14:02:11 <bstinson> #startmeeting CBS/Infra
14:02:11 <centbot> Meeting started Mon Sep 25 14:02:11 2017 UTC.  The chair is bstinson. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:02:11 <centbot> Useful Commands: #action #agreed #help #info #idea #link #topic.
14:02:22 <bstinson> #chair alphacc Arrfab kbsingh
14:02:22 <centbot> Current chairs: Arrfab alphacc bstinson kbsingh
14:02:25 <bstinson> #topic Agenda
14:02:30 <bstinson> #info Topic: Status Updates
14:02:36 <bstinson> #info Topic: Account Requests
14:02:51 <bstinson> #info Topic: Moving ppc64 builders to RDU
14:02:55 <bstinson> #info Topic: CI
14:02:59 <bstinson> #info Topic: Open Floor
14:03:04 <bstinson> #topic Status Updates
14:03:14 <bstinson> hi folks, anyone around for the CBS meeting?
14:03:20 <Arrfab> bstinson: me ! :-)
14:03:32 <kbsingh> me too
14:03:56 <gbraad_> I saw the certificate for login is invalid? Or is this only on my end
14:04:02 <gbraad_> https://cbs.centos.org/koji/login
14:04:20 <gbraad_> oh, sorry... meeting
14:04:28 <bstinson> gbraad_: we don't support logging in via the web interface
14:04:30 <kbsingh> we should remove that login option entirely
14:04:36 <bstinson> also it fits, because this is the CBS meeting
14:05:03 <Arrfab> gbraad_: it works, but nobody uses it .. as there is nothing to be seen through web ui
14:05:11 <Arrfab> gbraad_: so curious why you'd want to use it
14:05:25 <gbraad_> ah...
14:05:39 <gbraad_> I never used it, but wondered about it.
14:06:05 <Arrfab> gbraad_: reason why we never wrote on the wiki page the steps to take your key+cert in a .p12 bundle to then import it in your browser, etc
14:06:40 <gbraad_> have something that I want to publish using CBS, as we consume this in the minishift ISO. currently it is done as an RPM pushed to a http hoster
14:07:13 <gbraad_> Will follow up on this after your meeting.
14:07:28 <gbraad_> so, maybe I need an account ?
14:07:41 <gbraad_> 2nd topic
14:09:17 <bstinson> gbraad_: we can work on that, first thing would be to talk to the SIG. i think the PaaS SIG has some machinery to add packages and stuff
14:10:08 <bstinson> by way of a status update, the Software Collections folks are in the middle of a release. ci.c.o is churning through tests now
14:10:13 <gbraad_> OK.
14:10:42 <bstinson> i'm finishing up with the github API limit thing, but i need to schedule a saferestart when things quiet down a bit
14:11:06 <bstinson> other status updates for today?
14:13:01 <Arrfab> #info working with puiterwijk to have people setting themselves as "inactive" (or admin setting up $user as "disabled") to automatically revoke issued x509 certs
14:13:50 <bstinson> great
14:14:45 <Arrfab> bstinson: if nothing is available directly, I'll write a workaround in the weekly cert reminder script to check $user status
14:15:33 <bstinson> cool
14:15:48 <bstinson> #topic Account Requests
14:16:20 <bstinson> #info CI: 3 accounts pending related to the work in the fedora-atomic CI pipeline, they should be cleared out today
14:17:18 <bstinson> kbsingh: how's ACO?
14:17:25 <bstinson> since we were just talking about it :)
14:17:31 <kbsingh> its good, no new accounts etc
14:17:46 <kbsingh> we still have the issue with lots of people with expired certs not logging in / renewing anymore
14:17:56 <ndevos> bstinson: I've approved two accounts for nfs-ganesha CI today (they did not create a ACO account, I think)
14:18:09 <bstinson> ndevos: is that in a bug?
14:18:37 <bstinson> ndevos: never mind, i see it now
14:18:44 <bstinson> i'll take that one too
14:18:48 <ndevos> ah, 13901 and 13902
14:19:23 <Arrfab> kbsingh: what I mentioned earlier : working with puiterwijk to get that fixed at the FAS code itself
14:19:55 <Arrfab> depending on availability, I can enhance our custom weekly reminder script to check status (so query ACO through api) for each user with expired cert
14:20:46 <Arrfab> kbsingh: do we still also consider that someone who hasn't renewed his cert should be disabled ? can you remind me the policy (so that it can be written down on the wiki and be used to refer people to)
14:21:29 <kbsingh> Arrfab: yeah, i think if someone does not come back for XX months, we should deactivate etc / lock as needed
14:22:26 <Arrfab> kbsingh: that's the "xx months" I'd like to know so that we can write that somewhere :-)
14:22:30 <Arrfab> bstinson: opinions ^ ?
14:22:43 <kbsingh> 4 months
14:23:01 <bstinson> we agreed on 6 months, the other 4 times we talked about this
14:23:03 <bstinson> but i'm ok with 4
14:24:54 <kbsingh> i would be tempted to say even lesser at this point :/
14:25:09 <kbsingh> the main issue is that people who are doing things, typically react to the notifications they already get from the service
14:25:27 <kbsingh> from when it falls off, and i get notifications - very few, if anyone has actually come back and renewed after
14:26:30 <bstinson> so the proposal currently on the table is 4 months
14:26:45 <bstinson> are you nacking that? or should we move forward?
14:27:05 <kbsingh> lets move fwd
14:27:26 <bstinson> ok, if we find that 4 months is a really long time we can revisit later. but it's a start at least
14:28:40 <bstinson> Arrfab: any objection to 4 months?
14:33:13 <bstinson> ok, we'll document that in the wiki
14:33:33 <bstinson> #topic Moving ppc64{,le} builders to RDU
14:34:15 <bstinson> Arrfab started on this work this morning, not sure we can commit to a timeline yet
14:34:47 <bstinson> but this will let us consolidate some of the builders in CBS in the same DC as the rest of koji
14:34:54 <bstinson> very helpful for mirroring and such
14:35:46 <kbsingh> +1
14:36:32 <kbsingh> there are a couple of hacks around the timeing matching on the sign side as well ( where we allow for ppc content to be a day +/- from srpm to accept ) - i suspect we can drop that once this consolidates
14:38:52 <bstinson> #topic CI
14:38:58 <bstinson> any folks here with CI questions?
14:40:11 <gbraad_> Yes, I notice this https://ci.centos.org/job/minishift-pr/2084/console
14:40:39 <gbraad_> CICO: Unable to get Node
14:40:59 <gbraad_> this is not meeting worthy
14:41:31 <gbraad_> but I was wondering if there are some issues with the CI in recent days
14:41:44 <bstinson> gbraad_: be sure you're not hitting the rate limit: more than 5 machines requested in 10 minutes
14:42:29 <gbraad_> should not be... but I'll check
14:42:39 <gbraad_> anyways, move fwd
14:42:57 <sharkcz> what's the progress on the fedora alt-arch CI? anything new about using remote slaves (eg. for s390x)?
14:43:30 <sharkcz> https://bugs.centos.org/view.php?id=13772
14:43:38 * Arrfab is interested in the question itself as never heard of that
14:43:45 <bstinson> sharkcz: check your email shortly
14:43:56 <sharkcz> bstinson: thx :-)
14:44:41 <Arrfab> sharkcz: you're aware that we have no s390x node, right ?
14:44:44 <bstinson> we don't have any discussions ready to start talking about remote slaves yet, mostly talking to folks that we know around the multiarch space
14:45:07 <sharkcz> Arrfab: yes, but I should be able to provide some
14:46:13 <Arrfab> sharkcz: ok so your goal is to test fedora on centos ci, but obviously not centos itself (as it doesn't exist) (just trying to understand)
14:46:32 <Arrfab> or I should probably remain silent and not ask if such info is meant to be private and not discussed publicly :-)
14:46:51 <Arrfab> (in any case then not even asked here too then ....)
14:47:26 <sharkcz> Arrfab: nothing private in my topic, and yes, we intend to use centos ci for testing fedora stuff
14:47:40 <bstinson> Arrfab: we don't know the whole scope of what folks want from s390 yet, but openshift is interested, fedora is interested, etc.
14:48:28 <bstinson> still trying to see how much of that makes sense for us
14:49:26 <bstinson> other topics in CI today?
14:49:53 <kbsingh> we should start seeing some movement on the duffy2 stuff in the coming days as well
14:50:43 <bstinson> #topic Open Floor
14:51:57 <Arrfab> bstinson: back to the ppc builders for cbs/koji : just waiting on network team to configure ToR switch, and then I'll deploy the builders. Plan is to disable existing hosts, then enable the new ones
14:52:13 <bstinson> cool
14:52:32 <Arrfab> should be transparent, and fast as all koji builders are configured the same way by puppet
14:53:51 <bstinson> anything else for today's meeting?
14:55:20 <bstinson> if not we can close in 1 minute
14:57:01 <bstinson> thanks all!
14:57:04 <bstinson> #endmeeting