Meeting Agenda Item: Introduction Bryan Sutherland
by Bryan Sutherland
Hi All,
My Is Bryan Sutherland and I can be found on IRC (and FAS) as iambryan.
* I have been using Fedora since it's days as Red Hat
* My past experiences include RHEL, CentOS administration,
Documentation writing, training production and delivery (live and
screencasts), and MySQL work to a very minor degree
* I would like to help out with some server management and with
documentation as required, and to start getting a handle on python
scripting.
>From yesterday's meeting I have picked up the updating of the SOP's
for a process to get the updates to and from the new status dashboard,
so any additional pointers would be graciously accepted.
Bryan
11 years, 7 months
Freeze break request: tweak mediawiki's fedmsg plugin
by Ralph Bean
Good evening,
The httpd root process has been dieing seemingly at random on the
different app0* servers. We're not sure what it is, but there's a
chance that it could be the fedmsg-emit.php plugin. Here's a proposed
patch that's been sitting in staging for about a week:
http://www.fpaste.org/VqpG/
The theory is that, before, if "fedmsg-config" failed (which it
shouldn't), then the script would call die(). die() shouldn't
terminate the root httpd process, but.. well.. we're not sure
what else could be happening.
The change goes: instead of calling die(), if the plugin can't
setup its fedmsg socket, then it just won't register its callbacks
with mediawiki, instead of calling die();
I've tested that this is sane in staging, but there's no way to test
that it fixes the issue, since it happens randomishly.
This doesn't require a new fedmsg rpm. The fedmsg-emit.php plugin
is kept in puppet.
Seeking +1s for freeze break.
Cheers!
11 years, 8 months
Change Request: Allow fi-apprentice to log into app*
by Toshio Kuratomi
One of our apprentices was looking into how we use use the faswho adapter
was going to look at how it's configured in raffle on the app servers. When
he wasn't able to we discovered that fi-apprentice isn't allowed to login to
the app servers. Discussed with nirik and we think that this is a simple
oversight rather than a matter of policy.
As this is a minimal change and since alpha has slipped I'm asking for
a freeze break request to allow this. Here's the necessary puppet change to
enable this:
diff --git a/manifests/services/appRhel.pp b/manifests/services/appRhel.pp
index b8cecf5..58badbc 100644
--- a/manifests/services/appRhel.pp
+++ b/manifests/services/appRhel.pp
@@ -1,5 +1,5 @@
class appRhel {
- $fas_groups= [ "sysadmin-main", "sysadmin-web", "sysadmin-noc" ]
+ $fas_groups= [ "sysadmin-main", "sysadmin-web", "sysadmin-noc", "fi-apprentice" ]
include global
include fas::client
include xen-guest
Since this applies to appRhel, the nodes that it will affect are:
app0[1-68]
app0[12].stg
bapp02
value0[34]
value01.stg
-Toshio
11 years, 8 months
Freeze break request: allow private cloud to use unbound instances for recursive dns
by Kevin Fenzi
Greetings.
I'd like to request a freeze break to allow our unbound instances to
serve recursive dns to our private cloud instances. They need an
external dns server to do this and I think it's safer to let unbound do
this than our bind servers.
Changes consist of enabling udp and port 53 on the unbound instances,
then setting a firewall that only allows the external ip's of the
private cloud to access them. We could expand this to more machines
later if we find the need.
+1s?
kevin
--
diff --git a/modules/unbound/files/unbound.conf b/modules/unbound/files/unbound.conf
index 3b73a2c..76f0fc7 100644
--- a/modules/unbound/files/unbound.conf
+++ b/modules/unbound/files/unbound.conf
@@ -46,6 +46,7 @@ server:
#interface: 0.0.0.0@53
interface: 0.0.0.0@80
interface: 0.0.0.0@443
+ interface: 0.0.0.0@53
# enable this feature to copy the source address of queries to reply.
# Socket options are not supported on all platforms. experimental.
@@ -153,7 +154,7 @@ server:
# Enable UDP, "yes" or "no".
# avoids this open resolver from becoming target for DNS Amplification
- do-udp: no
+ do-udp: yes
# Enable TCP, "yes" or "no".
# do-tcp: yes
diff --git a/modules/unbound/manifests/init.pp b/modules/unbound/manifests/init.pp
index bbe8e9b..a19a3a5 100644
--- a/modules/unbound/manifests/init.pp
+++ b/modules/unbound/manifests/init.pp
@@ -1,7 +1,11 @@
class unbound::server {
iptables::firewall { 'ipv4':
- tcpPorts => [ 80, 443 ]
+ tcpPorts => [ 80, 443 ],
+ custom => [
+ '-A INPUT -p tcp -m tcp -s 209.132.184.0/24 --dport 53 -j ACCEPT',
+ '-A INPUT -p udp -m udp -s 209.132.184.0/24 --dport 53 -j ACCEPT',
+ ],
}
semanage_modify_port { "80":
11 years, 8 months
Meeting Agenda Item: Introduction James
by James Gretton
Hi all,
My name is James and my IRC nick handle is jjlit. I am a system admin
in Australia, recently completed post graduate university qualifications
and am looking for a new hobby, now that ive finished uni. I have been
a long time linux user and fan, and would love to be actively involved
in the system administration of the fedora server infrastructure, no
matter what task. I have a passion for linux and down here in Australia
its hard to be involved in linux as the microsoft juggernaut is very
powerful down here. I realise it will be a while before I am allowed to
participate in active sysadmin tasks, but thats fine, im the same with
my networks. I would also like to get to a stage whereby I can
hopefully train others who are like me, looking for something to devote
their time to. Im also looking for a sponsor to help me get onboard
with the infrastructure team asap, anyone who can help out, much
appreciated in advance.
Regards,
James
11 years, 8 months
Plan for tomorrow's Fedora Infrastructure meeting (2012-08-23)
by Kevin Fenzi
The infrastructure team will be having it's weekly meeting tomorrow,
2012-08-23 at 18:00 UTC in #fedora-meeting on the freenode network.
Suggested topics:
#topic New folks introductions and Apprentice tasks.
If any new folks want to give a quick one line bio or any apprentices
would like to ask general questions, they can do so in this part of the
meeting. Don't be shy!
#topic Applications status / discussion
Check in on status of our applications: pkgdb, fas, bodhi, koji,
community, voting, tagger, packager, dpsearch, etc.
If there's new releases, bugs we need to work around or things to note.
#topic Sysadmin status / discussion
Here we talk about sysadmin related happenings from the previous week,
or things that are upcoming.
#topic F18 Alpha Release tickets/Freeze
#topic Upcoming Tasks/Items
#info 2012-08-14 to 2012-09-04 F18 Alpha Freeze
#info 2012-08-31 end of 2nd quarter
#info 2012-09-04 F18 Alpha release.
#info 2012-09-10 to 2012-09-24 Skvidal is out
#info 2012-09-25 to 2012-10-09 F18 Beta Freeze
#info 2012-09-26 to 2012-09-28 Puppetconf
#info 2012-10-09 F18 Beta release
#info 2012-10-23 to 2012-11-13 F18 Final Freeze
#info 2012-11-13 F18 release.
#info 2012-11-26 to 2012-11-29 Security FAD
#info 2012-11-30 end of 3nd quarter
#topic Open Floor
Submit your agenda items, as tickets in the trac instance and send a
note replying to this thread.
More info here:
https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings
Thanks
kevin
11 years, 8 months
500 Internal error again
by Christopher Meng
500 Internal error
The server encountered an unexpected condition which prevented it from
fulfilling the request.
Powered by CherryPy 2.3.0 <http://www.cherrypy.org/>
Hi,all
Well,the error above occured when I tried to log in the mirrormanager to
add a site,but one thing should be stressed
because I've login the system and the system required my second login(I
never logout),I tried 2 times and then it just gave me this error.
What's wrong?
*
*
*
*
*Yours sincerely,*
*Christopher Meng*
Ambassador/Contributor of Fedora Project and many others.
http://cicku.me
11 years, 8 months