From Fedora Project Wiki

(armv7 instances are back!)
(40 intermediate revisions by 8 users not shown)
Line 5: Line 5:


== Available Machines/Instances ==
== Available Machines/Instances ==
 
{| class="wikitable"
{|
! hostname !! fedora version !! arch  !! cpu !! memory !! disk !! contact
! hostname !! fedora version !! arch  !! cpu !! memory !! disk !! contact
|-
|-
| thulsadoom.scrye.com / rawhide-test.scrye.com || rawhide || x86_64 kvm instance || 2.13Ghz || 8GB ram || 100GB disk || Kevin Fenzi <kevin@scrye.com>
| rawhide-test.fedorainfracloud.org || rawhide || x86_64 cloud instance || 3.00GHz || 8GB ram || 100GB disk || admin@fedoraproject.org
|-
|-
| draco.scrye.com / epel5-test.scrye.com || centos5 || i686 kvm instance || 2.13Ghz || 2GB ram || 100GB disk || Kevin Fenzi <kevin@scrye.com>
| f33-test.fedorainfracloud.org || f33 || x86_64 cloud instance || 3.00Ghz || 8GB ram || 100GB disk || admin@fedoraproject.org
|-
|-
| gandohar.scrye.com / epel6-test.scrye.com || centos6 || x86_64 kvm instance || 2.13Ghz || 2048MB ram || 100GB disk || Kevin Fenzi <kevin@scrye.com>
| el8-test.fedorainfracloud.org || centos8 || x86_64 cloud instance || 3.00Ghz || 8GB ram || 100GB disk || admin@fedoraproject.org
|-
|-
| peven.scrye.com / epel7-test.scrye.com || centos7 || x86_64 kvm instance || 2.13Ghz || 8192 MB ram || 30GB disk || Kevin Fenzi <kevin@scrye.com>
| el7-test.fedorainfracloud.org || centos7 || x86_64 cloud instance || 3.00Ghz || 8GB ram || 100GB disk || admin@fedoraproject.org
|-
|-
| nicodemus.scrye.com / f21-test.scrye.com || f21 || x86_64 kvm instance || 2.13Ghz || 4096MB ram || 20GB disk || Kevin Fenzi <kevin@scrye.com>
| ppc64le-test.fedorainfracloud.org || f34 || ppc64le vm || - || 8GB ram || 40GB disk || admin@fedoraproject.org
|-
|-
| malkin.scrye.com / f22-test.scrye.com || f22 || x86_64 kvm instance || 2.13Ghz || 4096MB ram || 20GB disk || Kevin Fenzi <kevin@scrye.com>
| aarch64-test01.fedorainfracloud.org || f33 || aarch64 cloud instance || - || 8GB ram || 100GB disk || admin@fedoraproject.org
|-
|-
| archen.scrye.com / f23-test.scrye.com || f23 || x86_64 kvm instance || 2.13Ghz | 4096MB ram || 20GB disk || Kevin Fenzi <kevin@scrye.com>
| armv7-test01.fedorainfracloud.org || f34 || armv7 vm || - || 40GB ram || 140GB disk || admin@fedoraproject.org
|-
|-
| arm03-packager00.cloud.fedoraproject.org || f22 || armv7 SOC || - || 4096MB ram || 300GB disk || <admin@fedoraproject.org>
| armv7-test02.fedorainfracloud.org || f34 || armv7 vm || - || 40GB ram || 140GB disk || admin@fedoraproject.org
|-
| arm03-packager01.cloud.fedoraproject.org || f21 || armv7 SOC || - || 4096MB ram || 300GB disk || <admin@fedoraproject.org>
|-
| arm03-qa00.cloud.fedoraproject.org || f22 || armv7 SOC || - || 4096MB ram || 300GB disk || <admin@fedoraproject.org>
|-
| arm03-qa01.cloud.fedoraproject.org || f21 || armv7 SOC || - || 4096MB ram || 300GB disk || <admin@fedoraproject.org>
|-
|-
|}
|}


{{admon/note|IP and DNS information has changed|As of 2011-05-14 some of these instances are behind a single IP address. You will need to fetch: https://kevin.fedorapeople.org/test-machine-ssh-config and add it to your ~/.ssh/config to be able to access them (or look at it and use the right port on the single IP) Sorry for the trouble. }}
{{admon/note|machine names and location has changed as of 2020-03-18}}


== FAQ ==
== FAQ ==
Line 41: Line 34:
A: Since all Fedora packagers or qa members have root access on these machines, do not enter any sensitive information, including FAS credentials on these machines.  These systems should never ask you for your FAS password (sudo is NOPASSWD).  Authentication is only done via the SSH key you have set in FAS.  In particular, it is recommended to disable SSH agent forwarding on these machines on the client side (agent forwarding is disabled on the server, but any user on the system could potentially reenable it).  To do this, add the following to your ~/.ssh/config:
A: Since all Fedora packagers or qa members have root access on these machines, do not enter any sensitive information, including FAS credentials on these machines.  These systems should never ask you for your FAS password (sudo is NOPASSWD).  Authentication is only done via the SSH key you have set in FAS.  In particular, it is recommended to disable SSH agent forwarding on these machines on the client side (agent forwarding is disabled on the server, but any user on the system could potentially reenable it).  To do this, add the following to your ~/.ssh/config:
<pre>
<pre>
Host *.scrye.com
Host *.fedorainfracloud.org
  ForwardAgent no
Host *.cloud.fedoraproject.org
   ForwardAgent no
   ForwardAgent no
</pre>
</pre>
Line 82: Line 77:
Q: Can I use one of these instances to maintain my packages from?
Q: Can I use one of these instances to maintain my packages from?


A: No. ssh agent forwarding is disabled for security reasons, so you will not be able to do cvs checkins from these instances. Additionally, they could be re-installed or files could be wiped at any time. You should not use these as a place to maintain your packages from.
A: No. ssh agent forwarding is disabled for security reasons, so you will not be able to do git checkins from these instances. Additionally, they could be re-installed or files could be wiped at any time. You should not use these as a place to maintain your packages from.
 
Q: I messed up one of the existing instances. What do I do?
 
A: Don't panic. Just inform the owner of that instance and they will spin up another instance. It's not a problem.  


Q: I would like to contibute a host/instance/machine to allow people to test things, how can I do that?
Q: I would like to contibute a host/instance/machine to allow people to test things, how can I do that?


A: I would be happy to help you in setting up a machine as the above test instances are. Contact me (kevin@scrye.com) for more info on how to set up the hosts.  
A: I would be happy to help you in setting up a machine as the above test instances are. Contact me (kevin@scrye.com) for more info on how to set up the hosts. If you want to know some details about the setup, take a look at the ansible playbooks used for these machines at [https://www.scrye.com/~kevin/fedora/scrye-ansible/ https://www.scrye.com/~kevin/fedora/scrye-ansible/]. To make them work you need a special FAS account that is in the group <code>thirdparty</code>, though.


Q: I would like to donate some secondary arch hardware/machine resources to this effort. How can I do that?  
Q: I would like to donate some secondary arch hardware/machine resources to this effort. How can I do that?  
Line 95: Line 94:
Q: What should the ssh host keys be for these instances?  
Q: What should the ssh host keys be for these instances?  


A1: The ssh host keys are in DNS (dnssec enabled). Just set the openssh VerifyHostKeyDNS=yes.
A1: https://admin.fedoraproject.org/ssh_known_hosts has all the ssh host keys
A2: Here's a list of ssh host keys for the machines:
 
<pre>
epel5-test.scrye.com,[75.148.32.189]:3005,draco.scrye.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApaGSaZ52+S5ARafXKtYqoNzDklQ2tVaX+73SAyVZNIkV+Eij7oaqiQeBzQjrzmPQBUS1RR4To3puFNjVB0ZKzFwR//hExO+9rP3bqoOHEf/AS6uh/S6sxnClzut6MYDf0QfqlY402puZeQJN/zueCPWKmws08WcfxjLTNDEqiZIMwpRv6V5p20iI7coXiz/R2gN8yD8htNvbFAaqehcYJI6vpUCZR/4LRWVLn/c+rqLVJc3lXuAKuRgkeLbSTyLmX9UZWUX1bIiiqPo0GD7YX4QRAm4l4CSshk2QJc1V9o0j0NpYX+7Yt45lfhlDblTNyT1CSpKI4lXnmF+0knJ2DQ==
epel6-test.scrye.com,[75.148.32.189]:3006,gandohar.scrye.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyJV+yuO1cvo7y56lMSY0LKaww0le7/5/jaOfqj9R52ovNTikdqVx/ZmS5GUQvwnn8/8xrZJF1wB+DydYXX8u+Lhz1k68nclHA0oVzf87Q5Vh9VgUyvsp2YPuyY1KGEgc4Bf37FL6eORfVs4K4U5pk5Qj7xs4Ea7RbcpRmWWUG5G/QYbZi/oO2e6vdFh0eiFS+mXidck5GJqxMO+AZ1oQa+H9Pb56+fHmvcc3WgDfIKqTBOPdpFcp8F0IUAJbfvLfKM78UdP2lcv1+QMkPtJtaV5h4Jh4Kb0zu2lokeqLKLqCZ32I9u21BkPCeTlq4RXoWRULSJBO5K6hbl6za2UTcQ==
epel7-test.scrye.com,peven.scrye.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFObPFAtSpcbBQ10wutdUo69k5NySPr86lwOGYmDnJDp8zDM9v9aQZO+4YJiFELiCS+03lccfD/EX1Ke5xnc4D4=
f21-test.scrye.com,nicodemus.scrye.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHkwWw2zikfaA4f8S1TwSYCm2+YuFS2JILLndYJCy4psQL1eC/pnZlSN20YUWC6TW9oA9gkf+vyC5le+4oT9xvc=
f22-test.scrye.com,malkin.scrye.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMM4eDQpEKTPXUv5prKnsgUCXaGgZ/hcTHZaPIUnMZm7c4tyVY0NO4N6PxaI8wjHL8Cew8t4khB4pI/EeHPExKs=
rawhide-test.scrye.com,thulsadoom.scrye.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHkwWw2zikfaA4f8S1TwSYCm2+YuFS2JILLndYJCy4psQL1eC/pnZlSN20YUWC6TW9oA9gkf+vyC5le+4oT9xvc=
arm03-packager00.cloud.fedoraproject.org,209.132.184.70 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqQPuQp4D6HkkDDkVaelo+viVWnVkVf1MQhKjeaCcjQaXCvdbjsD8Z6CB2WnM9wi2KRC7GNzG/4Z66mmqj99bDtxHGi6MqSxUhpq5ZJ3VbEhQSyFPSUr/d7n/nki0CrZmqs5wZsfKPeDRcVII3JrvhX/6Onj3uAhFxR/cv1UdlIYcRDUsyE4CmBgZ8xW6nu592I9uNmIkT9mOmDRyEMBHekyLJGTs6GIe080Q7YA6MjR0+/3BWm2ynJri8JijLNpDrhmHoRml9Z1fAs5Lz8CENJEDJZtt1UUEh0u20skmt3S/nh9LXdXCh1xFI4Z+eHAEMEgPqBlZh40218dZe4ITv
arm03-packager01.cloud.fedoraproject.org,arm03-packager01,209.132.184.71 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVAZltpNT1Ol/f3Yqx77Aher13ODiH2kUis4TlVmOZYXFR/LyMPAp6hNKW3f9ugknsgtaHonF3qn8DNtz2tQZOabUHZclYwyFvByWq6nHzPNLL5zRKYRSjJupKP587ZKVdIz1WJ8x6nNIsXsUIkt86ZaG9sFbVgAwBaGbOMDTbFpaNAtIHsuxze8k+G6f7bw9qiJ7fa4asR5AVYYcevskLN6tPNHV/YUNi36sMuTsyH8ceoHRnxZK8+5E6N/owt5CkQvXbLb9oSpVbUOORvhMzipo1V1pmTql0aOXq4r18dmZwLuKqG5eSjMcPO+noPtAqx6PX1efc9eOV5RZ5QuW9
arm03-qa00.cloud.fedoraproject.org,209.132.184.74 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7PrF00FKXV4xooVwa28N7QYswpaKfdJejTpHQSxai3S0n0mwrnKgVYjgkpzj/QYoQWqG6l1Hcqipfc5+DttpFSTWgMSTE688Cimqrr6Yt+IPe8b+0mvC9n+dYt1Y4CbSH52ztwbKDBICJqaWB9Qvmhfq7riJO14/wl/BOAf32Wh8TMXInvKMKjH1yy2aJQiDRh7a8YmqsEh8bWbIMF+YOryB4Fa9zxyNddNWBv0mhEoHp3bnzKl17ofiN5QY8KDrw0br+qrP7nRuOsyOiQ7I+jQyu6NdLDy3C8xWX5bbbOBxSV6vi4+G2NovWIJ8+glODMQgXdOQjcEFVyD1Py5b
arm03-qa01.cloud.fedoraproject.org,arm03-qa01,209.132.184.73 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9GRMuUyRUn6NnuIt7+3lu7SSn79Kyj0/s9zLeJT16Q9/nm5QBI1foxFD0dotMkA835e21REw8oqRa+cnNIbul3qL/hEX2yFfqtp007Ucmh7+VPXfQiZP68OUQHMHHrW3R1VNjNyRGj/9Er7rxBn4KCZ3R9egY+/RipxphpFLpIeUBGY5yCzY56bw/s0vd0NXFOe9LGx0FSGbBImh7kAVsByVb/8ZEt8rCEmEJ5bkgnRqagKhC6oJdKFZDkj8zfU/0ZNzxJtHGvXlyz34pZ1juXBdoHuEwCwYLqJQycgCLE3ZfUPe6u0VZ/fHEhvkxYoDm0VaBNVmi9rJVI1xuBtKD
</pre>


== IPV6 info ==
== IPV6 info ==


Sadly, ipv6 isn't currently available due to a provider issue. Will get it re-enabled as soon as they fix their setup.
Sadly, ipv6 isn't currently available due to a provider issue. Will get it enabled as soon as we can offer it.  


[[Category:Package Maintainers]]
[[Category:Package Maintainers]]

Revision as of 19:43, 2 July 2021

Overview

In some cases Fedora Package maintainers may not have access to all supported architectures or releases of Fedora that they maintain packages for. In order to assist with this, some community members are providing access to test machines/instances that they maintain to allow Fedora package maintainers to test, build, compile or debug their packages.

Available Machines/Instances

hostname fedora version arch cpu memory disk contact
rawhide-test.fedorainfracloud.org rawhide x86_64 cloud instance 3.00GHz 8GB ram 100GB disk admin@fedoraproject.org
f33-test.fedorainfracloud.org f33 x86_64 cloud instance 3.00Ghz 8GB ram 100GB disk admin@fedoraproject.org
el8-test.fedorainfracloud.org centos8 x86_64 cloud instance 3.00Ghz 8GB ram 100GB disk admin@fedoraproject.org
el7-test.fedorainfracloud.org centos7 x86_64 cloud instance 3.00Ghz 8GB ram 100GB disk admin@fedoraproject.org
ppc64le-test.fedorainfracloud.org f34 ppc64le vm - 8GB ram 40GB disk admin@fedoraproject.org
aarch64-test01.fedorainfracloud.org f33 aarch64 cloud instance - 8GB ram 100GB disk admin@fedoraproject.org
armv7-test01.fedorainfracloud.org f34 armv7 vm - 40GB ram 140GB disk admin@fedoraproject.org
armv7-test02.fedorainfracloud.org f34 armv7 vm - 40GB ram 140GB disk admin@fedoraproject.org
Note.png
machine names and location has changed as of 2020-03-18

FAQ

Q: What precautions should I take on these machines.

A: Since all Fedora packagers or qa members have root access on these machines, do not enter any sensitive information, including FAS credentials on these machines. These systems should never ask you for your FAS password (sudo is NOPASSWD). Authentication is only done via the SSH key you have set in FAS. In particular, it is recommended to disable SSH agent forwarding on these machines on the client side (agent forwarding is disabled on the server, but any user on the system could potentially reenable it). To do this, add the following to your ~/.ssh/config:

Host *.fedorainfracloud.org
  ForwardAgent no
Host *.cloud.fedoraproject.org
  ForwardAgent no

Q: Who has access to these instances?

A: Anyone who is in the Fedora "packager" group. or anyone in the Fedora "qa" group for the qa machines. Use your ssh key from the fedora account system to login. Package maintainers have 'sudo' access.

Q: What kinds of things can I do on these machines?

A: Any of the following:

  • mock build packages
  • install and test packages
  • build packages locally to try and fix problems or compile errors
  • Check locations of files, layout or versions to help solve a Fedora bug.
  • Basically anything that is directly related to Fedora Maintainer tasks.

Q: What should I not do?

A: Any of the following:

  • Things that are not related to your job as maintainer of Fedora packages.
  • Probing or accessing any other system.
  • publishing data or content to the internet.

Q: Can I upgrade/downgrade $basepackage, or reboot the instances?

A: If you need to do this, please contact the maintainer of the instance and arrange it.

Q: Can I leave any data on these instances?

A: No. They could be re-installed at most any time, or rebooted, or suffer a data loss. Please scp or rsync your work off often, and when done, please revert any package installs/downgrades/upgrades.

Q: Aren't you worried that someone will misuse these instances?

A: No. We trust the packagers to maintain and build our packages in Fedora, why would we not trust them to use test instances correctly? Additionally, the instances are all isolated from any local machines, ssh agent forwarding is disabled, and they only allow incoming ssh and a handfull of outgoing traffic.

Q: Can I use one of these instances to maintain my packages from?

A: No. ssh agent forwarding is disabled for security reasons, so you will not be able to do git checkins from these instances. Additionally, they could be re-installed or files could be wiped at any time. You should not use these as a place to maintain your packages from.

Q: I messed up one of the existing instances. What do I do?

A: Don't panic. Just inform the owner of that instance and they will spin up another instance. It's not a problem.

Q: I would like to contibute a host/instance/machine to allow people to test things, how can I do that?

A: I would be happy to help you in setting up a machine as the above test instances are. Contact me (kevin@scrye.com) for more info on how to set up the hosts. If you want to know some details about the setup, take a look at the ansible playbooks used for these machines at https://www.scrye.com/~kevin/fedora/scrye-ansible/. To make them work you need a special FAS account that is in the group thirdparty, though.

Q: I would like to donate some secondary arch hardware/machine resources to this effort. How can I do that?

A: See the previous question if you just want to bring up your own test machines at your site. If you would like me to host/manage your machines, please contact me (kevin@scrye.com) and we can see if we can work something out.

Q: What should the ssh host keys be for these instances?

A1: https://admin.fedoraproject.org/ssh_known_hosts has all the ssh host keys

IPV6 info

Sadly, ipv6 isn't currently available due to a provider issue. Will get it enabled as soon as we can offer it.