openSUSE admin

In order for reply-by-email to work, it needs some configuration: https://docs.pagure.org/pagure/install_pagure_milter.html#configure-your-system

That also includes the MTA being able to receive mail, which we don't have configured and I don't know how to do...

Pharaoh_Atem wrote:

That also includes the MTA being able to receive mail, which we don't have configured and I don't know how to do...

I'll be happy to help with that. Usually this sort of thing means setting up a dedicated transport in postfix, to feed the mail to a script for processing. I would suggest we route the mails through mx12, and then forward them internally. That way pagure doesn't have to do much.

pagure01: I have enabled it to receive mails internally.
mx12: I have routed @code.o.o to pagure01.
We need an MX record for code.o.o to point to mx12 - I'm not sure if I have access or not.

pjessen wrote:

pjessen wrote:

We need an MX record for code.o.o to point to mx12 - I'm not sure if I have access or not.

Christian set that up yesterday, and I have now also amended /etc/postfix/main.cf, adding 'code.opensuse.org' to relay_domains.
I have also amended the firewall on pagure01 to accept internal smtp traffic.

I forgot to mention, of course pagure01 will so far only refuse any incoming mails, because it does not know what to do with them.
I'll have a look at setting up the milter, but I have no idea how to test it.

Okay, this seems fairly straight forward - there is a pagure_milter which provides a socket that postfix can talk to.
I tried enabling and starting it, but running as postfix:postfix, it cannot read /etc/pagure/pagure.cfg - having /etc/pagure/pagure.cfg world-readable is discussed a bit here: https://pagure.io/pagure/issue/1053
Config instructions: https://docs.pagure.org/pagure/install_pagure_milter.html

I guess this is ongoing:

host pagure01.infra.opensuse.org[192.168.47.84] said: 554 5.7.1
reply+193d15a42272cda44e6aa54c12f8a3ae7f10bf854090b66d978e972dc846c437427260c5305bcd00f1b3f507728eab022afeb96822bc03fc4068df45b1300562@code.opensuse.org:
Relay access denied (in reply to RCPT TO command)

I was going to change the group of /etc/pagure/pagure.cfg from 'git' to 'postfix', but I think that would likely cause an issue for pagure. The alternative might be to make /etc/pagure/pagure.cfg world readable, does anyone see an issue in that?

You could also set it up in salt so that we have 2 identical copies of the configuration in different places, one with permissions for one and the other for other

pjessen wrote:

pjessen wrote:

I have now also amended /etc/postfix/main.cf, adding 'code.opensuse.org' to relay_domains.

I guess this was overwritten by a highstate ?

As mails to code.o.o are to be received and processed locally, for starters, we ought to have mydestination = code.opensuse.org I think. I have amended the postfix config.
Next there is the issue of comment 8 and comment 11 above - about making /etc/pagure/pagure.cfg world readable. It seems to me this whole setup needs some TLC and someone who cares about it. I am very happy to lend a hand when it comes to the mail setup.