2015-04-08 @ 1900 UTC ** Cloud WG Meeting Minutes
by Mike Ruckman
===========================
#fedora-meeting-1: Cloud WG
===========================
Meeting started by roshi at 18:59:59 UTC. The full logs are available at
http://meetbot.fedoraproject.org/fedora-meeting-1/2015-04-08/cloud_wg.201...
.
Meeting summary
---------------
* Roll Call (roshi, 19:00:24)
* Previous Meeting Followup (roshi, 19:01:38)
* Maintaining docker images for F22 (roshi, 19:09:48)
* LINK: https://fedorahosted.org/cloud/ticket/97 (roshi, 19:09:51)
*
https://lists.fedoraproject.org/pipermail/devel/2015-April/209742.html
(jzb, 19:13:55)
* Dockerfiles care and feeding (roshi, 19:17:38)
* LINK: https://fedorahosted.org/cloud/ticket/84 (roshi, 19:17:41)
* sha256sums (roshi, 19:20:53)
* LINK: https://fedorahosted.org/cloud/ticket/93 (roshi, 19:20:58)
* Updated Images (roshi, 19:23:49)
* LINK: https://fedorahosted.org/cloud/ticket/94 (roshi, 19:23:51)
* Open Floor (roshi, 19:28:50)
Meeting ended at 20:11:01 UTC.
Action Items
------------
Action Items, by person
-----------------------
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* roshi (145)
* jzb (80)
* sgallagh (36)
* oddshocks (19)
* kushal (8)
* zodbot (7)
* adamw (3)
* dgilmore (2)
* Corey84 (1)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
--
// Mike
--
Fedora QA
freenode: roshi
http://roshi.fedorapeople.org
8 years, 7 months
Atomic 2 week releases
by Mike McGrath
Hey all, I wanted to start a thread about doing more frequent Atomic releases in Fedora.
In particular I'd like to start building a new atomic release every two weeks that
includes the latest version of Docker, Kubernetes, and OSTree for the Fedora Atomic
images.
The problem I'm trying to solve here is that there is a lot of work going on upstream in
the Docker and Kubernetes communities and there isn't a very good way to consume that
upstream work on a Red Hat/Fedora/CentOS system today. By focusing on more regular
releases, we can fix some of the issues we've seen (like demoing new features at a
conference that people can't actually use).
There are still some details to work out like whether to base this image on Fedora
$CURRENT or rawhide and what to do when the builds fail. Fortunately, this can possibly
be done without much additional change to the release process. We're already rebuilding
the docker/kubernetes/ostree rpms almost daily, and there are nightly builds as well
(at least in rawhide).
If we can pull a 2 week process off, I'd like to see that followed by a 4 week process
in CentOS which will behave similarly but with the slightly slower-moving, more stable bits.
Thoughts?
[1] http://www.projectatomic.io/download/
--
Mike McGrath | mmcgrath(a)redhat.com | (312) 660-3547
Atomic | Red Hat Chicago | http://projectatomic.io/
8 years, 7 months
I will be offline tomorrow
by Kushal Das
Hi,
I will be in the PyCon this week and next week (mostly). So I will be
offline most of this time. Can anyone else please chair the meeting?
Kushal
--
Fedora Cloud Engineer
CPython Core Developer
Director Python Software Foundation
http://kushaldas.in
8 years, 7 months
Just a note
by Mike Ruckman
Hey fellow cloudies! Just wanted to give you all a heads up that
starting next week I'm going to be out of the office for a while - so
you'll see me less on IRC and for meetings. I'll still be monitoring
email and IRC though, so if you have something for me I'll still get to
it :) Thanks!
--
// Mike
--
Fedora QA
freenode: roshi
http://roshi.fedorapeople.org
8 years, 7 months
Fwd: [atomic-devel] incorrect permissions
by Joe Brockmeier
For folks not subscribed to atomic-devel.
----- Forwarded Message -----
From: "Scott Collier" <emailscottcollier(a)gmail.com>
To: atomic-devel(a)projectatomic.io
Sent: Friday, April 3, 2015 1:34:38 AM
Subject: [atomic-devel] incorrect permissions
I was testing cockpit on the F22 Atomic image and ran into this issue.
Cockpit would start, but I could not connect to it because SSH was
having a problem. The error cockpit gave after trying to login to the
web interface was:
"Couldn't connect or authenticate: no-host"
This may have been brought up before, I didn't dig into existing issues.
The problem was permissions on these two files:
/etc/ssh/ssh_host_ecdsa_key
/etc/ssh/ssh_host_rsa_key
The message from "systemctl status sshd" was:
# systemctl status sshd
● sshd.service - OpenSSH server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled;
vendor preset: enabled)
Active: active (running) since Fri 2015-04-03 05:27:21 UTC; 7s ago
Docs: man:sshd(8)
man:sshd_config(5)
Main PID: 5183 (sshd)
Memory: 844.0K
CGroup: /system.slice/sshd.service
└─5183 /usr/sbin/sshd -D
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: @ WARNING:
UNPROTECTED PRIVATE KEY FILE! @
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Permissions 0640 for
'/etc/ssh/ssh_host_rsa_key' are too open.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: It is required that
your private key files are NOT accessible by others.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: This private key will
be ignored.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: key_load_private: bad
permissions
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Could not load host
key: /etc/ssh/ssh_host_rsa_key
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Server listening on
0.0.0.0 port 22.
Apr 03 05:27:21 atomic-00.localdomain sshd[5183]: Server listening on ::
port 22.
So, I changes the permissions on both files to 600 and restarted sshd,
then cockpit was able to connect.
Version:
# atomic host status
TIMESTAMP (UTC) VERSION ID OSNAME REFSPEC
* 2015-04-02 10:45:23 22.29 0db0777dfb fedora-atomic
fedora-atomic:fedora-atomic/f22/x86_64/docker-host
2015-03-05 11:02:11 22.6 e1e60980f1 fedora-atomic
fedora-atomic:fedora-atomic/f22/x86_64/docker-host
-scott
--
Joe Brockmeier | Principal Cloud & Storage Analyst
jzb(a)redhat.com | http://community.redhat.com/
Twitter: @jzb | http://dissociatedpress.net/
8 years, 7 months
Will be out of Internet
by Kushal Das
Hi all,
I am travelling to Montreal for PyCon in few hours, so I will be out
of Internet for few days.
Kushal
--
Fedora Cloud Engineer
CPython Core Developer
Director Python Software Foundation
http://kushaldas.in
8 years, 8 months