[release] anitya: 0.9.1
by Pierre-Yves Chibon
Good Morning Everyone,
I just cut and pushed a new version of anitya: 0.9.1
Here is the corresponding changelog:
* Tue Apr 19 2016 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.9.1-1
- Update to 0.9.1
- Fix the stackage backend
It should cut the list of failed update of ~200 projects :)
Happy updating,
Pierre
8 years
Hello World
by josh Sutton
Name: Josh
TZ: US/Central
IRC: j_shua
Skills: Current Linux SysAd
Tech: RHEL, Centos, Apache, Docker, Ansible, etc
Employer: Rackspace - We love FOSS!
Wanna learn: Python, bash, packaging, expanding on current linux
knowledge, more ansible and Docker
I am all setup in FAS (jshua), so feel free to reach out at anytime in
IRC or email.
Thanks,
Josh
8 years
[PATCH] Move ntp setup in a role
by Michael Scherer
From: Michael Scherer <misc(a)zarb.org>
Since base install ntp on all platforms, we can skip the vars
and place it by default (next step is to convert the
few playbooks duplicating the role)
---
roles/base/files/ntp/step-tickers | 7 -------
roles/base/meta/main.yml | 1 +
roles/base/tasks/main.yml | 21 ---------------------
roles/base/templates/ntp/ntp.conf.j2 | 34 ----------------------------------
roles/ntp/files/step-tickers | 7 +++++++
roles/ntp/tasks/main.yml | 27 +++++++++++++++++++++++++++
roles/ntp/templates/ntp.conf.j2 | 34 ++++++++++++++++++++++++++++++++++
vars/CentOS.yml | 2 +-
vars/Fedora.yml | 2 +-
vars/RedHat.yml | 2 +-
10 files changed, 72 insertions(+), 65 deletions(-)
delete mode 100644 roles/base/files/ntp/step-tickers
delete mode 100644 roles/base/templates/ntp/ntp.conf.j2
create mode 100644 roles/ntp/files/step-tickers
create mode 100644 roles/ntp/tasks/main.yml
create mode 100644 roles/ntp/templates/ntp.conf.j2
diff --git a/roles/base/files/ntp/step-tickers b/roles/base/files/ntp/step-tickers
deleted file mode 100644
index d0fe7ab..0000000
--- a/roles/base/files/ntp/step-tickers
+++ /dev/null
@@ -1,7 +0,0 @@
-208.75.88.4
-216.93.242.12
-107.170.242.27
-108.166.189.70
-199.223.248.98
-# [loopback]
-127.127.1.0
diff --git a/roles/base/meta/main.yml b/roles/base/meta/main.yml
index 6ad8fad..afa39de 100644
--- a/roles/base/meta/main.yml
+++ b/roles/base/meta/main.yml
@@ -1,3 +1,4 @@
---
dependencies:
+ - { role: ntp }
- { role: dnf-automatic }
diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 5ddb308..3bb4bd8 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -300,27 +300,6 @@
- name: Setup postfix
include: postfix.yml
-- name: install ntp.conf
- template: src=ntp/ntp.conf.j2 dest=/etc/ntp.conf
- tags:
- - ntp
- - config
- - base
-
-- name: install ntp step-tickers
- copy: src=ntp/step-tickers dest=/etc/ntp/step-tickers
- tags:
- - ntp
- - config
- - base
-
-- name: Start ntpd
- service: name=ntpd state=running enabled=true
- tags:
- - ntp
- - service
- - base
-
#
# This task installs some common scripts to /usr/local/bin
# scripts are under roles/base/files/common-scripts
diff --git a/roles/base/templates/ntp/ntp.conf.j2 b/roles/base/templates/ntp/ntp.conf.j2
deleted file mode 100644
index e72371c..0000000
--- a/roles/base/templates/ntp/ntp.conf.j2
+++ /dev/null
@@ -1,34 +0,0 @@
-## Set up restrictions for services.
-restrict default kod nomodify notrap nopeer noquery
-restrict -6 default kod nomodify notrap nopeer noquery
-restrict 127.0.0.1
-restrict -6 ::1
-
-# setup a set of servers that we all look at.
-# use servers from 1/2/3.rhel.pool.ntp.org as they are allowed out of the firewall
-# However, we need specific ip's to be allowed out from builders.
-{% if datacenter == 'phx2' and not inventory_hostname.startswith('bastion0') %}
-#
-# in phx2 we want to use bastion01 and bastion02 for ntp service
-# Unless we are bastion01/02, then we want to use the normal pool
-#
-server 10.5.126.12
-server 10.5.126.11
-{% else %}
-server 1.rhel.pool.ntp.org
-server 2.rhel.pool.ntp.org
-server 3.rhel.pool.ntp.org
-{% endif %}
-
-# [localhost]
-# Undisciplined Local Clock. This is a fake driver intended for backup
-# and when no outside source of synchronized time is available.
-server 127.127.1.0 # local clock
-fudge 127.127.1.0 stratum 10
-
-# Key file containing the keys and key identifiers used when operating
-# with symmetric key cryptography.
-keys /etc/ntp/keys
-
-# Watch drift
-driftfile /var/lib/ntp/drift
diff --git a/roles/ntp/files/step-tickers b/roles/ntp/files/step-tickers
new file mode 100644
index 0000000..d0fe7ab
--- /dev/null
+++ b/roles/ntp/files/step-tickers
@@ -0,0 +1,7 @@
+208.75.88.4
+216.93.242.12
+107.170.242.27
+108.166.189.70
+199.223.248.98
+# [loopback]
+127.127.1.0
diff --git a/roles/ntp/tasks/main.yml b/roles/ntp/tasks/main.yml
new file mode 100644
index 0000000..809abc2
--- /dev/null
+++ b/roles/ntp/tasks/main.yml
@@ -0,0 +1,27 @@
+- name: install ntp
+ package: name=ntp state=present
+ tags:
+ - ntp
+ - package
+ - base
+
+- name: install ntp.conf
+ template: src=ntp.conf.j2 dest=/etc/ntp.conf
+ tags:
+ - ntp
+ - config
+ - base
+
+- name: install ntp step-tickers
+ copy: src=step-tickers dest=/etc/ntp/step-tickers
+ tags:
+ - ntp
+ - config
+ - base
+
+- name: Start ntpd
+ service: name=ntpd state=running enabled=true
+ tags:
+ - ntp
+ - service
+ - base
diff --git a/roles/ntp/templates/ntp.conf.j2 b/roles/ntp/templates/ntp.conf.j2
new file mode 100644
index 0000000..e72371c
--- /dev/null
+++ b/roles/ntp/templates/ntp.conf.j2
@@ -0,0 +1,34 @@
+## Set up restrictions for services.
+restrict default kod nomodify notrap nopeer noquery
+restrict -6 default kod nomodify notrap nopeer noquery
+restrict 127.0.0.1
+restrict -6 ::1
+
+# setup a set of servers that we all look at.
+# use servers from 1/2/3.rhel.pool.ntp.org as they are allowed out of the firewall
+# However, we need specific ip's to be allowed out from builders.
+{% if datacenter == 'phx2' and not inventory_hostname.startswith('bastion0') %}
+#
+# in phx2 we want to use bastion01 and bastion02 for ntp service
+# Unless we are bastion01/02, then we want to use the normal pool
+#
+server 10.5.126.12
+server 10.5.126.11
+{% else %}
+server 1.rhel.pool.ntp.org
+server 2.rhel.pool.ntp.org
+server 3.rhel.pool.ntp.org
+{% endif %}
+
+# [localhost]
+# Undisciplined Local Clock. This is a fake driver intended for backup
+# and when no outside source of synchronized time is available.
+server 127.127.1.0 # local clock
+fudge 127.127.1.0 stratum 10
+
+# Key file containing the keys and key identifiers used when operating
+# with symmetric key cryptography.
+keys /etc/ntp/keys
+
+# Watch drift
+driftfile /var/lib/ntp/drift
diff --git a/vars/CentOS.yml b/vars/CentOS.yml
index e32f53a..bd4c73c 100644
--- a/vars/CentOS.yml
+++ b/vars/CentOS.yml
@@ -1,6 +1,6 @@
---
dist_tag: el{{ ansible_distribution_version[0] }}
-base_pkgs_inst: [ 'ntp' ]
+base_pkgs_inst: []
base_pkgs_erase: ['firstboot-tui','bluez-utils', 'sendmail']
service_disabled: []
service_enabled: []
diff --git a/vars/Fedora.yml b/vars/Fedora.yml
index ad1434a..c985f44 100644
--- a/vars/Fedora.yml
+++ b/vars/Fedora.yml
@@ -1,6 +1,6 @@
---
dist_tag: f{{ ansible_distribution_version }}
-base_pkgs_inst: ['iptables-services', 'ntp' ]
+base_pkgs_inst: ['iptables-services' ]
base_pkgs_erase: ['firewalld', 'PackageKit*', 'sendmail', 'at']
service_disabled: [ ]
service_enabled: ['auditd']
diff --git a/vars/RedHat.yml b/vars/RedHat.yml
index e32f53a..bd4c73c 100644
--- a/vars/RedHat.yml
+++ b/vars/RedHat.yml
@@ -1,6 +1,6 @@
---
dist_tag: el{{ ansible_distribution_version[0] }}
-base_pkgs_inst: [ 'ntp' ]
+base_pkgs_inst: []
base_pkgs_erase: ['firstboot-tui','bluez-utils', 'sendmail']
service_disabled: []
service_enabled: []
--
1.8.3.1
8 years
[release] anitya: 0.9.0
by Pierre-Yves Chibon
Good Morning Everyone,
I just cut and pushed a new version of anitya: 0.9.0
Here is the corresponding changelog
* Fri Apr 15 2016 Pierre-Yves Chibon <pingou(a)pingoured.fr> - 0.9.0-1
- Update to 0.9.0
- Do not trigger the keyboard shortcut when in the search box (Prashant-Surya)
- Improved UI for flash messages being shown (sudheesh001)
- Add a maven-central backend (Michael Simacek)
- Indicate that anitya is py2 only (sudheesh001)
- Appended UTC as timezone (Jinank Jain)
- Update the drupal backends to use updates.drupal.org as source of info (Dave
Olsthoorn)
Happy updating,
Pierre
8 years
Plan for tomorrow's Fedora Infrastructure meeting - 2016-04-14
by Kevin Fenzi
The infrastructure team will be having it's weekly meeting tomorrow,
2016-04-14 at 18:00 UTC in #fedora-meeting on the freenode network.
We have a gobby document
(see: https://fedoraproject.org/wiki/Gobby )
fedora-infrastructure-meeting-next is the document.
Please try and review and edit that document before the meeting and we
will use it to have our agenda of things to discuss. A copy as of today
is included in this email.
If you have something to discuss, add the topic to the discussion area
with your name. If you would like to teach other folks about some
application or setup in our infrastructure, please add that topic and
your name to the learn about section.
kevin
--
= Introduction =
This shared document is for the next fedora infrastructure meeting.
We will use it over the week before the meeting to gather status and info and
discussion items and so forth, then use it in the irc meeting to transfer
information to the meetbot logs.
= Meeting start stuff =
#startmeeting Infrastructure (2016-04-14)
#meetingname infrastructure
#topic aloha
#chair smooge relrod nirik abadger1999 lmacken dgilmore threebean pingou puiterwijk pbrobinson
#topic New folks introductions / Apprentice feedback
= Status / information / Trivia / Announcements =
(We put things here we want others on the team to know, but don't need to discuss)
(Please use #info <the thing> - your name)
#topic announcements and information
#info mass update/reboot cycle mostly done, just a few groups left - kevin/patrick/smooge
#info bodhi02.stg reinstalled as bodhi01.stg - kevin
#info buildvm-02/03/04/05.stg added in staging - kevin
#info bvirthost01 and autosign02 added in build network - kevin
#info spammers still trying to get in, mostly being blocked by basset - everyone
#info noc01/02 upgraded to nagios 4.0.8 - kevin/patrick
#info
= Things we should discuss =
We use this section to bring up discussion topics. Things we want to talk about
as a group and come up with some consensus or decision or just brainstorm a
problem or issue. If there are none of these we skip this section.
(Use #topic your discussion topic - your username)
#topic
= Learn about some application or setup in infrastructure =
(This section, each week we get 1 person to talk about an application or setup
that we have. Just going over what it is, how to contribute, ideas for improvement,
etc. Whoever would like to do this, just add the info in this section. In the
event we don't find someone to teach about something, we skip this section
and just move on to open floor.)
Schedule:
unknown. Sign up now?
#topic Learn about:
= Meeting end stuff =
#topic Open Floor
#endmeeting
8 years
Hackfest on ansible repo during flock this summer ?
by Michael Scherer
Hi,
so as people know, the ansible repository is quite old. Fedora was one
of the first big public ansible user, and as such, has a rather huge repo.
And going where no one has gone before has the downside of not being
able to build on others people experience with the new tools, resulting in
sometime less optimal solutions, or using older patterns, or just regular
bitrot. And as people have seen on the list, I did sent a few patches
for refactoring and cleaning things around as I did explore the repo,
but I think it would be more efficient to work on that as a team.
Therefor, I would like to know who would be interested by a hackfest during
flock this year. The idea would be to focus on improving existing playbooks.
And among the tasks, we could have:
- convert tasks who are not to be roles (example, 2fa)
- start using dependencies among roles (example, collectd, fedmsg)
- move from yum modules to packages (to handle the yum to dnf change)
- remove things < F21 (or EL 6 when applicable)
- move handlers, vars, files to role (or role arguments)
- move cronjob declaration to cron module (since currently, cron is not reloaded,
so changes are not picked)
and I think that alone would keep us busy.
That's most of the time small tasks, so that would scale well to any number of participants,
and with a low complexity, so open to everybody.
I already did the proposal before the end of the Cfp, but I kinda
forgot to send a email about it.
Any people besides me interested ?
--
Michael Scherer
8 years
[PATCH] Refactor xinetd in a separate role
by Michael Scherer
From: Michael Scherer <misc(a)zarb.org>
---
handlers/restart_services.yml | 3 ---
roles/git/server/meta/main.yml | 4 ++++
roles/git/server/tasks/main.yml | 5 -----
roles/rsyncd/meta/main.yml | 3 +++
roles/rsyncd/tasks/main.yml | 7 -------
roles/xinetd/handlers/main.yml | 2 ++
roles/xinetd/tasks/main.yml | 10 ++++++++++
7 files changed, 19 insertions(+), 15 deletions(-)
create mode 100644 roles/git/server/meta/main.yml
create mode 100644 roles/rsyncd/meta/main.yml
create mode 100644 roles/xinetd/handlers/main.yml
create mode 100644 roles/xinetd/tasks/main.yml
diff --git a/handlers/restart_services.yml b/handlers/restart_services.yml
index 58396a0..d4ba5fe 100644
--- a/handlers/restart_services.yml
+++ b/handlers/restart_services.yml
@@ -90,9 +90,6 @@
- name: restart postfix
action: service name=postfix state=restarted
-- name: restart xinetd
- action: service name=xinetd state=restarted
-
- name: restart netapproute
action: command /etc/sysconfig/network-scripts/ifup-routes eth1
diff --git a/roles/git/server/meta/main.yml b/roles/git/server/meta/main.yml
new file mode 100644
index 0000000..6bbd92f
--- /dev/null
+++ b/roles/git/server/meta/main.yml
@@ -0,0 +1,4 @@
+---
+dependencies:
+- role: xinetd
+ when: "ansible_distribution_major_version|int == 6"
diff --git a/roles/git/server/tasks/main.yml b/roles/git/server/tasks/main.yml
index ef9fe4f..81bc437 100644
--- a/roles/git/server/tasks/main.yml
+++ b/roles/git/server/tasks/main.yml
@@ -20,11 +20,6 @@
tags: git/server
# If using xinetd
-- name: install xinetd
- yum: pkg=xinetd state=present
- when: ansible_distribution_major_version|int == 6
- tags: git/server
-
- name: install the xinetd config file
template: >
src="git.j2"
diff --git a/roles/rsyncd/meta/main.yml b/roles/rsyncd/meta/main.yml
new file mode 100644
index 0000000..380b0d1
--- /dev/null
+++ b/roles/rsyncd/meta/main.yml
@@ -0,0 +1,3 @@
+---
+dependencies:
+- role: xinetd
diff --git a/roles/rsyncd/tasks/main.yml b/roles/rsyncd/tasks/main.yml
index 7d1a83b..0898da8 100644
--- a/roles/rsyncd/tasks/main.yml
+++ b/roles/rsyncd/tasks/main.yml
@@ -7,7 +7,6 @@
yum: state=present name={{item}}
with_items:
- rsync
- - xinetd
- libsemanage-python
tags:
- packages
@@ -17,7 +16,6 @@
dnf: state=present name={{item}}
with_items:
- rsync
- - xinetd
- libsemanage-python
tags:
- packages
@@ -49,11 +47,6 @@
tags:
- config
-- name: make sure xinetd is started
- service: name=xinetd state=started
- tags:
- - services
-
- name: set sebooleans so rsync can read dirs
seboolean: name=rsync_export_all_ro
state=true
diff --git a/roles/xinetd/handlers/main.yml b/roles/xinetd/handlers/main.yml
new file mode 100644
index 0000000..e910312
--- /dev/null
+++ b/roles/xinetd/handlers/main.yml
@@ -0,0 +1,2 @@
+- name: restart xinetd
+ action: service name=xinetd state=restarted
diff --git a/roles/xinetd/tasks/main.yml b/roles/xinetd/tasks/main.yml
new file mode 100644
index 0000000..8149be4
--- /dev/null
+++ b/roles/xinetd/tasks/main.yml
@@ -0,0 +1,10 @@
+---
+- name: install xinetd
+ package: state=present name=xinetd
+ tags:
+ - packages
+
+- name: make sure xinetd is started
+ service: name=xinetd state=started
+ tags:
+ - services
--
1.8.3.1
8 years