[06:26:28] !log tools.heritage [two days ago] Bump the pywikibot checked out on the server in ~/pywikibot (git fetch && git checkout 3.0.20180823) [06:26:30] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.heritage/SAL [06:26:45] !log tools.heritage [yesterday] Deploy latest from Git master: 68de059, bffe358, d8c9e7e [06:26:46] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.heritage/SAL [06:35:30] !log tools.heritage Submit `update_monuments` manually with ` -mem 2000m` (see T203417) [06:35:35] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.heritage/SAL [06:35:35] T203417: update_database crashing due to KeyboardInterrupt - https://phabricator.wikimedia.org/T203417 [06:35:59] !log tools.heritage Edit crontab to run `update_monuments` with ` -mem 2000m` (see T203417) [06:36:01] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.heritage/SAL [07:05:00] (03CR) 10Jean-Frédéric: [C: 032] "Agree, will make it into a Shell script. I tried really hard to just make it work with `update_monuments.sh`, just by crazily overriding " [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/454225 (https://phabricator.wikimedia.org/T202293) (owner: 10Jean-Frédéric) [07:06:14] (03Merged) 10jenkins-bot: Streamline start-up instructions in ReadMe [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/454225 (https://phabricator.wikimedia.org/T202293) (owner: 10Jean-Frédéric) [07:07:26] (03CR) 10jenkins-bot: Streamline start-up instructions in ReadMe [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/454225 (https://phabricator.wikimedia.org/T202293) (owner: 10Jean-Frédéric) [07:52:21] (03PS1) 10Jean-Frédéric: Base Python bot Dockerfile on ubuntu:14.04 instead of `python` image [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457829 [08:34:40] (03PS1) 10Jean-Frédéric: Add `security` extra for `requests` Python dependencies [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457838 (https://phabricator.wikimedia.org/T200159) [08:43:00] (03PS1) 10Jean-Frédéric: Install the latest Pip in the virtual environment [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457840 (https://phabricator.wikimedia.org/T203432) [14:33:51] !log tools.jembot restarted webservice, purged stray processes. Details on T132880 [14:33:53] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.jembot/SAL [14:33:54] T132880: tools.jembot crashes and leaves orphan php-cgi processes regularly - https://phabricator.wikimedia.org/T132880 [15:06:06] (03CR) 10Lokal Profil: [C: 032] Install the latest Pip in the virtual environment [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457840 (https://phabricator.wikimedia.org/T203432) (owner: 10Jean-Frédéric) [15:07:53] (03CR) 10Lokal Profil: [C: 032] Base Python bot Dockerfile on ubuntu:14.04 instead of `python` image [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457829 (owner: 10Jean-Frédéric) [15:08:11] (03Merged) 10jenkins-bot: Install the latest Pip in the virtual environment [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457840 (https://phabricator.wikimedia.org/T203432) (owner: 10Jean-Frédéric) [15:09:08] (03Merged) 10jenkins-bot: Base Python bot Dockerfile on ubuntu:14.04 instead of `python` image [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457829 (owner: 10Jean-Frédéric) [15:09:19] (03CR) 10jenkins-bot: Install the latest Pip in the virtual environment [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457840 (https://phabricator.wikimedia.org/T203432) (owner: 10Jean-Frédéric) [15:10:22] (03CR) 10jenkins-bot: Base Python bot Dockerfile on ubuntu:14.04 instead of `python` image [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457829 (owner: 10Jean-Frédéric) [15:14:25] (03CR) 10Lokal Profil: [C: 032] Add `security` extra for `requests` Python dependencies [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457838 (https://phabricator.wikimedia.org/T200159) (owner: 10Jean-Frédéric) [15:16:30] (03Merged) 10jenkins-bot: Add `security` extra for `requests` Python dependencies [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457838 (https://phabricator.wikimedia.org/T200159) (owner: 10Jean-Frédéric) [15:17:38] (03CR) 10jenkins-bot: Add `security` extra for `requests` Python dependencies [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/457838 (https://phabricator.wikimedia.org/T200159) (owner: 10Jean-Frédéric) [18:42:22] I'm working on tools.perflogbot which was set up a while back using a Kubernetes deployment without webservice, with a yaml file and using kubectl directly. [18:42:31] It uses the nodejs-base image. [18:42:55] I'm finding it impossible to re-install the bot because the image appears to have an invalid combination of Node.js and NPM. [18:43:02] It has Node.js 6.x with npm 1.4. [18:48:17] During the 'npm install' command (run from kubectl exec -it podname -- /bin/bash), it stops at some point due to a "Method Not Allowed" which is likely because the npmjs.org registry no longer supports the 2014 npm-cli client [19:29:00] !log shinken in the process of making the shinken-wm fix permanent [19:29:01] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Shinken/SAL [19:42:23] I've documented a workaround at https://wikitech.wikimedia.org/wiki/Help:Toolforge/Kubernetes#nodejs for the time being [19:54:40] Krinkle: uh, so should https://phabricator.wikimedia.org/T169451 be a higher priority then? [19:55:10] legoktm: Yes, this is a weird and completely invalid setup unique to Wikimedia. [19:55:31] Personally I think we should just bundle it with Wikimedia APT nodejs. [19:55:40] It seems fine to have a command that we don't use. [19:56:05] hmm [19:56:17] at least it means we'll have a supported set up and get security patches the same way we get for everything ele. [19:57:42] well I have a patch to update npm, it was just waiting on me to have time to announce the bump [19:58:45] for toollabs? [19:58:54] legoktm: do you want to cookie lick that ticket you bumped by assigning it to yourself? :) [19:59:11] also <3 for helping work on these problems [20:01:01] Krinkle: toolforge, I don't know what toollabs is ;) [20:01:07] tsk [20:01:08] Right [20:01:46] The image is called toollabs-nodejs-base still it seems, though :P [20:03:50] legoktm: bd808: btw, the 'npm 1.3' that is on tools-login is EOL and actually doesn't work. not even to install a newer npm from itself. But the 'npm 1.4' inside the nodejs-base image whilst also EOL at least works still to self-install. [20:04:09] Some kind of internal HTTP registry change that was made between those two releases got dropped at some point. [20:04:49] bd808: probably yeah, I just need to find some time for it [20:43:12] Hi everyone, I see I can't use /usr/bin/convert anymore for PDFs, after a change in /etc/ImageMagick/policy.xml today [20:43:44] Was this intended? Is there any solution? [20:54:50] jem: I need a little more context, is this on toolforge? And what change in ImageMagick are you talking about? [20:55:50] andrewbogott: Yes, toolforge [20:56:17] The file is: -rw-r--r-- 1 root root 3128 sep 4 06:32 /etc/ImageMagick/policy.xml [20:56:26] So it has been modified today [20:56:52] I see /usr/bin/convert on the bastion, although it's a link [20:56:54] https://www.irccloud.com/pastebin/IZCD3c9Z/ [20:56:58] Is that not what you meant? [20:57:00] It'll be https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/454544/ [20:57:33] Ah, I see, because Moritz disabled ghostscript [20:57:40] Well, convert keeps working, but not por PDFs [20:57:45] for* [20:59:11] jem: I'm reluctant to override Moritz's security concerns. It sounds like the disabling is intended to be temporary but you could open a phabricator task asking to have it re-enabled just on toolforge and we can see what he thinks. [20:59:32] Hmm, ok [20:59:47] Does Moritz connect here? [20:59:56] He's on FreeNode [21:00:08] And in -operations [21:00:09] just not here [21:00:38] nickname moritzm [21:01:13] Ok, thanks, if not I could move the conversion elsewhere [21:01:29] he's idle 02:41:18 [21:01:32] I'd just file a ticket [21:02:07] ^ that.. because you would have to move it to a different timezone [21:02:13] I'm going to have dinner now... I'll see later [21:02:16] win 33 [21:02:35] open a ticket with a link to that puppet.git change, and a description of how you use it that doesn't work anymore, etc. [21:02:52] make it clear you're running within labs but in toolforge [21:03:04] Ok [21:03:12] Thanks again [21:04:03] I don't want to end up with an ImageMagick policy difference between prod and deployment-prep [21:05:22] hmm [21:05:38] imagemagick isn't used for creating pdfs in prod [21:05:53] but in toollabs it is also a tool for third-parties [21:09:09] Platonides: The pdfs come from pdftex, then I need a png to publish in Facebook [21:15:09] other than converting to pdf in another tool… [21:15:48] s/tool/box/ [21:15:50] I have tested and a local ~/.magick/policy.xml doesn't seem to override /etc/ImageMagick/policy.xml