opendev/system-config
Code Issues Proposed changes

Force releasestatus to use IPv4 for SSH to Gerrit.

Browse Source 
At random, some hosts within Rackspace refuse to send IPv6 packets
with DSCP marker 0x10 (lowdelay). This is the default behavior of
recent OpenSSH servers and clients, and results in SSH sessions
hanging on these hosts. When static.openstack.org was rebuilt a few
months ago, we did not immediately realize it suffered from this
problem as Rackspace thought they'd fixed the issue previously. We
have an open trouble ticket with them for the past several months to
get it addressed properly, but have no resolution yet. In the
meantime, we have this lovely workaround...

* modules/releasestatus/files/ssh_config: New SSH config file forces
IPv4 when connecting to review.openstack.org from the releasestatus
account.

* modules/releasestatus/manifests/init.pp: Installs the new SSH
config file.

Change-Id: I2968fc00750e3a5a23c08a3007318fd2e336b251
Reviewed-on: https://review.openstack.org/30944
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: Elizabeth Krumbach Joseph <lyz@princessleia.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Approved: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
This commit is contained in:
Jeremy Stanley 2013-05-29 21:00:13 +00:00 committed by Jenkins
parent 6405ae32f9
commit 38961a4236
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/releasestatus/files/ssh_config Normal file
View File

@ -0,0 +1,2 @@
Host review.openstack.org
AddressFamily inet

9
modules/releasestatus/manifests/init.pp
View File

@ -99,6 +99,15 @@ class releasestatus (
} }
} }
file { '/var/lib/releasestatus/.ssh/config':
owner => 'releasestatus',
group => 'releasestatus',
mode => '0600',
source => 'puppet:///modules/releasestatus/ssh_config',
replace => true,
require => File['/var/lib/releasestatus/.ssh/']
}
vcsrepo { '/var/lib/releasestatus/releasestatus': vcsrepo { '/var/lib/releasestatus/releasestatus':
ensure => latest, ensure => latest,
provider => git, provider => git,