- Heroes

[heroes] Heroes meeting in Nuremberg on Nov 15 - 17
by Karol Babioch 24 Oct '19

24 Oct '19

Hi heroes, it took a while to figure out the details, but I can hereby confirm that the openSUSE heroes meeting is going to happen this year. As previously announced it will be taking place on November 15 - 17 [1]. We have the facilities booked for the whole weekend and also some budget for travel costs, overnight stays and food ;-). So far ~10 people have registered in advance. Since I don't want to make this information public (without consent), I will reach out to each of you individually including some additional information. If anyone already registered does not get an email from me until the weekend, please do reach out to me! For anyone else still interested to participate, please let me know. We still have some seats left, but the sooner I know about it, the easier it will be to arrange for things. The details (agenda, etc.) we can discuss / agree on during our next heroes meeting (in IRC) and/or via mail on this list. For any private matters, feel free to contact me via mail. [1]: https://lists.opensuse.org/heroes/2019-10/msg00001.html Best regards, -- Karol Babioch <kbabioch(a)suse.de> Project Manager Engineering Infrastructure SUSE Software Solutions Germany GmbH (HRB 36809, AG Nürnberg) Geschäftsführer: Felix Imendörffer

1 0

[heroes] Planning for next heroes meeting in Nuremberg
by Karol Babioch 15 Oct '19

15 Oct '19

Hi all, during yesterday's regular heroes meeting (and also during last week's sync call with Engineering Infrastructure) the idea was discussed to organize another heroes meeting in Nuremberg (last year's meeting was apparently skipped). This will be a great opportunity for all of us to meet in person, get to know each other (better), and talk about strategy and ideas, etc. We are currently planning to make this happen on Nov 15 - Nov 17 in the SUSE main office. The rough planning (for now) looks like this: - Arrival in Nuremberg on Friday (in the afternoon / early evening) - Friday evening dinner - Working/Discussing/Hacking on Saturday - [Voluntary beer in the evening?] - Working/Discussing/Hacking on Sunday - Departure in the afternoon In order to get a better understanding of the magnitude of such a meeting this year, I would like to ask everyone who wants to join us on this weekend to drop me a short message (either publicly and/or in private), so that I get a better overview of how many persons we are talking about. This is _NOT_ a final commitment yet and the planning might still change quite a bit. Best regards, Karol Babioch

6 11

[heroes] openSUSE Members
by Alexander Bergmann 11 Oct '19

11 Oct '19

Hi Heroes, Maybe I'm just a bit impatient... I'm currently waiting for my openSUSE membership request to being answered. However, I cannot see inside my profile that this is actually pending. Could someone please check. ;) Thanks, Alex~ -- Alexander Bergmann <abergmann(a)suse.com>, Security Engineer, GPG:9FFA4886 SUSE Software Solutions Germany GmbH Maxfeldstr. 5, 90409 Nuremberg, Germany (HRB 247165, AG München) Managing Director: Felix Imendörffer

1 0

[heroes] vpn keeps disconnecting?
by Per Jessen 08 Oct '19

08 Oct '19

For the last week or so, the opensuse vpn keeps disconnecting. In the past, it would be up for weeks and weeks. Has anything changed? -- Per Jessen, Zürich (15.4°C) Member, openSUSE Heroes -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

5 11

[heroes] We don't need another Hero
by Olav Reinert 04 Oct '19

04 Oct '19

Hi, My name is Olav Reinert, and I'd like to volunteer some of my time to help the openSUSE project by becoming a Hero. I'm not sure exactly what it takes to perform that role, but I'd like to submit the following as "qualifications": * I've been an openSUSE user for 15 years or so. * I started contributing packages to the distro about 5 years ago. * I run some server infrastructure at home. * My day job is Java application programming, and I also design and maintain a lot of Linux infrastructure at work. * I know another Hero, Per Jessen, personally - we live close to each other, and meet from time to time. * I have a Masters degree in computer science. >From what I've seen by looking over Per's shoulder during the monthly Heroes IRC meeting, and hearing about what is going on, I believe I can make a meaningful contribution. That's enough from me - looking forward to hear from you. Regards, Olav Reinert -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

5 5

[heroes] Moving hostinfo wiki pages into salt pillar/id/
by Christian Boltz 03 Oct '19

03 Oct '19

Hello, as promised in the last meeting, I updated some pillar/id/ files to contain the basic machine info we currently have on wiki pages like https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/ Annainfraopensuseorg The advantage of having the data in pillar/id/ files is that they are typically closer to reality, while the wiki pages are far away from salt and tend to be outdated. Please have a look at https://gitlab.infra.opensuse.org/infra/salt/merge_requests/266 and tell me if you like it this way or if I should change something. If nobody complains within a week, I'll assume you all like it, start to move the machine info of all servers to pillar/id/, and finally delete the wiki pages. Quick field description (with example values from daffy1): aliases: [] List of (internal) DNS aliases, or [] if none description: Login proxy for servers with authentication One-line, human-readable description of what the server does. documention: - https://progress.opensuse.org/projects/opensuse-admin-wiki/.... List of links to additional documentation, or [] if none responsible: [] List of admins that are responsible for a server - typically the person who "knows the server like his/her pocket". This doesn't exclude other admins from doing or fixing something on that server, but bigger changes should be discussed with the people mentioned here. If [], the server is looking for volunteers ;-) partners: - daffy2.infra.opensuse.org List of other servers that do the same job, and can take over if a server breaks or (more boring) gets rebooted. [] if there's only one server for that job. weburls: - https://login2.opensuse.org List of public URLs under which the server is reachable, or [] if a server doesn't provide public http or https services. Regards, Christian Boltz -- Some companies, when faced with a web security issue, think: "I know! We'll ship a root CA cert!" Now they are a web security issue. [Tobias Klausmann on https://plus.google.com/+KristianKöhntopp/posts/d7SAWvRa8tr] -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] Reminder: Heroes meeting on tuesday
by Christian Boltz 29 Sep '19

29 Sep '19

Hello, the next heroes meeting will be next tuesday (2019-10-01) 18:00 UTC / 20:00 CEST in the #opensuse-admin IRC channel. The usual topics are already listed on https://progress.opensuse.org/issues/56435 Feel free to add things you want to discuss, or bring them up during the meeting. Regards, Christian Boltz -- [KDE3 vs. KDE4] My guess is the vocal minority will only be satisfied when KDE4 gets dropped. We need to let them know that might happen round about the release of KDE5.4 . [from a comment on http://blogs.warwick.ac.uk/bweber/entry/opensuse_110_kde4/] -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] Fixed Let's Encrypt
by Karol Babioch 27 Sep '19

27 Sep '19

Hi all, this is just to inform you that we addressed the issues with Let's Encrypt in the openSUSE infrastructure and renewed the certificates (in time), so no outages are to be expected. The certificate was about to expire on Oct 8, and automatic issuance did no longer wore (we were made aware of this by Thorsten Bro in time). For - as to now - unclear reasons, "kinit" was missing on the machine responsible for this (crtmgr.infra.opensuse.org) Kerberos is needed in some script to update the DNS records needed for authorization. Most probably this happened due to an upgrade, and the one doing the upgrade, didn't realize right away, since it takes a while until the problem manifests itself. Simply installing krb5-client, did the trick, so this should work automatically again for the future now. Best regards, Karol Babioch

5 5

[heroes] Re: [opensuse] Can't Update
by Ish Sookun 26 Sep '19

26 Sep '19

Dear openSUSE Heroes, The status page [1] should reflect the current incident, otherwise users might be prompted to report it to admin(a)opensuse.org while it's been already tracked on an existing ticket. Also, please mention the ticket number in the status updates. All the best. Ish Sookun [1] https://status.opensuse.org/ On 9/26/19 5:39 AM, Felix Miata wrote: > Mark Misulich composed on 2019-09-25 21:30 (UTC-0400): > >> I am to be locked out of updates, what has happened to openSuse? > > Looks like everybody is: > > https://progress.opensuse.org/issues/57383 > > If you need to update immediately you can switch URLs of your repos to use any > specific mirror not suffering this failure. > -- To unsubscribe, e-mail: heroes+unsubscribe(a)opensuse.org To contact the owner, e-mail: heroes+owner(a)opensuse.org

1 0

[heroes] Results from meeting about openSUSE infrastructure
by Karol Babioch 25 Sep '19

25 Sep '19

Hi all, today in the evening there was a meeting to discuss the current state of the openSUSE infrastructure. It was "initiated" by the openSUSE heroes and was meant to sync on current challenges and find ways to improve collaboration between SUSE and the openSUSE heroes. We've taken some notes during this meeting and would like to share them with you publicly. Its only a plain text dump and not very well formatted (it is structured, though). You'll find the original Etherpad here [1]. We agreed upon on some action items, so we will take small steps towards a better openSUSE infrastructure. Obviously there is still a lot of work left to do, and we couldn't solve all topics being discussed. Further meetings are planned in the future. Feel free to ask for more details, etc.. Also some of this might be discussed in the next heroes meeting (on Oct 1). Best regards, Karol Babioch --- Topics - Bare metal access - Bugzilla and services provided by MF IT - Available ressources to get out of firefighting mode - login - GDPR -- data processing catalogue and DP statements - [Responsibilities: EngInfra vs. heroes, reality vs expectations] Attendees - Christian Boltz - Per Jessen - Kurt Garloff - Martin Caj - Ricardo Klein - Karol Babioch Bare Metal Access Current issue: Shared infrastructure for openSUSE and SUSE assets Cannot provide access to community (non employees) with current mode of operation Split infrastructure (openSUSE vs. SUSE) Self-service infrastructure (Cloud, etc.) Prohibitive cost (for compute intese workloads)? Rough estimates: 4k$/m (AWS) - https://calculator.s3.amazonaws.com/index.html#key=calc-4BB503BF-BDAE-4EDE-… Concerns about service levels -- probably not a real issue Open-source platform would be better -- OTC / OVH / CityNetwork (all european public OpenStack Cloud providers)? Keep Core services in SUSE? Two places may create challenges Setup internal SUSE OpenStack Cloud env hosting an openSUSE tenant (alongside other tenants)? Best solution <= VISION Would need semi-public access to API/Dashboard and Floating IPs Also needs storage system (ideally dedicated for this cloud) Might become easier with external sponsorships in an independent openSUSE Foundation -- but may take another year? Also needs SUSE operations manpower ... Unrelated: Not enough manpower to maintain the VMs either Not enough heroes with enough time Available resources to get out of firefighting mode Two backfill positions posted (Theo, Thorsten) get more resources within the engineering infrastructure team Prague is very difficult slightly better now after summer Recruiting through personal connections Team now shares the load instead of having dedicated persons that are the only ones with knowledge and access Ricardo joined team recently, getting up to speed, very eager to help openSUSE CaaS Platform Fixing is WIP Commitment to keep supporting from CaaS team Currently used for learning, testing not really for providing production level services Attracting new heroes requires advanced technology to play with? Darix and Lars have built a lot of infra, not currently contributing any more personal issue may be resolved by involved persons no longer being involved? AI Karol: Speak to the both of them More commitment (in terms of FTEs) from SUSE? Also in other teams (not only EngInfra?) Bugzilla and services provided by MF IT What will the login provider be in the future? Novell eDirectory will be shut down - solution will be needed by then (otherwise SUSE goes out of business ;-)) Currently SUSE is evaluating different identity management solutions internally (for SUSE's own needs) No final decisions has been made Needs to happen within the next couple of weeks openSUSE will be affected by whatever happens to the "customer" tree DNS provided by FreeIPA Transition from MF-IT to ACN on AWS should not change the approach (zone-transfer from FreeIPA) bugzilla will be migrated to SUSE via Lift&Shift SUSE-internal move towards JIRA+Confluence - unsure whether at some point openSUSE needs to consider this AI: EngInfra -> Let openSUSE board / heroes / community know once there is a decision on which system will be used GDPR -- data processing catalogue and DP statements We are processing PII (Personally Identifiable Information) -- SUSE is the data holder for openSUSE We lack a good overview of what is handled where and how Occasional requests cause a lot of manual fiddling We need to look at this service by service to document this Create a template once Fill it service by service Ensure that this is done when establishing new services Best knowledge is in handover docs from Theo + Thorsten (AI: EngInfra) Can be shared (-> put this on openSUSE heroes wiki) Start documentation process (AI: EngInfra) [Responsibilities: EngInfra vs. heroes, reality vs expectations] EngInfra team cannot meet all expectations (understaffed, many other responsibilities) Board / Gerald should re-visit SLA with SUSE (it is outdated and does not reflect reality) - refresh Lots of VMs / services are not well maintained VMs to be de-commissioned AI: Christian will double-check and send us a list / assign tickets to us Backup Lack of proper backup & restore strategy, needs to be worked out Situation of snapshots of VMs on storage backend is unclear (need to verify) [AI: EngInfra] Heroes meeting event No specific plans for an upcoming heroes meeting event AI: Karol will ask some questions to figure out whether this might be an option (budget, facilities, etc. pp.)

1 0