[05:35:18] !log bastion Added Chico Venancio as project member [05:35:21] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Bastion/SAL [05:35:43] !log bastion Added Chico Venancio as project member (T185273) [05:35:45] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Bastion/SAL [05:35:45] T185273: Onboarding Chicocvenancio for Cloud IRC support - https://phabricator.wikimedia.org/T185273 [07:55:39] Error: Database error: Unable to connect to s3.web.db.svc.eqiad.wmflabs [07:55:46] Temporary error I got at https://tools.wmflabs.org/guc/ [08:10:51] Nemo_bis: Temporary as in you’re no longer affected by the error, or is it still there? [10:06:14] Hello, cannot connect to Wikimedia servers from deploy a Bot. [10:07:15] Hello, cannot connect to Wikimedia servers from deploy a Bot. [10:08:52] Hello, cannot connect to Wikimedia servers from deploy a Bot. [10:09:45] Joaquinito01: if you need help, you have to use !help [10:09:53] !help [10:09:54] Joaquinito01: If you don't get a response in 15-30 minutes, please create a phabricator task -- https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=wmcs-team [10:10:23] Please fix the Wikimedia servers to deploy a Bot. [10:12:27] avgas: Hello, cannot connect to Wikimedia servers from deploy a Bot. [10:12:47] avgas: Please fix the Wikimedia server to deploy a Bot. [10:13:41] Please stop. If you don't get a response in 15-30 minutes, please create a phabricator task [10:14:46] avgas: Please fix the Wikimedia server to deploy a Bot. [15:56:58] hello everyone. I'm trying to change the document root with aliases for a tool following the docs in https://wikitech.wikimedia.org/wiki/Help:Toolforge/Web/Lighttpd with no luck [15:57:11] anyone around to help me figure out what am I doing wrong? [16:04:18] dmaza: from your description it seems maybe this isn't possible if you read https://wikitech.wikimedia.org/wiki/Help:Toolforge/Web/Lighttpd#With_aliases [16:04:27] "Note that you cannot add an alias URL for /toolname because this has already been defined and can't be overridden in the local conf file. You can add an alias for subdirectories with:" [16:06:01] chasemp, that's what I need, an alias for a subdirectory [16:07:51] basically, If I go to /toolname/test => ~/tool/test [16:13:57] dmaza: what tool do you need help with? [16:14:15] chasemp, I figure it out.. the problem is that the docs say to use /toolname/whatever, and an alias for toolname is already set.. debug logs showed me this [16:14:18] (mod_alias.c.106) url.alias: `/interaction-timeline/test' will never match as `/interaction-timeline' matched first [16:14:31] which makes sense [16:14:41] * chasemp nods [16:15:13] chicocvenancio, I think I already got it. thanks [16:15:31] do we need to update the docs? [16:16:38] dmaza: if you want to put in something about subpaths for aliases never matching that seems reasonable [16:17:35] dmaza: I removed the "/toolname" part from the docs, I guess explicitly stating that it wont work is good idea [16:17:41] well If you use just the "/subdir" instead of "/toolname/subdir" it works [16:17:53] cool [16:18:27] fyi it should also specify that the new path has to be a subfolder in the document root [16:18:32] in this case public_html [16:18:47] * I meant btw, not fyi lol [17:26:49] nope, I take it back. Can't get aliases to work [17:27:16] chicocvenancio, chasemp: you still around to help me out with the lighttpd config? [17:30:13] I'm arround dmaza [17:31:22] sweet.. the tool I'm working on is interaction-timeline [17:31:38] this is what I'm adding to the config [17:31:45] alias.url += ("/api" => "/data/project/interaction-timeline/tool/server/src/public/") [17:33:11] when I go to in, https://tools.wmflabs.org/interaction-timeline/api I get a 404 [17:33:22] give me a sec to get a pastebin with the debug log [17:33:32] I check the file [17:34:05] alright then [17:34:15] but basically it adds up to this [17:35:01] file not found /data/project/interaction-timeline/public_html//api [17:35:23] which is right 'cause it is not there [17:39:04] this is what I have on for my docker container and it works [17:39:04] alias.url += ("/api" => "/var/www/server/src/public") [17:40:12] the trailling slash is different [17:41:00] I prob added it trying to debug what's happening.. let me change it and double check [17:41:16] ( thanks chicocvenancio -- I lost track of this ) [17:41:35] or feel free to change it.. you have the file open [17:41:54] dmaza: sorry about that [17:42:00] no worries [17:42:11] chasemp: I was just about to ping you [17:42:53] its been a while since I played with lightpdd [17:43:14] same [17:43:42] and it is my first time playing with it :) [17:44:02] so if you look at the error logs.. it is ignoring the alias it seems [17:44:21] its keeping part of the alias [17:44:36] 'cause it tries to fetch the file here /data/project/interaction-timeline/public_html//api/ [17:44:49] chicocvenancio, what do you mean? [17:45:20] dmaza: its keeping part of the alias as it looks for the relative path [17:45:49] a hacky way to solve it is to place a api folder in that path [17:46:24] let me try that [17:46:37] but I'm looking at docs to figure out the correct way to solve it™ [17:47:25] ideally, that would be awesome [17:50:29] so technically that works [17:50:39] but I wouldn't need the alias at all i think [17:51:15] yes, public_html is already the base dir [17:52:40] (03PS1) 10Bstorm: Add bstorm to cloud-wide root [labs/private] - 10https://gerrit.wikimedia.org/r/406842 [17:54:36] the problem I'm trying to solve is having two applicatons running on the same webservice [17:54:48] that's why I was going for the alias config [17:55:36] dmaza: your best bet at this point is to create a phab task for the alias config thing [17:55:37] (03CR) 10Paladox: Add bstorm to cloud-wide root (031 comment) [labs/private] - 10https://gerrit.wikimedia.org/r/406842 (owner: 10Bstorm) [17:55:46] one app will live in "/" and it is a js app (react).. the other would live in /api (or wherever) and it will be a php app [17:57:41] chicocvenancio, thank you :(. I appreciate the help [17:58:43] I'll create a ticket in a bit [17:59:14] I have to leave for about an hour. I'll look at the task when I get back [18:00:13] (03PS2) 10Bstorm: Add bstorm to cloud-wide root [labs/private] - 10https://gerrit.wikimedia.org/r/406842 (https://phabricator.wikimedia.org/T185493) [18:04:41] chicocvenancio, thank you [18:25:01] bd808: So RelEng just decided we want to turn Forms back on for wikitech.wm.o and add some new semantic data! <3 [18:25:21] cc marxarelli ! [18:26:49] (03CR) 10Rush: [V: 032 C: 032] Add bstorm to cloud-wide root [labs/private] - 10https://gerrit.wikimedia.org/r/406842 (https://phabricator.wikimedia.org/T185493) (owner: 10Bstorm) [18:28:23] i categorically deny any such knowledge [18:28:53] no_justification: honestly fine with me. The killing of SMW was done primarily because nobody had time to figure out how to deploy a modern version [18:29:08] Oh, I have to figure that out first?! [18:29:09] DAMMIT [18:30:57] no_justification the rewrite was basically just a name change. Though alot has probaly happen since we removed it. :) [18:31:04] * paladox was the one that renamed it. [18:31:22] from what I've been able to grok about SMW's master branch, it can not be installed via any means other than `composer require mediawiki/semantic-media-wiki "~2.5"` [18:31:23] Oh, I forgot to mention the important bit [18:31:28] [18:31:43] PageForms dosen't require smw any more [18:31:53] though some of it's feature may do [18:32:14] no_justification: I honestly and for true have another project that would benefit from SMW, but I don't have the energy to figure out how to run it in prod :/ [18:32:55] so I have my fingers crossed that Structured Data on Commons will figure out how to use wikibase "easily" for non-wikidata projects [18:33:56] paladox: I don't need forms either :p [18:34:04] * no_justification goes and builds a special snowflake extension :D [18:34:08] lol [18:39:26] I don't think I need PageForms on Wikitech either [18:45:22] Have you noticed T185990 ? [18:45:23] T185990: tools-login.wmflabs.org and dev.tools.wmflabs.org not work - https://phabricator.wikimedia.org/T185990 [18:45:40] it's working for me fwiw, I guess the user just don't have toolforge access yet [18:47:08] Hauskatze: sounds like the same user that spammed here some 9 hours ago [18:47:31] I see [18:47:34] I'll handle the task [18:47:44] Obrigado [19:00:14] Hauskatze: I hope nobody does! [19:00:43] no_justification: saw you comment wrt $wmf -> $wmg [19:01:48] Yes. I think a ridiculous amount of time has been wasted on that... [19:02:17] If someone had JFDI then that's one thing but we're at what... 30 rebases and nobody will merge it [19:04:09] yep, that's why I suggested a composer rule to fix that automatically with just 'composer fix' [19:04:27] geez, I'm going to make 10 years on Wikimedia this year [19:04:33] I'm getting too old [19:04:47] I hit 13 in November [19:04:59] My Wikipedia account is old enough to be a man per Jewish law [19:05:13] We're the same age harej! [19:05:14] 16 years? [19:05:23] wait, 13 [19:05:26] I misread [19:05:35] no_justification lol [19:06:05] no_justification: and the WMF hiring underaged?! (lol) /me goes straight to labor court [19:06:31] It's all good: Wikimedians are good at pretending to be lawyers! [19:06:45] some of us are real ones [19:07:43] lol [19:08:29] that reminded me I had an article draft to finish [20:28:32] o/ bd808 [20:28:53] Just looking at vcoleman's urgent email re. PatruBot. Any idea where to find that code? [20:29:20] Oh! Looks like Jem is the maintainer. [20:29:23] halfak: if it's running as a tool we can track it down [20:30:12] Maria seems to think it isn't. I'm looking around for jem [20:30:51] dmaza: I started a local vagrant, lighttpd is definitely doing something differently with alias on toolforge [20:32:02] I'll ping more knowledgeable folk in the task T185464 [20:32:02] T185464: Setup lighttpd to serve both the API and the Client application on toolforge - https://phabricator.wikimedia.org/T185464 [20:38:02] chicocvenancio: the base lighttpd config is in https://phabricator.wikimedia.org/diffusion/OSTW/browse/master/toollabs/webservice/services/lighttpdwebservice.py -- that may or may not help figure things out [20:39:36] bd808: I was trying to figure out how to run `lighttpd -tp -f /etc/lighttpd/lighttpd.conf`to see how it is seeing the full file (base conf plus tools' modifications) [20:43:32] * chicocvenancio sees that is probably impossible [20:44:43] chicocvenancio: I think if you log into a tools-webgrid-* host and look in /var/run/lighttpd/ you can see the config files that are generated [20:45:18] https://tools.wmflabs.org/jembot/ [20:45:22] Ha! I'm getting somewhere [20:45:53] "The code of my bots is hosted and executed in the virtual machine bots within the server of Wikimedia Spain , including the launch of scheduled tasks." [20:45:56] Damn [21:06:34] chicocvenancio, right? I'm creating the ticket right now [21:06:45] i mean.. do you want the ticket? [21:09:07] dmaza: I just commented on T185464 and pinged madhuvishy [21:09:08] T185464: Setup lighttpd to serve both the API and the Client application on toolforge - https://phabricator.wikimedia.org/T185464 [21:09:27] but it is a different task... [21:12:52] https://phabricator.wikimedia.org/T186055 [21:13:04] I'm gonna tag it in the one you commented on [21:15:40] sweet.. thank you chicocvenancio [21:26:59] bd808: that got me lighttpd files for several tools, is there a way to find which host is the one where interaction-timeline is running? [21:33:10] chicocvenancio: qstat [21:33:58] it should tell you the host after the queue name [21:34:04] zhuyifei1999_: for k8s webservice? [21:34:32] that’s grid [21:35:32] k8s are kubectl [21:35:44] forgot the exact syntax [21:40:53] kubectl get pods [21:41:01] kubectl describe pod [21:41:03] I think [21:41:09] as the Tool [21:41:44] I was doing `kubectl get pods -o wide` [21:42:01] which got me `tools-worker-1019.tools.eqiad.wmflabs` [21:42:06] that'll work yeah [21:42:16] but is that a node I should be able to access? [21:42:34] neither root nor myself can... [21:42:38] chicocvenancio: yes but as a current execution environment you are effecting other users [21:42:39] hm [21:42:43] ok let me look [21:43:06] I can ssh into tools-webgrid-lighttpd-* hosts btw [21:43:26] chicocvenancio: try again? [21:43:43] now its good [21:43:56] I didn't do anything :) [21:44:06] just logged in to inspect [21:44:09] * chicocvenancio looks at chasemp [21:44:28] the logs are still here... I'm not crazy [21:44:31] https://i.ytimg.com/vi/LjsIpXc9N6A/movieposter.jpg [21:45:42] oops, I did not manage to get in [21:45:51] * chicocvenancio is crazy after all [21:46:11] I was in the wrong host [21:46:18] chicocvenancio: are you trying from teh bastion itself? [21:46:19] heh [21:46:23] you can't host base auth as root fyi [21:46:36] you would want ot login using root w/ your root key and the tools bastion as a jump host [21:46:48] Jan 30 21:45:29 tools-worker-1019 sshd[24823]: Failed hostbased for chicocvenancio from 10.68.23.58 port 40006 ssh2: DSA bf:07:3e:10:32:8e:3e:03:2d:97:c3:12:b9:fd:73:c5, client user "chicocvenancio", client host "tools-bastion-03.tools.eqiad.wmflabs" [21:47:09] ohh.. I was attempting as myself, figured the admin project was enough [21:47:09] root can't use host based auth in that way [21:47:29] admin project let's you ssh as you to instances marked as "infrastracture" but has to use your key [21:47:38] or tools.admin membership I mean [21:47:48] root key means you can ssh as root w/ that key separately [21:48:00] and sudo is separate from both of those but you should have all 3 [21:48:06] yes, let me try as root [21:49:08] try proxycommand through a bastion if HBA won’t work [21:49:48] yes, that's what you'll need to do indeed [21:52:05] chicocvenancio: as the Tool user on bastion you can also "kubectl exec -it -- /bin/bash" [21:52:23] to drop into a bash shell within the pod on the execution host to poke at the execution environment, it's fairly limited tho [21:54:17] that got me the info I needed for now [21:54:19] thanks chasemp [21:59:13] yw [22:21:05] dmaza: did you use url.rewrite-if-not-file as a workarround? [22:28:04] I did [22:28:12] it works fine like that [22:29:55] I don't like how my folders look but it will have to do while we figure out what's going on with the alias thing