aws instance provisioning
by Kevin Fenzi
Greetings.
Mark and I have talked in the past about moving some of the aws
provisioning we are doing into ansible, and it came up again this
morning in #fedora-admin.
We have many (but not all) maintainer-test instances, a bunch of proxies
and all the copr machines in aws that are currently in ansible.
I think we could do something similar to tasks/virt_instance_create.yml
(which we have for using virt-install and installing libvirt vms).
We do have a tasks/aws_cloud.yml that copr instances use, but it doesn't
provision the instance, just sets up things for ansible.
Copr folks: if we expand aws_cloud.yml to provision also (if the host is
not up/reachable on it's dns name/ip) would you be ok using that as
well? Or should we seperate out copr from maintainer-test/proxies?
Also, there's the question of auth. batcave01 will need creds for those
things. Sadly, I think this means making a user and getting a token, but
if there's some better way to handle auth there that might be nice.
Finally, we are using ansible-2.9.x currently. We would need any
solution to be able to work with that and newer ansible, which we likely
will be switching to before long.
Any other ideas or thoughts around this?
Thanks,
kevin
2 years, 7 months
wiki talk pages editing disabled
by Kevin Fenzi
Greetings everyone.
I've disabled editing of our mediawiki "iDiscussion/Talk" pages.
The idea is that people can use those talk pages to discuss
or ask questions about a page. However, while people do add
questions or ideas to these pages, very rarely will anyone respond to
them or see their feedback.
This feature has thus been disabled. Please use lists, IRC/Matrix or
discussion discourse to ask questions about or discuss wiki pages.
Thanks,
kevin
2 years, 7 months
Fedora 35 Final freeze now over!
by Mark O'Brien
With the successful release of Fedora 35 yesterday we are now out of
freeze.
Our next planned freeze is 2022-02-22 for Fedora 36 beta
Mark
2 years, 7 months
[FBR] Update pagure to 5.13.3
by Pierre-Yves Chibon
Good Morning Everyone,
This morning, I have cut a new release of pagure: 5.13.3 with the following
changelog:
- Warn users when a PR contains some characters
- srcfpo theme: Change "Packages" link to new packages website (Brendan Early)
- srcfpo theme: left-align the lines in description (Zbigniew Jędrzejewski-Szmek)
- fas user url updated for new accounts system (Mark O Brien)
- Change fas link from admin.fp.o to accounts.fp.o (Lenka Segura)
- Remove message about 60 day key length (Ken Dreyer)
- Escape $ to fix Jenkins interpolation warning (#5178) (Anatoli Babenia)
- Fix another invalid <img> width/height attribute (Anatoli Babenia)
- Fix missing space before src in <script> (Anatoli Babenia)
- Remove duplicate class attribute from Clone dropdown (Anatoli Babenia)
- Fix invalid <img> height (no px is allowed here) (Anatoli Babenia)
- Add Translation status link on repo_info page at src.fp.o (Sundeep Anand)
- Update fedmsg homepage (Rafael Fontenelle)
- Add support for noggin with the FAS auth backend
- Update collaborator access level descriptions (Michel Alexandre Salim)
- Fix a type, add missing work hand (Jan Kuparinen)
- Explicitly require setuptools, pagure/lib/git_auth.py imports pkg_resources (Miro Hrončok)
- Fix getting the tests to run on CentOS
- Fix Pagure's overview page verbatim error (ankitapareek)
It includes, amongst other, patches for CVE-2021-42574 and CVE-2021-42694
More can be found about them at:
https://access.redhat.com/security/vulnerabilities/RHSB-2021-007
I have already upgraded stg.pagure.io and src.stg.fp.o.
You can see the patch for the two CVE above working at:
https://stg.pagure.io/foo/pull-request/28
The link to the account system has been updated as shown in:
https://src.stg.fedoraproject.org/user/pingou
I would like to upgrade pagure in production as well.
Thoughts? +1/-1?
Pierre
2 years, 7 months