[libreoffice-website] Minutes from the Tue Aug 15 infra call

Participants
1. guilhem
2. Brett

Agenda
 * Salt refactoring
   + Testing Suite
     - Possible solution to Gitlab+Docker security concerns:
       https://gitlab.com/gitlab-org/gitlab-ci-multi-runner/blob/master/docs/security/index.md
       + Guilhem: that's an improvement over the current situation, but I want to investigate
         PID+network+mount namespaces
     - Testing salt states with Docker can be difficult due to lack of init system/service manager.
     - Would something like systemd-nspawn or qemu/kvm be better to test with?
       + systemd-nspawn sets /proc read-only, so certain items might not be testable?
       + AI guilhem: better isolation with a VM, but unsure how to communicate with the the 2
         systems
   + Deduplication is mostly done. G: awesome!
     - Brett is trying to verify that he hasn't totally broken everything in the process
       https://infratools.documentfoundation.org/infra/salt/issues/3
     - Are there a fair number of salt states that were broken to begin with?
       + eg editor.nano (removed)
       + missing dummy pillar data
   + Brett has been creating issues on gitlab's issue tracker: Should it be on redmine instead?
     + G: fine to keep it in GitLab as it's salt-specific and makes merging etc. easier
   + ufw vs shorewall: Which is supported?
     - ufw is installed on devcentral.libreoffice.org, all other jessie hosts are using shorewall
   + ntp: Deprecate in favor of systemd-timedated since it's installed by default?
     - G: reluctant to do the switch before systemd-timedated.service is enabled by default
   + There is a Postfix in base/mail and tdf/postfix that are very different.
     - base/mail is more of a simple, generic mail server while tdf/postfix is used for more
       advanced setups.
     - Merge both of these setups into postfix/ when we move to the new smarthost setup.
     - Leave both configurations as-is for now.
 * Pending: Revive AOO-svn script
 * Migrations
   + gimli migrated to our infra (vm201)
 * Pending: Mail setup refactoring
   + https://redmine.documentfoundation.org/issues/2256 +
   https://redmine.documentfoundation.org/issues/2257
 * DMARC rejects (eg @googlemail.com)
   + Rewrite From: headers for these domains? Maybe set Reply-To to the original From: value?
 * Next meeting: September 19 at 16:30 UTC

-- 
Guilhem.

-- 
To unsubscribe e-mail to: website+unsubscribe@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/website/
All messages sent to this list will be publicly archived and cannot be deleted