new recruit
by Eden M
Hi Infrastructure team
My name is Eden, I am a senior linux sysadmin working for GE Treasury, I am so exciting to contribute and help with the project. so I'm Up and Ready
8 years, 5 months
Meeting Agenda Item: Introduction Sudeep Mukherjee
by Sudeep Mukherjee
Hi,
My name is Sudeep Mukherjee.
IRC handle: smdeep
FAS account: smdeep
I would love to contribute to the Infrastructure group. I am sure I
will learn much more than what I know at present.
I have admin experience with CentOS and I use Fedora on my PCs.
I first started using RedHat in March 1998 when it used to
be distributed by a Indian magazine named PC Quest. So it is
around 17 years I have been using RedHat/Fedora.
I am hanging out on IRC and reading the contributors blogs, the
infrastructure website, to learn how everything is being done.
I am at the present based out of Kolkata, India.
Regards to all of you,
Sudeep
8 years, 5 months
[release] anitya: 0.7.0
by Pierre-Yves Chibon
Good morning everyone,
I just cut and pushed a new release of anitya: 0.7.0
It significantly reduced the number of tickets opened against the project.
Here is the corresponding changelog:
* Wed Oct 28 2015 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.7.0-1
- Update to 0.7.0
- Adjust the API to return nothing if the provided homepage is empty (Vivek
Anand)
- Add the latest version of the project in the search page (Vivek Anand)
- Improve the edit endpoint to allow showing the examples and extra infos
- Display the regex used in the custom backend when adding/editing a project
(Vivek Anand)
- Order the list of backends alphabetically (Farhaanbuksh)
- Add a search box to the main menu
- Make the search box better looking (Ralph Bean)
- Add a BitBuckend backend (Vivek Anand)
- Add the possibility to separate odd updates from failed updates
- Add the possibility to specify a prefix to the versions found
- Record and show the status of the cron job checking new releases
Happy packaging!
Pierre
8 years, 5 months
Meeting Agenda Item: Introduction Kendrick Tan
by Kendrick Tan
Hello there!
My name is Kendrick Tan (irc: kendricktan). I'm from Brisbane, Australia
(UTC+10:00; Australian Eastern Time Zone), have been using fedora for the
past 6 months or so and loving it.
I'm comfortable with Python, C++, Javascript, HTML, and some others, but
I'm particularly interested in machine learning and I'm neglecting my
finals to learn more about it (tis bad, i know, but its only high school oh
well).
I've decided to contribute to fedora particularly because upon the 6 months
of using Fedora 22, DNF has been particularly buggy on occasions and I
would like to help resolve that. I also find that though GNOME is a great
desktop environment, it drains my laptop battery life dramatically, and I
would like to help resolve that.
I can contribute around 4-12 hours a week after I finish my highschool
exams at the end of November, at the time being i'll just sit back and hang
around the meetings.
Cheers :)
8 years, 5 months
Meeting Agenda Item: Introduction James Anslow
by James Anslow
Hello, World!
My name's James Anslow and I'm a developer from the United Kingdom. My
IRC handle is janslow. My skills are focused on the web; development
and maintenance of web systems both in terms of code and
infrastructure.
I have been working as a full time developer for some 5 years, almost
entirely focused on private commercial projects. I have always used
open source software; a mix of Fedora, CentOS, Debian and Ubuntu. I am
now looking to contribute back to the communities that I have benefited
from.
I have experience working with many of the tools used by the Fedora
infrastructure team. I recently implemented an Ansible environment for
my employer, where there was formerly no automation system in place.
Day to day I also work with apache, nginx, mysql, mongodb, varnish,
memcache, nagios, observium and a plethora of development tools and
misc. technologies.
I currently manage a relatively small fleet of servers. (~30) I am most
interested in learning more about managing infrastructure at scale. I
think that I can contribute to the Fedora project and hopefully broaden
my knowledge in a way that I would not otherwise be able to in my day
job.
In terms of tickets that I would like to look at, I would like to start
here:
* https://fedorahosted.org/fedora-infrastructure/ticket/4923
Because debugging APIs is a comfortable starting point to get my feet
wet given my experience and skills.
James
8 years, 5 months
[PATCH] koji directory cleanup: shorten the time we keep things
by Dennis Gilmore
From: Dennis Gilmore <ausil(a)fedoraproject.org>
keep data in the work for 2 weeks
keep scratch builds 2 weeks
keep koschei builds for 1 day
Signed-off-by: Dennis Gilmore <ausil(a)fedoraproject.org>
---
roles/koji_hub/files/koji-directory-cleanup | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/roles/koji_hub/files/koji-directory-cleanup b/roles/koji_hub/files/koji-directory-cleanup
index 67a3018..4429235 100644
--- a/roles/koji_hub/files/koji-directory-cleanup
+++ b/roles/koji_hub/files/koji-directory-cleanup
@@ -1,2 +1,3 @@
-0 8 * * * apache find /mnt/koji/work -xdev -depth -mindepth 2 -mtime +28 \( -type f -o -type l \) -delete -o -type d -empty -delete
-0 9 * * * apache find /mnt/koji/scratch -xdev -depth -mtime +21 \( -type f -o -type l \) -delete -o -type d -empty -delete
+0 8 * * * apache find /mnt/koji/work -xdev -depth -mindepth 2 -mtime +14 \( -type f -o -type l \) -delete -o -type d -empty -delete
+0 9 * * * apache find /mnt/koji/scratch -xdev -depth -mtime +14 \( -type f -o -type l \) -delete -o -type d -empty -delete
+0 9 * * * apache find /mnt/koji/scratch/koschei -xdev -depth -mtime +1 \( -type f -o -type l \) -delete -o -type d -empty -delete
--
1.8.3.1
8 years, 5 months
Freeze Break Request: add mirrorlist-ibiblio02
by Patrick Uiterwijk
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hi all,
I would like to setup mirrorlist-ibiblio02, to add one more node that can take the
mirrorlist load.
Can I get +1s for the following patches (and the corresponding private repo patches)?
Ansible
~~~~~~~~~~~
6 files changed, 21 insertions(+), 1 deletion(-)
create mode 100644 inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org
create mode 100644 roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg
[puiterwijk@batcave01 ansible]$ git show HEAD
commit d7f9975716c5894ca0f0b88a482318baa11b745a
Author: Patrick Uiterwijk <puiterwijk(a)redhat.com>
Date: Sat Oct 24 23:54:35 2015 +0000
Add mirrorlist-ibiblio02
Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com>
diff --git a/inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org b/inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org
new file mode 100644
index 0000000..13387ea
- --- /dev/null
+++ b/inventory/host_vars/mirrorlist-ibiblio02.fedoraproject.org
@@ -0,0 +1,10 @@
+---
+nm: 255.255.255.128
+gw: 152.19.134.129
+dns: 152.2.21.1
+ks_url: http://infrastructure.fedoraproject.org/repo/rhel/ks/kvm-rhel-7-ext
+ks_repo: http://infrastructure.fedoraproject.org/repo/rhel/RHEL7-x86_64/
+volgroup: /dev/vg_guests
+eth0_ip: 152.19.134.197
+vmhost: ibiblio05.fedoraproject.org
+datacenter: ibiblio
diff --git a/inventory/inventory b/inventory/inventory
index 2b432d7..28a8ba4 100644
- --- a/inventory/inventory
+++ b/inventory/inventory
@@ -421,6 +421,7 @@ memcached01.stg.phx2.fedoraproject.org
mirrorlist-dedicatedsolutions.fedoraproject.org
mirrorlist-host1plus.fedoraproject.org
mirrorlist-ibiblio.fedoraproject.org
+mirrorlist-ibiblio02.fedoraproject.org
mirrorlist-osuosl.fedoraproject.org
mirrorlist-phx2.phx2.fedoraproject.org
diff --git a/playbooks/groups/mirrorlist2.yml b/playbooks/groups/mirrorlist2.yml
index 332b1bf..5908beb 100644
- --- a/playbooks/groups/mirrorlist2.yml
+++ b/playbooks/groups/mirrorlist2.yml
@@ -81,6 +81,7 @@
- mirrorlist-dedicatedsolutions.fedoraproject.org
- mirrorlist-host1plus.fedoraproject.org
- mirrorlist-ibiblio.fedoraproject.org
+ - mirrorlist-ibiblio02.fedoraproject.org
- mirrorlist-osuosl.fedoraproject.org
when: env != "staging"
diff --git a/roles/haproxy/templates/haproxy.cfg b/roles/haproxy/templates/haproxy.cfg
index 8404dc5..65c25d3 100644
- --- a/roles/haproxy/templates/haproxy.cfg
+++ b/roles/haproxy/templates/haproxy.cfg
@@ -45,6 +45,7 @@ listen mirror-lists 0.0.0.0:10002
server mirrorlist-dedicatedsolutions mirrorlist-dedicatedsolutions:80 check inter 5s rise 2 fall 3
server mirrorlist-host1plus mirrorlist-host1plus:80 check inter 5s rise 2 fall 3
server mirrorlist-ibiblio mirrorlist-ibiblio:80 check inter 5s rise 2 fall 3
+ server mirrorlist-ibiblio02 mirrorlist-ibiblio02:80 check inter 5s rise 2 fall 3
server mirrorlist-osuosl mirrorlist-osuosl:80 check inter 5s rise 2 fall 3
server mirrorlist-phx2 mirrorlist-phx2:80 check inter 5s rise 2 fall 3
option httpchk GET /mirrorlist
diff --git a/roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg b/roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg
new file mode 100644
index 0000000..5ff77ef
- --- /dev/null
+++ b/roles/nagios_server/files/nagios/hosts/mirrorlist-ibiblio02.cfg
@@ -0,0 +1,7 @@
+define host {
+ host_name mirrorlist-ibiblio02
+ alias mirrorlist-ibiblio02.fedoraproject.org
+ use defaulttemplate
+ address mirrorlist-ibiblio02.fedoraproject.org
+ parents ibiblio05
+}
diff --git a/roles/nagios_server/files/nagios/services/file_age.cfg b/roles/nagios_server/files/nagios/services/file_age.cfg
index 197e5c2..658ae56 100644
- --- a/roles/nagios_server/files/nagios/services/file_age.cfg
+++ b/roles/nagios_server/files/nagios/services/file_age.cfg
@@ -1,5 +1,5 @@
define service {
- - host_name mirrorlist-osuosl, mirrorlist-ibiblio, mirrorlist-phx2, mirrorlist-host1plus, mirrorlist-dedicatedsolutions
+ host_name mirrorlist-osuosl, mirrorlist-ibiblio, mirrorlist-ibiblio02, mirrorlist-phx2, mirrorlist-host1plus, mirrorlist-dedicatedsolutions
service_description Check MirrorList Cache
check_command check_by_nrpe!check_mirrorlist_cache
use defaulttemplate
DNS
~~~~~~~
commit 3663572f0d63e12c604914919e9b3a8f070a965b
Author: Patrick Uiterwijk <puiterwijk(a)redhat.com>
Date: Sat Oct 24 23:49:02 2015 +0000
Add DNS records for mirrorlist-ibiblio02
Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com>
diff --git a/fedoraproject.org.template b/fedoraproject.org.template
index de2374c..0c18c37 100644
- --- a/fedoraproject.org.template
+++ b/fedoraproject.org.template
@@ -240,6 +240,7 @@ meetbot-raw.stg IN CNAME admin.stg.fedoraproject.org.
mirrorlist-dedicatedsolutions IN A 67.219.144.67
mirrorlist-host1plus IN A 5.175.150.49
mirrorlist-ibiblio IN A 152.19.134.194
+mirrorlist-ibiblio02 IN A 152.19.134.197
mirrorlist-osuosl IN A 140.211.169.228
mirrors IN CNAME wildcard
mirrors.stg IN CNAME admin.stg.fedoraproject.org.
diff --git a/master/168.192.in-addr.arpa b/master/168.192.in-addr.arpa
index b44289b..473a887 100644
- --- a/master/168.192.in-addr.arpa
+++ b/master/168.192.in-addr.arpa
@@ -167,7 +167,7 @@ $TTL 86400
149.1 IN PTR mm-frontend02.vpn.fedoraproject.org.
150.1 IN PTR darkserver02.vpn.fedoraproject.org.
151.1 IN PTR mm-crawler03.vpn.fedoraproject.org.
- -152.1 IN PTR unused.
+152.1 IN PTR mirrorlist-ibiblio02.vpn.fedoraproject.org.
153.1 IN PTR unused.
154.1 IN PTR unused.
155.1 IN PTR unused.
diff --git a/master/vpn.fedoraproject.org b/master/vpn.fedoraproject.org
index d11f5f3..f2cb7b1 100644
- --- a/master/vpn.fedoraproject.org
+++ b/master/vpn.fedoraproject.org
@@ -108,6 +108,7 @@ log2 IN CNAME log02
mirrorlist-dedicatedsolutions IN A 192.168.1.140
mirrorlist-host1plus IN A 192.168.1.148
mirrorlist-ibiblio IN A 192.168.1.107
+mirrorlist-ibiblio02 IN A 192.168.1.152
mirrorlist-osuosl IN A 192.168.1.106
mirrorlist-phx2 IN A 192.168.1.108
mailman01 IN A 192.168.1.118
- --
With kind regards,
Patrick Uiterwijk
Fedora Infra
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=FfgK
-----END PGP SIGNATURE-----
8 years, 5 months
Freeze break requeest: add script to make OpenVPN always fix its
routes
by Patrick Uiterwijk
Can I get any +1s?
This will guarantee that the routes will have been created when the OpenVPN link is up.
commit e8f63323b4e236629f438a082422d61a37cc95af
Author: Patrick Uiterwijk <puiterwijk(a)redhat.com>
Date: Thu Oct 22 21:06:38 2015 +0000
Add script to OpenVPN for VPN route fixing
This will make sure that always after a start/restart the
VPN routes are created
Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com>
diff --git a/roles/openvpn/client/files/client.conf b/roles/openvpn/client/files/client.conf
index abb5d03..704becb 100644
--- a/roles/openvpn/client/files/client.conf
+++ b/roles/openvpn/client/files/client.conf
@@ -14,6 +14,9 @@ nobind
persist-key
+up /etc/openvpn/fix-routes.sh
+up-restart
+
ca ca.crt
cert client.crt
key client.key
diff --git a/roles/openvpn/client/files/fix-routes.sh b/roles/openvpn/client/files/fix-routes.sh
new file mode 100644
index 0000000..a08e519
--- /dev/null
+++ b/roles/openvpn/client/files/fix-routes.sh
@@ -0,0 +1,12 @@
+#!/bin/sh
+# First check if this server is actually an OpenVPN client
+if [ -f /etc/openvpn/client.crt ];
+then
+ # Now the magic line
+ # This first checks whether there is a route, and if there isn't it will:
+ # 1. Get the local machine's VPN IP (up to and including awk)
+ # 2. Add a new route to 192.168.0.0/16 via that IP addres (from xargs on)
+ # 3. Print "Fixed VPN" and exit with code 2 to indicate that it changed
+ # Note: I've been told that the grep and awk can be in one command, and I believe that, but I find this clearer.
+ (ip route show | grep '192.168.0.0/16') || ((ip route show | grep '192.168.0.' | awk '{print $1}' | xargs ip route add 192.168.0.0/16 via) && echo "Fixed VPN" && exit 2);
+fi
diff --git a/roles/openvpn/client/tasks/main.yml b/roles/openvpn/client/tasks/main.yml
index 76817a2..67e44b1 100644
--- a/roles/openvpn/client/tasks/main.yml
+++ b/roles/openvpn/client/tasks/main.yml
@@ -17,6 +17,9 @@
- { file: client.conf,
dest: /etc/openvpn/openvpn.conf,
mode: '0644' }
+ - { file: fix-routes.sh,
+ dest: /etc/openvpn/fix-routes.sh,
+ mode: '0755' }
- { file: "{{ private }}/files/vpn/openvpn/keys/{{ inventory_hostname }}.crt",
dest: "/etc/openvpn/client.crt",
mode: '0600' }
With kind regards,
Patrick Uiterwijk
Fedora Infra
8 years, 6 months
