CHANGE Request Ticket #2176
by Dennis Gilmore
after talking with Max on irc this is the changes he wants made to the aliases
diff --git a/configs/system/smtp/aliases.template.erb
b/configs/system/smtp/aliases.template.erb
index e3891bb..c7c1272 100644
--- a/configs/system/smtp/aliases.template.erb
+++ b/configs/system/smtp/aliases.template.erb
@@ -161,7 +161,7 @@ logo: duffy
cvs-access: accounts
# Amazon cloud account, ticket #1903
-community-cloud: gdk@redhat.com,mspevack(a)redhat.com
+community-cloud: mspevack(a)redhat.com
# People always confuse things this is a special case
dgilmore: ausil
@@ -192,10 +192,10 @@ gecko-bugs-nobody: /dev/null
famsco: famsco-members(a)fedoraproject.org
fedora-marketing: famsco
info: marketing(a)lists.fedoraproject.org
-press: pfrields, mspevack,kschiltz@redhat.com,ckazmier(a)redhat.com
+press: pfrields, kschiltz@redhat.com,ckazmier(a)redhat.com
fedorarewards: famsco(a)lists.fedoraproject.org
openvideo: tchung
-freemedia: tchung,mspevack,susmit
+freemedia: tchung,susmit
fama: susmit,jsimon,fab
# Firstname.lastname exceptions (preferrably only for people with a good
reason)
13 years, 11 months
Hello
by Josh
Hallo,
I have been following the infrastructure list for sometime now. I have
also been hanging out in #fedora-admin. I am a systems admin with
knowledge of sysadmin level of bash scripting and a moderate amount of
experience with python. I don't know what I'm interested in other than
expanding my expertise in to other areas. I'll continue to lurk until I
find something that really peaks my interest. At my $dayjob I support
both a local koji and a local bodhi instance so I have experience with
those applications. Additionally I've submitted patches for virt_web
and bodhi. I look forward to working with you.
-josh
13 years, 11 months
Howdy
by William West
Hello,
I'm primarily a RHEL admin and bash hacker. Lately I've been working on
Nagios plugins (esp. JMX), wiki scripting and password management. For
now I'm just poking around. My usual irc nick is 'ww26'.
Thanks
--
William West
Yale University ITS
OpenPGP ID: 0x2CC4E9B0
Mobile: 203.936-8598
---
13 years, 11 months
Hi All
by Callum Scott
Hi Everybody.
My name is Callum and I am based in Central Scotland.
Currently work for a small ISP and involved in looking after managed systems
for our customers. This is mainly web server based work, however its quite
process driven and I would like an opportunity to improve my Sys Admin
skills.
I have ran various flavours of Linux for the last 10 years or so, and am
specifically interested in systems deployment, having recently played around
with cobbler and puppet at a basic level, though am happy to help out how I
can.
Thanks
Callum
13 years, 11 months
cron.daily jobs needed?
by Matt Domsch
Now that I've knocked out a few MM bugs, other interesting trends are
emerging.
Why are the app* servers running all these in cron.daily? The
combination of these take approximately 2 hours, and show up very
noticibly on the collectd graphs. I'm not sure which ones are the
most IO-intensive for that duration - I haven't caught it during the
run to watch.
logrotate - arguably necessary, unless this is done centrally instead?
makewhatis.cron - we don't have many manpages on the app servers, and
don't change them that often. Daily? Really?
prelink - we don't start apps that often - they're mostly
long-running.
rkhunter - arguably necessary
rpm - again, daily? Unclear what this serves us. It's just a file
listing all the RPMs installed at that moment in time.
tetex.cron - looks like it'd go fast, so no big deal. But why do we
have tetex-fonts installed on the app servers?
tmpwatch - good to have
Something to consider revising after the freeze?
Thanks,
Matt
--
Matt Domsch
Technology Strategist
Dell | Office of the CTO
13 years, 11 months
CHANGE Request: iptables on builders for ntp
by Dennis Gilmore
we need to allow the builders to talk to the ntp servers to make sure they
have correct time.
diff --git a/manifests/servergroups/build.pp b/manifests/servergroups/build.pp
index 0c222ef..181ce5c 100644
--- a/manifests/servergroups/build.pp
+++ b/manifests/servergroups/build.pp
@@ -18,6 +18,10 @@ class build {
custom => [ '-A OUTPUT -d 127.0.0.0/8 -j ACCEPT',
'-A OUTPUT -d 10.0.0.0/8 -j ACCEPT',
'-A OUTPUT -d 209.132.176.0/24 -j ACCEPT',
+ '-A OUTPUT -m udp -p udp -dport 123 -d 66.187.233.4 -j
ACCEPT',
+ '-A OUTPUT -m udp -p udp -dport 123 -d 192.43.244.18 -j
ACCEPT',
+ '-A OUTPUT -m udp -p udp -dport 123 -d 128.118.25.5 -j
ACCEPT',
+ '-A OUTPUT -m udp -p udp -dport 123 -d 204.152.184.72 -j
ACCEPT',
'-A OUTPUT -m tcp -p tcp -j REJECT',
'-A OUTPUT -m udp -p udp -j REJECT' ]
}
13 years, 11 months
[Fwd: Re: Results of Fedora Participation Survey?]
by Paul W. Frields
Hi team,
The Duke researchers working on the Fedora community survey (on which
you might recall Greg DeKoenigsberg consulted) have sent me a list of
some additional information that will help them in their continued
work analyzing the survey results. Basically, they need someone to
run a few SQL queries via JSON:
(1) The count of unique people, determined by full names and/or email
addresses, active in at least one mailing list/group, which would
provide an estimate of the number of active people in the Fedora
Accounts System. The count won't include actual names or addresses.
(2) The distribution of mailing lists/groups per person (e.g., X
people are in 1 mailing list/group, Y people are in 2 mailing
lists/groups, Z people in a 3 mailing lists/groups, etc), which would
provide an estimate of how many mailing lists/groups active people are
typically part of in the Fedora Accounts System. Again, these counts
won't include actual names or addresses
In addition, there are some counts they need for specific lists/groups
based on actual responses, and I can work with someone from
Infrastructure to get those.
Is there anyone who could assist me in pulling these numbers? We can
do this after Fedora 13 GA, if people are hosed with workload right
now. The researchers are aware people are always very busy around
release time.
--
Paul W. Frields http://paul.frields.org/
gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717
http://redhat.com/ - - - - http://pfrields.fedorapeople.org/
Where open source multiplies: http://opensource.com
13 years, 11 months
[PATCHES] more mirrorlist fixes
by Matt Domsch
>From 2530807e1216786ea5dac8110cbb27a2f25103a3 Mon Sep 17 00:00:00 2001
From: Adrian Reber <adrian(a)lisas.de>
Date: Sun, 16 May 2010 17:15:22 -0500
Subject: [PATCH 1/2] mirrorlist_server: handle bad client IP address input
Signed-off-by: Matt Domsch <matt(a)domsch.com>
---
mirrorlist-server/mirrorlist_server.py | 10 ++++++++--
1 files changed, 8 insertions(+), 2 deletions(-)
diff --git a/mirrorlist-server/mirrorlist_server.py b/mirrorlist-server/mirrorlist_server.py
index 0de7132..e909927 100755
--- a/mirrorlist-server/mirrorlist_server.py
+++ b/mirrorlist-server/mirrorlist_server.py
@@ -298,7 +298,10 @@ def do_internet2(kwargs, cache, clientCountry, header):
client_ip = kwargs['client_ip']
if client_ip == 'unknown':
return (header, hostresults)
- ip = IP(client_ip)
+ try:
+ ip = IP(client_ip)
+ except:
+ return (header, hostresults)
asn = lookup_ip_asn(internet2_tree, ip)
if asn is not None:
header += 'Using Internet2 '
@@ -312,7 +315,10 @@ def do_asn(kwargs, cache, header):
client_ip = kwargs['client_ip']
if client_ip == 'unknown':
return (header, hostresults)
- ip = IP(client_ip)
+ try:
+ ip = IP(client_ip)
+ except:
+ return (header, hostresults)
asn = lookup_ip_asn(global_tree, ip)
if asn is not None and asn in asn_host_cache:
for hostid in asn_host_cache[asn]:
--
1.7.0.1
>From bb8c3038cf9f76fa39e8580a990d7d9edef7f43c Mon Sep 17 00:00:00 2001
From: Matt Domsch <Matt_Domsch(a)dell.com>
Date: Mon, 17 May 2010 10:15:34 -0500
Subject: [PATCH 2/2] mirrorlist_server: handle more failures gracefully
Handle being passed a bad country= value.
Catch all failures in do_mirrorlist() and return a proper error
message. This should also prevent failures in mirrorlist_server from
causing mirrorlist_client() to spin indefinitely waiting for an answer.
---
mirrorlist-server/mirrorlist_server.py | 15 ++++++++++-----
1 files changed, 10 insertions(+), 5 deletions(-)
diff --git a/mirrorlist-server/mirrorlist_server.py b/mirrorlist-server/mirrorlist_server.py
index e909927..0d73469 100755
--- a/mirrorlist-server/mirrorlist_server.py
+++ b/mirrorlist-server/mirrorlist_server.py
@@ -262,7 +262,7 @@ def do_countrylist(kwargs, cache, clientCountry, requested_countries, header):
def get_same_continent_countries(clientCountry, requested_countries):
result = []
for r in requested_countries:
- if r is not None:
+ if r in country_continents:
requestedCountries = [c.upper() for c in continents[country_continents[r]] \
if c != clientCountry ]
result.extend(requestedCountries)
@@ -690,17 +690,22 @@ class MirrorlistHandler(StreamRequestHandler):
pass
try:
- r = do_mirrorlist(d)
+ try:
+ r = do_mirrorlist(d)
+ except:
+ raise
message = r['message']
results = r['results']
resulttype = r['resulttype']
returncode = r['returncode']
except:
- message='# Server Error'
+ message=u'# Bad Request'
+ returncode = 400
+ results = []
+ resulttype = 'mirrorlist'
if d['metalink']:
resulttype = 'metalink'
- results = errordoc(d['metalink'], message)
- returncode = 500
+ results = errordoc(d['metalink'], message)
del d
del p
--
1.7.0.1
--
Matt Domsch
Technology Strategist
Dell | Office of the CTO
13 years, 11 months
Presentation
by Omri Kais
Dear Ms/Mm:
I'm Kais OMRI, computer science and networks Engineer. I'm passioned of
Opens Source projects and I am a Fedora advanced user. I would like to have
the opportunity to
join the Fedora project. I am working now at a multinational firm
specialized in software development. I am responsible for full life cycle
development of cross compilation platform, from initial requirement
gathering to design, coding, testing, documentation and implementation.
My technical expertise includes cross-platform proficiency (Windows, UNIX,
Linux and Solaris); fluency in scripting/programming languages (including
C, C++, TCL, Java, Perl and SQL); and advanced knowledge of developer
applications, tools, methodologies and best practices (including OOD,
client/server architecture and self-test automation).
I look forward to embody your community.
Yours sincerely,
Kais Omri
Computer Science and Networks Engineer
(+216) 22 44 90 23
Kais.official(a)gmail.com
Kais.omri(a)enssat.fr
13 years, 11 months
[PATCH] Sync http logs for noc01 - townhall stats gathering
by Jon Stanley
---
modules/rsync/files/rsync.noc01 | 14 ++++++++++++++
modules/rsync/files/rsyncd.conf.noc01 | 16 ++++++++++++++++
modules/scripts/files/syncHttpLogs.sh | 1 +
3 files changed, 31 insertions(+), 0 deletions(-)
create mode 100644 modules/rsync/files/rsync.noc01
create mode 100644 modules/rsync/files/rsyncd.conf.noc01
diff --git a/modules/rsync/files/rsync.noc01 b/modules/rsync/files/rsync.noc01
new file mode 100644
index 0000000..f02e097
--- /dev/null
+++ b/modules/rsync/files/rsync.noc01
@@ -0,0 +1,14 @@
+# default: off
+# description: The rsync server is a good addition to an ftp server, as it \
+# allows crc checksumming etc.
+service rsync
+{
+ disable = no
+ socket_type = stream
+ wait = no
+ user = root
+ server = /usr/bin/rsync
+ server_args = --daemon
+ log_on_failure += USERID
+}
+
diff --git a/modules/rsync/files/rsyncd.conf.noc01 b/modules/rsync/files/rsyncd.conf.noc01
new file mode 100644
index 0000000..eb2c13d
--- /dev/null
+++ b/modules/rsync/files/rsyncd.conf.noc01
@@ -0,0 +1,16 @@
+pid file = /var/run/rsyncd.pid
+syslog facility = daemon
+dont compress = *.gz *.tgz *.zip *.z *.rpm *.deb *.bz2 *.iso
+use chroot = false
+transfer logging = false
+exclude = .snapshot/ .~tmp~/ /.private/ /.private/** **/.nfs*
+
+# For distributing applications
+[log]
+comment = Server Logs
+path = /var/log
+uid = root
+gid = root
+read only = yes
+hosts allow = 10.5.126.28 192.168.1.35
+
diff --git a/modules/scripts/files/syncHttpLogs.sh b/modules/scripts/files/syncHttpLogs.sh
index cf388dc..1ffa8ff 100644
--- a/modules/scripts/files/syncHttpLogs.sh
+++ b/modules/scripts/files/syncHttpLogs.sh
@@ -38,3 +38,4 @@ syncHttpLogs proxy07
syncHttpLogs secondary1
syncHttpLogs hosted1 old
syncHttpLogs people1 old
+syncHttpLogs noc01
--
1.5.5.6
13 years, 11 months