Am 13.11.19 um 20:44 schrieb Stephen John Smoogen:
On Tue, 12 Nov 2019 at 17:06, Ingvar Hagelund
<ingvar(a)redpill-linpro.com> wrote:
>
> Hello
>
> hitch is a TLS terminating network proxy, made to be lean and mean and do nothing
else than terminating TLS. It fits hand-in-glove with varnish cache. I maintain hitch in
Fedora and EPEL.
>
> There is a bug in the current epel7 config that is fixed in the latest rawhide
update. In short, the bug is that with the default config, hitch forks a daemon, while the
systemd hitch service says Type=simple. See Bugzilla bug #1731420.
>
> The fedora update fixes the problem by changing the systemd service to Type=forking.
>
> There were two ways to get around the bug:
>
> - Set daemon=off in hitch.conf. That file is marked with noreplace, so the update
will not overwrite this fix. As this does not match the updated Type=forking in
hitch.service, hitch will not start after the update.
>
> - Set Type=forking in hitch.service. This is the same fix as in the update, so this
should be safe.
>
> Also, the Fedora update adds a systemd limits.conf including LimitNOFILE=10240 that
is important, as the default value (1024) would trig network problems on a medium busy
site (true story).
>
> Is it safe to push this update to epel7?
This was discussed at today's EPEL meeting and approved. Please push
this to epel-testing and let users know in any tickets that it can be
used there. After that, push to stable after regular feedback time.
I'd really appreciate if it could also be branched into EPEL8?
--
Thanks
Leon
PS: Could a list admin help me, please. I subscribed with a @gmail.com
address some weeks ago. google's SMTP rewrites it to @googlemail.com
when trying to send a mail to the list (it fails to be accepted by
mailman of course). I can not unsubscribe leonfauster(a)gmail.com now.
The @googlemail.com variant is subscribed now (to be able to post to the
list).
Rephrased: Could a admin unsubscribe leonfauster(a)gmail.com please?
Thanks and sorry for the noise.