Re: Freeze Break Request: update wildcard cert to new one

2020-02-27 Thread Rick Elrod
+1, lgtm assuming you grepped and found all of them (I did not check). -re On Thu, Feb 27, 2020 at 3:26 PM Stephen John Smoogen wrote: > > > This patch should make the changes to the appropriate files so that various > playbooks will use the newer certificate wildcard-2020 > > -- > Stephen J

Re: FBR: Add monitoring for website build fails

2020-02-27 Thread Rick Elrod
On Thu, Feb 27, 2020 at 4:31 AM Clement Verna wrote: > > > > On Thu, 27 Feb 2020 at 06:53, Rick Elrod wrote: >> >> I'd like to apply the following which does: >> - Adds a script I wrote for reading a timestamp from a file on disk >> and alerting if t

FBR: Add monitoring for website build fails

2020-02-26 Thread Rick Elrod
the delta to 3 hours. In theory it should be 1, but I figure let it try to build a few times before we start alerting. Rick commit 657d050f6d699bc43973d968cd93d12131fca7f2 Author: Rick Elrod Date: Thu Feb 27 05:29:24 2020 + nagios: Add script and check for checking that a timestamp within

Re: OpenShift-apps playbooks in the master.yml playbook

2019-11-18 Thread Rick Elrod
On 2019-11-18 06:59, Clement Verna wrote: > Hey all, > > I have just disabled the openshift-apps playbooks from running in the > master playbook run (see > https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/master.yml?id=dccf42cd510703d6ddb5bb444aed7ce24ee1c334). I'm -1 on this.

Re: [PATCH 2/2] bodhi-pungi: enable aarch64 and ppc64le for silverblue updates

2019-10-24 Thread Rick Elrod
+1 -re On 2019-10-24 15:51, Mohan Boddu wrote: +1 LGTM On Thu, Oct 24, 2019 at 3:36 PM Dusty Mabe wrote: --- roles/bodhi2/backend/templates/pungi.rpm.conf.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/bodhi2/backend/templates/pungi.rpm.conf.j2

Re: [PATCH 1/2] bodhi-pungi: F32 will be the next "branched"

2019-10-24 Thread Rick Elrod
+1 for the same reason. -re On 2019-10-24 16:23, Mohan Boddu wrote: Since rawhide is not uses pungi, I think we are okay with this change. +1 LGTM On Thu, Oct 24, 2019 at 4:13 PM Mohan Boddu wrote: No, with rawhide gating we are using bodhi to push rawhide builds as updates, I think it

Re: [PATCH] new-updates-sync: sync multiarch silverblue ostree content

2019-10-24 Thread Rick Elrod
+1 after the syntax fix I mentioned inline. -re On 2019-10-24 15:56, Dusty Mabe wrote: --- roles/bodhi2/backend/files/new-updates-sync | 10 ++ 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/roles/bodhi2/backend/files/new-updates-sync

Re: Big Freeze Break Request: replicate db-koji01

2019-10-22 Thread Rick Elrod
+1 on #1 -re On 2019-10-22 16:56, Stephen John Smoogen wrote: On Tue, 22 Oct 2019 at 16:55, Mohan Boddu wrote: On Mon, Oct 21, 2019 at 2:48 PM Kevin Fenzi wrote: So, I got db-koji02 all setup and doing streaming replication from db-koji01. It has no trouble keeping up. The bad news is,

Re: Big Freeze Break Request: replicate db-koji01

2019-10-16 Thread Rick Elrod
I'm +1 to this, I don't think we should be going without db backups especially at this point in the cycle. Happy to help with some of it as well. Rick On 2019-10-16 18:35, Kevin Fenzi wrote: Greetings folks. As you may know, currently database backups on db-koji01 are causing very heavy

Re: Freeze break request: add registry-no-cdn version3

2019-10-15 Thread Rick Elrod
And the next issue was indeed found. Thanks to otaylor for pointing out my logic fail, and apologies to nirik for breaking his already correct logic. -1 on this version because I am dumb. -re On 2019-10-15 14:56, ke...@scrye.com wrote: Cast aside all other versions! This is it! (until the

Re: [PATCH] proxies: add registry-no-cdn in a better/simplier way

2019-10-15 Thread Rick Elrod
+1 to this version of it, with the removal of the /'s in the regex which I think Apache would take literally. If we want to be pedantic, then escape the .'s in the regex with a \, but in this case it doesn't matter much. -re On 2019-10-15 14:19, ke...@scrye.com wrote: From: Kevin Fenzi

Re: Freeze Break Request: update openssl on proxy servers

2019-09-17 Thread Rick Elrod
+1 here -re On 9/17/19 1:46 PM, Kevin Fenzi wrote: Greetings. I'd like to apply: https://bodhi.fedoraproject.org/updates/FEDORA-2019-d51641f152 to our proxy servers and restart httpd on them. This is to fix: https://pagure.io/fedora-infrastructure/issue/8173

Re: Freeze Break Request: Fix typo in bodhi status variable

2019-09-09 Thread Rick Elrod
+1 -re On 9/9/19 2:34 PM, Kevin Fenzi wrote: Greetings. We have a variable in: vars/all/FedoraBranchedBodhi.yaml thats used in our bodhi config to set the proper policies. The template uses 'predeta' and 'postbeta'... but the variable was updated to 'preBeta', which isn't going to work. I'd

Re: Freeze break request: update registry.redhat.io ip

2019-09-09 Thread Rick Elrod
+1 -re On 9/9/19 2:06 PM, Kevin Fenzi wrote: diff --git a/roles/hosts/files/os-hosts b/roles/hosts/files/os-hosts index e9dc0a2..3c283e3 100644 --- a/roles/hosts/files/os-hosts +++ b/roles/hosts/files/os-hosts @@ -1,4 +1,4 @@ 127.0.0.1 localhost localhost.localdomain localhost4

Re: [PATCH] ipsilon: add aws-copr group to ipsilon for aws access.

2019-09-03 Thread Rick Elrod
+1 -re On 9/3/19 7:59 PM, Kevin Fenzi wrote: Signed-off-by: Kevin Fenzi --- roles/ipsilon/files/infofas.py | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/ipsilon/files/infofas.py b/roles/ipsilon/files/infofas.py index 2b59000..5454edf 100644 --- a/roles/ipsilon/files/infofas.py

Re: FBR: Sunset infinote

2019-09-03 Thread Rick Elrod
+1 thanks for working on this. -re On 9/3/19 3:10 PM, Clement Verna wrote: Hi all, The attached patch remove infinote from ansible. I would like to apply this then delete the virtual host and finally the run the nagios playbook so that we don't monitor this service anymore. Content was

Re: [PATCH] robosignatory: add f31/f32 infra tags and f31-gnome side tag to be signed.

2019-09-03 Thread Rick Elrod
+1 here. -re On 9/3/19 1:30 PM, Kevin Fenzi wrote: Signed-off-by: Kevin Fenzi --- roles/robosignatory/files/robosignatory.production.py | 18 ++ 1 file changed, 18 insertions(+) diff --git a/roles/robosignatory/files/robosignatory.production.py

Re: Freeze break request: h2 testing on rawhide

2019-08-30 Thread Rick Elrod
On 8/30/19 12:21 PM, Kevin Fenzi wrote: Can I get some +1s for this plan? +1, easy to back out if it breaks. Rick ___ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to

Re: [[FBR] Freeze Break Request: ] dns: Actually drop the limit on the group we defined in the last commit.

2019-04-30 Thread Rick Elrod
+1 here too. On 4/30/19 4:41 PM, ke...@scrye.com wrote: From: Kevin Fenzi Signed-off-by: Kevin Fenzi --- roles/dns/files/named.conf | 4 1 file changed, 4 insertions(+) diff --git a/roles/dns/files/named.conf b/roles/dns/files/named.conf index c13d65e..e210088 100644 ---

Re: [[FBR] Freeze Break Request: ] dns: add 2 rh nameservers that make a lot of legit queries against our dns.

2019-04-30 Thread Rick Elrod
+1 -re On 4/30/19 4:36 PM, ke...@scrye.com wrote: From: Kevin Fenzi Signed-off-by: Kevin Fenzi --- roles/dns/files/named.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/dns/files/named.conf b/roles/dns/files/named.conf index df539bf..c13d65e 100644 ---

Re: Heads-up: Deleting fas3_server role from ansible

2019-04-19 Thread Rick Elrod
+1, I think you can also delete inventory/host_vars/fas3* and related playbooks. -re On 4/19/19 10:13 AM, Clement Verna wrote: Hi all, I ll be deleting the fas3_server role from our ansible repository since it is currently not used and we are moving away from FAS. See the file diff below.

Re: Heads-up: Deleting graphite role from ansible

2019-04-19 Thread Rick Elrod
+1, this was an experiment I led. Grafana/graphite is pretty and I'd love to have pretty dashboards to get various views into our infrastructure, but I never got around to setting it up beyond just dumping our collectd stats into it. It's something I'd like to perhaps revisit down the road

Re: FBR: Push a fix to clean_amis.py in fedimg box

2019-03-27 Thread Rick Elrod
+1 -re On 3/27/19 5:57 AM, Sayan Chowdhury wrote: I need to push a fix to run the clean_amis script. The diff is as follows: diff --git a/roles/fedimg/files/clean-amis.py b/roles/fedimg/files/clean-amis.py index d0a491824..8e8cfff91 100644 --- a/roles/fedimg/files/clean-amis.py +++

Re: Freeze Break Request: reinstall buildvm-ppc64le-01/02 to power9 hw

2019-03-26 Thread Rick Elrod
+1 with saving the old ones off (and probably keeping them around until after freeze so we can revert if we notice something wrong but not right away). -re On 3/26/19 4:43 PM, Kevin Fenzi wrote: I'd like to reinstall buildvm-ppc64le-01 and 02 on power9 hardware. This should allow us to stop

Re: [FBR ] update-fullfiletimelist: make new-updates-sync use the fedora-secondary lock file

2019-03-20 Thread Rick Elrod
+1 -re On 3/19/19 6:48 PM, ke...@scrye.com wrote: From: Kevin Fenzi Currently update-fullfiletimelist is called from 4 machines: * rawhide-composer: after rawhide compose * branched-composer: after branched compose * secondary01: in a cron every hour updating only /pub/alt as it can change

Re: FBR for Alessandro Lorenzi for nagios certgetter change.

2019-03-20 Thread Rick Elrod
+1 but note that this will need to be added to tasks/main.yml too so it gets copied over. -re On 3/20/19 7:56 AM, Stephen John Smoogen wrote: I have reviewed this and will sponsor it. -- Forwarded message - From: Alessandro Lorenzi Date: Sat, 16 Mar 2019 at 17:24 Subject:

Re: FBR: Add nfs-server/remove ipv6-test

2019-03-20 Thread Rick Elrod
+1 -re On 3/20/19 10:02 AM, Stephen John Smoogen wrote: This will bring 45drives box ready for testing and will remove ipv6-test from ansible. I will need to run the noc.yml after this to remove ipv6-test from nagios. ___ infrastructure mailing

Re: "FBR: To update python3-productmd on compose-x86-01.phx2.fp.o"

2019-03-20 Thread Rick Elrod
+1 -re On 3/20/19 8:15 AM, Mohan Boddu wrote: The recent RC compose failed due to: ValueError: Image: Field 'type' has invalid value: vmdk Support for vmdk was added in python3-productmd-1.21-1.fc29 version. Once updated, this issue should be fixed. Thanks.

Re: Request for comments: mediawiki-FedoraBadges direct db query

2019-03-20 Thread Rick Elrod
On 3/20/19 9:48 AM, Stephen John Smoogen wrote: On Wed, 20 Mar 2019 at 09:43, Pierre-Yves Chibon wrote: Sounds fine to me :) As a ticket been opened upstream so it's not lost that this API needs optimization? To this particular one, no. I went and looked at the open issues and saw

Re: Request for comments: mediawiki-FedoraBadges direct db query

2019-03-20 Thread Rick Elrod
On 3/20/19 9:42 AM, Clement Verna wrote: On Wed, 20 Mar 2019 at 14:27, Rick Elrod wrote: Hi all, Tahrir is slow, and the endpoint that mediawiki-FedoraBadges uses to get its badge count and badge assertion data from takes about 35 seconds per request. Do we have an idea what makes Tahrir

Request for comments: mediawiki-FedoraBadges direct db query

2019-03-20 Thread Rick Elrod
Hi all, Tahrir is slow, and the endpoint that mediawiki-FedoraBadges uses to get its badge count and badge assertion data from takes about 35 seconds per request. As a result, if a user enables both badge count and badge images on a user page, the two requests combined take well over a

FBR: make iot.fp.o live

2019-03-19 Thread Rick Elrod
This has been in stg for a while, and I have been asked to make it live. This FBR is for permission to commit this and run the proxy playbook on all proxies. Rick commit fe044fc717517d01211e1995ff9778b7b7906fe4 Author: Rick Elrod Date: Tue Mar 19 16:59:54 2019 + [fedora-web/iot

Re: [Freeze Break Request ] gnome-backups: remove cloud.gnome.org and also unset freeze flag

2019-03-06 Thread Rick Elrod
+1 -re On 3/6/19 5:23 PM, ke...@scrye.com wrote: From: Kevin Fenzi Per averi, cloud.gnome.org is to be removed. This host has no impact on fedora releases and shouldn't freeze. Signed-off-by: Kevin Fenzi --- inventory/group_vars/gnome-backups | 1 + roles/gnome_backups/files/backup.sh

Re: [Freeze Break Request ] batcave01: add sysadmin-gnome so they can login and commit to ansible if need be.

2019-03-06 Thread Rick Elrod
+1 here. -re On 3/6/19 5:07 PM, ke...@scrye.com wrote: From: Kevin Fenzi Gnome folks have a gnome-backups01 vm that has a netapp volume for backups. They manage it via our ansible repo and playbooks. Signed-off-by: Kevin Fenzi --- inventory/group_vars/batcave | 2 +- 1 file changed, 1

Re: Project Details

2019-01-31 Thread Rick Elrod
Similar to smooge, I'm on the ops side primarily, but I do bounce around and try to be flexible when needed. Notable things over the last few months: - Lots of newcloud work with Kevin, Jim, and Patrick - Maintained and deployed the websites -- at least enough to get them updated -- for the last

Re: [Freeze Break Request: ] Explicitly set Protocol 2 on sshd for pagure.

2018-10-20 Thread Rick Elrod
+1 On 10/20/18 3:09 PM, ke...@scrye.com wrote: > From: Kevin Fenzi > > This doesn't actually change anything for sshd (only proto 2 is default), > However, rkhunter complains about it not setting that explicitly. > So, this is just to get rkhunter to shut up about it. > > Signed-off-by: Kevin

Re: [Freeze Break Request: ] Enable fpdc scopes in ipsilon. Ticket 7299.

2018-10-16 Thread Rick Elrod
+1 -re On 10/16/18 12:50 PM, ke...@scrye.com wrote: > From: Kevin Fenzi > > This simply installs the ipsilon plugin for fpdc scopes and > restarts it. If there's an issue we can easily remove it to > roll back to where we were. > > +1s? > > Signed-off-by: Kevin Fenzi > --- >

Re: FBR: Switch Pagure over to aclchecker

2018-10-11 Thread Rick Elrod
+1 -re On 10/11/2018 02:22 PM, Patrick マルタインアンドレアス Uiterwijk wrote: > Hi, > > This is the next step of preparing pagure.io for repoSpanner: switch the > entry command to aclchecker, which is a small script that calls either > repoBridge for repos on repoSpanner (none at this moment) or

Re: FBR: Disable OCSP on non-proxies

2018-09-25 Thread Rick Elrod
+1 here. -re On 09/25/2018 03:26 PM, Patrick マルタインアンドレアス Uiterwijk wrote: > Can I get +1s for the following patch? > Explanation as to why this specific patch is in the commit message. > > > > commit d2688610419973cd519ef8f8f581a03215aaf73c (HEAD -> master) > Author: Patrick Uiterwijk > Date:

Re: FBR: upgrading pagure to 5.0

2018-09-25 Thread Rick Elrod
I'm +0 leaning -1 on doing this on release day, simply because release days are potentially hectic enough as-is. If the pagure upgrade flops, then we have more to worry about at the same time, potentially pulling people away from dealing with beta release stuff. I'm not convinced waiting one day

pkgdb shutdown

2018-07-10 Thread Rick Elrod
Greetings all, We had meant to turn off pkgdb *last* July (2017), but due to various services depending on it, we kept it running as read-only for the past year. I am pleased to announce we have finally shut down the service after replacing the last known in-use API endpoint (/api/collections/)

Re: [PATCH] avoid \xZZ in mirrorlist urls

2010-05-12 Thread Rick Elrod
On May 13, 2010, at 12:05 AM, Matt Domsch wrote: OK, having spent a few more hours, I don't need the RewriteRule. Yea! I just need to convert to unicode, and leave it in unicode. Malformed requests fail lookups as would be expected and return the you asked for an invalid repo or arch