[00:28:09] 10serviceops, 10MediaWiki-General, 10Core Platform Team (Needs Cleaning - Security, stability, performance, and scalability (TEC1)), 10Performance-Team (Radar), 10Security: Create a tmp directory just for MediaWiki - https://phabricator.wikimedia.org/T179901 (10Krinkle) [00:33:44] 10serviceops, 10cloud-services-team, 10wikitech.wikimedia.org, 10Performance-Team (Radar): Disable now-redundant mediawiki/TorBlock/loadExitNodes.php cron script - https://phabricator.wikimedia.org/T229736 (10Krinkle) @bd808 As I understand it, a recent change to the TorBlock extension has made the cronjob... [09:19:03] 10serviceops, 10Operations, 10Traffic, 10Patch-For-Review: Applayer services without TLS - https://phabricator.wikimedia.org/T210411 (10Dzahn) [10:12:28] <_joe_> mutante: I recently changed "restart-hhvm" to use a more advanced script, one that logs its activity on stderr I would say, hence the cronspam we're seeing [10:12:38] <_joe_> can you take a look into it? [10:12:56] <_joe_> probably just needs a >/dev/null > 2>&1 [10:13:25] _joe_: ok, will do [10:13:33] <_joe_> <3 [10:13:47] <_joe_> sorry to unload this on you, but I will not be around much for the rest of the day [10:15:26] no worries! all the best [10:33:10] the actual content in cron spam comes from the python script safe-service-restart. it uses logger.info. makes you wonder but why are info level message son stderr and then there is https://github.com/certbot/certbot/issues/3666 [10:48:49] 10serviceops, 10Operations, 10Traffic, 10Patch-For-Review: Error pulling image from docker registry - https://phabricator.wikimedia.org/T231388 (10ema) 05Open→03Resolved We have managed to generate a proper certificate for the docker-registry origin servers, and cp1075 is now back to using TLS to conne... [11:38:18] 10serviceops, 10Operations, 10Traffic, 10Patch-For-Review: Applayer services without TLS - https://phabricator.wikimedia.org/T210411 (10Dzahn) [11:38:40] 10serviceops, 10Operations, 10Traffic, 10Patch-For-Review: Applayer services without TLS - https://phabricator.wikimedia.org/T210411 (10Dzahn) [11:40:15] the following misc services have been migrated: [11:40:27] - http://scholarships.wikimedia.org [11:40:34] - http://iegreview.wikimedia.org [11:40:44] - http://racktables.wikimedia.org [11:42:47] the changes are: jessie->stretch, removed PHP5 support, using envoy for TLS termination and TLS between backend and caching servers using ATS, using DNS discovery names (webserver-misc-apps.discovery.wmnet), new cluster name (miscweb1001 instead of krypton), equivalent in codfw to failover to (miscweb2001, now also possible to use DB there) [11:57:05] 10serviceops, 10Operations, 10decommission: decom krypton.eqiad.wmnet - https://phabricator.wikimedia.org/T231546 (10Dzahn) [12:19:49] 10serviceops, 10Operations, 10decommission: decom krypton.eqiad.wmnet - https://phabricator.wikimedia.org/T231546 (10Dzahn) [12:20:40] 10serviceops, 10Operations, 10decommission: decom krypton.eqiad.wmnet - https://phabricator.wikimedia.org/T231546 (10Dzahn) [12:22:28] 10serviceops, 10Operations, 10Patch-For-Review: upgrade and rename krypton & create its codfw equivalent - https://phabricator.wikimedia.org/T224247 (10Dzahn) [12:22:36] 10serviceops, 10Operations: upgrade and rename krypton & create its codfw equivalent - https://phabricator.wikimedia.org/T224247 (10Dzahn) [12:23:33] 10serviceops, 10Operations: upgrade and rename krypton & create its codfw equivalent - https://phabricator.wikimedia.org/T224247 (10Dzahn) [12:27:30] 10serviceops, 10Operations: upgrade and rename krypton & create its codfw equivalent - https://phabricator.wikimedia.org/T224247 (10Dzahn) The following services have been moved away from krypton miscweb1001. - http://racktables.wikimedia.org - http://iegreview.wikimedia.org - http://scholarships.wikimedia.or... [12:31:56] 10serviceops, 10Operations: upgrade and rename krypton & create its codfw equivalent - https://phabricator.wikimedia.org/T224247 (10Dzahn) TODO: DB config needs to use codfw proxy if puppet role applied on codfw node [13:15:32] 10serviceops, 10Operations, 10WMF-Legal: Move old transparency report pages to historical URLs and setup redirect - https://phabricator.wikimedia.org/T230638 (10Dzahn) One thing that you can already do is create https://transparency.wikimedia.org/historical/ since that is just inside the content repo that is...