============================================ #fedora-meeting: Infrastructure (2012-11-01) ============================================ Meeting started by nirik at 18:00:23 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2012-11-01/infrastructure.2012-11-01-18.00.log.html . Meeting summary --------------- * Boo! (nirik, 18:00:24) * New folks introductions and Apprentice tasks (nirik, 18:02:19) * Applications status / discussion (nirik, 18:03:41) * Sysadmin status / discussion (nirik, 18:07:02) * we are looking at setting up a gallery instance for fudcon/fedora events pictures. (nirik, 18:08:59) * Private Cloud status update (nirik, 18:09:45) * LINK: http://skvidal.wordpress.com/2012/10/31/ansible-and-cloud-instances/ <-- as an explanation (skvidal, 18:10:05) * LINK: http://infrastructure.fedoraproject.org/infra/ansible/README (skvidal, 18:10:19) * Security FAD update (nirik, 18:16:41) * LINK: https://fedoraproject.org/wiki/FAD_Infrastructure_Security_2012 (nirik, 18:18:30) * Upcoming Tasks/Items (nirik, 18:23:25) * 2012-10-23 to 2012-11-13 F18 Beta Freeze (nirik, 18:23:32) * 2012-11-01 nag fi-apprentices (nirik, 18:23:32) * 2012-11-07 - switch smolt server to placeholder code. (nirik, 18:23:32) * 2012-11-13 F18 Beta release (nirik, 18:23:32) * 2012-11-20 FY2014 budget due (nirik, 18:23:32) * 2012-11-22 to 2012-11-23 Thanksgiving holiday (nirik, 18:23:33) * 2012-11-26 to 2012-11-29 Security FAD (nirik, 18:23:34) * 2012-11-27 to 2012-12-11 F18 Final Freeze (nirik, 18:23:37) * 2012-11-30 end of 3nd quarter (nirik, 18:23:38) * 2012-12-11 F18 release. (nirik, 18:23:40) * 2012-12-24 to 2013-01-01 Red Hat Shutdown for holidays. (nirik, 18:23:42) * 2013-01-18 to 2013-01-20 FUDCON Lawrence (nirik, 18:23:44) * Open Floor (nirik, 18:27:48) Meeting ended at 18:38:32 UTC. Action Items ------------ Action Items, by person ----------------------- * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * nirik (93) * skvidal (64) * smooge (16) * threebean (7) * suehle (5) * abadger1999 (5) * _love_hurts_ (5) * zodbot (4) * samkottler (2) * pingou (2) * athmane (1) * codegerbil (1) * lmacken (1) * Southern_Gentlem (1) * rbergeron (1) * Spack (1) * ricky (0) * mdomsch (0) * dgilmore (0) * CodeBlock (0) -- 18:00:23 <nirik> #startmeeting Infrastructure (2012-11-01) 18:00:23 <zodbot> Meeting started Thu Nov 1 18:00:23 2012 UTC. The chair is nirik. Information about MeetBot at http://wiki.debian.org/MeetBot. 18:00:23 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic. 18:00:24 <nirik> #meetingname infrastructure 18:00:24 <nirik> #topic Boo! 18:00:24 <nirik> #chair smooge skvidal CodeBlock ricky nirik abadger1999 lmacken dgilmore mdomsch threebean 18:00:24 <zodbot> The meeting name has been set to 'infrastructure' 18:00:24 <zodbot> Current chairs: CodeBlock abadger1999 dgilmore lmacken mdomsch nirik ricky skvidal smooge threebean 18:00:31 * lmacken 18:00:34 * skvidal is here 18:00:36 * _love_hurts_ here 18:00:46 <codegerbil> * here 18:00:48 * athmane is around 18:01:51 * Spack here 18:01:56 <smooge> here 18:02:03 <nirik> morning everyone. 18:02:13 * threebean here 18:02:15 <nirik> Lets go ahead and dive on in... 18:02:19 <nirik> #topic New folks introductions and Apprentice tasks 18:02:28 <nirik> any new folks? or apprentices want to talk about tickets/issues/ideas? 18:03:02 <nirik> okey dokey 18:03:05 <_love_hurts_> hey nirik, sorry I was not here few weeks 18:03:16 <nirik> _love_hurts_: no worries. ;) real life gets in the way sometimes. 18:03:17 <_love_hurts_> was bit busy 18:03:33 <nirik> not a problem, and welcome back 18:03:39 <_love_hurts_> ty :) 18:03:41 <nirik> #topic Applications status / discussion 18:03:48 <nirik> any application news this week or upcoming? 18:03:54 <nirik> note that we are still in freeze... 18:04:26 <threebean> nothing major from me. I updated some more pieces of the zeromq3 stack in staging and it's all still working correctly afaict. 18:04:34 <nirik> nice. 18:04:57 <nirik> yeah, freeze is a nice time to try and catch up on upstream stuff for apps... or staging. 18:05:24 <threebean> yup :) 18:05:43 <nirik> we should try and get the smolt stuff setup in stg soon... our deadline for that is not far... 18:06:04 <abadger1999> <nod> 18:06:49 <nirik> puiterwijk has code that seems to work fine, but we should push it live in stg and make sure we didn't forget anything. 18:07:02 <nirik> #topic Sysadmin status / discussion 18:07:13 <nirik> the usual flow of tickets... 18:07:32 <nirik> I'd like to look at moving noc02 soon. It's not frozen... 18:07:56 <skvidal> nirik: to ibiblio? 18:08:01 <skvidal> or where? 18:08:01 <nirik> skvidal: yep. 18:08:04 <skvidal> cool 18:08:06 <skvidal> +1 18:08:11 <nirik> somewhere with ipv6 and good connectivity 18:08:26 <skvidal> :) 18:08:44 <nirik> oh, should have noted in applications news: 18:08:59 <nirik> #info we are looking at setting up a gallery instance for fudcon/fedora events pictures. 18:09:07 <nirik> it's still in early stages yet tho 18:09:33 <nirik> any other sysadminy news? 18:09:45 <nirik> #topic Private Cloud status update 18:09:57 <skvidal> yes 18:09:58 <skvidal> so 18:09:58 <nirik> skvidal has some provisioning working nicely now in the private cloud 18:10:05 <skvidal> http://skvidal.wordpress.com/2012/10/31/ansible-and-cloud-instances/ <-- as an explanation 18:10:10 <skvidal> then in the ansible public repo 18:10:19 <skvidal> http://infrastructure.fedoraproject.org/infra/ansible/README 18:10:37 <skvidal> instructions for any sysadmin-main folks to startup a smallish instance on el6 or f17 18:10:39 <skvidal> ready to go 18:10:46 <nirik> cool. :) 18:11:04 <skvidal> I will add more docs as to how to use a different security group (default is very limited) 18:11:12 <skvidal> and perhaps 'webserver' is more likely what we would need 18:11:27 <nirik> yeah. 18:11:28 <skvidal> but the gist is - you can spin up an instance in about 30s to a minute 18:11:29 <nirik> depending on needs. 18:11:46 <skvidal> with the right set of auth keys for whichever users 18:11:56 <skvidal> and then you can destroy it, at will. 18:12:14 <skvidal> I'd like to be able to add some functionality to write out the instance id, ip and other data to a file/log somewhere 18:12:15 <nirik> those are all in their own 'account' right? so different vlan, etc 18:12:27 <skvidal> nirik: those are in the 'fedora' account under 'admin' 18:12:30 <skvidal> it doesn 18:12:35 <skvidal> 't make a new vlan for each 18:12:38 <skvidal> only for each security group 18:12:40 <nirik> yeah, sounds good. Just 'syslog' ? have epylog report on them? 18:12:56 <skvidal> nirik: yah - I could spew to logger the info it is passing so we can trace it back 18:13:07 <skvidal> hey - maybe I should see about calling fedmsg :) 18:13:13 <nirik> you could. :) 18:13:17 <skvidal> indeed 18:13:25 <skvidal> nirik: so they are not entirely isolated to another vlan 18:13:33 <nirik> ok, not a big deal, just wondering. 18:13:35 <skvidal> if you want I could make a new security group per each one 18:13:47 <nirik> anything anyone does should be over ssh anyhow... or publiuc 18:13:49 <skvidal> but i'd need to hack up something to clean up unused security groups 18:13:50 <nirik> public even 18:13:58 <skvidal> it's doable 18:14:04 <skvidal> but my time is tight right now with other things 18:14:22 <nirik> yeah, might throw it in a todo for later days when we are all bored sitting on a beach. ;) 18:14:35 <skvidal> riiiiiiiiiighto 18:14:36 <skvidal> I will 18:14:36 <rbergeron> what's this about bored sitting on a beach? that sounds pretty awesome 18:14:39 <skvidal> it's a good idea 18:14:40 <smooge> fudcon 2013 18:14:41 * threebean is in 18:14:57 <smooge> sitting on a beach 18:15:02 <nirik> fudcon maldives! 18:15:06 <skvidal> provision every new instance into its own security group (perhaps made on demand w/whatever ports needed (defaulting to 80,443,22 and icmp) 18:15:10 <skvidal> nirik: dude.... 18:15:20 <skvidal> I've told people that costarica is perfect for a winter fudcon 18:15:23 <skvidal> but do they listen? 18:15:23 <nirik> yep. ;) anyhow... 18:15:24 <skvidal> Nooooooooooo 18:15:48 <nirik> only other cloud news is that I need to look and see if OS folsom is ready to test for us yet... 18:15:58 <nirik> if it is I will reinstall the OS side and ansible as I go... 18:16:06 <nirik> and possibly do no glustering... 18:16:41 <nirik> #topic Security FAD update 18:16:50 <nirik> fad planning is ongoing... 18:16:59 <nirik> hopefully everything is on trac. 18:17:03 <Southern_Gentlem> skvidal, you organize and we will come 18:17:27 <nirik> any questions or concerns on security FAD? 18:18:06 <smooge> ok I need to update some stuff there 18:18:18 <nirik> smooge: ok. any problems? or just updates? 18:18:19 <smooge> we aren't at the Sheraton but at the Radison. 18:18:30 <nirik> https://fedoraproject.org/wiki/FAD_Infrastructure_Security_2012 18:18:39 <nirik> ah, ok. is that closer/further/better? 18:18:43 <smooge> Toshio's ticket got late files 18:18:44 * pingou late 18:18:52 <smooge> it is about the same... 18:19:10 <nirik> ok 18:19:36 <smooge> I won't be coming up in my dad's old truck to pick people up at the airport when seth can't.. my mom says they don't let dogs and syssadmins sit in the back anymore.. so I will have a Taurus I think 18:20:00 <abadger1999> heh :-) 18:20:08 <nirik> I'm also going to try and send out some prelim info/background via email a week or two before... and see if there's any prelim work we can hash out before we get there too. 18:20:28 <skvidal> dumb question 18:20:32 <smooge> I will start getting on people's cases for blog updates about the FAD and such 18:20:33 <skvidal> how many total people will be there? 18:20:40 <smooge> 10 people 18:20:40 <skvidal> b/c I am worried about this becoming cumbersome 18:20:46 <skvidal> okay, that's manageable 18:20:53 <nirik> yeah, hopefully not too bad. 18:21:05 * nirik is most worried about the fas changes... 18:21:15 <nirik> I think the pam stuff and cgi shouldn't be too bad... 18:21:22 <skvidal> agreed 18:21:36 <skvidal> if we only get this working for sysadmin-main in a db behind the scene for sudo 18:21:40 <skvidal> I'd still consider it a benefit 18:22:00 <nirik> yeah. I think sudo for * with a db would be very possible... 18:22:16 <nirik> but I'd like to have fas integrated. 18:22:26 <nirik> and explore/discuss ssh too. :) 18:22:43 <skvidal> indeed 18:22:54 <nirik> anyhow, I think it will be a nice productive week. 18:23:25 <nirik> #topic Upcoming Tasks/Items 18:23:32 <nirik> #info 2012-10-23 to 2012-11-13 F18 Beta Freeze 18:23:32 <nirik> #info 2012-11-01 nag fi-apprentices 18:23:32 <nirik> #info 2012-11-07 - switch smolt server to placeholder code. 18:23:32 <nirik> #info 2012-11-13 F18 Beta release 18:23:32 <nirik> #info 2012-11-20 FY2014 budget due 18:23:33 <nirik> #info 2012-11-22 to 2012-11-23 Thanksgiving holiday 18:23:34 <nirik> #info 2012-11-26 to 2012-11-29 Security FAD 18:23:37 <nirik> #info 2012-11-27 to 2012-12-11 F18 Final Freeze 18:23:38 <nirik> #info 2012-11-30 end of 3nd quarter 18:23:40 <nirik> #info 2012-12-11 F18 release. 18:23:42 <nirik> #info 2012-12-24 to 2013-01-01 Red Hat Shutdown for holidays. 18:23:44 <nirik> #info 2013-01-18 to 2013-01-20 FUDCON Lawrence 18:23:45 <abadger1999> nirik: let's talk oob about what goes into fas integration. 18:23:48 <nirik> Anything anyone would like to note or schedule or shout out 18:24:01 <skvidal> do we have the flight info on the website, yet? 18:24:05 <nirik> abadger1999: ok. I think that would be good to do 18:24:19 <nirik> skvidal: we don't, but we should add it... at least arrival and depart times 18:24:39 <skvidal> right - my main thing is - if I can pick everyone up in eunice's car - then that will be easy 18:24:50 <skvidal> if not - I can rent a car for picking people up for the day 18:25:12 <skvidal> smooge: this way, at least, you won't need to stress on driving to/from the airport since I know the way pretty well 18:25:34 <nirik> sounds good. we should update the wiki with times so we can figure out if people get there in bunches or what 18:25:38 <skvidal> right 18:25:39 <skvidal> exactly 18:25:42 <smooge> skvidal, I figured I would be picking up the toshios and such who are getting in at midnight or later 18:25:52 <skvidal> smooge: I'm up late anyway 18:26:20 <smooge> ok yeah.. you are :).. didn't know how you liked to drive at night though. 18:26:32 <skvidal> should be fine 18:26:41 <skvidal> 40 at that time will be vacant 18:26:48 <smooge> but hey I can drive up on Monday and we can hash out any issues when I get there. 18:26:49 <skvidal> gives me time to listen to marketplace 18:26:52 <skvidal> cool 18:27:42 * nirik nods. 18:27:48 <nirik> #topic Open Floor 18:28:03 <nirik> anything for open floor? questions/concerns/comments? 18:28:12 * suehle corrects smooge's earlier note that the FAD hotel is the Radison. It's the Marriott downtown, which got you the same rate but with wifi and slightly closer to the office :) 18:29:12 <_love_hurts_> nirik I may need to discuss about Ticket 2783 tomarrow or the day after tomarrow 18:29:18 <pingou> we keep the meeting at this time right? So next week it's one hour later, correct? 18:29:35 <nirik> suehle: cool. ;) 18:29:36 <suehle> also on the fad, I'm booking relrod's flight shortly, but I haven't seen a ticket for whiterhino's flight 18:29:44 <nirik> _love_hurts_: ok. 18:30:21 <smooge> ah crap.. thanks suehle 18:30:24 <nirik> suehle: I think they dropped out. I mailed them a bit back and they never replied. 18:30:37 <abadger1999> suehle: wifi! yay! 18:30:50 <smooge> I have no idea why I wrote down radison twice... 18:31:30 <nirik> suehle: yeah, we can remove them I think. I mailed on the 2nd of OCT with no reply. ;( 18:32:18 <threebean> Maybe a silly question, but the F18 beta release is 2012-11-13.. is the freeze over at that point too? 18:32:35 <suehle> niriki, noted 18:33:08 <nirik> threebean: yep 18:33:14 * threebean nods 18:33:20 <samkottler> I am all good for travel to the FAD 18:33:22 <nirik> if it is released then finally. 18:33:23 <samkottler> thanks suehle! 18:33:36 <suehle> oh, I remember now... I'd emailed relrod a question about his flight and hadn't heard back. :S 18:33:43 <suehle> will ping again 18:33:46 <smooge> I think we are not releasing til December/January. but I am an optimist 18:35:41 <abadger1999> threebean: day after releas. 18:36:11 <nirik> ok, anything else for open floor? 18:36:15 <nirik> or shall we call it a meeting? 18:36:21 <skvidal> umm 18:36:25 <skvidal> one more addition to the cloud stuff 18:36:42 <skvidal> if anyone wants to work on an instance, or tinker with new images, etc 18:36:49 <skvidal> yell at me I can do what I can to help 18:37:00 * nirik nods. 18:37:03 <threebean> abadger1999: helpful, thank you. 18:37:19 <nirik> we have a list of items we want to address before calling things production too... any work on those would be fine with me. 18:37:30 <skvidal> agreed 18:37:50 <skvidal> there's lots of stuff 18:38:17 <nirik> never a dull moment. ;) 18:38:29 <nirik> ok, thanks for coming everyone. Lets all get back to infraing. ;) 18:38:32 <nirik> #endmeeting
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ infrastructure mailing list infrastructure@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/infrastructure
