Iptables Solution
by Mike McGrath
lmacken, skvidal and xDamonx have been working together to create a
simple (and predictable) set of iptables rules. They're now ready and
xDamonx will be deploying them. The iptables template is done and
basically all thats needed to deploy is added to the manifests file.
For example, here's whats in our db group (as is in
manifests/servergroups/db.pp:
# firewall Rules
$tcpPorts = [ 3306, 5432 ]
$udpPorts = [ ]
iptables { '/etc/sysconfig/iptables':
content =>
template('/var/lib/puppet/config/system/iptables-template.conf.erb'),
}
service { iptables:
ensure => running,
hasstatus => true,
}
# EOF
After we roll these out we can easily add things to the template like
the bandwidth limiting we need on the proxy servers and adding a
"$rateLimit = 1" to the manifest.
-Mike
16 years, 10 months
public mirror list 404
by Jeroen van Meeuwen
A heads up for anyone not online in the IRC channel, but able to maybe
fix things or wake up someone:
* [H]omer (n=[H]omer(a)kgr.gotadsl.co.uk) has joined #fedora-admin
<[H]omer> Hi
<[H]omer> http://mirrors.fedoraproject.org/publiclist is showing a 404!
<[H]omer> Did you guys know about this?
<kanarip> nope i guess we didn't
And indeed it does show up 404's from where I'm sitting, too.
Kind regards,
Jeroen van Meeuwen
-kanarip
16 years, 10 months
Re: Fedora-infrastructure-list Digest, Vol 13, Issue 54
by jan birsa
I did this:
gpg --keyserver pgp.mit.edu --send-keys 047B8DE9
I hope this is the right thing.
Anyway, Can I ask you to remove accounts affix and pyrox from your
system. (I tryed to register him twice). I will try again.
On 6/24/07, fedora-infrastructure-list-request(a)redhat.com <
fedora-infrastructure-list-request(a)redhat.com> wrote:
>
> Send Fedora-infrastructure-list mailing list submissions to
> fedora-infrastructure-list(a)redhat.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
> or, via email, send a message with subject or body 'help' to
> fedora-infrastructure-list-request(a)redhat.com
>
> You can reach the person managing the list at
> fedora-infrastructure-list-owner(a)redhat.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Fedora-infrastructure-list digest..."
>
>
> Today's Topics:
>
> 1. smolt, hardware compatibility and package stats (Rahul Sundaram)
> 2. Re: smolt, hardware compatibility and package stats (Mike McGrath)
> 3. Problem with CLA (jan birsa)
> 4. Re: Problem with CLA (Michael Schwendt)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sun, 24 Jun 2007 01:57:13 +0530
> From: Rahul Sundaram <sundaram(a)fedoraproject.org>
> Subject: smolt, hardware compatibility and package stats
> To: Fedora Infrastructure <fedora-infrastructure-list(a)redhat.com>
> Message-ID: <467D8221.9010200(a)fedoraproject.org>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Hi
>
>
> What do folks think of extending smolt into more of a system profiler
> including optionally collecting information on installed packages?
>
> What's the status of adding hardware compatibility information with
> smolt as blogged in http://wtogami.livejournal.com/16659.html?
>
> Rahul
>
>
>
> ------------------------------
>
> Message: 2
> Date: Sat, 23 Jun 2007 19:30:51 -0500
> From: Mike McGrath <mmcgrath(a)redhat.com>
> Subject: Re: smolt, hardware compatibility and package stats
> To: fedora-infrastructure-list(a)redhat.com
> Message-ID: <467DBB3B.4060003(a)redhat.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Rahul Sundaram wrote:
> >
> > What do folks think of extending smolt into more of a system profiler
> > including optionally collecting information on installed packages?
> >
>
> I'm on the fence about this but would put package information lower in
> priority then some of the ratings system stuff. Mugshot is doing some
> package stuff already.
>
>
> > What's the status of adding hardware compatibility information with
> > smolt as blogged in http://wtogami.livejournal.com/16659.html?
> AFAIK we didn't find anyone so -ENOTIME. This will sit under "wouldn't
> it be nice" until we get someone to do it. I have one intern doing some
> smolt stuff but I've not heard back from him in a while. It is on the
> roadmap though - https://hosted.fedoraproject.org/projects/smolt/roadmap
>
> -Mike
>
>
>
> ------------------------------
>
> Message: 3
> Date: Sun, 24 Jun 2007 14:23:15 +0200
> From: "jan birsa" <jan(a)fedoraproject.org>
> Subject: Problem with CLA
> To: fedora-infrastructure-list(a)redhat.com
> Message-ID:
> <1833f76a0706240523u79d25c36x66c6634e4b5c716e(a)mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Skipped content of type multipart/alternative-------------- next part
> --------------
> A non-text attachment was scrubbed...
> Name: id_dsa
> Type: application/octet-stream
> Size: 735 bytes
> Desc: not available
> Url :
> https://www.redhat.com/archives/fedora-infrastructure-list/attachments/20...
> -------------- next part --------------
> -----BEGIN PGP MESSAGE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
>
> owG1WU1vJEkRHXbhsEZILBKcWCnVCGGL6h57PuyZ3gPbO2PvtHbGHtyeHa0Qh+yq
> rO5cV1eWMqvcbtBKHLkg9sR5gTOCG+LML0CIExzgwGH/AEfEi8isj273wF4YeWba
> 1ZmRES8iXkRGffKV12+99ubhyye//OKPf/bZF37z1tn066lKjJV9HWeyX6ysuR6U
> 1+XJj/78NXExV+KEvxXPrflIxeWOGOeJvtJJJTPxyOSl1dOqNFY81bHKnRKjmVVq
> ofJS7D56OtrbEfOyLIa3by+Xy4E/aGBVMpflIDaL25nf5W7v7Aj8uZjL/FKsTCVS
> iMT/Vui8VFa5Eh+2qCN2y7nirb3wpLc3gIrC2ERZURoBo6xOVwLrWFaWYREpX1hT
> KFuuRNCBpcysxJpELHU5b83TJncitWYhZL4S2OUMnSBgpS5XkTjHDlgUsYhxHg/E
> bo+ePZFQJxLSiYXE2fgLnUzKugR1I7GoYNxcXikhef/nAFXg+FRnCoIk7XViqlQu
> nJ7lKmEh05VQMp53hUUwP9GxLHU+E7IRCIhInQCCANgL50WozCwHwFy75lt8JMd8
> SI4BfiUMADZkoFzTW3oRS6BNX9IBneXrCADTROjSicoB2LfxUSRGOZGbkoXEiImZ
> 8sFg9WyOldAZi/0js8w3HUUKwE8Gh1gWUVS2ME4NfJCNU44whhyHCJlZJZMVTs2V
> cCYSRaYkxCM+8amEX8jZeqZzRE0H48YpA/ECy6eZjC+B8WXEFkHrpF9YuJ0ipVwV
> yodgqRbOq0bey1kSfUGCZVlZNRAThf30rNYg6QRAaXZ23qBN64kQifi2ESHoIg7C
> yK8blWU+FE/VDNqP0lRq6/wXBw/2D8QH0jrEsHhs9ZXyz89lpoBzJE6NpSyQ1mSw
> PRJ3jg73D8WLwWQw8lACyVzFyjlpkQUE6kKuhFPsUIrBVMZOLzhSzbrP2bffPeg/
> PHjYP7p/r3/3aP8ep1QfqYKgCUCLIkkBQ7GqgyYxcVXjAAmBujKy7p2WVwbiufch
> eRb7ELfNxlhalVZZtkKEI1Q47+kwTgtofqlUgfP50IaFrIrBKC5E0Am2i1wu1FBs
> /nlfaVCImCyIQMRx/xms4VUfyfwdr23hMRgYO/PiRkkChnPDnUlsygw6BDJUmSrm
> CMqh2N/fDyfXgA6Ff4BUZK274CK2FMCXcawKn16c7rUPUpMhs8lcTnZeEBtwA6fP
> 0Ms9GHQT2i9aS7MABak/YGLupjOln27rBFBkDwXCZNqqd1+ZrAI1Wg2HuGq60D6/
> 14Jl7WQhvc+YGwzTOUIXu6WHkbgYAGimpV7XiN5AnNSq1BJYI61cxCcG/RbykqNh
> 41wyDI5veaWz31NxTOtNFpGO9S8ZFJoiPYiV8LTKqTAhRhcmb83glb7qsKCgSBDj
> NPZADHCZKs6NfJY1IHRM9AYy3XrKcz5vKP5VqnN2cSR64cBeLWKhJIhzV+/5vWap
> UC4SbQl9Y9mVlkmGCqok7uVc5Ie6tQNLFzKXM89UONlVqEF1lVzOFdMeQpPPl144
> w7nUTkUdMbsauoDaURHmuiBRqU5Lrr0xl8H7+9/e4/OQwYEbmu1V6Uo4i1zo5oDQ
> RUEkZE5VDiBiTVHZFU+arvl01Qb4uwMx6kQSDO5RJeQaU9eFpbGXVGHjrEo8k6wa
> cE2iUy68vmtAnLIfCExQhbrWjmuyF7FW0msRPjGoEKTsDpziSILO2bSa28IRaeR1
> W0MFrJNUMZKLzE5aV1FwrjckS0of7zpSqfUKm1qq0AqxooW0pY4r9Fhr9R8/vMaZ
> RZ1UtRh4nYyFnlM1l1nq1YSobhg30D8i6NeyEMD3Gjh6pGzO1gKYBclSRAjW5Dpu
> 4ulK2anMGKmlpX0551+V106BTNfphWok6v2tV6EDtwwZOLj0CbkuCT+tAk0AoAbQ
> 7gyORiw6FJSY8jppOEK4laPGwLcO2rkKGYYEIRpqYsAv8WARMbT+Y9O6iEZr/Alo
> aiEdaiCwEu3iyjl2COJqgSC54rQxabmkM9qdmzG2HjMEjLquYVrHpMv2QJr4rEDM
> mMplRLX20odjwwOgKt8M4TlYnFzG2DchRI0Gcfup2awNg14TOY8ROQiLtdhp0wgx
> T1I2Cg3YAvw+bXLGczWt2FYpG2oNXXrE/A326SZ/neygCC/D2I6ICEdkqFmsjLou
> 0GfrkgohYG75rAFG575VJDMcEUBIlDtrxVq8R5cY0i4oNuAuIXQFfMMhw+tesT6G
> W8bNvOy4mLsMQ52QLjQCge2vA6WJEoQ4q3GDV4aNZ3blHtwGJi8UXcQiZFTe5+Bx
> KOQRkU6WLFHyIuH7tELqpF8VjabWrGSGYpCiqQHnWquuTCynmeKmje8I7X2GNPbc
> 1xaYAo8ouuFdfSWpfWCmc5w5RTXFZhwLW4pMrtonzXZliW0ickRW+57gaa33XeON
> 9qFbZTYPf5tWRC1K0/8bSrvQm+Md4EzCnezuHgSURILd6zAxhqF2CBL4vrSQdGBF
> Bps09Tdsh1teFP4FheDSwGjcDF8wWu5o03ZwNgHpcJZV5JlOYardKwvkDHU5ORDg
> bCZmC5bg6q8XjRi/hQGos79m0voSQz2ozlNc2mYNRzQEuK5vRpdFE5qZxZQKY+DF
> m8YRLXQJmKwjZZdzDVNIk5aY6Ps1RsMl4pr7+A0WrxGoJxbMDVzIYt/kkVz0PsrS
> ZAG0xnnRRAdKcqZ8tekMWEKO3zCh7vbvDkAbyH9rYuqQxMg19zLJF+VV7Z5Sz5ra
> SqOKJFoDM3jIk5GnXb1YqETjOXkSVMm9hm+JoV4R4rVDrdR7+LsEVEcLVVbUmzRR
> 3GggZ5K+Z0B2m1reELSIrXGuz8Hi2bkiRPzvhInI5NJVutwjGNWML0506KuCg6vx
> dj9zDsX1WoDSuQE0FrR9d9yS+qo2rI5PHjx4r9zzBE88p3wfE9Tj4ObrDjDlNizz
> TUsoAtBRTs2VWk8R1ItxCGO1KDKzUnbX7XFP2s5fuqO0TovpJ2rN+THu36WqfUTI
> K7clujg2Gt66aQbDBlAUuCEhTgzlryanbV5wW1rM2pyodWDzrJZBZi4lH8ShHExu
> JgHrZ7yiY+QA2DyBRatrFXN1xC2OihDB88igIfOfno5qEeEu2MgOvr6/1dc869vG
> PY7yz8/Jwk2liThyDWG465SqWUMcsaFtg7GBInO52xvUQraHnd3SdbE0CqMQBm3g
> hyFbokq0ycwnRCPgMpv0fYrXVFc3iW2kULn1ireJHW3p0iOszbihbDqExlecVr63
> Q4FKFHWk0BN6tHlLeeTHvpxKknvjTo3zK/mhc+BG2cyQeWAMK7Z6J/j00PuUK5Gh
> PprIzicqN+QJFb2CCusrwrCxRflSEaJSXTNjkAHUUlu1RaI/eiFXnSS+caJvIXiu
> KlL6iE88OaXhacYitjKh88B5iYngOi96o4kYT3ri3dFkPInEy/HFk7MXF/X2l6Pz
> 89Hpxfh4Is7OxaOz08fji/HZKX47EaPTD8X749PHkVCaJwlAiiY+nVsK+g/0A0nn
> Jt525RwO0jM0uQVOJBrk9sF2iLjT3p+enfbHpyfn49P3jp8dn15E4tnx+aMnUHD0
> 7vjp+OJDhuJkfHF6PJmIk7PzZiYmno/OL8aPXjwdnYvnL86fn02Og7ePBmICfbKE
> HYPGaM5NFHcAoWQwXfIE/L/nbmfm6rfrzTtsQzLZqnmBsb1mwUPAIl358qa2JibN
> 5vzttUkeZE3I2M0s/V/p2Radm1nqax0N5ZqM9B32RnPavMb4PAm71pXevIXWhrML
> 6Ho5aZqyNQ6UbRfWUNRQ/IDGwX7y+MNe8PSDkNf18BVG12+iavcE7FLJkxlUfG1x
> zabxFTrSppp0LZuqmIYqnoI4UpYcTFQHSTQPvQMjc5A0YhBBcVxxndF+ZhL6qqDu
> w/U5LgLQ339zIwzuOb6b4pLXmSwHOhfqStlV27B4ctsRO2uvXLpjaLf9Uh35VyW9
> sV/cY0SHIvzKwo6pPfOJkdaD+LCsO33ntZMw2Kdhy1DER3eT6f04PXxwZ//w8GGc
> 3FeHabp/f3+a3E3uHR148fwGYviKgT2teAwIh+LO/v5Rf/+wf+dAHNwZ3nkwvHd/
> cHCw89Pvvf6lW/TytH7H+uZrJ3+59elP/vrGW3vf/9OXP/n3V38du8t//uHs49/f
> +vRv//jdL77xr99+/Oznv/r7Nz/747e+M/jg2X8A
> =o8WM
> -----END PGP MESSAGE-----
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: id_dsa.pub
> Type: application/octet-stream
> Size: 605 bytes
> Desc: not available
> Url :
> https://www.redhat.com/archives/fedora-infrastructure-list/attachments/20...
>
> ------------------------------
>
> Message: 4
> Date: Sun, 24 Jun 2007 16:31:46 +0200
> From: Michael Schwendt <bugs.michael(a)gmx.net>
> Subject: Re: Problem with CLA
> To: fedora-infrastructure-list(a)redhat.com
> Message-ID: <20070624163146.800db909.bugs.michael(a)gmx.net>
> Content-Type: text/plain; charset=US-ASCII
>
> On Sun, 24 Jun 2007 14:23:15 +0200, jan birsa wrote:
>
> > Hello,
> >
> > I hope you can help me here.
> > My friend tryed to become a Fedora ambassador, but he gets this:
> > "With regards to "Fedora Individual Contributor License Agreement".
> >
> > Your message could not be processed.
> >
> > Reason:
> >
> > The signature could not be processed. The signature may have been
> created
> > or attached improperly, it might not match the key ID you have
> registered in
> > the Account System, or the public key may not have been found on the key
> > server. For guidance, please see the following page:
> > "
> >
> > So I decided to register him. I used my mail and I connected to his
> server
> > trough SSH to make a gpg key and a id_dsa.pub(ssh key). I got a mail
> with
> > licence agreement, I added his name and " I agree" and made a .asc file.
> I
> > sent that AND I GET SAME MAIL ERROR.
> >
> > I attached all necessary files (I hope).
>
> You've attached the _private_ DSA key, too. Don't use this key pair
> any longer now.
>
> Did you upload the public GPG key to a key server?
>
> $ gpg --recv-key 047B8DE9
> gpg: requesting key 047B8DE9 from hkp server pgp.mit.edu
> gpgkeys: key 047B8DE9 not found on keyserver
> gpg: no valid OpenPGP data found.
> gpg: Total number processed: 0
>
>
>
> ------------------------------
>
> _______________________________________________
> Fedora-infrastructure-list mailing list
> Fedora-infrastructure-list(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
>
>
> End of Fedora-infrastructure-list Digest, Vol 13, Issue 54
> **********************************************************
>
--
jan(a)fedoraproject.org
www.ex-planet.com
16 years, 10 months
Problem with CLA
by jan birsa
Hello,
I hope you can help me here.
My friend tryed to become a Fedora ambassador, but he gets this:
"With regards to "Fedora Individual Contributor License Agreement".
Your message could not be processed.
Reason:
The signature could not be processed. The signature may have been created
or attached improperly, it might not match the key ID you have registered in
the Account System, or the public key may not have been found on the key
server. For guidance, please see the following page:
"
So I decided to register him. I used my mail and I connected to his server
trough SSH to make a gpg key and a id_dsa.pub(ssh key). I got a mail with
licence agreement, I added his name and " I agree" and made a .asc file. I
sent that AND I GET SAME MAIL ERROR.
I attached all necessary files (I hope).
--
jan(a)fedoraproject.org
www.ex-planet.com
16 years, 10 months
Test server
by Mike McGrath
So last week we discussed creating a beefier test server for many of us
to share. Creating individual instances for everyone has proved to be
overkill for most so I'm going to create publictest1 and contact some
individual people to start migrating to it. Additionally we have
another RFR from Greg that he could develop on this instance.
Any comments?
http://fedoraproject.org/wiki/Infrastructure/RFR/FreeMediaSystem
-Mike
16 years, 10 months
ticket system comments
by seth vidal
Some thoughts I had yesterday about OTRS/RT/ETC for ticketing systems
for us.
1. We don't get a huge number of tickets - so maybe any system is
overkill
2. A good number of the tickets can be solved immediately when they
arrive.
3. If they can't be solved immediately then we need a reminder about
them
4. we want users to be able to send in info like this w/o jumping
through any hoops.
I was going to suggest we make a mailing list:
admin-request(a)fedoraproject.org - maybe alias it to something simple.
When messages come in we do the following:
1. see if we know how to solve it and have time to do it immediately
2. If you don't know how to solve it or don't have the time, open a
bugzilla item about it on a product-to-be-created and thrown the
bugzilla entry back to the list and the poster
This way, the simple things that don't really need a ticket don't get
one and the hard things that do need a ticket do get one.
-sv
16 years, 10 months
Our SCM
by Mike McGrath
So there's a great deal of discussion about the Fedora Packaging SCM its
time we look at the Infrastructure SCM. We now host cvs, hg, git and
svn. For our configuration management we're using for our development.
For many items we've actually created hosted sites (smolt, mirror
manager) seems appropriate for these project which, in theory, are
useful to others. But what about some of our other development where a
hosted project would be wasted? This would be like, kindofblue (our
wiki theme) or a plone plugin. We're using cvs for this right now in
the fedora repo. I think we should do some clean up on this repo but
while we're doing its good to evaluate whether or not to move to
something else or to continue using it.
Thoughts?
-Mike
16 years, 10 months
Fedora Infrastructure IRC Meeting Log from 2007-06-21
by Jeffrey Ollie
[15:01] mmcgrath has set the subject to Fedora Infrastructure -- Who's here?
[15:01] mmcgrath: Alrighty everyone. Who's here?
[15:01] * abadger1999 is here
[15:01] * skvidal is here
[15:01] * xDamox is here
[15:01] abadger1999 has left ( (n=abadger1(a)136.245.4.252))
[15:01] abadger1999 has joined the group chat (n=abadger1(a)136.245.4.252)
[15:02] mmcgrath: dgilmore: f13: ping?
[15:02] * G is reattached
[15:02] mmcgrath: Allrighty, lets get started.
[15:02] jcollie: here!
[15:02] mmcgrath has set the subject to Package Database -- abadger1999
[15:02] * riczho listens again.
[15:02] mmcgrath: jcollie: yo
[15:02] f13: here
[15:02] f13: battling rawhide still
[15:02] notting has joined the group chat (n=notting@redhat/notting)
[15:03] abadger1999: We're close
[15:03] abadger1999: I have the importer almost done.
[15:03] abadger1999: Had a late feature request from jeremy that I'm working on now.
[15:03] * rordway is here for once
[15:03] abadger1999: bz-sync is ~ half done.
[15:03] jcollie: i think that we should all pitch in to buy f13 some authentic leather chaps for when he's dealing with rawhide
[15:03] * jeremy is nothing but a trouble maker
[15:03] mmcgrath: abadger1999: if you get sucked into feature creep, don't forget you can say no
[15:03] abadger1999: warren hasn't had a chance to work on the koji sync so I may have to pick that up.
[15:04] mmcgrath: well for now anyway
[15:04] mmcgrath: abadger1999: so all in all you think we're in good shape?
[15:04] f13: wow.
[15:04] abadger1999: And I need to work out exactly what scripts need to be ported for new packages and package branches.
[15:04] abadger1999: That should be it.
[15:04] mmcgrath: when do you suspect we'll be able to promote it?
[15:04] f13: jcollie: between you and jwb I'm wearing pasties and leather chaps.
[15:04] f13: I'm deeply frightened.
[15:05] * rordway hides his eyes
[15:05] jwb: gah, scary
[15:05] abadger1999: I'm hoping we can deploy it for cvsadmins to use next week.
[15:05] * skvidal hides his brain
[15:05] abadger1999: And then let the public start self-serving afte rthat.
[15:05] mmcgrath: excellent.
[15:05] mmcgrath: abadger1999: did we get the python-fedora timeout issue figured out?
[15:05] abadger1999: Nope. I'm still looking for it.
[15:05] craigt has joined the group chat (i=hidden-u(a)gnat.asiscan.com)
[15:06] mmcgrath: k
[15:06] mmcgrath: abadger1999: anything else then?
[15:06] abadger1999: I know that it's something involved with deep TurboGears stuff.
[15:06] abadger1999: But beyond that
[15:06] abadger1999: (Session cookie is being lost or something.)
[15:06] mmcgrath: <nod>
[15:06] abadger1999: That's it.
[15:06] mmcgrath: cool
[15:07] mmcgrath has set the subject to config management -- mmcgrath
[15:07] mmcgrath: So puppet (i think) and RHN have started to conflict.
[15:07] mmcgrath: I'm looking into it more.
[15:07] skvidal: mmcgrath: put in some 'sleep 10'
[15:07] mmcgrath: basically we're getting this - http://pastebin.ca/581690
[15:07] mmcgrath: Which I think is a 24 hour period average.
[15:08] mmcgrath: something to keep an eye on though.
[15:08] mmcgrath has set the subject to VCS choice -- abadger1999/jcollie
[15:09] mmcgrath: So the conversation on what Infrastructure should use for its SCM kind of went crazy. Does anyone have any opinions that have not been discussed on the list?
[15:09] jcollie: i think we defiitely need to go to a dscm... which one is up for debate
[15:09] f13: lets do like puppet
[15:09] abadger1999: What about the consolidate small projects into one hosted project idea?
[15:09] f13: pick git, run with it. People will deal.
[15:09] skvidal: f13: break rhn?
[15:10] mmcgrath: abadger1999: thats not a bad idea really. I'd worry about Infrastructure having two homes though.
[15:10] abadger1999: Hmm.. That's true.
[15:10] mmcgrath: having said that, I'd be up for examining using trac's bug system as a replacement for OTRS.
[15:10] * mmcgrath notes that we really haven't picked up and used OTRS.
[15:10] f13: Trac does have the concept of a 'task' vs a bug
[15:11] f13: well really, it has the concept of whatever kind of ticket we want to teach it
[15:11] * dgilmore is here
[15:11] jcollie: can trac create new tickets based upon an email?
[15:11] * riczho doesn't particularly enjoy OTRS either.
[15:11] mmcgrath: f13: the defaults look like "defect" "enhancement" "task"
[15:12] mmcgrath: riczho: I think its just a bit of an overkill for what we need.
[15:12] f13: jcollie: not sure. Maybe, may require some more advanced setup on the track host
[15:12] f13: mmcgrath: yeah, the webadmin tab lets you create/remove ticket types at will.
[15:12] mmcgrath: excellent, well lets discuss this then
[15:12] jcollie: what about using bugzilla.redhat.com? i know it's the bugtracker we all love to hate but it'll keep things simpler
[15:12] f13: or completely remove the ability to have tickets in that particular Trac instance
[15:12] G: can't we just use a dumbed down version of Mantis, or a new Bugzilla 'Project'?
[15:13] mmcgrath has set the subject to OTRS and a Trac home -- All
[15:13] * mdomsch never saw the point of OTRS
[15:13] skvidal: G: you shall not mention mantis again
[15:13] skvidal: die mantis, die
[15:13] fchiulli has joined the group chat (i=824c405d(a)gateway/web/cgi-irc/ircatwork.com/x-9bbf61f04e289ebb)
[15:13] dgilmore: we use RT here
[15:13] mmcgrath: mdomsch: well everyone hated bugzilla so it seemed like a good idea at the time
[15:13] dgilmore: it seems ok
[15:13] skvidal: mmcgrath: yes and now we hate bugzilla and otrs
[15:13] G: skvidal: I actually agree, but it was the first that came to mind
[15:14] f13: RT is great, until somebody cc's it, and reply-all starts spewing all kinds of duplicate tickets
[15:14] mmcgrath: skvidal: the big difference is we don't ignore bugzilla well, not as bad anyway.
[15:14] f13: oh and depite what it says, any change to a closed ticket re-opens the ticket, even if you explicitly mark it as stay closed.
[15:14] * mmcgrath considers RT and OTRS to be identical in respect to our needs.
[15:14] skvidal: I'm going to suggest something
[15:14] skvidal: and I want everyone to remain calm
[15:14] dgilmore: lah lah lah
[15:14] G: One of the requirements is that the bugsystem can handle reports via email right?
[15:15] skvidal: what if we just have a mailing list
[15:15] skvidal: and if the task takes more than 10 minutes
[15:15] skvidal: WE file it
[15:15] skvidal: it's not like we're being inundated with requests
[15:15] dgilmore: skvidal: sure but not everything in ORTS is handled by us
[15:15] skvidal: at least, I don't seem to see thousands of them
[15:15] skvidal: dgilmore: yes, that's why we file it for others
[15:15] mmcgrath: skvidal: I'd still like to know who's working on what and such.
[15:16] skvidal: mmcgrath: sure, if it is quick you email saying 'got it'
[15:16] f13: I don't either. I'm not a huge fan of using a mailing list as a task tracking system, but...
[15:16] mmcgrath: I think we need something, but far more light weight then OTRS.
[15:16] skvidal: and you do it
[15:16] skvidal: like I said - mailing list just lets us know about the problem
[15:16] skvidal: and if the problem really requires a ticket then file it
[15:16] f13: we'd have to allow posting by non-members
[15:16] skvidal: in bugzilla or trac or whatever
[15:16] f13: and then deal with the spam
[15:16] skvidal: f13: as opposed to now?
[15:16] f13: wereas anybody with a fedora account can create a ticket in Trac
[15:17] skvidal: f13: which is vastly superior to get otrs spam
[15:17] f13: skvidal: well yeah, now sucks big time.
[15:17] skvidal: f13: right
[15:17] riczho: We get a ton of spam in OTRS now already.
[15:17] mmcgrath: riczho: actually we don't, it used to be between 10 and 20 a day.
[15:17] G: doesn't KDE have a patch to bugzilla which allows it to accept bug reports filed by email?
[15:17] f13: Trac would kill the spam, but lose the email handynes
[15:17] mmcgrath: the sytem we have in place now isn't great but its better than it could be
[15:17] riczho: mmcgrath: Woah, never mind, then.
[15:17] fchiulli has left ( (i=824c405d(a)gateway/web/cgi-irc/ircatwork.com/x-9bbf61f04e289ebb))
[15:18] mmcgrath: we should take this to the list and see what they say.
[15:18] * G thinks RH IS wouldn't be very happy though
[15:18] mmcgrath: skvidal: are you saying a separate list?
[15:18] abadger1999: I don't mind losing the email-to-open-ticket ability.
[15:18] skvidal: mmcgrath: yes
[15:18] skvidal: mmcgrath: shit-is-broken(a)fedoraproject.org
[15:18] skvidal: (kidding, of course)
[15:18] mmcgrath: skvidal: here's my question, where do I go to find what hasn't been done?
[15:18] skvidal: I was thinking one of two things
[15:18] mmcgrath: like, I wake up, I've got 2 hours to kill, where do I go to find a list of stuff I need to do?
[15:19] mmcgrath: err a list of stuff that needs to be done.
[15:19] skvidal: your inbox?
[15:19] dgilmore: mmcgrath: id say we bug the shit out of legal about smtp and move forward with ORTS and spamassain sqlgrey clamav
[15:19] skvidal: or if there are outstanding things you go to bugzilla/trac/etc to find what things are filed and not done
[15:19] riczho has left ( (i=ricky@gateway/gpg-tor/key-0xCCAF484E))
[15:20] skvidal: mmcgrath: rather than what you do now, which is, I presume chase it down in otrs' ever-so-obvious interface
[15:20] riczho has joined the group chat (i=ricky@gateway/gpg-tor/key-0xCCAF484E)
[15:20] notting: we have an irc channel where peopel can leave issues, with a bot doing mail gating...
[15:20] mmcgrath: we should compare a mailing list to trac, not otrs.
[15:20] mmcgrath: skvidal: You have to admit, this is pretty simple - https://hosted.fedoraproject.org/projects/smolt/report/1
[15:20] G: notting: heh, not bad idea!
[15:21] skvidal: mmcgrath: excluding all the unncessary crap like 'component1'
[15:21] G: notting: of course, relying on another 3rd party isn't a very good situation
[15:21] mmcgrath: skvidal: I'm just saying email gets very easy to ignore.
[15:21] f13: yeah, why do you still have 'component1' in there?
[15:21] mmcgrath: f13: I never set it up.
[15:21] f13: Admin tab and edit up your components (:
[15:21] mmcgrath:
[15:22] f13: it's nice that we can set milestones for things like new OS rollouts and assign people tasks
[15:22] f13: and as things get done the Timeline will show it
[15:22] mmcgrath: Ok, so I think this should be talked about again, skvidal mind sending something to the list so we can discuss it further?
[15:23] skvidal: mmcgrath: I can - but I'm not wed to this idea
[15:23] skvidal: if everyone is happy with trac, I'm on board
[15:23] mmcgrath: skvidal: its good to think it over again since we're talking about changing, no need to end up with another OTRS
[15:23] mmcgrath: ok, for now we'll move on.
[15:23] skvidal: mmcgrath: okay- email on its way soon
[15:24] mmcgrath has set the subject to Firewall System Rewrite -- skvidal lmacken xDamox
[15:24] mmcgrath: So AFAIK this has gone very well.
[15:24] mmcgrath: few very minor bumps while implementing but a lot of our hosts are actually using the firewalls now.
[15:24] mmcgrath: xDamox: what do you think?
[15:24] xDamox: I am just monitoring the bulder ports and the torrent server to suggest the rules
[15:24] xDamox: I am going to get the ports run by skvidal and lmacken
[15:24] mmcgrath: xDamox: FYI the torrent box is also our primary DNS.
[15:25] xDamox: I did a test last night but it became void due to security scans
[15:25] xDamox: ok
[15:25] mmcgrath: cool.
[15:25] dgilmore: xDamox: i can give you the ports the builders use
[15:25] mmcgrath: skvidal: lmacken: anything to add?
[15:25] xDamox: within the next 24 hours we should have them fully deployed
[15:25] skvidal: mmcgrath: other than 'yay' xDamox?
[15:25] xDamox: dgilmore, yea that would be good
[15:25] mmcgrath:
[15:26] skvidal: torrent is tricky b/c of the seeder
[15:26] skvidal: but I think I have the rule set I used before
[15:26] xDamox: ok
[15:26] mmcgrath: xDamox: If we find our template is too simple for the torrent box let me know, I can add a "custom" section to the bottom.
[15:27] xDamox: Ok mmcgrath
[15:27] mmcgrath: alllrighty, next item
[15:27] mmcgrath has set the subject to Upgrade DB1 -- mmcgrath
[15:27] xDamox: skvidal, if I email you so, can you supply the iptable for the torrent box?
[15:27] skvidal: yah
[15:27] xDamox: s/so/soon/
[15:27] mmcgrath: so db2 is up and so far has been working great.
[15:27] xDamox: cheers
[15:27] mmcgrath: abadger1999: have you had a chance to check out test2?
[15:27] mmcgrath: mbonnet: ping
[15:27] mbonnet: mmcgrath: yo
[15:28] mmcgrath: mbonnet: any chance to take a look at db2?
[15:28] abadger1999: Not yet. it's whatI'm working on now.
[15:28] mbonnet: mmcgrath: crap, not yet
[15:29] mmcgrath: mbonnet: want me to just keep bugging you till you get a moment?
[15:29] * mmcgrath is good at bugging
[15:29] mbonnet: mmcgrath: sure, please do
[15:29] mmcgrath: will do.
[15:29] mbonnet: I'll find a few spare moments at some point
[15:29] mmcgrath: abadger1999: if you need anything with test2 let me know.
[15:29] abadger1999: Will do.
[15:29] mmcgrath has set the subject to Server Upgrades -- mmcgrath
[15:29] agentunix has joined the group chat (n=agentuni(a)66.183.197.79)
[15:29] mmcgrath: So I've put in some requests to the soc.
[15:30] mmcgrath: Just to remind everyone. Priority 1) Some of our servers don't have a proper warranty right now.... fix that.
[15:30] mmcgrath: priority 2) Figure out how to backup koji (probably tape)
[15:30] mmcgrath: 3) Server upgrades and replacements. (includes adding RAM to the boxes we have, and replacing some of our older stuff)
[15:31] mmcgrath: In with this somewhere is a new disk tray thats been installed, we're just waiting for the soc to configure it and hand it over to us.
[15:31] mmcgrath: Anyone have any questions about that?
[15:31] dgilmore: mmcgrath: where can we host tape
[15:31] jcollie: ot - what's soc? i assume it's some RH IT group?
[15:31] dgilmore: and who will swap the tapes?
[15:32] Sopwith has joined the group chat (n=elee(a)66.193.5.50)
[15:32] mmcgrath: jcollie: <nod> they're the guys that run the PHX colo (and many other colo's)
[15:32] mmcgrath: dgilmore: thats the big question.
[15:32] mmcgrath: dgilmore: it'd be at PHX, we could get a robot out there. I basically went to those guys, said we'd need to backup at least a T by the end of the year.
[15:33] dgilmore: mmcgrath: so they would handle tape rotation?
[15:33] jcollie: would the SOC guys/gals be in charge of swapping tapes then?
[15:33] mmcgrath: jcollie: yep
[15:33] mmcgrath: dgilmore: Not sure.
[15:33] dgilmore: What kinda cost is involved in that ?
[15:33] mmcgrath: dgilmore: a lot.
[15:34] jcollie: what about offsite copies of the tapes?
[15:34] mmcgrath: but its got to get done.
[15:34] dgilmore: f13: when was power upgrade there supposed to be done
[15:34] mmcgrath: jcollie: thats not even on the radar yet.
[15:34] mmcgrath: jcollie: I'm working on a DR plan but thats at least a year out.
[15:34] f13: dgilmore: dunno, I just have vague mentions of it being done.
[15:34] dgilmore: mmcgrath: could we do it in RDU and have a RH person manage tapes?
[15:34] mmcgrath: dgilmore: not efficiently.
[15:34] mmcgrath: I don't think anyway. Possibly at another colo.
[15:35] dgilmore: mmcgrath: stacys basement?
[15:35] mmcgrath: dgilmore: try not to think of the tapes. Its a possibility, but there are many others.
[15:35] mdomsch: tape libraries are your friends, if you have to use tapes at all
[15:35] dgilmore: f13: it would be good to get those blades in ASAP
[15:35] mmcgrath: Including another netapp provided by the soc. The issue is there's no backups at PHX right now, pretty much everything there (besides our stuff) gets replicated to there from somewhere else.
[15:35] f13: dgilmore: indeed it would.
[15:35] jcollie: i suppose if you had enough tapes in the robot and a short retention policy you wouldn't have to swap tapes
[15:36] dgilmore: mmcgrath: can we get netapp space in Tampa or RDU?
[15:36] mmcgrath: anyway, you guys can see this is an expensive and tricky thing so it'll likely take some time to implement.
[15:36] f13: mmcgrath: hrm, since we're using netapps for our stuff, why couldn't the taping happen on the RDU fedora netapp?
[15:36] mmcgrath: f13: because none of the other netapps are the same size as the PHX netapp.
[15:36] mmcgrath: its much much larger.
[15:37] mmcgrath: dgilmore: possibly.
[15:37] f13: mmcgrath: oh the production one, not the mirror one. sorry
[15:37] mmcgrath: I'm letting the soc figure that stuff out, we're a consumer of theirs.
[15:37] mmcgrath: I've told them what we need hopefully they'll come back at me with what they can provide and what I'll have to find a budget for.
[15:37] mmcgrath: anywho, thats the latest on that.
[15:37] mmcgrath has set the subject to xen Conversion -- mmcgrath
[15:38] mmcgrath: so I've been taking machines down and converting them to iscsi. I'll be making an SOP for this and for how our cluster works.
[15:38] mmcgrath: I've also been trying to figure out some issues with mod_proxy_balancer. I think I've got them all figured out now.
[15:39] mmcgrath: we've got 9 hosts running over pure iscsi now, and they've been working great.
[15:39] mmcgrath: Any questions on this?
[15:39] mmcgrath: or comments?
[15:39] dgilmore: im glad we can do it this way
[15:39] jcollie: awesome
[15:39] mmcgrath: dgilmore: so far its proved to be very reliable.
[15:40] mmcgrath has set the subject to Bacula -- mmcgrath
[15:40] mmcgrath: So I've been evaluating bacula and dgilmore's taken a look as well.
[15:40] mmcgrath: we're just waiting on ixs to release another version for review.
[15:40] mmcgrath has set the subject to Translator's Compendium -- Glezos
[15:41] mmcgrath: for those of you that don't know, glezos has been working on http://translate.fedoraproject.org/
[15:41] mmcgrath: Its a pretty exciting app, keep your eye out for more news with it in the future.
[15:41] glezos: yay.
[15:41] mmcgrath has set the subject to Project Hosting -- f13
[15:41] mmcgrath: f13: anything new on this front?
[15:41] mmcgrath: the git plugin still stink?
[15:41] jcollie: i thought that someone was going to do some work on the git plugin
[15:42] f13: git plugin still sucks major ass.
[15:42] f13: jcollie: daMaestro was talking about it
[15:43] f13: mmcgrath: seeing more people asking for projects. Did 3 this week already
[15:43] jcollie: f13, he get anything done?
[15:43] f13: jcollie: he was waiting for a new laptop to arrive that he could use kvm with I think
[15:43] jcollie: is adding a project something that can be "puppetized"?
[15:43] mmcgrath: f13: its probably time we move that to the cluster until we find a permanent home for it.
[15:43] mmcgrath: f13: does it have a db backend?
[15:44] mmcgrath: or is it flat file?
[15:44] craigt has left ("Leaving" (i=hidden-u(a)gnat.asiscan.com))
[15:45] f13: sqlite backend
[15:45] f13: each project gets it's own sqlite db
[15:45] mmcgrath: f13: is it possible to move that to mysql or postgres or is sqlite a requisite?
[15:45] f13: I think we can actually make it use more robust backends but wasn't necessary for the proof of concept
[15:46] mmcgrath: <nod> we can examine that then.
[15:46] f13: jcollie: probably not easily puppetted
[15:46] f13: jcollie: the project space is really more like content than config
[15:46] mmcgrath: f13: is there an SOP for creating a new project?
[15:46] f13: yeah, but not under the SOP header yet
[15:47] mmcgrath: <nod> k
[15:47] mmcgrath: f13: anything else there?
[15:48] f13: nope. I still suck (:
[15:48] mmcgrath:
[15:48] mmcgrath: moving on
[15:48] mmcgrath has set the subject to FedoraPeople.org -- skvidal
[15:48] mmcgrath: skvidal: whats the word?
[15:48] skvidal: fpserv is cleared of planet stuff
[15:48] skvidal: I am going through the other aliases to it and checking them
[15:48] skvidal: ex: bugs, art, legacy
[15:48] skvidal: (all of which go to bugzilla, amusingly)
[15:48] mmcgrath: fantastic
[15:49] skvidal: once I'm happy that dns is not taking people there
[15:49] tibbs has left ("Konversation terminated!" (n=tibbs@fedora/tibbs))
[15:49] skvidal: then I can nuke it
[15:49] skvidal: a couple of questions on fpserv
[15:49] skvidal: dns is very very not-being-used on it, right?
[15:49] dgilmore: it was moved away awile ago now
[15:49] mmcgrath: It shouldn't be. You can tcpdump it.
[15:49] skvidal: okay, well it is still running
[15:49] skvidal:
[15:50] mmcgrath: skvidal: turn it off and see what happens. It shouldn't be taking any traffic anymore.
[15:50] skvidal: mmcgrath: cool, just wanted to be sure
[15:50] mmcgrath: and it should be way out of date with what is actually live right now
[15:50] skvidal: right
[15:50] skvidal: also - where are we sending logs for remote boxes?
[15:50] mmcgrath: skvidal: anything else on that front?
[15:50] skvidal: see above
[15:50] mmcgrath: skvidal: lockbox.
[15:50] skvidal: how do they get through?
[15:50] skvidal: ie: via syslog
[15:51] mmcgrath: http logs go via rsync and syslog go via udp except we're not pulling anything from the external boxes right now.
[15:51] mmcgrath: and AFAIK ssh port forwards don't support UDP yet.
[15:51] rdieter has left (Read error: 104 (Connection reset by peer) (n=rdieter(a)sting.unl.edu))
[15:51] skvidal: is lockbox just using sysklogd?
[15:51] skvidal: b/c we can do tcp syslog using syslog-ng and stunnel the whole thing
[15:51] mmcgrath: yep, I'm working on rebuilding lockbox though.
[15:52] skvidal: okay, then I'll just leave it off for now on fpserv for syslog
[15:52] mmcgrath: so we can re-examine that part of it.
[15:52] mmcgrath: <nod>
[15:52] skvidal: my other question is this
[15:52] skvidal: how do you want me to do the kickstart for this box?
[15:52] skvidal: b/c it can't really be installed using the same mechanisms as boxes in phx
[15:52] mmcgrath: skvidal: actually it *could* be if you wanted to.
[15:52] skvidal: I had planned on doing it via a kickstart and talking to the centos-5 repos
[15:52] skvidal: mmcgrath: how?
[15:53] mmcgrath: We could just expose the install media and kickstarts temporarely.
[15:53] SmootherFrOgZ has left (Success (n=Smoother(a)LLamentin-151-13-32.w81-248.abo.wanadoo.fr))
[15:53] mmcgrath: or if you're using CentOS-5 we can just expose the kickstart.
[15:53] mmcgrath: though our kickstart scripts are very very simple now.
[15:53] SmootherFrOgZ has joined the group chat (n=Smoother(a)LLamentin-151-13-32.w81-248.abo.wanadoo.fr)
[15:53] skvidal: mmcgrath: right, that's why I was wondering if it was worth it
[15:54] mmcgrath: most of the configuration is done with puppet so as long as you get puppet on there and forward a port like what we're doing for ns1.fp.o then you're golden.
[15:54] mmcgrath: skvidal: is duke backing up torrent?
[15:54] JSchmitt has left ("Konversation terminated!" (n=s4504kr@fedora/JSchmitt))
[15:54] skvidal: okay, I think I can arrange something
[15:54] skvidal: mmcgrath: umm lemme check
[15:54] mmcgrath: k
[15:54] mmcgrath: skvidal: mind if I move on? we only have a few more minutes left.
[15:55] skvidal: go right ahead
[15:55] mmcgrath has set the subject to Ibiblio Mirror -- mmcgrath
[15:55] mmcgrath: So the ibiblio mirror is setup and syncing. I just need to test it then have others test it then work with f13 on a plan for how to use it.
[15:55] f13: neat
[15:55] skvidal: quick return - torrent is backed up, yes - but it's excluding the isos b/c we just don't have the space
[15:55] mmcgrath: k
[15:55] mmcgrath has set the subject to noc -- mmcgrath
[15:56] mmcgrath: so the noc site is sort of taking shape. If anyone has something they'd like to see montiored let me knwo and I'll add it or tell you how to write your own script to add it.
[15:56] mmcgrath: Here's whats there right now - http://publictest4.fedora.redhat.com/noc/list
[15:56] mmcgrath: just some basic stuff.
[15:57] mmcgrath has set the subject to Open Floor -- Everyone
[15:57] mmcgrath: Anyone have anything else to dicsuss? we have a few more minutes.
[15:57] MukulDharwadkar has joined the group chat (n=mukul(a)67.121.167.34)
[15:57] skvidal: yah one thing
[15:57] skvidal: I'm working full time now. So if there is shit that needs doing and you think I can help, ping me
[15:58] skvidal: I've been gone for the last 2 months in all serious senses
[15:58] dgilmore: skvidal: what exactly is your role in RH?
[15:58] skvidal: but I'm back and around now
[15:58] skvidal: dgilmore: that's an interesting question
[15:58] skvidal: dgilmore: max actually said the following to me "paying me to do the stuff I was doing before"
[15:58] skvidal: that confused me more, but that's okay
[15:58] dgilmore: skvidal: i want that gig
[15:58] dgilmore: so whatever you want in Fedora space
[15:58] mmcgrath: skvidal: that reminds me. If any python programmers out there want to assist me with the new account system. I really could use it.
[15:58] skvidal: in my email to my manager I said that fedorapeople.org was on my short-term todo list
[15:59] skvidal: mmcgrath: subtle
[15:59] mmcgrath: :: wink wink nudge nudge ::
[15:59] skvidal: mmcgrath: where is it?
[15:59] f13: skvidal: and I could probably use a code review of pungi for proper use of yum apis
[15:59] MukulDharwadkar: mmcgrath: Thanks for setting me up on fedoraproject.org
[15:59] skvidal: f13: that's also on my list of things to stare at for a while
[15:59] mmcgrath: http://cvs.fedora.redhat.com/viewcvs/accounts2/fas/?root=fedora
[15:59] mmcgrath: MukulDharwadkar: you are welcome.
[15:59] rordway: mmcgrath: I like the NOC data
[16:00] mmcgrath: rordway: if you're interested email me some more things you'd like to see on there.
[16:00] rordway: would be cool to get some server metrics too
[16:00] rordway: k, will do
[16:00] dgilmore: skvidal: ill come up with some task lists for you by the end of week
[16:00] mmcgrath: Ok, we're at the top of the hour. If no one has anything else I'll close in 30
[16:00] skvidal: dgilmore: umm, thanks?
[16:00] mmcgrath: 15
[16:01] mmcgrath: 5
[16:01] mmcgrath has set the subject to Meeting End
16 years, 10 months
