Meeting Agenda Item: Introduction Maciej Lasyk
by Maciej Lasyk
Hi Guys,
It's really nice to write this post on this group :) I've been the sysadmin
for the last 10+ years (with RHEL on servers, Fedora on desktop and
Slackware on playboxes). I would love to help You :)
I live in Poland, so my clock is set to CET (UTC+1).
My freenode nick is: docent
My skills consists of general sysadmin abilities (I'm currently RHCE, but
also love to work with network issues, have quite good websecurity
knowledge, currently doing RHCSS). I can write scripts in Python / Bash /
Perl; I also know C (but in the beginning I'd rather focus on knowing You
and Fedora project env, so I'm sure that low - level programming would not
be the case at the beginning). I'm big fan of Ganglia monitoring system (I
saw You're using CollectD - that's also great solution. I've got deep
knowledge of Nagios. I also have experience in creating workflows in issue
tracker systems like Jira (I've been Jira admin for a while, also I was a
team leader in Ops, so have some general leadership knowledge - but
honestly I'd rather focus on classical sysadmin work - but always can talk
about team issues).
My general goal in joining Fedora team is to find a way back to low - level
programming. About 10 years ago I programmed a lot in C, knew much of
syscalls but than just lost it during subsequent years. But until that -
I'd like to help You with sysadmin work, see how it's in a such great team
(I worked a lot with multi - cultural teams, but those were classical non -
Open Source related jobs) and get some new challenges.
I've checked issues under
https://fedorahosted.org/fedora-infrastructure/report/1 and honestly there
are some that I don't understand at all, but also there's quite a lot of
those that I could take care of. But I'm little confused as there're issues
which looks really outdated.
Despite my family, job, hobbies (cycling, ARMs, also I've got server in my
basement on which I do some developer work - did I write that I really love
networking? I got some Cisco outdated hardware which I play sometimes) I
think that in the beginning I could contribute about 2-3h per week and from
this point check how it's going.
I think that's all - it was really nice to see You guys in LinuxCon (I was
there in Prague 2 years ago and Barcelona last year; unfortunately didn't
make it this year). I'm really looking forward to see You next year,
regards,
Maciej Lasyk
GPG key ID: 4FED49C5
GPG public key: http://maciek.lasyk.info/gpg_maciej_lasyk.asc
10 years, 4 months
Fedora 20 Beta Freeze now in effect
by Kevin Fenzi
Greetings.
we are now in the infrastructure freeze leading up to the Fedora 20
Beta release. This is a pre-release freeze.
You can see a list of hosts that do not freeze by checking out the
ansible repo and running the freezelist script:
git clone http://infrastructure.fedoraproject.org/infra/ansible.git
scripts/freezelist -i inventory/inventory
Anything listed as freezes is frozen until 2013-10-29 (or later if Beta
slips). Frozen hosts should have no changes made to them without a
signoff on the change from at least 2 sysadmin-main or rel-eng members.
Thanks,
kevin
10 years, 4 months
tickets #4039, #4046, #4045
by Janez Nemanič
Hi,
could somebody have a look at the tickets #4039, #4046, #4045 and give me
some feedback. I would like to know if my patches are ok or if I have to
fix anything or if I have to add anything etc..
Janez Nemanic
Best regards
10 years, 4 months
Meeting Agenda Item: Introduction Sam Jorna
by Sam Jorna
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello People!
My name (as you might have guess from the subject line) is Sam Jorna (irc: wraeth). I'm based on the east coast of Australia (UTC+1100 (normally UTC+1000 but we have Day Light Savings at the moment)).
I've been wanting to join Fedora in some capacity for a while but have been unsure exactly where I would fit in. The Infrastructure team appeals to me both because it's the sort of thing that I'm interested in personally, and it's related to what I do professionally (server/platform technical support for web-based software, including both utility creation/maintenance and customer-side client/server work).
With regard to my skill set, I consider myself something of a jack-of-many-trades (master-of-none), though I have practical experience in scripting (bash/perl), have some experience/understanding of SQL, and would like to learn python (everyone seems to be using it!). I'm happy to learn anything I can and often mess around with different programs just so I can figure them out.
I have a solid understanding of Linux in general (I'm a previous Gentoo user, so getting my keys dirty isn't anything new) and have been using Fedora for a while now. One of our work platforms is RHEL, and myself and a few others use Fedora as a workstation since they're so closely related (that is, one of the platforms we deploy on, not that we have one RHEL box). I've also often been the 'go-to guy' when people have computer issues, and can generally find a way to explain things to people in a way they can understand.
I'm honestly not sure what I would or should work on - I imagine that will come as I become more familiar with the operation and responsibilities of the group, though I'm quite familiar with remote administration through my duties at work. I'd also like to mention I'm no stranger to virtualization, and often have one or two VM's floating around to play around with.
I hope I can prove to be a valuable member of the team, and look forward to working with everyone (assuming I'm accepted among the ranks). If you have any questions, feel free to shoot me an E-Mail or find me on freenode.net - I'm usually in #fedora{,-social} and will be lurking in #fedora-admin while I get a handle on things.
Cheers;
- --
Sam Jorna
sam.t.jorna(a)gmail.com
GnuPG Key ID: 12D3EE0C
Fingerprint:
6D14 8366 16F5 638E 3A29
1FED 5D5C 62D9 12D3 EE0C
Secure your E-mail:
http://www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=+CjT
-----END PGP SIGNATURE-----
10 years, 4 months
Freeze Break Request: iptables rule for fedmsg+copr
by Ralph Bean
We're looking to publish fedmsg messages from the copr backend. The
node that lives on is in the cloud and so will need to follow the same
route as the secondary arch compose nodes. We have an inbound fedmsg
relay running on busgateway01, port 9941, and haproxy proxies
connections to it from hub.fedoraproject.org, port 9941.
We have that external port firewalled to only allow connections from
the secondary arch compose nodes, and the copr backend!
I only discovered today, as we went to test this for the first time,
that the IP listed in manifests/services/proxy.pp is incorrect.
I'd like to make this change to set it straight:
diff --git a/manifests/services/proxy.pp b/manifests/services/proxy.pp
index 01b39d3..529b242 100644
--- a/manifests/services/proxy.pp
+++ b/manifests/services/proxy.pp
@@ -1012,7 +1012,7 @@ if $puppetEnvironment == 'staging'{
tcpPorts => [ 80, 443, 873, 8080, 6081, 9939, 9940],
custom => [
# Allow copr-be.cloud to talk to the inbound relay.
- '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.184.142 -j ACCEPT',
+ '-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.184.131 -j ACCEPT',
# Also, ppc-composer.qa.fedoraproject.org (secondary arch)
'-A INPUT -p tcp -m tcp --dport 9941 -s 209.132.181.33 -j ACCEPT',
# Also, s390-hub01.qa.fedoraproject.org (secondary arch)
This is potentially high impact in that it will be distributed to all of
our proxies (which everything depends on). On the other hand, it is a
really simple change that only modifies the last chunk of that ip address.
Can I get two +1's?
-Ralph
10 years, 4 months
Plan for tomorrow's Fedora Infrastructure meeting (2013-11-07)
by Kevin Fenzi
The infrastructure team will be having it's weekly meeting tomorrow,
2013-11-07 at 19:00 UTC in #fedora-meeting on the freenode network.
(PLEASE NOTE: Time has changed in the US away from daylight savings
time. Please note the 19:00UTC time)
Suggested topics:
#topic New folks introductions and Apprentice tasks.
If any new folks want to give a quick one line bio or any apprentices
would like to ask general questions, they can do so in this part of the
meeting. Don't be shy!
#topic Applications status / discussion
Check in on status of our applications: pkgdb, fas, bodhi, koji,
community, voting, tagger, packager, dpsearch, etc.
If there's new releases, bugs we need to work around or things to note.
#topic Sysadmin status / discussion
Here we talk about sysadmin related happenings from the previous week,
or things that are upcoming.
#topic Upcoming Tasks/Items
https://apps.fedoraproject.org/calendar/list/infrastructure/
#topic Open Floor
Submit your agenda items, as tickets in the trac instance and send a
note replying to this thread.
More info here:
https://fedoraproject.org/wiki/Infrastructure/Meetings#Meetings
Thanks
kevin
10 years, 4 months
freeze break: server-wg email alias
by Kevin Fenzi
Greetings.
In order to setup the server-wg email alias requested in ticket 4093, I
need a freeze break.
Should be a very simple change...
+1s?
kevin
--
diff --git a/configs/system/smtp/aliases.template.erb b/configs/system/smtp/aliases.template.erb
index 5c59465..90e5c80 100644
--- a/configs/system/smtp/aliases.template.erb
+++ b/configs/system/smtp/aliases.template.erb
@@ -176,6 +176,9 @@ fedora-status: kevin,codeblock,puiterwijk
fedora-mag-admin: kevin,duffy,chrisroberts,mitzie,jzb
endoflife: triage(a)lists.fedoraproject.org
+# Fedora server working group. ticket 4093
+server-wg: sgallagh,jperrin,davidstrauss,tuanta,duffy,mitr,simo,johannbg
+
# Amazon cloud account, ticket #1903
community-cloud: rbergero@redhat.com,hpillay(a)redhat.com
diff --git a/modules/fas/templates/fas.cfg.erb b/modules/fas/templates/fas.cfg.erb
index 032994f..84bef68 100644
--- a/modules/fas/templates/fas.cfg.erb
+++ b/modules/fas/templates/fas.cfg.erb
@@ -62,7 +62,7 @@ tgcaptcha.jpeg_generator = 'vanasco_dowty'
###
# Usernames that are unavailable for fas allocation
-username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,bin,board,bodhi2,canna,census,chair,chairman,cvsdirsec,cvsdocs,cvseclipse,cvsextras,cvsfont,daemon,dbus,decode,desktop,dgilmore,directors,dovecot,dumper,fama,famsco,fax,fedora,fedorarewards,fesco,freemedia,ftbfs,ftp,ftpadm,ftpadmin,ftpsync,games,gdm,gopher,gregdek,halt,hostmaster,ident,info,ingres,jaboutboul,jan,keys,kojiadmin,ldap,legal,logo,lp,mail,mailnull,manager,marketing,mirrormanager,mysql,nagios,named,netdump,news,newsadm,newsadmin,nfsnobody,nobody,noc,nrpe,nscd,ntp,nut,openvideo,operator,packager,patrick,pcap,pkgdb,pkgsigner,postfix,postgres,postmaster,press,privoxy,pvm,quagga,radiusd,radvd,relnotes,rel-eng,root,rpc,rpcuser,rpm,rsc,s3-mirror,sales,scholarship,secalert,secondary-signer,security,shutdown,smmsp,spevack,squid,sshd,support,sync,system,tickets,toor,updates,usenet,uucp,vcsa,vendors,voting,webalizer,webmaster,wikiadmin,wnn,www,xfs,zabbix"
+username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,bin,board,bodhi2,canna,census,chair,chairman,cvsdirsec,cvsdocs,cvseclipse,cvsextras,cvsfont,daemon,dbus,decode,desktop,dgilmore,directors,dovecot,dumper,fama,famsco,fax,fedora,fedorarewards,fesco,freemedia,ftbfs,ftp,ftpadm,ftpadmin,ftpsync,games,gdm,gopher,gregdek,halt,hostmaster,ident,info,ingres,jaboutboul,jan,keys,kojiadmin,ldap,legal,logo,lp,mail,mailnull,manager,marketing,mirrormanager,mysql,nagios,named,netdump,news,newsadm,newsadmin,nfsnobody,nobody,noc,nrpe,nscd,ntp,nut,openvideo,operator,packager,patrick,pcap,pkgdb,pkgsigner,postfix,postgres,postmaster,press,privoxy,pvm,quagga,radiusd,radvd,relnotes,rel-eng,root,rpc,rpcuser,rpm,rsc,s3-mirror,sales,scholarship,secalert,secondary-signer,security,server-wg,shutdown,smmsp,spevack,squid,sshd,support,sync,system,tickets,toor,updates,usenet,uucp,vcsa,vendors,voting,webalizer,webmaster,wikiadmin,wnn,www,xfs,zabbix"
# admingroup has powers to change anything in the fas UI
admingroup = 'accounts'
10 years, 5 months