Box-Admins January 2013

box-admins@lists.squeakfoundation.org

8 participants
18 discussions

Private keys
by Frank Shearar 09 Jan '13

09 Jan '13

Hi, I need to somehow get private keys for the angband and norst nodes securely onto squeakci.org. My preference is to use scp, but that requires shell access. I don't think that, in general, we want shell access for teamjenkins. Ideas on how to proceed? (I want to set up the two nodes to have Jenkins ssh to them, because that might be easier than hacking on slaves authenticating to the server.) frank

4 17

box4 apache or sudo request
by Chris Cunnington 09 Jan '13

09 Jan '13

Hi Ken, I'd like to get Apache on box4 for deploying squeak.org. I figure I'll use Apache to deploy it behind one of the domains I have (i.e. 16r.ca) to get started, and then when it's ready we can switch it over to squeak.org. I don't think I have sudo on box4, so I cannot install anything. If you could install Apache or give me sudo, that would be great. Thanks, Chris

3 3

Jenkins vulnerability
by Frank Shearar 09 Jan '13

09 Jan '13

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013… There's an action-to-be-taken message in the management console for Jenkins. I haven't pushed the button for it yet (mainly because I'm not sure it's me who should be deciding this). frank

2 7

box4 access request
by Chris Cunnington 08 Jan '13

08 Jan '13

I'm going to shut down the developing squeak.org image on box3. We have a division of tasks for boxes 3 and 4, so I'd like to resume developing it on its eventual home, box4. Can I please get access to box4? Thanks, Chris

2 2

People were excited about 4.4 it seems
by Bert Freudenberg 07 Jan '13

07 Jan '13

We served up to 26 GB/h. See below, we only got these two messages, so traffic was below 10 GB/h otherwise. The times are UTC+1, so I guess this was morning on the US East coast and West Coast, respectively? - Bert - Begin forwarded message: > From: noreply(a)hetzner.de > Subject: Attention: exceeding of traffic-report-limit > Date: 4. Januar 2013 04:35:08 MEZ > To: accounting(a)sfconservancy.org, bert(a)freudenbergs.de > > Dear Mr. Bradley Kuhn, > > Are you looking for a better control of your data transfer? - We give you a hand by sending this warning message! > > The amount of transferred data has exceeded the limit: > > hourly: (3:00 - 04:00) > > IP / Subnet Server name Limit (MB) Traffic (MB) > 85.10.195.197 squeak.org 10000 11237.9627 > We have sent this automated email as a warning. If you would like to change the limits at which this warning email is sent or you no longer wish to receive these emails, you can change your preferences under the "IPs" tab of your server in Robot: > > https://robot.your-server.de > Please note that the traffic value mentioned above is unattached from your free traffic volume! > > This is an automatically generated email. If you have any questions, please do not reply directly via the "reply" function of your email program but instead please contact our support team by sending a verified support request via Robot: https://robot.your-server.de Alternatively, you can send an email directly to trafficreport(a)hetzner.de > > Yours sincerely > > Hetzner Online AG Begin forwarded message: > From: noreply(a)hetzner.de > Subject: Attention: exceeding of traffic-report-limit > Date: 4. Januar 2013 02:37:22 MEZ > To: accounting(a)sfconservancy.org, bert(a)freudenbergs.de > > Dear Mr. Bradley Kuhn, > > Are you looking for a better control of your data transfer? - We give you a hand by sending this warning message! > > The amount of transferred data has exceeded the limit: > > hourly: (1:00 - 02:00) > > IP / Subnet Server name Limit (MB) Traffic (MB) > 85.10.195.197 squeak.org 10000 26374.096 > We have sent this automated email as a warning. If you would like to change the limits at which this warning email is sent or you no longer wish to receive these emails, you can change your preferences under the "IPs" tab of your server in Robot: > > https://robot.your-server.de > Please note that the traffic value mentioned above is unattached from your free traffic volume! > > This is an automatically generated email. If you have any questions, please do not reply directly via the "reply" function of your email program but instead please contact our support team by sending a verified support request via Robot: https://robot.your-server.de Alternatively, you can send an email directly to trafficreport(a)hetzner.de > > Yours sincerely > > Hetzner Online AG

1 0

CI build slaves
by Frank Shearar 06 Jan '13

06 Jan '13

Hi Chris Cunnington and fellow box-admins, I'm ready to report on my distributed build slave experiment, and wondered if you'd take a look at my proposed announcement before I hit the send button. Usually I'd just send these kinds of things, but since I _use_ squeakci but don't _own_ it (in the responsibility sense), I thought I'd check here first for things like tone, and whether we'd want to allow people to help out in the below fashion. In particular, there are possible security concerns, mostly on the client side, but possibly (in the sense that I don't know) on the server side. So: <proposal> Hi, Our community have very few dedicated official resources: running www.squeak.org and so on either takes cash or donations. The new CI work is rather heavy CPU wise, and limited to (CentOS) Linux builds only. However, Jenkins supports the use of headless build slaves that connect TO a Jenkins master, permitting these slaves to run while still behind NATs. I've been experimenting these past few days investigating using build slaves. I've set up jobs for building FreeBSD VMs (both broken, because FreeBSD support does lag behind the other platforms) and for running Trunk tests on OS X. You can see that we have some (known) network issues on OS X here: http://squeakci.org/job/SqueakTrunk-OSX/9/testReport/? It's pretty easy to run a build slave. If you wish to donate some computing time, ask here and we can create a node for you, with a (unique) name of your choice. Once that's done, you need to * have (a recent version of) Java installed * download the slave.jar from http://squeakci.org/jnlpJars/slave.jar * run the jar somehow. On a Unix machine that'll be $ java -jar slave.jar -jnlpUrl http://squeakci.org/computer/${SLAVENAME}/slave-agent.jnlp What are the downsides? Jenkins masters can send arbitrary Java classes to a slave for running. That means that if squeakci.org's Jenkins was compromised, your build slave could potentially be compromised. You will want to, at the minimum, run the slave under a dedicated user with low privileges. You can find more reading material here: https://wiki.jenkins-ci.org/display/JENKINS/Distributed+builds </proposal> frank

2 1

Release directory protocol
by Frank Shearar 03 Jan '13

03 Jan '13

Someone's asked me to remove the old release candidates for 4.4, which seems like a good idea - the reporter said it looked confusing. So I've deleted all files in /var/www/files/4.4/ except for Squeak4.4-12327.zip. Just in case you're wondering where those files have gone. I'm happy with the idea that subsequent 4.4 releases go in that directory (and stay there), but a periodic cleanup of alpha or RC images seems sensible? frank

3 4

NTP?
by Frank Shearar 02 Jan '13

02 Jan '13

Does squeakci.org have NTP installed? If so, I don't think it's working: http://squeakci.org/computer/ shows my machine (which is synched to a stratum 1 machine connected to GPS) 4m 38s ahead. frank

2 6

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Box-Admins January 2013