Hello,
here are the minutes of today's meeting:
2024-11-07 heroes meeting
Attendees: cboltz, bmwiedemann, Georg, Knurpht, rrahl, himsec
Minutes:
* status reports
* fixed pagure outgoing port 25 timeout
* osc-collab update frequency reduced from 30m to 6h to not overload OBS API
* preparing new syslog server with syslog-ng
* DC move PRV => SLC
* setup from scratch with self-managed dedicated servers+network
* allows to do redundancy / failover with PRG2
* plan: re-deploy with salt
* except mirrorcache-us{,-db} + provo-mirror which will actually be moved
* consider rebuilding provo-mirror through Salt later
* decommissioned machines backed up to backup.i.o.o:/backup/raw/prv/
* status.o.o moved to NUE (NorthC)
* Georg hit packaging errors, sent SR https://build.opensuse.org/request/show/1219205
* httpd needed to be enabled
* no more timeouts when updating status
* mirrorcache-us should be back next week
* deploy new name-server with powerdns to align with PRG2
* internally IPv6-only same as PRG2 (NUE will follow later)
* 7 machines/hypervisors total (2 networking/firewall, 2 OOB-access/management, 3 general purpose)
* spam on paste.o.o needs some moderation + spamfilters
Regards,
Christian Boltz
--
[Loadbalancer vor Mailservern]
Ausbauen, bei Ebay verhökern und die frei gewordene Zeit zusammen mit
dem Ebay-Erlös in eine große Betriebsparty mit Cocktails anlegen.
[Peer Heinlein in postfixbuch-users]
Hello,
the next heroes meeting will be on Thursday (2024-11-07) at 19:00 UTC /
20:00 CET in https://meet.opensuse.org/heroes
Note: Europe switched from CEST to CET, which means the UTC time
changed.
Besides the usual topics, https://progress.opensuse.org/issues/167776
also lists the PRV -> SLC move as additional topic.
Regards,
Christian Boltz
--
[AppArmor] Unlike SELinux, it does not require a PhD in computer
security to get it working... [Peter Czanik in opensuse-factory]
Hi,
as announced in project@ we will relocate our US infrastructure from
Provo to Salt Lake City (SLC).
The new infrastructure will be mostly built from scratch using a similar
design as the one we already successfully implemented in Prague.
I gathered a list of affected virtual machines and took the liberty to
preliminarily decide their fate. In our next meeting [0] I will walk
through them and also share more details about the new setup if anyone
is curious.
Besides the two public services announced in the project list, we have
some internal adjustments to do, work on which I already started over
the last days:
- status.o.o was relocated from Provo (status2.i.o.o) to Nuremberg
(status1.i.o.o)
- provo-mirror.o.o was pointed to Prague (proxy-prg2.opensuse.org) to
serve our maintenance page for the time being
- mirrorcache-us.o.o is prepared to be pointed there as well, but will
wait til shutdown is due
- ns3.o.o (aka provo-ns.i.o.o) is to be removed from NS records in our
DNS zones => will be re-added pointing to new nameservers in SLC once
they are ready ready
Best,
Georg
[0] https://progress.opensuse.org/issues/167776