Closed
Bug 1315990
Opened 9 years ago
Closed 9 years ago
disable postfix and rpcbind on all centos machines
Categories
(Infrastructure & Operations :: RelOps: Puppet, task)
Infrastructure & Operations
RelOps: Puppet
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: arich, Assigned: arich)
References
Details
Attachments
(1 file, 1 obsolete file)
I don't think we have a need to run postfix or rpcbind on any releng centos machines. If not, we should disable them across the board.
Requesting feedback from some releng folks (and dustin) to determine if we know if either of these things are actually needed.
Attachment #8808633 -
Flags: review?(aselagea)
Attachment #8808633 -
Flags: feedback?(rail)
Attachment #8808633 -
Flags: feedback?(nthomas)
Attachment #8808633 -
Flags: feedback?(dustin)
Attachment #8808633 -
Flags: feedback?(coop)
Attachment #8808633 -
Flags: feedback?(catlee)
|
||
Updated•9 years ago
|
Assignee: relops → arich
|
|
||
Comment 1•9 years ago
|
||
Comment on attachment 8808633 [details] [diff] [review]
centos-disable-postfix-rpcbind.patch
Review of attachment 8808633 [details] [diff] [review]:
-----------------------------------------------------------------
We need *some* mailer configured, I think, to get cronmail.
I don't know any reason we would need rpcbind, though.
Attachment #8808633 -
Flags: feedback?(dustin) → feedback+
|
Assignee | |
Comment 2•9 years ago
|
||
Instead of disabling postfix, we can just tell it not to deliver any mail locally and only listen on the loopback interface then.
Attachment #8808633 -
Attachment is obsolete: true
Attachment #8808633 -
Flags: review?(aselagea)
Attachment #8808633 -
Flags: feedback?(rail)
Attachment #8808633 -
Flags: feedback?(nthomas)
Attachment #8808633 -
Flags: feedback?(coop)
Attachment #8808633 -
Flags: feedback?(catlee)
Attachment #8808669 -
Flags: review?(aselagea)
Attachment #8808669 -
Flags: feedback?(rail)
Attachment #8808669 -
Flags: feedback?(nthomas)
Attachment #8808669 -
Flags: feedback?(dustin)
Attachment #8808669 -
Flags: feedback?(coop)
Attachment #8808669 -
Flags: feedback?(catlee)
|
|
||
Comment 3•9 years ago
|
||
We definitely need postfix (or some local MTA). See bug 1315265.
|
|
||
Comment 4•9 years ago
|
||
Comment on attachment 8808669 [details] [diff] [review]
centos-disable-postfix-rpcbind.patch
Review of attachment 8808669 [details] [diff] [review]:
-----------------------------------------------------------------
looks sane to me.
Attachment #8808669 -
Flags: feedback?(catlee) → feedback+
|
||
Updated•9 years ago
|
Attachment #8808669 -
Flags: feedback?(coop) → feedback+
|
|
||
Comment 5•9 years ago
|
||
Comment on attachment 8808669 [details] [diff] [review]
centos-disable-postfix-rpcbind.patch
LGTM!
Attachment #8808669 -
Flags: feedback?(rail) → feedback+
|
||
Updated•9 years ago
|
Attachment #8808669 -
Flags: feedback?(nthomas) → feedback+
|
||
Updated•9 years ago
|
Attachment #8808669 -
Flags: review?(aselagea) → review+
|
|
Assignee | |
Comment 7•9 years ago
|
||
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
|
|
Assignee | |
Comment 8•9 years ago
|
||
Three "scriptworker" services (balrog, beetmover, and signing) had disabled rpcbind explicitly within their module configs and so puppet failed on those hosts. I removed the disable from those individual modules.
remote: https://hg.mozilla.org/build/puppet/rev/46b9ea7b00095f0d8176813a690a55a1f782b4e8
|
|
||
Updated•9 years ago
|
Attachment #8808669 -
Flags: feedback?(dustin) → feedback+
You need to log in
before you can comment on or make changes to this bug.
Description
•