Participants
1. Norbert Thiebaud
2. Christian Lohmaier
3. Guilhem Moulin
Misc.
+ upcoming migrations/downtimes: pootle Nov. 19-20
+ manitu network issues/DoS Attack unplanned downtimes/connectivity
issues in the last days (nothing we could do about) during that
+ monitoring host lost VPN connection/got on the blacklist during that
→ should whitelist it/made it time out earlier in gluster (to avoid
hitting the "only one instance" config limit
+ also deneb (kvm in Switzerland) has ping issues / spams tdf
monitoring telegram channel with loss, recovery, loss, recovery, …
→ Mac mini lying unused in Switzerland, could be used by a dev
+ flood of mails to admin-alias/list still is a nuisance
→ need to have one where one is expected to read every mail (Norbert)
→ TODO: use a separate alias as envelope sender for automatic emails
→ graylog or similar to weed out the uninteresting stuff or separate
"attention" list
Libvirt/QEMU
+ want to try out qemu with native gluster support - need to free one
hypervisor to do that (Guilhem)
+ also pinning of VMs for better perf/"guaranteed" CPU, have non-prod
ones "floating"
LDAP/SSO sketch on vm135
+ ask users their username/password on each service
alternative: ask for email and verify that email using a cryptographic token
+ store the hashes in LDAP using the service's custom password hashing
method
+ at the begining of the transition, update the hash in the service's
own database
+ not just a technical issue, social engineering is what's gonna take
the longest time (notices, reminders, blog posts, wiki pages, etc.)
+ basic frontend should be ready by the end of next week
+ use Bugzilla's test instance (vm144) to check auth
Closed issues:
+ graylog off berta → now on miranda
TODOs (items that don't fit into Redmine):
+ document in infra-doc the 'proper way' to configure a debian's
etc/network/interfaces et al. (2 interfaces 1 public one private
with routing and dns).. and sysctl to prevent forwarding between
public and private?
+ ipv6 firewalling?
+ modify tkmon to show hostnames in use, not only vmXXX
+ use salt to check host state
+ gluster checks https://www.gluster.org/pipermail/gluster-users/2014-June/017819.html
+ gluster mounts on hypervirsors won't work after boot
+ migration of the libreofficeforum, restarting under new platform.
+ remove tb3, tb63, tb64, tb65, vm6 from dns
+ askbot daily dumps by evgeny, clarify (#2074, #2112)
+ check georeplication berta → antares
+ graylog upgrade
+ UFW Hosts:
- kermit.documentfoundation.org → alles mögliche ???? all is good ?
- devcentral.libreoffice.org
- bilbo2
- pumbaa
+ commit changes to tdfvms-data, including adding modification to
volumes.txt to reflect the new gluster volumes
+ stabilize load balance of hypervisors and record these in
tdfvms-data
+ minimize the noise level on infra ML…
--
Guilhem.
--
To unsubscribe e-mail to: website+unsubscribe@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/website/
All messages sent to this list will be publicly archived and cannot be deleted
Context
- [libreoffice-website] Minutes from the Tue Nov 15 infra call · Guilhem Moulin
Privacy Policy |
Impressum (Legal Info) |
Copyright information: Unless otherwise specified, all text and images
on this website are licensed under the
Creative Commons Attribution-Share Alike 3.0 License.
This does not include the source code of LibreOffice, which is
licensed under the Mozilla Public License (
MPLv2).
"LibreOffice" and "The Document Foundation" are
registered trademarks of their corresponding registered owners or are
in actual use as trademarks in one or more countries. Their respective
logos and icons are also subject to international copyright laws. Use
thereof is explained in our
trademark policy.