openSUSE admin

From https://etherpad.opensuse.org/p/heroes202407:

2024-07-04 heroes meeting

Attendees: Christian, karthik, Doug, Bernhard, Georg, Gertjan, Carlos

GDPR:

• clarification: when SUSE files a GDPR ticket with the heroes to remove/anomymise data, this implies that the IDP account is already disabled
• still some open questions, see https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/GDPR (non-public)
• Doug to inquire with SUSE (again)

Bugzilla and IDP support:

• no resolution yet

Status reports:

• redis to valkey migration is broken, hotfix "zypper al redis" applied during oSC
  • patch https://build.opensuse.org/request/show/1183786 merged, needs testing and further development of https://github.com/openSUSE/salt-formulas/pull/178
• mailing list spam: we'll disable login with google, github etc., and only allow openSUSE accounts. Will be announced a week or two before we actually do this so that people can prepare and get an openSUSE account - or a mail client ;-)
  • https://progress.opensuse.org/issues/162650
• update to 15.6 WIP with some issues - https://progress.opensuse.org/issues/162326
  • some machines need a PAM fix (touch /etc/pam.d/common-auth-pc) before upgrade, otherwise login is not possible
    • https://bugzilla.opensuse.org/show_bug.cgi?id=1226639
  • rsync client --chown no longer works, files on server get owned by root:root, breaking salt-master
    • https://bugzilla.opensuse.org/show_bug.cgi?id=1226656
  • on falkor*, bootloader of hypervisor broke on update, grub maintainer asked for testing a possible solution (which is a bit annoying - if boot breaks again, fixing it needs a live system etc.)
    • https://bugzilla.opensuse.org/show_bug.cgi?id=1226497
  • on stonehat, libvirt network autostart no longer working (virtual interface is not created, requires virsh net-destroy && virsh net-start), causing VMs to not start automatically after boot
    • not yet further investigated / bug report?
• HAProxy health checks flapping, seems related to TCP retransmits in the kernel
  • https://progress.opensuse.org/issues/161774
• automate notification of heroes that didn't login for 180 days, and also auto-open a ticket if they didn't login for 210 days (and didn't notify us by mail etc. they want to keep their account) - but actually disabling an account should be done manually to prevent "funny accidents" if the script goes wild
  • https://progress.opensuse.org/issues/160508
• regression from (attempted) Etherpad update
  • https://progress.opensuse.org/issues/163319