18:00:14 #startmeeting Infrastructure (2015-08-06) 18:00:14 Meeting started Thu Aug 6 18:00:14 2015 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:00:14 Useful Commands: #action #agreed #halp #info #idea #link #topic. 18:00:14 #meetingname infrastructure 18:00:14 The meeting name has been set to 'infrastructure' 18:00:14 #topic aloha 18:00:14 #chair smooge relrod nirik abadger1999 lmacken dgilmore mdomsch threebean pingou puiterwijk pbrobinson 18:00:14 Current chairs: abadger1999 dgilmore lmacken mdomsch nirik pbrobinson pingou puiterwijk relrod smooge threebean 18:00:15 #topic New folks introductions / Apprentice feedback 18:00:18 hey folks. 18:00:22 <^conner> howdy 18:00:27 Hey! :) 18:00:33 I'm still in the go/nogo meeting for f23alpha, so I will be a bit slow to move things along... ;) 18:00:46 * threebean threebean 18:00:49 nirik: Hi :) 18:00:52 * pingou 18:01:00 * rahulrrixe_ here 18:01:01 .hello decause 18:01:02 decause: decause 'None' 18:01:06 * ardian here 18:01:13 * ^conner here 18:01:15 * aikidouke here 18:01:15 * prth here 18:01:17 * pcreech|work here 18:01:23 * nyazdani here 18:01:36 * potty here 18:01:40 any new folks like to give a short introduction? or apprentices with questions or comments? 18:02:06 <^conner> are there notes anywhere for the rules on a "freeze"? 18:02:23 :) AikidoUke - I just passed my RHCSA, decent at bash scripting, learning python, just here to learn and figure out a way to help 18:02:24 yep. There's the freeze notice on the infrastructure list that tries to explain it 18:02:34 aikidouke: welcome :) 18:02:48 <^conner> I will look in the archives for it, I may have joined the list post freeze 18:02:52 welcome! 18:02:52 basically we want to not make changes that would break our ability to build and release a fedora version. :) 18:02:54 thanks! Still working on my fedorapeople set up... 18:02:59 welcome aikidouke. ;) 18:03:06 o/ potty - not the first time i apply but with more time than last time 18:03:13 are you more interested in sysadmin, or application development stuff? 18:03:23 hey potty, welcome back. :) 18:03:31 I'm more interested in sysadmin stuff 18:03:42 :) 18:03:52 I dont have any production experience in a job, just working on my own things... 18:03:52 aikidouke: cool. I can get you added to the apprentice group after the meeting over in #fedora-admin. 18:04:01 (If I can get done with all the meetings I am in today) 18:04:32 cool. :) anyone else? or shall we move on to GSoC checkins? 18:04:33 hello 18:05:04 great - ty. FYI I also have a ticket open for sponsorship; https://fedorahosted.org/packager-sponsors/ticket/219 - no hurry nirik, totally understand the meeting thing 18:05:30 aikidouke: oh, you shouldn't need that when I add you to the apprentice group... ;) 18:05:37 morning lnxslck 18:05:38 oh ok. thank you 18:05:47 nirik, good afternoon over here :) 18:05:57 it's always morning on irc. :) 18:06:01 :) 18:06:11 #topic GSoC student update - kushal 18:06:20 * nirik doesn't see kushal around right now. 18:06:30 but any GSoC folks like to check in with their progress ? 18:06:31 might be traveling to the US 18:06:33 prth: ? 18:06:39 (thats Google Summer of code) 18:06:56 i have completed adding constraints to overlays, changed implementation to keep track of overlays, updated according to pingou's comments and am working on uploading progress bar 18:07:26 This week, I have worked on adding and updating reviews. Now one can see all the reviews related to a package as a list. 18:07:37 Hi, I have done most of the integration with the main, Q/A, sign in, sign up, badges pages on the testing instance for AskFedora. The screen shots of those can be seen here in my blog post: http://anuradhanotes.blogspot.com/2015/08/progress-with-integration.html 18:07:50 * nirik runs to get more coffee, back in a few minutes... 18:07:53 I got my deployment working. We are using nginx and unicorn 18:07:58 nirik: i got a new folks on Panama that might be interested in participate on GSoC next year. How can fedora-infra guide them? 18:07:59 #link http://glittergallery-dev.fedorainfracloud.org/ 18:08:06 After addition of sparkleshare key, it was able to sync the projects. So thats good news. I am documenting the deployment process and dependencies installation. I have started work on next feature as well. I will be adding git diff for images. 18:08:09 AnuradhaW: very nice :) 18:08:17 sonalkr132: gunicorn? 18:08:22 * roshi pops in late 18:08:33 threebean: Thank you :) 18:09:14 decause: yup http://unicorn.bogomips.org/ 18:10:02 decause: I am afraid gunicorn is different than unicorn 18:10:24 sonalkr132: cool, good to know! 18:11:09 sonalkr132: I see Zed Shaw mixed into the contributor mentions there. Def a fan :) 18:11:51 potty: and what about the questions from gnokii? 18:11:55 decause: sorry, I am still getting familiar with gods ;) 18:12:08 potty: not sure. I'd have them watch for the ideas before things open up and get involved... 18:12:37 ok, any other GSoC updates? or shall we move on? 18:12:59 ok, on to announcements and information... 18:13:04 #topic announcements and information 18:13:04 #info NOTICE: There will be no meeting on 2015-08-13 as many people will be at flock - kevin 18:13:04 #info fixed easyfix (had a broken dir from sundries move) - kevin 18:13:04 #info moved planet to fedoraplanet.org - kevin/til 18:13:04 #info fixed qadevel backups (needed to adjust rdiff-backup ) - kevin 18:13:05 #info fixed up rsync on s390 hub - kevin 18:13:07 #info PHX2 visit went well. There are a couple of things needing to be looked at before next visit. 18:13:09 #info Budget requests for hardware in next fiscal year need to start getting put together. Yes its a year in advance.. 18:13:12 #info had some fun with yahoo's bot hitting taskotron hard, put additional robots.txt into place to prevent future issues - tflink 18:13:15 #info pagure got a couple of updates it's really shaping up for a 1.0 release -- pingou 18:13:25 pingou, gnokii said that we will come up with mockups such that the design team can curate the multimonitor wallpapers themselves till we get sufficient multimonitor submission 18:13:29 anything there folks would like to discuss further? I'll note the first item... no meeting next week. ;) 18:13:36 nirik: did the fix of s390 fix MM2 as well? 18:13:59 pingou: I need to check that... I doubt it, but it could have 18:14:19 * nirik runs check_metalink 18:14:21 :/ 18:14:22 <^conner> what is the s390 hub... a Z series box? 18:14:51 ^conner: the hub is just a normal x86_64 instance. ;) 18:15:05 it has some s390* builders building packages that report to it. 18:15:11 <^conner> gotcha 18:15:20 http://s390.koji.fedoraproject.org/koji/ 18:15:41 #topic TRAC tickets review - p_klos 18:15:57 p_klos: you around ? want to leed this part of things ? :) 18:16:37 nirik: I am :) Sadly I'm at my work computer. Could you please paste links I have insertet to gobby? 18:16:41 sure. 18:16:43 https://fedorahosted.org/fedora-infrastructure/ticket/2888 18:16:49 thx 18:16:51 so, this is the ticket on implementing HSTS. 18:17:09 It's very much still alive and we are working on it... tyll has been leading things. 18:17:11 yes. 18:17:31 There are some pathces. Is torrent still require that? Any toher servers? 18:17:33 we are down to just a few things. 18:17:36 torrent is done. 18:18:04 So my proposition is to make an actual list of services than need patches :) 18:18:06 koji and pkgs and status are left that I know of. koji and pkgs is going to require a bunch of coordination with releng and I am not sure what to do about status. 18:19:02 make a fedorastatus.org ? 18:19:04 so it's more coordination and such left... theres some releng tickets on switching the koji ca. 18:19:11 Ok. 18:19:41 however, I might be missing something, so I would advise asking in ticket for status and/or talking to tyll when he's around to make sure. 18:19:42 <^conner> my suggestion is to write a test script 18:19:53 <^conner> to make sure nothing gets missed 18:19:58 smooge: well, we could get a cert for status I guess. Seems a waste, but we could 18:20:24 since it's on openshift, is it still tricky to set-up? 18:20:35 well if we moved status.fedoraproject.org -> fedorastatus.org does that get it dealt with? 18:20:37 ^conner: not a bad idea, but not sure how we could know all links... just run a link checker over the entire domain? 18:20:46 <^conner> nirik, something along those lines 18:20:59 pingou: we need to move it to a 'bigger' thing, but we could do that. 18:21:01 <^conner> also, at least with firefox, I've noticed HSTS will spill over to other ports 18:21:07 nirik: ok 18:21:08 smooge: you mean a fedorastatus.org we host? or ? 18:21:25 ^conner: I know the websites folks were looking at some link checkers... 18:21:32 <^conner> so if you had something running on port 4444, after you've hit port 80/443 and hsts has been set, it will want to connect to port 4444 with tls too 18:21:36 HSTS? 18:21:54 well I figure it would still be in openshift. but we take it out of our fedoraproject.org space like we did the other apps we have done. 18:22:15 ^conner: my understanding is that it would hit 443, it doesn't apply to non standard ports? but I could be wrong. 18:22:30 decause: https://en.wikipedia.org/wiki/HSTS 18:22:34 nirik: thanks 18:22:36 nirik++ 18:22:37 <^conner> nirik, I saw this yesterday with firefox 39.0 18:22:46 basically it's a header we send that says "always use https with this domain and it's subdomains" 18:22:51 * p_klos is feedin child. 5 minuts 18:22:54 <^conner> its not clear to me if its desired behavior or not 18:23:10 and some browsers also preseed it. 18:23:24 so they could just know when installed "hey, *.fedoraproject.org should always be https" 18:23:33 nirik: solid 18:24:05 #link https://en.wikipedia.org/wiki/HSTS 18:24:16 so, I like the idea of link checking and checking with tyll for additional work.. ;) would you all be able to ask about those in ticket? 18:24:28 <^conner> nirik, anyways, just something to be aware of, I'd suggest starting with a very low ttl because of that 18:24:48 <^conner> and testing from a private browsing window 18:24:55 ^conner: sure. we don't have too many services on non standard ports that I can think of off hand... 18:25:00 fedmsg 18:25:18 <^conner> nirik, it caught me testing a service that's generally behind a reverse proxy 18:25:21 well, that HSTS supporting browsers would connect to 18:26:16 yeah, good to keep in mind. ;) 18:26:41 the next ticket in the list is also 2888... not sure if that was a typo or what... 18:26:48 https://fedorahosted.org/fedora-infrastructure/ticket/4485 18:27:36 Probably a typo... sorry :( About 4485 18:27:46 it's assignet for 8 months 18:27:50 so, I am not sure about this one. ;) I know it's not going to epel-devel yet. 18:28:01 so, I would say we should ask for status on ticket and reassign. 18:29:07 I'd be fine with sending to both lists... seems simple enough. 18:29:25 pingou: You have said sth in that ticket. Do you think we should reassign that and continue that issue? 18:30:04 nirik: ok. So I will send question to our list and epel 18:30:13 Also will ask for the status in the ticjet 18:30:20 ticket * 18:30:21 thanks 18:30:35 well, I meant the report the ticket is talking about should be sent likely to both lists... but do ask on ticket and we can figure out whats needed. 18:30:39 p_klos: well my question doesn't seem to be answered :) 18:30:51 p_klos: beside that, +1 to reassign and continue 18:31:32 pingou: ok, +1 from me too ;) 18:31:36 #topic Moving systems from old virthosts to new ones after freeze 18:31:40 smooge: this was yours? 18:32:23 yeah I wanted to bring up that after the freeze we will need to schedule downtime and such for various vms 18:32:43 yep. 18:32:53 just as an FYI and a "oh wait did you think about the fact that this will affect X?" 18:33:08 I will send a longer email to the list about it 18:33:39 yeah, might mean some longer downtime for a few things... 18:33:48 unless we want to re-install new ones and migrate data. 18:34:13 that could also be the plan. 18:34:40 so this is to be more fleshed out next meeting.. but didn't want to spring it then 18:35:00 looks like this is about 15vm's... only a few are very important. ;) like db-fas01 18:35:21 meh, we don't need this one :) 18:35:26 let's throw it away :-p 18:35:29 but yeah, we can get something scheduled. ;) thanks for bringing it up smooge 18:36:21 #topic Open Floor 18:36:32 anyone have items for open floor? comments, suggestions? 18:36:53 thanks for getting the CommOps lists and tracs up this week Infra peeps! 18:37:14 will def be making those tools much more public at and around FLOCK 18:37:27 .fas k3npty 18:37:27 K3NPTY: k3npty '' 18:37:55 Hi, I'm new here. I want to learn about infra :) 18:38:00 decause: no problem. ;) 18:38:26 welcome K3NPTY. 18:38:32 welcome 18:38:39 * p_klos says hi 18:38:42 nirik: he one of the guys from Panama I mentioned to you 18:39:00 decause: what not on pagure? 18:39:05 thanks nirik 18:39:17 cool. ;) are you interested more in sysadmin related stuff, or application development? or both? ;) 18:39:34 sysadmin nirik 18:39:53 For now 18:40:09 ok. see me after the meeting in #fedora-admin and I can point you at where to get started. ;) 18:40:43 anyone have anything else before we close out the meeting? 18:40:49 not really 18:40:55 i do 18:41:17 no 18:41:35 nirik, okay. Thanks, I will go there right now. 18:41:56 nyazdani: fire away... 18:42:00 i've been wanting to diversify my development beyond statscache, and i was wondering what areas my efforts could best be used 18:42:26 nyazdani: any projects you saw that you like? 18:42:53 bodhi and mirrormanager seem cool, but that was just from a cursory browsing 18:43:19 pingou: ? 18:43:21 MM2 has a lot of parts that still need cleaning up and it's a complex piece, could fit :) 18:43:26 decause: pagure.io man :) 18:43:39 nyazdani: for bodhi threebean and lmacken are more the contacts 18:44:01 pagure.io does do tickets, true. Does it do maillists? 18:44:04 pingou, good to know, thanks 18:44:16 decause: as soon as we migrated to MM3 entirely :) 18:44:22 pingou: wow! 18:44:26 cool 18:44:29 :) 18:44:30 pingou++ 18:44:33 pagure++ 18:44:46 atm MM3 is getting its emails via MM2, so when MM3 works fully, we can create mailing list in there for @pagure.io 18:45:04 * pingou talked with abompard about it earlier today 18:45:18 (and since MM3 is multi-domain) 18:45:53 yep. should work 18:46:07 nyazdani: pagure can be fun, there is a lot of optimization that could be done there (but pygit2 is a pain...) 18:46:43 pingou: oh cool, well even drudge work is a good starting point :) thanks! 18:47:00 cool. anything else? or shall we call it a meeting? :) 18:47:05 nyazdani: feel free to ask if you run into a project that you like 18:47:20 pingou, will do :) 18:47:23 nyazdani: we'll find something, we always find something for people that want to do something :D 18:47:29 yep. 18:47:33 always lots to do. 18:47:36 right on 18:47:52 thanks for coming everyone! 18:47:54 #endmeeting