March 2017 - Heroes - openSUSE Mailing Lists

[heroes] naming pattern
by Theo Chatzimichos 03 Mar '17

03 Mar '17

Hello, I would like to start a discussion regarding the naming pattern of our VMs. Right now there is a total mess and we need to be consistent. So here is what I propose, after a discussion I already had in a SUSE-IT's team meeting. Please be aware that NONE of the things I describe below have actually been implemented yet, so everything is up for discussion. I would like to start implementing them soon though, so I'll give the topic a deadline of three weeks (until the next team meeting, 5th of March). FQDN form proposal: $unique_ID.$location.$purpose.opensuse.org ### unique_ID This is a unique name for every machine. When one name is used, it can NEVER be reused. Thus, we will need to list them somewhere (at the progress opensuse-admin-wiki for example) (both the current and the deprecated ones) Proposals for the unique ID: 1) pattern like vmXY (X and Y being increasing numbers) 2) the cartoon names we currently have I would prefer: - cartoon names for production instances - vmXY or workerXY for CI/OBS workers - whatever for testing instances, but not cartoon names ### location This can be the country code, or city name. I would prefer the country code ### purpose This could be: - infra or prod for production instances (I prefer infra) - test for testing instances - worker for workers Examples on how our instances' FQDNs will look like: ariel.de.infra.opensuse.org donald.de.infra.opensuse.org goofy.cz.infra.opensuse.org daisy.us.infra.opensuse.org mediawiki.de.test.opensuse.org salt1.us.test.opensuse.org https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/Naming_patt… -- Theo Chatzimichos <tampakrap(a)opensuse.org> <tchatzimichos(a)suse.com> System Administrator SUSE Operations and Services Team

5 9

[heroes] Getting some action
by Nick Mantas 02 Mar '17

02 Mar '17

Greetings guys! My name is Nikos and I am currently an undergraduate student in Computer Science. I have been contributing to the project for almost 2 years now but not in the infrastructure. I really don't know which task is suitable for me but i really want to help out and learn as much as i can at the same time. I code in python and am mostly focused on the security field but i can take up any task as as long as i have a bit of guidance. You know what they say: start form the bottom :) Cheers Nikos Mantas -- Nick Mantas -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

3 2

[heroes] meeting logs and summary
by Theo Chatzimichos 02 Mar '17

02 Mar '17

Hello, I uploaded meeting logs from the last meetings, but I didn't write summaries. You can find them in the progress wiki, but maybe it would be a good idea to move them to en.opensuse.org? Our meetings are public either way, and people could benefit from reading our summaries etc. Opinions? https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/Meetings -- Theo Chatzimichos <tampakrap(a)opensuse.org> <tchatzimichos(a)suse.com> System Administrator SUSE Operations and Services Team

4 5

[heroes] FYI: privacy policy
by Theo Chatzimichos 01 Mar '17

01 Mar '17

Hello, just FYI, I plan to contact the board and the SUSE lawyers to draft together a privacy policy. I created https://progress.opensuse.org/issues/17404 to track the progress -- Theo Chatzimichos <tampakrap(a)opensuse.org> <tchatzimichos(a)suse.com> System Administrator SUSE Operations and Services Team

1 0

[heroes] security team informed about openSUSE:infrastructure
by Theo Chatzimichos 01 Mar '17

01 Mar '17

Hello, just fyi, I sent a mail to the security team to monitor openSUSE:infrastructure and its subprojects. I'll let you know about the results of the discussion -- Theo Chatzimichos <tampakrap(a)opensuse.org> <tchatzimichos(a)suse.com> System Administrator SUSE Operations and Services Team

1 1

[heroes] Dropping/Blocking Email Addresses from our mailing lists
by Lars Vogdt 01 Mar '17

01 Mar '17

Hi Today I got an emergency call from our security team: their mailing list was "spammed" from a bot (aka ticket system) - as the ticket system address (which looks it was in CC of one Email to the list) generated an Email to the list - getting an answer from mlmmj that it is not subscribed, which generated a new ticket with an automated answer, which was answered by mlmmj... (I think you got the loop) As result, I created /etc/postfix/sender_access with : $EMAIL DROP inside, did "postmap /etc/postfix/sender_access" and adapted /etc/postfix/main.cf : smtpd_recipient_restrictions = [...],check_sender_access hash:/etc/postfix/sender_access For the moment, this seems to successful break the loop, but as I'm neither the maintainer of the system nor sure that this is a good/stable solution, I hope that I simply did not break too much... Feel free to adjust/remove/whatever with the above information. Maybe someone has already a better idea...? with kind regards, Lars -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

3 2