Participants 1. Norbert Thiebaud 2. Christian Lohmaier 3. Guilhem Moulin
Misc. + upcoming migrations/downtimes: pootle Nov. 19-20 + manitu network issues/DoS Attack unplanned downtimes/connectivity issues in the last days (nothing we could do about) during that + monitoring host lost VPN connection/got on the blacklist during that → should whitelist it/made it time out earlier in gluster (to avoid hitting the "only one instance" config limit + also deneb (kvm in Switzerland) has ping issues / spams tdf monitoring telegram channel with loss, recovery, loss, recovery, … → Mac mini lying unused in Switzerland, could be used by a dev + flood of mails to admin-alias/list still is a nuisance → need to have one where one is expected to read every mail (Norbert) → TODO: use a separate alias as envelope sender for automatic emails → graylog or similar to weed out the uninteresting stuff or separate "attention" list Libvirt/QEMU + want to try out qemu with native gluster support - need to free one hypervisor to do that (Guilhem) + also pinning of VMs for better perf/"guaranteed" CPU, have non-prod ones "floating" LDAP/SSO sketch on vm135 + ask users their username/password on each service alternative: ask for email and verify that email using a cryptographic token + store the hashes in LDAP using the service's custom password hashing method + at the begining of the transition, update the hash in the service's own database + not just a technical issue, social engineering is what's gonna take the longest time (notices, reminders, blog posts, wiki pages, etc.) + basic frontend should be ready by the end of next week + use Bugzilla's test instance (vm144) to check auth Closed issues: + graylog off berta → now on miranda TODOs (items that don't fit into Redmine): + document in infra-doc the 'proper way' to configure a debian's etc/network/interfaces et al. (2 interfaces 1 public one private with routing and dns).. and sysctl to prevent forwarding between public and private? + ipv6 firewalling? + modify tkmon to show hostnames in use, not only vmXXX + use salt to check host state + gluster checks https://www.gluster.org/pipermail/gluster-users/2014-June/017819.html + gluster mounts on hypervirsors won't work after boot + migration of the libreofficeforum, restarting under new platform. + remove tb3, tb63, tb64, tb65, vm6 from dns + askbot daily dumps by evgeny, clarify (#2074, #2112) + check georeplication berta → antares + graylog upgrade + UFW Hosts: - kermit.documentfoundation.org → alles mögliche ???? all is good ? - devcentral.libreoffice.org - bilbo2 - pumbaa + commit changes to tdfvms-data, including adding modification to volumes.txt to reflect the new gluster volumes + stabilize load balance of hypervisors and record these in tdfvms-data + minimize the noise level on infra ML… -- Guilhem. -- To unsubscribe e-mail to: website+unsubscr...@global.libreoffice.org Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/ Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette List archive: http://listarchives.libreoffice.org/global/website/ All messages sent to this list will be publicly archived and cannot be deleted