From ricky at fedoraproject.org Fri Feb 1 00:34:54 2008 From: ricky at fedoraproject.org (Ricky Zhou) Date: Thu, 31 Jan 2008 19:34:54 -0500 Subject: Meeting Log - 2008-01-31 Message-ID: <20080201003454.GD5929@Max.nyc1.dsl.speakeasy.net> 15:22 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Role call (late) 15:22 < mmcgrath> who's here? 15:22 * ricky 15:23 < ricky> ivazquez: I think it was supposed to be ~20 minutes ago. 15:23 < dgilmore> mmcgrath: i think we got messed up when DST ended 15:23 < mmcgrath> yeah 15:23 < dgilmore> we did not change with DST but used the same ust offset 15:24 * ricky will probably be unable to make meetings after a month or so, unfortunately. 15:24 < jcollie> heh need to add an alarm clock to zodbot 15:24 < ricky> Speaking of time... when were we going to change all time zones to UTC? 15:24 < mmcgrath> ricky: yeah we were. 15:25 < mmcgrath> ricky: its on our topic list sso lets get started 15:25 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Tickets 15:25 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/query?status=new&status=assigned&status=reopened&group=milestone&keywords=%7EMeeting&order=priority 15:25 < zodbot> mmcgrath: http://tinyurl.com/2hyyz6 15:25 < paulobanon_> pong 15:25 * paulobanon_ thanks ivazquez 15:25 < mmcgrath> so first ticket 15:26 < mmcgrath> .ticket 347 15:26 < zodbot> mmcgrath: #347 (Set localtime on all our servers to UTC) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/347 15:26 < mmcgrath> I think the only main questions about this are 1) notifying everyone that the change is going to happen 2) making sure none of our apps break and 3) doing the implementation. 15:27 < mmcgrath> I've given some thought to 2 and while it might look a little odd for people going back and looking through things (like when something was built, or cacti graphs) that time might just disappear. 15:27 < paulobanon_> i think its a good thing to have 15:27 -!- glezos [n=glezos at fedora/glezos] has joined #fedora-meeting 15:27 < mmcgrath> yeah I don't think anyone is against it (if they are speak now!) 15:28 < mmcgrath> Anyone particularly interested in owning this task? I've got a backlog of stuff I've been working on. 15:28 < dgilmore> i can own it if noone else wants to 15:28 < mmcgrath> well, either way its a ticket so it'll get worked on sooner or later. 15:28 < mmcgrath> dgilmore: I say if no one claims it by tomorrow, go ahead and take it. 15:28 < mmcgrath> anyone else have any questions on that? 15:28 < dgilmore> everyone has been for the change 15:29 < ricky> It does require a reboot/downtime, right? 15:29 < mmcgrath> yeah, just a matter of doing it. 15:29 < mmcgrath> ricky: AFAIK, yes. 15:29 < dgilmore> ricky: at minimum service restarts 15:29 < mmcgrath> at least thats the safe way to do it. 15:29 < dgilmore> easier to reboot 15:29 < ricky> Ah, OK. 15:30 < mmcgrath> Alrighty, anyone have anything else on that? 15:30 < mmcgrath> .ticket 365 15:30 < zodbot> mmcgrath: #365 (mailman setup (project/hosted)) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/365 15:30 < mmcgrath> So we now have the collab servers up and can, in theory, run our own mailman instances. We will be doing this for fedorahosted. 15:30 < mmcgrath> the question is how to proceed with the fedoraproject. 15:30 < mmcgrath> jcollie: ping 15:30 < mmcgrath> dgilmore: ping 15:31 < jcollie> hello!!! 15:31 < mmcgrath> jcollie: yo 15:31 < dgilmore> mmcgrath: should could we run all of fedora's mailing lists 15:31 < ricky> I don't think we've really had many problems with Red Hat's mailman, so at the very least, there's no need to rush over at once. 15:31 < mmcgrath> so right now jcollie is point man on implementation and getting mailman actually installed. dgilmore has recently be charged by the board to figure out what our mail system should do. 15:31 < jcollie> i think that the main issue with fedoraproject is how to get mail from bastion over to collab1 15:32 < mmcgrath> ricky: thats been my primary push against hosting it ourselves though now we have the space to do it. 15:32 * jcollie thinks we should use exim :) 15:32 * dgilmore slaps jcollie 15:32 < mmcgrath> heheh 15:32 < dgilmore> :) 15:32 < mmcgrath> so there are two options here as I see them. 15:32 < mmcgrath> 1) *-list at fedoraproject.org and @lists.fedoraproject.org 15:33 < mmcgrath> upon thinking about it, from the user side I'd prefer *-list at fedoraproject.org and from the infrastructure team side I'd prefer @lists.fedoraproject.org 15:33 < mmcgrath> anyone have opinions on it? 15:33 < dgilmore> ricky: one thing id like to do is have a fedora themed interface for Red Hats mailman that could be accessed via lists.fedoraproject.org or fedoraproject.org/lists or something like that 15:33 < ricky> I'm leaning towards lists.fedoraproject.org too. It'll be annoying to have to blacklist a ton of mailing list names in FAS. 15:34 < dgilmore> ricky: i agree 15:34 < mmcgrath> jcollie: what are your thoughts on it? 15:34 < ivazquez> It'll be far simpler to use @lists. 15:34 < dgilmore> i like simple 15:34 < ricky> dgilmore: Ah, good point. Currently, the admin interfaces for lists allow some (probably limited) control over templates, but it'll definitely be easier with our own setup. 15:34 < paulobanon_> +1 15:34 < jcollie> i like *-lists at fedoraproject.org... i don't think it's that hard to implement 15:35 < dgilmore> ricky: and id like to alias each list on redhat.com with a fedoraproject.org address 15:35 < EvilBob> will this break users filters? 15:35 < mmcgrath> EvilBob: almost certainly. 15:35 < jcollie> if we go with lists.fedoraproject.org we should probably make that the admin interface rather than admin.fp.o/mailman 15:36 < mmcgrath> jcollie: ssl / ip restriction issues. 15:37 < mmcgrath> We're just tight on ssl certs and ip's and its so much easier to just use whats there. Afterall, you've already got admin.fp.o/mailman setup :) 15:37 < dgilmore> mmcgrath: :) agreed 15:37 < mmcgrath> and we can have a non-ssl lists.fp.o site for the archives if we wanted instead of fedoraproject.org 15:37 < jcollie> well, i guess i don't have super strong feelings either way... sending mail to lists.fedoraproject.org would be super simple 15:38 < dgilmore> i think admin.fp.o is a well known admin area 15:38 < mmcgrath> k 15:38 < mmcgrath> jcollie: and as for fedorahosted.org, we've not really talked directly about that but is it something you'd be interested in doing as well? 15:38 < dgilmore> so the question comes down. do we want to manage all lists? 15:38 < mmcgrath> dgilmore: do you mean as in admin each list, or host them? 15:38 -!- MrBawb [i=abob at guppy.drown.org] has joined #fedora-meeting 15:39 < paulobanon_> dgilmore: what's the board position on that ? 15:39 < jcollie> yeah the puppet configs i've been working on should make it a snap to do it for fedorahosted... you'll need to run it on a different host than collab1 though 15:39 < dgilmore> or do we want to have some way to manage hosted lists ourselves and have our own frontend to the mailmain instance provided by Red Hat 15:39 < ricky> Aw, so there'd have to be two separate setups? 15:39 < dgilmore> paulobanon_: boards take is what do the users want/ and is simple for them 15:40 < jcollie> ricky: yeah... virtual hosting in mailman is possible but a lot more tricky 15:40 < mmcgrath> jcollie: we'll be runing them on the hsoted box. 15:41 < mmcgrath> dgilmore: whats your prefered way with the fedoraproject mail? 15:41 < dgilmore> mmcgrath: im kinda leaning towards keeping them on the RH side just because its less work 15:41 < paulobanon_> i dont have a personal feeling either way, but we should consider the administration costs vs the benefits :) 15:42 < mmcgrath> dgilmore: should we have jcollie focus on fedorahosted for now? 15:42 < dgilmore> but having some fedora frontends for it 15:42 < jcollie> i'd say any new fedora related lists we run on collab1 but keep the existing ones @redhat 15:42 < paulobanon_> dgilmore: aka fedora look n'feel :) 15:42 < dgilmore> mmcgrath: probably unless he wants to setup for all and we work a migration plan away from @lists.redhat.com 15:42 < dgilmore> paulobanon_: yeah 15:43 < ricky> Personally, I kind of like having the same interface on all mailman instances that I use. 15:43 < mmcgrath> jcollie: so from here on, what would it take to get a mailing list setup for the @fedorahosted.org people? 15:44 < lmacken> ugh.. mailman 15:44 < jcollie> well, i've got to get the puppet configs finished, then it's a matter of applying them to the fedorahosted box 15:45 < jcollie> new lists can be created by editing the puppet configs so pretty easy to admin 15:45 < abadger1999> jcollie: I like one-stop-shopping though. So having fedora-infrastructure on rh.com and fedora-devel-ng on fedoraproject.org seems like a drawback. 15:45 < mmcgrath> jcollie: ahh, thats one thing I wanted to talk to you about. 15:45 < abadger1999> (Refering to all new lists on collab1) 15:45 < mmcgrath> So as it stands, none of the fedorahosted projects are in puppet, we have them all under /srv on fedorahosted and we run a script to create them. 15:45 < ricky> Cool - I always assumed that they were created by a script. 15:46 < jcollie> abadger1999: yeah, but you're gonna break bazillions of people mail filters by moving the lists 15:46 < mmcgrath> jcollie: and thats the real dilema, whats the benefit of the move? 15:46 * nirik notes we could look at the mailing list reorg at the same time as moving them.... 15:46 < ricky> I don't see huge benefits in moving - right now, the big thing is that we're gaining the ability to create lists quickly, right? 15:47 < jcollie> 1) it's run on the fedora infrastructure 2) we can give the front ends the fedora look'n'feel 15:47 < lmacken> it may also be a good opportunity to look into toshio's notification server ideas 15:47 < lmacken> .ticket 151 15:47 < zodbot> lmacken: #151 (Explore idea of a notification server) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/151 15:47 < notting> can we do #2 without actually moving things? 15:47 < mmcgrath> number 2) might be able to be done without moving things. 15:47 < jcollie> yeah, we can create new lists as quickly as you can edit the puppet configs 15:47 < mmcgrath> notting: dgilmore is working on that. or looking into it. 15:47 < EvilBob> Is having "quick lists" a real long term bene however? then we end up with less thought going in to lists and a bunch of poorly planned dead lists 15:48 < mmcgrath> jcollie: I don't know that we want to do that in puppet though, we might just want to script it on hosted like we do with the rest of the hosted projects. 15:48 < mmcgrath> its kind of an odd "content vs config" mix on fedorahosted. 15:49 < EvilBob> icanhascheezymailinglist? 15:49 < mmcgrath> jcollie: here's how we currently create hosted projects (it could use some work) - http://fedoraproject.org/wiki/Infrastructure/ProjectHosting/CreateNewProject 15:49 < jcollie> yeah, it is a little bit wierd because you can only affect the initial setup of the lists... any other config changes have to be done through the normal mm methods 15:49 < dgilmore> notting: im trying to find out what it would take to give the @redhat.com lists a fedora look and feel without breaking anything 15:49 < mmcgrath> jcollie: we can chat about that after the meeting whats the best way to create / maintain the lists. 15:50 < jcollie> mmcgrath: i'm good either way... 15:50 < mmcgrath> jcollie: excellent. So for now I think the path of least resistance (and way to prove that it'll be easy for us) is to get mailman setup in fedorahosted. 15:50 < mmcgrath> dgilmore: will you continue to look into this branded issue / non-issue? 15:51 < jcollie> yeah that'll be pretty easy 15:51 < mmcgrath> jcollie: in that case I have... YET ANOTHER group for you to join :) sysadmin-hosted 15:51 -!- stickster_afk is now known as stickster_work 15:51 < jcollie> heh heh 15:51 < dgilmore> mmcgrath: yep i will 15:52 < mmcgrath> solid, so for now I'll leave this on the meeting. It seems to be a pretty hot topic at times, might as well continue talking about it. 15:52 < mmcgrath> anyone have anything else on that? if not we'll move on (we started alte so we don't have much time left) 15:52 < jcollie> i think that we should set some standard for fh.o list names 15:53 < mmcgrath> I'll add that to the ticket. 15:53 < jcollie> i propose --list (-) could be omitted 15:53 < mmcgrath> right now we don't really have anything like that. 15:53 < mmcgrath> just a reminder for those interested in followign the ticket, add yourselves to the cc 15:54 < mmcgrath> .ticket 365 15:54 < zodbot> mmcgrath: #365 (mailman setup (project/hosted)) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/365 15:54 < mmcgrath> ok, next ticket 15:54 < mmcgrath> .ticket 270 15:54 < zodbot> mmcgrath: #270 (Fedora Wiki allows editing raw HTML) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/270 15:54 < mmcgrath> ricky: ^^^ d00d 15:54 < mmcgrath> paulobanon_: ^^ 15:54 < mmcgrath> we're just waiting on the 1.6 moin epel instance? 15:54 < mmcgrath> paulobanon_: are you blocking on me for something there? 15:54 < paulobanon_> pending on 15:54 < paulobanon_> .ticket 363 15:54 < zodbot> paulobanon_: #363 (fedoraproject.org/wiki - Moin upgrade) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/363 15:54 < paulobanon_> :) 15:54 < mmcgrath> k, did moin 1.6 make it into epel yet or was that waiting on me to build it? 15:54 < ricky> Getting somewhat pressed for time too, unfortunately :( 15:55 < paulobanon_> so mmcgrath since i dont have any koji access if you could throw a build it would be nice 15:55 < mmcgrath> ricky: thats ok, thanks for letting us know, I'll make sure to not pile so much stuff on ya :) 15:55 < paulobanon_> thias only commited his stuff to devel 15:56 < paulobanon_> we are allowed to co-maintain the package if we want, so its not pending on anyone anymore besides us 15:56 < mmcgrath> paulobanon_: would you mind rebuilding the srpm for EL-5 and giving it a quick test? If not no worries I'll do it before I rebuild it'll just take me a bit. 15:56 < paulobanon_> mmcgrath: ill try to fit that tomorrow on my todo list 15:56 < mmcgrath> paulobanon_: excellent, I appreciate it. 15:56 < mmcgrath> Ok, last ticket. 15:56 < paulobanon_> ill rebuild it in CentOS5.1 ?! 15:57 < mmcgrath> .ticket 302 15:57 < zodbot> mmcgrath: #302 (Moin patches) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/302 15:57 < mmcgrath> paulobanon_: that'd work fine, you can even just rebuild it on publictest10 15:57 < mmcgrath> MrBawb: ping 15:57 * ricky didn't get a reply to the epydoc package yet either. 15:58 -!- petreu [n=peter at fedora/Standby] has quit "( www.nnscript.de :: NoNameScript 4.02 :: www.XLhost.de )" 15:58 < mmcgrath> MrBawb: ping? 15:58 < mmcgrath> we can come back to that, almost out of time. 15:58 < mmcgrath> thats the last of the tickets, I did have one SOP I added this week: 15:59 < mmcgrath> http://fedoraproject.org/wiki/Infrastructure/SOP/InfrastructureRepo 15:59 < mmcgrath> how to make RPM's and sign for the infrastructure repo. 15:59 < mmcgrath> And thats really the last of the things that I've got 15:59 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor 16:00 < mmcgrath> Anyone have anything they'd like to discuss? 16:00 < ricky> I might have missed this in the past week or so, but any update on the xen1 problems? 16:00 < MrBawb> mmcgrath: oh, I'm here now 16:00 < mmcgrath> ricky: sorry, yes I closed the ticket, the old FC6 and the new RHEL5 kernel both fixed the problem. Just waiting for RH to release the official RPM for RHEL. 16:01 < mmcgrath> MrBawb: anything new with ticket 302? 16:01 < MrBawb> work's been busy lately, so I haven't made any progress 16:01 < mmcgrath> no worries, thanks for the update. 16:01 < mmcgrath> alllrighty, and with that we're at the end of the meeting (Sorry for starting so late) 16:01 < abadger1999> Quick update: Vacuum policy for postgres dbs. I'll be running a script to accumulate some stats. 16:01 < ricky> mmcgrath: Aha, nice. 16:01 < abadger1999> Then create a cron job to vacuum tables. 16:02 < abadger1999> Should be in place next week. 16:02 < mmcgrath> abadger1999: excellent, it will be nice to be able to benchmark whats going on there. One of the problems we had this last time was "that feels slow" but had no actual data to back up how it used to be. 16:02 < mmcgrath> If no one has anything else, I'll close the meeting in 30 16:02 < paulobanon_> mmcgrath: stickum, i'm trying to package it correctly, and i'll probably ask some stuff to our TG gurus (lmacken and abadger1999) :) 16:02 -!- giarc_w [i=hidden-u at gnat.asiscan.com] has quit "Leaving" 16:03 < mmcgrath> paulobanon_: thats excellent. 16:03 < mmcgrath> 15 16:03 < mmcgrath> 10 16:03 < ricky> Hm, did nirik have a package too? 16:03 < mmcgrath> nirik: ping 16:03 < paulobanon_> ricky: its the same :) 16:03 < mmcgrath> ahh well then 16:03 < mmcgrath> nirik: unping 16:03 < paulobanon_> hehe 16:03 < ricky> paulobanon_: Aha - I've kind of lost track of things this week. 16:03 < mmcgrath> ok guys, thanks for coming 16:03 < nirik> I started working on one, but paulobanon_ wanted to, so I gave him what I had. ;) 16:03 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting closed -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From sundaram at fedoraproject.org Fri Feb 1 13:44:44 2008 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Fri, 01 Feb 2008 19:14:44 +0530 Subject: Collaboration Servers! In-Reply-To: References: <47A20593.4040808@redhat.com> <935ead450801310944i57519a0xb49ec00a9cb5c9ae@mail.gmail.com> Message-ID: <47A3224C.2010900@fedoraproject.org> Mike McGrath wrote: > > I looked at dimdim briefly, does their OSS version have a license we can > use in Fedora? GPL+FLOSS exception similar to MySQL or QT. so should be acceptable. http://www.dimdim.com/opensource/dimdim_license.html Also might want to talk to Greg Dek since he has expressed interest in it. Rahul From mmcgrath at redhat.com Fri Feb 1 15:20:47 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 1 Feb 2008 09:20:47 -0600 (CST) Subject: app4, back online Message-ID: I had been waiting for the transifex deps before bringing app4 back online but decided not to wait any longer. pkgdb, smolt and mirrormanager are all running from this box. My hope is this additional capacity will help quell the nagios alerts we've been getting over the last couple of days with the ultimate goal of getting the next smolt version out (which has some more efficient sql in it.... Its monthly checkin time. -Mike From cra at WPI.EDU Fri Feb 1 19:03:59 2008 From: cra at WPI.EDU (Chuck Anderson) Date: Fri, 1 Feb 2008 14:03:59 -0500 Subject: download1 is out of sync with the others Message-ID: <20080201190359.GC24000@angus.ind.WPI.EDU> download1 is missing some files and showing the "file has vanished" thing again. download1 seems to be plagued with ongoing problems. Is anyone looking into these issues? Every time I report them, I get no response from anyone who knows what might be happening. If I need to report these somewhere else, please tell me where. Thanks. -bash-3.1$ rsync rsync://download1.fedora.redhat.com/fedora-enchilada/linux/updates/7/x86_64/ | grep groff file has vanished: "linux/updates/7/x86_64/groff-1.18.1.4-7.fc7.x86_64.rpm" (in fedora-enchilada) file has vanished: "linux/updates/7/x86_64/groff-gxditview-1.18.1.4-7.fc7.x86_64.rpm" (in fedora-enchilada) file has vanished: "linux/updates/7/x86_64/groff-perl-1.18.1.4-7.fc7.x86_64.rpm" (in fedora-enchilada) -bash-3.1$ rsync rsync://download2.fedora.redhat.com/fedora-enchilada/linux/updates/7/x86_64/ | grep groff -rw-r--r-- 1996248 2008/01/28 12:41:17 groff-1.18.1.4-8.fc7.x86_64.rpm -rw-r--r-- 42977 2008/01/28 12:41:25 groff-gxditview-1.18.1.4-8.fc7.x86_64.rpm -rw-r--r-- 23997 2008/01/28 12:41:27 groff-perl-1.18.1.4-8.fc7.x86_64.rpm -bash-3.1$ rsync rsync://download3.fedora.redhat.com/fedora-enchilada/linux/updates/7/x86_64/ | grep groff -rw-r--r-- 1996248 2008/01/28 12:41:17 groff-1.18.1.4-8.fc7.x86_64.rpm -rw-r--r-- 42977 2008/01/28 12:41:25 groff-gxditview-1.18.1.4-8.fc7.x86_64.rpm -rw-r--r-- 23997 2008/01/28 12:41:27 groff-perl-1.18.1.4-8.fc7.x86_64.rpm The missing files I've noticed: fedora/linux/updates/7/x86_64/groff-1.18.1.4-8.fc7.x86_64.rpm fedora/linux/updates/7/x86_64/kernel-2.6.23.14-64.fc7.x86_64.rpm fedora/linux/updates/7/x86_64/libacl-2.2.39-7.fc7.x86_64.rpm fedora/linux/updates/7/x86_64/bash-3.2-20.fc7.x86_64.rpm fedora/linux/updates/7/x86_64/acl-2.2.39-7.fc7.x86_64.rpm From a.badger at gmail.com Sat Feb 2 18:17:07 2008 From: a.badger at gmail.com (Toshio Kuratomi) Date: Sat, 02 Feb 2008 10:17:07 -0800 Subject: Safe to upgrade Message-ID: <47A4B3A3.7040507@gmail.com> I've built a new python-json that should fix the issues that nirik reported earlier with JSON calls failing. When it shows up in the EPEL repository it should be safe to upgrade the app servers to this version. Unsafe: python-turbojson-1.1.2-1.el5 Safe: python-turbojson-1.1.2-3.el5 -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature URL: From admin at arcnetworks.biz Sun Feb 3 15:14:52 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Sun, 3 Feb 2008 10:14:52 -0500 Subject: Apache Test Page Message-ID: <5d66540b0802030714g611b398blc2a9c92b7035c740@mail.gmail.com> Do you think we should add something like this to the bottom of the test pages, so MAYBE people will understand that we don't own the websites? Note: Fedora is an Operating System and it is used to power this website; however, the webserver is owned by the domain owner and not Fedora. *If you have issues with the content of this site, contact the owner of the domain, not Fedora!* Unless this server is on the fedoraproject.org domain, Fedora doesn't have anything to do with the content on this webserver or any e-mails that directed you to this site. For example, if this website is www.example.com, you would find the owner of the example.com domain at the following WHOIS server: http://www.internic.net/whois.html What do you think? I got that from the CentOS test page. -Anand -------------- next part -------------- An HTML attachment was scrubbed... URL: From sundaram at fedoraproject.org Sun Feb 3 15:26:27 2008 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Sun, 03 Feb 2008 20:56:27 +0530 Subject: Apache Test Page In-Reply-To: <5d66540b0802030714g611b398blc2a9c92b7035c740@mail.gmail.com> References: <5d66540b0802030714g611b398blc2a9c92b7035c740@mail.gmail.com> Message-ID: <47A5DD23.1030800@fedoraproject.org> Anand Capur wrote: > Do you think we should add something like this to the bottom of the test > pages, so MAYBE people will understand that we don't own the websites? > > Looks good. Might file that against the httpd package as a RFE in bugzilla. Rahul From admin at arcnetworks.biz Sun Feb 3 22:05:23 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Sun, 3 Feb 2008 17:05:23 -0500 Subject: fedora.org? Message-ID: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> Is there any way we can get this domain back? Is Fedora a registered trademark of ours? I think it would much be better on our site, instead of yeah, you know what I mean. (See fedora.org) -Anand -------------- next part -------------- An HTML attachment was scrubbed... URL: From dennis at ausil.us Mon Feb 4 00:55:51 2008 From: dennis at ausil.us (Dennis Gilmore) Date: Sun, 3 Feb 2008 18:55:51 -0600 Subject: fedora.org? In-Reply-To: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> References: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> Message-ID: <200802031855.51492.dennis@ausil.us> On Sunday 03 February 2008, Anand Capur wrote: > Is there any way we can get this domain back? Is Fedora a registered > trademark of ours? I think it would much be better on our site, instead of > yeah, you know what I mean. (See fedora.org) > -Anand We have never had fedora.org It was taken when fedora project was started Dennis From mgalgoci at redhat.com Mon Feb 4 01:37:32 2008 From: mgalgoci at redhat.com (Matthew Galgoci) Date: Sun, 3 Feb 2008 20:37:32 -0500 Subject: fedora.org? In-Reply-To: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> References: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> Message-ID: > Date: Sun, 3 Feb 2008 17:05:23 -0500 > From: Anand Capur > Reply-To: fedora-infrastructure-list at redhat.com > To: fedora-infrastructure-list at redhat.com > Subject: fedora.org? > > Is there any way we can get this domain back? Is Fedora a registered > trademark of ours? I think it would much be better on our site, instead of > yeah, you know what I mean. (See fedora.org) We never "had" that domain, so there is no "getting it back". -- Matthew Galgoci Network Operations Red Hat, Inc 919.754.3700 x44155 From admin at arcnetworks.biz Mon Feb 4 03:05:44 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Sun, 3 Feb 2008 22:05:44 -0500 Subject: fedora.org? In-Reply-To: References: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> Message-ID: <5d66540b0802031905p6b627a95r75f1206aa35f24dc@mail.gmail.com> On 2/3/08, Matthew Galgoci wrote: > > > Date: Sun, 3 Feb 2008 17:05:23 -0500 > > From: Anand Capur > > Reply-To: fedora-infrastructure-list at redhat.com > > To: fedora-infrastructure-list at redhat.com > > Subject: fedora.org? > > > > Is there any way we can get this domain back? Is Fedora a registered > > trademark of ours? I think it would much be better on our site, instead > of > > yeah, you know what I mean. (See fedora.org) > > We never "had" that domain, so there is no "getting it back". > > -- > Matthew Galgoci > Network Operations > Red Hat, Inc > 919.754.3700 x44155 Well, can't you do trademark claims with ICANN? I didn't literally mean "Get it back" since yeah, we never had it. -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Mon Feb 4 03:57:44 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Sun, 3 Feb 2008 21:57:44 -0600 (CST) Subject: fedora.org? In-Reply-To: <5d66540b0802031905p6b627a95r75f1206aa35f24dc@mail.gmail.com> References: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> <5d66540b0802031905p6b627a95r75f1206aa35f24dc@mail.gmail.com> Message-ID: On Sun, 3 Feb 2008, Anand Capur wrote: > On 2/3/08, Matthew Galgoci wrote: > > > > > Date: Sun, 3 Feb 2008 17:05:23 -0500 > > > From: Anand Capur > > > Reply-To: fedora-infrastructure-list at redhat.com > > > To: fedora-infrastructure-list at redhat.com > > > Subject: fedora.org? > > > > > > Is there any way we can get this domain back? Is Fedora a registered > > > trademark of ours? I think it would much be better on our site, instead > > of > > > yeah, you know what I mean. (See fedora.org) > > > > We never "had" that domain, so there is no "getting it back". > > > > Well, can't you do trademark claims with ICANN? I didn't literally mean "Get > it back" since yeah, we never had it. > Nope, but without the "project" in fedora project, they could use it against us. I believe they existed before we did. -Mike From admin at arcnetworks.biz Mon Feb 4 04:09:35 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Sun, 3 Feb 2008 23:09:35 -0500 Subject: fedora.org? In-Reply-To: References: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> <5d66540b0802031905p6b627a95r75f1206aa35f24dc@mail.gmail.com> Message-ID: <5d66540b0802032009l118fca55k9c29c834cd9aaec2@mail.gmail.com> On 2/3/08, Mike McGrath wrote: > > On Sun, 3 Feb 2008, Anand Capur wrote: > > > On 2/3/08, Matthew Galgoci wrote: > > > > > > > Date: Sun, 3 Feb 2008 17:05:23 -0500 > > > > From: Anand Capur > > > > Reply-To: fedora-infrastructure-list at redhat.com > > > > To: fedora-infrastructure-list at redhat.com > > > > Subject: fedora.org? > > > > > > > > Is there any way we can get this domain back? Is Fedora a registered > > > > trademark of ours? I think it would much be better on our site, > instead > > > of > > > > yeah, you know what I mean. (See fedora.org) > > > > > > We never "had" that domain, so there is no "getting it back". > > > > > > > Well, can't you do trademark claims with ICANN? I didn't literally mean > "Get > > it back" since yeah, we never had it. > > > > Nope, but without the "project" in fedora project, they could use it > against us. I believe they existed before we did. > > -Mike Even though we use "Fedora" as our OS name now?......We can't even get them for using it against the TLD terms since .org's uses are Nonprofits; personal sites; open-source projects; -------------- next part -------------- An HTML attachment was scrubbed... URL: From loupgaroublond at gmail.com Mon Feb 4 04:23:37 2008 From: loupgaroublond at gmail.com (Yaakov Nemoy) Date: Sun, 3 Feb 2008 23:23:37 -0500 Subject: fedora.org? In-Reply-To: <5d66540b0802032009l118fca55k9c29c834cd9aaec2@mail.gmail.com> References: <5d66540b0802031405r1882d6b9o7cf25117e62b142e@mail.gmail.com> <5d66540b0802031905p6b627a95r75f1206aa35f24dc@mail.gmail.com> <5d66540b0802032009l118fca55k9c29c834cd9aaec2@mail.gmail.com> Message-ID: <7f692fec0802032023n7b4c3601s272fe051d40be9c5@mail.gmail.com> 2008/2/3 Anand Capur : > On 2/3/08, Mike McGrath wrote: > > > On Sun, 3 Feb 2008, Anand Capur wrote: > > > > > On 2/3/08, Matthew Galgoci wrote: > > > > > > > > > Date: Sun, 3 Feb 2008 17:05:23 -0500 > > > > > From: Anand Capur > > > > > Reply-To: fedora-infrastructure-list at redhat.com > > > > > To: fedora-infrastructure-list at redhat.com > > > > > Subject: fedora.org? > > > > > > > > > > Is there any way we can get this domain back? Is Fedora a registered > > > > > trademark of ours? I think it would much be better on our site, > instead > > > > of > > > > > yeah, you know what I mean. (See fedora.org) > > > > > > > > We never "had" that domain, so there is no "getting it back". > > > > > > > > > > Well, can't you do trademark claims with ICANN? I didn't literally mean > "Get > > > it back" since yeah, we never had it. > > > > > > > Nope, but without the "project" in fedora project, they could use it > > against us. I believe they existed before we did. > > > > -Mike > > Even though we use "Fedora" as our OS name now?......We can't even get them > for using it against the TLD terms since .org's uses are Nonprofits; > personal sites; open-source projects; Ugh, not this question again. ICANN removed that restriction on TLD's, so anyone can have a .com, org or a .net with impunity. The only restrictions are on .edu, .gov, and .XX where XX is your nation code, plus other less oft used TLDs. IANAL, but Fedora by itself is not a trademark. Fedora doesn't even have a perfect hold on the Fedora Project moniker either. Google it and you'll see what I mean. Bottom line: Who cares. Things like this are the hazards of having an open and free internet. Now quit clogging my tubes with this ;) -Yaakov From huzaifas at redhat.com Mon Feb 4 05:57:00 2008 From: huzaifas at redhat.com (Huzaifa Sidhpurwala) Date: Mon, 04 Feb 2008 11:27:00 +0530 Subject: infrastructure news ready for FWN#118 Message-ID: <47A6A92C.6070706@redhat.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, News from fedora-infrastructure-list is ready for FWN#118 - -- Regards, Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas) Help Desk APAC Team Lead, Research and Development Lead, Global Help Desk, Pune Phone: +617 3514 8125 (UTC +5.5) GnuPG Fingerprint: 3A0F DAFB 9279 02ED 273B FFE9 CC70 DCF2 DA5B DAE5 Visit the Help Desk portal at : http://helpdesk.corp.redhat.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFHpqkszHDc8tpb2uURAjuiAJ4+kqghHF0zmjJuUikC1TjzxdvqTgCfTyFS xQz0Q1egNgPbrInMf7NdcgE= =+/Fp -----END PGP SIGNATURE----- From mmcgrath at redhat.com Mon Feb 4 14:53:26 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 4 Feb 2008 08:53:26 -0600 (CST) Subject: infrastructure news ready for FWN#118 In-Reply-To: <47A6A92C.6070706@redhat.com> References: <47A6A92C.6070706@redhat.com> Message-ID: > News from fedora-infrastructure-list is ready for FWN#118 Thanks Huzaifa, are you our new beat person for FWN? -Mike From huzaifas at redhat.com Tue Feb 5 08:33:48 2008 From: huzaifas at redhat.com (Huzaifa Sidhpurwala) Date: Tue, 05 Feb 2008 14:03:48 +0530 Subject: infrastructure news ready for FWN#118 In-Reply-To: References: <47A6A92C.6070706@redhat.com> Message-ID: <47A81F6C.30607@redhat.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mike McGrath wrote: >> News from fedora-infrastructure-list is ready for FWN#118 > > Thanks Huzaifa, are you our new beat person for FWN? > Yes , I am :) > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list - -- Regards, Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas) Phone: +617 3514 8125 (UTC +5.5) GnuPG Fingerprint: 3A0F DAFB 9279 02ED 273B FFE9 CC70 DCF2 DA5B DAE5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFHqB9szHDc8tpb2uURAje/AKCEikS48NaPv9SltTZsDgltuyd14gCfUQPm VlI4nsDhjWq0XOFzfNDJ414= =Uf+s -----END PGP SIGNATURE----- From tchung at fedoraproject.org Tue Feb 5 20:00:18 2008 From: tchung at fedoraproject.org (Thomas Chung) Date: Tue, 5 Feb 2008 12:00:18 -0800 Subject: infrastructure news ready for FWN#118 In-Reply-To: References: <47A6A92C.6070706@redhat.com> Message-ID: <369bce3b0802051200r325bc481va5b02f88ba77685e@mail.gmail.com> On 2/4/08, Mike McGrath wrote: > > News from fedora-infrastructure-list is ready for FWN#118 > > Thanks Huzaifa, are you our new beat person for FWN? > > -Mike Hi Mike, If this is about the incorrect URL for Infrastructure section, it's been corrected already. :) https://www.redhat.com/archives/fedora-news-list/2008-February/msg00012.html Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From a.badger at gmail.com Thu Feb 7 01:59:39 2008 From: a.badger at gmail.com (Toshio Kuratomi) Date: Wed, 06 Feb 2008 17:59:39 -0800 Subject: Postgres Vacuum Update Message-ID: <47AA660B.3060304@gmail.com> * vacstats has collected stats on all of our databases except koji * vacstats.py now has an analyze mode. You can use it to create a reasonable default vacuum policy. * I've used vacstats to construct vacuum scripts for all of our databases except koji. I've pushed them out to db2 and am watching them to make sure that they run fine today. I don't anticipate a problem but I'll have to evaluate whether to add a weekly script or turn the dailies into every other day vacuumings once we add the koji tables. * We've added three tables from koji to the hourlies since we know that they are high update tables that need to be vacuumed frequently. * The vacstat.py check mode now checks if we're in danger of running out of transaction ids and prints a warning that should be emailed to admin at fp.o if so. Dealing with that is a matter of performing a vacuum of that particular db (rather than table by table). If the database happens to be koji we might want to schedule that for the weekend as the weekend is the lowest use time for koji. (Note -- it will result in a slow down, not in an outage.) Thanks to mbonnet for the information on the tables and queries for the latter two points. At this point the things left to do are: * Get the rest of koji vacuuming integrated into the scripts. I'll be doing this in the next few days. * Find a time when we can do a vacuum full of some tables. The current vacstats algorithm suggests the following tables: Vacuum full mirrormanager host_category_dir: Freespace Percent 96.8641231524%, 735480624.0 Bytes vacuumdb -zfd mirrormanager -t host_category_dir Vacuum full mirrormanager host: Freespace Percent 99.9622089944%, 81626948.0 Bytes vacuumdb -zfd mirrormanager -t host Vacuum full mirrormanager directory: Freespace Percent 89.7076945051%, 7515728.0 Bytes vacuumdb -zfd mirrormanager -t directory Vacuum full bodhi package_update: Freespace Percent 17.634592656%, 311544.0 Bytes vacuumdb -zfd bodhi -t package_update Vacuum full fassession visit: Freespace Percent 88.6180520143%, 554520.0 Bytes vacuumdb -zfd fassession -t visit * Decide whether to upgrade postgres from 8.1 to 8.3. This has been recommended by several postgres people but there's extremely little chance that 8.3 will be going into RHEL5 so we'll have to decide whether to move to F9, backport a package to RHEL5 or just stay with 8.1 for now. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature URL: From mmcgrath at redhat.com Thu Feb 7 20:42:05 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 7 Feb 2008 14:42:05 -0600 (CST) Subject: Meetings Message-ID: Welp, the last 2 thursdays were busy enough that I forgot to start both meetings. In fairness I don't think anyone really missed it as no one pinged me to see if we were starting :) So I'll ask, is there another time that works for everyone? We can certainly re-schedule the meeting times. Anyone not like the current time slot? I think one thing that gets most of us is that during day light savings, it changes. It seems most people would prefer it to be about an hour later right now. Thoughts? -Mike From smooge at gmail.com Thu Feb 7 21:59:44 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Thu, 7 Feb 2008 14:59:44 -0700 Subject: Meetings In-Reply-To: References: Message-ID: <80d7e4090802071359r6a7ceb98k57c243d61325346c@mail.gmail.com> On Feb 7, 2008 1:42 PM, Mike McGrath wrote: > Welp, the last 2 thursdays were busy enough that I forgot to start both > meetings. In fairness I don't think anyone really missed it as no one > pinged me to see if we were starting :) > > So I'll ask, is there another time that works for everyone? We can > certainly re-schedule the meeting times. Anyone not like the current time > slot? > > I think one thing that gets most of us is that during day light savings, > it changes. It seems most people would prefer it to be about an hour > later right now. > Ack.. I completely forgot myself. I need to add it to my google calender. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From smooge at gmail.com Thu Feb 7 22:00:05 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Thu, 7 Feb 2008 15:00:05 -0700 Subject: Meetings In-Reply-To: <80d7e4090802071359r6a7ceb98k57c243d61325346c@mail.gmail.com> References: <80d7e4090802071359r6a7ceb98k57c243d61325346c@mail.gmail.com> Message-ID: <80d7e4090802071400v35acfaf2w6b4a093fcc18e40e@mail.gmail.com> On Feb 7, 2008 2:59 PM, Stephen John Smoogen wrote: > On Feb 7, 2008 1:42 PM, Mike McGrath wrote: > > Welp, the last 2 thursdays were busy enough that I forgot to start both > > meetings. In fairness I don't think anyone really missed it as no one > > pinged me to see if we were starting :) > > > > So I'll ask, is there another time that works for everyone? We can > > certainly re-schedule the meeting times. Anyone not like the current time > > slot? > > > > I think one thing that gets most of us is that during day light savings, > > it changes. It seems most people would prefer it to be about an hour > > later right now. > > > > Ack.. I completely forgot myself. I need to add it to my google calender. > To answer the question. I think I just need to know when it is so I don't forget. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From asgeirf at redhat.com Thu Feb 7 23:55:56 2008 From: asgeirf at redhat.com (Asgeir Frimannsson) Date: Fri, 8 Feb 2008 09:55:56 +1000 Subject: Introduction to the Infrastructure Group Message-ID: <200802080955.56673.asgeirf@redhat.com> Hi all, As requested on the 'Getting Started' page, here's my [1] introduction to the list: My name is Asgeir (asgeirf on IRC). I am working part-time with Red Hat (eng-i18n, Brisbane, Australia) and otherwise spend much time completing a PhD investigating the role of context in translation reuse... My primary interest (at this point) within Fedora is localisation and translation 'engineering'. I hope to help great people like Dimitris Glezos maintain and develop the translation infrastructure (status pages, transifex) and the translation tools. cheers, asgeir [1] http://fedoraproject.org/wiki/AsgeirFrimannsson From mmcgrath at redhat.com Fri Feb 8 00:03:45 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 7 Feb 2008 18:03:45 -0600 (CST) Subject: Introduction to the Infrastructure Group In-Reply-To: <200802080955.56673.asgeirf@redhat.com> References: <200802080955.56673.asgeirf@redhat.com> Message-ID: On Fri, 8 Feb 2008, Asgeir Frimannsson wrote: > Hi all, > > As requested on the 'Getting Started' page, here's my [1] introduction to the > list: > > My name is Asgeir (asgeirf on IRC). I am working part-time with Red Hat > (eng-i18n, Brisbane, Australia) and otherwise spend much time completing a > PhD investigating the role of context in translation reuse... > > My primary interest (at this point) within Fedora is localisation and > translation 'engineering'. I hope to help great people like Dimitris Glezos > maintain and develop the translation infrastructure (status pages, transifex) > and the translation tools. > > cheers, > asgeir > > [1] http://fedoraproject.org/wiki/AsgeirFrimannsson Welcome! I take it you know Glezos already if not make sure to try to get ahold of him online. A focus on localization is a very worthy goal and among some of the better work Fedora is up to right now. Are you looking to help code some of our apps for better localization? If that's the case we're using TG with mostly genshi templates though some kid. We could certainly use some more help. Stop by #fedora-admin if you get a moment tomorrow. It would be good to discuss some of this a bit more. -Mike From asgeirf at redhat.com Fri Feb 8 00:18:39 2008 From: asgeirf at redhat.com (Asgeir Frimannsson) Date: Fri, 8 Feb 2008 10:18:39 +1000 Subject: Introduction to the Infrastructure Group In-Reply-To: References: <200802080955.56673.asgeirf@redhat.com> Message-ID: <200802081018.39820.asgeirf@redhat.com> On Fri, 8 Feb 2008 10:03:45 am Mike McGrath wrote: > On Fri, 8 Feb 2008, Asgeir Frimannsson wrote: > > Hi all, > > > > As requested on the 'Getting Started' page, here's my [1] introduction to > > the list: > > > > My name is Asgeir (asgeirf on IRC). I am working part-time with Red Hat > > (eng-i18n, Brisbane, Australia) and otherwise spend much time completing > > a PhD investigating the role of context in translation reuse... > > > > My primary interest (at this point) within Fedora is localisation and > > translation 'engineering'. I hope to help great people like Dimitris > > Glezos maintain and develop the translation infrastructure (status pages, > > transifex) and the translation tools. > > > > cheers, > > asgeir > > > > [1] http://fedoraproject.org/wiki/AsgeirFrimannsson > > Welcome! I take it you know Glezos already if not make sure to try to get > ahold of him online. A focus on localization is a very worthy goal and > among some of the better work Fedora is up to right now. > > Are you looking to help code some of our apps for better localization? If > that's the case we're using TG with mostly genshi templates though some > kid. We could certainly use some more help. Stop by #fedora-admin if you > get a moment tomorrow. It would be good to discuss some of this a bit > more. Yes, I've been in the background for a while and I know glezos. I have already started working with the codebase for Damned Lies and Transifex in collaboration with glezos. I'm also regularly on #fedora-l10n and #fedora-admin though I'm on Australia-time :) cheers, asgeir From mmcgrath at redhat.com Fri Feb 8 01:22:58 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 7 Feb 2008 19:22:58 -0600 (CST) Subject: Moin 1.6 Message-ID: We've successfully gotten a Moin 1.6 install up and migrated. Time for us to sit down, take a look and let us know what's up. Here's the ticket. There's likely to be lots of non-blocking bugs during this upgrade. We'll have to find how different things are. http://publictest10.fedoraproject.org/wiki/ <-- Wiki https://fedorahosted.org/fedora-infrastructure/ticket/337 <-- ticket Please place all notes, comments, questions, etc in the ticket. -Mike From harsimran.hundal at gmail.com Fri Feb 8 04:32:39 2008 From: harsimran.hundal at gmail.com (Harsimran Singh) Date: Thu, 7 Feb 2008 20:32:39 -0800 Subject: Hi all Message-ID: <5766a9ec0802072032t5ec293ack645dde0d522b9a76@mail.gmail.com> Hi all, This is my first message to you all. I am new to the Project Fedora. I am writing to you all if there is anything for someone who is just starting up. I am would like to part of it, I am more into sys administration so anything jr level work I can perform please let me know or if there is another approch to it. Please guide me. Thank you all in advance Regards, Sunny -------------- next part -------------- An HTML attachment was scrubbed... URL: From skvidal at fedoraproject.org Fri Feb 8 05:28:08 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Fri, 08 Feb 2008 00:28:08 -0500 Subject: torrent tracker/primary seed software Message-ID: <1202448488.2593.7.camel@cutter> So, we're setting up the new torrent tracker and we're debating which tracker software to use. bittorrent: 5.2.0 - released in nov 2007 - it's the last open source version b/c apparently the authors got greedy and stupid. It's not painfully out of date, though and it would be relatively to setup and shift over to it. ctorrent: theoretically being maintained and theoretically capable of being a tracker. It doesn't seem to have any nice initscripts. And the configuration for additional trackers looks more convulted than might otherwise be desired. Welcome to suggestions on initscripts, etc rtorrent: not obvious this is a tracker at all. It looks more like an ncurses-based client. Subpar for our usage. In case anyone is unclear what our usage is. We use the torrent tracker/seed as a simple server. We drop files in a directory and they are available on the tracker. It logs what went where and lets us get data out of it about how many things have been downloaded and from where. Open to suggestions about better tracker software to use. Requirements: 1. must be free software 2. must log/record stats 3. must act sensibly Thanks! -sv From paulo.banon at googlemail.com Fri Feb 8 07:03:16 2008 From: paulo.banon at googlemail.com (Paulo Santos) Date: Fri, 8 Feb 2008 07:03:16 +0000 Subject: Meetings In-Reply-To: <80d7e4090802071400v35acfaf2w6b4a093fcc18e40e@mail.gmail.com> References: <80d7e4090802071359r6a7ceb98k57c243d61325346c@mail.gmail.com> <80d7e4090802071400v35acfaf2w6b4a093fcc18e40e@mail.gmail.com> Message-ID: <7a41c4bc0802072303p51ad7399k99f6c47d5c9f463e@mail.gmail.com> For me it mainly depends if i have anything in RL to do or not. Since the meeting in my timezone is pretty late i can mostly attend all, if its earlier you will probably have problems with everyone on this side of the world (Europe), since they would be working, studying, whatever... Just my 2 cents... Paulo On Feb 7, 2008 10:00 PM, Stephen John Smoogen wrote: > On Feb 7, 2008 2:59 PM, Stephen John Smoogen wrote: > > On Feb 7, 2008 1:42 PM, Mike McGrath wrote: > > > Welp, the last 2 thursdays were busy enough that I forgot to start > both > > > meetings. In fairness I don't think anyone really missed it as no one > > > pinged me to see if we were starting :) > > > > > > So I'll ask, is there another time that works for everyone? We can > > > certainly re-schedule the meeting times. Anyone not like the current > time > > > slot? > > > > > > I think one thing that gets most of us is that during day light > savings, > > > it changes. It seems most people would prefer it to be about an hour > > > later right now. > > > > > > > Ack.. I completely forgot myself. I need to add it to my google > calender. > > > > To answer the question. I think I just need to know when it is so I > don't forget. > > > > -- > Stephen J Smoogen. -- CSIRT/Linux System Administrator > How far that little candle throws his beams! So shines a good deed > in a naughty world. = Shakespeare. "The Merchant of Venice" > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From martin.sourada at gmail.com Fri Feb 8 08:59:53 2008 From: martin.sourada at gmail.com (Martin Sourada) Date: Fri, 08 Feb 2008 09:59:53 +0100 Subject: typo in links to Nodoka on fedorahosted Message-ID: <1202461193.2721.19.camel@pc-notebook> Hi, I've just noticed that there is a typo in links to Nodoka theme in the main fedorahosted.org page [1]. All links contain noduka instead of nodoka. Could someone with the rights fix it? Thanks, Martin [1] https://fedorahosted.org/web/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From kanarip at kanarip.com Fri Feb 8 10:03:04 2008 From: kanarip at kanarip.com (Jeroen van Meeuwen) Date: Fri, 08 Feb 2008 11:03:04 +0100 Subject: torrent tracker/primary seed software In-Reply-To: <1202448488.2593.7.camel@cutter> References: <1202448488.2593.7.camel@cutter> Message-ID: <47AC28D8.5070801@kanarip.com> seth vidal wrote: > So, > we're setting up the new torrent tracker and we're debating which > tracker software to use. > > bittorrent: 5.2.0 - released in nov 2007 - it's the last open source > version b/c apparently the authors got greedy and stupid. > It's not painfully out of date, though and it would be > relatively to setup and shift over to it. > > ctorrent: theoretically being maintained and theoretically capable of > being a tracker. It doesn't seem to have any nice > initscripts. And the configuration for additional trackers > looks more convulted than might otherwise be desired. Welcome > to suggestions on initscripts, etc > > rtorrent: not obvious this is a tracker at all. It looks more like an > ncurses-based client. Subpar for our usage. > > > In case anyone is unclear what our usage is. We use the torrent > tracker/seed as a simple server. We drop files in a directory and they > are available on the tracker. It logs what went where and lets us get > data out of it about how many things have been downloaded and from > where. > > Open to suggestions about better tracker software to use. Requirements: > 1. must be free software > 2. must log/record stats > 3. must act sensibly > Is cbtt not on this list for a reason? Fedora Unity has been looking into using cbtt (from bnbt) and even has some packaging going. Kind regards, Jeroen van Meeuwen -kanarip From skvidal at fedoraproject.org Fri Feb 8 14:20:04 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Fri, 08 Feb 2008 09:20:04 -0500 Subject: torrent tracker/primary seed software In-Reply-To: <47AC28D8.5070801@kanarip.com> References: <1202448488.2593.7.camel@cutter> <47AC28D8.5070801@kanarip.com> Message-ID: <1202480404.2593.13.camel@cutter> On Fri, 2008-02-08 at 11:03 +0100, Jeroen van Meeuwen wrote: > seth vidal wrote: > > So, > > we're setting up the new torrent tracker and we're debating which > > tracker software to use. > > > > bittorrent: 5.2.0 - released in nov 2007 - it's the last open source > > version b/c apparently the authors got greedy and stupid. > > It's not painfully out of date, though and it would be > > relatively to setup and shift over to it. > > > > ctorrent: theoretically being maintained and theoretically capable of > > being a tracker. It doesn't seem to have any nice > > initscripts. And the configuration for additional trackers > > looks more convulted than might otherwise be desired. Welcome > > to suggestions on initscripts, etc > > > > rtorrent: not obvious this is a tracker at all. It looks more like an > > ncurses-based client. Subpar for our usage. > > > > > > In case anyone is unclear what our usage is. We use the torrent > > tracker/seed as a simple server. We drop files in a directory and they > > are available on the tracker. It logs what went where and lets us get > > data out of it about how many things have been downloaded and from > > where. > > > > Open to suggestions about better tracker software to use. Requirements: > > 1. must be free software > > 2. must log/record stats > > 3. must act sensibly > > > > Is cbtt not on this list for a reason? Fedora Unity has been looking > into using cbtt (from bnbt) and even has some packaging going. > > Kind regards, > yum search bnbt cbtt No Matches found Where can I find it? -sv From cra at WPI.EDU Fri Feb 8 16:13:24 2008 From: cra at WPI.EDU (Chuck Anderson) Date: Fri, 8 Feb 2008 11:13:24 -0500 Subject: nagios config for mirrorlist monitoring Message-ID: <20080208161324.GN31787@angus.ind.WPI.EDU> I thought people here might be interested in my nagios config for checking the output of the mirrorlist CGI. ----- Forwarded message from Chuck Anderson ----- From: Chuck Anderson To: mirror-list-d at redhat.com Date: Fri, 8 Feb 2008 01:43:44 -0500 Subject: netblock mirror not showing up for Fedora 8 On Thu, Feb 07, 2008 at 10:13:15PM -0600, Matt Domsch wrote: > The MM hourly refresh had been taking >12 hours due to database > slowness, which _hopefully_ now is resolved. Will watch it closely > over the next few days. > > I'll have to regen the pages manually right now. The cronjobs seem to > still be disabled even though they should have restarted by now... My netblock mirror still isn't showing up for just the Fedora 8 updates and updates-testing repos, all archs. Everything else is coming up fine (Fedora 7 updates, Fedora 7 updates-testing, Rawhide, Fedora 7 and 8 base releases). These are the "bad" queries that don't return my netblock mirror: http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8&arch=i386 http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8&arch=x86_64 http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8&arch=ppc http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f8&arch=ppc64 http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8&arch=i386 http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8&arch=x86_64 http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8&arch=ppc http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f8&arch=ppc64 I wrote a bit of nagios configuration that checks the mirrorlist results. Here are the checkcommands.cfg definitions: # 'check_fedora_mirrorlist' command definition # # Checks Fedora Project's mirrorlist redirector for a specific mirror # URL. # define command { command_name check_fedora_mirrorlist command_line $USER1$/check_http -H $HOSTADDRESS$ -u '/mirrorlist?repo=$ARG1$&arch=$ARG2$' -l -R '^$ARG3$' } # 'check_fedora_mirrorlist_netblock' command definition # # Checks Fedora Project's mirrorlist redirector for a specific mirror # URL using a preferred netblock entry. Ideally, this would check for # the URL as the immediate next line after "Using preferred netblock" # but I couldn't figure out how to embed a newline in the regex in the # nagios config file. # define command { command_name check_fedora_mirrorlist_netblock command_line $USER1$/check_http -H $HOSTADDRESS$ -u '/mirrorlist?repo=$ARG1$&arch=$ARG2$' -l -R 'Using preferred netblock.*$ARG3$' } And here is how you use it in the hosts.cfg file (netblock check): # # Fedora mirrorlist service # define host { host_name mirrors.fedoraproject.org parents internet use generic-host alias mirrors.fedoraproject.org address mirrors.fedoraproject.org } # # Fedora 8 updates-released # define service { host_name mirrors.fedoraproject.org use generic-service service_description updates-released-f8 i386 check_command check_fedora_mirrorlist_netblock!updates-released-f8!i386!http://download.wpi.edu/pub/fedora/linux/updates/8/i386 } -- ----- End forwarded message ----- From jima at beer.tclug.org Fri Feb 8 16:35:58 2008 From: jima at beer.tclug.org (Jima) Date: Fri, 8 Feb 2008 10:35:58 -0600 (CST) Subject: nagios config for mirrorlist monitoring In-Reply-To: <20080208161324.GN31787@angus.ind.WPI.EDU> References: <20080208161324.GN31787@angus.ind.WPI.EDU> Message-ID: On Fri, 8 Feb 2008, Chuck Anderson wrote: > I thought people here might be interested in my nagios config for > checking the output of the mirrorlist CGI. Oooh, nice. I'm not sure we need it internally, but I could certainly use it on my Nagios instance. Very useful. Thanks Chuck! Jima From jonathansteffan at gmail.com Fri Feb 8 17:46:13 2008 From: jonathansteffan at gmail.com (Jonathan Steffan) Date: Fri, 08 Feb 2008 10:46:13 -0700 Subject: torrent tracker/primary seed software In-Reply-To: <1202448488.2593.7.camel@cutter> References: <1202448488.2593.7.camel@cutter> Message-ID: <47AC9565.3080406@gmail.com> seth vidal wrote: > So, > we're setting up the new torrent tracker and we're debating which > tracker software to use. > > ctorrent: theoretically being maintained and theoretically capable of > being a tracker. It doesn't seem to have any nice > initscripts. And the configuration for additional trackers > looks more convulted than might otherwise be desired. Welcome > to suggestions on initscripts, etc Makes a good seed, but that's about it. Also, check out CTCS[1] if you end up using ctorrent for seeding. Fedora Unity has used cbtt, ctorrent and tested ctcs in the past and are working to set it all up again. These softwares would be my personal recommendation. [1] http://www.rahul.net/dholmes/ctorrent/ctcs.html -- Jonathan Steffan daMaestro GPG Fingerprint: 93A2 3E2F DC26 5570 3472 5B16 AD12 6CE7 0D86 AF59 From poelstra at redhat.com Fri Feb 8 18:06:32 2008 From: poelstra at redhat.com (John Poelstra) Date: Fri, 08 Feb 2008 10:06:32 -0800 Subject: Moin 1.6 In-Reply-To: References: Message-ID: <47AC9A28.7040304@redhat.com> Mike McGrath said the following on 02/07/2008 05:22 PM Pacific Time: > We've successfully gotten a Moin 1.6 install up and migrated. Time for us > to sit down, take a look and let us know what's up. Here's the ticket. > There's likely to be lots of non-blocking bugs during this upgrade. We'll > have to find how different things are. > > http://publictest10.fedoraproject.org/wiki/ <-- Wiki > Is this *purely* a test instance or does it write to the production db (if you can call it that ;-) John From paulo.banon at googlemail.com Fri Feb 8 18:36:21 2008 From: paulo.banon at googlemail.com (Paulo Santos) Date: Fri, 8 Feb 2008 18:36:21 +0000 Subject: Moin 1.6 In-Reply-To: <47AC9A28.7040304@redhat.com> References: <47AC9A28.7040304@redhat.com> Message-ID: <7a41c4bc0802081036p37e0566bt880f66a6900132c0@mail.gmail.com> Hi John, This is purely a test instance, to prepare the actual procedure of the live upgrade. Paulo On Feb 8, 2008 6:06 PM, John Poelstra wrote: > Mike McGrath said the following on 02/07/2008 05:22 PM Pacific Time: > > We've successfully gotten a Moin 1.6 install up and migrated. Time for > us > > to sit down, take a look and let us know what's up. Here's the ticket. > > There's likely to be lots of non-blocking bugs during this upgrade. > We'll > > have to find how different things are. > > > > http://publictest10.fedoraproject.org/wiki/ <-- Wiki > > > > Is this *purely* a test instance or does it write to the production db > (if you can call it that ;-) > > John > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > -------------- next part -------------- An HTML attachment was scrubbed... URL: From rordway at oregonstate.edu Fri Feb 8 18:42:31 2008 From: rordway at oregonstate.edu (Ryan Ordway) Date: Fri, 8 Feb 2008 10:42:31 -0800 Subject: Meetings In-Reply-To: References: Message-ID: <91407B74-D129-4E21-9D61-55B070DD8357@oregonstate.edu> On Feb 7, 2008, at 12:42 PM, Mike McGrath wrote: > Welp, the last 2 thursdays were busy enough that I forgot to start > both > meetings. In fairness I don't think anyone really missed it as no one > pinged me to see if we were starting :) > > So I'll ask, is there another time that works for everyone? We can > certainly re-schedule the meeting times. Anyone not like the > current time > slot? > > I think one thing that gets most of us is that during day light > savings, > it changes. It seems most people would prefer it to be about an hour > later right now. I'm on the west coast, so I'm generally at lunch or in after-lunch meetings at that time so I end up missing a lot of meetings. But I try to keep up with the IRC logs. Ryan -- Ryan Ordway E-mail: rordway at oregonstate.edu Unix Systems Administrator rordway at library.oregonstate.edu OSU Libraries, Corvallis, OR 97331 Office: Valley Library #4657 From smooge at gmail.com Fri Feb 8 19:25:47 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Fri, 8 Feb 2008 12:25:47 -0700 Subject: Moin 1.6 In-Reply-To: <7a41c4bc0802081036p37e0566bt880f66a6900132c0@mail.gmail.com> References: <47AC9A28.7040304@redhat.com> <7a41c4bc0802081036p37e0566bt880f66a6900132c0@mail.gmail.com> Message-ID: <80d7e4090802081125g5b05a7aeg7de217ecff386cf@mail.gmail.com> 2008/2/8 Paulo Santos : > Hi John, > > This is purely a test instance, to prepare the actual procedure of the live > upgrade. > > Are the steps that it took to get the step instance into place written somewhere? 1) in case it needs to be done again, and 2) to help others who will be doing similar upgrades in the future. I can try to make them pretty on Saturday if needed. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From mmcgrath at redhat.com Fri Feb 8 19:33:16 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 8 Feb 2008 13:33:16 -0600 (CST) Subject: Moin 2.0 (or as I call it, mediawiki) Message-ID: So I spent some time last night and produced this: https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain It's worth noting that the upgrade from Moin1.5.8 -> Moin 1.6.1 took longer then going from Moin 1.5.8 to the mediawiki install above. There's still some work to be done (especially a theme). But I think the conversion to mediawiki is much closer to us now then ever before if we decide to go this route. So. Question 1, do we want to try this conversion? Question 2, Who is willing to take orders from me with regards to getting a new template done? (by orders I basically just mean do this, this is broken, this header didn't come out, we need a css fix here). Just something functional so it can be presented to the rest of the project and ultimately redesigned for a crisp look and feel? Question 3, I did a brief look, there's a lot of stuff that's broken, mostly tables. Does anyone see anything that came out completely un-recognized? I'm especially referring to the translated pages. This is a very rough conversion, but it did convert, most of the text is there, formatting needs work. I'm still working on the script so send any suggestions / comments my way. -Mike From mmcgrath at redhat.com Fri Feb 8 19:35:11 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 8 Feb 2008 13:35:11 -0600 (CST) Subject: Moin 1.6 In-Reply-To: <80d7e4090802081125g5b05a7aeg7de217ecff386cf@mail.gmail.com> References: <47AC9A28.7040304@redhat.com> <7a41c4bc0802081036p37e0566bt880f66a6900132c0@mail.gmail.com> <80d7e4090802081125g5b05a7aeg7de217ecff386cf@mail.gmail.com> Message-ID: On Fri, 8 Feb 2008, Stephen John Smoogen wrote: > 2008/2/8 Paulo Santos : > > Hi John, > > > > This is purely a test instance, to prepare the actual procedure of the live > > upgrade. > > > > > > Are the steps that it took to get the step instance into place written > somewhere? 1) in case it needs to be done again, and 2) to help others > who will be doing similar upgrades in the future. I can try to make > them pretty on Saturday if needed. > Well, in our case it turned out that we had a lot of bad data in our wiki (its almost 2G of data now) and the upgrade scripts were failing. I needed to basically add a few debugging lines to the moin conversion script and search for the text where each bit failed and fix our data files by hand. I also had to download a meta file that was supposed to exist in our install but, for whatever reason, did not. Other then those steps I just followed the README.migrate that came with the RPM. -Mike From tchung at fedoraproject.org Fri Feb 8 19:47:33 2008 From: tchung at fedoraproject.org (Thomas Chung) Date: Fri, 8 Feb 2008 11:47:33 -0800 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: Message-ID: <369bce3b0802081147n25609724weec55060ba5abdff@mail.gmail.com> On Feb 8, 2008 11:33 AM, Mike McGrath wrote: > So I spent some time last night and produced this: > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > It's worth noting that the upgrade from Moin1.5.8 -> Moin 1.6.1 took > longer then going from Moin 1.5.8 to the mediawiki install above. There's > still some work to be done (especially a theme). But I think the > conversion to mediawiki is much closer to us now then ever before if we > decide to go this route. > > So. > > Question 1, do we want to try this conversion? > > Question 2, Who is willing to take orders from me with regards to getting > a new template done? (by orders I basically just mean do this, this is > broken, this header didn't come out, we need a css fix here). Just > something functional so it can be presented to the rest of the project and > ultimately redesigned for a crisp look and feel? > > Question 3, I did a brief look, there's a lot of stuff that's broken, > mostly tables. Does anyone see anything that came out completely > un-recognized? I'm especially referring to the translated pages. > > This is a very rough conversion, but it did convert, most of the text is > there, formatting needs work. I'm still working on the script so send any > suggestions / comments my way. > > -Mike Here is my two cents for Moin vs MediaWiki. I don't mind migration to MediaWiki since I'm alread familar with it. However, MediaWiki requires MySQL database so it's a bit complex than Moin. I'm currently in the process of migration fedoranews.org to new server and encounting some issues with exporting and importing database. Anyway, that's my two cents. :) Regards, -- Thomas Chung http://fedoraproject.org/wiki/ThomasChung From poelstra at redhat.com Fri Feb 8 20:04:36 2008 From: poelstra at redhat.com (John Poelstra) Date: Fri, 08 Feb 2008 12:04:36 -0800 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: Message-ID: <47ACB5D4.8080204@redhat.com> Mike McGrath said the following on 02/08/2008 11:33 AM Pacific Time: > So I spent some time last night and produced this: > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > It's worth noting that the upgrade from Moin1.5.8 -> Moin 1.6.1 took > longer then going from Moin 1.5.8 to the mediawiki install above. There's > still some work to be done (especially a theme). But I think the > conversion to mediawiki is much closer to us now then ever before if we > decide to go this route. > > So. > > Question 1, do we want to try this conversion? YES!!! > Question 2, Who is willing to take orders from me with regards to getting > a new template done? (by orders I basically just mean do this, this is > broken, this header didn't come out, we need a css fix here). Just > something functional so it can be presented to the rest of the project and > ultimately redesigned for a crisp look and feel? > > Question 3, I did a brief look, there's a lot of stuff that's broken, > mostly tables. Does anyone see anything that came out completely > un-recognized? I'm especially referring to the translated pages. Is it possible to login? I tried with my existing wiki and FAS user/passwd, but it didn't work. Trying to edit a page (w/o being able to login) gave me this error message: ~~~~~~~~~~~~~~~~~~~~~~~~~~ No such section From FedoraProject Jump to: navigation, search You tried to edit a section that doesn't exist. Since there is no section 3, there's no place to save your edit. Return to Main Page. ~~~~~~~~~~~~~~~~~ From mmcgrath at redhat.com Fri Feb 8 20:55:28 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 8 Feb 2008 14:55:28 -0600 (CST) Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: <47ACB5D4.8080204@redhat.com> References: <47ACB5D4.8080204@redhat.com> Message-ID: On Fri, 8 Feb 2008, John Poelstra wrote: > Mike McGrath said the following on 02/08/2008 11:33 AM Pacific Time: > > So I spent some time last night and produced this: > > > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > > > It's worth noting that the upgrade from Moin1.5.8 -> Moin 1.6.1 took > > longer then going from Moin 1.5.8 to the mediawiki install above. There's > > still some work to be done (especially a theme). But I think the > > conversion to mediawiki is much closer to us now then ever before if we > > decide to go this route. > > > > So. > > > > Question 1, do we want to try this conversion? > > YES!!! > > > Question 2, Who is willing to take orders from me with regards to getting > > a new template done? (by orders I basically just mean do this, this is > > broken, this header didn't come out, we need a css fix here). Just > > something functional so it can be presented to the rest of the project and > > ultimately redesigned for a crisp look and feel? > > > > Question 3, I did a brief look, there's a lot of stuff that's broken, > > mostly tables. Does anyone see anything that came out completely > > un-recognized? I'm especially referring to the translated pages. > > Is it possible to login? I tried with my existing wiki and FAS user/passwd, > but it didn't work. > > Trying to edit a page (w/o being able to login) gave me this error message: There are options here, right now no tie-in exists though I'd like to have no users in the wiki at all and make everyone use FAS. This is much more feasible with mediawiki then with moin. -Mike From jonstanley at gmail.com Fri Feb 8 21:33:29 2008 From: jonstanley at gmail.com (Jon Stanley) Date: Fri, 8 Feb 2008 16:33:29 -0500 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: <47ACB5D4.8080204@redhat.com> Message-ID: On Feb 8, 2008 3:55 PM, Mike McGrath wrote: > There are options here, right now no tie-in exists though I'd like to have > no users in the wiki at all and make everyone use FAS. This is much more > feasible with mediawiki then with moin. +100 for mediawiki then :) Another one that I really like that we use internally at work (not free as in speech or beer, though :( ) is Atlassian Confluence. They've done great work, but they're greedy :( From mmcgrath at redhat.com Fri Feb 8 21:36:43 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 8 Feb 2008 15:36:43 -0600 (CST) Subject: mod_security Message-ID: We've got a mod_security deployment going on, from the start we're only going to be targeting specific paths. Please keep your eyes out for anything strange. First up, is the wiki. -Mike From skvidal at fedoraproject.org Fri Feb 8 21:39:13 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Fri, 08 Feb 2008 16:39:13 -0500 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: <47ACB5D4.8080204@redhat.com> Message-ID: <1202506754.2593.78.camel@cutter> On Fri, 2008-02-08 at 16:33 -0500, Jon Stanley wrote: > On Feb 8, 2008 3:55 PM, Mike McGrath wrote: > > > There are options here, right now no tie-in exists though I'd like to have > > no users in the wiki at all and make everyone use FAS. This is much more > > feasible with mediawiki then with moin. > > +100 for mediawiki then :) > > Another one that I really like that we use internally at work (not > free as in speech or beer, though :( ) is Atlassian Confluence. > They've done great work, but they're greedy :( Closed source software is, of course, a non-starter in fedora. And my personal experience with confluence was that it does not scale well at all. -sv -- I only speak for me. From jerome.benoit at grenouille.com Sat Feb 9 15:17:55 2008 From: jerome.benoit at grenouille.com (Jerome Benoit) Date: Sat, 9 Feb 2008 16:17:55 +0100 Subject: Self introduction Message-ID: <20080209161755.c42c19f2.jerome.benoit@grenouille.com> Hello, I'm a french sys admin willing to help managing the fedoraproject infrastructure. So far i have not yet an account on FAS but it's on my TODO list :) I've worked for a long time under different flavors of *nix but but CV in currently in french only. I'm going to translate it, so people on this list wil be able to know exactly my skills, it's also on my TODO list :) Cheers. a +. -- J?r?me Benoit aka fraggle La M?t?o du Net - http://grenouille.com OpenPGP Key ID : 9FE9161D Key fingerprint : 9CA4 0249 AF57 A35B 34B3 AC15 FAA0 CB50 9FE9 161D -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From mmcgrath at redhat.com Sat Feb 9 16:57:58 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Sat, 9 Feb 2008 10:57:58 -0600 (CST) Subject: Self introduction In-Reply-To: <20080209161755.c42c19f2.jerome.benoit@grenouille.com> References: <20080209161755.c42c19f2.jerome.benoit@grenouille.com> Message-ID: On Sat, 9 Feb 2008, Jerome Benoit wrote: > Hello, > > I'm a french sys admin willing to help managing the fedoraproject > infrastructure. So far i have not yet an account on FAS but it's on my > TODO list :) > > I've worked for a long time under different flavors of *nix but but CV > in currently in french only. I'm going to translate it, so people on > this list wil be able to know exactly my skills, it's also on my TODO > list :) > Welcome, it would be nice to have more people on your side of the world get involved in Fedora, when you get your FAS set up let us know, in the meantime participate on the list and, if possible, come to our meetings: http://fedoraproject.org/wiki/Infrastructure/Meetings -Mike From rhanna at informatiq.org Fri Feb 8 22:17:40 2008 From: rhanna at informatiq.org (ramez hanna) Date: Sat, 09 Feb 2008 00:17:40 +0200 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: <1202506754.2593.78.camel@cutter> References: <47ACB5D4.8080204@redhat.com> <1202506754.2593.78.camel@cutter> Message-ID: <1202509060.11106.10.camel@localhost.localdomain> On Fri, 2008-02-08 at 16:39 -0500, seth vidal wrote: > On Fri, 2008-02-08 at 16:33 -0500, Jon Stanley wrote: > > On Feb 8, 2008 3:55 PM, Mike McGrath wrote: > > > > > There are options here, right now no tie-in exists though I'd like to have > > > no users in the wiki at all and make everyone use FAS. This is much more > > > feasible with mediawiki then with moin. > > > > +100 for mediawiki then :) > > > > Another one that I really like that we use internally at work (not > > free as in speech or beer, though :( ) is Atlassian Confluence. > > They've done great work, but they're greedy :( > > Closed source software is, of course, a non-starter in fedora. > > And my personal experience with confluence was that it does not scale > well at all. > > -sv > and very resource hungry -- ramez hanna -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From jerome.benoit at grenouille.com Sat Feb 9 19:10:38 2008 From: jerome.benoit at grenouille.com (Jerome Benoit) Date: Sat, 9 Feb 2008 20:10:38 +0100 Subject: Self introduction In-Reply-To: References: <20080209161755.c42c19f2.jerome.benoit@grenouille.com> Message-ID: <20080209201038.aa43ae5e.jerome.benoit@grenouille.com> Le Sat, 9 Feb 2008 10:57:58 -0600 (CST), Mike McGrath a ?crit : > Welcome, it would be nice to have more people on your side of the > world get involved in Fedora, when you get your FAS set up let us > know, in the meantime participate on the list Participating on the list will not be a problem. > and, if possible, come to our meetings: > > http://fedoraproject.org/wiki/Infrastructure/Meetings Participating to IRC meeting will be more difficult ... depending on the customer i'm working for mainly. In the maintime, for the french speaking person on the list, they can read : http://wiki.grenouille.com/index.php/Utilisateur:Fraggle http://fr.lolix.org/search/cv/cv.php3?id=116 Thks for hospitality ;-) Cheers. -- J?r?me Benoit aka fraggle La M?t?o du Net - http://grenouille.com OpenPGP Key ID : 9FE9161D Key fingerprint : 9CA4 0249 AF57 A35B 34B3 AC15 FAA0 CB50 9FE9 161D -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From rhanna at informatiq.org Sat Feb 9 19:07:30 2008 From: rhanna at informatiq.org (ramez hanna) Date: Sat, 09 Feb 2008 21:07:30 +0200 Subject: join a FIG Message-ID: <1202584050.11106.16.camel@localhost.localdomain> Hi guys, it's been some time now that i am on the list and i would like to step in and take on some tasks but i'm not in any fig so far how do i proceed from here? -- Ramez Hanna informatiq.org GPG Key 38A7 33A4 B5F6 840E A656 9010 57DF 4FF2 833F 051B -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From mmcgrath at redhat.com Sat Feb 9 19:19:26 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Sat, 9 Feb 2008 13:19:26 -0600 (CST) Subject: join a FIG In-Reply-To: <1202584050.11106.16.camel@localhost.localdomain> References: <1202584050.11106.16.camel@localhost.localdomain> Message-ID: On Sat, 9 Feb 2008, ramez hanna wrote: > Hi guys, > > it's been some time now that i am on the list and i would like to step > in and take on some tasks > but i'm not in any fig so far > how do i proceed from here? > you need to find a fig you want to be a part of and convince a sponsor to sponsor you. -Mike From linux at elfshadow.net Sun Feb 10 20:28:56 2008 From: linux at elfshadow.net (Jeffrey Tadlock) Date: Sun, 10 Feb 2008 15:28:56 -0500 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: <47ACB5D4.8080204@redhat.com> Message-ID: <10e0a9b00802101228o45b2236eha1c0316e4645459c@mail.gmail.com> On Feb 8, 2008 3:55 PM, Mike McGrath wrote: > There are options here, right now no tie-in exists though I'd like to have > no users in the wiki at all and make everyone use FAS. This is much more > feasible with mediawiki then with moin. I have not used it, but moin does appear to have an option to use LDAP on the backend. http://moinmo.in/HelpOnAuthentication/LDAP If the a move to mediawiki is not agreed on or is determined to be too disruptive to the community in general, the above may be an option. --Jeffrey From opensource at till.name Sun Feb 10 21:10:12 2008 From: opensource at till.name (Till Maas) Date: Sun, 10 Feb 2008 22:10:12 +0100 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: <10e0a9b00802101228o45b2236eha1c0316e4645459c@mail.gmail.com> References: <10e0a9b00802101228o45b2236eha1c0316e4645459c@mail.gmail.com> Message-ID: <200802102210.26839.opensource@till.name> On Sun February 10 2008, Jeffrey Tadlock wrote: > On Feb 8, 2008 3:55 PM, Mike McGrath wrote: > > There are options here, right now no tie-in exists though I'd like to > > have no users in the wiki at all and make everyone use FAS. This is much > > more feasible with mediawiki then with moin. > > I have not used it, but moin does appear to have an option to use LDAP > on the backend. > > http://moinmo.in/HelpOnAuthentication/LDAP > > If the a move to mediawiki is not agreed on or is determined to be too > disruptive to the community in general, the above may be an option. Both wikis also support SSL client certificate authentication, which should be supported by FAS, because koji already uses it. This would also secure the wiki against attacks that target the moin authentication cookie, because then no cookie would be used. Regards, Till -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 827 bytes Desc: This is a digitally signed message part. URL: From a.badger at gmail.com Tue Feb 12 02:27:48 2008 From: a.badger at gmail.com (Toshio Kuratomi) Date: Mon, 11 Feb 2008 18:27:48 -0800 Subject: TurboGears-1.0.4/SQLAlchemy-0.4 upgrade Message-ID: <47B10424.6000706@gmail.com> Hello TurboGears application developers, We would like to upgrade the version of Turbogears and SQLAlchemy present on the Fedora Infrastructure app servers in the near future. There are a few details that make this an update that I would like to have people test heavily but overall it should be an easy upgrade for most people. Details: TurboGears 1.0.4 is an update that retains TG-1.0.x compatibility. We don't anticipate any problems with this portion. SQLAlchemy 0.4 is an incompatible update to SA-0.3.x. TurboGears-1.0.4 includes changes to allow us to use it with minimal porting. Most Fedora Web apps are using SQLObject so they shouldn't be affected by this update. python-fedora's tgfas, pkgdb, and smolt use SQLAlchemy. loupgaroublond has already ported smolt so porting tgfas and pkgdb should be all that is needed to enable this. I'll be testing ports of both of those this week. If anyone has another web app that should be accounted for by this update, please *holler loudly*. The two issues I anticipate: 1) FC6 is EOL but app3 is still FC6. I've had success using EPEL-5 packages on FC6/app3 for a few packages in the past but this could be a bit more involved as TurboGears has a lot of dependencies. Unless we can plan on obsoleting app3 before we upgrade we'll need to do some testing on publictest1 as well as publictest10 to be sure that the TG package and dependencies work on FC6. 2) Because python-fedora has to be ported to the new SA API I also want to update the code to use the latest TurboGears conventions. This will allow us to simplify the TG-Auth code quite a bit (I'll be able to get rid of about half of our code in favor of code that's carried in TG proper). However, there is the risk that some of the bugs that we fixed when creating our code will be reintroduced because of this. I'm thinking especially about the session bug where people would hit the login page and then not be logged in or hit the logout page but not be logged out. Since that bug was hard to reproduce reliably, I'll need other people to help test this. I'm getting the new python-fedora working on publictest10 right now and will be installing and testing the new stack on publictest1 soon (probably tomorrow.) I'll send a note for people to beat on it while I port over the packagedb. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature URL: From mmcgrath at redhat.com Tue Feb 12 05:06:37 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 11 Feb 2008 23:06:37 -0600 (CST) Subject: TurboGears-1.0.4/SQLAlchemy-0.4 upgrade In-Reply-To: <47B10424.6000706@gmail.com> References: <47B10424.6000706@gmail.com> Message-ID: On Mon, 11 Feb 2008, Toshio Kuratomi wrote: > Hello TurboGears application developers, > > We would like to upgrade the version of Turbogears and SQLAlchemy present on > the Fedora Infrastructure app servers in the near future. > > There are a few details that make this an update that I would like to have > people test heavily but overall it should be an easy upgrade for most people. > Details: > > TurboGears 1.0.4 is an update that retains TG-1.0.x compatibility. We don't > anticipate any problems with this portion. > > SQLAlchemy 0.4 is an incompatible update to SA-0.3.x. TurboGears-1.0.4 > includes changes to allow us to use it with minimal porting. Most Fedora Web > apps are using SQLObject so they shouldn't be affected by this update. > python-fedora's tgfas, pkgdb, and smolt use SQLAlchemy. loupgaroublond has > already ported smolt so porting tgfas and pkgdb should be all that is needed > to enable this. I'll be testing ports of both of those this week. > > If anyone has another web app that should be accounted for by this update, > please *holler loudly*. > > The two issues I anticipate: > 1) FC6 is EOL but app3 is still FC6. I've had success using EPEL-5 packages > on FC6/app3 for a few packages in the past but this could be a bit more > involved as TurboGears has a lot of dependencies. Unless we can plan on > obsoleting app3 before we upgrade we'll need to do some testing on publictest1 > as well as publictest10 to be sure that the TG package and dependencies work > on FC6. This is blocking on getting the transifex deps into EPEL. At this point I think we should stick them in infrastructure repo, some of the package owners have been contacted and been slow to respond I've added it to my list of things to do this week, hopefully we'll get transifex running on other boxes soon. Toshio, thanks for doing all of this. -Mike From stickster at gmail.com Tue Feb 12 05:17:56 2008 From: stickster at gmail.com (Paul W. Frields) Date: Tue, 12 Feb 2008 00:17:56 -0500 Subject: Dial-in Message-ID: <1202793476.3550.90.camel@localhost.localdomain> The Board would like to set up a "town hall" style meeting for our first meeting in March, if possible. (The timeline is not strict, but I'd like to be able to start telling the community our actual timeline very soon.) We'd like to support call-ins so people can hear the Board's meeting publicly. I have no idea how many people would actually show up to listen, but let's assume it's in the 50-100 range, and maybe we're nearly right. Can we support this with our current Asterisk setup in Fedora? -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From mikem at redhat.com Tue Feb 12 05:35:28 2008 From: mikem at redhat.com (Mike McLean) Date: Tue, 12 Feb 2008 00:35:28 -0500 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: Message-ID: <47B13020.10708@redhat.com> Mike McGrath wrote: > So I spent some time last night and produced this: > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain Are the mediawiki access controls sufficient for our needs? iirc they are pretty limited compared to moin's, but I'm not sure to what extent we're using them. From loupgaroublond at gmail.com Tue Feb 12 05:54:58 2008 From: loupgaroublond at gmail.com (Yaakov Nemoy) Date: Tue, 12 Feb 2008 00:54:58 -0500 Subject: TurboGears-1.0.4/SQLAlchemy-0.4 upgrade In-Reply-To: <47B10424.6000706@gmail.com> References: <47B10424.6000706@gmail.com> Message-ID: <7f692fec0802112154o67ae16f9se713a4d6031f5812@mail.gmail.com> 2008/2/11 Toshio Kuratomi : > Hello TurboGears application developers, > > We would like to upgrade the version of Turbogears and SQLAlchemy > present on the Fedora Infrastructure app servers in the near future. > > There are a few details that make this an update that I would like to > have people test heavily but overall it should be an easy upgrade for > most people. Details: > > TurboGears 1.0.4 is an update that retains TG-1.0.x compatibility. We > don't anticipate any problems with this portion. > > SQLAlchemy 0.4 is an incompatible update to SA-0.3.x. TurboGears-1.0.4 > includes changes to allow us to use it with minimal porting. Most > Fedora Web apps are using SQLObject so they shouldn't be affected by > this update. python-fedora's tgfas, pkgdb, and smolt use SQLAlchemy. > loupgaroublond has already ported smolt so porting tgfas and pkgdb > should be all that is needed to enable this. I'll be testing ports of > both of those this week. Smolt should still work on SQLAlchemy 0.3, maybe with some very minor changes. +1 for upgrading applications, as the new SA is very slick, and TurboGears takes full advantage of this (like session creation strategies that can be customized at a TurboGears level, so they can be very intelligent about user sessions, or user threads, etc....). Even so, there's no rush if we don't need to. -Yaakov From jeff at ocjtech.us Tue Feb 12 05:53:44 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Mon, 11 Feb 2008 23:53:44 -0600 Subject: Dial-in In-Reply-To: <1202793476.3550.90.camel@localhost.localdomain> References: <1202793476.3550.90.camel@localhost.localdomain> Message-ID: <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> On 2/11/08, Paul W. Frields wrote: > The Board would like to set up a "town hall" style meeting for our first > meeting in March, if possible. (The timeline is not strict, but I'd > like to be able to start telling the community our actual timeline very > soon.) We'd like to support call-ins so people can hear the Board's > meeting publicly. I have no idea how many people would actually show up > to listen, but let's assume it's in the 50-100 range, and maybe we're > nearly right. > > Can we support this with our current Asterisk setup in Fedora? I've been thinking about this a bit and I'm not sure if "pure" Asterisk is the right tool for this. The Asterisk conferencing just isn't very efficient for handling a few talkers and many listeners, plus Asterisk doesn't always scale well. What I see is something like this: 1) Board members use a SIP client to dial into an Asterisk conference call. We'll need to make sure that board members have a properly configured SIP client as well as a decent microphone/headset (built-in mics on laptops need not apply). 2) Audio from the conference call is fed to a Flumotion (GPL and already in Fedora) streaming server where the general public can listen in. Totem (and plenty of other F/OSS apps in Fedora) should be able to stream the audio from the Flumotion server directly. For those who need to use another OS to listen in we could use Fluendo's Cortado Java applet (GPL but not yet in Fedora AFAICS). The key is figuring out how to get the audio from the Asterisk conference to the Flumotion server, but I'm sure that the Fluendo folks would be willing to lend a hand on the details. Jeff From yatiohi at ideopolis.gr Tue Feb 12 12:03:46 2008 From: yatiohi at ideopolis.gr (=?ISO-8859-7?Q?Christos_=D4rochalakis?=) Date: Tue, 12 Feb 2008 14:03:46 +0200 Subject: Fwd: fedora-web, live and git Message-ID: Hello there, I saw the other day ivazquez's blog post[0] and a "make push"[1] addition by ricky concerning git handling of the fedora-web repo. They both use rebase before pushing. Our scenario -correct me if I'm wrong- is that we want to mark as live a specific commit in the master development history. live master ---a----b----c---d git-rebase is to "forward-port *local* commits to the updated upstream head" (git help rebase). Since there are not any local commits to be rebased in our tree it might make more sense to use git merge instead. A little example usecase, we want to do some fedora-web development: git co master git commit -m 'foo' git commit -m 'bar' 'bar' commit adds some experimental stuff, we dont want it to be in our web servers. On the other hand 'foo' is ready to go live. We just have to merge it into our live branch: $git co live (go to live branch) $git merge master~1 (merge master~1 into current branch) At this point the history looks like this: live master ---a----b----c---d----foo-----bar $git push (push both master and live to the central repo) $git co master (return to master to continue developing) ps: "merge" word can be confusing. In our scenario git merge doesn't produce a merge commit since "live" shares the same devel line with master (what we do is a fast-forward merge). [0] http://ivazquez.livejournal.com/5178.html [1] http://tinyurl.com/3xfwav From jlaska at redhat.com Tue Feb 12 13:35:50 2008 From: jlaska at redhat.com (James Laska) Date: Tue, 12 Feb 2008 08:35:50 -0500 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: Message-ID: <47B1A0B6.9030704@redhat.com> Mike McGrath wrote: > So I spent some time last night and produced this: > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain My apologies ... I'm not tremendously familiar yet with mediawiki editing yet. Is similar Macro functionality available (e.g. Include())? I recall quaid indicating this in the past, but export as docbook is available? Thanks, James -- ========================================== James Laska -- jlaska at redhat.com Quality Engineering -- Red Hat, Inc. ========================================== From jeff at ocjtech.us Tue Feb 12 14:18:20 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 12 Feb 2008 08:18:20 -0600 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: <47B1A0B6.9030704@redhat.com> References: <47B1A0B6.9030704@redhat.com> Message-ID: <935ead450802120618x644ee36ase3fe5b0eab6cb707@mail.gmail.com> On 2/12/08, James Laska wrote: > Mike McGrath wrote: > > So I spent some time last night and produced this: > > > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > My apologies ... I'm not tremendously familiar yet with mediawiki > editing yet. Is similar Macro functionality available (e.g. Include())? Yes: http://meta.wikimedia.org/wiki/Help:Advanced_editing#Including_another_page.E2.80.94transclusion_and_templates It's also very easy to create your own plugins - I've done several small ones for an internal wiki. > I recall quaid indicating this in the past, but export as docbook is > available? >From what I can tell the state of exporting docbook from MediaWiki isn't very good. Perhaps that would make a good GSoC for someone. I don't know if we'd want to run two wikis, but what about using DocBookWiki for editing the docs? http://doc-book.sourceforge.net/homepage/ Jeff From stickster at gmail.com Tue Feb 12 14:31:55 2008 From: stickster at gmail.com (Paul W. Frields) Date: Tue, 12 Feb 2008 09:31:55 -0500 Subject: Dial-in In-Reply-To: <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> References: <1202793476.3550.90.camel@localhost.localdomain> <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> Message-ID: <1202826715.10896.9.camel@localhost.localdomain> On Mon, 2008-02-11 at 23:53 -0600, Jeffrey Ollie wrote: > On 2/11/08, Paul W. Frields wrote: > > The Board would like to set up a "town hall" style meeting for our first > > meeting in March, if possible. (The timeline is not strict, but I'd > > like to be able to start telling the community our actual timeline very > > soon.) We'd like to support call-ins so people can hear the Board's > > meeting publicly. I have no idea how many people would actually show up > > to listen, but let's assume it's in the 50-100 range, and maybe we're > > nearly right. > > > > Can we support this with our current Asterisk setup in Fedora? > > I've been thinking about this a bit and I'm not sure if "pure" > Asterisk is the right tool for this. The Asterisk conferencing just > isn't very efficient for handling a few talkers and many listeners, > plus Asterisk doesn't always scale well. What I see is something like > this: > > 1) Board members use a SIP client to dial into an Asterisk conference > call. We'll need to make sure that board members have a properly > configured SIP client as well as a decent microphone/headset (built-in > mics on laptops need not apply). > > 2) Audio from the conference call is fed to a Flumotion (GPL and > already in Fedora) streaming server where the general public can > listen in. Totem (and plenty of other F/OSS apps in Fedora) should be > able to stream the audio from the Flumotion server directly. For > those who need to use another OS to listen in we could use Fluendo's > Cortado Java applet (GPL but not yet in Fedora AFAICS). > > The key is figuring out how to get the audio from the Asterisk > conference to the Flumotion server, but I'm sure that the Fluendo > folks would be willing to lend a hand on the details. If we could stream to Ogg Vorbis, that would be superb. I'm not hung up on Asterisk as an app, just want to make audio available real-time to listeners so they can see what happens in a typical Board meeting. -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From mmcgrath at redhat.com Tue Feb 12 14:33:46 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 12 Feb 2008 08:33:46 -0600 (CST) Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: <47B13020.10708@redhat.com> References: <47B13020.10708@redhat.com> Message-ID: On Tue, 12 Feb 2008, Mike McLean wrote: > Mike McGrath wrote: > > So I spent some time last night and produced this: > > > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > Are the mediawiki access controls sufficient for our needs? iirc they are > pretty limited compared to moin's, but I'm not sure to what extent we're using > them. > That is an area we will see a change. There is an acl framework I've got setup on the test wiki. Moins is more self-service then mediawiki's for sure. I'm trying to figure out how to make it more self service then it is but I think even at its current state it will suit our needs by making some pages read-only for people and making others non-public. I guess it serves us right for doing such things to a "wiki". -Mike From jeff at ocjtech.us Tue Feb 12 14:42:17 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 12 Feb 2008 08:42:17 -0600 Subject: Dial-in In-Reply-To: <1202826715.10896.9.camel@localhost.localdomain> References: <1202793476.3550.90.camel@localhost.localdomain> <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> <1202826715.10896.9.camel@localhost.localdomain> Message-ID: <935ead450802120642j24fb9961g275bea392c122d34@mail.gmail.com> On 2/12/08, Paul W. Frields wrote: > > If we could stream to Ogg Vorbis, that would be superb. I'm not hung up > on Asterisk as an app, just want to make audio available real-time to > listeners so they can see what happens in a typical Board meeting. After writing the message last night I dug a bit more into the details of hooking up Asterisk and Flumotion and I definitely think that it'll be possible. I think that combining Asterisk and Flumotion give us the best of both worlds - use Asterisk to bring together the board members and to mix the audio, and use Flumotion to create a scalable audio streaming solution to get the audio out to the general public. Having a Flumotion server set up would be good for streaming things like FUDCon too. Jeff From vpivaini at cs.helsinki.fi Tue Feb 12 14:52:40 2008 From: vpivaini at cs.helsinki.fi (Ville-Pekka Vainio) Date: Tue, 12 Feb 2008 16:52:40 +0200 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: <935ead450802120618x644ee36ase3fe5b0eab6cb707@mail.gmail.com> References: <47B1A0B6.9030704@redhat.com> <935ead450802120618x644ee36ase3fe5b0eab6cb707@mail.gmail.com> Message-ID: <200802121652.40614.vpivaini@cs.helsinki.fi> Jeffrey Ollie wrote: >From what I can tell the state of exporting docbook from MediaWiki > isn't very good. Perhaps that would make a good GSoC for someone. I > don't know if we'd want to run two wikis, but what about using > DocBookWiki for editing the docs? > > http://doc-book.sourceforge.net/homepage/ Will the Docs Project need the wiki for writing documentation if we will soon have the new Docs platform that DaMaestro is working on? If they still will, then there's one thing to take into account: Fedora already had a GSoC project which improved Moin's DocBook exporting support . We haven't been very successful in getting our code into upstream and in this case they would want a maintainer for that code as well before merging it. Nobody has stepped up to do it, but still migrating to MediaWiki might cause us losing the work of one GSoC project and having to set up another doing basically a lot of the same work on a different platform. (I'm not saying we absolutely shouldn't migrate to MediaWiki - and the decision isn't mine to make anyway - but I just wanted to mention this as it came up in the discussion.) -- Ville-Pekka Vainio From jonstanley at gmail.com Tue Feb 12 15:01:11 2008 From: jonstanley at gmail.com (Jon Stanley) Date: Tue, 12 Feb 2008 10:01:11 -0500 Subject: Dial-in In-Reply-To: <935ead450802120642j24fb9961g275bea392c122d34@mail.gmail.com> References: <1202793476.3550.90.camel@localhost.localdomain> <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> <1202826715.10896.9.camel@localhost.localdomain> <935ead450802120642j24fb9961g275bea392c122d34@mail.gmail.com> Message-ID: On Feb 12, 2008 9:42 AM, Jeffrey Ollie wrote: > After writing the message last night I dug a bit more into the details > of hooking up Asterisk and Flumotion and I definitely think that it'll > be possible. I think that combining Asterisk and Flumotion give us the > best of both worlds - use Asterisk to bring together the board members This sort of eliminates the possibility of a "town hall" type meeting though (which I thought was the whole point), where there's interaction between the Board and the community Unless questions are accepted via IRC, for instance....but you still lose the verbal interaction. May or may not be a big deal. From jeff at ocjtech.us Tue Feb 12 15:33:02 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 12 Feb 2008 09:33:02 -0600 Subject: Dial-in In-Reply-To: References: <1202793476.3550.90.camel@localhost.localdomain> <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> <1202826715.10896.9.camel@localhost.localdomain> <935ead450802120642j24fb9961g275bea392c122d34@mail.gmail.com> Message-ID: <935ead450802120733r440099ces76e49c5ef46c5c4d@mail.gmail.com> On 2/12/08, Jon Stanley wrote: > On Feb 12, 2008 9:42 AM, Jeffrey Ollie wrote: > > > After writing the message last night I dug a bit more into the details > > of hooking up Asterisk and Flumotion and I definitely think that it'll > > be possible. I think that combining Asterisk and Flumotion give us the > > best of both worlds - use Asterisk to bring together the board members > > This sort of eliminates the possibility of a "town hall" type meeting > though (which I thought was the whole point), where there's > interaction between the Board and the community > > Unless questions are accepted via IRC, for instance....but you still > lose the verbal interaction. May or may not be a big deal. Having tens or hundreds of people in an Asterisk conference call would not be feasible I think. The management interface for the conferencing isn't great so it'd be difficult to moderate who has the floor, etc. I'd have to look at the code to be sure, but I'm not sure if the mixing code optimizes out silent frames, and getting various SIP clients to stop transmitting frame is problematic because many NAT implementations need the two-way RTP flow to keep the ports open - Asterisk has RTP timeouts as well. If some sort of verbal interaction was desired I think that you'd need to conduct the meeting more like I've seen various school board and city council meetings conducted. All members of the board would be connected via a SIP client and would have full-duplex audio. Members of the general public would be able to listen in on the audio streaming site. If someone had something to present or a question to ask would need to request the floor, probably though a IRC channel. Once granted permission by the chair of the meeting, you'd be sent a private SIP URL to connect to which would give you access to the conference call. Once your turn at the "microphone" was over the SIP URL would be disabled. Yes, this does limit somewhat a more free-flowing discussion, but it also keeps chaos at bay. Jeff From stickster at gmail.com Tue Feb 12 18:47:57 2008 From: stickster at gmail.com (Paul W. Frields) Date: Tue, 12 Feb 2008 13:47:57 -0500 Subject: Dial-in In-Reply-To: <935ead450802120733r440099ces76e49c5ef46c5c4d@mail.gmail.com> References: <1202793476.3550.90.camel@localhost.localdomain> <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> <1202826715.10896.9.camel@localhost.localdomain> <935ead450802120642j24fb9961g275bea392c122d34@mail.gmail.com> <935ead450802120733r440099ces76e49c5ef46c5c4d@mail.gmail.com> Message-ID: <1202842077.10896.140.camel@localhost.localdomain> On Tue, 2008-02-12 at 09:33 -0600, Jeffrey Ollie wrote: > On 2/12/08, Jon Stanley wrote: > > On Feb 12, 2008 9:42 AM, Jeffrey Ollie wrote: > > > > > After writing the message last night I dug a bit more into the details > > > of hooking up Asterisk and Flumotion and I definitely think that it'll > > > be possible. I think that combining Asterisk and Flumotion give us the > > > best of both worlds - use Asterisk to bring together the board members > > > > This sort of eliminates the possibility of a "town hall" type meeting > > though (which I thought was the whole point), where there's > > interaction between the Board and the community > > > > Unless questions are accepted via IRC, for instance....but you still > > lose the verbal interaction. May or may not be a big deal. > > Having tens or hundreds of people in an Asterisk conference call would > not be feasible I think. The management interface for the > conferencing isn't great so it'd be difficult to moderate who has the > floor, etc. I'd have to look at the code to be sure, but I'm not sure > if the mixing code optimizes out silent frames, and getting various > SIP clients to stop transmitting frame is problematic because many NAT > implementations need the two-way RTP flow to keep the ports open - > Asterisk has RTP timeouts as well. > > If some sort of verbal interaction was desired I think that you'd need > to conduct the meeting more like I've seen various school board and > city council meetings conducted. All members of the board would be > connected via a SIP client and would have full-duplex audio. Members > of the general public would be able to listen in on the audio > streaming site. If someone had something to present or a question to > ask would need to request the floor, probably though a IRC channel. > Once granted permission by the chair of the meeting, you'd be sent a > private SIP URL to connect to which would give you access to the > conference call. Once your turn at the "microphone" was over the SIP > URL would be disabled. > > Yes, this does limit somewhat a more free-flowing discussion, but it > also keeps chaos at bay. CC:ing f-a-b since this relates to its readers as well. This sounds like a workable solution if we want call-in questions -- do we have the technical bits to support it? -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From jeff at ocjtech.us Tue Feb 12 19:07:24 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 12 Feb 2008 13:07:24 -0600 Subject: Dial-in In-Reply-To: <1202842077.10896.140.camel@localhost.localdomain> References: <1202793476.3550.90.camel@localhost.localdomain> <935ead450802112153x66728ccehbac5ce67d03b822f@mail.gmail.com> <1202826715.10896.9.camel@localhost.localdomain> <935ead450802120642j24fb9961g275bea392c122d34@mail.gmail.com> <935ead450802120733r440099ces76e49c5ef46c5c4d@mail.gmail.com> <1202842077.10896.140.camel@localhost.localdomain> Message-ID: <935ead450802121107lf98db49q758fd5819cf7c539@mail.gmail.com> On 2/12/08, Paul W. Frields wrote: > On Tue, 2008-02-12 at 09:33 -0600, Jeffrey Ollie wrote: > > > > If some sort of verbal interaction was desired I think that you'd need > > to conduct the meeting more like I've seen various school board and > > city council meetings conducted. All members of the board would be > > connected via a SIP client and would have full-duplex audio. Members > > of the general public would be able to listen in on the audio > > streaming site. If someone had something to present or a question to > > ask would need to request the floor, probably though a IRC channel. > > Once granted permission by the chair of the meeting, you'd be sent a > > private SIP URL to connect to which would give you access to the > > conference call. Once your turn at the "microphone" was over the SIP > > URL would be disabled. > > > > Yes, this does limit somewhat a more free-flowing discussion, but it > > also keeps chaos at bay. > > CC:ing f-a-b since this relates to its readers as well. > > This sounds like a workable solution if we want call-in questions -- do > we have the technical bits to support it? Well, we already have an Asterisk server up and running, and it's easy enough to control access to a conference room through authenticated SIP connections. I'm working on setting up Flumotion on the Asterisk box and getting the audio flowing (although having the Flumotion server on the Asterisk box may or may not be the best final location). There are a number of SIP clients in Fedora that seem to work well for people. The scripts for creating/deleting private SIP URLs to allow guests to speak to the board will need to be developed but shouldn't be too complex. Jeff From jaredsmith at jaredsmith.net Tue Feb 12 23:00:29 2008 From: jaredsmith at jaredsmith.net (Jared Smith) Date: Tue, 12 Feb 2008 18:00:29 -0500 Subject: Self Introduction Message-ID: <1202857229.31982.39.camel@hockey.jaredsmith.net> Hi! I'm Jared Smith, and I'm finally getting around to introducing myself. I've been a long-time lurker on the IRC channel and the mailing list. OK, so what do you need to know about me? Let's see... I've been using Linux professionally for about ten years now, and was using various flavors of UNIX before that. I managed over 6500 Linux boxes at a previous employer, and racked a fair number of those myself. I've pretty much "been there, done that, and still have the scars to prove it" when it comes to managing IT infrastructure and data centers. I'm also big into VoIP (and even co-authored an O'Reilly book on Asterisk), so I'm hoping to help out jcollie and mmcgrath in that area as well. I'm currently working for Digium (the company behind Asterisk) as their Community Relations Manager and lead trainer. I've also done quite a bit of database work (mostly PostgreSQL) and some programming in various languages. Anyhoo, enough about me... -Jared Smith (jsmith on IRC) From loupgaroublond at gmail.com Wed Feb 13 02:17:17 2008 From: loupgaroublond at gmail.com (Yaakov Nemoy) Date: Tue, 12 Feb 2008 21:17:17 -0500 Subject: Haskell Packaging Guidelines Review In-Reply-To: <47B2374F.8090005@redhat.com> References: <7f692fec0801252042g6809db2cp487b486d0892f20d@mail.gmail.com> <47B2374F.8090005@redhat.com> Message-ID: <7f692fec0802121817n4eb75b6x2c05e26a22017fb0@mail.gmail.com> On Feb 12, 2008 7:18 PM, Jens Petersen wrote: > Hi Yaakov, > > Sorry for the late followup. Glad to have you join our Haskell SIG. :) > > > I've been working on writing up guidelines for packaging Haskell > > packages. I need some input from people who know their way around > > Fedora very well. Some of the issues involved nuances of Haskell, but > > many of them are questions because I don't know enough about Fedora > > myself. If any one has the time to give these a looking over, and > > comment on some of the points where I've left question marks, it would > > be very helpful so that hopefully I might have a few interesting > > things in for Fedora 9 Beta. > > > http://fedoraproject.org/wiki/PackagingDrafts/Haskell > > Thanks for working on this. It is something that the Haskell SIG had > not got round to doing yet. Though we are not that big, I think it > would help to make a fedora-haskell-list for the SIG, so that we can > focus more on the discussion there, since there is so much traffic on f-d-l. > > I will try to review your draft carefully soon, and provide some feedback. Thanks Jens. I'm glad to see that people are finally picking up on this. I'm CCing this to infrastructure, hopefully they can create a list. -Yaakov From petersen at redhat.com Wed Feb 13 02:23:59 2008 From: petersen at redhat.com (Jens Petersen) Date: Wed, 13 Feb 2008 12:23:59 +1000 Subject: Haskell Packaging Guidelines Review In-Reply-To: <7f692fec0802121817n4eb75b6x2c05e26a22017fb0@mail.gmail.com> References: <7f692fec0801252042g6809db2cp487b486d0892f20d@mail.gmail.com> <47B2374F.8090005@redhat.com> <7f692fec0802121817n4eb75b6x2c05e26a22017fb0@mail.gmail.com> Message-ID: <47B254BF.3040804@redhat.com> > I'm CCing this to infrastructure, hopefully they can create a list. I already requested one. :) Jens From mmcgrath at redhat.com Wed Feb 13 14:23:25 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 13 Feb 2008 08:23:25 -0600 (CST) Subject: Self Introduction In-Reply-To: <1202857229.31982.39.camel@hockey.jaredsmith.net> References: <1202857229.31982.39.camel@hockey.jaredsmith.net> Message-ID: On Tue, 12 Feb 2008, Jared Smith wrote: > Hi! I'm Jared Smith, and I'm finally getting around to introducing > myself. I've been a long-time lurker on the IRC channel and the mailing > list. > > OK, so what do you need to know about me? Let's see... I've been using > Linux professionally for about ten years now, and was using various > flavors of UNIX before that. I managed over 6500 Linux boxes at a > previous employer, and racked a fair number of those myself. I've > pretty much "been there, done that, and still have the scars to prove > it" when it comes to managing IT infrastructure and data centers. > > I'm also big into VoIP (and even co-authored an O'Reilly book on > Asterisk), so I'm hoping to help out jcollie and mmcgrath in that area > as well. I'm currently working for Digium (the company behind Asterisk) > as their Community Relations Manager and lead trainer. > > I've also done quite a bit of database work (mostly PostgreSQL) and some > programming in various languages. > > Anyhoo, enough about me... Welcome Jared, its nice to see you hanging around more and it was good to see you at FUDCon. If you didn't already know we have weekly meetings: http://fedoraproject.org/wiki/Infrastructure/Meetings We'd talked about re-scheduling them but no decision was made on that so, for right now at least, that still stands. -Mike From eross at anl.gov Wed Feb 13 18:14:58 2008 From: eross at anl.gov (Eric Ross) Date: Wed, 13 Feb 2008 12:14:58 -0600 Subject: Mirror sync times Message-ID: <47B333A2.50606@anl.gov> All, I was wondering if any one knew what time of the day the upstream fedora mirrors do their syncing? Recently, I have received a number of rsync errors (error 24 "vanishing files"); I believe it is because we are tying to sync at the same time as as upstream sync. Currently, I am syncing at 0, 6, 12, and 18 CST. Can anyone recommend better times? Thanks in advance, -- --------------------------------------------------------------------- Eric Ross Argonne National Laboratory Computing and Information Systems Phone: 630.252.6495 --------------------------------------------------------------------- From mmcgrath at redhat.com Wed Feb 13 19:32:58 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 13 Feb 2008 13:32:58 -0600 (CST) Subject: Welp, I've failed. Message-ID: So a year ago we talked back and forth about what to do for FAS2. We've spent a LOT of time on getting an easy front end to an LDAP back end. It was a reasonably heated debate whether or not to use LDAP or postgres for the back end. I was heavily in favor of LDAP for 3rd party support. Well, over time its become clear that LDAP is just not very good at doing groups as we want it to do. We need to have people self-add themselves to groups, track when they were added, who added them. People can have different access levels in the group (unapproved, user, sponsor, admin). LDAP is very geared towards what most people need (someone in charge of a group and adding people to that group). In an open environment like ours, we need the whole application process. Its not that LDAP is bad, just not the right tool for the job. At the same time, during this last year, we've seen a huge push towards OpenID adaptation which is something we've always wanted on the front end. Our turbogears apps have proved to work very well and creating an api to work with FAS2 is very easy. In light of these things, the big benefit of having ldap on the back end (3rd party apps) seems less grand and less of a win. We've been working on FAS2 for almost a year now, and with the deadline looming the FAS2 dev's (me and ricky) talked about the best way to move forward. We've decided to stick with an rdms. Fortunately it shouldn't be too difficult for us. We had been basing our application on fedora-ds, during the last year we've seen great changes in this application and how its packaged. This has made it less stable/desirable as a back end. All signs point to using postgres on the back end as being both the easier choice and the more reliable choice based on what we've seen. I don't like to make decisions like this in a vacuum but time is tight and I really want to make this deadline. Thoughts? Comments? Concerns? -Mike From skvidal at fedoraproject.org Wed Feb 13 20:07:12 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Wed, 13 Feb 2008 15:07:12 -0500 Subject: Welp, I've failed. In-Reply-To: References: Message-ID: <1202933232.28503.0.camel@cutter> On Wed, 2008-02-13 at 13:32 -0600, Mike McGrath wrote: > So a year ago we talked back and forth about what to do for FAS2. We've > spent a LOT of time on getting an easy front end to an LDAP back end. It > was a reasonably heated debate whether or not to use LDAP or postgres for > the back end. I was heavily in favor of LDAP for 3rd party support. > > At the same time, during this last year, we've seen a huge push towards > OpenID adaptation which is something we've always wanted on the front end. > Our turbogears apps have proved to work very well and creating an api to > work with FAS2 is very easy. In light of these things, the big benefit of > having ldap on the back end (3rd party apps) seems less grand and less of > a win. > > We've been working on FAS2 for almost a year now, and with the deadline > looming the FAS2 dev's (me and ricky) talked about the best way to move > forward. We've decided to stick with an rdms. Fortunately it shouldn't > be too difficult for us. > > We had been basing our application on fedora-ds, during the last year > we've seen great changes in this application and how its packaged. This has > made it less stable/desirable as a back end. All signs point to using > postgres on the back end as being both the easier choice and the more > reliable choice based on what we've seen. > > I don't like to make decisions like this in a vacuum but time is tight and > I really want to make this deadline. > > Thoughts? Comments? Concerns? If ldap doesn't fly, it doesn't fly. my only question is how do you plan on doing the nss-integration for id lookups? Continue using nss_db? thanks -- I only speak for me. From smooge at gmail.com Wed Feb 13 20:19:44 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Wed, 13 Feb 2008 13:19:44 -0700 Subject: Self-Introduction: Stephen Smoogen Message-ID: <80d7e4090802131219v7363d124s2328207c619d8341@mail.gmail.com> I realized I have never done a 'self-introduction' to any of the Fedora items.. so I had better do so now that I am a chief asbestos bait. Full Legal Name: Stephen Smoogen City, Country: Albuquerque NM, USA UTC-07:00 Profession: Systems Administration, Computer Security, Loon. Affiliation: University of New Mexico Your goals in the Fedora Project: To help build a stable enterprise Linux and have a good desktop platform. Historical qualifications: I started in Linux in 1992 when working as a student at New Mexico Tech. I got handed a box of floppies to try out and found Linux to have all the tools I needed to get a remote telescope communication working that I couldnt do with other software. I then went to work at Los Alamos National Labs and then a browser company called Spyglass. At Spyglass, I worked with Red Hat on the Red Baron browser (ok I did QA on it in the back room while trying to keep the AIX 3 boxes running). I went to work at Red Hat in 1997 as a Technical Support Monkey, and worked at Red Hat til 2001 in various places. I then went back to work at Los Alamos and then Sandia National Laboratories for a year. I am currently working as a Unix/Linux Administrator at the University of New Mexico while I work on my Masters/Phd that I am hoping to someday maybe sorta get. I have done mostly computer systems administration, and computer security. My programming skills have been more on finding where a core dump occurs and what input triggered it. I am hoping to help grow EPEL to a larger audience and to work eventually on a not-so-l33t-security spin. GPG KEYID and fingerprint: pub 1024D/D7840F95 2003-06-01 [expires: 2010-06-08] Key fingerprint = EA1D 11EC 8B94 CD22 7DF0 AA46 F20A 1093 D784 0F95 uid Stephen J Smoogen (Main Email) uid [jpeg image of size 4099] uid Stephen J Smoogen (Alternate Email) uid Stephen J Smoogen (Alternate Email) uid Stephen J Smoogen (Alternate Email) uid Stephen J Smoogen (Alternate Email) uid Stephen J Smoogen (Alternate Email) sub 1024g/43A39C4B 2003-06-01 [expires: 2010-06-08] sub 1024D/8723487C 2005-06-09 [expires: 2010-06-08] sub 1024g/9B6AD5B9 2005-06-09 [expires: 2010-06-08] sub 1024R/614037DB 2008-01-30 [expires: 2010-06-08] sub 1024R/50524DCB 2008-01-30 [expires: 2010-06-08] -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From stickster at gmail.com Wed Feb 13 20:26:49 2008 From: stickster at gmail.com (Paul W. Frields) Date: Wed, 13 Feb 2008 15:26:49 -0500 Subject: Self Introduction In-Reply-To: <1202857229.31982.39.camel@hockey.jaredsmith.net> References: <1202857229.31982.39.camel@hockey.jaredsmith.net> Message-ID: <1202934409.3154.12.camel@salma.internal.frields.org> On Tue, 2008-02-12 at 18:00 -0500, Jared Smith wrote: > Hi! I'm Jared Smith, and I'm finally getting around to introducing > myself. I've been a long-time lurker on the IRC channel and the mailing > list. > > OK, so what do you need to know about me? Let's see... I've been using > Linux professionally for about ten years now, and was using various > flavors of UNIX before that. I managed over 6500 Linux boxes at a > previous employer, and racked a fair number of those myself. I've > pretty much "been there, done that, and still have the scars to prove > it" when it comes to managing IT infrastructure and data centers. > > I'm also big into VoIP (and even co-authored an O'Reilly book on > Asterisk), so I'm hoping to help out jcollie and mmcgrath in that area > as well. I'm currently working for Digium (the company behind Asterisk) > as their Community Relations Manager and lead trainer. > > I've also done quite a bit of database work (mostly PostgreSQL) and some > programming in various languages. > > Anyhoo, enough about me... Since I never miss a chance to run my yap, I wanted to point out that Jared lives in my neck of the woods -- until I move, at least -- and that he has been instrumental in getting our local LUG revived. He is also a fantastic speaker, a true team player, and just a darn nice guy! Now put him to to work. :-D -- Paul W. Frields http://paul.frields.org/ gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717 http://redhat.com/ - - - - http://pfrields.fedorapeople.org/ irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From smooge at gmail.com Wed Feb 13 21:00:29 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Wed, 13 Feb 2008 14:00:29 -0700 Subject: Welp, I've failed. In-Reply-To: <1202933232.28503.0.camel@cutter> References: <1202933232.28503.0.camel@cutter> Message-ID: <80d7e4090802131300y1ecaf707m9514a6d8c46feafc@mail.gmail.com> On Feb 13, 2008 1:07 PM, seth vidal wrote: > > On Wed, 2008-02-13 at 13:32 -0600, Mike McGrath wrote: > > So a year ago we talked back and forth about what to do for FAS2. We've > > spent a LOT of time on getting an easy front end to an LDAP back end. It > > was a reasonably heated debate whether or not to use LDAP or postgres for > > the back end. I was heavily in favor of LDAP for 3rd party support. > > > > At the same time, during this last year, we've seen a huge push towards > > OpenID adaptation which is something we've always wanted on the front end. > > Our turbogears apps have proved to work very well and creating an api to > > work with FAS2 is very easy. In light of these things, the big benefit of > > having ldap on the back end (3rd party apps) seems less grand and less of > > a win. > > > > We've been working on FAS2 for almost a year now, and with the deadline > > looming the FAS2 dev's (me and ricky) talked about the best way to move > > forward. We've decided to stick with an rdms. Fortunately it shouldn't > > be too difficult for us. > > > > We had been basing our application on fedora-ds, during the last year > > we've seen great changes in this application and how its packaged. This has > > made it less stable/desirable as a back end. All signs point to using > > postgres on the back end as being both the easier choice and the more > > reliable choice based on what we've seen. > > > > I don't like to make decisions like this in a vacuum but time is tight and > > I really want to make this deadline. > > > > Thoughts? Comments? Concerns? > > If ldap doesn't fly, it doesn't fly. > > my only question is how do you plan on doing the nss-integration for id > lookups? Continue using nss_db? > > thanks > Speaking for myself.. in most large 'projects' with goals like this we ended up with a database backend that was the feed to the LDAP and other 'authentication/authorization' servers. The web-app was the feed into the database, and the LDAP/Radius/Kerberos/whatever was the frontends. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From mmcgrath at redhat.com Wed Feb 13 21:17:43 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 13 Feb 2008 15:17:43 -0600 (CST) Subject: Welp, I've failed. In-Reply-To: <80d7e4090802131300y1ecaf707m9514a6d8c46feafc@mail.gmail.com> References: <1202933232.28503.0.camel@cutter> <80d7e4090802131300y1ecaf707m9514a6d8c46feafc@mail.gmail.com> Message-ID: On Wed, 13 Feb 2008, Stephen John Smoogen wrote: > On Feb 13, 2008 1:07 PM, seth vidal wrote: > > > > Speaking for myself.. in most large 'projects' with goals like this we > ended up with a database backend that was the feed to the LDAP and > other 'authentication/authorization' servers. The web-app was the feed > into the database, and the LDAP/Radius/Kerberos/whatever was the > frontends. > In our talkings with #ldap and #fedora-ds people I ran into a couple of people doing something similar. I hate to admit this publically but in a former life I did a lot of stuff with FreeRadius. had custom plugins and even a MSSQL backend for it (yikes). There are options available here though we'll probably stick with a version similar to what we're doing now but a bit saner, no race conditions and hopefully pulling right from the webapp instead of generating then pulling. -Mike From admin at arcnetworks.biz Wed Feb 13 21:26:29 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Wed, 13 Feb 2008 16:26:29 -0500 Subject: Welp, I've failed. In-Reply-To: References: <1202933232.28503.0.camel@cutter> <80d7e4090802131300y1ecaf707m9514a6d8c46feafc@mail.gmail.com> Message-ID: <5d66540b0802131326l440e73aaif5c9e6c05b3d18e0@mail.gmail.com> > hopefully pulling right from the > webapp instead of generating then pulling. > > -Mike *No idea what i'm talking about here* but is there a way to cache the main things to reduce the load of querying a DB every time? -Anand -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Wed Feb 13 21:41:51 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 13 Feb 2008 15:41:51 -0600 (CST) Subject: Welp, I've failed. In-Reply-To: <5d66540b0802131326l440e73aaif5c9e6c05b3d18e0@mail.gmail.com> References: <1202933232.28503.0.camel@cutter> <80d7e4090802131300y1ecaf707m9514a6d8c46feafc@mail.gmail.com> <5d66540b0802131326l440e73aaif5c9e6c05b3d18e0@mail.gmail.com> Message-ID: On Wed, 13 Feb 2008, Anand Capur wrote: > > hopefully pulling right from the > > webapp instead of generating then pulling. > > > > -Mike > > > *No idea what i'm talking about here* but is there a way to cache the main > things to reduce the load of querying a DB every time? > The cache is actually the problem with the race condition now. In order to do a manual push we have to run scripts on our app servers to 'generate' the cache. then we have to pull it. I'm sure there's a better way to do it even without the cache for now. We're only talking about 60-70 hosts right now. That will grow with time. But with plenty of time to wait until caching is really needed. -Mike From ricky at fedoraproject.org Thu Feb 14 21:11:22 2008 From: ricky at fedoraproject.org (Ricky Zhou) Date: Thu, 14 Feb 2008 16:11:22 -0500 Subject: Meeting Log - 2008-02-14 Message-ID: <20080214211122.GA2424@Max.nyc1.dsl.speakeasy.net> 15:00 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Who's here? 15:00 < jima> not me! 15:00 < warren> m 15:00 -!- notting [n=notting at redhat/notting] has joined #fedora-meeting 15:01 < mmcgrath> abadger1999: dgilmore f13 gregdek jcollie ivazquez iWolf J5 lmacken mbonnet paulobanon_ paulobanon ricky skvidal spoleeba yingbull PING 15:01 < skvidal> hi 15:01 * dgilmore is here 15:01 < yingbull> pong 15:01 * abadger1999 is here 15:01 < spoleeba> mmcgrath, oh no 15:01 * lmacken is here 15:01 < skvidal> wow 15:01 < jcollie> mmcgrath: i'll brb in the middle of some trouble... 15:01 < skvidal> no one does the /me blank thing 15:01 < mmcgrath> jcollie: no problem. 15:01 -!- mbacovsk [n=mbacovsk at 44.252.broadband5.iol.cz] has joined #fedora-meeting 15:01 < spoleeba> mmcgrath, im on a con call 15:01 * mmcgrath 15:01 * dgilmore 15:01 < mmcgrath> spoleeba: no worries. 15:01 < skvidal> ah, much better 15:01 * asgeirf *newbie* is here... 15:02 < mmcgrath> asgeirf: welcome! 15:02 < lmacken> skvidal: sorry, I forgot to flush the dircproxy users this week :( 15:02 < jima> ah, fresh meat! 15:02 -!- nim-nim [n=nim-nim at fedora/nim-nim] has quit Read error: 104 (Connection reset by peer) 15:02 < skvidal> lmacken: :) 15:02 < spoleeba> mmcgrath, trying to convince esmf developers to target fedora 15:02 < mmcgrath> Ok, well lets get started. We may have to put some things off until later as some people are busy right now, but thats not a problem. 15:03 < skvidal> spoleeba: just keep the icbm developers from targeting fedora 15:03 < jima> skvidal: i concur. 15:03 < mmcgrath> So lots has happened since our last meeting, because we missed some in there. 15:03 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/query?status=new&status=assigned&status=reopened&group=milestone&keywords=%7EMeeting&order=priority 15:03 < zodbot> mmcgrath: http://tinyurl.com/2hyyz6 15:03 < J5> pong 15:03 < f13> mmcgrath: howdy 15:03 < mmcgrath> so first ticket up is something notting asked about just today 15:03 < mmcgrath> .ticket 347 15:03 < zodbot> mmcgrath: #347 (Set localtime on all our servers to UTC) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/347 15:03 < mmcgrath> J5: word 15:03 < dgilmore> mmcgrath: did i says id do it? 15:04 < mmcgrath> So when we do finally do this, we'll have cron jobs and all kinds of things to change. 15:04 < mmcgrath> dgilmore: yes you did. 15:04 < dgilmore> we need to look at cron job scheduling 15:04 < mmcgrath> I don't think anyone's against it, but we'll have to make sure we have our plan and do it. Its going to take time to actually do it. 15:04 < dgilmore> mmcgrath: week of 25th ill be in boston. so i think ill do it one night that week 15:05 < dgilmore> so lets work up a plan. and get word out there 15:05 < mmcgrath> dgilmore: solid, that works for me. Go ahead and assign that ticket to you. 15:05 < mmcgrath> We *can* do this in steps if we want. I'll leave that up to you (if you were volunteering for it that is) 15:05 < skvidal> mmcgrath: why do we have to change cron jobs? just to make sure they don't run at peak hours? 15:05 < mmcgrath> skvidal: yeah 15:05 < jima> oh, goody 15:05 < mmcgrath> especially with rawhide builds and stuff. 15:05 < skvidal> I mean have about 14 timezones where people are using fedora readily 15:06 < jima> my cron jobs run whenever 15:06 < skvidal> is there EVER a non-peak hour? 15:06 < f13> yes 15:06 < mmcgrath> For some machines yeah. Not all of them though. 15:06 < jima> skvidal: non-peak US/EU is ideal, i think. 15:06 < f13> koji isn't nearly as busy between 1am -> 4am Eastern 15:06 < mmcgrath> I think many of our important cron jobs are running on the hour anyway, but the buildsystem does have lulls 15:06 < f13> of course, doing rawhide during then makes koji a little busy (: 15:06 < jima> i do believe most of our contributors are in US/EU 15:06 < skvidal> jima: india is growing 15:07 < mmcgrath> skvidal: but the fact taht we're increasingly not having downtime is good :) though it will cause us challenges in the future. 15:07 < mmcgrath> like when to back up what, etc. 15:07 < skvidal> right 15:07 < skvidal> all I'm wondering is maybe we leave the cron jobs alone 15:07 < mmcgrath> dgilmore: were you volunteering for that or did I misread you? 15:07 < skvidal> and see how things are 15:07 < skvidal> but change the system time 15:08 * iWolf slinks into the back 15:08 * mmcgrath thinks dgilmore might have been called away for a bit, we can get back to that if need be. 15:08 < dgilmore> mmcgrath: ill look at how it effects things 15:08 < mmcgrath> dgilmore: excellent, thanks. 15:08 * dgilmore was taking the ticket 15:09 < dgilmore> is slow due to no mouse 15:09 < mmcgrath> next ticket is 365 but jcollie is busy right now. 15:09 < mmcgrath> .ticket 270 15:09 < zodbot> mmcgrath: #270 (Fedora Wiki allows editing raw HTML) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/270 15:09 < mmcgrath> paulobanon_: paulobanon: ricky: ping? 15:09 * mmcgrath hasn't seen them today much, might be busy. 15:09 < f13> skvidal: we'll have to change the rawhide compose cron 15:09 * mmcgrath notes he's going to have a whole special wiki talk after the tickets so we don't have to get into it too much. 15:09 < mmcgrath> moving on 15:09 < mmcgrath> .ticket 302 15:09 < zodbot> mmcgrath: #302 (Moin patches) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/302 15:10 < f13> skvidal: we time that so that there is fresh rawhide content waiting for RH folks to start work, who primarily start in UTC -5 15:10 < mmcgrath> Last I've heard these are still not upstream, I'm going to un-meeting-ize this. 15:10 < dgilmore> mmcgrath: seems sane 15:10 < skvidal> f13: eastern standard tribe 15:10 < f13> yeah 15:10 < mmcgrath> netxt ticket 15:10 < mmcgrath> .395 15:10 < mmcgrath> also one for jcollie 15:10 < dgilmore> f13: we can work it 15:11 < mmcgrath> we actually did have that one working for a bit, expect it to be deployed with the rest of asterisk. 15:11 < mmcgrath> next topic! 15:11 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- The Wiki 15:11 < mmcgrath> so lets have a chat about this. 15:11 < abadger1999> Woo hoo! 15:11 < mmcgrath> I'd like to officially propose we move from Moin to Mediawiki. 15:11 < skvidal> wikis are for losers 15:11 < skvidal> let's go with a big dir on fedora people 15:11 < notting> deep hurting. 15:11 < skvidal> anyone can edit 15:11 < mmcgrath> I've been doing some script conversions and thanks to ivazquez and unicode magic... I've been very happy with the results. 15:11 < jima> notting: deep stabbing? 15:12 < jwb> mmcgrath, how different are the sytaxes? 15:12 < dgilmore> mmcgrath: i want moin syntax 15:12 < mmcgrath> jwb: they're pretty different. 15:12 < jwb> uuff 15:12 < notting> mmcgrath: do we have someone lined up for prettyfication? 15:12 < dgilmore> jwb: i personally hate mediawiki's syntax 15:12 < jwb> does mediawiki have a gui mode that makes that moot? 15:12 < lmacken> any way we can get a rich text editor plugin or something ? 15:12 < mmcgrath> Here's what we have so far - https://publictest1.fedoraproject.org/wiki/Infrastructure 15:12 < mmcgrath> dgilmore: we might just be able to find a plugin for that. 15:13 < dgilmore> when ive had to use it ive had to copy paste and run regexs in vi to get it to do what is simple in moin 15:13 -!- glezos [n=glezos at fedora/glezos] has joined #fedora-meeting 15:13 < mmcgrath> There's going to be bits and pieces to change but for the most part. Its been very good. 15:13 < dgilmore> mmcgrath: if you do ill be a happy man 15:13 * ivazquez apologizes for being late 15:13 < jwb> that looks like arse... 15:13 * glezos too 15:13 < mmcgrath> ivazquez: no worries 15:13 -!- mether [n=ask at fedora/mether] has quit Read error: 113 (No route to host) 15:13 < dgilmore> lmacken: mediawiki does have soem wysiwyg editors 15:13 < mmcgrath> glezos: we're just talking about mediawiki - https://publictest1.fedoraproject.org/wiki/Infrastructure 15:13 < jwb> mmcgrath, maybe some of that doesn't work well from external connections? 15:13 < mmcgrath> jwb: we'll have someone make a template for it. 15:13 < warren> mmcgrath, would mediawiki be any easier or harder to integrate with FAS? 15:14 < jwb> mmcgrath, no, i mean it looks broken 15:14 < mmcgrath> warren: easier. 15:14 < warren> cool 15:14 < mmcgrath> jwb: define broken? as in there's the #! html box at the top? 15:14 < notting> hey, i could read InfrastructurePrivate w/o logging in 15:14 < jwb> mmcgrath, no... let me post a screenshot 15:14 < mmcgrath> warren: unlike moin, mediawiki has a full and documented api (someone has even written a fuse filesystem for it I hear) as well as a good plugin/extensions system. 15:15 < mmcgrath> Aside from dennis hating the markup, is anyone against this? 15:15 < mmcgrath> poelcat: ping (thought you might want to know we're talking about this) 15:15 < skvidal> and an xml-rpc interface iirc 15:15 < notting> i am very ambivalent 15:15 < jwb> mmcgrath, http://jwboyer.fedorapeople.org/Screenshot.png 15:15 < notting> what do our most prominent wiki-ans think? 15:15 < skvidal> notting: eat more roughage 15:15 < ivazquez> I'm not against it, but that script needs quite a bit more tweaking. 15:15 < abadger1999> Do we know how it will scale under load? Will the db be a bottleneck? 15:16 < yingbull> mmcgrath: I'm either way, but if it performs better that's good. Can we QA that? 15:16 < dgilmore> mmcgrath: we using mysql on the backend? 15:16 < iWolf> I just wonder if we will end up with a whole other set of problems. 15:16 * abadger1999 wonders how new install smolt checkins and release day wiki traffic will work out 15:16 < mmcgrath> jwb: thats just the tables not being converted right, its still a work in progress. 15:16 < warren> iWolf, scalability wont be one of them... 15:16 < dgilmore> abadger1999: we should be able to cluster that. and if we are using mysql thats pretty easy to do 15:16 < ivazquez> iWolf: I don't doubt we will. It's just a matter of deciding which set we can live with. 15:17 < yingbull> Would the mediawiki use an existing mysql farm, or would it have its own servers? 15:17 < notting> what do the docs people think? 15:17 < jwb> mmcgrath, ok... i won't go posting that link profusely ;) 15:17 < mmcgrath> yingbull: yes, you can do a search on it now and its way way faster. 15:17 < mmcgrath> jwb: ;-) 15:17 < warren> Has moin ever corrupted itself? 15:17 < mmcgrath> dgilmore: right now yeah. I don't want to put anything else on postgres for the time being. 15:17 < mmcgrath> warren: yes. 15:17 < yingbull> mmcgrath: that means its scales for content size, just wondering about actual load. 15:17 < warren> mmcgrath, how often? 15:17 < mmcgrath> warren depends, why? 15:17 < warren> just wondering 15:17 < dgilmore> mmcgrath: :) i personally much prefer mysql 15:17 < abadger1999> dgilmore: heh. I've had nothing but pain from clustering mysql but it could be how it was being used. 15:17 < warren> mmcgrath, because I would expect that from a non-RDBMS multi-user concurrent system 15:18 < mmcgrath> warren: In fairness though the times it got corrupt we were probably doing stupid things, there's been tickets about badness getting stuck in logs, people's accoutns not working right, etc. 15:18 < dgilmore> abadger1999: ive had success in the past clustering it 15:18 < dgilmore> ive not tried postgres 15:18 < mmcgrath> the other thing I like about mediawiki is we have multiple options for scaling, caching, clustering, etc. 15:18 < warren> and they take security seriously 15:18 < dgilmore> mmcgrath: i do like that 15:19 < dgilmore> warren: they have to its php 15:19 < skvidal> dgilmore: :) 15:19 < warren> I'm guessing we would wall this into its own VM guest with strict selinux policies. 15:19 < mmcgrath> So if I went to other teams and said "The infrastructure team would like to migrate to mediawiki" Thats not a false statement as far as anyone here is concerned? 15:19 < abadger1999> +1 15:19 < warren> +1 15:19 < yingbull> Sounds good. 15:19 < lmacken> +1 15:19 < J5> +1 15:20 < lmacken> what about plone! 15:20 < lmacken> (j/k) 15:20 < EvilBob> yeah thanks 15:20 < mmcgrath> ok, I'll get that conversation started to the various wiki users. 15:20 < skvidal> +1 15:20 < iWolf> +0 (defers to the more active members) 15:20 < glezos> mmcgrath: +1 from the L10n part -- will get back to you with more info in a week, after I meet with the mediawiki i18n folks at FOSDEM. 15:20 < ivazquez> +1 15:20 < mmcgrath> Its not a done deal that we'll move but if we can satisfy all of the teams, it will be. 15:20 < asgeirf> 0 :) 15:20 < glezos> I wonder whether the fact that mediawiki being a very active upstream project will make it harder for us to push any code of ours there 15:20 < mmcgrath> oh! 15:20 < mmcgrath> that reminds me. 15:21 < warren> glezos, nothing can be harder than upstream moin who doesn't want any contributions 15:21 < ivazquez> It might also mean that it's less necessary. 15:21 < skvidal> ivazquez: +1 15:21 < mmcgrath> glezos talked to some of the mediawiki guys and will be talking to them at fosdem (i think) so even before we deploy it, there might be a strong partnership between the Fedora Project and the mediawiki guys. Which is a very good thing and in stark contrast to the relationship with moin-upstream. 15:21 < dgilmore> +1 15:21 < iWolf> mmcgrath: that's a good thing 15:21 * abadger1999 changes his vote to +100 :-) 15:22 < mmcgrath> heh 15:22 < glezos> mmcgrath: the mediawiki guys have been *very* positive in discussing and looking at the issues we'll have, especially in terms of translations. 15:22 < mmcgrath> ok, well, there's not much else to talk about there, I'm going to continue working on that script. I've got to get the tables working right. I'll try to get back with mizmo to see about a better template for that place. 15:22 < glezos> I'll make sure to report back with the meeting's points. 15:22 < mmcgrath> glezos: I'm happy to hear that. 15:22 < mmcgrath> ok, next topic 15:23 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Fedora Hosted. 15:23 < mmcgrath> Two things here. 15:23 < spoleeba> telecon done 15:23 < mmcgrath> first, we now have mtn support on fedorahosted + trac - https://fedorahosted.org/elfutils/browser 15:23 < mmcgrath> spoleeba: excellent. 15:23 < mmcgrath> The next (and bigger thing) 15:24 < mmcgrath> serverbeach (who provides all the hosting for fedorahosted) would like to do a joint pressrelease about fedorahosted. 15:24 < dgilmore> we are taking on sourceforge? 15:24 < dgilmore> :) cool 15:24 < mmcgrath> The last bit that we'd need to get done AFAIK, is the mailing lists which jcollie is extremely close to completing. 15:24 < mmcgrath> https://fedorahosted.org/mailman/listinfo 15:24 < warren> yay! 15:24 < mmcgrath> Once thats available, I think we should do the announcement. 15:24 < mmcgrath> f13: what do you think? 15:24 < warren> mmcgrath, does that mean we have our own MTA? control our own spam filtering? 15:24 < dgilmore> mmcgrath: sounds good 15:25 < mmcgrath> warren: we have that now, just no one's implemented the spam filtering. 15:25 < spoleeba> mmcgrath, i officially have no problem with a joint press-release...do we get to look at it first? 15:25 < f13> hrm. 15:25 < warren> mmcgrath, ok, I'm very interested in that part. 15:25 < mmcgrath> spoleeba: I'm sure we could, max and paul are already involved in all of that. 15:25 < f13> there was one more thing I wanted done before we left 'beta' stage. 15:25 < f13> that was raw webspace for hosted projects. 15:25 * mmcgrath actually wanted to not provide that. 15:26 < warren> we need that if we're going to have a complete upstream hosting solution 15:26 < mmcgrath> f13: how much storage space did you have in mind for that? I figured the wiki would be enough. 15:26 < f13> mmcgrath: wiki eh? 15:27 < mmcgrath> f13: if we're going to do that we need to come up with a solution quick, they want to do the release soon unless thats the sort of thing that doesn't block the official announcement. 15:27 < iWolf> It could always be a later feature enhancement. 15:27 < f13> we have a working model in what seth setup for fedorapeople... 15:28 < mmcgrath> f13: we do have https://fedorahosted.org/releases/p/y/python-fedora/ 15:28 < skvidal> we could nfs export across the vpn :) 15:28 < mmcgrath> f13: except that working model uses full shell accounts. 15:28 < mmcgrath> something which would require us to completely re-design our security settings. 15:29 < f13> mmcgrath: the wiki is a bit harder to automate attaching to 15:29 < f13> but it's not the worst option in the world. 15:29 < mmcgrath> f13: no need to attach to the wiki, we have the releases ability now. 15:29 < mmcgrath> people can scp the files they want up there. 15:29 < f13> mmcgrath: uh... so the people who are doing fedora hosted projects /already have/ fedora people space. 15:29 < warren> mmcgrath, and using fedorapeople can we sustainably have multiple upstream project developers put files in a repository and get permissions right? 15:29 < f13> I'm not sure what you're afraid of. 15:30 < warren> f13, 2 or more people working on the same project? 15:30 < skvidal> warren: acls 15:30 < f13> mmcgrath: I would have hoped the webspace would be more like 'python-fedora.fedorahosted.org/' 15:30 < glezos> f13: that does sound like a nice feature to have for a hosted solution. 15:31 < mmcgrath> f13: is this something you really want to block the announcement? if it is we need to come up with a solution for it now. 15:31 < skvidal> f13: A couple of hangups 15:31 * jcollie is back 15:31 < skvidal> 1. we need a box 15:31 < notting> how is fedorahosted.org/releases populated now? 15:31 * mmcgrath thinks this is something we "could" do but shouldn't. 15:31 < skvidal> 2. we need to say explicitly to the users: no php, cgi, etc 15:31 < f13> mmcgrath: I'd be ok announcing it, if we have at least agreed upon a future feature of having hosted raw webspace. 15:31 < warren> f13, we wouldn't want to put upstream project tarballs into the mirror structure? 15:32 < notting> f13: nah 15:32 < notting> erm 15:32 < notting> warren: nah 15:32 < warren> http://download.fedora.redhat.com/pub/fedora/projects/ 15:32 < mmcgrath> notting: its in the faq. If you don't have an actual shell on there (which most people don't) you just 'scp filename-1.0.tar.gz fedorahosted.org:projectName' some voodoo on the backend sends it to the right place. 15:32 < warren> If we mirror it, we don't need to back it up. =) 15:32 < mmcgrath> warren: we could announce to mirrors its available though, run rsync fedorahosted:: 15:32 < mmcgrath> its in there and available to be synced out. 15:32 < warren> mm 15:32 < f13> mmcgrath: can we do dns tricks so that .fedorahosted.org works ? 15:33 < f13> I know it's asthetics but it /does/ look better 15:33 < mmcgrath> f13: what would people see at project.fedorahosted.org ? 15:33 < mmcgrath> the trac instance? 15:33 < f13> mmcgrath: anybody reading a spec file. 15:33 < lmacken> can we assume most of the fedorahosted projects are actually in Fedora? if so, new releases can just entail pushing into fedora. Then we wouldn't need raw webspace ? 15:33 < f13> mmcgrath: spec files reference the url to the tarball release 15:33 < f13> lmacken: that is terrible for cross-distro 15:34 < f13> lmacken: it's extremely rude to tell Debian "get the tarball from the source rpm in Fedora release Blah" 15:34 < mmcgrath> f13: no I mean if I typed project.fedorahosted.org into my browser, what comes up? 15:34 < lmacken> not if we link to the tarballs ? 15:34 < f13> mmcgrath: directory listing of https://fedorahosted.org/releases/p/y/python-fedora/ 15:34 < mmcgrath> lmacken: besides, we already have that 15:34 < skvidal> f13: not the hosted page? 15:34 < lmacken> or somehow autopopulate builds onto the wiki 15:34 < f13> ok, wait 15:34 < mmcgrath> ahhh 15:34 < skvidal> f13: ie: not the wiki instance? 15:34 < f13> in my /grand/ thought 15:34 * mmcgrath sees what f13 is saying here. 15:35 < f13> .fedorahosted.org would lead to raw webspace that hte project could do whatever within our rules 15:35 < f13> a pretty page 15:35 < f13> fedorahosted.org/project/ leads you to Trac 15:35 < f13> which often isn't nearly as pretty 15:35 < f13> and yes, this is a lot like how sourceforge works. 15:35 * mmcgrath thinks thats confusing. 15:35 < mmcgrath> so what is koji's home page? 15:36 < f13> mmcgrath: it depends on what the project wnats to do 15:36 < f13> mmcgrath: making every project's home page the Trac instance is kind of lame 15:36 < skvidal> f13: why? 15:36 < mmcgrath> thats confusing though, some projects will use project.fh.o some will use fh.o/project If I want to check out elfutils, how will I know which one to go to? 15:37 < f13> mmcgrath: you're coming at this with prior knowledge that elfutils is hosted with us 15:37 < f13> mmcgrath: invalid use case. 15:37 < f13> mmcgrath: people who are looking for the upstream of elfutils is going ot read the elfutils spec or documentation or whatever and be directed at their homepage 15:37 < f13> or you'll pull up the Trac instance which teh wiki there could say "See for our homepage" 15:38 -!- stickster is now known as stickster_afk 15:38 < mmcgrath> f13: I even know elfutils is hosted with us because they told me, now I want to see it. Which one do I go to? 15:38 < warren> mmcgrath, even downloading tarballs from sourceforge is a bit ambiguous because people have different URL's depending on how they downloaded it 15:39 < warren> mmcgrath, if we want to eliminate different URL's then we have to enforce it with redirects. 15:39 -!- stickster_afk is now known as stickster 15:39 < notting> w.r.t download space, if all we have is the wiki, how are files pushed through that, and does tracwiki scale for serving lots of large files? 15:39 * f13 sees this discussion going nowhere in a hurry 15:39 < mmcgrath> notting: actually the wiki is horrible for pushing files. 15:39 < lmacken> right now elfutils points directly to koji for new releases. 15:39 < abadger1999> f13: Are we more like launchpador sourceforge? 15:39 < f13> mmcgrath: 'the wiki' are you talking about Moin or Trac? 15:39 < abadger1999> (Where we want to be) 15:39 * mmcgrath doesn't compare us to either of them. 15:39 < mmcgrath> f13: Trac. 15:39 < f13> IIRC Trac just is a direct link to the attachment on the filesystem 15:40 < warren> Ubuntu doenst bother to make tarballs, they build directly from bzr on launchpad for things that they are upstream. 15:40 < f13> abadger1999: I'm more familiar with sf. 15:40 < f13> http://sourceforge.net/projects/pidgin vs pidgin.sf.net 15:41 < f13> hrm, perhaps not the best example 15:41 < abadger1999> Just wondering because sf provides web space via shell access while launchpad provides an external links section where you can list a home page if you want more than they provide. 15:41 < f13> but when I dreampt up fedora hosted, I pictured Trac as one of the tools a hosted project would have, not the /only/ tool. 15:41 * warren entirely supports f13 on this. 15:42 < f13> and where a number of projects might have a rich home page for users, and use the Trac instance as a development tool 15:42 * mmcgrath saw it as a simple and complete set of tools. 15:42 < notting> ferexample, we may have a project that wants just 1) download space 2) git + gitweb 3) a mailing list. how does trac help them? 15:42 < f13> that said, maybe our "customers" are perfectly happy with only having Trac. 15:42 < mmcgrath> f13: what can you do on raw space that you can't do with trac wiki? 15:42 < skvidal> mmcgrath: well, the page controls are better 15:42 < mmcgrath> notting: FWIW, we have lots of people that don't have a trac instance. 15:42 < f13> mmcgrath: html, easily manage content programatically 15:42 < skvidal> f13: umm 15:42 < skvidal> wait 15:43 < lmacken> Hmm.. I've seen trac used as a pretty functional homepage as well 15:43 < lmacken> http://cherrypy.org 15:43 < warren> and some people don't want trac at all because it can be a distraction 15:43 < skvidal> f13: are we talking about RAW stuff like php or cgis b/c that's not bloody likely 15:43 < notting> mmcgrath: right, but if they want to tie together a link to gitweb, a link to the ML, etc. ... trac is the only solution atm 15:43 < mmcgrath> The bottom line is we can't provide everything to everyone. 15:43 < mmcgrath> we have a "web" solution do we need 2? 15:43 < f13> skvidal: no of course not, there would be restriction around what could be used. 15:43 < warren> Hosted should be a menu of services that upstream projects can pick from. 15:43 < mmcgrath> warren: it is and will be. 15:43 < mmcgrath> but whats on the menu? 15:43 < f13> lets look at 108 as a great example 15:44 < f13> people hated 108 because to get anything on the web, they either had to fuck with wiki, or svn 15:44 < f13> what they really wanted was the ability to just rsync (via ssh) content into a dir 15:44 * mmcgrath is pretty sure thats not why people hated 108 15:44 < mmcgrath> it was closed source and complicated. Trac is neither of those. 15:44 < f13> mmcgrath: that was on eof the big complaints I heard from a lot of people trying to use it to host projects. 15:44 < f13> mmcgrath: from the usability side 15:44 < mmcgrath> Ok, lets take a step back. 15:44 < mmcgrath> is this a blocker to the announcement? 15:45 < skvidal> not imo 15:45 < f13> I'm leaning toward no, as long as we have a roadmap for something like this we can make public 15:45 < warren> We should at least define exactly what we want and write it as a "coming soon" feature on the roadmap. 15:45 < mmcgrath> Ok, then we should discuss this at another time. 15:45 < notting> yeah, as long as we have a plan so we can tell people 'yes', 'no', 'yes, but in 3 months' when they ask for foo, bar, or baz 15:45 * mmcgrath is already tired of the slippery slope we're headed down with fedorahosted. 15:45 * ricky gets here. 15:46 < mmcgrath> everything some says 'wouldn't it be nice" we've implemented the feature, its got to stop. There is beauty in simplicity. 15:46 * f13 notes that he's been making noise about having web space for projects since day 1. 15:46 < mmcgrath> and some how, over 100 projects have thrived while not having web space. 15:46 < dgilmore> mmcgrath: i want a pony 15:46 < f13> mmcgrath: uh, other than adding additional SCMs, and a couple trac plugins, what exactly ahve we done? 15:46 < mmcgrath> f13: I'm sorry I just don't remember that at all. I'm probably rembering it wrong but I don't remember anything about raw webspace ever. 15:46 < warren> mmcgrath, this is one of the few things that we really need to make hosted complete. 15:47 < J5> I have to agree. By giving people the world we make it harder to create a good experience 15:47 < mmcgrath> f13: just that. I want to make sure it stops there. 15:47 < mmcgrath> warren: I think hosted is complete. 15:47 < notting> is the scp fedorahosted:blah magic work for anything? 15:47 < notting> or just blah-1.2.3.tar.gz? 15:47 < mmcgrath> notting: only if you don't have a shell account. 15:47 < mmcgrath> scp anything fedorahosted:project 15:47 -!- mbacovsk [n=mbacovsk at 44.252.broadband5.iol.cz] has quit Read error: 110 (Connection timed out) 15:47 < mmcgrath> warren: excpet for mailing. 15:47 < notting> so we have webspace ;) 15:47 < warren> f13, I do recall that from day 1 as well. 15:47 < warren> mmcgrath, which is already on the roadmap 15:48 < f13> mmcgrath: perhaps we should survey our current customers, and potential customers (108 holdouts, et.redhat.com folks, people.redhat.com folks) about it. 15:48 < mmcgrath> f13: I think thats the wrong way to go. We need to have in mind a solution that we want it to be. If its the right tool for those people they will come, if not they won't. 15:48 < dgilmore> f13: most if not all people haviing people.redhat.com space ahve fedorapeople.org space 15:48 < mmcgrath> we can't conform to everyone's needs on this or it will consume ALL of our time like 108's did the 108 people. 15:49 < skvidal> okay 15:49 < skvidal> let's chill 15:49 < skvidal> everyone 15:49 < warren> mmcgrath, this is not a slippery slope. Raw web space is one of the fixed set of things people expect for an upstream project. 15:49 < dgilmore> skvidal: :) 15:49 < mmcgrath> this is a free 'value added' fedora service. If we end up spending lots of time on it, thats less time for other things. 15:49 < dgilmore> lets move on now 15:49 < skvidal> yes 15:49 < skvidal> we're not blocking announcing it 15:49 < skvidal> we can sort this out later 15:49 < dgilmore> no we can announce as is 15:49 < skvidal> on a day when we're all less busy 15:49 < dgilmore> i think its done being a beta 15:49 < skvidal> and less stress-y 15:49 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Asterisk 15:50 < dgilmore> :) it works 15:50 < skvidal> we'll learn a lot about what people want from tickets 15:50 < mmcgrath> The Board has put a higher priority on our asterisk setup. 15:50 < skvidal> eyeroll 15:50 < skvidal> sorry, the board has an asterisk fetish for odd reasons :) 15:50 < mmcgrath> asterisk as it stands has enough shortcommings that it won't be usable for us without a few things. 15:50 < spoleeba> skvidal, i have an n810 now.. id like to use it for..something 15:50 < mmcgrath> 1) they've requested town-hall style meetings. 15:50 < dgilmore> skvidal: we do 15:50 < skvidal> dgilmore: :) 15:50 < mmcgrath> jcollie: do you want to talk about that for a moment and the implementation you tested? 15:50 < jcollie> ujh sure 15:50 < jcollie> erg 15:51 < jcollie> it's ticket 395 15:51 < mmcgrath> .ticket 395 15:51 < mmcgrath> :) 15:51 < zodbot> mmcgrath: #395 (Audio Streaming of Fedora Board Conference Calls) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/395 15:52 < jcollie> basically the board wants to have some conferences calls streamed out so that 10s or maybe even 100s of people can listen in live 15:52 < dgilmore> taking feedback via irc 15:52 < jcollie> so i've figured out a way to get the audio out of the asterisk conference call and stream it using flumotion 15:53 < dgilmore> jcollie: and its all FOSS? 15:53 < jcollie> yup 15:53 < dgilmore> streaming ogg 15:53 < spoleeba> jcollie, thats a nice valentines day present 15:53 < jcollie> its streaming ogg/vorbis right now but i was going to test ogg/speex 15:54 < jcollie> fluendo even has a java applet for those unfortunate to be running windows 15:54 < jcollie> the java applet is gpl too i think 15:54 < dgilmore> cool 15:54 < warren> bbl 15:54 * mmcgrath notes he used this system the other day. It actually worked, rather well. 15:54 < jcollie> the java applet isn't in fedora yet but i have a srpm under development 15:55 < lmacken> good deal 15:55 < ivazquez> Does IcedTea support audio yet? 15:55 < glezos> jcollie: sounds great 15:55 < spoleeba> jcollie, so where is it at right now? does all the board members need to test it? 15:55 < jcollie> also, i'd prefer to use a development version of flumotion than what is in fedora right now but i'm not stuck on that 15:55 < mmcgrath> spoleeba: its not at that point yet 15:55 < mmcgrath> our asterisk deployment isn't even official yet, we'll need to get that finalized and in puppet before we start considering these things. 15:56 < jcollie> i just did a technology preview to see if i could get the audio out of asterisk and into flumotion 15:56 < spoleeba> mmcgrath, the big concern was making sure connected audio source clients...weren't stupidly configed 15:56 < jcollie> yeah, we need to make sure that all the board members have decent headsets and a working SIP client setup 15:56 < spoleeba> jcollie, ha! 15:56 < spoleeba> jcollie, 'decent' 15:57 < jcollie> the mics built into laptops pick up too much ambient noise 15:57 < poelcat> mmcgrath: sorry on another call... yay for Mediawiki :) 15:57 < jcollie> spoleeba: actually you can get by with some really cheap ones - i use these generic labtec ones 15:57 < spoleeba> jcollie, i want to test my n810 :-> 15:57 < mmcgrath> I'm actually working on trying to get some dial in numbers for that. We'll see how it goes but areacodes in boston and raleigh would help a lot. 15:57 < jcollie> so no need to spend $100s 15:58 < spoleeba> jcollie, just let me know when you wwant me to test it 15:58 < jcollie> dial in numbers should be pretty easy to find 15:58 < notting> 888-fed-ora1? 15:58 < skvidal> umm 15:58 < skvidal> eww 15:58 < dgilmore> most of the board brought headsets when we looked at using asterisk for board meetings 15:58 -!- jmtaylor [n=jason at 69.212.251.202] has joined #fedora-meeting 15:58 < mmcgrath> notting: the 888 numbers require per minute charges. 15:59 < mmcgrath> Ok, hey guys we're running out of time. There's a couple of other things I wanted to get to. 15:59 < dgilmore> notting: we have to pay for that 15:59 < jcollie> i'm also thinking about using an IRC bot to control the conference 15:59 < dgilmore> jcollie: awesome 15:59 < dgilmore> mmcgrath: move on 15:59 < mmcgrath> jcollie: sorry to cut you off :( 15:59 < jcollie> yeah, the board doesn't want to do this until sometime in april anyway 15:59 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- FAS2 15:59 < mmcgrath> we're moving to database with that, abadger1999 has been very helpful and ricky and I will be back on it hard core next week. 15:59 < mmcgrath> and last thing 16:00 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- My Fedora 16:00 < mmcgrath> J5: how's that going? 16:00 * mmcgrath hopes J5 is still around. 16:00 < J5> been working on the build page - it has been slow since I am learning new things 16:00 < J5> But it is coming on nicely 16:00 < mmcgrath> is there a demo up anywhere yet? 16:01 < J5> just in git 16:01 < J5> I'll get something up by next week 16:01 < J5> the end of next week that is 16:01 < mmcgrath> no worries. Do you have an ETA for when you'd like to deploy? 16:01 < ricky> Probably sometime after FAS2, I assume? 16:01 < J5> yes 16:02 < J5> well we can get the non-login stuff (it is still useful for searching packages and quickly navigating them) 16:02 < mmcgrath> 16:02 < J5> before fas2 16:02 < mmcgrath> J5: thanks for that. 16:02 < mmcgrath> alrighty, before we go 16:02 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor. 16:02 < mmcgrath> Anyone have anything else? 16:02 < skvidal> how about them backups? 16:03 < mmcgrath> ahh, yes dgilmore has been working on backups. 16:03 < skvidal> yay for all the work dgilmore and mmcgrath put in to make tape backups work 16:03 < mmcgrath> dgilmore: how's that going? 16:03 < dgilmore> skvidal: the backup on /mnt/koji is running very slowly 16:03 * mmcgrath notes tapes are in and AFAIK backing. 16:03 < mmcgrath> dgilmore: how long do you suspect a full koji backup will take? 16:03 < dgilmore> mmcgrath: at the rate we are going days 16:03 < mmcgrath> how many though? 16:04 < jcollie> what kind of tape hw do we have? 16:04 < mmcgrath> its a TL2000 with LTO-3 tapes. 16:04 < jcollie> are we still using bacula? 16:04 < dgilmore> since 10pm cst we have backed up 300gb of 2tb 16:04 < dgilmore> jcollie: yeah 16:05 < jcollie> this just uses a single LTO drive then? 16:05 < mmcgrath> jcollie: yeah. 16:05 < mmcgrath> dgilmore: anything else? We should probably wrap it up. 16:05 < jcollie> hmm too bad 16:06 < dgilmore> mmcgrath: its running and is working 16:06 < dgilmore> we will need to do some test restores 16:06 < mmcgrath> yeah 16:06 < dgilmore> but thats it 16:07 < mmcgrath> k. 16:07 * mmcgrath looks forward to that. 16:07 < mmcgrath> Ok, anyone have anything else? 16:07 * dgilmore has nothing 16:07 < jcollie> nope 16:08 < mmcgrath> allllllrighty 16:08 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting Closed -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From rordway at oregonstate.edu Thu Feb 14 23:18:40 2008 From: rordway at oregonstate.edu (Ryan Ordway) Date: Thu, 14 Feb 2008 15:18:40 -0800 Subject: Welp, I've failed. In-Reply-To: References: Message-ID: <0BC9C8D7-D6E5-453E-B54C-9145556FE3B8@oregonstate.edu> On Feb 13, 2008, at 11:32 AM, Mike McGrath wrote: > Well, over time its become clear that LDAP is just not very good at > doing > groups as we want it to do. We need to have people self-add > themselves to > groups, track when they were added, who added them. People can have > different access levels in the group (unapproved, user, sponsor, > admin). > LDAP is very geared towards what most people need (someone in charge > of a > group and adding people to that group). In an open environment like > ours, > we need the whole application process. Its not that LDAP is bad, > just not > the right tool for the job. ... > Thoughts? Comments? Concerns? Will using Postgres as the back-end and LDAP as a middle piece work with FAS2? Perhaps using LDAP to integrate with NSS and other 3rd party apps, but just for authentication/authorization (read access). Right now I'm using LDAP as my primary data store for our Library systems at OSU, but I'm considering moving to a tiered LDAP+SQL system, so if there are reasons why it doesn't work well I'd be especially happy to hear about them. :-) Ryan -- Ryan Ordway E-mail: rordway at oregonstate.edu Unix Systems Administrator rordway at library.oregonstate.edu OSU Libraries, Corvallis, OR 97331 Office: Valley Library #4657 From mmcgrath at redhat.com Fri Feb 15 00:17:00 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 14 Feb 2008 18:17:00 -0600 (CST) Subject: Welp, I've failed. In-Reply-To: <0BC9C8D7-D6E5-453E-B54C-9145556FE3B8@oregonstate.edu> References: <0BC9C8D7-D6E5-453E-B54C-9145556FE3B8@oregonstate.edu> Message-ID: On Thu, 14 Feb 2008, Ryan Ordway wrote: > ... > > > Thoughts? Comments? Concerns? > > > Will using Postgres as the back-end and LDAP as a middle piece work with FAS2? > Perhaps using LDAP to integrate with NSS and other 3rd party apps, but just > for authentication/authorization (read access). > > Right now I'm using LDAP as my primary data store for our Library systems at > OSU, but I'm considering moving to a tiered LDAP+SQL system, so if there are > reasons why it doesn't work well I'd be especially happy to hear about them. > :-) Thats certainly a possibility though I'd rather wait and see what won't work with this system. As it is right now everything will work except the wiki (which wouldn't have worked out of the box anyway AFAIK) and since we're pushing to move towards mediawiki (see today's meeting) I think even that won't be a problem. -Mike From admin at arcnetworks.biz Fri Feb 15 00:24:01 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Thu, 14 Feb 2008 19:24:01 -0500 Subject: Welp, I've failed. In-Reply-To: References: <0BC9C8D7-D6E5-453E-B54C-9145556FE3B8@oregonstate.edu> Message-ID: <5d66540b0802141624v2b123435v8552c6be085458bf@mail.gmail.com> I thought this was an interesting article/concept. http://www.vanemery.com/Opinion/OpenDAS.html -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Sat Feb 16 03:54:09 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 15 Feb 2008 21:54:09 -0600 (CST) Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: Message-ID: On Fri, 8 Feb 2008, Mike McGrath wrote: > So I spent some time last night and produced this: > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > It's worth noting that the upgrade from Moin1.5.8 -> Moin 1.6.1 took > longer then going from Moin 1.5.8 to the mediawiki install above. There's > still some work to be done (especially a theme). But I think the > conversion to mediawiki is much closer to us now then ever before if we > decide to go this route. > > So. > > Question 1, do we want to try this conversion? > For those that missed the meeting, this was discussed. It was determined that the infrastructure team wants to migrate. I'll be contacting all the individual teams to make sure they're fine with it, what features they'll want and we'll see about making it happen. -Mike From admin at arcnetworks.biz Sat Feb 16 05:00:50 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Sat, 16 Feb 2008 00:00:50 -0500 Subject: Welp, I've failed. In-Reply-To: <5d66540b0802141624v2b123435v8552c6be085458bf@mail.gmail.com> References: <0BC9C8D7-D6E5-453E-B54C-9145556FE3B8@oregonstate.edu> <5d66540b0802141624v2b123435v8552c6be085458bf@mail.gmail.com> Message-ID: <5d66540b0802152100h6041b4c7ybd0b78c2d65c1e70@mail.gmail.com> With the move to mediawiki, would we want to try and integrate a FAS2 authentication system? I know that mediawiki supports LDAP authentication with some extension. -Anand -------------- next part -------------- An HTML attachment was scrubbed... URL: From admin at arcnetworks.biz Sat Feb 16 05:01:08 2008 From: admin at arcnetworks.biz (Anand Capur) Date: Sat, 16 Feb 2008 00:01:08 -0500 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: References: Message-ID: <5d66540b0802152101r24785877rfcdee93dc3b80b2b@mail.gmail.com> On 2/15/08, Mike McGrath wrote: > > On Fri, 8 Feb 2008, Mike McGrath wrote: > > > So I spent some time last night and produced this: > > > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > > > It's worth noting that the upgrade from Moin1.5.8 -> Moin 1.6.1 took > > longer then going from Moin 1.5.8 to the mediawiki install > above. There's > > still some work to be done (especially a theme). But I think the > > conversion to mediawiki is much closer to us now then ever before if we > > decide to go this route. > > > > So. > > > > Question 1, do we want to try this conversion? > > > > For those that missed the meeting, this was discussed. It was determined > that the infrastructure team wants to migrate. I'll be contacting all the > individual teams to make sure they're fine with it, what features they'll > want and we'll see about making it happen. > > -Mike With the move to mediawiki, would we want to try and integrate a FAS2 authentication system? I know that mediawiki supports LDAP authentication with some extension. -Anand -------------- next part -------------- An HTML attachment was scrubbed... URL: From paulo.banon at googlemail.com Sat Feb 16 10:47:13 2008 From: paulo.banon at googlemail.com (Paulo Santos) Date: Sat, 16 Feb 2008 10:47:13 +0000 Subject: Moin 2.0 (or as I call it, mediawiki) In-Reply-To: <5d66540b0802152101r24785877rfcdee93dc3b80b2b@mail.gmail.com> References: <5d66540b0802152101r24785877rfcdee93dc3b80b2b@mail.gmail.com> Message-ID: <7a41c4bc0802160247v3efc63ads27cc370cc2328621@mail.gmail.com> I think this would be one of the objectives, yes. 2008/2/16 Anand Capur : > On 2/15/08, Mike McGrath wrote: > > > On Fri, 8 Feb 2008, Mike McGrath wrote: > > > > > So I spent some time last night and produced this: > > > > > > https://publictest1.fedoraproject.org/wiki/index.php/FedoraMain > > > > > > It's worth noting that the upgrade from Moin1.5.8 -> Moin 1.6.1 took > > > longer then going from Moin 1.5.8 to the mediawiki install > > above. There's > > > still some work to be done (especially a theme). But I think the > > > conversion to mediawiki is much closer to us now then ever before if > > we > > > decide to go this route. > > > > > > So. > > > > > > Question 1, do we want to try this conversion? > > > > > > > For those that missed the meeting, this was discussed. It was > > determined > > that the infrastructure team wants to migrate. I'll be contacting all > > the > > individual teams to make sure they're fine with it, what features > > they'll > > want and we'll see about making it happen. > > > > -Mike > > > With the move to mediawiki, would we want to try and integrate a FAS2 > authentication system? I know that mediawiki supports LDAP authentication > with some extension. > -Anand > > > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Sat Feb 16 21:02:37 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Sat, 16 Feb 2008 15:02:37 -0600 (CST) Subject: Welp, I've failed. In-Reply-To: <5d66540b0802152100h6041b4c7ybd0b78c2d65c1e70@mail.gmail.com> References: <0BC9C8D7-D6E5-453E-B54C-9145556FE3B8@oregonstate.edu> <5d66540b0802141624v2b123435v8552c6be085458bf@mail.gmail.com> <5d66540b0802152100h6041b4c7ybd0b78c2d65c1e70@mail.gmail.com> Message-ID: On Sat, 16 Feb 2008, Anand Capur wrote: > With the move to mediawiki, would we want to try and integrate a FAS2 > authentication system? I know that mediawiki supports LDAP authentication > with some extension. Yeah, I think that will be a requisite, no local accounts. -Mike From mmcgrath at redhat.com Sun Feb 17 03:50:20 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Sat, 16 Feb 2008 21:50:20 -0600 (CST) Subject: Koji bandaid Message-ID: The koji builders don't check back in automatically[1] if they've lost a connection to the host. I put this script together in an attempt to fix it, thought I'd post it here before sticking it on the builders. Basic premis is check if its checked in in 5 minutes (should be waaay more then enough) unless the box is under high load, then check 15 minutes, might be over kill. I'd like to run this check via cron every 5 minutes on each builder. Anyone have any suggested fixes or against me running this? -Mike [1] https://fedorahosted.org/koji/ticket/66 -------------- next part -------------- #!/usr/bin/python import urllib import koji import socket import datetime import time import os import sys FIVE_MIN = 300 FIFTEEN_MIN = 900 k = koji.ClientSession('https://publictest8.fedora.phx.redhat.com/kojihub', {}) hosts = k.listHosts() me = socket.gethostname().split('.')[0] def restart(): import commands (code, out) = commands.getstatusoutput('/etc/init.d/kojid reload') print out def lock(): f = open('/var/lock/subsys/koji_check', 'w') f.write('%s' % os.getpid()) f.close() def check_pid(pid): try: f = open('/proc/%s/status' % pid, 'r') f.close() return 1 except OSError, err: return 0 except TypeError: return 0 except IOError: return 0 def remove_lock(): os.remove('/var/lock/subsys/koji_check') def check_lock(): try: f = open('/var/lock/subsys/koji_check', 'r') old_pid = f.read() f.close except IOError: return else: if check_pid(old_pid): print "Check still running!" sys.exit(1) else: print "Lockfile exists, pid dead. Removing lock" remove_lock() return def check_host(): for host in hosts: if host['name'].startswith(me) and host['enabled']: t = k.getLastHostUpdate(host['id']) dt = time.strptime(t.split('.')[0], "%Y-%m-%d %H:%M:%S") if (time.time() - time.mktime(dt)) > FIVE_MIN: # Check to see if the box just happens to be under load if host['ready'] == False and host['task_load'] >= host['capacity']: # If under high load be a bit more lenient if (time.time() - time.mktime(dt)) > FIFTEEN_MIN: print "Restarting under high load" restart() else: # no load, its been 5 minutes. Restart print "Restarting" restart() def main(): check_lock() lock() check_host() remove_lock() if __name__ == '__main__': main() From jonathan.roberts.uk at googlemail.com Mon Feb 18 10:02:03 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Mon, 18 Feb 2008 10:02:03 +0000 Subject: news.fp.o Message-ID: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> Hey all, There's an open ticket here: https://hosted.fedoraproject.org/fedora-infrastructure/ticket/178 for a news.fedoraproject.org site but unfortunately it's not been updated in the past 4 months. Does anybody have any news on what's happening with it, and if not, would anybody mind if I picked it up? I'm not an expert but willing to learn, and if somebody a bit more knowledgable than me was willing to give me a bit of help from time to time I think we can get this done. I think it's quite an important piece to get in place, as there's more and more content I'm wanting to put out from a marketing perspective and this would be the perfect target location. Oh, and do tell me if this is the wrong list! Best wishes, Jon From mmcgrath at redhat.com Mon Feb 18 18:39:24 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 18 Feb 2008 12:39:24 -0600 (CST) Subject: news.fp.o In-Reply-To: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> Message-ID: On Mon, 18 Feb 2008, Jonathan Roberts wrote: > Hey all, > > There's an open ticket here: > > https://hosted.fedoraproject.org/fedora-infrastructure/ticket/178 > > for a news.fedoraproject.org site but unfortunately it's not been > updated in the past 4 months. Does anybody have any news on what's > happening with it, and if not, would anybody mind if I picked it up? > > I'm not an expert but willing to learn, and if somebody a bit more > knowledgable than me was willing to give me a bit of help from time to > time I think we can get this done. I think it's quite an important > piece to get in place, as there's more and more content I'm wanting to > put out from a marketing perspective and this would be the perfect > target location. > > Oh, and do tell me if this is the wrong list! > Its just waiting for a leader from the news site to take the project over. I'd highly suggest looking to see if wordpress can do what you want it to as it looks like we'll be deploying it elsewhere in our infrastructure. It'd make deployment much quicker and easier on your part. -Mike From jonathan.roberts.uk at googlemail.com Mon Feb 18 19:01:05 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Mon, 18 Feb 2008 19:01:05 +0000 Subject: news.fp.o In-Reply-To: References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> Message-ID: <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> > Its just waiting for a leader from the news site to take the project over. > I'd highly suggest looking to see if wordpress can do what you want it to > as it looks like we'll be deploying it elsewhere in our infrastructure. I've just taken a quick glance at wordpress and it looks like it will more than likely do the job, two points that I'm not so sure about though: * seperate rss feed for upcoming events * allowing anyone to submit a story for editors approval To me these two seem fairly minor and can probably be worked around through clever work flows...based on that I'm happy for wordpress to be used but I guess should check with the news/marketing teams. I'm happy to pick this up and lead it but I think should run past rest of news/marketing first. Definitely think it's something we want doing as soon as we can :) Best wishes, Jon > It'd make deployment much quicker and easier on your part. > > -Mike > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > From mmcgrath at redhat.com Mon Feb 18 23:19:25 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 18 Feb 2008 17:19:25 -0600 (CST) Subject: news.fp.o In-Reply-To: <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> Message-ID: On Mon, 18 Feb 2008, Jonathan Roberts wrote: > > Its just waiting for a leader from the news site to take the project over. > > I'd highly suggest looking to see if wordpress can do what you want it to > > as it looks like we'll be deploying it elsewhere in our infrastructure. > > I've just taken a quick glance at wordpress and it looks like it will > more than likely do the job, two points that I'm not so sure about > though: > > * seperate rss feed for upcoming events > * allowing anyone to submit a story for editors approval > > To me these two seem fairly minor and can probably be worked around > through clever work flows...based on that I'm happy for wordpress to > be used but I guess should check with the news/marketing teams. > > I'm happy to pick this up and lead it but I think should run past rest > of news/marketing first. Definitely think it's something we want doing > as soon as we can :) > Just to be clear, we certainly don't *have* to pick wordpress for news, but it would make things easier on the Infrastructure team and ultimately, probably easier on you guys if it'd work. -Mike From a.badger at gmail.com Tue Feb 19 06:56:08 2008 From: a.badger at gmail.com (Toshio Kuratomi) Date: Mon, 18 Feb 2008 22:56:08 -0800 Subject: TurboGears-1.0.4/SQLAlchemy-0.4 upgrade In-Reply-To: <47B10424.6000706@gmail.com> References: <47B10424.6000706@gmail.com> Message-ID: <47BA7D88.2090906@gmail.com> Toshio Kuratomi wrote: > I'm getting the new python-fedora working on publictest10 right now and > will be installing and testing the new stack on publictest1 soon > (probably tomorrow.) I'll send a note for people to beat on it while I > port over the packagedb. > The new stack is running on publictest10. The change was a bit more intrusive than I counted on for python-fedora so I'll be waiting until tomorrow to update publictest1 (when I can be available to address any problems that we encounter.) I've also identified a bug in TurboGears-1.0.4.2/3 when used with SQLAlchemy-0.4. This will affect people who are locating errors in input using exception handling like this: session.update([..]) try: session.flush() except: session.rollback [.. create an error message for the user ..] return [...error...] This might be used to catch duplicates of a unique record, for instance. I have a patch but I haven't gotten feedback from upstream TurboGears or Luke yet. The patch is attached to this ticket: http://trac.turbogears.org/ticket/1721 -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature URL: From dennis at ausil.us Tue Feb 19 13:14:10 2008 From: dennis at ausil.us (Dennis Gilmore) Date: Tue, 19 Feb 2008 07:14:10 -0600 Subject: Koji bandaid In-Reply-To: References: Message-ID: <200802190714.19955.dennis@ausil.us> On Saturday 16 February 2008, Mike McGrath wrote: > The koji builders don't check back in automatically[1] if they've lost a > connection to the host. I put this script together in an attempt to fix > it, thought I'd post it here before sticking it on the builders. Basic > premis is check if its checked in in 5 minutes (should be waaay more then > enough) unless the box is under high load, then check 15 minutes, might > be over kill. > > I'd like to run this check via cron every 5 minutes on each builder. > Anyone have any suggested fixes or against me running this? > > -Mike > > [1] https://fedorahosted.org/koji/ticket/66 Looks fine to me. its pretty conservative. but that not a bad place to start. I think we should have something similar for the hub that checks if it can talk to the db, and if the hub is throwing 500 errors restarts apache. Dennis -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 197 bytes Desc: This is a digitally signed message part. URL: From jeff at ocjtech.us Tue Feb 19 15:45:49 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 19 Feb 2008 09:45:49 -0600 Subject: Mailman List Policy for Fedora Hosted Message-ID: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Well, I believe that I have most of the technical bits in place for Mailman for Fedora Hosted. Now we just need to figure out a few policy items... 1) Who can request lists? My proposal: anyone that is listed as an administrator in the project's group in FAS. 2) What sorts of lists can be requested? My proposal: Lists may be reqested for discussing the use of, development of, or disseminating other useful information about (e.g. announcement or commit lists) projects hosted with Fedora. Lists about non-F/OSS topics or F/OSS projects not hosted with Fedora would not be acceptable. 3) What should the policy on list names be? My proposal: A) All list names must be prefixed with "-". B) All list names must be suffixed with "-list". C) Lists may optionally have something between the prefix and suffix, as long as it's not obviously vulgar or obscene. For example, the following would be acceptable list names: smolt-list smolt-dev-list smolt-commits-list The purpose for the "-list" suffix is to keep lists in a separate namespace in case we want to use @fedorahosted.org for some other purpose in the future. The exceptions to this rule would be the default "mailman" site list and possibly a list dedicated to discussing the Fedora Hosted service itself (name to be determined later). FESCo or the Fedora Board could approve other exceptions. 4) What should the policy on archives be? My proposal: A) All lists must have public archives. The exception would be the default "mailman" list. B) Requests to remove a post from the archives will be denied unless it can be shown that by *not* removing the post RedHat and/or Fedora face a credible threat of civil or criminal liability. We'll likely require the assistance of RH Legal to make these sorts of determinations (hopefully they will never happen). Jeff From wakko666 at gmail.com Tue Feb 19 16:15:54 2008 From: wakko666 at gmail.com (brett lentz) Date: Tue, 19 Feb 2008 08:15:54 -0800 Subject: Koji bandaid In-Reply-To: References: Message-ID: 2008/2/16 Mike McGrath : > The koji builders don't check back in automatically[1] if they've lost a > connection to the host. I put this script together in an attempt to fix > it, thought I'd post it here before sticking it on the builders. Basic > premis is check if its checked in in 5 minutes (should be waaay more then > enough) unless the box is under high load, then check 15 minutes, might > be over kill. > > I'd like to run this check via cron every 5 minutes on each builder. > Anyone have any suggested fixes or against me running this? > > -Mike > > [1] https://fedorahosted.org/koji/ticket/66 The script looks fine. Out of curiosity, why would you run it as a cron job instead of via nagios? ---Brett. From mmcgrath at redhat.com Tue Feb 19 16:55:21 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 19 Feb 2008 10:55:21 -0600 (CST) Subject: Koji bandaid In-Reply-To: References: Message-ID: On Tue, 19 Feb 2008, brett lentz wrote: > 2008/2/16 Mike McGrath : > > The koji builders don't check back in automatically[1] if they've lost a > > connection to the host. I put this script together in an attempt to fix > > it, thought I'd post it here before sticking it on the builders. Basic > > premis is check if its checked in in 5 minutes (should be waaay more then > > enough) unless the box is under high load, then check 15 minutes, might > > be over kill. > > > > I'd like to run this check via cron every 5 minutes on each builder. > > Anyone have any suggested fixes or against me running this? > > > > -Mike > > > > [1] https://fedorahosted.org/koji/ticket/66 > > > The script looks fine. Out of curiosity, why would you run it as a > cron job instead of via nagios? > We could very well do that actually. The main problem is, right now at least, we don't have nagios setup to actually take any actions when an event happens. Might be somthing our sysadmin-noc team can look at. Any takers? -Mike From mmcgrath at redhat.com Tue Feb 19 19:18:29 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 19 Feb 2008 13:18:29 -0600 (CST) Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Message-ID: On Tue, 19 Feb 2008, Jeffrey Ollie wrote: > Well, I believe that I have most of the technical bits in place for > Mailman for Fedora Hosted. Now we just need to figure out a few > policy items... > > 1) Who can request lists? My proposal: anyone that is listed as an > administrator in the project's group in FAS. > anyone can request a list, the filter will be for the admin team to create it. > 2) What sorts of lists can be requested? My proposal: Lists may be > reqested for discussing the use of, development of, or disseminating > other useful information about (e.g. announcement or commit lists) > projects hosted with Fedora. Lists about non-F/OSS topics or F/OSS > projects not hosted with Fedora would not be acceptable. I think thats fine, most common requests $project-users $project-devel will be easy to just let through. Questionable ones can always be dealt with as they come. > 3) What should the policy on list names be? My proposal: > > A) All list names must be prefixed with "-". > B) All list names must be suffixed with "-list". > C) Lists may optionally have something between the prefix and suffix, > as long as it's not obviously vulgar or obscene. > > For example, the following would be acceptable list names: > > smolt-list > smolt-dev-list > smolt-commits-list We've had requests about this by the individuals to remove "-list" I'm fine with it as the standard though. We can add it to the faq. > The exceptions to this rule would be the default "mailman" site list > and possibly a list dedicated to discussing the Fedora Hosted service > itself (name to be determined later). FESCo or the Fedora Board could > approve other exceptions. > > 4) What should the policy on archives be? My proposal: > > A) All lists must have public archives. The exception would be the > default "mailman" list. +1 > B) Requests to remove a post from the archives will be denied unless > it can be shown that by *not* removing the post RedHat and/or Fedora > face a credible threat of civil or criminal liability. We'll likely > require the assistance of RH Legal to make these sorts of > determinations (hopefully they will never happen). I think this might already be covered by our privacy policy. Either way we generally don't take stuff down unless there's some technical or other reason. Its easy for us to say "no we won't take that down" because people can escalate to the board.. who will then say no, we won't take that down :) Side note: Are the scripts ready? Do we have an SOP for it yet? -Mike From jeff at ocjtech.us Tue Feb 19 19:27:05 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 19 Feb 2008 13:27:05 -0600 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Message-ID: <935ead450802191127n4274d824i3b475ba3401d310b@mail.gmail.com> On 2/19/08, Mike McGrath wrote: > On Tue, 19 Feb 2008, Jeffrey Ollie wrote: > > > > B) All list names must be suffixed with "-list". > > We've had requests about this by the individuals to remove "-list" I'm > fine with it as the standard though. We can add it to the faq. It's not a big deal for me as long as we're consistent. Lists should either have it, or not. > Side note: Are the scripts ready? Almost. > Do we have an SOP for it yet? No. Jeff From jonstanley at gmail.com Tue Feb 19 20:15:12 2008 From: jonstanley at gmail.com (Jon Stanley) Date: Tue, 19 Feb 2008 15:15:12 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Message-ID: On Feb 19, 2008 10:45 AM, Jeffrey Ollie wrote: > 4) What should the policy on archives be? My proposal: > > A) All lists must have public archives. The exception would be the > default "mailman" list. Agreed on everything (with Mike's caveats) except for this. There *will* be exceptions to this rule. An example that I'm on is fedora-freemedia-list - we don't want folks home addresses showing up to anyone that cares to look at the archives. freemedia is a closed list with private archives, because of the personal information to be found there. fedora-board-list is another one, and I'm sure there's more, dealing with security for example. There needs to be a method of exception to the rule. +1 for the general idea, though - there should be *good* reason to get an exception that requires approval from Someone In Charge(TM) From notting at redhat.com Tue Feb 19 20:21:53 2008 From: notting at redhat.com (Bill Nottingham) Date: Tue, 19 Feb 2008 15:21:53 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Message-ID: <20080219202153.GA25133@nostromo.devel.redhat.com> Jon Stanley (jonstanley at gmail.com) said: > freemedia is a closed list with private archives, because of the > personal information to be found there. fedora-board-list is another > one, and I'm sure there's more, dealing with security for example. > There needs to be a method of exception to the rule. > > +1 for the general idea, though - there should be *good* reason to get > an exception that requires approval from Someone In Charge(TM) Are we intending to move *active* lists to new hosting? Bill From jeff at ocjtech.us Tue Feb 19 20:31:36 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 19 Feb 2008 14:31:36 -0600 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <20080219202153.GA25133@nostromo.devel.redhat.com> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <20080219202153.GA25133@nostromo.devel.redhat.com> Message-ID: <935ead450802191231t322cd19blf14f2e3dbffaf499@mail.gmail.com> On 2/19/08, Bill Nottingham wrote: > > Are we intending to move *active* lists to new hosting? The first step in the New Mailman World Order is to provide mailing list services for Fedora Hosted projects. The various Fedora mailing lists hosted on RedHat's Mailman server would be unchanged. Jeff From mmcgrath at redhat.com Tue Feb 19 21:03:26 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 19 Feb 2008 15:03:26 -0600 (CST) Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Message-ID: On Tue, 19 Feb 2008, Jon Stanley wrote: > On Feb 19, 2008 10:45 AM, Jeffrey Ollie wrote: > > > 4) What should the policy on archives be? My proposal: > > > > A) All lists must have public archives. The exception would be the > > default "mailman" list. > > Agreed on everything (with Mike's caveats) except for this. There > *will* be exceptions to this rule. An example that I'm on is > fedora-freemedia-list - we don't want folks home addresses showing up > to anyone that cares to look at the archives. > > freemedia is a closed list with private archives, because of the > personal information to be found there. fedora-board-list is another > one, and I'm sure there's more, dealing with security for example. > There needs to be a method of exception to the rule. > > +1 for the general idea, though - there should be *good* reason to get > an exception that requires approval from Someone In Charge(TM) > Hmm, unfortunately I don't think hosted is the right solution for those people. We even offer direct rsync access to all of the projects, I had assumed we'd be doing the same for mail archives. We don't allow any private data in hosted currently, not sure that we should for the mailing lists either. -Mike From jeff at ocjtech.us Tue Feb 19 21:09:35 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 19 Feb 2008 15:09:35 -0600 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Message-ID: <935ead450802191309q659fbbb0u488a7febb18f0c22@mail.gmail.com> On 2/19/08, Mike McGrath wrote: > On Tue, 19 Feb 2008, Jon Stanley wrote: > > > On Feb 19, 2008 10:45 AM, Jeffrey Ollie wrote: > > > > > 4) What should the policy on archives be? My proposal: > > > > > > A) All lists must have public archives. The exception would be the > > > default "mailman" list. > > > > Agreed on everything (with Mike's caveats) except for this. There > > *will* be exceptions to this rule. An example that I'm on is > > fedora-freemedia-list - we don't want folks home addresses showing up > > to anyone that cares to look at the archives. > > > > freemedia is a closed list with private archives, because of the > > personal information to be found there. fedora-board-list is another > > one, and I'm sure there's more, dealing with security for example. > > There needs to be a method of exception to the rule. > > Hmm, unfortunately I don't think hosted is the right solution for those > people. We even offer direct rsync access to all of the projects, I had > assumed we'd be doing the same for mail archives. We don't allow any > private data in hosted currently, not sure that we should for the mailing > lists either. Yeah, I would think that a mailing list wouldn't be the best tool for the free media project anyway. I would think that some sort of bug/issue tracking system where bugs/issues could be marked as "private" would be best - that would make it easier to make sure that media requests get handled and don't get lost. Jeff From jonstanley at gmail.com Tue Feb 19 21:26:56 2008 From: jonstanley at gmail.com (Jon Stanley) Date: Tue, 19 Feb 2008 16:26:56 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <935ead450802191309q659fbbb0u488a7febb18f0c22@mail.gmail.com> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <935ead450802191309q659fbbb0u488a7febb18f0c22@mail.gmail.com> Message-ID: On Feb 19, 2008 4:09 PM, Jeffrey Ollie wrote: > Yeah, I would think that a mailing list wouldn't be the best tool for > the free media project anyway. I would think that some sort of > bug/issue tracking system where bugs/issues could be marked as > "private" would be best - that would make it easier to make sure that > media requests get handled and don't get lost. Hmm, excellent idea. We already have a method of putting users in bz groups via FAS/xmlrpc magic, and this is actually the best idea I've seen for handling this. Copying Thomas on this. Here's what I think the workflow would be: 1) Create new product in bz called Fedora Freemedia. Restrict entry in this product to members of freemedia_contrib or whatever. 2) Have the freemedia form, instead of sending mail, file bugs against that product, making them private to freemedia_contrib using the python-bugzilla interface. 3) When someone accepts the request, they ASSIGN the bugs to themselves. 4) When the request is completed, the person closes the bug. It's step 4 that we can't track with our current system. I, for example, was several days delayed in getting stuff out the door from accepting requests this month. That could be easily seen and somehow exported to our tracking page. I've got some reporting scripts for bz in general since I'm the Triage Dude(TM). They could be easily be modified to do whatever. As for the original post, I wasn't thinking that we were just talking about hosted here. I thought that we were eventually (not as part of this phase obviously) migrate existing lists from RH mailman to Hosted. From jeff at ocjtech.us Tue Feb 19 22:30:39 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Tue, 19 Feb 2008 16:30:39 -0600 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <935ead450802191309q659fbbb0u488a7febb18f0c22@mail.gmail.com> Message-ID: <935ead450802191430x29896df0gfdd31d61ec2b6ae6@mail.gmail.com> On 2/19/08, Jon Stanley wrote: > > As for the original post, I wasn't thinking that we were just talking > about hosted here. I thought that we were eventually (not as part of > this phase obviously) migrate existing lists from RH mailman to > Hosted. There's been some discussion on that point, but basically we decided that we weren't ready to take the step of moving the Fedora lists away from RH. Jeff From mmcgrath at redhat.com Wed Feb 20 03:49:55 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Tue, 19 Feb 2008 21:49:55 -0600 (CST) Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <935ead450802191430x29896df0gfdd31d61ec2b6ae6@mail.gmail.com> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <935ead450802191309q659fbbb0u488a7febb18f0c22@mail.gmail.com> <935ead450802191430x29896df0gfdd31d61ec2b6ae6@mail.gmail.com> Message-ID: On Tue, 19 Feb 2008, Jeffrey Ollie wrote: > On 2/19/08, Jon Stanley wrote: > > > > As for the original post, I wasn't thinking that we were just talking > > about hosted here. I thought that we were eventually (not as part of > > this phase obviously) migrate existing lists from RH mailman to > > Hosted. > > There's been some discussion on that point, but basically we decided > that we weren't ready to take the step of moving the Fedora lists away > from RH. > we're getting closer to where we could but I believe the board has put Dennis in charge of looking at our options for that so any questions about policy with that would be good to go to him. -Mike From jonathan.roberts.uk at googlemail.com Wed Feb 20 13:59:26 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Wed, 20 Feb 2008 13:59:26 +0000 Subject: news.fp.o In-Reply-To: References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> Message-ID: <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> > Just to be clear, we certainly don't *have* to pick wordpress for news, > but it would make things easier on the Infrastructure team and ultimately, > probably easier on you guys if it'd work. Hey, I've been in touch with the Marketing and News lists...it looks like Wordpress could cover our basic needs. Where do we take it from here? A test instance would be good to have. Jon From jorge at konnekt.org Wed Feb 20 14:04:09 2008 From: jorge at konnekt.org (Jorge Bras) Date: Wed, 20 Feb 2008 14:04:09 +0000 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <935ead450802191127n4274d824i3b475ba3401d310b@mail.gmail.com> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <935ead450802191127n4274d824i3b475ba3401d310b@mail.gmail.com> Message-ID: <1203516249.7802.43.camel@localhost> On Tue, 2008-02-19 at 13:27 -0600, Jeffrey Ollie wrote: > On 2/19/08, Mike McGrath wrote: > > On Tue, 19 Feb 2008, Jeffrey Ollie wrote: > > > > > > B) All list names must be suffixed with "-list". > > > > We've had requests about this by the individuals to remove "-list" I'm > > fine with it as the standard though. We can add it to the faq. > > It's not a big deal for me as long as we're consistent. Lists should > either have it, or not. Why not use @lists.fedoraproject.org, this way, you could still use @fedoraproject.org, and the suffix "-list" is gone. just my 2c. ./bras -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From jmtaylor90 at gmail.com Wed Feb 20 14:32:27 2008 From: jmtaylor90 at gmail.com (Jason) Date: Wed, 20 Feb 2008 09:32:27 -0500 Subject: news.fp.o In-Reply-To: <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> Message-ID: <1203517947.3524.3.camel@bruiser.localdomain> Hi Jon, I talked to mmcgrath and iwolf this morning on irc, we found an existing ticket[1] for this idea. If the parties involved on the marketing/news sides could look it over and make sure it accurate as far as needs/goals then the infrastructure folks can see about making it happen. :) -Jason [1] https://fedorahosted.org/fedora-infrastructure/ticket/178 On Wed, 2008-02-20 at 13:59 +0000, Jonathan Roberts wrote: > > Just to be clear, we certainly don't *have* to pick wordpress for news, > > but it would make things easier on the Infrastructure team and ultimately, > > probably easier on you guys if it'd work. > > Hey, > > I've been in touch with the Marketing and News lists...it looks like > Wordpress could cover our basic needs. Where do we take it from here? > A test instance would be good to have. > > Jon > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list From sundaram at fedoraproject.org Wed Feb 20 14:53:31 2008 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Wed, 20 Feb 2008 20:23:31 +0530 Subject: news.fp.o In-Reply-To: <1203517947.3524.3.camel@bruiser.localdomain> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> Message-ID: <47BC3EEB.3040605@fedoraproject.org> Jason wrote: > Hi Jon, I talked to mmcgrath and iwolf this morning on irc, we found an > existing ticket[1] for this idea. If the parties involved on the > marketing/news sides could look it over and make sure it accurate as far > as needs/goals then the infrastructure folks can see about making it > happen. :) > > -Jason > > [1] https://fedorahosted.org/fedora-infrastructure/ticket/178 Yes. I filed this ticket and I have already talked to the news and marketing teams. Rahul From linux at elfshadow.net Wed Feb 20 14:53:52 2008 From: linux at elfshadow.net (Jeffrey Tadlock) Date: Wed, 20 Feb 2008 09:53:52 -0500 Subject: news.fp.o In-Reply-To: <47BC3EEB.3040605@fedoraproject.org> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> Message-ID: <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> On Wed, Feb 20, 2008 at 9:53 AM, Rahul Sundaram wrote: > Jason wrote: > > Hi Jon, I talked to mmcgrath and iwolf this morning on irc, we found an > > existing ticket[1] for this idea. If the parties involved on the > > marketing/news sides could look it over and make sure it accurate as far > > as needs/goals then the infrastructure folks can see about making it > > happen. :) > > > > [1] https://fedorahosted.org/fedora-infrastructure/ticket/178 > > Yes. I filed this ticket and I have already talked to the news and > marketing teams. The ticket needs updated to reflect the recent discussion that Word Press would most likely be a workable alternative to the Drupal setup being discussed towards the end of the ticket. Everyone might not be following the email thread, so having the updated, correct information in the ticket is more useful to the Infrastructure team. Thanks, ~Jeffrey From sundaram at fedoraproject.org Wed Feb 20 15:03:01 2008 From: sundaram at fedoraproject.org (Rahul Sundaram) Date: Wed, 20 Feb 2008 20:33:01 +0530 Subject: news.fp.o In-Reply-To: <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> Message-ID: <47BC4125.30700@fedoraproject.org> Jeffrey Tadlock wrote: > > The ticket needs updated to reflect the recent discussion that Word > Press would most likely be a workable alternative to the Drupal setup > being discussed towards the end of the ticket. Everyone might not be > following the email thread, so having the updated, correct information > in the ticket is more useful to the Infrastructure team. Well in this case, the suggestion of wordpress actually comes from the infrastructure team. Any software that meets the requirements listed is ok. Be it wordpress or drupal or something else. Rahul From Matt_Domsch at dell.com Wed Feb 20 15:08:33 2008 From: Matt_Domsch at dell.com (Matt Domsch) Date: Wed, 20 Feb 2008 09:08:33 -0600 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <1203516249.7802.43.camel@localhost> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <935ead450802191127n4274d824i3b475ba3401d310b@mail.gmail.com> <1203516249.7802.43.camel@localhost> Message-ID: <20080220150833.GB14217@auslistsprd01.us.dell.com> On Wed, Feb 20, 2008 at 02:04:09PM +0000, Jorge Bras wrote: > > On Tue, 2008-02-19 at 13:27 -0600, Jeffrey Ollie wrote: > > On 2/19/08, Mike McGrath wrote: > > > On Tue, 19 Feb 2008, Jeffrey Ollie wrote: > > > > > > > > B) All list names must be suffixed with "-list". > > > > > > We've had requests about this by the individuals to remove "-list" I'm > > > fine with it as the standard though. We can add it to the faq. > > > > It's not a big deal for me as long as we're consistent. Lists should > > either have it, or not. > > Why not use @lists.fedoraproject.org, this way, you could > still use @fedoraproject.org, and the suffix "-list" is gone. I personally really like @lists.fedorahosted.org, with mailman managing all the mail to that address. In the end it's all semantics anyhow, so do what's easiest for you long-term. -- Matt Domsch Linux Technology Strategist, Dell Office of the CTO linux.dell.com & www.dell.com/linux From jonathan.roberts.uk at googlemail.com Wed Feb 20 15:41:52 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Wed, 20 Feb 2008 15:41:52 +0000 Subject: news.fp.o In-Reply-To: <47BC4125.30700@fedoraproject.org> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> Message-ID: <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> On 20/02/2008, Rahul Sundaram wrote: > Jeffrey Tadlock wrote: > > > > > The ticket needs updated to reflect the recent discussion that Word > > Press would most likely be a workable alternative to the Drupal setup > > being discussed towards the end of the ticket. Everyone might not be > > following the email thread, so having the updated, correct information > > in the ticket is more useful to the Infrastructure team. > > Well in this case, the suggestion of wordpress actually comes from the > infrastructure team. Any software that meets the requirements listed is > ok. Be it wordpress or drupal or something else. I agree...If we could update the ticket though that would be good - I'd do this myself but don't have an account. Anybody else? Jon From linux at elfshadow.net Wed Feb 20 16:14:45 2008 From: linux at elfshadow.net (Jeffrey Tadlock) Date: Wed, 20 Feb 2008 11:14:45 -0500 Subject: news.fp.o In-Reply-To: <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> Message-ID: <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> On Wed, Feb 20, 2008 at 10:41 AM, Jonathan Roberts wrote: > I agree...If we could update the ticket though that would be good - > I'd do this myself but don't have an account. Anybody else? Your FAS account should let you login and add a comment to the ticket [1]. Thanks! ~Jeffrey [1] http://fedoraproject.org/wiki/Infrastructure/Tickets From jonathan.roberts.uk at googlemail.com Wed Feb 20 16:20:45 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Wed, 20 Feb 2008 16:20:45 +0000 Subject: news.fp.o In-Reply-To: <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> Message-ID: <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> On 20/02/2008, Jeffrey Tadlock wrote: > On Wed, Feb 20, 2008 at 10:41 AM, Jonathan Roberts > wrote: > > I agree...If we could update the ticket though that would be good - > > I'd do this myself but don't have an account. Anybody else? > > Your FAS account should let you login and add a comment to the ticket [1]. Doesn't seem to be working!? Am I doing something wrong!? Used the login link in the upper right...entered my FAS information (which I checked by logging in directly on FAS too) and just get the password prompt reappearing again and again :( Best wishes, Jon > > Thanks! > ~Jeffrey > > > [1] http://fedoraproject.org/wiki/Infrastructure/Tickets > > _______________________________________________ > Fedora-infrastructure-list mailing list > Fedora-infrastructure-list at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list > From ricky at fedoraproject.org Wed Feb 20 18:48:47 2008 From: ricky at fedoraproject.org (Ricky Zhou) Date: Wed, 20 Feb 2008 13:48:47 -0500 Subject: news.fp.o In-Reply-To: <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> References: <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> Message-ID: <20080220184847.GA3873@Max.nyc1.dsl.speakeasy.net> On 2008-02-20 04:20:45 PM, Jonathan Roberts wrote: > On 20/02/2008, Jeffrey Tadlock wrote: > > On Wed, Feb 20, 2008 at 10:41 AM, Jonathan Roberts > > wrote: > > > I agree...If we could update the ticket though that would be good - > > > I'd do this myself but don't have an account. Anybody else? > > > > Your FAS account should let you login and add a comment to the ticket [1]. > > Doesn't seem to be working!? Am I doing something wrong!? > > Used the login link in the upper right...entered my FAS information > (which I checked by logging in directly on FAS too) and just get the > password prompt reappearing again and again :( I think you might have used a different case when entering your username. Try using jonrob instead of JonRob. Thanks, Ricky -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From mmcgrath at redhat.com Wed Feb 20 19:04:48 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 20 Feb 2008 13:04:48 -0600 (CST) Subject: news.fp.o In-Reply-To: <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> Message-ID: On Wed, 20 Feb 2008, Jonathan Roberts wrote: > On 20/02/2008, Jeffrey Tadlock wrote: > > On Wed, Feb 20, 2008 at 10:41 AM, Jonathan Roberts > > wrote: > > > I agree...If we could update the ticket though that would be good - > > > I'd do this myself but don't have an account. Anybody else? > > > > Your FAS account should let you login and add a comment to the ticket [1]. > > Doesn't seem to be working!? Am I doing something wrong!? > > Used the login link in the upper right...entered my FAS information > (which I checked by logging in directly on FAS too) and just get the > password prompt reappearing again and again :( > > Best wishes, > When the time comes anyone in sysadmin-web can help you get the wordpress instance setup, we actually have one on publictest1 right now that Frank Chiulli has been testing with. You two should meet up. -Mike From jonathan.roberts.uk at googlemail.com Wed Feb 20 19:06:51 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Wed, 20 Feb 2008 19:06:51 +0000 Subject: news.fp.o In-Reply-To: <20080220184847.GA3873@Max.nyc1.dsl.speakeasy.net> References: <3263b11b0802181101i417ff229y7f6f1950fee447c1@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <20080220184847.GA3873@Max.nyc1.dsl.speakeasy.net> Message-ID: <3263b11b0802201106g66aeb2deg557609c2c602a35@mail.gmail.com> > I think you might have used a different case when entering your username. > Try using jonrob instead of JonRob. Thanks Ricky, that's fixed :) Ticket has been updated... Jon From jonathan.roberts.uk at googlemail.com Wed Feb 20 19:14:47 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Wed, 20 Feb 2008 19:14:47 +0000 Subject: news.fp.o In-Reply-To: References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> Message-ID: <3263b11b0802201114j3580e1c7ncefe11a384abb2ab@mail.gmail.com> > When the time comes anyone in sysadmin-web can help you get the wordpress > instance setup, we actually have one on publictest1 right now that Frank > Chiulli has been testing with. You two should meet up. > OK super - I'm sure I'll be looking for someone in sysadmin-web soon enough - i hope! Jon From lmacken at redhat.com Wed Feb 20 21:38:57 2008 From: lmacken at redhat.com (Luke Macken) Date: Wed, 20 Feb 2008 16:38:57 -0500 Subject: Collaboration Servers! In-Reply-To: References: Message-ID: <20080220213857.GB7289@crow> On Wed, Jan 30, 2008 at 03:15:22PM -0600, Mike McGrath wrote: > collab1.fedoraproject.org is up and running. Yahoo! So whats missing? > Well, it doesn't actually do anything yet. Plans for it include > > 1) gobby (its AMAZING) > 2) pastebin or something like it (also amazing) > 3) mailman. > > So who wants to set up what? Luke, you'd mentioned you might be able to > get gobby up sometime this week / next. Is that still the case? If so > I'll open a ticket and assign it to you. Sobby (the standalone obby server) is now running on gobby.fedoraproject.org. I also setup a cronjob to `git add . ; git commit -a` everything in the session hourly, and changes can be viewed via gitweb[0]. luke [0]: http://gobby.fedoraproject.org/git/gitweb.cgi?p=sobby/.git;a=summary From dimitris at glezos.com Wed Feb 20 22:23:27 2008 From: dimitris at glezos.com (Dimitris Glezos) Date: Thu, 21 Feb 2008 00:23:27 +0200 Subject: Collaboration Servers! In-Reply-To: <20080220213857.GB7289@crow> References: <20080220213857.GB7289@crow> Message-ID: <6d4237680802201423l7bbdcf36q7e82a0954b78c646@mail.gmail.com> On Wed, Feb 20, 2008 at 11:38 PM, Luke Macken wrote: > > Sobby (the standalone obby server) is now running on gobby.fedoraproject.org. > > I also setup a cronjob to `git add . ; git commit -a` everything in the session hourly, > and changes can be viewed via gitweb[0]. This is a good feature, however we should make it *very* clear somehow that the text is being logged. -d -- Dimitris Glezos Jabber ID: glezos at jabber.org, GPG: 0xA5A04C3B http://dimitris.glezos.com/ "He who gives up functionality for ease of use loses both and deserves neither." (Anonymous) -- From smooge at gmail.com Thu Feb 21 02:32:14 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Wed, 20 Feb 2008 19:32:14 -0700 Subject: news.fp.o In-Reply-To: References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> Message-ID: <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> On Wed, Feb 20, 2008 at 12:04 PM, Mike McGrath wrote: > > > On Wed, 20 Feb 2008, Jonathan Roberts wrote: > > > On 20/02/2008, Jeffrey Tadlock wrote: > > > On Wed, Feb 20, 2008 at 10:41 AM, Jonathan Roberts > > > wrote: > > > > I agree...If we could update the ticket though that would be good - > > > > I'd do this myself but don't have an account. Anybody else? > > > > > > Your FAS account should let you login and add a comment to the ticket [1]. > > > > Doesn't seem to be working!? Am I doing something wrong!? > > > > Used the login link in the upper right...entered my FAS information > > (which I checked by logging in directly on FAS too) and just get the > > password prompt reappearing again and again :( > > > > Best wishes, > > > > When the time comes anyone in sysadmin-web can help you get the wordpress > instance setup, we actually have one on publictest1 right now that Frank > Chiulli has been testing with. You two should meet up. > Ok one thing to find out on this.. is what is the security aspects of using wordpress. I am probably not the person to mention this as I partially flamed a Red Hat employee earlier this month about their views on WordPress.. but it would be good to make sure that it isnt going to be a problem security wise. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From skvidal at fedoraproject.org Thu Feb 21 02:49:27 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Wed, 20 Feb 2008 21:49:27 -0500 Subject: news.fp.o In-Reply-To: <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> Message-ID: <1203562167.13356.123.camel@cutter> On Wed, 2008-02-20 at 19:32 -0700, Stephen John Smoogen wrote: > Ok one thing to find out on this.. is what is the security aspects of > using wordpress. I am probably not the person to mention this as I > partially flamed a Red Hat employee earlier this month about their > views on WordPress.. but it would be good to make sure that it isnt > going to be a problem security wise. > wordpress is actively maintained and widely used. It has a security track record of all php programs but it also has a good record of quick turn around times for issues. -sv From loupgaroublond at gmail.com Thu Feb 21 04:08:38 2008 From: loupgaroublond at gmail.com (Yaakov Nemoy) Date: Wed, 20 Feb 2008 23:08:38 -0500 Subject: Collaboration Servers! In-Reply-To: <20080220213857.GB7289@crow> References: <20080220213857.GB7289@crow> Message-ID: <7f692fec0802202008i6df1ba36wfb7c48b37440c69d@mail.gmail.com> On Wed, Feb 20, 2008 at 4:38 PM, Luke Macken wrote: > On Wed, Jan 30, 2008 at 03:15:22PM -0600, Mike McGrath wrote: > > > collab1.fedoraproject.org is up and running. Yahoo! So whats missing? > > Well, it doesn't actually do anything yet. Plans for it include > > > > 1) gobby (its AMAZING) > > 2) pastebin or something like it (also amazing) > > 3) mailman. > > > > So who wants to set up what? Luke, you'd mentioned you might be able to > > get gobby up sometime this week / next. Is that still the case? If so > > I'll open a ticket and assign it to you. > > Sobby (the standalone obby server) is now running on gobby.fedoraproject.org. > > I also setup a cronjob to `git add . ; git commit -a` everything in the session hourly, > and changes can be viewed via gitweb[0]. > > luke > > > [0]: http://gobby.fedoraproject.org/git/gitweb.cgi?p=sobby/.git;a=summary I get a 403 error from trying to view that gitweb repo. Otherwise, pretty awesome. -Yaakov From mmcgrath at redhat.com Thu Feb 21 04:29:33 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 20 Feb 2008 22:29:33 -0600 (CST) Subject: news.fp.o In-Reply-To: <1203562167.13356.123.camel@cutter> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> <1203562167.13356.123.camel@cutter> Message-ID: On Wed, 20 Feb 2008, seth vidal wrote: > > On Wed, 2008-02-20 at 19:32 -0700, Stephen John Smoogen wrote: > > > Ok one thing to find out on this.. is what is the security aspects of > > using wordpress. I am probably not the person to mention this as I > > partially flamed a Red Hat employee earlier this month about their > > views on WordPress.. but it would be good to make sure that it isnt > > going to be a problem security wise. > > > > wordpress is actively maintained and widely used. It has a security > track record of all php programs but it also has a good record of quick > turn around times for issues. > Additionally, mod_security will help is deal with 0day exploits and some other things. I think wordpress has an ok security record but thats by reputation, not research, anyone have a moment to look and post to the list? -Mike From lmacken at redhat.com Thu Feb 21 07:07:07 2008 From: lmacken at redhat.com (Luke Macken) Date: Thu, 21 Feb 2008 02:07:07 -0500 Subject: Collaboration Servers! In-Reply-To: <6d4237680802201423l7bbdcf36q7e82a0954b78c646@mail.gmail.com> References: <20080220213857.GB7289@crow> <6d4237680802201423l7bbdcf36q7e82a0954b78c646@mail.gmail.com> Message-ID: <20080221070707.GB4903@crow> On Thu, Feb 21, 2008 at 12:23:27AM +0200, Dimitris Glezos wrote: > On Wed, Feb 20, 2008 at 11:38 PM, Luke Macken wrote: > > > > Sobby (the standalone obby server) is now running on gobby.fedoraproject.org. > > > > I also setup a cronjob to `git add . ; git commit -a` everything in the session hourly, > > and changes can be viewed via gitweb[0]. > > This is a good feature, however we should make it *very* clear somehow > that the text is being logged. Agreed. I mention that all files get committed to revision control in the README on the server, and in my blog post. Feel free to note this anywhere else you see applicable. luke From lmacken at redhat.com Thu Feb 21 07:08:42 2008 From: lmacken at redhat.com (Luke Macken) Date: Thu, 21 Feb 2008 02:08:42 -0500 Subject: Collaboration Servers! In-Reply-To: <7f692fec0802202008i6df1ba36wfb7c48b37440c69d@mail.gmail.com> References: <20080220213857.GB7289@crow> <7f692fec0802202008i6df1ba36wfb7c48b37440c69d@mail.gmail.com> Message-ID: <20080221070842.GC4903@crow> On Wed, Feb 20, 2008 at 11:08:38PM -0500, Yaakov Nemoy wrote: > On Wed, Feb 20, 2008 at 4:38 PM, Luke Macken wrote: > > On Wed, Jan 30, 2008 at 03:15:22PM -0600, Mike McGrath wrote: > > > > > collab1.fedoraproject.org is up and running. Yahoo! So whats missing? > > > Well, it doesn't actually do anything yet. Plans for it include > > > > > > 1) gobby (its AMAZING) > > > 2) pastebin or something like it (also amazing) > > > 3) mailman. > > > > > > So who wants to set up what? Luke, you'd mentioned you might be able to > > > get gobby up sometime this week / next. Is that still the case? If so > > > I'll open a ticket and assign it to you. > > > > Sobby (the standalone obby server) is now running on gobby.fedoraproject.org. > > > > I also setup a cronjob to `git add . ; git commit -a` everything in the session hourly, > > and changes can be viewed via gitweb[0]. > > > > luke > > > > > > [0]: http://gobby.fedoraproject.org/git/gitweb.cgi?p=sobby/.git;a=summary > > I get a 403 error from trying to view that gitweb repo. > > Otherwise, pretty awesome. Ugh, SELinux. Should be "fixed", for now. I threw together a SELinux policy for sobby tonight; I'll look into getting it working tomorrow. luke From jonathan.roberts.uk at googlemail.com Thu Feb 21 14:30:46 2008 From: jonathan.roberts.uk at googlemail.com (Jonathan Roberts) Date: Thu, 21 Feb 2008 14:30:46 +0000 Subject: news.fp.o In-Reply-To: References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> <1203562167.13356.123.camel@cutter> Message-ID: <3263b11b0802210630q21e2638cy554ee6b966b6b20@mail.gmail.com> > Additionally, mod_security will help is deal with 0day exploits and some > other things. I think wordpress has an ok security record but thats by > reputation, not research, anyone have a moment to look and post to the > list? Pending on these security investigations, could somebody drop a message - either here or on the marketing/news lists - that explains the process we need to go through to get this to completion? A link to a relevant doc would be just as good :) Just so we know where we're heading and can help out where ever infrastructure needs us! Best wishes, Jon From a.badger at gmail.com Thu Feb 21 15:55:59 2008 From: a.badger at gmail.com (Toshio Kuratomi) Date: Thu, 21 Feb 2008 07:55:59 -0800 Subject: news.fp.o In-Reply-To: References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <3263b11b0802200559l556e86c0ua183b77cc7e22db5@mail.gmail.com> <1203517947.3524.3.camel@bruiser.localdomain> <47BC3EEB.3040605@fedoraproject.org> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> <1203562167.13356.123.camel@cutter> Message-ID: <47BD9F0F.2020600@gmail.com> Mike McGrath wrote: > On Wed, 20 Feb 2008, seth vidal wrote: > >> On Wed, 2008-02-20 at 19:32 -0700, Stephen John Smoogen wrote: >> >>> Ok one thing to find out on this.. is what is the security aspects of >>> using wordpress. I am probably not the person to mention this as I >>> partially flamed a Red Hat employee earlier this month about their >>> views on WordPress.. but it would be good to make sure that it isnt >>> going to be a problem security wise. >>> >> wordpress is actively maintained and widely used. It has a security >> track record of all php programs but it also has a good record of quick >> turn around times for issues. >> > > Additionally, mod_security will help is deal with 0day exploits and some > other things. I think wordpress has an ok security record but thats by > reputation, not research, anyone have a moment to look and post to the > list? > This is a highly inaccurate measure of security but it's something to look at. I wonder if lkundrak and the security team have a preference for blogging/news software :-) Number of CVEs listed on http://nvd.nist.gov/nvd.cfm wordpress drupal mediawiki zope plone 2008 30 17 1 0 0 2007 64 37 7 2 1 2006 21 39 4 1 3 These numbers show a big difference between mediawiki and drupal or wordpress. The questions are just how valid the numbers are and whether we're confident that the combination of SELinux (which we will then depend on; no more turning it off if we can't figure out a problem) and mod_security will keep our servers and users of the sites safe from the exploits that will appear. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature URL: From linux at elfshadow.net Thu Feb 21 18:13:14 2008 From: linux at elfshadow.net (Jeffrey Tadlock) Date: Thu, 21 Feb 2008 13:13:14 -0500 Subject: news.fp.o In-Reply-To: <47BD9F0F.2020600@gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> <1203562167.13356.123.camel@cutter> <47BD9F0F.2020600@gmail.com> Message-ID: <10e0a9b00802211013n567b43c6xa0e0d8cde4e423d3@mail.gmail.com> 2008/2/21 Toshio Kuratomi : > This is a highly inaccurate measure of security but it's something to > look at. I wonder if lkundrak and the security team have a preference > for blogging/news software :-) > > Number of CVEs listed on http://nvd.nist.gov/nvd.cfm > wordpress drupal mediawiki zope plone > 2008 30 17 1 0 0 > 2007 64 37 7 2 1 > 2006 21 39 4 1 3 I looked at WordPress a bit this morning as well. I used the same source as Toshio did, but I think I used a slightly different search than him. I used the Advanced search and set the Product to WordPress. That yielded these numbers: 2008: 13 2007: 42 2006: 16 If you search the vuln database for just wordpress it pulls in a lot of plugins for WordPress that have issues. Even the search I did pulled in results for plugins for WordPress and not just core WordPress components. So I went through 2008 and 2007 to see which results in my search affected core WordPress bits and which were for optional plugins. Those results were: 2008: 7 2007: 36 Several of the hits for those two years had been for things like custom themes someone had provided or guest books or an image gallery. I also looked briefly at versions affected as well. Just using 2008 as an example, there were still 7 security issues listed for core WordPress components so far. But if you figure you probably shouldn't still be running a 2.0.x version or 2.1.x version of WordPress in 2008 then another 5 CVE's drop off the list leaving 2008 at 2 CVEs. To be fair, I only looked this closely at WordPress. It is quite likely Drupal's numbers would drop if I looked through those results and made decisions on which affected core bits and which affected plugins to Drupal. Like Toshio already said, this isn't the greatest way to determine the security of an app. > These numbers show a big difference between mediawiki and drupal or > wordpress. The questions are just how valid the numbers are and whether > we're confident that the combination of SELinux (which we will then > depend on; no more turning it off if we can't figure out a problem) and > mod_security will keep our servers and users of the sites safe from the > exploits that will appear. With any application we provide we need to consider security. I think SELinux is a valid means to help prevent damage from 0-day flaws as is mod_security. They are tools in the toolkit we can use to help reduce our attack surface. If we do move to PHP based apps, we could also consider looking at suhosin [1] as another tool for the toolbox. Thanks, Jeffrey [1] http://www.hardened-php.net/suhosin/ From skvidal at fedoraproject.org Thu Feb 21 19:28:47 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Thu, 21 Feb 2008 14:28:47 -0500 Subject: news.fp.o In-Reply-To: <10e0a9b00802211013n567b43c6xa0e0d8cde4e423d3@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> <1203562167.13356.123.camel@cutter> <47BD9F0F.2020600@gmail.com> <10e0a9b00802211013n567b43c6xa0e0d8cde4e423d3@mail.gmail.com> Message-ID: <1203622127.1688.26.camel@cutter> On Thu, 2008-02-21 at 13:13 -0500, Jeffrey Tadlock wrote: > 2008/2/21 Toshio Kuratomi : > > This is a highly inaccurate measure of security but it's something to > > look at. I wonder if lkundrak and the security team have a preference > > for blogging/news software :-) > > > > Number of CVEs listed on http://nvd.nist.gov/nvd.cfm > > wordpress drupal mediawiki zope plone > > 2008 30 17 1 0 0 > > 2007 64 37 7 2 1 > > 2006 21 39 4 1 3 > > I looked at WordPress a bit this morning as well. I used the same > source as Toshio did, but I think I used a slightly different search > than him. I used the Advanced search and set the Product to > WordPress. That yielded these numbers: > > 2008: 13 > 2007: 42 > 2006: 16 > > If you search the vuln database for just wordpress it pulls in a lot > of plugins for WordPress that have issues. Even the search I did > pulled in results for plugins for WordPress and not just core > WordPress components. So I went through 2008 and 2007 to see which > results in my search affected core WordPress bits and which were for > optional plugins. Those results were: > > 2008: 7 > 2007: 36 > > Several of the hits for those two years had been for things like > custom themes someone had provided or guest books or an image gallery. > > I also looked briefly at versions affected as well. Just using 2008 > as an example, there were still 7 security issues listed for core > WordPress components so far. But if you figure you probably shouldn't > still be running a 2.0.x version or 2.1.x version of WordPress in 2008 > then another 5 CVE's drop off the list leaving 2008 at 2 CVEs. > > To be fair, I only looked this closely at WordPress. It is quite > likely Drupal's numbers would drop if I looked through those results > and made decisions on which affected core bits and which affected > plugins to Drupal. Like Toshio already said, this isn't the greatest > way to determine the security of an app. > > > These numbers show a big difference between mediawiki and drupal or > > wordpress. The questions are just how valid the numbers are and whether > > we're confident that the combination of SELinux (which we will then > > depend on; no more turning it off if we can't figure out a problem) and > > mod_security will keep our servers and users of the sites safe from the > > exploits that will appear. > > With any application we provide we need to consider security. I think > SELinux is a valid means to help prevent damage from 0-day flaws as is > mod_security. They are tools in the toolkit we can use to help reduce > our attack surface. If we do move to PHP based apps, we could also > consider looking at suhosin [1] as another tool for the toolbox. > Let's not, ever, say we're considering going to php based apps. I don't mind deploying a few but I'll be damned if I'll ever 'go to php' as a language. -sv From ricky at fedoraproject.org Thu Feb 21 20:49:12 2008 From: ricky at fedoraproject.org (Ricky Zhou) Date: Thu, 21 Feb 2008 15:49:12 -0500 Subject: Meeting Log - 2008-02-21 Message-ID: <20080221204912.GA8538@Max.nyc1.dsl.speakeasy.net> 15:00 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting Who's here? 15:00 < mmcgrath> Who's here? 15:00 * iWolf is here 15:00 < ivazquez> Pong. 15:00 -!- petreu [n=peter at fedora/Standby] has quit Read error: 104 (Connection reset by peer) 15:00 * dgilmore 15:00 < dgilmore> skvidal: that was for you 15:00 < skvidal> what 15:00 < skvidal> oh 15:01 * nirik is lurking in the spectator bleachers. 15:01 < skvidal> sorry 15:01 < skvidal> doing other stuff 15:01 < abadger1999> here 15:01 -!- caillon [n=caillon at 75.147.7.114] has left #fedora-meeting ["Leaving"] 15:02 * ricky 15:02 < yingbull> ping 15:02 < yingbull> pong, whichever 15:02 -!- notting [n=notting at redhat/notting] has joined #fedora-meeting 15:02 -!- MrBawb [i=abob at guppy.drown.org] has joined #fedora-meeting 15:02 < ricky> Bad time for me to start eating a mango :( 15:03 < jcollie> ping 15:03 < mmcgrath> heh no worries. 15:03 * f13 15:03 < mmcgrath> alrighty, lets get started 15:03 -!- petreu| is now known as petreu 15:03 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Tickets 15:03 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/query?status=new&status=assigned&status=reopened&group=milestone&keywords=%7EMeeting&order=priority 15:03 < zodbot> mmcgrath: http://tinyurl.com/2hyyz6 15:04 < mmcgrath> so first ticket 15:04 < mmcgrath> .ticket 347 15:04 < zodbot> mmcgrath: #347 (Set localtime on all our servers to UTC) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/347 15:04 -!- daMaestro [n=jon at fedora/damaestro] has joined #fedora-meeting 15:04 < mmcgrath> dgilmore: any word on that? 15:05 -!- wolfy [n=lonewolf at fedora/wolfy] has left #fedora-meeting ["If you don't know what procrastination is just look up the definition tomorrow."] 15:05 < dgilmore> mmcgrath: I was thinking we should be able to use puppet to push out the timezone files to each box 15:06 < dgilmore> and then reboot everything 15:06 < mmcgrath> that works for me, right now its not puppet managed but I don't see any reason why it shouldn't be. 15:06 < jcollie> i do that on my boxes at work, although not with puppet 15:06 < dgilmore> i think using puppet will make it much simpler to do that lagging in and running commands on each and every box 15:06 < mmcgrath> dgilmore: I remember you saying you'd be doing it during a trip or something, when was that scheduled for? 15:06 < dgilmore> mmcgrath: ill be in boston all next week 15:07 < mmcgrath> Should we schedule some outage for it? 15:07 < dgilmore> so i figured id do it about midnight wednesday or thursday 15:07 < dgilmore> yeah we should 15:07 < dgilmore> lets schedule it for thursday 15:08 < mmcgrath> sounds good to me, mind sending out an outage notification? I'll make sure I'm around then as well, shouldn't take too long. 15:09 < f13> thursday works for me. 15:10 < mmcgrath> k, then we'll get that all setup.. 15:10 < mmcgrath> anyone have any concerns about that before moving on? 15:10 < jcollie> not from me 15:10 < dgilmore> ill send out the notice 15:11 < mmcgrath> thanks 15:11 < mmcgrath> alrighty, next ticket. 15:11 < mmcgrath> .ticket 365 15:11 < zodbot> mmcgrath: #365 (mailman setup (project/hosted)) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/365 15:11 < mmcgrath> jcollie: want to take the floor on that one? 15:11 < jcollie> sure 15:11 < jcollie> i think we're ready to go, except for documenting a SOP 15:12 < jcollie> which would be SOOO much easier if we were on mediawiki but that's another topic 15:12 < mmcgrath> heheheh 15:12 < mmcgrath> cool 15:13 < mmcgrath> jcollie: once the sop's done just close that ticket and you have a huge thankyou from us and a bunch of other fedorahosted users, that will be most helpful to finally deploy. 15:13 < jcollie> there are a couple of lists out there so it wouldn't hurt for people to subscribe and start sending some mail through 15:13 < mmcgrath> alrighty, next ticket 15:13 < mmcgrath> .ticket 270 15:13 < zodbot> mmcgrath: #270 (Fedora Wiki allows editing raw HTML) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/270 15:13 -!- viking-ice [n=johannbg at dsl-149-97-225.hive.is] has joined #fedora-meeting 15:13 < mmcgrath> ricky: paulobanon: I'm not sure what the latest is on that to be honest. 15:13 -!- jnettlet__ [n=jnettlet at c-76-118-159-90.hsd1.ma.comcast.net] has joined #fedora-meeting 15:13 -!- viking-ice [n=johannbg at dsl-149-97-225.hive.is] has quit Connection reset by peer 15:13 < mmcgrath> Maybe its something we should't put much work into until after the wiki migration? 15:14 < ricky> Sorry for letting that sit - hopefully, it won't be a problem anymore soon :) 15:14 < jcollie> how fast do we think we can move to mediawiki? 15:14 < ricky> We have a pretty nice-looking setup already, thanks to mizmo. 15:14 < mmcgrath> jcollie: well, I've got to go around to the teams and make sure everyone's ok. 15:14 < mmcgrath> here's the hangups that I still know about 15:14 < ricky> I assume that we want FAS integration from the get-to? 15:14 < ricky> **get-go 15:14 < mmcgrath> 1) docbook (this is a must) 15:14 < mmcgrath> 2) FAS integration 15:14 < mmcgrath> 3) Make sure the art attachments migrated properly. 15:15 -!- fcrippa [n=fcrippa at host75-233-static.28-87-b.business.telecomitalia.it] has joined #fedora-meeting 15:15 < mdomsch> howdy 15:15 < mmcgrath> mdomsch: howdy. 15:15 < mmcgrath> so those are the big hanups. 15:15 < mmcgrath> ricky: mind taking the Meeting keyword out of that? 15:16 < ricky> mmcgrath: Sure thing. 15:16 < mmcgrath> alrighty 15:16 < mmcgrath> next ticket then. 15:16 < mmcgrath> .ticket 395 15:16 < zodbot> mmcgrath: #395 (Audio Streaming of Fedora Board Conference Calls) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/395 15:16 < mmcgrath> I don't think there's been any new progress on that but thought I'd check. 15:16 < jcollie> not much has happened lately... 15:16 < mmcgrath> jcollie: anything? 15:16 < mmcgrath> no worries, we've got time to work on that one. 15:17 < jcollie> but we've got 1+ month to get that into shape 15:17 < ivazquez> Do we have Asterisk/Callweaver/w/e up yet? 15:17 < mmcgrath> Ok, so thats all the tickets. I wanted to switch over to something that some of us have been working pretty hard at this week. 15:17 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Buildsystem. 15:17 < f13> que the dramatic lights 15:18 < mmcgrath> ivazquez: yeah, Asterisk is up but not fully deployed (no fas integration, no mailboxes, etc) but we have had meetings on it. 15:18 < jcollie> ivazquez: yes -- asterisk1 is up and running but it's still in a beta state 15:18 < mmcgrath> ok. so the buildsystem 15:18 < mmcgrath> for those of you that haven't seen the nagios alerts we've had 8 outages of the buildsystem since monday. 15:18 < dgilmore> :( 15:18 < mmcgrath> coming at all hours of the day or night. 15:18 < mmcgrath> Its not been fun. 15:18 < mmcgrath> so whats been done? 15:18 < jcollie> yeah that blows major chunks 15:19 < mmcgrath> well, we've spent some time getting the database in better shape. 15:19 < mmcgrath> we've made the website not hit the rpmfiles table which made a huge difference in general load on the db, but didn't help the spikes. 15:19 < mmcgrath> we added a robots.txt file, banned the soc search engine from crawling it. 15:20 < jcollie> do we want to ban all search engines? 15:20 < f13> and we threw 2K tasks at it 15:20 -!- ChitleshGoorah [n=chitlesh at 77.206.229.202] has joined #fedora-meeting 15:20 < dgilmore> we should add those indexes to the task table 15:20 < mmcgrath> jcollie: until I can sleep through the night we do. 15:20 -!- knurd is now known as knurd_afk 15:20 < mmcgrath> 15:20 < mmcgrath> there's an index we got rid of and an index we're looking to add. 15:20 < mmcgrath> .taskload 15:20 < zodbot> mmcgrath: Tasks running - Open: 38 Total: 253 15:20 < abadger1999> (two indexes to add) 15:20 < f13> it's been moving very fast today 15:20 < f13> as far as chewing through open tasks 15:21 < mmcgrath> dgilmore's also working on moving the hub away from the website. 15:21 < mmcgrath> /koji/ is the website and /kojihub is the xmlrpc interface. 15:21 < f13> new repo tasks are faster than ever. 15:21 < f13> close to 10 minutes now 15:21 < f13> http://koji.fedoraproject.org/koji/taskinfo?taskID=457867 15:22 < dgilmore> f13: still to long i think but its better 15:22 < mmcgrath> interestingly we've seen many times where the hub is nice, peppy and responsive and the website isn't, but since they're both on the same box right now, there's no way to stop or restart one without the other. 15:22 < f13> dgilmore: it's only 4~ minutes for the query before it hands it off to the builder to createrepo 15:23 < f13> dgilmore: the fact that we could get a 13 minute newRepo task done, while the builders have 300~ queued tasks is pretty amazing in my book 15:23 < mmcgrath> I think there's still a lot of work todo but with the exception of some timeouts this morning (very short lived) from nagios to check swap, I've not seen any actual outages yet. 15:23 < f13> yeah, today has been quite nice 15:23 < f13> I think splitting the hub from teh website is a good step 15:23 < mmcgrath> f13: how long did you say it takes to do the whole signing process? 15:23 < f13> and I'd like to take that further by having the repos stuff done by something else too 15:24 < mmcgrath> and is that something that blocks on disk IO or koji io or both? 15:24 < f13> mmcgrath: signing of packages depends on how many packages, but can often take a couple hours 15:24 < f13> mmcgrath: both. 15:24 < dgilmore> f13: im seeing about 17 minutes on sparc http://sparc.koji.fedoraproject.org/koji/taskinfo?taskID=50738 15:24 < f13> signing does in this order: 15:24 < f13> query koji for existing cached or written out signatures for a set of biulds. 15:24 < f13> copy unsigned rpms to a work directory 15:24 < f13> rpm sign the rpms 15:24 < f13> import the signed headers into koji 15:25 < f13> ask koji to write out copies of the packages with the signed headers to the koji directories. 15:25 < dgilmore> f13: can you approve my announcement please :) 15:25 < skvidal> f13: I looked at this step in koji 15:25 < skvidal> [15:20] rpm sign the rpms 15:25 < f13> the query and the import take a long time, but then again so does the copying/signing if there ar ea lot of builds. 15:25 < skvidal> does it just call rpm --resign with xargs? 15:25 < f13> skvidal: 'in koji' ? 15:25 < f13> the signing doesn't happen in koji 15:25 < skvidal> well, I looked to see where it occurred 15:25 < mmcgrath> f13: Also I put in a bug to koji to hash the tasks directory, hopefully that will help us some. 15:25 < skvidal> and it doesn't seem to be called anywhere 15:25 < skvidal> ok 15:26 < skvidal> that's what I thought was going on 15:26 < skvidal> so i'm not losing my mind 15:26 < f13> skvidal: signed_unsigned is a terrible terrible script in the releng git repo 15:26 < skvidal> okay, I kinda got that feeling 15:26 < skvidal> thanks 15:26 < f13> it's slated to be replaced by sigul, although some parts of it will survive as a client of siguls to query koji for what neesd to be signed. 15:27 < f13> sign_unsigned came from inside RH 15:27 * skvidal is shocked to hear that 15:27 < mmcgrath> heh 15:28 < mmcgrath> alrighty so thats really whats been going on there. 15:28 < mmcgrath> its been sucking up a lot of our time this week but hopefully some of our problems can be bandaided until the permanent fixes can be put in. Koji's been deployed for almost a year now, there's still a long way to do. 15:28 < mmcgrath> koji is a journey, not a destination :) 15:29 -!- kital [n=Joerg_Si at fedora/kital] has joined #fedora-meeting 15:29 < mmcgrath> alrighty, so thats really all I have that I really wanted to talk about this meeting so lets open the floor. 15:29 < ricky> Wow, only one year. 15:29 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor 15:29 < smooge> just as long as cooker isnt the destination 15:29 -!- jnettlet_ [n=jnettlet at c-76-118-159-90.hsd1.ma.comcast.net] has quit Connection timed out 15:29 < mmcgrath> Anyone have anything they'd like to discuss? 15:30 < jcollie> i've been working on a tg based openid server for a day or so 15:30 < ricky> jcollie: Oooh, that'd be really handy in FAS! 15:30 < mmcgrath> jcollie: how's that going? It'll be nice to have some more openid expertise around here. 15:30 < jcollie> so it should be pretty easy to use your fedora id to log into stuff 15:30 < ricky> The provider that I have there is hideous (and probably only a partial/incorrect implementation of the spec) 15:30 < jcollie> i've had a couple of successful logins with it but somethings broken right now 15:31 < jcollie> i'm using the python-openid libs so we should be good as far as standards go 15:31 < daMaestro> +1 on openid 15:31 -!- spoleeba [n=one at fedora/Jef] has quit "Leaving" 15:31 < daMaestro> i'd love for FAS users to be able to login to the unity stuff 15:31 < lmacken> awesome. 15:32 < lmacken> jcollie: did you get the nested arg stuff working ? 15:32 < ricky> I'm curious as to how you're testing it. 15:32 < jcollie> lmacken: yes, thanks for the help 15:32 < GeroldKa> ping kanarip 15:32 < lmacken> great. no problem 15:32 < kanarip> GeroldKa, pong 15:32 < abadger1999> jcollie: What are your plans for that? Separate server? Integrate into FAS2 if we're interested (We are!) 15:32 < ricky> I think I used http://openidenabled.com/resources/openid-test/diagnose-server, but it might not be the most up-to-date/complete. 15:33 < daMaestro> i do have a question about my upcoming attempt to migrate everything from moinmoin to zwiki; am i just wasting me time? would it at least be interested to see how zope handles our current data set? 15:33 < daMaestro> s/interested/interesting/ 15:33 < jcollie> abadger1999: it used the tg identity stuff so we should be able to plug in a fas identity provider 15:33 < jcollie> er uses 15:33 < ricky> jcollie: Ohh, so it's a client, not a provider? 15:33 < jcollie> no it's a provider 15:33 < ricky> Or it could be both.. hmm. 15:34 < jcollie> we would need to write a separate consumer 15:35 < jcollie> code is here: http://jcollie.fedorapeople.org/samadhi.git/ 15:35 < jcollie> i'll probably request hosted space soon 15:35 < ricky> abadger1999: Do you know if we can have multiple auth providers in a TG project? 15:35 < lmacken> jcollie: great name :) 15:35 < jcollie> lmacken: thought you'd like it 15:36 < abadger1999> ricky: I think the web app only knows about a single provider. 15:36 < jcollie> dl the code and look at the logo i ginned up quick 15:36 < abadger1999> That provider could get information from multiple sources, though. 15:36 < ricky> Ah, great. 15:36 < jcollie> eventually i'll need some help prettifying the html... i'm no good a css and all that 15:37 -!- fabian_a [n=fabian at 84-75-160-95.dclient.hispeed.ch] has joined #fedora-meeting 15:37 < mmcgrath> that will be great to finally get installed. 15:37 < ricky> jcollie: Anyway, when you get a chance, we'd love you to take a look at OpenID in FAS :) 15:37 < mmcgrath> Alrighty, anyone else have anything they'd like to discuss? 15:38 < ricky> I'd be glad to nuke whatever hideousness I put there before. 15:38 < daMaestro> mmcgrath, is my attempts with zwiki futile? 15:39 < mmcgrath> daMaestro: probably 15:39 < daMaestro> ok 15:39 < mmcgrath> unless you want the experience of doing it :) 15:40 < mmcgrath> alrighty, anyone have anything else? If not I'll close the meeting. 15:40 < dgilmore> nothing else? 15:40 < dgilmore> :) 15:41 < mmcgrath> Alrighty! 15:41 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting closed 15:41 < mmcgrath> thanks for coming everyone! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From smooge at gmail.com Thu Feb 21 23:45:46 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Thu, 21 Feb 2008 16:45:46 -0700 Subject: Collaboration Servers! In-Reply-To: <935ead450801301323md766f07gfd76a2c80d5409a6@mail.gmail.com> References: <935ead450801301323md766f07gfd76a2c80d5409a6@mail.gmail.com> Message-ID: <80d7e4090802211545l627ef77bs2859ba305846080d@mail.gmail.com> On Wed, Jan 30, 2008 at 2:23 PM, Jeffrey Ollie wrote: > On 1/30/08, Mike McGrath wrote: > > > > 3) mailman. > > I've some experience with mailman, so I could work on that... > I can help with this.. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From smooge at gmail.com Thu Feb 21 23:46:52 2008 From: smooge at gmail.com (Stephen John Smoogen) Date: Thu, 21 Feb 2008 16:46:52 -0700 Subject: Collaboration Servers! In-Reply-To: <80d7e4090802211545l627ef77bs2859ba305846080d@mail.gmail.com> References: <935ead450801301323md766f07gfd76a2c80d5409a6@mail.gmail.com> <80d7e4090802211545l627ef77bs2859ba305846080d@mail.gmail.com> Message-ID: <80d7e4090802211546x562b1aedgd3b976387616561e@mail.gmail.com> On Thu, Feb 21, 2008 at 4:45 PM, Stephen John Smoogen wrote: > On Wed, Jan 30, 2008 at 2:23 PM, Jeffrey Ollie wrote: > > On 1/30/08, Mike McGrath wrote: > > > > > > 3) mailman. > > > > I've some experience with mailman, so I could work on that... > > > > > > I can help with this.. > Wow.. I should check my datestamps before replying.. shoot I didnt realize I was replying to 22 day old email. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From a.badger at gmail.com Fri Feb 22 00:35:25 2008 From: a.badger at gmail.com (Toshio Kuratomi) Date: Thu, 21 Feb 2008 16:35:25 -0800 Subject: news.fp.o In-Reply-To: <10e0a9b00802211013n567b43c6xa0e0d8cde4e423d3@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> <1203562167.13356.123.camel@cutter> <47BD9F0F.2020600@gmail.com> <10e0a9b00802211013n567b43c6xa0e0d8cde4e423d3@mail.gmail.com> Message-ID: <47BE18CD.6050004@gmail.com> Jeffrey Tadlock wrote: > 2008/2/21 Toshio Kuratomi : >> This is a highly inaccurate measure of security but it's something to >> look at. I wonder if lkundrak and the security team have a preference >> for blogging/news software :-) >> >> Number of CVEs listed on http://nvd.nist.gov/nvd.cfm >> wordpress drupal mediawiki zope plone >> 2008 30 17 1 0 0 >> 2007 64 37 7 2 1 >> 2006 21 39 4 1 3 > > I looked at WordPress a bit this morning as well. I used the same > source as Toshio did, but I think I used a slightly different search > than him. I used the Advanced search and set the Product to > WordPress. That yielded these numbers: > > 2008: 13 > 2007: 42 > 2006: 16 > Thanks for doing a better search than I did! I'm not sure that your numbers are any more meaningful than mine, though, as what we need to do is establish how much vulnerability we'll incur if we use a certain tool. So, to narrow it down like you want to do, we need to find out how many CVE's affect the core + plugins that we'll be using (which seems like it's not going to be a static list until something gets deployed... and probably not even then.) For instance, wordpress was being looked at in part because we may have some responsibility for Fedora.tv in the future (which is a wordpress platform with parts implemented via plugin). Someone wanted to host polls so we started looking at a plugin to do so. Once we get this up and running, the inclination to use the platform for more things will come about as well. Did you say it has gallery plugins? Well, the art team has wanted to host some sort of gallery for quite a while. The uses we put this to is just going to grow. So knowing that plugins are vulnerable to attack could be very relevant to the discussion at hand. Perhaps some web platform's architectures sandbox plugins so that an exploit in their code is not as dangerous to the system as a whole. Perhaps some systems make it their responsibility to filter all data coming in and all data going out with the plugins sitting behind that layer. Perhaps some developer communities (I'm including the plugin authors here) are more concerned about coding in a secure manner than others. Perhaps some projects are proactive about potential security holes while others are reactive. Looking at numbers of raw CVEs is a very coarse way to estimate this. I think that the numbers show a quality differential between mediawiki and the others but if we want to evaluate more than that, I think we have to start looking for better criteria like Mark Cox's days of risk and actually evaluating upstream's code. -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature URL: From mmcgrath at redhat.com Fri Feb 22 14:36:41 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 22 Feb 2008 08:36:41 -0600 (CST) Subject: news.fp.o In-Reply-To: <3263b11b0802210630q21e2638cy554ee6b966b6b20@mail.gmail.com> References: <3263b11b0802180202r6440e233ga0583ed9cac39687@mail.gmail.com> <10e0a9b00802200653t5d8ad5d4w3c64619ecdc28d31@mail.gmail.com> <47BC4125.30700@fedoraproject.org> <3263b11b0802200741r1e158994q787dcaed29aa24d4@mail.gmail.com> <10e0a9b00802200814o4b65890ds599704cdda1e01ff@mail.gmail.com> <3263b11b0802200820oa8052c5p247ceb6b7b271082@mail.gmail.com> <80d7e4090802201832j5269f229j83d179ca9e5b461e@mail.gmail.com> <1203562167.13356.123.camel@cutter> <3263b11b0802210630q21e2638cy554ee6b966b6b20@mail.gmail.com> Message-ID: On Thu, 21 Feb 2008, Jonathan Roberts wrote: > > Additionally, mod_security will help is deal with 0day exploits and some > > other things. I think wordpress has an ok security record but thats by > > reputation, not research, anyone have a moment to look and post to the > > list? > > Pending on these security investigations, could somebody drop a > message - either here or on the marketing/news lists - that explains > the process we need to go through to get this to completion? A link to > a relevant doc would be just as good :) > > Just so we know where we're heading and can help out where ever > infrastructure needs us! > If you've got a moment today stop by #fedora-admin on irc.freenode.net I'll get this setup for you. -Mike From veillard at redhat.com Fri Feb 22 16:48:40 2008 From: veillard at redhat.com (Daniel Veillard) Date: Fri, 22 Feb 2008 11:48:40 -0500 Subject: Problem commiting to the new CVs repository for libvirt localization Message-ID: <20080222164840.GI22804@redhat.com> Since the move out of elvis I have been unable to commit the updated pot file for libvirt in the new CVS, this has been failing with various errors on the server side: paphio:~/i18n/libvirt -> cvs -z9 commit cvs commit: Examining . Can't locate Config/Simple.pm in @INC (@INC contains: /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.3/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.2/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.1/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.0/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.3/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.2/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.1/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.0/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl .) at /usr/bin/i18n-access line 48. BEGIN failed--compilation aborted at /usr/bin/i18n-access line 48. **** Access allowed: veillard is in ACL for libvirt. cvs commit: Pre-commit check failed cvs [commit aborted]: correct above errors first! cvs commit: saving log message in /tmp/cvsOuP4H5 paphio:~/i18n/libvirt -> cat CVS/Root :ext:veillard at cvs.fedoraproject.org:/cvs/elvis paphio:~/i18n/libvirt -> cat CVS/Repository libvirt paphio:~/i18n/libvirt -> Seems the commit scripts on the server side have never been tested, Daniel -- Red Hat Virtualization group http://redhat.com/virtualization/ Daniel Veillard | virtualization library http://libvirt.org/ veillard at redhat.com | libxml GNOME XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/ From mmcgrath at redhat.com Fri Feb 22 19:23:04 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Fri, 22 Feb 2008 13:23:04 -0600 (CST) Subject: Problem commiting to the new CVs repository for libvirt localization In-Reply-To: <20080222164840.GI22804@redhat.com> References: <20080222164840.GI22804@redhat.com> Message-ID: On Fri, 22 Feb 2008, Daniel Veillard wrote: > Since the move out of elvis I have been unable to commit the updated > pot file for libvirt in the new CVS, this has been failing with various > errors on the server side: > > paphio:~/i18n/libvirt -> cvs -z9 commit > cvs commit: Examining . > Can't locate Config/Simple.pm in @INC (@INC contains: /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.3/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.2/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.1/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.0/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.3/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.2/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.1/x86_64-linux-thread! -mu > lti /usr/lib64/perl5/vendor_perl/5.8.0/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl .) at /usr/bin/i18n-access line 48. > BEGIN failed--compilation aborted at /usr/bin/i18n-access line 48. > **** Access allowed: veillard is in ACL for libvirt. > cvs commit: Pre-commit check failed > cvs [commit aborted]: correct above errors first! > cvs commit: saving log message in /tmp/cvsOuP4H5 > paphio:~/i18n/libvirt -> cat CVS/Root > :ext:veillard at cvs.fedoraproject.org:/cvs/elvis > paphio:~/i18n/libvirt -> cat CVS/Repository > libvirt > paphio:~/i18n/libvirt -> > Please try again. -Mike From veillard at redhat.com Sat Feb 23 10:04:29 2008 From: veillard at redhat.com (Daniel Veillard) Date: Sat, 23 Feb 2008 05:04:29 -0500 Subject: Problem commiting to the new CVs repository for libvirt localization In-Reply-To: References: <20080222164840.GI22804@redhat.com> Message-ID: <20080223100429.GB5172@redhat.com> On Fri, Feb 22, 2008 at 01:23:04PM -0600, Mike McGrath wrote: > On Fri, 22 Feb 2008, Daniel Veillard wrote: > > > Since the move out of elvis I have been unable to commit the updated > > pot file for libvirt in the new CVS, this has been failing with various > > errors on the server side: > > > > paphio:~/i18n/libvirt -> cvs -z9 commit > > cvs commit: Examining . > > Can't locate Config/Simple.pm in @INC (@INC contains: /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib64/perl5/site_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.3/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.2/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.1/x86_64-linux-thread-multi /usr/lib64/perl5/site_perl/5.8.0/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.5/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.4/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.3/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.2/x86_64-linux-thread-multi /usr/lib64/perl5/vendor_perl/5.8.1/x86_64-linux-thread! > -mu > > lti /usr/lib64/perl5/vendor_perl/5.8.0/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor_perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl .) at /usr/bin/i18n-access line 48. > > BEGIN failed--compilation aborted at /usr/bin/i18n-access line 48. > > **** Access allowed: veillard is in ACL for libvirt. > > cvs commit: Pre-commit check failed > > cvs [commit aborted]: correct above errors first! > > cvs commit: saving log message in /tmp/cvsOuP4H5 > > paphio:~/i18n/libvirt -> cat CVS/Root > > :ext:veillard at cvs.fedoraproject.org:/cvs/elvis > > paphio:~/i18n/libvirt -> cat CVS/Repository > > libvirt > > paphio:~/i18n/libvirt -> > > > > Please try again. Ha ha, the commit went through that time, thanks a lot ! Note that there is still a small problem though: paphio:~/i18n/libvirt -> cvs -z9 commit cvs commit: Examining . **** Access allowed: veillard is in ACL for libvirt. Checking in libvirt.pot; /cvs/elvis/libvirt/libvirt.pot,v <-- libvirt.pot new revision: 1.25; previous revision: 1.24 done cvs commit: warning: cannot write to history file /cvs/elvis/CVSROOT/history: Permission denied paphio:~/i18n/libvirt -> could be a group permission access problem on the history file, thanks again ! Daniel -- Red Hat Virtualization group http://redhat.com/virtualization/ Daniel Veillard | virtualization library http://libvirt.org/ veillard at redhat.com | libxml GNOME XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/ From mmcgrath at redhat.com Sat Feb 23 16:42:55 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Sat, 23 Feb 2008 10:42:55 -0600 (CST) Subject: Problem commiting to the new CVs repository for libvirt localization In-Reply-To: <20080223100429.GB5172@redhat.com> References: <20080222164840.GI22804@redhat.com> <20080223100429.GB5172@redhat.com> Message-ID: On Sat, 23 Feb 2008, Daniel Veillard wrote: > > Ha ha, the commit went through that time, thanks a lot ! > Note that there is still a small problem though: > > paphio:~/i18n/libvirt -> cvs -z9 commit > cvs commit: Examining . > **** Access allowed: veillard is in ACL for libvirt. > Checking in libvirt.pot; > /cvs/elvis/libvirt/libvirt.pot,v <-- libvirt.pot > new revision: 1.25; previous revision: 1.24 > done > cvs commit: warning: cannot write to history file /cvs/elvis/CVSROOT/history: Permission denied > paphio:~/i18n/libvirt -> > > could be a group permission access problem on the history file, > > thanks again ! I seem to remember the history file on elvis also hvaing some strange permissions, and maybe some acl's that I missed. I'll take a look. Do you happen to remember if you had this same notice when comitting to elvis? -Mike From veillard at redhat.com Sat Feb 23 22:17:32 2008 From: veillard at redhat.com (Daniel Veillard) Date: Sat, 23 Feb 2008 17:17:32 -0500 Subject: Problem commiting to the new CVs repository for libvirt localization In-Reply-To: References: <20080222164840.GI22804@redhat.com> <20080223100429.GB5172@redhat.com> Message-ID: <20080223221732.GA22576@redhat.com> On Sat, Feb 23, 2008 at 10:42:55AM -0600, Mike McGrath wrote: > On Sat, 23 Feb 2008, Daniel Veillard wrote: > > > > Ha ha, the commit went through that time, thanks a lot ! > > Note that there is still a small problem though: > > > > paphio:~/i18n/libvirt -> cvs -z9 commit > > cvs commit: Examining . > > **** Access allowed: veillard is in ACL for libvirt. > > Checking in libvirt.pot; > > /cvs/elvis/libvirt/libvirt.pot,v <-- libvirt.pot > > new revision: 1.25; previous revision: 1.24 > > done > > cvs commit: warning: cannot write to history file /cvs/elvis/CVSROOT/history: Permission denied > > paphio:~/i18n/libvirt -> > > > > could be a group permission access problem on the history file, > > > > thanks again ! > > I seem to remember the history file on elvis also hvaing some strange > permissions, and maybe some acl's that I missed. I'll take a look. Do > you happen to remember if you had this same notice when comitting to > elvis? I'm pretty sure I didn't, thanks, Daniel -- Red Hat Virtualization group http://redhat.com/virtualization/ Daniel Veillard | virtualization library http://libvirt.org/ veillard at redhat.com | libxml GNOME XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/ From thekrpans at hotmail.com Sun Feb 24 05:10:56 2008 From: thekrpans at hotmail.com (Greg Krpan) Date: Sat, 23 Feb 2008 22:10:56 -0700 Subject: Introductions Message-ID: Hello all! My name is Greg Krpan, and I'm in Colorado USA. I am currently a contractor to IBM as a UNIX Administrator, supporting AIX, Solaris, and of course, Linux. I have been working with Linux since 1995 when I was a student at DeVry. I started on Slackware, but quickly moved to RedHat once I took over administration of the DeVry Calgary website in the summer of 1995. Upon graduation in 1997, I started working for IBM Global Services Canada, where I was administering AIX, Solaris and Linux systems for various clients. After 3 years at IBM Canada, I took a position working for the USGS at the EROS Data Center in Sioux Falls, SD. My first tasks at EROS were to design and build a Beowulf Class supercomputer, which was implemented for use in developing 3-D models for land usage. I also took over the entire Linux infrastructure, which I increased from 3 workstations, to 12 servers and 90 workstations. After 3 years at EROS, I left for Colorado, and a return to IBM, where I remain today. At home, I have been running Linux exclusively on my personal system for 6 years, starting with SuSE 8, and then moving to RedHat 9, and progressively forward through Fedora Core, with my main system running Fedora Core 8, and my development system running Fedora Core 9 Alpha. I look forward to participating in the meetings and discussions, and working with all of you in the upcoming weeks, months, and years. Thanks for taking the time to see what I'm about, and see you all in the next meeting! Greg Krpan --------------------------------------------------------------------------- In honor of those who lost their lives exploring the final frontier: Apollo 1; January 27, 1967 Virgil "Gus" Ivan Grissom, Edward Higgins White II, Roger Bruce Chaffee Space Shuttle Challenger, Mission STS-51-L; January 28, 1986 Francis R. Scobee, Michael J. Smith, Judith A. Resnik, Ellison S. Onizuka, Ronald E. McNair, Gregory B. Jarvis, Sharon Christa McAuliffe Space Shuttle Columbia, Mission STS-107; February 1, 2003 Rick D. Husband, William C. McCool, Michael P. Anderson, Kalpana Chawla, David M. Brown, Laurel Blair Salton Clark, Ilan Ramon _________________________________________________________________ Helping your favorite cause is as easy as instant messaging.?You IM, we give. http://im.live.com/Messenger/IM/Home/?source=text_hotmail_join From mmcgrath at redhat.com Sun Feb 24 17:34:04 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Sun, 24 Feb 2008 11:34:04 -0600 (CST) Subject: Introductions In-Reply-To: References: Message-ID: On Sat, 23 Feb 2008, Greg Krpan wrote: > > Hello all! > > My name is Greg Krpan, and I'm in Colorado USA. I am currently a contractor to IBM as a UNIX Administrator, supporting AIX, Solaris, and of course, Linux. > > I have been working with Linux since 1995 when I was a student at DeVry. I started on Slackware, but quickly moved to RedHat once I took over administration of the DeVry Calgary website in the summer of 1995. Upon graduation in 1997, I started working for IBM Global Services Canada, where I was administering AIX, Solaris and Linux systems for various clients. After 3 years at IBM Canada, I took a position working for the USGS at the EROS Data Center in Sioux Falls, SD. My first tasks at EROS were to design and build a Beowulf Class supercomputer, which was implemented for use in developing 3-D models for land usage. I also took over the entire Linux infrastructure, which I increased from 3 workstations, to 12 servers and 90 workstations. After 3 years at EROS, I left for Colorado, and a return to IBM, where I remain today. > > At home, I have been running Linux exclusively on my personal system for 6 years, starting with SuSE 8, and then moving to RedHat 9, and progressively forward through Fedora Core, with my main system running Fedora Core 8, and my development system running Fedora Core 9 Alpha. > > I look forward to participating in the meetings and discussions, and working with all of you in the upcoming weeks, months, and years. > > Thanks for taking the time to see what I'm about, and see you all in the next meeting! > Welcome t othe team Greg, feel free to stop by irc.freenode.net in #fedora-admin and get t know everyone and what we're doing. -Mike From huzaifas at redhat.com Mon Feb 25 04:07:15 2008 From: huzaifas at redhat.com (Huzaifa Sidhpurwala) Date: Mon, 25 Feb 2008 09:37:15 +0530 Subject: Infrastructure beat is ready Message-ID: <47C23EF3.3020000@redhat.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, Infrastructure beat is ready, Sorry thomas could not do that last week as i was travelling. - -- Regards, Huzaifa Sidhpurwala, RHCE, CCNA (IRC: huzaifas) GnuPG Fingerprint: 3A0F DAFB 9279 02ED 273B FFE9 CC70 DCF2 DA5B DAE5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFHwj7zzHDc8tpb2uURAi/LAKCWH62dqpZUITlUHMbs2pnmAq2E4ACgjpC/ lLghqmKexwXCrTCDseH/1OU= =wDe6 -----END PGP SIGNATURE----- From mmcgrath at redhat.com Mon Feb 25 15:07:40 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 25 Feb 2008 09:07:40 -0600 (CST) Subject: Infrastructure beat is ready In-Reply-To: <47C23EF3.3020000@redhat.com> References: <47C23EF3.3020000@redhat.com> Message-ID: On Mon, 25 Feb 2008, Huzaifa Sidhpurwala wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi All, > Infrastructure beat is ready, Sorry thomas could not do that last week > as i was travelling. > Thanks Huzaifa! -Mike From mmcgrath at redhat.com Mon Feb 25 15:51:31 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 25 Feb 2008 09:51:31 -0600 (CST) Subject: pgp.mit.edu Message-ID: Does anyone happen to have a contact at MIT that could find out who runs pgp.mit.edu and whats going on with it? Over the last few months we've seen the site become less and less responsive and since its in the critical path to becoming a contributor (can't sign the cla without it) this is a real problem. What alternative options do we have besides running our own server? I've never actually run a key server like that, the security concerns alone worry me. Anyone have any ideas? -Mike From skvidal at fedoraproject.org Mon Feb 25 15:53:31 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Mon, 25 Feb 2008 10:53:31 -0500 Subject: pgp.mit.edu In-Reply-To: References: Message-ID: <1203954811.31597.2.camel@cutter> On Mon, 2008-02-25 at 09:51 -0600, Mike McGrath wrote: > Does anyone happen to have a contact at MIT that could find out who runs > pgp.mit.edu and whats going on with it? Over the last few months we've > seen the site become less and less responsive and since its in the > critical path to becoming a contributor (can't sign the cla without it) > this is a real problem. > > What alternative options do we have besides running our own server? I've > never actually run a key server like that, the security concerns alone > worry me. Anyone have any ideas? to the best of my knowledge the keyserver software isn't available anywhere, either. So even if we wanted to, we couldn't. Maybe Matt knows someone at MIT? -sv From jeff at ocjtech.us Mon Feb 25 16:07:24 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Mon, 25 Feb 2008 10:07:24 -0600 Subject: pgp.mit.edu In-Reply-To: References: Message-ID: <935ead450802250807gb0b8d83k3ec41a804cb118f2@mail.gmail.com> On 2/25/08, Mike McGrath wrote: > > What alternative options do we have besides running our own server? I've > never actually run a key server like that, the security concerns alone > worry me. Anyone have any ideas? I haven't looked at the code but would it be hard to enhance the script to detect a keyserver failure and try one or more other keyservers? Jeff From jonathansteffan at gmail.com Mon Feb 25 16:13:14 2008 From: jonathansteffan at gmail.com (Jonathan Steffan) Date: Mon, 25 Feb 2008 09:13:14 -0700 Subject: pgp.mit.edu In-Reply-To: References: Message-ID: <47C2E91A.6030502@gmail.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mike McGrath wrote: > Does anyone happen to have a contact at MIT that could find out who runs > pgp.mit.edu and whats going on with it? Over the last few months we've > seen the site become less and less responsive and since its in the > critical path to becoming a contributor (can't sign the cla without it) > this is a real problem. I'd really like to see it fixed, so if there is a contact let's get on it. > What alternative options do we have besides running our own server? I've > never actually run a key server like that, the security concerns alone > worry me. Anyone have any ideas? I've been told the MIT system is unmaintained and broken[1]. Please start using subkeys.pgp.net [1] Dec 25 23:33:28 pgp.mit.edu is broken. It mangles keys, including but not limited to dropping subkeys, moving binding sigs around, duplicating user ids, modifying signature subpackages, calculating keyids wrong, rejecting keys with attribute UIDs. Use subkeys.pgp.net instead. - -- Jonathan Steffan daMaestro GPG Fingerprint: 93A2 3E2F DC26 5570 3472 5B16 AD12 6CE7 0D86 AF59 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFHwukarRJs5w2Gr1kRAqzDAKCI+t6AoPaW9KJ4eqq4N2wToNc6WACbBG8k UysCDAPWmIa0Ggs89SyBDM0= =FPjP -----END PGP SIGNATURE----- From jeff at ocjtech.us Mon Feb 25 16:15:27 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Mon, 25 Feb 2008 10:15:27 -0600 Subject: pgp.mit.edu In-Reply-To: <1203954811.31597.2.camel@cutter> References: <1203954811.31597.2.camel@cutter> Message-ID: <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> On 2/25/08, seth vidal wrote: > > to the best of my knowledge the keyserver software isn't available > anywhere, either. So even if we wanted to, we couldn't. FWIW, I found this: http://www.mit.edu/people/marc/pks/ Jeff From skvidal at fedoraproject.org Mon Feb 25 16:33:26 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Mon, 25 Feb 2008 11:33:26 -0500 Subject: pgp.mit.edu In-Reply-To: <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> References: <1203954811.31597.2.camel@cutter> <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> Message-ID: <1203957206.31597.8.camel@cutter> On Mon, 2008-02-25 at 10:15 -0600, Jeffrey Ollie wrote: > On 2/25/08, seth vidal wrote: > > > > to the best of my knowledge the keyserver software isn't available > > anywhere, either. So even if we wanted to, we couldn't. > > FWIW, I found this: > > http://www.mit.edu/people/marc/pks/ Holy mother of god. 1999. And the sf version was last released in 2003. -sv From raju.rajsand at gmail.com Mon Feb 25 16:45:33 2008 From: raju.rajsand at gmail.com (Rajagopal Swaminathan) Date: Mon, 25 Feb 2008 22:15:33 +0530 Subject: Fedora-infrastructure-list Digest, Vol 21, Issue 34 In-Reply-To: <20080224170002.658F0618D0C@hormel.redhat.com> References: <20080224170002.658F0618D0C@hormel.redhat.com> Message-ID: <8786b91c0802250845s3aae9f24md530bcc18cc64a50@mail.gmail.com> namo namaH. (respect to everything that is to be respectd -- veda) I am just a human being eking out a living by RHEL and Linux (not working on the monstrous OS which dominates the planet).. I am from India. I would like to be useful to this noble project in my capacity. aa no bhadraaH kratavo yantu vishvataH (Let noble thoughts come to us from the Universe -- veda) Rajagopal -------------- next part -------------- An HTML attachment was scrubbed... URL: From mmcgrath at redhat.com Mon Feb 25 17:08:02 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 25 Feb 2008 11:08:02 -0600 (CST) Subject: Fedora-infrastructure-list Digest, Vol 21, Issue 34 In-Reply-To: <8786b91c0802250845s3aae9f24md530bcc18cc64a50@mail.gmail.com> References: <20080224170002.658F0618D0C@hormel.redhat.com> <8786b91c0802250845s3aae9f24md530bcc18cc64a50@mail.gmail.com> Message-ID: On Mon, 25 Feb 2008, Rajagopal Swaminathan wrote: > > I am just a human being eking out a living by RHEL and Linux (not working on > the monstrous OS which dominates the planet).. > > I am from India. I would like to be useful to this noble project in my > capacity. > > aa no bhadraaH kratavo yantu vishvataH > (Let noble thoughts come to us from the Universe -- veda) > > Rajagopal > Hello Rajagopal, if you see anything on the list that interests you please feel free to comment or stop by irc.freenode.net in #fedora-admin we also do a lot of work there. Is there anything in particular you're interested in working on? -Mike From mmcgrath at redhat.com Mon Feb 25 17:28:32 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 25 Feb 2008 11:28:32 -0600 (CST) Subject: pgp.mit.edu In-Reply-To: <1203957206.31597.8.camel@cutter> References: <1203954811.31597.2.camel@cutter> <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> <1203957206.31597.8.camel@cutter> Message-ID: On Mon, 25 Feb 2008, seth vidal wrote: > > On Mon, 2008-02-25 at 10:15 -0600, Jeffrey Ollie wrote: > > On 2/25/08, seth vidal wrote: > > > > > > to the best of my knowledge the keyserver software isn't available > > > anywhere, either. So even if we wanted to, we couldn't. > > > > FWIW, I found this: > > > > http://www.mit.edu/people/marc/pks/ > > Holy mother of god. 1999. And the sf version was last released in 2003. > Hmm, so good idea or bad idea: Implement full key functionality in FAS2 for 2.1? -Mike From skvidal at fedoraproject.org Mon Feb 25 17:34:03 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Mon, 25 Feb 2008 12:34:03 -0500 Subject: pgp.mit.edu In-Reply-To: References: <1203954811.31597.2.camel@cutter> <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> <1203957206.31597.8.camel@cutter> Message-ID: <1203960843.31597.10.camel@cutter> On Mon, 2008-02-25 at 11:28 -0600, Mike McGrath wrote: > On Mon, 25 Feb 2008, seth vidal wrote: > > > > > On Mon, 2008-02-25 at 10:15 -0600, Jeffrey Ollie wrote: > > > On 2/25/08, seth vidal wrote: > > > > > > > > to the best of my knowledge the keyserver software isn't available > > > > anywhere, either. So even if we wanted to, we couldn't. > > > > > > FWIW, I found this: > > > > > > http://www.mit.edu/people/marc/pks/ > > > > Holy mother of god. 1999. And the sf version was last released in 2003. > > > > Hmm, so good idea or bad idea: > > Implement full key functionality in FAS2 for 2.1? > -1, too much work and dubiously worth it given how little we actually use the gpg keys. -sv From jeff at ocjtech.us Mon Feb 25 17:48:33 2008 From: jeff at ocjtech.us (Jeffrey Ollie) Date: Mon, 25 Feb 2008 11:48:33 -0600 Subject: pgp.mit.edu In-Reply-To: <1203960843.31597.10.camel@cutter> References: <1203954811.31597.2.camel@cutter> <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> <1203957206.31597.8.camel@cutter> <1203960843.31597.10.camel@cutter> Message-ID: <935ead450802250948m72acad24y49f6b32b2108be82@mail.gmail.com> On 2/25/08, seth vidal wrote: > > On Mon, 2008-02-25 at 11:28 -0600, Mike McGrath wrote: > > > > Implement full key functionality in FAS2 for 2.1? > > -1, too much work and dubiously worth it given how little we actually > use the gpg keys. Yeah, I think it makes more sense to point to a more reliable external keyserver. Being able to fail over to another keyserver would be good too. Jeff From tmz at pobox.com Mon Feb 25 17:53:22 2008 From: tmz at pobox.com (Todd Zullinger) Date: Mon, 25 Feb 2008 12:53:22 -0500 Subject: pgp.mit.edu In-Reply-To: <47C2E91A.6030502@gmail.com> References: <47C2E91A.6030502@gmail.com> Message-ID: <20080225175322.GH14250@inocybe.teonanacatl.org> Jonathan Steffan wrote: > I've been told the MIT system is unmaintained and broken[1]. > > Please start using subkeys.pgp.net Indeed. GnuPG now uses subkeys.pgp.net as it's default and GnuPG developer David Shaw has recommended using a keyserver other than pgp.mit.edu numerous times on the gnupg-users list. The software used by pgp.mit.edu is the PKS key server. It has the problems that Jonathan quoted. If the keyserver itself has become unreliable as well, that's another strike against it. subkeys.pgp.net is actually a DNS round robbin record for 6 servers, so it should be a bit more reliable than a single server. As far as running a keyserver, that is a possibility, but doesn't seem like anything that would be really necessary. FWIW, the latest PKS code that I know of is at http://pks.sf.net/. The last time I built and packaged that was probably around the time of their last release (in 2003). And it was a bit of a pain IIRC, due to deps on an older Berkeley DB version. There are a few different implementations for keyservers in use now. I believe there are more keyservers using SKS than PKS these days. SKS is written in Ocaml (and is also not just a simple configure, make, make install piece of code): http://www.nongnu.org/sks/ The FAS just needs to be able to access the key someone has signed the CLA with, right? Perhaps instead of requiring any particular keyserver at all, the sign up could just let the user paste their key? Then, with a little bit of pygpgme (or whatever glue you like), add that key to an FAS keyring and verify the CLA signature. I could be missing something obvious about why the process requires using a keyserver, but it seems to me like that requirement could be removed without much trouble. -- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ If electricity comes from electrons, does morality come from morons? -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 542 bytes Desc: not available URL: From tmz at pobox.com Mon Feb 25 18:03:06 2008 From: tmz at pobox.com (Todd Zullinger) Date: Mon, 25 Feb 2008 13:03:06 -0500 Subject: pgp.mit.edu In-Reply-To: References: <1203954811.31597.2.camel@cutter> <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> <1203957206.31597.8.camel@cutter> Message-ID: <20080225180306.GI14250@inocybe.teonanacatl.org> Mike McGrath wrote: > On Mon, 25 Feb 2008, seth vidal wrote: >> Holy mother of god. 1999. And the sf version was last released in >> 2003. Hehe. Yeah, the original PKS code from Marc Horowitz should *not* be used. I do believe that many keyservers are still using the PKS version from sf.net (some with various patches from the keyserver ops mailing lists). Not a lot changes fast with the PGP key format and the keyserver contain no crypt code to verify the keys or anything, so they don't require a lot of maintenance. (Not that I'm suggesting running a keyserver is a worthwhile use of time. :) > Hmm, so good idea or bad idea: > > Implement full key functionality in FAS2 for 2.1? Seems like a waste of valuable time to me. Why does FAS need to use a keyserver at all? If it does need to use one, using the same default as gnupg does (subkeys.pgp.net) seems like a sane plan. Any decent keyserver will sync with the other public keyservers, so placing a lot of emphasis on any particular one doesn't seem important IMO. -- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Does it follow that I reject all authority? Perish the thought. In the matter of boots, I defer to the authority of the boot-maker. -- Mikhail Bakunin -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 542 bytes Desc: not available URL: From ricky at fedoraproject.org Mon Feb 25 18:20:04 2008 From: ricky at fedoraproject.org (Ricky Zhou) Date: Mon, 25 Feb 2008 13:20:04 -0500 Subject: pgp.mit.edu In-Reply-To: <20080225175322.GH14250@inocybe.teonanacatl.org> References: <47C2E91A.6030502@gmail.com> <20080225175322.GH14250@inocybe.teonanacatl.org> Message-ID: <20080225182004.GB5840@Max.nyc1.dsl.speakeasy.net> On 2008-02-25 12:53:22 PM, Todd Zullinger wrote: > Jonathan Steffan wrote: > > I've been told the MIT system is unmaintained and broken[1]. > > > > Please start using subkeys.pgp.net > > Indeed. GnuPG now uses subkeys.pgp.net as it's default and GnuPG > developer David Shaw has recommended using a keyserver other than > pgp.mit.edu numerous times on the gnupg-users list. The software used > by pgp.mit.edu is the PKS key server. It has the problems that > Jonathan quoted. +1 for using subkeys.pgp.net. That's what FAS2 will probably end up using, and I've been wanting to ask about moving FAS1 over and updating our docs on generating/uploading keys to work for both FAS1/2. > The FAS just needs to be able to access the key someone has signed the > CLA with, right? Perhaps instead of requiring any particular > keyserver at all, the sign up could just let the user paste their key? > Then, with a little bit of pygpgme (or whatever glue you like), add > that key to an FAS keyring and verify the CLA signature. I could be > missing something obvious about why the process requires using a > keyserver, but it seems to me like that requirement could be removed > without much trouble. For what it's worth, this would make it way easier to implement from the pygpgme side. Right now, I don't see any nice mechanism for downloading keys from the keyserver (although I might just be missing it), and the current CLA code uses kind of a hack with keyserver-options auto-key-retrieve, which only works when we're verifying a signature. I'm not sure if there's some legal purpose to requiring the key to be on a public keyserver, though (and I think it ends up being more convenient/useful if we end up pulling from an online keyserver. Thanks, Ricky -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From skvidal at fedoraproject.org Mon Feb 25 18:21:40 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Mon, 25 Feb 2008 13:21:40 -0500 Subject: pgp.mit.edu In-Reply-To: <20080225182004.GB5840@Max.nyc1.dsl.speakeasy.net> References: <47C2E91A.6030502@gmail.com> <20080225175322.GH14250@inocybe.teonanacatl.org> <20080225182004.GB5840@Max.nyc1.dsl.speakeasy.net> Message-ID: <1203963700.31597.12.camel@cutter> On Mon, 2008-02-25 at 13:20 -0500, Ricky Zhou wrote: > > The FAS just needs to be able to access the key someone has signed the > > CLA with, right? Perhaps instead of requiring any particular > > keyserver at all, the sign up could just let the user paste their key? > > Then, with a little bit of pygpgme (or whatever glue you like), add > > that key to an FAS keyring and verify the CLA signature. I could be > > missing something obvious about why the process requires using a > > keyserver, but it seems to me like that requirement could be removed > > without much trouble. > For what it's worth, this would make it way easier to implement from the > pygpgme side. Right now, I don't see any nice mechanism for downloading > keys from the keyserver (although I might just be missing it), and the > current CLA code uses kind of a hack with keyserver-options auto-key-retrieve, > which only works when we're verifying a signature. > We can definitely break the key up with pygpgme - but to be fair downloading keys from the keyserver can be done using hkp. -sv From tmz at pobox.com Mon Feb 25 18:34:43 2008 From: tmz at pobox.com (Todd Zullinger) Date: Mon, 25 Feb 2008 13:34:43 -0500 Subject: pgp.mit.edu In-Reply-To: <20080225182004.GB5840@Max.nyc1.dsl.speakeasy.net> References: <47C2E91A.6030502@gmail.com> <20080225175322.GH14250@inocybe.teonanacatl.org> <20080225182004.GB5840@Max.nyc1.dsl.speakeasy.net> Message-ID: <20080225183443.GJ14250@inocybe.teonanacatl.org> Ricky Zhou wrote: >> The FAS just needs to be able to access the key someone has signed >> the CLA with, right? Perhaps instead of requiring any particular >> keyserver at all, the sign up could just let the user paste their >> key? Then, with a little bit of pygpgme (or whatever glue you >> like), add that key to an FAS keyring and verify the CLA signature. >> I could be missing something obvious about why the process requires >> using a keyserver, but it seems to me like that requirement could >> be removed without much trouble. > > For what it's worth, this would make it way easier to implement from > the pygpgme side. Right now, I don't see any nice mechanism for > downloading keys from the keyserver (although I might just be > missing it), and the current CLA code uses kind of a hack with > keyserver-options auto-key-retrieve, which only works when we're > verifying a signature. > > I'm not sure if there's some legal purpose to requiring the key to > be on a public keyserver, though (and I think it ends up being more > convenient/useful if we end up pulling from an online keyserver. Ahh, I hadn't thought about the potential of a legal reason to use a public keyserver. Having a FAS keyring with all the contributors keys could be handy too, for those of us that use gpg regularly. Debian has a package of their gpg keyring even: http://packages.debian.org/debian-keyring :) But that's much outside of the CLA's need for gpg of course. -- Todd OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Reason obeys itself; and ignorance does whatever is dictated to it. -- Thomas Paine -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 542 bytes Desc: not available URL: From msloretta.tioiela at live.com Tue Feb 26 02:20:47 2008 From: msloretta.tioiela at live.com (Loretta TIOIELA) Date: Tue, 26 Feb 2008 03:20:47 +0100 Subject: a fresh member introduction Message-ID: Dears, I'm glad to join the fedora project team as a contributor and hope to be able to help . I'm Loretta aka myuusan; Here's some details about my skills and professionnal experience : SKILLS MCSE Level on Windows 2003 GNU/Linux Distribution: RedHat FedoraCore, Debian Planning, Designing, Implementing, Troubleshooting Network Infrastructure MS Exchange 2003 Server Microsoft Office Communicator Server B2B Infrastructure Microsoft SQL Server : load balancing, caching, clustering, building redundant networks, SAN architecture Cluster configuration , RAID solutions Shadow Copy Services VmWare Server ISA Server Firewalling: Proxy, Reverse Proxy services, Filtering capabilities , DMZ IPSec, IAS Server: Kerberos, EAP,SSO solutions C, Bash Cisco CCNA Certification: configuration of Cisco hardware routers switches bridges and firewalls in a LAN/WAN environment Connection types: MPLS, Frame-Relay, ATM Routing protocols, BGP, EIGRP Cisco Client VPN/site-to-site VPN Cisco LAN Wireless network VoIP Infrastructure Voice-data network integration; IP telephony; Videoconferencing WSUS, SMS, Microsoft System Center PROFESSIONNAL EXPERIENCE: Infrastructure Engineer IT operations IMPLEMENTATION, MAINTENANCE AND MONITORING; UPGRADES, TRANSFORMATIONS AND INTEGRATION Experience working closely with infrastructure and database architects, as well as with application development teams Assisting in the development and maintenance of broadband & IP Network architectures taking into account both business and technology requirements Delivering an end-to-end highly performing and stable Operational Support System (OSS) Monitoring of operational IT infrastructure, addressing operational issues when they arise, troubleshooting and performance tuning of multiple technology products Coordinating with designing team to provide efficient and durable changes for IT organization defined in project portfolio, while keeping up-to-date all operations asset records and reports PROCESSES; STRATEGIES; AUDITS AND REPORTS Ensuring compliance with organization policies, procedures and IT Strategies Process re-engineering and implementation of process, technology, and organizational change in order to improve business value Identifying and scoping the infrastructure risks and constraints Delivering specialized preventative services such as technology Health Checks TRAINING Supporting continually build skills and capabilities training to adapt to a changing IT environment and Technologies PROJECTS Maintaining timely and accurate updates on project status according to IT Strategies Documenting projects using defined project methodology standards Experience of most stages in the systems delivery lifecycle: from requirements definition through to implementation Hoping to get started soon Kindly Loretta _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ From mmcgrath at redhat.com Tue Feb 26 04:00:38 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 25 Feb 2008 22:00:38 -0600 (CST) Subject: pgp.mit.edu In-Reply-To: References: <1203954811.31597.2.camel@cutter> <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> <1203957206.31597.8.camel@cutter> Message-ID: On Mon, 25 Feb 2008, Mike McGrath wrote: > On Mon, 25 Feb 2008, seth vidal wrote: > > > > > On Mon, 2008-02-25 at 10:15 -0600, Jeffrey Ollie wrote: > > > On 2/25/08, seth vidal wrote: > > > > > > > > to the best of my knowledge the keyserver software isn't available > > > > anywhere, either. So even if we wanted to, we couldn't. > > > > > > FWIW, I found this: > > > > > > http://www.mit.edu/people/marc/pks/ > > > > Holy mother of god. 1999. And the sf version was last released in 2003. > > > > Hmm, so good idea or bad idea: > > Implement full key functionality in FAS2 for 2.1? > Lots of suggestions for subkeys.pgp.net, if no one is against the idea I consider this matter solved, we'll get FAS setup and update the docs. -Mike From mmcgrath at redhat.com Tue Feb 26 04:06:59 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Mon, 25 Feb 2008 22:06:59 -0600 (CST) Subject: a fresh member introduction In-Reply-To: References: Message-ID: On Tue, 26 Feb 2008, Loretta TIOIELA wrote: > > Dears, > I'm glad to join the fedora project team as a contributor and hope to be able to help . > I'm Loretta aka myuusan; > Here's some details about my skills and professionnal experience : > SKILLS Welcome Loretta, if there's anything in particular you're interested in working on let us know, otherwise feel free to listen in on the list, comment or stop by irc.freenode.net on #fedora-admin. We also hold weekly meetings: http://fedoraproject.org/wiki/Infrastructure/Meetings -Mike From Matt_Domsch at dell.com Tue Feb 26 04:14:14 2008 From: Matt_Domsch at dell.com (Matt Domsch) Date: Mon, 25 Feb 2008 22:14:14 -0600 Subject: pgp.mit.edu In-Reply-To: References: <1203954811.31597.2.camel@cutter> <935ead450802250815y3af4b712xe8979a484f7da5c4@mail.gmail.com> <1203957206.31597.8.camel@cutter> Message-ID: <20080226041414.GB21079@auslistsprd01.us.dell.com> On Mon, Feb 25, 2008 at 10:00:38PM -0600, Mike McGrath wrote: > Lots of suggestions for subkeys.pgp.net, if no one is against the idea I > consider this matter solved, we'll get FAS setup and update the docs. subkeys isn't perfect, but it's the best thing going short of running our own instance of SKS, which from the couple times I've looked into doing so, is far from trivial... -- Matt Domsch Linux Technology Strategist, Dell Office of the CTO linux.dell.com & www.dell.com/linux From mmcgrath at redhat.com Wed Feb 27 17:21:04 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 27 Feb 2008 11:21:04 -0600 (CST) Subject: Fedora Needs another Primary mirror! (fwd) Message-ID: PS guys, if you know anyone who might be able to provide this stuff, please let me know. -Mike ---------- Forwarded message ---------- Date: Wed, 27 Feb 2008 11:19:11 -0600 (CST) From: Mike McGrath Reply-To: A private discussion group for official mirrors of ftp.redhat.com To: mirror-list-d at redhat.com Subject: Fedora Needs another Primary mirror! For secondary content. Does anyone out there have anything like the following specs? If so please contact me. http://mmcgrath.livejournal.com/14440.html From gvarisco at redhat.com Wed Feb 27 17:34:03 2008 From: gvarisco at redhat.com (Gianluca Varisco) Date: Wed, 27 Feb 2008 18:34:03 +0100 Subject: Fedora Needs another Primary mirror! (fwd) In-Reply-To: References: Message-ID: <47C59F0B.1000409@redhat.com> Mike McGrath wrote: > PS guys, if you know anyone who might be able to provide this stuff, > please let me know. > Mike, Let me try to forward your request to one of GARR Network's main administrator and see if they can help, too; Their actual architecture: http://mirror.garr.it/about.html Their Fedora mirror (>100mbps): http://fedora.mirror.garr.it/mirrors/fedora/ Stats: http://fedora.mirror.garr.it/statistiche/ Is it OK for you? ;-) Cheers, -- Gianluca Varisco, RHCE Intern GPS, Red Hat Italia Tel.: +39 02 9737 4654 (direct) +39 02 5681 4487 Fax : +39 02 669 3111 Cel.: +39 333 574 0934 Address/Indirizzo: Via Antonio Da Recanate 1 20124 Milano From mmcgrath at redhat.com Wed Feb 27 17:39:41 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Wed, 27 Feb 2008 11:39:41 -0600 (CST) Subject: Fedora Needs another Primary mirror! (fwd) In-Reply-To: <47C59F0B.1000409@redhat.com> References: <47C59F0B.1000409@redhat.com> Message-ID: On Wed, 27 Feb 2008, Gianluca Varisco wrote: > Mike McGrath wrote: > > PS guys, if you know anyone who might be able to provide this stuff, > > please let me know. > > > > Mike, > > Let me try to forward your request to one of GARR Network's main administrator > and see if they can help, too; > > Their actual architecture: http://mirror.garr.it/about.html > > Their Fedora mirror (>100mbps): http://fedora.mirror.garr.it/mirrors/fedora/ > > Stats: http://fedora.mirror.garr.it/statistiche/ > > Is it OK for you? ;-) > Thankyou, I'd like to talk to them. -Mike From ivazqueznet at gmail.com Thu Feb 28 20:23:48 2008 From: ivazqueznet at gmail.com (Ignacio Vazquez-Abrams) Date: Thu, 28 Feb 2008 15:23:48 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> Message-ID: <1204230228.31076.11.camel@ignacio.lan> On Tue, 2008-02-19 at 09:45 -0600, Jeffrey Ollie wrote: > 3) What should the policy on list names be? My proposal: > > A) All list names must be prefixed with "-". > B) All list names must be suffixed with "-list". > C) Lists may optionally have something between the prefix and suffix, > as long as it's not obviously vulgar or obscene. Just pinging on this issue, since we're pretty close to getting it up AFAIK. (Personally, I prefer @lists.) -- Ignacio Vazquez-Abrams PLEASE don't CC me; I'm already subscribed -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: From mmcgrath at redhat.com Thu Feb 28 20:34:17 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 28 Feb 2008 14:34:17 -0600 (CST) Subject: Mailman List Policy for Fedora Hosted In-Reply-To: <1204230228.31076.11.camel@ignacio.lan> References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: On Thu, 28 Feb 2008, Ignacio Vazquez-Abrams wrote: > On Tue, 2008-02-19 at 09:45 -0600, Jeffrey Ollie wrote: > > 3) What should the policy on list names be? My proposal: > > > > A) All list names must be prefixed with "-". > > B) All list names must be suffixed with "-list". > > C) Lists may optionally have something between the prefix and suffix, > > as long as it's not obviously vulgar or obscene. > > Just pinging on this issue, since we're pretty close to getting it up > AFAIK. > > (Personally, I prefer @lists.) > Alrighty, lets just do a +1 -1 and we'll count them up at the next meeting For @lists.fedoraproject.org: for -lists at fedorahosted.org: -Mike From wakko666 at gmail.com Thu Feb 28 20:46:46 2008 From: wakko666 at gmail.com (Brett Lentz) Date: Thu, 28 Feb 2008 12:46:46 -0800 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <1204231606.25319.55.camel@blentz> On Thu, 2008-02-28 at 14:34 -0600, Mike McGrath wrote: > On Thu, 28 Feb 2008, Ignacio Vazquez-Abrams wrote: > > > On Tue, 2008-02-19 at 09:45 -0600, Jeffrey Ollie wrote: > > > 3) What should the policy on list names be? My proposal: > > > > > > A) All list names must be prefixed with "-". > > > B) All list names must be suffixed with "-list". > > > C) Lists may optionally have something between the prefix and suffix, > > > as long as it's not obviously vulgar or obscene. > > > > Just pinging on this issue, since we're pretty close to getting it up > > AFAIK. > > > > (Personally, I prefer @lists.) > > > > > Alrighty, lets just do a +1 -1 and we'll count them up at the next meeting > > > For @lists.fedoraproject.org: > +1 > > for -lists at fedorahosted.org: > -1 > > -Mike ---Brett. Calling you stupid is an insult to stupid people! -- Wanda, "A Fish Called Wanda" From jkeating at redhat.com Thu Feb 28 21:12:00 2008 From: jkeating at redhat.com (Jesse Keating) Date: Thu, 28 Feb 2008 16:12:00 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <20080228161200.733f3ef4@redhat.com> On Thu, 28 Feb 2008 14:34:17 -0600 (CST) Mike McGrath wrote: > For @lists.fedoraproject.org: +1 -- Jesse Keating Fedora -- All my bits are free, are yours? -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 197 bytes Desc: not available URL: From skvidal at fedoraproject.org Thu Feb 28 21:16:59 2008 From: skvidal at fedoraproject.org (seth vidal) Date: Thu, 28 Feb 2008 16:16:59 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <1204233419.8099.43.camel@cutter> On Thu, 2008-02-28 at 14:34 -0600, Mike McGrath wrote: > On Thu, 28 Feb 2008, Ignacio Vazquez-Abrams wrote: > > > On Tue, 2008-02-19 at 09:45 -0600, Jeffrey Ollie wrote: > > > 3) What should the policy on list names be? My proposal: > > > > > > A) All list names must be prefixed with "-". > > > B) All list names must be suffixed with "-list". > > > C) Lists may optionally have something between the prefix and suffix, > > > as long as it's not obviously vulgar or obscene. > > > > Just pinging on this issue, since we're pretty close to getting it up > > AFAIK. > > > > (Personally, I prefer @lists.) > > > > > Alrighty, lets just do a +1 -1 and we'll count them up at the next meeting > > > For @lists.fedoraproject.org: +1 > > for -lists at fedorahosted.org: -1 -sv From gvarisco at redhat.com Thu Feb 28 21:20:11 2008 From: gvarisco at redhat.com (Gianluca Varisco) Date: Thu, 28 Feb 2008 22:20:11 +0100 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <47C7258B.2000904@redhat.com> Mike McGrath wrote: > > Alrighty, lets just do a +1 -1 and we'll count them up at the next meeting > > > For @lists.fedoraproject.org: +1 > for -lists at fedorahosted.org: -1 Cheers, -- Gianluca Varisco, RHCE Intern GPS, Red Hat Italia Tel.: +39 02 9737 4654 (direct) +39 02 5681 4487 Fax : +39 02 669 3111 Cel.: +39 333 574 0934 Address/Indirizzo: Via Antonio Da Recanate 1 20124 Milano From linux at elfshadow.net Thu Feb 28 21:27:43 2008 From: linux at elfshadow.net (Jeffrey Tadlock) Date: Thu, 28 Feb 2008 16:27:43 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <10e0a9b00802281327p592132cesd25885ba6588cda0@mail.gmail.com> On Thu, Feb 28, 2008 at 3:34 PM, Mike McGrath wrote: > For @lists.fedoraproject.org: +1 > for -lists at fedorahosted.org: -1 ~Jeffrey From a.badger at gmail.com Thu Feb 28 20:47:29 2008 From: a.badger at gmail.com (Toshio Kuratomi) Date: Thu, 28 Feb 2008 12:47:29 -0800 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <47C71DE1.5070109@gmail.com> Mike McGrath wrote: > > Alrighty, lets just do a +1 -1 and we'll count them up at the next meeting > > > For @lists.fedoraproject.org: > +1 > > for -lists at fedorahosted.org: > -Toshio -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: OpenPGP digital signature URL: From mmcgrath at redhat.com Thu Feb 28 22:32:03 2008 From: mmcgrath at redhat.com (Mike McGrath) Date: Thu, 28 Feb 2008 16:32:03 -0600 (CST) Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: On Thu, 28 Feb 2008, Mike McGrath wrote: > > > For @lists.fedoraproject.org: > > > for -lists at fedorahosted.org: > > Crap, that first one *should* be @lists.fedorahosted.org sorry about confusion. -Mike From Matt_Domsch at dell.com Fri Feb 29 01:32:37 2008 From: Matt_Domsch at dell.com (Matt Domsch) Date: Thu, 28 Feb 2008 19:32:37 -0600 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <20080229013237.GD4039@auslistsprd01.us.dell.com> On Thu, Feb 28, 2008 at 02:34:17PM -0600, Mike McGrath wrote: > For @lists.fedoraproject.org: +1 > for -lists at fedorahosted.org: -1 -- Matt Domsch Linux Technology Strategist, Dell Office of the CTO linux.dell.com & www.dell.com/linux From ricky at fedoraproject.org Fri Feb 29 03:03:36 2008 From: ricky at fedoraproject.org (Ricky Zhou) Date: Thu, 28 Feb 2008 22:03:36 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <20080229030336.GC4775@Max.nyc1.dsl.speakeasy.net> On 2008-02-28 02:34:17 PM, Mike McGrath wrote: > For @lists.fedoraproject.org: +1 > for -lists at fedorahosted.org: -1 Thanks, Ricky -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From ricky at fedoraproject.org Fri Feb 29 03:10:30 2008 From: ricky at fedoraproject.org (Ricky Zhou) Date: Thu, 28 Feb 2008 22:10:30 -0500 Subject: Meeting Log - 2008-02-28 Message-ID: <20080229031030.GD4775@Max.nyc1.dsl.speakeasy.net> 15:01 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Who's Here? 15:01 < mmcgrath> So... who's here? 15:01 < ivazquez> Pong. 15:01 < gkrpan> Greg Krpan here 15:01 * f13 15:01 < f13> although going to get a snack 15:01 * jeremy waves 15:01 < mmcgrath> gkrpan: hello Greg 15:02 < gkrpan> hi Mike 15:02 * Wakko666 watches from the cheap seats. 15:02 * skvidal is here 15:03 < mmcgrath> alllrighty then, lets get started 15:03 < mmcgrath> First the tickets 15:03 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Tickets 15:03 * nirik is also in the spectator seats. 15:03 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/query?status=new&status=assigned&status=reopened&group=milestone&keywords=%7EMeeting&order=priority 15:03 < zodbot> mmcgrath: http://tinyurl.com/2hyyz6 15:03 < mmcgrath> first ticket 15:03 < mmcgrath> .421 15:03 < mmcgrath> err 15:03 < mmcgrath> .ticket 421 15:04 < zodbot> mmcgrath: #421 (Fedora Mirror Space) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/421 15:04 < mmcgrath> So the board has decided that secondary arch's are worth of official fedora mirror space. I agree. 15:04 < mmcgrath> So now we've got to find mirror space. 15:04 < mmcgrath> Some of you may have seen my call yesterday (http://mmcgrath.net/) for space. 15:05 < mmcgrath> there are a couple of wheels in motion right now but exactly what solution we're going to do is unclear. 15:05 < f13> mmcgrath: hrm, you know, all we have to do for the stuff that's not older than 3 years old is keep the old url functional, the one we did our export file on. 15:05 -!- jmbuser [n=jmbuser at 195.229.24.83] has left #fedora-meeting ["Time to go"] 15:05 < f13> mmcgrath: we could move that content to another host and setup a redirect, and keep it off the master netapp 15:05 < mmcgrath> f13: yeah, we still have to host it somewhere though, and we don't have that much space available right this second. 15:05 < f13> mmcgrath: that could let us archive 4,5,and 6 15:05 < f13> mmcgrath: sure. 15:05 < mmcgrath> 15:05 < mmcgrath> lots of options. 15:06 < mmcgrath> I really don't think we'll get stuck not being able to put the bits up there, just a matter of finding out where the bits go :) 15:06 < f13> yeah 15:06 < mmcgrath> f13: did you happen to talk to legal about the test releases and our obligations? 15:06 < mmcgrath> I'm not really sure who's charge that is. Maybe spot? 15:06 < f13> mmcgrath: we haven't talked yet 15:06 < f13> I was going to do that today, utnil I was surpised with the need to work from home 15:06 < f13> maybe spot and I can do that tomorrow 15:07 * spot nods 15:07 -!- cebbert_ [n=cebbert at nat/redhat/x-222f1705c2f83827] has joined #fedora-meeting 15:07 < mmcgrath> cool, not a huge rush or anything. but it'd be nice to know. 15:07 < f13> yeah, it's chewing on my mind 15:08 < mmcgrath> alrighty, anyone have any questions about 421? If not we'll move on. 15:08 * glezos is here in case he's needed 15:08 < mmcgrath> .ticket 347 15:08 < zodbot> mmcgrath: #347 (Set localtime on all our servers to UTC) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/347 15:08 < mmcgrath> dgilmore: we still all set for tonight? 15:09 * mmcgrath thinks it was tonight. 15:09 < mmcgrath> https://www.redhat.com/archives/fedora-devel-announce/2008-February/msg00013.html 15:09 * mmcgrath thinks dgilmore might be in a meeting. We can get back to that. 15:10 < mmcgrath> .ticket 365 15:10 < zodbot> mmcgrath: #365 (mailman setup (project/hosted)) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/365 15:10 < mmcgrath> jcollie has a $dayjob meeting but this bit is basically up and ready. It really just needs a couple of people to make a test list, make sure we like it all. 15:10 < mmcgrath> then add it to the faq on how to request mailing lists 15:11 < mmcgrath> anyone have any questions / comments on that? 15:12 < ivazquez> Have we finalized on -list@ or @list.? 15:12 < mmcgrath> allrighty 15:12 < mmcgrath> going to be a short meeting I suspect. 15:12 < mmcgrath> ivazquez: afaik, no. 15:12 < ivazquez> Alright. 15:12 -!- jcollie_ [n=jcollie at 161.210.6.122] has quit Read error: 110 (Connection timed out) 15:13 < mmcgrath> we'll need to do that though, ivazquez mind bringing it back up on the list? 15:13 < ivazquez> Sure thing. 15:13 < mmcgrath> thanks 15:13 < mmcgrath> next ticket: 15:13 < mmcgrath> .ticket 395 15:13 < zodbot> mmcgrath: #395 (Audio Streaming of Fedora Board Conference Calls) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/395 15:13 < mmcgrath> jcollie's also been working on this so we can move it to next week. 15:14 < mmcgrath> next 15:14 < mmcgrath> .ticket 398 15:14 < zodbot> mmcgrath: #398 (elfutils `monotone' (mtn) error) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/398 15:14 * mmcgrath reads up on ticket. 15:15 < ivazquez> Have we talked to the mtn devs about this? 15:15 < mmcgrath> ivazquez: seems likely that we haven't 15:15 < mmcgrath> fun #monotone is #unavailable 15:15 < mmcgrath> ivazquez: I'll make a note in the ticket about that. we can move it to next week for now and see what jcollie says. 15:16 < ivazquez> It's on oftc I think. 15:16 < mmcgrath> 15:16 < mmcgrath> alrighty, I've also had a request to bring up 15:16 < mmcgrath> .ticket 399 15:16 < ivazquez> Yup, oftc. 15:16 < zodbot> mmcgrath: #399 (Damned Lies setup change: Move cronned update-stats to a separate app server) - Fedora Infrastructure - Trac - https://fedorahosted.org/projects/fedora-infrastructure/ticket/399 15:16 < mmcgrath> glezos: whats up with that? 15:17 < glezos> Basically it's a task to reduce the load on our web servers, and to move to mysql 15:17 < mmcgrath> sounds like a win win win to me. 15:17 < glezos> move the stats update script to a different server 15:17 < glezos> The (3rd) server running the cronned script producing the stats will need to output some files in a place the web servers could access.. Not sure how to setup that, I'll need someone to help me out drive this 15:18 < mmcgrath> glezos: have you tried to convert the sqlite db's to mysql? Or would we just start with a blank mysql and re-run the stats script? 15:18 -!- jsmith-away is now known as jsmith 15:18 -!- jsmith [n=jsmith at 72.21.36.138] has left #fedora-meeting ["Leaving"] 15:18 < glezos> mmcgrath: yeah, we can do that too in a clean environment, like described on comment #1. 15:19 < glezos> mmcgrath: I'll need a third app server with an NFS the other ones can readonly from. 15:19 < glezos> or something like that 15:19 < mmcgrath> we'll likely just run that on one of the servers that already has the environment on it. 15:19 < mmcgrath> similar to what we do for mirrormanager. 15:20 < glezos> ok 15:20 < gkrpan> what about an scp push to the remaining servers? 15:20 < mmcgrath> how much information / storage are we talking about pushing around? 15:20 < mmcgrath> both right now and this time next year? 15:20 < glezos> 3GB 15:20 < glezos> oops, wrong 15:20 < glezos> much less, sorry 15:20 < mmcgrath> 3GB, is that for dl or transifex? 15:21 < glezos> mmcgrath: we need the update script to produce the contents of http:.../POT/ 15:21 < mmcgrath> how much space is that? 15:21 * glezos checking 15:21 -!- bpepple|lt [n=bpepple|@rrcs-70-61-160-147.central.biz.rr.com] has joined #fedora-meeting 15:21 < glezos> 600M 15:21 < mmcgrath> by tying ourselves to nfs we're pretty much committing to only hosting this information in PHX. 15:22 < mmcgrath> which is doable, but not desirable. 15:22 < mmcgrath> how often would this cron job run? 15:22 < glezos> mmcgrath: every 6-8 hours, however these files don't change often, so rsync will be fast. 15:23 < mmcgrath> k, its possible to do it with the rsync or nfs. its 600M now, ohw much will it be next year at our current growth rate? 15:23 < glezos> mmcgrath: could become up to 3 times in the next year. 15:24 -!- rsc [n=robert at fedora/rsc] has quit Read error: 54 (Connection reset by peer) 15:24 < mmcgrath> k, then we probably will just want to use an nfs store. 15:24 < mmcgrath> What time frame did you have in mind for these changes? 15:25 < glezos> mmcgrath: things work now, so I'm not in a hurry. But it will reduce the load on app1,2 a lot for ~1.5-2 hours each day 15:25 < mmcgrath> 15:25 < glezos> (or just one of them) 15:25 < mmcgrath> We can probably do that in the next month or so without issue. I'd say try to get ahold of paulobanon or yingbull for some help. 15:25 < mmcgrath> anything else on that? 15:26 < glezos> thanks (eof) 15:26 < mmcgrath> solid 15:26 < mmcgrath> Alrighty, thats all the tickets we have 15:26 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Xen2 instabilities 15:26 < mmcgrath> So I still haven't heard back from anyone on whats going on with this, I finally got an oops capture though 15:27 < mmcgrath> skvidal has been kind enough to be on call the last couple of nights so I could sleep. But it didn't crash so thats good. 15:27 < mmcgrath> we're keeping an eye on it though. 15:27 * skvidal thinks it did not crash B/C he was on call 15:27 < mmcgrath> that could very well be. 15:27 * skvidal is clearly a good luck charm 15:27 < skvidal> oh god 15:27 < mmcgrath> good luck :) 15:27 < mmcgrath> heh 15:27 < skvidal> this means I have to be on call forever 15:28 < mmcgrath> alrighty moving on.... 15:28 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- FAS2 15:28 < mmcgrath> So toshio, ricky and I have been hitting FAS2 pretty hard core to strip ldap out and get it ready for a pre-beta release. 15:28 < mmcgrath> 1) we're basically back to the functionality of where we were with LDAP now. 15:28 < mmcgrath> 2) It will allow us to do a ton 15:28 < mmcgrath> and 3) its almost ready. 15:29 < mmcgrath> Expect an email over the next week to help us test. 15:29 -!- rsc [n=robert at fedora/rsc] has joined #fedora-meeting 15:29 < mmcgrath> I'm hoping to package this as well, the installation process is quite simple, even getting shell account integration. 15:29 < mmcgrath> This will be of use to more people then just Fedora. 15:29 -!- wolfy [n=lonewolf at fedora/wolfy] has joined #fedora-meeting 15:29 < mmcgrath> and thats really all I had for this week 15:29 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor 15:30 < abadger1999> 4) it's based on TG-1.0.4.3 and SA-0.4 so people need to test their apps on publictest10 so we can roll this all out concurrently :-) 15:30 < mmcgrath> what toshio said :) 15:30 < mmcgrath> anyone have anything else they'd like to talk about this meeting? 15:30 < mmcgrath> if not we'll close the meeting in 30 15:31 < mmcgrath> 10 15:31 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting Closed 15:31 < mmcgrath> thanks for coming everyone! -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From lmacken at redhat.com Fri Feb 29 04:04:13 2008 From: lmacken at redhat.com (Luke Macken) Date: Thu, 28 Feb 2008 23:04:13 -0500 Subject: Mailman List Policy for Fedora Hosted In-Reply-To: References: <935ead450802190745m2e347154y2ea67446d8440d46@mail.gmail.com> <1204230228.31076.11.camel@ignacio.lan> Message-ID: <20080229040413.GA3123@crow> On Thu, Feb 28, 2008 at 02:34:17PM -0600, Mike McGrath wrote: > > On Thu, 28 Feb 2008, Ignacio Vazquez-Abrams wrote: > > > On Tue, 2008-02-19 at 09:45 -0600, Jeffrey Ollie wrote: > > > 3) What should the policy on list names be? My proposal: > > > > > > A) All list names must be prefixed with "-". > > > B) All list names must be suffixed with "-list". > > > C) Lists may optionally have something between the prefix and suffix, > > > as long as it's not obviously vulgar or obscene. > > > > Just pinging on this issue, since we're pretty close to getting it up > > AFAIK. > > > > (Personally, I prefer @lists.) > > > > > Alrighty, lets just do a +1 -1 and we'll count them up at the next meeting > > > For @lists.fedoraproject.org: +1 luke From dimitris at glezos.com Fri Feb 29 10:57:24 2008 From: dimitris at glezos.com (Dimitris Glezos) Date: Fri, 29 Feb 2008 12:57:24 +0200 Subject: Problem commiting to the new CVs repository for libvirt localization In-Reply-To: <20080223100429.GB5172@redhat.com> References: <20080222164840.GI22804@redhat.com> <20080223100429.GB5172@redhat.com> Message-ID: <6d4237680802290257x79fc3a7dod107648d7fa000c@mail.gmail.com> On Sat, Feb 23, 2008 at 12:04 PM, Daniel Veillard wrote: > > Note that there is still a small problem though: > > paphio:~/i18n/libvirt -> cvs -z9 commit > cvs commit: Examining . > > **** Access allowed: veillard is in ACL for libvirt. > Checking in libvirt.pot; > /cvs/elvis/libvirt/libvirt.pot,v <-- libvirt.pot > new revision: 1.25; previous revision: 1.24 > done > cvs commit: warning: cannot write to history file /cvs/elvis/CVSROOT/history: Permission denied > paphio:~/i18n/libvirt -> This should be fixed now and translations through Transifex succeed. FYI, we disabled the PO checking completely, since Tx supports pre- and post- hooks and is already implementing a pre-commit check for a PO file's syntax validity. -d -- Dimitris Glezos Jabber ID: glezos at jabber.org, GPG: 0xA5A04C3B http://dimitris.glezos.com/ "He who gives up functionality for ease of use loses both and deserves neither." (Anonymous) -- From veillard at redhat.com Fri Feb 29 11:21:18 2008 From: veillard at redhat.com (Daniel Veillard) Date: Fri, 29 Feb 2008 06:21:18 -0500 Subject: Problem commiting to the new CVs repository for libvirt localization In-Reply-To: <6d4237680802290257x79fc3a7dod107648d7fa000c@mail.gmail.com> References: <20080222164840.GI22804@redhat.com> <20080223100429.GB5172@redhat.com> <6d4237680802290257x79fc3a7dod107648d7fa000c@mail.gmail.com> Message-ID: <20080229112118.GA27766@redhat.com> On Fri, Feb 29, 2008 at 12:57:24PM +0200, Dimitris Glezos wrote: > On Sat, Feb 23, 2008 at 12:04 PM, Daniel Veillard wrote: > > > > Note that there is still a small problem though: > > > > paphio:~/i18n/libvirt -> cvs -z9 commit > > cvs commit: Examining . > > > > **** Access allowed: veillard is in ACL for libvirt. > > Checking in libvirt.pot; > > /cvs/elvis/libvirt/libvirt.pot,v <-- libvirt.pot > > new revision: 1.25; previous revision: 1.24 > > done > > cvs commit: warning: cannot write to history file /cvs/elvis/CVSROOT/history: Permission denied > > paphio:~/i18n/libvirt -> > > This should be fixed now and translations through Transifex succeed. > > FYI, we disabled the PO checking completely, since Tx supports pre- > and post- hooks and is already implementing a pre-commit check for a > PO file's syntax validity. okay, thanks for the feedback, apparently I got only a couple of translations since my push of the pot last week, Daniel -- Red Hat Virtualization group http://redhat.com/virtualization/ Daniel Veillard | virtualization library http://libvirt.org/ veillard at redhat.com | libxml GNOME XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/