Home Home > Infrastructure > Build-service
Sign up | Login

Archive for the ‘Build Service’ Category

« Older Entries

12.1 update repository changes

February 20th, 2012 by

Teams from the openSUSE Buildservice and openSUSE Maintenance worked together since weeks now to integrate openSUSE distribution maintenance support into the Buildservice on build.opensuse.org.

There were a lot of changes and a lot of places had to be adapted, but finally they got it working: maintenance updates for openSUSE 12.1 are now handled inside the openSUSE Buildservice without further need of SUSE internal scripts (well: we still will have some of them running as backup for a while now).

As a lot of people were involved in this task and a lot of code has been written, some smaller bugs might still be included, even if everyone tries to avoid failures. One of the most visible bugs was the unsigned 12.1 update repository from 2012-02-18 until 2012-02-19: the reason was a sync script that tried to pull the repository from a wrong location where the signing was not yet done with the new setup.  We apologize for the trouble and irritation caused and really appreciate all the reports from our users about that broken repository – as this shows the high amount of interest and knowledge about the security impact such an unsigned repository has.

Tags: , , ,
Posted in Build Service, Distribution, Infrastructure | 8 Comments »

SSL cert update for opensuse.org hosts in Nuremberg

January 30th, 2012 by

Thursday 2012-02-02 we will update the SSL certificates for all openSUSE hosts located Nuremberg (see detailed list below). The fingerprint of the new certificate is:

Signed with security@suse.de key:
pub   2048R/3D25D3D9 1999-03-06
uid                  SuSE 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SHA1 Fingerprint=F0:76:9C:42:D3:F1:C0:ED:C6:F6:15:C0:F8:D5:C7:29:60:EB:53:46
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)

iQEVAwUBTyAnZXey5gA9JdPZAQI7yQf/d4OqlBnV4WT80cqI3DVGGcEacTSES8Ux
dK0z9aW/UQWFTHGoQmDk8xcgHED/mHVAlywIPgccbleWNi3NND3+1EAvsxnR5M1m
mdVsNYOEsGDrk/3qvPVzyTjkBgINOnetH/0Hd77NhxaDVkU0f1Tl0wbO5NdhKy6m
0dmGwJgUESi3IQjubaibmGZHCZPfEEO0ReW00tRDjFpV4MnU923/BZWT30WuvfMo
ClSedk0r6PBt3FGr5yqIFyjM1i3CX/dioW1nJ3qOP1GKMDGLSL20YEY6ZE/F8nL4
bycPLfTjDxKodWXeAmeBlXNTNVYxjphowtjYMQqFe7hXyUkSHBCLLQ==
=UhMT
-----END PGP SIGNATURE-----

The following hosts will be affected:

  • static.opensuse.org
  • api.opensuse.org
  • build.opensuse.org
  • connect.opensuse.org
  • features.opensuse.org
  • hermes.opensuse.org
  • login.opensuse.org
  • notify.opensuse.org
  • svn.opensuse.org
  • ci.opensuse.org

We do not expect any service interruptions, but some users run with strict certificate checks.

Posted in Announcements, Build Service, Infrastructure | No Comments »

build.opensuse.org binary backend was down

January 14th, 2012 by

Working to fix the problem...

The SAN array of the backend server server lost 3 hard disks over the weekend.

That means the array with the built RPMs was broken. We checked and replaced a lot of files from backups – but since not all binary parts of the projects are in backup we need to rebuild some of them (31 from 24,194) afterwards.

The good news: sources and project configurations were affected by this.

Tags: , ,
Posted in Build Service, Infrastructure | 7 Comments »

Maintenance downtime Thursday 2011-11-24

November 23rd, 2011 by

We need some maintenance downtime to work on the following issues:

  • Failed geekofix storage problems on Build Service machines
  • increase network subnet mask for external available servers (means: we are growing ;-)
  • exchange some SSL certificates on servers delivering content via HTTPS

We are trying to get everything done during the standard infrastructure window:

Thursday (2011-11-24), 08:00 – 10:00 CET (7:00 -9:00 UTC)

but some services might need a bit longer (for example the schedulers of the Build Service).

Please contact admin@opensuse.org with any queries.
Your openSUSE Admins

Tags: , ,
Posted in Build Service, Infrastructure | Comments Off

OBS downtime scheduled for Tuesday 2011-09-06 08:00 – 11:00 CEST

September 6th, 2011 by

The OBS-Team is going to replace some backend servers on next Tuesday.

Therefore, a downtime is scheduled from 08:00 to 11:00 CEST, altough we believe it won’t take that long (but you never know) :-)

Afterwards, the OBS should be prepared for all the awesome packager workshops happening during the openSUSE Conference.

Posted in Build Service | 2 Comments »

Build Service Down Time – Fixed

June 21st, 2011 by


We are currently facing a hardware problem with the openSUSE Build Service.

Affected services are:

We are trying to resolve this as fast as possible. Apologies for inconveniences this may cause.

Please contact admin@opensuse.org with any queries.
Your openSUSE Admins

Update 18:53 UTC: Everything is up and running again. Note the build service scheduler needs to read all files now and create some data structures. It will take a few hours until the build service is building again packages.

Posted in Build Service | 1 Comment »

openSUSE renames OBS

May 26th, 2011 by

logo OBSThe openSUSE Build Service Team has decided to rename its cutting-edge packaging- and distribution build technology to Open Build Service. The new name, while maintaining the well-known OBS acronym, signals its open and cross-distribution nature. (more…)

Posted in Announcements, Build Service | 4 Comments »

Upcomming power outage Saturday, 2011-04-30

April 29th, 2011 by

We will have a service outage this Saturday (30 April) due to work on power supply in one of our server rooms. As result, the infrastructure in front of the following services will not be reachable on that day:

  • build.opensuse.org
  • api.opensuse.org
  • software.opensuse.org
  • stage.opensuse.org
  • features.opensuse.org
  • connect.opensuse.org
  • hermes.opensuse.org
  • users.opensuse.org
  • board.opensuse.org
  • conference.opensuse.org

The content on download.opensuse.org will come from a fall back system and will not get updated during Saturday evening.

Posted in Build Service, Infrastructure | 3 Comments »

Infrastructure Updates

April 19th, 2011 by

We had way too many server downtimes during the last month in our infrastructure. These were caused by an unreliable login proxy. We have now developed and setup a new login proxy and use it for the following sites:

  • build.opensuse.org
  • api.opensuse.org
  • hermes.opensuse.org
  • notify.opensuse.org
  • features.opensuse.org

We hope that this new proxy is working reliably now.  The new proxy is open source and source code can be found on gitorious.org. A future version of the openSUSE Build Service (OBS)  (not 2.3) will come with this proxy as authentication mechanism as well.

For the openSUSE Build Service, another change is that we switched to apache and the passenger module on our productive system, following the new default of OBS 2.3. This should also fix some cases of invalid http answers.

In short, we have changed some key parts of our infrastructure and introduced a new login proxy, so there might still be some pitfalls. But we have it under our control now and can debug and even fix any issue with it. In case of problems, please speak up on the opensuse-buildservice mailing list.

Your make-OBS-stable-team, Michael Schröder, Stephan Kulow and Adrian Schröter

Posted in Build Service, Infrastructure | 5 Comments »

Invalid SSL certificate on some opensuse.org services

April 7th, 2011 by

Update from 14:30 UTC: The problem is solved.

We want to let you know that we are aware about an invalid SSL certificate on some of our servers behind the https protocol. This is the case most of the time at least between 04:00 until 11:00 CET today.

We took down some of our services temporarily after getting aware of this. Affected services were

  • build.opensuse.org
  • api.opensuse.org
  • hermes.opensuse.org
  • notify.opensuse.org
  • connect.opensuse.org
  • features.opensuse.org

The issue is reported to our service provider maintaining the proxy who delivers this certificate.

I hope everybody of you will continue not to trust invalid certifications for our services. It can always be a man-in-the-middle-attack and especially when submitting passwords or sensitive data like source code it is not acceptable. So please continue to miss-trust invalid certificates on our servers.

Sorry

Posted in Build Service, Infrastructure | 5 Comments »

« Older Entries