Date: prev next · Thread: first prev next last
2016 Archives by date, by thread · List index


Participants
  1. Norbert Thiebaud
  2. Christian Lohmaier
  3. Guilhem Moulin

Misc.
 + upcoming migrations/downtimes: pootle Nov. 19-20
 + manitu network issues/DoS Attack unplanned downtimes/connectivity
   issues in the last days (nothing we could do about) during that
 + monitoring host lost VPN connection/got on the blacklist during that
   → should whitelist it/made it time out earlier in gluster (to avoid
     hitting the "only one instance" config limit
 + also deneb (kvm in Switzerland) has ping issues / spams tdf
   monitoring telegram channel with loss, recovery, loss, recovery, …
   → Mac mini lying unused in Switzerland, could be used by a dev
 + flood of mails to admin-alias/list still is a nuisance
   → need to have one where one is expected to read every mail (Norbert)
   → TODO: use a separate alias as envelope sender for automatic emails
   → graylog or similar to weed out the uninteresting stuff or separate
     "attention" list

Libvirt/QEMU
 + want to try out qemu with native gluster support - need to free one
   hypervisor to do that (Guilhem)
 + also pinning of VMs for better perf/"guaranteed" CPU, have non-prod
   ones "floating"
 
LDAP/SSO sketch on vm135
 + ask users their username/password on each service
   alternative: ask for email and verify that email using a cryptographic token
 + store the hashes in LDAP using the service's custom password hashing
   method
 + at the begining of the transition, update the hash in the service's
   own database
 + not just a technical issue, social engineering is what's gonna take
   the longest time (notices, reminders, blog posts, wiki pages, etc.)
 + basic frontend should be ready by the end of next week
 + use Bugzilla's test instance (vm144) to check auth
 
Closed issues:
 + graylog off berta → now on miranda

TODOs (items that don't fit into Redmine):
  + document in infra-doc the 'proper way' to configure a debian's
    etc/network/interfaces et al. (2 interfaces 1 public one private
    with routing and dns).. and sysctl to prevent forwarding between
    public and private?
  + ipv6 firewalling?
  + modify tkmon to show hostnames in use, not only vmXXX
  + use salt to check host state
  + gluster checks https://www.gluster.org/pipermail/gluster-users/2014-June/017819.html
  + gluster mounts on hypervirsors won't work after boot
  + migration of the libreofficeforum, restarting under new platform.
  + remove tb3, tb63, tb64, tb65, vm6 from dns
  + askbot daily dumps by evgeny, clarify (#2074, #2112)
  + check georeplication berta → antares
  + graylog upgrade 
  + UFW Hosts:
    - kermit.documentfoundation.org → alles mögliche ???? all is good ?
    - devcentral.libreoffice.org
    - bilbo2
    - pumbaa
  + commit changes to tdfvms-data, including adding modification to
    volumes.txt to reflect the new gluster volumes
  + stabilize load balance of hypervisors and record these in
    tdfvms-data
  + minimize the noise level on infra ML…

-- 
Guilhem.

-- 
To unsubscribe e-mail to: website+unsubscribe@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/website/
All messages sent to this list will be publicly archived and cannot be deleted

Context


Privacy Policy | Impressum (Legal Info) | Copyright information: Unless otherwise specified, all text and images on this website are licensed under the Creative Commons Attribution-Share Alike 3.0 License. This does not include the source code of LibreOffice, which is licensed under the Mozilla Public License (MPLv2). "LibreOffice" and "The Document Foundation" are registered trademarks of their corresponding registered owners or are in actual use as trademarks in one or more countries. Their respective logos and icons are also subject to international copyright laws. Use thereof is explained in our trademark policy.