Re: congrats to another new sysadmin-mainer

2023-08-09 Thread Seth
Congrats! Great news :) Original Message On 9 Aug 2023, 18:15, Kevin Fenzi < ke...@scrye.com> wrote: > I'm happy to announce that We have approved a new member in our sysadmin-main > group: adamwill - Adam Williamson This is the core group of trusted folks > that high level acc

Re: Introduction: Seth Maurice-Brant

2023-08-07 Thread Seth
Hi Kevin, That's great to hear. I look forward to getting started. Sent from Proton Mail mobile Original Message On 6 Aug 2023, 19:33, Kevin Fenzi wrote: > On Fri, Aug 04, 2023 at 01:29:17PM +0000, Seth wrote: > Hi there, > > I'm > Seth, an

Introduction: Seth Maurice-Brant

2023-08-04 Thread Seth
Hi there, I'm Seth, an A level student in the UK, currently studying Computer Science, Business Studies and Biology. I've been using Linux for a good few years and Fedora has been the distribution I've stuck with the longest, mainly because it is really smooth and just works.

Re: Wiki edit statistics - past few months

2013-07-02 Thread seth vidal
On Tue, 2 Jul 2013 04:15:36 -0400 (EDT) Robyn Bergeron wrote: > Hi, > > A bit of background regarding this page: > > https://fedoraproject.org/wiki/Statistics > > Once a week I get an automated email from a script that Paul has had > set up since his FPL days, which contains the following con

Re: apache and app logs retrieval

2013-06-27 Thread seth vidal
On Thu, 27 Jun 2013 13:12:49 -0600 Stephen John Smoogen wrote: > On 25 June 2013 13:16, seth vidal wrote: > > > Last week when we were talking about spawning rdiff-backup to backup > > our systems, we diverged into discussing app/apache logs and the > > somewhat complic

apache and app logs retrieval

2013-06-25 Thread seth vidal
Last week when we were talking about spawning rdiff-backup to backup our systems, we diverged into discussing app/apache logs and the somewhat complicated system we currently have for grabbing those logs. Right now we have a list of hosts on log02 that it should grab logs from. Those hosts need to

Re: [HOTFIX request] mirrormanager] v1.4: model.py: fix user_sites() variable name (80dd827)

2013-06-21 Thread seth vidal
On Fri, 21 Jun 2013 07:17:48 -0500 wrote: > Fix one bug yesterday with a hotfix, only to hit a second bug later. > Here's the fix to the second bug... This keeps a non-sysadmin user > from logging into the admin interface. > > +1s please. > +1 -sv ___

Freeze break: edit up our nrpe procs default

2013-06-20 Thread Seth Vidal
need 2 +1's so we can avoid noise from the process count after some changes to our mirrorlist servers see below: ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[PATCH] - template our nrpe.cfg - setup vars for nrpe_procs_crit and nrpe_procs_warn - set the value for crit and warn higher for mirrorlists to stop their whining

2013-06-20 Thread Seth Vidal
--- files/nagios/client/nrpe.cfg|2 +- inventory/group_vars/all|4 inventory/group_vars/mirrorlist |3 ++- tasks/nagios_client.yml |4 ++-- 4 files changed, 9 insertions(+), 4 deletions(-) diff --git a/files/nagios/client/nrpe.cfg b/files/nagios/client/nrp

freeze break - change process/thread count on mirrorlist-* servers

2013-06-20 Thread seth vidal
Hi, I'd like to change the number of processes/threads on the mirrorlist-servers. This morning we encountered a situation where mirrorlist-osuosl stopped being able to answer due to not being able to get responses back from the wsgi process server. After talking with Mdomsch he's suggested chan

Re: Where to keep the badges repo?

2013-06-18 Thread seth vidal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 18 Jun 2013 08:49:19 -0400 Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 06/17/2013 02:50 PM, seth vidal wrote: > > On Mon, 17 Jun 2013 11:40:35 -0700 Toshio Kuratomi > > wrote:

nagios and ansible

2013-06-17 Thread seth vidal
I've been thinking about how we should handle nagios in the ansible world. our current nagios config in puppet has a number of issues: 1. it's a bit cumbersome b/c you edit nagios independent of adding the host's config 2. when you remove a host the nagios config doesn't automatically go away 3. t

mirrorlist boxes

2013-06-11 Thread seth vidal
To mdomsch in particular but in general to the list so folks know what we're doing: Matt, I grabbed your induce-stress script (which rocks btw) and I tested out how mirrorlist-osuosl runs under a load of 200 wgets with 2 cpus. While the %cpu scaled up - the response time stayed pretty reasonable

Re: Freeze break: clean up logs on db01

2013-05-24 Thread seth vidal
On Fri, 24 May 2013 12:38:47 -0600 Kevin Fenzi wrote: > db01 is low on disk space again. > > This is due to us keeping transaction logs for a long long time. > > I would like to delete jan and feb transaction logs to free up space > for now. After the freeze, we should fix this with a proper

Re: Freeze break request: mediawiki security upgrade

2013-05-22 Thread seth vidal
On Wed, 22 May 2013 13:38:29 -0600 Kevin Fenzi wrote: > On Wed, 22 May 2013 15:14:14 -0400 > seth vidal wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > On Wed, 22 May 2013 21:02:28 +0200 > > Patrick Uiterwijk wrote: &

Re: Freeze break request: mediawiki security upgrade

2013-05-22 Thread seth vidal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 22 May 2013 21:02:28 +0200 Patrick Uiterwijk wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hello, > > I would like to request +1's to upgrade mediawiki on our app servers > to 1.19.7. This is a security upgrade only, and do

Re: [Freeze break] Rewrite of bz-make-components.py

2013-05-21 Thread seth vidal
On Tue, 21 May 2013 13:17:42 -0700 Toshio Kuratomi wrote: > In infrastructure we have a script called bz-make-components.py that > syncs the l10n and docs products (and owners) into bugzilla. This > code is what the pkgdb-sync-bugzilla script is based on and performs > a very similar function.

Re: Freeze break: small exclude change for backups

2013-05-17 Thread seth vidal
On Fri, 17 May 2013 10:36:21 -0600 Kevin Fenzi wrote: > Greetings. > > Backups of lockbox01 are unfortunately backing up .snapshot > directories and their contents. This pulls in a ton of stuff and > makes backups take forever and contain things we don't want. > > This one line change should

Re: Freeze break request for new storage (take two)

2013-05-16 Thread seth vidal
On Thu, 16 May 2013 10:30:09 -0600 Kevin Fenzi wrote: > Here's a better freeze break request that has actual changes. ;) > > Basically I need to get the new storage mounted on nfs01 and > backup03. > > On nfs01: > > - add route to netapp network > - add directories to mount on > - mount new

Re: Freeze break: add backup storage to backup03

2013-05-16 Thread seth vidal
On Thu, 16 May 2013 09:55:06 -0600 Kevin Fenzi wrote: > Greetings. > > I'd like to add a interface on our storage network and mount the new > backup volume we now have allocated to us on backup03. > > This is in prep for redoing backups (see previous mail to the list). > > There's no backup

Re: Freeze break request: add rsync for httpd logs

2013-05-14 Thread seth vidal
On Tue, 14 May 2013 10:45:18 -0600 Kevin Fenzi wrote: > So, first freeze break request. ;) > > I added a number of applications to have log02 pull httpd logs from, > but some of them do not have rsync installed, so pulling logs from > them is failing. I'd like to have them include rsync::server

Re: httpd logs

2013-05-13 Thread seth vidal
On Mon, 13 May 2013 09:38:59 -0700 Toshio Kuratomi wrote: > If you want to see if it breaks real quickly -- fas's access_log is > probably the quickest growing log (although that may change once > fas_openid is prevalent). I'd guess we get a lot more hits to the mirrorlist, for example, than fas

Re: backups planning

2013-05-13 Thread seth vidal
On Thu, 9 May 2013 15:35:44 -0600 Kevin Fenzi wrote: > Another fun mail to start some discussion. ;) > > The topic this time is backups. > > Currently, we do backups two ways: > > 1. We have a backup server in phx2 with a tape drive running bacula. > It backs up machines and spools the back

Re: httpd logs

2013-05-13 Thread seth vidal
On Thu, 9 May 2013 14:17:35 -0600 Kevin Fenzi wrote: > So, the recent fas vulnerability made us realize that we were not > collecting and saving httpd logs from staging machines. > > I've since added: > > app01.stg > app02.stg > proxy01.stg > > to have their httpd logs pulled over to log02 a

Re: sslonly and stg

2013-05-01 Thread seth vidal
On Wed, 1 May 2013 10:50:07 -0600 Kevin Fenzi wrote: > Greetings. > > There's been a long standing issue with sslonly sites and stg. > > When you go to 'http://site.stg.whatever"; you are redirected to > 'https://site.whatever' which is anoying. > > The current sslonly template has: > > <

Re: FAS password on 3rd party pages?

2013-04-25 Thread seth vidal
On Thu, 25 Apr 2013 10:57:54 +0200 Pierre-Yves Chibon wrote: > On Thu, 2013-04-25 at 10:31 +0200, Vít Ondruch wrote: > > Dne 25.4.2013 10:09, Pierre-Yves Chibon napsal(a): > > > On Thu, 2013-04-25 at 10:07 +0200, Vít Ondruch wrote: > > >> Hi guys, > > >> > > >> Since you want to push Fedocal and

Re: Freeze break request: retire legacy-openid01

2013-04-15 Thread seth vidal
On Mon, 15 Apr 2013 11:30:12 -0600 Kevin Fenzi wrote: > Greetings. > > We set today (2013-04-15) as the day to retire our legacy openid > provider. See: https://fedoraproject.org/wiki/Legacy-OpenID > for more info. > > This requires a change to proxy servers as they have the redirect on > the

Re: Interested in Gitlab for Fedora Hosted Projects | GSoC 2013

2013-04-12 Thread seth vidal
On Fri, 12 Apr 2013 12:47:21 +0200 Vít Ondruch wrote: > Hi Ankur, > > Since GitLab is Ruby on Rails application and the first step is to > package it and all its dependencies for Fedora, I recommend you to > join the Ruby-SIG ML, where is already ongoing discussion about it. > Seems to me the

Re: Fedora 19 Alpha Freeze in effect.

2013-04-03 Thread seth vidal
On Wed, 3 Apr 2013 12:44:42 -0600 Kevin Fenzi wrote: > Sorry about the broken link there. ;) > > So, we had a bit of discussion on IRC the other day around this. > > Our current freeze document is: > > http://git.fedorahosted.org/cgit/fedora-infrastructure.git/plain/architecture/Environment

Re: Freeze Break Request - koji fedmsg plugin

2013-04-02 Thread seth vidal
On Tue, 2 Apr 2013 12:23:35 -0400 Ralph Bean wrote: > dgilmore noted in channel that the koji fedmsg plugin is producing > tracebacks like the following: > > Error running postBuildStateChange callback from > _koji_plugin__fedmsg-koji-plugin: Traceback (most recent call last): > File "/usr/lib/

Re: Fedora 19 Alpha Freeze in effect.

2013-04-02 Thread seth vidal
On Tue, 2 Apr 2013 09:13:34 -0600 Kevin Fenzi wrote: > Greetings. > > we are now in the infrastructure freeze leading up to the Fedora 19 > Alpha release. This is a pre-release freeze. > > Please see: > https://fedorahosted.org/fedora-infrastructure/browser/architecture/Environments.png >

Re: Plan for tomorrow's Fedora Infrastructure meeting (2013-03-21)

2013-03-20 Thread seth vidal
On Wed, 20 Mar 2013 21:59:37 -0600 Kevin Fenzi wrote: > On Wed, 20 Mar 2013 23:55:40 -0400 > seth vidal wrote: > > > Should we go ahead and put hosted on the agenda for some input from > > folks? Especially if we have any people who are well-versed in git? > >

Re: Plan for tomorrow's Fedora Infrastructure meeting (2013-03-21)

2013-03-20 Thread seth vidal
On Wed, 20 Mar 2013 21:51:10 -0600 Kevin Fenzi wrote: > The infrastructure team will be having it's weekly meeting tomorrow, > 2013-03-21 at 19:00 UTC in #fedora-meeting on the freenode network. > > Suggested topics: > > #topic New folks introductions and Apprentice tasks. > > If any new folk

backups

2013-03-18 Thread seth vidal
After a super-fun-time debacle restoring a single file today I'd like to talk about our backups a bit. Right now our backups are: - bacula to a few central servers and then off to tape. That seems like it is not scaling super-duper well for our size of disk storage. It also seems like it is a

Re: Setting up GitLab for fedorahosted.org

2013-03-12 Thread seth vidal
On Tue, 12 Mar 2013 01:33:07 -0600 Dan Allen wrote: > On Sun, Mar 3, 2013 at 10:24 AM, Kevin Fenzi wrote: > > > On Sat, 02 Mar 2013 04:44:39 +0200 > > Axilleas Pipinellis wrote: > > > > > Greetings from a newly registered member! > > > > > > I've seen the 'GSoC @ Infra' thread but I didn't wan

vfad - virtual fedora activity day ideas

2013-03-07 Thread seth vidal
Hi, We discussed this today in the infra meeting: We've had some success with FADs - fedora activity days - most recently for 2-factor-auth. FADs let us focus on a specific task and knock it out by having all the stakeholders together in one place and all ready to only do achieve one goal. The pr

Re: New Fedora openid provider (fas-openid) in service

2013-03-05 Thread seth vidal
On Tue, 5 Mar 2013 21:22:19 -0800 Toshio Kuratomi wrote: > I think that Raul is talking about the code being hosted on github. Toshio, I see - seeing as he replied to the openid announcement I thought it was about openid. My bad. thanks for clarifying that, -sv __

Re: New Fedora openid provider (fas-openid) in service

2013-03-05 Thread seth vidal
On Tue, 05 Mar 2013 23:45:04 -0500 Rahul Sundaram wrote: > On 03/05/2013 07:19 PM, Kevin Fenzi wrote: > > Code for this provider (under GPLv2+) is available at: > > > > https://github.com/fedora-infra/fas-openid > Congrats! I was wondering if we have relaxed the infrastructure > policy of not re

Re: ansible musings...

2013-02-22 Thread Seth Vidal
On Fri, 22 Feb 2013, Xavier Lamien wrote: How about a dedicated branch for staging where we can merge it into master when ready (just like puppet's) Also, I think git flow coud be a good candidate here to work on a specific 'role' or such. ie, you have staging branch in sync with master,

Re: fedora hosted, sharding and openid

2013-02-13 Thread Seth Vidal
On Wed, 13 Feb 2013, Kevin Fenzi wrote: I think we could also look at getting a wildcard cert and just stay with https. But I agree thats a detail... either way is probibly fine. I'm fine with either way. I think we might want to setup a hosted01.stg at some point for testing things out.

fedora hosted, sharding and openid

2013-02-12 Thread Seth Vidal
Today Patrick got the trac plugin for openid working pretty well with the new openid service. This effectively breaks our tight bind to the fas db (and mod_auth_pgsql) from the hosted boxes. A while back we discussed the possibility of scaling the hosted service out horizontally somewhat by be

Re: [PATCH 2/2] make hosted send emails with an address of fedoraproject.org - not fedorahosted.org for users, etc

2013-01-15 Thread Seth Vidal
On Tue, 15 Jan 2013, Mike McLean wrote: I just got the following error pushing to fedorahosted remote: Traceback (most recent call last): remote: File "/usr/bin/send-unicode-email.py", line 32, in remote: smtp.sendmail(sender, recipients, msg.as_string()) remote: File "/usr/lib/pytho

Re: [PATCH] kill off references to app07

2013-01-04 Thread Seth Vidal
I need 2 +1's to push this change -sv On Fri, 4 Jan 2013, skvi...@fedoraproject.org wrote: From: Seth Vidal --- manifests/nodes/app07.phx2.fedoraproject.org.pp | 18 -- manifests/nodes/proxy01.phx2.fedoraproject.org.pp |3 +-- manifests/services/p

redirect hits to admin.fp.o/community to apps.fp.o/packages

2012-12-21 Thread Seth Vidal
This is the first step to decommissioning app07 and the old /community path. diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp index 24fdd98..79466fd 100644 --- a/manifests/services/proxy.pp +++ b/manifests/services/proxy.pp @@ -535,10 +535,10 @@ class proxy { websi

Re: [Change Request] Add fedmsg certs for pkgdb

2012-12-20 Thread Seth Vidal
On Thu, 20 Dec 2012, Toshio Kuratomi wrote: threebean has added fedmsg hooks for pkgdb. I'm making a new release for stg that includes this. However, fedmsg needs to have certs installed for the app-host combination in order to sign the messages each service emits. There's not currently a

Proposal: decommision fedoracommunity/stats running on app07

2012-12-20 Thread Seth Vidal
Hi, We have one remaining RHEL5 host - app07. It is being kept alive in order to keep running the fedoracommunity/stats page. After talking with Luke about it I went looking through the http logs for fedoracommunity on app07. In the last year the number of connections hitting a url mentioning

RE: break freeze request: fix ticket 3469

2012-12-20 Thread Seth Vidal
On Thu, 20 Dec 2012, matt_dom...@dell.com wrote: due to a typo I somehow introduced, the mirrorlist app was returning an error instead of mirrorlists/metalinks from approximately 1:30-3:00am Central time this morning. Thanks to Jon Stanley for waking my butt and prompting me to fix it. U

Re: I forgot my laptop charger

2012-11-25 Thread Seth Vidal
On Sat, 24 Nov 2012, Stephen John Smoogen wrote: Hi guys.. made it safe to SC but realized I forgot my laptop charger... so I will be spending today looking for someplace with a 90W lenovo charger. Hopefully I can get that and will be able to cover stuff. I've got 3 of them in my house. :)

Re: tools for building cloud images in the buildsystem

2012-11-14 Thread Seth Vidal
On Wed, 14 Nov 2012, Matthew Miller wrote: On Wed, Nov 14, 2012 at 09:31:44AM -0500, Seth Vidal wrote: But we do for releases, from which all previous release images have been spun, AFAIK. The cloud SIG made sure of that quite early on in its lifetime to keep everything GPL-compliant, and

Re: tools for building cloud images in the buildsystem

2012-11-14 Thread Seth Vidal
On Tue, 13 Nov 2012, Garrett Holmstrom wrote: On 2012-11-12 12:38, Seth Vidal wrote: What I mean is: when I build a package for Fedora, I go through the Koji build system. I can't just kludge up a binary RPM and have it get sent out into the mirror. And, anyone can go into Koji and se

Re: tools for building cloud images in the buildsystem

2012-11-12 Thread Seth Vidal
What I mean is: when I build a package for Fedora, I go through the Koji build system. I can't just kludge up a binary RPM and have it get sent out into the mirror. And, anyone can go into Koji and see the packages I've built -- and see how they were built, if they want. And although the GPG p

Re: tools for building cloud images in the buildsystem

2012-11-12 Thread Seth Vidal
On Mon, 12 Nov 2012, Matthew Miller wrote: On Mon, Nov 12, 2012 at 10:48:18AM -0500, Seth Vidal wrote: Why don't we spin up a persistent euca instance, give you some disk space and a cron job. You can just run ami-creator w/a sensible kickstart... Trivial and disposable. That wou

Re: tools for building cloud images in the buildsystem

2012-11-12 Thread Seth Vidal
On Mon, 12 Nov 2012, Kevin Fenzi wrote: Trivial and disposable. For short term/testing I think this is a great idea. Longer term, we really need to figure out what "official" cloud images are going to be made with and where. I guess thats a conversation with koji upstream and rel-eng and c

Re: tools for building cloud images in the buildsystem

2012-11-12 Thread Seth Vidal
On Mon, 12 Nov 2012, Matthew Miller wrote: Background: appliance-creator, as part of Thincrust, isn't really maintained anymore. It'd be nice to switch to something else. There's two main options that I can see: 1. ami-creator, as maintained by the Eucalyptus project. This basically works

Re: Freeze break request: allow https with ask.fedoraproject.org

2012-10-29 Thread Seth Vidal
On Mon, 29 Oct 2012, Toshio Kuratomi wrote: On Mon, Oct 29, 2012 at 12:24:35PM -0600, Kevin Fenzi wrote: We have a request at: https://fedorahosted.org/fedora-infrastructure/ticket/3535 to allow https for ask.fedoraproject.org. This is a pretty simple change: diff --git a/manifests/service

Re: tracking cloud instances

2012-10-18 Thread Seth Vidal
On Thu, 18 Oct 2012, Matthew Miller wrote: On Thu, Oct 18, 2012 at 06:24:10PM -0400, Seth Vidal wrote: I bring this up not just to be annoying :) but wanted to make sure you're aware of it when designing anything. (I think practically that means: store things as key value pair per res

Re: tracking cloud instances

2012-10-18 Thread Seth Vidal
On Thu, 18 Oct 2012, Matthew Miller wrote: On Tue, Oct 16, 2012 at 05:02:00PM -0400, Seth Vidal wrote: I'm thinking we need a tool that would poll the cloudlet(s), retrieve all the basic, available, info about the running instances. Unfortunately, neither Eucalpytus or OpenStack su

tracking cloud instances

2012-10-16 Thread Seth Vidal
So - as we noodle around with cloud instances more the most obvious problem I have seen is getting a list of instance ids like: i-F7AA3F96 i-77B34039 i-B1EB403D i-2C294684 and then trying to figure out which ones are jenkins slaves, the torrent seed test and the fedocal instance. And which can

Re: i have cloud

2012-10-11 Thread Seth Vidal
On Wed, 10 Oct 2012, Garrett Holmstrom wrote: On 2012-10-08 14:17, Seth Vidal wrote: On Mon, 8 Oct 2012, Garrett Holmstrom wrote: On Mon, Oct 8, 2012 at 8:08 AM, Seth Vidal wrote: Any ideas how well things will fare if I apply the updates to a live cloud and kick the daemons? It'

Re: i have cloud

2012-10-08 Thread Seth Vidal
On Mon, 8 Oct 2012, Garrett Holmstrom wrote: On Mon, Oct 8, 2012 at 8:08 AM, Seth Vidal wrote: Any ideas how well things will fare if I apply the updates to a live cloud and kick the daemons? It's one piece I'm still a bit fuzzy on - how well euca surives daemon restart fo

Re: Jenkins in the Fedora infrastructure

2012-10-08 Thread Seth Vidal
On Sun, 7 Oct 2012, Garrett Holmstrom wrote: Jenkins has an EC2 plugin that works with Eucalyptus (or at least version 1.14 does; I haven't tested anything newer at $dayjob). You add entries to the master's config that point it toward the right images in the cloud, label those config ent

Re: i have cloud

2012-10-08 Thread Seth Vidal
On Sun, 7 Oct 2012, Garrett Holmstrom wrote: On 2012-10-04 8:17, Seth Vidal wrote: 1. running ftbfs on euca with 8 (now 5 :() instances - this succeeded in exercising libvirt enough to break it on one NC - I have assurances from euca folks that this is being addressed in 3.1.2 due out

Re: cloud disk benchmarks

2012-10-08 Thread Seth Vidal
On Sun, 7 Oct 2012, David Nalley wrote: Gluster currently doesn't proclaim running VM images as one of its strong points, although many do use it in that capacity. A few months back a well funded group attempted to use Gluster as storage for their CloudStack instance and were unable to tune

Re: cloud disk benchmarks

2012-10-08 Thread Seth Vidal
On Sun, 7 Oct 2012, Robyn Bergeron wrote: - AIUI gluster can be less than optimal for lots of small writes - esp. when doing replication - I don't know if you have looked at all of the translators, there are a few performance/write translators that can help improve this. Indeed - we're usi

Re: Fedora/Infra/Gluster halp? Fwd: cloud disk benchmarks

2012-10-08 Thread Seth Vidal
sting them was about the same between the two cloudlets. I'm inclined to think that the read results - as bad as they might be - aren't the problem here because reads can benefit from caching and locality of reference. Seth, let me know if that's not true for your wor

cloud disk benchmarks

2012-10-06 Thread Seth Vidal
When running a ftbfs run on both euca and openstack I started to see some pretty big differences in performance. CPU and mem were all the same or close enough so I decided to look at disk performance. euca is backed by local disks in a raid/lvm layout and/or exported via iscsi through the Stor

Re: i have cloud

2012-10-04 Thread Seth Vidal
On Thu, 27 Sep 2012, Matthew Miller wrote: I launched a F17 instance in our Eucalyptus system. It works. (Awesome!) I have not done anything to try and break it. Let me know if I should. :) break away, if you'd like. Here's what I've been doing to break the clouds. 1. running ftbfs on

Re: Cloud status report and request for feedback on policies

2012-08-30 Thread Seth Vidal
On Thu, 30 Aug 2012, Xavier Lamien wrote: Yes. We have a class C of external IP's. Of course there may be some instances that will not need to use external ip's, but many will. hrm...so do we really want to let user to be fully responsible for the contents of the instance? I mean, how the c

Re: Cloud status report and request for feedback on policies

2012-08-29 Thread Seth Vidal
On Wed, 29 Aug 2012, Kevin Fenzi wrote: Greetings. I thought I would give a quick status update on our private cloud work (which skvidal has been doing. Thanks skvidal! ) Our hardware in all in and working. Our network is up and working. We have a test instance of eucalyptus up and running

using ansible to do status checks on systems from remote

2012-08-04 Thread Seth Vidal
Want to check on a set of hosts but you don't have root/sudo access on lockbox? Want to do it in a way that you can hit the host quickly w/o having to do them one by one? Here's how you can use ansible from your local computer to do it: 1. check out ansible: git clone git://github.com/ansib

Re: builders of the future!!!!!

2012-07-24 Thread Seth Vidal
On Wed, 21 Mar 2012, Kevin Fenzi wrote: I'd agree collectd off probibly. Or at least a seperate one if we needed to monitor them. I'm not sure what benefit we get from collectd on transient builders, though. On our long-running hosts I understand but not on the builders. Yeah, the only

Re: cgit testing

2012-07-09 Thread Seth Vidal
On Mon, 9 Jul 2012, Toshio Kuratomi wrote: On Mon, Jul 09, 2012 at 05:09:15PM -0600, Kevin Fenzi wrote: It could be tweaked more for sure, but it seems to work and is reasonably zippy. Sounds like a winner then ;-) OTOH, if it lets us get gitweb-caching off sooner to have cgit stood up o

Re: mulling the idea of a Infrastructure Security FAD (fedora activity day)

2012-06-13 Thread seth vidal
On Wed, 13 Jun 2012 10:07:11 -0400 Konstantin Ryabitsev wrote: > On Wed, Jun 13, 2012 at 12:14 AM, seth vidal > wrote: > > > > Possible locations: > > > > > > > > Red Hat HQ in RDU? > > > >     pros: can probably get a room/network and pull

updating dns in the future: new /git/dns repo and tools

2012-06-13 Thread seth vidal
After the ever-such-fun of dealing with rotating out our proxies and with puppet and with broken dns zones and dnssec and all the other pain we settled on a solution and I implemented it today. We'll be putting it into place and testing it more wednesday morning (later wednesday morning). Here's

Re: mulling the idea of a Infrastructure Security FAD (fedora activity day)

2012-06-12 Thread seth vidal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 12 Jun 2012 22:54:54 -0500 Dennis Gilmore wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > El Tue, 12 Jun 2012 17:03:48 -0600 > Kevin Fenzi escribió: > > Greetings. > > > > I've been toying with the idea of a Fedora Infrastruc

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-10 Thread seth vidal
On Fri, 8 Jun 2012 11:41:12 -0600 Kevin Fenzi wrote: > On Fri, 8 Jun 2012 10:18:14 -0400 > seth vidal wrote: > > > > > > > Here's a first cut - seems to work in my tests > > > > > > http://fedorapeople.org/gitweb?p=skvidal/public_

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-08 Thread seth vidal
On Fri, 8 Jun 2012 01:40:14 -0400 seth vidal wrote: > On Thu, 7 Jun 2012 16:40:26 -0400 > seth vidal wrote: > > > > > > * Dns (nirik, 18:29:03) > > > * skvidal to work on more automated/dynamic zone updates for our > > > primary zone (nirik,

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-07 Thread seth vidal
On Thu, 7 Jun 2012 16:40:26 -0400 seth vidal wrote: > > > * Dns (nirik, 18:29:03) > > * skvidal to work on more automated/dynamic zone updates for our > > primary zone (nirik, 18:39:35) > > > > > Here's the pseudo-code I promised: > >

Re: Summary/Minutes from today's Fedora Infrastructure meeting (2012-06-07 at 18TC)

2012-06-07 Thread seth vidal
> * Dns (nirik, 18:29:03) > * skvidal to work on more automated/dynamic zone updates for our > primary zone (nirik, 18:39:35) > Here's the pseudo-code I promised: # read in a config file(execfile?) # domain name # list of A records to be created (@, wildcard) # list of records to

cron jobs and puppet

2012-05-31 Thread seth vidal
From now on -PLEASE- no one use the cron {} keyword in puppet. If you need to put a cron job in place via puppet you do it either using /etc/cron.[hourly|daily] or you put a .cron file in /etc/cron.d and reference it that way. I am so tired of having to chase through /var/spool/cron for system cr

gitweb[-caching] vs cgit

2012-05-30 Thread seth vidal
We're currently using gitweb[-caching] on fedorahosted and on fedorapeople. A discussion today suggested maybe we should move to cgit in its lieu. First things first: 1. cgit means we break old links to gitweb urls 2. cgit is a different pkg - maintained by other folks 3. gitweb-caching appears

httpd log files on hosted03

2012-05-29 Thread seth vidal
our logfiles on hosted03 for httpd appear to be not being pruned/compress/reaped. on systems using the log-per-day mechanism of rotatelogs from apache - we normally keep the logs for N days then reap any older than whatever. I can nuke the older ones and setup a cron job to do that automagically

torrent json stats

2012-05-29 Thread seth vidal
accidentally pushed this change but I updated the torrents stats generator to generate the old .json files from the old tracker - so that the spins site will work. -sv ___ infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.

Re: Fedora Account Change

2012-05-28 Thread Seth Vidal
On Mon, 28 May 2012, Larry Brower wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 05/28/2012 05:32 PM, David Nalley wrote: There is such a feature already. It does require access to email though. If he has contacts that still control access to the email - surely he could use the

Re: [PATCH] - add db-fas01 to dns - add to puppet - based in larger part off of db01's recipe

2012-05-24 Thread seth vidal
On Thu, 24 May 2012 19:28:22 + skvi...@fedoraproject.org wrote: Need +1's to this patch, please -sv > From: Seth Vidal > > --- > manifests/nodes/db-fas01.phx2.fedoraproject.org | 18 > ++ modules/bind/files/master/126.5.10.in-addr.arpa > |4

Freeze Break: shutdown search01-dev on virthost05 - setup db-fas01 on virthost05

2012-05-24 Thread seth vidal
This will be a first step to migrate to a private fas postgres instance. In order to free up mem and procs I would like to shutdown search01-dev on virthost05 and bring up db-fas01 on there. The goal would be a private postgres db server for fas alone. I will be kickstarting a vm on virthost05

Re: [Change Request] Fix pkgdb privileged operations for old python-bugzilla

2012-05-24 Thread seth vidal
On Thu, 24 May 2012 08:01:28 -0700 Toshio Kuratomi wrote: > As part of two situations I've pushed out a hotfix to pkgdb and would > like two +1's for the change. > > The situations: > * Continuing work to get our apps working with the old python-bugzilla > package from yesterday's problems bet

Re: [Freeze break Request] Disable bugzilla integration

2012-05-23 Thread seth vidal
On Wed, 23 May 2012 08:39:23 -0700 Toshio Kuratomi wrote: > The bugzilla admins at redhat notified us that they were having load > issues since the bugzilla upgrade caused by infrastructure's hosts. > It seems that at least one of our scripts is exercising bugs in the > new bugzilla codebase. The

Re: [PATCH] No cookie for easyfix

2012-05-23 Thread seth vidal
On Wed, 23 May 2012 14:50:37 + pin...@pingoured.fr wrote: > From: Pierre-Yves Chibon > > --- > modules/gather-easyfix/files/gather_easyfix.py |3 ++- > 1 files changed, 2 insertions(+), 1 deletions(-) > > diff --git a/modules/gather-easyfix/files/gather_easyfix.py > b/modules/gather-ea

Re: [PATCH] Typos...

2012-05-23 Thread seth vidal
On Wed, 23 May 2012 14:40:03 + pin...@pingoured.fr wrote: > From: Pierre-Yves Chibon > > --- > modules/review-stats/files/review-stats.py |2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/modules/review-stats/files/review-stats.py > b/modules/review-stats/files

Re: Freeze break request: Update python-bugzilla on fas*, bapp01, app*

2012-05-22 Thread seth vidal
On Mon, 21 May 2012 16:42:53 -0600 Kevin Fenzi wrote: > On Tue, 22 May 2012 00:33:28 +0200 > Pierre-Yves Chibon wrote: > > > Actually, there was a typo left in the first version, so there is > > (attached) a revised version. > > The difference: > > -querydata['product'] = ['Fedora EPEL'] >

Re: Freeze break request: Update python-bugzilla on fas*, bapp01, app*

2012-05-21 Thread seth vidal
On Mon, 21 May 2012 20:38:42 +0200 Pierre-Yves Chibon wrote: > On Mon, 2012-05-21 at 19:14 +0200, Pierre-Yves Chibon wrote: > > On Mon, 2012-05-21 at 10:38 -0600, Kevin Fenzi wrote: > > > 2) gather easyfix needs more changes and is not fixed by > > > python-bugzilla update. Look for fix after thi

Re: Freeze break request: Update python-bugzilla on fas*, bapp01, app*

2012-05-21 Thread seth vidal
On Mon, 21 May 2012 10:38:14 -0600 Kevin Fenzi wrote: > After the bugzilla upgrade this weekend a few things we run related to > bugzilla are having issues: > > 1) on fas01, the script that sets fedorabugs and fedora_contrib on > users in those fedora groups isn't working. > > 2) on bapp01, t

Re: freeze break request: install trac-agilo-plugin on hosted

2012-05-15 Thread seth vidal
On Tue, 15 May 2012 09:58:41 -0600 Kevin Fenzi (by way of Kevin Fenzi ) wrote: > Since trac-agilo-plugin is now through review and available in EPEL, > I'd like to install it on hosted for > https://fedorahosted.org/fedora-infrastructure/ticket/3081 > > I have tested it locally here and it seems

attempted hosted migration to gluster back end post-mortem

2012-04-27 Thread seth vidal
As most/all people know we attempted to migrate hosted to using a gluster backend across two systems on wednesday evening. Thursday we awoke to a host of problems and tackled solving them. Thursday evening we migrated back to our previous configuration. Thanks for the patience on thursday everyone

Re: meeting times

2012-04-13 Thread seth vidal
On Fri, 13 Apr 2012 09:45:58 -0600 Kevin Fenzi wrote: > Greetings. > > We moved the meeting time to 20UTC a while back to leave time for > folks with other meetings that were taking place earlier. I think > some of these meetings no longer meet then, so... > > Should we move to 18UTC? > Shoul

Re: Disable user Alberto783

2012-04-11 Thread seth vidal
On Wed, 11 Apr 2012 10:35:34 -0400 "Paul W. Frields" wrote: > https://fedoraproject.org/wiki/Special:Contributions/Alberto783 > > This user has been spamming the wiki all morning. Can we please have > the account disabled/blocked/removed? > It's already been done. All of his edits have been r

Re: kickstarts, installs and root ssh keys

2012-04-10 Thread seth vidal
On Wed, 11 Apr 2012 05:54:16 +0200 Jan-Frode Myklebust wrote: > On Tue, Apr 10, 2012 at 11:25:46PM -0400, seth vidal wrote: > > > > > > Wouldn't it be better to have root's authorized_keys file contain > > > the pubkeys of each individual admin that shoul

Re: kickstarts, installs and root ssh keys

2012-04-10 Thread seth vidal
On Tue, 10 Apr 2012 23:38:30 +0200 Jan-Frode Myklebust wrote: > On Tue, Apr 10, 2012 at 05:11:14PM -0400, seth vidal wrote: > > > > 1. allow lockbox01-only and ssh-key-only access, as root, via ssh to > > our systems. This would be an ssh key only on lockbox and owned by

Re: kickstarts, installs and root ssh keys

2012-04-10 Thread seth vidal
On Tue, 10 Apr 2012 22:48:04 +0100 Tristan Santore wrote: > I must say, ansible does look interesting. Just the whole sshd thing > kinda is a put off. But I will look into this a bit more the next > days. But it does most certainly sound like a good effort (the start > of). > Why is sshd a pu

  1   2   3   4   >