From matthijs at nlnetlabs.nl Wed Jan 2 09:12:29 2013 From: matthijs at nlnetlabs.nl (Matthijs Mekking) Date: Wed, 02 Jan 2013 10:12:29 +0100 Subject: [Opendnssec-develop] RE: New pages in 1.4 documentation In-Reply-To: References: Message-ID: <50E3F9FD.5010505@nlnetlabs.nl> Hi Sara and all, First of all: Happy new year! On 12/20/2012 01:49 PM, Sara Dickinson wrote: > Hi All, > > I've update the following page based on reviewing the NEWS file for > notable updates: > > https://wiki.opendnssec.org/display/DOCSTRUNK/New+in+OpenDNSSEC+1.4 > > Please let me know if there is anything important missing from here! Missing not, I believe. Perhaps a bit too much: * Added EDNS0 support, so that zone transfers and SOA requests with OPT RRs are possible. In 1.3 this was also possible, ldns did it then (in the zonefetcher). This line can be removed. Another thing I notice is that you write 'Adaptor' instead of 'Adapter'. Is that intentional? Best regards, Matthijs > > > Also - I have added several new pages underneath the 'Overview' section: > > https://wiki.opendnssec.org/display/DOCSTRUNK/Overview+of+OpenDNSSEC > > and also tweaked the architecture diagram, etc after some discussions > with Matthijs. The content of the 'quick guide' page is based on the > questions we frequently get on the users list. Any and all > comments/feedback/proof reading gratefully received! > > Sara. > > > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop > -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 553 bytes Desc: OpenPGP digital signature URL: From sara at sinodun.com Mon Jan 7 08:53:22 2013 From: sara at sinodun.com (Sara Dickinson) Date: Mon, 7 Jan 2013 08:53:22 +0000 Subject: [Opendnssec-develop] RE: Team Meeting - Tuesday 8th Jan @ 14.00 CET References: <19996BBF-FC80-4CB6-B8E1-A574F05FAD12@sinodun.com> Message-ID: Hi All, Happy New Year to everyone! We have a team meeting on Tuesday: Date: Tuesday 8 January 2013 Time: 14:00-15:00 CET, 13:00-14:00 GMT Method: Google+ Agenda: will be published shortly Sara. -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry at opendnssec.org Mon Jan 7 10:02:07 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Mon, 7 Jan 2013 11:02:07 +0100 Subject: [Opendnssec-develop] Re: IPv6 problems to dist./svn.opendnssec.org In-Reply-To: <7E45A2CA-0A85-4D12-ADA5-89481F39F797@opendnssec.org> References: <7E45A2CA-0A85-4D12-ADA5-89481F39F797@opendnssec.org> Message-ID: Hi, On Dec 18, 2012, at 16:55 , Jerry Lundstr?m wrote: > I have noticed some IPv6 problems on the KVM running our repositories, looks like a problem with the KVM network drivers. > If you have problems try disabling IPv6 or forcing svn to use IPv4 until this is resolved. Problem has been identified and solution will be put in place today which will require a reboot of the VMs but it takes just a few seconds so I don't think you'll notice it. It was the generic-segmentation-offload in virtio_net driver for the guests that caused IPv6 to be very slow when sending, you'd get a burst of ~450KB then it would drop down to 15KB/s. /Jerry -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 495 bytes Desc: Message signed with OpenPGP using GPGMail URL: From Roland.vanRijswijk at surfnet.nl Mon Jan 7 10:16:41 2013 From: Roland.vanRijswijk at surfnet.nl (Roland van Rijswijk - Deij) Date: Mon, 07 Jan 2013 11:16:41 +0100 Subject: [Opendnssec-develop] Performance benchmarks In-Reply-To: References: <534DA3E3-3284-4F97-B178-CFF7F5C72C6D@sinodun.com> <2F380956-6749-4DEC-BFAC-8E3E41603345@sinodun.com> Message-ID: <50EAA089.3010709@surfnet.nl> Hi Sara, Sara Dickinson wrote: >> This only affects the Signer and what is interesting to benchmark here >> is memory usage and not signing since that is almost fully depended on >> the HSM used. > > Does anyone know where he HSM's we have installed (SafeNet Luna SA 4) > fall in the range of HSM's available? Does it at least give us a correct > order of magnitude for timings? If used locally (i.e. the HSM is in the same network as the box using it), the performance is in the order of magnitude of about 4000 RSA 1024 signatures per second. I'm planning to go to the location where the HSM is housed to reinitialise it somewhere this month but haven't set the date yet. Once that's done, you can use SafeNet's benchmark tools on it from the test box. BTW: Jerry, can you create an account for me on the test box and e-mail me the password via GPG encrypted mail? Preferably with sudo rights so I can install the HSM middleware. Cheers, Roland -- -- Roland M. van Rijswijk - Deij -- SURFnet bv -- w: http://www.surfnet.nl/en/ -- t: +31-30-2305388 -- e: roland.vanrijswijk at surfnet.nl From sara at sinodun.com Mon Jan 7 11:47:39 2013 From: sara at sinodun.com (Sara Dickinson) Date: Mon, 7 Jan 2013 11:47:39 +0000 Subject: [Opendnssec-develop] RE: Team Meeting - Tuesday 8th Jan @ 14.00 CET References: Message-ID: <86AC5C12-8259-44C3-AD24-0947C897A30B@sinodun.com> Agenda: https://wiki.opendnssec.org/display/OpenDNSSEC/2013-01-08+Agenda Begin forwarded message: > From: Sara Dickinson > Date: 7 January 2013 08:53:22 GMT > To: "opendnssec-develop at lists.opendnssec.org Dev" > Subject: [Opendnssec-develop] RE: Team Meeting - Tuesday 8th Jan @ 14.00 CET > > Hi All, > > Happy New Year to everyone! We have a team meeting on Tuesday: > > Date: Tuesday 8 January 2013 > Time: 14:00-15:00 CET, 13:00-14:00 GMT > Method: Google+ > Agenda: will be published shortly > > Sara. > > > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry at opendnssec.org Mon Jan 7 13:37:59 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Mon, 7 Jan 2013 14:37:59 +0100 Subject: [Opendnssec-develop] Team Meeting - Tuesday 8th Jan @ 14.00 CET In-Reply-To: <86AC5C12-8259-44C3-AD24-0947C897A30B@sinodun.com> References: <86AC5C12-8259-44C3-AD24-0947C897A30B@sinodun.com> Message-ID: <58B92E0F-3727-4F60-A306-F198AE3F4712@opendnssec.org> On Jan 7, 2013, at 12:47 , Sara Dickinson wrote: > Agenda: https://wiki.opendnssec.org/display/OpenDNSSEC/2013-01-08+Agenda I've added a point to the agenda under Testing about JUnit in Jenkins. Everyone, please click around on these links before the meeting: https://jenkins.opendnssec.org/job/test-opendnssec-trunk-junit/ https://jenkins.opendnssec.org/job/test-opendnssec-trunk-junit/lastCompletedBuild/testReport/ https://jenkins.opendnssec.org/job/test-opendnssec-trunk-junit/lastCompletedBuild/label=debian64-ods01/testReport/ https://jenkins.opendnssec.org/job/test-opendnssec-trunk-junit/lastCompletedBuild/label=debian64-ods01/testReport/enforcer/conf/short_interval/ /Jerry -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From sara at sinodun.com Tue Jan 8 09:59:53 2013 From: sara at sinodun.com (Sara Dickinson) Date: Tue, 8 Jan 2013 09:59:53 +0000 Subject: [Opendnssec-develop] Fwd: Maintenance of eppclient References: <4FC7C18C-2730-4E68-A70A-A108707C1A11@kirei.se> Message-ID: <06203B19-C921-4D44-9F8A-9A287B7FCEBF@sinodun.com> All, You may remember an issue was raised with the use of libcurl in the eppclient implementation on the mailing list last year. After some discussion it is proposed that the contents of the trunk/OpenDNSSEC/plugins directory is moved to a trunk/contrib directory (see below for details). If no-one has any objections I will go ahead with this - probably on Friday this week but certainly before any 1.4 release candidate. Sara. Begin forwarded message: > From: Jakob Schlyter > Subject: Re: Maintenance of eppclient > Date: 7 January 2013 20:31:58 GMT > To: Sara Dickinson > Cc: Patrik Wallstr?m > > On 7 jan 2013, at 15:56, Sara Dickinson wrote: > >> It is currently in trunk/OpenDNSSEC/plugins. Do you mean move it from there to a (new) trunk/contrib directory? (And do the same with simple-dnskey-mailer?) > > Yes, right. I think we should move all contrib that we do not maintain to trunk/contrib. > >> We would need to remove the --enable-eppclient configure option, and update the conf.xml file too (which currently points to the eppclient in the commented out tag). > > Correct. > > jakob > > -- > Jakob Schlyter > Kirei AB - www.kirei.se > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry at opendnssec.org Tue Jan 8 10:11:43 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Tue, 8 Jan 2013 11:11:43 +0100 Subject: [Opendnssec-develop] Maintenance of eppclient In-Reply-To: <06203B19-C921-4D44-9F8A-9A287B7FCEBF@sinodun.com> References: <4FC7C18C-2730-4E68-A70A-A108707C1A11@kirei.se> <06203B19-C921-4D44-9F8A-9A287B7FCEBF@sinodun.com> Message-ID: <7A86896C-A47E-43B1-9247-07892CB2A042@opendnssec.org> On Jan 8, 2013, at 10:59 , Sara Dickinson wrote: > You may remember an issue was raised with the use of libcurl in the eppclient implementation on the mailing list last year. After some discussion it is proposed that the contents of the trunk/OpenDNSSEC/plugins directory is moved to a trunk/contrib directory (see below for details). If no-one has any objections I will go ahead with this - probably on Friday this week but certainly before any 1.4 release candidate. Yes please do this! Never liked that other programs was inside OpenDNSSEC. Remember to clean up the configure stuff also. /Jerry -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From jerry at opendnssec.org Tue Jan 8 14:19:22 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Tue, 8 Jan 2013 15:19:22 +0100 Subject: [Opendnssec-develop] Jenkins/JUnit category/testnames Message-ID: <17A1D7E9-301D-4094-BC0E-360623734309@opendnssec.org> Hi, So about this? If we want just one place for the information I suggest directory name in this format: application.area.test_short-name This can then be used straight up in JUnit as: .. Important: - Dots will separate the different package/classname/testname and can therefor not exist anywhere else. - Spaces in directory name should not be used (really as best practice), use _ or - instead. We would have to rename all the directories again but if we, later on, implement subtests we could start merging mosts tests into a single one for example: stage 1: general-repository-capacity-01 => general.repository.capacity_100000 general-repository-capacity-02 => general.repository.capacity_4 general-repository-capacity-03 => general.repository.fail_capacity_0 general-repository-capacity-04 => general.repository.fail_capacity_1 stage 2: general.repository.capacity_100000 + general.repository.capacity_4 => general.repository.capacity subtests: capacity_100000 capacity_4 general.repository.fail_capacity_0 + general.repository.fail_capacity_1 => general.repository.capacity-fail subtests: fail_capacity_0 fail_capacity_1 or just all into general.repository.capacity with all subtests. What you say? -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 495 bytes Desc: Message signed with OpenPGP using GPGMail URL: From sara at sinodun.com Tue Jan 8 14:28:16 2013 From: sara at sinodun.com (Sara Dickinson) Date: Tue, 8 Jan 2013 14:28:16 +0000 Subject: [Opendnssec-develop] RE: Team Meeting - Tuesday 8th Jan @ 14.00 CET References: <86AC5C12-8259-44C3-AD24-0947C897A30B@sinodun.com> Message-ID: <0D7E4FB3-D064-47FE-96D9-C10924F7EE80@sinodun.com> All, Minutes from the meeting today are available online for review: https://wiki.opendnssec.org/display/OpenDNSSEC/2013-01-08+Minutes Sara. -------------- next part -------------- An HTML attachment was scrubbed... URL: From sara at sinodun.com Wed Jan 9 14:40:22 2013 From: sara at sinodun.com (Sara Dickinson) Date: Wed, 9 Jan 2013 14:40:22 +0000 Subject: [Opendnssec-develop] RE: 1.4.0rc1 release Message-ID: Hi All, As agreed yesterday we will go ahead with a 1.4.0rc1 release. Jerry - could you please create the tarball when you have time? Sara. From jerry at opendnssec.org Wed Jan 9 14:53:39 2013 From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Wed, 9 Jan 2013 15:53:39 +0100 Subject: [Opendnssec-develop] RE: 1.4.0rc1 release In-Reply-To: References: Message-ID: On Wed, Jan 9, 2013 at 3:40 PM, Sara Dickinson wrote: > As agreed yesterday we will go ahead with a 1.4.0rc1 release. Jerry - could you please create the tarball when you have time? Will do tomorrow. -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From sara at sinodun.com Thu Jan 10 13:03:53 2013 From: sara at sinodun.com (Sara Dickinson) Date: Thu, 10 Jan 2013 13:03:53 +0000 Subject: [Opendnssec-develop] RE: Jenkins will be down on Sunday Message-ID: <505CE220-84EE-4D35-A6D0-A3D032FE700D@sinodun.com> Hi All, Due to maintenance work at our offices which will cause a power outage Jenkins will be unavailable this Sunday (13th) from 9pm CET. It should be back online by first thing Monday morning at the latest, but most probably Sunday evening. Apologies for any inconvenience this causes. Sara. From jerry at opendnssec.org Thu Jan 10 14:38:30 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Thu, 10 Jan 2013 15:38:30 +0100 Subject: [Opendnssec-develop] 1.4.0rc1 release In-Reply-To: References: Message-ID: On Jan 9, 2013, at 15:53 , Jerry Lundstr?m wrote: > On Wed, Jan 9, 2013 at 3:40 PM, Sara Dickinson wrote: >> As agreed yesterday we will go ahead with a 1.4.0rc1 release. Jerry - could you please create the tarball when you have time? > > Will do tomorrow. Done, in the usual place. -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From sara at sinodun.com Thu Jan 10 15:01:19 2013 From: sara at sinodun.com (Sara Dickinson) Date: Thu, 10 Jan 2013 15:01:19 +0000 Subject: [Opendnssec-develop] RE: Regression test names Message-ID: All, The regression test names have now been updated to use the format required to support categorisation in JUnit as discussed in the last team meeting i.e. application.area.test_short_name The wiki page has been update to reflect this: https://wiki.opendnssec.org/display/OpenDNSSEC/Test+case+policy The #CATEGORY tag has also been removed as the test names should be self explanatory. Sara. From jerry at opendnssec.org Fri Jan 11 09:18:05 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Fri, 11 Jan 2013 10:18:05 +0100 Subject: [Opendnssec-develop] Failing Jenkins test after rename not related to rename Message-ID: <76CC12AC-D4A3-4A06-BA09-04F7D37EE51E@opendnssec.org> Hi, Since Sara renamed yesterday we have had a lot of failing test and it does not look like they are related to the rename. It looks more like its a effect of the latest commits, these tests fails on all platforms: ##### Fri Jan 11 08:59:10 CET 2013 34/45 signer.adaptors.input_basic ... FAILED! ##### Fri Jan 11 09:00:21 CET 2013 35/45 signer.adaptors.input_ixfr_notimpl ... FAILED! ##### Fri Jan 11 09:01:18 CET 2013 36/45 signer.adaptors.input_retry_expires ... FAILED! ##### Fri Jan 11 09:05:38 CET 2013 38/45 signer.adaptors.output_basic ... FAILED! Can you look at this Matthijs? /Jerry -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 495 bytes Desc: Message signed with OpenPGP using GPGMail URL: From sara at sinodun.com Mon Jan 14 10:40:09 2013 From: sara at sinodun.com (Sara Dickinson) Date: Mon, 14 Jan 2013 10:40:09 +0000 Subject: [Opendnssec-develop] RE: Jenkins will be down on Sunday In-Reply-To: <505CE220-84EE-4D35-A6D0-A3D032FE700D@sinodun.com> References: <505CE220-84EE-4D35-A6D0-A3D032FE700D@sinodun.com> Message-ID: <929E4BD5-C929-4D79-A360-A6612B038F7F@sinodun.com> All, Jenkins is (finally) back up and running! Sara. On 10 Jan 2013, at 13:03, Sara Dickinson wrote: > Hi All, > > Due to maintenance work at our offices which will cause a power outage Jenkins will be unavailable this Sunday (13th) from 9pm CET. It should be back online by first thing Monday morning at the latest, but most probably Sunday evening. Apologies for any inconvenience this causes. > > Sara. > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop From jerry at opendnssec.org Mon Jan 14 13:41:27 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Mon, 14 Jan 2013 14:41:27 +0100 Subject: [Opendnssec-develop] Reduced time for OpenDNSSEC until June Message-ID: Hi, If you missed it, .SE has been named pre-delgation tester (PDT of all acronyms) by ICANN for all the new top level domains and we also, just last week, took over operations of .nu . This means that my time in OpenDNSSEC (until June) will be very limited, I will only be able to do a few hours each week (administration, releases, emergencies etc). I will try and finish up the JUnit changes for the testing framework later this week but for new things, for example Coverity, it will be put on hold for the nearest future (kinda hectic right now, might cool down in 2-3 months). Will also try and attend the meetings when ever I can. /Jerry -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 495 bytes Desc: Message signed with OpenPGP using GPGMail URL: From matthijs at nlnetlabs.nl Mon Jan 14 14:36:24 2013 From: matthijs at nlnetlabs.nl (Matthijs Mekking) Date: Mon, 14 Jan 2013 15:36:24 +0100 Subject: [Opendnssec-develop] RE: Jenkins will be down on Sunday In-Reply-To: <929E4BD5-C929-4D79-A360-A6612B038F7F@sinodun.com> References: <505CE220-84EE-4D35-A6D0-A3D032FE700D@sinodun.com> <929E4BD5-C929-4D79-A360-A6612B038F7F@sinodun.com> Message-ID: <50F417E8.7090802@nlnetlabs.nl> Jenkins seems to have dead jobs during the last build: FATAL: Unable to delete script file /tmp/hudson5253729072544100294.sh hudson.util.IOException2: remote file operation failed: /tmp/hudson5253729072544100294.sh at hudson.remoting.Channel at 7c41f067:centos32-ods13 at hudson.FilePath.act(FilePath.java:848) at hudson.FilePath.act(FilePath.java:825) at hudson.FilePath.delete(FilePath.java:1202) at hudson.tasks.CommandInterpreter.perform(CommandInterpreter.java:101) at hudson.tasks.CommandInterpreter.perform(CommandInterpreter.java:60) at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:19) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:810) at hudson.model.Build$BuildExecution.build(Build.java:199) at hudson.model.Build$BuildExecution.doRun(Build.java:160) at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:592) at hudson.model.Run.execute(Run.java:1543) at hudson.matrix.MatrixRun.run(MatrixRun.java:146) at hudson.model.ResourceController.execute(ResourceController.java:88) at hudson.model.Executor.run(Executor.java:236) Caused by: hudson.remoting.ChannelClosedException: channel is already closed at hudson.remoting.Channel.send(Channel.java:494) at hudson.remoting.Request.call(Request.java:129) at hudson.remoting.Channel.call(Channel.java:672) at hudson.FilePath.act(FilePath.java:841) ... 13 more Caused by: java.io.IOException at hudson.remoting.Channel.close(Channel.java:910) at hudson.remoting.Channel.close(Channel.java:892) at hudson.slaves.SlaveComputer.closeChannel(SlaveComputer.java:560) at hudson.slaves.SlaveComputer.kill(SlaveComputer.java:541) at hudson.model.AbstractCIBase.killComputer(AbstractCIBase.java:85) at jenkins.model.Jenkins.cleanUp(Jenkins.java:2619) at hudson.WebAppMain.contextDestroyed(WebAppMain.java:338) at winstone.WebAppConfiguration.destroy(WebAppConfiguration.java:1167) at winstone.HostConfiguration.destroyWebApp(HostConfiguration.java:148) at winstone.HostConfiguration.destroy(HostConfiguration.java:156) at winstone.HostGroup.destroy(HostGroup.java:77) at winstone.Launcher.shutdown(Launcher.java:337) at winstone.ShutdownHook.run(ShutdownHook.java:25) Build was aborted No emails were triggered. Finished: ABORTED On 01/14/2013 11:40 AM, Sara Dickinson wrote: > All, > > Jenkins is (finally) back up and running! > > Sara. > > > On 10 Jan 2013, at 13:03, Sara Dickinson wrote: > >> Hi All, >> >> Due to maintenance work at our offices which will cause a power outage Jenkins will be unavailable this Sunday (13th) from 9pm CET. It should be back online by first thing Monday morning at the latest, but most probably Sunday evening. Apologies for any inconvenience this causes. >> >> Sara. >> _______________________________________________ >> Opendnssec-develop mailing list >> Opendnssec-develop at lists.opendnssec.org >> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop > > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop > -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 553 bytes Desc: OpenPGP digital signature URL: From jerry at opendnssec.org Mon Jan 14 14:43:01 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Mon, 14 Jan 2013 15:43:01 +0100 Subject: [Opendnssec-develop] Jenkins will be down on Sunday In-Reply-To: <50F417E8.7090802@nlnetlabs.nl> References: <505CE220-84EE-4D35-A6D0-A3D032FE700D@sinodun.com> <929E4BD5-C929-4D79-A360-A6612B038F7F@sinodun.com> <50F417E8.7090802@nlnetlabs.nl> Message-ID: On Jan 14, 2013, at 15:36 , Matthijs Mekking wrote: > Jenkins seems to have dead jobs during the last build: Looks like a new version just updated, restarting Jenkins to see if that fixes it. -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 495 bytes Desc: Message signed with OpenPGP using GPGMail URL: From jerry at opendnssec.org Mon Jan 14 14:44:27 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Mon, 14 Jan 2013 15:44:27 +0100 Subject: [Opendnssec-develop] Can someone take SUPPORT-48 ? Message-ID: <8A9C676C-3579-4F95-B8E9-3FE0E65ACADB@opendnssec.org> Hi, I do not have time for https://issues.opendnssec.org/browse/SUPPORT-48 right now, can someone else take it? Thanks Jerry -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 495 bytes Desc: Message signed with OpenPGP using GPGMail URL: From jad at sinodun.com Mon Jan 14 14:58:38 2013 From: jad at sinodun.com (John Dickinson) Date: Mon, 14 Jan 2013 14:58:38 +0000 Subject: [Opendnssec-develop] Jenkins will be down on Sunday In-Reply-To: References: <505CE220-84EE-4D35-A6D0-A3D032FE700D@sinodun.com> <929E4BD5-C929-4D79-A360-A6612B038F7F@sinodun.com> <50F417E8.7090802@nlnetlabs.nl> Message-ID: <387CE07F-7057-4A5C-BB0A-22AC695FE814@sinodun.com> There also appears to be a faulty nic, cable or switch connecting jenkins to the world - will replace the cable asap and keep an eye on it. John On 14 Jan 2013, at 14:43, Jerry Lundstr?m wrote: > On Jan 14, 2013, at 15:36 , Matthijs Mekking wrote: > >> Jenkins seems to have dead jobs during the last build: > > > Looks like a new version just updated, restarting Jenkins to see if that fixes it. > > -- > Jerry Lundstr?m - OpenDNSSEC Developer > http://www.opendnssec.org/ > > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop From sara at sinodun.com Tue Jan 15 13:46:42 2013 From: sara at sinodun.com (Sara Dickinson) Date: Tue, 15 Jan 2013 13:46:42 +0000 Subject: [Opendnssec-develop] Re: Reduced time for OpenDNSSEC until June In-Reply-To: References: Message-ID: <7C0F3C18-85F1-4706-8D8F-392E1CD58C65@sinodun.com> On 14 Jan 2013, at 13:41, Jerry Lundstr?m wrote: > Hi, > > If you missed it, .SE has been named pre-delgation tester (PDT of all acronyms) by ICANN for all the new top level domains and we also, just last week, took over operations of .nu . Congrats to .SE! > > This means that my time in OpenDNSSEC (until June) will be very limited, I will only be able to do a few hours each week (administration, releases, emergencies etc). :-( Lets talk offline about the details of who will do what in the meantime. > > I will try and finish up the JUnit changes for the testing framework later this week but for new things, for example Coverity, it will be put on hold for the nearest future (kinda hectic right now, might cool down in 2-3 months). > > Will also try and attend the meetings when ever I can. Sure and thanks! Sara. > > /Jerry > > -- > Jerry Lundstr?m - OpenDNSSEC Developer > http://www.opendnssec.org/ > From sara at sinodun.com Tue Jan 15 14:50:51 2013 From: sara at sinodun.com (Sara Dickinson) Date: Tue, 15 Jan 2013 14:50:51 +0000 Subject: [Opendnssec-develop] RE: Moving some regression tests to only run daily Message-ID: <11E986C2-715B-4698-A48C-7336AA4CB07F@sinodun.com> Hi All, Now that the regression tests have been renamed I want to move some tests from running on every build into the daily test. I propose moving most of the tests that run through non default configuration options to the daily tests so this would be: enforcer.conf.db_hostname enforcer.conf.db_name enforcer.conf.db_password enforcer.conf.db_port enforcer.conf.db_user enforcer.conf.move_kasp_db enforcer.conf.privileges_nonexistant_user enforcer.conf.privileges_ok_user enforcer.conf.short_interval general.conf.change_logging_ok general.conf.invalid_logging general.conf.move_kasp_xml general.conf.move_zonelist_xml general.repository.capacity_of_0 general.repository.capacity_of_1 general.repository.capacity_of_10000 general.repository.capacity_of_4 general.repository.module_missing general.repository.module_wrong general.repository.multiple_repositories general.repository.pin_incorrect_01 general.repository.pin_incorrect_02 general.repository.pin_missing general.repository.token_1_char general.repository.token_many_chars signer.conf.move_directories signer.conf.privileges_nonexistant_user signer.conf.privileges_ok_user signer.conf.threads_of_1 signer.conf.threads_of_32 Based on the initial JUnit results these tests take around 10 mins to run. The general aim would be to keep as many of the 'core' functional tests as possible (enforcing, signing and command line tools) running on every build while still keeping the test time to a sensible level (20 mins?) and moving everything else to the daily test. If the daily test becomes too long we will create a weekly test set. I'll move these tests on Friday unless I hear otherwise. Sara. -------------- next part -------------- An HTML attachment was scrubbed... URL: From sara at sinodun.com Fri Jan 18 14:36:02 2013 From: sara at sinodun.com (Sara Dickinson) Date: Fri, 18 Jan 2013 14:36:02 +0000 Subject: [Opendnssec-develop] RE:Team Meeting - Monday 21st Jan @ 14.00 CET References: <0D7E4FB3-D064-47FE-96D9-C10924F7EE80@sinodun.com> Message-ID: <775A101C-E031-477B-A3B8-2E0428A88959@sinodun.com> Hi All, We have a team meeting on Monday: Date: Monday 21 January 2013 Time: 14:00-15:00 CET, 13:00-14:00 GMT Method: Google+ Agenda: https://wiki.opendnssec.org/display/OpenDNSSEC/2013-01-21+Agenda Sara. -------------- next part -------------- An HTML attachment was scrubbed... URL: From jerry at opendnssec.org Mon Jan 21 08:31:58 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Mon, 21 Jan 2013 09:31:58 +0100 Subject: [Opendnssec-develop] Moving some regression tests to only run daily In-Reply-To: <11E986C2-715B-4698-A48C-7336AA4CB07F@sinodun.com> References: <11E986C2-715B-4698-A48C-7336AA4CB07F@sinodun.com> Message-ID: <4C39D1F8-266E-4817-906D-275811645403@opendnssec.org> Hi, On Jan 15, 2013, at 15:50 , Sara Dickinson wrote: > I'll move these tests on Friday unless I hear otherwise. Since the move there have been a lot of errors which is very likely related to the move, this is because an SVN update can't remove the old test directories since they might contain logs from previous failed runs. I will wipe all the workspaces during our meeting later today so that the next run is from a clean workspace. /Jerry -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From sara at sinodun.com Mon Jan 21 14:54:08 2013 From: sara at sinodun.com (Sara Dickinson) Date: Mon, 21 Jan 2013 14:54:08 +0000 Subject: [Opendnssec-develop] RE:Team Meeting - Monday 21st Jan @ 14.00 CET References: <775A101C-E031-477B-A3B8-2E0428A88959@sinodun.com> Message-ID: All, Minutes from the meeting today are available for review: https://wiki.opendnssec.org/display/OpenDNSSEC/2013-01-21+Minutes Sara. Begin forwarded message: > From: Sara Dickinson > Date: 18 January 2013 14:36:02 GMT > To: "opendnssec-develop at lists.opendnssec.org Dev" > Subject: [Opendnssec-develop] RE:Team Meeting - Monday 21st Jan @ 14.00 CET > > Hi All, > > We have a team meeting on Monday: > > Date: Monday 21 January 2013 > Time: 14:00-15:00 CET, 13:00-14:00 GMT > Method: Google+ > Agenda: https://wiki.opendnssec.org/display/OpenDNSSEC/2013-01-21+Agenda > > Sara. > > _______________________________________________ > Opendnssec-develop mailing list > Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop -------------- next part -------------- An HTML attachment was scrubbed... URL: From sara at sinodun.com Mon Jan 21 15:43:05 2013 From: sara at sinodun.com (Sara Dickinson) Date: Mon, 21 Jan 2013 15:43:05 +0000 Subject: [Opendnssec-develop] RE: Doodle for team meeting time Message-ID: All, Since Jerry can't make the Tuesday slot at 1pm for the foreseeable future I'd like to do a Doodle poll of other possible times for the team meeting. We have been alternating Monday and Tuedays at 1pm but would be nice if we could all find a time we can make! Based on my availability I've listed some options: http://doodle.com/hygd7gu4hsx57g4z This uses the dates 4th/5th/6th Feb as an example, but please only fill in what times of the week you could do on a regular basis. Note I have also assumed CET :-) Thanks Sara. From matthijs at nlnetlabs.nl Mon Jan 21 15:57:10 2013 From: matthijs at nlnetlabs.nl (Matthijs Mekking) Date: Mon, 21 Jan 2013 16:57:10 +0100 Subject: [Opendnssec-develop] RE: Doodle for team meeting time In-Reply-To: References: Message-ID: <50FD6556.9000007@nlnetlabs.nl> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I didn't list 12:00 and 1:00 as available options because it is a bit troublesome during lunch, but if there is really no other option, than I can do those times. And I filled in the doodle assuming those times are not AM ;) Best regards, Matthijs On 01/21/2013 04:43 PM, Sara Dickinson wrote: > All, > > Since Jerry can't make the Tuesday slot at 1pm for the foreseeable > future I'd like to do a Doodle poll of other possible times for the > team meeting. We have been alternating Monday and Tuedays at 1pm > but would be nice if we could all find a time we can make! > > Based on my availability I've listed some options: > > http://doodle.com/hygd7gu4hsx57g4z > > This uses the dates 4th/5th/6th Feb as an example, but please only > fill in what times of the week you could do on a regular basis. > Note I have also assumed CET :-) > > Thanks > > Sara. > > _______________________________________________ Opendnssec-develop > mailing list Opendnssec-develop at lists.opendnssec.org > https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQEcBAEBAgAGBQJQ/WVWAAoJEA8yVCPsQCW5if0IAIdBgMZDziG8XOnxEBzAgMSD n7DoTF1hNwxJ9HIzvVwgmUgFCeQwNhDz4rIkXBdZ4b6tmQq5RtECiJmi4oDaTVEf LWgA9eRASyVPRBnp7Wj3yYwN0GaPU0qeTNEYGPKpzmeuu/PRitGB+RIxHzj/HChA iEXOL97C7Umdc11BfumlU+mJl0SH+egT1YG2u4OgmMp7oVNg4BXNZ6NoSGF+JKN1 6kzMeXm25uRleCBZTO/xNoshUsjYsy6FzWzDpx6gKS0lq7o2DJdsUdjJS8Ch5LBT 1Z364erpd8BpNyxhFR1xnSy1jx2VS8HErM0UApB+RljjbhQ1V7CVwO0Ed4tZqg0= =26f1 -----END PGP SIGNATURE----- From sara at sinodun.com Tue Jan 22 13:35:19 2013 From: sara at sinodun.com (Sara Dickinson) Date: Tue, 22 Jan 2013 13:35:19 +0000 Subject: [Opendnssec-develop] Fwd: OpenDNSSEC 1.4 References: Message-ID: FYI! Begin forwarded message: > From: Paul Wouters > Date: 21 January 2013 16:34:16 GMT > To: Sara Dickinson > Cc: Jacques Latour , Jake Zack , Paul O'Leary , Matthijs Mekking , Si?n Lloyd > Subject: Re: Fwd: OpenDNSSEC 1.4 > > On Mon, 21 Jan 2013, Sara Dickinson wrote: >> >> - I believe you will be going live in the near future (if you haven't already?) > > It just happened an hour ago. > > Paul From yuri at nlnetlabs.nl Wed Jan 23 10:15:18 2013 From: yuri at nlnetlabs.nl (Yuri Schaeffer) Date: Wed, 23 Jan 2013 11:15:18 +0100 Subject: [Opendnssec-develop] RE: Doodle for team meeting time In-Reply-To: <50FD6556.9000007@nlnetlabs.nl> References: <50FD6556.9000007@nlnetlabs.nl> Message-ID: <50FFB836.9070209@nlnetlabs.nl> > I didn't list 12:00 and 1:00 as available options because it is a bit > troublesome during lunch, but if there is really no other option, than > I can do those times. And I filled in the doodle assuming those times are not AM ;) Same same. From jerry at opendnssec.org Thu Jan 24 06:33:54 2013 From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Thu, 24 Jan 2013 07:33:54 +0100 Subject: [Opendnssec-develop] Maintenance of SVN/dist tomorrow friday 25 jan Message-ID: <-3815030422697428762@unknownmsgid> Hi, I will do some maintenance on the servers at .SE tomorrow friday 25 jan between 10:00 and 12:00 CET. Please, do not do check ins to the SVN during this period. /Jerry From jerry at opendnssec.org Thu Jan 24 06:38:55 2013 From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Thu, 24 Jan 2013 07:38:55 +0100 Subject: [Opendnssec-develop] Jenkins JUnit deployment Message-ID: <-4665752867979722509@unknownmsgid> Hi, I will apply the JUnit changes to the test framework tomorrow around 10:00 - 12:00 CET. All Jenkins jobs will be disabled during this time so please do not execute any jobs manually. /Jerry From jerry at opendnssec.org Thu Jan 24 06:41:47 2013 From: jerry at opendnssec.org (=?ISO-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Thu, 24 Jan 2013 07:41:47 +0100 Subject: [Opendnssec-develop] Prepare release 1.4.0rc2 Message-ID: <-1323982338798215002@unknownmsgid> Hi Sara, Can you verify that all NEWS etc are up to date before tomorrow 10:00 CET? I will do the release some time between 10:00 and 12:00 CET. /Jerry From sara at sinodun.com Thu Jan 24 15:52:53 2013 From: sara at sinodun.com (Sara Dickinson) Date: Thu, 24 Jan 2013 15:52:53 +0000 Subject: [Opendnssec-develop] RE: OpenDNSSEC 1.4.0rc2 Message-ID: <82659580-F0DA-4ABF-A872-3BB981089055@sinodun.com> Hi All, Just a reminder - we will go ahead with a 1.4.0rc2 release tomorrow morning. Sara. From jerry at opendnssec.org Fri Jan 25 09:07:03 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Fri, 25 Jan 2013 10:07:03 +0100 Subject: [Opendnssec-develop] Re: Maintenance of SVN/dist tomorrow friday 25 jan In-Reply-To: <-3815030422697428762@unknownmsgid> References: <-3815030422697428762@unknownmsgid> Message-ID: <8550C810-2B24-4839-80CE-7ECC7CEF12AD@opendnssec.org> On Jan 24, 2013, at 07:33 , Jerry Lundstr?m wrote: > I will do some maintenance on the servers at .SE tomorrow friday 25 > jan between 10:00 and 12:00 CET. > > Please, do not do check ins to the SVN during this period. I will start the maintenance now! -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From jerry at opendnssec.org Fri Jan 25 09:20:33 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Fri, 25 Jan 2013 10:20:33 +0100 Subject: [Opendnssec-develop] Re: Maintenance of SVN/dist tomorrow friday 25 jan In-Reply-To: <8550C810-2B24-4839-80CE-7ECC7CEF12AD@opendnssec.org> References: <-3815030422697428762@unknownmsgid> <8550C810-2B24-4839-80CE-7ECC7CEF12AD@opendnssec.org> Message-ID: <7D7E6202-D47F-4394-91C5-BCBC9B5967AF@opendnssec.org> On Jan 25, 2013, at 10:07 , Jerry Lundstr?m wrote: > I will start the maintenance now! Maintenance done, feel free to check in. -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From jerry at opendnssec.org Fri Jan 25 09:45:58 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Fri, 25 Jan 2013 10:45:58 +0100 Subject: [Opendnssec-develop] Re: Prepare release 1.4.0rc2 In-Reply-To: <-1323982338798215002@unknownmsgid> References: <-1323982338798215002@unknownmsgid> Message-ID: <2BFAD5E1-A3E9-46EA-B12C-908595ACB7B7@opendnssec.org> On Jan 24, 2013, at 07:41 , Jerry Lundstr?m wrote: > I will do the release some time between 10:00 and 12:00 CET. 1.4.0rc2 tagged and tar-balled. -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From jerry at opendnssec.org Fri Jan 25 10:55:31 2013 From: jerry at opendnssec.org (=?iso-8859-1?Q?Jerry_Lundstr=F6m?=) Date: Fri, 25 Jan 2013 11:55:31 +0100 Subject: [Opendnssec-develop] Re: Jenkins JUnit deployment In-Reply-To: <-4665752867979722509@unknownmsgid> References: <-4665752867979722509@unknownmsgid> Message-ID: <9B73D6BD-4FA1-4544-958F-85D80B9A7A6C@opendnssec.org> On Jan 24, 2013, at 07:38 , Jerry Lundstr?m wrote: > I will apply the JUnit changes to the test framework tomorrow around > 10:00 - 12:00 CET. All Jenkins jobs will be disabled during this time > so please do not execute any jobs manually. JUnit in test framework is now live. All Jenkins jobs are enabled. -- Jerry Lundstr?m - OpenDNSSEC Developer http://www.opendnssec.org/ From sara at sinodun.com Thu Jan 31 15:47:02 2013 From: sara at sinodun.com (Sara Dickinson) Date: Thu, 31 Jan 2013 15:47:02 +0000 Subject: [Opendnssec-develop] RE: 1.4 release - issue found with the multi-threaded enforcer Message-ID: <4F51D562-09F6-49F8-B9CD-3CA0F072EEB5@sinodun.com> All, Earlier this week a major issue was uncovered with the multi-threaded enforcer functionality that was added in 1.4. Jerry and Sion have investigated this and after a meeting today we all agreed that the best solution is to remove the multi-threaded code from the 1.4 code base. More details are given below, but obviously this is a significant change to make at this stage and will unfortunately slightly delay the release. However, we are convinced that this is the correct technical decision in the long run. We are proposing that the 1.4 release is briefly moved back to beta status while we run tests on the updated code. The code change is straightforward, and effectively reverts the enforcer component in trunk to the 1.3 code base with very minor 1.4 specific changes. As such the basic functionality is not in question, however since the rollback is a manual process we feel a full sanity check of the result is necessary. Once this testing is complete, we anticipate moving to a 1.4.0rc3 asap. We are currently in the process of code reviewing the required changes and expect to commit them to trunk early next week. I will then email the users & maintainers list (but I will contact CIRA today). I plan to move the team meeting to Thursday next week so the team can review the decision to have a 1.4.0b3 release and the testing plan then. Regards Sara. --------------------------- SUMMARY OF ISSUE: Problem: - a scenario has been found where key allocation is incorrectly done for multiple zones when more than 1 worker thread for the enforcer is enabled - a fix for this has been investigated, however the conclusion was that any fix would a) further increase the already complex code logic required to support multi-threading and b) largely eliminate any performance gain obtained by using the multi-threaded option (which was also only available with MySQL) - as a result the mulit-threaded enforcer option cannot be implemented successfully on the 1.4 code base. - the threaded code is protected by #ifdef statements, but by default since the start of September all builds have used the new, threaded code with 1 worker thread. Solution: - Whilst simply restricting the number of threads to 1 is an option, this leaves all the complex threading logic in place with no functional value to be gained from it. This code is likely to be harder to maintain and may be more error prone than the well tested, stable 1.3 code base. - Therefore the above approach of rolling back the threading changes is preferred From sara at sinodun.com Thu Jan 31 15:56:05 2013 From: sara at sinodun.com (Sara Dickinson) Date: Thu, 31 Jan 2013 15:56:05 +0000 Subject: [Opendnssec-develop] RE: Team meeting - Thursday 7 Feb@ 14::00 CET Message-ID: <530933F8-D642-42CA-B7FE-C2CBB614FF08@sinodun.com> Hi All, I would like to reschedule the team meeting planned for next week. We had originally agreed on Tuesday, but based on the doodle results (thank you everyone!) it appears that Thursdays are the best day all round. So I propose: Date: Thursday 7 February 2013 Time: 14:00-15:00 CET, 13:00-14:00 GMT Method: Google+ Agenda: TBA Sara.