September 2014 - infrastructure - Fedora mailing-lists

Gitolite3 on pkgs01.stg
by Pierre-Yves Chibon 17 Dec '14

17 Dec '14

Dear all, This morning Mathieu (bochecha) and I spent some time trying to get gitolite3 work on our pkgs01.stg. This is an overview of the situation. By design gitolite is meant to be installed with a dedicated user. Everyone uses that user. gitolite then maps the public ssh key to its user database and its configuration file to handle who is allowed to do what on which git repo. Our setup is quite different from this. We have a single configuration file at /etc/gitolite/conf/gitolite.conf that contains all the information about who is allowed to do what on which git repos. In addition we have a single /etc/gitolite/gitolite.rc configuration file that specifies to gitolite where are the git repositories located. Each user has then an account on the machine but by default no shell access. The access is restricted via ssh with in ~/.ssh/authorized_keys the instructions: `command="/usr/bin/gl-auth-command"` (people with shell access have a different command). That commands combines the info from /etc/gitolite/gitolite.rc and /etc/gitolite/conf/gitolite.conf and allow or deny the access/action. Now gitolite3 has changed quite a bit compared to our setup. Basically, gitolite3 expects the gitolite.rc file to be at ~/.gitolite.rc and the repositories to be at ~/repositories. Having symlink to these locations are fine, but they should be there. What we can do also is play on the $HOME variable. In pkgs01.stg we kept the configurations files (gitolite.conf and gitolite.rc) in /etc/gitolite as before, but we created a couple of symlink in /srv/git/ .gitolite -> /etc/gitolite/ repositories -> /srv/git/rpms/ The idea is to be able to set HOME=/srv/git and run the gitolite command. This way we managed to get the genacls.sh script working. It is the script that generates the gitolite.conf file based on the pkgdb information and compile that configuration file so that gitolite can use it. gitolite3 also changes the command in the ~/.ssh/authorized_keys file to: command="/usr/share/gitolite3/gitolite-shell user" That command is set in the sources in `src/triggers/post-compile/ssh-authkeys` and put in the file by (I believe) `gitolite compile` that is ran by genacls.sh. In order to test, I (manually) changed Mathieu's authorized_keys to look like: command="HOME=/srv/git/ /usr/share/gitolite3/gitolite-shell user" We then tried to get Mathieu to clone a repo and we found out: - the ~/.gitolite folder, that gitolite3 requires, needs to have a `logs/` subfolder, and that folder needs to be accessible read and write to everyone so `chmod 777 -R /srv/git/.gitolite/logs` (ie: chmod 777 /etc/gitolite/logs since it's a symlink) - the /etc/gitolite/conf/gitolite.conf-compiled.pm needs to be readable by everyone since it's the file gitolite uses to see who can do what on which repo so `chmod o+r conf/gitolite.conf-compiled.pm - Mathieu was finally able to clone and push in a repo he has access to and could not on the kernel repo (as supposed to since he does not have commit there), but the error returned is just plain ugly So to conclude: - we managed to get it to work - its needs chmod 777 on /srv/git/.gitolite/logs - its needs chmod o+r on conf/gitolite.conf-compiled.pm (and that after each time the file is generated) - we need to find a way to fix the command in the user's ~/.ssh/authorized_keys so that they specify the HOME variable to use when running the gitolite command -> Might very well require to patch gitolite itself for this (and thus keep the patch in our package ad vitam aeternam) That being said, I believe our options are: 1) Talk with upstream, in the past I believe he was quite reactive and willing to help us. We are the largest public deployment of gitolite maybe he'll still be willing to help us to discuss: - setting HOME in the authorized_keys - writing logs - accessing gitolite.conf-compiled.pm 2) Stick with gitolite2 -> We need to find out how easy it is to maintain it on epel7 and we need someone willing to maintain it (knowing that it's perl) -> Upstream said gitolite2 is still maintain wrt security fixes but I guess only for some time 3) Move to the model gitolite relies on (1 specific gitolite user everyone accesses the repo through). + No more need to create account on the machine for each and every packager + Inline with gitolite's design - Breaking all existing git clone around (as the push/pull urls change) --> URLs change could be handled at the fedpkg level + We are already forcing an update of fedpkg to our packager with the change from md5 to sha for the lookaside cache, so we could couple both change in the same update and preventing forcing two fedpkg updates. - Huge number of keys to handle for that user ? Performance impact of this number of users? ? Dennis mentionned logging at the meeting yesterday, but it looks like gitolite does provide logging itself 4) Move away from gitolite. I did not check what else would be available/suitable for us, so no ideas there. Suggestions welcome I guess :) I think that covers most if not all our findings. Questions and suggestions welcome :) Pierre and Mathieu

7 11

Something is polluting lockbox01 /
by Stephen John Smoogen 09 Oct '14

09 Oct '14

So I feel bad.. I didn't see this til today and its been going on for a while. Some script is putting a lot of file entries in / versus where-ever it is supposed to do so. The entries will be <something>.retry -rw-r--r--. 1 root root 36 Sep 16 04:28 fed-cloud09.cloud.fedoraproject.org.retry -rw-r--r--. 1 root root 68 Jul 24 07:54 fedimg.retry -rw-r--r--. 1 root root 106 Jun 17 04:29 fedoauth.retry -rw-r--r--. 1 root root 16 Aug 19 04:09 fedocal.dev.fedoraproject.org.retry -rw-r--r--. 1 root root 103 Jun 17 04:26 fedocal.retry -rw-r--r--. 1 root root 37 Jul 27 05:53 gallery.retry -rw-r--r--. 1 root root 43 Jun 17 04:11 github2fedmsg.retry -rw-r--r--. 1 root root 28 Sep 16 04:23 hrf.cloud.fedoraproject.org.retry -rw-r--r--. 1 root root 16 Aug 31 11:44 jenkins-cloud.retry -rw-r--r--. 1 root root 36 Jul 2 14:05 kerneltest.retry -rw-r--r--. 1 root root 50 Aug 16 07:14 keyserver.retry -rw-r--r--. 1 root root 34 Jun 17 04:30 koji-hub.retry -rw-r--r--. 1 root root 32 Aug 26 04:18 koschei.cloud.fedoraproject.org.retry -rw-r--r--. 1 root root 34 Aug 19 04:07 lists-dev.cloud.fedoraproject.org.retry -rw-r--r--. 1 root root 36 Sep 16 08:21 lockbox.retry -rw-r--r--. 1 root root 29 Jul 23 04:04 logserver.retry -rw-r--r--. 1 root root 16 Aug 19 04:08 logstash-dev.cloud.fedoraproject.org.retry -rw-r--r--. 1 root root 66 Jul 1 04:11 mailman.retry -rw-r--r--. 1 root root 41 Sep 3 10:39 mirrorlist.retry -rw-r--r--. 1 root root 29 Jul 10 05:02 nagios_phx2.retry -rw-r--r--. 1 root root 24 Sep 9 07:45 noc.retry -rw-r--r--. 1 root root 84 Jul 18 07:02 notifs-backend.retry -rw-r--r--. 1 root root 152 Jun 17 04:30 notifs-web.retry -rw-r--r--. 1 root root 144 Jun 17 04:29 nuancier.retry -rw-r--r--. 1 root root 106 Aug 2 09:57 packages.retry -rw-r--r--. 1 root root 97 Jul 23 07:26 paste.retry -rw-r--r--. 1 root root 97 Jun 17 04:30 pkgdb.retry -rw-r--r--. 1 root root 68 Jun 17 04:26 postgresl-server.retry -rw-r--r--. 1 root root 33 Aug 17 07:47 qadevel-stg.retry -rw-r--r--. 1 root root 32 Jun 17 04:26 releng.retry -rw-r--r--. 1 root root 37 Aug 7 11:00 resultsdb-dev.retry -rw-r--r--. 1 root root 33 Sep 16 07:19 resultsdb-prod.retry -rw-r--r--. 1 root root 37 Sep 4 05:01 resultsdb-stg.retry -rw-r--r--. 1 root root 16 Aug 19 04:06 shogun-ca.cloud.fedoraproject.org.retry -rw-r--r--. 1 root root 34 Jul 9 07:08 smtp-mm.retry -rw-r--r--. 1 root root 76 Jul 18 06:57 summershum.retry -rw-r--r--. 1 root root 72 Aug 7 09:48 sundries.retry -rw-r--r--. 1 root root 100 Jun 17 04:41 tagger.retry -rw-r--r--. 1 root root 160 Jul 23 05:30 taskotron-dev-clients.retry -rw-r--r--. 1 root root 37 Jul 23 09:54 taskotron-dev.retry -rw-r--r--. 1 root root 160 Jul 23 04:34 taskotron-prod-clients.retry -rw-r--r--. 1 root root 33 Sep 16 07:27 taskotron-prod.retry -rw-r--r--. 1 root root 40 Sep 12 05:21 taskotron-stg-clients.retry -rw-r--r--. 1 root root 37 Jul 23 05:07 taskotron-stg.retry -rw-r--r--. 1 root root 37 Jun 19 14:13 taskotron.retry -rw-r--r--. 1 root root 34 Jul 1 07:20 unbound.retry -rw-r--r--. 1 root root 66 Jun 17 04:27 value.retry -rw-r--r--. 1 root root 37 Sep 16 13:19 virthost.retry -rw-r--r--. 1 root root 30 Jul 24 04:40 wiki.retry Anyone know what this is? -- Stephen J Smoogen.

5 5

Python/Django developers needed: Ask Fedora
by Rahul Sundaram 04 Oct '14

04 Oct '14

Hi Ask Fedora (http://ask.fedoraproject.org) uses Askbot which is a Django based web application. We need a few developers to implement some bug fixes and features for askbot and while upstream developers are active, our requirements are pretty high. So if anyone here wants to help out, please ping me offlist and I can describe the things we would like to see implemented quickly. Some of them shouldn't take much of your time if you are a Django developer and would help our moderators and users quite a lot. Thanks, Rahul

3 8

Plan for tomorrow's Fedora Infrastructure meeting (2014-08-21)
by Kevin Fenzi 03 Oct '14

03 Oct '14

The infrastructure team will be having it's weekly meeting tomorrow, 2014-08-21 at 18:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic nagios/alerts recap Here we go over the last weeks alerts and see if we can find ways to make it so they don't happen again. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

4 15

people ssh Banner
by Kevin Fenzi 02 Oct '14

02 Oct '14

So, we have had a number of folks recently come and tell us they are having trouble logging into fedorapeople.org and after troubleshooting we find that they are not in any non cla groups, so don't even have an account there. I've tried to stress the requirements on the people page on the wiki, but I think some people are learning about it word of mouth and aren't finding out the requirements for accounts. To help with this I setup a ssh Banner the other day. So, every connection gets a short message: ---snip--- This system is for Fedora Contributors only! You must be in at least one non cla group to have access. See: https://fedoraproject.org/wiki/Infrastructure/fedorapeople.org ---snip--- There's however a few problems with this and I have reverted it for now. Problems include: * Annoys people who do have accounts. * Breaks scripts that look for just specific content * Tells attackers if someone has an account or not. So we could: * Just keep it disabled and try and get people to read docs * Re-enable it but make the message 1 line to be less anoying. * Some other clever solution. kevin

5 8

[Fedocal] Reminder meeting : Atomic / Infrastructure Meeting
by jzb＠fedoraproject.org 28 Sep '14

28 Sep '14

Dear all, You are kindly invited to the meeting: Atomic / Infrastructure Meeting on 2014-09-30 from 18:00:00 to 18:30:00 UTC The meeting will be about: Meeting to work on infrastructure pieces required for building Fedora Atomic images. Source: https://apps.fedoraproject.org/calendar//meeting/738/

1 0

Updated Atomic alpha w/Bash update(s)?
by Joe Brockmeier 26 Sep '14

26 Sep '14

Hi all, It occurs to me that the bash update isn't going to be available for the Atomic image(s) since the users can't install new packages. What do we need to do to get new images spun up and get a new tree for people to grab with rpm-ostree update? My understanding is this is manual now, how much lifting do we have yet to do to make this automatic? Thanks, jzb -- Joe Brockmeier | Principal Cloud & Storage Analyst jzb(a)redhat.com | http://community.redhat.com/ Twitter: @jzb | http://dissociatedpress.net/

3 3

fedimg ansible files, take 2
by David Gay 26 Sep '14

26 Sep '14

Hey squad, First, apologies to the list, since I sent the initial draft of this patch to the internal Red Hat fedora-eng list when it should have gone here. My bad. Fixed up the Fedimg ansible files as per threebean's suggestions and gracious assistance. The patch is attached. If a pair or two of eyes wouldn't mind checking it out, that'd be swell. Got the +1 from threebean in IRC, at least at a glance. I'm working out some boot issues with a couple image types in EC2 right now, so if this is plugged in as things are now, some image uploads will invariably fail, so perhaps we want to wait on launching this until I have better results with AMI booting. If things look good, I can send threebean the creds/variables that would be needed for the config setup, since I'm not in sysadmin-main. Thanks! -- oddshocks

2 1

Plan for tomorrow's Fedora Infrastructure meeting (2014-09-25)
by Kevin Fenzi 25 Sep '14

25 Sep '14

The infrastructure team will be having it's weekly meeting tomorrow, 2014-09-25 at 18:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Freeze reminder #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic nagios/alerts recap Here we go over the last weeks alerts and see if we can find ways to make it so they don't happen again. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

1 1

Atomic / Fedora Infrastructure Meeting 23 September 2014
by Joe Brockmeier 25 Sep '14

25 Sep '14

A bit late getting these out, sorry about that! =============== #atomic Meeting =============== Meeting started by jzb at 18:02:06 UTC. The full logs are available at http://meetbot.fedoraproject.org/atomic/2014-09-23/atomic.2014-09-23-18.02.… . Meeting summary --------------- * dgilmore is short on time today due to F21 release tasks leftover, will have to defer to next week (stickster, 18:14:33) * Compose scripts (stickster, 18:16:17) * Fedora mainline compose scripts don't have the capability to be run locally; tools are the same, but configuration may not allow someone to actually make images (stickster, 18:20:16) * highest priority goal is a cloud image that boots in at least KVM and OpenStack and an ostree repo with a mirrorlist that we can pull updates from (stickster, 18:25:43) * ACTION: jzb figure out who's got the ball with mirrormanager. (jzb, 18:39:24) * ACTION: oddshocks will look into Mirrormanager changes and report back (jzb, 18:45:48) * jzb thanks oddshocks profusely (jzb, 18:45:58) * ACTION: oddshocks to send note to cloud(a)lists.fedoraproject.org when AMIs are ready (jzb, 18:50:32) Meeting ended at 18:51:34 UTC. Action Items ------------ * jzb figure out who's got the ball with mirrormanager. * oddshocks will look into Mirrormanager changes and report back * oddshocks to send note to cloud(a)lists.fedoraproject.org when AMIs are ready Action Items, by person ----------------------- * jzb * jzb figure out who's got the ball with mirrormanager. * oddshocks * oddshocks will look into Mirrormanager changes and report back * oddshocks to send note to cloud(a)lists.fedoraproject.org when AMIs are ready * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * stickster (42) * walters (29) * jzb (27) * dgilmore (22) * oddshocks (15) * smooge (6) * geppetto (5) * centbot (4) * zodbot (4) * jbrooks (1) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -- Joe Brockmeier | Principal Cloud & Storage Analyst jzb(a)redhat.com | http://community.redhat.com/ Twitter: @jzb | http://dissociatedpress.net/

1 0

Freeze Break Request
by Stephen John Smoogen 24 Sep '14

24 Sep '14

I think our polluting of / with retry's is from the nightly cron job for ansible changes. I think this will fix it. [smooge@lockbox01 puppet (master)]$ git diff HEAD diff --git a/modules/scripts/files/ansible-playbook-check-diff.cron b/modules/scripts/files/ansible-playbook-check-diff.cron index 1d06879..eeec65f 100755 --- a/modules/scripts/files/ansible-playbook-check-diff.cron +++ b/modules/scripts/files/ansible-playbook-check-diff.cron @@ -2,6 +2,7 @@ mailto='admin(a)fedoraproject.org' source /root/sshagent >>/dev/null export ANSIBLE_HOST_KEY_CHECKING=False +export HOME=/root/ #export ANSIBLE_SSH_PIPELINING=False /srv/web/infra/ansible/scripts/ansible-playbook-check-diff |& grep ok= -- Stephen J Smoogen.

5 6

Pros and Cons for disk partitions.
by Stephen John Smoogen 24 Sep '14

24 Sep '14

I would like to better document the reasons on why we set up systems the way we do in various places. One of the ones that I end up 'breaking' every now and then is putting in extra partitions on systems where our standard is to have just /. I come from a background where you really can't have enough disk partitions so I end up separating things like /var/log and /home out on boxes where there are many users. [Which then causes problems where we have assumed one partition] -- Stephen J Smoogen.

2 1

Fedora 21 Alpha Freeze is now OVER
by Stephen John Smoogen 24 Sep '14

24 Sep '14

Hello all. Releng shipped on Tuesday, and so we are ready to let loose the dogs of change into the infrastructure again. The Beta freeze is scheduled to start at 2014-10-14.. so you have 20 days (including weekends) to get stuff done before the next freeze. -- Stephen J Smoogen.

1 0

Freeze break: update the bodhi app servers
by Luke Macken 23 Sep '14

23 Sep '14

Hi all, I wish to update the bodhi-server package on bodhi01/02 servers with the latest package that I deployed to the releng machines weeks ago. All it'll take is this command: sudo -i ansible-playbook --extra-vars="target='bodhi' package='bodhi-server'" $(pwd)/update_packages.yml At the moment people that *only* have commit privs on the epel7 branch are unable to push updates. Upgrading bodhi to the version that is already in our infra repo should resolve this issue, and it'll be easy to downgrade if unexpected explosions occur. Thanks, luke

3 2

Freeze break: increase timeout on download rsync
by Kevin Fenzi 22 Sep '14

22 Sep '14

Some folks have been running into timeouts syncing some Fedora targets from phx2 download servers. In particular Red Hat globalsync that syncs to places like Brno where we have a lot of Fedora QA folks who want the latest bits. I'd like to increase this timeout and see if it helps them. If it causes any problems with too many rsync's hanging around we can move it to a seperate module for those globalsync machines and put the global one back. +1s? diff --git a/modules/rsync/files/rsyncd.conf.download-phx b/modules/rsync/files/rsyncd.conf.download-phx index fd0d21f..41335dc 100644 --- a/modules/rsync/files/rsyncd.conf.download-phx +++ b/modules/rsync/files/rsyncd.conf.download-phx @@ -2,7 +2,7 @@ pid file = /var/run/rsyncd.pid syslog facility = daemon max connections = 20 -timeout = 600 +timeout = 1200 use chroot = yes uid = nobody gid = nobody

4 3

[Fedocal] Reminder meeting : Atomic / Infrastructure Meeting
by jzb＠fedoraproject.org 22 Sep '14

22 Sep '14

Dear all, You are kindly invited to the meeting: Atomic / Infrastructure Meeting on 2014-09-23 from 19:00:00 to 19:30:00 UTC The meeting will be about: Meeting to work on infrastructure pieces required for building Fedora Atomic images. Source: https://apps.fedoraproject.org/calendar//meeting/1621/

3 2

[Fedocal] Reminder meeting : Atomic / Infrastructure Meeting
by jzb＠fedoraproject.org 21 Sep '14

21 Sep '14

Dear all, You are kindly invited to the meeting: Atomic / Infrastructure Meeting on 2014-09-23 from 18:00:00 to 18:30:00 UTC The meeting will be about: Meeting to work on infrastructure pieces required for building Fedora Atomic images. Source: https://apps.fedoraproject.org/calendar//meeting/1619/

1 0

Freeze Break Request: bodhi on relepel01 config file change
by Luke Macken 18 Sep '14

18 Sep '14

Hi all, Due to a bug in a recent bodhi release, the EPEL masher is currently unable to complete a push. The bug is due to it hashing the i386 repodata, but polling x86_64 on the master mirror. I will fix this properly in the next bodhi release, but in the mean time we can easily work around the bug with this single config file change in puppet that specifies the arches in a specific order: http://paste.fedoraproject.org/134731/80821141/ This change only affects relepel01. Thanks, luke

3 2

Will be unavailable 2014-09-22 part of the day
by Stephen John Smoogen 18 Sep '14

18 Sep '14

I will be in an area of no cell coverage for 6 hours (1700 UTC -> 2300 UTC) on Sunday for my kid's first concert. I will be back on in the evening and will help out with any release items then, -- Stephen J Smoogen.

1 0

Summary/Minutes from today's Fedora Infrastructure meeting (2014-09-18)
by Stephen John Smoogen 18 Sep '14

18 Sep '14

=============================== #fedora-meeting: Infrastructure =============================== Meeting started by smooge at 18:01:37 UTC. The full logs are available athttp://meetbot.fedoraproject.org/fedora-meeting/2014-09-18/fedora-infrast… . Meeting summary --------------- * Please say hi (smooge, 18:02:18) * New folks introductions and Apprentice tasks. (smooge, 18:03:35) * Freeze reminder (smooge, 18:06:41) * Applications status / discussion (smooge, 18:09:20) * Sysadmin status / discussion (smooge, 18:10:21) * LINK: http://threebean.org/blog/new-fmn-release/ (threebean, 18:12:57) * various people are on travel (smooge, 18:14:03) * OOM issues on fmn (smooge, 18:14:12) * nagios/alerts recap (smooge, 18:25:21) * Upcoming Tasks/Items (smooge, 18:30:52) * LINK: https://apps.fedoraproject.org/calendar/list/infrastructure/ (smooge, 18:31:08) * Open Floor (smooge, 18:34:23) Meeting ended at 18:41:35 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * smooge (54) * threebean (15) * nirik (11) * tflink (5) * bochecha (5) * zodbot (4) * Neldogz (2) * oddshocks (1) * relrod (1) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -- Stephen J Smoogen.

1 0

Plan for tomorrow's Fedora Infrastructure meeting (2014-09-18)
by Kevin Fenzi 17 Sep '14

17 Sep '14

The infrastructure team will be having it's weekly meeting tomorrow, 2014-09-18 at 18:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Freeze reminder #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic nagios/alerts recap Here we go over the last weeks alerts and see if we can find ways to make it so they don't happen again. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

1 0

FedOAuth deprecation: merging efforts with Ipsilon
by Patrick Uiterwijk 17 Sep '14

17 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi all, As most of you probably know, the authentication system in use at the Fedora Infrastructure currently is FedOAuth[1], of which I am the original author (original name was FAS-OpenID) and primary maintainer. A little while ago, Petr Spacek let me know[2] that there was a project with the same goals (multi-protocol federated identity provider) also going on: ipsilon[3] (he also notified ipsilon upstream[4]). After discussing with the ipsilon author, we decided that we are going to merge efforts, because we are currently duplicating a lot of effort on both ends. After consideration of the state of both codebases, we decided we would move forward with the ipsilon codebase. The ipsilon codebase does lack some features that FedOAuth has, and we are now working on getting all those features that FedOAuth has but ipsilon lacks into ipsilon. After this is completed, and ipsilon gets stable enough, I will be going to move all current FedOAuth instances over to using ipsilon, this includes the Fedora Infrastructure instance. To keep track of the features that ipsilon is currently missing and the steps required to replace FedOAuth with ipsilon in the Fedora Infrastructure, we have a wiki page[5]: please let me know if we missed anything or if it needs clarification. There is currently no hard schedule for the migration yet, because we first need to get all missing features into ipsilon. I will keep this list updated on when we have all required features into ipsilon and when we will start the next steps of the migration process. If anyone has any comments, remarks or questions regarding this, please let me know! [1]: https://github.com/FedOAuth/FedOAuth [2]: https://github.com/FedOAuth/FedOAuth/issues/61 [3]: https://fedorahosted.org/ipsilon/ [4]: https://www.redhat.com/archives/freeipa-devel/2014-August/msg00046.html - -- Patrick Uiterwijk -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBCgAGBQJUGf0wAAoJEIZXmA2atR5QOewP/2KsH6DxBDKVmmX7S/K+oDle njWsk3QUrjhM3IyDrP853pCAgvXCkhLz6lpkM6SxmlTW82Rqyf6AeQitgv5MYFMB VPq5s5mA7mYpFLPeom6HD/taxyCHifZwU27qGTZ8Ohr2VCcNIJdUCAcVknBHDRC7 vcW+yDha7DE0GZMMBl5jOQycWsnMP0yhcqjtsh9g5yL9u/Y004pe60mIlC5Lyy5R wXENJOe3KPPL0Nfm2u540xIRYbE4oj8+z/BXvCqX4hem71X29+qEuPgFkuyrcdBl pN27uItFCCzysqtH2qoyHTgYupyhv2/KRNLCbx0RUKV8X49qajeZffHmeB2/SJuk EIXVrf+7csE2cEL+OkKojNpxP5wfAiuO27dIJxebGriissOXedPHyAUyAo+AHXi/ AyKfqfDhE1kVpExXUqYzXgHTe1hNr5cB649GNURpp0Sk4ROQwAjh3p7tc51itjC+ nuKqSXrrHg5GBQHZTC2134GiNqr9P0j/6VIokqPVeW1boGx8KSPKKDiKG/2gUcF3 D9SxI+1i9G0V2mFp8b3rb5oYVAfA1HCIPdF06tdU1SWF80ATc9TBm8DuIMxQL2Q8 Mow/pXX0KFsk677KqlGt85S4zVvipXvWyf6LhAQwqvvngKNJSnxjqiuNj4gkrjtA szSAk9znPqvwSBURf1Yb =Knn4 -----END PGP SIGNATURE-----

1 1

System freeze break: Clean out old files in puppet
by Stephen John Smoogen 17 Sep '14

17 Sep '14

There are 3 gigs of old files in puppet buckets. These are the original files before puppet updates them on the system. I would like to remove all files older than 90 days in the buckets as they shouldn't be useful for our needs. -- Stephen J Smoogen.

3 3

Atomic/infra/rel-eng meeting
by Paul W. Frields 17 Sep '14

17 Sep '14

We agreed ad hoc in IRC to move our regular Atomic/infra/releng sync meeting for *this week* to tomorrow (Wed 2014-Sep-17) at 2:00pm EDT / 1:00pm CDT / 1800 UTC so we can catch Dennis without making it hard for him to pick up his daughter from school. In the future the meeting will be back on Tuesday, but again at that *new* time of 2:00pm EDT / 1:00pm CDT / 1800 UTC. Dennis, does that work better for you? -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ The open source story continues to grow: http://opensource.com

2 1

[Fedocal] Reminder meeting : Atomic / Infrastructure Meeting
by jzb＠fedoraproject.org 14 Sep '14

14 Sep '14

Dear all, You are kindly invited to the meeting: Atomic / Infrastructure Meeting on 2014-09-16 from 20:00:00 to 20:30:00 UTC The meeting will be about: Meeting to work on infrastructure pieces required for building Fedora Atomic images. Source: https://apps.fedoraproject.org/calendar//meeting/738/

1 0

September status update for Fedora Infrastructure Apprentices
by Kevin Fenzi 13 Sep '14

13 Sep '14

Greetings. You are getting this email because you are in the 'fi-apprentice' group in the fedora account system (or are reading this on the infrastructure list). Feel free to reply just directly to me, or cc the infrastructure list for everyone to see and comment on. https://fedoraproject.org/wiki/Infrastructure_Apprentice At the first of every month(or so), I am going to be sending out an email like this one. I would like feedback on how things are going for you. I'd like to ask for everyone to send me a quick reply with the following data or anything related you can think of that might help us make the apprentice program more useful. 0. Whats your fedora account system login? 1. Have you logged in and used your fi-apprentice membership to look at our machines/setup in the last month? Do you plan to? 2. Has it helped you decide any area you wish to focus on or contribute to more? 3. Have you looked at or been able to work on any of the fi-apprentice 'easyfix' tickets? https://fedorahosted.org/fedora-infrastructure/report/14 4. Do you still wish to be a member of the group? If not (for whatever reason) could you provide any hints to help others down the road? 5. Is there any help or communication or ideas you have that would help you do any of the above? 6. What do you find to be the hardest part of getting involved? Finding things to work on? Getting attention from others to help you? Finding tickets in your interest area? 7. Have you been able to make any weekly irc meetings? Do you find them helpful or interesting? 8. What is your favorite book of all time? :) Any other general feedback is also quite welcome, including improvements to this email, the wiki page, etc. Any folks I do not hear from in the next week will be removed from the group. (Note that it's easy to be readded when you have time or whatever and it's nothing at all personal, we just want to keep the group up to date with active folks). Thanks, and looking forward to your feedback! kevin

8 7

Freeze break: adjust ppc dhcp
by Kevin Fenzi 12 Sep '14

12 Sep '14

We need another small adjustment in the ppc dhcp setup on noc01. +1s? kevin -- diff --git a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org index 27e918e..14ec365 100644 --- a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org +++ b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org @@ -1770,7 +1770,7 @@ shared-network qa { host ppc-le-builder7 { hardware ethernet 52:54:00:4e:c0:de; fixed-address 10.5.131.57; - next-server 10.5.124.136; + next-server 10.5.131.56; option host-name "ppc-le-builder7.qa.fedoraproject.org"; filename "/boot/grub2/powerpc-ieee1275/core.elf"; }

4 3

Entropy on VM for gpg
by Valentin Gologuzov 12 Sep '14

12 Sep '14

Hi, I need to generate a lot of gpg keys for package signing in Copr, and VMs in cloud have low entropy for cryptography, that results in very-very slow key generation. I've have solved it with `haveged` daemon, is it proper solution or i need something else? -- Best regards, Gologuzov Valentin.

4 3

Freeze break: install ansible-openstack-modules on lockbox01
by Kevin Fenzi 12 Sep '14

12 Sep '14

I'd like to install ansible-openstack-modules rpm on lockbox01. This is for ticket 4519 and will help us get our new cloud install up and running. +1s? kevin -- diff --git a/modules/ansible/manifests/init.pp b/modules/ansible/manifests/init.pp index 0c2c81c..3db1ee3 100644 --- a/modules/ansible/manifests/init.pp +++ b/modules/ansible/manifests/init.pp @@ -4,6 +4,10 @@ class ansible::ansible { ensure => present, } + package { ansible-openstack-modules: + ensure => present, + } + file { '/etc/ansible/ansible.cfg': source => 'puppet:///ansible/ansible.cfg', require => Package['ansible']

3 2

Freeze break: update exclude list for clamav scan on pkgs01
by Kevin Fenzi 12 Sep '14

12 Sep '14

Newer versions of the fwsnort package have a false positive with clamav virus scanning. I'd like to make the exception for that package more general so we don't have to keep updating versions. I don't see any impact from this really... +1s? kevin -- diff --git a/manifests/services/distgit.pp b/manifests/services/distgit.pp index c9ec76a..8f3137b 100644 --- a/manifests/services/distgit.pp +++ b/manifests/services/distgit.pp @@ -44,7 +44,7 @@ class distgit { clamav::clamscan { 'admin(a)fedoraproject.org': paths => '/srv/cache/lookaside/pkgs', - excludes => ['clamav-', 'amavisd-new-2.3.3.tar.gz', 'bro-20080804.tgz', 'mailman-', 'sagator-', 'nicotine', 'fwsnort-1.0.6.tar.gz', 'psad-2.1.7.tar.bz2', 'pymilter-', 'linkchecker-' ] + excludes => ['clamav-', 'amavisd-new-2.3.3.tar.gz', 'bro-20080804.tgz', 'mailman-', 'sagator-', 'nicotine', 'fwsnort-*', 'psad-2.1.7.tar.bz2', 'pymilter-', 'linkchecker-' ] } git::git-server { '/srv/git/rpms': } diff --git a/modules/ansible/manifests/ini

3 2

Service Break Request: Update dhcp for PPC systems
by Stephen John Smoogen 11 Sep '14

11 Sep '14

diff --git a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org index 41b8626..27e918e 100644 --- a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org +++ b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org @@ -1774,6 +1774,14 @@ shared-network qa { option host-name "ppc-le-builder7.qa.fedoraproject.org"; filename "/boot/grub2/powerpc-ieee1275/core.elf"; } + + host ppc-builder9 { + hardware ethernet 5C:F3:FC:89:BD:C5; + fixed-address 10.5.124.142; + next-server 10.5.124.136; + option host-name "ppc-builder9.qa.fedoraproject.org"; + filename "/boot/grub2/powerpc-ieee1275/core.elf"; + } } } -- Stephen J Smoogen.

3 2

Freeze break request: adding FMN to the list of trusted trust roots
by Patrick Uiterwijk 11 Sep '14

11 Sep '14

Hi all, Here I come again with yet another request for +1's. Basically, I want to add the trust root that FMN (https://apps.fedoraproject.org/, FMN at https://apps.fedoraproject.org/notifications/) to the list of trusted roots in FedOAuth. From 0fd1ce2a4aef09119d9be2694d7b6475cdcc7a1c Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Thu, 11 Sep 2014 15:13:17 +0000 Subject: [PATCH] Add FMN to the list of trusted trust roots --- roles/fedoauth/templates/fedoauth.cfg | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/roles/fedoauth/templates/fedoauth.cfg b/roles/fedoauth/templates/fedoauth.cfg index ffd1529..557891f 100644 --- a/roles/fedoauth/templates/fedoauth.cfg +++ b/roles/fedoauth/templates/fedoauth.cfg @@ -80,7 +80,8 @@ AUTH_PROVIDER_CONFIGURATION = { 'https://admin.fedoraproject.org/pkgdb/', 'https://admin.fedoraproject.org/voting/', 'https://apps.fedoraproject.org/github2fedmsg', - 'https://admin.fedoraproject.org'], # Nagios + 'https://admin.fedoraproject.org', # Nagios + 'https://apps.fedoraproject.org/'], # FMN {% endif %} 'non_trusted_roots': [], 'handle_magic_groups_value': True -- 1.7.2.1 Thanks, Patrick

3 2

fedmsg in Debian
by Rahul Sundaram 11 Sep '14

11 Sep '14

Hi Just FYI http://meetings-archive.debian.net/pub/debian-meetings/2014/debconf14/webm/… On a side note, it would be nice if Flock managed to produce such videos Rahul

4 6

Summary/Minutes from today's Fedora Infrastructure meeting (2014-09-11)
by Patrick Uiterwijk 11 Sep '14

11 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================ #fedora-meeting: Infrastructure (2014-09-11) ============================================ Meeting started by puiterwijk at 18:00:24 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2014-09-11/infrastructure.2… Meeting summary - --------------- * welcome (puiterwijk, 18:00:28) * New folks introductions and Apprentice tasks (puiterwijk, 18:02:35) * Freeze reminder (puiterwijk, 18:08:27) * Applications status / discussion (puiterwijk, 18:08:35) * People should help test gitolite3, info sent to mailing list (puiterwijk, 18:13:22) * https://lists.fedoraproject.org/pipermail/infrastructure/2014-September/014… has instructions how to test (bochecha, 18:13:58) * nagios/alerts recap (puiterwijk, 18:20:12) * http://tinyurl.com/l3vjae8 (puiterwijk, 18:20:14) * Sysadmin status / discussion (puiterwijk, 18:21:09) * https://lists.fedoraproject.org/pipermail/infrastructure/2014-September/014… (threebean, 18:21:20) * Upcoming Tasks/Items (puiterwijk, 18:23:17) * https://apps.fedoraproject.org/calendar/list/infrastructure/ (puiterwijk, 18:23:21) * Open Floor (puiterwijk, 18:25:43) * http://karl-tux-stadt.de/ktuxs/?p=4659 we had a blast of fedora-tagger activity yesterday (threebean, 18:26:07) Meeting ended at 18:31:47 UTC. Action Items - ------------ People Present (lines said) - --------------------------- * puiterwijk (51) * threebean (22) * nirik (13) * bochecha (12) * RogerB_TX (8) * Neldogz (5) * purezen (5) * zodbot (4) * smooge (3) * tflink (2) * randomuser (2) * relrod (1) * danielbruno (1) * danofsatx (1) * mpduty (1) * bwood09 (1) * mirek_ (1) * oddshocks (1) * mdomsch (0) * abadger1999 (0) * lmacken (0) * pingou (0) * dgilmore (0) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBCgAGBQJUEevrAAoJEIZXmA2atR5Q4gMP/RAM0CeXQ1rpnE7PucGRn0IS 39gH/RprZhqzP/p1GSsfpTtXlTRIbVfvYzXrY1RL+DRRKuCG4+8V8wPJoIoRJndO a9sCtr6+I7eD8+ITn7SU37zI+dxMK2dBo0jzRmvJ7vuHAka+4eczvC+fykWAKVQa IFz4NfxTV5D9ACki8pzRmD0RgLYz8l/WlJruLTZPudwicBMqTDt46lUXIBkOQma0 gedlzW+BCrv7TWu12bqIE+bStuqo26sdNYnc6A/UiGspNmsZQe/zpY0W1ZINRlEo lQMniDfVtIIxhHp3Vtpz/hly+gSwj1hd5o/mendZzOV9BrK1fVAgsipiFnCDNRI+ AcsCuy6lC565/Chsk1FnSNGgdCvaHNeNc0zVMuwvpnhPM2JN5lc7p15vpPrHz2Bf QYfkTZmEPjr0+57wNEOx1qSdYCzGlfYC36YnMh2ehq3zirOUWi71eIJyhy2EmW8M jMOIjMeXoM0BcHOPLIV/09d1hmoKA/xePlJgBgYT0G5RG1pBvbsoduoj0mLoxmux t/5iJRA45PvCiEQyVO32shLeEngfthswrR2WCN54NnBNpj8L8+SblcQprwYAlzdO /slnj5v1p1Pvqw5Gd628di7EZh6dpyp/LPfNOoKzotdXfL4WII7byg+x1bswtWYF ghIdvkJNFQ9rs2n24zap =j8vc -----END PGP SIGNATURE-----

1 0

mirror crawler seems to have had a problem
by Adrian Reber 11 Sep '14

11 Sep '14

Looking at the crawler mirrormanager log files on bapp02 it seems the last crawler run had some kind of problem: -rw-r--r--. 1 mirrormanager mirrormanager 0 Sep 11 04:02 crawler.log -rw-rw-r--. 1 mirrormanager mirrormanager 0 Sep 11 04:02 generate-publiclist.log Both files have no content and it seems the last run of the crawler has finished. Looking at the output of crawler_perhost in /var/log/mirrormanager/crawler it also seems all recent log files are empty. It would probably be a good thing to start the crawler manually to update the mirrormanager database. Adrian

2 1

Plan for tomorrow's Fedora Infrastructure meeting (2014-09-11)
by Kevin Fenzi 10 Sep '14

10 Sep '14

The infrastructure team will be having it's weekly meeting tomorrow, 2014-09-11 at 18:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Freeze reminder #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic nagios/alerts recap Here we go over the last weeks alerts and see if we can find ways to make it so they don't happen again. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

1 0

Freeze break request: cron to check for anonymous trac permissions
by Patrick Uiterwijk 10 Sep '14

10 Sep '14

Hi all, I would like to get two +1's to add the following cron job to hosted03. This will give us an overview of which trac projects have anonymous ticket editing or creation. From 0443e6d8eff85b3e09f6218a24410c0a32217ff8 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Wed, 10 Sep 2014 19:59:52 +0000 Subject: [PATCH] Anonymous trac permission check --- manifests/services/hosted.pp | 1 + modules/scripts/files/trac-anonymous-check.sh | 12 ++++++++++++ modules/scripts/manifests/init.pp | 18 ++++++++++++++++++ 3 files changed, 31 insertions(+), 0 deletions(-) create mode 100644 modules/scripts/files/trac-anonymous-check.sh diff --git a/manifests/services/hosted.pp b/manifests/services/hosted.pp index 5540613..8b8b533 100644 --- a/manifests/services/hosted.pp +++ b/manifests/services/hosted.pp @@ -19,6 +19,7 @@ class hosted { include hotfix::python-fedora-django include cgit::cgit include cgit::clean-lock-cron + include scripts::trac-anonymous-check reviewboard::server { '/reviewboard/': secret_key => $reviewboardsecretkey, diff --git a/modules/scripts/files/trac-anonymous-check.sh b/modules/scripts/files/trac-anonymous-check.sh new file mode 100644 index 0000000..9e7268d --- /dev/null +++ b/modules/scripts/files/trac-anonymous-check.sh @@ -0,0 +1,12 @@ +#!/bin/bash +for project in `ls /srv/web/trac/projects`; +do + PERMISSIONS="`sqlite3 /srv/web/trac/projects/$project/db/trac.db "select action from permission where username='anonymous';" | grep 'CREATE\|APPEND\|EDIT\|MODIFY'`" + if [ "" != "$PERMISSIONS" ]; + then + echo -n $project + echo -n ": " + echo $PERMISSIONS + echo "------" + fi +done diff --git a/modules/scripts/manifests/init.pp b/modules/scripts/manifests/init.pp index befff2d..3f85baf 100644 --- a/modules/scripts/manifests/init.pp +++ b/modules/scripts/manifests/init.pp @@ -17,6 +17,24 @@ class scripts::buildSB1Indexes { } +class scripts::trac-anonymous-check { + + file { '/usr/local/bin/trac-anonymous-check.sh': + source => 'puppet:///scripts/trac-anonymous-check.sh', + mode => '0755' + } + + cron { trac-anonymous-check: + command => "/usr/local/bin/trac-anonymous-check.sh", + user => "root", + minute => 0, + hour => 0, + ensure => present, + require => File['/usr/local/bin/trac-anonymous-check.sh'] + } + +} + class scripts::confineSsh { file { '/usr/local/bin/confine-ssh.sh': -- 1.7.2.1 -- Thanks, Patrick Uiterwijk

3 2

Fedora Atomic / Infrastructure check-in minutes for 9 September 2014
by Joe Brockmeier 09 Sep '14

09 Sep '14

=============== #atomic Meeting =============== Meeting started by jzb at 20:04:18 UTC. The full logs are available at http://meetbot.fedoraproject.org/atomic/2014-09-09/atomic.2014-09-09-20.04.… . Meeting summary --------------- * LINK: https://git.fedorahosted.org/cgit/releng/tree/scripts/buildbranched and https://git.fedorahosted.org/cgit/releng/tree/scripts/buildrawhide (nirik, 20:11:12) * note, we are producing Atomic images regularly in test composes, not yet in nightlies (stickster, 20:13:06) * Help is needed patching the compose scripts! (stickster, 20:16:16) * LINK: https://git.fedorahosted.org/cgit/releng/tree/scripts/run-pungi (stickster, 20:16:44) * LINK: https://git.fedorahosted.org/cgit/releng/tree/scripts/buildbranched (stickster, 20:16:49) * LINK: https://git.fedorahosted.org/cgit/releng/tree/scripts/buildrawhide (stickster, 20:16:55) * metalink XML, mirroring (walters, 20:20:10) * http://koji.fedoraproject.org/koji/buildinfo?buildID=576104 should support metalinks and has a new "summary" file (stickster, 20:21:07) * ACTION: oddshocks work on adding Atomic to releng scripts (jzb, 20:41:49) * open floor (jzb, 20:50:35) Meeting ended at 21:01:41 UTC. Action Items ------------ * oddshocks work on adding Atomic to releng scripts Action Items, by person ----------------------- * oddshocks * oddshocks work on adding Atomic to releng scripts * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * jzb (48) * walters (42) * stickster (25) * nirik (18) * dustymabe (15) * oddshocks (10) * zodbot (7) * roshi (2) * number80 (1) * dgilmore (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -- Joe Brockmeier | Principal Cloud & Storage Analyst jzb(a)redhat.com | http://community.redhat.com/ Twitter: @jzb | http://dissociatedpress.net/

1 0

Adding Fedora applications to gnome-software as webapps
by Ankur Sinha 09 Sep '14

09 Sep '14

Hi, I recently ran in to epiphany web apps, and how gnome-software ships them. I think it'll be really cool to have the different fedora-apps listed in gnome-software too along with the currently present set. I've already submitted a patch that includes Ask Fedora, for example[1]. I was thinking of adding: - docs.fedoraproject.org - fedora packages - fedora wiki - fedocal - fedora copr - fedora status - fedora tagger - planet fedora - easyfix - koji What do you think? The one thing here is that we need to have proper icons for these web apps. For Ask Fedora, I've used the Fedora icon, but it'll be a lot better to have individual icons for each item in the list. [1] https://github.com/hughsie/fedora-appstream/pull/137 -- Thanks, Warm regards, Ankur (FranciscoD) http://fedoraproject.org/wiki/User:Ankursinha Join Fedora! Come talk to us! http://fedoraproject.org/wiki/Fedora_Join_SIG

3 5

Freeze break request: blockerbugs bugfix to correctly sync updates
by Tim Flink 09 Sep '14

09 Sep '14

We found a bug in the blockerbugs app yesterday that is preventing updates from being properly synced and leaving us with an empty page of pending updates: https://qa.fedoraproject.org/blockerbugs/milestone/21/alpha/updates I'd like to deploy a new version of blockerbugs with the fix for that bug and adding a convenience endpoint to the API. The added API endpoint is of little to no risk because there are no current users of that API and the change itself is very small. I'd like to get some +1s if the change is acceptable during freeze. Tim Reviews of changes: (bugfix) https://phab.qadevel.cloud.fedoraproject.org/D228 (endpoint) https://phab.qadevel.cloud.fedoraproject.org/D230 Full diff of code change: diff --git a/blockerbugs/cli.py b/blockerbugs/cli.py index 2ec4898..b164b7b 100644 --- a/blockerbugs/cli.py +++ b/blockerbugs/cli.py @@ -166,7 +166,7 @@ def sync_updates(fullsync=False): active_releases = Release.query.filter_by(active=True).all() update_sync = UpdateSync(db) for release in active_releases: - update_sync.sync_updates(release) + update_sync.sync_updates(release, fullsync) def minify(): diff --git a/blockerbugs/controllers/api/api.py b/blockerbugs/controllers/api/api.py index 09f437f..721b442 100644 --- a/blockerbugs/controllers/api/api.py +++ b/blockerbugs/controllers/api/api.py @@ -233,4 +233,7 @@ def update_spin(rel_num, milestone_version, spin_id): db.session.commit() return JsonResponse(status=200) - +(a)api_v0.route('/milestones/current') +def get_current_milestone(): + current_milestone = get_or_404(Milestone, current=True) + return JsonResponse(current_milestone.simple()) diff --git a/blockerbugs/models/milestone.py b/blockerbugs/models/milestone.py index 68bbf0e..0b1739d 100644 --- a/blockerbugs/models/milestone.py +++ b/blockerbugs/models/milestone.py @@ -60,3 +60,13 @@ class Milestone(db.Model): def __repr__(self): number = self.release.number if self.release else -1 return 'milestone: %d-%s' % (number, self.version) + + def simple(self): + return {'id': self.id, + 'release': self.release.number, + 'version': self.version, + 'name': self.name, + 'blocker_tracker': self.blocker_tracker, + 'fe_tracker': self.fe_tracker, + 'current': self.current, + } diff --git a/blockerbugs/models/update.py b/blockerbugs/models/update.py index 033e623..777beec 100644 --- a/blockerbugs/models/update.py +++ b/blockerbugs/models/update.py @@ -77,7 +77,7 @@ class Update(db.Model): def __str__(self): return 'update: %s' % (self.title) - def sync(self, updateinfo, milestone): + def sync(self, updateinfo, fullsync=False): self.title = updateinfo['title'] self.url = updateinfo['url'] self.karma = updateinfo['karma'] @@ -91,16 +91,18 @@ class Update(db.Model): self.pending = updateinfo['pending'] current_bugids = [bug.bugid for bug in self.bugs] for bugid in updateinfo['bugs']: - if not bugid in current_bugids: + # if full sync is specified, we want to sync all of the bugs + if fullsync or not bugid in current_bugids: newbugs = Bug.query.filter_by(bugid=bugid).all() for bug in newbugs: - self.bugs.append(bug) - if not milestone in self.milestones: - self.milestones.append(milestone) + if not bugid in current_bugids: + self.bugs.append(bug) + if not bug.milestone in self.milestones: + self.milestones.append(bug.milestone) @classmethod - def from_data(cls, updateinfo, release, milestone): + def from_data(cls, updateinfo, release): newupdate = Update(updateinfo['title'], '', 0, '', [], release, None) - newupdate.sync(updateinfo, milestone) + newupdate.sync(updateinfo) return newupdate diff --git a/blockerbugs/util/update_sync.py b/blockerbugs/util/update_sync.py index af8b2bf..4587a8c 100644 --- a/blockerbugs/util/update_sync.py +++ b/blockerbugs/util/update_sync.py @@ -132,7 +132,7 @@ class UpdateSync(object): buglist.extend(milestone.bugs.filter_by(active=True).all()) return buglist - def sync_bug_updates(self, release, bugs): + def sync_bug_updates(self, release, bugs, fullsync=False): starttime = datetime.utcnow() bugs_ids = [bug.bugid for bug in bugs] self.log.debug('searching for updates for bugs %s' % str(bugs_ids)) @@ -154,11 +154,10 @@ class UpdateSync(object): if existing_update: self.log.debug( 'syncing existing update %s' % existing_update.title) - existing_update.sync(update, bug.milestone) + existing_update.sync(update, fullsync) else: self.log.debug('creating new update %s' % update['title']) - existing_update = Update.from_data(update, release, - bug.milestone) + existing_update = Update.from_data(update, release) self.db.session.add(existing_update) self.db.session.commit() @@ -166,7 +165,7 @@ class UpdateSync(object): self.db.session.add(release) self.db.session.commit() - def sync_updates(self, release): + def sync_updates(self, release, fullsync=False): bugs = self.get_release_bugs(release) self.log.info( 'found %d bugs in f%d release' % (len(bugs), release.number)) @@ -175,4 +174,4 @@ class UpdateSync(object): 'no bugs in f%d release, skip update' % (release.number)) release.last_update_sync = datetime.utcnow() return - self.sync_bug_updates(release, bugs) + self.sync_bug_updates(release, bugs, fullsync) diff --git a/testing/test_api.py b/testing/test_api.py index 34c90e3..30f20f6 100644 --- a/testing/test_api.py +++ b/testing/test_api.py @@ -24,6 +24,8 @@ class TestRestAPI(object): cls.release = add_release(99) cls.milestone = add_milestone(cls.release, 'final', 100, 101, '99-final', True) + cls.milestone.current = True + cls.milestone2 = add_milestone(cls.release, 'beta', 200, 201, '99-beta') bug1 = add_bug(9000, 'testbug1', cls.milestone) @@ -287,3 +289,10 @@ class TestRestAPI(object): assert resp.status_code == httplib.FORBIDDEN error = json.loads(resp.data)['error'] assert error['code'] == errors.AuthFailedError.code + + def test_get_current_milestone(self): + url = '/api/v0/milestones/current' + resp = self.client.get(url) + assert resp.status_code == httplib.OK + data = json.loads(resp.data) + assert data['name'] == self.milestone.name

3 2

Freeze break request: https->http forward fix on kojipkgs
by Patrick Uiterwijk 08 Sep '14

08 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I would like to request +1's for the following patch. This solves ticket #4507 (https://fedorahosted.org/fedora-infrastructure/ticket/4507) - From a276feb1f5e1001d7df343ea00b120289b0a1539 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk <puiterwijk(a)redhat.com> Date: Mon, 8 Sep 2014 22:01:34 +0000 Subject: [PATCH] Manually do the forward if trailing slash is excluded - --- configs/web/applications/kojipkgs.conf | 8 ++++++++ 1 files changed, 8 insertions(+), 0 deletions(-) diff --git a/configs/web/applications/kojipkgs.conf b/configs/web/applications/kojipkgs.conf index be0e03e..9cb883f 100644 - --- a/configs/web/applications/kojipkgs.conf +++ b/configs/web/applications/kojipkgs.conf @@ -1,6 +1,14 @@ CustomLog "| /usr/sbin/rotatelogs /var/log/httpd/kojipkgs02.fedoraproject.org-access.log.%Y-%m-%d 86400" combined ErrorLog "| /usr/sbin/rotatelogs /var/log/httpd/kojipkgs02.fedoraproject.org-error.log.%Y-%m-%d 86400" +# Let's forward to a URL including trailing slash manually +# The URLs generated by the DirectorySlash option use http because squid does https termination +RewriteEngine On +RewriteCond %{REQUEST_FILENAME} !-f +RewriteCond %{REQUEST_URI} !(.*)/$ +RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI}/ [R=301,L] + + Alias /packages /mnt/fedora_koji/koji/packages Alias /toplink/packages /mnt/fedora_koji/koji/packages - -- 1.7.2.1 - -- With kind regards, Patrick Uiterwijk Associate Software Engineer, Red Hat -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJUDihcAAoJEIZXmA2atR5QSH4P/A2Ka6G7i/TND4Qw/NM20kvT mFmUFEn37xFyTpwzM1qtuy87VelVwsmytqFY8/OYxa5ZMn0QfszAVQTQS745rqYA J7tSkbVt8pZjLGAzVCZr5pjQkKmm9Olr4n97WFJJLL7pFjbkvGmaAxSMEob4sUiK k5AbPWyqytYmpgxLym+3wbNvq6iwgeCMO6EfD+rzZL6m7tgmo+3hyxvjMX+ImJFQ 6bIPgh8rfRxbmXmo6mrhlmEAoqOi1NmJlGW1QJFLh/yzud6St8khFePCPWB7lhlj YZYoGgl3hOPuzBPmy7iBtKFgT6ZQGjVjSYnaN0FXKcc3HXs6m/FPh1hpbi4SgZh9 KOlWADZxdp68V4cJ47kZ1NxbR4T7dNKbFKFhgusUz5/4hRHRfeb692ZVkFLYMcjF rUULuFK85CC9ZnLctEp2ncnNRE5H4Z+VunlMPdIusNSBN6Tfud0Gn00reYl10e67 0dqSNcfBYx5w4x1UROZEURnjS0BnFeFucaqxyViB0gmcvL/eO1NSvCdru4rOz6YB YDaPsuYlg1F1CWq3rj4trLwbB3YONSyEw98zgSqwolxBO8PlZcwd3tM2Js8PPnFG 3cj7WLfdX8a/8Ap/uhBzKyiGRzZGqe1DA2YQ/BbEH0lKC6lZTFtms8OvCpKlpyeU yr2rIMAmBBtI25RXX+BL =hNNG -----END PGP SIGNATURE-----

3 2

System Freeze Break Request (qa09)
by Stephen John Smoogen 08 Sep '14

08 Sep '14

Most of the changes are in nagios which is frozen. diff --git a/inventory/inventory b/inventory/inventory index 14f4d1f..805a5f0 100644 --- a/inventory/inventory +++ b/inventory/inventory @@ -572,6 +572,7 @@ qa04.qa.fedoraproject.org qa05.qa.fedoraproject.org qa06.qa.fedoraproject.org qa07.qa.fedoraproject.org +qa09.qa.fedoraproject.org [wiki-stg] wiki01.stg.phx2.fedoraproject.org diff --git a/playbooks/groups/virthost.yml b/playbooks/groups/virthost.yml index 4858d8d..900ac85 100644 --- a/playbooks/groups/virthost.yml +++ b/playbooks/groups/virthost.yml @@ -3,7 +3,7 @@ # NOTE: most of these vars_path come from group_vars/backup_server or from hostvars - name: make virthost server system - hosts: virthost15.phx2.fedoraproject.org: bvirthost07.phx2.fedoraproject.org:buildvmhost-10.phx2.fedoraproject.org: buildvmhost-11.phx2.fedoraproject.org:buildvmhost-12.phx2.fedoraproject.org: virthost01.phx2.fedoraproject.org:virthost03.phx2.fedoraproject.org: ibiblio04.fedoraproject.org:bvirthost06.phx2.fedoraproject.org: bvirthost08.phx2.fedoraproject.org:bvirthost09.phx2.fedoraproject.org: bvirthost10.phx2.fedoraproject.org:bvirthost11.phx2.fedoraproject.org: virthost16.phx2.fedoraproject.org:virthost17.phx2.fedoraproject.org: virthost18.phx2.fedoraproject.org:serverbeach07.fedoraproject.org: qa07.qa.fedoraproject.org:coloamer01.fedoraproject.org: qa04.qa.fedoraproject.org:qa05.qa.fedoraproject.org: osuosl03.fedoraproject.org:qa06.qa.fedoraproject.org:v irthost-comm03.qa.fedoraproject.org + hosts: virthost15.phx2.fedoraproject.org: bvirthost07.phx2.fedoraproject.org:buildvmhost-10.phx2.fedoraproject.org: buildvmhost-11.phx2.fedoraproject.org:buildvmhost-12.phx2.fedoraproject.org: virthost01.phx2.fedoraproject.org:virthost03.phx2.fedoraproject.org: ibiblio04.fedoraproject.org:bvirthost06.phx2.fedoraproject.org: bvirthost08.phx2.fedoraproject.org:bvirthost09.phx2.fedoraproject.org: bvirthost10.phx2.fedoraproject.org:bvirthost11.phx2.fedoraproject.org: virthost16.phx2.fedoraproject.org:virthost17.phx2.fedoraproject.org: virthost18.phx2.fedoraproject.org:serverbeach07.fedoraproject.org: qa07.qa.fedoraproject.org:qa09.qa.fedoraproject.org: coloamer01.fedoraproject.org:qa04.qa.fedoraproject.org: qa05.qa.fedoraproject.org:osuosl03.fedoraproject.org: qa06.qa.fedoraproject.org:virthost-comm03.qa.fedoraproject.org user: root accelerate: "{{ accelerated }}" gather_facts: True diff --git a/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg b/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg index b813189..5bea7bb 100644 --- a/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg +++ b/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg @@ -1,6 +1,6 @@ define hostgroup { hostgroup_name mgmt alias Physical hosts management inerface - members backup03.mgmt.fedoraproject.org,bc02.mgmt.fedoraproject.org, bvirthost04.mgmt.fedoraproject.org,bvirthost07.mgmt.fedoraproject.org, download01.mgmt.fedoraproject.org,download02.mgmt.fedoraproject.org, download03.mgmt.fedoraproject.org,download04.mgmt.fedoraproject.org, download05.mgmt.fedoraproject.org,qa01.mgmt.fedoraproject.org, qa02.mgmt.fedoraproject.org,qa03.mgmt.fedoraproject.org, qa04.mgmt.fedoraproject.org,qa05.mgmt.fedoraproject.org, qa06.mgmt.fedoraproject.org,qa07.mgmt.fedoraproject.org, qa08.mgmt.fedoraproject.org,tape02.mgmt.fedoraproject.org, virthost-comm01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org, virthost03.mgmt.fedoraproject.org,virthost04.mgmt.fedoraproject.org, virthost05.mgmt.fedoraproject.org,virthost06.mgmt.fedoraproject.org, virthost07.mgmt.fedoraproject.org,virthost08.mgmt.fedoraproject.org, virthost09.mgmt.fedoraproject.org,virthost10.mgmt.fedoraproject.org, atomic01.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org, virthost14.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org, virthost16.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org, virthost18.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org, virthost-comm03.mgmt.fedoraproject.org,sign-vault03.mgmt.fedoraproject.org, sign-vault04.mgmt.fedoraproject.org + members backup03.mgmt.fedoraproject.org,bc02.mgmt.fedoraproject.org, bvirthost04.mgmt.fedoraproject.org,bvirthost07.mgmt.fedoraproject.org, download01.mgmt.fedoraproject.org,download02.mgmt.fedoraproject.org, download03.mgmt.fedoraproject.org,download04.mgmt.fedoraproject.org, download05.mgmt.fedoraproject.org,qa01.mgmt.fedoraproject.org, qa02.mgmt.fedoraproject.org,qa03.mgmt.fedoraproject.org, qa04.mgmt.fedoraproject.org,qa05.mgmt.fedoraproject.org, qa06.mgmt.fedoraproject.org,qa07.mgmt.fedoraproject.org, qa08.mgmt.fedoraproject.org,qa09.mgmt.fedoraproject.org, tape02.mgmt.fedoraproject.org,virthost-comm01.mgmt.fedoraproject.org, virthost01.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org, virthost04.mgmt.fedoraproject.org,virthost05.mgmt.fedoraproject.org, virthost06.mgmt.fedoraproject.org,virthost07.mgmt.fedoraproject.org, virthost08.mgmt.fedoraproject.org,virthost09.mgmt.fedoraproject.org, virthost10.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org, virthost12.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org, virthost15.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org, virthost17.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org, virthost-comm02.mgmt.fedoraproject.org, virthost-comm03.mgmt.fedoraproject.org,sign-vault03.mgmt.fedoraproject.org, sign-vault04.mgmt.fedoraproject.org } diff --git a/roles/nagios_server/files/nagios/hostgroups/nomail.cfg b/roles/nagios_server/files/nagios/hostgroups/nomail.cfg index 86de46a..5724f0e 100644 --- a/roles/nagios_server/files/nagios/hostgroups/nomail.cfg +++ b/roles/nagios_server/files/nagios/hostgroups/nomail.cfg @@ -1,5 +1,5 @@ define hostgroup { hostgroup_name nomail alias No Mail - members *, !bastion01, !bastion02, !bastion-vpn, !backup03, !db02.stg, !fas01.stg, !koji01.stg, !pkgs01.stg, !proxy01.stg, !releng01.stg, !value01.stg, !smtp-mm-tummy01, !smtp-mm-ib01, !smtp-mm-coloamer01, !hosted03, !hosted04, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, ! bc02.mgmt.fedoraproject.org, !fwsm01-gw, !backup03.mgmt.fedoraproject.org,! bc02.mgmt.fedoraproject.org,!bvirthost04.mgmt.fedoraproject.org,! bvirthost07.mgmt.fedoraproject.org,!download01.mgmt.fedoraproject.org,! download02.mgmt.fedoraproject.org,!download03.mgmt.fedoraproject.org,! download04.mgmt.fedoraproject.org,!download05.mgmt.fedoraproject.org,! qa01.mgmt.fedoraproject.org,!qa02.mgmt.fedoraproject.org,! qa03.mgmt.fedoraproject.org,!qa04.mgmt.fedoraproject.org,! qa05.mgmt.fedoraproject.org,!qa06.mgmt.fedoraproject.org,! qa07.mgmt.fedoraproject.org,!qa08.mgmt.fedoraproject.org,! tape02.mgmt.fedoraproject.org,!virthost-comm01.mgmt.fedoraproject.org,! virthost01.mgmt.fedoraproject.org,!virthost03.mgmt.fedoraproject.org,! virthost04.mgmt.fedoraproject.org,!virthost05.mgmt.fedoraproject.org,! virthost06.mgmt.fedoraproject.org,!virthost07.mgmt.fedoraproject.org,! virthost08.mgmt.fedoraproject.org,!virthost09.mgmt.fedoraproject.org,! virthost10.mgmt.fedoraproject.org,!atomic01.mgmt.fedoraproject.org,! virthost12.mgmt.fedoraproject.org,!virthost14.mgmt.fedoraproject.org,! virthost15.mgmt.fedoraproject.org,!virthost16.mgmt.fedoraproject.org,! virthost17.mgmt.fedoraproject.org,!virthost18.mgmt.fedoraproject.org,!autoqa01,!ibiblio-gw,!packages03,!packages04,!status-fedora2, !virthost-comm02.mgmt.fedoraproject.org, ! virthost-comm03.mgmt.fedoraproject.org, !ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy09-fpo, !proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01-builder13, !arm01-builder14, !arm01-builder15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm-08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-10, !buildvmhost-11, !buildvmhost-12 + members *, !bastion01, !bastion02, !bastion-vpn, !backup03, !db02.stg, !fas01.stg, !koji01.stg, !pkgs01.stg, !proxy01.stg, !releng01.stg, !value01.stg, !smtp-mm-tummy01, !smtp-mm-ib01, !smtp-mm-coloamer01, !hosted03, !hosted04, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, ! bc02.mgmt.fedoraproject.org, !fwsm01-gw, !backup03.mgmt.fedoraproject.org,! bc02.mgmt.fedoraproject.org,!bvirthost04.mgmt.fedoraproject.org,! bvirthost07.mgmt.fedoraproject.org,!download01.mgmt.fedoraproject.org,! download02.mgmt.fedoraproject.org,!download03.mgmt.fedoraproject.org,! download04.mgmt.fedoraproject.org,!download05.mgmt.fedoraproject.org,! qa01.mgmt.fedoraproject.org,!qa02.mgmt.fedoraproject.org,! qa03.mgmt.fedoraproject.org,!qa04.mgmt.fedoraproject.org,! qa05.mgmt.fedoraproject.org,!qa06.mgmt.fedoraproject.org,! qa07.mgmt.fedoraproject.org,!qa08.mgmt.fedoraproject.org,! qa09.mgmt.fedoraproject.org,!tape02.mgmt.fedoraproject.org,! virthost-comm01.mgmt.fedoraproject.org,!virthost01.mgmt.fedoraproject.org,! virthost03.mgmt.fedoraproject.org,!virthost04.mgmt.fedoraproject.org,! virthost05.mgmt.fedoraproject.org,!virthost06.mgmt.fedoraproject.org,! virthost07.mgmt.fedoraproject.org,!virthost08.mgmt.fedoraproject.org,! virthost09.mgmt.fedoraproject.org,!virthost10.mgmt.fedoraproject.org,! atomic01.mgmt.fedoraproject.org,!virthost12.mgmt.fedoraproject.org,! virthost14.mgmt.fedoraproject.org,!virthost15.mgmt.fedoraproject.org,! virthost16.mgmt.fedoraproject.org,!virthost17.mgmt.fedoraproject.org,! virthost18.mgmt.fedoraproject.org,!autoqa01,!ibiblio-gw,!packages03,!packages04,!status-fedora2, !virthost-comm02.mgmt.fedoraproject.org, ! virthost-comm03.mgmt.fedoraproject.org, !ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy09-fpo, !proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01-builder13, !arm01-builder14, !arm01-builder15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm-08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-10, !buildvmhost-11, !buildvmhost-12 } diff --git a/roles/nagios_server/files/nagios/hostgroups/servers.cfg b/roles/nagios_server/files/nagios/hostgroups/servers.cfg index 6031e76..b70fd1a 100644 --- a/roles/nagios_server/files/nagios/hostgroups/servers.cfg +++ b/roles/nagios_server/files/nagios/hostgroups/servers.cfg @@ -5,6 +5,6 @@ define hostgroup { hostgroup_name servers alias All Servers - members *, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, !fwsm01-gw, ! backup03.mgmt.fedoraproject.org,!bc02.mgmt.fedoraproject.org,! download01.mgmt.fedoraproject.org,!download02.mgmt.fedoraproject.org,! download03.mgmt.fedoraproject.org,!download04.mgmt.fedoraproject.org,! download05.mgmt.fedoraproject.org,!qa01.mgmt.fedoraproject.org,! qa02.mgmt.fedoraproject.org,!qa03.mgmt.fedoraproject.org,! qa04.mgmt.fedoraproject.org,!qa05.mgmt.fedoraproject.org,! qa06.mgmt.fedoraproject.org,!qa07.mgmt.fedoraproject.org,! qa08.mgmt.fedoraproject.org,!tape02.mgmt.fedoraproject.org,! bvirthost04.mgmt.fedoraproject.org, !bvirthost07.mgmt.fedoraproject.org, ! virthost-comm01.mgmt.fedoraproject.org,!virthost01.mgmt.fedoraproject.org,! virthost03.mgmt.fedoraproject.org,!virthost04.mgmt.fedoraproject.org,! virthost05.mgmt.fedoraproject.org,!virthost06.mgmt.fedoraproject.org,! virthost07.mgmt.fedoraproject.org,!virthost08.mgmt.fedoraproject.org,! virthost09.mgmt.fedoraproject.org,!virthost10.mgmt.fedoraproject.org,! atomic01.mgmt.fedoraproject.org, !virthost12.mgmt.fedoraproject.org, ! virthost14.mgmt.fedoraproject.org,!virthost15.mgmt.fedoraproject.org,! virthost16.mgmt.fedoraproject.org,!virthost17.mgmt.fedoraproject.org,! virthost18.mgmt.fedoraproject.org, !autoqa01, !ibiblio-gw, !status-fedora2, !virthost-comm02.mgmt.fedoraproject.org, ! virthost-comm03.mgmt.fedoraproject.org, !ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy09-fpo,!proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01-builder13, !arm01-builder14, !arm01-builder15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm-08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-10, !buildvmhost-11, !buildvmhost-12 + members *, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, !fwsm01-gw, ! backup03.mgmt.fedoraproject.org,!bc02.mgmt.fedoraproject.org,! download01.mgmt.fedoraproject.org,!download02.mgmt.fedoraproject.org,! download03.mgmt.fedoraproject.org,!download04.mgmt.fedoraproject.org,! download05.mgmt.fedoraproject.org,!qa01.mgmt.fedoraproject.org,! qa02.mgmt.fedoraproject.org,!qa03.mgmt.fedoraproject.org,! qa04.mgmt.fedoraproject.org,!qa05.mgmt.fedoraproject.org,! qa06.mgmt.fedoraproject.org,!qa07.mgmt.fedoraproject.org,! qa08.mgmt.fedoraproject.org,!qa09.mgmt.fedoraproject.org,! tape02.mgmt.fedoraproject.org,!bvirthost04.mgmt.fedoraproject.org, ! bvirthost07.mgmt.fedoraproject.org, !virthost-comm01.mgmt.fedoraproject.org ,!virthost01.mgmt.fedoraproject.org,!virthost03.mgmt.fedoraproject.org,! virthost04.mgmt.fedoraproject.org,!virthost05.mgmt.fedoraproject.org,! virthost06.mgmt.fedoraproject.org,!virthost07.mgmt.fedoraproject.org,! virthost08.mgmt.fedoraproject.org,!virthost09.mgmt.fedoraproject.org,! virthost10.mgmt.fedoraproject.org,!atomic01.mgmt.fedoraproject.org, ! virthost12.mgmt.fedoraproject.org, !virthost14.mgmt.fedoraproject.org,! virthost15.mgmt.fedoraproject.org,!virthost16.mgmt.fedoraproject.org,! virthost17.mgmt.fedoraproject.org,!virthost18.mgmt.fedoraproject.org, !autoqa01, !ibiblio-gw, !status-fedora2, ! virthost-comm02.mgmt.fedoraproject.org, ! virthost-comm03.mgmt.fedoraproject.org, !ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy09-fpo,!proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01-builder13, !arm01-builder14, !arm01-builder15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm-08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-10, !buildvmhost-11, !buildvmhost-12 } diff --git a/roles/nagios_server/files/nagios/hosts/qa09-mgmt.cfg b/roles/nagios_server/files/nagios/hosts/qa09-mgmt.cfg new file mode 100644 index 0000000..9ec2fda --- /dev/null +++ b/roles/nagios_server/files/nagios/hosts/qa09-mgmt.cfg @@ -0,0 +1,7 @@ +define host { + host_name qa09.mgmt.fedoraproject.org + alias qa09.mgmt.fedoraproject.org + use mincheck + address qa09.mgmt.fedoraproject.org + parents fwsm01-gw +} diff --git a/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg b/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg index cc76391..8a3d645 100644 --- a/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg +++ b/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg @@ -1,5 +1,5 @@ define servicegroup { servicegroup_name mgmt-http alias mgmt interfaces on http - members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-http,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-http,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-http,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-http,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-http,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-http,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-http,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-http,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-http,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-http,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-http,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-http,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-http,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-http,qa07.mgmt.fedoraproject.org ,qa07.mgmt.fedoraproject.org-http,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-http,tape02.mgmt.fedoraproject.org ,tape02.mgmt.fedoraproject.org-http,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-http, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-http, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-http, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-http, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-http, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-http, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-http, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-http, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-http, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-http, virthost-comm02.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org-http, virthost-comm03.mgmt.fedoraproject.org ,virthost-comm03.mgmt.fedoraproject.org-http, sign-vault03.mgmt.fedoraproject.org ,sign-vault03.mgmt.fedoraproject.org-http, sign-vault04.mgmt.fedoraproject.org,sign-vault04.mgmt.fedoraproject.org-http + members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-http,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-http,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-http,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-http,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-http,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-http,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-http,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-http,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-http,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-http,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-http,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-http,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-http,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-http,qa07.mgmt.fedoraproject.org ,qa07.mgmt.fedoraproject.org-http,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-http,qa09.mgmt.fedoraproject.org ,qa09.mgmt.fedoraproject.org-http,tape02.mgmt.fedoraproject.org ,tape02.mgmt.fedoraproject.org-http,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-http, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-http, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-http, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-http, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-http, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-http, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-http, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-http, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-http, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-http, virthost-comm02.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org-http, virthost-comm03.mgmt.fedoraproject.org ,virthost-comm03.mgmt.fedoraproject.org-http, sign-vault03.mgmt.fedoraproject.org ,sign-vault03.mgmt.fedoraproject.org-http, sign-vault04.mgmt.fedoraproject.org,sign-vault04.mgmt.fedoraproject.org-http } diff --git a/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg b/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg index 999dc15..ff5e05c 100644 --- a/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg +++ b/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg @@ -1,5 +1,5 @@ define servicegroup { servicegroup_name mgmt-https alias mgmt interfaces on https - members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-https,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-https,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-https,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-https,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-https,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-https,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-https,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-https,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-https,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-https,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-https,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-https,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-https,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-https,qa07.mgmt.fedoraproject.org ,qa07.mgmt.fedoraproject.org-https,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-https,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-https, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-https, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-https, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-https, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-https, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-https, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-https, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-https, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-https, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-https, virthost-comm02.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org-https, virthost-comm03.mgmt.fedoraproject.org,virthost-comm03.mgmt.fedoraproject.org-https, sign-vault03.mgmt.fedoraproject.org ,sign-vault03.mgmt.fedoraproject.org-https, sign-vault04.mgmt.fedoraproject.org ,sign-vault04.mgmt.fedoraproject.org-https + members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-https,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-https,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-https,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-https,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-https,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-https,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-https,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-https,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-https,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-https,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-https,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-https,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-https,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-https,qa07.mgmt.fedoraproject.org ,qa07.mgmt.fedoraproject.org-https,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-https,qa09.mgmt.fedoraproject.org ,qa09.mgmt.fedoraproject.org-https,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-https, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-https, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-https, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-https, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-https, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-https, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-https, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-https, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-https, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-https, virthost-comm02.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org-https, virthost-comm03.mgmt.fedoraproject.org,virthost-comm03.mgmt.fedoraproject.org-https, sign-vault03.mgmt.fedoraproject.org ,sign-vault03.mgmt.fedoraproject.org-https, sign-vault04.mgmt.fedoraproject.org ,sign-vault04.mgmt.fedoraproject.org-https } diff --git a/roles/nagios_server/files/nagios/services/mgmt.cfg b/roles/nagios_server/files/nagios/services/mgmt.cfg index eee3bcc..e23f58b 100644 --- a/roles/nagios_server/files/nagios/services/mgmt.cfg +++ b/roles/nagios_server/files/nagios/services/mgmt.cfg @@ -127,6 +127,13 @@ define service { } define service { + host_name qa09.mgmt.fedoraproject.org + service_description qa09.mgmt.fedoraproject.org-http + check_command check_http!qa09.mgmt.fedoraproject.org + use defaulttemplate +} + +define service { host_name sign-vault03.mgmt.fedoraproject.org service_description sign-vault03.mgmt.fedoraproject.org-http check_command check_http!sign-vault03.mgmt.fedoraproject.org -- Stephen J Smoogen.

3 2

System Freeze Break Request Fwd: [ansible] add nagios items for virthost-comm03
by Stephen John Smoogen 08 Sep '14

08 Sep '14

I forgot to get a SFBR before pushing into ansible main repo. I have not run the job, so could I get a review please? ---------- Forwarded message ---------- From: Stephen J Smoogen <smooge(a)fedoraproject.org> Date: 8 September 2014 13:11 Subject: [ansible] add nagios items for virthost-comm03 To: sysadmin-members(a)fedoraproject.org This is the public repository, do not commit sensitive or confidential information here. X-Git-Refname: refs/heads/master X-Git-Oldrev: 137bb9ccaf66039e06994be0389c6a1c1b741eee X-Git-Newrev: 4ef06fea3cc319dedd872167aeb3f1a9c9f69e4e commit 4ef06fea3cc319dedd872167aeb3f1a9c9f69e4e Author: Stephen Smoogen <smooge(a)redhat.com> Date: Mon Sep 8 19:11:15 2014 +0000 add nagios items for virthost-comm03 .../files/nagios/hostgroups/kvmHosts.cfg | 2 +- .../nagios_server/files/nagios/hostgroups/mgmt.cfg | 2 +- .../files/nagios/hostgroups/nomail.cfg | 2 +- .../files/nagios/hostgroups/servers.cfg | 2 +- .../files/nagios/hosts/virthost-comm03-mgmt.cfg | 7 +++++++ .../files/nagios/hosts/virthost-comm03.cfg | 7 +++++++ .../files/nagios/servicegroups/mgmt-http.cfg | 2 +- .../files/nagios/servicegroups/mgmt-https.cfg | 2 +- roles/nagios_server/files/nagios/services/mgmt.cfg | 13 +++++++++++++ 9 files changed, 33 insertions(+), 6 deletions(-) --- diff --git a/roles/nagios_server/files/nagios/hostgroups/kvmHosts.cfg b/roles/nagios_server/files/nagios/hostgroups/kvmHosts.cfg index ee41bc0..9932f18 100644 --- a/roles/nagios_server/files/nagios/hostgroups/kvmHosts.cfg +++ b/roles/nagios_server/files/nagios/hostgroups/kvmHosts.cfg @@ -5,5 +5,5 @@ define hostgroup { hostgroup_name kvmServers alias kvmServers - members bvirthost04, bvirthost06, bvirthost07, bvirthost08, bvirthost09, bvirthost10, bvirthost11, virthost01, virthost03, virthost04, virthost05, virthost06, virthost07, virthost08, virthost09, virthost10, virthost12, virthost14, virthost15, virthost16, virthost17, virthost18, virthost-comm01, virthost-comm02, telia01, tummy01, bodhost01, osuosl01, osuosl02, ibiblio01, ibiblio02, ibiblio03, ibiblio04, coloamer01, internetx01, serverbeach06, serverbeach07, serverbeach08, serverbeach09, serverbeach10 + members bvirthost04, bvirthost06, bvirthost07, bvirthost08, bvirthost09, bvirthost10, bvirthost11, virthost01, virthost03, virthost04, virthost05, virthost06, virthost07, virthost08, virthost09, virthost10, virthost12, virthost14, virthost15, virthost16, virthost17, virthost18, virthost-comm01, virthost-comm02, virthost-comm03, telia01, tummy01, bodhost01, osuosl01, osuosl02, ibiblio01, ibiblio02, ibiblio03, ibiblio04, coloamer01, internetx01, serverbeach06, serverbeach07, serverbeach08, serverbeach09, serverbeach10 } diff --git a/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg b/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg index c3b3796..b813189 100644 --- a/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg +++ b/roles/nagios_server/files/nagios/hostgroups/mgmt.cfg @@ -1,6 +1,6 @@ define hostgroup { hostgroup_name mgmt alias Physical hosts management inerface - members backup03.mgmt.fedoraproject.org, bc02.mgmt.fedoraproject.org,bvirthost04.mgmt.fedoraproject.org, bvirthost07.mgmt.fedoraproject.org,download01.mgmt.fedoraproject.org, download02.mgmt.fedoraproject.org,download03.mgmt.fedoraproject.org, download04.mgmt.fedoraproject.org,download05.mgmt.fedoraproject.org, qa01.mgmt.fedoraproject.org,qa02.mgmt.fedoraproject.org, qa03.mgmt.fedoraproject.org,qa04.mgmt.fedoraproject.org, qa05.mgmt.fedoraproject.org,qa06.mgmt.fedoraproject.org, qa07.mgmt.fedoraproject.org,qa08.mgmt.fedoraproject.org, tape02.mgmt.fedoraproject.org,virthost-comm01.mgmt.fedoraproject.org, virthost01.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org, virthost04.mgmt.fedoraproject.org,virthost05.mgmt.fedoraproject.org, virthost06.mgmt.fedoraproject.org,virthost07.mgmt.fedoraproject.org, virthost08.mgmt.fedoraproject.org,virthost09.mgmt.fedoraproject.org, virthost10.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org, virthost12.mgmt.fedoraproject.org,virthost14. mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org, virthost16.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org, virthost18.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org, sign-vault03.mgmt.fedoraproject.org,sign-vault04.mgmt.fedoraproject.org + members backup03.mgmt.fedoraproject.org, bc02.mgmt.fedoraproject.org,bvirthost04.mgmt.fedoraproject.org, bvirthost07.mgmt.fedoraproject.org,download01.mgmt.fedoraproject.org, download02.mgmt.fedoraproject.org,download03.mgmt.fedoraproject.org, download04.mgmt.fedoraproject.org,download05.mgmt.fedoraproject.org, qa01.mgmt.fedoraproject.org,qa02.mgmt.fedoraproject.org, qa03.mgmt.fedoraproject.org,qa04.mgmt.fedoraproject.org, qa05.mgmt.fedoraproject.org,qa06.mgmt.fedoraproject.org, qa07.mgmt.fedoraproject.org,qa08.mgmt.fedoraproject.org, tape02.mgmt.fedoraproject.org,virthost-comm01.mgmt.fedoraproject.org, virthost01.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org, virthost04.mgmt.fedoraproject.org,virthost05.mgmt.fedoraproject.org, virthost06.mgmt.fedoraproject.org,virthost07.mgmt.fedoraproject.org, virthost08.mgmt.fedoraproject.org,virthost09.mgmt.fedoraproject.org, virthost10.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org, virthost12.mgmt.fedoraproject.org,virthost14. mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org, virthost16.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org, virthost18.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org, virthost-comm03.mgmt.fedoraproject.org,sign-vault03.mgmt.fedoraproject.org, sign-vault04.mgmt.fedoraproject.org } diff --git a/roles/nagios_server/files/nagios/hostgroups/nomail.cfg b/roles/nagios_server/files/nagios/hostgroups/nomail.cfg index b50cb9e..86de46a 100644 --- a/roles/nagios_server/files/nagios/hostgroups/nomail.cfg +++ b/roles/nagios_server/files/nagios/hostgroups/nomail.cfg @@ -1,5 +1,5 @@ define hostgroup { hostgroup_name nomail alias No Mail - members *, !bastion01, !bastion02, !bastion-vpn, !backup03, !db02.stg, !fas01.stg, !koji01.stg, !pkgs01.stg, !proxy01.stg, !releng01.stg, !value01.stg, !smtp-mm-tummy01, !smtp-mm-ib01, !smtp-mm-coloamer01, !hosted03, !hosted04, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, ! bc02.mgmt.fedoraproject.org, !fwsm01-gw, !backup03.mgmt.fedoraproject.org,! bc02.mgmt.fedoraproject.org,!bvirthost04.mgmt.fedoraproject.org,! bvirthost07.mgmt.fedoraproject.org,!download01.mgmt.fedoraproject.org,! download02.mgmt.fedoraproject.org,!download03.mgmt.fedoraproject.org,! download04.mgmt.fedoraproject.org,!download05.mgmt.fedoraproject.org,! qa01.mgmt.fedoraproject.org,!qa02.mgmt.fedoraproject.org,! qa03.mgmt.fedoraproject.org,!qa04.mgmt.fedoraproject.org,! qa05.mgmt.fedoraproject.org,!qa06.mgmt.fedorap roject.org,!qa07.mgmt.fedoraproject.org,!qa08.mgmt.fedoraproject.org,! tape02.mgmt.fedoraproject.org,!virthost-comm01.mgmt.fedoraproject.org,! virthost01.mgmt.fedoraproject.org,!virthost03.mgmt.fedoraproject.org,! virthost04.mgmt.fedoraproject.org,!virthost05.mgmt.fedoraproject.org,! virthost06.mgmt.fedoraproject.org,!virthost07.mgmt.fedoraproject.org,! virthost08.mgmt.fedoraproject.org,!virthost09.mgmt.fedoraproject.org,! virthost10.mgmt.fedoraproject.org,!atomic01.mgmt.fedoraproject.org,! virthost12.mgmt.fedoraproject.org,!virthost14.mgmt.fedoraproject.org,! virthost15.mgmt.fedoraproject.org,!virthost16.mgmt.fedoraproject.org,! virthost17.mgmt.fedoraproject.org,!virthost18.mgmt.fedoraproject.org,!autoqa01,!ibiblio-gw,!packages03,!packages04,!status-fedora2, !virthost-comm02.mgmt.fedoraproject.org,!ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy09-fpo, !proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01-builder13, !arm01-builder14, !arm01-builder15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm-08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-10, !buildvmhost-11, !buildvmhost-12 + members *, !bastion01, !bastion02, !bastion-vpn, !backup03, !db02.stg, !fas01.stg, !koji01.stg, !pkgs01.stg, !proxy01.stg, !releng01.stg, !value01.stg, !smtp-mm-tummy01, !smtp-mm-ib01, !smtp-mm-coloamer01, !hosted03, !hosted04, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, ! bc02.mgmt.fedoraproject.org, !fwsm01-gw, !backup03.mgmt.fedoraproject.org,! bc02.mgmt.fedoraproject.org,!bvirthost04.mgmt.fedoraproject.org,! bvirthost07.mgmt.fedoraproject.org,!download01.mgmt.fedoraproject.org,! download02.mgmt.fedoraproject.org,!download03.mgmt.fedoraproject.org,! download04.mgmt.fedoraproject.org,!download05.mgmt.fedoraproject.org,! qa01.mgmt.fedoraproject.org,!qa02.mgmt.fedoraproject.org,! qa03.mgmt.fedoraproject.org,!qa04.mgmt.fedoraproject.org,! qa05.mgmt.fedoraproject.org,!qa06.mgmt.fedorap roject.org,!qa07.mgmt.fedoraproject.org,!qa08.mgmt.fedoraproject.org,! tape02.mgmt.fedoraproject.org,!virthost-comm01.mgmt.fedoraproject.org,! virthost01.mgmt.fedoraproject.org,!virthost03.mgmt.fedoraproject.org,! virthost04.mgmt.fedoraproject.org,!virthost05.mgmt.fedoraproject.org,! virthost06.mgmt.fedoraproject.org,!virthost07.mgmt.fedoraproject.org,! virthost08.mgmt.fedoraproject.org,!virthost09.mgmt.fedoraproject.org,! virthost10.mgmt.fedoraproject.org,!atomic01.mgmt.fedoraproject.org,! virthost12.mgmt.fedoraproject.org,!virthost14.mgmt.fedoraproject.org,! virthost15.mgmt.fedoraproject.org,!virthost16.mgmt.fedoraproject.org,! virthost17.mgmt.fedoraproject.org,!virthost18.mgmt.fedoraproject.org,!autoqa01,!ibiblio-gw,!packages03,!packages04,!status-fedora2, !virthost-comm02.mgmt.fedoraproject.org, ! virthost-comm03.mgmt.fedoraproject.org, !ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy0 9-fpo, !proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01-builder13, !arm01-builder14, !arm01-builder15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm- 08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-10, !buildvmhost-11, !buildvmhost-12 } diff --git a/roles/nagios_server/files/nagios/hostgroups/servers.cfg b/roles/nagios_server/files/nagios/hostgroups/servers.cfg index 74baf2a..6031e76 100644 --- a/roles/nagios_server/files/nagios/hostgroups/servers.cfg +++ b/roles/nagios_server/files/nagios/hostgroups/servers.cfg @@ -5,6 +5,6 @@ define hostgroup { hostgroup_name servers alias All Servers - members *, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, !fwsm01-gw, ! backup03.mgmt.fedoraproject.org,!bc02.mgmt.fedoraproject.org,! download01.mgmt.fedoraproject.org,!download02.mgmt.fedoraproject.org,! download03.mgmt.fedoraproject.org,!download04.mgmt.fedoraproject.org,! download05.mgmt.fedoraproject.org,!qa01.mgmt.fedoraproject.org,! qa02.mgmt.fedoraproject.org,!qa03.mgmt.fedoraproject.org,! qa04.mgmt.fedoraproject.org,!qa05.mgmt.fedoraproject.org,! qa06.mgmt.fedoraproject.org,!qa07.mgmt.fedoraproject.org,! qa08.mgmt.fedoraproject.org,!tape02.mgmt.fedoraproject.org,! bvirthost04.mgmt.fedoraproject.org, !bvirthost07.mgmt.fedoraproject.org, ! virthost-comm01.mgmt.fedoraproject.org,!virthost01.mgmt.fedoraproject.org,! virthost03.mgmt.fedoraproject.org,!virthost04.mgmt.fedoraproject.org, !virthost05.mgmt.fedoraproject.org,!virthost06.mgmt.fedoraproject.org,! virthost07.mgmt.fedoraproject.org,!virthost08.mgmt.fedoraproject.org,! virthost09.mgmt.fedoraproject.org,!virthost10.mgmt.fedoraproject.org,! atomic01.mgmt.fedoraproject.org, !virthost12.mgmt.fedoraproject.org, ! virthost14.mgmt.fedoraproject.org,!virthost15.mgmt.fedoraproject.org,! virthost16.mgmt.fedoraproject.org,!virthost17.mgmt.fedoraproject.org,! virthost18.mgmt.fedoraproject.org, !autoqa01, !ibiblio-gw, !status-fedora2,! virthost-comm02.mgmt.fedoraproject.org,!ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy09-fpo,!proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01-builder13, !arm01-builder14, !arm01-builde r15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm-08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-10, !buildvmhost-11, !buildvmhost-12 + members *, !proxy01-fpo, !proxy01-wildcard, !proxy02-fpo, !proxy02-wildcard, !proxy03-fpo, !proxy03-wildcard, !proxy04-fpo, !proxy04-wildcard, !proxy06-fpo, !proxy06-wildcard, !proxy07-fpo, !proxy07-wildcard, !proxy08-fpo, !proxy08-wildcard, !fwsm01-gw, ! backup03.mgmt.fedoraproject.org,!bc02.mgmt.fedoraproject.org,! download01.mgmt.fedoraproject.org,!download02.mgmt.fedoraproject.org,! download03.mgmt.fedoraproject.org,!download04.mgmt.fedoraproject.org,! download05.mgmt.fedoraproject.org,!qa01.mgmt.fedoraproject.org,! qa02.mgmt.fedoraproject.org,!qa03.mgmt.fedoraproject.org,! qa04.mgmt.fedoraproject.org,!qa05.mgmt.fedoraproject.org,! qa06.mgmt.fedoraproject.org,!qa07.mgmt.fedoraproject.org,! qa08.mgmt.fedoraproject.org,!tape02.mgmt.fedoraproject.org,! bvirthost04.mgmt.fedoraproject.org, !bvirthost07.mgmt.fedoraproject.org, ! virthost-comm01.mgmt.fedoraproject.org,!virthost01.mgmt.fedoraproject.org,! virthost03.mgmt.fedoraproject.org,!virthost04.mgmt.fedoraproject.org, !virthost05.mgmt.fedoraproject.org,!virthost06.mgmt.fedoraproject.org,! virthost07.mgmt.fedoraproject.org,!virthost08.mgmt.fedoraproject.org,! virthost09.mgmt.fedoraproject.org,!virthost10.mgmt.fedoraproject.org,! atomic01.mgmt.fedoraproject.org, !virthost12.mgmt.fedoraproject.org, ! virthost14.mgmt.fedoraproject.org,!virthost15.mgmt.fedoraproject.org,! virthost16.mgmt.fedoraproject.org,!virthost17.mgmt.fedoraproject.org,! virthost18.mgmt.fedoraproject.org, !autoqa01, !ibiblio-gw, !status-fedora2, !virthost-comm02.mgmt.fedoraproject.org, ! virthost-comm03.mgmt.fedoraproject.org, !ppc-hub,!ppc-composer,!retrace01.qa ,!sign-vault03,!sign-vault03.mgmt.fedoraproject.org,!sign-vault04,! sign-vault04.mgmt.fedoraproject.org,!proxy09-fpo,!proxy09-wildcard, !arm01-releng00, !arm01-retrace01, !arm01-builder02, !arm01-builder03, !arm01-builder04, !arm01-builder05, !arm01-builder06, !arm01-builder07, !arm01-builder08, !arm01-builder09, !arm01-builder10, !arm01-builder11, !arm01-builder12, !arm01 -builder13, !arm01-builder14, !arm01-builder15, !arm01-builder16, !arm01-builder17, !arm01-builder18, !arm01-builder19, !arm01-builder20, !arm01-builder21, !arm01-builder22, !arm01-builder23, !arm02-builder00, !arm02-builder01, !arm02-builder02, !arm02-builder03, !arm02-builder04, !arm02-builder05, !arm02-builder06, !arm02-builder07, !arm02-builder08, !arm02-builder09, !arm02-builder10, !arm02-builder11, !arm02-builder12, !arm02-builder13, !arm02-builder14, !arm02-builder15, !arm02-builder16, !arm02-builder17, !arm02-builder18, !arm02-builder19, !arm02-builder20, !arm02-builder21, !arm02-builder22, !arm02-builder23, !buildvm-01, !buildvm-02, !buildvm-03, !buildvm-04, !buildvm-05, !buildvm-06, !buildvm-07, !buildvm-08, !buildvm-09, !buildvm-10, !buildvm-11, !buildvm-12, !buildvm-13, !buildvm-14, !buildvm-15, !buildvm-16, !buildvm-17, !buildvm-18, !buildvm-19, !buildvm-20, !buildvm-21, !buildvm-22, !buildvm-23, !buildvm-24, !buildvm-25, !buildvm-26, !buildvm-27, !buildvmhost-1 0, !buildvmhost-11, !buildvmhost-12 } diff --git a/roles/nagios_server/files/nagios/hosts/virthost-comm03-mgmt.cfg b/roles/nagios_server/files/nagios/hosts/virthost-comm03-mgmt.cfg new file mode 100644 index 0000000..72bc693 --- /dev/null +++ b/roles/nagios_server/files/nagios/hosts/virthost-comm03-mgmt.cfg @@ -0,0 +1,7 @@ +define host { + host_name virthost-comm03.mgmt.fedoraproject.org + alias virthost-comm03.mgmt.fedoraproject.org + use mincheck + address virthost-comm03.mgmt.fedoraproject.org + parents fwsm01-gw +} diff --git a/roles/nagios_server/files/nagios/hosts/virthost-comm03.cfg b/roles/nagios_server/files/nagios/hosts/virthost-comm03.cfg new file mode 100644 index 0000000..36250e7 --- /dev/null +++ b/roles/nagios_server/files/nagios/hosts/virthost-comm03.cfg @@ -0,0 +1,7 @@ +define host { + host_name virthost-comm03 + alias virthost-comm03.qa.fedoraproject.org + use defaulttemplate + address virthost-comm03.qa.fedoraproject.org + parents fwsm01-gw +} diff --git a/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg b/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg index 76921cc..cc76391 100644 --- a/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg +++ b/roles/nagios_server/files/nagios/servicegroups/mgmt-http.cfg @@ -1,5 +1,5 @@ define servicegroup { servicegroup_name mgmt-http alias mgmt interfaces on http - members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-http,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-http,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-http,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-http,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-http,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-http,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-http,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-http,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-http,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-http,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-http,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-http,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-http,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-http,qa07.mgmt.fedoraproject.org,qa07.mgmt.f edoraproject.org-http,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-http,tape02.mgmt.fedoraproject.org ,tape02.mgmt.fedoraproject.org-http,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-http, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-http, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-http, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-http, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-http, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-http, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-http, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-http, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-http, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-http, virthost-comm02.mgmt.fedoraproject.org ,virthost-comm02.mgmt.fedoraproject.org-http,sign-vault03.mgmt.fedo raproject.org,sign-vault03.mgmt.fedoraproject.org-http, sign-vault04.mgmt.fedoraproject.org,sign-vault04.mgmt.fedoraproject.org-http + members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-http,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-http,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-http,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-http,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-http,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-http,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-http,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-http,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-http,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-http,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-http,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-http,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-http,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-http,qa07.mgmt.fedoraproject.org,qa07.mgmt.f edoraproject.org-http,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-http,tape02.mgmt.fedoraproject.org ,tape02.mgmt.fedoraproject.org-http,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-http, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-http, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-http, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-http, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-http, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-http, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-http, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-http, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-http, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-http, virthost-comm02.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org-http, virthost-comm03.mgmt. fedoraproject.org,virthost-comm03.mgmt.fedoraproject.org-http, sign-vault03.mgmt.fedoraproject.org ,sign-vault03.mgmt.fedoraproject.org-http, sign-vault04.mgmt.fedoraproject.org,sign-vault04.mgmt.fedoraproject.org-http } diff --git a/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg b/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg index e20e2ea..999dc15 100644 --- a/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg +++ b/roles/nagios_server/files/nagios/servicegroups/mgmt-https.cfg @@ -1,5 +1,5 @@ define servicegroup { servicegroup_name mgmt-https alias mgmt interfaces on https - members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-https,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-https,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-https,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-https,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-https,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-https,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-https,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-https,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-https,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-https,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-https,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-https,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-https,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-https,qa07.mgmt.fedoraproject.or g,qa07.mgmt.fedoraproject.org-https,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-https,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-https, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-https, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-https, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-https, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-https, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-https, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-https, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-https, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-https, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-https, virthost-comm02.mgmt.fedoraproject.org ,virthost-comm02.mgmt.fedoraproject.org-https, sign-vault03.mgmt.fedoraproject.org,sign-vault03.mgmt.fedorap roject.org-https,sign-vault04.mgmt.fedoraproject.org ,sign-vault04.mgmt.fedoraproject.org-https + members backup03.mgmt.fedoraproject.org ,backup03.mgmt.fedoraproject.org-https,bc02.mgmt.fedoraproject.org ,bc02.mgmt.fedoraproject.org-https,bvirthost07.mgmt.fedoraproject.org ,bvirthost07.mgmt.fedoraproject.org-https,download01.mgmt.fedoraproject.org ,download01.mgmt.fedoraproject.org-https,download02.mgmt.fedoraproject.org ,download02.mgmt.fedoraproject.org-https,download03.mgmt.fedoraproject.org ,download03.mgmt.fedoraproject.org-https,download04.mgmt.fedoraproject.org ,download04.mgmt.fedoraproject.org-https,download05.mgmt.fedoraproject.org ,download05.mgmt.fedoraproject.org-https,qa01.mgmt.fedoraproject.org ,qa01.mgmt.fedoraproject.org-https,qa02.mgmt.fedoraproject.org ,qa02.mgmt.fedoraproject.org-https,qa03.mgmt.fedoraproject.org ,qa03.mgmt.fedoraproject.org-https,qa04.mgmt.fedoraproject.org ,qa04.mgmt.fedoraproject.org-https,qa05.mgmt.fedoraproject.org ,qa05.mgmt.fedoraproject.org-https,qa06.mgmt.fedoraproject.org ,qa06.mgmt.fedoraproject.org-https,qa07.mgmt.fedoraproject.or g,qa07.mgmt.fedoraproject.org-https,qa08.mgmt.fedoraproject.org ,qa08.mgmt.fedoraproject.org-https,virthost-comm01.mgmt.fedoraproject.org ,virthost-comm01.mgmt.fedoraproject.org-https, virthost01.mgmt.fedoraproject.org,virthost01.mgmt.fedoraproject.org-https, virthost03.mgmt.fedoraproject.org,virthost03.mgmt.fedoraproject.org-https, atomic01.mgmt.fedoraproject.org,atomic01.mgmt.fedoraproject.org-https, virthost12.mgmt.fedoraproject.org,virthost12.mgmt.fedoraproject.org-https, virthost14.mgmt.fedoraproject.org,virthost14.mgmt.fedoraproject.org-https, virthost15.mgmt.fedoraproject.org,virthost15.mgmt.fedoraproject.org-https, virthost16.mgmt.fedoraproject.org,virthost16.mgmt.fedoraproject.org-https, virthost17.mgmt.fedoraproject.org,virthost17.mgmt.fedoraproject.org-https, virthost18.mgmt.fedoraproject.org,virthost18.mgmt.fedoraproject.org-https, virthost-comm02.mgmt.fedoraproject.org,virthost-comm02.mgmt.fedoraproject.org-https, virthost-comm03.mgmt.fedoraproject.org,virthost-comm03.mgmt. fedoraproject.org-https, sign-vault03.mgmt.fedoraproject.org ,sign-vault03.mgmt.fedoraproject.org-https, sign-vault04.mgmt.fedoraproject.org ,sign-vault04.mgmt.fedoraproject.org-https } diff --git a/roles/nagios_server/files/nagios/services/mgmt.cfg b/roles/nagios_server/files/nagios/services/mgmt.cfg index 07049f8..eee3bcc 100644 --- a/roles/nagios_server/files/nagios/services/mgmt.cfg +++ b/roles/nagios_server/files/nagios/services/mgmt.cfg @@ -160,6 +160,12 @@ define service { check_command check_http!virthost-comm02.mgmt.fedoraproject.org use defaulttemplate } +define service { + host_name virthost-comm03.mgmt.fedoraproject.org + service_description virthost-comm03.mgmt.fedoraproject.org-http + check_command check_http!virthost-comm03.mgmt.fedoraproject.org + use defaulttemplate +} define service { host_name virthost01.mgmt.fedoraproject.org @@ -473,6 +479,13 @@ define service { use defaulttemplate } +define service { + host_name virthost-comm03.mgmt.fedoraproject.org + service_description virthost-comm03.mgmt.fedoraproject.org-https + check_command check_https!virthost-comm03.mgmt.fedoraproject.org + use defaulttemplate +} + # define service { # host_name ibiblio02.mgmt.fedoraproject.org -- Stephen J Smoogen.

3 2

Moving Taskotron to Production
by Tim Flink 08 Sep '14

08 Sep '14

Now that Taskotron staging is up and running, I'm not sure what's generally required for services before moving to production. I'm still working out a few kinks in the initial production systems but I think that the only big thing left is the proxy settings, which I'm leaving alone for the moment. Is there any review process or checklist for moving things from stg to prod? Tim

2 3

[Fedocal] Reminder meeting : Atomic / Infrastructure Meeting
by jzb＠fedoraproject.org 07 Sep '14

07 Sep '14

Dear all, You are kindly invited to the meeting: Atomic / Infrastructure Meeting on 2014-09-09 from 20:00:00 to 20:30:00 UTC The meeting will be about: Meeting to work on infrastructure pieces required for building Fedora Atomic images. Source: https://apps.fedoraproject.org/calendar//meeting/738/

1 0

Freeze break request - pkgdb2 HTTPS
by Pierre-Yves Chibon 07 Sep '14

07 Sep '14

Good morning everyone, I would like to manually apply the following patch on our two instances of pkgdb2 in prod: https://git.fedorahosted.org/cgit/pkgdb2.git/commit/?id=c4cc9d62ef9fe3ccc13… Basically it fixes an issues in /api/packages/ that was restricting its results to only non-critpath packages. With this change, both critpath and non-critpath packages will be returned as expected. Tested locally works fine, unit-tests pass. Thanks, Pierre

4 3

Freeze exception for adjusting fedorapeople.org and copr URLs to HTTPS
by Till Maas 05 Sep '14

05 Sep '14

Hi, I would like to propose the following change for a free exception since I added it already to ansible assuming it can be applied only to staging host where appropriate. Regards Till Use https for fedorapeople URLs and copr-be.cloud.fedoraproject.org - This avoids an redirect from HTTP and HTTPS on fedorapeople and is more appropriate for e.g. GPG key imports or repo access. --- files/jenkins/slaves/sbt.repo | 2 +- playbooks/hosts/lists-dev.cloud.fedoraproject.org.yml | 2 +- roles/easyfix/files/gather_easyfix.py | 2 +- roles/freemedia/files/FreeMedia-close.html | 4 ++-- roles/freemedia/files/FreeMedia-error-embargoed-destination.html | 4 ++-- roles/freemedia/files/FreeMedia-error.html | 4 ++-- roles/freemedia/files/FreeMedia-form.html | 4 ++-- roles/freemedia/files/FreeMedia-form.html.orig | 4 ++-- roles/mailman/files/hyperkitty.Fedora.repo | 8 ++++---- roles/mailman/files/hyperkitty.RedHat.repo | 8 ++++---- roles/mailman/tasks/main.yml | 2 +- 11 files changed, 22 insertions(+), 22 deletions(-) diff --git a/files/jenkins/slaves/sbt.repo b/files/jenkins/slaves/sbt.repo index 40cd3e8..7ff4881 100644 --- a/files/jenkins/slaves/sbt.repo +++ b/files/jenkins/slaves/sbt.repo @@ -1,6 +1,6 @@ [codeblock-sbt-extras] name=Copr repo for sbt-extras owned by codeblock -baseurl=http://copr-be.cloud.fedoraproject.org/results/codeblock/sbt-extras/fedora-$releasever-$basearch/ +baseurl=https://copr-be.cloud.fedoraproject.org/results/codeblock/sbt-extras/fedora-$releasever-$basearch/ skip_if_unavailable=True gpgcheck=0 enabled=1 diff --git a/playbooks/hosts/lists-dev.cloud.fedoraproject.org.yml b/playbooks/hosts/lists-dev.cloud.fedoraproject.org.yml index 04bd39a..b925e9e 100644 --- a/playbooks/hosts/lists-dev.cloud.fedoraproject.org.yml +++ b/playbooks/hosts/lists-dev.cloud.fedoraproject.org.yml @@ -47,7 +47,7 @@ action: mount src=/srv/persist/mailman name=/var/lib/mailman3 fstype=auto opts=bind state=mounted - name: get the repo file - get_url: url=http://repos.fedorapeople.org/repos/abompard/hyperkitty/hyperkitty.repo + get_url: url=https://repos.fedorapeople.org/repos/abompard/hyperkitty/hyperkitty.repo dest=/etc/yum.repos.d/hyperkitty.repo mode=0444 # open up ports (22, 80, 443, 25) diff --git a/roles/easyfix/files/gather_easyfix.py b/roles/easyfix/files/gather_easyfix.py index e44de5a..eb9eb2d 100755 --- a/roles/easyfix/files/gather_easyfix.py +++ b/roles/easyfix/files/gather_easyfix.py @@ -62,7 +62,7 @@ class MediaWiki(fedora.client.Wiki): """ Mediawiki class. Handles interaction with the Mediawiki. Code stollen from cnucnu: - http://fedorapeople.org/gitweb?p=till/public_git/cnucnu.git;a=summary + https://fedorapeople.org/gitweb?p=till/public_git/cnucnu.git;a=summary """ def __init__(self, base_url='https://fedoraproject.org/w/', *args, diff --git a/roles/freemedia/files/FreeMedia-close.html b/roles/freemedia/files/FreeMedia-close.html index ce68d6b..3295fea 100644 --- a/roles/freemedia/files/FreeMedia-close.html +++ b/roles/freemedia/files/FreeMedia-close.html @@ -4,8 +4,8 @@ <head> <title>Fedora Free Media Form</title> <style type="text/css" media="screen"> - @import url("http://fedorapeople.org/userdefs/css/fedora.css"); - @import url("http://fedorapeople.org/userdefs/css/style.css"); + @import url("https://fedorapeople.org/userdefs/css/fedora.css"); + @import url("https://fedorapeople.org/userdefs/css/style.css"); </style> </head> diff --git a/roles/freemedia/files/FreeMedia-error-embargoed-destination.html b/roles/freemedia/files/FreeMedia-error-embargoed-destination.html index 2056a43..441b446 100644 --- a/roles/freemedia/files/FreeMedia-error-embargoed-destination.html +++ b/roles/freemedia/files/FreeMedia-error-embargoed-destination.html @@ -4,8 +4,8 @@ <head> <title>Fedora Free Media Form</title> <style type="text/css" media="screen"> - @import url("http://fedorapeople.org/userdefs/css/fedora.css"); - @import url("http://fedorapeople.org/userdefs/css/style.css"); + @import url("https://fedorapeople.org/userdefs/css/fedora.css"); + @import url("https://fedorapeople.org/userdefs/css/style.css"); </style> </head> diff --git a/roles/freemedia/files/FreeMedia-error.html b/roles/freemedia/files/FreeMedia-error.html index 91df3a7..37065fb 100644 --- a/roles/freemedia/files/FreeMedia-error.html +++ b/roles/freemedia/files/FreeMedia-error.html @@ -4,8 +4,8 @@ <head> <title>Fedora Free Media Form</title> <style type="text/css" media="screen"> - @import url("http://fedorapeople.org/userdefs/css/fedora.css"); - @import url("http://fedorapeople.org/userdefs/css/style.css"); + @import url("https://fedorapeople.org/userdefs/css/fedora.css"); + @import url("https://fedorapeople.org/userdefs/css/style.css"); </style> </head> diff --git a/roles/freemedia/files/FreeMedia-form.html b/roles/freemedia/files/FreeMedia-form.html index e5b8b42..9afa4ed 100644 --- a/roles/freemedia/files/FreeMedia-form.html +++ b/roles/freemedia/files/FreeMedia-form.html @@ -3,8 +3,8 @@ <head> <title>Fedora Free Media Form</title> -<link rel="stylesheet" type="text/css" href="http://fedorapeople.org/userdefs/css/fedora.css"> -<link rel="stylesheer" type="text/css" href="http://fedorapeople.org/userdefs/css/style.css"> +<link rel="stylesheet" type="text/css" href="https://fedorapeople.org/userdefs/css/fedora.css"> +<link rel="stylesheer" type="text/css" href="https://fedorapeople.org/userdefs/css/style.css"> </head> <body> diff --git a/roles/freemedia/files/FreeMedia-form.html.orig b/roles/freemedia/files/FreeMedia-form.html.orig index 48132af..e8e039f 100644 --- a/roles/freemedia/files/FreeMedia-form.html.orig +++ b/roles/freemedia/files/FreeMedia-form.html.orig @@ -4,8 +4,8 @@ <head> <title>Fedora Free Media Form</title> <style type="text/css" media="screen"> - @import url("http://fedorapeople.org/userdefs/css/fedora.css"); - @import url("http://fedorapeople.org/userdefs/css/style.css"); + @import url("https://fedorapeople.org/userdefs/css/fedora.css"); + @import url("https://fedorapeople.org/userdefs/css/style.css"); </style> </head> diff --git a/roles/mailman/files/hyperkitty.Fedora.repo b/roles/mailman/files/hyperkitty.Fedora.repo index a6f711e..1c711d0 100644 --- a/roles/mailman/files/hyperkitty.Fedora.repo +++ b/roles/mailman/files/hyperkitty.Fedora.repo @@ -1,15 +1,15 @@ [hyperkitty] name=HyperKitty archiver and its dependencies -baseurl=http://repos.fedorapeople.org/repos/abompard/hyperkitty/fedora-$releasever/$basearch/ +baseurl=https://repos.fedorapeople.org/repos/abompard/hyperkitty/fedora-$releasever/$basearch/ enabled=1 skip_if_unavailable=1 gpgcheck=1 -gpgkey=http://repos.fedorapeople.org/repos/abompard/abompard.asc +gpgkey=https://repos.fedorapeople.org/repos/abompard/abompard.asc [hyperkitty-source] name=HyperKitty archiver and its dependencies - Source -baseurl=http://repos.fedorapeople.org/repos/abompard/hyperkitty/fedora-$releasever/SRPMS +baseurl=https://repos.fedorapeople.org/repos/abompard/hyperkitty/fedora-$releasever/SRPMS enabled=0 skip_if_unavailable=1 gpgcheck=1 -gpgkey=http://repos.fedorapeople.org/repos/abompard/abompard.asc +gpgkey=https://repos.fedorapeople.org/repos/abompard/abompard.asc diff --git a/roles/mailman/files/hyperkitty.RedHat.repo b/roles/mailman/files/hyperkitty.RedHat.repo index 399a73a..01c050a 100644 --- a/roles/mailman/files/hyperkitty.RedHat.repo +++ b/roles/mailman/files/hyperkitty.RedHat.repo @@ -1,15 +1,15 @@ [hyperkitty] name=HyperKitty archiver and its dependencies -baseurl=http://repos.fedorapeople.org/repos/abompard/hyperkitty/el-$releasever/$basearch/ +baseurl=https://repos.fedorapeople.org/repos/abompard/hyperkitty/el-$releasever/$basearch/ enabled=1 skip_if_unavailable=1 gpgcheck=1 -gpgkey=http://repos.fedorapeople.org/repos/abompard/abompard.asc +gpgkey=https://repos.fedorapeople.org/repos/abompard/abompard.asc [hyperkitty-source] name=HyperKitty archiver and its dependencies - Source -baseurl=http://repos.fedorapeople.org/repos/abompard/hyperkitty/el-$releasever/SRPMS +baseurl=https://repos.fedorapeople.org/repos/abompard/hyperkitty/el-$releasever/SRPMS enabled=0 skip_if_unavailable=1 gpgcheck=1 -gpgkey=http://repos.fedorapeople.org/repos/abompard/abompard.asc +gpgkey=https://repos.fedorapeople.org/repos/abompard/abompard.asc diff --git a/roles/mailman/tasks/main.yml b/roles/mailman/tasks/main.yml index d12dd35..dc88ca5 100644 --- a/roles/mailman/tasks/main.yml +++ b/roles/mailman/tasks/main.yml @@ -42,7 +42,7 @@ yum: state=installed name=gnupg - name: add the GPG key - rpm_key: state=present key=http://repos.fedorapeople.org/repos/abompard/abompard.asc + rpm_key: state=present key=https://repos.fedorapeople.org/repos/abompard/abompard.asc - name: install needed packages yum: pkg={{ item }} state=installed -- 1.8.3.1

3 3

System Freeze Break Request: add sysadmin-ppc to gateway boxes
by Stephen John Smoogen 04 Sep '14

04 Sep '14

[smooge@lockbox01 puppet (master)]$ git diff HEAD diff --git a/manifests/services/gateway.pp b/manifests/services/gateway.pp index ca747af..ed27592 100644 --- a/manifests/services/gateway.pp +++ b/manifests/services/gateway.pp @@ -1,5 +1,5 @@ class gateway{ - $fas_groups = [ 'sysadmin-ask', 'sysadmin-web', 'sysadmin-main', 'sysadmin-cvs', 'sysadmin-build', 'sysadmin-noc', 'sysadmin-releng', 'sysadmin-dba', 'sysadmin-hosted', 'sysadmin-tools', 'sysadmin-spin' , 'sysadmin-cloud', 'fi-apprentice', 'sysadmin-darkserver', 'sysadmin-badges', 'sysadmin-troubleshoot', 'sysadmin-qa', 'sysadmin-centos' ] + $fas_groups = [ 'sysadmin-ask', 'sysadmin-web', 'sysadmin-main', 'sysadmin-cvs', 'sysadmin-build', 'sysadmin-noc', 'sysadmin-releng', 'sysadmin-dba', 'sysadmin-hosted', 'sysadmin-tools', 'sysadmin-spin' , 'sysadmin-cloud', 'fi-apprentice', 'sysadmin-darkserver', 'sysadmin-badges', 'sysadmin-troubleshoot', 'sysadmin-qa', 'sysadmin-centos', 'sysadmin-ppc' ] $syncFasOften = true $isRelayGateway=true $sshd_config_PasswordAuthentication = 'no' this will allow ppc admins to use serial servers -- Stephen J Smoogen.

3 2

Freeze Break Request - Introduce fedmsg-gateway slaves on the proxies
by Ralph Bean 04 Sep '14

04 Sep '14

I'm seeking two +1s to apply some work I did and tested in staging to the production proxies. The gist is that we currently proxy persistent tcp connections for the fedmsg firehose through our proxies to busgateway01 (which these days numbers around 700 connections but could scale up unexpectedly). We suspect that this has been causing our vpn issues since all fedmsg traffic is sent to the proxies for every connection (700 times the traffic normally on the bus). The following patch 'turns on' a scheme where each proxy will run its own fedmsg-gateway slave. Haproxy connects remote requests to these slaves, and the slaves in turn connect just once to the master fedmsg-gateway on busgateway01. Traffic should then only be sent once to each proxy (over the vpn in most cases). I tested it pretty thoroughly in stg (removed the daemon and its config and re-ran puppet a few times to make sure things were put in place in the correct order). Patch attached. -Ralph

4 3

Meeting Agenda Item: Introduction Amr Mostafa
by Amr Mostafa 04 Sep '14

04 Sep '14

* IRC nick: **amrzaki**(on freenode)* Hello,* My name is Amr and I'm a junior Linux Admin looking to help* *out the Fedora Infrastructure team. Fedora has always been my favorite* *Linux distro and I want to contribute back to the Fedora Project to* *help Fedora advance and to also gain personal experience with *a *variety of technologies.* * I am **good* *knowledge** with Python and bash for writing administrative scripts *and as my work as network admin I have experience at Zabbix and Nagios. *I am mostly interested in joining the **NOC* team. *I'll be hanging around **IRC** for the next week or so to see how things* *work and where I can help out. Hope to see you there.*

1 0

Plan for tomorrow's Fedora Infrastructure meeting (2014-09-04)
by Kevin Fenzi 04 Sep '14

04 Sep '14

The infrastructure team will be having it's weekly meeting tomorrow, 2014-09-04 at 18:00 UTC in #fedora-meeting on the freenode network. Suggested topics: #topic New folks introductions and Apprentice tasks. If any new folks want to give a quick one line bio or any apprentices would like to ask general questions, they can do so in this part of the meeting. Don't be shy! #topic Freeze reminder #topic Applications status / discussion Check in on status of our applications: pkgdb, fas, bodhi, koji, community, voting, tagger, packager, dpsearch, etc. If there's new releases, bugs we need to work around or things to note. #topic Sysadmin status / discussion Here we talk about sysadmin related happenings from the previous week, or things that are upcoming. #topic nagios/alerts recap Here we go over the last weeks alerts and see if we can find ways to make it so they don't happen again. #topic Upcoming Tasks/Items https://apps.fedoraproject.org/calendar/list/infrastructure/ #topic Open Floor Submit your agenda items, as tickets in the trac instance and send a note replying to this thread. More info here: https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings Thanks kevin

1 1

RE: New User question
by Hunter, John P 04 Sep '14

04 Sep '14

Hi, I am learning dogtail and may have found a bug. The following is my code and the results. The main error is that KeyCombo is not defined. Also, when I do the type("cool") command, it writes it in the KeyCombo part of the code... pretty cool and a bit interesting... Thank you in advance for the help. Sincerely, John __________________________________________________ #!/usr/bin/python import time from dogtail.procedural import * import pdb focus.application('gedit') focus.frame('Unsaved Document 1 - gedit') click('Search') click('Find...') focus.dialog('Find') type("cool") pdb.set_trace() KeyCombo("Return") time.sleep(5) Output: bash-4.1$ ./enterText.py ** (enterText.py:23408): WARNING **: Trying to register gtype 'WnckWindowState' as flags when in fact it is of type 'GEnum' ** (enterText.py:23408): WARNING **: Trying to register gtype 'WnckWindowActions' as flags when in fact it is of type 'GEnum' ** (enterText.py:23408): WARNING **: Trying to register gtype 'WnckWindowMoveResizeMask' as flags when in fact it is of type 'GEnum' Creating logfile at /tmp/dogtail/logs/enterText_20140904-000957_debug ... Mouse button 1 click at (1046,63) Mouse button 1 click at (1159,86) > /home/huntejp/scratch/enterText.py(14)<module>() -> KeyCombo("Return") (Pdb) step NameError: "name 'KeyCombo' is not defined" > /home/huntejp/scratch/enterText.py(14)<module>() -> KeyCombo("Return") (Pdb) step --Return-- > /home/huntejp/scratch/enterText.py(14)<module>()->None -> KeyCombo("Return") (Pdb) step Traceback (most recent call last): File "./enterText.py", line 14, in <module> KeyCombo("Return") NameError: name 'KeyCombo' is not defined

1 0

Freeze Break Request: Update dhpcd.conf for ppc-le builder
by Stephen John Smoogen 03 Sep '14

03 Sep '14

diff --git a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org index 9e2d6ba..ef96ed2 100644 --- a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org +++ b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org @@ -1770,6 +1770,7 @@ shared-network qa { host ppc-le-builder7 { hardware ethernet 52:54:00:4e:c0:de; fixed-address 10.5.131.57; + next-server 10.5.124.136; option host-name "ppc-le-builder7.qa.fedoraproject.org"; filename "boot/grub2/powerpc-ieee1275/core.elf"; } -- Stephen J Smoogen.

3 2

Freeze Break Request: Add test system to ansible
by Stephen John Smoogen 03 Sep '14

03 Sep '14

This is a box to work on repo work between CentOS and EPEL without touching main hardware. Should not affect any running system. diff --git a/inventory/host_vars/junk02.phx2.fedoraproject.org b/inventory/host_vars/junk02.phx2.fedoraproject.org new file mode 100644 index 0000000..9401810 --- /dev/null +++ b/inventory/host_vars/junk02.phx2.fedoraproject.org @@ -0,0 +1,8 @@ +--- +datacenter: phx2 +nm: 255.255.255.0 +gw: 10.5.126.254 +fas_client_groups: sysadmin-main +dns: 10.5.126.21 +eth0_ip: 10.5.126.8 +freezes:false diff --git a/inventory/inventory b/inventory/inventory index 4733757..0ed3dd8 100644 --- a/inventory/inventory +++ b/inventory/inventory @@ -436,6 +436,8 @@ smtp-mm-ib01.fedoraproject.org smtp-mm-coloamer01.fedoraproject.org smtp-mm-tummy01.fedoraproject.org +[spare] +junk02.phx2.fedoraproject.org # # All staging hosts should be in this group too. # diff --git a/playbooks/hosts/junk02.phx2.fedoraproject.org.yml b/playbooks/hosts/junk02.phx2.fedoraproject.org.yml new file mode 100644 index 0000000..5f492ef --- /dev/null +++ b/playbooks/hosts/junk02.phx2.fedoraproject.org.yml @@ -0,0 +1,30 @@ +# This is a basic playbook + +- name: make basic box + hosts: junk02.phx2.fedoraproject.org + user: root + accelerate: "{{ accelerated }}" + gather_facts: True + + vars_files: + - /srv/web/infra/ansible/vars/global.yml + - "{{ private }}/vars.yml" + - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml + + roles: + - base + - rkhunter + - nagios_client + - hosts + - fas_client + - collectd/base + - sudo + + tasks: + - include: "{{ tasks }}/yumrepos.yml" + - include: "{{ tasks }}/2fa_client.yml" + - include: "{{ tasks }}/motd.yml" + + handlers: + - include: "{{ handlers }}/restart_services.yml" + - include: "{{ handlers }}/semanage.yml" -- Stephen J Smoogen.

3 2

Freeze Break Request: Remove Old directories from lockbox01
by Stephen John Smoogen 02 Sep '14

02 Sep '14

We have a lot of old apprentice accounts with old data in it. Cleaning out these accounts would lower our disk usage and hopefully drop the number of 'we ran out of disk space' nagios alerts. Special break.. clean out a directory from skvidals account: ./skvidal/dns Accounts to be cleaned up 4140148 total 275348 blob 251532 anshprat 180872 arielb 179840 daredel 172580 nigelj 123184 spack 119688 gagomes 93248 jkeating 79556 glezos 74344 duffy 67748 nj0y 66304 jokajak 64996 wsterling 64512 fcami 64484 lfacchinelli 59968 janfrode 59372 poelstra 56404 codemaniac 55676 sts 55560 mosburn 55336 klainn 55152 rigeld2 54992 rdeys 49564 crothers 49276 jacibato 47972 kanarip 46928 jorn 43668 smillie 42008 charul 40096 boodle 38620 sheid 38364 jclark48 37668 oddshocks 37132 ctria 36412 katzj 34356 phuzion 32776 walt 32396 rhaen 32092 yingbull 31188 mahrud 30848 tgalyean 29188 akistler 29116 xeladem 28964 hiemanshu 28960 asuthar 28400 mangas 28320 wakko666 27192 kubo 26708 ingmar 26620 thesharp 26272 ggruener 25168 wtogami 23548 jmosco 23384 jchen 23144 zemmiph0bia 22612 johnstanton 22468 jsh 21916 ttech 21804 corgi 21560 swa 21488 frankly3d 20832 marcdeop 20828 miguelcnf 20552 asrob 20024 whiterhino 20008 informatux 19848 davidvz 17884 vglafirov 17648 kaos01 1840 sheap 1772 iambryan 1624 sumitrai 496 gmarchant 100 jcollie 84 axilleas 48 kushal124 48 joshkayse 44 zqw86713 44 danrimal 40 akshayb 36 wileywarren 36 mrwizer 36 flare183 32 wraeth 32 vrutkovs 32 vhumpa 32 tideline 32 tensov 32 tdk2fe 32 shubhmoy 32 rossdylan 32 rameshraithatha 32 rabisg 32 phobot 32 onuonga 32 nerdsville 32 mhaynes 32 mariocav 32 loic 32 kjs 32 kilted1 32 kc4zvw 32 jlaska 32 jam3s 32 housewifehacker 32 ghostalker 32 frankieonuonga 32 echevemaster 32 docent 32 dbhole 32 danstar 32 codegerbil 32 cmullead 32 bradbailey 32 bitlord 32 besser82 32 ayrx 32 ausmarton 32 amitksaha 28 vincentvdk 28 tchung 28 sudhirmenon 28 suchakra 28 sseago 28 slinabery 28 sgrubb 28 securegates 28 santosp 28 rfelsburg 28 red 28 pvangundy 28 pranithk 28 pmyers 28 pjp 28 p3ll0n 28 nokia 28 mspevack 28 mfurman 28 mchua 28 lutter 28 kklic 28 johe 28 jmoskovc 28 jdieter 28 jdarcy 28 jcwillia 28 jbass29503 28 jaysonr 28 jaxjax 28 imain 28 icole 28 hbrock 28 goozbach 28 efadeev 28 dunnderr 28 dcr226 28 cyberworm54 28 billchen 28 asgeirf 28 arjunroy 28 akishore 28 aeperezt 28 adrianhannah 24 vbenes 24 packday 24 methanigai 24 mattjones 24 lrsz 24 jlar 24 farara 24 brundlfly 24 bhumish 24 aharms 20 rkersten 20 nryoung 20 mmello 20 marcelk 20 func2nagios 20 freemanpd36 20 fortu 8 dsk4.out -- Stephen J Smoogen.

3 2

Freeze break request: adding host entry on proxy01/fixing ssh_host_keys
by Kevin Fenzi 02 Sep '14

02 Sep '14

Greetings. proxy01 has: 10.5.126.52 apps.fedoraproject.org 10.5.126.52 admin.fedoraproject.org in it's /etc/hosts. This confuses ansible a bit and it reports the ansible_fqdn for the host to be 'apps.fedoraproject.org' which in turn makes our ssh_host_keys gathering script to add it incorrectly there. I would like to: 1) Add: 10.5.126.52 proxy01.phx2.fedoraproject.org to /etc/hosts on proxy01. 2) Remove the apps.fedoraproject.org entry from ssh_known_hosts. This will fix ticket 4513. kevin

3 4

Freeze break request: bodhi epel7 fixes ssh_host_keys
by Luke Macken 02 Sep '14

02 Sep '14

Hi, I would like to push out another bodhi release today that contains a couple more fixes for EPEL-7. This release will let us configure different arches for specific releases (eg: no i386 for epel7). I will only need to update releng04 and relepel01. Bodhi patches: https://github.com/fedora-infra/bodhi/pull/88/files Ticket: https://fedorahosted.org/bodhi/ticket/758 Ansible patch: --- a/roles/bodhi/masher/templates/bodhi-epel-masher.cfg.j2 +++ b/roles/bodhi/masher/templates/bodhi-epel-masher.cfg.j2 @@ -8,6 +8,10 @@ arches = 'i386 x86_64 ppc/ppc64' +# EPEL-7 specific configuration +epel7_arches = 'x86_64 ppc64' +epel7-testing_arches = 'x86_64 ppc64' + # For pushing EPEL updates from the masher bodhi_url = 'http://localhost/updates'

3 2

Freeze Break Request: Point hub.fp.o dns entry at proxy01.
by Ralph Bean 02 Sep '14

02 Sep '14

Seeking two +1s for a dns change that might help with our vpn issues.

3 3

Freeze Break request: ppcle dhcp/tftp handling
by Kevin Fenzi 02 Sep '14

02 Sep '14

Greetings. The ppc secondary arch folks would like to try and automate things a bit more than they have now, so would like to try and get their kvm guests pulling an ip from dhcp and then using tftp/grub2 to boot and install. This patch adds a test host to dhcp.conf on noc01. Additionally, we will need to add boot/grub2/ contents... I don't think there will be any disruption from this to anything else. +1s? kevin -- diff --git a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org index ad39fcd..dbf92f4 100644 --- a/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org +++ b/roles/dhcp_server/files/dhcpd.conf.noc01.phx2.fedoraproject.org @@ -1766,6 +1766,13 @@ shared-network qa { next-server 10.5.126.41; filename "pxelinux.0"; } + + host ppc-le-builder7 { + hardware ethernet 52:54:00:4e:c0:de; + fixed-address 10.5.131.X; + option host-name "ppc-le-builder7.qa.fedoraproject.org"; + filename "boot/grub2/powerpc-ieee1275/core.elf"; + } } }

3 2

Introduction
by Aditya Bhardwaj 02 Sep '14

02 Sep '14

Hi everyone, I am Aditya Bhardwaj (IRC: purezen), an OSS enthusiast with exp. in Android app dev and webapp dev (via Ruby) since a while. Lately, I have been interested in system administration and would like to get involved with the Fedora Administration. I have gone through the relevant pages on the wiki (after pinging some guys on #fedora-admin :)) and am keen to move forward. I am looking to become an apprentice and for some advice for getting started. Cheers! -- Aditya Bhardwaj Blog <http://purezen.github.io> | Twitter <http://twitter.com/purezen_> | Facebook <http://facebook.com/aditya2204>

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure September 2014