February 2019 - Infra - Ovirt List Archives

[JIRA] (OVIRT-768) Decomission of MD5 Password Hashes for Infra Users

by Anton Marchukov (oVirt JIRA)

[ https://ovirt-jira.atlassian.net/browse/OVIRT-768?page=com.atlassian.jira... ] Anton Marchukov updated OVIRT-768: ---------------------------------- Resolution: Won't Fix Status: Done (was: To Do) > Decomission of MD5 Password Hashes for Infra Users > -------------------------------------------------- > > Key: OVIRT-768 > URL: https://ovirt-jira.atlassian.net/browse/OVIRT-768 > Project: oVirt - virtualization made easy > Issue Type: Improvement > Reporter: Anton Marchukov > Assignee: infra > > During the work of moving password parameters from foreman to internal > hiera I noted that there are some users that still have their passwords > hashed by MD5 algorithm. > MD5 has known crypto research that make it no longer suitable for storing > passwords securely: > https://en.wikipedia.org/wiki/MD5#Security (and corresponding links). > While the hashes are stored in internal repo it is still shared and prone > to information leaks. We should ask all users to rehash their passwords > with SHA-512 and when it is done we can remove MD5 exception > in site/ovirt_infra/manifests/user.pp so MD5 hashed passwords are no > longer accepted. > The current list of users left is available in infra-hiera repo. > -- > Anton Marchukov > Senior Software Engineer - RHEV CI - Red Hat -- This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100098)

5 years, 10 months

1
0
0 / 0

[JIRA] (OVIRT-638) Tune Gerrit

by Anton Marchukov (oVirt JIRA)

[ https://ovirt-jira.atlassian.net/browse/OVIRT-638?page=com.atlassian.jira... ] Anton Marchukov updated OVIRT-638: ---------------------------------- Resolution: Won't Fix Status: Done (was: To Do) We will tune gerrit based on tickets listing specific problems. > Tune Gerrit > ----------- > > Key: OVIRT-638 > URL: https://ovirt-jira.atlassian.net/browse/OVIRT-638 > Project: oVirt - virtualization made easy > Issue Type: Improvement > Reporter: Barak Korren > Assignee: infra > Priority: Low > > We should probably tune Gerrit to take proper advantage of the bigger server we now have. > This could be useful: > http://ctf-dev-environment-vagrant.s3.amazonaws.com/Gerrit-Performance-Tu... > Few notable details: > # Most RAM on the new server is currently taken by the FS cache instead of the Gerrit Java processes. > # It seems that the Gerrit can do Git garbage collection on its own, and do so more efficiently then doing so with the Git command line. -- This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100098)

5 years, 10 months

1
0
0 / 0

[JIRA] (OVIRT-497) [docs] Add documents on what's on the ci-tools repo and how it gets there

by Anton Marchukov (oVirt JIRA)

[ https://ovirt-jira.atlassian.net/browse/OVIRT-497?page=com.atlassian.jira... ] Anton Marchukov updated OVIRT-497: ---------------------------------- Resolution: Won't Fix Status: Done (was: To Do) > [docs] Add documents on what's on the ci-tools repo and how it gets there > ------------------------------------------------------------------------- > > Key: OVIRT-497 > URL: https://ovirt-jira.atlassian.net/browse/OVIRT-497 > Project: oVirt - virtualization made easy > Issue Type: Improvement > Reporter: David Caro Estevez > Assignee: infra > -- This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100098)

5 years, 10 months

1
0
0 / 0