[libreoffice-website] Minutes from the Tue Nov 15 infra call

Participants
  1. Norbert Thiebaud
  2. Christian Lohmaier
  3. Guilhem Moulin

Misc.
 + upcoming migrations/downtimes: pootle Nov. 19-20
 + manitu network issues/DoS Attack unplanned downtimes/connectivity
   issues in the last days (nothing we could do about) during that
 + monitoring host lost VPN connection/got on the blacklist during that
   → should whitelist it/made it time out earlier in gluster (to avoid
     hitting the "only one instance" config limit
 + also deneb (kvm in Switzerland) has ping issues / spams tdf
   monitoring telegram channel with loss, recovery, loss, recovery, …
   → Mac mini lying unused in Switzerland, could be used by a dev
 + flood of mails to admin-alias/list still is a nuisance
   → need to have one where one is expected to read every mail (Norbert)
   → TODO: use a separate alias as envelope sender for automatic emails
   → graylog or similar to weed out the uninteresting stuff or separate
     "attention" list

Libvirt/QEMU
 + want to try out qemu with native gluster support - need to free one
   hypervisor to do that (Guilhem)
 + also pinning of VMs for better perf/"guaranteed" CPU, have non-prod
   ones "floating"
 
LDAP/SSO sketch on vm135
 + ask users their username/password on each service
   alternative: ask for email and verify that email using a cryptographic token
 + store the hashes in LDAP using the service's custom password hashing
   method
 + at the begining of the transition, update the hash in the service's
   own database
 + not just a technical issue, social engineering is what's gonna take
   the longest time (notices, reminders, blog posts, wiki pages, etc.)
 + basic frontend should be ready by the end of next week
 + use Bugzilla's test instance (vm144) to check auth
 
Closed issues:
 + graylog off berta → now on miranda

TODOs (items that don't fit into Redmine):
  + document in infra-doc the 'proper way' to configure a debian's
    etc/network/interfaces et al. (2 interfaces 1 public one private
    with routing and dns).. and sysctl to prevent forwarding between
    public and private?
  + ipv6 firewalling?
  + modify tkmon to show hostnames in use, not only vmXXX
  + use salt to check host state
  + gluster checks https://www.gluster.org/pipermail/gluster-users/2014-June/017819.html
  + gluster mounts on hypervirsors won't work after boot
  + migration of the libreofficeforum, restarting under new platform.
  + remove tb3, tb63, tb64, tb65, vm6 from dns
  + askbot daily dumps by evgeny, clarify (#2074, #2112)
  + check georeplication berta → antares
  + graylog upgrade 
  + UFW Hosts:
    - kermit.documentfoundation.org → alles mögliche ???? all is good ?
    - devcentral.libreoffice.org
    - bilbo2
    - pumbaa
  + commit changes to tdfvms-data, including adding modification to
    volumes.txt to reflect the new gluster volumes
  + stabilize load balance of hypervisors and record these in
    tdfvms-data
  + minimize the noise level on infra ML…

-- 
Guilhem.

-- 
To unsubscribe e-mail to: website+unsubscribe@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/website/
All messages sent to this list will be publicly archived and cannot be deleted