[00:43:09] ah, hey so [00:43:25] i've been asked to disable non https for http://metrics.wikimedia.org [00:43:42] https is currently being provided by a proxy running elsewhere, set up by YuviPanda [00:43:52] the proxy is not on the metrics.wikimedia.org host [00:43:55] so. [00:44:16] is there a way to disable regular http traffic to this site without resorting to iptables? [00:44:38] the site needs to be reachable on the main interface, since the proxy needs to be able to hit it [00:45:04] but if it is available on the main interface, it will be reachable via instance proxy [00:46:10] why would you want to disable http? [00:46:23] because they want https only [00:46:25] oh, its private o.O [01:11:00] [bz] (8UNCONFIRMED - created by: 2Nicolas Raoul, priority: 4Unprioritized - 6major) [Bug 54065] Enable HTTPS on a Labs instance - https://bugzilla.wikimedia.org/show_bug.cgi?id=54065 [07:32:12] [bz] (8UNCONFIRMED - created by: 2Nicolas Raoul, priority: 4Unprioritized - 6major) [Bug 54065] Enable HTTPS on a Labs instance - https://bugzilla.wikimedia.org/show_bug.cgi?id=54065 [11:17:07] [bz] (8RESOLVED - created by: 2Nemo, priority: 4Unprioritized - 6critical) [Bug 54143] GlusterFS appears to be down (Transport endpoint is not connected, All subvolumes are down) - https://bugzilla.wikimedia.org/show_bug.cgi?id=54143 [12:03:48] [bz] (8UNCONFIRMED - created by: 2Nicolas Raoul, priority: 4Unprioritized - 6major) [Bug 54065] Enable HTTPS on a Labs instance - https://bugzilla.wikimedia.org/show_bug.cgi?id=54065 [12:43:31] Coren, any updates on deleted edits? [13:36:02] anyone online happen to know why an apt-get upgrade installs and libraries? i thought the lab instance is an i386 machine [13:45:09] "amd64" is the name Debian (and by extension Ubuntu) uses for the architecture also known as "x86-64". [13:49:01] anomie: ah, thanks, so no need to worry about the :i386 installs, the regular and installs are fine? e.g., php5-dev vs php5-dev:i386 [13:50:23] dan-nl: Ideally the :i386 version shouldn't even be necessary. The only reason to use it is if there is some 32-bit software that for some reason can't be recompiled for 64-bit. [13:50:41] anomie: thanks [14:04:07] hi, how long does it take to get access to tool labs (shell, sql, ...)? [14:10:42] anyone online know why ./configure for luasandbox would not find lua when it's installed in /usr/bin/ [14:49:08] !log help [14:49:08] I am a logbot running on tools-exec-04. [14:49:08] Messages are logged to wikitech.wikimedia.org/wiki/Server_Admin_Log. [14:49:08] To log a message, type !log . [15:05:46] hi, any human beings here? [15:11:48] dan-nl: Do you have the appropriate library and development packages installed? e.g. liblua5.1-0-dev on a Debian or Ubuntu machine? [15:14:08] anomie: no i only had lua5.1 installed, installing liblua5.1-dev [15:16:50] anomie: thanks, that took care of it! [15:41:55] [bz] (8NEW - created by: 2Antoine "hashar" Musso, priority: 4Highest - 6major) [Bug 48501] [OPS] beta: get SSL certificates - https://bugzilla.wikimedia.org/show_bug.cgi?id=48501 [16:37:10] jgrivolla: It usually fairly quick, but since very many of the engineering team is travelling that can be a little longer than usual atm. How long have your been waiting? [16:46:55] Hi all, I'm trying to use the wikimedia dumps for wikipedia, and in particular the logging table and have a couple of doubts about it. Let's see if somebody can help me... [16:47:23] Does the logging table include every revision made to every article on wikipedia? [16:47:55] if I wanted to select only those how would I do it in the logging table? [16:48:52] I know the revision table contains that information, but I´m wondering whether the logging table does too, and how can I identify it in that table [16:49:21] Does anybody have any idea? [16:53:40] hi Xavi [16:54:02] Xavi: in case no one can help you right now here (I'm not sure whether Coren has a moment), you could email labs-l [16:54:08] https://lists.wikimedia.org/mailman/listinfo/labs-l [16:54:48] Xavi: The rule of thumb is, what you can see through the replicas is exactly what you can see on-wiki as a normal registered user. [16:56:27] The logging table is what you would see by using Special:Log, so it contains "things that aren't edits people did" [17:10:11] Coren: what's the idea behind the 'namespaces' table that's in the enwiki_p database? It doesn't seem to be found in other databases [17:10:23] (and it's inaccessible) [17:11:03] Nettrom: There is a *lot* of historical crud that accumulated in the databases, enwiki most of all. Oftentimes, those are dregs of failed experiments, or long-disabled extensions. [17:11:46] thanks, thought it might be something along those lines [17:12:02] Much of it has been made accessible even though they are completely useless, for completion's sake. Those we weren't certain were okay or could not figure out what they were for we left alone. [17:14:55] Coren: and btw, re non-tool access to tools-db, feel free to ignore that and focus on other things, I can easily work around it [17:15:23] seems like I'm the only person thinking about it for now [17:23:32] To be honest, Nettrom, that is something we do want to discourage even though it is occasionaly convenient; we find it important that work that is done on tool labs is replicatable. [18:08:47] !log deployment-prep upgrading elasticsearch in beta to 0.90.4 so we can make sure it works so we can use some new features in it [18:08:50] Logged the message, Master [18:14:24] Coren: what's the status of mediawiki-project on labs? when are we going to create it? :P [18:14:39] I would be happy to help setting it up... shouldn't be that hard in the end [18:14:44] far simpler than tools [18:15:03] basically I think it should consist just of 1 bastion, several apaches, proxy, memcache / redis and sql server [18:15:23] sooner we start, less wikis on tools we will have [18:15:47] why sumana always leave when I start to talk :/ [18:19:55] petan: It's on the roadmap, but I don't expect much effort will be directed at it before the end of the year. [18:20:10] Limited brain bandwidth and all that. [18:20:38] well, for start we could make a project for that [18:20:51] or eventually propose some design on wiki [18:21:28] petan: That /would/ be a good start [18:22:03] Coren: ori and I fixed the vagrant puppet repo on sat night to make it usable outside of vbox [18:22:08] multimedia-dragons already runs it [19:00:11] !log deployment-prep upgraded elasticsearch in beta to 0.90.4 [19:00:13] Logged the message, Master [19:02:53] Can somone help me with git-review function? [19:10:07] Simeondahl_: What can I help you with? [19:18:39] my regression tests were misconfigured to log in as the wrong user and thus locked my ip out of beta for a few minutes and doomed me to captcha for a while as well [19:19:09] Dooom! DOOOOOM! [19:20:05] Coren, ? [19:20:34] Doomed to captcha. [19:20:46] meh. [19:21:05] The API has methods to return captcha requests. [19:25:59] Coren, https://tools.wmflabs.org/xtools/pount?user=Coren&lang=en&wiki=wikipedia . Hope you don't mind. [19:26:24] https://tools.wmflabs.org/xtools/pcount?user=Coren&lang=en&wiki=wikipedia [19:26:57] Coren, err http://tools.wmflabs.org/xtools/pcount/index.php?name=Coren&lang=en&wiki=wikipedia [19:30:40] "Forgot about it" is more than a bit unfair, but you are free to editorialize if you really feel like it. [19:31:54] Coren, that's what you essentially said. [19:32:17] "Thanks for reminding me. I'll give Asher a bump." [19:34:06] Out of context much? I've told you afterwards that this won't happen because Asher is leaving and we're short on resources -- not counting the fact that Sean is not yet all that familiar with this complicated system [19:34:51] So yeah, it's on the TODO list. Not forgotten, but no resources to get to it right this minute. [19:35:42] That's when I asked on September 3rd or so. You didn't tell me Asher was leaving, and you gave him a poke about it. [19:35:59] You said I reminded you.' [19:36:15] A week later you told me Asher was leaving. [20:05:12] !log deployment-prep upgrading PHP on bastion, jobrunner and apaches to from 5.3.10-1ubuntu3.7+wmf1 to 5.3.10-1ubuntu3.8+wmf1 [20:05:15] Logged the message, Master [22:08:18] [bz] (8PATCH_TO_REVIEW - created by: 2Chris McMahon, priority: 4High - 6enhancement) [Bug 53061] Install Flow extension on beta cluster - https://bugzilla.wikimedia.org/show_bug.cgi?id=53061 [23:22:35] Ryan_Lane: Coren andrewbogott do you know which puppet class is actually used for the bastions? [23:22:42] I see nothing useful in https://wikitech.wikimedia.org/wiki/Nova_Resource:I-00000619 [23:23:11] I can tell you for a fact that tool labs' bastions have ssh:bastion applied. [23:23:11] I don't know which [23:23:35] andrewbogott: are they even puppetized? [23:23:43] dunno [23:24:31] YuviPanda: none, probably [23:24:39] they are just regular nodes [23:24:50] Ryan_Lane: so I can't make changes to them at all via puppet? [23:24:55] can we apply ssh::bastion to them? [23:24:58] you can make a new role [23:25:02] role::bastion::labs [23:25:15] another one?! :( [23:31:22] there's already one? [23:31:32] Ryan_Lane: toollabs uses ssh::bastion [23:31:47] that's not a role [23:31:50] it's a class [23:31:54] gah, nevermind [23:31:59] we should have a bastion role that applies a class [23:32:05] true [23:32:05] then apply it to all of the bastions [23:32:12] including tools [23:32:18] can maybe generalize the one tools uses [23:32:33] there's actually *two* bastion classes [23:32:34] misc/bastion [23:32:38] and ssh::bastion [23:34:26] heh [23:34:36] misc/bastion is used in production? [23:39:30] Actually, there is the toollabs::bastion /role/ which includes the ssh::bastion /class/ [23:39:56] The latter was mostly created so that the "If you have trouble logging on[...]" only applied to instances people were expected to log on. [23:40:04] No, wait. [23:40:19] * Coren hates our class/role faux distinction. [23:41:19] There's role::labs::tools::bastion, which includes toollabs::bastion which describes a "this is a tools-like bastion", which includes ssh::bastion [23:41:55] toollabs::bastion also includes toollabs::dev_environ, toollabs::exec_environ, etc. [23:43:19] Coren: is there any strong reason we should have a different class for tool labs vs other bastions? [23:44:07] Ryan_Lane: Well, a tool labs bastion is a "generic bastion" plus lots of other things. If there was a "this is a bastion" class, it'd include /that/ certainly. [23:44:15] * Ryan_Lane nods [23:44:18] I think we should do that [23:44:28] It sounds eminently sane to me.