[00:25:08] Bah, how are dkpg control/rule files more complex than spec files... [00:33:13] Damianz: /me shrugs [00:33:32] methecooldude: I'll delegate the task to you :P [00:33:54] Pff... You know I'll mess that one up :P [00:44:46] LeslieCarr: If you're back could you take a look over http://sprunge.us/RLGO, I lack commit access so usually get petan to do my dirty work. Not sure if I'm going along the right lines here though. [00:45:07] um? [00:45:12] what do you need :o [00:45:34] so you need to do a push for review :) [00:46:00] https://labsconsole.wikimedia.org/wiki/Git#Git.2FGerrit_and_the_puppet_repositories [00:46:16] that will push it to gerrit [00:46:25] which is our change control system [00:55:57] Yeah I don't have access to push up to the repo, even in a review state [00:56:20] [damian@finnix puppet]$ git push-for-review-privatePermission denied (publickey). [00:56:23] fatal: The remote end hung up unexpectedly [00:56:25] ^ No like me :( [00:56:38] petan: Adding a generic edit time check to nagios + adding some puppet logic for bots-cb. [00:56:53] * Damianz wishes he hadn't started trying to make dpkgs for it now though [00:57:06] I need to sleep now :) [00:57:22] Sleep? What is this :P [00:57:25] :D [00:57:28] it's 2 am [00:57:39] today is christmass day :D [00:57:44] :o [00:57:50] Tomorrow is here. [00:57:54] Silly timezones [00:57:58] I have 24 dec [00:58:01] 2 am [00:58:18] I live in europe we have probably different christmass here :D [00:58:30] yeah so it's eve today, christmas day is tomorrow the 25th. [00:59:07] ah, we celebrate only 24th (presents giving) [00:59:16] Interesting [00:59:22] right after dinner [01:08:49] Damianz - interesting [01:08:54] oh did you add your ssh key to gerrit ? [01:10:39] I think so... Hmm I'll double check in a sec. [01:44:26] Weee Titanic finished [01:49:32] Nope Gettit is right, I'm not in a group that has push access to any of the refs in the ops repo. [01:51:59] interesting, while you shouldn;t have push access you should have push to gerrit access - i'd ask ryan lane [01:52:04] i think he's gone for the weekend tho [01:52:39] * Damianz shrugs [01:53:00] Same difference isn't it? I thought gerrit was just a branch which then it merged into the main branch for w/e [01:53:05] * Damianz doesn't really understand gerrit tbh [01:54:11] gerrit is sort of a branch but it's got very open permissions [01:54:21] so you can push to gerrit then an approver approves and pushes to labs [01:54:38] but anyways, it does look like about that time, so i am going to get going :) [01:54:59] Lol, all these people having early nights on a saturday morning! [01:55:27] :) [01:56:39] have a good weekend [02:44:08] * Damianz waves to Ryan_Lane [02:44:19] Howdy [02:44:29] At the airport, on my phone :) [02:47:51] Going anywhere nice? [03:06:15] Going to new Orleans to visit family [03:06:26] It's ok. heh [03:08:27] Time for flight :) [10:01:09] 12/24/2011 - 10:01:09 - Updating keys for whym [18:55:03] PROBLEM Disk Space is now: WARNING on nova-production1 nova-production1 output: DISK WARNING - free space: / 567 MB (5% inode=86%): [19:16:17] hey Ryan_Lane :) [19:16:28] enjoy the holiday [19:17:26] howdy [19:17:28] am :) [19:32:52] you too [19:43:53] PROBLEM dpkg-check is now: CRITICAL on wep wep output: CHECK_NRPE: Error - Could not complete SSL handshake. [19:44:33] PROBLEM Current Load is now: CRITICAL on wep wep output: CHECK_NRPE: Error - Could not complete SSL handshake. [19:45:18] PROBLEM Current Users is now: CRITICAL on wep wep output: CHECK_NRPE: Error - Could not complete SSL handshake. [19:46:03] PROBLEM Disk Space is now: CRITICAL on wep wep output: CHECK_NRPE: Error - Could not complete SSL handshake. [19:46:43] PROBLEM Free ram is now: CRITICAL on wep wep output: CHECK_NRPE: Error - Could not complete SSL handshake. [19:48:13] PROBLEM Total Processes is now: CRITICAL on wep wep output: CHECK_NRPE: Error - Could not complete SSL handshake. [19:52:14] wep wep? [19:52:43] ah. global education project [19:55:56] actually it's alias and hostname but it's both wep [19:56:00] so wep wep [19:56:06] heh [19:56:36] gateway would have ip :) [19:59:25] hi Ryan_Lane [19:59:32] howdy [20:00:03] i need to update my ssh key for svn access [20:00:16] hmm [20:00:18] should it work to update it in labs? or is it a separate process? [20:00:24] I think that's still handled via OTRS [20:00:33] ok [20:00:39] who handles it? [20:00:42] I need to work out some possible security concerns before I update svn keys via labs [20:00:51] * aude has wikimania stuff to go in svn [20:00:57] ok [20:01:01] it should be via the normal svn access request [20:01:13] hmm... [20:01:24] http://www.mediawiki.org/wiki/Commit_access#Requesting_commit_access [20:01:28] ok [20:01:36] i can use github for now maybe [20:01:49] you don't need to reapply, but I think you can use the same email address [20:02:02] ok [20:02:17] and the same rules apply for the key [20:02:58] hopefully it won't take forever [20:04:07] thanks [20:04:11] yw [20:06:03] RECOVERY Disk Space is now: OK on wep wep output: DISK OK [20:06:43] RECOVERY Free ram is now: OK on wep wep output: OK: 89% free memory [20:08:13] RECOVERY Total Processes is now: OK on wep wep output: PROCS OK: 84 processes [20:08:53] RECOVERY dpkg-check is now: OK on wep wep output: All packages OK [20:09:33] RECOVERY Current Load is now: OK on wep wep output: OK - load average: 0.00, 0.05, 0.07 [20:10:13] RECOVERY Current Users is now: OK on wep wep output: USERS OK - 0 users currently logged in [20:26:51] Ryan_Lane: My guess is that I am supposed to be able to access education.wmflabs.org ? I'm not getting any response from it... Anything else I need to do? [20:27:09] I allocated the address, and made the DNS name [20:27:25] I did not, however, associate it with your instance [20:27:30] you should wait to do that [20:28:01] once you are ready to demo something, then you can associate the address [20:28:11] Ryan_Lane: ok [20:28:13] until then, you can use a socks proxy [20:28:16] !socks-proxy [20:28:16] see https://labsconsole.wikimedia.org/wiki/Access#Accessing_public_and_private_instances ssh $1@bastion.wmflabs.org -D [20:28:27] $1? [20:28:28] heh [20:28:34] !socks-proxy [20:28:34] see https://labsconsole.wikimedia.org/wiki/Access#Accessing_public_and_private_instances ssh @bastion.wmflabs.org -D [20:28:37] heh [20:32:22] JeroenDeDauw: in general, though, this infrastructure is mostly user-managed ;) [20:32:40] if there is something you can't do yourself, just let me know [20:33:01] (ops is the only one that can create projects, though) [20:38:19] my idea was to do !socks-proxy laner so that it would be even easier to understand :D but it seems to be even more complicated heh [20:38:31] !socks-proxy petrb [20:38:32] see https://labsconsole.wikimedia.org/wiki/Access#Accessing_public_and_private_instances ssh petrb@bastion.wmflabs.org -D [20:38:36] :) [20:45:44] it's fine, but not everyone's ircname matches their shellname [20:46:35] it's a variable not irc nick [20:46:42] !socks-proxy whatever [20:46:42] see https://labsconsole.wikimedia.org/wiki/Access#Accessing_public_and_private_instances ssh whatever@bastion.wmflabs.org -D [20:46:47] yeah [20:47:00] I often don't know people's shellaccount names, though [20:47:00] I was probably just testing a bot :) [20:47:09] !socks-proxy del [20:47:09] Successfully removed socks-proxy [20:47:15] heh [20:47:40] !socks-proxy is see https://labsconsole.wikimedia.org/wiki/Access#Accessing_public_and_private_instances ssh @bastion.wmflabs.org -D [20:47:40] Key was added! [20:48:00] @regsearch . [20:48:00] Results: puppet, instance, morebots, git, bang, nagios, bot, labs-home-wm, labs-nagios-wm, labs-morebots, gerrit-wm, wiki, labs, bastion, extension, wm-bot, projects, putty, gerrit, change, wikitech, revision, monitor, alert, password, unicorn, help, $realm, bz, os-change, instancelist, instance-json, leslie's-reset, damianz's-reset, amend, security, credentials, bug, queue, socks-proxy, [20:56:47] Ryan_Lane: right ok [20:57:05] * JeroenDeDauw is meh at all the setup work :/ [21:02:57] "Could not find a suitable database driver!" [21:02:57] wtf? I installed php and php5-mysql... [21:03:11] PHP 5.3.2-2wm1 is installed [21:03:18] did you restart apache? [21:03:19] Did someone mess w/ the package? [21:03:21] Yeah [21:03:33] you know, other people have mentioned this.... [21:03:47] I don't remember what they did to solve it [21:03:59] Compile it from source? [21:04:04] it's a pdo library or something that is missing [21:04:07] absolutely not [21:04:13] never install from source [21:04:47] And anyway, why is all this setup work needed? Seems like it'd be useful to have an image with MW installed lying around from which you can create a new instance... [21:04:59] Well, then I don't know what to do to get it to work [21:05:03] yeah, it would be [21:05:06] I'm not a sysadmin [21:05:30] I gave you and erik a warning about this in the original reply ;) [21:05:55] we haven't gotten to the mediawiki stuff yet [21:06:08] Right [21:06:39] I have the following installed: [21:06:41] php-apc [21:06:41] php5 [21:06:41] php5-cli [21:06:41] php5-common [21:06:41] php5-curl [21:06:41] php5-ldap [21:06:41] php5-memcache [21:06:42] php5-mysql [21:06:42] php5-uuid [21:06:51] uuid for sure isn't needed [21:07:03] you probably don't need curl, but it doesn't hurt [21:09:43] basic sysadmin skills are pretty useful for a developer, btw [21:10:33] Ryan_Lane: installed them all, same error [21:10:48] oh [21:10:53] you are missing the mysql client libraries [21:11:01] that's what its looking for [21:11:07] Ryan_Lane: sure, I think I have basic sysadmin skills. But as far as I'm concerned, every min I spend on sysadmin stuff is a min I make zero progress on my actual work. [21:11:18] err [21:11:21] Yeah, could be [21:12:05] meh, gotta learn this stuff sometime. if you needed to have a virtual machine on your laptop, for some reason, you'd need to do this stuff there too [21:13:52] Ryan_Lane: well, installed those and still same error [21:14:02] did you restart apache? [21:14:24] yeah... [21:14:48] I know that much... I am running ubuntu myself after all [21:14:55] I have the following installed: mysql-client [21:14:56] mysql-client-5.1 [21:14:56] mysql-client-core-5.1 [21:14:56] mysql-common [21:15:02] php5-mysql [21:15:12] I'm just making sure [21:15:21] and: libmysqlclient16 [21:15:24] How do I get that list? [21:15:33] dpkg -l | grep mysql [21:16:56] does this file exist? /etc/php5/apache2/conf.d/mysql.ini ? [21:17:10] how about: /etc/php5/apache2/conf.d/pdo.ini [21:17:24] and: /etc/php5/apache2/conf.d/pdo_mysql.ini ? [21:17:57] Ryan_Lane: all exist [21:18:28] do they show up in: php -i | grep conf.d ? [21:18:59] does pdo_mysql show up in: php -i | grep pdo [21:18:59] ? [21:20:04] Ryan_Lane: both yes [21:20:16] are you using trunk? [21:20:20] is mediawiki's detection broken> [21:20:27] lol [21:20:30] yeah [21:20:41] If that's the case I'm going to epic /facepalm [21:20:56] I'll get 1.18, needs to work w/ that after all [21:21:07] it does, I'm using it :) [21:21:16] why are you developing against trunk? [21:21:45] do all the devs usually develop against trunk, or against wmf branch? [21:22:04] you can't necessarily rely on trunk features being available on the site [21:22:05] Ryan_Lane: I have no idea what most devs do [21:22:24] Ryan_Lane: I know that, this is why we have deprecation notices [21:22:31] And @since tags [21:22:48] well, I mean, when we deploy your extension, it's not going to be running on trunk [21:23:09] oh, wait, you've already deployed one, right? [21:23:18] then you already know that :) [21:23:23] Ryan_Lane: yeah [21:24:11] Ryan_Lane: also, I develop and maintain over a dozen extensions with different requirements, so I have different rels installed locally, and usually just use trunk so I get to see the new stuff [21:24:20] * Ryan_Lane nods [21:26:00] Ryan_Lane: well, I got 1.18, and no longer have the error [21:26:02] >_> [21:26:07] bahahahaha [21:26:15] Ryan_Lane: well, thanks for the help :) [21:26:18] yw :) [21:33:25] *yawn* [21:45:53] PROBLEM Disk Space is now: CRITICAL on nova-production1 nova-production1 output: DISK CRITICAL - free space: / 280 MB (2% inode=86%): [21:46:05] stupid nova logs [21:50:53] RECOVERY Disk Space is now: OK on nova-production1 nova-production1 output: DISK OK [22:03:30] Ryan_Lane: I associated the ip address with the instance, but I can't get it it load in my browser. I can ping it (but it has 800 ms on avg) [22:03:44] did you read the instance documentation? :) [22:03:54] security groups are firewalls [22:04:24] you didn't make a non-default security group :( [22:04:44] well, you can add a rule in for 80 and 443 to the default security group [22:05:01] but, once you create an instance, you can't change its security groups [22:05:08] this is some stupid EC2 compatibility thing [22:07:07] * JeroenDeDauw goes off to http://www.nooooooooooooooo.com/ [22:07:57] documentation is a good thing to read occasionally :) [22:07:58] Ryan_Lane: I read something in the docs about not changing it from the default :p [22:08:03] heh [22:08:13] the docs say that? [22:08:26] I know they say to ensure default is checked... [22:09:01] "Security groups can never be changed on an instance after the instance is created. You can add and remove firewall rules from the already defined security groups, though. So, it's usually best to create your necessary security groups before creating your instance." [22:10:55] Ryan_Lane: so can you modify the default group to allow ports 80 and 443, or do I need to setup a new thing? [22:11:11] you can modify the default rules [22:11:30] it's usually frowned upon, because then every instance in your project will then have those ports open [22:11:51] Right [22:12:00] I don't see any other instances getting added though [22:12:01] if you only plan on having web instances that are meant to be open to everything, then it's no big deal [22:12:15] Yeah, that is the case [22:15:41] Ryan_Lane: I'm getting "Failed to add rule. " [22:15:49] oh? [22:15:56] The "CIDR ranges" thing is optional right? [22:16:00] did you select a group rule and an individual rule? [22:16:00] no [22:16:09] you must provide cidr range [22:16:16] So what do I put there? [22:16:18] if you want to open it to the world, use 0.0.0.0/0 [22:16:47] meh, still getting the error [22:17:11] all fields are mandatory in an individual rule [22:17:17] !security [22:17:17] manual https://labsconsole.wikimedia.org/wiki/SecurityGroups [22:17:22] you aren't supplying both a group rule, and individual rule, right? [22:17:47] Ryan_Lane: I was, now it works [22:18:00] Not the most obvious UI :) [22:18:02] I put a warning there and everything :D [22:18:14] or maybe we could improve the manual [22:18:20] I just did :) [22:18:24] :) [22:18:30] "Note: group rules are mutually exclusive from individual rules." [22:18:39] maybe I should change that to warning, and make warning bold [22:19:20] Ryan_Lane: the warning is placed in the group thing, which made me think it applied to doing things in the group thing [22:19:29] Better place it on the top of the page I think [22:22:51] stupid htmlform [22:25:34] Ryan_Lane: I usually go "I'm not a flipping designer" in such situations :p [22:25:43] I'm not [22:25:45] :) [22:27:15] there we go [23:02:28] Reedy: Hi [23:02:54] Sorry typo. [23:05:20] Pfft