Participants
1. Norbert Thiebaud
2. Christian Lohmaier
3. Guilhem Moulin
Misc.
+ upcoming migrations/downtimes: pootle Nov. 19-20
+ manitu network issues/DoS Attack unplanned downtimes/connectivity
issues in the last days (nothing we could do about) during that
+ monitoring host lost VPN connection/got on the blacklist during that
→ should whitelist it/made it time out earlier in gluster (to avoid
hitting the "only one instance" config limit
+ also deneb (kvm in Switzerland) has ping issues / spams tdf
monitoring telegram channel with loss, recovery, loss, recovery, …
→ Mac mini lying unused in Switzerland, could be used by a dev
+ flood of mails to admin-alias/list still is a nuisance
→ need to have one where one is expected to read every mail (Norbert)
→ TODO: use a separate alias as envelope sender for automatic emails
→ graylog or similar to weed out the uninteresting stuff or separate
"attention" list
Libvirt/QEMU
+ want to try out qemu with native gluster support - need to free one
hypervisor to do that (Guilhem)
+ also pinning of VMs for better perf/"guaranteed" CPU, have non-prod
ones "floating"
LDAP/SSO sketch on vm135
+ ask users their username/password on each service
alternative: ask for email and verify that email using a cryptographic token
+ store the hashes in LDAP using the service's custom password hashing
method
+ at the begining of the transition, update the hash in the service's
own database
+ not just a technical issue, social engineering is what's gonna take
the longest time (notices, reminders, blog posts, wiki pages, etc.)
+ basic frontend should be ready by the end of next week
+ use Bugzilla's test instance (vm144) to check auth
Closed issues:
+ graylog off berta → now on miranda
TODOs (items that don't fit into Redmine):
+ document in infra-doc the 'proper way' to configure a debian's
etc/network/interfaces et al. (2 interfaces 1 public one private
with routing and dns).. and sysctl to prevent forwarding between
public and private?
+ ipv6 firewalling?
+ modify tkmon to show hostnames in use, not only vmXXX
+ use salt to check host state
+ gluster checks
https://www.gluster.org/pipermail/gluster-users/2014-June/017819.html
+ gluster mounts on hypervirsors won't work after boot
+ migration of the libreofficeforum, restarting under new platform.
+ remove tb3, tb63, tb64, tb65, vm6 from dns
+ askbot daily dumps by evgeny, clarify (#2074, #2112)
+ check georeplication berta → antares
+ graylog upgrade
+ UFW Hosts:
- kermit.documentfoundation.org → alles mögliche ???? all is good ?
- devcentral.libreoffice.org
- bilbo2
- pumbaa
+ commit changes to tdfvms-data, including adding modification to
volumes.txt to reflect the new gluster volumes
+ stabilize load balance of hypervisors and record these in
tdfvms-data
+ minimize the noise level on infra ML…
--
Guilhem.
--
To unsubscribe e-mail to: [email protected]
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/website/
All messages sent to this list will be publicly archived and cannot be deleted
