For your consideration.
-------- Forwarded Message --------
> From: Adam Watts <signedadam(a)googlemail.com>
> To: webmaster(a)fedoraproject.org
> Subject: Hello! Need help here.
> Date: Mon, 15 Dec 2008 14:07:30 +0000
> Hi there Web Maser of the Fedora project.
> I have created a new account with you and i see on my
> Todo queue:
> * You have not submitted an SSH key, some Fedora resources
> require an SSH key. Please submit yours by editing My Account
> Download a client-side certificate
> Can you tell me what this is, and do i need to do it ?
Ignacio Vazquez-Abrams <ivazqueznet(a)gmail.com>
One of the reasons for the change of planet infrastructure (.planet user
files) was to enable the ability to create customized aggregators
(language based or interest based).
As I am not aware about any such customization deployed yet, here is my
question: what should I formally do for the creation of a "Planet Fedora
Art"[*] aggregation? I envision it as an aggregation of not only blogs
of the member of the Art team (some don't have their blogs on the main
Planet yet) but also other feeds, like from flickr/picasaweb/gallery or
[*] we may want to call it Design&Creative, but this is not relevant at
nicu :: http://nicubunu.ro :: http://nicubunu.blogspot.com
Cool Fedora wallpapers: http://fedora.nicubunu.ro/wallpapers/
Open Clip Art Library: http://www.openclipart.org
my Fedora stuff: http://fedora.nicubunu.ro
Michael here, a long time Fedora and Red Hat user, a Red Hat employee for the last 4.5 years too.
At the encouragement of our old mate Nigel ( 'G' ) I have created an account and am hoping to be able to contribute a little to the Infrastructure when I can. My experience:
- Administrator and developer of home grown systems, all Red Hat or Fedora based
- PHP and PEAR app development
- PAM custom module devel
- Recently, Red Hat Support person with experience in:
- All the Red Hat Suite of products including - Cluster, GFS, Satellite (Spacewalk), Certificate Management System, Directory Server, etc
-----BEGIN PGP SIGNED MESSAGE-----
Many of you got an email yesterday concerning your fas username and
password. Basically we have a custom plugin for our mediawiki install
(http://fedoraproject.org/wiki/). That plugin still had some debug
logging enabled which was causing people who logged in to get their
username and password logged to the apache error logs.
That in itself isn't really a problem. It's not good practice but its not
a breach or anything as long as no untrusted parties get ahold of those
logs. Still I think people have an expectation that their passwords are
always secure and not stored unencrypted somewhere (I know I feel that
way) so we thought we'd let people know who's names we found in the logs
so they can change their password if they wish.
The logs were discovered after our outage a few days back. While looking
for the cause of some 500 errors related to the db1->db3 switch, we
discovered the offending username/password combos. After that Ricky paged
me, we talked a bit about what to do. I went back to sleep to think on it
some and in the morning agreed with ricky. We decided it best to just
remove the log lines and send an email out to everyone to let them know.
People in sysadmin-main and sysadmin-web have access to these logs (and
they're the groups charged with running the site) so as you can see, there
really was nothing to it. I'm actually happy to say that we use
encrypted passwords everywhere now, before FAS2 came out that wasn't true.
So if anyone has any questions about what happened, direct them to this
email (it'll be in the public archives). For the ultra paranoid here's
the specific commit diff:
Feel free to ask any questions on this list or to admin(a)fedoraproject.org.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
-----END PGP SIGNATURE-----
I have decided to contribute to the fedora community as I have used Fedora. I am Interested in C programming, though I do not have formal experience in C programming, I do have some programming history in C.
On a scale of 1-10 in C programming, I figure myself at 3 or 4, but I am willing to learn and deliver.
I Have some, but very little System programming experience in which I had designed a very basic Shell on my own. I was trained in Satyam.
I have a fedora box which I administer on my own.
I hope that I will be able to contribute to this community with my zeal to learn and I hope this community will help me learn
Thanks and Regards
This email (including any attachments) is intended for the sole use of the intended recipient/s and may contain material that is CONFIDENTIAL AND PRIVATE COMPANY INFORMATION. Any review or reliance by others or copying or distribution or forwarding of any or all of the contents in this message is STRICTLY PROHIBITED. If you are not the intended recipient, please contact the sender by email and delete all copies; your cooperation in this regard is appreciated.
Outage Notification - 2008-12-13 06:10 UTC
There was an unplanned outage starting at 2008-12-13 05:48 UTC.
To convert UTC to your local time, run:
date -d 'YYYY-MM-DD HH:MM UTC'
Translation Services (transifex)
Websites (wiki, smolt)
CVS / Source Control
Reason for Outage:
xen12, the machine with our MySQL server on it is having hardware
problems. We are currently waiting for a tech to fix it on site.
Please join #fedora-admin in irc.freenode.net or respond to this email
to track the status of this outage.
I am very much familiar with security in linux plus proxy and selinux is the field in which i am willing to explore
thanks and regards
"KLUB MJ Hunt, Search for India's First Movie Jockey"
For more details log on to http://www.zeecinema.com
20:01 -!- mmcgrath changed the topic of #fedora-meeting to: Fedora Infrastructure -- Who's here?
20:01 -!- tjdavisbz [n=tjdavisb(a)184.108.40.206] has joined #fedora-meeting
20:02 -!- notting [n=notting@redhat/notting] has joined #fedora-meeting
20:02 -!- Sonar_Guy [n=Baconz@fedora/sonarguy] has quit "Xchat destroyed by Operating System"
20:02 < mmcgrath> So who's here?
20:02 * nirik is sitting in the cheap seats in the back.
20:02 < f13> I'm kind of here, but about to be called away to luch with the family any moment now
20:03 < mmcgrath> abadger1999 dgilmore f13 G G_work ivazquez jcollie jds2001 lmacken paulobanon quaid ricky ping!
20:03 < mmcgrath> f13: <nod>
20:03 < ivazquez> Pong.
20:03 * mmcgrath thinks G isn't awake yet :)
20:03 < abadger1999> pong
20:04 < abadger1999> f13: Aww... we're your family too ;-)
20:04 < mmcgrath> Ok, well lets get started.
20:05 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Tickets
20:05 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/query?status=new&status=as...
20:05 < zodbot> mmcgrath: http://tinyurl.com/47e37y
20:05 < mmcgrath> .ticket 740
20:05 < zodbot> mmcgrath: #740 (Loaning out system time to OLPC participants) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/740
20:05 < mmcgrath> dgilmore: any news here?
20:06 -!- warren [n=warren@redhat/wombat/warren] has joined #fedora-meeting
20:07 * mmcgrath will assume not.
20:07 < mmcgrath> And thats our only ticket listed with meeting keyword so I'll move on
20:07 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- nfs1
20:07 < mmcgrath> One thing I'm going to spend some time doing over the next couple of weeks is getting more information about the trending on nfs1.
20:07 < mmcgrath> The amount of IO it gets just doesn't make sense to me.
20:08 < mmcgrath> and so, investigation :)
20:08 < mmcgrath> anyone have any questions / comments about nfs1?
20:08 -!- smooge [n=smooge(a)nausicaa.unm.edu] has joined #fedora-meeting
20:08 < f13> just that we'll continue to abuse it in the next few weeks
20:08 < mmcgrath> :)
20:08 < mmcgrath> WORKSFORME.
20:08 < mmcgrath> ok
20:08 -!- mmcgrath changed the topic of #fedora-meeting to: infrastructure -- New capacity
20:09 < mmcgrath> after this last trip to PHX we are in much better shape then we were this time last year.
20:09 -!- tjdavisbz [n=tjdavisb(a)220.127.116.11] has quit Read error: 60 (Operation timed out)
20:09 < mmcgrath> we actually have room to grow, a switch that works. All in all just in better shape.
20:09 < dgilmore> mmcgrath: none sorry
20:09 < mmcgrath> I'm going to spend some time with ricky and nigel to get everything non-buildsystem/releng related off of xen1 and xen2 and dedicate those servers to those purposes.
20:10 < f13> yay
20:10 < mmcgrath> we'll see how things go from there.
20:10 < mmcgrath> next
20:10 < dgilmore> mmcgrath: any word on load balancing koji?
20:10 < f13> wow.
20:10 < mmcgrath> dgilmore: I've not heard a peep on that ticket.
20:10 < f13> er
20:10 * mmcgrath sends a ping now.
20:11 * dgilmore wants to rebuild koji1 32 bit
20:11 < mmcgrath> k, ping sent
20:11 < mmcgrath> ok. next item
20:11 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- DR.
20:12 * dgilmore also wonders what we can do to try balance things inside of phx
20:12 < mmcgrath> Some of you have probably seen my commit messages over the last couple of days.
20:12 < mmcgrath> dgilmore: not sure, though AFAIK, not much until we move the buildsystem into their own network.
20:12 -!- jeff_hann [n=arares(a)18.104.22.168] has joined #fedora-meeting
20:13 < mmcgrath> So I'm almost done getting our off site backups in place. ITs all on a LUKS encrypted partition so I'll pass that pw around to the sysadmin-backup group.
20:13 < mmcgrath> We're grabbing a copy of our cvs, lookaside, database data, and stuff on puppet.
20:13 -!- stickster_afk is now known as stickster
20:13 < dgilmore> mmcgrath: so when a meteor hits PHX whats our plan of action?
20:14 -!- tjdavisbz [n=tjdavisb(a)22.214.171.124] has joined #fedora-meeting
20:14 < mmcgrath> not much exiting but it will be nice to know it exists.
20:14 < mmcgrath> dgilmore: we'll have an SOP of course :)
20:14 < mmcgrath> hopefully one that we can print up in case the wiki goes away :)
20:14 < dgilmore> mmcgrath: paper copies available offsite
20:14 < dgilmore> :)
20:15 < mmcgrath> I'm going to talk to stickster at FUDCon about a Fedora Continuity Plan. Just ot make sure I'm not missing anything and to make sure what I think is a priority for Fedora is the same thing he thinks is a priority for Fedora.
20:15 < dgilmore> :)
20:15 < mmcgrath> but it will be very intertwined with this DR site.
20:15 * stickster nods emphatically
20:16 < mmcgrath> Anyone have anything on that?
20:16 < mmcgrath> k
20:16 * dgilmore thinks stickster will say everything (esp buildsys) is viataly important
20:16 < jsmith> mmcgrath: Ugh... continuity planning.... yuck...
20:16 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- zodbot
20:16 < mmcgrath> jsmith: yuck indeed, but I am happy that we're at the point where we can even consider such things :)
20:17 < mmcgrath> Ok. zodbot!
20:17 < mmcgrath> is official
20:17 < mmcgrath> ./ping
20:17 < mmcgrath> err
20:17 < mmcgrath> .ping
20:17 < zodbot> pong
20:17 < mmcgrath> .whoami
20:17 < zodbot> mmcgrath: mmcgrath
20:17 < mmcgrath> he's in PHX and officially supported.
20:17 < mmcgrath> on noc1. I talked to ianweller about some improvements just a couple days back.
20:17 < mmcgrath> I've got the SOP up on how to start zodbot.
20:17 < mmcgrath> all pretty simple.
20:17 < dgilmore> .do you log meetings?
20:17 -!- Sparks_too [n=sparks@fedora/Sparks] has quit "Leaving"
20:17 * nirik was just looking at the log plugin
20:17 < mmcgrath> every channel zodbot is in is being logged.
20:18 < mmcgrath> though its not all exposed yet
20:18 < dgilmore> mmcgrath: :) meeting logs, roll call would be cool
20:18 < dgilmore> something like .startmeeting
20:18 < dgilmore> .topic1
20:18 < dgilmore> .topic2
20:18 < dgilmore> etc
20:18 < mmcgrath> <nod> I think thats been mentioned before but I don't know if any actual work has been done
20:18 < dgilmore> .endmeeting
20:19 < dgilmore> .vote
20:19 < nirik> http://www.ausimage.us/Code/Supybot-ChannelSummer
20:19 < dgilmore> lotsa cool things someone could work on :)
20:19 < mmcgrath> yeah. I'm sure that will be around sometime soon.
20:19 < dgilmore> dont be shy now people
20:20 < mmcgrath> nirik: hah! "I hope to provide the plugin as soon as I am clear on the license."
20:20 < smooge> oooooh that would be nice.
20:20 < nirik> yeah, many of these have unclear licenses or none.
20:20 < mmcgrath> that's got doom all over it. but if it won't work, I'm sure we can have someone (maybe abadger1999 ) spit something out in an afternoon :)
20:20 < nirik> I assume we will want to package anything we use?
20:20 < mmcgrath> nirik: yeah
20:20 -!- cebbert [n=cebbert@fedora/cebbert] has joined #fedora-meeting
20:20 < smooge> what is the problem with the license?
20:20 < dgilmore> this is something that someone new could work on as code development doesnt need access to anything
20:20 < mmcgrath> nirik: FWIW though, we have a supybot-fedora app though, it can just be added with that.
20:20 * ricky is around
20:20 < mmcgrath> smooge: I don't think the developer knows what license it is :)
20:21 < smooge> ah..
20:21 < nirik> yeah, true I guess.
20:21 < smooge> ganja license
20:21 * mmcgrath would laugh at him but has probably been in his shoes a couple of times in the past :)
20:21 < nirik> looking like plugins are not hard to write, I might try adding a flood protect one.
20:21 < abadger1999> mmcgrath: Signing me up for more work again? ;-)
20:21 < mmcgrath> abadger1999: you were being quiet, I assumed that was you voluteering :)
20:21 < mmcgrath> anywho, the zodbot stuff is all fairly low priority but would be nice.
20:22 < mmcgrath> and it is kind of fun to code for.
20:22 < mmcgrath> I enjoyed coding the koji stuff
20:22 < mmcgrath> .buildload
20:22 < zodbot> mmcgrath: Load: 3.7 Total: 94.0 Use: 3.9% (Very Light Load)
20:22 < mmcgrath> Anywho, anyone have anything else on that?
20:22 < dgilmore> .builders
20:22 < zodbot> dgilmore: Enabled: 16 Ready: 16 Disabled: 7
20:22 < mmcgrath> k
20:22 * ricky has requested that zodbot be given ability to join more channels :-0
20:22 * nirik notes we are looking at using it or something like it in #fedora at some point.
20:23 < ricky> **:-)
20:23 < mmcgrath> ricky: is there a limit on how many channels zodbot can join?
20:23 -!- brothers [n=brothers(a)swan5.cs.unc.edu] has joined #fedora-meeting
20:23 < mmcgrath> .list
20:23 < zodbot> mmcgrath: Admin, Channel, ChannelLogger, ChannelStats, Config, Fedora, Internet, Koji, Later, Misc, Owner, Plugin, RSS, Seen, ShrinkUrl, String, Time, URL, Unix, User, and Web
20:23 < ricky> They wanted the request to come from Fedora's group contact (spot) so after that, we can make a huge list of channels for zodbot to hoin
20:23 < ricky> **join
20:23 < mmcgrath> .list channel
20:23 < zodbot> mmcgrath: alert, ban add, ban list, ban remove, capability add, capability list, capability remove, capability set, capability setdefault, capability unset, cycle, dehalfop, deop, devoice, disable, enable, halfop, ignore add, ignore list, ignore remove, invite, kban, key, kick, limit, lobotomy add, lobotomy list, lobotomy remove, mode, moderate, nicks, op, unban, unmoderate, and voice
20:23 < smooge> ooooh lobotomy
20:24 < nirik> yep. Very usefull too.
20:24 < ricky> Yeah, there's a channel limit, but you can request an exemption
20:24 * ricky is on slow wireless, sorry
20:24 < mmcgrath> ricky: ahh, I didn't realize. and I'm sure there's some zodbot is in that he doesn't need to be
20:24 * mmcgrath wonders if I can get a list of what channels he's in
20:24 < mmcgrath> .list channelstats
20:24 < zodbot> mmcgrath: channelstats and stats
20:24 < mmcgrath> .stats
20:24 < zodbot> mmcgrath: I have 3 registered users with 3 registered hostmasks; 1 owner and 0 admins.
20:24 < mmcgrath> .channelstats.stats
20:24 -!- sonargal [n=Test@fedora/SonarGal] has quit Connection timed out
20:24 < nirik> mmcgrath: yes, 'channels' but you have to msg and be an admin
20:24 < ricky> I think we should be able to put zodbot in all Fedora-related ones, if only for logging purposes
20:24 < mmcgrath> .channels
20:24 < zodbot> mmcgrath: Error: That operation cannot be done in a channel.
20:24 < mmcgrath> ah
20:25 * nirik notes that if it's always logging we need to notify people of that fact... and/or delete logs we don't want to publish
20:25 < mmcgrath> nirik: see, you're getting better at this then I am already :)
20:25 < ricky> Yup.
20:26 < mmcgrath> there we go
20:26 < mmcgrath> ricky: I just removed it from 4 channels
20:26 < nirik> :) Just wanted to see if it could work for #fedora. ;)
20:26 * ricky isn't particularly for publishing any partial logs for public channels, I'd rather it be an all or nothing, based on whether the users/ops of a channel support it
20:26 < mmcgrath> ricky: yeah, i agree.
20:27 < mmcgrath> huh
20:27 < mmcgrath> I think I just spammed everyone.
20:27 < mmcgrath> anywho.
20:27 < mmcgrath> anyone have anything else they'd like to discuss on zodbot?
20:27 < nirik> yeah, logging should be a per channel thing I guess...
20:27 < abadger1999> We could automunge email addresses in the log.
20:27 -!- cebbert [n=cebbert@fedora/cebbert] has quit Nick collision from services.
20:28 -!- cebbert [n=cebbert@fedora/cebbert] has joined #fedora-meeting
20:28 < nirik> note the last bit here: http://freenode.net/channel_guidelines.shtml
20:28 < nirik> "If you're thinking of "anonymizing" your logs (removing information that identifies the specific users), be aware that it's difficult to do it well—replies and general context often provide identifying information which is hard to filter."
20:29 < mmcgrath> nirik: yeah
20:29 < ricky> I usually try to be careful with giving full emails out in IRC - I usually say stuff like stuff at domain dot com or something - don't know if many people have this habit as well
20:30 < mmcgrath> <nod>
20:30 -!- kekko [n=kekko(a)85-18-14-22.fastres.net] has quit Read error: 54 (Connection reset by peer)
20:30 < mmcgrath> that'll be a tricky to figure out
20:31 -!- jeff_hann [n=arares(a)126.96.36.199] has quit "Leaving"
20:31 < mmcgrath> ok, well anyone have anything else on that? If not I'll open the floor.
20:31 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor
20:31 < dgilmore> nothing more
20:32 < mmcgrath> Ok, well if no one has anything else we'll close the meeting in 30
20:32 < ricky> This is our first meeting since the release
20:32 < ricky> Is there anything to discus with regards to how that went?
20:32 < ricky> **discuss
20:32 < dgilmore> i think the release went really really well
20:32 < ricky> (It's probably a bit blurry now :-))
20:33 < dgilmore> much smoother than previous ones
20:33 < dgilmore> though there is likely places for improvement
20:33 < mmcgrath> yeah, I'd say that release was down right boring.
20:33 < mmcgrath> which is fine by me.
20:33 < ricky> Has there been any more discussion on pushing to mirrors vs. having them pull manually at the right time?
20:33 < mmcgrath> one thing I would have liked to have measured but didn't in zabbix is hits / second at the peak.
20:33 < mmcgrath> we've got it for the wiki.
20:33 < dgilmore> f13: can yu think of things we could do to help get zero day updates out quicker
20:34 < f13> for what?
20:34 < mmcgrath> ricky: yeah. I suspect thats a long term thing. I'm not sure what mdomsch has in mind for that.
20:34 < dgilmore> much smoother than previous ones release day updates?
20:34 < dgilmore> grr
20:34 < dgilmore> f13: release day updates
20:34 < dgilmore> probably better waiting a day or two
20:34 < f13> we push those out days before
20:34 < f13> so that they're already on the mirrors at GA time
20:35 < f13> the big issue is getting mirrors to bitflip i ntime
20:35 < ricky> Yeah, that was a great idea
20:35 < dgilmore> f13: push mirroring would help there
20:35 < dgilmore> ?
20:35 < ricky> Are public mirrors currently required to run report_mirror?
20:35 < dgilmore> ricky: no
20:35 < ricky> (Or does just getting crawled work too?)
20:35 < mmcgrath> nope, its optional.
20:35 < ricky> Ah
20:35 < mmcgrath> both
20:35 < f13> dgilmore: pushing would help there yes
20:36 < mmcgrath> though someone could report with report_mirror and show up in the list, even though the bit is not flipped yet (I think)
20:36 < dgilmore> mmcgrath: they could
20:36 < ricky> And does anybody know offhand how long full crawls take nowadays?
20:36 < ricky> Was there any attempt to make sure that a crawl started after the bitflip time?
20:37 < mmcgrath> ricky: long while
20:37 < ricky> Ah, darn.
20:38 < mmcgrath> I think it'd make sense to break them up maybe, have each app server take a subset
20:38 < mmcgrath> not sure what mdomsch has in mind for that though. There's probably a couple different options
20:38 < mmcgrath> thats something we should probably wait for mdomsch to be around for.
20:38 < ricky> Yeah
20:38 < mmcgrath> anyone have anything else to discuss? If not we'll end the meeting in 30.
20:39 < dgilmore> squirrels
20:39 < dgilmore> in particular stopping the dogs from barking at them
20:39 < dgilmore> ;)
20:39 -!- cassmodiah [n=cass@fedora/cassmodiah] has quit Read error: 104 (Connection reset by peer)
20:39 < notting> shoot the squirrels?
20:39 < mmcgrath> heh
20:40 < mmcgrath> ok, with that
20:40 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting End
20:40 < dgilmore> notting: i cant shoot them
20:40 < ricky> Heh
20:40 < notting> have the dogs 'accidentally' catch them?
20:40 -!- mmcgrath changed the topic of #fedora-meeting to: Channel is used by various Fedora groups and committees for their regular meetings | Note that meetings often get logged | For questions about using Fedora please ask in #fedora | See http://fedoraproject.org/wiki/Communicate/FedoraMeetingChannel for meeting schedule
20:41 < dgilmore> notting: i have little dogs. i think the squirrels are bigger than them
20:42 * nirik can loan you some dogs that also don't like squirrels and can catch them if they aren't too high up in the trees. ;)
20:43 < notting> dgilmore: somehow prevent the dogs from seeing the squirrels?
20:44 < brothers> start over, raise the dogs from pups alongside squirrels, so they learn to coexist
20:45 < dgilmore> notting: thats what ive been trying :)
20:48 -!- brothers [n=brothers(a)swan5.cs.unc.edu] has left #fedora-meeting 
20:55 < warren> http://www.donweiser.com/videos.html White squirrel videos!
Hello all. I had introduced myself a few weeks ago and mentioned that I
have some OpenVPN experience. Today I was reading over some of the SOPs and
noticed this TODO on the OpenVPN SOP:
Deploy an additional VPN server outside of PHX. OpenVPN does support
failover automatically so if configured properly, when the primary VPN
server goes down all hosts should connect to the next host in the list
I would like to offer to work on this. I would need a mentor to help me get
acclimated to the environment but I am confident that I could get it up and
running effectively and I have some spare time that I would love to put
The sun can still shine behind a closed mind. -All Together Separate
elfutils is switching to git, and AFAIK no other fedorahosted projects use mtn.
I don't intend to work on the hosting support for mtn any more.
(I've stopped maintaining any mtn-related Fedora/EPEL packages too.)
Thomas Moschny maintains the mtn-related Fedora packages.
He's also the author of the trac plugin.
Thomas is the only person I can think of who might be interested in
maintaining mtn hosting support for fedorahosted.
Unless Thomas wants to take it over, I suggest we drop the mtn support
(such as it is).
Please note that I would like the existing mtn.fedorahosted.org alias and
the run-mtn ssh support to stay around for a while, until all the elfutils
developers have finalized the migration. So don't hurry to chop it all off.