From mmcgrath at redhat.com Tue May 1 00:10:51 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 30 Apr 2007 19:10:51 -0500 Subject: [Fwd: Host DOWN alert for fedoraproject.org!] Message-ID: <4636858B.4060805@redhat.com> FYI guys, these are false positives, I've been load testing app2. It hasn't been surviving all the time. -Mike -------------- next part -------------- An embedded message was scrubbed... From: nagios at fedoraproject.org Subject: Host DOWN alert for fedoraproject.org! Date: Mon, 30 Apr 2007 17:09:12 -0700 Size: 2000 URL: From notting at redhat.com Tue May 1 04:17:16 2007 From: notting at redhat.com (Bill Nottingham) Date: Tue, 1 May 2007 00:17:16 -0400 Subject: Need for Extras -> Koji import In-Reply-To: <200704301548.16987.jkeating@redhat.com> References: <200704301548.16987.jkeating@redhat.com> Message-ID: <20070501041716.GB11331@nostromo.devel.redhat.com> Jesse Keating (jkeating at redhat.com) said: > I thought we had a python snippit somewhere for dealing with owners.list. > Does one exist or will I have to recreate one? /cvs/extras/CVSROOT/admin/owners.py. Dunno if it's useful for what you want. Bill From peter at ourvirtualhome.com Tue May 1 17:21:12 2007 From: peter at ourvirtualhome.com (Peter van der Does) Date: Tue, 01 May 2007 13:21:12 -0400 Subject: Infrastructure projects. In-Reply-To: <200704301522.21652.jkeating@redhat.com> References: <463667F5.7030105@ourvirtualhome.com> <200704301522.21652.jkeating@redhat.com> Message-ID: <46377708.4050703@ourvirtualhome.com> Jesse Keating wrote: > On Monday 30 April 2007 15:04:37 Peter van der Does wrote: >> Where is >> help needed? > > The git and mercurial plugins to Trac could use lots of improvement/polish. > There are many things that are not implemented and nothing much is going on > upstream. > As I don't have experience with Python I don't think I can be of much help with this. -- Peter van der Does YIM: petervanderdoes at yahoo.com -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 252 bytes Desc: OpenPGP digital signature URL: From mmcgrath at redhat.com Tue May 1 18:13:11 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 01 May 2007 13:13:11 -0500 Subject: Infrastructure projects. In-Reply-To: <46377708.4050703@ourvirtualhome.com> References: <463667F5.7030105@ourvirtualhome.com> <200704301522.21652.jkeating@redhat.com> <46377708.4050703@ourvirtualhome.com> Message-ID: <46378337.8000208@redhat.com> Peter van der Does wrote: > Jesse Keating wrote: > >> On Monday 30 April 2007 15:04:37 Peter van der Does wrote: >> >>> Where is >>> help needed? >>> >> The git and mercurial plugins to Trac could use lots of improvement/polish. >> There are many things that are not implemented and nothing much is going on >> upstream. >> >> > > As I don't have experience with Python I don't think I can be of much > help with this. > > Would you be willing / able to set up moin at home using mod_python and run some tests for me? -Mike From peter at ourvirtualhome.com Tue May 1 19:22:15 2007 From: peter at ourvirtualhome.com (Peter van der Does) Date: Tue, 01 May 2007 15:22:15 -0400 Subject: Infrastructure projects. In-Reply-To: <46378337.8000208@redhat.com> References: <463667F5.7030105@ourvirtualhome.com> <200704301522.21652.jkeating@redhat.com> <46377708.4050703@ourvirtualhome.com> <46378337.8000208@redhat.com> Message-ID: <46379367.1070704@ourvirtualhome.com> Mike McGrath wrote: > Peter van der Does wrote: >> Jesse Keating wrote: >> >>> On Monday 30 April 2007 15:04:37 Peter van der Does wrote: >>> >>>> Where is >>>> help needed? >>>> >>> The git and mercurial plugins to Trac could use lots of >>> improvement/polish. There are many things that are not implemented >>> and nothing much is going on upstream. >>> >>> >> >> As I don't have experience with Python I don't think I can be of much >> help with this. >> >> > > Would you be willing / able to set up moin at home using mod_python and > run some tests for me? > Sure, not a problem. -- Peter van der Does YIM: petervanderdoes at yahoo.com -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 252 bytes Desc: OpenPGP digital signature URL: From wtogami at redhat.com Wed May 2 06:52:01 2007 From: wtogami at redhat.com (Warren Togami) Date: Wed, 02 May 2007 02:52:01 -0400 Subject: CVS Merge Compare Logic and Commentary Message-ID: <46383511.3070802@redhat.com> http://fedoraproject.org/wiki/Infrastructure/CoreExtrasCVSMerge I made some improvements to notting's script from this page. A few thoughts went into this... 1) At notting's recommendation the script only looks at /cvs/dist packages that exist as source RPM %{name} in rawhide. 2) The FC-6 specific logic was removed, because it is actually irrelevant. We are dealing with merging of only 'devel' on Wednesday. The script tells you with WARN statements if a package is clearly moved from Extras to Core, or if it is ambiguous because dead.package was never added during the move. Upon inspection a decision can be made manually. This script can be easily reused to do the same by comparing FC-6 to FC-6 when we merge FC-6 into /cvs/pkgs later. 3) Some packages may have moved from Core to Extras during this cycle. The package in /cvs/dist might not be properly marked with dead.package. But this is OK, because these would have been excluded from this copy list because they were not packages in rawhide anyway. 4) A few of the WARN DEVEL errors can be fixed even prior to the merge. 5) The less serious WARN MOVED messages, you might even be safe just blanket blowing away the existing /cvs/extras/rpms/$i/devel and replacing it with the /cvs/dist version. I am uncertain about this at this late hour though. Sleeping... # http://people.redhat.com/wtogami/temp/rawhide-srpm-names.txt SRPMLIST=rawhide-srpm-names.txt for i in `cat $SRPMLIST` ; do # Skip and warn if devel is a dead.package (SANITY CHECK) if [ -f /cvs/dist/rpms/$i/devel/dead.package,v ]; then echo "SANITY DEAD: $i is a package in rawhide, but marked as dead.package in /cvs/dist" continue; fi ; # Skip if devel directory does not exist (SANITY CHECK) if [ ! -d /cvs/dist/rpms/$i/devel ]; then echo "SANITY MISSING: $i/devel does not exist, skipping..." continue; fi ; # If devel exists in both Core and Extras, figure out why if [ -d /cvs/extras/rpms/$i/devel ]; then if [ -f /cvs/extras/rpms/$i/devel/dead.package,v ]; then # Package moved from FE to FC, you might be able to erase FE and replace it with FC echo "WARN MOVED: $i moved from FE to FC" else # Package was moved, but improperly marked, investigate carefully echo "WARN DEVEL: $i is alive in both FC and FE devel, investigate" fi else # No conflicts, proceed with copying echo /usr/local/bin/setup_package $i echo mkdir -p /cvs/extras/rpms/$i/devel ; echo cp -rv $i/devel/* /cvs/extras/rpms/$i/devel ; fi done | tee cvscopy.out From kelsey at kelseyhightower.net Wed May 2 22:23:42 2007 From: kelsey at kelseyhightower.net (Kelsey Hightower) Date: Wed, 2 May 2007 18:23:42 -0400 (EDT) Subject: Ready to learn, and contribute. Message-ID: <45760.192.168.1.35.1178144622.webmail@192.168.1.35> Hello, My name is Kelsey Hightower, I am 26 years old and in live in downtown Atlanta, GA. I am a freelance IT consultant and plan to go completely open source. I am studying to take my RHCE and LPIC certs in the next couple of months. I have a huge interest in RedHat based distros and the idea of free software. I have some experience in automating tasks using BASH, but really want to learn Python and C. I have some books, time, and wiliness to learn. I have 2 years experience supporting Linux in some form or fashion, and a good bit of experience in configuring networks. Well I am here to help do my part as a free software citizen and learn all that I can. From mmcgrath at redhat.com Wed May 2 22:27:51 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 02 May 2007 17:27:51 -0500 Subject: Ready to learn, and contribute. In-Reply-To: <45760.192.168.1.35.1178144622.webmail@192.168.1.35> References: <45760.192.168.1.35.1178144622.webmail@192.168.1.35> Message-ID: <46391067.5070907@redhat.com> Kelsey Hightower wrote: > Hello, > > My name is Kelsey Hightower, I am 26 years old and in live in downtown Atlanta, GA. I am a freelance IT consultant and plan to go completely open source. I am studying to take my RHCE and LPIC certs in the next couple of months. > > I have a huge interest in RedHat based distros and the idea of free software. I have some experience in automating tasks using BASH, but really want to learn Python and C. I have some books, time, and wiliness to learn. > > I have 2 years experience supporting Linux in some form or fashion, and a good bit of experience in configuring networks. > > Well I am here to help do my part as a free software citizen and learn all that I can. > Welcome, if you can make sure you attend tomorrows meeting: http://fedoraproject.org/wiki/Infrastructure/Meetings -Mike From mmcgrath at redhat.com Mon May 7 00:30:37 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Sun, 06 May 2007 19:30:37 -0500 Subject: cacti public Message-ID: <463E732D.104@redhat.com> So I changed cacti to use cacti internal auth (instead of http auth). So its public now: https://admin.fedoraproject.org/cacti/graph_view.php The bad news is I have to create users individually now in cacti. If you need access to alter things just let me know and I'll get you set up. -Mike From jonathansteffan at gmail.com Mon May 7 02:55:53 2007 From: jonathansteffan at gmail.com (Jonathan Steffan) Date: Sun, 06 May 2007 20:55:53 -0600 Subject: cacti public In-Reply-To: <463E732D.104@redhat.com> References: <463E732D.104@redhat.com> Message-ID: <463E9539.70505@gmail.com> Cool. Please note the only time I have ever had an issue with the security of any of my Fedora/RHEL servers was when running cacti. Jon Mike McGrath wrote: > So I changed cacti to use cacti internal auth (instead of http auth). > So its public now: > > https://admin.fedoraproject.org/cacti/graph_view.php > > The bad news is I have to create users individually now in cacti. If > you need access to alter things just let me know and I'll get you set up. > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > From dfurlong at dark-hill.co.uk Mon May 7 12:33:10 2007 From: dfurlong at dark-hill.co.uk (Douglas Furlong) Date: Mon, 07 May 2007 12:33:10 +0000 Subject: cacti public In-Reply-To: <463E732D.104@redhat.com> References: <463E732D.104@redhat.com> Message-ID: <1178541190.4558.0.camel@localhost.localdomain> On Sun, 2007-05-06 at 19:30 -0500, Mike McGrath wrote: > So I changed cacti to use cacti internal auth (instead of http auth). > So its public now: > > https://admin.fedoraproject.org/cacti/graph_view.php > > The bad news is I have to create users individually now in cacti. If > you need access to alter things just let me know and I'll get you set up. Heyah Can you give me access? Cheers Doug -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From mmcgrath at redhat.com Mon May 7 15:12:30 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 07 May 2007 10:12:30 -0500 Subject: cacti public In-Reply-To: <463E9539.70505@gmail.com> References: <463E732D.104@redhat.com> <463E9539.70505@gmail.com> Message-ID: <463F41DE.4060407@redhat.com> Jonathan Steffan wrote: > Cool. Please note the only time I have ever had an issue with the > security of any of my Fedora/RHEL servers was when running cacti. I know what you mean, perhaps it's time to implement mod_security? -Mike From wilmer at fedoraproject.org Mon May 7 16:02:16 2007 From: wilmer at fedoraproject.org (Wilmer Jaramillo M.) Date: Mon, 7 May 2007 12:02:16 -0400 Subject: cacti public In-Reply-To: <463E732D.104@redhat.com> References: <463E732D.104@redhat.com> Message-ID: <2b26c4260705070902j7e816a4apf6b56989016d17c6@mail.gmail.com> On 5/6/07, Mike McGrath wrote: > So I changed cacti to use cacti internal auth (instead of http auth). > So its public now: > > https://admin.fedoraproject.org/cacti/graph_view.php Why in instead cacti should used http://www.zenoss.com/ ? -- Wilmer Jaramillo M. GPG Key Fingerprint = 0666 D0D3 24CE 8935 9C24 BBF1 87DD BEA2 A4B2 1E8A From mmcgrath at redhat.com Mon May 7 16:06:37 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 07 May 2007 11:06:37 -0500 Subject: cacti public In-Reply-To: <2b26c4260705070902j7e816a4apf6b56989016d17c6@mail.gmail.com> References: <463E732D.104@redhat.com> <2b26c4260705070902j7e816a4apf6b56989016d17c6@mail.gmail.com> Message-ID: <463F4E8D.40204@redhat.com> Wilmer Jaramillo M. wrote: > > Why in instead cacti should used http://www.zenoss.com/ ? AFAIK, zenoss isn't in Fedora yet. -Mike From nils at breun.nl Mon May 7 16:11:15 2007 From: nils at breun.nl (Nils Breunese) Date: Mon, 07 May 2007 18:11:15 +0200 Subject: cacti public In-Reply-To: <463F4E8D.40204@redhat.com> References: <463E732D.104@redhat.com> <2b26c4260705070902j7e816a4apf6b56989016d17c6@mail.gmail.com> <463F4E8D.40204@redhat.com> Message-ID: <463F4FA3.50609@breun.nl> Mike McGrath wrote: > Wilmer Jaramillo M. wrote: >> >> Why in instead cacti should used http://www.zenoss.com/ ? > > AFAIK, zenoss isn't in Fedora yet. I believe Scott over at atomicrocketturtle.com was looking into packaging Zenoss, but found the code was pretty messy. Binaries in source rpms, different source rpms for different distributions... I believe there is some work to do there. But it looks like a pretty nice monitoring solution. I use ZABBIX myself. Nils Breunese. From jkeating at redhat.com Mon May 7 16:24:12 2007 From: jkeating at redhat.com (Jesse Keating) Date: Mon, 7 May 2007 12:24:12 -0400 Subject: cacti public In-Reply-To: <463F4FA3.50609@breun.nl> References: <463E732D.104@redhat.com> <463F4E8D.40204@redhat.com> <463F4FA3.50609@breun.nl> Message-ID: <200705071224.12515.jkeating@redhat.com> On Monday 07 May 2007 12:11:15 Nils Breunese wrote: > I believe Scott over at atomicrocketturtle.com was looking into > packaging Zenoss, but found the code was pretty messy. Binaries in > source rpms, different source rpms for different distributions... I > believe there is some work to do there. But it looks like a pretty nice > monitoring solution. I use ZABBIX myself. IIRC much of this was cleaned up as Zenoss is going to be in RHX (Red Hat eXchange) and thus they had to clean up their packaging a LOT. It would be worth looking at again. I sat in their presentation at Linux Fest Northwest and it was really good stuff, and I had some talks with their PR and lead technical folks, they're really excited to get into Fedora. The only down side is that they use plone, and that's a no-go for F7 right now. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From sundaram at fedoraproject.org Mon May 7 16:25:21 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Mon, 07 May 2007 21:55:21 +0530 Subject: cacti public In-Reply-To: <200705071224.12515.jkeating@redhat.com> References: <463E732D.104@redhat.com> <463F4E8D.40204@redhat.com> <463F4FA3.50609@breun.nl> <200705071224.12515.jkeating@redhat.com> Message-ID: <463F52F1.9060507@fedoraproject.org> Jesse Keating wrote: > On Monday 07 May 2007 12:11:15 Nils Breunese wrote: >> I believe Scott over at atomicrocketturtle.com was looking into >> packaging Zenoss, but found the code was pretty messy. Binaries in >> source rpms, different source rpms for different distributions... I >> believe there is some work to do there. But it looks like a pretty nice >> monitoring solution. I use ZABBIX myself. > > IIRC much of this was cleaned up as Zenoss is going to be in RHX (Red Hat > eXchange) and thus they had to clean up their packaging a LOT. It would be > worth looking at again. > > I sat in their presentation at Linux Fest Northwest and it was really good > stuff, and I had some talks with their PR and lead technical folks, they're > really excited to get into Fedora. > > The only down side is that they use plone, and that's a no-go for F7 right > now. Maybe they are willing to put in the effort to make Plone work with Python 2.5 and maintain zenoss in Fedora? Doesn't hurt to use the contacts and ask. Rahul From jkeating at redhat.com Mon May 7 16:29:04 2007 From: jkeating at redhat.com (Jesse Keating) Date: Mon, 7 May 2007 12:29:04 -0400 Subject: cacti public In-Reply-To: <463F52F1.9060507@fedoraproject.org> References: <463E732D.104@redhat.com> <200705071224.12515.jkeating@redhat.com> <463F52F1.9060507@fedoraproject.org> Message-ID: <200705071229.04657.jkeating@redhat.com> On Monday 07 May 2007 12:25:21 Rahul Sundaram wrote: > Maybe they are willing to put in the effort to make Plone work with > Python 2.5 and maintain zenoss in Fedora? Doesn't hurt to use the > contacts and ask. I already informed them of the situation. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From jonathansteffan at gmail.com Mon May 7 18:09:38 2007 From: jonathansteffan at gmail.com (Jonathan Steffan) Date: Mon, 07 May 2007 12:09:38 -0600 Subject: cacti public In-Reply-To: <200705071229.04657.jkeating@redhat.com> References: <463E732D.104@redhat.com> <200705071224.12515.jkeating@redhat.com> <463F52F1.9060507@fedoraproject.org> <200705071229.04657.jkeating@redhat.com> Message-ID: <463F6B62.70905@gmail.com> I've looked at http://www.zenoss.com/ when Jesse mentioned it on IRC. I want to use it and if it needs to be packaged.... I suppose I will look at how much work it would be. Jesse Keating wrote: > On Monday 07 May 2007 12:25:21 Rahul Sundaram wrote: > >> Maybe they are willing to put in the effort to make Plone work with >> Python 2.5 and maintain zenoss in Fedora? Doesn't hurt to use the >> contacts and ask. >> > > I already informed them of the situation. > Oh, you mean the situation where we have no support for Zope, and now no support for Plone and... oh, we find another neat software that runs on Zope and it wont work? ;-) Just kidding. I'll report back about what I think it will take to package this in sort time. Jonathan From mmcgrath at redhat.com Mon May 7 20:28:31 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 07 May 2007 15:28:31 -0500 Subject: motd+puppet Message-ID: <463F8BEF.6070901@redhat.com> I'm going to deploy some sort of motd on the servers using puppet today. Mostly just so people that log in understand how puppet works and to remind them that their changes will go away unless done properly. This has slight risk of breaking scripts. Particularly ones running over ssh. Let me know if anyone sees something... odd. -Mike From tchung at fedoraproject.org Mon May 7 20:42:24 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Mon, 7 May 2007 13:42:24 -0700 Subject: motd+puppet In-Reply-To: <463F8BEF.6070901@redhat.com> References: <463F8BEF.6070901@redhat.com> Message-ID: <369bce3b0705071342maca01au5cd5c49c8b1b4f09@mail.gmail.com> On 5/7/07, Mike McGrath wrote: > I'm going to deploy some sort of motd on the servers using puppet > today. Mostly just so people that log in understand how puppet works > and to remind them that their changes will go away unless done properly. > > This has slight risk of breaking scripts. Particularly ones running > over ssh. Let me know if anyone sees something... odd. > > -Mike > Cool. I see it now. :) ==================ATTENTION ======================== This is a PRIVATE computer system, unauthorized access is strictly prohibited. This system is to be used for Fedora Project and related purposes only. This is not your personal computing system. Users who are unsure whether or not they have access to this system, don't have it and should log off immediately. There is no expectation of privacy of any kind on this system. All questions concerning access should be directed to admin at fedoraproject.org ================================================== This system is puppet managed! Local changes may be overwritten: http://fedoraproject.org/wiki/Infrastructure/Puppet/QuickStart -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From wtogami at redhat.com Tue May 8 17:03:55 2007 From: wtogami at redhat.com (Warren Togami) Date: Tue, 08 May 2007 13:03:55 -0400 Subject: Red Hat Summer Internship Job: Python Web Programming Message-ID: <4640AD7B.2070402@redhat.com> http://wtogami.livejournal.com/16659.html Red Hat Summer Internship Job: Python Web Programming From mmcgrath at redhat.com Tue May 8 17:29:46 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 08 May 2007 12:29:46 -0500 Subject: Xen and network issues. Message-ID: <4640B38A.2020303@redhat.com> We've got issues. Many of our xen guests are experiencing tcp checksum corruption. Research on the net suggests ethtool -K eth0 tx off will fix the issue but it hasn't in our case. I've tried the koji guest on many physical hosts, same issue. It's been on two FC6 dom0 hosts and a RHEL5 dom0 host. For now I'm going to stick koji on app1 as a physical host. Just because that box has gotten to the point where it becomes unusable and we cannot have that happening right now. I've contacted some internal xen developers, some guys in ##xen on freenode and the Fedora-xen list. Anyone who is able I'd encourage you to take a look as well. Simple test: "tcpdump -vvv | grep incomplete" You'll see: 06:34:20.135530 IP (tos 0x0, ttl 64, id 39370, offset 0, flags [DF], proto: TCP (6), length: 40) nat-pool.fedora.phx.redhat.com.49457 > publictest8.fedora.phx.redhat.com.http: P, cksum 0x76af (incorrect (-> 0x6100), 601:601(0) ack 6801 win 597 -Mike From mgalgoci at redhat.com Tue May 8 17:38:24 2007 From: mgalgoci at redhat.com (Matthew Galgoci) Date: Tue, 8 May 2007 13:38:24 -0400 Subject: Xen and network issues. In-Reply-To: <4640B38A.2020303@redhat.com> References: <4640B38A.2020303@redhat.com> Message-ID: > I've contacted some internal xen developers, some guys in ##xen on freenode > and the Fedora-xen list. Anyone who is able I'd encourage you to take a look > as well. Simple test: > > "tcpdump -vvv | grep incomplete" > > You'll see: > 06:34:20.135530 IP (tos 0x0, ttl 64, id 39370, offset 0, flags [DF], proto: > TCP (6), length: 40) nat-pool.fedora.phx.redhat.com.49457 > > publictest8.fedora.phx.redhat.com.http: P, cksum 0x76af (incorrect (-> > 0x6100), 601:601(0) ack 6801 win 597 Try that again setting the snaplen to the maximum size (0), eg: tcpdump -s0 -vvv -- Matthew Galgoci GIS Production Operations Red Hat, Inc 919.754.3700 x44155 From mmcgrath at redhat.com Tue May 8 17:55:59 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 08 May 2007 12:55:59 -0500 Subject: Xen and network issues. In-Reply-To: References: <4640B38A.2020303@redhat.com> Message-ID: <4640B9AF.1010504@redhat.com> Matthew Galgoci wrote: > > Try that again setting the snaplen to the maximum size (0), eg: > > tcpdump -s0 -vvv > > same: 10:54:31.874984 IP (tos 0x0, ttl 64, id 19818, offset 0, flags [DF], proto: TCP (6), length: 40) nat-pool.fedora.phx.redhat.com.dtserver-port > publictest8.fedora.phx.redhat.com.http: P, cksum 0x4477 (incorrect (-> 0x7eb7), 1:1(0) ack 2720 win 2006 From wtogami at redhat.com Tue May 8 19:21:47 2007 From: wtogami at redhat.com (Warren Togami) Date: Tue, 08 May 2007 15:21:47 -0400 Subject: Xen and network issues. In-Reply-To: <4640B38A.2020303@redhat.com> References: <4640B38A.2020303@redhat.com> Message-ID: <4640CDCB.7020002@redhat.com> Mike McGrath wrote: > We've got issues. Many of our xen guests are experiencing tcp checksum > corruption. Research on the net suggests ethtool -K eth0 tx off will > fix the issue but it hasn't in our case. I've tried the koji guest on > many physical hosts, same issue. It's been on two FC6 dom0 hosts and a > RHEL5 dom0 host. > For now I'm going to stick koji on app1 as a physical host. Just > because that box has gotten to the point where it becomes unusable and > we cannot have that happening right now. > > I've contacted some internal xen developers, some guys in ##xen on > freenode and the Fedora-xen list. Anyone who is able I'd encourage you > to take a look as well. Simple test: > > "tcpdump -vvv | grep incomplete" > > You'll see: > 06:34:20.135530 IP (tos 0x0, ttl 64, id 39370, offset 0, flags [DF], > proto: TCP (6), length: 40) nat-pool.fedora.phx.redhat.com.49457 > > publictest8.fedora.phx.redhat.com.http: P, cksum 0x76af (incorrect (-> > 0x6100), 601:601(0) ack 6801 win 597 > If worse comes to worse I know a workaround for this that eliminates the problem, but also adds a bit more inconvenience. It involves creating a private NAT network on each Xen host, with the extra real IP on the hosts real ethernet device, and NAT. Warren From Matt_Domsch at dell.com Wed May 9 20:18:47 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Wed, 9 May 2007 15:18:47 -0500 Subject: mirrors.fp.o DNS change coming Message-ID: <20070509201846.GA13954@lists.us.dell.com> I think we're ready to switch mirrors.fp.o from fpserv to the PHX infrastructure with mirrormanger as the back end. For those interested in trying it out, put into /etc/hosts: 209.132.176.120 mirrors.fedoraproject.org then hit http://mirrors.fedoraproject.org/publiclist/ and subpages for the list of mirrors by country and content and /etc/yum.repos.d/*.repo files should hit mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=core-6&arch=i386 or similar (the default lines should be fine) Let me know if you run into any troubles. Thanks, Matt Fedora Mirror Wranger mdomsch in #fedora-admin on FreeNode -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From bugs.michael at gmx.net Thu May 10 09:41:31 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Thu, 10 May 2007 11:41:31 +0200 Subject: python-kid on buildsys server In-Reply-To: <20070405172331.46ee0fec.bugs.michael@gmx.net> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> Message-ID: <20070510114131.f1fb6c50.bugs.michael@gmx.net> On Thu, 5 Apr 2007 17:23:31 +0200, Michael Schwendt wrote: > > > So, what is the formal procedure for requesting a package update on the > > > buildsys server like described above and getting an official and final > > > reply? > > > > > Get someone upstream (RHEL) to accept the package changes. buildsys is > > going away in days anyway after koji goes live. > > > > -Mike > > The package is not in RHEL and not in CentOS either. It is the Fedora > package built for CentOS. > > Luke Macken's updates system also uses python-kid, and would benefit > from the minor version upgrade, too. Why is it so damned difficult to get a single package updated although I even provided the prepared rpms? This is turning into a negative experience for me. -- https://www.redhat.com/archives/fedora-infrastructure-list/2007-March/msg00164.html From oliver at linux-kernel.at Thu May 10 10:45:14 2007 From: oliver at linux-kernel.at (Oliver Falk) Date: Thu, 10 May 2007 12:45:14 +0200 Subject: Did I kill Wiki Message-ID: <4642F7BA.7070103@linux-kernel.at> Hi! I uploaded my presentation from Tuesday to fedoraproject.org, but my wiki page /wiki/OliverFalk didn't open afterwards; So I tried to delete it, but now Wiki is no longer responding - not even the startpage. Sorry, if I killed it! :-( Can someone have a look and fix it!? -of From skvidal at linux.duke.edu Thu May 10 12:59:14 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Thu, 10 May 2007 08:59:14 -0400 Subject: wiki offline this morning Message-ID: <1178801954.3862.24.camel@rivendell> Hey, wiki went away this morning - test2 was unhappy. oom-killer had gone wild - saying there was 0 swap available. I couldn't even login. So I connected to xen5 and bounced it. It appears to be up now but I just wanted to let folks know what was going on. -sv From mmcgrath at redhat.com Thu May 10 14:14:41 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 10 May 2007 09:14:41 -0500 Subject: python-kid on buildsys server In-Reply-To: <20070510114131.f1fb6c50.bugs.michael@gmx.net> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> <20070510114131.f1fb6c50.bugs.michael@gmx.net> Message-ID: <464328D1.1080707@redhat.com> Michael Schwendt wrote: > On Thu, 5 Apr 2007 17:23:31 +0200, Michael Schwendt wrote: > > > Why is it so damned difficult to get a single package updated although > I even provided the prepared rpms? This is turning into a negative > experience for me. > > Oh I don't know 1) Its not actually causing problems for people 2) It means we have to alter the OS with a non-standard RPM. -Mike From mmcgrath at redhat.com Thu May 10 14:15:50 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 10 May 2007 09:15:50 -0500 Subject: Did I kill Wiki In-Reply-To: <4642F7BA.7070103@linux-kernel.at> References: <4642F7BA.7070103@linux-kernel.at> Message-ID: <46432916.8050300@redhat.com> Oliver Falk wrote: > Hi! > > I uploaded my presentation from Tuesday to fedoraproject.org, but my > wiki page /wiki/OliverFalk didn't open afterwards; So I tried to > delete it, but now Wiki is no longer responding - not even the startpage. how big was your presentation? (This shouldn't have killed it but I thought I'd ask) -Mike From oliver at linux-kernel.at Thu May 10 14:16:19 2007 From: oliver at linux-kernel.at (Oliver Falk) Date: Thu, 10 May 2007 16:16:19 +0200 Subject: Did I kill Wiki In-Reply-To: <46432916.8050300@redhat.com> References: <4642F7BA.7070103@linux-kernel.at> <46432916.8050300@redhat.com> Message-ID: <46432933.8070100@linux-kernel.at> On 05/10/2007 04:15 PM, Mike McGrath wrote: > Oliver Falk wrote: >> Hi! >> >> I uploaded my presentation from Tuesday to fedoraproject.org, but my >> wiki page /wiki/OliverFalk didn't open afterwards; So I tried to >> delete it, but now Wiki is no longer responding - not even the startpage. > > how big was your presentation? (This shouldn't have killed it but I > thought I'd ask) ~30 MB. -of From mmcgrath at redhat.com Thu May 10 14:19:05 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 10 May 2007 09:19:05 -0500 Subject: python-kid on buildsys server In-Reply-To: <46150863.2050400@redhat.com> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> Message-ID: <464329D9.3060600@redhat.com> Mike McGrath wrote: > Michael Schwendt wrote: >> On Tue, 27 Mar 2007 12:02:20 +0200, Michael Schwendt wrote: >> >> >>> On Mon, 26 Mar 2007 22:47:20 -0500, Mike McGrath wrote: >>> >>> >>>> Michael Schwendt wrote: >>>> >>>>> On Thu, 15 Mar 2007 22:08:12 +0100, Michael Schwendt wrote: >>>>> >>>>> >>>>>> $ rpm -q python-kid >>>>>> python-kid-0.9-2.centos4 >>>>>> >>>>>> on buildsys.fedoraproject.org would benefit from an update to >>>>>> 0.9.5 which >>>>>> includes xml related fixes and makes it possible to create pages >>>>>> that >>>>>> don't fail in the w3c validator. >>>>>> >>>>>> $ rpm -q --whatrequires python-kid >>>>>> repoview-0.5.1-1.centos4 >>>>>> >>>>> http://home.arcor.de/ms2002sep/tmp/el4-extras/noarch/python-kid-0.9.5-0.1.el4.noarch.rpm >>>>> >>>>> >>>>> Source rpms and build requirements here: >>>>> http://home.arcor.de/ms2002sep/tmp/el4-extras/ >>>>> >>>> I'm not sure I fully understand what problem this solves. Can you >>>> give me an example? >>>> >>> Sure. It's >>> >>> http://tinyurl.com/2pc37j >>> >>> versus >>> >>> http://tinyurl.com/2wdk5s >>> >>> The former was created with unmodified software on buildsys.f.o, >>> while the >>> latter was created with my modified repoview including an updated >>> python-kid. >>> >> >> So, what is the formal procedure for requesting a package update on the >> buildsys server like described above and getting an official and final >> reply? >> > Get someone upstream (RHEL) to accept the package changes. buildsys > is going away in days anyway after koji goes live. It's bad form to ignore one person and ask the same of others. We've said no. You didn't convince us. Sorry. You showed me that its creating mal-formed XML. It always has, no one has brought it up. I even gave you list of steps to do to get it updated. Exactly what issues is this causing you in your use of the buildsys? -Mike From bugs.michael at gmx.net Thu May 10 14:29:28 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Thu, 10 May 2007 16:29:28 +0200 Subject: python-kid on buildsys server In-Reply-To: <464328D1.1080707@redhat.com> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> <20070510114131.f1fb6c50.bugs.michael@gmx.net> <464328D1.1080707@redhat.com> Message-ID: <20070510162928.a1e28961.bugs.michael@gmx.net> On Thu, 10 May 2007 09:14:41 -0500, Mike McGrath wrote: > > On Thu, 5 Apr 2007 17:23:31 +0200, Michael Schwendt wrote: > > > > > > Why is it so damned difficult to get a single package updated although > > I even provided the prepared rpms? This is turning into a negative > > experience for me. > > > > > > Oh I don't know > 1) Its not actually causing problems for people Why do I need to repeat it again? It creates bad html pages for repoview, which don't pass the w3c validator. Could it be that you ignored my examples when I posted them weeks ago? > 2) It means we have to alter the OS with a non-standard RPM. The installed older version is non-standard, too. It comes from a private repository. The createrepo upgrade is non-standard, too. When I used a local copy of Yum 2.6.x to get something done, I was flamed. When I ask for an official update of an installed rpm, I need a lot of energy to run against closed doors. From mmcgrath at redhat.com Thu May 10 14:40:50 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 10 May 2007 09:40:50 -0500 Subject: python-kid on buildsys server In-Reply-To: <20070510162928.a1e28961.bugs.michael@gmx.net> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> <20070510114131.f1fb6c50.bugs.michael@gmx.net> <464328D1.1080707@redhat.com> <20070510162928.a1e28961.bugs.michael@gmx.net> Message-ID: <46432EF2.8040300@redhat.com> Michael Schwendt wrote: > On Thu, 10 May 2007 09:14:41 -0500, Mike McGrath wrote: > > >>> On Thu, 5 Apr 2007 17:23:31 +0200, Michael Schwendt wrote: >>> >>> >>> Why is it so damned difficult to get a single package updated although >>> I even provided the prepared rpms? This is turning into a negative >>> experience for me. >>> >>> >>> >> Oh I don't know >> 1) Its not actually causing problems for people >> > > Why do I need to repeat it again? It creates bad html pages for > repoview, which don't pass the w3c validator. Could it be that > you ignored my examples when I posted them weeks ago? > > >> 2) It means we have to alter the OS with a non-standard RPM. >> > > The installed older version is non-standard, too. It comes from > a private repository. > > The createrepo upgrade is non-standard, too. > > When I used a local copy of Yum 2.6.x to get something done, I was flamed. > When I ask for an official update of an installed rpm, I need a lot > of energy to run against closed doors. > You weren't flamed, you were denied. There is a big difference. Dennis (Our buildsystem officer) and I discussed it and decided the update was not worth the risk (all updates carry risk). I'm sorry but your local copy of yum 2.6 is not supported by the Fedora Infrastructure team. -Mike From mmcgrath at redhat.com Thu May 10 14:50:05 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 10 May 2007 09:50:05 -0500 Subject: Missing meeting today Message-ID: <4643311D.80203@redhat.com> I'll be unable to attend the meeting today (I'll be presenting) -Mike From bugs.michael at gmx.net Thu May 10 15:06:52 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Thu, 10 May 2007 17:06:52 +0200 Subject: python-kid on buildsys server In-Reply-To: <46432EF2.8040300@redhat.com> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> <20070510114131.f1fb6c50.bugs.michael@gmx.net> <464328D1.1080707@redhat.com> <20070510162928.a1e28961.bugs.michael@gmx.net> <46432EF2.8040300@redhat.com> Message-ID: <20070510170652.b6f00c5a.bugs.michael@gmx.net> On Thu, 10 May 2007 09:40:50 -0500, Mike McGrath wrote: > > When I used a local copy of Yum 2.6.x to get something done, I was flamed. > > When I ask for an official update of an installed rpm, I need a lot > > of energy to run against closed doors. > > > > You weren't flamed, you were denied. There is a big difference. Dennis > (Our buildsystem officer) and I discussed it and decided the update was > not worth the risk (all updates carry risk). What risk? Where can I read about that? Dennis has not replied to my public mail either. Currently, repoview is the only package that requires python-kid on that machine. Who decides on what packages from that mysterious private repo are "supported" on that machine or not? Seth? > I'm sorry but your local > copy of yum 2.6 is not supported by the Fedora Infrastructure team. That "team" has never before said anything about it. The API is needed as the backend for the Extras multilib resolver, Extras repoclosure, ... and some other tools. But maybe you misunderstand. Perhaps I should drop the ball at this point and declare the code unsupported, too. As I said before, this is turning into a negative experience for me. From mmcgrath at redhat.com Thu May 10 15:18:56 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 10 May 2007 10:18:56 -0500 Subject: python-kid on buildsys server In-Reply-To: <20070510170652.b6f00c5a.bugs.michael@gmx.net> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> <20070510114131.f1fb6c50.bugs.michael@gmx.net> <464328D1.1080707@redhat.com> <20070510162928.a1e28961.bugs.michael@gmx.net> <46432EF2.8040300@redhat.com> <20070510170652.b6f00c5a.bugs.michael@gmx.net> Message-ID: <464337E0.8020600@redhat.com> Michael Schwendt wrote: > On Thu, 10 May 2007 09:40:50 -0500, Mike McGrath wrote: > > > > What risk? Where can I read about that? Dennis has not replied to my > public mail either. > > Currently, repoview is the only package that requires python-kid on that > machine. Who decides on what packages from that mysterious private repo > are "supported" on that machine or not? Seth? > Anyone with admin access to that box. If someone wants to install the RPM on that box and make sure it works they are welcome to do so. > >> I'm sorry but your local >> copy of yum 2.6 is not supported by the Fedora Infrastructure team. >> > > That "team" has never before said anything about it. The API is needed as > the backend for the Extras multilib resolver, Extras repoclosure, ... and > some other tools. But maybe you misunderstand. > > Perhaps I should drop the ball at this point and declare the code > unsupported, too. As I said before, this is turning into a negative > experience for me. > Ok clearly there's been some miscommunication because I have no idea what you're talking about. Please tell us how we can re-create the problem ourselves (and broken xml isn't what I'm talking about) What commands do I need to run? What should I get? What do I actually get? -Mike From bugs.michael at gmx.net Thu May 10 15:44:17 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Thu, 10 May 2007 17:44:17 +0200 Subject: python-kid on buildsys server In-Reply-To: <464329D9.3060600@redhat.com> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <464329D9.3060600@redhat.com> Message-ID: <20070510174417.239340d9.bugs.michael@gmx.net> On Thu, 10 May 2007 09:19:05 -0500, Mike McGrath wrote: > > Get someone upstream (RHEL) to accept the package changes. buildsys > > is going away in days anyway after koji goes live. > > It's bad form to ignore one person and ask the same of others. Are you kidding? Who ignores you? Here is the reply to above quote. Sent on the same day as yours, just an hour later: https://www.redhat.com/archives/fedora-infrastructure-list/2007-April/msg00032.html It is you who ignored that reply. Silence as a way to make me shut up? > We've said no. You didn't convince us. Sorry. You showed me that its > creating mal-formed XML. It always has, no one has brought it up. No one has cared about repoview and the way we use it since pre-Extras until I started looking into it. Then I noticed a few problems and fixed them. My modified repoview runs nicely for several weeks and passes the w3c validator, too. All that I ask for is a bit in return and hence suggested a minor update for a package. I don't see a team-decision. I see only you as a single person that doesn't care about the stuff I've done. No, thanks. I've had enough for today and won't prepare any further replies today. From mmcgrath at redhat.com Thu May 10 19:04:59 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 10 May 2007 14:04:59 -0500 Subject: Web lead Message-ID: <46436CDB.7060005@redhat.com> We need a new web lead volunteer. Some people have been working on it from time to time. We need someone who can log in and fix the account system when its down and knows how the wiki works. We have a lot of people doing a lot of things but I'd love to get someone dedicated who can contribute regularly maybe an hour a day or at least a few hours a week. Someone who can sit in #fedora-admin and #fedora-web and give more attention to our web and understand how it works. I have a few people in mind I'd love to have volunteer for this but I know $DAYJOB won't always allow it. -Mike From tux_mints at yahoo.com Fri May 11 01:02:04 2007 From: tux_mints at yahoo.com (craig thomas) Date: Thu, 10 May 2007 18:02:04 -0700 (PDT) Subject: Web lead In-Reply-To: <46436CDB.7060005@redhat.com> Message-ID: <151862.90289.qm@web35114.mail.mud.yahoo.com> --- Mike McGrath wrote: > We need a new web lead volunteer. Some people have > been working on it > from time to time. We need someone who can log in > and fix the account > system when its down and knows how the wiki works. > We have a lot of > people doing a lot of things but I'd love to get > someone dedicated who > can contribute regularly maybe an hour a day or at > least a few hours a > week. Someone who can sit in #fedora-admin and > #fedora-web and give > more attention to our web and understand how it > works. > > I have a few people in mind I'd love to have > volunteer for this but I > know $DAYJOB won't always allow it. Hi Mike and everyone else, I'd like to volunteer, even though I know it's not a 'perfect' match. I don't have specific experience with our wiki or the account system (other than signing up). I do have 6 years web experience and I do have 5-10 hours a week. I also have a demanding dayjob, which would limit my IRC availability and ability to fix more critical issues fast. However, for everything web site related that is not super time sensitive I'd really love to be involved. -- Craig Thomas > > -Mike > > -- > Fedora-websites-list mailing list > Fedora-websites-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-websites-list > ____________________________________________________________________________________ Finding fabulous fares is fun. Let Yahoo! FareChase search your favorite travel sites to find flight and hotel bargains. http://farechase.yahoo.com/promo-generic-14795097 From oliver at linux-kernel.at Fri May 11 08:04:00 2007 From: oliver at linux-kernel.at (Oliver Falk) Date: Fri, 11 May 2007 10:04:00 +0200 Subject: Web lead In-Reply-To: <46436CDB.7060005@redhat.com> References: <46436CDB.7060005@redhat.com> Message-ID: <46442370.50203@linux-kernel.at> Hi Mike! On 05/10/2007 09:04 PM, Mike McGrath wrote: > We need a new web lead volunteer. Some people have been working on it > from time to time. We need someone who can log in and fix the account > system when its down and knows how the wiki works. We have a lot of > people doing a lot of things but I'd love to get someone dedicated who > can contribute regularly maybe an hour a day or at least a few hours a > week. Someone who can sit in #fedora-admin and #fedora-web and give > more attention to our web and understand how it works. > > I have a few people in mind I'd love to have volunteer for this but I > know $DAYJOB won't always allow it. I'd like to volunteer also. I have much experience with web administration. I have no specific experience with MoinMoin, but that's nothing that can't be learned - learning by doin'... :-) I'm also online in IRC, Yahoo and Jabber most of my working-time (09:00-17:00 UTC+8). I guess the time difference can be good and bad.... Best, Oliver From bugs.michael at gmx.net Fri May 11 11:26:34 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Fri, 11 May 2007 13:26:34 +0200 Subject: python-kid on buildsys server In-Reply-To: <54138.12.163.52.126.1178818003.squirrel@webmail.ausil.us> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> <20070510114131.f1fb6c50.bugs.michael@gmx.net> <464328D1.1080707@redhat.com> <20070510162928.a1e28961.bugs.michael@gmx.net> <46432EF2.8040300@redhat.com> <20070510170652.b6f00c5a.bugs.michael@gmx.net> <54138.12.163.52.126.1178818003.squirrel@webmail.ausil.us> Message-ID: <20070511132634.41751d24.bugs.michael@gmx.net> On Thu, 10 May 2007 12:26:43 -0500 (CDT), Dennis Gilmore wrote: > Other than w3c validation failing nothing is broken. an end user goes to > view the repoview pages they see the correct thing. That's far from a good reason to not fix it nevertheless. Afterall, part of the development includes making sure the page templates generate valid xhtml in the target environment. > > Currently, repoview is the only package that requires python-kid on that > > machine. Who decides on what packages from that mysterious private repo > > are "supported" on that machine or not? Seth? > > In the past certain things like that package were installed. We now have > a policy that only officially released packages can be used on > infrastructure. the correct place to get what you want is EPEL im more > than happy to install anything you need that is in RHEL or EPEL. But will > not install something from outside those two sources. With publishing packages in EPEL comes the requirement to maintain them in EPEL many years with less or no opportunity to upgrade to a new API as time passes by. I'm not willing to do that. Other requirements, like createrepo-0.4.8 and its dependencies, have been installed in violation of that "policy". From bugs.michael at gmx.net Fri May 11 11:27:22 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Fri, 11 May 2007 13:27:22 +0200 Subject: python-kid on buildsys server In-Reply-To: <464337E0.8020600@redhat.com> References: <20070315220812.8d6dc388.bugs.michael@gmx.net> <20070320140320.9e79c10e.bugs.michael@gmx.net> <460893C8.2090309@redhat.com> <20070327120220.4b6c6510.bugs.michael@gmx.net> <20070405114453.8c2581a7.bugs.michael@gmx.net> <46150863.2050400@redhat.com> <20070405172331.46ee0fec.bugs.michael@gmx.net> <20070510114131.f1fb6c50.bugs.michael@gmx.net> <464328D1.1080707@redhat.com> <20070510162928.a1e28961.bugs.michael@gmx.net> <46432EF2.8040300@redhat.com> <20070510170652.b6f00c5a.bugs.michael@gmx.net> <464337E0.8020600@redhat.com> Message-ID: <20070511132722.914a7e3d.bugs.michael@gmx.net> On Thu, 10 May 2007 10:18:56 -0500, Mike McGrath wrote: > > machine. Who decides on what packages from that mysterious private repo > > are "supported" on that machine or not? Seth? > > > Anyone with admin access to that box. If someone wants to install the > RPM on that box and make sure it works they are welcome to do so. This is contrary to what Dennis claims, and I won't upgrade system rpms without explicit permission, regardless of whether the packages are orphans or not. > >> I'm sorry but your local > >> copy of yum 2.6 is not supported by the Fedora Infrastructure team. > >> > > > > That "team" has never before said anything about it. The API is needed as > > the backend for the Extras multilib resolver, Extras repoclosure, ... and > > some other tools. But maybe you misunderstand. > > > > Perhaps I should drop the ball at this point and declare the code > > unsupported, too. As I said before, this is turning into a negative > > experience for me. > > > Ok clearly there's been some miscommunication because I have no idea > what you're talking about. That's the fundamental problem. It's the missing interest that results in artificial policies and spontaneous decisions like this, which are beyond my comprehension. Nobody cares what code is uploaded to and run on that machine to get something done. But when I ask on a otherwise quite silent public mailing-list about an official package update, it takes 12 days to get a first one-line reply, which demonstrates that the actual interest is low. After weeks, the hypocrisy increases and the reason for denial is altered. This is a hindrance and a disappointment. You have no interest, but you don't want to let loose either. As such, I'm losing interesting as I don't feel good about this. From mmcgrath at redhat.com Fri May 11 14:26:42 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 11 May 2007 09:26:42 -0500 Subject: Web lead In-Reply-To: <46442370.50203@linux-kernel.at> References: <46436CDB.7060005@redhat.com> <46442370.50203@linux-kernel.at> Message-ID: <46447D22.3060906@redhat.com> Oliver Falk wrote: > Hi Mike! > > On 05/10/2007 09:04 PM, Mike McGrath wrote: >> We need a new web lead volunteer. Some people have been working on >> it from time to time. We need someone who can log in and fix the >> account system when its down and knows how the wiki works. We have a >> lot of people doing a lot of things but I'd love to get someone >> dedicated who can contribute regularly maybe an hour a day or at >> least a few hours a week. Someone who can sit in #fedora-admin and >> #fedora-web and give more attention to our web and understand how it >> works. >> >> I have a few people in mind I'd love to have volunteer for this but I >> know $DAYJOB won't always allow it. > > I'd like to volunteer also. I have much experience with web > administration. I have no specific experience with MoinMoin, but > that's nothing that can't be learned - learning by doin'... :-) > > I'm also online in IRC, Yahoo and Jabber most of my working-time > (09:00-17:00 UTC+8). > > I guess the time difference can be good and bad.... Excellent, I've had a few people offer their services for this role. Make sure you can attend next weeks meeting. We'll have to make sure that times work out and such. -Mike From mmcgrath at redhat.com Fri May 11 14:51:42 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 11 May 2007 09:51:42 -0500 Subject: Fedora 7 Launch Message-ID: <464482FE.2000801@redhat.com> We've got a lot of prep work to do before Fedora 7 launches. I'd like to compile a list so if anything is missing let me know: 1) Static page content: Work with duffy, karsten, ricky and the websites team to create a nice looking static page. Even better would be getting this page into plone. Here's where it is at now: http://people.redhat.com/duffy/fedora/web/static-page.html Ultimately this page will be distributed to the mirrors in hopes we'll not need to use them. The idea is that a GET request followed by a REDIRECT is the easiest, most efficient operation we can do if our webservers get overloaded like they did last release. 2) Mirrors.fedoraproject.org: Looking good so far except for the memory leak which steps have been taken to negate. We will also need to deploy this on an additional box. I have an idea where to put it and hope to have it up fairly soon. 3) Proxy server upgrades. Right now our proxy servers are running stock RHEL4. We've been meaning to upgrade them to RHEL5 for a while now but they are on a different network segment then the rest of our hardware and as such we cannot easily pxe boot them (it would involve a request to the SOC). I'm going to put a plan together to do this and minimize any risk that may come up. The main benefit being mod_proxy_balancer. I'm still hoping we can acquire some hardware balancers but this will help us limp along for this release :) 4) PPC Builder: Is being delivered right now. Still needs to be installed, built out put into the koji mix. What am I missing? -Mike From paulo.banon at googlemail.com Fri May 11 15:36:10 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Fri, 11 May 2007 17:36:10 +0200 Subject: Fedora 7 Launch In-Reply-To: <464482FE.2000801@redhat.com> References: <464482FE.2000801@redhat.com> Message-ID: <7a41c4bc0705110836k35b000c8p98ec77638e7d9464@mail.gmail.com> Mike, Is it possible to get 1GB extra ram for each Proxy and APP server ? This would double the amount of hits that we can sustain, in the webserver point of view. Paulo On 5/11/07, Mike McGrath wrote: > > We've got a lot of prep work to do before Fedora 7 launches. I'd like > to compile a list so if anything is missing let me know: > > 1) Static page content: Work with duffy, karsten, ricky and the websites > team to create a nice looking static page. Even better would be getting > this page into plone. Here's where it is at now: > http://people.redhat.com/duffy/fedora/web/static-page.html Ultimately > this page will be distributed to the mirrors in hopes we'll not need to > use them. The idea is that a GET request followed by a REDIRECT is the > easiest, most efficient operation we can do if our webservers get > overloaded like they did last release. > > 2) Mirrors.fedoraproject.org: Looking good so far except for the memory > leak which steps have been taken to negate. We will also need to deploy > this on an additional box. I have an idea where to put it and hope to > have it up fairly soon. > > 3) Proxy server upgrades. Right now our proxy servers are running stock > RHEL4. We've been meaning to upgrade them to RHEL5 for a while now but > they are on a different network segment then the rest of our hardware > and as such we cannot easily pxe boot them (it would involve a request > to the SOC). I'm going to put a plan together to do this and minimize > any risk that may come up. The main benefit being mod_proxy_balancer. > I'm still hoping we can acquire some hardware balancers but this will > help us limp along for this release :) > > 4) PPC Builder: Is being delivered right now. Still needs to be > installed, built out put into the koji mix. > > > What am I missing? > > -Mike > > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Fri May 11 15:42:14 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 11 May 2007 10:42:14 -0500 Subject: Fedora 7 Launch In-Reply-To: <7a41c4bc0705110836k35b000c8p98ec77638e7d9464@mail.gmail.com> References: <464482FE.2000801@redhat.com> <7a41c4bc0705110836k35b000c8p98ec77638e7d9464@mail.gmail.com> Message-ID: <46448ED6.7080504@redhat.com> Paulo Santos wrote: > Mike, > > Is it possible to get 1GB extra ram for each Proxy and APP server ? > This would double the amount of hits that we can sustain, in the > webserver > point of view. Possibly, I'll look into it. The issue is I don't know how some of these servers are already configured so I'm not sure what slots are free. I'll take a look. -Mike From paulo.banon at googlemail.com Fri May 11 15:47:01 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Fri, 11 May 2007 17:47:01 +0200 Subject: Fedora 7 Launch In-Reply-To: <46448ED6.7080504@redhat.com> References: <464482FE.2000801@redhat.com> <7a41c4bc0705110836k35b000c8p98ec77638e7d9464@mail.gmail.com> <46448ED6.7080504@redhat.com> Message-ID: <7a41c4bc0705110847q702d48eerd230124a74555989@mail.gmail.com> The operating system is detecting 1GB only in each server, sometimes starts swaping which is really not good. The theory behind Apache is really simple, more memory = more hits/sec without queueing requests Paulo On 5/11/07, Mike McGrath wrote: > > Paulo Santos wrote: > > Mike, > > > > Is it possible to get 1GB extra ram for each Proxy and APP server ? > > This would double the amount of hits that we can sustain, in the > > webserver > > point of view. > > Possibly, I'll look into it. The issue is I don't know how some of > these servers are already configured so I'm not sure what slots are > free. I'll take a look. > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From paulo.banon at googlemail.com Fri May 11 15:51:03 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Fri, 11 May 2007 17:51:03 +0200 Subject: Web lead In-Reply-To: <46447D22.3060906@redhat.com> References: <46436CDB.7060005@redhat.com> <46442370.50203@linux-kernel.at> <46447D22.3060906@redhat.com> Message-ID: <7a41c4bc0705110851t3e3de1b4yd223c19eb607a9c9@mail.gmail.com> I would also like to volunteer myself, since i already know the infrastructure and the procedures that we use in the team, My main concern is that sometimes i may not have the amount of time needed to devout my full atention to it, when its needed. So with lead or no lead, i can/will always help as i did so far. Thanks, Paulo On 5/11/07, Mike McGrath wrote: > > Oliver Falk wrote: > > Hi Mike! > > > > On 05/10/2007 09:04 PM, Mike McGrath wrote: > >> We need a new web lead volunteer. Some people have been working on > >> it from time to time. We need someone who can log in and fix the > >> account system when its down and knows how the wiki works. We have a > >> lot of people doing a lot of things but I'd love to get someone > >> dedicated who can contribute regularly maybe an hour a day or at > >> least a few hours a week. Someone who can sit in #fedora-admin and > >> #fedora-web and give more attention to our web and understand how it > >> works. > >> > >> I have a few people in mind I'd love to have volunteer for this but I > >> know $DAYJOB won't always allow it. > > > > I'd like to volunteer also. I have much experience with web > > administration. I have no specific experience with MoinMoin, but > > that's nothing that can't be learned - learning by doin'... :-) > > > > I'm also online in IRC, Yahoo and Jabber most of my working-time > > (09:00-17:00 UTC+8). > > > > I guess the time difference can be good and bad.... > > Excellent, I've had a few people offer their services for this role. > Make sure you can attend next weeks meeting. We'll have to make sure > that times work out and such. > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From damian.myerscough at gmail.com Fri May 11 16:05:23 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Fri, 11 May 2007 17:05:23 +0100 Subject: Fedora 7 Launch In-Reply-To: <464482FE.2000801@redhat.com> References: <464482FE.2000801@redhat.com> Message-ID: <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> Hey Mike, > 3) Proxy server upgrades. Right now our proxy servers are running stock > RHEL4. We've been meaning to upgrade them to RHEL5 for a while now but > they are on a different network segment then the rest of our hardware > and as such we cannot easily pxe boot them (it would involve a request > to the SOC). I'm going to put a plan together to do this and minimize > any risk that may come up. The main benefit being mod_proxy_balancer. > I'm still hoping we can acquire some hardware balancers but this will >help us limp along for this release :) Have you looked at using iptables for load balancing? Nth module could help with this. On 11/05/07, Mike McGrath wrote: > We've got a lot of prep work to do before Fedora 7 launches. I'd like > to compile a list so if anything is missing let me know: > > 1) Static page content: Work with duffy, karsten, ricky and the websites > team to create a nice looking static page. Even better would be getting > this page into plone. Here's where it is at now: > http://people.redhat.com/duffy/fedora/web/static-page.html Ultimately > this page will be distributed to the mirrors in hopes we'll not need to > use them. The idea is that a GET request followed by a REDIRECT is the > easiest, most efficient operation we can do if our webservers get > overloaded like they did last release. > > 2) Mirrors.fedoraproject.org: Looking good so far except for the memory > leak which steps have been taken to negate. We will also need to deploy > this on an additional box. I have an idea where to put it and hope to > have it up fairly soon. > > 3) Proxy server upgrades. Right now our proxy servers are running stock > RHEL4. We've been meaning to upgrade them to RHEL5 for a while now but > they are on a different network segment then the rest of our hardware > and as such we cannot easily pxe boot them (it would involve a request > to the SOC). I'm going to put a plan together to do this and minimize > any risk that may come up. The main benefit being mod_proxy_balancer. > I'm still hoping we can acquire some hardware balancers but this will > help us limp along for this release :) > > 4) PPC Builder: Is being delivered right now. Still needs to be > installed, built out put into the koji mix. > > > What am I missing? > > -Mike > > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From mmcgrath at redhat.com Fri May 11 16:27:28 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 11 May 2007 11:27:28 -0500 Subject: Fedora 7 Launch In-Reply-To: <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> References: <464482FE.2000801@redhat.com> <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> Message-ID: <46449970.2000206@redhat.com> Damian Myerscough wrote: > Hey Mike, > >> 3) Proxy server upgrades. Right now our proxy servers are running stock >> RHEL4. We've been meaning to upgrade them to RHEL5 for a while now but >> they are on a different network segment then the rest of our hardware >> and as such we cannot easily pxe boot them (it would involve a request >> to the SOC). I'm going to put a plan together to do this and minimize >> any risk that may come up. The main benefit being mod_proxy_balancer. >> I'm still hoping we can acquire some hardware balancers but this will >> help us limp along for this release :) > > Have you looked at using iptables for load balancing? Nth module could > help with this. Honestly I didn't. I thought about using some of the RH clustering suite but it will add a bit more overhead then we want for our current environment. Do you have a link to some good documentation for iptables based load balancing? -Mike From email.ahmedkamal at googlemail.com Fri May 11 17:21:22 2007 From: email.ahmedkamal at googlemail.com (Ahmed Kamal) Date: Fri, 11 May 2007 20:21:22 +0300 Subject: Fedora 7 Launch In-Reply-To: <46449970.2000206@redhat.com> References: <464482FE.2000801@redhat.com> <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> <46449970.2000206@redhat.com> Message-ID: <3da3b5b40705111021p7d4ededbkcc0004404576d05e@mail.gmail.com> The RedHat Load balancing clustering tool (piranha) might looks a bit complex, but in reality, it's just a fancy wrapper around ipvsadm which is the user-space tool for the kernel traffic director. I havent played with Nth module, but ipvsadm is probably more tested. So, we don't have a hardware balancer ? are we searching for a software balancing solution ? On 5/11/07, Mike McGrath wrote: > > Damian Myerscough wrote: > > Hey Mike, > > > >> 3) Proxy server upgrades. Right now our proxy servers are running > stock > >> RHEL4. We've been meaning to upgrade them to RHEL5 for a while now but > >> they are on a different network segment then the rest of our hardware > >> and as such we cannot easily pxe boot them (it would involve a request > >> to the SOC). I'm going to put a plan together to do this and minimize > >> any risk that may come up. The main benefit being mod_proxy_balancer. > >> I'm still hoping we can acquire some hardware balancers but this will > >> help us limp along for this release :) > > > > Have you looked at using iptables for load balancing? Nth module could > > help with this. > > Honestly I didn't. I thought about using some of the RH clustering > suite but it will add a bit more overhead then we want for our current > environment. Do you have a link to some good documentation for iptables > based load balancing? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From damian.myerscough at gmail.com Fri May 11 18:00:49 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Fri, 11 May 2007 19:00:49 +0100 Subject: Fedora 7 Launch In-Reply-To: <46449970.2000206@redhat.com> References: <464482FE.2000801@redhat.com> <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> <46449970.2000206@redhat.com> Message-ID: <8c9e56490705111100j1fee7a1bs788ac7caaae09b0a@mail.gmail.com> Hey Mike, I have seen: if you want to balance the load to the 3 addresses 10.0.0.5, 10.0.0.6 and 10.0.0.7, then you can do as follows : # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 --packet 0 -j SNAT --to-source 10.0.0.5 # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 --packet 1 -j SNAT --to-source 10.0.0.6 # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 --packet 2 -j SNAT --to-source 10.0.0.7 Do you have a box that can act as a dedicated balance loader while FC 7 is being released On 11/05/07, Mike McGrath wrote: > Damian Myerscough wrote: > > Hey Mike, > > > >> 3) Proxy server upgrades. Right now our proxy servers are running stock > >> RHEL4. We've been meaning to upgrade them to RHEL5 for a while now but > >> they are on a different network segment then the rest of our hardware > >> and as such we cannot easily pxe boot them (it would involve a request > >> to the SOC). I'm going to put a plan together to do this and minimize > >> any risk that may come up. The main benefit being mod_proxy_balancer. > >> I'm still hoping we can acquire some hardware balancers but this will > >> help us limp along for this release :) > > > > Have you looked at using iptables for load balancing? Nth module could > > help with this. > > Honestly I didn't. I thought about using some of the RH clustering > suite but it will add a bit more overhead then we want for our current > environment. Do you have a link to some good documentation for iptables > based load balancing? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From mmcgrath at redhat.com Fri May 11 18:10:53 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 11 May 2007 13:10:53 -0500 Subject: Fedora 7 Launch In-Reply-To: <3da3b5b40705111021p7d4ededbkcc0004404576d05e@mail.gmail.com> References: <464482FE.2000801@redhat.com> <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> <46449970.2000206@redhat.com> <3da3b5b40705111021p7d4ededbkcc0004404576d05e@mail.gmail.com> Message-ID: <4644B1AD.60305@redhat.com> Ahmed Kamal wrote: > The RedHat Load balancing clustering tool (piranha) might looks a bit > complex, but in reality, it's just a fancy wrapper around ipvsadm > which is > the user-space tool for the kernel traffic director. I havent played with > Nth module, but ipvsadm is probably more tested. > So, we don't have a hardware balancer ? are we searching for a software > balancing solution ? I've used piranha in the past with great success but it requires additional boxes that we just don't have yet. We have one hardware balancer we use for the proxy servers. I'd like to stick one between the proxy servers and the application servers. -Mike From mmcgrath at redhat.com Fri May 11 18:11:22 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 11 May 2007 13:11:22 -0500 Subject: Fedora 7 Launch In-Reply-To: <8c9e56490705111100j1fee7a1bs788ac7caaae09b0a@mail.gmail.com> References: <464482FE.2000801@redhat.com> <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> <46449970.2000206@redhat.com> <8c9e56490705111100j1fee7a1bs788ac7caaae09b0a@mail.gmail.com> Message-ID: <4644B1CA.9030703@redhat.com> Damian Myerscough wrote: > Hey Mike, > > I have seen: > > if you want to balance the load to the 3 addresses 10.0.0.5, 10.0.0.6 > and 10.0.0.7, then you can do as follows : > > # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 > --packet 0 -j SNAT --to-source 10.0.0.5 > # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 > --packet 1 -j SNAT --to-source 10.0.0.6 > # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 > --packet 2 -j SNAT --to-source 10.0.0.7 > > Do you have a box that can act as a dedicated balance loader while FC > 7 is being released How well does this work when 10.0.0.6 goes down? -Mike From lmacken at redhat.com Fri May 11 18:21:43 2007 From: lmacken at redhat.com (Luke Macken) Date: Fri, 11 May 2007 14:21:43 -0400 Subject: Fedora 7 Launch In-Reply-To: <464482FE.2000801@redhat.com> References: <464482FE.2000801@redhat.com> Message-ID: <20070511182143.GA14091@tomservo.rh.rit.edu> On Fri, May 11, 2007 at 09:51:42AM -0500, Mike McGrath wrote: > We've got a lot of prep work to do before Fedora 7 launches. I'd like to > compile a list so if anything is missing let me know: > > [...] > > What am I missing? Bodhi. I have a test instance running on publictest2[0] that people can play around with at the moment. Here is what is on my list of priority tasks that need to get done before F7: o Deployment. Get bodhi configs into puppet, and make sure ssl/static files/etc are working from admin.fp.org/updates o Make sure all EPEL guidelines[1] are met o Multilib for F7. For previous releases there was a huge biarch-list-of-DOOM, which I have since imported into bodhi's database. However, there is no such list for F7, so we will most likely need to do things differently. notting mentioned somehow doing it on the fly, or by having bodhi tag things in koji and then using mash to build the entire updates repo. o Repo cleaner. We need something like RepoPrune.py/fedora-updates-clean to run occasionally and clean up our tree. I'll make sure our Bodhi Timeline[2] is up to date today. I'd like to get 1.0 deployed this weekend, and ideally hit 1.1 before F7. Comments/suggestions/help welcome :) luke [0]: http://publictest2.fedora.redhat.com [1]: http://fedoraproject.org/wiki/EPEL/GuidelinesAndPolicies/PackageMaintenanceAndUpdates [2]: https://hosted.fedoraproject.org/projects/bodhi/roadmap From damian.myerscough at gmail.com Fri May 11 18:24:59 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Fri, 11 May 2007 19:24:59 +0100 Subject: Fedora 7 Launch In-Reply-To: <4644B1CA.9030703@redhat.com> References: <464482FE.2000801@redhat.com> <8c9e56490705110905j66e86eebg6eefded0f6cbd941@mail.gmail.com> <46449970.2000206@redhat.com> <8c9e56490705111100j1fee7a1bs788ac7caaae09b0a@mail.gmail.com> <4644B1CA.9030703@redhat.com> Message-ID: <8c9e56490705111124t56cd3086q4faa954e108ec897@mail.gmail.com> Hmmmm, I am not 100% sure when a box goes down. I believe it would still route the traffic to the dead box however if you set the --every 1 you wouldn't notice too much. It would give us enough time I reckon to get the box back online or we could just remove it from the iptables until the box came back up. On 11/05/07, Mike McGrath wrote: > Damian Myerscough wrote: > > Hey Mike, > > > > I have seen: > > > > if you want to balance the load to the 3 addresses 10.0.0.5, 10.0.0.6 > > and 10.0.0.7, then you can do as follows : > > > > # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 > > --packet 0 -j SNAT --to-source 10.0.0.5 > > # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 > > --packet 1 -j SNAT --to-source 10.0.0.6 > > # iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7 --every 3 > > --packet 2 -j SNAT --to-source 10.0.0.7 > > > > Do you have a box that can act as a dedicated balance loader while FC > > 7 is being released > > How well does this work when 10.0.0.6 goes down? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From ask at develooper.com Fri May 11 18:33:51 2007 From: ask at develooper.com (=?ISO-8859-1?Q?Ask_Bj=F8rn_Hansen?=) Date: Fri, 11 May 2007 11:33:51 -0700 Subject: Fedora 7 Launch In-Reply-To: <464482FE.2000801@redhat.com> References: <464482FE.2000801@redhat.com> Message-ID: <4BE1ACD5-5743-4DBE-A201-E0ECE7235482@develooper.com> On May 11, 2007, at 7:51 AM, Mike McGrath wrote: > 3) Proxy server upgrades. One easy upgrade would be to use perlbal instead of apache/ mod_proxy. It will use less memory, be able to sustain more connections, do error handling and better balance the load between the backend servers. I'll be happy to help with this ... - ask -- http://develooper.com/ - http://askask.com/ From bugs.michael at gmx.net Sat May 12 18:23:00 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Sat, 12 May 2007 20:23:00 +0200 Subject: Fedora 7 Launch In-Reply-To: <20070511182143.GA14091@tomservo.rh.rit.edu> References: <464482FE.2000801@redhat.com> <20070511182143.GA14091@tomservo.rh.rit.edu> Message-ID: <20070512202300.10e8c72c.bugs.michael@gmx.net> On Fri, 11 May 2007 14:21:43 -0400, Luke Macken wrote: > o Repo cleaner. We need something like RepoPrune.py/fedora-updates-clean > to run occasionally and clean up our tree. There's also repomanage, ready to use: $ rpm -qf $(which repomanage) yum-utils-1.0.3-1.fc6 It has been used for a long time for Extras, but only solves one part of repository maintenance. Another part, that remains, can get tiresome and error-prone, especially when no package db is available (one reason why repoprune took over and also one reason why I like kojira). Everywhere repoprune has been mentioned or derived so far it has been misunderstood. It does NOT do the same as repomanage. It is not designed to do exactly the same. The reason it is approximately four times faster is that it does something else, something more rigorous and more helpful. So, what technique/tool to use is a repository-design decision. If for every binary rpm in a repository there MUST be a source rpm in a corresponding repository, repoprune can do its job really well and prune those repositories. Where the requirement isn't met, repoprune cannot be used. For Fedora Extras, the requirement is met. In the interface, repoprune needs to know about: 1) root path to source rpms directory 2) root path to corresponding binary rpms directory 3) how many different builds of each package to keep 4) a white-list of source package %{name}s to ignore Repoprune then deletes old source rpms in pass one. In pass two it deletes any binary rpm that refers to a non-existant source rpm. If necessary, I could think of making 3) a map, which would make it possible to configure the number of builds per %name. From julianokyap at gmail.com Sun May 13 06:58:24 2007 From: julianokyap at gmail.com (Julian Yap) Date: Sat, 12 May 2007 20:58:24 -1000 Subject: Errors when retrieving mirrorlist for updates repository Message-ID: Hi, I get this error when running 'yum update'. $ sudo yum update Loading "installonlyn" plugin Setting up Update Process Setting up repositories Could not retrieve mirrorlist http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-fc6&arch=i386 error was [Errno 14] HTTP Error 500: Date: Sun, 13 May 2007 06:57:03 GMT Server: Apache/2.2.4 (Fedora) Content-Length: 632 Content-Type: text/html; charset=iso-8859-1 Connection: close Error: Cannot find a valid baseurl for repo: updates Browsing via web browser to http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-fc6&arch=i386 gives me: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, root at localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. Apache/2.2.4 (Fedora) Server at publictest7.fedora.phx.redhat.com Port 80 Is it a larger issue? Thanks, Julian From lmacken at redhat.com Sun May 13 08:39:20 2007 From: lmacken at redhat.com (Luke Macken) Date: Sun, 13 May 2007 04:39:20 -0400 Subject: Errors when retrieving mirrorlist for updates repository In-Reply-To: References: Message-ID: <20070513083920.GB2998@tomservo.rh.rit.edu> On Sat, May 12, 2007 at 08:58:24PM -1000, Julian Yap wrote: > Hi, > > I get this error when running 'yum update'. [...] > Is it a larger issue? It looks like mod_python was to blame. [Sun May 13 01:24:03 2007] [error] [client 10.8.32.55] PythonHandler return_mirrorlist: Traceback (most recent call last): [Sun May 13 01:24:03 2007] [error] [client 10.8.32.55] PythonHandler return_mirrorlist: File "/usr/lib64/python2.4/site-packages/mod_python/apache.py", line 287, in HandlerDispatch\n log=debug) [Sun May 13 01:24:03 2007] [error] [client 10.8.32.55] PythonHandler return_mirrorlist: File "/usr/lib64/python2.4/site-packages/mod_python/apache.py", line 461, in import_module\n f, p, d = imp.find_module(parts[i], path) [Sun May 13 01:24:03 2007] [error] [client 10.8.32.55] PythonHandler return_mirrorlist: ImportError: No module named return_mirrorlist Restarting httpd seemed to have fixed it. I also noticed this SELinux audit message: audit(1179014650.637:1171): avc: denied { getattr } for pid=21393 comm="httpd" name="mirrorlist_cache.pkl" dev=xvda3 ino=129681 scontext=user_u:system_r:httpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file I wonder if SELinux is to blame for some of the erratic TurboGears behavior that we have been experiencing? luke From julianokyap at gmail.com Sun May 13 09:12:15 2007 From: julianokyap at gmail.com (Julian Yap) Date: Sat, 12 May 2007 23:12:15 -1000 Subject: Errors when retrieving mirrorlist for updates repository In-Reply-To: <20070513083920.GB2998@tomservo.rh.rit.edu> References: <20070513083920.GB2998@tomservo.rh.rit.edu> Message-ID: On 5/12/07, Luke Macken wrote: > On Sat, May 12, 2007 at 08:58:24PM -1000, Julian Yap wrote: > > Hi, > > > > I get this error when running 'yum update'. > [...] > > Is it a larger issue? > > It looks like mod_python was to blame. > > Restarting httpd seemed to have fixed it. Works for me now. From julianokyap at gmail.com Sun May 13 09:12:15 2007 From: julianokyap at gmail.com (Julian Yap) Date: Sat, 12 May 2007 23:12:15 -1000 Subject: Errors when retrieving mirrorlist for updates repository In-Reply-To: <20070513083920.GB2998@tomservo.rh.rit.edu> References: <20070513083920.GB2998@tomservo.rh.rit.edu> Message-ID: On 5/12/07, Luke Macken wrote: > On Sat, May 12, 2007 at 08:58:24PM -1000, Julian Yap wrote: > > Hi, > > > > I get this error when running 'yum update'. > [...] > > Is it a larger issue? > > It looks like mod_python was to blame. > > Restarting httpd seemed to have fixed it. Works for me now. From julianokyap at gmail.com Sun May 13 09:12:15 2007 From: julianokyap at gmail.com (Julian Yap) Date: Sat, 12 May 2007 23:12:15 -1000 Subject: Errors when retrieving mirrorlist for updates repository In-Reply-To: <20070513083920.GB2998@tomservo.rh.rit.edu> References: <20070513083920.GB2998@tomservo.rh.rit.edu> Message-ID: On 5/12/07, Luke Macken wrote: > On Sat, May 12, 2007 at 08:58:24PM -1000, Julian Yap wrote: > > Hi, > > > > I get this error when running 'yum update'. > [...] > > Is it a larger issue? > > It looks like mod_python was to blame. > > Restarting httpd seemed to have fixed it. Works for me now. From julianokyap at gmail.com Sun May 13 09:12:15 2007 From: julianokyap at gmail.com (Julian Yap) Date: Sat, 12 May 2007 23:12:15 -1000 Subject: Errors when retrieving mirrorlist for updates repository In-Reply-To: <20070513083920.GB2998@tomservo.rh.rit.edu> References: <20070513083920.GB2998@tomservo.rh.rit.edu> Message-ID: On 5/12/07, Luke Macken wrote: > On Sat, May 12, 2007 at 08:58:24PM -1000, Julian Yap wrote: > > Hi, > > > > I get this error when running 'yum update'. > [...] > > Is it a larger issue? > > It looks like mod_python was to blame. > > Restarting httpd seemed to have fixed it. Works for me now. From Matt_Domsch at dell.com Sun May 13 16:54:35 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Sun, 13 May 2007 11:54:35 -0500 Subject: mirrormanager woes fixed for now Message-ID: <20070513165435.GA17718@lists.us.dell.com> A few things have conspired against mirrormanger in the last 12 hours, but appear to be going OK now. 1) httpd re-reads its mod_python targets when re-forking. I had moved the report_mirrorlist mod_python CGI, so that broke between midnight and 3:15am. Thanks to lmacken for restarting httpd on publictest7 for me there. 2) publictest7 went belly up about 10am. Pings ok, but can't connect. I moved the report_mirrorlist CGI over to app3 and got it running there serving traffic now. It belongs there anyhow. We need to get app3 httpd into supervisord to make sure that stays up now. Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From mmcgrath at redhat.com Sun May 13 16:57:58 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Sun, 13 May 2007 11:57:58 -0500 Subject: mirrormanager woes fixed for now In-Reply-To: <20070513165435.GA17718@lists.us.dell.com> References: <20070513165435.GA17718@lists.us.dell.com> Message-ID: <46474396.7060607@redhat.com> Matt Domsch wrote: > We need to get app3 httpd into supervisord to make sure that stays up > now. > have we seen issues with httpd crashing on that box? -Mike From jpmahowald at gmail.com Sun May 13 21:04:10 2007 From: jpmahowald at gmail.com (John Mahowald) Date: Sun, 13 May 2007 16:04:10 -0500 Subject: Gobby Message-ID: <3ea997540705131404m203ed687g5065005b4e52ac81@mail.gmail.com> I propose a gobby service be provided, perhaps gobby.fedoraproject.org. >From the package description: Gobby is a free collaborative editor. This means that it provides you with the possibility to edit files simultaneously with other users over a network. It supports multiple documents in one session and a multi-user chat. I see several uses for this, primarily in package spec review but also in document editing or collaborative hacking. RFR at http://fedoraproject.org/wiki/Infrastructure/RFR/gobby Regards, John Mahowald From paulo.banon at googlemail.com Sun May 13 22:06:09 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Sun, 13 May 2007 23:06:09 +0100 Subject: Gobby In-Reply-To: <3ea997540705131404m203ed687g5065005b4e52ac81@mail.gmail.com> References: <3ea997540705131404m203ed687g5065005b4e52ac81@mail.gmail.com> Message-ID: <7a41c4bc0705131506r34efb124mc5387a4dabd543b@mail.gmail.com> So first of all, Gobby needs to be packaged to Fedora, since its not in extras correct ?! Paulo On 5/13/07, John Mahowald wrote: > > I propose a gobby service be provided, perhaps gobby.fedoraproject.org. > > >From the package description: > Gobby is a free collaborative editor. This means that it provides you with > the > possibility to edit files simultaneously with other users over a network. > It > supports multiple documents in one session and a multi-user chat. > > I see several uses for this, primarily in package spec review but also > in document editing or collaborative hacking. > > RFR at http://fedoraproject.org/wiki/Infrastructure/RFR/gobby > > Regards, > John Mahowald > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From sundaram at fedoraproject.org Sun May 13 22:12:44 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Mon, 14 May 2007 03:42:44 +0530 Subject: Gobby In-Reply-To: <7a41c4bc0705131506r34efb124mc5387a4dabd543b@mail.gmail.com> References: <3ea997540705131404m203ed687g5065005b4e52ac81@mail.gmail.com> <7a41c4bc0705131506r34efb124mc5387a4dabd543b@mail.gmail.com> Message-ID: <46478D5C.6070104@fedoraproject.org> Paulo Santos wrote: > So first of all, Gobby needs to be packaged to Fedora, since its not in > extras correct ?! > > > Paulo > Nope. Gobby has been in extras for a long time Rahul From jpmahowald at gmail.com Sun May 13 22:14:12 2007 From: jpmahowald at gmail.com (John Mahowald) Date: Sun, 13 May 2007 17:14:12 -0500 Subject: Gobby In-Reply-To: <7a41c4bc0705131506r34efb124mc5387a4dabd543b@mail.gmail.com> References: <3ea997540705131404m203ed687g5065005b4e52ac81@mail.gmail.com> <7a41c4bc0705131506r34efb124mc5387a4dabd543b@mail.gmail.com> Message-ID: <3ea997540705131514r46c7f905rcda9945eda641bb6@mail.gmail.com> On 5/13/07, Paulo Santos wrote: > So first of all, Gobby needs to be packaged to Fedora, since its not in > extras correct ?! > > > Paulo > It is already packaged, obby the library, gobby the client, and sobby the server. Luke Macken, the maintainer, likes the idea. John From mmcgrath at redhat.com Sun May 13 23:50:01 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Sun, 13 May 2007 18:50:01 -0500 Subject: Travel/time off Message-ID: <4647A429.3030700@redhat.com> I'll be away from a computer most of Monday and Tuesday. -Mike From oliver at linux-kernel.at Mon May 14 08:31:11 2007 From: oliver at linux-kernel.at (Oliver Falk) Date: Mon, 14 May 2007 10:31:11 +0200 Subject: Web lead In-Reply-To: <46447D22.3060906@redhat.com> References: <46436CDB.7060005@redhat.com> <46442370.50203@linux-kernel.at> <46447D22.3060906@redhat.com> Message-ID: <46481E4F.6040105@linux-kernel.at> On 05/11/2007 04:26 PM, Mike McGrath wrote: > Oliver Falk wrote: >> Hi Mike! >> >> On 05/10/2007 09:04 PM, Mike McGrath wrote: >>> We need a new web lead volunteer. Some people have been working on >>> it from time to time. We need someone who can log in and fix the >>> account system when its down and knows how the wiki works. We have a >>> lot of people doing a lot of things but I'd love to get someone >>> dedicated who can contribute regularly maybe an hour a day or at >>> least a few hours a week. Someone who can sit in #fedora-admin and >>> #fedora-web and give more attention to our web and understand how it >>> works. >>> >>> I have a few people in mind I'd love to have volunteer for this but I >>> know $DAYJOB won't always allow it. >> >> I'd like to volunteer also. I have much experience with web >> administration. I have no specific experience with MoinMoin, but >> that's nothing that can't be learned - learning by doin'... :-) >> >> I'm also online in IRC, Yahoo and Jabber most of my working-time >> (09:00-17:00 UTC+8). Sorry. It's UTC+1... >> I guess the time difference can be good and bad.... > > Excellent, I've had a few people offer their services for this role. > Make sure you can attend next weeks meeting. We'll have to make sure > that times work out and such. I'm not available this week. I'll be a few hundred kilometers away from any of my computers. :-) Best, Oliver From laroche at redhat.com Tue May 15 14:08:40 2007 From: laroche at redhat.com (Florian La Roche) Date: Tue, 15 May 2007 16:08:40 +0200 Subject: repomd.xml timestamp checking for http://mirrors.fp.org/ Message-ID: <20070515140840.GA9056@dudweiler.stuttgart.redhat.com> Hello, If you look at the below data, it seems that some hosts with older repomd.xml data are still in the mirrorlist and not removed. Is the data not checked further to leave out older mirrors until now? regards, Florian La Roche Getting mirrorlist from updates-released-debug-fc5-DE-ppc.txt. cacheLocal: looking at url: updates-released-debug-fc5-DE-ppc.txt Reading yum repository http://ftp.uni-koeln.de/mirrors/fedora/linux/core/updates/5/ppc/debug. cacheLocal: looking at url: http://ftp.uni-koeln.de/mirrors/fedora/linux/core/updates/5/ppc/debug/repodata/repomd.xml 2007/04/24 Reading yum repository http://ftp.uni-erlangen.de/pub/Linux/MIRROR.fedora/core/updates/5/ppc/debug. cacheLocal: looking at url: http://ftp.uni-erlangen.de/pub/Linux/MIRROR.fedora/core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/14 Reading yum repository http://ftp.uni-muenster.de/pub/linux/distributions/fedora/linux/core/updates/5/ppc/debug. cacheLocal: looking at url: http://ftp.uni-muenster.de/pub/linux/distributions/fedora/linux/core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/14 Reading yum repository http://ftp.stw-bonn.de/pub/fedora/linux/core/updates/5/ppc/debug. cacheLocal: looking at url: http://ftp.stw-bonn.de/pub/fedora/linux/core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/14 Reading yum repository ftp://ftp.fu-berlin.de/linux/fedora/core/updates/5/ppc/debug. cacheLocal: looking at url: ftp://ftp.fu-berlin.de/linux/fedora/core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/14 Reading yum repository http://wftp.tu-chemnitz.de/pub/linux/fedora-core/updates/5/ppc/debug. cacheLocal: looking at url: http://wftp.tu-chemnitz.de/pub/linux/fedora-core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/14 Reading yum repository ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/fedora-core/updates/5/ppc/debug. cacheLocal: looking at url: ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/fedora-core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/08 Reading yum repository http://ftp-stud.hs-esslingen.de/pub/fedora/linux/core/updates/5/ppc/debug. cacheLocal: looking at url: http://ftp-stud.hs-esslingen.de/pub/fedora/linux/core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/14 Reading yum repository http://ftp.uni-bayreuth.de/linux/fedora/linux/core/updates/5/ppc/debug. cacheLocal: looking at url: http://ftp.uni-bayreuth.de/linux/fedora/linux/core/updates/5/ppc/debug/repodata/repomd.xml 2007/05/14 From Matt_Domsch at dell.com Wed May 16 14:14:17 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Wed, 16 May 2007 09:14:17 -0500 Subject: repomd.xml timestamp checking for http://mirrors.fp.org/ In-Reply-To: <20070515140840.GA9056@dudweiler.stuttgart.redhat.com> References: <20070515140840.GA9056@dudweiler.stuttgart.redhat.com> Message-ID: <20070516141417.GA15412@lists.us.dell.com> On Tue, May 15, 2007 at 04:08:40PM +0200, Florian La Roche wrote: > Hello, > > If you look at the below data, it seems that some hosts with older > repomd.xml data are still in the mirrorlist and not removed. Is the > data not checked further to leave out older mirrors until now? No, I see the problem. Thanks for the report. I knew this was going to bite me sooner or later, and have plans to fix it, but hadn't had time to implement it... > Getting mirrorlist from updates-released-debug-fc5-DE-ppc.txt. > cacheLocal: looking at url: updates-released-debug-fc5-DE-ppc.txt > Reading yum repository http://ftp.uni-koeln.de/mirrors/fedora/linux/core/updates/5/ppc/debug. > cacheLocal: looking at url: http://ftp.uni-koeln.de/mirrors/fedora/linux/core/updates/5/ppc/debug/repodata/repomd.xml > 2007/04/24 This host was crawled today, and that the repodata directory isn't up-to-date, but the crawler thinks that the updates/5/ppc/debug directory *is* up-to-date. But it shouldn't. up2date path lastCrawled date True updates/5/ppc 2007-05-16 07:43:17 True updates/5/ppc/debug 2007-05-16 07:43:10 False updates/5/ppc/debug/repodata 2007-05-16 07:43:02 False updates/5/ppc/repodata 2007-05-16 07:43:22 The problem is, the database doesn't track every single file in a directory full of RPMs or HTML files. That would have exploded the size of the database. So, I only look at 10 files in such directories (and all files in all other directories). It's supposed to be "the ten most recent files", but that part of the logic is what's broken. It uses the first ten as reported by the dict, which isn't right. I'll have to fix that to solve this. It's just a matter of adding rsync directory list parsing into the update-master-directory-list program, shouldn't be hard, just needs a little time and a little testing... Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From Matt_Domsch at dell.com Wed May 16 14:45:08 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Wed, 16 May 2007 09:45:08 -0500 Subject: repomd.xml timestamp checking for http://mirrors.fp.org/ In-Reply-To: <20070516141417.GA15412@lists.us.dell.com> References: <20070515140840.GA9056@dudweiler.stuttgart.redhat.com> <20070516141417.GA15412@lists.us.dell.com> Message-ID: <20070516144508.GA19989@lists.us.dell.com> On Wed, May 16, 2007 at 09:14:17AM -0500, Matt Domsch wrote: > On Tue, May 15, 2007 at 04:08:40PM +0200, Florian La Roche wrote: > > Hello, > > > > If you look at the below data, it seems that some hosts with older > > repomd.xml data are still in the mirrorlist and not removed. Is the > > data not checked further to leave out older mirrors until now? > > No, I see the problem. Thanks for the report. I knew this was going > to bite me sooner or later, and have plans to fix it, but hadn't had > time to implement it... And now I have... This should be fixed now, so future crawls will pick it up correctly. Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From mmcgrath at redhat.com Wed May 16 17:26:51 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 16 May 2007 12:26:51 -0500 Subject: Outage Notification - 2007-05-17 04:00 [UTC] Message-ID: <464B3EDB.2070709@redhat.com> There will be an outage starting at 2007-05-17 04:00 [UTC], which will last approximately 1 hour. To convert UTC to your local time, use: http://www.timeanddate.com/worldclock/converter.html Affected Services: Buildsystem Unaffected Services: Websites CVS / Source Control Database DNS Mail Torrent Reason for Outage: Upgrading Koji to a new version and moving koji store to new hardware. This outage should be approximately 1 hour, maybe longer if the sync is running slower then expected. Will be coordinating in #fedora-admin The build system should either reject connections or queue connections during this time. Contact Information: Please join #fedora-admin in irc.freenode.net or respond to this email to track the status of this outage. From sundaram at fedoraproject.org Thu May 17 01:48:46 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Thu, 17 May 2007 07:18:46 +0530 Subject: Software in infrastructure vs repositories Message-ID: <464BB47E.2020906@fedoraproject.org> Hi Has Fedora Infrastructure team consider a rule not to deploy any proprietary software and not even any software that is not available in the official Fedora repository? That would make things easier for ensuring good packaging, maintenance and licensing. Rahul From sundaram at fedoraproject.org Thu May 17 01:58:18 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Thu, 17 May 2007 07:28:18 +0530 Subject: Web based interface for live image/ regular image creation Message-ID: <464BB6BA.8000306@fedoraproject.org> Hi Now that we have external live image creator and distribution composing tools and revisor as a gui for tying them up together, what would be nice is to have a web front end which mimics Pirut that let's users select groups, individual packages and perhaps a third party/custom repository and get a live or regular image. Would be it possible for someone in the infrastructure team to look into this? Rahul From dennis at ausil.us Thu May 17 02:07:01 2007 From: dennis at ausil.us (Dennis Gilmore) Date: Wed, 16 May 2007 21:07:01 -0500 Subject: Software in infrastructure vs repositories In-Reply-To: <464BB47E.2020906@fedoraproject.org> References: <464BB47E.2020906@fedoraproject.org> Message-ID: <200705162107.01366.dennis@ausil.us> Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: > Hi > > Has Fedora Infrastructure team consider a rule not to deploy any > proprietary software and not even any software that is not available in > the official Fedora repository? That would make things easier for > ensuring good packaging, maintenance and licensing. That is what our rules are. we only use what is in Fedora. if there is some OSS thing we need we get it in Fedora before we use it. Dennis -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From sundaram at fedoraproject.org Thu May 17 02:23:52 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Thu, 17 May 2007 07:53:52 +0530 Subject: Software in infrastructure vs repositories In-Reply-To: <200705162107.01366.dennis@ausil.us> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> Message-ID: <464BBCB8.8030007@fedoraproject.org> Dennis Gilmore wrote: > Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: >> Hi >> >> Has Fedora Infrastructure team consider a rule not to deploy any >> proprietary software and not even any software that is not available in >> the official Fedora repository? That would make things easier for >> ensuring good packaging, maintenance and licensing. > That is what our rules are. we only use what is in Fedora. if there is some > OSS thing we need we get it in Fedora before we use it. Can you document this anywhere? Rahul From skvidal at linux.duke.edu Thu May 17 02:25:51 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Wed, 16 May 2007 22:25:51 -0400 Subject: Software in infrastructure vs repositories In-Reply-To: <464BBCB8.8030007@fedoraproject.org> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> Message-ID: <1179368751.10909.21.camel@rivendell> On Thu, 2007-05-17 at 07:53 +0530, Rahul Sundaram wrote: > Dennis Gilmore wrote: > > Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: > >> Hi > >> > >> Has Fedora Infrastructure team consider a rule not to deploy any > >> proprietary software and not even any software that is not available in > >> the official Fedora repository? That would make things easier for > >> ensuring good packaging, maintenance and licensing. > > That is what our rules are. we only use what is in Fedora. if there is some > > OSS thing we need we get it in Fedora before we use it. > > Can you document this anywhere? Why? -sv From dennis at ausil.us Thu May 17 03:22:02 2007 From: dennis at ausil.us (Dennis Gilmore) Date: Wed, 16 May 2007 22:22:02 -0500 Subject: Software in infrastructure vs repositories In-Reply-To: <464BBCB8.8030007@fedoraproject.org> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> Message-ID: <200705162222.08503.dennis@ausil.us> Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: > Dennis Gilmore wrote: > > Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: > >> Hi > >> > >> Has Fedora Infrastructure team consider a rule not to deploy any > >> proprietary software and not even any software that is not available in > >> the official Fedora repository? That would make things easier for > >> ensuring good packaging, maintenance and licensing. > > > > That is what our rules are. we only use what is in Fedora. if there is > > some OSS thing we need we get it in Fedora before we use it. > > Can you document this anywhere? it has been documented in many mailing list posts in the past as well as common knowledge. if that's not enough. my post from before should suffice Dennis -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From jkeating at redhat.com Thu May 17 04:26:16 2007 From: jkeating at redhat.com (Jesse Keating) Date: Thu, 17 May 2007 00:26:16 -0400 Subject: Web based interface for live image/ regular image creation In-Reply-To: <464BB6BA.8000306@fedoraproject.org> References: <464BB6BA.8000306@fedoraproject.org> Message-ID: <200705170026.16503.jkeating@redhat.com> On Wednesday 16 May 2007 21:58:18 Rahul Sundaram wrote: > Hi > > Now that we have external live image creator and distribution composing > tools and revisor as a gui for tying them up together, what would be > nice is to have a web front end which mimics Pirut that let's users > select groups, individual packages and perhaps a third party/custom > repository and get a live or regular image. Would be it possible for > someone in the infrastructure team to look into this? > This feels less like a Infrastructure thing and more like a general software development thing. If some software dev creates the web tools to do this, then it would become an Infrastructure thing to find a place to host it and run it. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From skvidal at linux.duke.edu Thu May 17 04:55:18 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Thu, 17 May 2007 00:55:18 -0400 Subject: Web based interface for live image/ regular image creation In-Reply-To: <200705170026.16503.jkeating@redhat.com> References: <464BB6BA.8000306@fedoraproject.org> <200705170026.16503.jkeating@redhat.com> Message-ID: <1179377718.10909.28.camel@rivendell> On Thu, 2007-05-17 at 00:26 -0400, Jesse Keating wrote: > On Wednesday 16 May 2007 21:58:18 Rahul Sundaram wrote: > > Hi > > > > Now that we have external live image creator and distribution composing > > tools and revisor as a gui for tying them up together, what would be > > nice is to have a web front end which mimics Pirut that let's users > > select groups, individual packages and perhaps a third party/custom > > repository and get a live or regular image. Would be it possible for > > someone in the infrastructure team to look into this? > > > > This feels less like a Infrastructure thing and more like a general software > development thing. If some software dev creates the web tools to do this, > then it would become an Infrastructure thing to find a place to host it and > run it. +1 -sv From jkeating at redhat.com Thu May 17 05:14:12 2007 From: jkeating at redhat.com (Jesse Keating) Date: Thu, 17 May 2007 01:14:12 -0400 Subject: Outage Notification - 2007-05-17 04:00 [UTC] In-Reply-To: <464B3EDB.2070709@redhat.com> References: <464B3EDB.2070709@redhat.com> Message-ID: <200705170114.13392.jkeating@redhat.com> On Wednesday 16 May 2007 13:26:51 Mike McGrath wrote: > There will be an outage starting at 2007-05-17 04:00 [UTC], which will last > approximately 1 hour. To convert UTC to your local time, use: > http://www.timeanddate.com/worldclock/converter.html > > Affected Services: > > Buildsystem > > Unaffected Services: > > Websites > CVS / Source Control > Database > DNS > Mail > Torrent > > > > Reason for Outage: > Upgrading Koji to a new version and moving koji store to new hardware. > This outage should be approximately 1 hour, maybe longer if the sync is > running slower then expected. Will be coordinating in #fedora-admin The > build system should either reject connections or queue connections during > this time. > > Contact Information: > > Please join #fedora-admin in irc.freenode.net or respond to this email to > track the status of this outage. > Current status: Koji software has been updated. We're still waiting for the final rsync to finish to move to new storage. The outage may wind up taking more than an hour, however we really need to get to this new storage so we'll keep things down until that is done. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From mmcgrath at redhat.com Thu May 17 05:17:33 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 17 May 2007 00:17:33 -0500 Subject: Outage Notification - 2007-05-17 04:00 [UTC] In-Reply-To: <464B3EDB.2070709@redhat.com> References: <464B3EDB.2070709@redhat.com> Message-ID: <464BE56D.604@redhat.com> Mike McGrath wrote: > There will be an outage starting at 2007-05-17 04:00 [UTC], which will > last > approximately 1 hour. To convert UTC to your local time, use: > http://www.timeanddate.com/worldclock/converter.html An outage is as an outage does. This one is taking longer then we had planned for a few reasons. Stop by #fedora-admin to check on the status but we're going to see this one through till its done. I'll send a notification when that is. -Mike From mmcgrath at redhat.com Thu May 17 08:40:56 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 17 May 2007 03:40:56 -0500 Subject: Outage Notification - 2007-05-17 04:00 [UTC] In-Reply-To: <464BE56D.604@redhat.com> References: <464B3EDB.2070709@redhat.com> <464BE56D.604@redhat.com> Message-ID: <464C1518.5080706@redhat.com> Mike McGrath wrote: > Mike McGrath wrote: >> There will be an outage starting at 2007-05-17 04:00 [UTC], which >> will last >> approximately 1 hour. To convert UTC to your local time, use: >> http://www.timeanddate.com/worldclock/converter.html > > An outage is as an outage does. This one is taking longer then we had > planned for a few reasons. Stop by #fedora-admin to check on the > status but we're going to see this one through till its done. I'll > send a notification when that is. Outage Over. There were multiple changes with this outage so if anything seems out of place please contact us and let us know. Total outage time: roughly 4 hours. -Mike From Axel.Thimm at ATrpms.net Thu May 17 11:58:48 2007 From: Axel.Thimm at ATrpms.net (Axel Thimm) Date: Thu, 17 May 2007 13:58:48 +0200 Subject: koji: Mod_python error: "PythonHandler mod_python.publisher" Message-ID: <20070517115848.GA13287@neu.nirvana> koji gives the following error: Mod_python error: "PythonHandler mod_python.publisher" Traceback (most recent call last): File "/usr/lib/python2.4/site-packages/mod_python/apache.py", line 299, in HandlerDispatch result = object(req) File "/usr/lib/python2.4/site-packages/mod_python/publisher.py", line 213, in handler published = publish_object(req, object) File "/usr/lib/python2.4/site-packages/mod_python/publisher.py", line 412, in publish_object return publish_object(req,util.apply_fs_data(object, req.form, req=req)) File "/usr/lib/python2.4/site-packages/mod_python/util.py", line 439, in apply_fs_data return object(**args) File "/usr/share/koji-web/scripts/index.py", line 405, in taskinfo host = server.getHost(task['host_id']) File "/usr/lib/python2.4/site-packages/koji/__init__.py", line 1075, in __call__ return self.__func(self.__name,args,opts) File "/usr/lib/python2.4/site-packages/koji/__init__.py", line 1300, in _callMethod return proxy.__getattr__(name)(*args) File "/usr/lib/python2.4/xmlrpclib.py", line 1096, in __call__ return self.__send(self.__name, args) File "/usr/lib/python2.4/xmlrpclib.py", line 1383, in __request verbose=self.__verbose File "/usr/lib/python2.4/xmlrpclib.py", line 1137, in request headers ProtocolError: -- Axel.Thimm at ATrpms.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From dennis at ausil.us Thu May 17 12:09:15 2007 From: dennis at ausil.us (Dennis Gilmore) Date: Thu, 17 May 2007 07:09:15 -0500 Subject: koji: Mod_python error: "PythonHandler mod_python.publisher" In-Reply-To: <20070517115848.GA13287@neu.nirvana> References: <20070517115848.GA13287@neu.nirvana> Message-ID: <200705170709.23331.dennis@ausil.us> Once upon a time Thursday 17 May 2007, Axel Thimm wrote: > koji gives the following error: Fixed thanks for letting us know. Dennis -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From bugs.michael at gmx.net Thu May 17 12:10:16 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Thu, 17 May 2007 14:10:16 +0200 Subject: koji: Mod_python error: "PythonHandler mod_python.publisher" In-Reply-To: <20070517115848.GA13287@neu.nirvana> References: <20070517115848.GA13287@neu.nirvana> Message-ID: <20070517141016.40595ef9.bugs.michael@gmx.net> On Thu, 17 May 2007 13:58:48 +0200, Axel Thimm wrote: > koji gives the following error: > > Mod_python error: "PythonHandler mod_python.publisher" When exactly? Is this when you tried to install it yourself? (Then don't forget the configuration of either TLS or Kerberos) From dennis at ausil.us Thu May 17 12:23:19 2007 From: dennis at ausil.us (Dennis Gilmore) Date: Thu, 17 May 2007 07:23:19 -0500 Subject: koji: Mod_python error: "PythonHandler mod_python.publisher" In-Reply-To: <20070517141016.40595ef9.bugs.michael@gmx.net> References: <20070517115848.GA13287@neu.nirvana> <20070517141016.40595ef9.bugs.michael@gmx.net> Message-ID: <200705170723.19973.dennis@ausil.us> Once upon a time Thursday 17 May 2007, Michael Schwendt wrote: > On Thu, 17 May 2007 13:58:48 +0200, Axel Thimm wrote: > > koji gives the following error: > > > > Mod_python error: "PythonHandler mod_python.publisher" > > When exactly? > > Is this when you tried to install it yourself? > (Then don't forget the configuration of either TLS or Kerberos) > koji.fedoraproject.org/koji was giving it. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From Matt_Domsch at dell.com Thu May 17 13:04:25 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Thu, 17 May 2007 08:04:25 -0500 Subject: Review needed: python-IPy Message-ID: <20070517130425.GA9715@lists.us.dell.com> mirrormanager uses a Python module IPy to calculate network masks. I packaged it for Fedora, but it needs review. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=239761 I have this installed on app3 and app4 so mirrormanager can work, and we can upgrade it after review if any changes are necessary. Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From kanarip at kanarip.com Thu May 17 15:31:50 2007 From: kanarip at kanarip.com (Jeroen van Meeuwen) Date: Thu, 17 May 2007 17:31:50 +0200 Subject: Web based interface for live image/ regular image creation In-Reply-To: <200705170026.16503.jkeating@redhat.com> References: <464BB6BA.8000306@fedoraproject.org> <200705170026.16503.jkeating@redhat.com> Message-ID: <464C7566.7020806@kanarip.com> Jesse Keating wrote: > On Wednesday 16 May 2007 21:58:18 Rahul Sundaram wrote: >> Hi >> >> Now that we have external live image creator and distribution composing >> tools and revisor as a gui for tying them up together, what would be >> nice is to have a web front end which mimics Pirut that let's users >> select groups, individual packages and perhaps a third party/custom >> repository and get a live or regular image. Would be it possible for >> someone in the infrastructure team to look into this? >> > > This feels less like a Infrastructure thing and more like a general software > development thing. If some software dev creates the web tools to do this, > then it would become an Infrastructure thing to find a place to host it and > run it. > > +1, Revisor has a client/server model on the wish-list including a XML-RPC or web-interface driven model. -kanarip From sundaram at fedoraproject.org Thu May 17 20:09:18 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Fri, 18 May 2007 01:39:18 +0530 Subject: Software in infrastructure vs repositories In-Reply-To: <1179368751.10909.21.camel@rivendell> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> <1179368751.10909.21.camel@rivendell> Message-ID: <464CB66E.3030901@fedoraproject.org> seth vidal wrote: > On Thu, 2007-05-17 at 07:53 +0530, Rahul Sundaram wrote: >> Dennis Gilmore wrote: >>> Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: >>>> Hi >>>> >>>> Has Fedora Infrastructure team consider a rule not to deploy any >>>> proprietary software and not even any software that is not available in >>>> the official Fedora repository? That would make things easier for >>>> ensuring good packaging, maintenance and licensing. >>> That is what our rules are. we only use what is in Fedora. if there is some >>> OSS thing we need we get it in Fedora before we use it. >> Can you document this anywhere? > > Why? If it is policy it should be documented. Rahul From skvidal at linux.duke.edu Thu May 17 20:11:52 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Thu, 17 May 2007 16:11:52 -0400 Subject: Software in infrastructure vs repositories In-Reply-To: <464CB66E.3030901@fedoraproject.org> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> <1179368751.10909.21.camel@rivendell> <464CB66E.3030901@fedoraproject.org> Message-ID: <1179432712.10909.66.camel@rivendell> On Fri, 2007-05-18 at 01:39 +0530, Rahul Sundaram wrote: > seth vidal wrote: > > On Thu, 2007-05-17 at 07:53 +0530, Rahul Sundaram wrote: > >> Dennis Gilmore wrote: > >>> Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: > >>>> Hi > >>>> > >>>> Has Fedora Infrastructure team consider a rule not to deploy any > >>>> proprietary software and not even any software that is not available in > >>>> the official Fedora repository? That would make things easier for > >>>> ensuring good packaging, maintenance and licensing. > >>> That is what our rules are. we only use what is in Fedora. if there is some > >>> OSS thing we need we get it in Fedora before we use it. > >> Can you document this anywhere? > > > > Why? > > If it is policy it should be documented. give me a break are we really so much of a bureaucratic organization that we can't allow any 'oral history' of some policies? -sv From rtlm10 at gmail.com Thu May 17 20:32:28 2007 From: rtlm10 at gmail.com (Russell Harrison) Date: Thu, 17 May 2007 16:32:28 -0400 Subject: Software in infrastructure vs repositories In-Reply-To: <1179432712.10909.66.camel@rivendell> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> <1179368751.10909.21.camel@rivendell> <464CB66E.3030901@fedoraproject.org> <1179432712.10909.66.camel@rivendell> Message-ID: <1ed4a0130705171332q7210aa76te1d3d80153c884cd@mail.gmail.com> On 5/17/07, seth vidal wrote: > give me a break are we really so much of a bureaucratic organization > that we can't allow any 'oral history' of some policies? Wouldn't just a few links to the mail threads on the wiki be enough? From experiences here at work if you don't at least point to the discussion of a policy someone new will violate it simply because they didn't know. On the flip side of this discussion I just assumed that was the policy for the infrastructure team considering the directions of the entire Fedora project. Once could argue the policy is "inferred". Russell ---- Russell Harrison Systems Administrator -- Linux Desktops Cisco Systems, Inc. -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Fri May 18 01:02:05 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 17 May 2007 20:02:05 -0500 Subject: Proxy server upgrades Message-ID: <464CFB0D.6040307@redhat.com> I'm going to upgrade the proxy servers to RHEL5. This is a medium risk because these boxes are on a different VLAN then our dhcp server, as such we cannot PXE boot them without a soc request. I'll start with proxy1 tonight then proxy2 tomorrow or this weekend. If all goes according to plan there should be no outages. -Mike From paulo.banon at googlemail.com Fri May 18 08:13:24 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Fri, 18 May 2007 10:13:24 +0200 Subject: cacti public In-Reply-To: <463F6B62.70905@gmail.com> References: <463E732D.104@redhat.com> <200705071224.12515.jkeating@redhat.com> <463F52F1.9060507@fedoraproject.org> <200705071229.04657.jkeating@redhat.com> <463F6B62.70905@gmail.com> Message-ID: <7a41c4bc0705180113w7535b4c7u5bae92de4937ee23@mail.gmail.com> Mike, I was looking into cacti and about to add app5 there, then i canceled that since i had to do something else, and now no graphs show in the tree view, even so i see all devices and graphs in edit mode. Any idea ?! Paulo On 5/7/07, Jonathan Steffan wrote: > > I've looked at http://www.zenoss.com/ when Jesse mentioned it on IRC. I > want to use it and if it needs to be packaged.... > > I suppose I will look at how much work it would be. > > Jesse Keating wrote: > > On Monday 07 May 2007 12:25:21 Rahul Sundaram wrote: > > > >> Maybe they are willing to put in the effort to make Plone work with > >> Python 2.5 and maintain zenoss in Fedora? Doesn't hurt to use the > >> contacts and ask. > >> > > > > I already informed them of the situation. > > > > Oh, you mean the situation where we have no support for Zope, and now no > support for Plone and... oh, we find another neat software that runs on > Zope and it wont work? ;-) > > Just kidding. I'll report back about what I think it will take to > package this in sort time. > > Jonathan > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From bugs.michael at gmx.net Fri May 18 09:23:55 2007 From: bugs.michael at gmx.net (Michael Schwendt) Date: Fri, 18 May 2007 11:23:55 +0200 Subject: FAS logout problem Message-ID: <20070518112355.5296e898.bugs.michael@gmx.net> https://admin.fedoraproject.org/accounts/logout.cgi prints the Python code instead of executing it: #!/usr/bin/python import website website.clear_auth() website.print_header("Logout Done") website.print_footer("Logout Done") From mmcgrath at redhat.com Fri May 18 13:44:07 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 18 May 2007 08:44:07 -0500 Subject: FAS logout problem In-Reply-To: <20070518112355.5296e898.bugs.michael@gmx.net> References: <20070518112355.5296e898.bugs.michael@gmx.net> Message-ID: <464DADA7.30807@redhat.com> Michael Schwendt wrote: > https://admin.fedoraproject.org/accounts/logout.cgi > > prints the Python code instead of executing it: > > > #!/usr/bin/python > > import website > website.clear_auth() > website.print_header("Logout Done") > website.print_footer("Logout Done") > Fixed, thanks. -Mike From mmcgrath at redhat.com Fri May 18 21:24:28 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 18 May 2007 16:24:28 -0500 Subject: selinux policies, RHEL5 and puppet Message-ID: <464E198C.2060902@redhat.com> Anyone have any experience or ideas on how to manage selinux modules in puppet? -Mike From frosario777 at gmail.com Sat May 19 02:26:47 2007 From: frosario777 at gmail.com (Freddie Rosario) Date: Fri, 18 May 2007 19:26:47 -0700 Subject: Participation Message-ID: Hey to all, My name is Freddie and I am looking to get involved in Fedora in some way. I browsed the website and saw that Fedora is looking for people who have some experience with Linux and Python in general. I would like to donate about an hour every night or every other night. Does anyone need any help with a project? I currently work for Google and have some experience with somewhat large networks and computing environments. I want to start small and work my way up. Even though I work for Google, I do not want to give the impression that I know everything. I am here to learn and help out where I can. Thank you for your time! --Freddie -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Sat May 19 02:39:26 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 18 May 2007 21:39:26 -0500 Subject: Participation In-Reply-To: References: Message-ID: <464E635E.4010106@redhat.com> Freddie Rosario wrote: > Hey to all, > > My name is Freddie and I am looking to get involved in Fedora in some > way. I > browsed the website and saw that Fedora is looking for people who have > some > experience with Linux and Python in general. I would like to donate > about an > hour every night or every other night. Does anyone need any help with a > project? I currently work for Google and have some experience with > somewhat > large networks and computing environments. I want to start small and > work my > way up. Even though I work for Google, I do not want to give the > impression > that I know everything. I am here to learn and help out where I can. > Thank > you for your time! Good to hear. Anyone have any python tasks for Freedie at the moment? -Mike From frosario777 at gmail.com Sat May 19 03:28:26 2007 From: frosario777 at gmail.com (Freddie Rosario) Date: Fri, 18 May 2007 20:28:26 -0700 Subject: Participation In-Reply-To: <464E635E.4010106@redhat.com> References: <464E635E.4010106@redhat.com> Message-ID: Mike and Fedora Infrastructure team, Python is only one of my skills. If possible I would like to know where the team needs the most help and I will try to work around your needs. Like I said before, I would like to start small and see how much I can contribute. Thanks again for any feedback. :) On 5/18/07, Mike McGrath wrote: > > Freddie Rosario wrote: > > Hey to all, > > > > My name is Freddie and I am looking to get involved in Fedora in some > > way. I > > browsed the website and saw that Fedora is looking for people who have > > some > > experience with Linux and Python in general. I would like to donate > > about an > > hour every night or every other night. Does anyone need any help with a > > project? I currently work for Google and have some experience with > > somewhat > > large networks and computing environments. I want to start small and > > work my > > way up. Even though I work for Google, I do not want to give the > > impression > > that I know everything. I am here to learn and help out where I can. > > Thank > > you for your time! > > Good to hear. Anyone have any python tasks for Freedie at the moment? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Matt_Domsch at dell.com Mon May 21 14:07:57 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Mon, 21 May 2007 09:07:57 -0500 Subject: Participation In-Reply-To: References: <464E635E.4010106@redhat.com> Message-ID: <20070521140756.GA31500@lists.us.dell.com> On Fri, May 18, 2007 at 08:28:26PM -0700, Freddie Rosario wrote: > Mike and Fedora Infrastructure team, > > Python is only one of my skills. If possible I would like to know where > the team needs the most help and I will try to work around your needs. > Like I said before, I would like to start small and see how much I can > contribute. Thanks again for any feedback. :) I'd love for someone who really knows python, as opposed to my functional fumbling, to code review and suggest improvements / provide patches to mirrormanager. It's an opportunity to clean up some critical and widely used code, as well as an instructional opportunity. https://hosted.fedoraproject.org/projects/mirrormanager Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From frosario777 at gmail.com Mon May 21 18:39:39 2007 From: frosario777 at gmail.com (Freddie Rosario) Date: Mon, 21 May 2007 11:39:39 -0700 Subject: Participation In-Reply-To: <20070521140756.GA31500@lists.us.dell.com> References: <464E635E.4010106@redhat.com> <20070521140756.GA31500@lists.us.dell.com> Message-ID: Matt Domsch and fedora infrastructure team, Right now Mike McGrath has asked me to help him out with the smolt project. I will give him a hand on that and if he is satisfied that I did a good job, then I will move on to something more critical such as code reviews and mirrormanager. I am far from a python expert but I will help out wherever I can. --Freddie On 5/21/07, Matt Domsch wrote: > > On Fri, May 18, 2007 at 08:28:26PM -0700, Freddie Rosario wrote: > > Mike and Fedora Infrastructure team, > > > > Python is only one of my skills. If possible I would like to know > where > > the team needs the most help and I will try to work around your > needs. > > Like I said before, I would like to start small and see how much I > can > > contribute. Thanks again for any feedback. :) > > I'd love for someone who really knows python, as opposed to my > functional fumbling, to code review and suggest improvements / provide > patches to mirrormanager. It's an opportunity to clean up some > critical and widely used code, as well as an instructional opportunity. > > https://hosted.fedoraproject.org/projects/mirrormanager > > Thanks, > Matt > > -- > Matt Domsch > Software Architect > Dell Linux Solutions linux.dell.com & www.dell.com/linux > Linux on Dell mailing lists @ http://lists.us.dell.com > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Mon May 21 18:52:14 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 21 May 2007 13:52:14 -0500 Subject: Participation In-Reply-To: References: <464E635E.4010106@redhat.com> <20070521140756.GA31500@lists.us.dell.com> Message-ID: <4651EA5E.60300@redhat.com> Freddie Rosario wrote: > Matt Domsch and fedora infrastructure team, > > Right now Mike McGrath has asked me to help him out with the smolt > project. > I will give him a hand on that and if he is satisfied that I did a > good job, > then I will move on to something more critical such as code reviews and > mirrormanager. I am far from a python expert but I will help out > wherever I > can. Take a look with matt, his stuff is more important :) -Mike From mmcgrath at redhat.com Tue May 22 18:45:02 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 22 May 2007 13:45:02 -0500 Subject: Image standards Message-ID: <46533A2E.4060705@redhat.com> Anyone have a problem with us using SVG for image sources and PNG for final copies on our websites? We can grandfather this in but mizmo suggested it on the websites-list. I think its a good idea. -Mike From tchung at fedoraproject.org Tue May 22 19:13:15 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 22 May 2007 12:13:15 -0700 Subject: Image standards In-Reply-To: <46533A2E.4060705@redhat.com> References: <46533A2E.4060705@redhat.com> Message-ID: <369bce3b0705221213h6f1f1072x9ecd7a63f58e37f4@mail.gmail.com> On 5/22/07, Mike McGrath wrote: > Anyone have a problem with us using SVG for image sources and PNG for > final copies on our websites? We can grandfather this in but mizmo > suggested it on the websites-list. I think its a good idea. > > -Mike > I think it's *right thing* to do. :) -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From a.badger at gmail.com Tue May 22 19:31:32 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Tue, 22 May 2007 12:31:32 -0700 Subject: Image standards In-Reply-To: <46533A2E.4060705@redhat.com> References: <46533A2E.4060705@redhat.com> Message-ID: <1179862292.5161.87.camel@localhost.localdomain> On Tue, 2007-05-22 at 13:45 -0500, Mike McGrath wrote: > Anyone have a problem with us using SVG for image sources and PNG for > final copies on our websites? We can grandfather this in but mizmo > suggested it on the websites-list. I think its a good idea. It depends on what is meant by "image". png and jpeg have vastly different compression characteristics. Using jpeg where appropriate can save someone on dialup a tremendous amount of time. However, many of the images we create as SVG are going to be the kind that store well as png... Since it looks like both jpeg and png are free formats, I'd like to avoid a "only pngs allowed here" policy. Both png and jpg have their place. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From tchung at fedoraproject.org Tue May 22 19:38:56 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 22 May 2007 12:38:56 -0700 Subject: Image standards In-Reply-To: <1179862292.5161.87.camel@localhost.localdomain> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> Message-ID: <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> On 5/22/07, Toshio Kuratomi wrote: > On Tue, 2007-05-22 at 13:45 -0500, Mike McGrath wrote: > > Anyone have a problem with us using SVG for image sources and PNG for > > final copies on our websites? We can grandfather this in but mizmo > > suggested it on the websites-list. I think its a good idea. > > It depends on what is meant by "image". png and jpeg have vastly > different compression characteristics. Using jpeg where appropriate can > save someone on dialup a tremendous amount of time. However, many of > the images we create as SVG are going to be the kind that store well as > png... > > Since it looks like both jpeg and png are free formats, I'd like to > avoid a "only pngs allowed here" policy. Both png and jpg have their > place. > > -Toshio We're not saying we will force someone to use png format only. However we'll *encourage* to use patent-free png format in Fedora Project. Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From a.badger at gmail.com Tue May 22 20:05:30 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Tue, 22 May 2007 13:05:30 -0700 Subject: Image standards In-Reply-To: <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> Message-ID: <1179864330.5161.93.camel@localhost.localdomain> On Tue, 2007-05-22 at 12:38 -0700, Thomas Chung wrote: > On 5/22/07, Toshio Kuratomi wrote: > > On Tue, 2007-05-22 at 13:45 -0500, Mike McGrath wrote: > > > Anyone have a problem with us using SVG for image sources and PNG for > > > final copies on our websites? We can grandfather this in but mizmo > > > suggested it on the websites-list. I think its a good idea. > > > > It depends on what is meant by "image". png and jpeg have vastly > > different compression characteristics. Using jpeg where appropriate can > > save someone on dialup a tremendous amount of time. However, many of > > the images we create as SVG are going to be the kind that store well as > > png... > > > > Since it looks like both jpeg and png are free formats, I'd like to > > avoid a "only pngs allowed here" policy. Both png and jpg have their > > place. > > > > -Toshio > > > We're not saying we will force someone to use png format only. > However we'll *encourage* to use patent-free png format in Fedora Project. Is there a current patent on jpeg? FSF has encouraged people to use jpeg in the past and the wikipedia article mizmo pointed to seems to say that the company that was asserting patent rights has had its patent invalidated and is no longer pursuing any claims. wikipedia article: http://en.wikipedia.org/wiki/JPEG#Potential_patent_issues Link from the wikipedia article:: http://www.pubpat.org/jpegsurrendered.htm -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From tchung at fedoraproject.org Tue May 22 20:28:20 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 22 May 2007 13:28:20 -0700 Subject: Image standards In-Reply-To: <1179864330.5161.93.camel@localhost.localdomain> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> <1179864330.5161.93.camel@localhost.localdomain> Message-ID: <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> On 5/22/07, Toshio Kuratomi wrote: > Is there a current patent on jpeg? FSF has encouraged people to use > jpeg in the past and the wikipedia article mizmo pointed to seems to say > that the company that was asserting patent rights has had its patent > invalidated and is no longer pursuing any claims. > > wikipedia article: > http://en.wikipedia.org/wiki/JPEG#Potential_patent_issues > Link from the wikipedia article:: > http://www.pubpat.org/jpegsurrendered.htm > > -Toshio > Disclaimer: "I'm not a lawyer. I rather use with paten-free format" http://www.jpeg.org/faq.phtml Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From mmcgrath at redhat.com Tue May 22 20:44:50 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 22 May 2007 15:44:50 -0500 Subject: Image standards In-Reply-To: <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> <1179864330.5161.93.camel@localhost.localdomain> <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> Message-ID: <46535642.3020209@redhat.com> Thomas Chung wrote: > On 5/22/07, Toshio Kuratomi wrote: > > Disclaimer: "I'm not a lawyer. I rather use with paten-free format" > > http://www.jpeg.org/faq.phtml I think jpegs are like jay-walking now. No one cares though someone might pretend to :) -Mike From a.badger at gmail.com Tue May 22 21:55:36 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Tue, 22 May 2007 14:55:36 -0700 Subject: Image standards In-Reply-To: <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> <1179864330.5161.93.camel@localhost.localdomain> <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> Message-ID: <1179870936.5161.109.camel@localhost.localdomain> On Tue, 2007-05-22 at 13:28 -0700, Thomas Chung wrote: > On 5/22/07, Toshio Kuratomi wrote: > > Is there a current patent on jpeg? FSF has encouraged people to use > > jpeg in the past and the wikipedia article mizmo pointed to seems to say > > that the company that was asserting patent rights has had its patent > > invalidated and is no longer pursuing any claims. > > > > wikipedia article: > > http://en.wikipedia.org/wiki/JPEG#Potential_patent_issues > > Link from the wikipedia article:: > > http://www.pubpat.org/jpegsurrendered.htm > > > > -Toshio > > > > Disclaimer: "I'm not a lawyer. I rather use with paten-free format" > > http://www.jpeg.org/faq.phtml > What am I supposed to see there? I clicked on the link for "What is the patent situation with jpeg?" and found this: ''' For the JPEG standard, IS 10918-1 no patent declarations were received prior to its publication that, in the opinion of the committee at the time, applied to the baseline implementation. [...] 2002, it became widely publicised that one or more companies were making claims in some countries that they had patents which they believed read on the original JPEG standard IS10918-1. The JPEG Committee produces standards, which have a global basis, and are unable to comment on the validity of such claims, or potential infringement by particular implementations within specific jurisdictions. No such claims have (at January 2004) been registered formally through the appropriate channels at ISO and ITU-T, so far as the Webmaster is aware. ''' [1]_ Googling has shown more citations of the Fogent Patent which, as noted earlier, has been both ruled invalid and has expired, and some information about optional features of JPEG which web browsers don't understand which are patented but nothing else (For example, [2]_ and [3]_). Basically, I have yet to see any indication that there are current, valid patents on jpeg so I don't understand why you think it does not qualify as a "patent-free format". [1]_: Jpeg groups FAQ on possible jpeg patents http://www.jpeg.org/faq.phtml?action=show_answer&question_id=q3f042a5e42fd8 [2]_: JFIF entry which shows no known patents http://www.digitalpreservation.gov/formats/fdd/fdd000018.shtml [3]_: JPEG entry which shows only the Fogent patent claim http://www.digitalpreservation.gov/formats/fdd/fdd000017.shtml -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From giallu at gmail.com Tue May 22 22:09:59 2007 From: giallu at gmail.com (Gianluca Sforna) Date: Wed, 23 May 2007 00:09:59 +0200 Subject: Image standards In-Reply-To: <1179862292.5161.87.camel@localhost.localdomain> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> Message-ID: On 5/22/07, Toshio Kuratomi wrote: > On Tue, 2007-05-22 at 13:45 -0500, Mike McGrath wrote: > > Anyone have a problem with us using SVG for image sources and PNG for > > final copies on our websites? We can grandfather this in but mizmo > > suggested it on the websites-list. I think its a good idea. > > It depends on what is meant by "image". png and jpeg have vastly > different compression characteristics. Using jpeg where appropriate can > save someone on dialup a tremendous amount of time. However, many of > the images we create as SVG are going to be the kind that store well as > png... Sure, but often images are converted to 24bit png even when that is not needed. I suggest (if not already done) using ImageMagick and a recipe like: convert -quality 0 +dither -colors 256 infile.png out.png whenever possible to maximize the gains of compression HTH Gianluca From tchung at fedoraproject.org Tue May 22 22:42:20 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 22 May 2007 15:42:20 -0700 Subject: Image standards In-Reply-To: <1179870936.5161.109.camel@localhost.localdomain> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> <1179864330.5161.93.camel@localhost.localdomain> <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> <1179870936.5161.109.camel@localhost.localdomain> Message-ID: <369bce3b0705221542s452485f4ka7edccdf388d3fec@mail.gmail.com> On 5/22/07, Toshio Kuratomi wrote: > Basically, I have yet to see any indication that there are current, > valid patents on jpeg so I don't understand why you think it does not > qualify as a "patent-free format". It seems we're arguing for something we don't know for sure. We all agree png is "patent-free format" but we do not know for sure if there is still *potential* patent issue remaining with jpg. That's what we're trying to avoid. Once again, I'm not lawyer so if you believe jpg is "patent-free format" for sure, please be my guest. :) Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From a.badger at gmail.com Tue May 22 23:19:16 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Tue, 22 May 2007 16:19:16 -0700 Subject: Image standards In-Reply-To: <369bce3b0705221542s452485f4ka7edccdf388d3fec@mail.gmail.com> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> <1179864330.5161.93.camel@localhost.localdomain> <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> <1179870936.5161.109.camel@localhost.localdomain> <369bce3b0705221542s452485f4ka7edccdf388d3fec@mail.gmail.com> Message-ID: <1179875956.5161.119.camel@localhost.localdomain> On Tue, 2007-05-22 at 15:42 -0700, Thomas Chung wrote: > On 5/22/07, Toshio Kuratomi wrote: > > Basically, I have yet to see any indication that there are current, > > valid patents on jpeg so I don't understand why you think it does not > > qualify as a "patent-free format". > > It seems we're arguing for something we don't know for sure. > We all agree png is "patent-free format" but we do not know for sure > if there is still *potential* patent issue remaining with jpg. That's > what we're trying to avoid. Once again, I'm not lawyer so if you > believe jpg is "patent-free format" for sure, please be my guest. :) What I'm saying is that I haven't been able to find anything that claims there are any current patent problems with jpeg. Which means that jpeg is as "patent-free" as png -- ie I can also not find anything which claims that there's any patent problems with png. Bringing up a patent that is both expired and ruled invalid by the patent office and saying that is a reason to avoid a format is just wrong-headed. Should we not use SSL and GPG because they use algorithms which have expired patents? If you can point to any current claims that the format is patent encumbered then we have a reason to ban its use. Otherwise you're just spreading fear of something that doesn't exist to prevent the use of a free format. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From tchung at fedoraproject.org Tue May 22 23:29:57 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 22 May 2007 16:29:57 -0700 Subject: Image standards In-Reply-To: <1179875956.5161.119.camel@localhost.localdomain> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> <1179864330.5161.93.camel@localhost.localdomain> <369bce3b0705221328q3cdf3ab5mea3cd06cb2c22dc1@mail.gmail.com> <1179870936.5161.109.camel@localhost.localdomain> <369bce3b0705221542s452485f4ka7edccdf388d3fec@mail.gmail.com> <1179875956.5161.119.camel@localhost.localdomain> Message-ID: <369bce3b0705221629h4629af51j6bd99e5c0abd8b2c@mail.gmail.com> On 5/22/07, Toshio Kuratomi wrote: > What I'm saying is that I haven't been able to find anything that claims > there are any current patent problems with jpeg. Which means that jpeg > is as "patent-free" as png -- ie I can also not find anything which > claims that there's any patent problems with png. > > Bringing up a patent that is both expired and ruled invalid by the > patent office and saying that is a reason to avoid a format is just > wrong-headed. Should we not use SSL and GPG because they use algorithms > which have expired patents? > > If you can point to any current claims that the format is patent > encumbered then we have a reason to ban its use. Otherwise you're just > spreading fear of something that doesn't exist to prevent the use of a > free format. > > -Toshio Perhaps, it's time to ask someone who knows about the law. Let's ask our Fedora Project Board and its lawyers for better answer. Max, could you ask the board and its lawyers if JPEG is "patent-free" format as PNG ? Also which format is more appropriate to use our Fedora Project website? We're trying to standardize image format used in Fedora Project cross-wide. Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From notting at redhat.com Wed May 23 01:08:43 2007 From: notting at redhat.com (Bill Nottingham) Date: Tue, 22 May 2007 21:08:43 -0400 Subject: Vote for the (probable) name of Fedora 7! Message-ID: <20070523010843.GA28513@nostromo.devel.redhat.com> The board has sent a list of suggested names for Fedora 7 to our legal department, and they have responded with the names that have passed preliminary legal approval. Please vote for your favorite choice at: https://admin.fedoraproject.org/voting/vote.cgi The choices are 'Lee', 'Sherman', 'Nothing', 'Cylon', 'Moonshine', 'Siegfried'. You will need to log in with your Fedora account system user/password. Voting will be open until 2007-05-25 00:00:00 UTC. Thanks to Toshio Kuratomi for getting this set up. We apologize for the short voting timeframe - final legal approval can take up to five days, and we'd really like to avoid slipping solely for the name of the release. If there end up being legal issues with the name selected, the Board will decide on the name. (Who knows, could end up being Zod 2: Electric Zod-a-loo). Bill From nicu_fedora at nicubunu.ro Wed May 23 07:36:24 2007 From: nicu_fedora at nicubunu.ro (Nicu Buculei) Date: Wed, 23 May 2007 10:36:24 +0300 Subject: Image standards In-Reply-To: <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> References: <46533A2E.4060705@redhat.com> <1179862292.5161.87.camel@localhost.localdomain> <369bce3b0705221238x50d17acake57ed6ae14fe33a0@mail.gmail.com> Message-ID: <4653EEF8.3000509@nicubunu.ro> Thomas Chung wrote: > > We're not saying we will force someone to use png format only. > However we'll *encourage* to use patent-free png format in Fedora Project. Please, do this, *encourage* but not *force*. We may want to use photos, for example a photo of OLPC or photos of Fedora contributors present at some event and PNG has very bad compression for photos. -- nicu :: http://nicubunu.ro :: http://nicubunu.blogspot.com Cool Fedora wallpapers: http://fedora.nicubunu.ro/wallpapers/ Open Clip Art Library: http://www.openclipart.org my Fedora stuff: http://fedora.nicubunu.ro From nicu_fedora at nicubunu.ro Wed May 23 07:41:50 2007 From: nicu_fedora at nicubunu.ro (Nicu Buculei) Date: Wed, 23 May 2007 10:41:50 +0300 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <20070523010843.GA28513@nostromo.devel.redhat.com> References: <20070523010843.GA28513@nostromo.devel.redhat.com> Message-ID: <4653F03E.8060202@nicubunu.ro> Bill Nottingham wrote: > > Please vote for your favorite choice at: > > https://admin.fedoraproject.org/voting/vote.cgi > > The choices are 'Lee', 'Sherman', 'Nothing', 'Cylon', 'Moonshine', 'Siegfried'. If the voter is supposed to select no more than one name, why check boxes are used instead of radio buttons? -- nicu :: http://nicubunu.ro :: http://nicubunu.blogspot.com Cool Fedora wallpapers: http://fedora.nicubunu.ro/wallpapers/ Open Clip Art Library: http://www.openclipart.org my Fedora stuff: http://fedora.nicubunu.ro From jkeating at redhat.com Wed May 23 14:53:24 2007 From: jkeating at redhat.com (Jesse Keating) Date: Wed, 23 May 2007 10:53:24 -0400 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <4653F03E.8060202@nicubunu.ro> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <4653F03E.8060202@nicubunu.ro> Message-ID: <200705231053.24410.jkeating@redhat.com> On Wednesday 23 May 2007 03:41:50 Nicu Buculei wrote: > If the voter is supposed to select no more than one name, why check > boxes are used instead of radio buttons? Some elections allow you to select a specific number of options. If you try to select a second item, the app doesn't let you anyway. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From toivo at acnet.usf.edu Wed May 23 15:07:41 2007 From: toivo at acnet.usf.edu (Voll, Toivo) Date: Wed, 23 May 2007 11:07:41 -0400 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <20070523010843.GA28513@nostromo.devel.redhat.com> References: <20070523010843.GA28513@nostromo.devel.redhat.com> Message-ID: <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> Is there an explanation of the names somewhere? What they stand for, why they are being suggested, how they compare to the previous names... -- Toivo Voll University of South Florida Academic Computing Data Network Management -----Original Message----- From: fedora-infrastructure-list-bounces at redhat.com [mailto:fedora-infrastructure-list-bounces at redhat.com] On Behalf Of Bill Nottingham Sent: Tuesday, May 22, 2007 21:09 To: fedora-infrastructure-list at redhat.com Subject: Vote for the (probable) name of Fedora 7! The board has sent a list of suggested names for Fedora 7 to our legal department, and they have responded with the names that have passed preliminary legal approval. Please vote for your favorite choice at: https://admin.fedoraproject.org/voting/vote.cgi The choices are 'Lee', 'Sherman', 'Nothing', 'Cylon', 'Moonshine', 'Siegfried'. You will need to log in with your Fedora account system user/password. Voting will be open until 2007-05-25 00:00:00 UTC. Thanks to Toshio Kuratomi for getting this set up. We apologize for the short voting timeframe - final legal approval can take up to five days, and we'd really like to avoid slipping solely for the name of the release. If there end up being legal issues with the name selected, the Board will decide on the name. (Who knows, could end up being Zod 2: Electric Zod-a-loo). Bill _______________________________________________ Fedora-infrastructure-list mailing list Fedora-infrastructure-list at redhat.com https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list From cra at WPI.EDU Wed May 23 15:29:32 2007 From: cra at WPI.EDU (Chuck Anderson) Date: Wed, 23 May 2007 11:29:32 -0400 Subject: report_mirror traceback Message-ID: <20070523152932.GR31145@angus.ind.WPI.EDU> I'm getting a traceback running report_mirror on my FC6 mirror system: $ ./report_mirror -o mirror-report.txt -c report_mirror.conf Traceback (most recent call last): File "./report_mirror", line 240, in ? main() File "./report_mirror", line 236, in main print server.checkin(base64.urlsafe_b64encode(bz2.compress(p))) File "/usr/lib/python2.4/xmlrpclib.py", line 1096, in __call__ return self.__send(self.__name, args) File "/usr/lib/python2.4/xmlrpclib.py", line 1383, in __request verbose=self.__verbose File "/usr/lib/python2.4/xmlrpclib.py", line 1147, in request return self._parse_response(h.getfile(), sock) File "/usr/lib/python2.4/xmlrpclib.py", line 1286, in _parse_response return u.close() File "/usr/lib/python2.4/xmlrpclib.py", line 744, in close raise Fault(**self._stack[0]) xmlrpclib.Fault: From a.badger at gmail.com Wed May 23 15:49:07 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Wed, 23 May 2007 08:49:07 -0700 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <4653F03E.8060202@nicubunu.ro> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <4653F03E.8060202@nicubunu.ro> Message-ID: <1179935347.1108.1.camel@localhost.localdomain> On Wed, 2007-05-23 at 10:41 +0300, Nicu Buculei wrote: Bill Nottingham wrote: > > > > Please vote for your favorite choice at: > > > > https://admin.fedoraproject.org/voting/vote.cgi > > > > The choices are 'Lee', 'Sherman', 'Nothing', 'Cylon', 'Moonshine', 'Siegfried'. > > If the voter is supposed to select no more than one name, why check > boxes are used instead of radio buttons? Because we're reusing the voting application for electing people to FESCo and the other Steering Committees for this. This is one of several things that should be enhanced when we get around to rewriting the application. If anyone would like to work on that, we'd love to reimplement voting as a turbogears application with a turbogears widget that can be embedded in other web apps, historical voting records, support for multi-issue ballots, radio buttons when voting for a single choice, etc. Currently, no work has been done on this so you have a lot of freedom in choosing how to architect things. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From blizzard at redhat.com Wed May 23 15:55:45 2007 From: blizzard at redhat.com (Christopher Blizzard) Date: Wed, 23 May 2007 11:55:45 -0400 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> Message-ID: <1179935746.8791.45.camel@localhost.localdomain> On Wed, 2007-05-23 at 11:07 -0400, Voll, Toivo wrote: > Is there an explanation of the names somewhere? What they stand for, why they are being suggested, how they compare to the previous names... It's Nothing you have to worry about. --Chris > > -- > Toivo Voll > University of South Florida > Academic Computing > Data Network Management > > > > -----Original Message----- > From: fedora-infrastructure-list-bounces at redhat.com [mailto:fedora-infrastructure-list-bounces at redhat.com] On Behalf Of Bill Nottingham > Sent: Tuesday, May 22, 2007 21:09 > To: fedora-infrastructure-list at redhat.com > Subject: Vote for the (probable) name of Fedora 7! > > The board has sent a list of suggested names for Fedora 7 to our legal > department, and they have responded with the names that have passed preliminary > legal approval. > > Please vote for your favorite choice at: > > https://admin.fedoraproject.org/voting/vote.cgi > > The choices are 'Lee', 'Sherman', 'Nothing', 'Cylon', 'Moonshine', 'Siegfried'. > > You will need to log in with your Fedora account system user/password. Voting > will be open until 2007-05-25 00:00:00 UTC. Thanks to Toshio Kuratomi for > getting this set up. > > We apologize for the short voting timeframe - final legal approval can take > up to five days, and we'd really like to avoid slipping solely for the name > of the release. If there end up being legal issues with the name selected, the > Board will decide on the name. (Who knows, could end up being Zod 2: Electric > Zod-a-loo). > > Bill > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list From mmcgrath at redhat.com Wed May 23 16:10:57 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 23 May 2007 11:10:57 -0500 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <1179935746.8791.45.camel@localhost.localdomain> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> <1179935746.8791.45.camel@localhost.localdomain> Message-ID: <46546791.5060307@redhat.com> Christopher Blizzard wrote: > On Wed, 2007-05-23 at 11:07 -0400, Voll, Toivo wrote: > >> Is there an explanation of the names somewhere? What they stand for, why they are being suggested, how they compare to the previous names... >> > > It's Nothing you have to worry about. > It's Moonshine I worry about :) -Mike From skvidal at linux.duke.edu Wed May 23 16:14:13 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Wed, 23 May 2007 12:14:13 -0400 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <46546791.5060307@redhat.com> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> <1179935746.8791.45.camel@localhost.localdomain> <46546791.5060307@redhat.com> Message-ID: <1179936853.2869.22.camel@rivendell> On Wed, 2007-05-23 at 11:10 -0500, Mike McGrath wrote: > Christopher Blizzard wrote: > > On Wed, 2007-05-23 at 11:07 -0400, Voll, Toivo wrote: > > > >> Is there an explanation of the names somewhere? What they stand for, why they are being suggested, how they compare to the previous names... > >> > > > > It's Nothing you have to worry about. > > > > It's Moonshine I worry about :) Nothing can take of a problem with moonshine. -sv From blizzard at redhat.com Wed May 23 16:23:00 2007 From: blizzard at redhat.com (Christopher Blizzard) Date: Wed, 23 May 2007 12:23:00 -0400 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <46546791.5060307@redhat.com> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> <1179935746.8791.45.camel@localhost.localdomain> <46546791.5060307@redhat.com> Message-ID: <1179937380.8791.51.camel@localhost.localdomain> On Wed, 2007-05-23 at 11:10 -0500, Mike McGrath wrote: > Christopher Blizzard wrote: > > On Wed, 2007-05-23 at 11:07 -0400, Voll, Toivo wrote: > > > >> Is there an explanation of the names somewhere? What they stand for, why they are being suggested, how they compare to the previous names... > >> > > > > It's Nothing you have to worry about. > > > > It's Moonshine I worry about :) > Nothing like a drink of Moonshine. --Chris From Matt_Domsch at dell.com Wed May 23 16:37:22 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Wed, 23 May 2007 11:37:22 -0500 Subject: report_mirror traceback In-Reply-To: <20070523152932.GR31145@angus.ind.WPI.EDU> References: <20070523152932.GR31145@angus.ind.WPI.EDU> Message-ID: <20070523163722.GA709@lists.us.dell.com> On Wed, May 23, 2007 at 11:29:32AM -0400, Chuck Anderson wrote: > I'm getting a traceback running report_mirror on my FC6 mirror system: > > $ ./report_mirror -o mirror-report.txt -c report_mirror.conf > Traceback (most recent call last): > xmlrpclib.Fault: 'keys'"> Thanks for the report. This was a caching bug on the server side. It had updated the database, but hadn't synced that data into the DB before trying to read it in another function a moment later. I think I know how to fix it. Should be OK in a few hours. Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From cra at WPI.EDU Wed May 23 16:45:08 2007 From: cra at WPI.EDU (Chuck Anderson) Date: Wed, 23 May 2007 12:45:08 -0400 Subject: report_mirror traceback In-Reply-To: <20070523163722.GA709@lists.us.dell.com> References: <20070523152932.GR31145@angus.ind.WPI.EDU> <20070523163722.GA709@lists.us.dell.com> Message-ID: <20070523164508.GT31145@angus.ind.WPI.EDU> On Wed, May 23, 2007 at 11:37:22AM -0500, Matt Domsch wrote: > On Wed, May 23, 2007 at 11:29:32AM -0400, Chuck Anderson wrote: > > I'm getting a traceback running report_mirror on my FC6 mirror system: > > > > $ ./report_mirror -o mirror-report.txt -c report_mirror.conf > > Traceback (most recent call last): > > xmlrpclib.Fault: > 'keys'"> > > Thanks for the report. This was a caching bug on the server side. It > had updated the database, but hadn't synced that data into the DB > before trying to read it in another function a moment later. I think > I know how to fix it. Should be OK in a few hours. I was able to rerun the script successfully at 11:54 EDT. When should I expect the mirror cgi to start returning my mirror for my netblock? Thanks. From Matt_Domsch at dell.com Wed May 23 16:49:51 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Wed, 23 May 2007 11:49:51 -0500 Subject: report_mirror traceback In-Reply-To: <20070523164508.GT31145@angus.ind.WPI.EDU> References: <20070523152932.GR31145@angus.ind.WPI.EDU> <20070523163722.GA709@lists.us.dell.com> <20070523164508.GT31145@angus.ind.WPI.EDU> Message-ID: <20070523164951.GB709@lists.us.dell.com> On Wed, May 23, 2007 at 12:45:08PM -0400, Chuck Anderson wrote: > On Wed, May 23, 2007 at 11:37:22AM -0500, Matt Domsch wrote: > > On Wed, May 23, 2007 at 11:29:32AM -0400, Chuck Anderson wrote: > > > I'm getting a traceback running report_mirror on my FC6 mirror system: > > > > > > $ ./report_mirror -o mirror-report.txt -c report_mirror.conf > > > Traceback (most recent call last): > > > xmlrpclib.Fault: > > 'keys'"> > > > > Thanks for the report. This was a caching bug on the server side. It > > had updated the database, but hadn't synced that data into the DB > > before trying to read it in another function a moment later. I think > > I know how to fix it. Should be OK in a few hours. > > I was able to rerun the script successfully at 11:54 EDT. When should > I expect the mirror cgi to start returning my mirror for my netblock? It takes up to 2 hours to refresh all the web servers with this data. Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From cra at WPI.EDU Wed May 23 17:24:35 2007 From: cra at WPI.EDU (Chuck Anderson) Date: Wed, 23 May 2007 13:24:35 -0400 Subject: report_mirror traceback In-Reply-To: <20070523164951.GB709@lists.us.dell.com> References: <20070523152932.GR31145@angus.ind.WPI.EDU> <20070523163722.GA709@lists.us.dell.com> <20070523164508.GT31145@angus.ind.WPI.EDU> <20070523164951.GB709@lists.us.dell.com> Message-ID: <20070523172435.GU31145@angus.ind.WPI.EDU> On Wed, May 23, 2007 at 11:49:51AM -0500, Matt Domsch wrote: > > I was able to rerun the script successfully at 11:54 EDT. When should > > I expect the mirror cgi to start returning my mirror for my netblock? > > It takes up to 2 hours to refresh all the web servers with this data. Thanks, it's working now. One other question. What is the output file used for? I noticed it is in some binary format. Do I need to keep this somewhere? Thanks. From Matt_Domsch at dell.com Wed May 23 17:31:40 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Wed, 23 May 2007 12:31:40 -0500 Subject: report_mirror traceback In-Reply-To: <20070523172435.GU31145@angus.ind.WPI.EDU> References: <20070523152932.GR31145@angus.ind.WPI.EDU> <20070523163722.GA709@lists.us.dell.com> <20070523164508.GT31145@angus.ind.WPI.EDU> <20070523164951.GB709@lists.us.dell.com> <20070523172435.GU31145@angus.ind.WPI.EDU> Message-ID: <20070523173140.GC709@lists.us.dell.com> On Wed, May 23, 2007 at 01:24:35PM -0400, Chuck Anderson wrote: > On Wed, May 23, 2007 at 11:49:51AM -0500, Matt Domsch wrote: > > > I was able to rerun the script successfully at 11:54 EDT. When should > > > I expect the mirror cgi to start returning my mirror for my netblock? > > > > It takes up to 2 hours to refresh all the web servers with this data. > > Thanks, it's working now. One other question. What is the output > file used for? I noticed it is in some binary format. Do I need to > keep this somewhere? Oops, that isn't strictly required. I'll fix that shortly. You can of course delete it. report_mirror can't work from behind a proxy (yet, any volunteers??). And my internal mirrors are behind authenticating proxies. And, it uses HTTPS, which further complicates things. So, to test, I actually have to dump the data that *would* be sent to the server into a file (it's just a python pickle), copy the data outside the firewalls, and then upload it to the database. And, it's a handy debug tool to be able to get the data out cleanly without having to upload and then go poke through the database to get it back out. :-) Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From smooge at gmail.com Wed May 23 19:06:34 2007 From: smooge at gmail.com (Stephen John Smoogen) Date: Wed, 23 May 2007 13:06:34 -0600 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> Message-ID: <80d7e4090705231206xa82f497xcb2db7cc7a5e3127@mail.gmail.com> On 5/23/07, Voll, Toivo wrote: > Is there an explanation of the names somewhere? What they stand for, why they are being suggested, how they compare to the previous names... > > -- Zod --- All kneel to Zod Lee -- General Sherman -- General Nothing -- because nothing can follow Zod! Cylon -- Moonshine -- because moonshine can solve any problem? Siegfried -- -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From mgalgoci at redhat.com Wed May 23 19:08:23 2007 From: mgalgoci at redhat.com (Matthew Galgoci) Date: Wed, 23 May 2007 15:08:23 -0400 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <80d7e4090705231206xa82f497xcb2db7cc7a5e3127@mail.gmail.com> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> <80d7e4090705231206xa82f497xcb2db7cc7a5e3127@mail.gmail.com> Message-ID: > > Is there an explanation of the names somewhere? What they stand for, why > > they are being suggested, how they compare to the previous names... > > > > -- > > Zod --- All kneel to Zod > > Lee -- General > Sherman -- General > Nothing -- because nothing can follow Zod! > Cylon -- > Moonshine -- because moonshine can solve any problem? > Siegfried -- > Was't FC6 Zod? -- Matthew Galgoci GIS Production Operations Red Hat, Inc 919.754.3700 x44155 From smooge at gmail.com Wed May 23 19:22:10 2007 From: smooge at gmail.com (Stephen John Smoogen) Date: Wed, 23 May 2007 13:22:10 -0600 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> <80d7e4090705231206xa82f497xcb2db7cc7a5e3127@mail.gmail.com> Message-ID: <80d7e4090705231222j1ee413e3u16ab114734105a74@mail.gmail.com> On 5/23/07, Matthew Galgoci wrote: > > > Is there an explanation of the names somewhere? What they stand for, why > > > they are being suggested, how they compare to the previous names... > > > > > > -- > > > > Zod --- All kneel to Zod > > > > Lee -- General > > Sherman -- General > > Nothing -- because nothing can follow Zod! > > Cylon -- > > Moonshine -- because moonshine can solve any problem? > > Siegfried -- > > > > Was't FC6 Zod? > Zod is there just as a mentioning of what was there before. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From dax at gurulabs.com Wed May 23 20:57:25 2007 From: dax at gurulabs.com (Dax Kelson) Date: Wed, 23 May 2007 14:57:25 -0600 Subject: Security concerns with mirrormanager In-Reply-To: <20070523034544.GA740@lists.us.dell.com> References: <1179878283.4960.21.camel@mentorng.gurulabs.com> <20070523034544.GA740@lists.us.dell.com> Message-ID: <1179953846.3818.64.camel@mentorng.gurulabs.com> On Tue, 2007-05-22 at 22:45 -0500, Matt Domsch wrote: > On Tue, May 22, 2007 at 05:58:03PM -0600, Dax Kelson wrote: > > I mentioned on the list a few months back a technique for having YUM > > automatically use a local mirror without any configuration changes on > > the clients. A few people sent me emails asking for more details, so I > > was goaded/spurred into implementing it and have now documented the > > procedure in a new GURU GUIDE. > > Dax, very cool. Thanks for posting this. > > One thing I added to mirrormanager[1] was the ability for a mirror > host to specify the set of IP netblocks that should use the local > mirror. When a yum client hits the mirrorlist CGI, such as: > > http://mirrors.fedoraproject.org/mirrorlist?repo=core-6&arch=i386 > > it looks up the client IP address in mirrormanager's database. If one > or more of the hosts in that database claim that IP address as "local" > to them, the CGI returns just those hosts. > > In mirrormanager, you can have private mirror sites and private mirror > hosts, so they never appear on the public list of servers, but the > mirrorlist CGI can still handle them. The drawback is that > mirrormanager can't crawl private mirror sites (generally). So, you > have to use mirrormanager's report_mirror script[2], which runs on your > private mirror, to tell the mirrormanager database what content you > have. With this little bit of setup, you can get much the same > benefit as your setup provides. Matt, mirrormanager is very cool! For YUM to automatically find a mirror I believe the cleanest and best solution is have it be done within Yum itself. Possibly with a WPAD-like or DNS SRV technique. It should be on default. The idea of the main mirrorlist CGI having a database of local IPs and mirrors is actually a solution that I ran through mentally awhile back and came to the conclusion that security concerns and technical limitations made it unworkable. When you attach your computer to a network there is some level of implicit trust in the local network (and whoever manages it). But this is a two party relationship and doesn't involve a third party who is a random stranger on the internet. The main security concern I have with the DB of local IPs, is what is to prevent someone from listing my IP network as local to their mirror? This could be accidental via a netmask typo, or with a more sinister intent (cross your fingers that your users pay attention to gpg messages from yum). IMHO, this should not be possible. If mirrormanager intends to maintain a DB of local IPs for a mirror, then the ownership/control of the IP range *must* be strongly authenticated. It should be done securely, or not at all. Different people have different security requirements, but I believe that some people will be in for a shock and react poorly/predictably when they find out that their IP netblocks (or any portion thereof) could be redirected. The technical limitation of the DB of local IPs is that it doesn't work for organizations who run their mirrors on a RFC1918 IP and use NAT to get out to the internet. This scenario is very common. Dax Kelson Guru Labs From skvidal at fedoraproject.org Wed May 23 23:27:06 2007 From: skvidal at fedoraproject.org (seth vidal) Date: Wed, 23 May 2007 19:27:06 -0400 Subject: releasing torrents Message-ID: <1179962826.3204.11.camel@rivendell> Hey folks, I wrote a script to auto-generate the .html page at torrent.fedoraproject.org and the rss feed as well. I also documented the steps necessary to release a torrent. It's pretty straightforward but if you have any questions/suggestions yell at me, please. http://fedoraproject.org/wiki/Infrastructure/TorrentRelease A couple of questions: 1. where should I link that page from? 2. is there a better page for docs for infrastructure in general? -sv -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From jkeating at redhat.com Thu May 24 00:41:08 2007 From: jkeating at redhat.com (Jesse Keating) Date: Wed, 23 May 2007 20:41:08 -0400 Subject: releasing torrents In-Reply-To: <1179962826.3204.11.camel@rivendell> References: <1179962826.3204.11.camel@rivendell> Message-ID: <200705232041.08827.jkeating@redhat.com> On Wednesday 23 May 2007 19:27:06 seth vidal wrote: > A couple of questions: > ?1. where should I link that page from? > ?2. is there a better page for docs for infrastructure in general? That's kind of ReleaseEngineering stuff. I wanted to start gathering a list of Processes that ReleaseEngineering goes though, this feels like one of them (: -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From a.badger at gmail.com Thu May 24 00:54:34 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Wed, 23 May 2007 17:54:34 -0700 Subject: http://fedoraproject.org/PackageReviewStatus Message-ID: <1179968074.5916.11.camel@localhost.localdomain> I've made some changes to the scripts behind PackageReviewStatus that should make it a bit more robust in the face of errors. Feel free to ping me if any problems crop up. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From notting at redhat.com Thu May 24 05:02:35 2007 From: notting at redhat.com (Bill Nottingham) Date: Thu, 24 May 2007 01:02:35 -0400 Subject: the mechanics of pushing updates Message-ID: <20070524050235.GA14399@nostromo.devel.redhat.com> Mmm, plumbing. bodhi is heading for production soon. To push updates, what bodhi currently does is, for any update: - sign the package - copy the package to a 'staging' tree of the entirety of updates - read a static list of packages that should be multilib, act on that - run createrepo - check deps on the repo - rsync the whole repo out Older updates are cleaned by a cron script later. Advantages of this approach: - it's simple - it's easy to clean upthings that Go Wrong (just manually remove them from the repo and re-sync) Disadvantages: - multilib. In a world where we continually add new packages, this *will not scale*. So, we need at least *some* sort of better workflow. One alternative - using mash (what we're using to build rawhide.) It would go something like this: - sign the package - tag the package (for updates-testing, or updates) - run mash to create a repo of updates/updates-testing, solve it for multilib - rsync it out Advantages: - solves multilib - doesn't require continually keeping a staging tree around - depcheck is built in when solving multilib - builds on koji tags to let anyone easily query what updates are released Disadvantages: - by rebuilding the repo each time, it's going to be slow once the repo gets large - harder to clear out other strangeness - will only have one version of each updated package The last of these isn't as *big* of a concern now, as all builds will be available through the koji web site, space permitting. Other ideas for better workflow? What do the extras push scripts do? Do we want to add a modified version of mash's multilib solver into bodhi? (This is ignoring the process of rsyncing to the mirror master, which will be gross.) Bill From dennis at ausil.us Thu May 24 05:19:02 2007 From: dennis at ausil.us (Dennis Gilmore) Date: Thu, 24 May 2007 00:19:02 -0500 Subject: the mechanics of pushing updates In-Reply-To: <20070524050235.GA14399@nostromo.devel.redhat.com> References: <20070524050235.GA14399@nostromo.devel.redhat.com> Message-ID: <200705240019.03115.dennis@ausil.us> Once upon a time Thursday 24 May 2007, Bill Nottingham wrote: > Mmm, plumbing. bodhi is heading for production soon. To push updates, what > bodhi currently does is, for any update: > > - sign the package > - copy the package to a 'staging' tree of the entirety of updates > - read a static list of packages that should be multilib, act on that > - run createrepo > - check deps on the repo > - rsync the whole repo out > > Older updates are cleaned by a cron script later. We plan on adding auto clean up to bodhi, > Other ideas for better workflow? What do the extras push scripts do? > Do we want to add a modified version of mash's multilib solver into > bodhi? Extras keeps the last two versions for releases and last for devel. Extras multilib is all -devel packages and requires with some manual blacklisting/whitelisting we need bodhi to do update announcements etc. So i think that we need to make bodhi's multilib better. probably best to use mash for that. so we have one tool for the job Dennis From josemanimala at gmail.com Thu May 24 07:07:38 2007 From: josemanimala at gmail.com (jose manimala) Date: Thu, 24 May 2007 12:37:38 +0530 Subject: Hello Message-ID: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> Hey, my name is jose m manimala. I am a server administrator and a web programmar and have good knowledge of web technologies(jsp,php,asp,soap,ajax). Hoping i could be of help with web server administartion and web technologies. I run a fedora core 6 machine with tomcat and apache running on it. Have also experience with linux kernel compiling and shell scripts.... Hope i can be of help. i am doing my graduate studies in cochin, India. cheers -- Jose M Manimala S6 Computer science and engineering Rajagiri School Of Engineering And Technology Ph: +919846367850 http://www.jmm-blog.co.nr From paulo.banon at googlemail.com Thu May 24 07:31:39 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Thu, 24 May 2007 09:31:39 +0200 Subject: Vote for the (probable) name of Fedora 7! In-Reply-To: <80d7e4090705231222j1ee413e3u16ab114734105a74@mail.gmail.com> References: <20070523010843.GA28513@nostromo.devel.redhat.com> <1316CB8B5C67704098D261F3882ADBBDA02F3E@HERMES.acnet.usf.edu> <80d7e4090705231206xa82f497xcb2db7cc7a5e3127@mail.gmail.com> <80d7e4090705231222j1ee413e3u16ab114734105a74@mail.gmail.com> Message-ID: <7a41c4bc0705240031v5175a35dl4c6945eaec232d5@mail.gmail.com> go moonshine! On 5/23/07, Stephen John Smoogen wrote: > On 5/23/07, Matthew Galgoci wrote: > > > > Is there an explanation of the names somewhere? What they stand for, > why > > > > they are being suggested, how they compare to the previous names... > > > > > > > > -- > > > > > > Zod --- All kneel to Zod > > > > > > Lee -- General > > > Sherman -- General > > > Nothing -- because nothing can follow Zod! > > > Cylon -- > > > Moonshine -- because moonshine can solve any problem? > > > Siegfried -- > > > > > > > Was't FC6 Zod? > > > > Zod is there just as a mentioning of what was there before. > > > -- > Stephen J Smoogen. -- CSIRT/Linux System Administrator > How far that little candle throws his beams! So shines a good deed > in a naughty world. = Shakespeare. "The Merchant of Venice" > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > From paulo.banon at googlemail.com Thu May 24 07:37:48 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Thu, 24 May 2007 09:37:48 +0200 Subject: releasing torrents In-Reply-To: <200705232041.08827.jkeating@redhat.com> References: <1179962826.3204.11.camel@rivendell> <200705232041.08827.jkeating@redhat.com> Message-ID: <7a41c4bc0705240037m18d4d15awfdecd07254ead06f@mail.gmail.com> How about create an Infrastructure/Docs/ documentation section ? According to the scheadule, we should be documenting everything. We are (trying) to do that but, i think all the information is too scatered around. On 5/24/07, Jesse Keating wrote: > On Wednesday 23 May 2007 19:27:06 seth vidal wrote: > > A couple of questions: > > 1. where should I link that page from? > > 2. is there a better page for docs for infrastructure in general? > > That's kind of ReleaseEngineering stuff. I wanted to start gathering a list > of Processes that ReleaseEngineering goes though, this feels like one of > them > (: > > -- > Jesse Keating > Release Engineer: Fedora > From Christian.Iseli at licr.org Thu May 24 09:51:07 2007 From: Christian.Iseli at licr.org (Christian Iseli) Date: Thu, 24 May 2007 11:51:07 +0200 Subject: http://fedoraproject.org/PackageReviewStatus In-Reply-To: <1179968074.5916.11.camel@localhost.localdomain> References: <1179968074.5916.11.camel@localhost.localdomain> Message-ID: <20070524115107.70352fef@ludwig-alpha.unil.ch> Hi Toshio, On Wed, 23 May 2007 17:54:34 -0700, Toshio Kuratomi wrote: > I've made some changes to the scripts behind PackageReviewStatus that > should make it a bit more robust in the face of errors. Feel free to > ping me if any problems crop up. Could you please do a "cvs commit" of your changes ? Thanks, Christian From skvidal at linux.duke.edu Thu May 24 14:43:07 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Thu, 24 May 2007 10:43:07 -0400 Subject: releasing torrents In-Reply-To: <200705232041.08827.jkeating@redhat.com> References: <1179962826.3204.11.camel@rivendell> <200705232041.08827.jkeating@redhat.com> Message-ID: <1180017787.3204.19.camel@rivendell> On Wed, 2007-05-23 at 20:41 -0400, Jesse Keating wrote: > On Wednesday 23 May 2007 19:27:06 seth vidal wrote: > > A couple of questions: > > 1. where should I link that page from? > > 2. is there a better page for docs for infrastructure in general? > > That's kind of ReleaseEngineering stuff. I wanted to start gathering a list > of Processes that ReleaseEngineering goes though, this feels like one of them > (: Okay - let me know where you want them. :) -sv From jkeating at redhat.com Thu May 24 15:04:25 2007 From: jkeating at redhat.com (Jesse Keating) Date: Thu, 24 May 2007 11:04:25 -0400 Subject: releasing torrents In-Reply-To: <1180017787.3204.19.camel@rivendell> References: <1179962826.3204.11.camel@rivendell> <200705232041.08827.jkeating@redhat.com> <1180017787.3204.19.camel@rivendell> Message-ID: <200705241104.25636.jkeating@redhat.com> On Thursday 24 May 2007 10:43:07 seth vidal wrote: > > That's kind of ReleaseEngineering stuff. ?I wanted to start gathering a > > list of Processes that ReleaseEngineering goes though, this feels like > > one of them (: > > Okay - let me know where you want them. :) Lets talk about it at the next Infrastructure Meeting. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From mmcgrath at redhat.com Thu May 24 15:20:48 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 24 May 2007 10:20:48 -0500 Subject: Hello In-Reply-To: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> Message-ID: <4655AD50.1000601@redhat.com> jose manimala wrote: > Hey, > my name is jose m manimala. I am a server > administrator and a web programmar and have good knowledge of web > technologies(jsp,php,asp,soap,ajax). Hoping i could be of help with > web server administartion and web technologies. I run a fedora core 6 > machine with tomcat and apache running on it. Have also experience > with linux kernel compiling and shell scripts.... Hope i can be of > help. > i am doing my graduate studies in cochin, India. Welcome Jose, will you be able to attend our weekly meeting today? http://fedoraproject.org/wiki/Infrastructure/Meetings -Mike From skvidal at linux.duke.edu Thu May 24 15:42:13 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Thu, 24 May 2007 11:42:13 -0400 Subject: releasing torrents In-Reply-To: <200705241104.25636.jkeating@redhat.com> References: <1179962826.3204.11.camel@rivendell> <200705232041.08827.jkeating@redhat.com> <1180017787.3204.19.camel@rivendell> <200705241104.25636.jkeating@redhat.com> Message-ID: <1180021333.3204.29.camel@rivendell> On Thu, 2007-05-24 at 11:04 -0400, Jesse Keating wrote: > On Thursday 24 May 2007 10:43:07 seth vidal wrote: > > > That's kind of ReleaseEngineering stuff. I wanted to start gathering a > > > list of Processes that ReleaseEngineering goes though, this feels like > > > one of them (: > > > > Okay - let me know where you want them. :) > > Lets talk about it at the next Infrastructure Meeting. I might not be available for the meeting today. However, I'll watch the back scroll. -sv From a.badger at gmail.com Thu May 24 18:44:51 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Thu, 24 May 2007 11:44:51 -0700 Subject: http://fedoraproject.org/PackageReviewStatus In-Reply-To: <20070524115107.70352fef@ludwig-alpha.unil.ch> References: <1179968074.5916.11.camel@localhost.localdomain> <20070524115107.70352fef@ludwig-alpha.unil.ch> Message-ID: <1180032291.11612.4.camel@localhost.localdomain> On Thu, 2007-05-24 at 11:51 +0200, Christian Iseli wrote: > Hi Toshio, > > On Wed, 23 May 2007 17:54:34 -0700, Toshio Kuratomi wrote: > > I've made some changes to the scripts behind PackageReviewStatus that > > should make it a bit more robust in the face of errors. Feel free to > > ping me if any problems crop up. > > Could you please do a "cvs commit" of your changes ? Done. I had checked the changes into the internal repository that puppet is using to configure the servers but not the external repo. We'll need to think a bit about how to manage things in the puppet repository that we are also hosting in other repositories to reduce duplication. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From skvidal at fedoraproject.org Thu May 24 20:35:08 2007 From: skvidal at fedoraproject.org (seth vidal) Date: Thu, 24 May 2007 16:35:08 -0400 Subject: iptables templates Message-ID: <1180038908.10732.8.camel@rivendell> Here's what I've used in the past. It allows connections for certain ports/places and then drops everything else as the last item. http://linux.duke.edu/~skvidal/misc/iptables-template it's pretty painless, really. If we want to add explicit outbound rules, too, that's fine, but I'd advise enabling logging b/c that stuff is easy to get wrong. :) This is just a sample but it's simple and straightforward. -sv -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From lmacken at redhat.com Thu May 24 21:17:22 2007 From: lmacken at redhat.com (Luke Macken) Date: Thu, 24 May 2007 17:17:22 -0400 Subject: the mechanics of pushing updates In-Reply-To: <20070524050235.GA14399@nostromo.devel.redhat.com> References: <20070524050235.GA14399@nostromo.devel.redhat.com> Message-ID: <20070524211722.GE19280@tomservo.rh.rit.edu> On Thu, May 24, 2007 at 01:02:35AM -0400, Bill Nottingham wrote: > Mmm, plumbing. bodhi is heading for production soon. To push updates, what > bodhi currently does is, for any update: > > - sign the package Nope, neither bodhi or the current update system sign any packages. The current system mails releng with the proper command to sign the packages, but it has always been done by hand as far as I know. You and Jesse are the only people I know of that have signed updates. By the looks of the fedora-release-tools module, there are two scripts that have been used to sign packages, ftsign and fedorasign, both of which call /usr/local/bin/rpm-4.1-sign, which is a symlink to /usr/lib/rpm/rpmk. I started implementing an XMLRPC server for bodhi so we can eventually do everything from the command line as well as from the browser. Hopefully we can streamline the signing process as much as possible in a command-line sign/push tool, until it can be fully automated with a signing server (when might this happen, btw?). Koji keeps a sigcache for each package in pkg/ver/rel/data/sigcache/arch/, although I have no idea at what point in the build process this gets created. I'm also under the impression that just having this detached signature isn't enough, and that there still must be some manual intervention? Is there anything else bodhi needs to do other than make sure the corresponding .sig exists for each package? > - copy the package to a 'staging' tree of the entirety of updates > - read a static list of packages that should be multilib, act on that This isn't as bad as the previous biarch-list-of-doom[0] anymore. Bodhi imports it into its Multilib database table[1] during initialization, and doesn't deal with it again. Upon submission of an update, bodhi builds the list of associated packages, taking care of multilib based on what's in the db. The multilib table can then be modified with ease using the TurboGears CatWalk database editor, or a simple command-line tool. > - run createrepo > - check deps on the repo FIXME: I need to track down some false positives in bodhi's closure.py[2] (or rewrite it). Mash would obviously resolve this for us. > - rsync the whole repo out TODO. At the moment bodhi stages to /mnt/koji/updates-stage -- where are we going to sync this to? wallace still? > Older updates are cleaned by a cron script later. TODO. We need something similar to the fedora-updates-clean script that is currently in place (but less hackish), or RepoPrune / repomanage. The TurboGears scheduler[3] is probably a good place for this. I'm going to try and find some time tonight to throw one together. > Advantages of this approach: > - it's simple > - it's easy to clean upthings that Go Wrong (just manually remove them > from the repo and re-sync) This also gives bodhi a LOT more control over the repos, as it maintains the extended updateinfo.xml.gz in the repodata as well. If we use mash we will have to maintain this file outside of the tree and re-insert it post-compose. > Disadvantages: > - multilib. In a world where we continually add new packages, this > *will not scale*. Random idea. Since multilib is handled by mash, which pushed out rawhide nightly, couldn't we just have mash keep the Multilib table up to date? Would this solve the scalability issue wrt new packages? > So, we need at least *some* sort of better workflow. > > One alternative - using mash (what we're using to build rawhide.) It > would go something like this: > > - sign the package > - tag the package (for updates-testing, or updates) > - run mash to create a repo of updates/updates-testing, solve it for > multilib > - rsync it out > > Advantages: > - solves multilib > - doesn't require continually keeping a staging tree around > - depcheck is built in when solving multilib > - builds on koji tags to let anyone easily query what updates are > released > > Disadvantages: > - by rebuilding the repo each time, it's going to be slow once > the repo gets large > - harder to clear out other strangeness > - will only have one version of each updated package > > The last of these isn't as *big* of a concern now, as all builds > will be available through the koji web site, space permitting. > > Other ideas for better workflow? What do the extras push scripts do? > Do we want to add a modified version of mash's multilib solver into > bodhi? I think the mash idea is interesting. Although, due to it's overhead, we would probaby have to resort to pushing out a single batch of updates a day, and maybe some smaller batches of security updates. This might become a pain. I'm going to look around at the multilib solver for mash and extrsa tonight and see if bodhi can steal any of it. Michael Schwendt would probably be the expert in the extras world. luke [0]: https://hosted.fedoraproject.org/projects/bodhi/browser/bodhi/deprecated/biarch.py [1]: https://hosted.fedoraproject.org/projects/bodhi/browser/bodhi/model.py#L63 [2]: https://hosted.fedoraproject.org/projects/bodhi/browser/bodhi/closure.py [3]: http://docs.turbogears.org/1.0/Scheduler From orion at cora.nwra.com Thu May 24 22:30:38 2007 From: orion at cora.nwra.com (Orion Poplawski) Date: Thu, 24 May 2007 16:30:38 -0600 Subject: Hung builder Message-ID: <4656120E.1080000@cora.nwra.com> This build of mine: http://koji.fedoraproject.org/koji/taskinfo?taskID=16822 appears to be hung. Can someone take a look? -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA/CoRA Division FAX: 303-415-9702 3380 Mitchell Lane orion at cora.nwra.com Boulder, CO 80301 http://www.cora.nwra.com From mastahnke at gmail.com Fri May 25 01:11:24 2007 From: mastahnke at gmail.com (Michael Stahnke) Date: Thu, 24 May 2007 20:11:24 -0500 Subject: releasing torrents In-Reply-To: <1180021333.3204.29.camel@rivendell> References: <1179962826.3204.11.camel@rivendell> <200705232041.08827.jkeating@redhat.com> <1180017787.3204.19.camel@rivendell> <200705241104.25636.jkeating@redhat.com> <1180021333.3204.29.camel@rivendell> Message-ID: <7874d9dd0705241811x7ce35c48w1622153ed15f820b@mail.gmail.com> Is the source to these little scripts and programs published anywhere? Who knows, maybe I will want to push my own torrents of a new spin. stahnma From skvidal at linux.duke.edu Fri May 25 01:44:56 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Thu, 24 May 2007 21:44:56 -0400 Subject: releasing torrents In-Reply-To: <7874d9dd0705241811x7ce35c48w1622153ed15f820b@mail.gmail.com> References: <1179962826.3204.11.camel@rivendell> <200705232041.08827.jkeating@redhat.com> <1180017787.3204.19.camel@rivendell> <200705241104.25636.jkeating@redhat.com> <1180021333.3204.29.camel@rivendell> <7874d9dd0705241811x7ce35c48w1622153ed15f820b@mail.gmail.com> Message-ID: <1180057496.11240.1.camel@rivendell> On Thu, 2007-05-24 at 20:11 -0500, Michael Stahnke wrote: > Is the source to these little scripts and programs published anywhere? > > > Who knows, maybe I will want to push my own torrents of a new spin. > in the releng git repo. http://git.fedoraproject.org/?p=fedora/releng;a=tree;f=scripts/torrent-generator enjoy! -sv From josemanimala at gmail.com Fri May 25 02:58:29 2007 From: josemanimala at gmail.com (jose manimala) Date: Fri, 25 May 2007 08:28:29 +0530 Subject: Hello In-Reply-To: <4655AD50.1000601@redhat.com> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> Message-ID: <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> Thanks, I would love to be there, bu the time translates to 1:30am at night. i dont have net access that late. I work from my colleg. I'll read up on the minutes, just let me know what i must do!! Jose On 5/24/07, Mike McGrath wrote: > jose manimala wrote: > > Hey, > > my name is jose m manimala. I am a server > > administrator and a web programmar and have good knowledge of web > > technologies(jsp,php,asp,soap,ajax). Hoping i could be of help with > > web server administartion and web technologies. I run a fedora core 6 > > machine with tomcat and apache running on it. Have also experience > > with linux kernel compiling and shell scripts.... Hope i can be of > > help. > > i am doing my graduate studies in cochin, India. > > Welcome Jose, will you be able to attend our weekly meeting today? > > http://fedoraproject.org/wiki/Infrastructure/Meetings > > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Jose M Manimala S6 Computer science and engineering Rajagiri School Of Engineering And Technology Ph: +919846367850 http://www.jmm-blog.co.nr GPGkeyID: 98FF52D2 From a.badger at gmail.com Fri May 25 03:08:47 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Thu, 24 May 2007 20:08:47 -0700 Subject: Hello In-Reply-To: <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> Message-ID: <1180062527.22279.0.camel@localhost.localdomain> On Fri, 2007-05-25 at 08:28 +0530, jose manimala wrote: > Thanks, I would love to be there, bu the time translates to 1:30am at > night. i dont have net access that late. I work from my colleg. I'll > read up on the minutes, just let me know what i must do!! > > Jose > > On 5/24/07, Mike McGrath wrote: > > jose manimala wrote: > > > Hey, > > > my name is jose m manimala. I am a server > > > administrator and a web programmar and have good knowledge of web > > > technologies(jsp,php,asp,soap,ajax). Hoping i could be of help with > > > web server administartion and web technologies. I run a fedora core 6 > > > machine with tomcat and apache running on it. Have also experience > > > with linux kernel compiling and shell scripts.... Hope i can be of > > > help. > > > i am doing my graduate studies in cochin, India. > > > > Welcome Jose, will you be able to attend our weekly meeting today? > > > > http://fedoraproject.org/wiki/Infrastructure/Meetings > > > > Would you be interested in learning python? We're doing a bunch of apps using python and the python web framework TurboGears. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From notting at redhat.com Fri May 25 03:32:48 2007 From: notting at redhat.com (Bill Nottingham) Date: Thu, 24 May 2007 23:32:48 -0400 Subject: the mechanics of pushing updates In-Reply-To: <20070524211722.GE19280@tomservo.rh.rit.edu> References: <20070524050235.GA14399@nostromo.devel.redhat.com> <20070524211722.GE19280@tomservo.rh.rit.edu> Message-ID: <20070525033248.GA30652@nostromo.devel.redhat.com> Luke Macken (lmacken at redhat.com) said: > By the looks of the fedora-release-tools module, there are two scripts > that have been used to sign packages, ftsign and fedorasign, both of > which call /usr/local/bin/rpm-4.1-sign, which is a symlink to > /usr/lib/rpm/rpmk. ... which doesn't interact well with brew/koji. > Koji keeps a sigcache for each package in pkg/ver/rel/data/sigcache/arch/, > although I have no idea at what point in the build process this gets > created. I'm also under the impression that just having this detached > signature isn't enough, and that there still must be some manual > intervention? Is there anything else bodhi needs to do other than make > sure the corresponding .sig exists for each package? The sigcache is a koji feature; you can tell it to write out a signed version of the package on demand. mash, at least, does not do this, and will just take whatever existing version is signed with the best key. (Waiting on it to generate signed versions would be rather slow.) > This isn't as bad as the previous biarch-list-of-doom[0] anymore. Bodhi > imports it into its Multilib database table[1] during initialization, and > doesn't deal with it again. Upon submission of an update, bodhi builds > the list of associated packages, taking care of multilib based on what's > in the db. The multilib table can then be modified with ease using the > TurboGears CatWalk database editor, or a simple command-line tool. Still, it's a list - each new added package would potentially require an addition. > > - rsync the whole repo out > > TODO. At the moment bodhi stages to /mnt/koji/updates-stage -- where > are we going to sync this to? wallace still? Short-term, yes. > > Older updates are cleaned by a cron script later. > > TODO. We need something similar to the fedora-updates-clean script that > is currently in place (but less hackish), or RepoPrune / repomanage. > The TurboGears scheduler[3] is probably a good place for this. I'm > going to try and find some time tonight to throw one together. Well, we *could* go to one-update-only, as older updates will be available directly from the koji web server. > > Disadvantages: > > - multilib. In a world where we continually add new packages, this > > *will not scale*. > > Random idea. Since multilib is handled by mash, which pushed out > rawhide nightly, couldn't we just have mash keep the Multilib table up to > date? Would this solve the scalability issue wrt new packages? rawhide doesn't necessarily mesh with what's available for earlier releases. Bill From wilmer at fedoraproject.org Fri May 25 05:06:49 2007 From: wilmer at fedoraproject.org (Wilmer Jaramillo M.) Date: Fri, 25 May 2007 01:06:49 -0400 Subject: iptables templates In-Reply-To: <1180038908.10732.8.camel@rivendell> References: <1180038908.10732.8.camel@rivendell> Message-ID: <2b26c4260705242206x21ddf8cci11578fa390dcbb98@mail.gmail.com> On 5/24/07, seth vidal wrote: > Here's what I've used in the past. > > It allows connections for certain ports/places and then drops everything > else as the last item. > > http://linux.duke.edu/~skvidal/misc/iptables-template > > it's pretty painless, really. :D good beginning, I believe that the best policy must be more restrictive, block inbound traffic on the chain INPUT and FORWARD with the rule DROP and later opening the ports that are necessary. > If we want to add explicit outbound rules, too, that's fine, but I'd > advise enabling logging b/c that stuff is easy to get wrong. :) Perhaps in the chain POSTROUTING but The OUTPUT chain is rarely used, I don't see some use on fedoraproject now. -- Wilmer Jaramillo M. GPG Key Fingerprint = 0666 D0D3 24CE 8935 9C24 BBF1 87DD BEA2 A4B2 1E8A From josemanimala at gmail.com Fri May 25 05:10:50 2007 From: josemanimala at gmail.com (jose manimala) Date: Fri, 25 May 2007 10:40:50 +0530 Subject: Hello In-Reply-To: <1180062527.22279.0.camel@localhost.localdomain> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> <1180062527.22279.0.camel@localhost.localdomain> Message-ID: <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> sure i dont mind learning python. just tell me what to do and where to start. regards jose m manimala From dennis at ausil.us Fri May 25 12:23:49 2007 From: dennis at ausil.us (Dennis Gilmore) Date: Fri, 25 May 2007 07:23:49 -0500 Subject: denyhosts on publictest boxes Message-ID: <200705250723.55241.dennis@ausil.us> Hey all, Just a quick reminder that all public facing boxes need denyhosts installed and running on them. epylog showed 36.subnet222-124-137.astinet.telkom.net.id failed to log in as root 121 times yesterday. they are obviously someone we dont want logging into anything Dennis -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From mmcgrath at redhat.com Fri May 25 13:25:31 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 25 May 2007 08:25:31 -0500 Subject: denyhosts on publictest boxes In-Reply-To: <200705250723.55241.dennis@ausil.us> References: <200705250723.55241.dennis@ausil.us> Message-ID: <4656E3CB.8070603@redhat.com> Dennis Gilmore wrote: > Hey all, > > Just a quick reminder that all public facing boxes need denyhosts installed > and running on them. epylog showed > 36.subnet222-124-137.astinet.telkom.net.id failed to log in as root 121 times > yesterday. they are obviously someone we dont want logging into anything > This one's my bad, I don't think denyhosts ever made it into puppet. I'll work on that this morning. -Mike From benny+usenet at amorsen.dk Fri May 25 13:52:59 2007 From: benny+usenet at amorsen.dk (Benny Amorsen) Date: 25 May 2007 15:52:59 +0200 Subject: iptables templates References: <1180038908.10732.8.camel@rivendell> Message-ID: >>>>> "sv" == seth vidal writes: sv> Here's what I've used in the past. It allows connections for sv> certain ports/places and then drops everything else as the last sv> item. sv> http://linux.duke.edu/~skvidal/misc/iptables-template sv> it's pretty painless, really. sv> If we want to add explicit outbound rules, too, that's fine, but sv> I'd advise enabling logging b/c that stuff is easy to get wrong. sv> :) sv> This is just a sample but it's simple and straightforward. The sample script accepts all non-syn TCP packets, whether they are related to an established connection or not. That is not necessarily a bad thing, I'm just pointing it out so people are aware of it. /Benny From skvidal at linux.duke.edu Fri May 25 13:56:31 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Fri, 25 May 2007 09:56:31 -0400 Subject: iptables templates In-Reply-To: References: <1180038908.10732.8.camel@rivendell> Message-ID: <1180101391.13865.7.camel@rivendell> On Fri, 2007-05-25 at 15:52 +0200, Benny Amorsen wrote: > >>>>> "sv" == seth vidal writes: > > sv> Here's what I've used in the past. It allows connections for > sv> certain ports/places and then drops everything else as the last > sv> item. > > sv> http://linux.duke.edu/~skvidal/misc/iptables-template > > sv> it's pretty painless, really. > > sv> If we want to add explicit outbound rules, too, that's fine, but > sv> I'd advise enabling logging b/c that stuff is easy to get wrong. > sv> :) > > sv> This is just a sample but it's simple and straightforward. > > The sample script accepts all non-syn TCP packets, whether they are > related to an established connection or not. That is not necessarily a > bad thing, I'm just pointing it out so people are aware of it. fair enough drop the -y and let the stateful handler earlier up take care of it. -sv From mmcgrath at redhat.com Fri May 25 14:02:05 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 25 May 2007 09:02:05 -0500 Subject: denyhosts on publictest boxes In-Reply-To: <4656E3CB.8070603@redhat.com> References: <200705250723.55241.dennis@ausil.us> <4656E3CB.8070603@redhat.com> Message-ID: <4656EC5D.2050807@redhat.com> Mike McGrath wrote: > Dennis Gilmore wrote: >> Hey all, >> >> Just a quick reminder that all public facing boxes need denyhosts >> installed and running on them. epylog showed >> 36.subnet222-124-137.astinet.telkom.net.id failed to log in as root >> 121 times yesterday. they are obviously someone we dont want logging >> into anything > This one's my bad, I don't think denyhosts ever made it into puppet. > I'll work on that this morning. I've created a puppet group called 'edgehosts' for stuff like this. -Mike From mmcgrath at redhat.com Fri May 25 14:04:51 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 25 May 2007 09:04:51 -0500 Subject: iptables templates In-Reply-To: <1180038908.10732.8.camel@rivendell> References: <1180038908.10732.8.camel@rivendell> Message-ID: <4656ED03.3070108@redhat.com> seth vidal wrote: > Here's what I've used in the past. > > It allows connections for certain ports/places and then drops everything > else as the last item. > > http://linux.duke.edu/~skvidal/misc/iptables-template > > it's pretty painless, really. > > If we want to add explicit outbound rules, too, that's fine, but I'd > advise enabling logging b/c that stuff is easy to get wrong. :) > > This is just a sample but it's simple and straightforward. > Excellent. I much prefer simple firewall rules where possible (its not always possible :) One RFE: Could we have a commented section in there to rate limit some of the open ports (http immediately come to mind)? That way if we get slammed again we don't have to go figure out what we've done in the past we can just uncomment it. What do you think? -Mike From damian.myerscough at gmail.com Fri May 25 14:14:45 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Fri, 25 May 2007 15:14:45 +0100 Subject: iptables templates In-Reply-To: <4656ED03.3070108@redhat.com> References: <1180038908.10732.8.camel@rivendell> <4656ED03.3070108@redhat.com> Message-ID: <8c9e56490705250714n5e12e9f8gd416819c85551c5f@mail.gmail.com> On 25/05/07, Mike McGrath wrote: > seth vidal wrote: > > Here's what I've used in the past. > > > > It allows connections for certain ports/places and then drops everything > > else as the last item. > > > > http://linux.duke.edu/~skvidal/misc/iptables-template > > > > it's pretty painless, really. > > > > If we want to add explicit outbound rules, too, that's fine, but I'd > > advise enabling logging b/c that stuff is easy to get wrong. :) > > > > This is just a sample but it's simple and straightforward. > > > > Excellent. I much prefer simple firewall rules where possible (its not > always possible :) > > One RFE: > > Could we have a commented section in there to rate limit some of the > open ports (http immediately come to mind)? That way if we get slammed > again we don't have to go figure out what we've done in the past we can > just uncomment it. > > What do you think? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > Hey Mike, For Apache why not deploy the mod_evasive module. What is mod_evasive? mod_evasive is an evasive maneuvers module for Apache to provide evasive action in the event of an HTTP DoS or DDoS attack or brute force attack. It is also designed to be a detection and network management tool, and can be easily configured to talk to ipchains, firewalls, routers, and etcetera. mod_evasive presently reports abuses via email and syslog facilities. I have finished university for the summer, would you like me to look into deploying this next week? Does anyone have any objections to this? -- Regards, Damian From mmcgrath at redhat.com Fri May 25 14:16:49 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 25 May 2007 09:16:49 -0500 Subject: Distributing static content Message-ID: <4656EFD1.1000203@redhat.com> Over the last couple of weeks we've been using puppet to distribute static content across some of our application servers and proxy servers. Static content might include the new static webpage or an application like our accounts system. This has proved to be a bit of an issue. Puppet wasn't really designed to do this and as such puts a noticeable load on the boxes while running as well as causing longer runs. Puppet works for this but we're currently into it managing thousands of files and initial deploys take a long time :) In the past we'd discussed moving some things (like turbogears apps) around using rpms. We can do that with tg pretty easily. But what about other static content, images, things like that? This needs to be scriptable from start to finish, here's the options as I see them: 1. Straight nfs mount (boo) 2. nfs mount to cron copy the files 3. recursive wget to an http store somewhere 4. rsync via ssh keys or rsync server (I'm currently leaning towards this) 5. Figure out how to make puppet more efficient with large numbers of files. We've got a whole pool of sysadmins on this list. How do you deal with these issues in your current environments? -Mike From mmcgrath at redhat.com Fri May 25 14:19:18 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 25 May 2007 09:19:18 -0500 Subject: iptables templates In-Reply-To: <8c9e56490705250714n5e12e9f8gd416819c85551c5f@mail.gmail.com> References: <1180038908.10732.8.camel@rivendell> <4656ED03.3070108@redhat.com> <8c9e56490705250714n5e12e9f8gd416819c85551c5f@mail.gmail.com> Message-ID: <4656F066.70105@redhat.com> Damian Myerscough wrote: > On 25/05/07, Mike McGrath wrote: >> seth vidal wrote: >> > Here's what I've used in the past. >> > >> > It allows connections for certain ports/places and then drops >> everything >> > else as the last item. >> > >> > http://linux.duke.edu/~skvidal/misc/iptables-template >> > >> > it's pretty painless, really. >> > >> > If we want to add explicit outbound rules, too, that's fine, but I'd >> > advise enabling logging b/c that stuff is easy to get wrong. :) >> > >> > This is just a sample but it's simple and straightforward. >> > >> >> Excellent. I much prefer simple firewall rules where possible (its not >> always possible :) >> >> One RFE: >> >> Could we have a commented section in there to rate limit some of the >> open ports (http immediately come to mind)? That way if we get slammed >> again we don't have to go figure out what we've done in the past we can >> just uncomment it. >> >> What do you think? >> >> -Mike >> >> _______________________________________________ >> Fedora-infrastructure-list mailing list >> Fedora-infrastructure-list at redhat.com >> https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list >> > > Hey Mike, > > For Apache why not deploy the mod_evasive module. What is mod_evasive? > > mod_evasive is an evasive maneuvers module for Apache to provide > evasive action in the event of an HTTP DoS or DDoS attack or brute > force attack. It is also designed to be a detection and network > management tool, and can be easily configured to talk to ipchains, > firewalls, routers, and etcetera. mod_evasive presently reports abuses > via email and syslog facilities. > > I have finished university for the summer, would you like me to look > into deploying this > next week? Does anyone have any objections to this? > Is mod_evasive in extras/epel? -Mike From damian.myerscough at gmail.com Fri May 25 14:23:45 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Fri, 25 May 2007 15:23:45 +0100 Subject: iptables templates In-Reply-To: <4656F066.70105@redhat.com> References: <1180038908.10732.8.camel@rivendell> <4656ED03.3070108@redhat.com> <8c9e56490705250714n5e12e9f8gd416819c85551c5f@mail.gmail.com> <4656F066.70105@redhat.com> Message-ID: <8c9e56490705250723p498cd7amc7bf6d9e92a96aae@mail.gmail.com> mod_evasive is not in the extras :( however I am sure we could package it. On 25/05/07, Mike McGrath wrote: > Damian Myerscough wrote: > > On 25/05/07, Mike McGrath wrote: > >> seth vidal wrote: > >> > Here's what I've used in the past. > >> > > >> > It allows connections for certain ports/places and then drops > >> everything > >> > else as the last item. > >> > > >> > http://linux.duke.edu/~skvidal/misc/iptables-template > >> > > >> > it's pretty painless, really. > >> > > >> > If we want to add explicit outbound rules, too, that's fine, but I'd > >> > advise enabling logging b/c that stuff is easy to get wrong. :) > >> > > >> > This is just a sample but it's simple and straightforward. > >> > > >> > >> Excellent. I much prefer simple firewall rules where possible (its not > >> always possible :) > >> > >> One RFE: > >> > >> Could we have a commented section in there to rate limit some of the > >> open ports (http immediately come to mind)? That way if we get slammed > >> again we don't have to go figure out what we've done in the past we can > >> just uncomment it. > >> > >> What do you think? > >> > >> -Mike > >> > >> _______________________________________________ > >> Fedora-infrastructure-list mailing list > >> Fedora-infrastructure-list at redhat.com > >> https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > >> > > > > Hey Mike, > > > > For Apache why not deploy the mod_evasive module. What is mod_evasive? > > > > mod_evasive is an evasive maneuvers module for Apache to provide > > evasive action in the event of an HTTP DoS or DDoS attack or brute > > force attack. It is also designed to be a detection and network > > management tool, and can be easily configured to talk to ipchains, > > firewalls, routers, and etcetera. mod_evasive presently reports abuses > > via email and syslog facilities. > > > > I have finished university for the summer, would you like me to look > > into deploying this > > next week? Does anyone have any objections to this? > > > > Is mod_evasive in extras/epel? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From mmcgrath at redhat.com Fri May 25 14:26:08 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 25 May 2007 09:26:08 -0500 Subject: iptables templates In-Reply-To: <8c9e56490705250723p498cd7amc7bf6d9e92a96aae@mail.gmail.com> References: <1180038908.10732.8.camel@rivendell> <4656ED03.3070108@redhat.com> <8c9e56490705250714n5e12e9f8gd416819c85551c5f@mail.gmail.com> <4656F066.70105@redhat.com> <8c9e56490705250723p498cd7amc7bf6d9e92a96aae@mail.gmail.com> Message-ID: <4656F200.9090603@redhat.com> Damian Myerscough wrote: > mod_evasive is not in the extras :( however I am sure we could package > it. > Sweet, I'm always up for getting more packages in extras :) -Mike From jkeating at redhat.com Fri May 25 14:52:05 2007 From: jkeating at redhat.com (Jesse Keating) Date: Fri, 25 May 2007 10:52:05 -0400 Subject: iptables templates In-Reply-To: <4656F200.9090603@redhat.com> References: <1180038908.10732.8.camel@rivendell> <8c9e56490705250723p498cd7amc7bf6d9e92a96aae@mail.gmail.com> <4656F200.9090603@redhat.com> Message-ID: <200705251052.05534.jkeating@redhat.com> On Friday 25 May 2007 10:26:08 Mike McGrath wrote: > Sweet, I'm always up for getting more packages in extras :) s/extras/Fedora/ -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From jeremy at linuxwiz.net Fri May 25 14:56:17 2007 From: jeremy at linuxwiz.net (Gaddis, Jeremy L.) Date: Fri, 25 May 2007 10:56:17 -0400 (EDT) Subject: Distributing static content In-Reply-To: <4656EFD1.1000203@redhat.com> References: <4656EFD1.1000203@redhat.com> Message-ID: On Fri, 25 May 2007, Mike McGrath wrote: > 4. rsync via ssh keys or rsync server (I'm currently leaning towards this) > > We've got a whole pool of sysadmins on this list. How do you deal with these > issues in your current environments? Across a pool of web servers in a cluster, we use rsync over SSH to keep content "in sync". When changes are made on the "master", it takes a few moments for the other nodes to get the changes, but that hasn't caused any issues. rsync is initiated on the "non-master" nodes and the only time we have a problem is if the "master" isn't available (down for reboot, etc.) -- even that doesn't cause any real problems, just results in an e-mail since the script called from crontab generates output in the event of errors; otherwise, it's silent. We're very happy with this method, it has proven to be reliable and scalable in our environment. -- Jeremy L. Gaddis From sopwith at gmail.com Fri May 25 15:01:11 2007 From: sopwith at gmail.com (Elliot Lee) Date: Fri, 25 May 2007 11:01:11 -0400 Subject: Distributing static content In-Reply-To: <4656EFD1.1000203@redhat.com> References: <4656EFD1.1000203@redhat.com> Message-ID: On 5/25/07, Mike McGrath wrote: > turbogears apps) around using rpms. We can do that with tg pretty > easily. But what about other static content, images, things like that? > > This needs to be scriptable from start to finish, here's the options as > I see them: > > 1. Straight nfs mount (boo) > 2. nfs mount to cron copy the files > 3. recursive wget to an http store somewhere > 4. rsync via ssh keys or rsync server (I'm currently leaning towards this) > 5. Figure out how to make puppet more efficient with large numbers of files. Another option that may fit into the mix somewhere is proxy caching... For example, you could have one 'master content server' that is only accessable to the Fedora machines, and then have all the proxy servers act as a caching proxy for that content. You may want that type of thing anyways, to better abstract the path where the files are stored from the URL the files are available in. Best, -- Elliot From orion at cora.nwra.com Fri May 25 15:44:45 2007 From: orion at cora.nwra.com (Orion Poplawski) Date: Fri, 25 May 2007 09:44:45 -0600 Subject: Hung build Message-ID: <4657046D.4000305@cora.nwra.com> The following task: http://koji.fedoraproject.org/koji/taskinfo?taskID=16822 appears to be hung. Can someone take a look? -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA/CoRA Division FAX: 303-415-9702 3380 Mitchell Lane orion at cora.nwra.com Boulder, CO 80301 http://www.cora.nwra.com From jw at jhop.com Fri May 25 15:50:04 2007 From: jw at jhop.com (Jason Watson) Date: Fri, 25 May 2007 11:50:04 -0400 Subject: Distributing static content In-Reply-To: References: <4656EFD1.1000203@redhat.com> Message-ID: <465705AC.9050901@jhop.com> Gaddis, Jeremy L. wrote: >> We've got a whole pool of sysadmins on this list. How do you deal >> with these issues in your current environments? > > Across a pool of web servers in a cluster, we use rsync over SSH ... > ..... rsync is initiated on the "non-master" nodes And I have done the opposite: Set up a script on the master to run multiple parallel rsync's pushing content out to the target servers. This was an on-demand content push, rather than an automatic replication of changes. It worked very well for many years. Jason From Christian.Iseli at licr.org Fri May 25 16:07:29 2007 From: Christian.Iseli at licr.org (Christian Iseli) Date: Fri, 25 May 2007 18:07:29 +0200 Subject: Distributing static content In-Reply-To: <4656EFD1.1000203@redhat.com> References: <4656EFD1.1000203@redhat.com> Message-ID: <20070525180729.2d01d199@ludwig-alpha.unil.ch> On Fri, 25 May 2007 09:16:49 -0500, Mike McGrath wrote: > How do you deal with > these issues in your current environments? At some point I used multi-rsync: http://freshmeat.net/projects/mrsync multi-rsync transfers files from one master machine to many machines using UNIX socket's multicasting capability. It worked pretty well. I think I attempted to push it to FE a long time ago (when we were doing reviews by emails) and no-one reviewed it IIRC. I'm no longer actively using this, but the SPEC and SRPMS are here just in case... ftp://ftp.licr.org/pub/multi-rsync.spec ftp://ftp.licr.org/pub/multi-rsync-1.0-1.src.rpm Cheers, Christian From skvidal at linux.duke.edu Fri May 25 16:08:25 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Fri, 25 May 2007 12:08:25 -0400 Subject: Distributing static content In-Reply-To: <4656EFD1.1000203@redhat.com> References: <4656EFD1.1000203@redhat.com> Message-ID: <1180109305.13865.10.camel@rivendell> On Fri, 2007-05-25 at 09:16 -0500, Mike McGrath wrote: > Over the last couple of weeks we've been using puppet to distribute > static content across some of our application servers and proxy servers. > > Static content might include the new static webpage or an application > like our accounts system. > > This has proved to be a bit of an issue. Puppet wasn't really designed > to do this and as such puts a noticeable load on the boxes while running > as well as causing longer runs. Puppet works for this but we're > currently into it managing thousands of files and initial deploys take a > long time :) In the past we'd discussed moving some things (like > turbogears apps) around using rpms. We can do that with tg pretty > easily. But what about other static content, images, things like that? > > This needs to be scriptable from start to finish, here's the options as > I see them: How about you use the puppet cert it makes on the client for auth and see if we can have wget or urlgrabber or curl use it to talk to mod_auth_cert on apache. Then we'd have a secure-auth + good static content replication. -sv From ask at develooper.com Fri May 25 16:28:27 2007 From: ask at develooper.com (=?ISO-8859-1?Q?Ask_Bj=F8rn_Hansen?=) Date: Fri, 25 May 2007 09:28:27 -0700 Subject: Distributing static content In-Reply-To: <4656EFD1.1000203@redhat.com> References: <4656EFD1.1000203@redhat.com> Message-ID: <1D66A756-CF4E-4855-9EC0-705DD16B3F98@develooper.com> On May 25, 2007, at 7:16, Mike McGrath wrote: > We've got a whole pool of sysadmins on this list. How do you deal > with these issues in your current environments? csync2 can be great for this sort of thing - I use it for recursive directory copies when puppet is too slow for that. http://oss.linbit.com/csync2/ For larger number or files it's much much more efficient than rsync -- and it can sync "both ways"[1]. The proxy suggestion is also good (Varnish[2] is an up and coming super efficient reverse proxy cache server), but you still need to sync the content on at least two backends for HA... - ask [1] http://oss.linbit.com/csync2/paper.pdf [2] http://varnish.projects.linpro.no/ - http://phk.freebsd.dk/pubs/ varnish_roadshow.pdf -- http://develooper.com/ - http://askask.com/ From jkeating at redhat.com Fri May 25 16:30:40 2007 From: jkeating at redhat.com (Jesse Keating) Date: Fri, 25 May 2007 12:30:40 -0400 Subject: Hung build In-Reply-To: <4657046D.4000305@cora.nwra.com> References: <4657046D.4000305@cora.nwra.com> Message-ID: <200705251230.40438.jkeating@redhat.com> On Friday 25 May 2007 11:44:45 Orion Poplawski wrote: > The following task: > > http://koji.fedoraproject.org/koji/taskinfo?taskID=16822 > > appears to be hung. ?Can someone take a look? You should be able to cancel your own tasks. Have you tried 'koji cancel 16822' ? -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From mlum at redhat.com Fri May 25 17:44:48 2007 From: mlum at redhat.com (Margaret Lum) Date: Fri, 25 May 2007 10:44:48 -0700 Subject: RFR: svn.fedoraproject.org instance for Certificate System In-Reply-To: <46572061.5070201@redhat.com> References: <46572061.5070201@redhat.com> Message-ID: <46572090.3070202@redhat.com> > _Project Sponsor_ > Name: Red Hat > Wiki Name: http://pki-svn.fedora.redhat.com/wiki/Main_Page > Infrastructure Sponsor: Red Hat > Owners/Contacts @ Red Hat: Thomas Kwan, Matt Harmsen, Steve Parkinson, > Margaret Lum > > _Project Info_ > Project Name: Certificate System > Target Audience: folks interested in Open Source PKI software > Expiration Date (required): indefinite > Description/Summary: This project is an enterprise-class Open Source > Certificate System for Linux, supporting certificate management, key > archival, OCSP support and smartcard life-cycle management. > Project plan (Detailed) and Goals: Review documentation here: > http://pki-svn.fedora.redhat.com/wiki/Documentation. > > _Specific resources needed_: > We require an svn.fedoraproject.org instance for the following > repositories: > idm/pki > idm/fortitude > > _Additional Info_ > Please contact me further for enabling the ACLs on each repository. > Initially, I would like these to be CLOSED to non-redhat.com domains, > while we start importing code into the repository. Also, must I > submit RFRs for code imports, or can I import these directly? > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3229 bytes Desc: S/MIME Cryptographic Signature URL: From jeff at ocjtech.us Fri May 25 18:14:37 2007 From: jeff at ocjtech.us (Jeffrey C. Ollie) Date: Fri, 25 May 2007 13:14:37 -0500 Subject: RFR: svn.fedoraproject.org instance for Certificate System In-Reply-To: <46572090.3070202@redhat.com> References: <46572061.5070201@redhat.com> <46572090.3070202@redhat.com> Message-ID: <1180116877.3893.39.camel@lt21223.campus.dmacc.edu> On Fri, 2007-05-25 at 10:44 -0700, Margaret Lum wrote: > > > > Project Info > > Project Name: Certificate System > > Target Audience: folks interested in Open Source PKI software > > Expiration Date (required): indefinite > > Description/Summary: This project is an enterprise-class Open Source > > Certificate System for Linux, supporting certificate management, key > > archival, OCSP support and smartcard life-cycle management. Since this is for code, wouldn't this make more sense as a hosted.fedoraproject.org project? Jeff -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From mmcgrath at redhat.com Fri May 25 18:17:10 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 25 May 2007 13:17:10 -0500 Subject: RFR: svn.fedoraproject.org instance for Certificate System In-Reply-To: <1180116877.3893.39.camel@lt21223.campus.dmacc.edu> References: <46572061.5070201@redhat.com> <46572090.3070202@redhat.com> <1180116877.3893.39.camel@lt21223.campus.dmacc.edu> Message-ID: <46572826.5090009@redhat.com> Jeffrey C. Ollie wrote: > On Fri, 2007-05-25 at 10:44 -0700, Margaret Lum wrote: > >>> Project Info >>> Project Name: Certificate System >>> Target Audience: folks interested in Open Source PKI software >>> Expiration Date (required): indefinite >>> Description/Summary: This project is an enterprise-class Open Source >>> Certificate System for Linux, supporting certificate management, key >>> archival, OCSP support and smartcard life-cycle management. >>> > > Since this is for code, wouldn't this make more sense as a > hosted.fedoraproject.org project? > Possibly, even with hosted they'll need a place to actually host code (presently doesn't happen on hosted, but is synced). -Mike From mikeb at redhat.com Fri May 25 19:18:24 2007 From: mikeb at redhat.com (Mike Bonnet) Date: Fri, 25 May 2007 15:18:24 -0400 Subject: Hung builder In-Reply-To: <4656120E.1080000@cora.nwra.com> References: <4656120E.1080000@cora.nwra.com> Message-ID: <1180120704.3608.1.camel@liffey.home> On Thu, 2007-05-24 at 16:30 -0600, Orion Poplawski wrote: > This build of mine: > > http://koji.fedoraproject.org/koji/taskinfo?taskID=16822 > > appears to be hung. Can someone take a look? I canceled that task and cleaned up the rogue processes. It looks like one of the tests got into an infinite loop. Here's the relevant part of the process listing: 103 6250 0.0 0.0 3624 1560 ? S May24 0:00 \_ /bin/sh -e /var/tmp/rpm-tmp.120 103 6251 0.0 0.1 15636 5356 ? S May24 0:00 \_ ctest -V 103 6466 0.0 0.0 3624 1640 ? S May24 0:00 \_ /bin/bash ./plplot-test.sh --device=psc --front-end=python 103 6471 0.0 0.0 3624 1584 ? S May24 0:00 \_ /bin/bash ./test_python.sh 103 4991 97.9 0.1 11464 6864 ? R May24 897:50 \_ python /builddir/build/BUILD/plplot-5.7.3/fedora/examples/python/x09 -dev psc -o ./x09p.ps From Matt_Domsch at dell.com Fri May 25 20:33:55 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Fri, 25 May 2007 15:33:55 -0500 Subject: Distributing static content In-Reply-To: <465705AC.9050901@jhop.com> References: <4656EFD1.1000203@redhat.com> <465705AC.9050901@jhop.com> Message-ID: <20070525203355.GA13932@lists.us.dell.com> On Fri, May 25, 2007 at 11:50:04AM -0400, Jason Watson wrote: > Gaddis, Jeremy L. wrote: > >>We've got a whole pool of sysadmins on this list. How do you deal > >>with these issues in your current environments? > > > >Across a pool of web servers in a cluster, we use rsync over SSH ... > >..... rsync is initiated on the "non-master" nodes > > And I have done the opposite: Set up a script on the master to run > multiple parallel rsync's pushing content out to the target servers. > This was an on-demand content push, rather than an automatic replication > of changes. It worked very well for many years. This is what we do for linux.dell.com and several internal servers. -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From kwade at redhat.com Fri May 25 22:39:23 2007 From: kwade at redhat.com (Karsten Wade) Date: Fri, 25 May 2007 15:39:23 -0700 Subject: Distributing static content In-Reply-To: <1180109305.13865.10.camel@rivendell> References: <4656EFD1.1000203@redhat.com> <1180109305.13865.10.camel@rivendell> Message-ID: <1180132763.3439.973.camel@erato.phig.org> On Fri, 2007-05-25 at 12:08 -0400, seth vidal wrote: > How about you use the puppet cert it makes on the client for auth and > see if we can have wget or urlgrabber or curl use it to talk to > mod_auth_cert on apache. > > Then we'd have a secure-auth + good static content replication. +1 It also keeps you from increasing the number of *keys that need to be tracked and distributed to hosts -- with rsync + ssh, you have to manage the sshkey relationship for *all* hosts. Since the _content_ isn't secret but we do have a desire to ensure the host is authentic, this idea is the best so far. It uses known and working secure-auth, and lets you deploy content to hosts that you don't want to have an sshkey relationship with. A related item is the trigger for content pushing. There are two general situation when we want to push out new content: 1. I'm updating something, no worries 2. I really, really want/need to see the change RIGHT NOW I presume puppet has something for this with configurations. Personally, I'd be comfortable with a longer lead-time on a cronjob from the subservient host (two to four times an hour), if it were possible to push a Big Red Button and have content updated from the master immediately. Open for suggestions on methodology, natch. :) - Karsten -- Karsten Wade, 108 Editor ^ Fedora Documentation Project Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject quaid.108.redhat.com | gpg key: AD0E0C41 ////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From dennis at ausil.us Sat May 26 00:04:27 2007 From: dennis at ausil.us (Dennis Gilmore) Date: Fri, 25 May 2007 19:04:27 -0500 Subject: Distributing static content In-Reply-To: <4656EFD1.1000203@redhat.com> References: <4656EFD1.1000203@redhat.com> Message-ID: <200705251904.27653.dennis@ausil.us> Once upon a time Friday 25 May 2007, Mike McGrath wrote: > Over the last couple of weeks we've been using puppet to distribute > static content across some of our application servers and proxy servers. > > Static content might include the new static webpage or an application > like our accounts system. > > This has proved to be a bit of an issue. Puppet wasn't really designed > to do this and as such puts a noticeable load on the boxes while running > as well as causing longer runs. Puppet works for this but we're > currently into it managing thousands of files and initial deploys take a > long time :) In the past we'd discussed moving some things (like > turbogears apps) around using rpms. We can do that with tg pretty > easily. But what about other static content, images, things like that? > > This needs to be scriptable from start to finish, here's the options as > I see them: > > 1. Straight nfs mount (boo) > 2. nfs mount to cron copy the files > 3. recursive wget to an http store somewhere > 4. rsync via ssh keys or rsync server (I'm currently leaning towards this) > 5. Figure out how to make puppet more efficient with large numbers of > files. > > > We've got a whole pool of sysadmins on this list. How do you deal with > these issues in your current environments? how about using cvs and scripting a checkout of the content? i wuld say either that or rsync. since alot of it like the accounts system is already in cvs why not use that? Dennis From mastahnke at gmail.com Sat May 26 00:43:59 2007 From: mastahnke at gmail.com (Michael Stahnke) Date: Fri, 25 May 2007 19:43:59 -0500 Subject: Distributing static content In-Reply-To: <200705251904.27653.dennis@ausil.us> References: <4656EFD1.1000203@redhat.com> <200705251904.27653.dennis@ausil.us> Message-ID: <7874d9dd0705251743h540e0d85vc63318c70948c7d5@mail.gmail.com> On 5/25/07, Dennis Gilmore wrote: > Once upon a time Friday 25 May 2007, Mike McGrath wrote: > > Over the last couple of weeks we've been using puppet to distribute > > static content across some of our application servers and proxy servers. > > > > Static content might include the new static webpage or an application > > like our accounts system. > > > > This has proved to be a bit of an issue. Puppet wasn't really designed > > to do this and as such puts a noticeable load on the boxes while running > > as well as causing longer runs. Puppet works for this but we're > > currently into it managing thousands of files and initial deploys take a > > long time :) In the past we'd discussed moving some things (like > > turbogears apps) around using rpms. We can do that with tg pretty > > easily. But what about other static content, images, things like that? > > > > This needs to be scriptable from start to finish, here's the options as > > I see them: > > > > 1. Straight nfs mount (boo) > > 2. nfs mount to cron copy the files > > 3. recursive wget to an http store somewhere > > 4. rsync via ssh keys or rsync server (I'm currently leaning towards this) > > 5. Figure out how to make puppet more efficient with large numbers of > > files. > > > > > > We've got a whole pool of sysadmins on this list. How do you deal with > > these issues in your current environments? > how about using cvs and scripting a checkout of the content? i wuld say > either that or rsync. since alot of it like the accounts system is already > in cvs why not use that? I was going to sugest SVN, but roughly the same thing. Have it checked in and automate a check-out. You can even checkout things only tagged for that machine if you want. I think you could use Puppet to kick-off the checkout. stahnma > > Dennis > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > From frosario777 at gmail.com Sat May 26 01:57:31 2007 From: frosario777 at gmail.com (Freddie Rosario) Date: Fri, 25 May 2007 18:57:31 -0700 Subject: Hello In-Reply-To: <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> <1180062527.22279.0.camel@localhost.localdomain> <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> Message-ID: Hey Jose, Since you have prior programming experience I suggest looking at this website: http://www.diveintopython.org/ It skips all the beginner sections and tossing you right into python. It is a very good resource. I am familiar with python and can give you a helping hand if you want it. Good luck Jose and welcome to the list! On 5/24/07, jose manimala wrote: > > sure i dont mind learning python. just tell me what to do and where to > start. > > regards > > jose m manimala > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- --Freddie -------------- next part -------------- An HTML attachment was scrubbed... URL: From lmacken at redhat.com Sat May 26 04:02:46 2007 From: lmacken at redhat.com (Luke Macken) Date: Sat, 26 May 2007 00:02:46 -0400 Subject: bodhi Message-ID: <20070526040246.GA7850@tomservo.rh.rit.edu> So we're less than a week away from F7, so why not completely change the way updates are pushed? :) We're going to use mash[0] to compose our updates repo instead of managing it by hand. This removes the burden of multilib, repo-cleaning, and dep closure checking from bodhi. This means that we need to change the push process to be something like: - Move all submitted builds from dist-f7-updates-candidate to dist-f7-updates-testing in Koji - Run mash - Add/remove appropriate updates from updateinfo.xml and insert it into all of the repodata - Sync out to wallace, which will sync to the mirrors In theory, this should do the trick. The roadmap[1] to 1.0 should be fairly accurate now. So what we have left, aside from the new push process mentioned above, is: - ACLs. We need to make sure that all updates are submitted by the appropriate {,co-}maintainers. - Package signing stuff. Jesse pointed me to the sign_unsigned tool[2] that we could potentially integrate with to help do this. I won't be able to start hacking on this until monday, as I am graduating tomorrow and then moving on Sunday, so any help would be appreciated :) luke [0]: http://git.fedoraproject.org/?p=hosted/mash;a=summary [1]: https://hosted.fedoraproject.org/projects/bodhi/roadmap [2]: http://git.fedoraproject.org/?p=fedora/releng;a=blob_plain;f=scripts/sign_unsigned.py;hb=9b1b7f1b70976af053c155fe7374dd47b5698da4 From josemanimala at gmail.com Sat May 26 05:42:01 2007 From: josemanimala at gmail.com (jose manimala) Date: Sat, 26 May 2007 11:12:01 +0530 Subject: Hello In-Reply-To: References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> <1180062527.22279.0.camel@localhost.localdomain> <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> Message-ID: <53a863600705252242s37d1806ame41f5c6cc06e80e5@mail.gmail.com> thanks that will help. so what should i do first. go through some design documents will help me get the structure of new applications and maybe you can point me to a project plan or something. just let me know!! Thanks jose On 5/26/07, Freddie Rosario wrote: > Hey Jose, > > Since you have prior programming experience I suggest looking at this > website: > > http://www.diveintopython.org/ > > It skips all the beginner sections and tossing you right into python. It is > a very good resource. I am familiar with python and can give you a helping > hand if you want it. Good luck Jose and welcome to the list! > > > > On 5/24/07, jose manimala wrote: > > > > sure i dont mind learning python. just tell me what to do and where to > > start. > > > > regards > > > > jose m manimala > > > > _______________________________________________ > > Fedora-infrastructure-list mailing list > > Fedora-infrastructure-list at redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > > > > -- > --Freddie > -- Jose M Manimala S6 Computer science and engineering Rajagiri School Of Engineering And Technology Ph: +919846367850 http://www.jmm-blog.co.nr GPGkeyID: 98FF52D2 From mmcgrath at redhat.com Sat May 26 15:05:02 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Sat, 26 May 2007 10:05:02 -0500 Subject: Distributing static content In-Reply-To: <200705251904.27653.dennis@ausil.us> References: <4656EFD1.1000203@redhat.com> <200705251904.27653.dennis@ausil.us> Message-ID: <46584C9E.6070604@redhat.com> Dennis Gilmore wrote: > Once upon a time Friday 25 May 2007, Mike McGrath wrote: > >> Over the last couple of weeks we've been using puppet to distribute >> static content across some of our application servers and proxy servers. >> >> Static content might include the new static webpage or an application >> like our accounts system. >> >> This has proved to be a bit of an issue. Puppet wasn't really designed >> to do this and as such puts a noticeable load on the boxes while running >> as well as causing longer runs. Puppet works for this but we're >> currently into it managing thousands of files and initial deploys take a >> long time :) In the past we'd discussed moving some things (like >> turbogears apps) around using rpms. We can do that with tg pretty >> easily. But what about other static content, images, things like that? >> >> This needs to be scriptable from start to finish, here's the options as >> I see them: >> >> 1. Straight nfs mount (boo) >> 2. nfs mount to cron copy the files >> 3. recursive wget to an http store somewhere >> 4. rsync via ssh keys or rsync server (I'm currently leaning towards this) >> 5. Figure out how to make puppet more efficient with large numbers of >> files. >> >> >> We've got a whole pool of sysadmins on this list. How do you deal with >> these issues in your current environments? >> > how about using cvs and scripting a checkout of the content? i wuld say > either that or rsync. since alot of it like the accounts system is already > in cvs why not use that? > I thought about this, the problem is some of our content needs to be built first. -Mike From a.badger at gmail.com Sat May 26 16:02:21 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Sat, 26 May 2007 09:02:21 -0700 Subject: Hello In-Reply-To: <53a863600705252242s37d1806ame41f5c6cc06e80e5@mail.gmail.com> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> <1180062527.22279.0.camel@localhost.localdomain> <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> <53a863600705252242s37d1806ame41f5c6cc06e80e5@mail.gmail.com> Message-ID: <1180195341.22279.86.camel@localhost.localdomain> On Sat, 2007-05-26 at 11:12 +0530, jose manimala wrote: > thanks that will help. so what should i do first. go through some > design documents will help me get the structure of new applications > and maybe you can point me to a project plan or something. just let me > know!! Thanks jose Cool. Something that would be very useful and a good way to start would be to work on a new voting/polling application. We have something that is adequate enough that we haven't allocated time to replace it but has some definite failings. The current code is here:: http://cvs.fedora.redhat.com/viewcvs/fedora-vote/?root=fedora You'll probably be most interested in the votingdb.sql file as the plan is to discard the rest of the code and recreate it as a TurboGears application. I can write a bit more on Monday about what the vision is for the new application but one thing you can get started on right away is enhancing/rewriting the DB tables to meet some of our new goals:: 1) multi-issue ballots. We want to be able to say there will be an election right after Fedora 7. FESCo, The Board, and the following referendum will be on the ballot. - Note that different groups can vote on different topics. So someone in cvsextras and cvsdocs might vote for different issues than someone in cvsextras and ambassadors. 2) Polls. The current code does not support referendums (like "What should the name of Fedora 7 be?") I hacked up the copy on the server to do that *instead* of voting for candidates for a steering committee but it's not the way to go for the future. We need to provide real support for polls and referendum. (I can provide you with the schema for the additional tables I created on Monday.) 3) Other ideas you think would be good for a voting application. I'll also search my notes to see if I can find anything else that would impinge on the DB while I'm organizing them. Since the plan is for this to be a TurboGears app, you can also just start learning TurboGears and I'll provide more help with the specifics of the voting app next week. Thanks! -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From paulo.banon at googlemail.com Sat May 26 17:17:17 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Sat, 26 May 2007 18:17:17 +0100 Subject: Distributing static content In-Reply-To: <46584C9E.6070604@redhat.com> References: <4656EFD1.1000203@redhat.com> <200705251904.27653.dennis@ausil.us> <46584C9E.6070604@redhat.com> Message-ID: <7a41c4bc0705261017k700e5e73pe71635c4c6ff683d@mail.gmail.com> Where i work, everything needs to be build and we use the following: SVN -> build script -> rsync (static to webservers / dynamic to apps) Really simple Paulo On 5/26/07, Mike McGrath wrote: > > Dennis Gilmore wrote: > > Once upon a time Friday 25 May 2007, Mike McGrath wrote: > > > >> Over the last couple of weeks we've been using puppet to distribute > >> static content across some of our application servers and proxy > servers. > >> > >> Static content might include the new static webpage or an application > >> like our accounts system. > >> > >> This has proved to be a bit of an issue. Puppet wasn't really designed > >> to do this and as such puts a noticeable load on the boxes while > running > >> as well as causing longer runs. Puppet works for this but we're > >> currently into it managing thousands of files and initial deploys take > a > >> long time :) In the past we'd discussed moving some things (like > >> turbogears apps) around using rpms. We can do that with tg pretty > >> easily. But what about other static content, images, things like that? > >> > >> This needs to be scriptable from start to finish, here's the options as > >> I see them: > >> > >> 1. Straight nfs mount (boo) > >> 2. nfs mount to cron copy the files > >> 3. recursive wget to an http store somewhere > >> 4. rsync via ssh keys or rsync server (I'm currently leaning towards > this) > >> 5. Figure out how to make puppet more efficient with large numbers of > >> files. > >> > >> > >> We've got a whole pool of sysadmins on this list. How do you deal with > >> these issues in your current environments? > >> > > how about using cvs and scripting a checkout of the content? i wuld say > > either that or rsync. since alot of it like the accounts system is > already > > in cvs why not use that? > > > > I thought about this, the problem is some of our content needs to be > built first. > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From josemanimala at gmail.com Sun May 27 10:35:55 2007 From: josemanimala at gmail.com (jose manimala) Date: Sun, 27 May 2007 03:35:55 -0700 Subject: Hello In-Reply-To: <1180195341.22279.86.camel@localhost.localdomain> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> <1180062527.22279.0.camel@localhost.localdomain> <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> <53a863600705252242s37d1806ame41f5c6cc06e80e5@mail.gmail.com> <1180195341.22279.86.camel@localhost.localdomain> Message-ID: <53a863600705270335g4919c874g740a1bf0885249cd@mail.gmail.com> No need to thank me i am looking for a good challenge to push the limits i know. i might have to do a lot of reading on Turbo Gear. i'll take a look at the code. I just started to read on python. Jose From damian.myerscough at gmail.com Sun May 27 12:34:11 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Sun, 27 May 2007 13:34:11 +0100 Subject: Apache tweak Message-ID: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> I thought I would email everyone before touching the Apache server, plus check it was OK to go ahead and make the changes. I would like to try an optimize Apache before Thursday (Fedora 7 is release) to handle the traffic a bit better. I will be performing some benchmarking on the Apache server using Apache benchmark. I would also like to deploy mod_evasive which should help with the load on Apache. I will be attending the meeting this week, however I would like any responses via email if possible as the meeting is Thursday, and Fedora 7 is release then. -- Regards, Damian From skvidal at linux.duke.edu Sun May 27 12:38:42 2007 From: skvidal at linux.duke.edu (seth vidal) Date: Sun, 27 May 2007 08:38:42 -0400 Subject: Apache tweak In-Reply-To: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> Message-ID: <1180269522.4965.8.camel@rivendell> On Sun, 2007-05-27 at 13:34 +0100, Damian Myerscough wrote: > I thought I would email everyone before touching the Apache server, > plus check it was > OK to go ahead and make the changes. > > I would like to try an optimize Apache before Thursday (Fedora 7 is > release) to handle > the traffic a bit better. I will be performing some benchmarking on > the Apache server using > Apache benchmark. > > I would also like to deploy mod_evasive which should help with the > load on Apache. I will > be attending the meeting this week, however I would like any responses > via email if possible > as the meeting is Thursday, and Fedora 7 is release then. I would like to recommend that we leave things alone this close to the release. Especially items like mod_evasive which very few people in the infrastructure group are familiar with, so far. -sv From damian.myerscough at gmail.com Sun May 27 13:10:32 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Sun, 27 May 2007 14:10:32 +0100 Subject: Apache tweak In-Reply-To: <1180269522.4965.8.camel@rivendell> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> Message-ID: <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> Ok, I guess we can talk more about it after the release of Fedora 7. On 27/05/07, seth vidal wrote: > On Sun, 2007-05-27 at 13:34 +0100, Damian Myerscough wrote: > > I thought I would email everyone before touching the Apache server, > > plus check it was > > OK to go ahead and make the changes. > > > > I would like to try an optimize Apache before Thursday (Fedora 7 is > > release) to handle > > the traffic a bit better. I will be performing some benchmarking on > > the Apache server using > > Apache benchmark. > > > > I would also like to deploy mod_evasive which should help with the > > load on Apache. I will > > be attending the meeting this week, however I would like any responses > > via email if possible > > as the meeting is Thursday, and Fedora 7 is release then. > > > I would like to recommend that we leave things alone this close to the > release. Especially items like mod_evasive which very few people in the > infrastructure group are familiar with, so far. > > -sv > > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From mmcgrath at redhat.com Sun May 27 16:30:53 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Sun, 27 May 2007 11:30:53 -0500 Subject: Apache tweak In-Reply-To: <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> Message-ID: <4659B23D.1000108@redhat.com> Damian Myerscough wrote: > Ok, I guess we can talk more about it after the release of Fedora 7. > I also have a question about mod_evasive. Wouldn't it be better/most efficient to limit that traffic before it even hits the apache instance? -Mike From damian.myerscough at gmail.com Sun May 27 16:41:17 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Sun, 27 May 2007 17:41:17 +0100 Subject: Apache tweak In-Reply-To: <4659B23D.1000108@redhat.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> Message-ID: <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> Yea, it would. However mod_easvie is able to detect if users a continuously hitting refresh to consume bandwidth. mod_evasive is also recommended by Ryan Barnett who is the author of Preventing Web Attacks with Apache. Has anyone also thought about deploying mod_security? or is it me just being paranoid. I think this would make an excellent topic to talk about in the next meeting? On 27/05/07, Mike McGrath wrote: > Damian Myerscough wrote: > > Ok, I guess we can talk more about it after the release of Fedora 7. > > > I also have a question about mod_evasive. Wouldn't it be better/most > efficient to limit that traffic before it even hits the apache instance? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From paulo.banon at googlemail.com Sun May 27 16:48:23 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Sun, 27 May 2007 17:48:23 +0100 Subject: Apache tweak In-Reply-To: <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> Message-ID: <7a41c4bc0705270948p625a66e5h53697924b4d0c55d@mail.gmail.com> Its always nice to have extra security surounding the architecture and apps, but for that we will need extra resources that we currently dont have right now, i personally would like to have extra RAM on the proxies. mod_security, is not that light, but its really nice and handy :) Tweaks that we should do right now, is verify the values in MaxClients and everything regarding the threads (childs), and see if unecessary modules are being loaded or not At least is my opinion... Paulo On 5/27/07, Damian Myerscough wrote: > > Yea, it would. However mod_easvie is able to detect if users a > continuously hitting refresh > to consume bandwidth. > > mod_evasive is also recommended by Ryan Barnett who is the author of > Preventing Web Attacks with Apache. > > Has anyone also thought about deploying mod_security? or is it me just > being paranoid. > > I think this would make an excellent topic to talk about in the next > meeting? > > On 27/05/07, Mike McGrath wrote: > > Damian Myerscough wrote: > > > Ok, I guess we can talk more about it after the release of Fedora 7. > > > > > I also have a question about mod_evasive. Wouldn't it be better/most > > efficient to limit that traffic before it even hits the apache instance? > > > > -Mike > > > > _______________________________________________ > > Fedora-infrastructure-list mailing list > > Fedora-infrastructure-list at redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > > > -- > Regards, > Damian > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From kwade at redhat.com Sun May 27 20:11:51 2007 From: kwade at redhat.com (Karsten Wade) Date: Sun, 27 May 2007 13:11:51 -0700 Subject: Apache tweak In-Reply-To: <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> Message-ID: <1180296711.3439.1125.camel@erato.phig.org> On Sun, 2007-05-27 at 17:41 +0100, Damian Myerscough wrote: > Yea, it would. However mod_easvie is able to detect if users a > continuously hitting refresh > to consume bandwidth. Would it make sense to have a few tricks ready to go? Untested or unproven items to pull out in response to what happens. Sort of like what Egon Spengler might pull out in Ghostbusters ... I know, it could be *worse* than whatever happens, but there is a slim chance we'll survive. - Karsten Dr. Egon Spengler: Not necessarily. There's definitely a *very slim* chance we'll survive. [pause while they consider this] Dr. Peter Venkman: [slaps Ray] I love this plan! I'm excited it could work! LET'S DO IT! -- Karsten Wade, 108 Editor ^ Fedora Documentation Project Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject quaid.108.redhat.com | gpg key: AD0E0C41 ////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From damian.myerscough at gmail.com Sun May 27 22:57:17 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Sun, 27 May 2007 23:57:17 +0100 Subject: Apache tweak In-Reply-To: <1180296711.3439.1125.camel@erato.phig.org> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> Message-ID: <8c9e56490705271557i6842f19cg4f10bd93f5e7e310@mail.gmail.com> I guess with the release soo close no one wants to have the date pushed back due to users unable to get to the source. However, we are guaranteed to get large volumes of traffic which might knock the web servers offline. Karsten Wade, I think another reason for leaving it is due to mod_evasive as Seth said no all the infrastructure people are familiar with it. Anyways we will see how the web servers stand on Thursday. On 27/05/07, Karsten Wade wrote: > On Sun, 2007-05-27 at 17:41 +0100, Damian Myerscough wrote: > > Yea, it would. However mod_easvie is able to detect if users a > > continuously hitting refresh > > to consume bandwidth. > > Would it make sense to have a few tricks ready to go? Untested or > unproven items to pull out in response to what happens. Sort of like > what Egon Spengler might pull out in Ghostbusters ... > > I know, it could be *worse* than whatever happens, but there is a slim > chance we'll survive. > > - Karsten > > Dr. Egon Spengler: Not necessarily. There's definitely a *very slim* > chance we'll survive. > [pause while they consider this] > Dr. Peter Venkman: [slaps Ray] I love this plan! I'm excited it could > work! LET'S DO IT! > -- > Karsten Wade, 108 Editor ^ Fedora Documentation Project > Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject > quaid.108.redhat.com | gpg key: AD0E0C41 > ////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > -- Regards, Damian From paulo.banon at googlemail.com Sun May 27 23:04:17 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Mon, 28 May 2007 00:04:17 +0100 Subject: Apache tweak In-Reply-To: <8c9e56490705271557i6842f19cg4f10bd93f5e7e310@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <8c9e56490705271557i6842f19cg4f10bd93f5e7e310@mail.gmail.com> Message-ID: <7a41c4bc0705271604g772df983yaf51184ad8ce1876@mail.gmail.com> everything will rock! positive thinking :D And also lets not forget that the infrastructure itself is much more stable then in last release. Paulo On 5/27/07, Damian Myerscough wrote: > > I guess with the release soo close no one wants to have the date pushed > back due > to users unable to get to the source. However, we are guaranteed to > get large volumes of > traffic which might knock the web servers offline. > > Karsten Wade, I think another reason for leaving it is due to > mod_evasive as Seth said > no all the infrastructure people are familiar with it. > > Anyways we will see how the web servers stand on Thursday. > > On 27/05/07, Karsten Wade wrote: > > On Sun, 2007-05-27 at 17:41 +0100, Damian Myerscough wrote: > > > Yea, it would. However mod_easvie is able to detect if users a > > > continuously hitting refresh > > > to consume bandwidth. > > > > Would it make sense to have a few tricks ready to go? Untested or > > unproven items to pull out in response to what happens. Sort of like > > what Egon Spengler might pull out in Ghostbusters ... > > > > I know, it could be *worse* than whatever happens, but there is a slim > > chance we'll survive. > > > > - Karsten > > > > Dr. Egon Spengler: Not necessarily. There's definitely a *very slim* > > chance we'll survive. > > [pause while they consider this] > > Dr. Peter Venkman: [slaps Ray] I love this plan! I'm excited it could > > work! LET'S DO IT! > > -- > > Karsten Wade, 108 Editor ^ Fedora Documentation Project > > Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject > > quaid.108.redhat.com | gpg key: AD0E0C41 > > ////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ > > > > _______________________________________________ > > Fedora-infrastructure-list mailing list > > Fedora-infrastructure-list at redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > > > > > > > -- > Regards, > Damian > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Sun May 27 23:53:17 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Sun, 27 May 2007 18:53:17 -0500 Subject: Apache tweak In-Reply-To: <1180296711.3439.1125.camel@erato.phig.org> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> Message-ID: <465A19ED.4010506@redhat.com> Karsten Wade wrote: > On Sun, 2007-05-27 at 17:41 +0100, Damian Myerscough wrote: > >> Yea, it would. However mod_easvie is able to detect if users a >> continuously hitting refresh >> to consume bandwidth. >> > > Would it make sense to have a few tricks ready to go? Untested or > unproven items to pull out in response to what happens. Sort of like > what Egon Spengler might pull out in Ghostbusters ... > > I know, it could be *worse* than whatever happens, but there is a slim > chance we'll survive. > Actually we've got lots of plans as it is. I've been meaning to send this out but have been busy so here goes (all, comment and become familiar as necessary, the more people that know what is going on, the better) This is only things related to the F7 launch: Critical: 1) The static pages 2) The wiki 3) Mirror manager 4) Mirrors (which should be taken care of and synced long before the actual bit flip) Presently the static pages are fully redundant and the wiki and mirror manager are redundant up to their data layers. (netapp and database respectively) Plan A) We currently have 2 proxy servers and 4 application servers in place. 2 app servers are FC6, 2 are RHEL. At present the two RHEL boxes load balance the wiki (moin), the two app servers are for mirror manager (TurboGears). The static pages are on the actual proxy servers. On release day we'll track the load trend on these 6 machines. As long as release related content is being served, we hold. Plan B) If any one of the above pieces begins to fail we can add capacity as required as well as limiting traffic with iptables. FC6 servers run mirror manager. RHEL servers run the wiki (though the wiki could technically be run on FC6 boxes, it just hasn't been done yet, no reason) and the static pages are run directly on the proxy servers. Adding application servers is easy, just kick start the box, have it connect to puppet. Proxy servers are trickier. They exist on a different network, but the same principal applies. We just contact the network guys to switch a port to the correct vlan. I've got xen6 so it has one nic on the app network and one nic on the proxy network. Plan C) Start redirecting all traffic to the mirrors (those that have our web content). The theory is the most efficient transaction our web servers can do is to take a get and re-direct to a different server. The big 'gotcha' here is mirror manager. Mirror manager won't know which mirrors have Fedora 7 until they have it. So we'll have to serve the public server list at PHX. We're featuring the torrents a bit more this time compared to last time. Hopefully that will help keep load on the mirrors lighter, there's little way for us to track this AFAIK. Unfortunately we don't have full trends from last year because a different team was running fedora.redhat.com during the last release (and f.rh.c doesn't even exist this release) We'll get a much better idea of what we're facing on release day. In general I'd like to encourage that we hold this configuration unless there's any simple upgrades or obvious flaws. We're not really in an 'infrastructure change freeze' but I'd encourage everyone needing to make changes to wait until a day or so after the release. Exceptions, of course, would include something like bodhi which is of a high priority. I'll be flying to Germany for Linux Tag tomorrow (Monday) and will remain there for the release. I'll probably be on German time but will try to be around as needed or if any problems arise. My cell phone may be limited though. Comments? -Mike From kupfer at stw-bonn.de Mon May 28 06:11:28 2007 From: kupfer at stw-bonn.de (Andreas Kupfer) Date: Mon, 28 May 2007 08:11:28 +0200 Subject: report_mirror traceback Message-ID: <20070528081128.0e6e3bde.kupfer@stw-bonn.de> Hi, I get the following traceback on Ubuntu LTS: kupfer at ftp-a:~$ ./report_mirror -c ./report_mirror.conf Traceback (most recent call last): File "./report_mirror", line 240, in ? main() File "./report_mirror", line 236, in main print server.checkin(base64.urlsafe_b64encode(bz2.compress(p))) File "/usr/lib/python2.4/xmlrpclib.py", line 1096, in __call__ return self.__send(self.__name, args) File "/usr/lib/python2.4/xmlrpclib.py", line 1383, in __request verbose=self.__verbose File "/usr/lib/python2.4/xmlrpclib.py", line 1147, in request return self._parse_response(h.getfile(), sock) File "/usr/lib/python2.4/xmlrpclib.py", line 1286, in _parse_response return u.close() File "/usr/lib/python2.4/xmlrpclib.py", line 744, in close raise Fault(**self._stack[0]) xmlrpclib.Fault: Yours, Andreas aka ScottyTM -- *"NO CARRIER" - A Naval Aviator's worst nightmare!* From tchung at fedoraproject.org Mon May 28 06:36:36 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Sun, 27 May 2007 23:36:36 -0700 Subject: UnicodeEncodeError on certain wiki pages Message-ID: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> Hello Infrastructure Team, We have some issues with certain wiki pages including. http://fedoraproject.org/wiki/FWN/Beats http://fedoraproject.org/wiki/RecentChanges Could some fix the issue per Mike's email? On 5/27/07, Mike McGrath wrote: > Done. In case this ever happens again and I'm not around. Tell > someone to alter the edit-log for the page in question. Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From tchung at fedoraproject.org Mon May 28 06:46:44 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Sun, 27 May 2007 23:46:44 -0700 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> Message-ID: <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> On 5/27/07, Thomas Chung wrote: > Hello Infrastructure Team, > > We have some issues with certain wiki pages including. > http://fedoraproject.org/wiki/FWN/Beats > http://fedoraproject.org/wiki/RecentChanges > > Could some fix the issue per Mike's email? > > On 5/27/07, Mike McGrath wrote: > > Done. In case this ever happens again and I'm not around. Tell > > someone to alter the edit-log for the page in question. FYI, I found an existing bug report from Mion site. http://moinmoin.wikiwikiweb.de/MoinMoinBugs/UnicodeEncodeError_u%27%5Cx00%27 Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From email.ahmedkamal at googlemail.com Mon May 28 06:51:05 2007 From: email.ahmedkamal at googlemail.com (Ahmed Kamal) Date: Mon, 28 May 2007 09:51:05 +0300 Subject: Apache tweak In-Reply-To: <465A19ED.4010506@redhat.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> Message-ID: <3da3b5b40705272351t4a322bech6776daa73f1e4922@mail.gmail.com> cool plan. Hopefully it should hold against regular release day traffic. However, on FC6 launch, we were deliberately 'attacked', right? flooders might deliberately hit the non static pages, are we prepared for that ? How would everyone feel about limiting the number of connections per /24 network to a reasonable number, a la iptables -p tcp --syn --dport 80 -m connlimit --connlimit-above 16 --connlimit-mask 24 -j REJECT regards On 5/28/07, Mike McGrath wrote: > > Karsten Wade wrote: > > On Sun, 2007-05-27 at 17:41 +0100, Damian Myerscough wrote: > > > >> Yea, it would. However mod_easvie is able to detect if users a > >> continuously hitting refresh > >> to consume bandwidth. > >> > > > > Would it make sense to have a few tricks ready to go? Untested or > > unproven items to pull out in response to what happens. Sort of like > > what Egon Spengler might pull out in Ghostbusters ... > > > > I know, it could be *worse* than whatever happens, but there is a slim > > chance we'll survive. > > > > Actually we've got lots of plans as it is. I've been meaning to send > this out but have been busy so here goes (all, comment and become > familiar as necessary, the more people that know what is going on, the > better) > > This is only things related to the F7 launch: > > Critical: > 1) The static pages > 2) The wiki > 3) Mirror manager > 4) Mirrors (which should be taken care of and synced long before > the actual bit flip) > > Presently the static pages are fully redundant and the wiki and mirror > manager are redundant up to their data layers. (netapp and database > respectively) > > Plan A) > We currently have 2 proxy servers and 4 application servers in > place. 2 app servers are FC6, 2 are RHEL. At present the two RHEL > boxes load balance the wiki (moin), the two app servers are for mirror > manager (TurboGears). The static pages are on the actual proxy > servers. On release day we'll track the load trend on these 6 > machines. As long as release related content is being served, we hold. > > Plan B) > If any one of the above pieces begins to fail we can add capacity as > required as well as limiting traffic with iptables. FC6 servers run > mirror manager. RHEL servers run the wiki (though the wiki could > technically be run on FC6 boxes, it just hasn't been done yet, no > reason) and the static pages are run directly on the proxy servers. > Adding application servers is easy, just kick start the box, have it > connect to puppet. Proxy servers are trickier. They exist on a > different network, but the same principal applies. We just contact the > network guys to switch a port to the correct vlan. I've got xen6 so it > has one nic on the app network and one nic on the proxy network. > > Plan C) > Start redirecting all traffic to the mirrors (those that have our > web content). The theory is the most efficient transaction our web > servers can do is to take a get and re-direct to a different server. > The big 'gotcha' here is mirror manager. Mirror manager won't know > which mirrors have Fedora 7 until they have it. So we'll have to serve > the public server list at PHX. We're featuring the torrents a bit more > this time compared to last time. Hopefully that will help keep load on > the mirrors lighter, there's little way for us to track this AFAIK. > > Unfortunately we don't have full trends from last year because a > different team was running fedora.redhat.com during the last release > (and f.rh.c doesn't even exist this release) We'll get a much better > idea of what we're facing on release day. > > In general I'd like to encourage that we hold this configuration unless > there's any simple upgrades or obvious flaws. We're not really in an > 'infrastructure change freeze' but I'd encourage everyone needing to > make changes to wait until a day or so after the release. Exceptions, > of course, would include something like bodhi which is of a high > priority. I'll be flying to Germany for Linux Tag tomorrow (Monday) and > will remain there for the release. I'll probably be on German time but > will try to be around as needed or if any problems arise. My cell phone > may be limited though. > > Comments? > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From paulo.banon at googlemail.com Mon May 28 08:20:07 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Mon, 28 May 2007 10:20:07 +0200 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> Message-ID: <7a41c4bc0705280120k5b10670dib5c3f00e36cd8d3e@mail.gmail.com> Hi Thomas, This is now fixed. Tehre were 5 or 6 lines full of NULL chars. I've manually edited the log and deleted them. Thanks, Paulo On 5/28/07, Thomas Chung wrote: > > On 5/27/07, Thomas Chung wrote: > > Hello Infrastructure Team, > > > > We have some issues with certain wiki pages including. > > http://fedoraproject.org/wiki/FWN/Beats > > http://fedoraproject.org/wiki/RecentChanges > > > > Could some fix the issue per Mike's email? > > > > On 5/27/07, Mike McGrath wrote: > > > Done. In case this ever happens again and I'm not around. Tell > > > someone to alter the edit-log for the page in question. > > FYI, I found an existing bug report from Mion site. > > http://moinmoin.wikiwikiweb.de/MoinMoinBugs/UnicodeEncodeError_u%27%5Cx00%27 > Regards, > -- > Thomas Chung > http://fedoraproject.org/wiki/ThomasChung > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tchung at fedoraproject.org Mon May 28 08:28:16 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Mon, 28 May 2007 01:28:16 -0700 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <7a41c4bc0705280120k5b10670dib5c3f00e36cd8d3e@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> <7a41c4bc0705280120k5b10670dib5c3f00e36cd8d3e@mail.gmail.com> Message-ID: <369bce3b0705280128w793e641j3ddc15c5404b4f81@mail.gmail.com> On 5/28/07, Paulo Santos wrote: > Hi Thomas, > > This is now fixed. > Tehre were 5 or 6 lines full of NULL chars. I've manually edited the log and > deleted them. > > Thanks, > Paulo Hi Paulo, Could you fix following pages as well? http://fedoraproject.org/wiki/FWN/Beats http://fedoraproject.org/wiki/FWN/Beats/AdvisoriesUpdates Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From paulo.banon at googlemail.com Mon May 28 08:41:40 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Mon, 28 May 2007 10:41:40 +0200 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <369bce3b0705280128w793e641j3ddc15c5404b4f81@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> <7a41c4bc0705280120k5b10670dib5c3f00e36cd8d3e@mail.gmail.com> <369bce3b0705280128w793e641j3ddc15c5404b4f81@mail.gmail.com> Message-ID: <7a41c4bc0705280141t7a39376cqe407c362053421d0@mail.gmail.com> looking into it now On 5/28/07, Thomas Chung wrote: > > On 5/28/07, Paulo Santos wrote: > > Hi Thomas, > > > > This is now fixed. > > Tehre were 5 or 6 lines full of NULL chars. I've manually edited the log > and > > deleted them. > > > > Thanks, > > Paulo > > Hi Paulo, > > Could you fix following pages as well? > > http://fedoraproject.org/wiki/FWN/Beats > http://fedoraproject.org/wiki/FWN/Beats/AdvisoriesUpdates > > Regards, > -- > Thomas Chung > http://fedoraproject.org/wiki/ThomasChung > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From paulo.banon at googlemail.com Mon May 28 08:48:59 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Mon, 28 May 2007 10:48:59 +0200 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <7a41c4bc0705280141t7a39376cqe407c362053421d0@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> <7a41c4bc0705280120k5b10670dib5c3f00e36cd8d3e@mail.gmail.com> <369bce3b0705280128w793e641j3ddc15c5404b4f81@mail.gmail.com> <7a41c4bc0705280141t7a39376cqe407c362053421d0@mail.gmail.com> Message-ID: <7a41c4bc0705280148j308472b0l68d4499672b1bdca@mail.gmail.com> Done :) Let me know if you find anymore, and ill correct it right away. Paulo On 5/28/07, Paulo Santos wrote: > > looking into it now > > On 5/28/07, Thomas Chung wrote: > > > > On 5/28/07, Paulo Santos wrote: > > > Hi Thomas, > > > > > > This is now fixed. > > > Tehre were 5 or 6 lines full of NULL chars. I've manually edited the > > log and > > > deleted them. > > > > > > Thanks, > > > Paulo > > > > Hi Paulo, > > > > Could you fix following pages as well? > > > > http://fedoraproject.org/wiki/FWN/Beats > > http://fedoraproject.org/wiki/FWN/Beats/AdvisoriesUpdates > > > > Regards, > > -- > > Thomas Chung > > http://fedoraproject.org/wiki/ThomasChung > > > > _______________________________________________ > > Fedora-infrastructure-list mailing list > > Fedora-infrastructure-list at redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tchung at fedoraproject.org Mon May 28 08:51:27 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Mon, 28 May 2007 01:51:27 -0700 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <7a41c4bc0705280148j308472b0l68d4499672b1bdca@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> <7a41c4bc0705280120k5b10670dib5c3f00e36cd8d3e@mail.gmail.com> <369bce3b0705280128w793e641j3ddc15c5404b4f81@mail.gmail.com> <7a41c4bc0705280141t7a39376cqe407c362053421d0@mail.gmail.com> <7a41c4bc0705280148j308472b0l68d4499672b1bdca@mail.gmail.com> Message-ID: <369bce3b0705280151v3cccc89fwe9377dd638e27997@mail.gmail.com> On 5/28/07, Paulo Santos wrote: > Done :) > > Let me know if you find anymore, and ill correct it right away. > > Paulo Thank you! You're *da* man. :) Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From paulo.banon at googlemail.com Mon May 28 09:19:42 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Mon, 28 May 2007 11:19:42 +0200 Subject: App3 unreachable Message-ID: <7a41c4bc0705280219o3ce788dckc060c047e9610272@mail.gmail.com> Hi guys, Looks like app3 is pingable but we are unable to ssh into it. Same goes if you telnet to port80 to test http connectivity. >From what i know both app3 and app4 should be reachable, since they are hosting mirrormanager, is this correct ? [santosp at bastion ~]$ telnet app3 80 Trying 10.8.34.61... telnet: connect to address 10.8.34.61: Connection timed out telnet: Unable to connect to remote host: Connection timed out [santosp at bastion ~]$ ssh -v app3 OpenSSH_4.3p2, OpenSSL 0.9.8b 04 May 2006 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to app3 [10.8.34.61] port 22. debug1: Connection established. debug1: identity file /home/fedora/santosp/.ssh/identity type -1 debug1: identity file /home/fedora/santosp/.ssh/id_rsa type -1 debug1: identity file /home/fedora/santosp/.ssh/id_dsa type -1 (stalls until timeout) Thanks, Paulo -------------- next part -------------- An HTML attachment was scrubbed... URL: From jonathansteffan at gmail.com Mon May 28 09:38:55 2007 From: jonathansteffan at gmail.com (Jonathan Steffan) Date: Mon, 28 May 2007 03:38:55 -0600 Subject: App3 unreachable In-Reply-To: <7a41c4bc0705280219o3ce788dckc060c047e9610272@mail.gmail.com> References: <7a41c4bc0705280219o3ce788dckc060c047e9610272@mail.gmail.com> Message-ID: <465AA32F.7030708@gmail.com> I've also been getting very strange mirrorlist timeouts/lags/failures. May 28 01:27:17 Trying other mirror. May 28 01:27:17 Error: Cannot open/read repomd.xml file for repository: extras May 28 01:27:17 Could not retrieve mirrorlist http://mirrors.fedoraproject.org/mirrorlist?repo=extras-devel&arch=i386 error was May 28 01:27:17 [Errno 14] HTTP Error 502: Date: Mon, 28 May 2007 07:21:50 GMT Paulo Santos wrote: > Hi guys, > > Looks like app3 is pingable but we are unable to ssh into it. Same > goes if you telnet to port80 to test http connectivity. > From what i know both app3 and app4 should be reachable, since they > are hosting mirrormanager, is this correct ? > > [santosp at bastion ~]$ telnet app3 80 > Trying 10.8.34.61... > telnet: connect to address 10.8.34.61 : Connection > timed out > telnet: Unable to connect to remote host: Connection timed out > > [santosp at bastion ~]$ ssh -v app3 > OpenSSH_4.3p2, OpenSSL 0.9.8b 04 May 2006 > debug1: Reading configuration data /etc/ssh/ssh_config > debug1: Applying options for * > debug1: Connecting to app3 [ 10.8.34.61 ] port 22. > debug1: Connection established. > debug1: identity file /home/fedora/santosp/.ssh/identity type -1 > debug1: identity file /home/fedora/santosp/.ssh/id_rsa type -1 > debug1: identity file /home/fedora/santosp/.ssh/id_dsa type -1 > > (stalls until timeout) > > Thanks, > Paulo From paulo.banon at googlemail.com Mon May 28 09:48:58 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Mon, 28 May 2007 11:48:58 +0200 Subject: App3 unreachable In-Reply-To: <465AA32F.7030708@gmail.com> References: <7a41c4bc0705280219o3ce788dckc060c047e9610272@mail.gmail.com> <465AA32F.7030708@gmail.com> Message-ID: <7a41c4bc0705280248q2d8c7cd2pbc046c8c1173c9c5@mail.gmail.com> i have exactly the same error when updating my Fedora (repo=core-6) On 5/28/07, Jonathan Steffan wrote: > > I've also been getting very strange mirrorlist timeouts/lags/failures. > > May 28 01:27:17 Trying other mirror. > May 28 01:27:17 Error: Cannot open/read repomd.xml file > for repository: extras > May 28 01:27:17 Could not retrieve mirrorlist > http://mirrors.fedoraproject.org/mirrorlist?repo=extras-devel&arch=i386 > error was > May 28 01:27:17 [Errno 14] HTTP Error 502: Date: Mon, 28 > May 2007 07:21:50 GMT > > Paulo Santos wrote: > > Hi guys, > > > > Looks like app3 is pingable but we are unable to ssh into it. Same > > goes if you telnet to port80 to test http connectivity. > > From what i know both app3 and app4 should be reachable, since they > > are hosting mirrormanager, is this correct ? > > > > [santosp at bastion ~]$ telnet app3 80 > > Trying 10.8.34.61... > > telnet: connect to address 10.8.34.61 : Connection > > timed out > > telnet: Unable to connect to remote host: Connection timed out > > > > [santosp at bastion ~]$ ssh -v app3 > > OpenSSH_4.3p2, OpenSSL 0.9.8b 04 May 2006 > > debug1: Reading configuration data /etc/ssh/ssh_config > > debug1: Applying options for * > > debug1: Connecting to app3 [ 10.8.34.61 ] port 22. > > debug1: Connection established. > > debug1: identity file /home/fedora/santosp/.ssh/identity type -1 > > debug1: identity file /home/fedora/santosp/.ssh/id_rsa type -1 > > debug1: identity file /home/fedora/santosp/.ssh/id_dsa type -1 > > > > (stalls until timeout) > > > > Thanks, > > Paulo > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Mon May 28 12:52:50 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 28 May 2007 07:52:50 -0500 Subject: App3 unreachable In-Reply-To: <7a41c4bc0705280248q2d8c7cd2pbc046c8c1173c9c5@mail.gmail.com> References: <7a41c4bc0705280219o3ce788dckc060c047e9610272@mail.gmail.com> <465AA32F.7030708@gmail.com> <7a41c4bc0705280248q2d8c7cd2pbc046c8c1173c9c5@mail.gmail.com> Message-ID: <465AD0A2.9070801@redhat.com> Paulo Santos wrote: > i have exactly the same error when updating my Fedora (repo=core-6) This should be fixed, an update to mirror manager last night had some unanticipated consequences. (large httpd memory requirements) -Mike From mmcgrath at redhat.com Mon May 28 12:55:40 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 28 May 2007 07:55:40 -0500 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <369bce3b0705280151v3cccc89fwe9377dd638e27997@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <369bce3b0705272346h4f78e33aubeadec16c6bc2ee8@mail.gmail.com> <7a41c4bc0705280120k5b10670dib5c3f00e36cd8d3e@mail.gmail.com> <369bce3b0705280128w793e641j3ddc15c5404b4f81@mail.gmail.com> <7a41c4bc0705280141t7a39376cqe407c362053421d0@mail.gmail.com> <7a41c4bc0705280148j308472b0l68d4499672b1bdca@mail.gmail.com> <369bce3b0705280151v3cccc89fwe9377dd638e27997@mail.gmail.com> Message-ID: <465AD14C.6000407@redhat.com> Thomas Chung wrote: > Thank you! > You're *da* man. :) > Regards, Thomas, were all of these edits done by only your user? I haven't been able to recreate. For those following but have not actually seen the log. The edit log is completely auto generated by moin so something very screwy is going on so regardless of what a user does these logs should be ok but, for whatever reason, they're not. The page doesn't display because moin reads them I think for the 'last edited by' section at the bottom of the page. -Mike From mmcgrath at redhat.com Mon May 28 12:57:52 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 28 May 2007 07:57:52 -0500 Subject: Apache tweak In-Reply-To: <3da3b5b40705272351t4a322bech6776daa73f1e4922@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> <3da3b5b40705272351t4a322bech6776daa73f1e4922@mail.gmail.com> Message-ID: <465AD1D0.2000108@redhat.com> Ahmed Kamal wrote: > cool plan. Hopefully it should hold against regular release day traffic. > However, on FC6 launch, we were deliberately 'attacked', right? flooders > might deliberately hit the non static pages, are we prepared for that ? > How would everyone feel about limiting the number of connections per /24 > network to a reasonable number, a la > iptables -p tcp --syn --dport 80 -m connlimit --connlimit-above 16 > --connlimit-mask 24 -j REJECT The attack thing was never totally confirmed one way or the other and we don't have the logs from last year (we weren't running fedora.redhat.com then) So we're much better prepared this run but it's still difficult to tell exactly what to expect. -Mike From mmcgrath at redhat.com Mon May 28 13:02:01 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 28 May 2007 08:02:01 -0500 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> Message-ID: <465AD2C9.9050609@redhat.com> Thomas Chung wrote: > > > On 5/27/07, Mike McGrath wrote: >> Done. In case this ever happens again and I'm not around. Tell >> someone to alter the edit-log for the page in question. Ok, more info on this, the bad characters also get appended to the master edit log so there's two files to examine. The master edit log affects the 'recent changes' page. -Mike From josemanimala at gmail.com Tue May 29 05:33:39 2007 From: josemanimala at gmail.com (jose manimala) Date: Tue, 29 May 2007 11:03:39 +0530 Subject: Hello In-Reply-To: <53a863600705270335g4919c874g740a1bf0885249cd@mail.gmail.com> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> <1180062527.22279.0.camel@localhost.localdomain> <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> <53a863600705252242s37d1806ame41f5c6cc06e80e5@mail.gmail.com> <1180195341.22279.86.camel@localhost.localdomain> <53a863600705270335g4919c874g740a1bf0885249cd@mail.gmail.com> Message-ID: <53a863600705282233q1afb9673o8f93bb9de7973b77@mail.gmail.com> i have been going through the code. Turbo gear seems to be a fast paced and much more optimized system to develop the application in. i am trying to install turbo gear. the basics of python i have gone through. So let me know if there is any updates. Jose M Manimala From josemanimala at gmail.com Tue May 29 05:51:10 2007 From: josemanimala at gmail.com (jose manimala) Date: Tue, 29 May 2007 11:21:10 +0530 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <465AD2C9.9050609@redhat.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <465AD2C9.9050609@redhat.com> Message-ID: <53a863600705282251k4e3eee22y629f7cbc7742fffb@mail.gmail.com> Same error i found on Recent changes page. I just thought i'll report it. Jose From sundaram at fedoraproject.org Tue May 29 05:56:12 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Tue, 29 May 2007 11:26:12 +0530 Subject: Software in infrastructure vs repositories In-Reply-To: <200705162222.08503.dennis@ausil.us> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> <200705162222.08503.dennis@ausil.us> Message-ID: <465BC07C.6090108@fedoraproject.org> Dennis Gilmore wrote: > Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: >> Dennis Gilmore wrote: >>> Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: >>>> Hi >>>> >>>> Has Fedora Infrastructure team consider a rule not to deploy any >>>> proprietary software and not even any software that is not available in >>>> the official Fedora repository? That would make things easier for >>>> ensuring good packaging, maintenance and licensing. >>> That is what our rules are. we only use what is in Fedora. if there is >>> some OSS thing we need we get it in Fedora before we use it. >> Can you document this anywhere? > it has been documented in many mailing list posts in the past as well as > common knowledge. if that's not enough. my post from before should suffice > Do you honestly believe that mailing lists posts are going to serve this purpose? Would it be ok if I document it in the wiki? Rahul From paulo.banon at googlemail.com Tue May 29 07:18:38 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Tue, 29 May 2007 08:18:38 +0100 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <53a863600705282251k4e3eee22y629f7cbc7742fffb@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <465AD2C9.9050609@redhat.com> <53a863600705282251k4e3eee22y629f7cbc7742fffb@mail.gmail.com> Message-ID: <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> fixed This is happening too many times.. :/ Paulo On 5/29/07, jose manimala wrote: > > Same error i found on Recent changes page. I just thought i'll report it. > > Jose > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From dfurlong at dark-hill.co.uk Tue May 29 08:11:57 2007 From: dfurlong at dark-hill.co.uk (Douglas Furlong) Date: Tue, 29 May 2007 09:11:57 +0100 Subject: Apache tweak In-Reply-To: <465A19ED.4010506@redhat.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> Message-ID: <1180426317.5008.1.camel@salt-douglasf.arc.com> On Sun, 2007-05-27 at 18:53 -0500, Mike McGrath wrote: > Karsten Wade wrote: > > On Sun, 2007-05-27 at 17:41 +0100, Damian Myerscough wrote: > > > >> Yea, it would. However mod_easvie is able to detect if users a > >> continuously hitting refresh > >> to consume bandwidth. > >> > > > > Would it make sense to have a few tricks ready to go? Untested or > > unproven items to pull out in response to what happens. Sort of like > > what Egon Spengler might pull out in Ghostbusters ... > > > > I know, it could be *worse* than whatever happens, but there is a slim > > chance we'll survive. > > > > Unfortunately we don't have full trends from last year because a > different team was running fedora.redhat.com during the last release > (and f.rh.c doesn't even exist this release) We'll get a much better > idea of what we're facing on release day. I'm guessing this has been done, but just in case it's not. Do we need to make any changes to cacti for monitoring of services before release? To make sure we do have all of the required trends for next year. Doug -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From paulo.banon at googlemail.com Tue May 29 08:25:52 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Tue, 29 May 2007 09:25:52 +0100 Subject: Apache tweak In-Reply-To: <1180426317.5008.1.camel@salt-douglasf.arc.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> <1180426317.5008.1.camel@salt-douglasf.arc.com> Message-ID: <7a41c4bc0705290125i44926d9aoaa9d75497edd46ed@mail.gmail.com> everything is there but app3 and app4 (mirrormanager) ill add it today or tomorrow (since im flying to the US in a few hours) Paulo On 5/29/07, Douglas Furlong wrote: > > On Sun, 2007-05-27 at 18:53 -0500, Mike McGrath wrote: > > Karsten Wade wrote: > > > On Sun, 2007-05-27 at 17:41 +0100, Damian Myerscough wrote: > > > > > >> Yea, it would. However mod_easvie is able to detect if users a > > >> continuously hitting refresh > > >> to consume bandwidth. > > >> > > > > > > Would it make sense to have a few tricks ready to go? Untested or > > > unproven items to pull out in response to what happens. Sort of like > > > what Egon Spengler might pull out in Ghostbusters ... > > > > > > I know, it could be *worse* than whatever happens, but there is a slim > > > chance we'll survive. > > > > > > > > Unfortunately we don't have full trends from last year because a > > different team was running fedora.redhat.com during the last release > > (and f.rh.c doesn't even exist this release) We'll get a much better > > idea of what we're facing on release day. > > > > I'm guessing this has been done, but just in case it's not. > > Do we need to make any changes to cacti for monitoring of services > before release? To make sure we do have all of the required trends for > next year. > > Doug > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From dfurlong at dark-hill.co.uk Tue May 29 08:35:38 2007 From: dfurlong at dark-hill.co.uk (Douglas Furlong) Date: Tue, 29 May 2007 09:35:38 +0100 Subject: Apache tweak In-Reply-To: <7a41c4bc0705290125i44926d9aoaa9d75497edd46ed@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> <1180426317.5008.1.camel@salt-douglasf.arc.com> <7a41c4bc0705290125i44926d9aoaa9d75497edd46ed@mail.gmail.com> Message-ID: <1180427738.5008.4.camel@salt-douglasf.arc.com> On Tue, 2007-05-29 at 09:25 +0100, Paulo Santos wrote: > everything is there but app3 and app4 > (mirrormanager) ill add it today or tomorrow (since im flying to the > US in a few hours) > > Paulo Morning Paulo App3 and App4 are present, and have the standard graphs being done CPU, Disk Space, Load, Memory and Net traffic. Is there any thing else that needed to be monitored? -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From paulo.banon at googlemail.com Tue May 29 09:05:51 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Tue, 29 May 2007 10:05:51 +0100 Subject: Apache tweak In-Reply-To: <1180427738.5008.4.camel@salt-douglasf.arc.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> <1180426317.5008.1.camel@salt-douglasf.arc.com> <7a41c4bc0705290125i44926d9aoaa9d75497edd46ed@mail.gmail.com> <1180427738.5008.4.camel@salt-douglasf.arc.com> Message-ID: <7a41c4bc0705290205r3013ce76s78be92953221edb0@mail.gmail.com> I though app3 and app4 werent there yet... oh well :D Would be nice to have stats from the Loadbalancer, but for that i think its Mike that needs to add it, since i dont even know if the LB belongs to fp.org or not. Paulo On 5/29/07, Douglas Furlong wrote: > > On Tue, 2007-05-29 at 09:25 +0100, Paulo Santos wrote: > > everything is there but app3 and app4 > (mirrormanager) ill add it today or tomorrow (since im flying to the US in > a few hours) > > Paulo > > > Morning Paulo > > App3 and App4 are present, and have the standard graphs being done CPU, > Disk Space, Load, Memory and Net traffic. > > Is there any thing else that needed to be monitored? > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From oliver at linux-kernel.at Tue May 29 09:06:19 2007 From: oliver at linux-kernel.at (Oliver Falk) Date: Tue, 29 May 2007 11:06:19 +0200 Subject: Apache tweak In-Reply-To: <7a41c4bc0705290125i44926d9aoaa9d75497edd46ed@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> <1180426317.5008.1.camel@salt-douglasf.arc.com> <7a41c4bc0705290125i44926d9aoaa9d75497edd46ed@mail.gmail.com> Message-ID: <465BED0B.7030900@linux-kernel.at> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/29/2007 10:25 AM, Paulo Santos wrote: > everything is there but app3 and app4 > (mirrormanager) ill add it today or tomorrow (since im flying to the US > in a > few hours) I don't see a mod_evasive RPM available via cvs... [oliver at pils extras.public]$ cvs up -d mod_evasive cvs update: Updating mod_evasive U mod_evasive/.cvsignore U mod_evasive/Makefile U mod_evasive/sources Somethin' went wrong? :-) Best, Oliver -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFGW+0KxWN5Ge8lKUMRAkzwAJ94WfADbRecUIFYfRI9VR5nRg+UYACg0POb +ODs9U5JiUB1THpDQ+lX/lY= =qMxW -----END PGP SIGNATURE----- From josemanimala at gmail.com Tue May 29 10:22:54 2007 From: josemanimala at gmail.com (jose manimala) Date: Tue, 29 May 2007 15:52:54 +0530 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <465AD2C9.9050609@redhat.com> <53a863600705282251k4e3eee22y629f7cbc7742fffb@mail.gmail.com> <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> Message-ID: <53a863600705290322u7706bd0aq77d04cc06c405720@mail.gmail.com> Same problem repeats on the same page. I just got the error again. Something has to be done. Please check it out Jose From damian.myerscough at gmail.com Tue May 29 12:16:09 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Tue, 29 May 2007 13:16:09 +0100 Subject: Apache tweak In-Reply-To: <465BED0B.7030900@linux-kernel.at> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <1180269522.4965.8.camel@rivendell> <8c9e56490705270610x7d13da79h79f34fc991b99521@mail.gmail.com> <4659B23D.1000108@redhat.com> <8c9e56490705270941u539fc1a1w4a7e9fb2290cfda1@mail.gmail.com> <1180296711.3439.1125.camel@erato.phig.org> <465A19ED.4010506@redhat.com> <1180426317.5008.1.camel@salt-douglasf.arc.com> <7a41c4bc0705290125i44926d9aoaa9d75497edd46ed@mail.gmail.com> <465BED0B.7030900@linux-kernel.at> Message-ID: <8c9e56490705290516v1b52091ahd03dc142df2c1ee8@mail.gmail.com> I have built an RPM and it is available in my /home/damian on lockbox. I have not checked it into the CVS as I was unsure if everyone wanted it deployed. If you can't get access to my /home directory on lockbox I can email you a copy to have a look over. On 29/05/07, Oliver Falk wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 05/29/2007 10:25 AM, Paulo Santos wrote: > > everything is there but app3 and app4 > > (mirrormanager) ill add it today or tomorrow (since im flying to the US > > in a > > few hours) > > I don't see a mod_evasive RPM available via cvs... > [oliver at pils extras.public]$ cvs up -d mod_evasive > cvs update: Updating mod_evasive > U mod_evasive/.cvsignore > U mod_evasive/Makefile > U mod_evasive/sources > > > Somethin' went wrong? :-) > > Best, > Oliver > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (GNU/Linux) > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org > > iD8DBQFGW+0KxWN5Ge8lKUMRAkzwAJ94WfADbRecUIFYfRI9VR5nRg+UYACg0POb > +ODs9U5JiUB1THpDQ+lX/lY= > =qMxW > -----END PGP SIGNATURE----- > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From Matt_Domsch at dell.com Tue May 29 12:24:30 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Tue, 29 May 2007 07:24:30 -0500 Subject: Apache tweak mod_expires In-Reply-To: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> Message-ID: <20070529122430.GF8383@lists.us.dell.com> On Sun, May 27, 2007 at 01:34:11PM +0100, Damian Myerscough wrote: > I thought I would email everyone before touching the Apache server, > plus check it was > OK to go ahead and make the changes. > > I would like to try an optimize Apache before Thursday (Fedora 7 is > release) to handle > the traffic a bit better. I will be performing some benchmarking on > the Apache server using > Apache benchmark. > I would also like to deploy mod_evasive which should help with the > load on Apache. I will be attending the meeting this week, however I > would like any responses via email if possible as the meeting is > Thursday, and Fedora 7 is release then. I made the (safe) change to app[34] httpd serving up mirrors.fedoraproject.org/publiclist to add mod_expires and a default Expires time of modification time plus 1 hour. These pages are static but refreshed at the top of every hour, and the flow is: end user -> (end user proxy?) -> proxy[12].fp.o -> app[34] for every request. By adding the Expires: header, and testing from behind a corporate proxy, the first page load takes 0.5s for a cache miss, but subsequent page loads take 0.05s for a non-expired cache hit, and we never take even a HTTP HEAD on the cache hits. This lets these pages play nicely with those who have their own proxy server. Would it make sense to add Expires headers to the static fp.o home content being served directly from proxy[12] ? We're not going to change them often (we hope), so a 1-4 hour expiry time, just in case we do have to change them, might be beneficial. Thoughts? Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From damian.myerscough at gmail.com Tue May 29 13:41:12 2007 From: damian.myerscough at gmail.com (Damian Myerscough) Date: Tue, 29 May 2007 14:41:12 +0100 Subject: Apache tweak mod_expires In-Reply-To: <20070529122430.GF8383@lists.us.dell.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <20070529122430.GF8383@lists.us.dell.com> Message-ID: <8c9e56490705290641s19d3dbe0ja4dcaf5972408172@mail.gmail.com> Sounds good Matt, I had a little idea for mirrors.fedoraproject.org/publiclist why not add mod_geoip and have the mirrors list broken down so that users connecting from Germany get mirrors located in Germany and not mirrors in England (also give them the opportunity to download from a mirror outside their country). That's just a little thought, it should help with the load slightly. On 29/05/07, Matt Domsch wrote: > On Sun, May 27, 2007 at 01:34:11PM +0100, Damian Myerscough wrote: > > I thought I would email everyone before touching the Apache server, > > plus check it was > > OK to go ahead and make the changes. > > > > I would like to try an optimize Apache before Thursday (Fedora 7 is > > release) to handle > > the traffic a bit better. I will be performing some benchmarking on > > the Apache server using > > Apache benchmark. > > I would also like to deploy mod_evasive which should help with the > > load on Apache. I will be attending the meeting this week, however I > > would like any responses via email if possible as the meeting is > > Thursday, and Fedora 7 is release then. > > > I made the (safe) change to app[34] httpd serving up > mirrors.fedoraproject.org/publiclist to add mod_expires and a default > Expires time of modification time plus 1 hour. These pages are static > but refreshed at the top of every hour, and the flow is: > > end user -> (end user proxy?) -> proxy[12].fp.o -> app[34] > > for every request. By adding the Expires: header, and testing from > behind a corporate proxy, the first page load takes 0.5s for a cache > miss, but subsequent page loads take 0.05s for a non-expired cache > hit, and we never take even a HTTP HEAD on the cache hits. This lets > these pages play nicely with those who have their own proxy server. > > Would it make sense to add Expires headers to the static fp.o home > content being served directly from proxy[12] ? We're not going to > change them often (we hope), so a 1-4 hour expiry time, just in case > we do have to change them, might be beneficial. > > Thoughts? > > Thanks, > Matt > > -- > Matt Domsch > Software Architect > Dell Linux Solutions linux.dell.com & www.dell.com/linux > Linux on Dell mailing lists @ http://lists.us.dell.com > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- Regards, Damian From Matt_Domsch at dell.com Tue May 29 13:52:25 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Tue, 29 May 2007 08:52:25 -0500 Subject: Apache tweak mod_expires In-Reply-To: <8c9e56490705290641s19d3dbe0ja4dcaf5972408172@mail.gmail.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <20070529122430.GF8383@lists.us.dell.com> <8c9e56490705290641s19d3dbe0ja4dcaf5972408172@mail.gmail.com> Message-ID: <20070529135225.GG8383@lists.us.dell.com> On Tue, May 29, 2007 at 02:41:12PM +0100, Damian Myerscough wrote: > Sounds good Matt, > > I had a little idea for mirrors.fedoraproject.org/publiclist why not > add mod_geoip and have the mirrors list broken down so that users > connecting from Germany get mirrors located in Germany and not > mirrors in England (also give them the opportunity to download from > a mirror outside their country). That's just a little thought, it > should help with the load slightly. The mirrorlists returned to yum do use geoip plus other heuristics (e.g. if there are fewer than 3 mirrors in a country, return the global list). So we're good there. The web pages under /publiclist don't though. They do list the country a mirror is in, but they list all the mirrors, currently 194. :-) Maybe it's too long a page for people to crawl through to find their country; I'm open to page design suggestions. But I don't want to keep per-country static pages for these; I do per-country per-repo static text files for the yum mirrorlists as a backup, and there are nearly 4300 such files. I don't want to duplicate all that again for the /publiclist pages... Thanks, Matt -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From mmcgrath at redhat.com Tue May 29 16:41:49 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 29 May 2007 11:41:49 -0500 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <465AD2C9.9050609@redhat.com> <53a863600705282251k4e3eee22y629f7cbc7742fffb@mail.gmail.com> <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> Message-ID: <465C57CD.2050000@redhat.com> Paulo Santos wrote: > fixed > > This is happening too many times.. :/ This actually is fixed in the most recent version of moin, we are a rev behind. I'd update it now but I'd prefer to wait until after the release. -Mike From a.badger at gmail.com Tue May 29 17:12:05 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Tue, 29 May 2007 10:12:05 -0700 Subject: Software in infrastructure vs repositories In-Reply-To: <465BC07C.6090108@fedoraproject.org> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> <200705162222.08503.dennis@ausil.us> <465BC07C.6090108@fedoraproject.org> Message-ID: <1180458725.20096.18.camel@localhost.localdomain> On Tue, 2007-05-29 at 11:26 +0530, Rahul Sundaram wrote: > Dennis Gilmore wrote: > > Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: > >> Dennis Gilmore wrote: > >>> Once upon a time Wednesday 16 May 2007, Rahul Sundaram wrote: > >>>> Hi > >>>> > >>>> Has Fedora Infrastructure team consider a rule not to deploy any > >>>> proprietary software and not even any software that is not available in > >>>> the official Fedora repository? That would make things easier for > >>>> ensuring good packaging, maintenance and licensing. > >>> That is what our rules are. we only use what is in Fedora. if there is > >>> some OSS thing we need we get it in Fedora before we use it. > >> Can you document this anywhere? > > it has been documented in many mailing list posts in the past as well as > > common knowledge. if that's not enough. my post from before should suffice > > > Do you honestly believe that mailing lists posts are going to serve this > purpose? Would it be ok if I document it in the wiki? > By all means, go ahead and add it to a good place on the wiki. One caveat to this general policy is that we may create custom programs from time to time and, although it is OSS, we haven't built tarballs and made a "release". These apps are usually tailored for our environment but they solve problems that are part of creating any large distro... so others could pitch in and make it more general if they wanted. These are not currently required to be packaged for Fedora. We do seem to be trying to put the code into hosted.fp.o so people can get it. (Pkgdb is absent from hosted... I'll make sure I get it added when we deploy.) Do people think this is an allowable exception? These apps are in a grey area between one-off system administration scripts and applications that are present in multiple environments already. I think they must be OSS and their source must be available but I'm not sure if the requirement that they be packaged for Fedora is necessary. I also foresee us running into issues at some point with version mismatches between the Fedora/EPEL packages and what we run on our servers. Maybe we want to upgrade the TurboGears stack on our servers but we don't want to change the API for EPEL. Maybe we are putting out necessary updates for the apps we are working on but upgrading the bits in Fedora/EPEL every two days doesn't seem like a good idea. We need to have some ability to separate what we package for Fedora from what we are actively developing in Infrastructure. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From jkeating at redhat.com Tue May 29 18:07:53 2007 From: jkeating at redhat.com (Jesse Keating) Date: Tue, 29 May 2007 14:07:53 -0400 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <53a863600705282251k4e3eee22y629f7cbc7742fffb@mail.gmail.com> <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> Message-ID: <200705291407.53807.jkeating@redhat.com> On Tuesday 29 May 2007 03:18:38 Paulo Santos wrote: > This is happening too many times.. :/ Seems to have happened again. ReleaseEngineering/7/Checklist and RecentEdits -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From tchung at fedoraproject.org Tue May 29 18:16:22 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 29 May 2007 11:16:22 -0700 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <200705291407.53807.jkeating@redhat.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <53a863600705282251k4e3eee22y629f7cbc7742fffb@mail.gmail.com> <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> <200705291407.53807.jkeating@redhat.com> Message-ID: <369bce3b0705291116i319e2a4bv1702865fe6f81f78@mail.gmail.com> On 5/29/07, Jesse Keating wrote: > On Tuesday 29 May 2007 03:18:38 Paulo Santos wrote: > > This is happening too many times.. :/ > > Seems to have happened again. ReleaseEngineering/7/Checklist and RecentEdits > > -- > Jesse Keating > Release Engineer: Fedora Here is a trick I learned from Karsten. To see the content even if the page has a problem to view, add "?action=raw" :) http://fedoraproject.org/wiki/ReleaseEngineering/7/Checklist?action=raw Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From jkeating at redhat.com Tue May 29 18:17:33 2007 From: jkeating at redhat.com (Jesse Keating) Date: Tue, 29 May 2007 14:17:33 -0400 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <369bce3b0705291116i319e2a4bv1702865fe6f81f78@mail.gmail.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <200705291407.53807.jkeating@redhat.com> <369bce3b0705291116i319e2a4bv1702865fe6f81f78@mail.gmail.com> Message-ID: <200705291417.33818.jkeating@redhat.com> On Tuesday 29 May 2007 14:16:22 Thomas Chung wrote: > Here is a trick I learned from Karsten. > > To see the content even if the page has a problem to view, add > "?action=raw" :) > > http://fedoraproject.org/wiki/ReleaseEngineering/7/Checklist?action=raw Well, I need to edit it more (: -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From tchung at fedoraproject.org Tue May 29 18:24:32 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 29 May 2007 11:24:32 -0700 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <200705291417.33818.jkeating@redhat.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <200705291407.53807.jkeating@redhat.com> <369bce3b0705291116i319e2a4bv1702865fe6f81f78@mail.gmail.com> <200705291417.33818.jkeating@redhat.com> Message-ID: <369bce3b0705291124v45388256wf1a804a339e511f@mail.gmail.com> On 5/29/07, Jesse Keating wrote: > On Tuesday 29 May 2007 14:16:22 Thomas Chung wrote: > > Here is a trick I learned from Karsten. > > > > To see the content even if the page has a problem to view, add > > "?action=raw" :) > > > > http://fedoraproject.org/wiki/ReleaseEngineering/7/Checklist?action=raw > > Well, I need to edit it more (: Well, in order to work on news beats for last issue of FWN, I had to copy some of the contents from raw to a new page to continue to work until infrastructure team was able to fix them. -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From sundaram at fedoraproject.org Tue May 29 18:36:28 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Wed, 30 May 2007 00:06:28 +0530 Subject: Software in infrastructure vs repositories In-Reply-To: <1180458725.20096.18.camel@localhost.localdomain> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> <200705162222.08503.dennis@ausil.us> <465BC07C.6090108@fedoraproject.org> <1180458725.20096.18.camel@localhost.localdomain> Message-ID: <465C72AC.1060807@fedoraproject.org> Toshio Kuratomi wrote: > Do people think this is an allowable exception? These apps are in a > grey area between one-off system administration scripts and applications > that are present in multiple environments already. I think they must be > OSS and their source must be available but I'm not sure if the > requirement that they be packaged for Fedora is necessary. We had a policy in place before when I used to sys admin stuff that all the packages needs to be available in the distribution repository and any local scripts be cleanly separated. It helps a lot. You get packaging and legal checks. Even if a particular piece of software is used only in one place in the Fedora infrastructure not having it in the repository means the team is solely responsible for keeping track of any security issues. It is up to the team to decide to allow exceptions but you have to weigh the benefits carefully. > I also foresee us running into issues at some point with version > mismatches between the Fedora/EPEL packages and what we run on our > servers. Maybe we want to upgrade the TurboGears stack on our servers > but we don't want to change the API for EPEL. Maybe we are putting out > necessary updates for the apps we are working on but upgrading the bits > in Fedora/EPEL every two days doesn't seem like a good idea. We need to > have some ability to separate what we package for Fedora from what we > are actively developing in Infrastructure. Again any deviations from what is in the repository is additional burden for the team. Deciding on the details is why having good documentation on the policies are helpful. Maybe this could be discussed in the next IRC meeting? Rahul From jkeating at redhat.com Tue May 29 19:01:06 2007 From: jkeating at redhat.com (Jesse Keating) Date: Tue, 29 May 2007 15:01:06 -0400 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <200705291407.53807.jkeating@redhat.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> <200705291407.53807.jkeating@redhat.com> Message-ID: <200705291501.10516.jkeating@redhat.com> On Tuesday 29 May 2007 14:07:53 Jesse Keating wrote: > Seems to have happened again. ?ReleaseEngineering/7/Checklist and > RecentEdits I figured out how to fix it by reading the threads. I've added info on how to fix it to the SOP wiki page. http://fedoraproject.org/wiki/Infrastructure/SOP/wiki -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From frosario777 at gmail.com Wed May 30 03:38:32 2007 From: frosario777 at gmail.com (Freddie Rosario) Date: Tue, 29 May 2007 20:38:32 -0700 Subject: Apache tweak mod_expires In-Reply-To: <20070529135225.GG8383@lists.us.dell.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <20070529122430.GF8383@lists.us.dell.com> <8c9e56490705290641s19d3dbe0ja4dcaf5972408172@mail.gmail.com> <20070529135225.GG8383@lists.us.dell.com> Message-ID: Matt, I don't really see any problems with having the complete list of all the mirrors. I usually use the quick find feature in my browser(Ctr F) and that let's me jump directly to the first mirror when I type "US". I suppose you could make the page dynamic and return results when a user indicates a country of origin, but wouldn't this use up more of our scarce computing resources? Just my opinion but I wouldn't worry too much about making /publiclist dynamic. Actually, now that I think about it. Could we not code something to do this for the user in a client side script? On 5/29/07, Matt Domsch wrote: > > On Tue, May 29, 2007 at 02:41:12PM +0100, Damian Myerscough wrote: > > Sounds good Matt, > > > > I had a little idea for mirrors.fedoraproject.org/publiclist why not > > add mod_geoip and have the mirrors list broken down so that users > > connecting from Germany get mirrors located in Germany and not > > mirrors in England (also give them the opportunity to download from > > a mirror outside their country). That's just a little thought, it > > should help with the load slightly. > > The mirrorlists returned to yum do use geoip plus other heuristics > (e.g. if there are fewer than 3 mirrors in a country, return the > global list). So we're good there. > > The web pages under /publiclist don't though. They do list the > country a mirror is in, but they list all the mirrors, currently > 194. :-) Maybe it's too long a page for people to crawl through to > find their country; I'm open to page design suggestions. But I don't > want to keep per-country static pages for these; I do per-country > per-repo static text files for the yum mirrorlists as a backup, and > there are nearly 4300 such files. I don't want to duplicate all that > again for the /publiclist pages... > > Thanks, > Matt > > -- > Matt Domsch > Software Architect > Dell Linux Solutions linux.dell.com & www.dell.com/linux > Linux on Dell mailing lists @ http://lists.us.dell.com > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- --Freddie -------------- next part -------------- An HTML attachment was scrubbed... URL: From frosario777 at gmail.com Wed May 30 03:52:58 2007 From: frosario777 at gmail.com (Freddie Rosario) Date: Tue, 29 May 2007 20:52:58 -0700 Subject: Software in infrastructure vs repositories In-Reply-To: <465C72AC.1060807@fedoraproject.org> References: <464BB47E.2020906@fedoraproject.org> <200705162107.01366.dennis@ausil.us> <464BBCB8.8030007@fedoraproject.org> <200705162222.08503.dennis@ausil.us> <465BC07C.6090108@fedoraproject.org> <1180458725.20096.18.camel@localhost.localdomain> <465C72AC.1060807@fedoraproject.org> Message-ID: I am new to this list, so I hope noone minds me asking this question. What applications are we referring to? Are these really apps or sophisticated sys admin scripts? On 5/29/07, Rahul Sundaram wrote: > > Toshio Kuratomi wrote: > > > Do people think this is an allowable exception? These apps are in a > > grey area between one-off system administration scripts and applications > > that are present in multiple environments already. I think they must be > > OSS and their source must be available but I'm not sure if the > > requirement that they be packaged for Fedora is necessary. > > We had a policy in place before when I used to sys admin stuff that all > the packages needs to be available in the distribution repository and > any local scripts be cleanly separated. It helps a lot. You get > packaging and legal checks. Even if a particular piece of software is > used only in one place in the Fedora infrastructure not having it in the > repository means the team is solely responsible for keeping track of any > security issues. It is up to the team to decide to allow exceptions but > you have to weigh the benefits carefully. > > > I also foresee us running into issues at some point with version > > mismatches between the Fedora/EPEL packages and what we run on our > > servers. Maybe we want to upgrade the TurboGears stack on our servers > > but we don't want to change the API for EPEL. Maybe we are putting out > > necessary updates for the apps we are working on but upgrading the bits > > in Fedora/EPEL every two days doesn't seem like a good idea. We need to > > have some ability to separate what we package for Fedora from what we > > are actively developing in Infrastructure. > > Again any deviations from what is in the repository is additional > burden for the team. Deciding on the details is why having good > documentation on the policies are helpful. Maybe this could be discussed > in the next IRC meeting? > > Rahul > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -- --Freddie -------------- next part -------------- An HTML attachment was scrubbed... URL: From Matt_Domsch at dell.com Wed May 30 04:00:52 2007 From: Matt_Domsch at dell.com (Matt Domsch) Date: Tue, 29 May 2007 23:00:52 -0500 Subject: Apache tweak mod_expires In-Reply-To: References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <20070529122430.GF8383@lists.us.dell.com> <8c9e56490705290641s19d3dbe0ja4dcaf5972408172@mail.gmail.com> <20070529135225.GG8383@lists.us.dell.com> Message-ID: <20070530040052.GB6173@lists.us.dell.com> On Tue, May 29, 2007 at 08:38:32PM -0700, Freddie Rosario wrote: > Matt, > > I don't really see any problems with having the complete list of all the > mirrors. I usually use the quick find feature in my browser(Ctr F) and > that let's me jump directly to the first mirror when I type "US". I > suppose you could make the page dynamic and return results when a user > indicates a country of origin, but wouldn't this use up more of our scarce > computing resources? Just my opinion but I wouldn't worry too much about > making /publiclist dynamic. Glad we agree. :-) > Actually, now that I think about it. Could we > not code something to do this for the user in a client side script? then your browser coding foo is stronger than mine. I wouldn't spend brain cycles worrying about it at this point, but if it keeps you up at night, I'd take patches. -- Matt Domsch Software Architect Dell Linux Solutions linux.dell.com & www.dell.com/linux Linux on Dell mailing lists @ http://lists.us.dell.com From a.badger at gmail.com Wed May 30 06:44:14 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Tue, 29 May 2007 23:44:14 -0700 Subject: Hello In-Reply-To: <53a863600705282233q1afb9673o8f93bb9de7973b77@mail.gmail.com> References: <53a863600705240007g36ccf8abv10006ab8a0420546@mail.gmail.com> <4655AD50.1000601@redhat.com> <53a863600705241958i4cfe41bfue7f6d7df98bd18b@mail.gmail.com> <1180062527.22279.0.camel@localhost.localdomain> <53a863600705242210w6dc16c6di4fcf30675f46ab5f@mail.gmail.com> <53a863600705252242s37d1806ame41f5c6cc06e80e5@mail.gmail.com> <1180195341.22279.86.camel@localhost.localdomain> <53a863600705270335g4919c874g740a1bf0885249cd@mail.gmail.com> <53a863600705282233q1afb9673o8f93bb9de7973b77@mail.gmail.com> Message-ID: <1180507454.20096.63.camel@localhost.localdomain> On Tue, 2007-05-29 at 11:03 +0530, jose manimala wrote: > i have been going through the code. Turbo gear seems to be a fast > paced and much more optimized system to develop the application in. i > am trying to install turbo gear. the basics of python i have gone > through. So let me know if there is any updates. Okay. I've written up a pair of wiki pages. The first is a RequestForResources [1]_. I put your name on it with me as a secondary contact. If you don't want to do it that way, feel free to change it. The second has more information on what the requirements for the application are [2]_. It's not too strenuous, mostly addressing the limitations of the current system. I'm abadger1999 on freenode IRC (#fedora-admin is a good place to catch me.) I'm currently at UTC -7. feel free to catch me there with any questions or shoot me an email. [1]_: http://fedoraproject.org/wiki/Infrastructure/RFR/Voting [2]_: http://fedoraproject.org/wiki/Infrastructure/VotingApp2 -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From josemanimala at gmail.com Wed May 30 07:00:43 2007 From: josemanimala at gmail.com (jose manimala) Date: Wed, 30 May 2007 12:30:43 +0530 Subject: Details: Message-ID: <53a863600705300000t76da0980ud82074b65723c1a8@mail.gmail.com> Can you define this for me: A xen guest to run a test instance of the TurboGears voting application along with a db backend. 1. whats xen guest IRC will be a problem becaus my college has banned IRC. but i can mail you. everything seems fine. i am yet to set up python on my comp. can you point me to an rpm or a guide to its install. -- Jose M Manimala S6 Computer science and engineering Rajagiri School Of Engineering And Technology Ph: +919846367850 http://www.jmm-blog.co.nr GPGkeyID: 98FF52D2 From paulo.banon at googlemail.com Wed May 30 07:49:44 2007 From: paulo.banon at googlemail.com (Paulo Santos) Date: Wed, 30 May 2007 00:49:44 -0700 Subject: Details: In-Reply-To: <53a863600705300000t76da0980ud82074b65723c1a8@mail.gmail.com> References: <53a863600705300000t76da0980ud82074b65723c1a8@mail.gmail.com> Message-ID: <7a41c4bc0705300049s2257b8fdx2cb6314a83c159b6@mail.gmail.com> do like me... http://www.ircatwork.com/ :D Paulo On 5/30/07, jose manimala wrote: > > Can you define this for me: > A xen guest to run a test instance of the TurboGears voting > application along with a db backend. > > 1. whats xen guest > > IRC will be a problem becaus my college has banned IRC. but i can mail > you. everything seems fine. i am yet to set up python on my comp. can > you point me to an rpm or a guide to its install. > -- > Jose M Manimala > S6 Computer science and engineering > Rajagiri School Of Engineering And Technology > Ph: +919846367850 > http://www.jmm-blog.co.nr > GPGkeyID: 98FF52D2 > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From nils at breun.nl Wed May 30 12:14:17 2007 From: nils at breun.nl (Nils Breunese) Date: Wed, 30 May 2007 14:14:17 +0200 (CEST) Subject: Details: In-Reply-To: <53a863600705300000t76da0980ud82074b65723c1a8@mail.gmail.com> References: <53a863600705300000t76da0980ud82074b65723c1a8@mail.gmail.com> Message-ID: <4743.131.211.84.123.1180527257.squirrel@www.breun.nl> jose manimala wrote: > Can you define this for me: > A xen guest to run a test instance of the TurboGears voting > application along with a db backend. > > 1. whats xen guest http://en.wikipedia.org/wiki/Xen > IRC will be a problem becaus my college has banned IRC. but i can mail > you. everything seems fine. i am yet to set up python on my comp. can > you point me to an rpm or a guide to its install. To install Python run 'yum install python'. Nils Breunese. From a.badger at gmail.com Wed May 30 14:05:27 2007 From: a.badger at gmail.com (Toshio Kuratomi) Date: Wed, 30 May 2007 07:05:27 -0700 Subject: Details: In-Reply-To: <53a863600705300000t76da0980ud82074b65723c1a8@mail.gmail.com> References: <53a863600705300000t76da0980ud82074b65723c1a8@mail.gmail.com> Message-ID: <1180533927.20096.67.camel@localhost.localdomain> On Wed, 2007-05-30 at 12:30 +0530, jose manimala wrote: > Can you define this for me: > A xen guest to run a test instance of the TurboGears voting > application along with a db backend. > > 1. whats xen guest > A Xen Guest is a way of taking one of our large, high powered servers and turning it into a bunch of smaller virtual servers. We'll be using one of these virtual servers for testing the new code. Hopefully the new code will need the guest about the time that other code move out to deployment. > IRC will be a problem becaus my college has banned IRC. but i can mail > you. everything seems fine. i am yet to set up python on my comp. can > you point me to an rpm or a guide to its install. Okay. Email is fine. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From tchung at fedoraproject.org Wed May 30 20:23:21 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Wed, 30 May 2007 13:23:21 -0700 Subject: Another UnicodeEncodeError page Message-ID: <369bce3b0705301323m47e036bqae0b0095b9536acf@mail.gmail.com> Hello Infrastructure Team, Here is another UnicodeEncodeError page. http://fedoraproject.org/wiki/FSA/FC6 Please fix the page per SOP[1]. Thank you. [1] http://fedoraproject.org/wiki/Infrastructure/SOP/wiki#UnicodeEncodeError -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From jkeating at redhat.com Wed May 30 20:27:17 2007 From: jkeating at redhat.com (Jesse Keating) Date: Wed, 30 May 2007 16:27:17 -0400 Subject: Another UnicodeEncodeError page In-Reply-To: <369bce3b0705301323m47e036bqae0b0095b9536acf@mail.gmail.com> References: <369bce3b0705301323m47e036bqae0b0095b9536acf@mail.gmail.com> Message-ID: <200705301627.21246.jkeating@redhat.com> On Wednesday 30 May 2007 16:23:21 Thomas Chung wrote: > Hello Infrastructure Team, > > Here is another UnicodeEncodeError page. > http://fedoraproject.org/wiki/FSA/FC6 > > Please fix the page per SOP[1]. > Thank you. > > [1] > http://fedoraproject.org/wiki/Infrastructure/SOP/wiki#UnicodeEncodeError Fixed. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From tchung at fedoraproject.org Wed May 30 20:50:28 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Wed, 30 May 2007 13:50:28 -0700 Subject: Fwd: Banner for F7 Home Page In-Reply-To: <6600c1b10705301348s5807db5ai9e065dbd9ebda77e@mail.gmail.com> References: <6600c1b10705301348s5807db5ai9e065dbd9ebda77e@mail.gmail.com> Message-ID: <369bce3b0705301350h22d07238i9c5f5e5f0fa7a3a2@mail.gmail.com> Fowarding to Infrastructure Team. ---------- Forwarded message ---------- From: Diego B?rigo Zacar?o Date: May 30, 2007 1:48 PM Subject: Banner for F7 Home Page To: "For maintainers and developers of all formal Fedora websites." I have created a banner and put it at my wiki space[1] as suggestion to the new face of fedoraproject.org home page. However, when I commited the page I got a "UnicodeEncodeError". :s I asked (by e-mail) to Paulo fix it, if he could do that. [1] http://fedoraproject.org/wiki/DiegoZacarao/BannerF7 Regards -- Diego B?rigo Zacar?o Linux User #402589 USE SOFTWARE LIVRE From jkeating at redhat.com Wed May 30 20:55:59 2007 From: jkeating at redhat.com (Jesse Keating) Date: Wed, 30 May 2007 16:55:59 -0400 Subject: Fwd: Banner for F7 Home Page In-Reply-To: <369bce3b0705301350h22d07238i9c5f5e5f0fa7a3a2@mail.gmail.com> References: <6600c1b10705301348s5807db5ai9e065dbd9ebda77e@mail.gmail.com> <369bce3b0705301350h22d07238i9c5f5e5f0fa7a3a2@mail.gmail.com> Message-ID: <200705301655.59937.jkeating@redhat.com> On Wednesday 30 May 2007 16:50:28 Thomas Chung wrote: > Fowarding to Infrastructure Team. > > ---------- Forwarded message ---------- > From: Diego B?rigo Zacar?o > Date: May 30, 2007 1:48 PM > Subject: Banner for F7 Home Page > To: "For maintainers and developers of all formal Fedora websites." > > > > I have created a banner and put it at my wiki space[1] as suggestion > to the new face of fedoraproject.org home page. > > However, when I commited the page I got a "UnicodeEncodeError". :s > I asked (by e-mail) to Paulo fix it, if he could do that. > > [1] http://fedoraproject.org/wiki/DiegoZacarao/BannerF7 > > Regards Fixed the unicode errors. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From kwade at redhat.com Wed May 30 22:11:46 2007 From: kwade at redhat.com (Karsten Wade) Date: Wed, 30 May 2007 15:11:46 -0700 Subject: [Fwd: fedora.redhat.com -> fedoraproject.org instead of the wiki] Message-ID: <1180563106.5217.88.camel@erato.phig.org> I think this redirect request/fix is more of the Infra purview, right? -------- Forwarded Message -------- From: Rahul Sundaram > Someone in IRC noted that the redirect currently points to the wiki > which is obviously wrong even when it was first setup. Not to get side-tracked, but what was wrong with redirecting to the Wiki when the redirect was setup? > It should just > point to http://fedoraproject.org directly. Good point, thanks. Hope it's easy to do with the various mappings already done. - Karsten -- Karsten Wade, 108 Editor ^ Fedora Documentation Project Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject quaid.108.redhat.com | gpg key: AD0E0C41 ////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From sundaram at fedoraproject.org Wed May 30 22:19:25 2007 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Thu, 31 May 2007 03:49:25 +0530 Subject: [Fwd: fedora.redhat.com -> fedoraproject.org instead of the wiki] In-Reply-To: <1180563106.5217.88.camel@erato.phig.org> References: <1180563106.5217.88.camel@erato.phig.org> Message-ID: <465DF86D.7030506@fedoraproject.org> Karsten Wade wrote: > I think this redirect request/fix is more of the Infra purview, right? > > -------- Forwarded Message -------- > From: Rahul Sundaram > >> Someone in IRC noted that the redirect currently points to the wiki >> which is obviously wrong even when it was first setup. > > Not to get side-tracked, but what was wrong with redirecting to the Wiki > when the redirect was setup? http://fedoraproject.org automatically used to redirect to the wiki . The original intent when that was setup is that everybody refers to the root location and if we had say a Plone based site the root location would refer to that instead. It just saves us time. Rahul From tchung at fedoraproject.org Wed May 30 23:05:18 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Wed, 30 May 2007 16:05:18 -0700 Subject: UnicodeEncodeError - FWN/Beats/PlanetFedora Message-ID: <369bce3b0705301605q75e5a007n10ec189eea34da58@mail.gmail.com> Shoot. Another one. http://fedoraproject.org/wiki/FWN/Beats/PlanetFedora Thank you Jesse, :) -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From kwade at redhat.com Wed May 30 23:15:19 2007 From: kwade at redhat.com (Karsten Wade) Date: Wed, 30 May 2007 16:15:19 -0700 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <200705291501.10516.jkeating@redhat.com> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <7a41c4bc0705290018x2b372151u8ec9a477884ecede@mail.gmail.com> <200705291407.53807.jkeating@redhat.com> <200705291501.10516.jkeating@redhat.com> Message-ID: <1180566920.5217.102.camel@erato.phig.org> On Tue, 2007-05-29 at 15:01 -0400, Jesse Keating wrote: > On Tuesday 29 May 2007 14:07:53 Jesse Keating wrote: > > Seems to have happened again. ReleaseEngineering/7/Checklist and > > RecentEdits > > I figured out how to fix it by reading the threads. I've added info on how to > fix it to the SOP wiki page. > http://fedoraproject.org/wiki/Infrastructure/SOP/wiki Is that something a normal user can do? Or does that require CLI access to the Moin server(s)? - Karsten -- Karsten Wade, 108 Editor ^ Fedora Documentation Project Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject quaid.108.redhat.com | gpg key: AD0E0C41 ////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From kwade at redhat.com Wed May 30 23:19:09 2007 From: kwade at redhat.com (Karsten Wade) Date: Wed, 30 May 2007 16:19:09 -0700 Subject: Apache tweak mod_expires In-Reply-To: <20070529122430.GF8383@lists.us.dell.com> References: <8c9e56490705270534ic1fd24fy8ec6cb4aa3364ab6@mail.gmail.com> <20070529122430.GF8383@lists.us.dell.com> Message-ID: <1180567149.5217.105.camel@erato.phig.org> On Tue, 2007-05-29 at 07:24 -0500, Matt Domsch wrote: > Would it make sense to add Expires headers to the static fp.o home > content being served directly from proxy[12] ? We're not going to > change them often (we hope), so a 1-4 hour expiry time, just in case > we do have to change them, might be beneficial. Normally, we won't change that content that much. Right now, we do seem to be tweaking still, such is the wont of perfectionists. Maybe crank back the expiry time if we start having problems? Or at least wait until 0800 UTC tomorrow. :) - Karsten -- Karsten Wade, 108 Editor ^ Fedora Documentation Project Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject quaid.108.redhat.com | gpg key: AD0E0C41 ////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From merline at callboxinc.com Thu May 31 00:05:03 2007 From: merline at callboxinc.com (Merlin Aldous Espinoza) Date: Wed, 30 May 2007 17:05:03 -0700 Subject: Fedora Cluster Suite Message-ID: Anybody working on this project? I am looking into a solution for a high performance and high availability database cluster using fedora and mysql. given the limitations of mysql cluster technology as of the moment, how I wish we could build a fedora solution for clustering database services. -- Merlin Aldous S. Espinoza Server Administrator Callbox Customer Contact Systems, Inc. 16770 Encino Hills Drive, Suite 200 Encino, CA 91436 888.810.7464 EXT. 1339 www.callboxinc.com World Connection -------------- next part -------------- An HTML attachment was scrubbed... URL: From jkeating at redhat.com Thu May 31 00:11:58 2007 From: jkeating at redhat.com (Jesse Keating) Date: Wed, 30 May 2007 20:11:58 -0400 Subject: UnicodeEncodeError - FWN/Beats/PlanetFedora In-Reply-To: <369bce3b0705301605q75e5a007n10ec189eea34da58@mail.gmail.com> References: <369bce3b0705301605q75e5a007n10ec189eea34da58@mail.gmail.com> Message-ID: <200705302011.58453.jkeating@redhat.com> On Wednesday 30 May 2007 19:05:18 Thomas Chung wrote: > Shoot. Another one. > > http://fedoraproject.org/wiki/FWN/Beats/PlanetFedora > > Thank you Jesse, :) Fixed (: -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From jkeating at redhat.com Thu May 31 00:12:35 2007 From: jkeating at redhat.com (Jesse Keating) Date: Wed, 30 May 2007 20:12:35 -0400 Subject: UnicodeEncodeError on certain wiki pages In-Reply-To: <1180566920.5217.102.camel@erato.phig.org> References: <369bce3b0705272336g589c2786h22b2065d24d6011@mail.gmail.com> <200705291501.10516.jkeating@redhat.com> <1180566920.5217.102.camel@erato.phig.org> Message-ID: <200705302012.35480.jkeating@redhat.com> On Wednesday 30 May 2007 19:15:19 Karsten Wade wrote: > Is that something a normal user can do? ?Or does that require CLI access > to the Moin server(s)? Requires proper write access to the netapp that the wiki content is stored on. I don't know who all that involves, not a large number of people. -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From mmcgrath at redhat.com Thu May 31 06:54:43 2007 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 31 May 2007 01:54:43 -0500 Subject: UnicodeEncodeError - FWN/Beats/PlanetFedora In-Reply-To: <200705302011.58453.jkeating@redhat.com> References: <369bce3b0705301605q75e5a007n10ec189eea34da58@mail.gmail.com> <200705302011.58453.jkeating@redhat.com> Message-ID: <465E7133.8050305@redhat.com> Jesse Keating wrote: > On Wednesday 30 May 2007 19:05:18 Thomas Chung wrote: > >> Shoot. Another one. >> >> http://fedoraproject.org/wiki/FWN/Beats/PlanetFedora >> >> Thank you Jesse, :) >> > > Fixed (: > > I check with the packager, the package is now up to date and we'll be able to update it soon. I'll try to do it on Friday morning. -Mike From lmacken at redhat.com Thu May 31 12:11:07 2007 From: lmacken at redhat.com (Luke Macken) Date: Thu, 31 May 2007 08:11:07 -0400 Subject: 0-day bodhi In-Reply-To: <20070531050649.GA13899@nostromo.devel.redhat.com> References: <20070531050649.GA13899@nostromo.devel.redhat.com> Message-ID: <20070531121107.GF2650@tomservo.rochester.rr.com> So, after about 20 hours of straight hacking, bodhi seems to be in fairly good shape at the moment (after rewriting/gutting most of it in the past 2 days). The first instance was/is deployed to app3, but was only able to take submissions as it cannot write to /mnt/koji. So I deployed bodhi on app5 and did a bunch of initial testing in a development environment with a local sqlite db. Everything seemed to work great ("everything" meaning mashing the repos and generating/sending update announcements. Other stuff like updateinfo.xml generation will have to be redesigned and reimplemented)). I changed the proxy config to point to app5, so hopefully that should propagate shortly and transparently switch over. So I threw together a Masher[0] for bodhi that should allow releng to queue up pushes as they please, and it will churn them out to /mnt/koji/mash/updates/f7-updates{,-testing}-YYMMDD.HHSS, and then symlink it to /mnt/koji/mash/updates/fc7-updates{,testing} when complete. From here an hourly sync script (that may or may not exist yet) will pick it up and it will eventually make it out to the mirrors. >From bodhi's end, it should be able to crunch out updates repos and send email notices around just fine. Some critical stuff that we need ASAP: o Access control. We need to make sure that only {,co-}maintainers can submit/modify/push their packages. It would be nice to be able to do this by calling the pkdb or koji, but the pkgdb doesn't have the API, and koji doesn't know about co-maintainers. Worse case scenario is we parse the owners.list ourselves. o Bodhi needs a client cert (instead of using mine) o Ability to submit/modify multiple updates at once. See my post on fedora-maintainers[1] o XML-RPC API and bodhi-client tool, for doing stuff from the command-line. As shiny as bodhi is, I'd personally rather stay out of firefox as much as possible. o updateinfo.xml.gz integration. The old-style updates pushing would insert/remove the extended metadata on the fly (and move it out of the way when running createrepo, then shove it back in). I'm thinking it would be fairly simple to iterate over the mashed repo and create/insert this metadata on the fly. I'm not sure how intensive of a process this will be, so we'll just have to try it and find out. That's all I can think of at the moment.. anyone have anything else that is a top priority for bodhi ? luke [0]: https://hosted.fedoraproject.org/projects/bodhi/browser/bodhi/masher.py [1]: https://www.redhat.com/archives/fedora-maintainers/2007-May/msg01034.html From jkeating at redhat.com Thu May 31 12:52:11 2007 From: jkeating at redhat.com (Jesse Keating) Date: Thu, 31 May 2007 08:52:11 -0400 Subject: 0-day bodhi In-Reply-To: <20070531121107.GF2650@tomservo.rochester.rr.com> References: <20070531050649.GA13899@nostromo.devel.redhat.com> <20070531121107.GF2650@tomservo.rochester.rr.com> Message-ID: <200705310852.11627.jkeating@redhat.com> On Thursday 31 May 2007 08:11:07 Luke Macken wrote: > That's all I can think of at the moment.. anyone have anything else that > is a top priority for bodhi ? A way to see if there are broken deps in the new update set and the ability to say "no, don't push it" Is there an try/except when trying to grab a signed package that isn't signed yet? Will it just traceback? -- Jesse Keating Release Engineer: Fedora -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From lmacken at redhat.com Thu May 31 13:14:09 2007 From: lmacken at redhat.com (Luke Macken) Date: Thu, 31 May 2007 09:14:09 -0400 Subject: 0-day bodhi In-Reply-To: <200705310852.11627.jkeating@redhat.com> References: <20070531050649.GA13899@nostromo.devel.redhat.com> <20070531121107.GF2650@tomservo.rochester.rr.com> <200705310852.11627.jkeating@redhat.com> Message-ID: <20070531131409.GH2650@tomservo.rochester.rr.com> On Thu, May 31, 2007 at 08:52:11AM -0400, Jesse Keating wrote: > On Thursday 31 May 2007 08:11:07 Luke Macken wrote: > > That's all I can think of at the moment.. anyone have anything else that > > is a top priority for bodhi ? > > A way to see if there are broken deps in the new update set and the ability to > say "no, don't push it" Bodhi's Masher handles rolling back of all of the builds tags when mash fails. So, if mash errors out on broken deps, bodhi will drop a /mnt/koji/mash/updates/mash-failed-YYMMDD.HHMM file with the output. Later today I'll throw together a web interface to check the status of the Masher and view the mash results and such. > Is there an try/except when trying to grab a signed package that isn't signed > yet? Will it just traceback? I enabled 'strict_keys' in bodhi's mash.conf, so the compose should fail if anything is unsigned. luke From notting at redhat.com Thu May 31 18:01:01 2007 From: notting at redhat.com (Bill Nottingham) Date: Thu, 31 May 2007 14:01:01 -0400 Subject: 0-day bodhi In-Reply-To: <200705310852.11627.jkeating@redhat.com> References: <20070531050649.GA13899@nostromo.devel.redhat.com> <20070531121107.GF2650@tomservo.rochester.rr.com> <200705310852.11627.jkeating@redhat.com> Message-ID: <20070531180101.GC21110@nostromo.devel.redhat.com> Jesse Keating (jkeating at redhat.com) said: > On Thursday 31 May 2007 08:11:07 Luke Macken wrote: > > That's all I can think of at the moment.. anyone have anything else that > > is a top priority for bodhi ? > > A way to see if there are broken deps in the new update set and the ability to > say "no, don't push it" mash currently gathers broken deps and doesn't do anything with them. What it needs is: a) to print them out b) a mechanism to check dependencies using another repo as a base (otherwise, the broken dependencies in updates are going to be wrong) Bill From julianokyap at gmail.com Thu May 31 20:47:52 2007 From: julianokyap at gmail.com (Julian Yap) Date: Thu, 31 May 2007 10:47:52 -1000 Subject: Suggestion for BitTorrent page - Fedora 7 Message-ID: The new downloads for Fedora 7 are different from previous releases. This gives you an initial 'Hmm' when deciding what to download. Suggest, adding description of media required for each torrent for Fedora 7. ie. Current: Fedora 7 i386 Proposed: Fedora 7 - single DVD image for i386 Otherwise you don't initially know if that 2.8G torrent requires 5 CDs or 1 DVD. This page is also linked from the front page: http://fedoraproject.org/wiki/Distribution/Download#Understand It needs to be updated to be Fedora 7 specific. eg. Why would you want to download the Live CD image vs. the DVD image? What is not included in the CD image? - Julian From tchung at fedoraproject.org Thu May 31 20:59:54 2007 From: tchung at fedoraproject.org (Thomas Chung) Date: Thu, 31 May 2007 13:59:54 -0700 Subject: Suggestion for BitTorrent page - Fedora 7 In-Reply-To: References: Message-ID: <369bce3b0705311359n4d756ee2la2ca77ea638751a@mail.gmail.com> On 5/31/07, Julian Yap wrote: > The new downloads for Fedora 7 are different from previous releases. > This gives you an initial 'Hmm' when deciding what to download. > > Suggest, adding description of media required for each torrent for Fedora 7. > > ie. > Current: Fedora 7 i386 > Proposed: Fedora 7 - single DVD image for i386 > > Otherwise you don't initially know if that 2.8G torrent requires 5 CDs or 1 DVD. > > This page is also linked from the front page: > http://fedoraproject.org/wiki/Distribution/Download#Understand > > It needs to be updated to be Fedora 7 specific. > > eg. Why would you want to download the Live CD image vs. the DVD > image? What is not included in the CD image? > > - Julian I'll update the page[1] today. http://fedoraproject.org/wiki/Distribution/Download Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung