18:00:00 #startmeeting Infrastructure (2016-09-08) 18:00:00 Meeting started Thu Sep 8 18:00:00 2016 UTC. The chair is smooge. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:00:00 Useful Commands: #action #agreed #halp #info #idea #link #topic. 18:00:00 The meeting name has been set to 'infrastructure_(2016-09-08)' 18:00:00 #meetingname infrastructure 18:00:00 The meeting name has been set to 'infrastructure' 18:00:01 #topic aloha 18:00:01 #chair smooge relrod nirik abadger1999 lmacken dgilmore threebean pingou puiterwijk pbrobinson 18:00:01 Current chairs: abadger1999 dgilmore lmacken nirik pbrobinson pingou puiterwijk relrod smooge threebean 18:00:01 #topic New folks introductions 18:00:09 hi 18:00:18 * nirik had just almost hit enter on his 18:00:34 ha! 18:00:34 smooge: you want to run things? are you still at the DC? 18:00:38 hi 18:00:43 I am in the DC but can run the meeting 18:00:43 .hellomynameis kushal 18:00:43 kushal: kushal 'Kushal Das' 18:00:48 .hello sayanchowdhury 18:00:49 sayan: sayanchowdhury 'Sayan Chowdhury' 18:00:54 .hello cverna 18:00:55 cverna: cverna 'Clement Verna' 18:01:01 smooge, you have the power :) 18:01:06 .hello lousab 18:01:06 lousab: lousab 'luigi sainini' 18:01:28 .hello trishnag 18:01:29 trishnag: trishnag 'Trishna Guha' 18:01:43 hey! 18:01:55 hello everyone 18:02:01 Hi I want to join fedora infrastructure apprentice group. :) 18:02:23 .hello bowlofeggs 18:02:24 bowlofeggs: bowlofeggs 'Randy Barlow' 18:02:30 .hello bowlofinfrastructure 18:02:31 bowlofeggs: Sorry, but you don't exist 18:02:32 welcome trishnag. Have you sent an introduction to the list? [I am behind so apologies for missing it if you have] 18:02:34 awww 18:02:35 .hello nb 18:02:36 nb: nb 'Nick Bebout' 18:03:22 .hello kevin 18:03:23 nirik: kevin 'Kevin Fenzi' 18:03:25 any other new people? 18:03:48 smooge: I am in the list from last year. but haven't joined the apprentice group. Should I send an introduction now? 18:04:13 did you send one before :)? 18:04:32 In any case I can add you to apprentice after the meeting 18:04:41 I guess not. I need to find. If not I will do :). 18:04:56 * doteast here 18:04:58 smooge: Thanks :-) 18:05:10 thanks. it helps in finding out what groups can better help you 18:05:20 sure 18:05:30 ok if no other new people.. I will move on 18:05:34 #topic announcements and information 18:05:34 #info git checkout seed script now fixed - kevin, clime 18:05:34 #info bodhi updates have moved from bodhi-backend01 to 03 - kevin 18:05:34 #info Sept apprentice nag email is out (a bit late), please reply - kevin 18:05:34 #info fedorahosted.org sunset announcement is out - everyone 18:05:35 #info spam levels are down to 1-2 actual spams in trac per week. 18:05:37 #info spam accounts are down to ~10 accounts created a day but not used 18:05:41 #info pagure-importer 1.2.0 released - cverna 18:05:43 #info virthost-cc-rdu01 finally installed 18:05:55 #info doteast made good progress on a mirrormanager nagios script 18:06:19 cverna: did you see my issue on tags for importer? :) 18:06:20 .hello tiagovieira 18:06:21 tmoreira: tiagovieira 'Tiago Moreira Vieira' 18:06:25 oh, and I forgot to add: 18:06:40 #info pagure and pagure-stg given more mem/cpus... hopefully a bit faster now - kevin 18:06:51 nirik: yeah and vivek has done already done a PR for it :) 18:06:53 #info new sigul 0.200 release out, autosigning getting set up in staging now - patrick 18:07:10 cverna: awesome. 18:07:30 I'm somewhat torn between importing infra trac with tags or just without and we can retagg things... 18:07:52 nirik: will wait a bit and release a new version next week 18:08:03 puiterwijk, thank you for doing that :) 18:08:31 puiterwijk, how long until sigul 1.0? 18:08:46 nirik: you can cleanup the unwanted tags from the project setting 18:08:54 smooge: well, I could call this 1.0... But who knows when I draw that arbitrary line and start numbering from 1.0 :) 18:09:06 ok 18:09:07 cverna: yeah, but there's a lot of em. ;) I wonder if we could make the pag tool handle it... that would be easier to script 18:09:36 oh how long before we go into freeze again? 18:09:42 end of the month 18:09:47 smooge: I am planning to draw that arbitrary line when I get gpg2 support in though :) 18:09:48 27th? 18:09:51 nirik: could be an option not sure if there is an api for this on pagure 18:10:29 #info Fedora 25 beta freeze at end of month. Probable reboot outage 1-2 weeks before then 18:10:53 alright I think that is all the info fit to print 18:10:54 yeah, I was thinking week before 18:11:15 I expect that 7.3 will happen right afterwords :) 18:11:56 anyway.. onto the next topic 18:12:06 and a kernel update 18:12:18 #topic possible employment of https://github.com/release-engineering/dist-git in Fedora Infra - clime 18:12:21 clime, 18:12:38 ye, I would like to suggest using https://github.com/release-engineering/dist-git 18:13:04 I'd like to get pingou's input on this... since he knows the pkgdb and pagure interfaces best... 18:13:07 basically I would like separate the scripting part + selinux policy from actual configs in INFRA 18:13:29 but yeah, overall upstreaming seems good to me. 18:13:50 I need to employ the latest commits from INFRA, I guess. 18:14:09 latest one being: Patrick Uiterwijk Tue Aug 30 19:36:53 2016 +0000 Unify all ssl cipher suite configurations 18:14:19 vs one from Fri Jul 24 11:58:38 2015 +0200 in GIT 18:14:27 clime: that would be a very good one to get in yes. Especially for us... 18:14:29 but I can sort that out if there are some diffs 18:14:46 I think, it's doable. 18:15:01 * jflory7 here 18:15:06 having something upstream everyone can more easily use and contribute to sounds like a good goal 18:15:14 yep, absolutely 18:15:32 e.g. templates/pkgdb_sync_git_branches.py needs to be modded slightly cause it contains ansible tags 18:15:33 copr is already using this right? the package? 18:15:59 oh, I guess it's a different one? 18:16:11 because of static configuration though so that could be moved to a separate config :) 18:16:19 nirik: nope, not yet 18:16:49 Would be nice to unify 18:16:56 * nirik nods. 18:17:17 can you post to the list the proposal, etc? pingou might be able to more easily comment there... 18:17:36 So yeah, I went through the main.yml script and it would get simplify a great deal, I think 18:17:42 nirik: yes, I will do it. 18:18:50 anything else on this? 18:20:07 #topic bodhi-backend03 running bodhi 2.1.8 (older than production) - bowlofeggs 18:20:13 bowlofeggs, you are up 18:20:16 thanks! 18:20:45 so i wanted to bring this up today so we can figure out a good path forwards 18:21:13 * nirik doesn't think the topic is right. 18:21:13 i'm working to find out what commit of bodhi is deployed on production right now 18:21:20 nirik: oh? 18:21:25 $ rpm -q bodhi-server 18:21:25 bodhi-server-2.0-212.el7.centos.noarch 18:21:30 ooooh 18:21:36 nirik: i think i am confused then 18:21:37 hahaha 18:21:38 hostname 18:21:38 bodhi-backend03.phx2.fedoraproject.org 18:21:49 it's the one from lmacken's copr... 18:21:50 nirik: i thought that it was running that f24 build from my copr? 18:22:19 nirik: this is good news to me though, because i was worried 18:22:45 I thought I told you that it was running the copr one. :( 18:22:48 perhaps I failed 18:23:07 well i thought you meant it was from *my* copr, not lmacken's 18:23:22 so it was probably just me confusing things 18:23:44 nirik: that copr that i made for you, that had f24 - was that ever deployed anywhere "productiony"? 18:23:49 that's the thing i was concerned about 18:24:11 the bowlofeggs/bodhi repo? 18:24:43 I don't think so, if so, not anymore 18:24:47 ok so nothing on this topic then.. 18:24:51 yeah i think we can move on 18:24:54 sorry everyone 18:24:54 Well, one thing 18:24:59 however.... 18:25:05 #info bowlofeggs was confused and we had a bowlofbeans instead 18:25:09 hahahaha 18:25:11 hahahahah 18:25:12 bowlofeggs: can we please try to agree that from now on no bodhi deployments get done from COPR anymore? :) 18:25:12 the ansible playbook enables your copr (not lmackens) 18:25:19 puiterwijk: yes yes yes 18:25:24 so there is a update pending on bodhi-backend03 18:25:30 puiterwijk: i'm working on that - first it has to get into rawhide and then epel 7 18:25:37 oh, it's from the infra repo tho 18:25:37 * doteast LOL 18:25:40 bodhi-server.noarch 2.1.8-1.fc24 infrastructure 18:25:55 that might be the one I made as a scratch build 18:26:00 bowlofeggs: we should have a set of infra tags as soon as dgilmore gets us those tags, so you can build in there until everything got into EPEL7 proper 18:26:00 nirik: i highly recommend not applying that update 18:26:07 so we should nuke it and we should nuke the copr from the playbook 18:26:12 nirik: yeah 18:26:23 I can do that, or someone else can if they want to beat me too it. ;) 18:26:35 bowlofeggs: so, I would like to agree that we disable the COPR repos directly after the meeting from the bodhi production boxes :) 18:26:41 s/agree/propose/ 18:26:46 my plan for the immediate future is to get a 2.1.9 release out 18:26:56 but first i need to figure out what commit is in production 18:27:23 once i know that, i'll know what has changed since then 18:27:28 * nirik just does that stuff 18:27:43 puiterwijk: that's ok by me 18:28:01 once i get a 2.1.9 release done, i'll put that in rawhide, and then i'll send an epel 7 update for it too 18:28:08 so that's my plan going forward 18:28:15 does that sound good? 18:28:27 Yup 18:28:32 bowlofeggs++ thanks! 18:28:35 bowlofeggs, ++ 18:28:37 i don't want to deploy random unknown builds anymore - i want to tag all releases in upstream bodhi 18:28:39 cool 18:28:48 Good idea. 18:28:55 it could end up being a 2.2.0, if there are new featuers 18:28:59 oh, turns out Kevin just dropped the COPR repo 18:29:01 :D 18:29:06 that's why i want to find out what commit is in production 18:29:11 nice 18:29:14 yeah 18:29:18 cool 18:29:23 nirik, already dropped the copr repos it seems :) 18:29:26 well i'm happy to move on if you want 18:29:38 and i apologize for all my confusion 18:29:40 That was my request, and that's been taken care of now :) 18:29:42 i'm a newb 18:29:48 * nirik was doing that. 18:29:48 Heh, no problem. Thanks for picking up bodhi! 18:29:58 ☺ 18:30:10 we'll have smoother sailing as i get more experienced with bodhi 18:31:08 #topic Apprentice Open office hours 18:31:27 Hello Apprentices. Are there tickets you are wanting help with? etc? 18:31:37 I would like to get permissions to push into infrastructure ansible.git for that dist-git thing to get done as smoothly as possible. 18:32:04 clime: would just a patch be a problem for now? 18:32:18 clime: are you suspecting it would be done before beta freeze? 18:32:46 nirik: well, I could make it fast, I think. 18:33:19 puiterwijk: patches are also alright if somebody will apply them for me :) 18:33:43 clime: yep. If you send them to the infra list, they'll get picked up pretty soon, and if not, bug any of us :) 18:33:54 but there is also thing that I would like to be able to realease & deploy new copr versions, which I currently cannot do :( 18:34:34 I'd like to be able to do this on my own... 18:34:37 Well, you are able to ssh into the copr servers and run the copr playbooks. So just the patches merging you can't do at the moment. 18:34:51 I can't run the playbooks. 18:34:59 trishnag, feel free to ask any doubts now :) 18:34:59 puiterwijk: the tags exist 18:35:04 from batcave01 i get Permission denied on /etc/ansible_utils/rbac.yaml 18:35:19 puiterwijk: we could just make a sysadmin-copr... 18:35:20 without sudo that is 18:35:22 clime: right. Use sudo to run rbac-playbook. But we can look at that outside of the meeting :) 18:35:22 puiterwijk: I need to add packages, with owners and set up the permissions 18:35:23 in fact I thought we had one 18:35:35 nirik: we have copradmin, as I just created that yesterday 18:35:49 nirik: I made it a non-sysadmin* group due to the special status of COPR 18:36:06 there was no sysadmin-copr, msuchy was in sysadmin-cloud 18:36:10 kushal: First I will join the group and look around the tasks :). 18:36:16 puiterwijk: well, yes, but.. 18:36:34 we often add sysadmin-foo when an application is still moving toward full support,thats part of the process 18:36:39 dgilmore: okay, thanks. We should finish that up, maybe tonight? 18:36:48 and sysadmin would allow copr people to commit to ansible for copr stuff... 18:36:55 nirik: right. But the RFR for COPR is currently stalled. 18:36:59 Yep. 18:37:16 sure, perhaps we can unstall it with clime's help 18:37:18 As soon as they move forward with the RFR etc, I'm happy with sysadmin-copr. Just didn't see any yet. 18:37:19 puiterwijk: sure 18:37:25 nirik: yep, that'd work for me. 18:37:26 nirik: sure 18:37:37 ah... I see. 18:37:55 msuchy is in sysadmin-cloud... we reused that for copr because copr was so tied to the cloud 18:38:04 Yep. 18:38:40 so, we could do that for clime also, or make sysadmin-copr or whatever. 18:38:48 I would vote sysadmin-copr 18:39:01 I don't think that all copr admins should have admin on the cloud stuff 18:39:36 So, if clime is going to move the RFR on, I can create sysadmin-copr and add him there 18:39:49 puiterwijk: at your service! 18:40:04 clime: okay, then here you'll get your own group. Use it wisely :) 18:40:09 :) 18:40:13 puiterwijk: thx! :) 18:40:22 clime: and you'll get sysadmin, so you can push to ansible.git 18:40:47 puiterwijk: well, thx guys! 18:40:53 smooge: Thanks :) 18:41:00 puiterwijk: gonna have fun :) 18:41:02 as soon as I unbreak FAS, that is :) 18:41:19 I think I just broke FAS... if I did, I'm really sorry everyone! 18:41:26 (in a good sense) 18:41:27 and fixed 18:41:44 ok any other items/ 18:41:44 .members sysadmin-copr 18:41:45 puiterwijk: Members of sysadmin-copr: @clime 18:42:02 clime: will give ACLs et al in a minute. It will take about 30 minutes to sync out 18:42:03 I am gonna make a t-shirt saying that 18:42:20 clime: what? "puiterwijk broke FAS"? :-) 18:42:20 will play out with the design 18:42:23 :D 18:42:29 not that. 18:42:32 * puiterwijk is still waiting for my "ask about copr" shirt :P 18:43:03 puiterwijk: I don't think you want to bother with questions about COPR 18:43:05 ;) 18:43:33 but i'll send you one if you really want ;) 18:43:37 clime: I'm not saying I'd wear it often. Just that I think I should be allowed to wear it :P 18:43:53 ye, sure. You would never put it on :D 18:44:00 Anyway, sorry for derailing the conversation 18:44:21 clime: not never. When it's seen more of your touch and is stable and supported, I'd happily wear it, so let's try to get there :) 18:44:31 ok. 18:44:51 Anyway, any other apprentices? 18:46:14 OK no one signed up to xplain stuff so I think we can skip this week 18:46:35 #topic Open Floor / Last Call 18:48:45 ok nothing on this 18:48:49 going to close it out 18:48:53 So, anyone wants to share their favorite beverage? 18:48:58 oh, sorry smooge 18:49:11 speaking of which... time for more coffee. ;) 18:49:16 #endmeeting