16:00:04 <zlopez> #startmeeting Infrastructure (2021-07-01) 16:00:04 <zodbot> Meeting started Thu Jul 1 16:00:04 2021 UTC. 16:00:04 <zodbot> This meeting is logged and archived in a public location. 16:00:04 <zodbot> The chair is zlopez. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:00:04 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic. 16:00:04 <zodbot> The meeting name has been set to 'infrastructure_(2021-07-01)' 16:00:04 <zlopez> #meetingname infrastructure 16:00:04 <zlopez> #chair nirik siddharthvipul mobrien zlopez pingou bodanel dtometzki jnsamyak computerkid 16:00:04 <zlopez> #info Agenda is at: https://board.net/p/fedora-infra 16:00:04 <zlopez> #info About our team: https://docs.fedoraproject.org/en-US/cpe/ 16:00:04 <zodbot> The meeting name has been set to 'infrastructure' 16:00:04 <zodbot> Current chairs: bodanel computerkid dtometzki jnsamyak mobrien nirik pingou siddharthvipul zlopez 16:00:05 <zlopez> #topic ahoy! 16:00:24 <zlopez> .hello zlopez 16:00:26 <zodbot> zlopez: zlopez 'Michal Konečný' <michal.konecny@psmail.xyz> 16:00:27 <darknao> .hi 16:00:29 <zodbot> darknao: darknao 'Francois Andrieu' <naolwen@gmail.com> 16:00:33 <t0xic0der> .hello t0xic0der 16:00:34 <zodbot> t0xic0der: t0xic0der 'Akashdeep Dhar' <akashdeep.dhar@gmail.com> 16:00:39 <sysoplab> hello 16:00:57 <ayustae> Hello 16:01:00 <zlopez> Welcome everyone to today class about magic and sorcery 16:01:18 <zlopez> I will be our guide through this session 16:01:31 <zlopez> And we will learn something new today 16:01:34 <lenkaseg> hello 16:01:47 <lenkaseg> * .hello lenkaseg 16:02:01 <zlopez> First let's check if we have any new apprentices in our class 16:02:10 <zlopez> #topic New folks introductions 16:02:11 <zlopez> #info This is a place where people who are interested in Fedora Infrastructure can introduce themselves 16:02:11 <zlopez> #info Getting Started Guide: https://fedoraproject.org/wiki/Infrastructure/GettingStarted 16:02:48 <sysoplab> I sent out the email required after last weeks I think. Didn't get any replies but it showed up on the mailing list when I checked so hope I did that right. 16:03:03 <zlopez> lenkaseg: You are new in this class, do you want to tell something about yourself? 16:03:20 <zlopez> sysoplab: Welcome to the magic world of Fedora infrastructure 16:03:25 <nirik> morning 16:03:33 <zlopez> Where magic happens often :-) 16:04:02 <zlopez> And here is our High mage nirik :-) 16:04:02 <t0xic0der> zlopez is seems very happy today :D 16:04:03 <lenkaseg> Hello everybody! I'm new here and I just figured out that .hello seems not to work when edited :) 16:04:05 <jnsamyak> .hello jnsamyak 16:04:06 <zodbot> jnsamyak: jnsamyak 'Samyak Jain' <samyak.jn11@gmail.com> 16:04:51 <zlopez> lenkaseg: The matrix bridge is not always working correctly 16:05:14 <zlopez> t0xic0der: I'm a happy mage 16:05:18 <sysoplab> .hello 16:05:18 <zodbot> sysoplab: (hello <an alias, 1 argument>) -- Alias for "hellomynameis $1". 16:05:24 <sysoplab> .hello sysoplab 16:05:25 <zodbot> sysoplab: sysoplab 'Sean Zipperer' <sysop+fedora@sysoplab.com> 16:05:35 <lenkaseg> .hello lenkaseg 16:05:36 <zodbot> lenkaseg: lenkaseg 'Lenka Segura' <lenka@sepu.cz> 16:05:45 <nirik> morning everyone! 16:05:52 <zlopez> sysoplab: You can use .hi if your nick is same as IRC nick 16:07:02 <sysoplab> ok will do next time. 16:07:34 <zlopez> Any new apprentices want's to say something about themselves here? 16:08:09 <zlopez> Otherwise I will go to the next topic 16:08:25 <sysoplab> Don't think so? 16:08:34 <jrichardson> hi all, sorry im late 16:08:55 <zlopez> Ok, in this case let's look at the magic eight ball 16:08:56 <zlopez> #topic Next chair 16:08:57 <zlopez> #info magic eight ball says: 16:08:57 <zlopez> #info chair 2021-07-01 - Zlopez 16:08:57 <zlopez> #info chair 2021-07-08 - dtometzki 16:08:57 <zlopez> #info chair 2021-07-15 - siddharthvipul 16:08:58 <zlopez> #info chair 2021-07-15 - dtometzki 16:09:00 <zlopez> #info chair 2021-07-22 - ??? 16:09:31 <zlopez> We are covered for next few weeks, does anybody wants to be a mage on 2021-07-22 16:09:54 <copperi[m]> .hello copperi 16:09:55 <zodbot> copperi[m]: copperi 'Jan Kuparinen' <copper_fin@hotmail.com> 16:10:31 <jrichardson> ill take it on the 22nd if no one else wants to 16:10:58 <t0xic0der> zlopez: Do we have two chairs for 15th? 16:11:15 <jnsamyak> Oh no 16:11:19 <zlopez> t0xic0der: You are right, I didn't noticed it :-D 16:11:29 <jrichardson> yes we do :D 16:11:32 <jnsamyak> the dtometzki is for 22 16:11:46 <jnsamyak> I might have copied paste in hurry last time :) 16:11:46 <zlopez> jnsamyak: Thanks, I will move it then 16:12:11 <jnsamyak> Add me after jrichardson :P 16:12:11 <t0xic0der> jrichardson for 29th then? :D 16:12:22 <zlopez> jrichardson: Do you want to be a mage on 29th? 16:12:26 <jrichardson> perfect 16:12:33 <jnsamyak> Good we have advance booking for this XD 16:12:38 <zlopez> #info chair 2021-07-29 - jrichardson 16:12:57 <zlopez> #info chair 2021-08-05 - jnsamyak 16:13:39 <zlopez> Let magic is with you on those meetings :-) 16:14:28 <zlopez> So let's do some fortune telling 16:14:29 <zlopez> #topic announcements and information 16:14:29 <zlopez> #info CPE Infra&Releng EU-hours team has a Monday through Thursday 30 minute meeting going through tickets at 1030 Europe/paris in #centos-meeting 16:14:30 <zlopez> #info CPE Infra&Releng NA-hours team has a Monday through Thursday 30 minute meeting going through tickets at 1800 UTC in #fedora-meeting-3 16:14:30 <zlopez> #info work is being done on getting COPR proper powerPC systems 16:14:31 <zlopez> #info The Red Hat Desktop team is hiring: https://blogs.gnome.org/uraeus/2021/05/20/new-opportunities-in-the-red-hat-desktop-team/ 16:14:34 <zlopez> #info If your team wants support from the Fedora Program Management Team, file an isssue: https://pagure.io/fedora-pgm/pgm_team/issues?template=support_request 16:14:37 <zlopez> #info nest with Fedora CFP is open! https://communityblog.fedoraproject.org/announcing-dates-cfp-for-nest-with-fedora/ (Aug 5th-8th) 16:14:40 <zlopez> #info mass update/rebbot of Fedora Servers next week (2021-07-05 - 2021-07-09) 16:14:43 <zlopez> Anything I didn't read from my hand? 16:15:28 <nirik> #info monday is a US holiday 16:16:03 <zlopez> #info Monday + Tuesday is CZ holiday 16:16:28 <nirik> hey, how come you get an extra day! :) 16:17:21 <zlopez> Different holidays :-D 16:17:29 <zlopez> Related to czech history 16:17:50 <jnsamyak> XD 16:17:53 <zlopez> And we don't push them when they end up on weekend 16:18:58 <zlopez> Any other fortune you can read from coffee stain or hand? 16:20:09 <zlopez> In this case, let's look who is guarding the philosopher stone 16:20:19 <zlopez> #topic Oncall 16:20:20 <zlopez> #info https://fedoraproject.org/wiki/Infrastructure/Oncall 16:20:20 <zlopez> #info darknao is on call for 2021-06-17 to 2021-06-24 16:20:20 <zlopez> #info jnsamyak is on call for 2021-06-24 to 2021-07-01 16:20:20 <zlopez> #info computerkid is on call for 2021-07-01 to 2021-07-08 16:20:20 <zlopez> #info ??? is on call for 2021-07-08 to 2021-07-15 16:20:49 <zlopez> Any volunteer for 2021-07-01 to 2021-07-08 16:21:05 <zlopez> * 2021-07-08 to 2021-07-15 16:21:35 <darknao> i can take it 16:21:58 <zlopez> It's yours, take a good care of the philosopher stone 16:22:07 <jnsamyak> Thanks to darknao for handling it this week, I kept a tab we got one ping, and darknao handled it :D 16:22:07 <jnsamyak> I am still not able to do `.oncalltakeeu` :( I got `kneel before zod` msg but :/ 16:22:13 <jnsamyak> darknao++ 16:22:15 <zodbot> jnsamyak: Karma for darknao changed to 7 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:22:17 <zlopez> #info darknao is on call for 2021-07-08 to 2021-07-15 16:22:35 <zlopez> #info Summary of last week: (from current oncall ) 16:22:52 <zlopez> .oncall 16:22:52 <zodbot> darknao is oncall. My normal hours are 0700 UTC to 1600 UTC Monday through Friday. If I do not answer or it is outside those hours, please file a ticket (https://pagure.io/fedora-infrastructure/issues) 16:23:16 <nirik> jnsamyak: might be we need to add some capabilities to you for that. 16:23:20 <jnsamyak> > <@jnsamyak:matrix.org> Thanks to darknao for handling it this week, I kept a tab we got one ping, and darknao handled it :D 16:23:20 <jnsamyak> > I am still not able to do `.oncalltakeeu` :( I got `kneel before zod` msg but :/ 16:23:20 <jnsamyak> here here, if darknao has anything to add go ahead please :3 16:23:36 <zlopez> What was the ping about? 16:24:10 <darknao> so yeah, as jnsamyak stated, only one ping this monday, about a koji build not working on rawhide, was handled via ticket 16:24:30 <zlopez> Ok 16:24:35 <jnsamyak> https://pagure.io/fedora-infrastructure/issue/10061 here 16:24:48 <zlopez> Let's look at the magic mirror then 16:24:49 <zlopez> #topic Monitoring discussion [nirik] 16:24:49 <zlopez> #info https://nagios.fedoraproject.org/nagios 16:24:49 <zlopez> #info Go over existing out items and fix 16:25:21 <nirik> so, not much change here... we are working on a bunch of hosts and slowly making progress. 16:25:50 <nirik> not really anything interesting this week, lets move on... 16:26:34 <zlopez> Thanks to high mage, let's look at the today topic for this class 16:26:42 <zlopez> #topic Learning topic 16:26:42 <zlopez> #info 2021-07-01 - nirik - info about robosignatory 16:27:00 <zlopez> nirik: The meeting is yours 16:27:03 <nirik> oh, shoot. I forgot I was doing that this week 16:27:13 <nirik> for some reason I thought it was next week. ;( 16:27:19 <jrichardson> wing it, we wont know the difference 16:27:24 <nirik> I can try and just go with it? or push it off a week? 16:27:30 <nirik> ok. ;) 16:28:03 <nirik> So, robosignatory is an application we have that listens for events on our message bus and then requests signing of things based on that. 16:28:15 <nirik> https://pagure.io/robosignatory/ 16:28:27 <nirik> it handles several different kinds of messages... 16:28:56 <nirik> mostly it's handling koji tag messages. This is when some build finishes or is tagged into specific tags (based on it's config) 16:29:27 <nirik> if it sees that, it requests sigul (our signing server) to sign the build and then it (optionally) moves it to a new tag. 16:29:48 <nirik> It also can handle ostree commits... 16:30:02 <nirik> and I think text files, but we don't use that part of it too much. 16:30:30 <nirik> So, robosignatory is not our signing server, it's just the thing that iniatiates signing on things based on it's config. 16:30:59 <nirik> So it has the same access as releng people to request signing things. Because of this we run it on a hardware machine (not a vm) 16:31:20 <nirik> and also normally ssh is off on that machine, so to access it you have to use the management console and login as root on it's console. 16:31:37 <nirik> We do configure it with ansible... but the playbook is under playbooks/groups/manual/ 16:31:51 <nirik> meaning it needs someone to go start sshd and manually run the playbook and then stop it. 16:32:47 <nirik> https://pagure.io/fedora-infra/ansible/blob/main/f/roles/robosignatory/templates/robosignatory.toml.j2 16:32:51 <nirik> is the main config file of it. 16:33:12 <nirik> you can see where it defines tags and if it should move builds and what key it asks sigul to sign with 16:33:58 <nirik> Additionally for security on that machine: the disk is encrypted and there's a yubikey attached to it that it's sigul access is bound to. 16:34:16 <nirik> also a passphrase has to be entered anytime the service is restarted and it stores that in the kernel keyring. 16:35:01 <nirik> I think those are the major points. 16:35:05 <nirik> Any questions? 16:35:23 <darknao> the signing process is using gpg right ? 16:36:20 <nirik> yes utimately. :) The app that actually does the signing work is 'sigul' 16:36:36 <darknao> and the gpg key is stored on the yubikey, or that's just for the disk encryption ? 16:37:30 <darknao> oh right, sigul and robosignatory are two separate apps 16:38:04 <nirik> The actually gpg key is on the sigul vault machine. However, even the vault doesn't have enough info to use any of the keys. You have to take the releng person (or robosignatory) passphrase, make sure all things it's bound to are present (like yubikeys or tpms) and then the vault uses it's 1/2 of the passphrase + that to use the keys. 16:38:28 <sysoplab> I don't have a yubikey but doesn't having one in a server (especially if it's left there) kind of make it useless? Didn't Digi notar (probably spelled wrong dutch ssl company) get screwed by doing exactly that? 16:39:16 <nirik> sysoplab: its a added protection. it's not doing anything itself other than ensuring no one removed it or tried to use the drives in another machine. 16:39:26 <nirik> basically ties the install to that hardware 16:39:42 <sysoplab> ok. 16:39:43 <nirik> we could also use TPM, but that hardware doesn't have one. 16:40:34 <nirik> ok, anything else on robosignatory? 16:40:48 <nirik> oh, one other things... 16:41:22 <nirik> there's plans (and I think a PR open) to get it to also sign repodata... once thats in place we may sign fedora repodata (although dnf still has problems) 16:42:53 <zlopez> Thanks to high mage nirik for his presentation 16:43:04 <jrichardson> nirik++ 16:43:18 <nirik> no problems, I am happy to share/answer questions anytime. 16:43:28 <nirik> who wants to present on something next week? :) 16:43:38 <zlopez> Let's look what we have prepared for future talks 16:43:40 <sysoplab> thanks nirik. 16:43:40 <jnsamyak> nirik++ 16:43:47 <zlopez> ## Upcoming learning topics 16:43:48 <zlopez> #info 2021-07-08 - ??? 16:43:58 <darknao> thanks nirik 16:44:05 <zlopez> It looks like we don't have any 16:44:07 <t0xic0der> nirik++ 16:44:11 <jnsamyak> thanks nirik always awesome to hear 16:44:56 <zlopez> Is there any interest in some specific topic, we can cover next week? 16:45:02 <sysoplab> nirik++ 16:45:02 <zodbot> sysoplab: Karma for kevin changed to 41 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:45:11 <jrichardson> is zodbot sleeping 16:45:38 <nirik> you may have already given me a cookie. :) 16:45:40 <lenkaseg> nirik ++ 16:45:41 <nirik> it's one per cycle. 16:45:46 <jrichardson> oh i mightve 16:45:47 <jnsamyak> jrichardson, these days zodbot is either angry or tired ;) 16:46:34 <zlopez> lenkaseg: You need to write it together, no space between 16:46:43 <nirik> zodbot: admin capability add jnsamyak alias.add 16:46:43 <zodbot> nirik: Kneel before zod! 16:46:50 <lenkaseg> nirik++ 16:46:53 <nirik> jnsamyak: that should let you take oncall. :) 16:47:06 <jnsamyak> nirik: Thanks for doing this :D 16:47:21 <nirik> I always have to look it up. :) 16:47:30 <zlopez> We don't have learning topic for next week 16:47:34 <jrichardson> lenkaseg: think we both gave kevin a cookie last week 16:47:41 <zlopez> Anything specific people want to hear about 16:47:48 <jnsamyak> I'll take the next slot free for oncall now ;P 16:47:50 <copperi[m]> nirik++ 16:48:10 <lenkaseg> jrichardson: ah, how often can we do it? 16:48:32 <jrichardson> we can give someone a cookie once per release cycle 16:48:41 <nirik> it's once per fedora release... 16:48:46 <jrichardson> lenkaseg++ 16:48:46 <zodbot> jrichardson: Karma for lenkaseg changed to 2 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:48:50 <nirik> per person. ;) 16:48:55 <nirik> jrichardson++ 16:48:55 <zodbot> nirik: Karma for jrichardson changed to 2 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:49:01 <nirik> lenkaseg++ 16:49:01 <zodbot> nirik: Karma for lenkaseg changed to 3 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:49:02 <nirik> :) 16:49:11 <nirik> cookie party 16:49:14 <jrichardson> feed me 16:49:25 <copperi[m]> eat 16:49:36 <t0xic0der> copperi++ 16:49:36 <zodbot> t0xic0der: Karma for copperi changed to 4 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:49:38 <lenkaseg> jrichardson++ 16:49:39 <zodbot> lenkaseg: Karma for jrichardson changed to 3 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:49:45 <t0xic0der> lenkaseg++ 16:49:45 <zodbot> t0xic0der: Karma for lenkaseg changed to 4 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:49:45 <zlopez> jrichardson++ 16:49:48 <zodbot> zlopez: Karma for jrichardson changed to 4 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:49:54 <jrichardson> thanks zlopez for being our lovely host this evening 16:50:00 <jrichardson> zlopez++ 16:50:00 <zodbot> jrichardson: Karma for zlopez changed to 8 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:50:03 <jnsamyak> I would like some XD 16:50:04 <t0xic0der> jrichardson++ 16:50:04 <zodbot> t0xic0der: Karma for jrichardson changed to 5 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:50:14 <zlopez> So it seems we don't have any learning topic for next week 16:50:17 <jrichardson> t0xic0der++ 16:50:17 <zodbot> jrichardson: Karma for t0xic0der changed to 13 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:50:21 <jnsamyak> Yes Thank you zlopez it was lovely! 16:50:34 <lenkaseg> zlopez++ 16:50:34 <zodbot> lenkaseg: Karma for zlopez changed to 9 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:50:35 <zlopez> Let's leave it like that and let the future decide itself 16:50:53 <jnsamyak> zlopez++ 16:51:01 <darknao> crumbs everywhere now :p 16:51:03 <sysoplab> I don't know anything youall probably don't but I will say the last two learning segments were informative and nice. 16:51:05 <darknao> zlopez++ 16:51:53 <zlopez> So last topic for today 16:51:54 <zlopez> #topic Open Floor 16:52:01 <zlopez> Let's dance 16:52:07 * zlopez dancing 16:52:24 <jrichardson> have to drop, see ye tomorrow 16:52:32 * sysoplab cheers the dancing along form the sidelines 16:52:32 <jnsamyak> oh yay :P I often tend to fall while dancing 16:52:37 <lenkaseg> ---^^--- 16:52:40 <jnsamyak> jrichardson: see ya! o/ 16:52:52 <zlopez> Anything magical we want to go through on the open floor? 16:53:03 <t0xic0der> We are planning on our next step to revamp GetFedora here 16:53:09 <t0xic0der> #link https://discussion.fedoraproject.org/t/website-refresh-next-steps/30776 16:53:27 <t0xic0der> Feel free to drop your two cents (and make us rich, in the process or something) 16:54:33 <t0xic0der> That's it from my end - we can save some 6 minutes if there ain't anything else :) 16:54:38 <sysoplab> I actually like getfedora.org as it is if that means anything. It's simple, can get to what you want prett easily. 16:55:36 <t0xic0der> sysoplab: We'd be sure to keep the best things of GetFedora as-is and change it for the better 16:56:06 * t0xic0der casts a spell - changes incrementallis!!! 16:56:23 <sysoplab> My open floor question for this week that probably is answered somewhere already, as a new person here, what's the next step/first task I should be working on? 16:56:54 <zlopez> #info Getting Started Guide: https://fedoraproject.org/wiki/Infrastructure/GettingStarted 16:57:03 <sysoplab> yeah I read through that. 16:57:09 <zlopez> sysoplab: This is a first good stop 16:57:45 <zlopez> Otherwise you can look at the EasyFix tracker or just try to work anything on fedora-infrastructure tracker 16:57:48 <sysoplab> t0xic0der: Actually I have a suggestion to move spins button/square up by the workstation/server/iot ones. 16:58:21 <t0xic0der> sysoplab: Please let us know of your suggestions here https://discussion.fedoraproject.org/c/project/websites/66 16:58:41 <zlopez> sysoplab: You can join the daily meeting for Infra&Releng 16:58:51 <zlopez> And ask there 16:59:07 <t0xic0der> zlopez: Talking about Easyfix, we would start with refreshing that this week :D 16:59:18 <sysoplab> ok will do. 16:59:38 <zlopez> t0xic0der++ 16:59:38 <zodbot> zlopez: Karma for t0xic0der changed to 14 (for the current release cycle): https://badges.fedoraproject.org/tags/cookie/any 16:59:58 <zlopez> I will end the meeting now, because we are almost a full hour 17:00:10 <zlopez> #endmeeting