19:00:00 #startmeeting Infrastructure (2013-04-18) 19:00:00 Meeting started Thu Apr 18 19:00:00 2013 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:00:00 Useful Commands: #action #agreed #halp #info #idea #link #topic. 19:00:01 #meetingname infrastructure 19:00:01 The meeting name has been set to 'infrastructure' 19:00:01 #topic welcome y'all 19:00:01 #chair smooge skvidal CodeBlock ricky nirik abadger1999 lmacken dgilmore mdomsch threebean 19:00:01 Current chairs: CodeBlock abadger1999 dgilmore lmacken mdomsch nirik ricky skvidal smooge threebean 19:00:11 * pingou here 19:00:12 * skvidal is here 19:00:13 * threebean here briefly 19:00:17 here 19:00:19 * puiterwijk 19:00:21 * cyberworm54 is here 19:00:24 pingou: you beat me to the /me is here! 19:00:27 pingou: noooo! 19:00:36 skvidal: I forgot the "is" :( 19:00:37 * skvidal will live in shame 19:00:41 SHAME 19:00:50 :) 19:00:52 present 19:00:53 * pingou learned from the best 19:00:57 * relrod here, but writing a paper 19:01:07 * abadger1999 here 19:01:29 pingou: to be fair I think lmacken was the best when he used to be able to make warren and katzj drop off the channel when he chimed in to rollcall 19:01:42 skvidal: I can't compete with that! 19:01:44 yeah, that was awesome. ;) 19:01:56 nirik: It took FOREVER to figure out how that was happening 19:01:59 haha 19:02:06 good ol dircproxy bug. 19:02:07 lmacken: you remember that, right? 19:02:16 of course :) one of my best hacks 19:02:18 here 19:02:20 hah 19:02:27 okay. down to business 19:02:27 #topic New folks introductions and Apprentice tasks 19:02:37 any new folks or apprentices with questions or comments? 19:02:57 >.> 19:03:21 * nirik listens to the sound of snow melting. 19:03:29 #topic Applications status / discussion 19:03:40 I had a few things here... 19:03:45 * pingou didn't do much this week 19:04:09 unless threebean is still here and wants to mention his... 19:04:27 pingou: is there still a mail issue on fedocal01.stg? or did we completely fix that now? 19:04:39 nirik: I think there is 19:05:19 so about summer of code stuff 19:05:33 logs are empty but no emails received :( 19:05:42 mailq is empty too :/ 19:05:56 pingou: ok, I can try and help debug that at some point. 19:05:59 * nirik adds to his list. 19:06:16 nirik: ah the cron just threw me an error 19:06:42 nirik: something db related, let's check this out after the meeting 19:06:52 #info threebean created a collectd thing for fedmsg: https://admin.fedoraproject.org/collectd/bin/index.cgi?hostname=busgateway01&plugin=fedmsg×pan=1200&action=show_selection&ok_button=OK 19:07:05 #info lots of work on datanommer this week as well upstream 19:07:09 pingou: ok. 19:07:13 smooge: yeah? 19:08:36 oh, I had another big one. ;( 19:08:56 ? 19:09:02 #info Bugzilla upgrade is coming up very soon. We need to update stg to new python-bugzilla and test our apps asap. 19:09:20 we should also point all stg stuff to parter-bugzilla if it's not already 19:10:39 * nirik listens to more snow melt. ;) 19:10:56 hopefully we are already ready for the bz changes, but we should make sure in stg... 19:10:59 grep -ri bugzilla in puppet or something. 19:11:05 nirik: we're having pollen-valanches here 19:11:05 sorry I thought applications meant for application for projects versus the applications stuff 19:11:11 abadger1999: git grep 19:11:26 nirik: I have the commit for partner-bugzilla ready 19:11:52 puiterwijk: cool. for only stg right? 19:12:04 I believe I sent it to you a while back to review, but didn't hear any of it afterwards 19:12:08 nirik: yeah, stg only 19:12:23 ah, I must have dropped it somewhere, sorry. ;) Please do push it when you get a chance. ;) 19:12:42 sure, will do 19:13:23 ok, any other applications news? 19:13:33 note that we are still frozen until next tuesday... 19:13:48 * nirik needs to make sure to file the release tickets, I didn't get to it yet. 19:13:48 nirik: also the app/sys-admin stg stuff, I guess? 19:13:58 yeah, was gonna do that in sysadmin 19:14:01 ah ok 19:14:06 #topic Sysadmin status / discussion 19:14:23 so, we have an issue with our stg setup... we want to move apps to use openid there. 19:14:37 they reach out to 'username.id.stg.fedoraproject.org' 19:15:09 but they cannot reach the outside ip of that due to firewall. 19:15:21 we can't use /etc/hosts because we can't do wildcard's there. 19:16:09 did you guys determine which firewall? 19:16:20 smooge: yes, the rhit controlled one. 19:16:32 to fix it we need to have them map every single stg host to a 1:1 nat 19:16:39 which I really don't want to do 19:16:40 so my idea was to setup an ns01.stg which has its own database for stg.fp.o which the stg hosts use, and uses the normal paths for anything non-stg 19:16:59 ugh 19:17:01 another idea I had was to add NAT entries to the stg boxes themselve 19:17:11 puiterwijk: split-brain dns aaaaaaaargh 19:17:14 smooge: yeah, I know it's ugly, but I'm just trying to come up with ideas... 19:17:17 thinks about making id.stg.fedoraproject.org a box that sits at ibiblio 19:17:21 skvidal: no, no split-horizon DNS 19:17:38 skvidal: just another DNS server entirely 19:17:43 it's 2 different answers dependoing on who is asking 19:17:47 I'm not sure about the local NAT... would have to play with that to see if it would really work, because not sure you can do wildcards there at all either. 19:17:53 skvidal: I know what split-horizon DNS is 19:18:03 nirik: you just redirect ip addresses 19:18:30 so it could translate 1.1.1.1 -> 192.168.1.1 (for example) before sending the packet to the NIC 19:19:02 yeah, I suppose. 19:19:21 ok, I'd like to ponder on this some more, but if someone has a better solution, feel free to suggest it anytime. ;) 19:20:14 so why can't id.stg.fedoraproject.org sit at say ibiblio? 19:20:54 well, several reasons: 19:21:09 a) mixing stg in the same vhost as production stuff. 19:21:20 b) would need proxy to talk to it and from it? 19:21:41 it might work, but it seems messy to me 19:22:08 nirik: to be fair - what part of our staging environment IS NOT messy? 19:22:25 well, yeah. 19:22:26 nirik: if we're going to have to do major forklifting to make this work - is there something else we could change to make this all simpler? 19:22:39 smooge: it's a possibility, but I'd like to think about the implications of spreading that out 19:22:39 move it all to the cloud? 19:22:44 can we make it all live outside of phx2? 19:23:01 can we stuff it in a cloud-in-a-box off of a spare system? 19:23:18 well we don't have much in spare systems 19:23:20 we could, but if this dns issue is a lot of work... you are asking for lots MORE work? ;) 19:23:41 nirik: well I was more thinking of longer-range but 19:23:42 yah 19:23:49 I understand where you're coming from 19:23:54 I don't mind more lots work if it is lots work once :) 19:23:55 yeah, understand... 19:23:57 so I will withdraw that sugestion 19:24:31 now there is a GSOC project :).. build an implement a real dev and staging enviroment for us 19:24:31 anyhow, we have options, but not clear on the least anoying one. ;) 19:24:41 So, any other sysadmin news? 19:25:12 #info need to determine solution for username.id.stg.fedoraproject.org in stg, we have several possible, just need to see which is least bad. 19:25:16 oh, I have one: 19:25:20 I am going to try and get a PPC working 19:25:25 #info we have reverse dns for cloud.fedoraproject.org 19:25:29 yay! 19:25:34 cool :) 19:25:43 #info smooge to get new ppc box setup to replace ppc11/ppc12. 19:25:47 nirik: we do? 19:26:02 skvidal: we should? 19:26:07 * nirik meant to go back and check it. 19:26:08 dig isn't showing what I'd expect 19:26:16 which is to say - nothing at all 19:26:35 hum. 19:26:56 but dig directly to our servers 19:26:57 and it works 19:26:57 anyhow, we cna work on that out of band. ;( 19:27:00 yes 19:27:01 sorry 19:27:08 #topic Private Cloud status update / discussion 19:27:11 any cloud news? 19:27:26 nothing from me 19:28:01 we have 2 boxes ready to be added as compute nodes... just not done yet 19:28:11 smooge: any word on the disk for 03? 19:28:26 O3? 19:28:33 fed-cloud03 19:28:40 oh yeah, that one with the wacky disk. 19:28:40 the box with the wonky disk? 19:29:11 ugh.. I don't know. I got focused on gnome last week and completely forgot where I left that 19:29:12 sorry 19:29:24 no hurry on it, if you could poke it again that would be good. 19:29:30 I will do that before PPC 19:29:41 once it's figured out we should reinstall it and 01 and setup 01/03 as a grizzley openstack instance. 19:30:24 ok, moving on 19:30:27 smooge: no sweat - thx 19:30:32 #topic Upcoming Tasks/Items 19:30:35 nirik: should we use rdo? 19:30:49 skvidal: yeah, I think so. ;) 19:30:53 nirik: or should we do it by hand? 19:30:55 ok 19:31:07 if it makes sense. I've not looked closely at rdo 19:31:34 #info 2013-04-02 to 2013-04-23 ALPHA infrastructure freeze 19:31:34 #info 2013-04-22 - announce openid change on hosted. 19:31:34 #info 2013-04-23 F19 alpha release 19:31:34 #info 2013-04-24 - switch to new sigul servers. 19:31:35 #info 2013-04-25 - switch hosted to openid 19:31:36 #info 2013-05-01 nag fi-apprentices 19:31:37 #info 2013-05-08 drop inactive apprentices 19:31:40 #info 2013-05-14 to 2013-05-28 BETA infrastructure freeze 19:31:42 #info 2013-05-28 F19 beta release 19:31:44 anything folks would like to note or schedule? 19:32:31 #topic Open Floor 19:32:35 any items for open floor? 19:33:48 nirik: Just a quick status update -- I should have a couple of dedicated servers for you guys in a the next month 19:33:57 nirik: Sorry it's taken so long :-( 19:33:57 jsmith: oh, nice! 19:34:05 cool :) 19:34:09 what kind and where... and no problem 19:34:11 no worries, those kinds of things are always welcome whenever they happen. 19:34:44 smooge: Quad-core Xeons, at least 4 gigs of ram (pushing for more), located in our data center in Utah 19:35:00 smooge: I can give you more specifics offline 19:35:04 ah cool. thanks 19:35:17 cool. I don't think we have anything in utah yet. 19:35:28 road trip 19:35:49 heh. 19:36:12 utah jazz 19:36:28 ok everyone. thanks for coming. Do continue in #fedora-admin, #fedora-noc and #fedora-apps. ;) 19:36:35 #endmeeting