https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
5245f08 Use the new "dispatcher" config format and use curl with HHVM Change-Id: I06847ee2470bfc92b90a8cd4b502f3fdc222a178 31 July 2014, 19:53:41 UTC
606cb4c HHVM: fix syntax of php_ini.rb and ini parameter name Change-Id: I2d971e647a756ac85d563c1cdb1572a5810f8605 31 July 2014, 18:40:46 UTC
c228059 Merge "hhvm: specify type => rvalue for php_ini()" into production 31 July 2014, 18:32:46 UTC
53457da hhvm: specify type => rvalue for php_ini() Change-Id: If75ce133880b6f991608dc75dff439a0d3ec06f9 31 July 2014, 18:32:12 UTC
88d5c9c Merge "Revert "labstore1003: Give up on Trusty for the time being"" into production 31 July 2014, 18:25:09 UTC
a4cec9b Revert "labstore1003: Give up on Trusty for the time being" Bounce and bounce the patch goes! This reverts commit fdd34561361c4f000f7087527ad225f35f88e739. Change-Id: Icc6ea64fea10b510c2131ce08f2ae90470ca3369 31 July 2014, 18:22:51 UTC
38bed63 fix labs-hosts1-a-eqiad netboot Change-Id: Id5fa2beb5604c40c92702f514121d5716e2004fe 31 July 2014, 18:12:56 UTC
d76160d Merge "labstore1003: Re-return to Precise" into production 31 July 2014, 17:41:34 UTC
71c5617 labstore1003: Re-return to Precise Trusty installer has issues that I have no time to debug anymore. :-( Apparently unrelated to the known issue with Precise when the ixgbe driver is present. Change-Id: I7655542bb0fddf275d8685cf9effbc00d19c822b 31 July 2014, 17:39:08 UTC
cc08112 access : add cscott to pdf admin RT #8033 Change-Id: If0cd6700347909247d501a33aae85ba2babb4166 31 July 2014, 17:23:00 UTC
0a4b97d Merge "Rename pdf-render-admins to ocg-render-admins" into production 31 July 2014, 17:20:45 UTC
01c6b0f Merge "HHVM: set unlimited respawn limit in Upstart config" into production 31 July 2014, 17:09:32 UTC
0310cf6 Rename pdf-render-admins to ocg-render-admins Because I guess that's what it's really called. Change-Id: I712fa847c8ade25ae8908f589dffb9316d60ab6e 31 July 2014, 17:08:05 UTC
90e63f6 Merge "Tweaks to HHVM module" into production 31 July 2014, 17:05:58 UTC
c0ef788 HHVM: set unlimited respawn limit in Upstart config Change-Id: If8e850af7077530eb63b7b6c691979c499ca5ba1 31 July 2014, 17:04:40 UTC
3de8b1b Tweaks to HHVM module * Set hhvm.log.header = true, as suggested by Filippo * Tell upstart to use SIGHUP as the kill signal for HHVM, which will make it perform a graceful stop. * Correct path to hstr and FastCGI config dir. Change-Id: I06a7a825b9f1c6538e7da3c62ef4869b32f2058c 31 July 2014, 17:00:47 UTC
d05e21d Revert "labstore1003: Give up on Trusty for the time being" Apparently this works but just involves a long pause, often mistaken for a hang. This reverts commit fdd34561361c4f000f7087527ad225f35f88e739. Change-Id: I537dd7eac453cb942bb8cde2552e59a7566a29b5 31 July 2014, 16:30:42 UTC
ba0f894 Merge "labstore1003: Give up on Trusty for the time being" into production 31 July 2014, 16:23:15 UTC
fdd3456 labstore1003: Give up on Trusty for the time being There are issues with the autoinstall that I do not have the time to debug. :-( Change-Id: Ibb261ede777fdefcce3f6a3f11c1cc061382f1af 31 July 2014, 16:21:41 UTC
f484de3 Merge "Setup labsdb1006, labsdb1007 as osmdbs" into production 31 July 2014, 15:53:22 UTC
8b63df0 Bump up postgresql max_connections to 120 It used to be 80 and osm2pgsql would occasionally complain about too many connections. The machines have the memory required to serve 120 connections so bump it up Change-Id: I1cbf49eaef7533db5a0ce6b5e6c5db2521430d3a 31 July 2014, 15:46:15 UTC
7d745a1 Setup labsdb1006, labsdb1007 as osmdbs Dedicated this time and with SSDs Change-Id: I0a31763e6cad512c590e6c295c0a2870e5174f69 31 July 2014, 15:36:20 UTC
5761c87 Add HHVM module * Provision separate set of config files for CLI and FastCGI modes. * CLI configs in the default locations (so that running 'php' with no arguments "just works"); FastCGI configs in /etc/hhvm/fastcgi. * Separate bytecode caches for the two modes. * Make start-stop-daemon manage the pidfile so Upstart can inspect it in a post-stop stanza. * Make Upstart check for a stacktrace in post-stop and invoke $HHVM_TRACE_HANDLER (if defined) to process it. * Add a prototype Python script for parsing stack traces and reporting them to Sentry. * Manage /usr/lib/hphp/extensions/current symlink pointing to the extension directory for the most recent ABI version. Change-Id: Ieadc53775978a43f45008522fbc574f80c66e306 31 July 2014, 15:33:17 UTC
131984d add labs-hosts1-a-eqiad to dhcpd.conf Change-Id: I6608932a41c2e8a9564c23f8cd770000c36963f8 31 July 2014, 14:38:34 UTC
d0c509e Merge "swift:lint" into production 31 July 2014, 13:23:43 UTC
a8f79b9 Merge "spamassassin: qualify vars" into production 31 July 2014, 13:20:43 UTC
7181ae7 Merge "Role + Module for Quarry Labs tool" into production 31 July 2014, 12:40:27 UTC
aee7273 Merge "exec_environ.pp: Install libaio1 to enable asynchronous I/O system calls" into production 31 July 2014, 12:37:11 UTC
1dde47b exec_environ.pp: Install libaio1 to enable asynchronous I/O system calls Install Linux kernel AIO access library libaio1 to enable userspace to use asynchronous I/O system calls. This can improve performance for applications like databases or webservers Bug: 68615 Change-Id: I482c530ef8b47e21f3f4a9107fd41f3b4416fd0e 31 July 2014, 11:23:52 UTC
05570a7 swift: monitor object/container availability based on the stats published by dispersion, monitor if there are objects or containers not found. Change-Id: Ie3b6264c598f8011e25493cc4fad70d44b5a93f1 31 July 2014, 10:29:42 UTC
bb49f91 nginx - remove cipher kEDH+AESGCM follow-up to I39b389b63ae6b8 and I830bec497338 also remove cipher kEDH+AESGCM "kDHE, kEDH: cipher suites using ephemeral DH key agreement, including anonymous cipher suites." (https://www.openssl.org/docs/apps/ciphers.html) we just wanted ECDHE, and not DHE/kDHE Change-Id: Ie9badde555d3e919571d92029492779da7c5ee53 31 July 2014, 07:51:20 UTC
2a10938 Remove mysql_multi_instance from labsdb1001 after migration. Change-Id: Ic792060b74ff2534b6d59512ef56959df88a663d 31 July 2014, 04:52:32 UTC
e0abe0d webnode.pp: Install LUA support for lighttpd (lighttpd-mod-magnet) - Install package lighttpd-mod-magnet on lighttpd webgrid-nodes Bug: 68614 Change-Id: I1f65215a523aed0fa42720cdd57919e0935d8575 30 July 2014, 23:30:06 UTC
f6d6ab2 Role + Module for Quarry Labs tool - Implements https://meta.wikimedia.org/wiki/Research:Ideas/Public_query_interface_for_Labs - Deployed via fabric file kept in the source repository at analytics/quarry/web - NAT rules and /etc/hosts for access to labsdb handled manually for now - Uses /srv for everything - Uses labsdebrepo for python packages Change-Id: I6042041ffe853095970296c103d3d2e7e19b79e2 30 July 2014, 22:55:29 UTC
79d7597 Merge "rbf1001-1002 install params" into production 30 July 2014, 21:37:24 UTC
eaba3f5 Merge "Tools: Fix exim configuration for non-local addresses" into production 30 July 2014, 21:30:54 UTC
91bee2a rbf1001-1002 install params setting the raid and dhcp settings for rbf100[1-2] Change-Id: Ic429ba9bce819500b0c9faf47b15efe9022da730 RT: 7980 30 July 2014, 21:30:45 UTC
c1b94e5 add more icinga tmpfs io offload Change-Id: I428d99f5d1c81e0f36e5141c5ea176aed105e1ea 30 July 2014, 21:22:37 UTC
1f711f5 move some icinga temporaries to tmpfs Change-Id: Ib121ad9a0a6b5dfac69da64d745ea1d5c1939301 30 July 2014, 20:32:36 UTC
0140d31 slow down default check_ganglia interval from 1 to 3 mins Change-Id: I99cc4cb0c0b35e531b240474a5e8efa50fb57755 30 July 2014, 20:30:58 UTC
35441c9 add redirect for blog.wikimedia.org for RT 8039, also clean up sloppy formatting Change-Id: I157abf9d57a8ffd62691c2c014f33fcc63e9db6d 30 July 2014, 20:05:22 UTC
62dacf1 labstore1003: set to Trusty Change-Id: I59f06019863839ba4362671f971fc50a2a6bfd87 30 July 2014, 18:37:08 UTC
892edeb fix tcpircbot group setup? Change-Id: I5af80cfbe022972d54b9382ba1ba18a37751835c 30 July 2014, 18:07:40 UTC
d1f9a0b Remove searchidx dsh group A group with one member is a pretty lonely group. Especially since we'll never spin up a searchidx* box again. Change-Id: Ida71eed7152b9924864eacbef80868ca24b9c329 30 July 2014, 17:12:58 UTC
20f2695 Remove deployment-apache{01,02} from beta cluster scap targets These are the old app servers for the beta cluster, now replaced by deployment-mediawiki{01,02}. Change-Id: I6bbbe6116c34c2cca812ac7f3cfd6fc8f5201e93 30 July 2014, 16:22:33 UTC
5d3cc70 access: Matt Flaschen new key public key was revoked at https://gerrit.wikimedia.org/r/#/c/148107/ RT #8016 Change-Id: I6be9198f3b8b2af48dce0c7af741ac65915ee27f 30 July 2014, 16:00:51 UTC
10fcf2d Increase hive.variable.substitute.depth to 10000 The default for this is 40, which is pretty low for some long and easily reusable scripts. Change-Id: I25a0c4e095ab785c6b160dc8b0fc386ec6e43332 30 July 2014, 15:58:02 UTC
99562dc labmon1001: switch to raid1-lvm This is to leave sdc and sdd alone for striping of high-volume transient data. Change-Id: Ie8267cb5456c2f134605cca43a89fc30bd0ddc49 30 July 2014, 14:07:55 UTC
0efedcd Merge "deployment: wrap packages with ensure_packages()" into production 30 July 2014, 12:31:44 UTC
1c9b2b6 Merge "sudo privileges should be in array" into production 30 July 2014, 12:28:50 UTC
79e2ebe Merge "gmond - outdated variable syntax in erb" into production 30 July 2014, 12:27:47 UTC
0bc468f Merge "solr: qualify vars" into production 30 July 2014, 12:26:31 UTC
e7ed244 mediawiki: do not load mod_filter twice Change-Id: If797222beff17c7e38d7adcca1031866c3f9a309 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 30 July 2014, 11:07:46 UTC
1c28347 mediawiki: re-enabling mod_filter Mod_filter is used in our config, but gets included later only. This removal was just to avoid a warning on apache startup. Change-Id: I3ef6f8a48082f21b22866b58deab0f32f20c3b07 30 July 2014, 10:53:04 UTC
afc07d5 fix duplicate inclusion of resource Change-Id: I09aa07026d501229f9aa31c86ba54f41ed5c5fca 30 July 2014, 10:48:30 UTC
eacabec Merge "logstash: Don't pin package version" into production 30 July 2014, 10:45:52 UTC
262375e mediawiki: syntax typo fix, remove unused modules A few modules get loaded by default in debian's apache, but we do not use them in the original config we had, so it's safer (and more memory conscious) to remove them for now and reenable just the ones we need or think are useful later on. Change-Id: Idc1e4dbf002443cd7966bbbb9010ae8dd941c37c Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 30 July 2014, 10:41:34 UTC
7ca4fd2 mediawiki fix service name Change-Id: Ie243154d7d77e99124e29cdff282b8c9c0778c53 30 July 2014, 10:07:37 UTC
d55dd70 swift:lint Change-Id: Iada37354e732f3ba58f79e61a1869771b4b4405d 30 July 2014, 09:52:38 UTC
e1d1db3 deployment: wrap packages with ensure_packages() On beta, the deployment-bastion.eqiad.wmflabs instance is a Jenkins slave which has zuul source code installed. We end up with duplicate packages for python-git / python-gitdb. In zuul module, the package definition are already wrapped with ensure_packages(), do the same in deployment_server. Also removed git-core from deployment, it is part of the standard packages definition and has ensure => latest which would be a dupe of ensure => present provided by ensure_packages() Change-Id: I5f126dd66330cea2dfc381b29a68d429d2428759 30 July 2014, 09:44:35 UTC
61d553e mediawiki: fix typo (again) Change-Id: I6c9fe4a74b57bcfcac40c2fbed802031c8cc6b86 30 July 2014, 09:43:35 UTC
0693be6 mediawiki: fix typo Change-Id: Iefbf147d717987d2c4e4c18060710fab0492bbf5 30 July 2014, 09:38:37 UTC
a257581 mediawiki: fix issues with moving to mods-enabled Change-Id: I2c3583141d416a2279139cc05ad495206ebbbca0 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 30 July 2014, 09:28:17 UTC
ca7b020 apache: fix another merge fail Change-Id: Ic2f87f571898300df233c95e394fe5d9831bfcfe 30 July 2014, 09:11:51 UTC
dbc34de apache: fix duplicate declaration Change-Id: Id8f6c908682976a20d4d65d75acc43ee85a2d9f1 30 July 2014, 09:07:34 UTC
6023369 spamassassin: qualify vars Change-Id: I6809ed620cbd5d95b4341507f62f6014701822fa 30 July 2014, 08:50:14 UTC
9393f23 mediawiki: use mods-enabled, prepare for HAT We move the whole management of all apache modules to the standard debian location, mods-enabled, and out of the apache2 main config file, that becomes much shorter with this modifications. We also include modules depending on whether we're on a HAT installation or on a standard mod_php5 installation. This change needs PatchSet 147086 to be merged in order to work. Change-Id: Ia463120718dceab087ad3f8e3f35917fa879f387 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 30 July 2014, 08:47:16 UTC
8cf058a logstash: Don't pin package version Ensure that the logstash package is present, but don't require a particular version in the puppet manifest. Change-Id: Ifdd71eb530d6dae3000886cdb74fdfb03a651b2e 30 July 2014, 04:21:53 UTC
e6b4e59 Add explicit mmap addrs for varnish persistent storage This should eliminate failed varnish restarts due to mmap failures in the long run. Note the addresses only take effect on newly-allocated storage, so we won't see the benefits on a given machine until we wipe its persistent cache for one reason or another and let varnish recreate it. Requires a varnish package with the patch for the new arg: * 3.0.6-plus~x-wm2 or higher * 3.0.5-plus~x-wm7 or higher Change-Id: Ie55f50f4a60097f9eba1b9dc3d880ba848333cb2 30 July 2014, 01:49:31 UTC
68d2608 Move 250-99 to unified except opera-mini Carrier 250-99 starts using unified design except for opera mini. Change-Id: I3ce7975705bd704f140a397f2233928a21ab39bd 29 July 2014, 22:52:32 UTC
9cad776 fix cp104[34] domainnames in cache.pp Change-Id: Id3cbb0862dbd31d00cc4d9dda6210a2c3cd91a10 29 July 2014, 22:46:11 UTC
6d89294 adding labstore1003 and removing ms1002 to dhcpd Change-Id: If2c2f8095738ab8650ce2dbb04cd0dd50539c670 29 July 2014, 22:27:33 UTC
bdf18a5 normalize_path should not read past the end of the url string Change-Id: I987f8233a7b3f2f3ebf3401e35c4f4367b4c9c17 29 July 2014, 21:44:41 UTC
4a92846 Merge "listserver_aliases - fix formatting" into production 29 July 2014, 20:57:52 UTC
a9ead98 listserver_aliases - fix formatting Change-Id: I23c23fe33e6f4adc274fe6982104ff957210e93e 29 July 2014, 20:50:09 UTC
818c5c9 Merge "mailman lighttpd redirect for research-team list" into production 29 July 2014, 20:45:41 UTC
0e8b6b0 Merge "mailman list alias for renamed research list" into production 29 July 2014, 20:45:25 UTC
374488b mailman list alias for renamed research list make research-team an alias for research-internal as requested in: Change-Id: I2e7c21ceb31a97026adaf4fbf9d89c7117673db3 RT: 7992 29 July 2014, 20:03:40 UTC
291ca21 mailman lighttpd redirect for research-team list ..add a redirect for a renamed mailing list as requested in: Change-Id: I21169c226ba7b812e587f1ce27a81c440510ffbb RT: 7992 29 July 2014, 19:47:12 UTC
6eaa7ea install params for dbproxy1001-1002 dhcp and autoinstall settings for dbproxy1001-1002 Change-Id: Ifb7f4d8980606c629a3a7e0c5f3e8d8d48a01bcc RT: 8024 29 July 2014, 18:35:56 UTC
5c39f69 Merge "Give OCG admins the ability to run things as OCG" into production 29 July 2014, 17:14:31 UTC
a47b78e Remove DNS recursor on sodium sodium can just use the (LVS balanced) dns rec cluster in eqiad now. Change-Id: I338537cb8d27512058d2407a78beb8a1c6c00ce9 29 July 2014, 13:44:10 UTC
8a5d3e1 Add refinery deploy target to stat1002 Refinery has useful tools for working with webrequest snappy compressed sequence files in HDFS Change-Id: I0144cb661edd80ae2cdccb42f9044b924ce6aba0 29 July 2014, 13:41:27 UTC
5da7076 statistics: Add packages for halfak Allows the compilation of statistics (SciPy) and parsing (mwparserfromhell) python modules in python3. Change-Id: I7742f2a468af166e18f707dcd8045b2683882da9 29 July 2014, 13:41:07 UTC
8141260 apache: cherry-pick mods added in Ia46312071 * Make Ia46312071 smaller and safer by introducing the mods it depends on. * Make MPM changes do a config test. Change-Id: If903d5cb39f561203271a87fe192533fb7fd299d 29 July 2014, 09:38:37 UTC
9ff8c9a sudo privileges should be in array Enclose the sudo privileges in an array as everywhere else in the source tree. This was needed anyway but on ruby 1.9 String loses its .each method making the catalog compile fail Change-Id: I5e29eac3532c59c5e7775a887d2d3aba6d948167 29 July 2014, 07:40:27 UTC
0509ac8 Removed old jobrunner.ini file Change-Id: Ib3599fe5dc1af6d76d4286a83caa3e99caf4963e 29 July 2014, 02:45:23 UTC
83da1a9 mediawiki: correct name of configuration key in hhvm.ini Change-Id: Iae14d2eee1992ca44792dfe9d7faadfe3b0806d3 29 July 2014, 00:05:02 UTC
7d529ca Fix-up for I2508a0cce: correct path to config file Change-Id: I542114e9c5c2b2097d16f088a4ace37ede8e537e 28 July 2014, 23:34:47 UTC
2bc843b Switched to JSON-based jobrunner.conf Change-Id: I2508a0cce809f7f3270a3a7d10add02e99079f7e 28 July 2014, 23:23:53 UTC
b613047 Merge "Add extdist module + role for labs" into production 28 July 2014, 23:10:30 UTC
6c3b8c1 Add extdist module + role for labs The extdist role sets up a tarball generator for use with the Extension Distributor extension on mediawiki.org running from labs. The module can, in the future, be potentially used on prod. Bug: 68609 Change-Id: I63d285612bd30d24b83718c4c8967144d146afeb 28 July 2014, 22:59:58 UTC
6e12360 Merge "contacts.wm - http->https redirect" into production 28 July 2014, 22:40:24 UTC
56ec08c Merge "Remove resource ensure => absent'ed by Ie064cadf2" into production 28 July 2014, 21:45:38 UTC
cae5518 Give OCG admins the ability to run things as OCG /usr/bin/nodejs-ocg is the apparmor protected version of node. It should be safe to allow an OCG admin to run things under this process. The use case is actually to give an ocg admin the ability to execute the maintenance scripts under /srv/deployment/ocg/ocg/mw-ocg-service/scripts which need to be able to read /etc/ocg/mw-ocg-service.js Change-Id: I6d27a8a3cb366f1dfdfa83cceb38d63e404aa0b9 28 July 2014, 21:38:16 UTC
8f14fc7 Remove resource ensure => absent'ed by Ie064cadf2 Change-Id: I1fd076bd7219801d1cd2579e298233d72a2d8066 28 July 2014, 21:35:56 UTC
8b7a1e4 Make persistent MariaDB config changes on labsdb1002 Change-Id: I7f21a878953c2f7233b10f1e3da2b49a878cdd1f 28 July 2014, 21:34:25 UTC
6d39af6 Wikitech -- use "Header set" instead of "Header append" Per I3f317856 and I3b28b725, the consensus is to use "Header set Strict-Transport-Security" instead of "Header append Strict-Transport-Security". Change-Id: Ic122c688cfa52d3a4c4ca94b64f3820c3ae832ad 28 July 2014, 20:57:21 UTC
4a7eb4e Merge "mediawiki: add tidy resource for temp multimedia files" into production 28 July 2014, 20:52:08 UTC
2608e76 Let gmond talk to ocg1001 Change-Id: I32e6d862339efc787e2e7af1e7335b962abb4b16 28 July 2014, 20:39:13 UTC
back to top