18:00:23 <nirik> #startmeeting Infrastructure (2012-11-01)
18:00:23 <zodbot> Meeting started Thu Nov  1 18:00:23 2012 UTC.  The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:00:23 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
18:00:24 <nirik> #meetingname infrastructure
18:00:24 <nirik> #topic Boo!
18:00:24 <nirik> #chair smooge skvidal CodeBlock ricky nirik abadger1999 lmacken dgilmore mdomsch threebean
18:00:24 <zodbot> The meeting name has been set to 'infrastructure'
18:00:24 <zodbot> Current chairs: CodeBlock abadger1999 dgilmore lmacken mdomsch nirik ricky skvidal smooge threebean
18:00:31 * lmacken 
18:00:34 * skvidal is here
18:00:36 * _love_hurts_ here
18:00:46 <codegerbil> * here
18:00:48 * athmane is around
18:01:51 * Spack here
18:01:56 <smooge> here
18:02:03 <nirik> morning everyone.
18:02:13 * threebean here
18:02:15 <nirik> Lets go ahead and dive on in...
18:02:19 <nirik> #topic New folks introductions and Apprentice tasks
18:02:28 <nirik> any new folks? or apprentices want to talk about tickets/issues/ideas?
18:03:02 <nirik> okey dokey
18:03:05 <_love_hurts_> hey nirik, sorry I was not here few weeks
18:03:16 <nirik> _love_hurts_: no worries. ;) real life gets in the way sometimes.
18:03:17 <_love_hurts_> was bit busy
18:03:33 <nirik> not a problem, and welcome back
18:03:39 <_love_hurts_> ty :)
18:03:41 <nirik> #topic Applications status / discussion
18:03:48 <nirik> any application news this week or upcoming?
18:03:54 <nirik> note that we are still in freeze...
18:04:26 <threebean> nothing major from me.  I updated some more pieces of the zeromq3 stack in staging and it's all still working correctly afaict.
18:04:34 <nirik> nice.
18:04:57 <nirik> yeah, freeze is a nice time to try and catch up on upstream stuff for apps... or staging.
18:05:24 <threebean> yup :)
18:05:43 <nirik> we should try and get the smolt stuff setup in stg soon... our deadline for that is not far...
18:06:04 <abadger1999> <nod>
18:06:49 <nirik> puiterwijk has code that seems to work fine, but we should push it live in stg and make sure we didn't forget anything.
18:07:02 <nirik> #topic Sysadmin status / discussion
18:07:13 <nirik> the usual flow of tickets...
18:07:32 <nirik> I'd like to look at moving noc02 soon. It's not frozen...
18:07:56 <skvidal> nirik: to ibiblio?
18:08:01 <skvidal> or where?
18:08:01 <nirik> skvidal: yep.
18:08:04 <skvidal> cool
18:08:06 <skvidal> +1
18:08:11 <nirik> somewhere with ipv6 and good connectivity
18:08:26 <skvidal> :)
18:08:44 <nirik> oh, should have noted in applications news:
18:08:59 <nirik> #info we are looking at setting up a gallery instance for fudcon/fedora events pictures.
18:09:07 <nirik> it's still in early stages yet tho
18:09:33 <nirik> any other sysadminy news?
18:09:45 <nirik> #topic Private Cloud status update
18:09:57 <skvidal> yes
18:09:58 <skvidal> so
18:09:58 <nirik> skvidal has some provisioning working nicely now in the private cloud
18:10:05 <skvidal> http://skvidal.wordpress.com/2012/10/31/ansible-and-cloud-instances/ <-- as an explanation
18:10:10 <skvidal> then in the ansible public repo
18:10:19 <skvidal> http://infrastructure.fedoraproject.org/infra/ansible/README
18:10:37 <skvidal> instructions for any sysadmin-main folks to startup a smallish instance on el6 or f17
18:10:39 <skvidal> ready to go
18:10:46 <nirik> cool. :)
18:11:04 <skvidal> I will add more docs as to how to use a different security group (default is very limited)
18:11:12 <skvidal> and perhaps 'webserver' is more likely what we would need
18:11:27 <nirik> yeah.
18:11:28 <skvidal> but the gist is - you can spin up an instance in about 30s to a minute
18:11:29 <nirik> depending on needs.
18:11:46 <skvidal> with the right set of auth keys for whichever users
18:11:56 <skvidal> and then you can destroy it, at will.
18:12:14 <skvidal> I'd like to be able to add some functionality to write out the instance id, ip and other data to a file/log somewhere
18:12:15 <nirik> those are all in their own 'account' right? so different vlan, etc
18:12:27 <skvidal> nirik: those are in the 'fedora' account under 'admin'
18:12:30 <skvidal> it doesn
18:12:35 <skvidal> 't make a new vlan for each
18:12:38 <skvidal> only for each security group
18:12:40 <nirik> yeah, sounds good. Just 'syslog' ? have epylog report on them?
18:12:56 <skvidal> nirik: yah - I could spew to logger the info it is passing so we can trace it back
18:13:07 <skvidal> hey - maybe I should see about calling fedmsg :)
18:13:13 <nirik> you could. :)
18:13:17 <skvidal> indeed
18:13:25 <skvidal> nirik: so they are not entirely isolated to another vlan
18:13:33 <nirik> ok, not a big deal, just wondering.
18:13:35 <skvidal> if you want I could make a new security group per each one
18:13:47 <nirik> anything anyone does should be over ssh anyhow... or publiuc
18:13:49 <skvidal> but i'd need to hack up something to clean up unused security groups
18:13:50 <nirik> public even
18:13:58 <skvidal> it's doable
18:14:04 <skvidal> but my time is tight right now with other things
18:14:22 <nirik> yeah, might throw it in a todo for later days when we are all bored sitting on a beach. ;)
18:14:35 <skvidal> riiiiiiiiiighto
18:14:36 <skvidal> I will
18:14:36 <rbergeron> what's this about bored sitting on a beach? that sounds pretty awesome
18:14:39 <skvidal> it's a good idea
18:14:40 <smooge> fudcon 2013
18:14:41 * threebean is in
18:14:57 <smooge> sitting on a beach
18:15:02 <nirik> fudcon maldives!
18:15:06 <skvidal> provision every new instance into its own security group (perhaps made on demand w/whatever ports needed (defaulting to 80,443,22 and icmp)
18:15:10 <skvidal> nirik: dude....
18:15:20 <skvidal> I've told people that costarica is perfect for a winter fudcon
18:15:23 <skvidal> but do they listen?
18:15:23 <nirik> yep. ;) anyhow...
18:15:24 <skvidal> Nooooooooooo
18:15:48 <nirik> only other cloud news is that I need to look and see if OS folsom is ready to test for us yet...
18:15:58 <nirik> if it is I will reinstall the OS side and ansible as I go...
18:16:06 <nirik> and possibly do no glustering...
18:16:41 <nirik> #topic Security FAD update
18:16:50 <nirik> fad planning is ongoing...
18:16:59 <nirik> hopefully everything is on trac.
18:17:03 <Southern_Gentlem> skvidal, you organize and we will come
18:17:27 <nirik> any questions or concerns on security FAD?
18:18:06 <smooge> ok I need to update some stuff there
18:18:18 <nirik> smooge: ok. any problems? or just updates?
18:18:19 <smooge> we aren't at the Sheraton but at the Radison.
18:18:30 <nirik> https://fedoraproject.org/wiki/FAD_Infrastructure_Security_2012
18:18:39 <nirik> ah, ok. is that closer/further/better?
18:18:43 <smooge> Toshio's ticket got late files
18:18:44 * pingou late
18:18:52 <smooge> it is about the same...
18:19:10 <nirik> ok
18:19:36 <smooge> I won't be coming up in my dad's old truck to pick people up at the airport when seth can't.. my mom says they don't let dogs and syssadmins sit in the back anymore.. so I will have a Taurus I think
18:20:00 <abadger1999> heh :-)
18:20:08 <nirik> I'm also going to try and send out some prelim info/background via email a week or two before... and see if there's any prelim work we can hash out before we get there too.
18:20:28 <skvidal> dumb question
18:20:32 <smooge> I will start getting on people's cases for blog updates about the FAD and such
18:20:33 <skvidal> how many total people will be there?
18:20:40 <smooge> 10 people
18:20:40 <skvidal> b/c I am worried about this becoming cumbersome
18:20:46 <skvidal> okay, that's manageable
18:20:53 <nirik> yeah, hopefully not too bad.
18:21:05 * nirik is most worried about the fas changes...
18:21:15 <nirik> I think the pam stuff and cgi shouldn't be too bad...
18:21:22 <skvidal> agreed
18:21:36 <skvidal> if we only get this working for sysadmin-main in a db behind the scene for sudo
18:21:40 <skvidal> I'd still consider it a benefit
18:22:00 <nirik> yeah. I think sudo for * with a db would be very possible...
18:22:16 <nirik> but I'd like to have fas integrated.
18:22:26 <nirik> and explore/discuss ssh too. :)
18:22:43 <skvidal> indeed
18:22:54 <nirik> anyhow, I think it will be a nice productive week.
18:23:25 <nirik> #topic Upcoming Tasks/Items
18:23:32 <nirik> #info 2012-10-23 to 2012-11-13 F18 Beta Freeze
18:23:32 <nirik> #info 2012-11-01 nag fi-apprentices
18:23:32 <nirik> #info 2012-11-07 - switch smolt server to placeholder code.
18:23:32 <nirik> #info 2012-11-13 F18 Beta release
18:23:32 <nirik> #info 2012-11-20 FY2014 budget due
18:23:33 <nirik> #info 2012-11-22 to 2012-11-23 Thanksgiving holiday
18:23:34 <nirik> #info 2012-11-26 to 2012-11-29 Security FAD
18:23:37 <nirik> #info 2012-11-27 to 2012-12-11 F18 Final Freeze
18:23:38 <nirik> #info 2012-11-30 end of 3nd quarter
18:23:40 <nirik> #info 2012-12-11 F18 release.
18:23:42 <nirik> #info 2012-12-24 to 2013-01-01 Red Hat Shutdown for holidays.
18:23:44 <nirik> #info 2013-01-18 to 2013-01-20 FUDCON Lawrence
18:23:45 <abadger1999> nirik: let's talk oob about what goes into fas integration.
18:23:48 <nirik> Anything anyone would like to note or schedule or shout out
18:24:01 <skvidal> do we have the flight info on the website, yet?
18:24:05 <nirik> abadger1999: ok. I think that would be good to do
18:24:19 <nirik> skvidal: we don't, but we should add it... at least arrival and depart times
18:24:39 <skvidal> right - my main thing is - if I can pick everyone up in eunice's car - then that will be easy
18:24:50 <skvidal> if not - I can rent a car for picking people up for the day
18:25:12 <skvidal> smooge: this way, at least, you won't need to stress on driving to/from the airport since I know the way pretty well
18:25:34 <nirik> sounds good. we should update the wiki with times so we can figure out if people get there in bunches or what
18:25:38 <skvidal> right
18:25:39 <skvidal> exactly
18:25:42 <smooge> skvidal, I figured I would be picking up the toshios and such who are getting in at midnight or later
18:25:52 <skvidal> smooge: I'm up late anyway
18:26:20 <smooge> ok yeah.. you are :).. didn't know how you liked to drive at night though.
18:26:32 <skvidal> should be fine
18:26:41 <skvidal> 40 at that time will be vacant
18:26:48 <smooge> but hey I can drive up on Monday and we can hash out any issues when I get there.
18:26:49 <skvidal> gives me time to listen to marketplace
18:26:52 <skvidal> cool
18:27:42 * nirik nods.
18:27:48 <nirik> #topic Open Floor
18:28:03 <nirik> anything for open floor? questions/concerns/comments?
18:28:12 * suehle corrects smooge's earlier note that the FAD hotel is the Radison. It's the Marriott downtown, which got you the same rate but with wifi and slightly closer to the office :)
18:29:12 <_love_hurts_> nirik I may need to discuss about Ticket 2783 tomarrow or the day after tomarrow
18:29:18 <pingou> we keep the meeting at this time right? So next week it's one hour later, correct?
18:29:35 <nirik> suehle: cool. ;)
18:29:36 <suehle> also on the fad, I'm booking relrod's flight shortly, but I haven't seen a ticket for whiterhino's flight
18:29:44 <nirik> _love_hurts_: ok.
18:30:21 <smooge> ah crap.. thanks suehle
18:30:24 <nirik> suehle: I think they dropped out. I mailed them a bit back and they never replied.
18:30:37 <abadger1999> suehle: wifi!  yay!
18:30:50 <smooge> I have no idea why I wrote down radison twice...
18:31:30 <nirik> suehle: yeah, we can remove them I think. I mailed on the 2nd of OCT with no reply. ;(
18:32:18 <threebean> Maybe a silly question, but the F18 beta release is 2012-11-13.. is the freeze over at that point too?
18:32:35 <suehle> niriki, noted
18:33:08 <nirik> threebean: yep
18:33:14 * threebean nods
18:33:20 <samkottler> I am all good for travel to the FAD
18:33:22 <nirik> if it is released then finally.
18:33:23 <samkottler> thanks suehle!
18:33:36 <suehle> oh, I remember now... I'd emailed relrod a question about his flight and hadn't heard back. :S
18:33:43 <suehle> will ping again
18:33:46 <smooge> I think we are not releasing til December/January. but I am an optimist
18:35:41 <abadger1999> threebean: day after releas.
18:36:11 <nirik> ok, anything else for open floor?
18:36:15 <nirik> or shall we call it a meeting?
18:36:21 <skvidal> umm
18:36:25 <skvidal> one more addition to the cloud stuff
18:36:42 <skvidal> if anyone wants to work on an instance, or tinker with new images, etc
18:36:49 <skvidal> yell at me I can do what I can to help
18:37:00 * nirik nods.
18:37:03 <threebean> abadger1999: helpful, thank you.
18:37:19 <nirik> we have a list of items we want to address before calling things production too... any work on those would be fine with me.
18:37:30 <skvidal> agreed
18:37:50 <skvidal> there's lots of stuff
18:38:17 <nirik> never a dull moment. ;)
18:38:29 <nirik> ok, thanks for coming everyone. Lets all get back to infraing. ;)
18:38:32 <nirik> #endmeeting