changed owner of git repos
by Jon Stanley
Just FYI, I changed the owners of the git repos on hosted1 to be the
first administrator found in their FAS group, since there was a ticket
complaining that everything was owned by 'root'. Now you can see real
owners at http://git.fedorahosted.org for the most part.
If you disagree with the assignment of who the owner is, please either
change the directory owner directly on hosted1 if you have access, or
let me or someone else in sysadmin-hosted know and we'll take care of
it.
Thanks!
-Jon
11 years, 4 months
Re: ssh_host_keys
by Till Maas
On Wed December 10 2008, Mike McGrath wrote:
> On Wed, 10 Dec 2008, Mike McGrath wrote:
> > I've not actually used global ssh_known_hosts before, I wouldn't be
> > surprised if it causes issues in some of our scripts that might have a
> > conflicting ~/.ssh/known_hosts. Lets keep our eyes open.
If there is a conflict, then the public key of the host the script connects to
will probably not match. Therefore there is a problem anyways.
> http://fedoraproject.org/wiki/Infrastructure/SOP/ssh_known_hosts
I suggest to use
echo app1,10.8.34.59 $(cat /etc/ssh/ssh_host_rsa_key.pub)
on the regarding machine instead of
ssh-keyscan -t rsa app1,10.8.34.59
on a remote machine. Otherwise there may be still a small window of
opportunity for a mitm attack.
Regards,
Till
11 years, 4 months
ssh_host_keys
by Mike McGrath
We are now distributing an ssh_known_hosts file to all of our servers.
This means that you can blow away your ~/.ssh/known_hosts file. When
servers get rebuilt either replace it with the old ssh key, or update the
puppet/modules/ssh/files/ssh_known_hosts file with the new key.
I've not actually used global ssh_known_hosts before, I wouldn't be
surprised if it causes issues in some of our scripts that might have a
conflicting ~/.ssh/known_hosts. Lets keep our eyes open.
-Mike
11 years, 4 months
OBS
by Mike McGrath
In case you guys are curious I just got a note that the OpenSuse Build
Service now supports Fedora 10. I thought I'd pass it along.
-Mike
11 years, 4 months
upgrading puppet
by Mike McGrath
I'm going to do our puppet upgrade today, it may start to fail on some
boxes while I'm in the process.
-Mike
11 years, 4 months
Trimming up our ks script
by Mike McGrath
I'm working to trim up our kickstart scripts to make them include far
fewer packages. This is bound to cause problems during our transition.
Our current puppet configuration probably assumes packages are installed
that will no longer be there. We'll have to explicitly define these needs.
Initial tests show significant savings though. On the xen servers its
over 200 packages fewer.
Just keep an eye on things as we rebuild some infrastructure and migrate
to our new xen servers.
-Mike
11 years, 4 months
introduction
by Michael Flack
hi everyone
just a email to introduce myself i have been using linux for about the
last 6 years at home and would like to to help out with system admin
i have had some experience with bash scripting, apache, bind, DHCP and
samba there is still a lot for me to learn and that is why i am here
i hope you guys can find something for me to do
Michael
11 years, 4 months
Just warming up...
by Michael Semcheski
Hello,
Just thought I'd introduce myself. I popped into #fedora-admin (nick:
mhs), and then ended up deciding to join this list and try to help out
a bit.
I'm a C++ developer for a lab in a University, and I also am
responsible for a couple of servers, and some Xen virtual private
servers for my own web sites. And, I'm a member of the Western
Pennsylvania Linux User's Group
(http://www.wplug.org/wiki/User:Mhs)...
So, with that said, I'm a big fan of Fedora, and I'm going to try to
find a way to help out. I'm modelling a lot of the infrastructure I'm
responsible for after the way Fedora has done things, because I'm
impressed by it. It seems like there are some people who know what
they're doing in charge, and I'd like to learn a bit more.
Thanks,
Mike
11 years, 4 months
introduction
by Michael Flack
hi everyone
just a email to introduce myself i have been using linux for about the
last 6 years at home and would like to to help out with system admin
i have had some experience with bash scripting, apache, bind, DHCP and
samba there is still a lot for me to learn and that is why i am here
i hope you guys can find something for me to do
Michael
11 years, 4 months
