Trimming down the package set
by Stephen Gallagher
So, at DevConf over the weekend, I had a conversation with several
people around the package set that we should include on the Fedora
Server install media in Fedora 22.
When we put together the install media for Fedora 21, we basically took
the old Fedora 20 DVD install and stripped out some of the things we
didn't feel were necessary for the Server. However, I suspect that we
may have missed numerous things that are not *strictly* important for
Server.
In particular, the Fedora Server DVD includes the package groups for
many of the Fedora development tools (particularly those useful for
developing Fedora *itself*, such as the @fedora-packager group.
I don't currently have statistics on how much space this would save on
the installation DVD (since I would pretty much have to build one
without these packages to verify it), but I can get an approximate idea
of the difference by installing the minimal set of Server packages on
one VM and a set that includes the devel packages on another.
The result I see is:
== Standard Server Install ==
* 614 packages
* 1,097 MB on the installed system
== Server Install Plus Development Tools ==
* 716 packages
* 1496 MB on the installed system.
Even if we assume a (very) generous assumption that the RPM compression
reduces the size difference by 50%, we still see a probable savings of
200 MB on the install DVD.
So, my questions to the Server SIG:
1) Is this savings in the DVD ISO download size sufficiently significant
to continue this conversation?
2) Does anyone see any value in keeping this material *on the DVD*?
Obviously, all of these packages will remain available to the network
install or post-installation environments.
For those who are interested in minutiae, I am attaching the current
fedora-install-server.ks file that is used to generate the DVD. If you
see anything else there that might be worth including in this
discussion, I'm all ears.
8 years, 5 months
Password policy changes
by Adam Williamson
Hey, folks. I'm writing with my Server SIG member hat on, here. We've
been discussing password policy changes at our meeting today.
So the Great Password Policy Bunfight of 2015 was resolved by anaconda
creating a mechanism for products/spins to set their own password
policy:
https://github.com/rhinstaller/anaconda/commit/8f24eeaedd7691b6ebe119592e...
I'm slightly worried, however, about the possibility that everyone
goes out and picks a more lenient policy more or less at random and we
wind up with different policies on every Fedora medium. That seems
like it'd be needlessly confusing to users and difficult to document.
I'm wondering if those products/spins intending to set a policy weaker
than the default could all agree on the same one, so there'd only be
at most two policies to care about (and if all products/spins overrode
the upstream default, there'd only be one).
The obvious choice would be the pre-F22 policy, which I believe should
be:
--nostrict --minlen=6 --minquality=50 --nochanges --emptyok
(though it's not *entirely* clear from the code - I think it used
pwquality upstream defaults - so I may be a bit off).
What's the general feeling here? Have other SIGs discussed this yet?
Come to any decisions? Thanks!
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
8 years, 5 months
[Testing Needed] rolekit-0.3.0-1.fc22
by Stephen Gallagher
https://admin.fedoraproject.org/updates/rolekit-0.3.0-1.fc22
Defying even my own expectations, we've released rolekit 0.3.0 today
with full multiple-instancing support. I'd really like for this to end
up in the Fedora 22 Beta which freezes on Tuesday morning, so if
anyone who is willing can please download the Fedora 22 Server TC5
that will be available in a few hours, update to rolekit-0.3.0 and try
it out, that would be a big help.
Some things to test:
== Database Server Role ==
* Install the first instance from a mostly pristine Server install.
* Install additional instance
* Install some instances with the default owner, others with a custom
one.
* Decommission them in random order.
* Ensure that they can be reached over TCP/IP sockets
== Domain Controller Role ==
No obvious regressions. This is unlikely, since we didn't touch the
Domain Controller role code and made only minor tweaks to the common
code.
8 years, 6 months
Server SIG Weekly Meeting Minutes (2015-03-31)
by Stephen Gallagher
=========================================================
#fedora-meeting-1: Server SIG Weekly Meeting (2015-03-31)
=========================================================
Meeting started by sgallagh at 15:01:31 UTC. The full logs are
available
at
http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-31/fedora-meeti...
.
Meeting summary
---------------
* roll call (sgallagh, 15:01:32)
* Agenda (sgallagh, 15:07:02)
* Agenda Item: F22 Beta Freeze (sgallagh, 15:07:02)
* Agenda Item: Rolekit Testing (sgallagh, 15:07:02)
* F22 Beta Freeze (sgallagh, 15:08:05)
* TC6 is lacking content from the last stable updates push
(sgallagh,
15:14:40)
* TC6 does not include the pwpolicy changes yet (sgallagh, 15:14:53)
* The addition of dnf-yum was broken on TC6 (sgallagh, 15:15:16)
* Rolekit Testing (sgallagh, 15:18:23)
* Testing help needed on rolekit, test plan at
https://lists.fedoraproject.org/pipermail/server/2015-March/001795.html
(sgallagh, 15:21:39)
* rolekit test examples at
https://lists.fedoraproject.org/pipermail/server/2015-March/001797.html
(sgallagh, 15:22:08)
* Open Floor (sgallagh, 15:24:52)
* getfedora.org updates (sgallagh, 15:29:15)
* highlight DB role (mizmo, 15:29:49)
* update cockpit screenshots (mizmo, 15:29:56)
* consider rolekit visualization (mizmo, 15:32:25)
* solicit new quotes for server page (mizmo, 15:33:23)
* quote: andreasn from the Cockpit team to quote on the Domain
Controller role, since he had an excellent experience with it
(mizmo, 15:35:28)
* Open Floor (take two) (sgallagh, 15:39:44)
Meeting ended at 15:43:28 UTC.
Action Items
------------
Action Items, by person
-----------------------
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* sgallagh (63)
* junland (23)
* mizmo (19)
* zodbot (8)
* nirik (4)
* simo (4)
* Corey84 (1)
* adamw (0)
* mitr (0)
* stefw (0)
* danofsatx (0)
* tuanta (0)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
8 years, 6 months
Re: Review Request 150: Define the password policy for the interactive installer
by Stephen Gallagher
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
http://reviewboard-fedoraserver.rhcloud.com/r/150/
-----------------------------------------------------------
(Updated March 25, 2015, 1:12 p.m.)
Review request for Server SIG.
Changes
-------
Set the reviewer to the Server SIG
Repository: fedora-productimg-server
Description
-------
- Reorganize some of the paths into %globals for easier updating
Diffs
-----
fedora-productimg-server.spec 2c126d01d9939d50f626ed69717325e7b58fe31f
interactive-defaults.ks PRE-CREATION
Diff: http://reviewboard-fedoraserver.rhcloud.com/r/150/diff/
Testing
-------
Testing has been limited due to anaconda packages not being available for testing. The version currently in F22 hasn't been built with this support and Rawhide crashes on unrelated issues.
Full testing will be done on Friday.
Thanks,
Stephen Gallagher
8 years, 6 months
Server SIG Weekly Meeting Minutes (2015-03-24)
by Stephen Gallagher
=========================================================
#fedora-meeting-1: Server SIG Weekly Meeting (2015-03-24)
=========================================================
Meeting started by sgallagh at 15:00:30 UTC. The full logs are available
at
http://meetbot.fedoraproject.org/fedora-meeting-1/2015-03-24/fedora-meeti...
.
Meeting summary
---------------
* roll call (sgallagh, 15:00:31)
* Agenda (sgallagh, 15:03:18)
* Agenda Item: Anaconda Password Policy (sgallagh, 15:03:30)
* Anaconda Password Policy (sgallagh, 15:05:48)
* LINK: https://bugzilla.redhat.com/show_bug.cgi?id=1191842#c14
(sgallagh, 15:06:06)
* ACTION: adamw to email other products to try to unify the pwpolicy
change (sgallagh, 15:16:17)
* LINK:
https://fedoraproject.org/wiki/User:Kevin/Draft_Passwordpolicy
(nirik, 15:21:36)
* LINK: http://www.oxforddictionaries.com/definition/english/bunfight
(adamw, 15:38:09)
* AGREED: The password policy will be "--nostrict --minlen=6
--minquality=50 --nochanges --emptyok" for root, user and luks
(sgallagh, 15:39:12)
* ACTION: sgallagh to update fedora-productimg-server with the agreed
defaults. (sgallagh, 15:42:08)
* Open Floor (sgallagh, 15:42:57)
* LINK: http://reviewboard-fedoraserver.rhcloud.com/dashboard/
(sgallagh, 15:44:40)
* Help needed in reviewing rolekit database server patches
(sgallagh,
15:44:53)
* ACTION: adamw and danofsatx to review the database server patches
at
their convenience (sgallagh, 15:47:27)
Meeting ended at 15:49:32 UTC.
Action Items
------------
* adamw to email other products to try to unify the pwpolicy change
* sgallagh to update fedora-productimg-server with the agreed defaults.
* adamw and danofsatx to review the database server patches at their
convenience
Action Items, by person
-----------------------
* adamw
* adamw to email other products to try to unify the pwpolicy change
* adamw and danofsatx to review the database server patches at their
convenience
* danofsatx
* adamw and danofsatx to review the database server patches at their
convenience
* sgallagh
* sgallagh to update fedora-productimg-server with the agreed
defaults.
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* sgallagh (99)
* mizmo (47)
* adamw (45)
* simo (38)
* nirik (37)
* danofsatx (14)
* zodbot (10)
* stefw (7)
* junland (3)
* masta (1)
* mitr (0)
* tuanta (0)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
8 years, 6 months
Regrets not attending today meeting
by Truong Anh Tuan
Hi there,
I got a bad headache then I want to go to bed earlier; so I could not
attend today meeting, sorry.
I will read the meeting minutes later.
Rgds,
Tuan
8 years, 6 months