Server SIG Weekly Meeting Minutes (2017-02-28)
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===================================================================
#fedora-meeting-1: Server Working Group Weekly Meeting (2017-02-28)
===================================================================
Meeting started by sgallagh at 21:01:15 UTC. The full logs are available
at
https://meetbot.fedoraproject.org/fedora-meeting-1/2017-02-28/server_work...
.
Meeting summary
- ---------------
* roll call (sgallagh, 21:01:15)
* Agenda (sgallagh, 21:05:44)
* Agenda Item: Feedback on the Domain Controller Role second draft
(sgallagh, 21:05:54)
* Agenda Item: Cockpit and Ansible Status (sgallagh, 21:05:55)
* Feedback on the Domain Controller Role second draft (sgallagh,
21:08:08)
* LINK:
https://github.com/libre-server/proposals/tree/master/Domain%20Controller
(sgallagh, 21:08:24)
* AGREED: Server SIG accepts the Domain Controller Role proposal (+7,
0, -0) (sgallagh, 21:23:05)
* Cockpit and Ansible Status (sgallagh, 21:23:40)
* ACTION: vvaldez, jds2001 and sgallagh to attend Cockpit meeting on
3/13 and discuss role developments and Ansible (sgallagh, 22:05:23)
Meeting ended at 22:07:21 UTC.
Action Items
- ------------
* vvaldez, jds2001 and sgallagh to attend Cockpit meeting on 3/13 and
discuss role developments and Ansible
Action Items, by person
- -----------------------
* jds2001
* vvaldez, jds2001 and sgallagh to attend Cockpit meeting on 3/13 and
discuss role developments and Ansible
* sgallagh
* vvaldez, jds2001 and sgallagh to attend Cockpit meeting on 3/13 and
discuss role developments and Ansible
* vvaldez
* vvaldez, jds2001 and sgallagh to attend Cockpit meeting on 3/13 and
discuss role developments and Ansible
* **UNASSIGNED**
* (none)
People Present (lines said)
- ---------------------------
* sgallagh (109)
* jds2001 (39)
* vvaldez (21)
* smooge (15)
* zodbot (13)
* adamw (9)
* nirik (9)
* mjwolf (5)
* mhayden (4)
* linuxmodder (3)
* misc (3)
* jds2001_ (2)
* geppetto (2)
* dperpeet (0)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
-----BEGIN PGP SIGNATURE-----
Version: Mailvelope v1.7.1
Comment: https://www.mailvelope.com
wkYEAREIABAFAli19NsJEHolVWI2uqOjAACV9ACgnqLmWCK6ZU3+hNG0PM5d
oEyLVmsAn2UCDtDYLKuIUreXSnDrNAfBfv5P
=u3RO
-----END PGP SIGNATURE-----
6 years, 6 months
Re: Fedora Rawhide-20170227.n.0 compose check report
by Adam Williamson
On Mon, 2017-02-27 at 17:25 +0000, Fedora compose checker wrote:
> Missing expected images:
>
> Atomic qcow2 x86_64
There seems to be some sort of problem in pungi-make-ostree:
https://kojipkgs.fedoraproject.org//work/tasks/1386/18091386/root.log
DEBUG util.py:435: + pungi-make-ostree tree --repo=/mnt/koji/compose/atomic/rawhide/ --log-dir=/mnt/koji/compose/rawhide/Fedora-Rawhide-20170227.n.0/logs/x86_64/Atomic/ostree-2 --treefile=/mnt/koji/compose/rawhide/Fedora-Rawhide-20170227.n.0/work/ostree-2/config_repo/fedora-atomic-docker-host.json --extra-config=/mnt/koji/compose/rawhide/Fedora-Rawhide-20170227.n.0/work/ostree-2/extra_config.json
DEBUG util.py:435: Traceback (most recent call last):
DEBUG util.py:435: File "/usr/bin/pungi-make-ostree", line 15, in <module>
DEBUG util.py:435: ostree.main()
DEBUG util.py:435: File "/usr/lib/python2.7/site-packages/pungi/ostree/__init__.py", line 85, in main
DEBUG util.py:435: func()
DEBUG util.py:435: File "/usr/lib/python2.7/site-packages/pungi/ostree/tree.py", line 95, in run
DEBUG util.py:435: repos = extra_source_repos + [{'name': 'source_repo_from', 'baseurl': source_repo_from}]
DEBUG util.py:435: TypeError: unsupported operand type(s) for +: 'NoneType' and 'list'
> Server dvd i386
Several i386 image composes still failing for the reason Kevin noted
recently:
dnf.exceptions.Error: Will not install a source rpm package (docker-anaconda-addon-0.4-4.fc26.src).
> Xfce raw-xz armhfp
Looks a bit odd:
https://kojipkgs.fedoraproject.org//work/tasks/1563/18091563/root.log
DEBUG util.py:435: Unable to create appliance : Failed to find package 'firefox' : no package matched: firefox
Is there an ARM-specific issue with the firefox package?
> Server boot i386
> Atomic raw-xz x86_64
See above.
> Failed openQA tests: 10/107 (x86_64), 1/2 (arm)
>
> ID: 57880 Test: x86_64 Server-dvd-iso install_repository_nfs_graphical
> URL: https://openqa.fedoraproject.org/tests/57880
This is some kinda transient test fail, I think (openQA clicked in the
wrong place or the click got lost or something).
> ID: 57881 Test: x86_64 Server-dvd-iso server_role_deploy_domain_controller
> URL: https://openqa.fedoraproject.org/tests/57881
This is now failing because of:
https://bugzilla.redhat.com/show_bug.cgi?id=1405790
freeipa-client and freeipa-server can't be installed due to dep issues
with certmonger, and certmonger rebuild is failing.
> ID: 57899 Test: x86_64 Workstation-live-iso desktop_terminal
> URL: https://openqa.fedoraproject.org/tests/57899
> ID: 57907 Test: x86_64 Workstation-live-iso desktop_update_graphical
> URL: https://openqa.fedoraproject.org/tests/57907
These two failed because gnome-color-manager unexpectedly asked for
access to the system location immediately upon login, which the test
can't cope with:
https://bugzilla.gnome.org/show_bug.cgi?id=779343
We could adjust the test, but the GNOME behaviour seems odd, so waiting
for input from the devs on whether it's a bug.
> ID: 57925 Test: arm Minimal-raw_xz-raw.xz install_arm_image_deployment_upload
> URL: https://openqa.fedoraproject.org/tests/57925
We never get any video output from this test, with a 10 minute (IIRC)
boot timeout. pwhalen reports there's a showstopper with ARM atm
related to module loading:
https://bugzilla.redhat.com/show_bug.cgi?id=1422634
that may be causing this, or it may be something else.
> ID: 57951 Test: x86_64 universal install_iscsi
> URL: https://openqa.fedoraproject.org/tests/57951
This broke between 20170208 and 20170214, my best guess at what
happened is in the new bug report:
https://bugzilla.redhat.com/show_bug.cgi?id=1427359
> ID: 57956 Test: x86_64 universal install_software_raid@uefi
> URL: https://openqa.fedoraproject.org/tests/57956
This is an openQA console typing fail (sigh, still happens
occasionally). Test actually worked fine.
> ID: 57978 Test: x86_64 universal install_cyrillic_language
> URL: https://openqa.fedoraproject.org/tests/57978
Still https://bugzilla.redhat.com/show_bug.cgi?id=1413813 . If that
doesn't get any attention soon I may have to make the test work around
it to cover the rest of the test case...
> ID: 57983 Test: x86_64 universal install_rescue_encrypted
> URL: https://openqa.fedoraproject.org/tests/57983
> ID: 57984 Test: x86_64 universal install_rescue_encrypted@uefi
> URL: https://openqa.fedoraproject.org/tests/57984
Still https://bugzilla.redhat.com/show_bug.cgi?id=1376638 . Looks like
there's now a PR to fix this, but it is not yet merged.
> ID: 57986 Test: x86_64 Workstation-live-iso desktop_notifications_postinstall
> URL: https://openqa.fedoraproject.org/tests/57986
This is a hard fail caused by the same SELinux alert that causes all
the soft fails (see below). It's a hard fail because any AVC alert that
triggers a desktop notification on boot is a Final release criteria
violation.
> Soft failed openQA tests: 52/107 (x86_64)
> (Tests completed, but using a workaround for a known bug)
These are all caused by:
https://bugzilla.redhat.com/show_bug.cgi?id=1392161
it may strictly speaking have been best reported as a separate bug, but
basically there's an AVC that shows up on almost all installs,
something being denied 'mounton' action for /proc/mtrr .
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
6 years, 6 months
Re: Fedora Rawhide-20170227.n.0 compose check report
by Adam Williamson
On Tue, 2017-02-28 at 09:29 +0200, Alexander Bokovoy wrote:
> > This is now failing because of:
> > https://bugzilla.redhat.com/show_bug.cgi?id=1405790
> > freeipa-client and freeipa-server can't be installed due to dep issues
> > with certmonger, and certmonger rebuild is failing.
>
> No, freeipa-client has dependency on /usr/libexec/system-python2 which
> is not provided by anything, it seems. I rebuilt freeipa yesterday and
> it again got this dependency even though nothing is explicitly requiring
> or mentioning it in the code and the spec file. Looks like real issue is
> somewhere in Python infra in Rawhide.
Well, up till today I think we had both problems - I did forget about
the system-python2 one, indeed. But the certmonger dep was also a
problem, and certmonger only got rebuilt today:
https://koji.fedoraproject.org/koji/buildinfo?buildID=862860
What's the bug # for the system-python2 issue again? I've lost it.
Thanks!
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
6 years, 6 months
Cockpit 130, 131 and 132
by 'Dominik Perpeet'
http://cockpit-project.org/blog/cockpit-132.html
Cockpit is the modern Linux admin interface. We release regularly. Here are the release notes from version 130, 131 and 132.
Kernel dump configuration support added
---------------------------------------
Kernel crash dump configuration is now possible in Cockpit: view and toggle the status of the kdump service, with hints how to enable if the kernel boot parameters need to be changed. Cockpit shows the amount of reserved memory and setting a path for dumping the kernel on the local filesystem, with a toggle for compressing the crash dumps. Take a look at the video below for a demo.
Demo: https://youtu.be/VXhuqPR2K5c
Change: https://github.com/cockpit-project/cockpit/pull/5587
MAC addresses for ethernet adapters and bonds can be modified
-------------------------------------------------------------
On the Networking page, MAC addresses for ethernet adapters can now be clicked to edit them, starting with NetworkManager version 1.4. For bonds, the MAC addresses are shown and can be edited starting with NetworkManager version 1.6. Take a look at the video below for a demo.
Demo: https://youtu.be/JIHQmFHOrO4
Change: https://github.com/cockpit-project/cockpit/pull/5851
Show session virtual Machines on the machines page
--------------------------------------------------
Libvirt differentiates between system virtual machines and session ones, which are tied to the user. In Cockpit all the virtual machines accessible to the logged in user, system and session, are now shown in a combined list.
Screenshot: http://cockpit-project.org/blog/images/cockpit-machines-session.png
Change: https://github.com/cockpit-project/cockpit/pull/5765
SELinux functionality is now available without setroubleshootd
--------------------------------------------------------------
The SELinux page in Cockpit can do more than just troubleshoot. It was therefore renamed to SELinux and the functionality of toggling between enforcing/permissive mode is now also available even if setroubleshoot-server isn't installed. This was cause for unexpected behavior on Atomic Host systems without setroubleshoot-server where it's non-trivial and often undesired to add that package.
Screenshot: http://cockpit-project.org/blog/images/cockpit-selinux-disabled.png
Change: https://github.com/cockpit-project/cockpit/pull/5868
Optionally disable the dependency on libssh
-------------------------------------------
When configuring Cockpit, the option |disable-ssh| disables building |cockpit-ssh| and removes the dependency on |libssh|. This is useful when building on an operating system where |libssh| is not available.
Change: https://github.com/cockpit-project/cockpit/pull/5743
Get it
------
You can get Cockpit here:
http://cockpit-project.org/running.html
Cockpit 132 is available in Fedora 25:
https://bodhi.fedoraproject.org/updates/cockpit-132-1.fc25
Or download the tarball here:
https://github.com/cockpit-project/cockpit/releases/tag/132
Note: Use the packages to install this version of Cockpit. When installing from the tarball, remove /etc/systemd/system/cockpit.service.d/fatal.conf manually afterwards to prevent Cockpit from exiting in rare cases.
Thanks,
Dominik
6 years, 7 months
next steps for migrating Cloud Base image to Fedora Server?
by Matthew Miller
I think we had general agreement around what we want to do here:
have the Cloud Base Image become instead Fedora Server, but shipped
as a cloud image and made available in cloud providers. What are the
next steps to actually get there?
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader
6 years, 7 months
Requesting someone to chair 2017-02-14 meeting
by Stephen Gallagher
My daughter's scout troop changed its monthly meeting to the second Tuesday of
the month starting tomorrow, so I need to miss the meeting (and would like
someone else to volunteer to chair it). There's no reason to move the meeting in
general; I'll just have to miss one per month.
I didn't get a chance yet this week to rework the Domain Controller proposal, so
we can defer that discussion to next week in any case.
6 years, 7 months
Server SIG Weekly Meeting Minutes (2017-02-07)
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===================================================================
#fedora-meeting-1: Server Working Group Weekly Meeting (2017-02-07)
===================================================================
Meeting started by sgallagh at 21:00:09 UTC. The full logs are available
at
https://meetbot.fedoraproject.org/fedora-meeting-1/2017-02-07/server_work...
.
Meeting summary
- ---------------
* roll call (sgallagh, 21:00:09)
* agenda (sgallagh, 21:03:06)
* Agenda Item: Feedback on the Domain Controller Role first draft
(sgallagh, 21:03:40)
* Agenda Item: Fedora Server base image for cloud providers
(sgallagh, 21:03:40)
* Agenda Item: Procedural Notes (sgallagh, 21:04:23)
* Procedural Notes (sgallagh, 21:06:29)
* Server SIG will use https://pagure.io/fedora-server/ to track tasks
and decisions. (sgallagh, 21:12:10)
* Feedback on the Domain Controller Role first draft (sgallagh,
21:12:19)
* LINK:
https://github.com/libre-server/proposals/blob/master/Domain%20Controller.md
(sgallagh, 21:12:34)
* LINK:
https://fedoraproject.org/wiki/Domain_controller_role_requirements
(adamw, 21:17:52)
* Mixing the requirements and roadmap will be problematic later.
Separate them. (sgallagh, 21:19:54)
* More technical requirements need to be located somewhere and linked
to. (sgallagh, 21:20:23)
* Requirements need to add basic authentication and enrollment
requirements. (sgallagh, 21:26:54)
* ACTION: sgallagh to work up a second draft from the feedback here
(sgallagh, 21:33:24)
* Fedora Server base image for cloud providers (sgallagh, 21:34:38)
* For Fedora 26, there will be no changes to the way we produce the
Fedora cloud image. It will continue to be a very minimal base
image, not a full Server Edition. (sgallagh, 21:36:53)
* Open Floor (sgallagh, 21:39:50)
* LINK: https://bugzilla.redhat.com/show_bug.cgi?id=1403352 at least
(nirik, 21:41:55)
* Metrics from EPEL indicate a high degree of interest in nagios,
clamav, R and openvpn. We should consider providing nagios and
openvpn server roles down the line. (sgallagh, 21:55:28)
Meeting ended at 21:59:12 UTC.
Action Items
- ------------
* sgallagh to work up a second draft from the feedback here
Action Items, by person
- -----------------------
* sgallagh
* sgallagh to work up a second draft from the feedback here
* **UNASSIGNED**
* (none)
People Present (lines said)
- ---------------------------
* sgallagh (92)
* adamw (30)
* jds2001 (21)
* nirik (15)
* vvaldez (12)
* zodbot (11)
* smooge (11)
* dustymabe (4)
* mjwolf (3)
* roshi (1)
* dperpeet (0)
* mhayden (0)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
-----BEGIN PGP SIGNATURE-----
Version: Mailvelope v1.6.5
Comment: https://www.mailvelope.com
wkYEAREIABAFAliaQ2cJEHolVWI2uqOjAACmRACgsSCewhMSgC5o8NmGLRRA
FoLNahIAmwcxr8QMDFpi5FwvRhUOlq7SG6v1
=CrhU
-----END PGP SIGNATURE-----
6 years, 7 months
