[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#698477: Do we really need mirror in AWS?

On 2016-07-21 11:43:57, Tim Sattarov wrote:
> On 21/07/16 10:07 AM, Marcin Kulisz wrote:
> > On 2016-07-21 20:27:53, James Bromberger wrote:
> >> On 21/07/2016 3:58 PM, Lucas Nussbaum wrote:
> >>
> >>> 09:27 <@Mithrandir> > curl -s -i http://cloudfront.debian.net/debian-security/ | head -n1
> >>> 09:27 <@Mithrandir> HTTP/1.1 404 Not Found
> >>> 09:28 <@Mithrandir> > curl -s -i http://cloudfront.debian.net/debian-debug/ | head -n1
> >>> 09:28 <@Mithrandir> HTTP/1.1 404 Not Found
> >>> 09:28 <@Mithrandir> > curl -s -i http://cloudfront.debian.net/debian-ports/ | head -n1
> >>> 09:28 <@Mithrandir> HTTP/1.1 404 Not Found
> Do we know what is the origin for  cloudfront.debian.net ?

Yes, we do just check http://cloudfront.debian.net it's documented there. If
you want to know more specific details probably I can post them later on.

> why can't we simply point it to the real mirror so it has all of the
> above folders ?

It's not that simple as this, not all parts of the Debian archive can/should be
served that way and decision what and how is/should be served lies in DSA

> > I was actually thinking about writing some cloudformation templates to create
> > this cloudfront to keep it in git so we have some kind of tracebility and I
> > think it would make DSA happier if they wanted to take it on board.
> > Configuration would be just json file and deployment can be scripted to make it
> > painless as possible.
> > But I'll leave it to DSA if they want to do it or not if they do I'm ok with
> > doing this work.
> I can help with CloudFormation or Terraform template (which is I think
> more flexible) for these distributions.

I was thinking about terraform but we could argue about flexibility and
terraform advantages over cloudformation. For now awscli is in Debian
archive and can be used straight away and terraform is not (not yet at least)
so for now I'd say cloudformation it is.

Once DSA will voice their plans and if they prefer to work with file based
configuration stored in git or use awscli or maybe click through they web
console, and will say that some help is needed then I think we can start
thinking about further steps.

As it's planned to be d.o service/infrastructure last word on how it should be
maintained and run belongs to DSA, so we just have to wait a bit.

|_|0|_|                                          |
|_|_|0|         "Heghlu'Meh QaQ jajVam"          |
|0|0|0|         -------- kuLa ---------          |

gpg --keyserver pgp.mit.edu --recv-keys 0x58C338B3
3DF1 A4DF C732 4688 38BC F121 6869 30DD  58C3 38B3

Attachment: signature.asc
Description: PGP signature

Reply to: