<@phsmoura:fedora.im>
19:03:05
!startmeeting Fedora Infrastructure Ops Daily Standup Meeting
<@meetbot:fedora.im>
19:03:05
Meeting started at 2024-03-07 19:03:05 UTC
<@meetbot:fedora.im>
19:03:05
The Meeting name is 'Fedora Infrastructure Ops Daily Standup Meeting'
<@leo:fedora.im>
19:03:13
!hi
<@phsmoura:fedora.im>
19:03:13
!chair nirik smooge phsmoura
<@zodbot:fedora.im>
19:03:14
Leo Puvilland (leo) - he / him / his
<@nirik:matrix.scrye.com>
19:03:16
morning
<@phsmoura:fedora.im>
19:03:29
!meetingname fedora_infrastructure_ops_daily_standup_meeting
<@phsmoura:fedora.im>
19:03:32
!info meeting is 30 minutes MAX. At the end of 30, its stops
!info agenda is at https://board.net/p/fedora-infra-daily
!info reminder: speak up if you want to work on a ticket!
<@phsmoura:fedora.im>
19:03:45
morning :)
<@phsmoura:fedora.im>
19:04:19
!topic Tickets needing review
<@phsmoura:fedora.im>
19:04:27
!info https://pagure.io/fedora-infrastructure/issues?status=Open&priority=1
<@phsmoura:fedora.im>
19:04:38
!ticket 11826
<@zodbot:fedora.im>
19:04:38
**fedora-infrastructure #11826** (https://pagure.io/fedora-infrastructure/issue/11826):**logrotate not working on proxy31**
● **Opened:** an hour ago by kevin
● **Last Updated:** Never
● **Assignee:** Not Assigned
<@nirik:matrix.scrye.com>
19:04:53
med med ops?
<@nirik:matrix.scrye.com>
19:04:59
and needs investigation by someone.
<@leo:fedora.im>
19:05:04
+1
<@phsmoura:fedora.im>
19:05:18
+1
<@phsmoura:fedora.im>
19:05:26
maybe I can look at it?
<@nirik:matrix.scrye.com>
19:06:03
sure!
<@phsmoura:fedora.im>
19:06:54
!topic Planning, Upcoming work and Open floor
<@phsmoura:fedora.im>
19:07:00
anything for open floor?
<@nirik:matrix.scrye.com>
19:07:13
I've been swamped with emails and pings today. ;( trying to unburry myself.
<@leo:fedora.im>
19:07:22
wow, ok. so the httpd logs are literally blank when using the proxy. weird.
<@leo:fedora.im>
19:07:29
good luck with that :)
<@nirik:matrix.scrye.com>
19:07:30
note that I will be out tomorrow morning for a dentist appt.
<@nirik:matrix.scrye.com>
19:07:35
and I am off on pto monday. ;)
<@leo:fedora.im>
19:07:46
hope all that goes well
<@nirik:matrix.scrye.com>
19:08:01
me too!
<@phsmoura:fedora.im>
19:09:23
Planet was deployed in stg an I did the PR as well. Seems its working finally, now just need a review and move to prod maybe? I also started some reading to understand badges and work on issue 11802, but will look now at this logrotate
<@leo:fedora.im>
19:09:32
hooray!
<@leo:fedora.im>
19:11:14
but yeah, so somehow when using the proxy it doesn't even get as far as httpd.
<@leo:fedora.im>
19:11:18
very strange.
<@nirik:matrix.scrye.com>
19:12:28
excellent. yeah, I will try and look at pr's today... we may want to ask people to test / check the staging one, but I suppose we could just roll to prod and ask people to check that one. ;)
<@phsmoura:fedora.im>
19:12:57
+1
<@nirik:matrix.scrye.com>
19:13:09
leo: yeah. ;(
<@leo:fedora.im>
19:13:38
are there even any steps between us and apache?
<@nirik:matrix.scrye.com>
19:14:20
well, there's something doing the NAT from the external ip to our proxy... but I would think it would just map that, not mess with the content any.
<@nirik:matrix.scrye.com>
19:14:32
are you sure it's using http?
<@leo:fedora.im>
19:14:37
yeah.
<@leo:fedora.im>
19:15:15
unless there's some weird security policy that kills CONNECTs somewhere?
<@nirik:matrix.scrye.com>
19:15:37
I sure wouldn't think so
<@leo:fedora.im>
19:15:38
also, i'm doing the requests from proxy01.stg itself, and looks like the IPs are actually internal
<@nirik:matrix.scrye.com>
19:18:53
yeah, the external ip's are on some networking gear... which has a NAT rule to take port X on ip Y and NAT it into internal proxy ip Z on port X
<@leo:fedora.im>
19:19:06
right.
<@leo:fedora.im>
19:19:24
but since i'm using internal ips, that shouldnt even matter?
<@nirik:matrix.scrye.com>
19:19:56
yeah, if you are going from internal ip to proxy it shouldn't be doing that at all.. it should all be on the proxy.
<@nirik:matrix.scrye.com>
19:20:36
perhaps tcpdump a connection attempt? or, stop httpd on proxy02.stg for a min, run a nc -l on it and connect to show it's apache for sure.
<@nirik:matrix.scrye.com>
19:21:20
it is vexing. ;(
<@nirik:matrix.scrye.com>
19:21:28
anyhow, I didn't have anything else for the standup.
<@leo:fedora.im>
19:21:33
ok, yeah, will try that. thanks
<@leo:fedora.im>
19:21:38
nothing else from me
<@phsmoura:fedora.im>
19:21:55
me neither
<@phsmoura:fedora.im>
19:25:50
thats all I guess
<@phsmoura:fedora.im>
19:25:59
thanks everyone :)
<@phsmoura:fedora.im>
19:26:13
!endmeeting