From fungi at yuggoth.org  Sun Jul  5 17:10:35 2020
From: fungi at yuggoth.org (Jeremy Stanley)
Date: Sun, 5 Jul 2020 17:10:35 +0000
Subject: Relinquishing the libra project on PyPI
Message-ID: <20200705171035.g7jhkkzemzckar5a@yuggoth.org>

David, just to confirm our IRC discussion, you'd like us to delete
the https://pypi.org/project/libra/ project from PyPI so someone
else can take over the name? I've also Cc'd the E-mail addresses
listed as "authors" for you and Andrew in the PyPI entry for
completeness. Anyway, if you can reply, I'm happy to assist.
-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: not available
URL: <http://lists.opendev.org/pipermail/service-discuss/attachments/20200705/3d219d3a/attachment.sig>

From shrewsbury.dave at gmail.com  Sun Jul  5 17:12:40 2020
From: shrewsbury.dave at gmail.com (David Shrewsbury)
Date: Sun, 5 Jul 2020 13:12:40 -0400
Subject: Relinquishing the libra project on PyPI
In-Reply-To: <20200705171035.g7jhkkzemzckar5a@yuggoth.org>
References: <20200705171035.g7jhkkzemzckar5a@yuggoth.org>
Message-ID: <CAB91eg74_4cfhM-NEGMr7pCDz_X+HMPQMitDxLODJfbTY9v_OQ@mail.gmail.com>

Yes, please delete it. Thanks!


On Sun, Jul 5, 2020 at 1:10 PM Jeremy Stanley <fungi at yuggoth.org> wrote:

> David, just to confirm our IRC discussion, you'd like us to delete
> the https://pypi.org/project/libra/ project from PyPI so someone
> else can take over the name? I've also Cc'd the E-mail addresses
> listed as "authors" for you and Andrew in the PyPI entry for
> completeness. Anyway, if you can reply, I'm happy to assist.
> --
> Jeremy Stanley
>
-- 
David Shrewsbury (Shrews)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendev.org/pipermail/service-discuss/attachments/20200705/5eb7e2e3/attachment.html>

From fungi at yuggoth.org  Sun Jul  5 17:17:34 2020
From: fungi at yuggoth.org (Jeremy Stanley)
Date: Sun, 5 Jul 2020 17:17:34 +0000
Subject: Relinquishing the libra project on PyPI
In-Reply-To: <CAB91eg74_4cfhM-NEGMr7pCDz_X+HMPQMitDxLODJfbTY9v_OQ@mail.gmail.com>
References: <20200705171035.g7jhkkzemzckar5a@yuggoth.org>
 <CAB91eg74_4cfhM-NEGMr7pCDz_X+HMPQMitDxLODJfbTY9v_OQ@mail.gmail.com>
Message-ID: <20200705171734.jur5vkjz34qs4v5o@yuggoth.org>

On 2020-07-05 13:12:40 -0400 (-0400), David Shrewsbury wrote:
> Yes, please delete it. Thanks!
> 
> On Sun, Jul 5, 2020 at 1:10 PM Jeremy Stanley <fungi at yuggoth.org> wrote:
> 
> > David, just to confirm our IRC discussion, you'd like us to delete
> > the https://pypi.org/project/libra/ project from PyPI so someone
> > else can take over the name? I've also Cc'd the E-mail addresses
> > listed as "authors" for you and Andrew in the PyPI entry for
> > completeness. Anyway, if you can reply, I'm happy to assist.

The project has been deleted and is now available for someone else
to register. Let us know if you need help with anything else!
-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: not available
URL: <http://lists.opendev.org/pipermail/service-discuss/attachments/20200705/9f87205f/attachment.sig>

From mnaser at vexxhost.com  Sun Jul  5 17:29:36 2020
From: mnaser at vexxhost.com (Mohammed Naser)
Date: Sun, 5 Jul 2020 13:29:36 -0400
Subject: [service-announce] Temporarily blocking AS4837 (China Unicom)
 from Git
In-Reply-To: <20200630183004.ipaddpzknbqwc25o@yuggoth.org>
References: <20200630183004.ipaddpzknbqwc25o@yuggoth.org>
Message-ID: <CAEs876hJY0QkbMnKuaU6B2_B9BiEiJ6cu6BM8iEDo16Zz0WKww@mail.gmail.com>

On Tue, Jun 30, 2020 at 2:30 PM Jeremy Stanley <fungi at yuggoth.org> wrote:
>
> Due to a flood of connections from random addresses within AS4837
> (China Unicom), we have temporarily blocked access to the
> opendev.org Git service from all prefixes they're announcing in BGP.
> This is not a decision we took lightly, but whatever distributed
> system these requests are coming from is not limited to any easily
> classified network set. We're also seeing similar activity from
> AS4134 (ChinaNet), and so may have to add filtering for their
> prefixes too in the near term.

Have those blocks been removed or are they still in place?

> Hopefully we can lift this block once the problematic traffic
> subsides, or as soon as we implement better alternative mitigations.
> --
> Jeremy Stanley
> _______________________________________________
> service-announce mailing list
> service-announce at lists.opendev.org
> http://lists.opendev.org/cgi-bin/mailman/listinfo/service-announce



-- 
Mohammed Naser
VEXXHOST, Inc.


From fungi at yuggoth.org  Sun Jul  5 17:38:14 2020
From: fungi at yuggoth.org (Jeremy Stanley)
Date: Sun, 5 Jul 2020 17:38:14 +0000
Subject: [service-announce] Temporarily blocking AS4837 (China Unicom)
 from Git
In-Reply-To: <CAEs876hJY0QkbMnKuaU6B2_B9BiEiJ6cu6BM8iEDo16Zz0WKww@mail.gmail.com>
References: <20200630183004.ipaddpzknbqwc25o@yuggoth.org>
 <CAEs876hJY0QkbMnKuaU6B2_B9BiEiJ6cu6BM8iEDo16Zz0WKww@mail.gmail.com>
Message-ID: <20200705173813.hmmct2kua5pk3hax@yuggoth.org>

On 2020-07-05 13:29:36 -0400 (-0400), Mohammed Naser wrote:
[...]
> Have those blocks been removed or are they still in place?
[...]

Still in place for the moment, we were planning to revisit the
situation tomorrow. A quick look at the graphs suggests the problem
activity may have trailed off around 03:00 UTC yesterday with a
brief resumption for 12:30-14:00 UTC yesterday. There's a new spike
starting at 17:20 UTC today (a few minutes ago) but I'm not in a
position to check whether the actual requests match the ones we were
getting last week.

Ian worked out configuration management for an Apache proxy in front
of each of the Gitea servers which we can activate to start
performing user agent based filtering of future requests, which even
though it's additional complication for the service still seems
preferable to blocking every customer of the largest ISP in China.
-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: not available
URL: <http://lists.opendev.org/pipermail/service-discuss/attachments/20200705/0ec9923b/attachment.sig>

From iwienand at redhat.com  Mon Jul  6 23:52:36 2020
From: iwienand at redhat.com (Ian Wienand)
Date: Tue, 7 Jul 2020 09:52:36 +1000
Subject: Meeting Agenda for July 7, 2020
Message-ID: <20200706235236.GA981500@fedora19.localdomain>

We will meet at 19:00 UTC in #opendev-meeting on June 30, 2020 with this agenda:

== Agenda for next meeting ==

* Announcements
** Clarkb out July 7

* Actions from last meeting

* Specs approval
** Authentication broker service, https://review.opendev.org/#/c/731838/
*** Not yet ready for approval but is worthy of review.

* Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
** [http://specs.openstack.org/openstack-infra/infra-specs/specs/update-config-management.html Update Config Management]
*** topic:update-cfg-mgmt
*** Gerrit on docker updates
**** Gerritbot still outstanding todo item.
*** Zuul as CD engine
*** Zuul executors running on containers; complete?
*** Multi-arch container update?
** OpenDev
*** Progress on Governance changes
**** http://lists.opendev.org/pipermail/service-discuss/2020-May/000026.html Advisory Board thread. Bumped with July 2, 2020 deadline.
*** Gitea api troubles (clarkb 20200707)
**** upstream fix accepted; track local update?
**** Workaround: https://review.opendev.org/#/c/738109/
**** Upstream fix: https://github.com/go-gitea/gitea/pull/12057

* General topics
** Trusty Upgrade Progress (clarkb 20200707)
*** Wiki updates
** Time to retire the openstack-infra ML yet? (fungi 20200707)
*** http://lists.openstack.org/pipermail/openstack-infra/2020-July/006632.html
** China telecom blocks (ianw/fungi 20200707)
*** http://lists.opendev.org/pipermail/service-discuss/2020-July/000053.html
*** do we need to continue with this?
** Project Renames (clarkb 20200707)

* Open discussion



From cboylan at sapwetik.org  Mon Jul 13 22:52:49 2020
From: cboylan at sapwetik.org (Clark Boylan)
Date: Mon, 13 Jul 2020 15:52:49 -0700
Subject: Meeting Agenda for July 14, 2020
Message-ID: <303abd39-6023-421e-ad6f-439647f5b7ba@www.fastmail.com>

We will meet with this agenda at 19:00UTC in #opendev-meeting on July 14, 2020:

== Agenda for next meeting ==

* Announcements
** OpenDev virtual event #2 happening July 20-22

* Actions from last meeting

* Specs approval
** Authentication broker service, https://review.opendev.org/#/c/731838/
*** Not yet ready for approval but is worthy of review.

* Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
** [http://specs.openstack.org/openstack-infra/infra-specs/specs/update-config-management.html Update Config Management]
*** topic:update-cfg-mgmt
*** Gerrit on docker updates
**** Gerritbot still outstanding todo item.
*** Zuul as CD engine
*** ze01 running on container again. gear is vendored in the role that uses it now.
*** Debugging mismatched multi arch container manifests.
** OpenDev
*** Progress on Governance changes
**** http://lists.opendev.org/pipermail/service-discuss/2020-May/000026.html Advisory Board thread. Bumped with July 2, 2020 deadline.
*** Gitea updates
**** Upgrade to v1.12.2 https://review.opendev.org/#/c/740716/
**** Fix for repo listing pagination has merged upstream but hasn't been backported. We can probably just carry our workaround as belts and suspenders.

* General topics
** Trusty Upgrade Progress (clarkb 20200714)
*** Wiki updates
** Dealing with bup volume rotation and index size (clarkb 20200714)
*** Fungi is rotating volumes backing our bup backups
*** Does this allow us to clean up and reduce the size of bup indexes?
** Retiring openstack-infra ML July 15 (fungi 20200714)
*** http://lists.openstack.org/pipermail/openstack-infra/2020-July/006632.html
** China telecom blocks (ianw/fungi 20200714)
*** http://lists.opendev.org/pipermail/service-discuss/2020-July/000053.html
** Project Renames (clarkb 20200714)

* Open discussion


From cboylan at sapwetik.org  Mon Jul 20 20:16:25 2020
From: cboylan at sapwetik.org (Clark Boylan)
Date: Mon, 20 Jul 2020 13:16:25 -0700
Subject: Thank you OpenDev Advisory Board Volunteers
Message-ID: <9fc24cd8-777c-4b88-8964-264543f5a718@www.fastmail.com>

Hello everyone,

Thanks again for volunteering. I've cc'd everyone that volunteered. I think next steps for you will be to sign up to OpenDev's mailing lists if you haven't already: http://lists.opendev.org/cgi-bin/mailman/listinfo/service-announce and http://lists.opendev.org/cgi-bin/mailman/listinfo/service-discuss. You may also want to pay attention to https://review.opendev.org/#/q/project:opendev/infra-specs+status:open not necessarily to review every change but to be aware of the big planned updates.

service-announce will be low traffic and used to communicate important announcements broadly like http://lists.opendev.org/pipermail/service-announce/2020-July/000007.html. Ideally we'll be getting your input on relevant changes before they end up on service-announce but good to sign up anyway.

service-discuss is where the bulk of our email communication will happen. I also expect this is where we'll bring things up with the Advisory Board and vice versa. To help kick things off and properly record initial membership I've sent this to service-discuss as well. Feel free to bring up any other bookkeeping or organizational thoughts in this thread and we'll take it from there.

>From a service standpoint some of the things we've been working on recently are Gitea upgrades, containerizing our Zuul and Nodepool deployment, planning a Gerrit upgrade, working on a spec for centralized authentication, and more.

Clark


From cboylan at sapwetik.org  Mon Jul 20 22:12:39 2020
From: cboylan at sapwetik.org (Clark Boylan)
Date: Mon, 20 Jul 2020 15:12:39 -0700
Subject: Meeting agenda for July 21, 2020
Message-ID: <07c7b27a-1e65-4e0f-b48b-c9ab6aeaf7f8@www.fastmail.com>

We will meet with this agenda in #opendev-meeting at 19:00 UTC July 21,2020:

== Agenda for next meeting ==

* Announcements
** OpenDev virtual event #2 happening July 20-22

* Actions from last meeting

* Specs approval
** Authentication broker service, https://review.opendev.org/#/c/731838/
*** Not yet ready for approval but is worthy of review.

* Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
** [http://specs.openstack.org/openstack-infra/infra-specs/specs/update-config-management.html Update Config Management]
*** topic:update-cfg-mgmt
*** Gerrit on docker updates
**** Gerritbot still outstanding todo item.
*** Zuul as CD engine
*** Zuul and Nodepool running on containers with exception of nb03
**** nb03 needs an arm64 docker image. Currently building wheels is slow on arm64 and image jobs are timing out. Working out options in https://review.opendev.org/741973
** OpenDev
*** Progress on Governance changes
****  Advisory Board welcomed. http://lists.opendev.org/pipermail/service-discuss/2020-July/000057.html
*** Gerrit /p/ mirror deprecation. http://lists.opendev.org/pipermail/service-announce/2020-July/000007.html

* General topics
** Trusty Upgrade Progress (clarkb 20200721)
*** Wiki updates
** Bup and Borg Backups (clarkb 20200721)
*** Status update?
** Project Renames (clarkb 20200721)

* Open discussion


From cboylan at sapwetik.org  Mon Jul 27 22:03:38 2020
From: cboylan at sapwetik.org (Clark Boylan)
Date: Mon, 27 Jul 2020 15:03:38 -0700
Subject: Meeting Agenda for July 28, 2020
Message-ID: <4fc7555d-6916-417a-abff-517dd8ce2b37@www.fastmail.com>

We will meet tomorrow, July 28, in #opendev-meeting at 19:00UTC with this agenda:

== Agenda for next meeting ==

* Announcements

* Actions from last meeting

* Specs approval
** Authentication broker service, https://review.opendev.org/#/c/731838/
*** Not yet ready for approval but is worthy of review.

* Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
** [http://specs.openstack.org/openstack-infra/infra-specs/specs/update-config-management.html Update Config Management]
*** topic:update-cfg-mgmt
*** Gerrit on docker updates
**** Gerritbot still outstanding todo item.
*** Zuul as CD engine
**** Went about 5 days without normal CD jobs running due to Zuul's local code execution update.
*** Zuul and Nodepool running on containers with exception of nb03
**** nb03 needs an arm64 docker image. Nodepool disabled attempting to build arm64 images to get kazoo fix release out.
**** Need to start docker after afs on executors: https://review.opendev.org/743316
** OpenDev
*** Progress on Governance changes
*** Gerrit /p/ mirror deprecation. http://lists.opendev.org/pipermail/service-announce/2020-July/000007.html

* General topics
** Trusty Upgrade Progress (clarkb 20200728)
*** Wiki updates
** Bup and Borg Backups (clarkb 20200728)
*** review request https://review.opendev.org/741366
** github 3rd party ci (ianw 20200728)
*** immediate need is arm64 for pyca/cryptography
*** https://github.com/pyca/cryptography/issues/5339
*** http://eavesdrop.openstack.org/irclogs/%23opendev/%23opendev.2020-07-22.log.html#t2020-07-22T21:23:52 internal discussion
*** should we? -- in summary conclusion seems to be yes
*** how?  --- separate tenant to both have isolation and have a config project (API uploads)
*** https://review.opendev.org/#/q/topic:opendev-3pci
** Gerrit project CI rework from Google (corvus 20200727)
*** Google is abandoning work on checks plugin in favor of new approach
*** corvus spoke with Googlers to share our use cases/experiences/requirements

* Open discussion