[15:04:19] i need help [15:04:19] Hi Guest42994, just ask! There is no need to ask if you can ask [15:05:48] someone tell me there are a way to run bot in toollabs in specific times , is that right? [15:07:09] any body can help ? [16:33:36] YuviPanda: can you approve https://gerrit.wikimedia.org/r/#/c/91620/ and submit your other pending patches? I crave logging... [18:19:22] Tool Labs: What happened to the "time travel" snapshots under /data/project/.snaplist? List not updated for over 3 months? Are there any actual snapshots? [18:26:37] andrewbogott: looking [18:26:51] andrewbogott: sorry I've been unresponsive, travel + apps stuff [18:32:01] russblau: No more time travel for the time being; it was a casualty of the efforts to stabilize NFS. They'll be back once we move to eqiad late this year / early next. [18:35:12] YuviPanda: no worries -- you have some some more work in progress, right? [18:55:42] Is that right we can run bot in toollabs in specific times ? [18:56:13] Guest7445: yes. [18:56:26] Guest7445: you can start a job at a specific time using cron [18:56:45] Are there any guide to run it in that way ? [18:58:29] andrewbogott: yeah, to make it configurable from a file [18:59:51] ? [19:01:00] Guest7445: https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/Help#Scheduling_jobs_at_regular_intervals_with_cron [19:45:32] Coren: I added a note time travel is unavailable on the help page [19:46:03] Ah, yes, that's probably a good idea. I was hoping it wouldn't last long enough to do that, but clearly that's not going to be realistic. :-( [19:46:57] Is there a bugzilla ticket for this? If so, I can't find it. [19:54:43] YuviPanda: Another thing that would be helpful to me would be a list of files (or a li'l rsync script) that migrates the necessary files from proxy-dammit to a new host. That would let me truly test a new install. [19:59:32] andrewbogott: meeting again, but yeah, I can write a script [20:35:15] andrewbogott: Flow team is running into a problem with templates/labs-localsettings. After orig/LocalSettings.php it does [20:35:20] if ( array_key_exists( "SERVER_NAME", $_SERVER ) ) { $wgServer = "//" . $_SERVER["SERVER_NAME"]; [20:35:57] but $wgServer starting with '//' makes MediaWiki think it can create https://ee-flow.wmflabs.org links. [20:36:21] so Echo e-mail notifications use these, and https doesn't work. [20:36:31] ok, looking... [20:38:11] if I want access to the production replica dbs, do I need a "tools" account or am i missing something? [20:38:21] thx. I don't know if config can introspect whether https to the instance is going to work; if not e.g. orig/LocalSettings.php could set $wgLabsCanUseHTTPS=true. Or maybe there's an onAfterLocalSettingsDoMoreConfig hook :) [20:43:40] spagewmf: can you just set $wgServer in orig/LocalSettings.php? I think that will disable https altogether which in your case is probably a good thing... [20:44:33] andrewbogott: bsitu tried that, it gets overwritten by those lines [20:46:03] could try hack of unsetting $_SERVER["SERVER_NAME"]. I think most labs instances don't have working https, so changing the template might be best [20:48:23] Yeah, try unsetting that and setting wgServer. [20:49:13] andrewbogott: We'll try that. The default config e.g. makes UserLogin have a _Use secure connection_ link that doesn't work, so I'll file a bug. [20:49:49] Removing the wgServer hack breaks several things, although I don't have the list of breakages at hand. I'll look into it more... [20:50:33] how hard is it to get httpS://ee-flow.wmflabs.org to work, is there a guide to it? [20:52:14] There's not a guide. I would think that having it work with a bogus cert would not be very hard. [20:53:20] spage, you would want to add an apache conf something like this: https://gerrit.wikimedia.org/r/#/c/53989/6/modules/labsconsole_singlenode/templates/labsconsole.wmflabs.org.erb [20:53:32] andrewbogott: can you (or anyone else) add me to the tools project so I can get access to the db replicas? The docs don't mention any other way for me to get access. [20:53:45] oh, didn't realize you were talking already, can't read.... [20:54:11] when you say 'so I can get access' do you mean that you're making a tool? Or... [21:00:20] andrewbogott: no! I just need to look at data in those databases. I'd love to not have a tool account and just do it with my regular labs account but there is no documentation for that so I don't believe I can [21:00:52] Hm… I have no idea how the db is protected. But in any case you should be able to log into tools-login now [21:01:25] that worked, let me follow the db instructions... thanks! [21:19:32] spagewmf: did that workaround get you unstuck for now? [21:20:11] andrewbogott: about to try it. I filed bug https://bugzilla.wikimedia.org/show_bug.cgi?id=56389 [22:42:34] ahoy [22:42:58] hey --- so cajoel is making some networking monitoring software that will be going into production... he needs a place to make a few instances [22:43:09] so we weren't sure which project he should join and be on [22:43:13] yes -- true [22:43:43] is there a project list somewhere I could cross reference? [22:45:26] if you click on the "Projects" you can sorta scroll through the popup [22:45:30] Coren: maybe you could help us with this decision ? [22:45:41] heyhey, I'm having trouble adding myself to a POSIX group on a labs instance. 'usermod -a -G wikidev werdna' doesn't seem to do the trick. Are POSIX groups managed by some other freaky labs thing? :) [22:45:42] * Coren reads scrollback. [22:46:04] cajoel: https://wikitech.wikimedia.org/wiki/Special:Ask/-5B-5BResource-20Type::project-5D-5D/-3F/-3FMember/-3FDescription/mainlabel%3D-2D/searchlabel%3Dprojects/offset%3D0 ehm :) [22:46:16] IMO, this is one of the cases where I think making a new project would be indicated. [22:46:25] cajoel: we can make a new one though, like "networking" [22:46:29] netflow [22:46:33] is more apt [22:46:55] Coren: i'd create "netflow" then , k? [22:47:14] Ayup. Do you have the bits for it or do you need me to do it? [22:47:38] Coren: i should have [22:48:16] cajoel: so you already have a labs user? [22:48:20] Can we make Leslie and Ken members as well? [22:48:24] I believe I do.. sec. [22:48:35] i don't know if ken has a labs account [22:48:51] i suppose you want to be project admin [22:48:54] and not just regular member [22:49:01] i mean, somebody has to when i create it:) [22:49:51] if it has over-reaching security issues, make it leslie, if it's just add/remove members, sure, I can do that. [22:50:03] naw, the worst you can do is fuck up that specific project [22:50:15] !log bastion creating new project 'netflow' [22:50:16] Logged the message, Master [22:51:18] cajoel: https://wikitech.wikimedia.org/wiki/Nova_Resource:Netflow [22:51:41] if you can add some basic info on the red "Add documentation" link would be appreciated [22:51:48] just what it's about for now [22:52:55] great [22:53:15] You do not have permission to edit this page, for the following reasons: [22:53:15] The action you have requested is limited to users in the group: Users. [22:53:15] You must confirm your email address before editing pages. Please set and validate your email address through your user preferences. [22:53:19] stalled [22:53:25] ok, I'll do that.. [22:53:29] i still need your user name to add you [22:53:34] for now it's just Leslie and I [22:53:36] Failed to add cajoel to netflow. [22:53:46] ah, gotcha, yep [22:56:54] jkrauska [22:58:50] edited.. [22:59:22] cajoel: Successfully added Jkrauska to projectadmin. [22:59:41] you can now spin-up an instance if you like [23:00:17] fwiw, here are the current quotas https://wikitech.wikimedia.org/w/index.php?title=Special:NovaProject&action=displayquotas&projectname=netflow [23:00:36] will you need public IPs? [23:00:37] forgive me, but it's not entirely clear to me where to start new instances... [23:01:05] leslie: will public IPs be needed for prototyping? [23:01:08] in the wiki interface, on the left side, Manage Instances [23:01:20] yes, they will [23:01:22] 1 public ip [23:01:25] you will see a button with "Set filter" [23:01:39] add "netflow" there so you see your project-related stuff [23:01:41] (found it under ProjectAdmins) [23:02:05] then there is a link "Add instance" next to pmtpa [23:02:34] select a name for it, select a type (if in doubt start with defaults) and submit [23:02:37] pmtpa == cluster anem? [23:02:51] yes, Tampa cluster [23:03:44] security groups are per project or global? [23:03:45] wikimedia cluster names: https://meta.wikimedia.org/wiki/Wikimedia_servers#Hosting [23:04:05] cajoel: per project [23:04:13] cajoel: and then https://wikitech.wikimedia.org/wiki/Getting_started#Project_Instances to get on it [23:04:56] about to head out, i'm sure the channel can help with further questions [23:05:00] hey, did anybody catch my question on POSIX groups? I fear it may have been lost in the other chat. [23:05:05] in AWS land, I typically set a security group per machine role -- same best practice here?? eg. frontend, cache, db, etc.. [23:07:02] I'll figure it out -- just prototyping now. [23:14:06] cajoel: Yes, that's what I'd advise with Labs security groups [23:14:18] Indeed, I think labs runs the same software as AWS, so the functionality and intents should be equivalent [23:16:09] mutante: "Failed to allocate new public IP address."