On Mon, Oct 19, 2009 at 11:59:11PM -0500, Dennis Gilmore wrote:
On Monday 19 October 2009 09:55:50 pm Luke Macken wrote:
On Mon, Oct 19, 2009 at 08:06:08PM -0500, Dennis Gilmore wrote:
We notcied that there was no apache logging on cvs1. this is because the
selinux policy was preventing
On Mon, Oct 19, 2009 at 08:06:08PM -0500, Dennis Gilmore wrote:
We notcied that there was no apache logging on cvs1. this is because the
selinux policy was preventing apache from writing log files. For now i have
set selinux to permissive mode until we can fix the policy correctly.
What
On Tue, Sep 22, 2009 at 07:48:58PM -0700, Toshio Kuratomi wrote:
On 09/22/2009 05:27 PM, Mike McGrath wrote:
We might want to send these suggestions to upstream docs
as well, certainly their example page :: cough cough :: :)
Do you remember where you got the examples from?
I based
On Wed, Jul 01, 2009 at 05:50:12PM -0700, Toshio Kuratomi wrote:
On 07/01/2009 05:39 PM, Mike McGrath wrote:
On Wed, 1 Jul 2009, Stephen John Smoogen wrote:
On Wed, Jul 1, 2009 at 6:08 PM, Mike McGrathmmcgr...@redhat.com wrote:
On Wed, 1 Jul 2009, Stephen John Smoogen wrote:
On Wed,
On Wed, Sep 09, 2009 at 04:33:19PM -0400, Luke Macken wrote:
On Wed, Jul 01, 2009 at 05:50:12PM -0700, Toshio Kuratomi wrote:
On 07/01/2009 05:39 PM, Mike McGrath wrote:
On Wed, 1 Jul 2009, Stephen John Smoogen wrote:
On Wed, Jul 1, 2009 at 6:08 PM, Mike McGrathmmcgr...@redhat.com
On Thu, Aug 27, 2009 at 12:12:11PM -0700, Toshio Kuratomi wrote:
On 08/26/2009 09:35 AM, Christian Del Pino wrote:
Hello everyone,
My name is Chris. I am looking to contribute my skills and time to the
Fedora Infrastructure group.
I started using Linux back in 1996 while in college.
Hey Guys,
I'd like to do a bodhi masher upgrade on releng2 and relepel1. There are no
critical changes for the app1-6 bodhi instances, so there is no need to upgrade
those just yet. Effected code paths for releng2/relepel1 bodhi mashers:
- Fix a bug that would cause duplicate update IDs
Trivial change,
I would like to move Fedora Community's beaker.session.secret into our
passwords git module (and change it, of course).
--- a/modules/fedoracommunity/templates/fedoracommunity-prod.ini.erb
+++ b/modules/fedoracommunity/templates/fedoracommunity-prod.ini.erb
@@ -117,7
On Wed, Aug 05, 2009 at 07:37:30PM -0500, Mike McGrath wrote:
On Tue, 4 Aug 2009, John Palmieri wrote:
Hey everyone. I put up a proposal[1] that describes a publish/subscribe
setup for the infrastructure wide notification system. I haven't quite
gotten to the publish side of things
On Fri, Jul 10, 2009 at 06:35:57AM -0500, Mike McGrath wrote:
Stuff like this comes up from time to time and the question I always have
is: What is it we're wanting to do that we can't currently do with the
setup we have now? We're a group with a lot of turnover and almost
everyone knows how
On Fri, Jul 10, 2009 at 08:56:07AM -0500, Mike McGrath wrote:
On Fri, 10 Jul 2009, Luke Macken wrote:
On Fri, Jul 10, 2009 at 06:35:57AM -0500, Mike McGrath wrote:
Stuff like this comes up from time to time and the question I always have
is: What is it we're wanting to do that we can't
Oh yeah, I also updated our Bodhi SOP with some details on how to push
updates for EPEL.
https://fedoraproject.org/wiki/Bodhi_Infrastructure_SOP
On Fri, Jul 03, 2009 at 11:25:35PM -0400, Luke Macken wrote:
Hey all,
I just deployed bodhi 0.6.0 to app1-6 and releng{2,1.stg}. This release
On Sun, Jul 05, 2009 at 03:20:43PM -0400, David Juran wrote:
Hello!
Would it be possible to add a new category for new packages to the
fedora-package-announce list?
I'm interested in seeing what new packages are released to Fedora but I
don't have the time/patience to wade through the
Hey all,
I just deployed bodhi 0.6.0 to app1-6 and releng{2,1.stg}. This release
contains patches from both Dennis Gilmore and myself to support pushing
updates for EPEL.
I just submitted my first EPEL update into bodhi, so things seem to be
working properly so far. It should be safe to start
On Wed, Jun 10, 2009 at 04:17:57PM -0500, Mike McGrath wrote:
So without knowing it we started using AGPLv3 code in our environment
recently for fedora community and moksha. In the past I think all of our
stuff has been GPL(ish) mostly GPLv2 (toshio correct me if I'm wrong
there)
I want to
Hey everyone,
So I've been doing a lot of SELinux/audit related work behind the scenes
within our infrastructure for a while now, working closely with Dan
Walsh and Steve Grubb. It's taken a lot of patience and hard work, but
we're finally at the point where we can start switching large portions
On Mon, Mar 30, 2009 at 12:57:23PM -0500, Dennis Gilmore wrote:
So doing a liitle looking around I cane across some options that look
interesting, the following options would mean you need to physically have
something to login.
yubikey
http://www.yubico.com/products/yubikey/
It would
Hi guys,
I'd like to do a low-risk bodhi upgrade this weekend. Changes include:
* A new argument to the 'list' API method that will be utilized by
Fedora Community. This does not break the existing API.
* Added FormEncode validators to the 'list' API method, which fixes a
couple of
On Wed, Nov 26, 2008 at 12:55:28PM +0100, Nils Philippsen wrote:
On Fri, 2008-11-21 at 16:49 -0500, Luke Macken wrote:
On Fri, Nov 21, 2008 at 01:12:13PM -0800, Toshio Kuratomi wrote:
Luke Macken wrote:
On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote:
On Fri, 21 Nov 2008
On Mon, Nov 24, 2008 at 04:38:16PM -0600, Mike McGrath wrote:
I'm happy to announce I've just approved Nigel Jones in to the
sysadmin-main group. He's the first new member we've had to that group
since Ricky Zhou was approved in May earlier this year.
For those that don't know sysadmin-main
On Sat, Nov 22, 2008 at 06:41:34PM -0500, Luke Macken wrote:
As some of you may have noticed, the last batch of updates contained 209
updates with the ID of 'FEDORA-2008-1'. This is is due to a flaw in the
way bodhi's PackageUpdate.assign_id() method finds the current update
965360653ee505c76a89228bac462ada597dad0b Mon Sep 17 00:00:00 2001
From: Luke Macken [EMAIL PROTECTED]
Date: Sat, 22 Nov 2008 18:27:40 -0500
Subject: [PATCH] Righteous hack for the 10k bug.
Due to a flaw in the way the PackageUpdate.assign_id method finds the update
with the highest id, when we
From: Luke Macken [EMAIL PROTECTED]
Date: Fri, 21 Nov 2008 15:15:58 +
Subject: [PATCH] Add a custom SELinux policy module for our noc systems.
This allows ping_t to read from a nagios_spool_t fifo.
diff --git a/configs/system/selinux/modules/noc.pp
b/configs/system/selinux/modules/noc.pp
new
On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote:
On Fri, 21 Nov 2008, Luke Macken wrote:
Attached are some patches that will fix many AVC's that are currently
happening within our infrastructure.
Patch 0010-Fix-our-semanage_fcontext-function-to-work-on-symlin.patch
of audit logs.
This patch will only effect bastion, as it is currently the only machine
that is configured with 'include prelude::sensor::audisp'
luke
From 6f3e644a09d15c659716f82e8af18b66d75517c1 Mon Sep 17 00:00:00 2001
From: Luke Macken [EMAIL PROTECTED]
Date: Fri, 21 Nov 2008 21:11:50 +
Subject
On Fri, Nov 21, 2008 at 01:12:13PM -0800, Toshio Kuratomi wrote:
Luke Macken wrote:
On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote:
On Fri, 21 Nov 2008, Luke Macken wrote:
Attached are some patches that will fix many AVC's that are currently
happening within our
On Thu, Nov 13, 2008 at 02:54:43PM -0500, Ricky Zhou wrote:
This is just a content change, so it should have no risk at all:
It fixes ticket 814
(https://fedorahosted.org/fedora-infrastructure/ticket/814)
diff --git a/configs/system/fingerprints.html
b/configs/system/fingerprints.html
I would like to perform a trivial bodhi upgrade that contains the
following patch:
--- a/bodhi/controllers.py
+++ b/bodhi/controllers.py
@@ -168,7 +168,7 @@ class Root(controllers.RootController):
forward_url= cherrypy.request.headers.get(Referer, /)
On Tue, Oct 14, 2008 at 11:27:36PM +0200, Patrice Dumas wrote:
Hello,
This question is asked in the context of
https://fedoraproject.org/wiki/User:Pertusus/Draft_keeping_infra_open_for_EOL
which has not already been approved by FESCO, so this could have no
follow-up, though I think that
On Tue, Sep 23, 2008 at 01:32:23AM +1200, Nigel Jones wrote:
On Mon, 2008-09-22 at 09:25 -0400, Seth Vidal wrote:
On Tue, 2008-09-23 at 01:08 +1200, Nigel Jones wrote:
Technically not directly covered in the Beta Freeze, but it's only
running on app4 at the moment and the settings it's on
On Tue, Sep 16, 2008 at 09:49:56PM -0700, Toshio Kuratomi wrote:
Mike McGrath wrote:
Hey guys, i think I'd like to hold puppet training next week on Wed
sometime. Which would work best for you guys:
1:00 pm Chicago time
4:00 pm Chicago time.
The live training will be identical to
On Sun, Sep 14, 2008 at 05:13:10AM -0400, Ricky Zhou wrote:
sb2/3 randomly rebooted again tonight (the nagios alert about ns1).
Sorry, but I never got around to sending a ticket about it. I'll try to
get a list of dates/times where this happened together soon.
Also, just so this doesn't get
Over the past few months, I've been working closley with Dan Walsh and
Mike McGrath to solidify our SELinux deployment. We're not yet to the
point where we can flip every system into enforcing mode, but we're
getting close.
We're at the point now where we can pretty much do everything we need to
Hey all,
A couple of weeks ago I did an initial deployment of an Intrusion
Detection System in our infrastructure. It utilizes the prelude stack,
and is currently powered by auditd and prelude-lml events. Audit gives
us a ridiculous amount of power with regarding to monitoring
everything that
On Wed, Sep 10, 2008 at 06:29:38PM -0600, Stephen John Smoogen wrote:
2008/9/10 Luke Macken [EMAIL PROTECTED]:
Hey all,
A couple of weeks ago I did an initial deployment of an Intrusion
Detection System in our infrastructure. It utilizes the prelude stack,
and is currently powered
On Tue, Aug 12, 2008 at 08:33:32PM +, Paul W. Frields wrote:
Apologies for this being an idea with no code attached. I'm hoping that
some of the able folks are on this list and will see something
achievable.
Something the Community Architecture folks and I have discovered is that
On Thu, Jul 17, 2008 at 05:45:44PM +0200, Yaakov Nemoy wrote:
On Thu, Jul 17, 2008 at 4:40 PM, Luke Macken [EMAIL PROTECTED] wrote:
I reviewed and approved python-migrate yesterday. It's currently
waiting to be built.
https://bugzilla.redhat.com/show_bug.cgi?id=452388
How long
On Tue, Jul 08, 2008 at 05:46:07PM -0400, Robin Norwood wrote:
Ricky set up a FAS instance on pt9 that seems to work fine so far, so
I'm done whining. :-)
Hmmm, so what is the difference between the pt10 and pt9 deployments?
We've been testing the bleeding-edge python-fedora package on pt10, so
On Thu, May 15, 2008 at 11:24:59AM -0400, John (J5) Palmieri wrote:
On Wed, 2008-05-14 at 12:39 -0400, Luke Macken wrote:
On Wed, May 14, 2008 at 09:06:24AM -0700, Toshio Kuratomi wrote:
Forwarding to fedora-infrastructure-list soit canget more exposure and
discussion
On Tue, May 20, 2008 at 09:15:28AM -0700, Toshio Kuratomi wrote:
Things I'd like but probably can't work on myself:
[...]
* Optimize db calls within TG applications to make them as snappy as
possible. I can do this for SQLAlchemy but SQLObject isn't flexible
enough. Any page which is for
On Tue, May 20, 2008 at 02:18:53PM -0400, Yaakov Nemoy wrote:
On Tue, May 20, 2008 at 1:54 PM, Luke Macken [EMAIL PROTECTED] wrote:
On Tue, May 20, 2008 at 09:15:28AM -0700, Toshio Kuratomi wrote:
Things I'd like but probably can't work on myself:
[...]
* Optimize db calls within TG
On Wed, May 14, 2008 at 11:03:38AM -0500, Mike McGrath wrote:
Forwarding to fedora-infrastructure-list soit canget more exposure and
discussion.
Original Message
Subject: Tosca widgets, only half the battle
Date: Sun, 11 May 2008 12:27:36 -0400
From: John (J5)
On Mon, May 05, 2008 at 03:30:22PM -0500, Mike McGrath wrote:
On Mon, 5 May 2008, Luke Macken wrote:
Hey guys,
I'd like to start preparing for the releng1-releng2 move, and begin
testing bodhi + mash + TG on RHEL5.
This entails turning on the releng2 guest which lives on xen2
On Sun, Apr 20, 2008 at 01:20:49PM -0700, Toshio Kuratomi wrote:
Since the release is delayed and we're letting more changes through, I'd
like to update to the new python-fedora, 0.2.99.9 that reverts the
incompatible changes from 0.2.99.8.
I'd like to push this package to all the app
On Wed, Jan 30, 2008 at 03:15:22PM -0600, Mike McGrath wrote:
collab1.fedoraproject.org is up and running. Yahoo! So whats missing?
Well, it doesn't actually do anything yet. Plans for it include
1) gobby (its AMAZING)
2) pastebin or something like it (also amazing)
3) mailman.
So who
On Thu, Feb 21, 2008 at 12:23:27AM +0200, Dimitris Glezos wrote:
On Wed, Feb 20, 2008 at 11:38 PM, Luke Macken [EMAIL PROTECTED] wrote:
Sobby (the standalone obby server) is now running on
gobby.fedoraproject.org.
I also setup a cronjob to `git add . ; git commit -a` everything
On Wed, Feb 20, 2008 at 11:08:38PM -0500, Yaakov Nemoy wrote:
On Wed, Feb 20, 2008 at 4:38 PM, Luke Macken [EMAIL PROTECTED] wrote:
On Wed, Jan 30, 2008 at 03:15:22PM -0600, Mike McGrath wrote:
collab1.fedoraproject.org is up and running. Yahoo! So whats missing?
Well, it doesn't
On Wed, Jan 30, 2008 at 11:57:23AM -0600, Mike McGrath wrote:
We need a Fedora search engine. Especially for docs. Options
1) Do we run our own?
2) Do we use google.
I love 2, its easy. But it is, non-OSS. So there are moral issues at
stake here. (though I've not used google to
So, we still have a handful of FC6 guests lying around in PHX.
After a quick look, it seems that we're using them for the following
services.
publictest1
- pkgdb-dev
- ns-slapd
- mysqld
- postgres
- wevisor
publictest2
- my mash/bodhi playground
publictest4
On Wed, Jan 02, 2008 at 11:21:18AM -0500, seth vidal wrote:
On Wed, 2008-01-02 at 10:15 -0600, Mike McGrath wrote:
There's been a request to remove infofeed in favor of bodhi's interface as
they now duplicate information.
Is anyone against doing this?
I just made the change in puppet to block port 80 on our publictest
machines. Theoretically, the apps on those servers shouldn't be touching our
production db, but we shouldn't underestimate human stupidity.
Let us know if stuff breaks.
luke
___
On Wed, Nov 07, 2007 at 04:20:26PM -0500, Luke Macken wrote:
As most are probably aware, we are hitting a bug[0] in the yum depsolver
when trying to mash dist-f7-updates-testing. Tim Lauridsen wrote a
patch[1] that seems to fix the problem and allows us to compose
updates-testing again
As most are probably aware, we are hitting a bug[0] in the yum depsolver
when trying to mash dist-f7-updates-testing. Tim Lauridsen wrote a
patch[1] that seems to fix the problem and allows us to compose
updates-testing again (W!).
Tim sent the patch to yum-devel for review, but in the
On Wed, Nov 07, 2007 at 04:20:26PM -0500, Luke Macken wrote:
As most are probably aware, we are hitting a bug[0] in the yum depsolver
when trying to mash dist-f7-updates-testing. Tim Lauridsen wrote a
patch[1] that seems to fix the problem and allows us to compose
updates-testing again
On Wed, Oct 24, 2007 at 08:39:48AM -0700, Toshio Kuratomi wrote:
Jeffrey C. Ollie wrote:
On Wed, 2007-10-24 at 11:22 +0200, Mirko Klinner wrote:
Hi friends of good infrastructure,
2007/10/23, Mike McGrath [EMAIL PROTECTED]:
Ok, so there's a ticket for a new news site,
Mike is in the process of tracking down some issues with our database at
the moment, so there may be some intermittent outages with some of our
web services, including:
- bodhi
- koji
- pkgdb
- mirrormanager
- accounts system
Thanks,
luke
On Thu, Oct 11, 2007 at 10:31:08AM -0500, Jeffrey C. Ollie wrote:
My personal choice would be to switch to Git for the VCS but keep the
repository data the same (spec file plus patches). I feel that
switching to expanded source-style repositories is too radical of a
change - we give up the
On Wed, Sep 26, 2007 at 02:35:24PM +0300, Axel Thimm wrote:
Hi,
a kernel rpm with a security fix has been pushed 24h ago by bodhi, but
no mirror has it yet, all donwloadX show the old kernel but a couple
that give connection refused.
It'll get pulled into the next mash (which I assume will
On Thu, Sep 20, 2007 at 02:39:54PM -0400, Luke Macken wrote:
So bodhi has recently been having some issues with TurboMail, which seems to
stop dispatching mid-push. Bodhi still 'turbomail.enqueue's the messages, but
the worker threads seem to be dead.
I created a new package with a patch
On Thu, Aug 23, 2007 at 09:14:30PM +0200, Jeroen van Meeuwen wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Toshio Kuratomi wrote:
Mike McGrath wrote:
Please let me know which of these times work best for you:
Monday August 27th at 15:00 UTC
Monday August 27th at 20:00 UTC
There are a handful of development instances of various apps running on
our publictest systems, most of which don't support SSL. This is
obviously not a good thing, so I'm proposing that we either enable SSL
on these apps, or disable the FAS identity provider and provide local
guest accounts on
Hey guys,
I setup an instance of the stand-alone gobby server on publictest2, per
the gobby RFR[0]. This will allow anyone to collaborate in real-time on
any text: spec files, code, notes, ideas, etc. You can test it out by
installing 'gobby' and connecting to publictest2.fedora.redhat.com
If
On Fri, Aug 10, 2007 at 10:48:01AM -0600, Jonathan Steffan wrote:
Should we look at testing speech to text?
I mentioned using sphinx[0] yesterday on #fedora-admin, kind of as a
joke -- but it may be worth a shot ? Once we are able to save
conferences, then it should be pretty easy to test this
The TurboGears stack is ready for RHEL5!
Installable via `yum install TurboGears` from the EL-5 repo[0].
luke
[0]: http://download.fedoraproject.org/pub/epel/5/
___
Fedora-infrastructure-list mailing list
Fedora-infrastructure-list@redhat.com
On Thu, Jun 07, 2007 at 12:19:01PM -0500, Mike McGrath wrote:
Toshio Kuratomi wrote:
Depends...
What is the reason for those boxes to be on Fedora instead of RHEL? If
it's because FC6 had things not in RHEL4 maybe we can make a switch to
RHEL5 at some point. If the reason is we want
On Fri, Jun 01, 2007 at 08:34:34PM -0700, Toshio Kuratomi wrote:
After looking at a traceback from Bodhi, I put together a new
python-fedora to hopefully address that. It's available from my home
directory on bastion:
/home/fedora/toshio/python-fedora-0.2.90.8-1.noarch.rpm
I've only
On Thu, May 31, 2007 at 08:52:11AM -0400, Jesse Keating wrote:
On Thursday 31 May 2007 08:11:07 Luke Macken wrote:
That's all I can think of at the moment.. anyone have anything else that
is a top priority for bodhi ?
A way to see if there are broken deps in the new update set
So we're less than a week away from F7, so why not completely change the
way updates are pushed? :)
We're going to use mash[0] to compose our updates repo instead of managing
it by hand. This removes the burden of multilib, repo-cleaning, and
dep closure checking from bodhi.
This means that we
On Thu, May 24, 2007 at 01:02:35AM -0400, Bill Nottingham wrote:
Mmm, plumbing. bodhi is heading for production soon. To push updates, what
bodhi currently does is, for any update:
- sign the package
Nope, neither bodhi or the current update system sign any packages.
The current system mails
On Sat, May 12, 2007 at 08:58:24PM -1000, Julian Yap wrote:
Hi,
I get this error when running 'yum update'.
[...]
Is it a larger issue?
It looks like mod_python was to blame.
[Sun May 13 01:24:03 2007] [error] [client 10.8.32.55] PythonHandler
return_mirrorlist: Traceback (most recent
On Fri, May 11, 2007 at 09:51:42AM -0500, Mike McGrath wrote:
We've got a lot of prep work to do before Fedora 7 launches. I'd like to
compile a list so if anything is missing let me know:
[...]
What am I missing?
Bodhi.
I have a test instance running on publictest2[0] that people
On Tue, Apr 17, 2007 at 01:58:48PM -0400, Wilmer Jaramillo M. wrote:
Hi, I have a suggestion, because don't is set the Reply-to header
for fedora-infrastructure-list@redhat.com on mailing list?. When I
answer a mail, only one _should_ receive the mail, but all of the
internal list possibly
On Mon, Mar 05, 2007 at 05:14:51PM -0800, Toshio Kuratomi wrote:
A presentation was given at this years PyCon called Scaling Python for
High-Load Web Sites[0], I definitely recommend checking it out.
Really cool. My reading of the talk is if our loads match up with their
sample
73 matches
Mail list logo