On 2016-07-21 11:43:57, Tim Sattarov wrote: > On 21/07/16 10:07 AM, Marcin Kulisz wrote: > > On 2016-07-21 20:27:53, James Bromberger wrote: > >> On 21/07/2016 3:58 PM, Lucas Nussbaum wrote: > >> > >>> 09:27 <@Mithrandir> > curl -s -i http://cloudfront.debian.net/debian-security/ | head -n1 > >>> 09:27 <@Mithrandir> HTTP/1.1 404 Not Found > >>> 09:28 <@Mithrandir> > curl -s -i http://cloudfront.debian.net/debian-debug/ | head -n1 > >>> 09:28 <@Mithrandir> HTTP/1.1 404 Not Found > >>> 09:28 <@Mithrandir> > curl -s -i http://cloudfront.debian.net/debian-ports/ | head -n1 > >>> 09:28 <@Mithrandir> HTTP/1.1 404 Not Found > Do we know what is the origin for cloudfront.debian.net ? Yes, we do just check http://cloudfront.debian.net it's documented there. If you want to know more specific details probably I can post them later on. > why can't we simply point it to the real mirror so it has all of the > above folders ? It's not that simple as this, not all parts of the Debian archive can/should be served that way and decision what and how is/should be served lies in DSA discretion. > > I was actually thinking about writing some cloudformation templates to create > > this cloudfront to keep it in git so we have some kind of tracebility and I > > think it would make DSA happier if they wanted to take it on board. > > Configuration would be just json file and deployment can be scripted to make it > > painless as possible. > > But I'll leave it to DSA if they want to do it or not if they do I'm ok with > > doing this work. > > I can help with CloudFormation or Terraform template (which is I think > more flexible) for these distributions. I was thinking about terraform but we could argue about flexibility and terraform advantages over cloudformation. For now awscli is in Debian archive and can be used straight away and terraform is not (not yet at least) so for now I'd say cloudformation it is. Once DSA will voice their plans and if they prefer to work with file based configuration stored in git or use awscli or maybe click through they web console, and will say that some help is needed then I think we can start thinking about further steps. As it's planned to be d.o service/infrastructure last word on how it should be maintained and run belongs to DSA, so we just have to wait a bit. -- |_|0|_| | |_|_|0| "Heghlu'Meh QaQ jajVam" | |0|0|0| -------- kuLa --------- | gpg --keyserver pgp.mit.edu --recv-keys 0x58C338B3 3DF1 A4DF C732 4688 38BC F121 6869 30DD 58C3 38B3
Attachment:
signature.asc
Description: PGP signature