Hi folks
--- galera
I've some good news: the new Galera cluster for our MySQL databases is
up and running. I've enabled monitoring and the (db)proxy setup already,
but did not start salt on the machines, yet.
During the next days, there should be some time to do some testing and
finally start with the import of the current databases one by one. One
by one because I want to check first if really all the databases in the
old cluster are still needed - IMHO a lot of them can simply be
skipped.
I like to start with the redmine (aka progress) DB first - and then
decide about the rest - objections?
...and of course: any help welcome! Especially from those who have
experience with galera clusters or mysql database setups/tuning.
--- syslog
A note to our Salt gurus: syslog.infra.opensuse.org is up and running,
but does not see a lot of incoming events, yet.
Can you please place something like:
---- /etc/rsyslog.d/remote.conf
$WorkDirectory /var/spool/rsyslog
$ActionQueueFileName uniqName
$ActionQueueMaxDiskSpace 1g
$ActionQueueSaveOnShutdown on
$ActionQueueType LinkedList
$ActionResumeRetryCount -1
*.* @@syslog.infra.opensuse.org
-----
On all our nodes together with an entry like:
----- /etc/hosts
192.168.47.7 syslog.infra.opensuse.org syslog monitor
-----
for the case that DNS does not work or the name is not resolvable
during boot.
--- ntp
First of all: I switched to use only ntp1, ntp2 and ntp3 on the nodes.
This way, the first DNS entry wins, which is lucky most of the time
ntp1.infra.opensuse.org, ntp2.infra.opensuse.org and
ntp3.infra.opensuse.org.
I did not adapt the salt profile, yet, because I want to hear from you
if we might switch over from ntp to chrony ?
--- CU
...and have a good night ;-)
Regards,
Lars
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Grüezi mitenand
I'm having a minor issue with my unbound setup (for directing lookups of
infra.o.o over the vpn).
Normally reverse lookups would just go straight to our core nameserver,
but:
# host 192.168.2.159
Host 159.2.168.192.in-addr.arpa not found: 3(NXDOMAIN)
It looks like reverse lookups are not being forwarded as per the config.
Apparently unbound has default setups for the RFC1918 ranges (AS112), so
I am supposed to add:
local-zone: "in-addr.arpa." transparent
(either nodefault or transparent).
It doesn't seem to be working though. Does anyone have something like
this working?
This is my config:
server:
local-zone: "in-addr.arpa." nodefault
local-zone: "infra.opensuse.org." nodefault
stub-zone:
name: "infra.opensuse.org"
stub-addr: 192.168.254.101
stub-addr: 192.168.254.102
forward-zone:
name: "."
forward-addr: 192.168.2.254
forward-addr: 2a03:7520:4c68:1::1000
--
Per Jessen, Zürich (9.9°C)
openSUSE mailing list admin
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Levon Avagyan wrote:
> Dear Per,
>
> For sure rsync is not related.
> Problem is clearly with mirror brain.
> Please have a look at attached picture. Only option is to download directly.
Hi Levon
that is weird - I have just tried the same, it looks like it's a problem on
IPv4. With IPv6, it worked fine. I'm cc'ing mirror(a)o.o.
On Levon's screenshot, it is clear that no mirrors were found for:
http://download.opensuse.org/distribution/leap/42.2/iso/openSUSE-Leap-42.2-…
When I tried from ipv6, I got two mirrors, but when I tried from an IPv4 in
Germany, I also got no mirrors.
--
Per Jessen, Zürich (18.1°C)
openSUSE mailing list admin
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hi Lars, Heroes
Terrible download speeds, lots of complaints from users, mirrors on mirror@ reporting less traffic than usual
Please investigate
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Why does logging into BOO involve Google?
--
"Wisdom is supreme; therefore get wisdom. Whatever else you
get, get wisdom." Proverbs 4:7 (New Living Translation)
Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!
Felix Miata *** http://fm.no-ip.com/
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Levon Avagyan wrote:
> Hello,
>
> Same situation with our mirror, just a fraction of traffic volume.
>
> https://opensuse.ucom.am/
>
> Best regards
> Levon Avagyan
Thanks for your report. I'm still keeping en eye on ourt mirror - we got the
sync to work again yesterday, but I don't really see how it would have affected
the mirror traffic.
--
Per Jessen, Zürich (16.2°C)
openSUSE mailing list admin
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hi all,
like in every good and trashy hollywood/bollywood love movie, two
individuums - in this case the keyserver and me - want to exchange their
data.
But of course - as always in those movies - a bad situation comes up,
the dad of the keyserver is against our data exchange and everything
ends up in a mess...
Maybe - the dad of the keyserver - reconsiders his choice and gives me
the possibility to upload keys and sync the keyserver with the outside
world again, as I try to work with the keyserver every day, I promise to
always upload there an updated key of myself and really promise to be a
valuable part of the GPG community signing only keys where I checked a
passport and swear on the book of "Honest Ahmed Used Cars and
Certificates - Keysigning howto" before. Furthermore, I will consider
everybody to sign keys, as it makes the community more valuable.
So please dad of keyserver.o.o - give yourself a small kick - and bring
this nice service back2life - which means - let it sync with the outside
world - pool it with sks - and let the GPG pubkeys have many many
beautiful copies out there in the world which will make the family
bigger :).
Best regards,
a sad user
--
Thorsten
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org
Hello,
as you might have noticed on IRC, Theo and I had some fun to get salt
running on riesling2 and water2.
In the end, we set up a saltmaster on water2 using local git checkouts
(uploaded as tarball) instead of gitfs - it turned out the git
connection to gitlab was too slow for whatever reason [1], and sometimes
even git clone timed out :-/
I had already copied over all files and database dumps and setup MySQL,
and we now have a copy of all wikis running in Provo :-) [2]
Note that the wikis are in read-only mode - I want to avoid that I have
to sync back changes to Nuremberg ;-) Also, edits done today are
missing, but they'll of course be back after switching back to the VMs
in Nuremberg.
The only missing part is the haproxy setup for all wikis - since I'm not
familiar with that, someone else has to do this ;-)
Regards,
Christian Boltz
[1] Theo's guess is that the VPN tunnel is too slow
[2] once salt was working, this was the easy part - salt highstate
(+ some /etc/hosts tricks) did all the wiki setup :-)
--
> ...womit die Geschichte wieder von vorn losgeht...
Jaha, aber nun ist das eine vollkommen andere Situation: Jetzt hast Du
nämlich eine von Suse generierte kdmrc für ein von Suse geliefertes KDE,
und KDE ist eine vom Installationssupport abgedeckte Komponente.
Also ist das ein meldefähiger und supportberechtigter Bug! :-)
[> Gerald Martin und Kristian Köhntopp in suse-linux]
--
To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org
To contact the owner, e-mail: heroes+owner(a)opensuse.org