infrastructure September 2017

infrastructure@lists.fedoraproject.org

41 participants
67 discussions

[Fedocal] Reminder meeting : Bodhi stakeholder's meeting
by bowlofeggs＠fedoraproject.org 12 Sep '17

12 Sep '17

Dear all, You are kindly invited to the meeting: Bodhi stakeholder's meeting on 2017-09-12 from 15:00:00 to 16:00:00 UTC At fedora-meeting-1(a)irc.freenode.net The meeting will be about: Source: https://apps.fedoraproject.org/calendar/meeting/4671/

1 0

fedmsg-1.0.0 specfile
by Jeremy Cline 11 Sep '17

11 Sep '17

Hey all, I did a very large re-write of the fedmsg specfile just before FLOCK that condenses the many sub-packages down into just one package and also builds it for Python 3. I think it would be good to get eyes on it to make sure I didn't do anything insane. If no one has anything major I'll merge this by the end of the week and get a build done. PR: https://src.fedoraproject.org/rpms/fedmsg/pull-request/1 Thanks! -- Jeremy Cline XMPP: jeremy(a)jcline.org IRC: jcline

2 2

[PATCH] pagure: allow to delete forks
by Igor Gnatenko 11 Sep '17

11 Sep '17

Signed-off-by: Igor Gnatenko <ignatenkobrain(a)fedoraproject.org> --- roles/distgit/pagure/templates/pagure.cfg | 1 + roles/distgit/pagure/templates/pagure_hook.cfg | 1 + 2 files changed, 2 insertions(+) diff --git a/roles/distgit/pagure/templates/pagure.cfg b/roles/distgit/pagure/templates/pagure.cfg index b3f8131b5..833c57dc8 100644 --- a/roles/distgit/pagure/templates/pagure.cfg +++ b/roles/distgit/pagure/templates/pagure.cfg @@ -188,6 +188,7 @@ PROJECT_TICKETS = False ENABLE_NEW_PROJECTS = True ENABLE_UI_NEW_PROJECTS = False ENABLE_DEL_PROJECTS = False +ENABLE_DEL_FORKS = True ENABLE_TICKETS = False ENABLE_GROUP_MNGT = False DEPLOY_KEY = False diff --git a/roles/distgit/pagure/templates/pagure_hook.cfg b/roles/distgit/pagure/templates/pagure_hook.cfg index 023246f17..ff19e18c1 100644 --- a/roles/distgit/pagure/templates/pagure_hook.cfg +++ b/roles/distgit/pagure/templates/pagure_hook.cfg @@ -45,6 +45,7 @@ CASE_SENSITIVE = True PROJECT_TICKETS = False ENABLE_NEW_PROJECTS = True ENABLE_DEL_PROJECTS = False +ENABLE_DEL_FORKS = True ENABLE_TICKETS = False ENABLE_GROUP_MNGT = False DEPLOY_KEY = False -- 2.14.1

4 5

Introduction
by Dominic P Geevarghese 10 Sep '17

10 Sep '17

Fellow admins/community, I am Dominic Geevarghese ( 4096R/43EACB09 ) , using various distros including RHEL/CentOS/Fedora/Suse in professional life and Fedora on personal hardware. I would like to be part of Fedora Infra team with System Administration focus. My irc nick is dominicpg and you will find me on most of the #fedora-* channels. Appreciate any help to kickstart exciting journey with Infra team. -- Regards, Dominic P Geevarghese https://fedoraproject.org/wiki/User:Dominicpg

2 2

[PATCH] allow bodhi to tag the secure boot packages into -override tags
by dennis＠ausil.us 10 Sep '17

10 Sep '17

From: Dennis Gilmore <ausil(a)fedoraproject.org> As a followup on a releng pagure issue https://pagure.io/releng/issue/6482 we need to allow bodhi to tag packages in the secure boot channels into the override tags Signed-off-by: Dennis Gilmore <ausil(a)fedoraproject.org> --- roles/koji_hub/templates/hub.conf.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2 index 708f32d..29da36f 100644 --- a/roles/koji_hub/templates/hub.conf.j2 +++ b/roles/koji_hub/templates/hub.conf.j2 @@ -111,6 +111,7 @@ Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild tag = user mbs/mbs.fedoraproject.org && tag module-* && package kernel shim grub2 fedora-release fedora-repos pesign :: allow + user bodhi && tag *-override && package kernel shim grub2 fedora-release fedora-repos pesign :: allow has_perm autosign && fromtag *-pending && package kernel shim grub2 fedora-release fedora-repos pesign :: allow has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos pesign :: allow package kernel shim grub2 fedora-release fedora-repos pesign :: deny -- 1.8.3.1

2 1

Freeze break request: teach nagios about noswap
by Kevin Fenzi 10 Sep '17

10 Sep '17

Greetings. We currently have 7 hosts in nagios that are alerting about swap. 6 of them are osbs* ones. The new OpenShift 3.6 actually disables swap on all nodes, so these will alert forever, also more will as we roll 3.6 into production. Also, there's mailman01 that often gets low swap because it gets a bunch of requests, swaps out things it isn't using and then frees the memory (but never swaps back in). This patch sets a nagios.swap value which is defined in group_vars/all as true, and set to false in all the places we don't want to check swap. Should be pretty easy to back out if it causes any issues. +1s? kevin -- diff --git a/inventory/group_vars/all b/inventory/group_vars/all index e18af2f..18b9db5 100644 --- a/inventory/group_vars/all +++ b/inventory/group_vars/all @@ -261,6 +261,7 @@ nagios_Check_Services: named: false dhcpd: false httpd: false + swap: true # Set variable if we want to use our global iptables defaults # Some things need to set their own. diff --git a/inventory/group_vars/builders b/inventory/group_vars/builders index 8fea99e..c22c387 100644 --- a/inventory/group_vars/builders +++ b/inventory/group_vars/builders @@ -1,5 +1,7 @@ --- # nagios items # We don't use nrpe to check any of the builders +# Nor do we check swap there. nagios_Check_Services: nrpe: false + swap: false diff --git a/inventory/group_vars/builders-stg b/inventory/group_vars/builders-stg index 8fea99e..c22c387 100644 --- a/inventory/group_vars/builders-stg +++ b/inventory/group_vars/builders-stg @@ -1,5 +1,7 @@ --- # nagios items # We don't use nrpe to check any of the builders +# Nor do we check swap there. nagios_Check_Services: nrpe: false + swap: false diff --git a/inventory/group_vars/cloud b/inventory/group_vars/cloud index abc2282..4af9dfb 100644 --- a/inventory/group_vars/cloud +++ b/inventory/group_vars/cloud @@ -1,4 +1,5 @@ --- nagios_Check_Services: nrpe: false + swap: false datacenter: cloud diff --git a/inventory/group_vars/mailman b/inventory/group_vars/mailman index 41dd8cd..f54b474 100644 --- a/inventory/group_vars/mailman +++ b/inventory/group_vars/mailman @@ -63,3 +63,5 @@ nrpe_check_postfix_queue_crit: 200 nrpe_procs_warn: 300 nrpe_procs_crit: 500 +nagios_Check_Services: + swap: false diff --git a/inventory/host_vars/mirrorlist-host1plus.fedoraproject.org b/inventory/host_vars/mirrorlist-host1plus.fedoraproject.org index ebd6151..c2e4532 100644 --- a/inventory/host_vars/mirrorlist-host1plus.fedoraproject.org +++ b/inventory/host_vars/mirrorlist-host1plus.fedoraproject.org @@ -2,3 +2,11 @@ # This is now a cloud instance provided by host1plus # vmhost: none datacenter: host1plus + +nagios_Check_Services: + nrpe: true + sshd: true + named: false + dhcpd: false + httpd: true + swap: false diff --git a/inventory/host_vars/proxy05.fedoraproject.org b/inventory/host_vars/proxy05.fedoraproject.org index 8efd950..fae19fd 100644 --- a/inventory/host_vars/proxy05.fedoraproject.org +++ b/inventory/host_vars/proxy05.fedoraproject.org @@ -16,3 +16,11 @@ dns: 8.8.8.8 eth0_ip: 185.141.165.254 eth0_nm: 255.255.254.0 vpn: true + +nagios_Check_Services: + nrpe: true + sshd: true + named: false + dhcpd: false + httpd: true + swap: false diff --git a/roles/nagios_server/templates/nagios/hostgroups/checkswap.cfg.j2 b/roles/nagios_server/templates/nagios/hostgroups/checkswap.cfg.j2 index 9f5bd8c..7da2328 100644 --- a/roles/nagios_server/templates/nagios/hostgroups/checkswap.cfg.j2 +++ b/roles/nagios_server/templates/nagios/hostgroups/checkswap.cfg.j2 @@ -1,6 +1,5 @@ define hostgroup { hostgroup_name CheckSwap alias Swap-Is-Low - members *, !status-fedora2, !registry-cdn, !phx2-gw, !ibiblio-gw, !cloud-gw, !bodhost-gw, !coloamer-gw, !dedicated-gw, !host1plus-gw, !internetx-gw, !osuosl-gw, !rdu-gw, !rdu-cc-gw, !tummy-gw, !proxy05.fedoraproject.org, !mirrorlist-host1plus.fedoraproject.org, !download-rdu01.fedoraproject.org, !virthost-rdu01.fedoraproject.org, !fas3-01.stg.phx2.fedoraproject.org, !osbs-control01.phx2.fedoraproject.org, {% for host in groups['builders'] %}!{{host}},{% endfor %} {% for host in groups['builders-stg'] %}!{{host}},{% endfor %} {% for host in groups['cloud'] %}!{{host}}, {% endfor %} {% for host in vars['phx2_management_limited'] %}!{{host}},{% endfor %} {% for host in vars['phx2_management_hosts'] %}!{{host}}{% if not loop.last %},{% endif %} {% endfor %} - + members {% for host in groups['all'] %}{% if hostvars[host].nagios_Check_Services['swap'] == true %}{{host}}{% if not loop.last %},{% endif %} {% endfor %} }

3 3

Intro
by Laura Tait 07 Sep '17

07 Sep '17

Hello, my name is Laura and I have been using Fedora off/on for a few years now and I am interested in system admin things. I would be interested in helping out in the Fedora Project Kind Regards, Laura

2 2

intro email
by saif al-shantir 07 Sep '17

07 Sep '17

Hi , my name is Saif , i would be glad to join this group . i am mainly interested in system admin & ansible part . regards Saif

2 1

Plans for Thursday 2017-09-07 Fedora Infrastructure Meeting
by Stephen John Smoogen 07 Sep '17

07 Sep '17

Thursday 2017-09-07 the Fedora Infrastructure team will have a meeting in #fedora-meeting at 18:00 UTC. The agenda currently looks as follows on the gobby page. Please add or update as needed. = Introduction = We will use it over the week before the meeting to gather status and info and discussion items and so forth, then use it in the irc meeting to transfer information to the meetbot logs. = Meeting start stuff = #startmeeting Infrastructure (2017-09-07) #meetingname infrastructure #topic aloha #chair smooge relrod nirik abadger1999 dgilmore threebean pingou puiterwijk pbrobinson = Let new people say hello = #topic New folks introductions = Status / Information / Trivia / Announcements = (We put things here we want others on the team to know, but don't need to discuss) (Please use #info <the thing> - your name) #topic announcements and information #info PHX2 Colo Trip, Dec 4th - 9th #info beta freeze started 2017-09-05 - everyone #info Moving .stg. ips ongoing #info DNS breakage happened earlier this week #info NFS slowdowns moved to high IO problem. = Things we should discuss = We use this section to bring up discussion topics. Things we want to talk about as a group and come up with some consensus /suor decision or just brainstorm a problem or issue. If there are none of these we skip this section. (Use #topic your discussion topic - your username) #topic Nothing was put here yet this week. = Apprentice office hours = #topic Apprentice Open office hours Here we will discuss any apprentice questions, try and match up people looking for things to do with things to do, progress, testing anything like that. = Learn about some application or setup in infrastructure = (This section, each week we get 1 person to talk about an application or setup that we have. Just going over what it is, how to contribute, ideas for improvement, etc. Whoever would like to do this, just add the i/nfo in this section. In the event we don't find someone to teach about something, we skip this section and just move on to open floor.) #topic Learn about: Nothing was put here yet this week = Meeting end stuff = #topic Open Floor #endmeeting -- Stephen J Smoogen.

3 2

proxy01 logs
by Stephen John Smoogen 07 Sep '17

07 Sep '17

Proxy01 paged on a disk space issue this evening. Half of the disk space usage was journal logs. I vacuumed them down to 30 days which gave us about 2GB free. The other disk usage is koji.fedoraproject.org and kojipackages.fedoraproject.org which are using 1.8GB of disk space in the last 24 hours. The lion share of this log is 10.5.125.62 - - [31/Aug/2017:04:02:16 +0000] "POST /kojihub HTTP/1.1" 200 4118 "-" "koji/1" (with the POST being the size of whatever koji02.phx2.fedoraproject.org. is pushing to koji.fedoraproject.org (which somehow sounds weird).) -- Stephen J Smoogen.

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

infrastructure September 2017