[00:29:49] 10Tool-Labs-tools-wikiloves: Criar pagina de configuração da ferramenta no commons - https://phabricator.wikimedia.org/T130240#2137074 (10Danilo) Encontrei os horários de inicio e encerramento do WLE em cada país: https://commons.wikimedia.org/w/index.php?title=Template:Wiki_Loves_Earth_is_running&action=edit E... [00:41:26] 10Tool-Labs-tools-wikiloves: Criar pagina de configuração da ferramenta no commons - https://phabricator.wikimedia.org/T130240#2130647 (10Platonides) Os horários do WLM están o [[ https://git.wikimedia.org/tree/mediawiki%2Fextensions%2FWikiLovesMonuments.git | WikiLovesMonuments ]] extension. [01:02:47] RECOVERY - Puppet run on tools-webgrid-lighttpd-1208 is OK: OK: Less than 1.00% above the threshold [0.0] [01:40:15] RECOVERY - Puppet run on tools-webgrid-lighttpd-1414 is OK: OK: Less than 1.00% above the threshold [0.0] [02:06:45] !log tools.loltrs added Azariv [02:14:13] labs-morebots: ? [02:14:13] I am a logbot running on tools-exec-1213. [02:14:13] Messages are logged to wikitech.wikimedia.org/wiki/Server_Admin_Log. [02:14:13] To log a message, type !log . [02:14:17] I did! [02:21:20] !log tools.loltrs removed legoktm [02:21:20] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.loltrs/SAL, Master [03:28:20] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137146 (10Andrew) I cleaned up the duplicate reverse dns entry a few hours ago, but it didn't seem to make a difference. It looks to me like this instance is only a coupl... [03:44:58] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137154 (10Andrew) from auth.log: Mar 19 15:31:53 cac sudo: luke081515 : /etc/sudoers is owned by uid 52920, should be 0 ; TTY=pts/10 ; PWD=/srv/mediawiki-vagrant/mediawi... [03:48:30] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137156 (10Andrew) I've tried fixing /var but really I'm not sure this bell can be un-rung. I'd recommend a rebuild. [06:36:26] RECOVERY - Puppet run on tools-bastion-05 is OK: OK: Less than 1.00% above the threshold [0.0] [07:42:28] RECOVERY - Puppet run on tools-exec-1407 is OK: OK: Less than 1.00% above the threshold [0.0] [11:21:01] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137398 (10Luke081515) Is it possible to get a backup from my database there before rebuild? [13:05:49] RECOVERY - Puppet run on tools-mail-01 is OK: OK: Less than 1.00% above the threshold [0.0] [14:52:56] 6Labs: Create labs project arcanist - https://phabricator.wikimedia.org/T130507#2137719 (10Luke081515) [14:54:11] 6Labs: Create labs project arcanist - https://phabricator.wikimedia.org/T130507#2137719 (10Luke081515) [14:58:38] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137738 (10Andrew) It's unlikely, but I can try. Where are the files that you need located? [15:00:10] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137739 (10Luke081515) I need a dump from all databases from the vagrant machine. I have all files, but not a dump :-/ [15:14:28] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137743 (10Andrew) Understand that I cannot log into the system any more than you can. WHERE are the files that you need? [15:17:53] 6Labs, 10Tool-Labs: Should we change labs and tools proxies to https-only? - https://phabricator.wikimedia.org/T130236#2137748 (10Andrew) @tom29739 as far as I know, web access for all tools is managed through a proxy which supports https. As long as tools support normal http on a normal port, https works for... [15:19:25] 6Labs, 10Labs-Infrastructure, 10Labs-Other-Projects: Cannot login into cac.rcm.eqiad.wmflabs - https://phabricator.wikimedia.org/T130471#2137750 (10Luke081515) They are on the virtual vagrant machine in a mysql database, the problem is, that I don't know where they are exactly stored. If you can't find them,... [15:20:20] 6Labs, 10Tool-Labs: Should we change labs and tools proxies to https-only? - https://phabricator.wikimedia.org/T130236#2137753 (10tom29739) @Andrew That's handy, I don't see any reason not to switch to https then. It would make tools more secure, so that's all good. [15:38:02] 6Labs: Create labs project arcanist - https://phabricator.wikimedia.org/T130507#2137754 (10scfc) AFAIUI, users should push their changes to a Git directory in your project and then … whatever `arc` does to submit the changes to Phabricator? This would involve people storing their Phabricator credentials in your... [16:04:23] 6Labs: Create labs project arcanist - https://phabricator.wikimedia.org/T130507#2137762 (10Luke081515) >>! In T130507#2137754, @scfc wrote: > AFAIUI, users should push their changes to a Git directory in your project and then … whatever `arc` does to submit the changes to Phabricator? This would involve people... [16:09:53] 6Labs, 7Tracking: Support instance manipulation, proxies, dns with Horizon (Quarterly goal tracking bug) - https://phabricator.wikimedia.org/T124181#2137766 (10Andrew) [16:09:55] 6Labs: designatedashboard monkeypatch for proxy records - https://phabricator.wikimedia.org/T130151#2137764 (10Andrew) 5Open>3Resolved This is deployed and works. No doubt it will have to be nursed along for each designatedashboard version upgrade. [16:10:47] 6Labs: designatedashboard monkeypatch for proxy records - https://phabricator.wikimedia.org/T130151#2137767 (10Andrew) Oh, this was: https://gerrit.wikimedia.org/r/#/c/277943/ [16:11:10] 6Labs, 7Tracking: Support instance manipulation, proxies, dns with Horizon (Quarterly goal tracking bug) - https://phabricator.wikimedia.org/T124181#1948361 (10Andrew) [16:13:41] 6Labs: Migrate DNS entries from ldap to designate - https://phabricator.wikimedia.org/T129272#2137773 (10Andrew) I have a script on californium that can do this: ~andrew/ldaptodesignate.py Probably no need to put the script in puppet since it's a one-off. [16:14:22] 6Labs: Switch to using Horizon/Designate for labs public dns - https://phabricator.wikimedia.org/T124184#2137774 (10Andrew) I think all the design decisions needed here have been made, and we're ready to follow the checklist above. [16:20:58] 6Labs: Switch to using Horizon/Designate for labs public dns - https://phabricator.wikimedia.org/T124184#2137775 (10Andrew) [16:46:05] !log rcm created ubstest for a test of implementing a new mediawiki permission [16:46:09] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Rcm/SAL, Master [17:14:59] I have a labs question, I hope some people are around: Can instances talk to each other using http? for example http://ores-compute-01.eqiad.wmflabs or http://10.68.19.57 (private IP of that instance) [17:15:23] I know ssh ores-compute-01.eqiad.wmflabs works inside instances [17:42:49] Amir1: I don't know, but it doesn't just work. I tried "nc -vz ores-compute-01.eqiad.wmflabs 80" and failed [17:43:12] yeah [17:43:18] I'm trying to create proxies [17:46:50] I think that will depend on their security policy [17:52:36] It returns connection refused to me [18:39:22] 6Labs: Create labs project arcanist - https://phabricator.wikimedia.org/T130507#2137893 (10Paladox) Actually support for windows is new so many bugs are expected. https://secure.phabricator.com/book/phabricator/article/arcanist_windows/ But when I use it, it is hard plus some things doint work causing a push... [19:03:29] 6Labs, 13Patch-For-Review: Create web-proxy editing panel in Horizon - https://phabricator.wikimedia.org/T124183#2137898 (10AlexMonk-WMF) [19:03:32] 6Labs: Switch to using Horizon/Designate for labs public dns - https://phabricator.wikimedia.org/T124184#2137897 (10AlexMonk-WMF) [19:21:28] 6Labs: Create labs project arcanist - https://phabricator.wikimedia.org/T130507#2137905 (10scfc) If I'm not mistaken, Arcanist is not officially "supported" anywhere (cf. T133, https://secure.phabricator.com/T4200, etc.). Even more, your idea is based on the premise that for Windows users it is easier to set up... [20:18:31] andrewbogott: I'm wondering why we have 2FA at horizon, I logged in today, but I think horizon can't do more dangerous actions than wikitech [20:26:56] I'm not sure I understand why people are scared of using 2fa [20:27:08] save your recovery codes and all is fine [20:28:30] * bd808 has a drawer full of 2fa recovery codes for various online services [20:33:08] Amir1: you need to open up the port in the project firewall. This is done using https://wikitech.wikimedia.org/wiki/Special:NovaSecurityGroup [20:33:33] Amir1: the really lame thing is that an instance is added to a set of security groups at creation and that can't be changed later [20:33:46] bd808: hey, It was open, the problem was that I didn't set up a webserver [20:33:51] when I did it worked [20:33:55] ah :) [20:34:01] and now I'm dealing with other bugs :D [20:34:39] Amir1: for your question about SAL logging, its easiest for you to !log ores in this channel [20:34:54] kk [20:35:05] but we can try to dig up the config magic to allow that in the analytics channel [20:35:21] it's not that important [20:35:26] it would mean that the existing !log there would change [20:35:52] the bot can either send all !log to a single page or require a prefix to every message [20:35:59] there is no !log in #wikimedia-ai [20:36:14] oh... yeah I was thinking analytics [20:37:15] The code is in https://github.com/wikimedia/operations-debs-adminbot -- I'm not sure if the config is versioned somewhere or not [20:38:03] I look [20:39:18] bd808: Someone told me, 2FA makes auth only 2% more secure, and I have to search my phone every time.... [20:39:28] "someone" [20:39:38] that's an interesting {{cn}} [20:42:09] bd808: The point is that 2FA was optional at wikitech, and now it is required at horizon with the argument that horizon is more dangerous, but I don't know why people say that, which part of horizon is more dangerous than wikitech? [20:42:57] Andrew listed off some things that horizon can do that were not in the wikitech ui, but I don't remember what they are. [20:43:18] I mean the most danrous thing is deleting an instance, I think [20:43:41] yeah, del or halt [20:43:53] !worstcase [20:43:57] hmm [20:44:01] not anymore, wm-bot? [20:54:25] Yuvipanda: Maybe you can take a look at T130507 and say me, what you think about that? Maybe it is only a temporary solution, but it should help users wiht problems [20:54:26] T130507: Create labs project arcanist - https://phabricator.wikimedia.org/T130507 [20:54:57] Luke081515: last day of vacation, so I'm going to limit myself only to things that do not require brain cells [20:54:59] sorry! [20:55:16] ok, then do it tomorow :D [20:56:15] yuvipanda: i think eating and drinking requires brain cells too? :P [21:02:50] yuvipanda: I think this is what you were looking for -- https://tools.wmflabs.org/bash/quip/AVKLGrDHVcowl-ZznG9o [21:02:56] !worst [21:09:20] 6Labs: Create labs project arcanist - https://phabricator.wikimedia.org/T130507#2137956 (10bd808) Storing user credentials in a Labs instance is a really really bad idea. This would allow anyone who is admin in that project to impersonate anyone who setup credentials on the instances in the project. The risk of... [21:22:21] bd808: What if we use a bot account (operated by me), and I'm the only admin? In this case patches are from a shared account (like gerrit patch uploader), but the would work [21:22:58] how is that going to be different that manually uploading patches to differential? [21:23:52] Luke081515: if you want to spend some time on this, take a look at https://phabricator.wikimedia.org/T117388 and try to find a solution [21:24:10] manual uploading patches to differential have the disadvanteg that: a) you got now context b) merging could be difficult, if someone can't apply the patch at his local arc and c) there is no lint [21:24:45] we are never going to trust the built-in lint [21:24:52] it's easy to bypass [21:25:11] not sure what you "a" really means [21:25:33] bd808: Yeah, but it makes people to correct their patches before the upload, and there can be local unit-tests too [21:26:23] my a): depending on the patch generating git client the patch file contains only the changed lines. In this case differential would say "context not available" between the changed lines [21:28:27] and that's anoying for reviewers [21:29:43] bd808: That's the problen when your using the manual way [21:36:47] Luke081515: I'm going to spend some time today/tomorrow writing tutorials and deep dive content about MediaWiki-Vagrant. Do you have suggestions on particular topics that you couldn't find/understand the docs on? [21:39:27] not at the moment [21:40:25] I think I'm going to start with a step-by-step local role example. I did that in the video but have no good on-wiki doc [21:40:48] after that I think I'll do a walkthrough of the LocalSettings setup [22:25:30] bd808: FYI: https://phabricator.wikimedia.org/T117388#2137981 [22:44:38] bd808: sometimes arcanist is very strange: [22:44:48] luke081515@rcm-2:~/LUKE$ arc lingt [22:44:48] (Assuming 'lingt' is the British spelling of 'lint'.) OKAY No lint warnings. [22:44:54] :D [22:45:22] The phab devs have a good sense of humor [22:45:37] It's not. Brits use lint too. [22:46:38] I'd bet it says something like that for any sub-command with an edit distance of 1 from a known command [22:46:42] tom29739: That's why we call it humor :P [22:47:01] Humour. [22:47:14] :D [22:50:45] tom29739: I agree, sometimes phab is very strange. For example take a look at the 404 message [23:37:39] !log tools.luke081515bot deploying D123/D124 [23:37:39] D123: Simplify proxy engine selection - https://phabricator.wikimedia.org/D123 [23:37:54] morebots? [23:39:46] labs-morebots, help [23:39:46] I am a logbot running on tools-exec-1213. [23:39:47] Messages are logged to wikitech.wikimedia.org/wiki/Server_Admin_Log. [23:39:47] To log a message, type !log . [23:39:52] !log test [23:39:53] Message missing. Nothing logged. [23:39:56] seems like my typo [23:40:06] !log tools.luke081515bot deploying latest two commits, restarted the jobs [23:40:08] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.luke081515bot/SAL, Master [23:40:12] :D [23:40:21] last time my tool was not only at lower case [23:40:33] Krenair: Can you delete my latest two directs? I can't :-/ [23:40:43] latest two what? [23:40:55] These: https://wikitech.wikimedia.org/w/index.php?title=Category:Page_deletion_queue&action=edit&redlink=1 [23:41:17] *redirects [23:42:33] gone [23:42:38] thx