server October 2015

server@lists.fedoraproject.org

17 participants
18 discussions

WG voting seat withdrawal
by Truong Anh Tuan 15 Oct '15

15 Oct '15

Hi folks, I am writing this email to express that I would like to withdraw my voting seat in Server WG. Because I have been quite busy recently by day job and also I would like to give more opportunities to more active people (I see there are a couple of people just nominated to WG voting seats) who can push Fedora Server go faster in the future. I will be still around to contribute to Fedora Server as a non-voting member. Thank you all, especially ones who come up with me from the beginning days of the Server WG. Good luck and hope to see you again and again :) Rgds, Tuan

1 0

Joining the Server Working Group
by Jon Stanley 14 Oct '15

14 Oct '15

Earlier today, Stephen Gallagher asked me if I'd be interested in joining the Server WG. I'd love to if y'all will have me (you'd have to put up with a Cardinals fan, though!)!!! I was very humbled to have been asked. The requisite disclaimer is that I am employed by Bank of America, and all opinions are my own, and not those of my employer :) (you'll never have to hear that again, promise!). What makes me a particularly good member of the Server WG (IMHO) is that I am primarily a consumer of downstream derivatives of Fedora Server in my professional life. In my personal life, I'm a consumer of both Fedora and (different) downstream derivatives, and contributor to Fedora since 2007. I've worn many hats in that time - bug triage, infrastructure, packaging, etc. Why do I think that this makes me an ideal candidate for the WG? Simple - real world experience provisioning, operating, and managing systems at scale and what that entails. This includes everything from installing the OS (via Kickstart or other means - rpm-ostree for example is extremely exciting), as well as thinking about the big picture and how it all works together - interoperability with legacy environments as well as innovation into new spaces, for example the brave new world of microservices, containers, and container orchestration. My major goal would be making Fedora the platform of choice for hosting containers and containerized applications, due to the out of the box orchestration components that we can deliver and make seamlessly work without massive amounts of custom configuration (unless you want to). I see this as something that a RoleKit role could probably do. Speaking of which, one of the things that was being worked on in Rochester was making it easier to add roles to RoleKit. I think that once the foundational work is completed, we need to start adding roles with anger, and make them useful to users (and easy to customize if they aren't). Another (secondary) goal for the WG would be making Fedora deployable out of the box into existing network topologies, including those that might require interacting with proprietary pieces (using obviously all FOSS software on Fedora!) of infrastructure that already exist in most enterprise environments, and making that interaction easy and as painless as possible (AD, I'm looking at you!). Some of this has already been done, while there might be more integration to go in other cases. Thanks for reading this (now I realize entirely too long) introduction. Look forward to working with everyone!

1 0

Joining the server working group
by Major Hayden 13 Oct '15

13 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello there, Stephen Gallagher reached out to me earlier today to see if I'd be interested in joining the server working group. I'm really interested in joining (if you'll have me). I'm not the greatest at writing about myself, but here's what I'm currently doing in the land of Fedora: * Member of the Fedora Security Team * Maintainer of several packages * Author of some Fedora Magazine posts * Proponent of SELinux, defender of Dan Walsh * In the process of writing documentation for systemd-networkd for Fedora Cloud images And I do a few things with Fedora, server-wise: * Small home lab with 3-4 machines running KVM * Two servers in a colo running some OpenStack lab stuff * Running icanhazip.com (and related services) on Fedora * Running major.io (my blog) on Fedora * Built a virtualization platform at $dayjob with Fedora All in all, I have about 10-15 servers running Fedora at one time or another. I'd like to help improve Fedora in any way I can, especially on servers. Some of my ideas are around secure-by-default images and further improvements to make Fedora a preferred platform for the most common web server software packages. Thanks for your time and consideration. Feel free to email me with any questions! :) - -- Major Hayden -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWHUbcAAoJEHNwUeDBAR+xcogP+gJtYqh67iNEPdAO3D+UKtbP gn6KKy535t13T0a2so7UbABpxHLQyE7NquS/MxhH45ER4dkD+mLSnbTS0uDphdbv 1i/5Iuvz9qFge/No+MEKBpkbnwRrFcCxRRfGs77mYypJuLWuimMYFlMuP+0YF7dE Sy44CrLl9yiEbxB9vyifx2fzPzlMPpWHtEdoQXX/IGh2RYHo1d9SV+5lI+5RgHjm kIcaQceSyBVnrqYWp2kLi833Vhbv2gplpDo5hGDghHIu1SjVNFasArxNEjTqK5kx mf9/hoxkI36HyIlIWaGnL7OF29C2syGYwCRYxWE0IsPKAUzc+o4pYsNksVFzk9Sf C/9dgsnsGEVXqOHJlf1Ry9TaNGBAyIp5V+RyW2TWsvgmocNPSvJtzM2/G24xmG+9 TCdvqgZ97v1EU3MarA/+MTpi2JZpEjVpQ7QccRXKQG8eIg1YjjENHzJlItscuaTu NS2Ri9A1tUTqLeuBlZnqNbEb7id4PhQa+qs4SnRj8Vc4cWGethyqN/6XwosgMjIH LBA6vznJ/K2MRCjBv1l6GrFhnGQLC+P91pWmZMlx7Zc9lj/ULsZsdS9Qcybj3iVY k0Cq4PqjVdxqIJmaNjRoLmXurL1XJ8y87nuxktpeLlfHCc+1wyT/uB76BEMe9i3c u5YLEcED5ejT7H6QNyNv =4XC2 -----END PGP SIGNATURE-----

2 1

Server SIG Weekly Meeting Minutes (2015-10-13)
by Stephen Gallagher 13 Oct '15

13 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================= #fedora-meeting-1: Server SIG Weekly Meeting (2015-10-13) ========================================================= Meeting started by sgallagh at 15:00:04 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting-1/2015-10-13/serversig.2 015-10-13-15.00.log.html . Meeting summary - --------------- * roll call (sgallagh, 15:00:04) * Agenda (sgallagh, 15:02:33) * Agenda Item: Empty WG Seat (sgallagh, 15:03:21) * Agenda Item: Fedora 23 Final Tasks (sgallagh, 15:03:21) * Agenda Item: Fedora 24 Planning (sgallagh, 15:03:21) * Empty WG Seat (sgallagh, 15:05:43) * ACTION: sgallagh to reach out to Major Hayden and Jon Stanley about vacant Server WG seat. (sgallagh, 15:26:32) * Fedora 23 Final Tasks (sgallagh, 15:27:06) * Fedora 23 is in Final Freeze (sgallagh, 15:34:02) * There was a compose issue related to a bodhi bug causing 389ds to break dependencies. It will be fixed in TC8. (sgallagh, 15:34:34) * ACTION: sgallagh to test upgrades of FreeIPA from F22 to F23. (sgallagh, 15:35:29) * Fedora 24 Planning (sgallagh, 15:39:19) * adamw is working on automating the release validation tests for F24 (sgallagh, 15:40:24) * rolekit will be focusing on support for creating out-of-tree roles (sgallagh, 15:40:57) * Reminder: i386 install images are going away in Fedora Server 24. (sgallagh, 15:42:47) * General theme for Fedora 24: Closer integration with other editions (sgallagh, 15:52:08) * Some ideas for integration: Cockpit getting server lists from FreeIPA, better support for pgAdmin in Workstation, Better autodetection of FreeIPA domains in Initial Setup. (sgallagh, 16:04:11) * Server-Cloud interaction needs some more thought (sgallagh, 16:04:41) * Open Floor (sgallagh, 16:09:45) Meeting ended at 16:11:35 UTC. Action Items - ------------ * sgallagh to reach out to Major Hayden and Jon Stanley about vacant Server WG seat. * sgallagh to test upgrades of FreeIPA from F22 to F23. Action Items, by person - ----------------------- * sgallagh * sgallagh to reach out to Major Hayden and Jon Stanley about vacant Server WG seat. * sgallagh to test upgrades of FreeIPA from F22 to F23. * **UNASSIGNED** * (none) People Present (lines said) - --------------------------- * sgallagh (112) * mizmo (29) * adamw (28) * nirik (16) * roshi (12) * stefw (11) * simo (11) * zodbot (10) * bconoboy (2) * dgilmore (1) * danofsatx (0) * tuanta (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYdLX4ACgkQeiVVYja6o6ODnwCgp37WOsE2nQBtqbeN2IuteYZf gpIAoJ7gIzWQ9LLNItbFeRdvyY1969GF =13if -----END PGP SIGNATURE-----

1 0

Rolekit Weekly Meeting Minutes (2015-10-13)
by Stephen Gallagher 13 Oct '15

13 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================== #fedora-server: rolekit (2015-10-13) ==================================== Meeting started by sgallagh at 12:59:59 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-server/2015-10-13/rolekitweekly. 2015-10-13-12.59.log.html . Meeting summary - --------------- * init process (sgallagh, 13:00:00) * Agenda (sgallagh, 13:01:00) * Agenda Item: Fedora 23 Final Steps (sgallagh, 13:01:24) * Agenda Item: Fedora 24 Planning (sgallagh, 13:01:33) * Fedora 23 Final Steps (sgallagh, 13:02:52) * Fedora 23 entered Final Freeze as of midnight UTC today (sgallagh, 13:03:06) * ACTION: twoerner and nilsph to test the rolekit-0.4.0.1 package and provide karma in Bodhi (sgallagh, 13:07:54) * LINK: http://dl.fedoraproject.org/pub/alt/stage/ (sgallagh, 13:12:09) * Fedora 24 Planning (sgallagh, 13:19:38) * ACTION: sgallagh to work on the job-control/progress monitoring feature (sgallagh, 13:37:28) * ACTION: twoerner to work on the firewall configuration options (sgallagh, 13:37:41) * ACTION: nilsph to work on supporting out-of-tree role creation (sgallagh, 13:37:52) * Open Floor (sgallagh, 13:42:24) * Continuous Integration (sgallagh, 13:44:31) * ACTION: nilsph to pick the brains of the Cockpit and QA crowd about CI (sgallagh, 13:50:53) Meeting ended at 13:56:03 UTC. Action Items - ------------ * twoerner and nilsph to test the rolekit-0.4.0.1 package and provide karma in Bodhi * sgallagh to work on the job-control/progress monitoring feature * twoerner to work on the firewall configuration options * nilsph to work on supporting out-of-tree role creation * nilsph to pick the brains of the Cockpit and QA crowd about CI Action Items, by person - ----------------------- * nilsph * twoerner and nilsph to test the rolekit-0.4.0.1 package and provide karma in Bodhi * nilsph to work on supporting out-of-tree role creation * nilsph to pick the brains of the Cockpit and QA crowd about CI * sgallagh * sgallagh to work on the job-control/progress monitoring feature * twoerner * twoerner and nilsph to test the rolekit-0.4.0.1 package and provide karma in Bodhi * twoerner to work on the firewall configuration options * **UNASSIGNED** * (none) People Present (lines said) - --------------------------- * sgallagh (100) * nilsph (34) * twoerner (24) * zodbot (6) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYdDZMACgkQeiVVYja6o6NI4wCfZzd6jDKo37TqGSWHjkdQP2KT H0cAnAmv4acRDK7S6KsvQqVpwmFKSaAh =De88 -----END PGP SIGNATURE-----

1 0

Proposed new blocking criterion for Fedora Server: GSSAPI SSO via SSH
by Stephen Gallagher 06 Oct '15

06 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Currently, we have a number of blocking criterion in Fedora Server around domain membership that the machine must be able to join a domain and that a user must be able to log into the machine using standard login mechanisms (console, GDM, etc.). What we are lacking is a criterion specifying single-sign-on functionality, which is a key part of the domain experience. I'd like to propose that the following functionality be added as a Beta criterion from here forth: == Server Product Requirements == === Remote Authentication === * A user who signs in locally or via SSH to a Fedora Server joined to a FreeIPA or Active Directory domain using a supported domain-joining mechanism[1] must be capable of connecting via SSH to any other Fedora Server of the same version to which they have appropriate access privileges without being required to re-enter their password.[2] (Note: this assumes an "online" login; if the user logs in while disconnected from the authentication server, they may not be able to use SSO features without manual intervention.) * Single-sign-on capabilities must be available without any additional configuration by the user except the initial join to the domain. [1] This means realmd in the current implementation, which is the mechanism used under the hood by Cockpit. I'd recommend leaving out more manual methods like ipa-client-install, adcli and 'net ads'. [2] Under the hood, this means that the authentication negotiation should happen via GSSAPI. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYSygMACgkQeiVVYja6o6NUMwCgkNjoXxlGB6cyCZC3bkVJ1pNX +K4AoJn6Yg24djVWofsN5qr9AhGoBdDn =vY35 -----END PGP SIGNATURE-----

2 2

Rolekit Weekly Meeting Minutes (2015-10-06)
by Stephen Gallagher 06 Oct '15

06 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================== #fedora-server: rolekit (2015-10-06) ==================================== Meeting started by sgallagh at 13:01:15 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-server/2015-10-06/rolekitweekly. 2015-10-06-13.01.log.html . Meeting summary - --------------- * init process (sgallagh, 13:01:16) * Agenda (sgallagh, 13:04:08) * Agenda Item: Ticket Triage (sgallagh, 13:04:16) * https://github.com/libre-server/rolekit/issues/51 - Implement a CI test framework (sgallagh, 13:07:15) * AGREED: Continuous Integration/Deployment efforts will be a primary focus for the Fedora 24 schedule and we will try to collaborate on this with Fedora QA (+3, 0, -0) (sgallagh, 13:17:46) * Open Floor (sgallagh, 13:17:57) * LINK: https://www.reviewboard.org/docs/rbtools/dev/rbt/commands/post/#controll ing-guessing-behavior (sgallagh, 13:43:22) * LINK: https://github.com/reviewboard/rbtools (sgallagh, 13:55:48) Meeting ended at 14:01:22 UTC. Action Items - ------------ Action Items, by person - ----------------------- * **UNASSIGNED** * (none) People Present (lines said) - --------------------------- * sgallagh (94) * nilsph (52) * twoerner (27) * zodbot (7) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYT1GcACgkQeiVVYja6o6OfBACgsXUSex7j8rSj65cMfUzXr14S 9u0AoIdJRN3WU9OdeLOf3Ss8rO+aGqmc =gOoz -----END PGP SIGNATURE-----

1 0

Call for Agenda for Server SIG Weekly Meeting (2015-10-06)
by Stephen Gallagher 06 Oct '15

06 Oct '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I don't have any specific agenda items for this week. I'd like to see a response on the list to the proposed blocking criteria, but that doesn't require a meeting. We'll cancel unless anyone comes up with an urgent topic. Also, please find the time to test Fedora Server 23 TC1. We're about a week away from Final Freeze and it would be best if we knew about any show-stoppers early. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlYTy3EACgkQeiVVYja6o6NDbgCfWp6VzJh5tDUGL4bU+R8+Ffty DgEAmgNli2nB5dGOJfA1+QTsFsUdWkw6 =wPZf -----END PGP SIGNATURE-----

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

server October 2015