August 2007 - infrastructure - Fedora mailing-lists

Re: Improving availability and guaranteeing integrity in ISO downloads
by Anthony Bryan 04 Sep '07

04 Sep '07

> http://www.getright.com/seedtorrent.html > > Supported by Azureus, among others. We already have an extensive > HTTP/FTP mirror system to leverage. > > I've noticed, after the initial release rush, torrents end up being > quite a bit slower than just downloading from a mirror. Especially on a > less popular arch. (cough ppc cough...) In the past I've just stopped > the torrent, downloaded the iso from a mirror, then restarted the > torrent to help seed. > > It would be nice to just have this happen automagically. That's how Metalink works with clients that also support P2P networks. GetRight supports this w/ metalink, hopefully KGet will eventually along with aria2. Phex also supports it over gnutella. (Sorry for the late reply) > On Tue, Jun 19, 2007 at 03:40:59PM -0400, Anthony Bryan wrote: > > >On Sat, Jun 09, 2007 at 07:51:20PM +0200, Ruben Kerkhof wrote: > > > > Have you had a chance to look over Ruben's additions? Any feedback? He > > said he re-licensed it to line up w/ mirrormanager. Any ideas/comments > > for features in Metalink that could be of use to Fedora? > > Yes, I took a quick look; I'll be able to do something with this, but > not for the next 4 weeks, as I'm out of the office moving houses and > on vacation, then catching up on real work. :-) checking in after 10 wks :) Will what Ruben submitted be usable? a few more metalink apps have been released. Free Download Manager (Win) has been released under GPL3. DownThemAll 1.0b2 firefox extension is out, and displays more of the info contained in a metalink to the person downloading, like a how many mirrors are listed, logo, description, version, os/arch, and other stuff that could be useful. here are some screenshots the DTA team put up: http://code.downthemall.net/maierman/metalink-test/metalink-feisty.png http://code.downthemall.net/maierman/metalink-test/metalink-xp.png http://code.downthemall.net/maierman/metalink-test/metalink-comment.png there's also Celerius, a GTK python downloader in progress at http://celerius.tuxfamily.org/ if anyone wants to help out. -- (( Anthony Bryan ... Metalink [ http://www.metalinker.org ] )) Easier, More Reliable, Self Healing Downloads

2 1

Private builds in koji
by Ignacio Vazquez-Abrams 03 Sep '07

03 Sep '07

A couple of questions that haven't been brought up yet but have recently passed through my mind: 1) Is it considered an acceptable use of resources to use koji to scratch-build private FOSS packages that will be hosted on fedorapeople.org? 2) What about pointing people to the builds hosted within koji? 3) What about building in koji but hosting elsewhere? I think it's safe to assume that building anything non-FOSS in koji is *completely* out of the question. -- Ignacio Vazquez-Abrams <ivazqueznet(a)gmail.com> PLEASE don't CC me; I'm already subscribed

4 4

Hi From a new Developer
by roopesh majeti 31 Aug '07

31 Aug '07

Hi , Iam Roopesh Majeti, a C/C++/Unix Developer working in a MNC in india. I am working in development environment from last 3 years and iam currently fedora core 6 Linux. I would like to express my wish to work with the Fedora Development team. Christian Iseli has suggested me to contact to this list, introducing myself to the team. I would be very much happy if you could involve me in the Fedora core development work. Awaiting for your reply.. Thanks Roopesh.

3 2

fedorapeople.org is now available
by Seth Vidal 30 Aug '07

30 Aug '07

Hi Everyone, fedorapeople.org is now available for general use. What is fedorapeople.org?: It is a site where fedora contributors can upload files for sharing out with the world. It is perfect for uploading specfiles, srpms, patches, etc, etc. Each fedora contributor has 150M of quota-controlled space. Users can upload using scp, sftp or rsync. Once uploaded into the users public_html directory the files are available via http at: http://your_username.fedorapeople.org/. To connect to fedorapeople.org just use the ssh key you uploaded to your fedora account and then you can login via ssh to: fedorapeople.org What fedorapeople.org is NOT: - it is not a place for you to upload confidential or copyright-violating files. - it is not a shell for you to login and stay logged into - it is not a place for you to run your favorite proxy of whatever kind - it is not a database server - it is not a mail server - it is not a run-my-favorite-cgi-server - it is not a blog server We've tried our best to minimize and secure the services. Don't make a lot of unreasonable requests asking for us to undo that. :) For reasonable requests please file put them in the fedora infrastructure ticketing system: http://fedoraproject.org/wiki/Infrastructure/Tickets Let us know what breaks, -sv -- fedora-announce-list mailing list fedora-announce-list(a)redhat.com https://www.redhat.com/mailman/listinfo/fedora-announce-list

3 3

Infratructure Meeting Log for 2007/08/23
by Ricky Zhou 30 Aug '07

30 Aug '07

16:04:39 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Role Call 16:04:41 < mmcgrath> Who's here? 16:04:43 * ricky 16:04:43 -!- jeremy [i=katzj@nat/redhat/x-4bc27ba525a17715] has quit Remote closed the connection 16:04:43 -!- warren [i=warren@nat/redhat/x-2dc6a46ecf6fecaa] has quit Remote closed the connection 16:04:48 < paulobanon_> me 16:05:00 < mmcgrath> and again jeremy and warren. Gone at the same time! 16:05:04 * lmacken 16:05:06 < mmcgrath> dgilmore: ? 16:05:08 * skvidal is on asterisk 16:05:10 < skvidal> and here 16:05:20 < lmacken> hah! why does that happen every week ? 16:05:36 < mmcgrath> lmacken: I have no idea, but its like clockwork :) 16:05:37 -!- jeremy [i=katzj@nat/redhat/x-48f778bf0db0139e] has joined #fedora-meeting 16:05:39 < lmacken> seriously 16:05:42 < ricky> Yay :) 16:05:47 < mmcgrath> and jeremy's back :) 16:06:08 < mmcgrath> Ok, I think we have enough to get started, lets take a look at tickets. 16:06:15 * jeremy waves 16:06:32 < mmcgrath> jeremy: why is it that you and warren both log off every time the infrastructure meetings start? 16:06:46 * mmcgrath not complaining, just amused by it. 16:07:12 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Tickets 16:07:13 < mmcgrath> https://hosted.fedoraproject.org/projects/fedora-infrastructure/query?statu… 16:07:29 < jeremy> not sure what's going on tbh 16:07:33 -!- warren [i=warren@nat/redhat/x-7b788734ded94462] has joined #fedora-meeting 16:07:36 < ricky> Woo. 16:07:44 < mmcgrath> Not much to talk about on the ticket side it looks like. 16:07:54 * ricky thought that the meeting keyword was removed from the wiki ticket. Hmm.. 16:08:00 < mmcgrath> VCS is there but jcollie isn't around right now (#14) 16:08:06 < mmcgrath> ricky: I thought we did to 16:08:35 < ricky> OK, it's gone now. 16:08:46 < paulobanon_> ricky: i think it was removed from the wiki things and passed to FAS 16:08:54 < paulobanon_> (that was the plan anyway) 16:09:02 < mmcgrath> either way we'll skip it for now. 16:09:31 < mmcgrath> One thing I don't really want to talk about but wanted to mention is ticket #137 16:09:59 < mmcgrath> As a group (Infrastructure) I think going forward and in order to ensure our continued growth we'll have to be more sponsorship aware. 16:10:20 -!- k0k [n=k0k@fedora/k0k] has quit "Abandonando" 16:10:37 < paulobanon_> mmcgrath: have u already started to look for other intl partners/sponsors ? 16:10:39 < mmcgrath> This means 1) keep your ears to the ground about opportunities for Fedora Infrastructure (and Fedora in general) and 2) we'll have to make sure to keep the relationships with our current sponsors good. 16:10:58 < mmcgrath> paulobanon_: yeah, some people have responded with some leads and I've contacted some other people. 16:11:30 < dgilmore> opps me is here now 16:11:48 < dgilmore> mmcgrath: sorry im late 16:11:51 < mmcgrath> To be blunt, I have very little experience in requesting this sort of things but I'm working on it and taking notes and will hopefully get good at it soon 16:11:53 < paulobanon_> mmcgrath: after the meeting save me 5mins 16:11:56 < mmcgrath> dgilmore: no worries, we're just getting started. 16:12:00 < mmcgrath> paulobanon_: sure thing 16:12:30 < mmcgrath> having said that, we're just getting started into activly looking for hosting sponsors so we can mold it any way we want. 16:13:00 < mmcgrath> Anyone have any questions regarding what I'm doing and whats going on there? I know I haven't really been cc'ing the list on emails I've sent out. That doesn't seem approperate I think. 16:13:07 < mmcgrath> And I don't want to scare off anyone :) 16:13:20 < paulobanon_> scare us then :) 16:13:21 < skvidal> yay for more options and decentralizing our infrastructure, imo 16:13:55 < mmcgrath> FYI all thats the general idea. Spreading the load a bit, bringing content faster (especially internationally) and lowering the cost from RH. 16:14:10 * mmcgrath notes RH hasn't asked for this, I'm just doing it because it makes 'cents' 16:14:11 < skvidal> it also increases the likelihood that we stay up 16:14:22 < mmcgrath> yep. and its always good to have options. 16:14:25 < skvidal> if we end up in a problem at one colo 16:14:49 < paulobanon_> skvidal: true 16:15:42 < skvidal> a fiber cut doesn't necessarily nuke us 16:15:47 < skvidal> which is, imo, good :) 16:15:49 < mmcgrath> The other thing is that it looks like a lot of hosting solutions out there already offer Fedora. 16:15:58 < mmcgrath> Ok, if there's no questions there I'll move on. 16:16:11 < glezos> mmcgrath, what's the Boards opinion on this? 16:16:18 < ricky> As long as they upgrade every ~13 months :) 16:16:35 < mmcgrath> glezos: I don't think they've formed an official opinion. 16:16:48 -!- G [n=nigel@wikipedia/NigelJ] has quit Connection timed out 16:16:50 < mmcgrath> skvidal and dgilmore are on the board, what do you two think? 16:17:14 < skvidal> yay for more options and decentralizing our infrastructure 16:17:33 < mmcgrath> heh 16:17:50 < skvidal> seriously 16:17:57 < skvidal> I think the general idea is this 16:18:02 * dgilmore is all for de centralising our infrastructure some 16:18:16 < skvidal> 1. fedora-infrastructure is really helping increase the interaction of community memebers in fedora admin 16:18:33 < skvidal> 2. the path we're taking is for sustainability and maintability - yay to both of those 16:19:03 < skvidal> 3. in general this is a good direction to go 16:19:13 * paulobanon_ yays to skvidal && dgilmore opinions 16:19:15 < glezos> I believe so too. 16:19:18 < skvidal> that's really it 16:19:25 < glezos> yay for it 16:19:31 * jima stumbles in 16:19:42 < mmcgrath> glezos: thats the sense I get from most people with the hesitation of not really knowing whats out there and the general adverse feelings towards 'advertising'. 16:19:50 < mmcgrath> so we go forward, but with caution :) 16:20:03 < skvidal> though 16:20:05 < skvidal> so far 16:20:12 < glezos> mmcgrath, +1 for caution on 'adviertising' 16:20:15 < skvidal> no one is pissy about the dell stamp at the bottom of the webpages 16:20:28 < skvidal> and I doubt if we had a rackspace or dreamhost or other thing down there 16:20:32 < skvidal> we'd gain a lot of ire 16:20:39 < ricky> After the reaction to smolt+Fedora branding, I see what mmcgrath means, though. 16:20:40 < skvidal> however, there are lines 16:20:45 < mmcgrath> I agree, especially since places like rackspace offer fedora hosting :) 16:21:18 < glezos> more choices are always better than one :) 16:21:41 < paulobanon_> we can always sell the idea of global load-balancing :) 16:21:46 < mmcgrath> You guys will hopefully be hearing a lot from me on this front over the next several weeks. I'll be contacting probably every lead that comes my way but won't be ccing everyone about it. I'm not trying to be secret or anything, its just a matter of being practical. Feel free to ask questions. 16:22:02 < mmcgrath> also suggest any hosting provider you might like or know of. 16:22:18 < mmcgrath> and if your company isn't a hosting provider but might be able to spare space and bandwidth in a rack in some colo, let me know. 16:22:30 < skvidal> mmcgrath: how about a report on the responses you've gotten every week or so? 16:22:40 < skvidal> mmcgrath: just so people know what's going on and also know who you've contacted or not? 16:22:51 < mmcgrath> That sounds very reasonable. 16:22:57 < paulobanon_> +1 16:23:21 < lmacken> +1 16:23:27 < mmcgrath> My goal is to have at least one other proxy server to use, thats not hosted in PHX before the F8 launch. 16:23:40 < mmcgrath> but certainly by F9 a fuller solution will hopefully be in place. 16:23:57 -!- G [n=nigel@wikipedia/NigelJ] has joined #fedora-meeting 16:24:09 < dgilmore> skvidal: indeed your right 16:24:14 < mmcgrath> Ok, so we'll move on for now if there aren't any other questions on that front? 16:24:32 < skvidal> dgilmore: in general I think that's true - about what in particular? :) 16:24:34 < mmcgrath> Anyone have any new sponsors? 16:24:43 < mmcgrath> I've added jima to the noc group. 16:24:59 < mmcgrath> jima: welcome 16:25:13 < paulobanon_> mmcgrath: not that many new requests :) 16:25:27 < mmcgrath> true 16:25:33 < dgilmore> skvidal: about de centralising 16:25:42 < mmcgrath> dgilmore: ? 16:25:44 < jima> yeah, i'm sure people are flocking to infrastructure 16:25:58 < mmcgrath> jima: we're a different breed of people :) 16:26:03 < dgilmore> mmcgrath: i was reading up got called away for a sec 16:26:05 < jima> mmcgrath: that we are 16:26:14 -!- bpepple|lt [n=bpepple|(a)rrcs-70-61-160-147.central.biz.rr.com] has joined #fedora-meeting 16:26:14 < mmcgrath> dgilmore: ahh 16:26:15 < dgilmore> mmcgrath: but please keep us in the loop 16:26:20 < mmcgrath> will do 16:26:32 < dgilmore> jima: about time :D 16:27:08 < mmcgrath> Well, thats really all that is on the schedule. No new SOP's. 16:27:13 -!- Renault [n=couretca(a)AToulon-151-1-131-130.w86-206.abo.wanadoo.fr] has quit "Quitte" 16:27:20 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor 16:27:26 < mmcgrath> Anyone have anything they'd like to discuss? 16:27:29 < paulobanon_> Noc 16:27:36 < mmcgrath> paulobanon_: have at it. 16:27:52 < paulobanon_> there has been a raise of alerts with the builders 16:28:01 < paulobanon_> regarding offline status 16:28:15 < paulobanon_> anything for us to worry about in general ? 16:28:20 < mmcgrath> ahh, good question 16:28:38 * jima kicks ekiga 16:28:47 * paulobanon_ wouldnt sleep if he had his blackberry on the pager app :) 16:29:08 < dgilmore> paulobanon_: generally its nothing to worry too much about 16:29:10 < mmcgrath> So the builders have been having issues 16:29:12 < mmcgrath> https://bugzilla.redhat.com/show_bug.cgi?id=260401 16:29:23 < dgilmore> right now builers are under a much heavier than normal load 16:29:29 < mmcgrath> We've actually hit a xen bug of some kind, I have someone internally (one of the virt guys) looking into it. 16:29:30 < paulobanon_> dgilmore: gotcha 16:29:32 < dgilmore> but we have that damn xen bug 16:30:06 < paulobanon_> k, makes sense 16:30:10 < mmcgrath> I would actually like to talk about the build system in general. 16:30:29 -!- Morph [i=gareth(a)mulder.wiked.org] has joined #fedora-meeting 16:30:32 < mmcgrath> In general I've been a little unhappy with the buildsystem over the last couple of months and its because of a lot of issues. 16:30:42 < mmcgrath> 1) capacity. We actually do have builders, but have been unable to find a place to put them. 16:31:07 < mmcgrath> This is mostly a failure of mine I guess since its my job to find places for this stuff but it's been difficult. 16:31:20 < paulobanon_> places == hardware? 16:31:47 < mmcgrath> yeah, we just haven't found a place to put the stuff and as a result its been sitting on the floor somewhere unpowered. 16:32:00 < paulobanon_> :/ 16:32:12 < mmcgrath> I'm hopeful this will be corrected within the next couple of months but at the same time when I ask GIT about it I get unclear, or different answers (if any) 16:32:31 < paulobanon_> whats GIT ? 16:32:46 < skvidal> Global Information Tech 16:32:49 < mmcgrath> 2) The missing dep issue on fedora-maintainers was annoying. It was one of those things that makes us look bad though it wasn't really our fault. 16:32:53 < skvidal> red hat's IS service 16:32:54 < paulobanon_> skvidal: thanks 16:32:56 < mmcgrath> paulobanon_: they're Red Hat's version of us :) 16:33:16 < skvidal> mmcgrath: they're not as fun as we are, though. :) 16:33:27 < paulobanon_> skvidal: ++1 16:33:35 < skvidal> heh 16:33:35 < paulobanon_> :) 16:33:37 < skvidal> I'm just kidding 16:33:44 < skvidal> I'm sure they're a blast 16:33:52 < mmcgrath> :) 16:33:56 < paulobanon_> heh 16:33:59 < mmcgrath> and 3) Successful failed builds. 16:34:04 < mmcgrath> dgilmore: do you have an update on that? 16:34:27 < mmcgrath> I don't know if it isn't happening as much now or if people just stopped complaining about it. 16:35:07 * nirik saw a report of it this morning in #epel. It's still happening I think. 16:35:35 < paulobanon_> mmcgrath: is #3 happening due to the capacity thing, koji, or any other unknown reason ? 16:35:47 < mmcgrath> I know dgilmore has been busy, I wonder if it would be possible to recruit another buildsys member to help. 16:35:53 < mmcgrath> its an unknown thing. 16:36:03 -!- G_ [n=nigel@wikipedia/NigelJ] has quit Connection timed out 16:36:06 < mmcgrath> a build will succeed, mock exits with 0 (as it should) but then plague thinks it failed. 16:36:54 < mmcgrath> dgilmore: ? 16:37:03 < mmcgrath> maybe $DAYJOB called :) 16:37:05 < paulobanon_> he prolly got called again 16:37:12 < mmcgrath> we can go back to that later. 16:37:36 < mmcgrath> So yeah, the builder outages are bad but they're being worked on. 16:37:45 < mmcgrath> Anyone else have something they would like to discuss? 16:38:10 * jima fields a phone call while trying to get sip software to work ;P 16:38:14 < mmcgrath> ricky: can you give us our weekly FAS2 round up? 16:38:56 < ricky> Well, I've attempted to move all access controll stuff into auth.py- it might need to be checked for some logic errors :) 16:38:59 < nirik> mmcgrath: is there any wiki page or other info about sponsoring? What is needed and what a sponsor gets? My company might be interested, but I would need info on what I am asking from them and what they get... 16:39:27 < ricky> I'll probably be asking a bit about the formalities surrounding the CLA process/how we plan to do that soon. 16:40:04 < mmcgrath> nirik: I'm new to that so I've been taking notes as I go. I've been getting spatterings of email from people and there was a thread on FAB about it but I hesitate to write anything down yet because I don't want to make false promises. 16:40:30 < mmcgrath> nirik: if you are interested send me an email and I'll give you the low down. 16:40:40 < ricky> Other than that, as mentioned before, I'm looking into using a separate database to manage stuff such as email changes and pending requests for groups. 16:40:50 < mmcgrath> ricky: cool, I had always thought of that as almost a wizard process. 16:40:50 < skvidal> mmcgrath: should we talk about start.fedoraproject.org? 16:40:55 < mmcgrath> I want to make it easier. 16:41:05 < mmcgrath> skvidal: yeah, we'll do that after FAS2. 16:41:06 < nirik> mmcgrath: ok. 16:41:13 < skvidal> ok 16:41:45 < ricky> So e-mail verification will be handled on creating an account- does that mean that we can do a sign/copy/paste process? 16:42:02 < ricky> (And just check the validity of the signature/that it matches the e-mail)? 16:42:03 < mmcgrath> ricky: yeah or a file upload or something. 16:42:12 < ricky> Ah, that easier, actually. 16:42:13 < warren> much easier than e-amil 16:42:15 < warren> e-mail 16:42:33 * dgilmore is here now 16:42:34 < mmcgrath> we'll still want to forward it as an email on. All CLA's get sent to some mailbox for legal (I don't even really know if they check it but even now they get forwarded there) 16:43:07 < mmcgrath> ricky: sounds like thats going well, anything else? 16:43:32 < ricky> That's it for now- I'm taking a tiny break and looking at possible website stuff at the moment. 16:43:40 < mmcgrath> cool 16:44:06 < mmcgrath> Ok, as skvidal mentioned, there's a possible new feature for F8. http://start.fedoraproject.org/ 16:44:11 < skvidal> 'feature' 16:44:22 * mmcgrath digs up FAB link 16:44:24 < skvidal> everyone go to start.fedoraproject.org 16:44:30 < paulobanon_> going 16:44:40 < skvidal> it's a google search page for fedora - like the firefox search page in default firefox browsers 16:44:59 < skvidal> the feature suggestion is to make that fedora's default homepage in firefox/konqueror/etc 16:45:28 < mmcgrath> https://www.redhat.com/archives/fedora-advisory-board/2007-August/msg00158.… 16:45:29 < warren> I hope we do keep it very simple like this. 16:45:29 < skvidal> now right now the website is at rackspace 16:45:36 < skvidal> warren: not likely 16:45:52 < skvidal> and it is a JSP 16:45:56 -!- mbonnet is now known as mbonnet_ 16:45:57 < skvidal> that will/can change 16:45:58 < warren> skvidal, with a prominent link to all the fedora info 16:46:18 < skvidal> again - it needs to be a bit busier than it is 16:46:30 < skvidal> but I agree - not confusingly so 16:46:35 < mmcgrath> skvidal: actually I think right now that is just a static page. 16:46:39 < ricky> JSP? Why does it need anything more than a static page? 16:46:43 < paulobanon_> skvidal, mmcgrath: whats the possibility for u guys to contact google to sponsor a minigoogle ? 16:46:44 < skvidal> the search results are jsp 16:46:57 < skvidal> a google bot? 16:46:59 < skvidal> no. 16:47:05 < skvidal> we don't want to host any non-open infrastructure 16:47:05 < warren> if the front page is kept simple like this, perhaps 1) people wont change the front page 2) we can easily display new info prominently 3) maybe Fedora can score some google ad revenue 16:47:07 * mmcgrath never did bother searching 16:47:11 < paulobanon_> it also works as a search engine 16:47:17 < ricky> Aha, I guess the JSP thing might not be active at the moment. 16:47:18 < skvidal> and a google bot is decidedly non-open 16:47:32 < skvidal> warren: the front page is not a decision for the infrastructure team to make 16:47:33 < paulobanon_> skvidal: thats true 16:47:42 < warren> skvidal, right, it was just an idea 16:47:52 < skvidal> what fedora gets out of this is some revenue 16:48:01 < skvidal> the adwords would pay back to us 16:48:32 < mmcgrath> skvidal: maybe thats the part I missed, where's the jsp come into play? I was under the impression that no serverside stuff was going on as of yet except for the handoff to google. 16:48:51 < warren> who decides what goes on the front page? 16:48:57 * warren wants to know who to talk to. 16:49:02 < dgilmore> mmcgrath: i think its just to add some dynamic contenet 16:49:04 < skvidal> mmcgrath: don was a bit fuzzy on that to me, too. but he was very clear it can be replaced with other languages 16:49:06 < jima> that sounds like policy to me ;) 16:49:08 < dgilmore> internal only stuff 16:49:15 < skvidal> warren: docs/websites/board 16:49:20 < dgilmore> it could be python from my understanding 16:49:26 < skvidal> warren: the same people who determine what goes on fp.org 16:49:28 < skvidal> dgilmore: yes 16:49:32 -!- rdieter_away [n=rdieter(a)sting.unl.edu] has quit Remote closed the connection 16:49:45 < warren> mmcgrath, it is possible for the page to be static (local) while using ajax for optionally displaying a dynamic headline 16:49:57 < skvidal> warren: yes- that was discussed on fab list 16:50:06 < skvidal> but the point for this discussion 16:50:08 < skvidal> is not that part 16:50:19 < warren> ajax, sorry for using you. 16:50:26 < mmcgrath> I guess its murky because the non-static stuff they are proposing doesn't exist. I don't know what its supposed to do. 16:50:31 < skvidal> the part is - if we get this - we'll need to have a place to put it 16:50:32 * ricky shudders a bit. 16:50:36 < skvidal> b/c we want it on machines WE control 16:50:50 < skvidal> WE == fedora infrastructure 16:50:56 < skvidal> WE != red hat, inc 16:51:08 < paulobanon_> skvidal: duke ? 16:51:10 < mmcgrath> which, right now, it is on RH, inc. 16:51:20 < skvidal> paulobanon_: they can be in the colo 16:51:24 < skvidal> but if max calls me and says 16:51:31 < skvidal> "take that ad box off there RIGHT NOW" 16:51:40 < skvidal> I don't want to have to go through seven layers of indirection to get it done 16:51:46 < ricky> Heh. 16:51:48 < skvidal> I want one of us to be able to ssh in, modify puppet and nuke it 16:51:53 < mmcgrath> paulobanon_: well I think we could host it, especially if we can get a few more proxy boxes. The question is I still don't know what the heck the 'server side' is supposed to do. 16:52:02 -!- gregdek is now known as gregdek_gone 16:52:13 < skvidal> mmcgrath: I'll get a firm answer on that 16:52:23 < mmcgrath> k 16:52:28 < skvidal> paulobanon_: hosted at the phx colo is fine - multiple sites is better 16:52:37 < skvidal> I'm not worried about rh being evil - it's clear rh is NOT being evil 16:52:43 < skvidal> my concern is with rh being busy 16:52:56 < skvidal> and not being able to get to something immediately b/c of other priorities 16:52:57 < paulobanon_> skvidal: understood 16:52:59 < warren> The non-static stuff could be very simple, simply serving the RSS data for display. Load would be relatively small. 16:53:06 < mmcgrath> <nod> the first rollout of start.fp.o is currently planned to be on A box in a rackspace datacenter. 16:53:07 < warren> All links from there go elsewhere 16:53:15 < dgilmore> skvidal: its currently in a colo AFAIK we should make sure don gives sysadmin-main access 16:53:36 < warren> mmcgrath, is rackspace a certainty? There are cheaper options 16:53:47 < skvidal> dgilmore: yah - it's only for f8t2 - I think bu t3 or GA we should have that fixed 16:53:48 < dgilmore> warren: don already has the server rented 16:53:51 < skvidal> warren: rackspace is where it is now 16:53:51 < warren> ah 16:54:00 < mmcgrath> dgilmore: we can do that, I've made it very clear that what is currently there is not 'live' or 'blessed' to be official. 16:54:30 < dgilmore> mmcgrath: reminds me i should setup access to sparc builders 16:55:26 < mmcgrath> So long story short, we as a group have a list of demands and we need to communicat that to Donald. 16:55:36 < skvidal> I'll do it 16:55:46 < skvidal> and I'll cc dgilmore and mmcgrath on it, kewl? 16:55:53 < mmcgrath> skvidal: k, if you change your mind let me know. 16:55:54 < dgilmore> skvidal: sounds perfect 16:56:16 < skvidal> dgilmore: you're ausil@ right? 16:56:21 < skvidal> mmcgrath: why would I change my mind? 16:56:23 * mmcgrath notes we're only talking about implementation here. What it is, does and any $$ that get exchanged is between the board I guess. 16:56:32 < mmcgrath> skvidal: no idea, just throwing it out there :0 16:56:38 < skvidal> mmcgrath: ok 16:57:26 < skvidal> dgilmore: yo uneed to get dgilmore@ as an alias :) 16:57:34 < mmcgrath> Ok, so it sounds like we have some action items to do there. 16:57:43 < mmcgrath> Anyone have anything else? we've got about 5min left in the meeting. 16:58:25 < mmcgrath> Ok, if no one has anything we'll close the meeting in 30 16:58:42 < mmcgrath> 15 16:58:52 < mmcgrath> 5 16:59:01 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting End 16:59:04 < mmcgrath> Thanks for coming everyone 16:59:09 < paulobanon_> thx mmcgrath 16:59:15 < ricky> Thanks. 16:59:39 -!- mmcgrath changed the topic of #fedora-meeting to: Channel is used by various Fedora groups and committees for their regular meetings | Note that meetings often get logged | For questions about using Fedora please ask in #fedora | See http://fedoraproject.org/wiki/Communicate/FedoraMeetingChannel for meeting schedule 17:00:49 * ricky finally finishes reading the mailing list thread :) 17:01:37 < dgilmore> skvidal: dgilmore@ works 17:01:43 < skvidal> ooo good 17:01:49 < dgilmore> skvidal: i am ausil@ though 17:02:44 < dgilmore> i should sign up for a second account or do something to blacklist dgilmore from becoming a fas account 17:03:08 < dgilmore> mmcgrath: we should add a blacklist feature to FAS 17:03:09 < ricky> Hm.. the same probably applies to all of those extra aliases in there :) 17:03:21 < mmcgrath> dgilmore: probably a good idea 17:03:23 * ricky adds a TODO for FAS2. 17:03:25 < warren> didn't we get rid of the aliases? 17:03:40 < mmcgrath> dgilmore: hey, I forgot to ask you have you had any more chance to debug the failed successful builds? 17:03:45 < mmcgrath> warren: just the Firstname.Lastname aliases. 17:03:47 < dgilmore> warren: there are aliases that are there for things not part of fas 17:03:51 < warren> ooh 17:04:02 < dgilmore> mmcgrath: no ill get some time tonight 17:04:03 * jima doesn't miss the firstname.lastname alias 17:04:11 < jima> but then, no one really uses my name anyway 17:04:24 < dgilmore> jima: alot of people probably dont know it 17:04:30 < jima> dgilmore: nope 17:07:29 < jima> heh, i guess i got a sip client to work, after the meeting ended ;)

1 0

xenbuilder2
by Mike McGrath 30 Aug '07

30 Aug '07

I've taken xenbuilder2 offline (out of koji and plague). Eduardo works on the virt team inside Red Hat and he's going to help us track down this bug: http://bugzilla.redhat.com/260401 If you see ehabkost thank him and let him do his thing :) -Mike

1 0

Securing our transifex instance
by Dimitris Glezos 29 Aug '07

29 Aug '07

Hi all. It's time to add some non-localhost repos to our transifex instance, so some advices on the security front would be greatly appreciated. We're doing everything over SSH, with encrypted keys. Before starting the TG app, tha admin needs to run ssh-agent and ssh-add. The goal would be to have a different service actually handling the keys and the commits, but that would have to wait for someone to submit the patchset. With each repository (host) having its own key pair, `~/.ssh/config` right now looks like this: Host localhost User transifex-testuser IdentityFile ~/.ssh/id_dsa #Host cvs.fedoraproject.org # User transifex # IdentityFile ~/.ssh/id_dsa-cvsfpo Host repo.or.cz User yumex-trans IdentityFile ~/.ssh/id_dsa-yumex Host * ForwardX11 no ForwardAgent no RhostsAuthentication no RhostsRSAAuthentication no PasswordAuthentication no StrictHostKeyChecking yes BatchMode yes CheckHostIP yes On the web front, I tried my best to validate properly any input/output from/to the user. Since transifex accepts user input, writes files on our server, runs OS commands on the server, uses SSH keys to communicate with other machines and writes to disks across the Internet, we better make sure everything is OK before launching. It would be great if some of you python hackers take a look at the code, or anyone with the hobby of defacing websites run any injection/XSS-foo on our instance, in order to identify and any additional checks or reveal any mistakes I made (which I'm sure I did since it's my first big python and TG app). Our test instance dwells at http://publictest5.fedora.redhat.com/submit/ Short instructions to get the code and install a local instance to play around freely and with less lag can be found at: https://hosted.fedoraproject.org/projects/transifex/browser/INSTALL Bugs, reports, suggestions: https://hosted.fedoraproject.org/projects/transifex/newticket Thanks. -d -- Dimitris Glezos Jabber ID: glezos(a)jabber.org, GPG: 0xA5A04C3B http://dimitris.glezos.com/ "He who gives up functionality for ease of use loses both and deserves neither." (Anonymous) --

2 1

Puppet Training!
by Mike McGrath 27 Aug '07

27 Aug '07

puppet1 is ready to be used (right now everything is still on lockbox until after the training). I'm going to do some actual training this time around on how we're using it. Training is optional but strongly encouraged (as I'm interested in discussion from those of you who use it to find better ways of doing things) The training will be done over asterisk, and in #fedora-meeting. Since much of it is training you will only need to listen so no microphone is needed. I'll be handing out slides. See http://fedoraproject.org/wiki/Infrastructure/Asterisk for how to connect. Please let me know which of these times work best for you: Monday August 27th at 15:00 UTC Monday August 27th at 20:00 UTC Wednesday August 29th at 20:00 UTC Right now I'm scheduling it for the 27th at 20:00 UTC unless people can't make that time. -Mike

12 17

Puppet
by Mike McGrath 27 Aug '07

27 Aug '07

Just a reminder, I'm transitioning puppet right now, if you need to make changes please let me know, I'll get them in there. -Mike

1 0

Intro and a question about mirroring.
by susmit shannigrahi 27 Aug '07

27 Aug '07

Hi all, This is Susmit <http://www.fedoraproject.org/wiki/SusmitShannigrahi> here. Earlier my domain was only ambassador and free media, now joining infrastructure too. Still a student but configuring and testing things for a few years. Recently, I got access to hardware resources and bandwidth, so thought about joining infrastructure. I have a question, I think this should be the appropriate list. What is the minimum bandwidth required to set up a fedora public mirror? I am working at an university and seriously thinking of setting up a mirror. Thanks and regards, Susmit. -- ssh 0x86DD170A http://www.fedoraproject.org/wiki/SusmitShannigrahi

3 9

Updated FAS => BZ scripts
by Toshio Kuratomi 25 Aug '07

25 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello all, I've updated our Account system to bugzilla sync scripts to use bugzilla's xmlrpc interface to work with the migrated bugzilla instance. I tested the db side of these changes on the FASv1 instance on publictest1 and the scripts on the Red Hat test bugzilla instance. Everything appeared to work but there could always be errors so if you hear of the following symptoms, let me know: - - New Fedora Accounts that have fedorabugs or cvsextras are not able to make changes to Fedora bugs in bugzilla. (For instance, to review packages). - - Ditto for existing accounts that suddenly lose this ability. - - People who have had their fedorabugs access revoked but can still make changes to Fedora Bugs for which they are not the owner. The new system implements a queue in the account system database that is updated whenever someone is approved or removed/unapproved for the fedorabugs group. Adding to the queue is performed by a postgresql trigger defined in the cvsacct.sql[1]_ file. cron (on an internal Red Hat box for historical reasons... we can probably move it to an infrastructure box now that we're using xmlrpc) runs the export-bugzilla.py[2]_ script every hour and processes the queue of adds and removes. The script which adds new packages to bugzilla was updated several weeks ago as part of the package db migration. However, it had to be updated again for the bugzilla migration as a URL had been changed and some error reporting code wasn't inclusive enough. If you see new packages being created or branched with no bugzilla component being created let me know that there's a problem with bz-make-components-pkgdb.py[3]_ *Note* package changes are synced by cron every six hours. So you have to wait six hours from the creation of the new package to know if there's a problem with the sync. .. _[1]: http://cvs.fedoraproject.org/viewcvs/fedora-accounts/cvsacct.sql?root=fedor… .. _[2]: http://cvs.fedoraproject.org/viewcvs/fedora-accounts/export-bugzilla.py?roo… .. _[3]: http://cvs.fedoraproject.org/viewcvs/fedora-accounts/bz-make-components.py?… - -Toshio -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFG0LtOX6yAic2E7kgRAgxCAKCa6NqgY4IN3O7nDo1ZtqUbHlOLegCdH+dQ sNZOrKWvrK4CGs7H2y+wYPs= =1o8V -----END PGP SIGNATURE-----

1 0

[RFC] New hosted projects
by Paulo Santos 23 Aug '07

23 Aug '07

Hi guys, In todays meeting, there was the question about how to process and evaluate new hosted space/projects. Currently: user go to trac, open a ticket and assign it to jkeating Future: user send an email to the list, we discuss it, evaluate it and approve/deny, then user go to trac and open a ticket but don't assign it. a member of the infrastructure (or some group for that effect) will pickup the ticket and deploy it (like we do with the approvals) I'm sure that jkeating has his hands full with other stuff, and doesn't have the time to keep looking to the queue. So if we can help, i say we should. Comments ?! Paulo

2 1

Infratructure Meeting Log for 2007/08/23
by Jeffrey Ollie 23 Aug '07

23 Aug '07

[15:02] mmcgrath has set the subject to Infrastructure -- Role call [15:02] mmcgrath: Who's here? [15:02] * lmacken [15:02] jeremy has left (Remote closed the connection (i=ikatzj@nat/redhat/x-85aceb302d31e828)) [15:02] warren has left (Remote closed the connection (i=warren@redhat/wombat/warren)) [15:02] * ricky [15:02] paulobanon: pong [15:02] * londo is here [15:02] * yingbull is here [15:02] mmcgrath: crazy, that happened at this same time last week (jeremy and warren logging off right as the meeting started. [15:03] * ricky is. [15:03] paulobanon: yup [15:03] abadger1999: yes [15:04] mmcgrath has set the subject to Infrastructure -- Tickets [15:04] mmcgrath: https://hosted.fedoraproject.org/projects/fedora-infrastructure/query?statu… [15:04] mmcgrath: paulobanon: Ticket #52, whats up? [15:04] paulobanon: k so [15:04] paulobanon: im going with mod_cache all the way for now [15:04] jcollie: oops i'm here [15:05] paulobanon: we are currently using mod_cache_disk and _mem [15:05] paulobanon: and hopefully during the weekend or early next week start stress testing [15:05] paulobanon: and see what is improved, and what can be improved [15:05] paulobanon: thats it [15:05] mmcgrath: Cool, good to hear thats still making progress. Will we be able to implement for Fedora 8? [15:06] paulobanon: YUP [15:06] paulobanon: [15:06] mmcgrath: fantastic [15:06] paulobanon: thats the plan [15:06] mmcgrath: cool, anything else or we'll move on. [15:06] jeremy has joined the group chat (i=katzj@nat/redhat/x-6c63cab4c75caa85) [15:06] paulobanon: move one [15:06] mmcgrath: k [15:07] mmcgrath: ticket #14 - Choose New VCS for Packages [15:07] mmcgrath: jcollie: any word? [15:07] jcollie: nope... semester starts next week [15:08] mmcgrath: k, no worries. We'll move on. [15:08] mmcgrath: ticket #31 - The wiki [15:08] * ricky doesn't have much to say about the wiki either [15:08] mmcgrath: ricky: should we remove the meeting notice on that ticket? [15:08] stahnma: I added a thought on the ticket [15:08] stahnma: but, it doesn't change the status [15:08] stahnma: [15:08] ricky: mmcgrath: Sure, I hope to be working on FAS2 for a while : [15:08] ricky: ** [15:09] mmcgrath: stahnma: feel free to talk about it. your concern was that we not automatically disclude PHP based wikis right? [15:09] stahnma: yes [15:09] abadger1999: yay! [15:09] paulobanon: \o/ [15:09] abadger1999: Err... Not pp [15:09] abadger1999: php [15:09] abadger1999: [15:09] stahnma: I just think that autocutting PHP is a bit short-sited [15:09] stahnma: it might not make it for other reasons [15:09] stahnma: but security for PHP is more of a rep basedon PHP apps, not PHP itself [15:09] stahnma: yes, it's very easy to code bad php [15:10] mmcgrath: One thing to keep in mind is that we don't have php anywhere else (or java for that matter) so it does make them less attractive. [15:10] stahnma: true [15:10] stahnma: that's a valid point [15:10] * ricky mentions cacti, just to be evil [15:10] mmcgrath: ricky: actually thats a good point. [15:10] mmcgrath: Though its on our noc machine [15:10] stahnma: it's also esy to write good PHP, if you try [15:10] stahnma: and I think mediawiki is awesome [15:10] stahnma: and secure...as secure as a wiki can be [15:10] * stahnma is done onthat one [15:11] mmcgrath: the other thing with the wiki is that its been taking a lower priority as of late. [15:11] paulobanon: lots of ppl working on other stuff [15:11] mmcgrath: stahnma: if you are interested feel free to review other wikis (and how to migrate from moin to them) post to the list. [15:11] abadger1999: stahnma: I'm not sure I'd agree with that. Look at the cve's for mediawiki, for instance. [15:11] paulobanon: and as a future moin is adding a DB backend also [15:11] ricky: Cool! [15:11] stahnma: abadger1999: fair enough, I am not all that educated on it .... [15:12] mmcgrath: ricky: mind if I remove the "meeting" tag from that ticket? [15:12] * paulobanon suggests adding it to FAS2 [15:12] mmcgrath: paulobanon: <nod> I'll do that now since its getting to crunch time. [15:12] * paulobanon is evil now... and run from ricky [15:12] ricky: mmcgrath: Sure. [15:13] mmcgrath: lets talk about that now actually [15:13] mmcgrath: Ticket #9 - Fedora Accounts System (LDAP) [15:13] mmcgrath: I know ricky has been doing a ton of work on it, whats the latest? [15:14] * paulobanon crashes lots of stuff... [15:14] ricky: Well my only change to the LDAP schema was to add a description field for groups- everything else was with the TG app. [15:14] paulobanon: ricky: u're using genshi or kid ? [15:14] ricky: I ended up moving the user/group sections out into different files/switching to genshi and doing some general template cleanups. [15:14] jcollie: didn't we need something for UIDs/GIDs? [15:15] abadger1999: Cool. So lots of cleanup it sounds like. [15:15] mmcgrath: jcollie: yeah we still need to add UIDs and GIDs, there's a way in ldap to do that and ensure its unique but I didn't get it working. [15:15] ricky: Hopefully, the permissions stuff should all be separated into auth.py now, although the templates still need to be made to use it. [15:15] mmcgrath: lots of *much needed* cleanup [15:16] ricky: But I have a feeling that the next cleanup will probably need to remove some really inefficient LDAP queries that I used- heh/ [15:16] mmcgrath: ricky: what are your near future plans with it? Do you want to take ownership over this and make sure its done by F8 or would you rather just hack on it and get more stuff done? [15:16] mmcgrath: we can always do that down the road, I've seen what your queries are doing and they feel reasonably fast (though you're right, they probably won't scale very well) [15:17] ricky: mmcgrath: Well, my plan is to concentrate on mostly on FAS, but it'd be great to have more people that actualyl know python work on it [15:17] paulobanon: is FAS2 still up for F8 release ? [15:17] ricky: (This is really my first time touching python/TG) [15:18] ricky: paulobanon: That might depend on the criteria. [15:18] mmcgrath: paulobanon: I'm hoping so though it dawned on me that releasing it close to the GA release may not be a good idea. [15:18] ricky: paulobanon: I've heard something about possible OpenID integration, etc. so I'm not sure how "featureful" it needs to be by release. [15:18] mmcgrath: so I'd like to have it ready for F8, but then deploy it shortly after. [15:18] mmcgrath: <nod> we're shooting for OpenID integration but not for the initial rollout. [15:18] ricky: Ah, that makes it more realistic [15:18] mmcgrath: right now we just want to replace whats there with this, then add on to it. [15:19] daMaestro has joined the group chat (n=jon@fedora/damaestro) [15:19] ricky: Oh, then the big missing stuff is editing groups, CLA, and integration with other apps, shell accounts, etc. [15:19] ricky: (And maybe a good lookover for any security issues for good measure) [15:19] ChitleshGoorah has left (Remote closed the connection (n=chitlesh@fedora/ChitleshGoorah)) [15:20] mmcgrath: <nod> CLA (hopefully through a wizzard) and the integration with other apps. [15:20] abadger1999: Do we have a spec on the new CLA process? [15:20] * skvidal hates at the CLA [15:20] ricky: Hm, would it necessarily have to be an e-mail process, since we'd already have the e-mail linked to the user? [15:20] mmcgrath: For the initial rollout I'll probably leave the clients alone. [15:20] abadger1999: Still gpg signed, but via a web form? [15:20] ricky: abadger1999: +1 [15:20] mmcgrath: abadger1999: its going to duplicate what is there now, but through a web form instead of email. [15:21] abadger1999: Sounds good. [15:21] ricky: And as a TODO, when the user changes their e-mail it should be verified before the change is accepted. [15:21] mmcgrath: and hopefully with proper debugging (IE: Your key is not found on MIT's site, you didn't encrypt this, this isn't the cla) that sort of thing. [15:21] ricky: I'm not sure how we'd implement that within our current LDAP schema. [15:21] abadger1999: mmcgrath: +1 [15:21] abadger1999: mmcgrath: Almost certainly, translations of the CLA would have to pass legal. [15:22] abadger1999: ricky: We'll have to put that in the DB [15:22] mmcgrath: abadger1999: <nod> I'll muse about that for a while. That won't be in the intitial rollout. [15:22] abadger1999: ricky: A queuing system of some sort. LDAPusername wants to use newemail@.... [15:22] mmcgrath: we'll have to discuss that further. probably on the mailing list. [15:22] ricky: abadger1999: Ah, so some DB integration for purely internal accounts system stuff. [15:23] ricky: That sounds like it'd help a lot- I wouldn't feel so locked into to the LDAP schema. [15:23] abadger1999: ricky: When the user replies, the TG app looks in the queue, changes it in LDAP and removes it from the queue. [15:23] abadger1999: ricky: [15:23] mmcgrath: ricky: anything else with FAS2? If not we'll move on. [15:23] paulobanon: go go go go go [15:24] ricky: mmcgrath: Everything sounds good for now- I'll probably ask more questions in #fedora-admin later. [15:24] mmcgrath: cool, thanks for working on this. Seems every time I sat down to work on it, something else came up. [15:24] mmcgrath has set the subject to Infrastructure -- Schedule [15:24] mmcgrath: http://fedoraproject.org/wiki/Infrastructure/Schedule [15:24] kital has joined the group chat (n=Joerg_Si@fedora/kital) [15:25] mmcgrath: I need to update the schedule. I think the sponsorship setup we have now is good though we need to let it run its course and get more people involved. [15:25] mmcgrath: we talked about VCS already. [15:25] mmcgrath: Does anyone have anything to say about the SOP's? [15:25] mmcgrath: We don't have that many yet. [15:25] paulobanon: if we have people asking new hosted project [15:25] mmcgrath: The ones we do have are pretty good though. [15:25] paulobanon: whats the rule on that [15:26] mmcgrath: Thats a good question, and its kind of up in the air. [15:26] mmcgrath: The problem is, and I'll be blunt, we don't want to host crap. [15:26] paulobanon: +1 [15:26] ricky: Hm, I wonder if some of the longer ones could be made into scripts. [15:26] mmcgrath: but without knowing the people and projects involved. Its hard to figure out whats crap and whats gold. [15:26] mmcgrath: ricky: ? [15:26] mmcgrath: you mean the longer instructions in the SOP? [15:27] paulobanon: so i would say mail the list and explain what/why and request approval [15:27] ricky: Actually, I guess this only applies to the denyhosts one, never mind [15:27] mmcgrath: maybe. Actually you should mail the list and we should discuss it more. [15:27] mmcgrath: [15:27] paulobanon: i agree [15:28] paulobanon: right now, anyone that wants it, goes to trac, open a ticket and assign it to f13 [15:28] mmcgrath: Yep. [15:28] mmcgrath: thats the current process though I don't think f13 (or anyone else really) wants f13 to have to do all of that. It just keeps growing. [15:28] paulobanon: yup [15:28] mmcgrath: paulobanon: email after the meeting and we'll make sure to comment on it. [15:29] paulobanon: k k [15:29] mmcgrath: anyone else have anything on the schedules page? If not we'll move on [15:29] paulobanon: im good [15:30] mmcgrath: cool. [15:30] mmcgrath has set the subject to Infrastructure -- Puppet Training [15:30] * paulobanon wants more then puppet training [15:30] mmcgrath: Just a reminder, we have puppet training on Monday at 20:00 UTC. [15:30] mmcgrath: that seems to have worked out for most people (I know jima had a conflict) [15:31] mmcgrath: If this goes well hopefully we'll be able to figure out other training sessions (like for pkgdb or even the packaging process in general from time to time) [15:31] paulobanon: i can pretty much everyday after 19UTC [15:31] ricky: Do any of the Asterisk experts have any thoughts on recording it? [15:31] mmcgrath: we'll see. I've had a lot of positive comments about the fact that we're even doing training so perhaps I'm on to something here [15:31] mmcgrath: ricky: good question [15:32] mmcgrath: AFAIK, we've had a few people look at it, but no one's gotten it to work right yet. [15:32] mmcgrath: I'll try to take a closer look before the training. [15:33] ricky: mmcgrath: I think tested something similar using Monitor a while ago. [15:33] mmcgrath: <nod> how well did it work for you? [15:33] paulobanon: i wasnt here for Vfudcon, was it nice using asterisk, and considered a success ? [15:33] ricky: Hm.. I know it was easy to setup, but I don't even remember how the voice quality was. [15:33] mmcgrath: paulobanon: not that many people used it but of those that did I think people liked it. [15:34] paulobanon: cool cool [15:34] mmcgrath: ricky: <nod> I guess we'll have to play around some. [15:34] mmcgrath: ok, so thats all I have right now. [15:34] mmcgrath has set the subject to Infrastructure -- Open Floor [15:34] skvidal: anyone have any bright ideas for backups? [15:34] mmcgrath: other then backups are a bright idea, no [15:34] skvidal: for fedorapeople.org [15:34] skvidal: I mean [15:35] skvidal: sorry [15:35] paulobanon: im the backup guy in my company, but its not opensource [15:35] mdomsch: SLA == no backups? [15:35] skvidal: paulobanon: yah, we'd like open, thanks [15:35] paulobanon: doesnt bacula owrks for u skvidal ? [15:35] paulobanon: (works [15:36] mmcgrath: mdomsch: well, there's a couple of problems going on, bacula doesn't work very well behind a NAT. [15:36] londo: I am happy with rdiff-backup to a different disk for a similar local system [15:36] skvidal: need something to put the data on [15:36] mmcgrath: and we're running out of storage. [15:36] skvidal: and as mmcgrath said [15:36] mmcgrath: right now we're doing a nightly rsync. [15:36] skvidal: bacula and the firewall is sub-optimal [15:36] paulobanon: mmcgrath: can that be requestsed from the budget? a mini storage/robot for backups ? [15:37] mmcgrath: paulobanon: we're looking at different options right now including rsync.net, s3 and a few others [15:37] ricky: Hehe. [15:38] mmcgrath: I'm looking at costs of hosting our backups off site or on site. [15:38] mmcgrath: our options are many but some may just not work out. [15:39] skvidal: [15:39] mmcgrath: I'll take that as a no for right now. [15:39] mmcgrath: mdomsch: whats the most amount of storage we could get in a 2U from dell right now? [15:40] paulobanon: u want to offsite data in what format ? tapes or backup to an external source ? [15:40] yingbull: mmcgrath: I'd need to know requirements and constraints before I could give useful input on backups. [15:40] yingbull: mmcgrath: we might want to define those first. [15:40] caillon has left ( (n=caillon(a)mithril.returnzero.com)) [15:41] mmcgrath: 2T worth of RPMs and 1T worth of other data. [15:41] mmcgrath: The largest restore we'd have (right now) is the 2T worth, hopefully it could be done in a matter of a day or two. [15:41] mmcgrath: using rsync.net under my last estimations, would take about 13 days. [15:41] yingbull: mmcgrath: Length of retention? [15:42] paulobanon: why not buy an LTO3 robot, and just offsite the tapes ? [15:42] mmcgrath: that actually includes the retentions. [15:42] mmcgrath: paulobanon: we don't have a person at the colo. [15:42] skvidal: paulobanon: b/c we lack the facilities for it [15:42] mmcgrath: and we don't have space for it. [15:42] paulobanon: i dont have persons in 5 of my colos [15:42] paulobanon: and i still do it [15:42] mmcgrath: [15:42] skvidal: paulobanon: but I'm guessing you have power [15:42] skvidal: paulobanon: and rack space [15:43] paulobanon: we have space yes [15:43] mmcgrath: thats the other part of this whole mess is trying to figure out whats going in our current colo and what might end up in the new colo. [15:43] paulobanon: 1 EML, doing 1.5T backups [15:43] paulobanon: per colo [15:44] skvidal: paulobanon: how long do you keep your tapes in rotation? [15:44] paulobanon: depends [15:44] mmcgrath: and how much did the tapes + robot cost? [15:44] skvidal: mmcgrath: 24 tape changer from dell for lto3 is $7K [15:44] paulobanon: auth 1year, normal game dbs 7days [15:44] mmcgrath: skvidal: +tapes? [15:44] skvidal: tapes are $70 or so each for a 400GB tape [15:45] paulobanon: skvidal: LTO3 i hope [15:45] yingbull: skvidal: that includes the drive too? [15:45] skvidal: and you need a box that drives them of course [15:45] skvidal: paulobanon: yes [15:45] skvidal: yingbull: last time I checked, yes [15:45] paulobanon: skvidal: check out recall [15:45] * mmcgrath goes on the record saying he hates tapes. [15:45] paulobanon: its what we use to offsite [15:45] paulobanon: they pickup and drop everything [15:46] Renault has joined the group chat (n=couretca(a)AToulon-151-1-34-26.w83-205.abo.wanadoo.fr) [15:46] paulobanon: u just need to have someone to get the tapes in the container [15:46] yingbull: Tapes are useful for offsite. Disk is useful for quick restores. [15:46] mmcgrath: paulobanon: we don't have that though [15:46] mmcgrath: well there's two sides to this. 1) DR and 2) backups. [15:46] mmcgrath: we're just focusing on backups right now. DR is later. [15:46] yingbull: raided SATA disks, that get offsited over the net for extra recovery wouldn't be bad. [15:47] yingbull: That way you've got local restores, but you can rsync/other methods to an offsite location that does have tapes, or another backup system. [15:47] ricky: Wait, what's the current backup situation? [15:47] yingbull: ricky: good question. [15:47] mmcgrath: ricky: we're backing up everything except the koji share. [15:47] mmcgrath: using bacula. with 2 week retention. [15:48] ricky: Ah. [15:48] tibbs has left ("Konversation terminated!" (n=tibbs@fedora/tibbs)) [15:48] paulobanon: mmcgrath: how many cycles ? [15:48] mmcgrath: one full every sunday, incrementals every day. [15:48] paulobanon: so 15/2 [15:48] paulobanon: 15 days / 2 cycles [15:48] mmcgrath: yep [15:50] mmcgrath: The tricky part is funding (we're still working on that in the background) [15:50] mmcgrath: If fedora ends up getting a regular actual IT budget, some of these problems will solve themselves. [15:51] mmcgrath: I'll take the silence as a general "move on" [15:51] paulobanon: [15:51] mmcgrath: anyone have anything else they'd like to discuss? [15:51] paulobanon: when should we start preparing the plan of action for F8 [15:51] paulobanon: better safe then sorry [15:51] paulobanon: not too safe though [15:51] mmcgrath: There are some things we can do now, but in general I've created all the tickets that need to be created. By the final test release we should have most of the website ready at http://fedoraproject.org/_/ [15:52] mmcgrath: then its just a matter of making sure the open tickets for Fedora 8 get done and or moved. [15:52] skvidal: and I should have a listof where everything is [15:52] skvidal: b/c while mike is off gallivanting around on his honeymoon [15:52] skvidal: some of us will be here working [15:52] * mmcgrath can't wait. [15:52] paulobanon: lol [15:52] ricky: Hehe- congrats, by the way [15:52] mmcgrath: just a reminder - http://fedoraproject.org/wiki/Infrastructure/SOP/Release [15:52] mmcgrath: thanks [15:53] paulobanon: take us with u!! [15:53] mmcgrath: and all of those tickets have been created here somewhere - https://hosted.fedoraproject.org/projects/fedora-infrastructure/report/1 [15:53] mmcgrath: I'll ask the future Mrs. mmcgrath. [15:53] paulobanon: [15:55] mmcgrath: Ok, if no one has anything else I'll close the meeting in 30 [15:55] mmcgrath: 15 [15:55] yingbull: I'll just add I'm back from $DAYJOB travel and will be nosing around for work. [15:55] mmcgrath: yingbull: excellent [15:55] mmcgrath: Ok, meeting closed [15:56] mmcgrath has set the subject to Meeting End

1 0

Introduction
by Jima 23 Aug '07

23 Aug '07

Hi folks! As per the "Getting Started" walkthrough, I thought I'd spam you guys with a brief rundown of who I am, although I'm sure a number of you already know. My name is Patrick Laughton, although most people who know me call me Jima (yes, IRL, too). I hail from the Great White North -- Minneapolis, MN, or thereabouts. (That's in the Central US time zone, CDT/GMT-5.) I've been maintaining Linux boxen for maybe ten years, seven of those professionally. I started out with Slackware (how's that for cutting your teeth?), but long ago moved to Red Hat, and then Fedora. Like many in Fedora Packager Land, I got started because as a sysadmin, there were often packages I needed that weren't otherwise easily available. So I packaged what I needed, threw them in a repository, and went on my merry way. What a pain. I joined Fedora Extras about 16 months ago to offset some of that heavy lifting. In addition to making sure everything I needed was in Fedora, I took on some orphaned packages, and generally looked for other ways I could help out the project. That's what brings me to Infrastructure; to see if any of my possibly mediocre skills as a sysadmin might in some way benefit the bigger picture. I'll be up-front: I'm not a programmer. I can't code worth crap. I know a little C (not C++), my perl talents are decent (if sloppy and roundabout), but I can shell script like mad. I'm fairly comfortable with Apache, BIND, dnsmasq, Exim, OpenSSH, Postfix, and Sendmail. Okay, if it's a daemon, I'm probably not too bad with it. I've played with Nagios and MRTG on and off over the years, as well. More recently (in the last year or so) I've gotten fairly good at working with Xen. Not KVM, sadly, due to my general lack of machines with hardware virtualization capabilities. My SCM, database, and clustering skills leave a lot to be desired, mainly because I haven't had any real use for them in my job. Also, I'm entirely useless at design, unless you like plain, unformatted text, and stick figures. Anything HTML is liable to be compliant, just ugly and/or boring. I don't have any specific goals in mind for getting into Infrastructure; as I said, I'd be happy to help out with anything that could use some extra hands. I think that pretty well covers things. Geez, I should have just updated my resume; it might have been easier, if a little more glossed-over. Have a nice day. Jima

3 2

Bugzilla Upgrade breakage
by Toshio Kuratomi 22 Aug '07

22 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey guys, The bugzilla upgrade planned for this Friday will break the FAS => Bugzilla sync. The problem is that the current method of syncing is: 1) cron job fires 2) everyone is removed from the bugzilla fedora_contrib group. 3) everyone in fedorabugs is added to the fedora_contrib group In the migrated system, we are not going to be able to do step #2 (because we will no longer have access to the db and there's no xmlrpc call to do it.) I'm planning on introducing this kludge to make things work: 1) user is removed from fedorabugs. 2) user is added to a new FAS table with a remove flag: bugzilla_queue 3) user is added to fedorabugs 4) user is added to bugzilla_queue with an add flag 5) cron job fires 6) user in bugzilla_queue are added or removed from fedora_contrib according to the flag. 7) user is removed from bugzilla_queue 8) repeat from #6 until no more users in queue. Unless someone can come up with a better method, I'll be implementing this today. - -Toshio -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFGzLUoX6yAic2E7kgRArVvAJ4vm2V8s027/eJDOZrcTiHLyiyNMQCgsqMD Rt8/ndty/iMU7w7W1sbiyYk= =deuI -----END PGP SIGNATURE-----

3 4

Asterisk on the wiki
by Mike McGrath 21 Aug '07

21 Aug '07

I've created a start asterisk page on the wiki. Please take a look / change it so it makes sense. Also anything to add to the troubleshooting section will be much appreciated. Just think about any issues that came up when you were connecting. http://fedoraproject.org/wiki/Infrastructure/Asterisk -Mike

3 6

Turbogears and memory usage
by Mike McGrath 20 Aug '07

20 Aug '07

App3 and App4 are pretty much dedicated to turbogears apps. Right now pkgdb, smolt and mirror manager. I've noticed app3 and app4 are both swapping pretty bad. I was hoping some of the application owners (and general community) could investigate further and verify that the applications are behaving properly and look to see if there are more efficiencies we could gain. App3: apache 1741 0.5 5.3 506168 110048 ? Sl Aug17 15:54 /usr/bin/python /srv/tg/pkgdb/pkgdb/start-pkgdb.py /srv/tg/pkgdb/prod.cfg apache 13509 2.2 31.1 1418520 638624 ? Sl Aug13 196:05 /usr/bin/python /srv/tg/mirrormanager/start-mirrors.py prod.cfg apache 13511 13.8 7.1 677396 147376 ? Sl Aug13 1235:14 /usr/bin/python /usr/share/smolt/smoon/start-hardware.py prod.cfg App4: apache 6951 0.2 1.8 226308 17632 ? Sl Aug15 12:02 /usr/bin/python /srv/tg/pkgdb/pkgdb/start-pkgdb.py /srv/tg/pkgdb/prod.cfg apache 18055 3.0 39.9 910332 384916 ? Sl Aug13 268:21 /usr/bin/python /srv/tg/mirrormanager/start-mirrors.py prod.cfg apache 18057 0.6 6.6 233648 63908 ? Sl Aug13 54:06 /usr/bin/python /usr/share/smolt/smoon/start-hardware.py prod.cfg -Mike

3 2

Builder monitoring
by Mike McGrath 16 Aug '07

16 Aug '07

We've recently started taking a closer look at the builders and as a result we've been getting many notifications. As a baseline, the builders need some work. One thing we've been getting alerted of is memory usage, in particular less than 10% swap free. We have a couple of options. 1) stop monitoring swap on the builders 2) reduce resolution on the builders (check less often and require more failures in a row before notification, right now is 3 failures in a row results in a notification) 3) increase swap (presently about 1G / core so between 2G and 8G of swap on the boxes) Build guys! What do you think? -Mike

3 3

Builders and mock
by Mike McGrath 16 Aug '07

16 Aug '07

Don't upgrade mock on the builders! Long story short, xenbuilder2 was having issues earlier this week staying up. Hoping it was a known problem I yum updated the box. Mock was updated. Some of these updates, however, were with the exit code. We had many builds return a successful result even though the build failed. Jesse is looking into this and following up with the mock people. I've since rolled back to the previous version - 3.0.6-1.fc6 That is all :) -Mike

4 12

ssl on publictest dev apps
by Luke Macken 15 Aug '07

15 Aug '07

There are a handful of development instances of various apps running on our publictest systems, most of which don't support SSL. This is obviously not a good thing, so I'm proposing that we either enable SSL on these apps, or disable the FAS identity provider and provide local guest accounts on the local SQLite dbs. luke

4 4

wikidbase
by Seth Vidal 15 Aug '07

15 Aug '07

reading rss feeds last night - I think this is something we could use eventually: http://www.nickblundell.org.uk/projects/wikidbase/overview/ I realize it's using django - but if there's something like it for turbogears I'd be all ears. A simple way of letting an end user dynamically create a database and automatically have the web forms to go with it would go a long way for a lot of things we'd want to record. thoughts? -sv

3 3

sobby instance
by Luke Macken 13 Aug '07

13 Aug '07

Hey guys, I setup an instance of the stand-alone gobby server on publictest2, per the gobby RFR[0]. This will allow anyone to collaborate in real-time on any text: spec files, code, notes, ideas, etc. You can test it out by installing 'gobby' and connecting to publictest2.fedora.redhat.com If we want to commit to hosting this service, there are a bunch of stuff that we need to do and test first, but I'm just looking to get some initial feedback from you guys on it. Hopefully we can get a bunch of use out of it during the Virtual FUDCon this week. luke [0]: http://fedoraproject.org/wiki/Infrastructure/RFR/gobby

2 1

The asterisk paradox
by Mike McGrath 10 Aug '07

10 Aug '07

There was some discussion at the last meeting about how to use asterisk in the future for meetings or even if we should. This has brought up an interesting problem: Early adoption of asterisk is slow because not everyone has the equipment to use it. People don't feel compelled to get the equipment because adoption is slow. So what do we do about it? I feel very strongly asterisk as a medium is much more efficient to use then IRC and helps bring the team together to work as a more cohesive unit. I also believe it will do the same for other groups. But we cannot do the meetings in asterisk at this time because it raises the barrier to entry by too much and provides no meeting logs. So I'd like to propose the following possible solutions. 1) Meet 15 minutes before or after the meeting for a supplemental-meeting in asterisk to shake out some things. Then continue with the meeting in IRC as normal. 2) Meetings in IRC are generally very slow, it might be worth it to do the meetings as normal but also have people log in to asterisk to bs and generally just chat, get to know each other a bit better. 3) Do as we did last week, have people who can't talk join the conference anyway and ask questions in the chat room while having someone transcribe and provide minutes. 4) ? you come up with some. In general I think 2) is most practical for now. I'd prefer 3) since I think everyone can have headphones and listen in to the main meeting and ask questions in IRC but having someone volunteer to transcribe / summarize the meeting is a huge commitment. This is a big change for us, having said that I think anyone who has used the technology will agree that it works very well. It will work even better as people start to use it more and get used to their equipment and more people feel the need to get a proper mic/head set. Fedora is very much about new technologies and early adoption. I'd love for us to be the first OSS community to use asterisk like this, and of course if Fedora is going to use it, the Infrastructure team should lead the way. Having said that, any changes like this are raising the barrier to entry and that is just a dangerous thing to do. As long as we still have IRC I think we'll be fine but this is something we must choose as a group. Thoughts? -Mike

5 6

RE: The asterisk paradox
by Michael Yingbull 10 Aug '07

10 Aug '07

> In general I think 2) is most practical for now. I'd prefer > 3) since I think everyone can have headphones and listen in > to the main meeting and ask questions in IRC but having > someone volunteer to transcribe / summarize the meeting is a > huge commitment. I don't think meeting minutes would be an issue. I'm used to them for work meetings, others likely used to similar. Not a word for word dictation, just a summary of discussion points, decisions, action items. We don't need to go all Robert's Rules on this, but good meeting minutes are golden. Just have someone makes the notes summarizing the discussion into the irc channel. Those that had to step away from the meeting could catch up, but more importantly, it gives us a written record of a voice-based meeting. The other barrier to voice meetings that I don't think was mentioned was that it requires good spoken english, rather than just written english (and the ability to understand it). Having summaries written as the meeting progresses might help that. Lunch is far too short, Cheers - Michael

1 0

Infrastructure Meeting minutes/log - August 9/2007 20:00 UTC
by Michael Yingbull 10 Aug '07

10 Aug '07

[14:02] =-= mmcgrath has changed the topic to "Infrastructure -- Role Call" <mmcgrath> Who's here? * loupgaroublond |<-- jeremy has left freenode (Remote closed the connection) |<-- warren has left freenode (Remote closed the connection) * ricky is * lmacken [14:03] [ERROR] Missing required parameter action. * yingbull is. * mmcgrath waits a moment for the others <mmcgrath> f13 abadger1999 skvidal jcollie + anyone I missed, ping -->| warren (i=warren@nat/redhat/x-6e7a7944c89202d3) has joined #fedora-meeting [14:04] <f13> I'm sort of here * abadger1999 here <mmcgrath> K, we'll get started on tickets first =-= mmcgrath has changed the topic to "Infrastructure -- Tickets" <mmcgrath> https://hosted.fedoraproject.org/projects/fedora-infrastructure/query?statu… <https://hosted.fedoraproject.org/projects/fedora-infrastructure/query?statu…> [14:05] abadger1999: Whats the latest on #15, I see you added it to be discussed. <abadger1999> We're deployed :-) Packagedb is running on app3 and 4. -->| cwt (i=hidden-u(a)gnat.asiscan.com) has joined #fedora-meeting [14:06] <abadger1999> owners.list and pkg.acl are now obsolete. <mmcgrath> excellent, so whats the plan for notification, etc. they're obsolete as of right this moment? * wolfy taking notes <abadger1999> mmcgrath: That's right. I sent a message to fedora-devel-anounce that went out this morning. [14:07] The cvsadmins have been finding bugs for me. I'm planning on squashing those for 1-2 weeks and then letting packagers know that they can do a lot of the things for themselves now. [14:08] <mmcgrath> abadger1999: did the announcement actually get approved, I'm not seeing it. <abadger1999> Someone replied to it so I'm pretty sure. [14:09] <mmcgrath> k, I won't worry about it then. abadger1999: how much more work do you think will be done on it over the next couple of weeks? <abadger1999> https://www.redhat.com/archives/fedora-devel-announce/2007-August/msg00006.… <https://www.redhat.com/archives/fedora-devel-announce/2007-August/msg00006.…> <mmcgrath> bug fixes, etc. <abadger1999> Here's the trac roadmap: https://hosted.fedoraproject.org/projects/packagedb/report/3 <https://hosted.fedoraproject.org/projects/packagedb/report/3> [14:10] I'm planning on fixing most of 0.3.1 in the next two weeks. With things like buggbot being pushed off if there's a glut of other bugs that haven't been mentioned yet. [14:11] <mmcgrath> <nod> are you using the production database? <abadger1999> Yes. Production db is pkgdb on db2. <mmcgrath> excellent. <abadger1999> There's a test db on publictest1 as well. [14:12] <mmcgrath> Ok, well good job with that. It will be most helpful :) anything else before we move on? <abadger1999> That's it :-) -->| frozty_sa2 (n=frozty@unaffiliated/froztysa/x-364721) has joined #fedora-meeting [14:13] <mmcgrath> The next ticket is for paulobanon but I don't see him around right now |<-- frozty_sa has left freenode (Nick collision from services.) <mmcgrath> jcollie: ping? ricky: ping? [14:14] <ricky> pong- Sorry, no updates on the wiki yet- I've been looking more on FAS2 recently. <mmcgrath> ricky: no worries on that, FAS2 is far more important. Ok, so thats it with the tickets, we'll move on to the schedule <ricky> I got a look at ikiwiki, though, and it does look pretty cool. [14:15] <mmcgrath> http://fedoraproject.org/wiki/Infrastructure/Schedule <http://fedoraproject.org/wiki/Infrastructure/Schedule> ricky: cool So the VCS choice is still on going, we need to setup another meeting. jcollie must be busy with $DAYJOB :) [14:16] =-= mmcgrath has changed the topic to "Infrastructure -- Sponsorship" <mmcgrath> Nothing majorly new here, I've taken on two sponsors though I almost never hear / see them. good thing I put a time limit on those things :) anyone have any comments / questions about the new sponsorship model? Good/bad? [14:17] <loupgaroublond> +1 |<-- llaumgui_ has left freenode (Remote closed the connection) <abadger1999> It seems good but I haven't had anyone approach me... I approached the last person I sponsored. -->| jeremy (i=katzj@nat/redhat/x-60b507eb562111d2) has joined #fedora-meeting <mmcgrath> abadger1999: yeah, I think it will be hit and miss for a while. Though, in general, it feels like the group is growing at a good rate. [14:18] =-= mmcgrath has changed the topic to "Infrastructure -- SOP's" <mmcgrath> I've been working on some more SOP's, as always we can use more people to write these things up. Thats really all there is to the SOP stuff on the schedule, if anything isn't documented that should be please add it or at least bring it up on the list so someone else can document it. Going to be a short meeting I think :) [14:19] =-= mmcgrath has changed the topic to "Infrastructure -- Open Floor" <mmcgrath> Anyone have anything they'd like to bring up? Seems a lot of people are missing today with $DAYJOB or other things. <yingbull> Just wanting to say hello. I'm looking to get involved, so this is the first meeting I'm at. I've been lurking in the fedora-admin channel the last week. [14:20] <lmacken> yingbull: welcome! <mmcgrath> yingbull: hello, I saw your introduction on the list. <ricky> Welcome :) <mmcgrath> One thing I'd like to ask people is about the asterisk setup. <loupgaroublond> do we have any quote unquote web apps aside from smolt, and maybe bodhi, that the end user will see? <mmcgrath> loupgaroublond: we have many [14:21] loupgaroublond: you talking about the ones we build in house or all apps? <loupgaroublond> do they have any semblance of a release cycle? <abadger1999> pkgdb and koji are the same class as bodhi <mmcgrath> they all have their own release cycles. <loupgaroublond> i had some funny questions about the smolt web server, since it's not bound to the fedora release cycle the way the client is [14:22] and i just want to get some ideas what the usual fedora way is <mmcgrath> loupgaroublond: each project is, generally, considered its own upstream. The release cycle somewhat follows the normal Fedora release cycle if something is needed for that release. [14:23] but in general the devs are up to their own means to produce code and an actual release. <loupgaroublond> oh ok just wondering :) <mmcgrath> <nod> [14:24] ok, so back to asterisk. we've got most major pieces in order, the problem with using it is that we're raising the barrier to entry into the group for meetings and such. So the question is, is it worth it or not. [14:25] Thoughts ? [14:26] * bpepple|lt listens to the crickets. <yingbull> Its easier to juggle irc w/ $DAYJOB. <weirdguy> (opinion of a lurker) imho, asterisk can be interesting if some sort of transcript or recording is available (both for lurkers like me or for ppl who happen to be busy during meeting times <abadger1999> FWIW, I liked quaid's post on the mailing list. <loupgaroublond> it's hard to replicate the information in real time for people that don't always have the option to use it <mmcgrath> abadger1999: I did too though, it seemed to lack any suggestions about what to do about it. [14:27] <loupgaroublond> i suppose you would always say, any one object to using asterix this time around and then downgrade to IRC -->| JSchmitt (n=s4504kr(a)p54B130B9.dip0.t-ipconnect.de) has joined #fedora-meeting <mmcgrath> We had a lot of people who could at least listen in and comment in IRC last time, headphones don't seem too high of a barrier to me but I question how practical that is. <loupgaroublond> bandwidth <mmcgrath> We may know more after FudCON. [14:28] loupgaroublond: I don't think bandwidth is any real concern, not that I've heard anyway. <abadger1999> loupgaroublond: The only danger there being, people don't want to be disagreeable even if it excludes them from having meaningful input. <yingbull> Would someone take minutes for the meeting, or would we just rely on a recording? [14:29] <ricky> Recording is actually really easy with Asterisk, from what I've seen. <mmcgrath> yingbull: not sure, thats something to figure out. <yingbull> mmcgrath: I'd suggest both. <loupgaroublond> is that legal sans disclaimer? <yingbull> mmgrath: Its easier to review a bunch of past meeting minutes, than it is to listen to a bunch of recordings. <ricky> But I guess the main thing is to outline the benefits of voice meetings over IRC first. [14:30] |<-- bpepple|lt has left freenode ("Ex-Chat") <mmcgrath> no doubt, perhaps it would be good to take this to the list [14:31] -->| xDamox (n=xDamox(a)host81-153-39-144.range81-153.btcentralplus.com) has joined #fedora-meeting <mmcgrath> Ok, anyone have anything else to discuss? If not we can close the list. [14:32] err close the meeting :) * mmcgrath will close in 30 [14:33] <mmcgrath> 15 =-= mmcgrath has changed the topic to "Infrastructure -- Meeting end" <mmcgrath> thanks for coming everyone. [14:34] <abadger1999> Thanks for running the meeting -- Michael Yingbull

1 0

Vacations
by Paulo Santos 10 Aug '07

10 Aug '07

Hi all, Just to let you guys know that ill going on vacations for one week, starting later today. So if vpv or Rayvd need any help, please assist them, since usually its me take care of their stuff. happy work & coding :) Thanks, Paulo

1 0

Features for Fedora Project PBX 1.0
by Jeffrey Ollie 09 Aug '07

09 Aug '07

Testing has been going well, and people seem to like/want/need the service so I thought that we should nail down what features we want in the "Fedora Project PBX 1.0". Here's a list based on what I'd like to see and what I've gathered from IRC/email/voice conferences. 1) Permanent voice conferences for various Fedora subgroups. Conferences identified so far: fedora-board virtual-fudcon infrastructure art Other permanent voice conferences would be requested through a Fedora Infrastructure ticket. Larger conferences may need some sort of moderation system. Open question: should anonymous SIP callers be allowed to talk on the permanent conferences or should they be listen-only? Status: basic conferencing is working, moderation features are lacking in conferencing application and need to be developed. 2) Conferences should be able to be recorded. Status: in development. 3) Ad-hoc voice conferences. Anyone with a FAS account would be able to request an ad-hoc voice conference (optionally controlled via a PIN) through a web interface. Ad-hoc conferences would expire after a short time (24 hours?). These conferences would likely remain relatively small so moderation features would not be needed. Status: The web interface has not been started but Seth and I have the PBX side mostly working. 4) SIP accounts for anyone with a FAS account that requests them so that sip:<username>@fedoraproject.org would forward calls to your softphone. IAX2 accounts would be available for "power" users. Numeric extensions will be assigned for those situations where it's more convenient to dial by number rather than name. Status - design is nearly complete, need to automate account creation and more testing. 5) Every SIP account would have voicemail. Instead of storing the messages locally, audio files will be forwarded to <username>@fedoraproject.org. Status - testing the design, depends on automatic creation of accounts from FAS. 6) Access conferences and people from the PSTN (e.g. your cell phone). A US DID number will be obtained from an ITSP and forwarded to the Fedora Project PBX. DID numbers in other countries may be obtained if there is enough need and the costs are reasonable. Status: some testing has been done but a permanent ITSP needs to be identifed and an IVR needs to be developed so that all of the features can be accessed from the PSTN. 7) Documentation on how to set up Ekiga (for Gnome) and Twinkle (for KDE) needs to be developed. Other SIP clients will work, but you're on your own. Status: not started. 8) The PBX is currently running on publictest4 - need to identify permanent host and move the setup there. Firewall may need fixing up, puppet needs to be set up, and Nagios monitoring configured. Probably need a sysadmin-pbx group set up so that the appropriate individuals can manage the system. Status: not started. Jeff

8 10

Introduction
by Michael Yingbull 09 Aug '07

09 Aug '07

Just a quick note of introduction. I'm looking to get involved with the infrastructure team for Fedora. I consider this a rather delayed reaction from Spot's talk on rpm best practices at the Summit this year. He included a shameless plug for volunteers, which I'm usually a sucker for. Just happened to start having some time now. I've been working in IT in a number of roles for the last 10 years, most of which involved RH Linux and RHEL, along with other OSes. I'm firing this email off in a delayed (brief) lunch break; most of my contributions will be in my own time, but my employeer is flexible with respect to the weekly meetings. As most IT folks know, its not hard to make up hours as the work queue can seem rather infinite at times..... My current role is managing a ~500 RHEL system network, in various roles, helping keep things running, while not running us off our feet. I've a fair range of skills, when I get a better idea of what you're looking for its easier for me to speak to it. I'm an RHCE, with one of my RHCA endorsements (Systems deployment/management). I've been at the last couple RH Summits, and have afew other IT certs that I may admit to at a later time :-). Looking forward to meeting your all, and finding where I could be of assistance. Cheers, Michael -- Michael Yingbull

1 0

Cleaning up fedora-accounts
by Toshio Kuratomi 08 Aug '07

08 Aug '07

I've been working on this infrastructure ticket: https://hosted.fedoraproject.org/projects/fedora-infrastructure/ticket/63 which is to port all bugzilla scripts away from touching the db directly and instead using the xmlrpc interface. Of the scripts I found, I think that two are not needed: * bz-gen-state.py * bz-dump-components.py If anyone knows of someplace where these are used please reply and let me know by Thursday otherwise I'm going to cvs remove them. Thanks, -Toshio

1 0

Request For Resource: Hosting GSoC code
by Debarshi Ray 06 Aug '07

06 Aug '07

I am working as a student with The Fedora Project (http://fedoraproject.org/wiki/SummerOfCode/2007/DebarshiRay) in this year's Google Summer of Code, and would like to host the project on hosted.fedoraproject.org. I have filled out the given template for requesting resources, which you can find at https://fedoraproject.org/wiki/Infrastructure/RFR/RUM I have one doubt though. Who is supposed to fill the "Expiration Date (required)" field? Thanks, Debarshi -- GPG key ID: 63D4A5A7 Key server: pgp.mit.edu

3 5

Meetings
by Mike McGrath 06 Aug '07

06 Aug '07

Last weeks meeting with IRC+SIP went pretty well. Couple of notes: 1) We need to make sure everyone gets setup at the right volume 2) We need a good transcriber for each meeting where IRC and SIP is used 3) We need to find out why some people have been unable to connect 4) A wiki page would help. 5) We never did get recording setup. So my question for those on the list. We had 14 people at its max listening in. Was this useful to everyone? Was it better then IRC, same as IRC or worse then IRC? If given the opportunity would you like to continue doing meetings via asterisk/callweaver? -Mike

5 5

got sponsorship for my RFR
by ria das 06 Aug '07

06 Aug '07

Hi, I got the sponsorship for my RFR. Here is my RFR link: http://fedoraproject.org/wiki/Infrastructure/RFR/mitwi So may I know when will I get those things as specified in the RFR :-) Ria Das

2 2

conference testing
by Seth Vidal 06 Aug '07

06 Aug '07

Hi folks, if you would like to join and test the pin'd conferences please connect to: conferences(a)fedoraproject.org conf num: 23112 pin: 27705 -sv

1 0

[Fwd: Build Error (Job 35483): zope-2_9_8-1_el5 on fedora-5-epel]
by Jonathan Steffan 06 Aug '07

06 Aug '07

Not sure if this is something I am supposed to deal with. -------- Forwarded Message -------- From: buildsys(a)fedoraproject.org Subject: Build Error (Job 35483): zope-2_9_8-1_el5 on fedora-5-epel Date: Mon, 6 Aug 2007 13:20:58 -0400 (EDT) Job failed on arch ppc Build logs may be found at http://buildsys.fedoraproject.org/logs/fedora-5-epel/35483-zope-2.9.8-1.el5/ ------------------------------------------------- Time: Mon Aug 6 09:49:06 2007 Target: fedora-5-ppc-epel UID: 13de9694f9fa14d3663bdddeb169de02cbbc8525 Architecture: ppc SRPM: https://extras64.fedoraproject.org:8886//fedora-5-epel/35483-zope-2.9.8-1.e… Starting download of https://extras64.fedoraproject.org:8886//fedora-5-epel/35483-zope-2.9.8-1.e…. Retrieved https://extras64.fedoraproject.org:8886//fedora-5-epel/35483-zope-2.9.8-1.e…. Waiting for repository to unlock before starting the build... Job waited too long for repo to unlock. Killing it... Killing build process... Cleaning up the buildroot... /usr/bin/setarch ppc32 /usr/bin/mock clean --uniqueext=13de9694f9fa14d3663bdddeb169de02cbbc8525 -r fedora-5-ppc-epel Killed. Waiting for child process 3005 to exit. Output File List: ----------------- Output File: https://ppc3.fedora.redhat.com:8889/13de9694f9fa14d3663bdddeb169de02cbbc852… ----------------- ----------------------- Job failed because it was killed.

1 0

Fedora 8 Target
by Mike McGrath 05 Aug '07

05 Aug '07

Fedora 8 Test 1 is on its way out the door and I thought I'd take this time to list all of the outstanding issues we need to get implemented for F8: https://hosted.fedoraproject.org/projects/fedora-infrastructure/query?statu… Most of these processes are owned. If you are the owner and can't work on it or don't want to for whatever reason, please switch it back to nobody. For those of you interested in helping one of these tasks, please add yourself to the cc and make a note. -Mike

3 4

[Fwd: f6-mirrors infected wit f7-f8 packets]
by Rahul Sundaram 05 Aug '07

05 Aug '07

2 2

[Request for hosting] Nodoka Theme upstream
by Martin Sourada 04 Aug '07

04 Aug '07

Hallo, I'd like to host the Nodoka Theme [1] upstream sources/bugzilla/SCM on the fedora hosted. Currently the sources are accessible via fedoraproject wiki [2]. I didn't find much documentation however how to properly request for the hosting, but was pointed to this list. I hope you will help and make it possible. Thanks, Martin References: [1] http://fedoraproject.org/wiki/Releases/Features/NodokaTheme [2] http://fedoraproject.org/wiki/Artwork/NodokaTheme

2 2

SOP - Release
by Mike McGrath 04 Aug '07

04 Aug '07

I've created a standard operating procedure for a release. We'll be following it for Fedora 8. http://fedoraproject.org/wiki/Infrastructure/SOP/Release Please comment and add information that I've forgotten. Jesse, if I've put something in there that is release engineerings job, just let me know so we don't duplicate work. (For example, I'm not sure what team should coordinate with art and websites to make sure the new graphics get made and stuff) We should also add an SOP for the torrent creation and other pieces that might need to be done. -Mike

2 1

Proxy HTTP log policy
by Paulo Santos 03 Aug '07

03 Aug '07

Hi guys, Proxy1 and Proxy2 were getting without space, so i took the opportunity to run clear up a bit of space... I've ran this and think we should cron it: sudo -u apachelog gzip `sudo -u apachelog find /var/log/httpd/ -mtime +7` - gzip everything in /var/log/httpd that has more then 7 days And discuss how many days before they are removed: i would say 60 days (tops), unless we can get a data-warehouse collector for long term logs. Thanks, Paulo

4 3

Error with old build system web interface
by Orion Poplawski 03 Aug '07

03 Aug '07

Getting: Error was: [('SSL routines', 'SSL3_READ_BYTES', 'sslv3 alert certificate expired'), ('SSL routines', 'SSL3_WRITE_BYTES', 'ssl handshake failure')] -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA/CoRA Division FAX: 303-415-9702 3380 Mitchell Lane orion(a)cora.nwra.com Boulder, CO 80301 http://www.cora.nwra.com

2 2

need sponsor for my RFR (SoC project)
by ria das 03 Aug '07

03 Aug '07

Hi, I need sponsor for my RFR (SoC project). http://fedoraproject.org/wiki/Infrastructure/RFR/mitwi Thanks in advance Ria Das

2 1

Hosting repos that are not upstream
by Mike McGrath 02 Aug '07

02 Aug '07

We need to come up with a solution for hosting repos that aren't upstream. We have hosted (which I assume is for upstream projects only). And we have fedorapeople. Problem: Branches are cheap, creating groups, storage, etc for them is not (especially if its just for one or two people) Is hosted our solution for this? -Mike

6 12

Meeting today
by Mike McGrath 02 Aug '07

02 Aug '07

After an initial trial yesterday we would like to use asterisk or callweaver today for the meeting. What does this mean? Well.... Voices. Part of this is to get us ready for the virtual fudcon coming up. Those wishing to participate must have at least a headset, a microphone is also preferable. Those without a mic can also just join and mute themselves and listen. We'll be recording the meeting so interested parties can play it back later. This just got setup so we're still working out the kinks, we may bale at any moment and just do the standard #fedora-meeting (We will be in #fedora-meeting for people to ask questions, especially for those without mics but who are listening in) If you are interested please go to #fedora-admin prior to the meeting today and get setup so that we can make sure you aren't causing tons of extra noise, feedback, etc. Suggested clients: kde - twinkle gnome - ekiga other - linphone Any sip client should work though. Let us know if you have any questions. -Mike

2 2

Formal Introduction
by Anand Capur 02 Aug '07

02 Aug '07

Hello, I am Anand Capur and I have been on this list for quite a while, but never really introduced my self. I am interested in joining the sysadmin-noc group. I have put in my request for the sysadmin group. I am experinced with apache, xen, fedora (duh...), load balancing, server monitoring, and fixing general problems. As well as some PHP and HTML. I am also interested in helping with the Infrastructure SOP. I have had 5+ years of experience with all of this, as well as being a Fedora Ambassador. I currently live in Ohio, and in the Eastern Time Zone (EST). I'm interested in being on the team, because I feel I could help out and give back to fedora. Thanks, Anand Capur

2 2

Re: Hosting repos that are not upstream
by Jim Meyering 02 Aug '07

02 Aug '07

Hi, FYI, for the last week or so I've been mirroring-to-git a couple of sourceware-hosted CVS repositories: http://thread.gmane.org/gmane.linux.kernel.device-mapper.devel/3758 Why? In case it's not obvious (beyond the dVCS distributed vs. non-distributed argument): you can do a lot of things so much more efficiently using Git than with CVS, that this effort has been well worth my time, if only in removing frustration with CVS :-) For example, now I no longer have to endure cvs-diff's network-related delays. Same for annotating and searching logs or old deltas. Since a few people on those two projects said they too would appreciate a public git mirror, I went ahead and published my repository and polished the script to keep things synchronized via cron. For those using a CVS repository, getting to know their code through a read-only Git mirror is a good introduction to using a better version control system. Providing a service like this to arbitrary projects might have few down sides (increase disk use, true, but no need to backup, since the mirror is effectively read-only; also, note that in my experience, the Git repository is usually only about 20-25% the size of the CVS repository). But I think there are more pros than cons. There might even be a net decrease in bandwidth requirements when providing a git mirror of a fedora-hosted CVS repository, since the git protocol is so much more efficient. The bits of infrastructure I use to mirror those two repositories (as well as emacs and gnulib at savannah) are general enough that it is now trivial for me to mirror more on git.et.redhat.com. However, providing a fedora-sponsored service like this would be better for several reasons: - better (and "official") support - it's best to keep the mirrored-to Git repo as near as possible to the CVS repository (efficiency and security), so for CVS-based Fedora- hosted projects, it's best if any Git mirror is also Fedora-hosted. - more visibility, good PR for Fedora - help introduce people to distributed version control Feedback welcome (feel free to tell me that I'm crazy and you hate Git -- you won't be the first :-) Jim

1 0

publictest4,publictest5
by Mike McGrath 01 Aug '07

01 Aug '07

Publictest4 has been renamed to publictest5, publictest5 has been renamed to publictest4. This should have the largest impact on glezos and the translations stuff (sorry for the short notice) let me know if anything is borked. -Mike

1 0

pythondeps.sh and python not found...
by Oliver Falk 01 Aug '07

01 Aug '07

Look at the build.log from gettext for example (http://koji.fedoraproject.org/koji/getfile?taskID=84453&name=build.log) /usr/lib/rpm/pythondeps.sh: line 8: python: command not found Better do which python >/dev/null 2>&1 if [ $? == 1 ]; then exit 0; fi before calling python. Yes, it's cosmetic.... -of

1 0

New fedora-python in the infrastructure repo
by Toshio Kuratomi 01 Aug '07

01 Aug '07

This version has a fix to allow the tg FAS provider to work on the new TG built for F7 and a BaseClient class that can form the basis of a TurboGears client (CLI or GUI). For those who have been looking at the snapshots of the client code, this version has several bugfixes and changes that should make it work better including the ability to reauthenticate id the session cookie has expired. -Toshio

1 0

Re: Status Page!
by Michael Hideo Smith 01 Aug '07

01 Aug '07

On Tue, 2007-07-31 at 19:19 +0530, Ankitkumar Rameshchandra Patel wrote: > Does this status page gets updated at some interval (Hourly, daily, > weekly) ? OR > It's just static, taken from releases (head, f-7, f-6, etc) snapshots.? > > http://translate.fedoraproject.org/releases/fedora-8 > Can someone from the infrastructure team answer Ankit's question? Cheers, Mike

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure August 2007