Return-Path: 
 <ooo-dev-return-2709-apmail-incubator-ooo-dev-archive=incubator.apache.org@incubator.apache.org>
X-Original-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org
Delivered-To: apmail-incubator-ooo-dev-archive@minotaur.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id EC68C661E
	for <apmail-incubator-ooo-dev-archive@minotaur.apache.org>;
 Sun, 31 Jul 2011 23:18:50 +0000 (UTC)
Received: (qmail 29363 invoked by uid 500); 31 Jul 2011 23:18:50 -0000
Delivered-To: apmail-incubator-ooo-dev-archive@incubator.apache.org
Received: (qmail 29292 invoked by uid 500); 31 Jul 2011 23:18:49 -0000
Mailing-List: contact ooo-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:ooo-dev-help@incubator.apache.org>
List-Unsubscribe: <mailto:ooo-dev-unsubscribe@incubator.apache.org>
List-Post: <mailto:ooo-dev@incubator.apache.org>
List-Id: <ooo-dev.incubator.apache.org>
Reply-To: ooo-dev@incubator.apache.org
Delivered-To: mailing list ooo-dev@incubator.apache.org
Received: (qmail 29273 invoked by uid 99); 31 Jul 2011 23:18:49 -0000
Received: from minotaur.apache.org (HELO minotaur.apache.org) (140.211.11.9)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 31 Jul 2011 23:18:49 +0000
Received: from localhost (HELO [192.168.23.9]) (127.0.0.1)
  (smtp-auth username markt, mechanism plain)
  by minotaur.apache.org (qpsmtpd/0.29) with ESMTP;
 Sun, 31 Jul 2011 23:18:48 +0000
Message-ID: <4E35E2D6.9010202@apache.org>
Date: Mon, 01 Aug 2011 00:18:46 +0100
From: Mark Thomas <markt@apache.org>
User-Agent: Mozilla/5.0 (Windows NT 5.2; WOW64;
 rv:5.0) Gecko/20110624 Thunderbird/5.0
MIME-Version: 1.0
To: infrastructure-dev@apache.org
CC: TerryE <ooo@ellisons.org.uk>, ooo-dev@incubator.apache.org,
 "Dennis E. Hamilton" <dennis.hamilton@acm.org>
Subject: Re: Questions: LAMP and PHPBB for OpenOffice.org
References: <00c001cc4fc4$ca44e9c0$5ecebd40$@acm.org>
 <4E35D27C.60108@apache.org> <4E35DB43.9080005@ellisons.org.uk>
In-Reply-To: <4E35DB43.9080005@ellisons.org.uk>
X-Enigmail-Version: 1.2
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

On 31/07/2011 23:46, TerryE wrote:
> On 31/07/11 23:09, Mark Thomas wrote:
> 
> <snip>
>> I would imagine that these services would be hosted on project managed
>> virtual machines of some form and whoever manages them now would
>> continue to manage them. The central infra team may end up managing some
>> aspects such as DNS. The detail can be worked on as part of the
>> incubation process.
>>
>> The much more important question is who will support it. There have been
>> far too many examples of projects requesting a service, promising to
>> help support it and then never being heard from again when it needs
>> maintenance. If the current maintenance is performed by Oracle rather
>> than the community there will be concerns about the viability of that
>> model.
>>
>> On a related note, infrastructure will not tolerate project managed
>> systems that are insecure. We will shut them down first and ask
>> questions later. Projects are expected to keep on top of security for
>> the services that they manage. We do arrange things so projects can only
>> shoot themselves in the foot but will still expect security to be
>> maintained.
>>
>> Mark
>>
> Mark,
> 
> I've been administering the forums for 4 years, including bringing on 8
> new languages, a migration from PostgreSQL to MySQL (when Sun bought
> MySQL LoL), and 5 phpBB upgrades.  The only service outages that we've
> had were when there were H/W problems in the Sun Datacentre.  I've
> automated just about all of the housekeeping, so there is no daily /
> weekly / monthly manual invention required.  So I think that we have a
> good track record here.
> 
> The wiki is more problematic since this was run by Oracle employees who
> have now been 'let-go'.   However, I used to help with the main guy with
> advice on Apache / MediaWiki / PHP / MySQL tuning and so I know  and
> have interactive access to the systen.  I can rehost this and continue
> to run it on a 'sustain' basis so that we can continue to provide the
> service until the project works out its migration / retirement plans.
> 
> Yes, I am a single point of failure, but I am more than willing to
> document the SysOps and or train up someone else.   It's just that
> there's a dearth of LAMP developer / admins amongst the OOo user
> community.  Another member of the ooo-dev list used help until I
> automated everything and he had other priorities in the project.  I used
> to be the operations CTO for EDS in Europe before I retired early and
> went back to the simple stuff as a hobby, so I understand all about the
> security side!

That all sounds good to me.

> I've got D/R / maintenance copies of both the forums and the wiki on a
> couple of standard Ubuntu 10.04-3 LTS VMs, but if you have any
> guidelines / VM templates / management interface documentation then send
> me a copy and I'll reflect them in my plans / work.

That is mostly all in the infra svn repository.

> And BTW, a simple Q:  what virtualisation technology are using in your
> prod environment? VMware, KVM or what?

VMware, Solaris Zones (on the way out - slowly), FreeBSD jails.

See
http://monitoring.apache.org/status/
and
http://www.apache.org/dev/machines.html
for more details.

Mark