[JIRA] (OVIRT-769) infra-hiera Autodeploy via Gerrit Hooks
by eyal edri [Administrator] (oVirt JIRA)
[ https://ovirt-jira.atlassian.net/browse/OVIRT-769?page=com.atlassian.jira... ]
eyal edri [Administrator] updated OVIRT-769:
--------------------------------------------
Epic Link: OVIRT-403
> infra-hiera Autodeploy via Gerrit Hooks
> ---------------------------------------
>
> Key: OVIRT-769
> URL: https://ovirt-jira.atlassian.net/browse/OVIRT-769
> Project: oVirt - virtualization made easy
> Issue Type: By-EMAIL
> Reporter: Anton Marchukov
> Assignee: infra
>
> infra-hiera repo is already used and configured in r10k to deploy from git.
> However in gerrit there is not hooks that run CI on it and that trigger
> publish when it is merged to git.
> Looks like it is easy to fix and we can reuse most of the hooks we have for
> infra-puppet. Basically the deploy should be done using the same jenkins
> job and it already does that just not triggered.
> As for CI check than we need to check if puppetlint we use is sufficient.
> But it might be a good start.
> --
> Anton Marchukov
> Senior Software Engineer - RHEV CI - Red Hat
--
This message was sent by Atlassian JIRA
(v1000.482.6#100017)
8 years, 1 month
[JIRA] (OVIRT-768) Decomission of MD5 Password Hashes for Infra Users
by eyal edri [Administrator] (oVirt JIRA)
[ https://ovirt-jira.atlassian.net/browse/OVIRT-768?page=com.atlassian.jira... ]
eyal edri [Administrator] updated OVIRT-768:
--------------------------------------------
Epic Link: OVIRT-403
> Decomission of MD5 Password Hashes for Infra Users
> --------------------------------------------------
>
> Key: OVIRT-768
> URL: https://ovirt-jira.atlassian.net/browse/OVIRT-768
> Project: oVirt - virtualization made easy
> Issue Type: By-EMAIL
> Reporter: Anton Marchukov
> Assignee: infra
>
> During the work of moving password parameters from foreman to internal
> hiera I noted that there are some users that still have their passwords
> hashed by MD5 algorithm.
> MD5 has known crypto research that make it no longer suitable for storing
> passwords securely:
> https://en.wikipedia.org/wiki/MD5#Security (and corresponding links).
> While the hashes are stored in internal repo it is still shared and prone
> to information leaks. We should ask all users to rehash their passwords
> with SHA-512 and when it is done we can remove MD5 exception
> in site/ovirt_infra/manifests/user.pp so MD5 hashed passwords are no
> longer accepted.
> The current list of users left is available in infra-hiera repo.
> --
> Anton Marchukov
> Senior Software Engineer - RHEV CI - Red Hat
--
This message was sent by Atlassian JIRA
(v1000.482.6#100017)
8 years, 1 month
[JIRA] (OVIRT-768) Decomission of MD5 Password Hashes for Infra Users
by eyal edri [Administrator] (oVirt JIRA)
[ https://ovirt-jira.atlassian.net/browse/OVIRT-768?page=com.atlassian.jira... ]
eyal edri [Administrator] updated OVIRT-768:
--------------------------------------------
Epic Link: OVIRT-403
> Decomission of MD5 Password Hashes for Infra Users
> --------------------------------------------------
>
> Key: OVIRT-768
> URL: https://ovirt-jira.atlassian.net/browse/OVIRT-768
> Project: oVirt - virtualization made easy
> Issue Type: By-EMAIL
> Reporter: Anton Marchukov
> Assignee: infra
>
> During the work of moving password parameters from foreman to internal
> hiera I noted that there are some users that still have their passwords
> hashed by MD5 algorithm.
> MD5 has known crypto research that make it no longer suitable for storing
> passwords securely:
> https://en.wikipedia.org/wiki/MD5#Security (and corresponding links).
> While the hashes are stored in internal repo it is still shared and prone
> to information leaks. We should ask all users to rehash their passwords
> with SHA-512 and when it is done we can remove MD5 exception
> in site/ovirt_infra/manifests/user.pp so MD5 hashed passwords are no
> longer accepted.
> The current list of users left is available in infra-hiera repo.
> --
> Anton Marchukov
> Senior Software Engineer - RHEV CI - Red Hat
--
This message was sent by Atlassian JIRA
(v1000.482.6#100017)
8 years, 1 month
[JIRA] (OVIRT-769) infra-hiera Autodeploy via Gerrit Hooks
by eyal edri [Administrator] (oVirt JIRA)
[ https://ovirt-jira.atlassian.net/browse/OVIRT-769?page=com.atlassian.jira... ]
eyal edri [Administrator] updated OVIRT-769:
--------------------------------------------
Epic Link: OVIRT-403
> infra-hiera Autodeploy via Gerrit Hooks
> ---------------------------------------
>
> Key: OVIRT-769
> URL: https://ovirt-jira.atlassian.net/browse/OVIRT-769
> Project: oVirt - virtualization made easy
> Issue Type: By-EMAIL
> Reporter: Anton Marchukov
> Assignee: infra
>
> infra-hiera repo is already used and configured in r10k to deploy from git.
> However in gerrit there is not hooks that run CI on it and that trigger
> publish when it is merged to git.
> Looks like it is easy to fix and we can reuse most of the hooks we have for
> infra-puppet. Basically the deploy should be done using the same jenkins
> job and it already does that just not triggered.
> As for CI check than we need to check if puppetlint we use is sufficient.
> But it might be a good start.
> --
> Anton Marchukov
> Senior Software Engineer - RHEV CI - Red Hat
--
This message was sent by Atlassian JIRA
(v1000.482.6#100017)
8 years, 1 month
http://jenkins.ovirt.org/job/ovirt-engine_master_check-patch-fc24-x86_64/6383
by Yevgeny Zaspitsky
Hi,
Could someone look into the build?
It looks like it fails on some yum command, which isn't part of the patch
it tries to check.
>From the console log:
*22:51:47* Start: yum install*23:01:48* ERROR: Command failed. See
logs for output.*23:01:48* # /usr/bin/yum --installroot
/var/lib/mock/fedora-24-x86_64-434042a79eacbd41013fce53b4b4ce62-13427/root/
--releasever 24 install @buildsys-build
--setopt=tsflags=nocontexts*23:01:48* Init took 602 seconds
8 years, 1 month