Re: *** SECURITY information for people1.fedoraproject.org ***
by Stephen John Smoogen
On Mon, Jun 14, 2010 at 7:35 AM, <ebegoli(a)fedoraproject.org> wrote:
> people1.fedoraproject.org : Jun 14 13:35:59 : ebegoli : user NOT in sudoers ; TTY=pts/5 ; PWD=/home/fedora/ebegoli ; USER=root ; COMMAND=/usr/bin/yum install rpmbuild
Hi, the fedora people server is not really intended for building
packages on it. What were you needing?
--
Stephen J Smoogen.
“The core skill of innovators is error recovery, not failure avoidance.”
Randy Nelson, President of Pixar University.
"We have a strategic plan. It's called doing things.""
— Herb Kelleher, founder Southwest Airlines
13 years, 10 months
pubsubhubbub-ifying planet?
by Matt Domsch
There's this relatively new protocol, PubSubHubbub, in which a server
publishing an RSS feed pings a server whenever it publishes an update
to the feed's XML file. Feed aggregators, such as Google Reader and
others, are then notified immediately when the updated feed is
available, and can thus refresh it immediately, rather than wait for
some timed cronjob to do so.
With respect to Planet Fedora, there are 2 things we _could_ do to
make it more timely. Currently, planet.fp.o gets updated every 20
minutes by cronjob, rescanning all its feeds.
1) If those feeds were themselves publishing their PubSubHubbub address, we could:
not rescan such feeds every 20 minutes, but only when notified that
they have new content (plus say daily to be sure we don't miss
something). WordPress and others have a plugin to ping a hub, so
that's easy for our users to do, and they may already be doing so.
2) Every time we finish publishing an updated aggregated RSS feed, we
add a 'ping' to the public PubSubHubbub servers. Doing so,
aggregators could then immediately pull our updated feed.
>From a planet.fp.o publisher perspective, it's really simple.
1) Include a couple bits in the RSS feed itself: an atom namespace
reference, and in the <channel>, an <atom:link> that references the
hub server. In this way, each aggregator can look at that
atom:link tag and configure itself to subscribe to the pings when
those feeds are updated. This should be trivial to patch into
Venus, our current planet software.
2) Ping a hub. Here's a python module to do it:
http://pypi.python.org/pypi/PubSubHubbub_Publisher/1.0 (other
languages available too:
http://code.google.com/p/pubsubhubbub/wiki/PublisherClients ). This
could be done in Venus directly, or as a stand-alone program run
right after the updated feed is published. The python code is
trivial too.
Doing this, subscribers using Google Reader or other advanced feed
aggregators will get new content immediately, rather than on it's
polling interval, whatever that is.
>From a planet.fp.o as subscriber perspective, it's trickier.
http://code.google.com/p/pubsubhubbub/wiki/SubscriberClients doesn't
list any simple Python libs to "just do it".
There is a plugin for the Tornado web server (which we don't currently
use), and support for Drupal and others. This step might be "wait
and see"...
Thoughts?
Thanks,
Matt
--
Matt Domsch
Technology Strategist
Dell | Office of the CTO
13 years, 10 months
Out this week
by Mike McGrath
just a reminder, I'll be out this week.
-Mike
13 years, 10 months
[PATCH] move mirrors.fp.o/releases.txt to fedora-web git tree
by Matt Domsch
Part 2, adding the existing releases.txt into the fedora-web module.
From: Matt Domsch <mdomsch(a)fedoraproject.org>
---
mirrors.fedoraproject.org/releases.txt | 93 ++++++++++++++++++++++++++++++++
1 files changed, 93 insertions(+), 0 deletions(-)
create mode 100644 mirrors.fedoraproject.org/releases.txt
diff --git a/mirrors.fedoraproject.org/releases.txt b/mirrors.fedoraproject.org/releases.txt
new file mode 100644
index 0000000..1895070
--- /dev/null
+++ b/mirrors.fedoraproject.org/releases.txt
@@ -0,0 +1,93 @@
+# Example releases.list.
+# The official version is here: http://mirrors.fedoraproject.org/releases.txt
+#
+# This file contains a list of available Fedora releases.
+# Format is as follows:
+#
+#[Release Name]
+# - Header for this release. Typically: [Fedora X (Codename)]
+#version=FLOAT
+# - Required. Version number for this release.
+#stable=BOOL
+# - Optional. Marks a release as stable/final. Defaults to false.
+#preupgrade-ok=BOOL
+# - Optional. Marks a release as usable with preupgrade. Defaults to false.
+#eol-date=YYYYMMDD
+# - Optional. Gives the date on which the release stops getting updates.
+#mirrorlist=URL
+# - Mirrorlist URL for the main repo for this release.
+#baseurl=URL
+# - Single URL for the main repo for this release.
+#installmirrorlist=URL
+# - Mirrorlist for the *installable tree* for this release
+# (i.e. this address needs an images/ dir and .treeinfo)
+#installurl=URL
+# - Single URL for the installable tree.
+#
+# One of (mirrorlist or baseurl) is required. If those trees do not contain
+# boot images (like Fedora 8's Everything tree) then an installurl or
+# installmirrorlist is required.
+
+[Rawhide]
+# Rawhide is *always* the newest - hence version 999
+stable=False
+preupgrade-ok=True
+version=999
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=rawhide&arch=$basearch
+#baseurl=http://download.fedora.redhat.com/pub/fedora/linux/development/$basearch/os
+
+[Fedora 13 (Branch)]
+stable=False
+preupgrade-ok=True
+version=13
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-13&arch=$basearch
+installmirrorlist=http://mirrors.fedoraproject.org/mirrorlist?path=pub/fedora/linux/development/13/$basearch/os
+#baseurl=http://download.fedora.redhat.com/pub/fedora/linux/development/13/$basearch/os
+
+[Fedora 12 (Constantine)]
+stable=True
+preupgrade-ok=True
+version=12
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-12&arch=$basearch
+installmirrorlist=http://mirrors.fedoraproject.org/mirrorlist?path=pub/fedora/linux/releases/12/Fedora/$basearch/os
+
+[Fedora 11 (Leonidas)]
+stable=True
+preupgrade-ok=True
+version=11
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-11&arch=$basearch
+installmirrorlist=http://mirrors.fedoraproject.org/mirrorlist?path=pub/fedora/linux/releases/11/Fedora/$basearch/os
+
+[Fedora 10 (Cambridge)]
+stable=True
+preupgrade-ok=True
+version=10
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-10&arch=$basearch
+installmirrorlist=http://mirrors.fedoraproject.org/mirrorlist?path=pub/fedora/linux/releases/10/Fedora/$basearch/os
+eol-date=20091217
+
+# You can't reliably preupgrade to these.
+# They're only here so we know when they've gone EOL.
+
+[Fedora 9 (Sulphur)]
+stable=True
+version=9
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-9&arch=$basearch
+installmirrorlist=http://mirrors.fedoraproject.org/mirrorlist?path=pub/fedora/linux/releases/9/Fedora/$basearch/os
+eol-date=20090703
+
+[Fedora 8 (Werewolf)]
+stable=True
+version=8
+eol-date=20090107
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-8&arch=$basearch
+installmirrorlist=http://mirrors.fedoraproject.org/mirrorlist?path=pub/fedora/linux/releases/8/Fedora/$basearch/os
+
+[Fedora 7 (Moonshine)]
+stable=True
+version=7
+eol-date=20080613
+mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-7&arch=$basearch
+installmirrorlist=http://mirrors.fedoraproject.org/mirrorlist?path=pub/fedora/linux/releases/7/Fedora/$basearch/os
+
+# vim: syntax=dosini
--
1.5.5.6
----- End forwarded message -----
--
Matt Domsch
Technology Strategist
Dell | Office of the CTO
13 years, 10 months
systems we have that do not log currently.
by Stephen John Smoogen
app01.stg
app02.stg
cnode1
cnode2
cnode3
cvs01.stg
db01.stg
internetx01
koji01.stg
noc01.stg
noc02
pkgs1.stg
proxy01.stg
publictest1
publictest14
publictest15
publictest16
publictest3
publictest6
publictest8
releng01.stg
sign-bridge01
sign-vault01
smtp-mm1
smtp-mm2
smtp-mm3
torrent1
value01.stg
virtweb1
x86-08
x86-09
x86-10
--
Stephen J Smoogen.
“The core skill of innovators is error recovery, not failure avoidance.”
Randy Nelson, President of Pixar University.
"We have a strategic plan. It's called doing things.""
— Herb Kelleher, founder Southwest Airlines
13 years, 10 months
TG2 and RHEL-6
by Dennis Gilmore
So one of the things moving from EPEL to RHEL in EL-6 is the TurboGears 2
stack. We recently had TG-2.1 pushed into EPEL-5 testing. this is newer than
what is in EL-6. TG-2.1 broke a couple of things in Moksha(community)
because its using internal api's that changed, the public api is stable. but
it brings up the maintenance burden for when we start migrating to EL-6 on app
servers. Moksha would ethier need to work with 2.0 and 2.1? not sure if its
doable. or the version for EL-6 will need to use the old api. or something
else ive not mentioned/thought of.
another option is replace the TG stack. which then means for the life of us
using EL-6 we will need to maintain the TG stack in the infra repo and any
packages we use on top of it. it also means we cant put TG apps into EPEL-6
since they wont work.
alternatively we could use some fedora app servers where we can put everything
into fedora. maintain an updated stack in fedora, but have the additional
cost of greater maintenance needed for the fedora based servers.
I don't have the answer but we need to start the discussion now so that we
have a plan and dont get blindsided by this.
Dennis
13 years, 10 months
Corrected Message: Outage: Reboot of systems 2010-06-09 1600 UTC
by Stephen John Smoogen
I mis-pasted last night. I hope this one is clearer.
There will be an outage starting at 2010-06-09 16:00:00 UTC, which will
last approximately 4 hours.
To convert UTC to your local time, take a look at
http://fedoraproject.org/wiki/Infrastructure/UTCHowto
or run:
date -d '2010-06-09 16:00:00 UTC'
Affected Services:
Buildsystem
CVS / Source Control
Database
DNS
Fedora Hosted
Fedora People
Fedora Talk
Mail
Mirror System
Torrent
Websites
Unaffected Services:
None
Reason for outage:
We are doing our monthly updates to our systems. We have upgraded our
system to 5.5 and will reboot all systems. In theory most systems
won't go down at all. But many will be down for a few minutes at a
time during our 2 hour outage window.
Contact Information:
Please join #fedora-admin in irc.freenode.net or respond to this email
to track the status of this outage.
--
Stephen J Smoogen.
“The core skill of innovators is error recovery, not failure avoidance.”
Randy Nelson, President of Pixar University.
"We have a strategic plan. It's called doing things.""
— Herb Kelleher, founder Southwest Airlines
13 years, 10 months
Outage: Reboot of systems 2010-06-08 1600 UTC
by Stephen John Smoogen
There will be an outage starting at 2010-04-29 03:50:00 UTC, which will
last approximately 4 hours.
To convert UTC to your local time, take a look at
http://fedoraproject.org/wiki/Infrastructure/UTCHowto
or run:
date -d '2010-06-08 16:00:00 UTC'
Affected Services:
Buildsystem
CVS / Source Control
Database
DNS
Fedora Hosted
Fedora People
Fedora Talk
Mail
Mirror System
Torrent
Websites
Unaffected Services:
None
Reason for outage:
We are doing our monthly updates to our systems. We have upgraded our
system to 5.5 and will reboot all systems. In theory most systems
won't go down at all. But many will be down for a few minutes at a
time during our 2 hour outage window.
Contact Information:
Please join #fedora-admin in irc.freenode.net or respond to this email
to track the status of this outage.
--
Stephen J Smoogen.
“The core skill of innovators is error recovery, not failure avoidance.”
Randy Nelson, President of Pixar University.
"We have a strategic plan. It's called doing things.""
— Herb Kelleher, founder Southwest Airlines
13 years, 10 months
