Home Home > Infrastructure
Sign up | Login

Archive for the ‘Infrastructure’ Category

openSUSE Develops Legal Review System

November 8th, 2018 by

The open-source community has a new project designed to help Linux/GNU distributions with the legal review process of licenses.

The new project called Cavil is legal review system that is collectively beneficial not only for the  openSUSE Project, but distributions and projects that want to use it.

The project provides an add-on service for the Open Build Service.

Every OBS request for openSUSE Factory goes through a legal review process to ensure licenses are compatible. Cavil indexes these and creates a legal report for every single request. Bot comments in OBS are made through the legal-auto python script, but the entire project is much larger than the script and bots.

Sebastian Riedel and Stephan Kulow have been developing the project for two years and it has been used in production for more than a year and half. The Cavil legal review system replaces an older system and provides much more efficiency. Cavil can automatically accept more than 90 percent of all new requests based on data from previous reviews, so packages are much more streamlined into openSUSE Factory.

The project has been so efficient that two lawyers who do all the legal reviews with the system, which is also used by SUSE, had reviewed about 110,000 packages this past year. The same lawyers curated a library with 27.000 license patterns for 600 licenses and 20 license patterns for 100 of the  most common licenses that are used to create legal reports. Riedel said there is a desire hope to expand that in the future with the hope of collecting new patterns with the open-source community.

The legal Data Base used by SUSE to generate reports with new license patterns  is about 2TB and has about 68.433.436 pattern matches in 27.319.682 individual files.

Like openQA, Cavil is written in Perl, with Mojolicious/Minion and PostgreSQL.

A quick look at the statistics about the content of the legal database showed the most popular open source licenses were GPL-2.0, BSD-3-Clause, GPL-Unspecified and MIT respectively.

openSUSE Kubic Moves in a New Direction

August 9th, 2018 by

Dear Community,

It has been more than a year since the openSUSE community started the Kubic Project, and it’s worth looking back over the last months and evaluating where we’ve succeeded, where we haven’t, and share with you all our plans for the future.

A stable base for the future

Much of our success has been in the area generally referred to as **MicroOS**, the part of the Kubic stack that provides a stable operating system that is **atomicly updated** for running containers.

Not only is Kubic MicroOS now a fully integrated part of the openSUSE Tumbleweed release process, but our Transactional Update stack has also been ported to regular openSUSE Tumbleweed and Leap.

Based on the community’s feedback, the new System Role has been further refined and now includes fully automated updates out of the box.

This collaboration is continuing, with many minor changes to the regular openSUSE installation process coming soon based on lessons learned with tuning the installation process in Kubic.

Reviewing our initial premise

We haven’t just been busy on the basesystem. Our efforts with Rootless Containers continue, and you can now use the “Docker-alternative” Podman CRI-O in both Kubic and regular openSUSE. But when considering the Initial Premise of the Kubic project, it’s probably safe to say we’re not where we hoped to be by now.

(more…)

openSUSE Heroes ♥ Let’s Encrypt™ – Expect certificate exchange

April 19th, 2018 by

openSUSE loves Let's Encrypt™

Maybe some of you noticed, that our certificate *.opensuse.org on many of services will expire soon (on 2018-04-23).

As we noticed that – as well – we decided to put a bit of work into this topic and we will use Let’s Encrypt certificates for the encrypted services of the openSUSE community.

This is just a short notice / announcement for all of you, that we are working on this topic at the moment. We will announce, together with the deployment of the new certificate, the regarding hashes and maybe some further information on our way of implementing things.

Just to give you a small number of services which will be affected, maybe you use one of the following list:

(This is a mixed list of services maintained by openSUSE Heroes and/or several SUSE teams for the openSUSE community – the certificate exchange will affect those services.)

  • build.opensuse.org
  • api.opensuse.org
  • openqa.opensuse.org
  • static.opensuse.org
  • ci.opensuse.org
  • svn.opensuse.org
  • software.opensuse.org
  • $LANG.opensuse.org for the several wiki instances
  • download.opensuse.org
  • keyserver.opensuse.org
  • …and many, many more :) – thanks to everybody in the openSUSE Heroes team for maintaining the zoo of services ;)

Thanks to the FLOSS & openSUSE community, we have full support of Let’s Encrypt certificates already on board our distribution.

As there are so many options to choose, we decided for the following tool to use Let’s Encrypt certificates:

  • dehydrated – as client with ACME v2 support – https://software.opensuse.org/package/dehydrated
    • with custom hook scripts, that will provide the wildcard-certificates to our proxy-infrastructure

Thanks to everybody involved in this task for getting the migration done.

Fun fact, as you might have noticed before, news.opensuse.org is not part of the openSUSE Heroes infrastructure (yet) and already got a new certificate from DigiCert.

Planned Outage To Affect openSUSE Services This Weekend

March 6th, 2018 by

A network outage this weekend will effect openSUSE services that have a Direct Connection to Nuremberg host infrastructure on Saturday, March 10, between the hours of 1 and 6 p.m. UTC.

The outage will last about 30 minutes and take place between the above listed hours.

The outage effects only external connections due to maintenance in the datacenter. All services will run without any downtime.

openSUSE Heroes offsite 2018

March 5th, 2018 by

openSUSE-Heroes LogoThe first weekend in March 2018, the openSUSE Heroes met again in-person, after one year of infrastructure work, which was mostly done from home.

After our last in-person meeting in December 2016, we saw each-other in person at openSUSE conference 2017 and maybe at some other events like release parties – but now it’s the time of the year when it’s very cold outside – so we decided to stay one weekend inside and talk about the topics for 2018 and the future of the openSUSE Heroes team. And getting some work done :).

You might imagine us now two days busy with hacking and a bunch of nerds in front of their preferred shell-window. But it’s the total opposite. Our main “tools” we used this weekend were a flip chart, our voices and a lot of coffee.

By the way, thanks a lot to SUSE for providing us with a room, a network connection, drinks, coffee and cookies. In fact we were given the new and shiny “SUSE Event Area” which was built by SUSE last year to host all kinds of internal, external and community events.

After one year of having our monthly meetings via IRC, we had a lot of topics to discuss and a lot of decisions to make about the openSUSE infrastructure in the future.

After a nice dinner on Day0, Friday 2018-03-02, where most of the Heroes arrived in Nuremberg, we started working on Saturday.

On the Day1, Saturday 2018-03-03 and Day2, Sunday 2018-03-04 we had the following topics on our list, worked through them, defined ToDos for the following months and assigned tasks.

(more…)

Project Selected as Mentoring Organization for Google Summer of Code

February 14th, 2018 by


Let the fun begin! This week it was announced that the
openSUSE Project is one of the 212 mentoring organization for this year’s Google Summer of Code, which is an annual international program that awards stipends to university students to write code and learn about open source development during their summer break.

The openSUSE Project has participated in GSoC since 2006 and has helped more than 50 students get started with free software development.

As a mentoring organization, eligible students will have an opportunity between March 12 – 27 to submit a project proposal to the GSoC program site. The program is open to university students aged 18 or over.

The openSUSE website dedicated to GSoC offers nine projects that GSoC students can select from to use for their proposals. The topics focus on web development, quality assurance, packaging and user experience design. The technologies used in the project are Ruby on Rails, Perl, Ruby, Html/JavaScript and C/C++. (more…)

cPanel Provides Project with Network Cards

January 18th, 2018 by

The hosting platform cPanel has provided the openSUSE Project with two new network cards to assist the project with its infrastructure needs.

The network cards will soon be integrated into the openSUSE infrastructure to improve the Open Build Service.

“On behalf of the openSUSE Project and the many developers and packagers who use OBS to develop open-source software, we thank cPanel for their generosity,” said Richard Brown, openSUSE Chairman. “This contribution not only helps the openSUSE project but will help other open-source projects as well.”

OBS is a generic system to build and distribute binary packages from sources in an automatic, consistent and reproducible way. It can release packages as well as updates, add-ons, appliances and entire distributions for a wide range of operating systems and hardware architectures.

“We use an internal installation of the Open Build Service, and also help customers and third parties use the public OBS at build.opensuse.org,” said Ken Power, Vice President of Product Development at cPanel. “Supporting the open source projects that we use is incredibly important to us, and we’re glad to be able to help here.”

The network cards will be used to improve the backend of OBS.

“The cards will be used to connect the OBS backend storage and network; bringing it from a 1GB to 10BG and improving the backend performance,” said Thorsent Bro, a member of the openSUSE Heroes team. “We want to thank cPanel for its generous support and giving back to the projects that help with Linux/GNU development.”

SUSE Studio online + Open Build Service = SUSE Studio Express

October 4th, 2017 by

Merging SUSE Studio and Open Build Service

Written by Andreas Jaeger

SUSE Studio was launched in 2009 to make building images really easy. Nowadays, images are used everywhere – for public cloud you need images; container images are used to have small and movable workloads, and data center operators use golden images to start their workloads.

As you may be aware, we have an Open Build Service (OBS) tool that helps you to build packages to deliver complete distributions. In the last few years, we have been updating this tool and it now can handle any kind of image.

Additionally, the default engine for building images at SUSE is kiwi and is used in both SUSE Studio and OBS.

Reviewing these offerings and the way the image build situation has evolved, we have decided to merge the two online services, OBS and SUSE Studio, into a common solution.

Looking at the feature requests for SUSE Studio on image building and looking at our technologies, we decided to use OBS as the base for our image building service. Since OBS already builds images for various environments, we will first add a new image building GUI to OBS. This combined solution will now be delivered as “SUSE Studio Express”.

(more…)

Planned Downtime to Affect openSUSE Services

October 4th, 2017 by

A scheduled power outage in the Nuremberg office will effect a number of openSUSE services from Oct. 13 at 4 p.m. (16:00 UTC) to Oct. 14  at 4 p.m. (16:00 UTC).

The scheduled maintenance on the building’s electricity will affect most services. The only services that will be normally operating are:
status.opensuse.org
download.opensuse.org
static.opensuse.org
conncheck.opensuse.org

The rest of the services will be fully online on Oct. 15. The Heroes team will try to keep you updated on the situation, and will also send a few reminders (on the opensuse-announce mailing list) before the incident.

Due to technical constraints, the above services will not be available through IPv6 during the outage.

Thank you for your understanding.
On behalf of the openSUSE Heroes Team and the SUSE-IT team.

openSUSE Heroes Spring Into Action

July 19th, 2017 by

openSUSE-Heroes LogoMike Tyson might have said it best when he said “everyone has a plan ‘till they get punched in the mouth.”

Tyson’s point is that plans change, especially in the moment of executing a plan and that’s exactly what the openSUSE Heroes did with updating the wikis; minus the punch in the mouth.

Yesterday evening the Heroes planned to move and update some of the localized wikis. Things worked better and faster than expected, and in the end, the openSUSE Heroes moved all 18 localized wikis from Provo to Nuremberg and updated them to MediaWiki 1.27.

This means all openSUSE wikis are now running on MediaWiki 1.27 and support the features announced for the English wiki last week.

Christian Boltz, a humble openSUSE Hero with the power to mass migrate wikis, didn’t have time to change the <feed> tags to the new <rss> tags in all the wikis, which he plans to do in the next few days. Boltz did express a challenge to see what other superhuman powers exist.

“I won’t complain if someone is faster and does it in some of the wikis,” Botlz wrote in an email to the openSUSE Project mailing list.

(more…)