Meeting Log - 2008-10-30

[Ricky Zhou]

19:59 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Role Call.  Who's here?
19:59  * ricky 
20:00 < themayor> nope were good
20:00 < themayor> thanks guys
20:00  * SmootherFrOgZ here
20:00  * wcattey makes his way to the exit as the meeting changes.
20:01 < smooge> here
20:01 < mmcgrath> Ok, lets get started
20:01 -!- notting [n=notting at redhat/notting] has joined #fedora-meeting
20:02 < fugolini> Just a small comunication for FAmSCo members, the meeting is going to be held in #fedora-ambassadors
20:02 < mmcgrath> First we'll hit up the release tickets.
20:02 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Release Tickets
20:02 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/report/9
20:02 < zodbot> mmcgrath: http://tinyurl.com/5onzad
20:02 < mmcgrath> .ticket 932
20:02 < zodbot> mmcgrath: #932 (Preview website) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/932
20:02 < mmcgrath> ricky: if you've got that would you mind accepting the ticket?
20:03 < ricky> Sure
20:03 < mmcgrath> solid
20:03 < mmcgrath> ricky: are there any blockers with that or anything you need from us?
20:03 -!- wcattey [n=devnull at HANTA-YO.MIT.EDU] has left #fedora-meeting ["Leaving"]
20:03 < ricky> Nope, I'll just make sure to confirm the torrent URLs early, and we'll be using the current get-fedora for the preview
20:04 < mmcgrath> Will you be doing the actual flip on release day or should someone else?  If not you please note it in the ticket.
20:04 < mmcgrath> <nod> feel free to cc f13 on there and have him give the names to you.
20:04 < mmcgrath> next ticket
20:04 < mmcgrath> .ticket 933
20:04 < zodbot> mmcgrath: #933 (Preview release - Verify mirror space) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/933
20:04 < mmcgrath> I'm going to do this, I'm pretty sure we're find
20:04 < mmcgrath> err fine
20:04 < mmcgrath> .ticket 935
20:04 < zodbot> mmcgrath: #935 (Preview - Mirror Coordination) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/935
20:04 < mdomsch_> hi
20:04 < mmcgrath> f13: mdomsch_: what do we do for preview releases there?  Anything special?  do we even need to tell them about it or do we just let it happen?
20:04 -!- AndreasR [n=zeus at 80-218-142-182.dclient.hispeed.ch] has left #fedora-meeting ["Verlassend"]
20:05 -!- moixs [n=chatzill at 77-56-144-93.dclient.hispeed.ch] has left #fedora-meeting []
20:05 < mdomsch_> f13 usually sends an email before posting the bits
20:05 < mdomsch_> when he knows they're close to being ready
20:05 < mdomsch_> that's all
20:06 < mmcgrath> kew, I figured its simple
20:06 < mmcgrath> .ticket 936
20:06 < zodbot> mmcgrath: #936 (Preview release - Mirror bit verification) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/936
20:06 < mmcgrath> SmootherFrOgZ: you're on this one.  We've never really done this before (which is bad) but you're the man now, care to let us know what you're going to do?  :)
20:07 < SmootherFrOgZ> no pb ;)
20:07 < mmcgrath> part of it is making sure the permissions are right and syncing, what else is there?
20:08 < SmootherFrOgZ> i think that's it
20:08 < mdomsch_> and that jesse lands the content in the right place :-)
20:08 < mmcgrath> k, I suppose we could -V the packages too if you were real hard core about it.
20:08 < SmootherFrOgZ> correct
20:08 < mmcgrath> mdomsch_: yeah, good point :)
20:09 < mmcgrath> .ticket 937
20:09 < zodbot> mmcgrath: #937 (Preview - Infrastructure Change Freeze) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/937
20:09 < mmcgrath> I've got this one, everything's been fine.
20:09 < mmcgrath> It is interesting to note how much more quiet nagios is when we're in a change freeze :)
20:09  * dgilmore is here
20:09  * mmcgrath hopes he doesn't jynx it
20:09 < mmcgrath> and
20:09 < mmcgrath> .ticket 934
20:09  * nirik wonders if this release will be the first with no RHIT interaction needed... or do they still need to flip something?
20:09 < mmcgrath> dgilmore: yo
20:09 < zodbot> mmcgrath: #934 (Preview Release Ticket) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/934
20:10 -!- sternecg [n=sternecg at ohnat.bristolwest.com] has joined #fedora-meeting
20:10 -!- buggbot [n=supybot at landfill.bugzilla.org] has quit Read error: 104 (Connection reset by peer)
20:10 < mmcgrath> nirik: this could be the first one, I can't remember if they were involved for F9 or not...
20:10 < mdomsch_> nirik, they do not
20:10 < dgilmore> mmcgrath: i think alot of nagios noise is people not scheduling downtime when doing work
20:10 < mdomsch_> mmcgrath, nope, not since the composes happen in PHX now
20:10 < mmcgrath> kew
20:11  * nirik nods. Cool. 
20:11 < mmcgrath> so that release ticket is mostly just a tracker.  it'll be closed when the release is out.
20:11 < mmcgrath> So thats really it with the preview release, any one have any questions or concerns?  Speak your mind.
20:11 < dgilmore> mmcgrath, nirik: i think they were not involved in F-9
20:11  * nirik thought they were, but could be misremembering. 
20:11 < mmcgrath> my brain doesn't go back that far.
20:11 < ricky> What is the status of myfedora with regard to the final release?
20:12  * ricky remembers seeing a blog post about it
20:12 < mmcgrath> ricky: wait till the floor is open :-P
20:12 < mmcgrath> which is pretty soon
20:12 < ricky> Oop, sorry
20:12 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Tickets
20:12 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/query?status=new&status=assigned&status=reopened&component=Hosted+Projects&order=id&desc=1
20:12 < zodbot> mmcgrath: http://tinyurl.com/5g3oxm
20:12 < mmcgrath> err not that
20:12 < mmcgrath> .tiny https://fedorahosted.org/fedora-infrastructure/query?status=new&status=assigned&status=reopened&group=milestone&keywords=%7EMeeting&order=priority
20:12 < zodbot> mmcgrath: http://tinyurl.com/2hyyz6
20:12 < mmcgrath> that one ^^
20:12 < mmcgrath> only one
20:12 < mmcgrath> .ticket 740
20:13 < zodbot> mmcgrath: #740 (Loaning out system time to OLPC participants) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/740
20:13 < mmcgrath> dgilmore: heard any news on this?  I haven't.  I assume its a pretty low priority
20:13 < dgilmore> mmcgrath: not heard anything more
20:13 < mmcgrath> k
20:13 < mmcgrath> in that case
20:13 < mmcgrath> I've just got a couple of items this week.
20:14 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- oVirt
20:14 < mmcgrath> Nothing real new with the ovirt looks this week, I also just started looking at enomalism.
20:14 < mmcgrath> They did release 0.84 (ovirt) and I've downloaded that.
20:14 < mmcgrath> So nothing real new.
20:14 < f13> sorry I'm late.
20:14 < mmcgrath> f13: no worries
20:14 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Backup2
20:15 < mmcgrath> I'm working to get our off-site backup solution in order.  It will be at ibiblio.  It will help me sleep better at night.
20:15 < mmcgrath> Its basically going to be a combination lvm + snapshot + nightly rsync type setup.
20:15 < ricky> Will it be everything or just a specific subset?
20:16 < mmcgrath> ricky: specific subset.  Basically everything we'd need to get going again if the worst happened.
20:16 < mmcgrath> so databases, puppet configs, cvs, lookaside cache, etc.
20:16 < mdomsch_> hosted
20:16 < mmcgrath> it will likely be on an encrypted filesystem of some kind.
20:16 < mmcgrath> mdomsch_: actually hosted is already setup.  We've got replicated data from hosted1 -> hosted2 in VA, and an offsite backup in PHX.
20:16 < ricky> Cool, that sounds really interesting
20:16 < mdomsch_> nice
20:16 -!- rdieter is now known as rdieter_away
20:16 < mmcgrath> yeah, we did hosted right :)
20:17 < mmcgrath> its not live replication but it is hourly IIRC.
20:17 -!- stickster is now known as stickster_afk
20:17 < mmcgrath> I've thought about doing live replication but haven't sat down and done it yet.
20:17 < mmcgrath> anywho, any questions about backup2?
20:17 < mmcgrath> kew
20:17 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Open Floor
20:17 < mmcgrath> ricky: I believe you had something?  :)
20:17 -!- rkastl__ [n=rkastl at e181097103.adsl.alicedsl.de] has joined #fedora-meeting
20:18 < ricky> 20:11:55 < ricky> What is the status of myfedora with regard to the final release?
20:18 < ricky> 20:12:05  * ricky remembers seeing a blog post about it
20:18 < mmcgrath> ahh yes
20:18 < mmcgrath> I've not heard any status reports about myfedora
20:18 < mmcgrath> J5: lmacken: either of you two around?
20:18 < mmcgrath> can you give us a status report of my fedora or perhaps email a larger status report to the list?
20:19  * mmcgrath assumes they're absent right now.
20:19 < mmcgrath> ricky: so I'd say they have a status, but not sure what it is.  I'll drop an email to see whats up
20:19 < ricky> Cool
20:19 < mmcgrath> Anyone have anything else they'd like to duscuss?
20:19 < mmcgrath> err discuss even?
20:20 < mmcgrath> mdomsch_: the ubuntu guys are pretty sweet on your mirrormanager stuff.
20:20 < mdomsch_> yeah?
20:20 < mdomsch_> pointers?
20:20 < f13> I'm getting quite close to being able to release the .newkey stuff for F8 and F9 Everything trees
20:20  * ricky wonders if nirik wanted to ask about ticket 651
20:20 < ricky> .ticket 651
20:20 < f13> it'll baloon up our mirror space for a period of time, until we prune the non .newkey content
20:20 < zodbot> ricky: #651 (system account for tier2 ppc32/x86_64 hosting for cvsextras) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/651
20:20 < mdomsch_> f13, for Preview you're not changing the repo=rawhide parts of fedora-release, right?
20:20 < nirik> oh yeah... any news there?
20:20 < mdomsch_> but you will for RC?
20:21 < f13> however I'm not sure of the timing of releaseing this stuff, given the need to stage Preview and the F0 Final.
20:21 < mmcgrath> mdomsch: http://irclogs.ubuntu.com/2008/10/30/%23ubuntu-website.txt <-- towards the bottom.
20:21 < f13> mdomsch_: that's correct. post-preview is when I'll make all the bits look like the real thing, including the repo change.
20:21 < mmcgrath> f13: when will that happen?  how much of a baloon are we talking about?
20:22 < f13> mmcgrath: I'm not sure when it'll happen.  I'm more inclined to wait until after F10 goes out at this point, just because of all the churn that's upcoming.
20:22  * dgilmore would like to see ticket 651 done
20:22 -!- fbijlsma [n=fbijlsma at 92.50.110.191] has joined #fedora-meeting
20:22 < mmcgrath> f13: k
20:22 < f13> it'll double the size of the Everything/ tree for 8 and 9
20:23 < mmcgrath> f13: mind opening a ticket for mirrorspace verification on that?
20:23 < mmcgrath> ricky: one sec on 651
20:24  * mdomsch_ gets evil thought
20:24 < mdomsch_> create a new hidden category "Ubuntu" in MM
20:24 < mdomsch_> and pretend they're at /pub/Ubuntu/
20:24 < mdomsch_> and start serving download.fedoraproject.org/pub/Ubuntu/...
20:25 < f13> mmcgrath: I'll do that before I put any bits in place.
20:25 < mmcgrath> mdomsch_: heh
20:25 < mmcgrath> f13: solid
20:25 < mmcgrath> Ok,
20:25 < ricky> Hehe
20:25 < mmcgrath> ricky: what about 651?
20:25 < ricky> I think nirik was just asking about that
20:25 < nirik> yeah, whats the status?
20:26 < mmcgrath> loupgaroublond: you around?
20:26  * mmcgrath thinks loupgaroublond had this done but not merged to a recent tree.
20:26 < mmcgrath> we talked about it a bit ago but I don't remember its status
20:27 < loupgaroublond> mmcgrath, yes?
20:27 < loupgaroublond> mmcgrath, done what?
20:27 < mmcgrath> .ticket 651
20:27 < zodbot> mmcgrath: #651 (system account for tier2 ppc32/x86_64 hosting for cvsextras) - Fedora Infrastructure - Trac - https://fedorahosted.org/fedora-infrastructure/ticket/651
20:28 < loupgaroublond> is this the 'thirdparty' system deal?
20:29 < mmcgrath> yeah
20:29 < loupgaroublond> ok, iirc, we're using the privacy security features to implement this...
20:29 < loupgaroublond> in the config, a certain group is assigned 'thirdparty' and any third party system should have a login account that is a member of that group
20:30 < loupgaroublond> when pulling stuff from FAS, authenticate with that user, and not with an administrator user
20:30 < loupgaroublond> the privacy stuff, when sending out the userlists, should call the filter_private() method, which will drop the password bits, and possibly something else, though i can't remember offhand
20:31 < mmcgrath> loupgaroublond: and this is in version 0.8.4.5 or in HEAD or not yet completed?
20:31 < loupgaroublond> it's completed, though i'm not sure what's in version 0.8.4.5, so you'll have to check the git log for that
20:32 < mmcgrath> <nod>
20:32 < J5> mmcgrath: whats up?
20:32 < mmcgrath> ricky: while we're getting the next release ready lets make sure to check on that.  Give it a test, etc.  Then on deployment we'll let nirik and dgilmore know so they can do testing.
20:32 < mmcgrath> J5: ono momento
20:32 < mmcgrath> any other questions on ticket 651?
20:32 < ricky> mmcgrath: Sure
20:33 -!- che_ [n=rkastl at redhat/che] has quit Read error: 110 (Connection timed out)
20:33  * ricky has kvm machines setup now that'd be perfect :-)
20:33 < ricky> **virtual machines
20:33 < mmcgrath> J5: we were wondering if you could give us a status report on MyFedora?
20:33 < nirik> and it just gets ssh keys and logins, no passwords, right?
20:33 < ricky> nirik: Yup, that's the plan
20:34 < J5> ok, we are doing cleanups right now, the whole stack is packaged though the myfedora package needs some more cleanups.
20:34 < ricky> Also no real name, etc. info for people with privacy on
20:34 < nirik> great. Let me know when to test.
20:34 -!- sternecg [n=sternecg at ohnat.bristolwest.com] has quit "Leaving"
20:34 < J5> we have a test instance up at https://publictest16.fedoraproject.org/community
20:35 < mmcgrath> Do we have an estimated date on when it will be ready for deployment?
20:35 < ricky> Will it run on the same boxes as our other TG apps?
20:35 < J5> you can push updates from the updates tool, I show controls in the builds tool but haven't hooked that up yet
20:35 < J5> should be ready for deployment with F10 release
20:35 < dgilmore> ricky: just want public keys and usernames
20:36 < loupgaroublond> mmcgrath, the git commit's SHA is 3067a96d6cc0260c8c8bf179b93471fcb185475a
20:36 < SmootherFrOgZ> great
20:36 < mmcgrath> loupgaroublond: thank you.
20:36 < ricky> dgilmore: Hm, OK - we might have to make make sure fasClient works with just that info, then
20:36 < mmcgrath> ricky: and group info
20:36 < loupgaroublond> mmcgrath, and that appears to be master
20:36 < J5> We really just need to clean up some of the screen in terms of css and have better error handling
20:37 < dgilmore> mmcgrath: ahh yeah we might need that also
20:37 < dgilmore> ricky: ill just as gladly not have Real Names
20:37  * nirik nods at dgilmore. 
20:38 < J5> just a warning to the rest of the infrastructure, I'm going to be sending in a bunch of patches during the F11 time frame as we had to drop a bunch of features because the API wasn't exposed or was exposed in a way we couldn't use very easily
20:39 < J5> mmcgrath: I have a couple of questions about deployment
20:39 < mmcgrath> J5: sure, shoot them my way.
20:39 < mmcgrath> J5: do we have any estimated date on when it will be ready for deployment?
20:39 < dgilmore> whats the url for the test instance?
20:39 < ricky> dgilmore: https://publictest16.fedoraproject.org/community
20:40 < J5> where do you want to mount myfedora?  If it is under the admin.fd.o we can link off to other infrastructure bits better
20:40 < J5> two more weeks I would say
20:40 < mmcgrath> J5: doesn't matter to me, we can do admin.fedoraproject.org/myfedora/ or myfedora.fedoraproject.org/
20:40 < ricky> That sounds good - depending on how auth is done, maybe they can share auth cookies
20:40 < J5> admin.fedoraproject.org/community
20:40 < mmcgrath> we have a *.fedoraproject.org certificate now so secure sites are cheap.
20:40 < J5> ricky: I'm already using the same cookies
20:40 < mmcgrath> yeah, wherever you guys want, doesn't matter to me.
20:41 < ricky> Nice
20:41 < J5> mmcgrath: I would like community.fedoraproject.org but that puts us in a different domain
20:42 < dgilmore> J5: have you guys tested in konqueror?
20:42 < mmcgrath> <nod>
20:42 < J5> any reason why cookies are not attached to fedoraproject.org or is that a browser thing?
20:42 < ricky> There are pages under fedoraproject.org which we couldn't 100% trust the content of
20:42 < J5> dgilmore: mostly firefox but I ran it on safari and it looked and worked fine
20:42 < ricky> Like the old wiki allowed arbitrary HTML
20:42 -!- fbijlsma [n=fbijlsma at 92.50.110.191] has quit "Leaving"
20:42 < J5> dgilmore: would be good if we got more testing
20:43 < ricky> And then there's people.fedoraproject.org
20:43 < dgilmore> J5: i generally use konq and it seemed busted
20:43 < dgilmore> J5 i had to hit close nearly 10 times before hiting the front page
20:43 < J5> dgilmore: file bugs, some parts are busted in general that we need to clean up
20:44 < dgilmore> J5: it kept showing planet feeds on top of everything else
20:44 < dgilmore> J5: where do bugs get files
20:44 < dgilmore> filed
20:44 < dgilmore> J5: blog about it please
20:44 < J5> myfedora.fedorahosted.org
20:44 < J5> dgilmore: I did, a couple of days ago
20:44 < dgilmore> J5: i missed it
20:44 < J5> k
20:44 < dgilmore> be louder :)
20:45 < J5> NEXT TIME I WILL POST IN ALL CAPS :)
20:45 < ricky> More <blink>s in the entry
20:45 < mmcgrath> heh
20:45 < mmcgrath> Ok ok, I'm thinking we can close the meeting a little early.  Anyone have anything else they'd like to discuss?
20:45 < dgilmore> J5: this could be something cool.  but It needs some noise :)
20:45 < J5> ya
20:45  * dgilmore got a G1 this afternoon 
20:46 < J5> mmcgrath: so I was told you use mod_ssl not mod_nss - how do you want me to configure myfedora's package?
20:46 < dgilmore> J5: AFAIK we use mod_ssl everywhere not mod_nss
20:47 < dgilmore> i know koji uses mod_ssl
20:47 < mmcgrath> J5: actually you probably won't need to worry about that, the app servers don't exist at our encryption layer.
20:48 < J5> so take out the ssl apache configs?
20:48 < mmcgrath> J5: leave it on the publictest boxes, but when it gets deployed on app[1-6] take it out, the proxy servers do our ssl encryption
20:49 < J5> my biggest problem with that is if a user installs it without ssl they could potentially send fedora passwords over the wire
20:49 < mmcgrath> if a user installs what exactly?
20:49 < J5> the myfedora rpm
20:49 < mmcgrath> and thats the webapp?
20:49 < J5> yes
20:50 < mmcgrath> ah, typically that stuff is left up to the admins.
20:51 < J5> ok, I just copied what func did
20:51 -!- DemonJester [n=DemonJes at fedora/DemonJester] has quit "leaving"
20:51 < J5> so you don't want me installing the myfedora.conf in /etc/httd/conf.d?
20:51 < mmcgrath> <nod> with Func we don't pass it through the proxy layer, its not quite a traditional webapp.
20:52 < mmcgrath> J5: thats up to you but whatever you do with it we'll be changing it and controlling it via puppet anyway :)
20:52 < mmcgrath> being a config file and all
20:52 < J5> ok cool
20:53 < mmcgrath> Ok, well we'll look forward to that in the comming weeks.
20:53 < mmcgrath> Anyone have anything else they'd like to discuss?  If not we'll close the meeting in 30
20:54 < mmcgrath> 10
20:54 < J5> hey guys, test it out and blog about it
20:54 < mmcgrath> J5: sure thing
20:54 < J5> and file bugs :)
20:54 -!- mmcgrath changed the topic of #fedora-meeting to: Infrastructure -- Meeting closed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-infrastructure-list/attachments/20081030/ffad3a7b/attachment.sig>