- Arch-devops - lists.archlinux.org

[arch-devops] Kanboard for devops and other arch projects
by Florian Pritz 07 Mar '17

07 Mar '17

Hi, I've set up kanboard[1] for us[2]. Currently there is only one board for the infrastructure and it has public viewing enabled[3]. Anyone with an account is can create their own personal boards and I can create group boards as well. If you (dev/TU/support staff) want an account, please send me a mail or ping me on IRC. In case you wonder: If multiple users edit a board at the same time it is automatically updated every 10 seconds for the others. [1] https://kanboard.net/features [2] https://kanboard.archlinux.org/ [3] https://kanboard.archlinux.org/public/board/7dd7510424e4229247e8e0b90bf43e1… Florian

2 2

[arch-devops] Archweb migration
by Giancarlo Razzolini 01 Jan '17

01 Jan '17

Hi All, We are in the process of moving archweb from gudrun to apollo. The site already is running from there but, unfortunately, there was a small window of time where changes done could have been lost. This does apply to logins, passwords, signoff's and such. From a quick look at gudrun's log I could not find anyone that should have lost anything. The services are being changed as I write this, so packages and mirrors can be outdated for a little bit. If you notice anything strange, please report. Make sure you cleaned your browser's local cache first though. Also, for the devops, running playbooks against orion and apollo should not be done. Some small issues with postgres prevent that. Talk with me or Florian if you need to make changes on these machines. I expect us to fix this issue soon. Cheers, Giancarlo Razzolini

3 3

[arch-devops] New devops member (root access) + access list
by Florian Pritz 27 Nov '16

27 Nov '16

Hi, I'm giving Giancarlo Razzolini root access so he can migrate archweb. He also agreed to continue helping with other devops things in the future. Also here's a list of people that currently have root access: Bartlomiej Piotrowski Jan Alexander Steffens Sven-Hendrik Haase Florian Pritz Sébastien Luttringer Ángel Velásquez Giancarlo Razzolini I've also noticed that Sebastien and Angel don't have vault access right now so they can't deploy using ansible. I'll fix that as well since root access means they can read the deployed files anyways. Florian

1 0

[arch-devops] Shutting down celestia (old pkgbuild)
by Florian Pritz 03 Oct '16

03 Oct '16

Hi, According to Jan, everything has been transferred to the new server (soyuz). I'll be shutting down celestia next weekend. I see some of you have connected to celestia in the last few days. I believe Jan only synced once on Friday so any changes you made since have probably not been migrated to soyuz. Please migrate those things yourself. I'll obviously create a backup when I shut the machine down, but access will be more complicated. If you don't use pkgbuild.com as the host for ssh, please update your scripts/aliases to use soyuz instead of celestia. Florian

2 3

[arch-devops] Code complexity survey
by Vard Antinyan 27 Sep '16

27 Sep '16

Dear developers, We have undertaken a task to assess code complexity triggers and generate recommendations for developing understandable code. Our intension is to share the results with you, developers, so everyone can learn the triggers behind complex software. We need your help for rigorous results. My request to you is - if you get 5-10 min. time, would you please consider to answer the questions of this survey on code complexity? https://goo.gl/forms/h9WXZ8VSEw7BUyHg1 You are welcome to learn preliminary results through this link: https://www.facebook.com/SoftwareCodeQuality/photos/?tab=album&album_id=163… The results will be shared in a public webpage and everyone possible will be invited to learn and discuss them. Your knowledge and experience is vital for achieving substantial and generalizable results, and your effort is much appreciated! Sincerely Vard Antinyan PhD candidate in University of Gothenburg, Sweden Tel: 0046317725707

1 0

[arch-devops] Defective hard disk - orion
by Florian Pritz 07 Jul '16

07 Jul '16

Hi, Just a quick note: Orion (repos.archlinux.org) has a defective hard disk that will be replaced soonish. Expect some (hopefully short) downtime. Florian

1 0

[arch-devops] Arch Linux website down
by Florian Pritz 01 Jun '16

01 Jun '16

Hi, We are currently experiencing some technical problems with the webserver for archlinux.org, bugs.archlinux.org, patchwork.archlinux.org. We are working on it, but resolving this problem could take a while. The mailinglists, AUR, wiki and forums are hosted on a different machine and are still available. If you want to download an Arch Linux ISO, you can still do that via our mirrors. If you don't know any mirror URL, you can use this one: https://mirrors.kernel.org/archlinux/iso/ We are sorry for the inconvenience. Florian

1 1

[arch-devops] Making our mailing lists DMARC/DKIM safe (drop subject prefix)
by Florian Pritz 28 May '16

28 May '16

Hi, First some background: DKIM allows a mail server to sign mails similar to GPG, except that the public key is distributed via DNS. DMARC allows a domain to define a policy (do nothing, quarantine or reject) for mails that do not possess a valid DKIM signature (modified content, spam mail without a sig, ..). DKIM signatures sign both, the body and the header of the mail. The header fields that are signed differ between setups, but generally it's at least From, To and Subject. Currently, most/all of our mailing lists prepend the listname to the subject, thus invalidating any DKIM signature. Some lists also add a footer to the body of the message (arch-events, possibly more). I propose that we configure our lists not to alter messages in any way so that existing DKIM signatures remain valid. This would mean that the list name will no longer be in the subject so everyone who currently uses that to filter list traffic would have to switch to using the List-ID header. This is also a much more reliable way to filter list traffic since sometimes mails have multiple tags in the subject if they are sent to multiple lists. Also private messages may still contain the subject tag even if they were never sent via the list. I don't see any benefit in having the listname in the subject since mails are generally filtered into dedicated mailboxes per list anyway. Changing the subject just means that when browsing that mailbox all subjects start with the same useless text. I know multiple lists that have already switched to keeping mails as-is. Among them are the bugtraq and cgit lists as well as some official and third-party dovecot and postfix related lists. If this proposal is accepted by us, I will send it out to all our lists with a 2 week lead time before I start changing anything so that people have a chance to update their filters if necessary. Opinions? PS: I'd prefer to keep discussion on arch-devops(a)lists.archlinux.org. I'm just posting this to arch-dev-public so all devs/TUs are aware of it. Florian

2 2

[arch-devops] Finally fixed DKIM (I hope)
by Florian Pritz 27 May '16

27 May '16

Hi, Turns out mailman was set to deliver mail to an smtpd without milter support enabled so opendkim didn't run and didn't sign any outgoing mails. I've fixed that now so all mails from senders with a DMARC policy should be changed to the list address as the From header and they should be correctly signed by our key. I've also noticed that some DKIM verification software (the thunderbird plugin) stores keys and does not update it's cache. Since the initial key was broken due to nameserver/webui problems, I've set up a new selector for each affected key. Sorry for bloating the zone file, but I think we should keep the old keys in there so that mails with the old selector can still be verified. If anyone notices any more broken DKIM sigs or other weirdness please tell me. Florian

1 0

[arch-devops] gnupg should not be updated on nymeria
by Pierre Schmitz 16 May '16

16 May '16

Hi all, I did not debug this yet, but be aware that updating gnupg to version 2.1.12 on nymeria will break dbscripts. See https://bugs.archlinux.org/task/49302 Greetings, Pierre -- Pierre Schmitz, https://pierre-schmitz.com

2 2