1:22 a.m.
On 09.03.2015 17:26, Kevin Fenzi wrote:
Please adjust your mirroring scripts to point to the
dl.fedoraproject.org mirrors. If you need acls added, please let us
know.
Is the module list under
http://fedoraproject.org/wiki/Infrastructure/Mirroring#Available_content
current? Trying fedora-enchilada0 currently gives "@ERROR: Unknown
module 'fedora-enchilada0'", even though all our IP addresses and host
names are listed in the mirror manager, which states:
Master rsync server Access Control List IPs
These host DNS names and/or IP addresses will be allowed to rsync from the master
rsync/ftp servers. List here all the machines that you use for pulling.
[Add]
130.59.10.36 [Delete]
2001:620:0:8::20 [Delete]
frisal.switch.ch [Delete]
mirror.switch.ch [Delete]
Also, pulling fedora-enchilada (without "0") from dl.fedoraproject.org -
after switching away from download-i2.fedoraproject.org - seems
relatively slow. Is there some bandwidth limit in place, and are
additional ACL entries needed for our site?
Kaspar
SWITCH
------
Kaspar Brand
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
switchmirror(a)switch.ch, http://mirror.switch.ch
2:15 a.m.
New subject: IMPORTANT: Internet2 master mirrors to be retired 2015-03-31
On Tue, Mar 10, 2015 at 07:22:23AM +0100, SWITCHmirror Admins wrote:
On 09.03.2015 17:26, Kevin Fenzi wrote:
> Please adjust your mirroring scripts to point to the
> dl.fedoraproject.org mirrors. If you need acls added, please let us
> know.
Is the module list under
http://fedoraproject.org/wiki/Infrastructure/Mirroring#Available_content
current? Trying fedora-enchilada0 currently gives "@ERROR: Unknown
module 'fedora-enchilada0'", even though all our IP addresses and host
names are listed in the mirror manager, which states:
The rsync ACLs on the master mirror are not taken from MirrorManager.
The MirrorManager ACLs are for local ACLs on the mirrors. To mirror from
the master mirror additional ACLs are required. The modules only appear
for mirrors in the ACLs.
> Master rsync server Access Control List IPs
> These host DNS names and/or IP addresses will be allowed to rsync from the master
rsync/ftp servers. List here all the machines that you use for pulling.
> [Add]
>
> 130.59.10.36 [Delete]
> 2001:620:0:8::20 [Delete]
> frisal.switch.ch [Delete]
> mirror.switch.ch [Delete]
Also, pulling fedora-enchilada (without "0") from dl.fedoraproject.org -
after switching away from download-i2.fedoraproject.org - seems
relatively slow. Is there some bandwidth limit in place, and are
additional ACL entries needed for our site?
I can add you to the ACLs of the master mirror or (preferred) I can
offer you to sync from my mirror (ftp-stud.hs-esslingen.de) which should
be pretty close to your mirror. For other mirrors mirroring from my
system I have set up push mirroring, so that would also be a solution.
So for fast syncs I would recommend using my mirror or some other local
Tier 1 mirror as this is also the preferred setup.
Adrian
2:39 a.m.
New subject: IMPORTANT: Internet2 master mirrors to be retired 2015-03-31
On 10.03.15 08:15, Adrian Reber wrote:
I can add you to the ACLs of the master mirror or (preferred) I can
offer you to sync from my mirror (ftp-stud.hs-esslingen.de) which should
be pretty close to your mirror. For other mirrors mirroring from my
system I have set up push mirroring, so that would also be a solution.
So for fast syncs I would recommend using my mirror or some other local
Tier 1 mirror as this is also the preferred setup.
Ok, that would be fine, yes. Perhaps you could add 130.59.10.36 and
2001:620:0:8::20 to the ACLs for both the masters and your site, so that
we could temporarily switch in the future, if need be?
Push mirroring might also be useful, but as I'll be out of office from
tomorrow until 18 March, I'll look into it afterwards.
Thanks,
Kaspar
2:53 a.m.
New subject: IMPORTANT: Internet2 master mirrors to be retired 2015-03-31
On Tue, Mar 10, 2015 at 08:39:53AM +0100, SWITCHmirror Admins wrote:
On 10.03.15 08:15, Adrian Reber wrote:
> I can add you to the ACLs of the master mirror or (preferred) I can
> offer you to sync from my mirror (ftp-stud.hs-esslingen.de) which should
> be pretty close to your mirror. For other mirrors mirroring from my
> system I have set up push mirroring, so that would also be a solution.
>
> So for fast syncs I would recommend using my mirror or some other local
> Tier 1 mirror as this is also the preferred setup.
Ok, that would be fine, yes. Perhaps you could add 130.59.10.36 and
2001:620:0:8::20 to the ACLs for both the masters and your site, so that
we could temporarily switch in the future, if need be?
I added your mirror to the Fedora master mirror ACL. Should work pretty
soon now.
I see in my logs that you are already syncing other content from my mirror
using rsync.
Push mirroring might also be useful, but as I'll be out of office
from
tomorrow until 18 March, I'll look into it afterwards.
Let me know if this is something you would like.
Adrian
1:09 a.m.
New subject: IMPORTANT: Internet2 master mirrors to be retired 2015-03-31
On 12.03.2015 08:53, Adrian Reber wrote:
On Tue, Mar 10, 2015 at 08:39:53AM +0100, SWITCHmirror Admins wrote:
> On 10.03.15 08:15, Adrian Reber wrote:
>> I can add you to the ACLs of the master mirror or (preferred) I can
>> offer you to sync from my mirror (ftp-stud.hs-esslingen.de) which should
>> be pretty close to your mirror. For other mirrors mirroring from my
>> system I have set up push mirroring, so that would also be a solution.
>>
>> So for fast syncs I would recommend using my mirror or some other local
>> Tier 1 mirror as this is also the preferred setup.
>
> Ok, that would be fine, yes. Perhaps you could add 130.59.10.36 and
> 2001:620:0:8::20 to the ACLs for both the masters and your site, so that
> we could temporarily switch in the future, if need be?
I added your mirror to the Fedora master mirror ACL. Should work pretty
soon now.
Sorry for the late reply, catching up with my inbox(es).
Trying to list fedora-enchilada0 [1] from the masters still doesn't
work, unfortunately:
$ rsync --address 130.59.10.36
rsync://dl.fedoraproject.org/fedora-enchilada0
----------------------------
Fedora Master Mirror Servers
----------------------------
Modules for Fedora Core and Extras have been removed, as this content is
no longer updated. See the instructions below for how to mirror current
content.
See http://fedoraproject.org/wiki/Infrastructure/Mirroring for
instructions.
----------------------------
@ERROR: Unknown module 'fedora-enchilada0'
rsync error: error starting client-server protocol (code 5) at main.c(1506)
[Receiver=3.0.7]
(--address added for the sake of explicitness, it's the only IPv4
interface on that system, actually)
This is the list of modules I see on the master:
$ rsync --address 130.59.10.36 rsync://dl.fedoraproject.org
----------------------------
Fedora Master Mirror Servers
----------------------------
Modules for Fedora Core and Extras have been removed, as this content is
no longer updated. See the instructions below for how to mirror current
content.
See http://fedoraproject.org/wiki/Infrastructure/Mirroring for
instructions.
----------------------------
fedora-alt non-Fedora Alternative Content
fedora-archive Fedora Release Archives
fedora-enchilada Fedora - The whole enchilada
fedora-buffet Fedora - The whole buffet. All you can eat.
fedora-epel Extra Packages for Enterprise Linux
fedora-linux-releases Fedora Linux Releases
fedora-linux-development Fedora Linux Development
fedora-linux-updates Fedora Linux Updates
fedora-secondary Fedora Secondary Archs
fedora-stage Staging directory
deltaisos Delta isos
So either the module list in the Wiki page is not really accurate, or
there's still some ACL tweaking needed.
I see in my logs that you are already syncing other content from my
mirror
using rsync.
Indeed, thanks for making me aware of some obsolete Red Hat stuff we
used to mirror. I'm basically going to drop this, in particular since
RedHat doesn't provide SRPMs for version 7 through this channel any longer.
Let me know if this is something you would like.
Let's first sort out the issue with fedora-enchilada vs.
fedora-enchilada0, and then think about push mirroring :-)
Kaspar
[1] http://fedoraproject.org/wiki/Infrastructure/Mirroring#Available_content
2:43 a.m.
New subject: IMPORTANT: Internet2 master mirrors to be retired 2015-03-31
On Mon, Mar 23, 2015 at 07:09:34AM +0100, SWITCHmirror Admins wrote:
On 12.03.2015 08:53, Adrian Reber wrote:
> I added your mirror to the Fedora master mirror ACL. Should work pretty
> soon now.
Sorry for the late reply, catching up with my inbox(es).
Trying to list fedora-enchilada0 [1] from the masters still doesn't
work, unfortunately:
[...]
So either the module list in the Wiki page is not really accurate,
or
there's still some ACL tweaking needed.
Unfortunately I added your CNAME (mirror.switch.ch) to the ACL and that
did not work. I changed the ACL entry to frisal.switch.ch and as soon as
the configuration is applied to the rsync servers you can try again.
This takes some time (maybe Kevin can run the playbooks manually).
Adrian
7:24 a.m.
New subject: IMPORTANT: Internet2 master mirrors to be retired 2015-03-31
On Mon, 23 Mar 2015 08:43:40 +0100
Adrian Reber <adrian(a)lisas.de> wrote:
On Mon, Mar 23, 2015 at 07:09:34AM +0100, SWITCHmirror Admins wrote:
> On 12.03.2015 08:53, Adrian Reber wrote:
> > I added your mirror to the Fedora master mirror ACL. Should work
> > pretty soon now.
>
> Sorry for the late reply, catching up with my inbox(es).
>
> Trying to list fedora-enchilada0 [1] from the masters still doesn't
> work, unfortunately:
[...]
> So either the module list in the Wiki page is not really accurate,
> or there's still some ACL tweaking needed.
Unfortunately I added your CNAME (mirror.switch.ch) to the ACL and
that did not work. I changed the ACL entry to frisal.switch.ch and as
soon as the configuration is applied to the rsync servers you can try
again. This takes some time (maybe Kevin can run the playbooks
manually).
This change should be live now.
kevin
3324
days inactive
3337
days old
mirror-admin@lists.fedoraproject.org
6 comments
3 participants
participants (3)
-
Adrian Reber -
Kevin Fenzi -
SWITCHmirror Admins