 Aug '19

In line with the approved Fedora 31 change, packages that fail to install due to missing Python 2 dependencies are to be removed. I plan to retire the following packages (or just drop their python2 subpackages) one day before the beta freeze (2019-08-28), that is on this Wednesday. Maintainers are Bcced. If you have a valid reason not to do that, give it now, ideally in the bugzilla. Note that "oh no, this is used by XYZ" is not a valid reason, because those packages already don't install and XYZ cannot use them. "I will fix this before the final freeze" is a valid reason not to retire/remove the package. https://fedoraproject.org/wiki/Changes/F31_Mass_Python_2_Package_Removal#Re… Bugzillas: ailurus https://bugzilla.redhat.com/show_bug.cgi?id=1739898 bleachbit https://bugzilla.redhat.com/show_bug.cgi?id=1739899 carbonate https://bugzilla.redhat.com/show_bug.cgi?id=1701888 cherrytree https://bugzilla.redhat.com/show_bug.cgi?id=1737224 chirp https://bugzilla.redhat.com/show_bug.cgi?id=1737641 cmpi-bindings https://bugzilla.redhat.com/show_bug.cgi?id=1609965 did https://bugzilla.redhat.com/show_bug.cgi?id=1655126 earcandy https://bugzilla.redhat.com/show_bug.cgi?id=1739900 fedmsg python2-fedmsg https://bugzilla.redhat.com/show_bug.cgi?id=1737530 fedwatch https://bugzilla.redhat.com/show_bug.cgi?id=1737579 gilmsg https://bugzilla.redhat.com/show_bug.cgi?id=1737534 gjots2 https://bugzilla.redhat.com/show_bug.cgi?id=1739902 gnome-python2-extras https://bugzilla.redhat.com/show_bug.cgi?id=1739904 icaro https://bugzilla.redhat.com/show_bug.cgi?id=1739910 ipsilon https://bugzilla.redhat.com/show_bug.cgi?id=1741099 ldtp https://bugzilla.redhat.com/show_bug.cgi?id=1739911 mote https://bugzilla.redhat.com/show_bug.cgi?id=1737535 olpc-os-builder https://bugzilla.redhat.com/show_bug.cgi?id=1701920 olpc-update https://bugzilla.redhat.com/show_bug.cgi?id=1739915 packagedb-cli https://bugzilla.redhat.com/show_bug.cgi?id=1721680 pgp-tools https://bugzilla.redhat.com/show_bug.cgi?id=1680677 puddletag https://bugzilla.redhat.com/show_bug.cgi?id=1739916 pybliographer https://bugzilla.redhat.com/show_bug.cgi?id=1739917 python-epdb python2-epdb https://bugzilla.redhat.com/show_bug.cgi?id=1737540 python-fabulous python2-fabulous https://bugzilla.redhat.com/show_bug.cgi?id=1739921 python-fedmsg-meta-debian https://bugzilla.redhat.com/show_bug.cgi?id=1737804 python-fedmsg-meta-fedora-infrastructure python2-fedmsg-meta-fedora-infrastructure https://bugzilla.redhat.com/show_bug.cgi?id=1739922 python-fmn-consumer python2-fmn-consumer https://bugzilla.redhat.com/show_bug.cgi?id=1731907 python-moksha-wsgi python2-moksha-wsgi https://bugzilla.redhat.com/show_bug.cgi?id=1739926 python-pwntools python2-pwntools https://bugzilla.redhat.com/show_bug.cgi?id=1701958 python-robosignatory https://bugzilla.redhat.com/show_bug.cgi?id=1737643 python-summershum https://bugzilla.redhat.com/show_bug.cgi?id=1737532 python-tw2-forms python2-tw2-forms https://bugzilla.redhat.com/show_bug.cgi?id=1739927 python-tw2-jqplugins-ui python2-tw2-jqplugins-ui https://bugzilla.redhat.com/show_bug.cgi?id=1739928 python-tw2-jquery python2-tw2-jquery https://bugzilla.redhat.com/show_bug.cgi?id=1739929 trac-fedmsg-plugin https://bugzilla.redhat.com/show_bug.cgi?id=1739938 Maintainers by package: ailurus liangsuilong bleachbit cicku terrycloth carbonate piotrp cherrytree ohaessler chirp hobbes1069 cmpi-bindings jsafrane vcrhonek did mfrodl psss earcandy lkundrak fedmsg bowlofeggs fedwatch sochotni gilmsg orphan ralph gjots2 orphan gnome-python2-extras alexl caillon caolanm johnp mikedep333 rhughes rstrode ssp walters icaro echevemaster lkf yaderv ipsilon puiterwijk simo ldtp limb mote cydrobolt ralph olpc-os-builder cjb dsd pbrobinson olpc-update cjb dsd martinlanghoff pbrobinson packagedb-cli bowlofeggs lmacken orphan pgp-tools fale nb s4504kr puddletag terjeros pybliographer orphan python-epdb arg jforbes pjones python-fabulous lmacken orphan ralph python-fedmsg-meta-debian ianweller ralph python-fedmsg-meta-fedora-infrastructure ianweller lmacken ralph sayanchowdhury python-fmn-consumer orphan ralph python-moksha-wsgi ralph python-pwntools mikep python-robosignatory puiterwijk ralph python-summershum pingou python-tw2-forms orphan ralph python-tw2-jqplugins-ui orphan ralph python-tw2-jquery orphan ralph trac-fedmsg-plugin ralph Packages by maintainer: alexl gnome-python2-extras arg python-epdb bowlofeggs fedmsg packagedb-cli caillon gnome-python2-extras caolanm gnome-python2-extras cicku bleachbit cjb olpc-os-builder olpc-update cydrobolt mote dsd olpc-os-builder olpc-update echevemaster icaro fale pgp-tools hobbes1069 chirp ianweller python-fedmsg-meta-debian python-fedmsg-meta-fedora-infrastructure jforbes python-epdb johnp gnome-python2-extras jsafrane cmpi-bindings liangsuilong ailurus limb ldtp lkf icaro lkundrak earcandy lmacken packagedb-cli python-fabulous python-fedmsg-meta-fedora-infrastructure martinlanghoff olpc-update mfrodl did mikedep333 gnome-python2-extras mikep python-pwntools nb pgp-tools ohaessler cherrytree pbrobinson olpc-os-builder olpc-update pingou python-summershum piotrp carbonate pjones python-epdb psss did puiterwijk ipsilon python-robosignatory ralph gilmsg mote python-fabulous python-fedmsg-meta-debian python-fedmsg-meta-fedora-infrastructure python-fmn-consumer python-moksha-wsgi python-robosignatory python-tw2-forms python-tw2-jqplugins-ui python-tw2-jquery trac-fedmsg-plugin rhughes gnome-python2-extras rstrode gnome-python2-extras s4504kr pgp-tools sayanchowdhury python-fedmsg-meta-fedora-infrastructure simo ipsilon sochotni fedwatch ssp gnome-python2-extras terjeros puddletag terrycloth bleachbit vcrhonek cmpi-bindings walters gnome-python2-extras yaderv icaro -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok

2 1

A few patches for bodhi pungi compose
by Dusty Mabe 23 Aug '19

23 Aug '19

[PATCH 1/3] bodhi-pungi: get rid of < f29 logic Some cleanup [PATCH 2/3] bodhi-pungi: branched is now f31 This fixes a compose issue: https://pagure.io/releng/failed-composes/issue/53 [PATCH 3/3] bodhi-pungi: add the f32 signing key Future proofing.

2 5

communishift retrospective - 2019-08-23 18:00UTC
by Kevin Fenzi 23 Aug '19

23 Aug '19

Greetings everyone. I'd like to invite everyone to a retrospective on communishift. In particular I'd like to discuss the setup and how we could do things better, but anything communishift would be welcome, such as: * plans to advertise more? Perhaps community blog post/posts on new apps? * Tutorials/how to setup your app pages/blog posts? * Any administrative questions/comments/concerns? I'd like to meet in #fedora-meeting at 18UTC on friday. Thanks! kevin

6 8

[Fedocal] Reminder meeting : Fedora Infrastructure
by smooge＠gmail.com 21 Aug '19

21 Aug '19

Dear all, You are kindly invited to the meeting: Fedora Infrastructure on 2019-08-22 from 15:00:00 to 16:00:00 UTC At fedora-meeting-1(a)irc.freenode.net The meeting will be about: Weekly Fedora Infrastructure meeting. See infrastructure list for agenda a day before or view it at https://infinote.fedoraproject.org/cgit/infinote/tree/fedora-infrastructure… Source: https://apps.fedoraproject.org/calendar/meeting/22/

1 0

Access for dusty to sysadmin-main
by Dusty Mabe 20 Aug '19

20 Aug '19

I suspect this request might fall short, but I figure I'll start a dialog. With Fedora CoreOS needing some different services set up and more and more requests getting opened every day on the infra issue tracker, it would be nice if I could gain some more access within Fedora Infra to be able to help support the Fedora CoreOS efforts as well as possibly help lighten the load (i.e. perform simple privileged tasks for unprivileged people when appropriate) of Fedora's infra team. I've had a few services that I recently got all the way through the RFR process. I was admittedly out for a month during that time on leave, but if you subtract that month it still took a rather long time to make it to completion. The long times aren't necessarily anyone's fault, just happens to be how the requests landed and also my projects not necessarily being on anyone's priority list. That being said, I have learned a lot by getting these apps into prod and I feel like I can help our future apps along if I had more access to debug things myself (i.e. inconsistencies in stage) rather than waiting on someone from infra. I am not requesting this access to abuse it. I am typically conservative and don't do things that I'm not comfortable doing or that I know would be frowned upon. As an example I was granted access to the releng group a while back and I think that has worked out well. I'd like to help if possible, but I understand if my request isn't granted. Dusty

4 10

Planned Outage - Fedora Staging/Build Updates/Reboots 2019-08-20 20:00 UTC
by Stephen John Smoogen 19 Aug '19

19 Aug '19

=== Planned Outage - Staging/Build - 2019-08-20 20:00 UTC There will be an outage starting at 2019-08-20 20:00 UTC, which will last approximately 4 hours. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2019-08-20 20:00UTC' Reason for outage: RHEL-7.7 came out and a lot of other updates for various Fedora issues will need updates and reboots of systems. Affected Services: All staging and build and related services will be affected. Ticket Link: https://pagure.io/fedora-infrastructure/issue/8106 Please join #fedora-admin or #fedora-noc on irc.freenode.net or add comments to the ticket for this outage above. -- Stephen J Smoogen.

1 0

Planned Outage - PHX2-Production - 2019-08-21 20:00 UTC
by Stephen John Smoogen 19 Aug '19

19 Aug '19

=== Planned Outage - PHX2-Production - 2019-08-21 20:00 UTC There will be an outage starting at 2019-08-21 20:00 UTC, which will last approximately 6 hours. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2019-08-21 20:00UTC' Reason for outage: RHEL-7.7 came out and a lot of other updates for various Fedora issues will need updates and reboots of systems. Affected Services: All staging/production and related services will be affected. Ticket Link: https://pagure.io/fedora-infrastructure/issue/8107 Please join #fedora-admin or #fedora-noc on irc.freenode.net or add comments to the ticket for this outage above. -- Stephen J Smoogen.

1 0

Meeting Agenda Item: Introduction Scott
by Scott Lee 16 Aug '19

16 Aug '19

Hello, I'd like to start contributing to Fedora Infrastructure. I have a operations engineer background and I am familiar with Bash, Python, AWS, Kubernetes, Ansible, Terraform. I'm in the PST time zone (California). I've created a Fedora account (slee), signed the FPCA, and subscribed to the Fedora Infrastructure Mailing List. I'm squishedlunch on IRC and I've been lurking a bit on #fedora-admin. Unfortunately I missed the weekly meeting this morning but I'll be sure to catch future sessions. Can someone invite me to the 'fi-apprentice' group? Also I've seen references to various tools like release-monitoring.org and https://jenkins-fedora-infra.apps.ci.centos.org, is there a central place where all these tools/endpoints are listed? Looking forward to working with everyone!

1 0

Bot Account for Bodhi Karma
by Tim Flink 15 Aug '19

15 Aug '19

After the Flock talk from the Facebook folks, they approached QA about the idea of submitting karma and/or test results from their internal testing as a bot account. Is this something that is possible? I know that we have done bot accounts at various points in time but I don't remember if automated karma is allowed or what the other restrictions on that were. Thanks, Tim

4 4

[Fedocal] Reminder meeting : Fedora Infrastructure
by smooge＠gmail.com 14 Aug '19

14 Aug '19

Dear all, You are kindly invited to the meeting: Fedora Infrastructure on 2019-08-15 from 15:00:00 to 16:00:00 UTC At fedora-meeting-1(a)irc.freenode.net The meeting will be about: Weekly Fedora Infrastructure meeting. See infrastructure list for agenda a day before or view it at https://infinote.fedoraproject.org/cgit/infinote/tree/fedora-infrastructure… Source: https://apps.fedoraproject.org/calendar/meeting/22/

1 0

RHEL-7 reposync directories to remove ? Feedback requested
by Stephen John Smoogen 13 Aug '19

13 Aug '19

So we do a reposync of RHEL-7 trees every night. For the x86_64 we have been keeping track of a lot of repositories which may not make sense to keep. I have broken it into 3 types: We need to Keep, no idea, and nope. Please look over these and let me know where the others go as I am fixing the rhel7-sync script to be a bit more maintainable. Need to Keep ./rhel-7-extras-for-x86_64-server-rpms ./rhel-7-for-x86_64-server-rpms ./rhel-7-ha-for-x86_64-server-rpms ./rhel-7-optional-for-x86_64-server-rpms ./rhel-7-rhscl-for-x86_64-server-rpms ./rhel-7-openshift-3.11-rpms Which of these make sense to keep syncing? ./jb-eap-7.1-for-rhel-7-server-rpms ./rhel-7-fast-datapath ./rhel-7-server-ansible-2-rpms ./rhel-7-openshift-3.10-rpms ./rhel-7-openshift-3.4-rpms ./rhel-7-openshift-3.5-rpms ./rhel-7-openshift-3.6-rpms ./rhel-7-openshift-3.7-rpms ./rhel-7-openshift-3.8-rpms ./rhel-7-openshift-3.9-rpms ./rhel-7-openstack-10-rpms ./rhel-7-openstack-13-rpms ./rhel-7-openstack-5.0-rpms ./rhel-7-openstack-8-rpms ./rhel-7-server-atomic-host-rpms ./rhel-7-server-rhv-4-manager-tools-rpms ./rhel-7-server-rhv-4-mgmt-agent-rpms ./rhel-7-server-rhv-4.2-manager-rpms To Be Deleted ./rhel-7-server-extras-rpms.old ./rhel-7-server-optional-rpms.old ./rhel-7-server-rpms.old ./rhel-ha-for-rhel-7-server-rpms.old ./rhel-server-rhscl-7-rpms.old -- Stephen J Smoogen.

1 0

Transtats 0.7.5 deployed on production
by Sundeep Anand 12 Aug '19

12 Aug '19

Hi, Transtats[1] latest release has been deployed on production: https://transtats.fedoraproject.org/ Major changes include: - New sections on landing page: global map, trending languages, out-of-sync packages. - Add language detail page and job output analysis section. - Coverage rules revamp - add, edit, delete and view pages, few bug fixes. - Transifex and Weblate support, alongwith Zanata and DamnedLies. Changelog: https://github.com/transtats/transtats/blob/devel/CHANGELOG.md Folks here may find "fedora release readiness" feature[2] interesting. Demo: https://www.youtube.com/watch?v=xpCudZDyb4g (2.16 Minutes) Quick start page is here: https://transtats.fedoraproject.org/quick-start (Transtats sync with translation platform and build system at intervals to keep stats latest.) thanks, sundeep [1] http://transtats.org [2] https://speakerdeck.com/sundeep/use-cases-for-transtats-in-the-fedora-commu…

1 0

A Friday with Infra
by Michal Konecny 10 Aug '19

10 Aug '19

Good Morning Everyone, As you may remember from [1] the CPE team has started categorizing its applications into the following categories: 1. We maintain it, we run it 2. We don’t maintain it, we run it 3. We don’t maintain it, we don’t run it 4. We turn it off In this process we picked the following four applications that we want to move from the first category to the third: * elections [2] * fedocal * nuancier * badges However, we do not want to throw code over the wall to anyone, so we’re setting up something we called “A Friday with Infra”. The goal is to help on-boarding anyone interested in picking up the maintenance of any of these apps by taking time on Friday to work on these apps with them. We have prepared a wiki page describing this proposal, how to get involved in it as well as all the work we believe should be done to have a smooth hand-over of the applications: https://fedoraproject.org/wiki/Infrastructure_2020/Friday_with_Infra Let us know if you have any questions or (even better) want to be involved with any of them :) Michal – On behalf of the CPE team ------------------------------------------------------------------------ [1] https://communityblog.fedoraproject.org/application-service-categories-and-… [2] elections has actually already found a new maintainer

6 13

[Fedocal] Reminder meeting : Fedora Infrastructure
by smooge＠gmail.com 07 Aug '19

07 Aug '19

Dear all, You are kindly invited to the meeting: Fedora Infrastructure on 2019-08-08 from 15:00:00 to 16:00:00 UTC At fedora-meeting-1(a)irc.freenode.net The meeting will be about: Weekly Fedora Infrastructure meeting. See infrastructure list for agenda a day before or view it at https://infinote.fedoraproject.org/cgit/infinote/tree/fedora-infrastructure… Source: https://apps.fedoraproject.org/calendar/meeting/22/

1 0

Congrats to our new sysadmin-mainers
by Kevin Fenzi 06 Aug '19

06 Aug '19

I'm happy to announce that We have approved several folks into the sysadmin-main group: mohanboddu 'Mohan Boddu' cverna 'Clement Verna' bowlofeggs 'Randy Barlow' This is the core group of trusted folks that high level access to most everything in fedora infrastructure. All these folks have done great work over the last few years on various big projects, proving their dedication, trustworthiness, and ability. Congrats to them all! Use your powers for good! :) kevin

4 3

Meeting Agenda Item: Introduction Adam Stackhouse
by Adam Stackhouse 05 Aug '19

05 Aug '19

Hi everyone, I am looking to help the infrastructure team at fedora so hopefully you will welcome me in and help me get stuck in. So I will begin with introducing my self a bit: Name: Adam Stackhouse IRC Handle: adstak I have been a Linux sys admin now for about 6 and a half years in the web hosting industry. I currently work for Godaddy EMEA and work on roughly 2000 of their Centos servers on their UK brands. This covers everything from mail servers to web servers and I would like to offer back some of my skills to fedora and hopefully pick up a thing or two along the way. I have quite allot of experience in bash, Python and Perl from everything from sys tools to back end API's. In terms of technologies I would like to learn etc I am pretty open and want to learn as much as I can. currently I am working with technologies such as ansible, haproxy, buidling RPM's and openstack but I have pretty much had to deal with many services and technologies in Linux due to the size of the company I work and happy to get stuck in with what ever I can :) In terms of open source work this would be a first for me so any advice anyone can give into how I can get involved and be of help would be great. The only thing close to this I have done in the past is some development for the pebble watch a feew years ago with a few people on github so bit of a noob in the open source world so hopefully everyone here can help me out at any point if I need it. So I guess in terms of questions if anyone could give me some advice on where to go next I would love to just follow that and see where this goes. I have seen there is an apprentice group which seems like a good place to start to get an idea of the platforms you have etc Any help you can give would be great and I look forward to working with everyone

2 1

koji build archiving
by Kevin Fenzi 03 Aug '19

03 Aug '19

Koji.fedoraproject.org currently stores every rpm ever shipped to users since the Fedora 7 days, along with a lot of information about every build it’s ever made, even if not distributed. We have continued to grow the storage backing koji over time, but it is close to reaching a size we can no longer expand (75TB). We are going to start moving builds off our main storage volume on to slower (but still accessible) volumes in order to shrink our main volume of active releases and make it easier to move and expand. There may be slowdowns of builds and composes during the time we are moving builds, but we will try and make it as transparent as possible. All builds will continue to be available via koji.fedoraproject.org, but you may notice a new volume name in the download path of some older packages. As part of initial testing of this move, we moved the *fc6* tagged builds and this generated a number of 'buildsys.state.changed' notifications to maintainers. We have since corrected the koji fedora-messaging plugin to not emit these volume change events. Sorry for the extra emails. Please let us know if you experience excessive slowdowns or issues related to this move. This work is being tracked in https://pagure.io/fedora-infrastructure/issue/8065 Thanks, kevin

1 0

[PATCH] Add a nagios check for each rabbitmq server
by Jeremy Cline 03 Aug '19

03 Aug '19

Commit eae92f73e95 installed the nagios scripts[0] that are packaged for epel7-infra on the RabbitMQ hosts. This is an attempt to use them with nagios. I don't know anything about nagios though, so I have no idea if this is even close to right, or if it works. [0] https://github.com/nagios-plugins-rabbitmq/nagios-plugins-rabbitmq Signed-off-by: Jeremy Cline <jcline(a)redhat.com> --- roles/nagios_client/tasks/main.yml | 15 +++++++++++++ .../templates/check_rabbitmq_server.cfg.j2 | 1 + roles/nagios_server/tasks/main.yml | 22 +++++++++++++++++++ .../nrpe/check_rabbitmq_server.cfg.j2 | 1 + 4 files changed, 39 insertions(+) create mode 100644 roles/nagios_client/templates/check_rabbitmq_server.cfg.j2 create mode 100644 roles/nagios_server/templates/nrpe/check_rabbitmq_server.cfg.j2 diff --git a/roles/nagios_client/tasks/main.yml b/roles/nagios_client/tasks/main.yml index 0259a43ca..65a60a7c3 100644 --- a/roles/nagios_client/tasks/main.yml +++ b/roles/nagios_client/tasks/main.yml @@ -233,6 +233,21 @@ tags: - nagios_client +- name: install nrpe checks for the RabbitMQ cluster + template: + src: "{{ item }}.j2" + dest: "/etc/nrpe.d/{{ item }}" + owner: root + group: root + mode: 0600 + with_items: + - check_rabbitmq_server.cfg + when: inventory_hostname.startswith('rabbitmq') + notify: + - restart nrpe + tags: + - nagios_client + - name: nrpe service start service: name=nrpe state=started enabled=true tags: diff --git a/roles/nagios_client/templates/check_rabbitmq_server.cfg.j2 b/roles/nagios_client/templates/check_rabbitmq_server.cfg.j2 new file mode 100644 index 000000000..498a8757e --- /dev/null +++ b/roles/nagios_client/templates/check_rabbitmq_server.cfg.j2 @@ -0,0 +1 @@ +command[check_nrpe_check_rabbitmq_server]=exec /usr/lib64/nagios/plugins-rabbitmq/check_rabbitmq_server -H localhost --password "{{ (env == 'production')|ternary(rabbitmq_monitoring_password_production, rabbitmq_monitoring_password_staging) }}" --user nagios-monitoring diff --git a/roles/nagios_server/tasks/main.yml b/roles/nagios_server/tasks/main.yml index 2d6d50c31..f61584ed6 100644 --- a/roles/nagios_server/tasks/main.yml +++ b/roles/nagios_server/tasks/main.yml @@ -110,6 +110,28 @@ - config - nagios_server +- name: Ensure the nrpe.d directory exists for nrpe configs + file: + dest: /etc/nrpe.d + state: directory + tags: + - nagios_server + +- name: Add nrpe configurations to /etc/nrpe.d + template: + src: "/nrpe/{{ item }}.j2" + dest: "/etc/nrpe.d/{{ item }}" + owner: root + group: root + mode: 0600 + with_items: + - check_rabbitmq_server.cfg + notify: + - restart nrpe + tags: + - config + - nagios_server + ## Copy over the nagios configs - name: Copy /etc/nagios/conf.d/*cfg files copy: src=nagios/configs/{{ item }} dest=/etc/nagios/conf.d/{{ item }} diff --git a/roles/nagios_server/templates/nrpe/check_rabbitmq_server.cfg.j2 b/roles/nagios_server/templates/nrpe/check_rabbitmq_server.cfg.j2 new file mode 100644 index 000000000..498a8757e --- /dev/null +++ b/roles/nagios_server/templates/nrpe/check_rabbitmq_server.cfg.j2 @@ -0,0 +1 @@ +command[check_nrpe_check_rabbitmq_server]=exec /usr/lib64/nagios/plugins-rabbitmq/check_rabbitmq_server -H localhost --password "{{ (env == 'production')|ternary(rabbitmq_monitoring_password_production, rabbitmq_monitoring_password_staging) }}" --user nagios-monitoring -- 2.21.0

3 7

Please have a look at this python-docutils bug
by Miro Hrončok 02 Aug '19

02 Aug '19

Hey Infra SIG! I've previously sent this to infra-sig(a)lists.fedoraproject.org but that list is private, so reposting here: -------- Forwarded Message -------- This bugzilla is assigned to the Fedora Infrastructure SIG. There has been no response for a month. Please, could you have a look? https://bugzilla.redhat.com/show_bug.cgi?id=1716532 Thanks, -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure August 2019