20:00:01 <nirik> #startmeeting Infrastructure (2012-04-05)
20:00:01 <zodbot> Meeting started Thu Apr  5 20:00:01 2012 UTC.  The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot.
20:00:01 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
20:00:02 <nirik> #meetingname infrastructure
20:00:02 <nirik> #topic Robot Roll Call
20:00:02 <nirik> #chair smooge skvidal Codeblock ricky nirik abadger1999 lmacken dgilmore mdomsch
20:00:02 <zodbot> The meeting name has been set to 'infrastructure'
20:00:02 <zodbot> Current chairs: Codeblock abadger1999 dgilmore lmacken mdomsch nirik ricky skvidal smooge
20:00:09 * abadger1999 here
20:00:11 <nirik> who all is around for a nice infra meeting?
20:00:18 * skvidal is here
20:00:22 * nirik has to go step away for a sec... back in a minute.
20:00:22 * wolfkit is here
20:00:28 <CodeBlock> here, but working on a paper due in about an hour, so... yeah.
20:00:39 <skvidal> just so we're clear
20:00:44 <skvidal> it is far too nice of a day for meetings
20:00:45 <skvidal> :)
20:00:49 <skvidal> and it is virtual-friday
20:00:49 * lmacken 
20:00:52 <smooge> here
20:01:16 <smooge> my name is mr crankypants
20:01:16 <wolfkit> skvidal, virtual-friday?  taking tomorrow off for easter holiday? :)
20:01:18 * mdomsch 
20:01:26 <skvidal> wolfkit: rh is closed for the holiday
20:01:28 <skvidal> wolfkit: so... yes
20:01:33 <smooge> okra-planting day
20:02:43 <nirik> ok, lets go ahead and get started?
20:02:47 <nirik> #topic New folks introductions and Apprentice tasks.
20:02:47 <nirik> If any new folks want to give a quick one line bio or any apprentices
20:02:47 <nirik> would like to ask general questions, they can do so now. Anyone?
20:02:57 <Crothers_> Here on mobile
20:03:29 <nirik> welcome Crothers_
20:03:50 <Crothers_> Ty. Driving lol
20:04:08 <wolfkit> that isn't safe.. don't crash :(
20:04:33 <nirik> ok, any general apprentice questions or intros? or shall we move along?
20:04:39 <Crothers_> Yea at a stop light. Sorry for not being at a pc
20:04:56 <skvidal> umm
20:05:00 <skvidal> no distracted driving
20:05:04 <skvidal> put down any computing devices
20:05:19 <wolfkit> Crothers_: when you get to your destination, you can catch up
20:05:25 <nirik> yeah, no crashing please. ;)
20:05:29 <skvidal> fuck crashing
20:05:34 <skvidal> if you hurt yourself that's your problem
20:05:38 <skvidal> no killing pedestrians or cyclists
20:05:48 <nirik> indeed.
20:05:51 * skvidal is REALLY not amused
20:05:51 <nirik> #topic two factor auth status
20:06:03 <nirik> so, whats the latest on the 2factor?
20:06:09 <skvidal> no change this week. my compatriot at kernel.org has been off at a conference
20:06:13 <skvidal> with everyone else from kernel.org
20:06:17 <nirik> ah, ok.
20:06:22 <wolfkit> skvidal, did you ever get that tarball made or is that waiting for something?
20:06:32 <nirik> #info no news this week, will revisit next
20:06:33 <skvidal> wolfkit: yes, I did
20:06:35 <skvidal> I thought I told oyu
20:06:36 <skvidal> sorry
20:06:47 <skvidal> http://skvidal.fedorapeople.org/misc/pam_url_with_patches.tar.gz
20:06:50 <skvidal> wolfkit: there you go
20:06:52 <wolfkit> skvidal, it's okay.  you can link me :)
20:06:58 <nirik> cool.
20:07:15 <wolfkit> aah, cool.  thanks!  should be able to hack it over the easter holiday
20:07:19 <nirik> anything else on this this week? or shall we move on...
20:08:02 <nirik> #topic Staging re-work status
20:08:11 <nirik> no news here. Still waiting for freeze to end. ;)
20:08:12 <skvidal> wolfkit: cpool
20:08:29 <nirik> #info no news here. Will work on it once freeze is over.
20:08:43 <nirik> #topic Applications status / discussion
20:09:05 <nirik> abadger1999 / lmacken / threebean / pingou / CodeBlock (or any other app developing folks)
20:09:11 <nirik> any application news this week.
20:09:41 <abadger1999> not really
20:10:04 <nirik> fair enough.
20:10:06 <abadger1999> I took a look at threebean's fedmsg code this week -- looks pretty good.
20:10:19 <abadger1999> He's got a preliminary fas branch for it.
20:10:19 <nirik> we did have a mirrormanager blow up eariler this week...
20:10:23 <abadger1999> oh yes.
20:10:28 <abadger1999> And end last week too.
20:10:31 <CodeBlock> I have not much new to report, sorry. Been way off schedule and have had some number of school obligations (e.g. the report I'm typing right now) that I've been working on.
20:10:34 <nirik> still looking to isolate that, but it seems to be related to asn data.
20:11:10 <lmacken> I sat down with threebean last week and we walked through spinning up a new release of tagger and deploying it to production. We got caught up in a little of of RPM hell, and didn't finish the deployment. Everything is built though, and we just need to push it into staging, test, then into prod.
20:11:23 <nirik> #info mirrormanager outage this week. Possibly due to bad upstream ASN data (still under investigation).
20:11:45 <nirik> lmacken: ok, cool. Would be nice to get that finished to production sometime. ;)
20:11:46 <threebean> Yeah, I've been in packaging land today and yesterday trying to get that all sorted out the right way.
20:12:04 * nirik can also try and help reviewing and stuff if needed.
20:12:26 <lmacken> I suspect we're going to have a lot of python-tw2-* under review pretty soon.
20:12:31 <nirik> ok.
20:13:25 <pingou> abadger1999: we have a couple (3 to be exact) patches pending review for fas
20:13:25 <nirik> lmacken: we should also try and do a bodhi meetup next week or something... look at whats needed now for 1.0, and start talking about 2.0 stuff...
20:14:10 <lmacken> nirik: yup, I agree. I was hoping to get around to a lot of that this week, but I ended up in an epic battle with the post-ROC plague
20:14:12 <abadger1999> pingou: ugh yeah -- I'm multitasking to hell and back.  I guess I should up priority patches since it blocks other people doing work.
20:14:40 <lmacken> nirik: I'll try and wrangle a bodhi2 meetup with infra+releng+qa people
20:14:41 <pingou> abadger1999: I'm not sure it blocks them, but it is nice to have feed-backs :)
20:14:43 <nirik> lmacken: yeah, I've been swamped too... we should probibly just schedule something and do it, or else we will never get to it. :)
20:14:47 <abadger1999> <nod>
20:14:54 <pingou> abadger1999: two of the three are mine actually, so no hurry for these ;-)
20:15:52 <nirik> #info will schedule a bodhi work session with qa/rel-eng/infra and any other interested folks.
20:16:13 <nirik> #info deployment for tagger in production is waiting on package review work.
20:16:25 <nirik> #info several fas patches pending review.
20:16:29 <nirik> anything else?
20:16:39 <pingou> lmacken: threebean when you have a list of reviews, send them around ;)
20:17:05 <nirik> yeah, I'm sure we can get reviewers.
20:17:55 <threebean> pingou: I'll drop them in #fedora-devel
20:18:05 <pingou> threebean: sure
20:18:38 <nirik> ok, moving on then...
20:19:05 <nirik> #topic Upcoming Tasks/Items
20:19:15 <nirik> we have slipped another week on Fedora 17...
20:19:21 <nirik> #info 2012-03-20 to 2012-04-17 - F17 Beta Freeze
20:19:21 <nirik> #info 2012-04-09 21UTC - fedorahosted migration outage.
20:19:22 <nirik> #info 2012-04-10 - drop inactive fi-apprentices
20:19:22 <nirik> #info 2012-04-17 - F17Beta release day
20:19:22 <nirik> #info 2012-05-08 to 2012-05-22 - F17 Final Freeze.
20:19:24 <nirik> #info 2012-05-01 - nag fi-apprentices.
20:19:26 <nirik> #info 2011-05-03 - gitweb-cache removal day.
20:19:28 <nirik> #info 2012-05-09 - Check if puppet works on f17 yet.
20:19:30 <nirik> #info 2012-05-10 - drop inactive fi-apprentices
20:19:32 <nirik> #info 2012-05-22 - F17 release
20:19:36 <nirik> so, our freeze extends another week.
20:19:39 <skvidal> brrr
20:19:52 <nirik> I've also scheduled an outage for monday for fedorahosted.
20:20:07 <smooge> how does RC3 look?
20:20:09 <nirik> I'm going to migrate us from hosted03 (drbd) to hosted01/02 (glusterfs)
20:20:20 <nirik> smooge: not too bad, but preupgrade is busted.
20:20:24 <smooge> the emails sounded it might slip again
20:20:29 <smooge> ugh
20:20:45 <skvidal> wow, it's like narnia
20:20:48 <skvidal> always frozen
20:20:51 <nirik> yep. slipping another week. ;)
20:20:59 <pingou> skvidal: :)
20:21:11 <nirik> any other upcoming items people would like to schedule or note?
20:21:40 <skvidal> I've been working on ansible playbooks
20:21:48 <skvidal> (and fixing bugs/issues) in ansible this week
20:21:50 <skvidal> it's coming along
20:21:55 <skvidal> http://fpaste.org/42x9/
20:22:09 <nirik> cool.
20:22:14 <skvidal> that does what I expect it to do - and it behaves properly when run multiple times in a row
20:22:17 <skvidal> which is also nice.
20:22:56 <skvidal> it's still evolving
20:23:09 <skvidal> and we need 2 or 3 more modules to be able to duplicate the things we do with puppet now
20:23:16 <skvidal> 1. a mount/fstab editor module
20:23:29 <skvidal> 2. modifying the copy module so it handles fall through sources w/vars
20:23:54 <skvidal> 3. a fair bit of framework - dirs where host data/configs live, paths for additional modules, etc
20:24:15 <skvidal> however, it is easy to test and there's no infrastructure to setup since it is all ssh and push-based
20:24:43 <skvidal> If other folks would like to play with it - check it out at ansible.github.com and look at the examples/docs
20:24:51 <nirik> sounds good.
20:24:58 <skvidal> even if we do not
20:25:05 <skvidal> decide to use ansible in lieu of puppet
20:25:15 <skvidal> I think there are classes of systems we can use w/ansible exclusively
20:25:35 <skvidal> builders are the ones that come to mind
20:25:42 <nirik> yeah.
20:25:51 <skvidal> so I asked this a litlte before
20:25:56 <skvidal> but I want to ask again now
20:26:17 <skvidal> if I modified our sshd configuration to allow root to login via ssh key
20:26:39 <skvidal> and I setup an authorized_keys file for root which only allowed login from lockbox01 - how would we everyone feel about that?
20:26:49 <nirik> I think we were uneasy about it, but really it's not that bad
20:27:14 <skvidal> so the other thing I was just considering is this
20:27:22 * abadger1999 agrees with nirik
20:27:23 <skvidal> right now our kickstarts set a temp password for root
20:27:35 <skvidal> that could stay the same
20:27:56 <skvidal> but I was considering having our post-script grab an authorized-keys file from infra.fp.o
20:28:23 <skvidal> then we could do the entirety of an install w/o needing a root password - just access to that key
20:28:35 <skvidal> does that worry anyone?
20:28:42 <skvidal> I was trying to think of attack vectors
20:28:51 <skvidal> and I couldn't come up with how a published pubkey would help anyone
20:29:01 <nirik> yeah, not sure off hand.
20:29:16 <nirik> perhaps write up the workflow and we can look at it and see if anyone can come up with problems?
20:29:20 <skvidal> sure
20:29:27 <skvidal> I can do that
20:29:41 <nirik> sounds good.
20:29:47 <skvidal> that's all I have
20:30:26 <nirik> ok. Thanks
20:30:30 <nirik> any other upcoming stuff?
20:30:59 <nirik> oh, I'll probibly ask people to test the new hosted01/02 out some once I have it set the way I want it.
20:31:08 <nirik> can be done via a /etc/hosts file.
20:32:03 <nirik> ok, moving along...
20:32:16 <nirik> #topic Meeting tagged tickets
20:32:28 <nirik> we don't have any, but we do have our Fedora 17 beta tagged tickets.
20:32:54 <nirik> most of which we can't do much with until there's a Fedora 17 beta in existance. ;)
20:33:02 <nirik> .ticket 3218
20:33:05 <zodbot> nirik: #3218 (Fedora17 Beta - Verify mirror space) – Fedora Infrastructure - https://fedorahosted.org/fedora-infrastructure/ticket/3218
20:33:06 <nirik> .ticket 3219
20:33:09 <zodbot> nirik: #3219 (Fedora17 Beta - new website) – Fedora Infrastructure - https://fedorahosted.org/fedora-infrastructure/ticket/3219
20:33:11 <nirik> .ticket 3220
20:33:14 <zodbot> nirik: #3220 (Fedora17 Beta - release day ticket) – Fedora Infrastructure - https://fedorahosted.org/fedora-infrastructure/ticket/3220
20:33:17 <nirik> .ticket 3221
20:33:19 <zodbot> nirik: #3221 (Fedora17 Beta - verify permissions on content) – Fedora Infrastructure - https://fedorahosted.org/fedora-infrastructure/ticket/3221
20:34:19 <nirik> #topic Open Floor
20:34:34 <nirik> anyone have any items for open floor? questions, comments, observations?
20:35:32 * nirik listens to the crickets. ;)
20:36:07 <mdomsch> any GSoC interns looking at FI work?
20:36:38 <nirik> mdomsch: there were some FI related proposal/ideas... not sure if anyone is going to be accepted for them.
20:36:50 <mdomsch> there's one in metalinks group wanting to do some metalink work to MM
20:37:04 <mdomsch> I don't have a ton of time to spend mentoring this year
20:37:09 <mdomsch> a little, but not a lot
20:37:22 * nirik has been swamped too. I need to try and catch up on that list, etc...
20:37:31 <mdomsch> the MM work proposed should be fairly quick, if only MM worked on F16ish anymore
20:37:41 <mdomsch> I've got to get that fixed first
20:38:06 * abadger1999 is likely going to be mentoring someone on mailman archivers
20:38:22 <nirik> there's been interest in the survey application setup...
20:38:38 <nirik> it's unclear to me if any of those folks are going to follow through or be accepted for it tho
20:39:15 <skvidal> and the gitlabhq thing
20:39:31 <nirik> also, there was a lot of interest in... yeah, gitlabhq.
20:39:33 <nirik> so I guess we will see.
20:40:18 <nirik> ok, if nothing else will close out the meeting in a minute here.
20:41:50 <nirik> ok, thanks for coming everyone!
20:41:52 <nirik> #endmeeting