openSUSE Project Management Tool: Issueshttps://progress.opensuse.org/https://progress.opensuse.org/themes/openSUSE/favicon/favicon.ico?15829177842024-03-04T08:25:17ZopenSUSE Project Management Tool
Redmine openSUSE admin - tickets #156523 (New): Mail from calendar.i.o.o not deliveredhttps://progress.opensuse.org/issues/1565232024-03-04T08:25:17Zhellcphel@lcp.world
<p>There was a mail sent yesterday around 13:00 UTC from calendar.i.o.o that hasn't arrived to the buildservice mailing list. As far as I can tell the application did send it over to localhost:25.</p>
openSUSE admin - tickets #152721 (Resolved): OpenID Connect setup for Calendarhttps://progress.opensuse.org/issues/1527212023-12-17T21:00:26Zhellcphel@lcp.world
<p>Calendar will need an openidc setup in <a href="https://gitlab.infra.opensuse.org/infra/salt/-/merge_requests/1177" class="external">https://gitlab.infra.opensuse.org/infra/salt/-/merge_requests/1177</a>. You can modify that MR, or just drop a file somewhere in the calendar.i.o.o, either option works</p>
openSUSE admin - tickets #150905 (Resolved): Give access to https://api.github.com and rubygems.o...https://progress.opensuse.org/issues/1509052023-11-15T09:58:12Zhellcphel@lcp.world
<p>Seems that the review app lost access to those services, which are required for it to function.</p>
openSUSE admin - tickets #139256 (Resolved): New machine for calendar softwarehttps://progress.opensuse.org/issues/1392562023-11-09T20:12:28Zhellcphel@lcp.world
<p>So for this hackweek, I thought I would write another application that we can use in our infrastructure. Following <a href="https://hackweek.opensuse.org/23/projects/basic-calendar-interface-for-upcomming-opensuse-meetings" class="external">https://hackweek.opensuse.org/23/projects/basic-calendar-interface-for-upcomming-opensuse-meetings</a>, I do have a thing to deploy now, so it would be nice to do so.</p>
<p>I don't expect the requirements to be high, so I would take the baseline 10GB of storage, two cores and 2GB of ram, and hopefully that doesn't evolve into more.</p>
openSUSE admin - tickets #136271 (Feedback): Most recent Tumbleweed image missing from mirrorshttps://progress.opensuse.org/issues/1362712023-09-21T16:30:08Zhellcphel@lcp.world
<p>There's a very fun issue that absolutely none of the mirrors have the most recent tumbleweed net image for some reason so trying to download it from get.opensuse.org fails. any link I go into at <a href="https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-NET-x86_64-Snapshot20230917-Media.iso?mirrorlist" class="external">https://download.opensuse.org/tumbleweed/iso/openSUSE-Tumbleweed-NET-x86_64-Snapshot20230917-Media.iso?mirrorlist</a> fails, and the only way I was able to actually download it was with downloadcontent</p>
openSUSE admin - communication #135098 (Resolved): Synapse trying to access /etc/resolv.conf ends...https://progress.opensuse.org/issues/1350982023-09-03T22:25:25Zhellcphel@lcp.world
<p>Looking at <code>/var/log/matrix-synapse/homeserver.log</code>, I can see that synapse keeps logging <code>Failed to send request: PermissionError: [Errno 13] Permission denied: b'/etc/resolv.conf'</code>. Because of this the federation is broken. I am not really sure why it's trying to do anything with that file either, but this needs to be figured out somehow.</p>
openSUSE admin - tickets #130297 (Rejected): Plan for migrating the primary freeipa to freeipa2https://progress.opensuse.org/issues/1302972023-06-02T18:10:01Zhellcphel@lcp.world
<p>We don't really want to rely on the old freeipa machine forever, so let's plan the migration path.</p>
<p><a href="https://www.freeipa.org/page/Howto/Migration" class="external">https://www.freeipa.org/page/Howto/Migration</a></p>
<p>Since this <em>can</em> go horribly wrong, it would be nice to have somebody who has more access as a backup in order to restore the functionality of the vpn.</p>
openSUSE admin - tickets #125324 (Resolved): Matrix fails to federate due to lack of memoryhttps://progress.opensuse.org/issues/1253242023-03-02T20:41:22Zhellcphel@lcp.world
<p>It looks like all of the current federation requests fail because the machine can't allocate any more memory. We need more memory. Would it be possible to double the current memory to 16GB?</p>
openSUSE admin - tickets #122449 (New): Ipsilon generates new uid for existing usershttps://progress.opensuse.org/issues/1224492022-12-25T18:22:56Zhellcphel@lcp.world
<p>It seems that under some condition that I don't fully understand, ipsilon generates new uid for existing users, causing them to either be unable to log in, or create a new account with a new username on some of our apps. That causes some matrix profiles to be duplicated (knurpht and knurpht1:opensuse.org for example) and some discourse users to be unable to log in (ticket #122446)</p>
<p>On matrix side, you should be able to just run the query in <code>matrix</code> database on mirrordb to see the contents of the <code>user_external_ids</code> table, it shows the associations between oidc and the external ids, users with 1:opensuse.org at the end are the most common victims of this, however some accounts do have 1 at the end of usernames anyway, so this is not always a sure thing. The uids should be the same every time for individual users, but they demonstrably aren't always.</p>
openSUSE admin - tickets #122254 (New): Migrate away from login proxies to SSOhttps://progress.opensuse.org/issues/1222542022-12-20T20:31:20Zhellcphel@lcp.world
<p>It would be nice to slowly migrate over to using SSO instead of login proxies for logging into our infrastructure. The list below covers all of the services that still use login proxies. Some of them aren't under our jurisdiction, some may not even have login capabilities, but they still are behind login proxies, because why not (they shouldn't be, get them out of there).</p>
openSUSE admin - tickets #121921 (Resolved): Set up domain for miniohttps://progress.opensuse.org/issues/1219212022-12-13T22:26:58Zhellcphel@lcp.world
<p>So minio is now kind of working, and I think I decided on <code>s3.opensuse-project.net</code> as the domain for it (that's what is used in <a href="https://gitlab.infra.opensuse.org/infra/salt/-/merge_requests/595" class="external">https://gitlab.infra.opensuse.org/infra/salt/-/merge_requests/595</a>, as we want to avoid potential xss issues), we need to set things up for that domain to work properly.</p>
<p>We need the following:</p>
<ul>
<li>dns setup</li>
<li>ssl certificate</li>
<li>proxy setup</li>
</ul>
openSUSE admin - tickets #121795 (Resolved): OIDC metadata for paste-test.opensuse.orghttps://progress.opensuse.org/issues/1217952022-12-10T19:28:45Zhellcphel@lcp.world
<p>Will be switched to paste.opensuse.org in the future, but for now paste-test will be the location. The callback will be under <code>/auth/openid_connect/callback</code></p>
openSUSE admin - tickets #121714 (Resolved): Create vms for paste and miniohttps://progress.opensuse.org/issues/1217142022-12-08T17:42:36Zhellcphel@lcp.world
<p>I want to deploy a replacement for susepaste, so I will need vms for that purpose. One of them would be just for the rails application, and the other one would be for storage (so will need more storage). I want to deploy minio there, in a way that would allow us to reuse that setup for any other s3 based software we may need in the future.</p>
openSUSE admin - tickets #120133 (Resolved): Discourse migration of the forumshttps://progress.opensuse.org/issues/1201332022-11-08T17:15:57Zhellcphel@lcp.world
<p>Some notes on the migration so that we have an easier time doing it</p>
openSUSE admin - tickets #119392 (Resolved): Set up identification2.infra.opensuse.orghttps://progress.opensuse.org/issues/1193922022-10-25T19:03:38Zhellcphel@lcp.world
<p>The same specs as identification.infra.opensuse.org</p>