[00:35:24] Alright, boarding almost done, should be in Paris by 13:30 on the 15th [00:35:39] 11:30UTC [00:48:46] good travels for you! [00:59:16] mutante: there should be some configuration somewhere we can look at, that explicitly lists the domains we do the @wikipedia.org style impostor forwarding thingy for [00:59:27] either for our mailservers on the receiving/forwarding side, or somewhere in wikiland? [00:59:37] I really don't know much about it [02:05:37] ah, i think that would be in exim config..yes [02:05:37] domainlist local_domains = +system_domains : +wikimedia_domains : +legacy_mailman_domains : +verp_domains [02:06:33] domainlist wikimedia_domains = lsearch;CONFDIR/wikimedia_domains [02:07:15] modules/role/files/exim/wikimedia_domains ! [05:41:30] 10netops, 10Operations, 10ops-eqiad, 10Patch-For-Review: Rack/cable/configure asw2-c-eqiad switch stack - https://phabricator.wikimedia.org/T187962#4206574 (10Joe) I would suggest we do NOT disable/depool anything but the obvious outlier in the databases (we already know that timeouts on the databases woul... [05:49:57] 10netops, 10Operations, 10ops-eqiad, 10Patch-For-Review: Rack/cable/configure asw2-c-eqiad switch stack - https://phabricator.wikimedia.org/T187962#4206575 (10Joe) Things to watch out for: - All lvs primaries for eqiad are in row C - row C includes 30 appservers - conf1002 is in row C (etcd connections wi... [06:08:22] 10Traffic, 10Cloud-Services, 10Operations, 10cloud-services-team, and 2 others: Deprecate `base::service_unit` in puppet - https://phabricator.wikimedia.org/T194724#4206611 (10Joe) [09:34:59] 10Traffic, 10Fundraising-Backlog, 10Operations, 10fundraising-tech-ops: SSL cert for links.email.wikimedia.org - https://phabricator.wikimedia.org/T188561#4206939 (10CCogdill_WMF) Thanks Casey! I'm waiting for a reply. Just bumped it, FYI. [11:32:01] 10Traffic, 10DC-Ops, 10Operations, 10monitoring, and 2 others: memory errors not showing in icinga - https://phabricator.wikimedia.org/T183177#4207372 (10fgiunchedi) >>! In T183177#4088202, @BBlack wrote: > See updates in T190540 , quite a few codfw hosts have SEL entries for uncorrectable ECC errors that... [13:39:40] unfortunately "tlsproxy" hardcodes it as "compat" (because it was originally developed for the public-facing primary wikis), and is now re-used for other things. [13:41:35] all of these are using tlsproxy's hardcoded 'compat' but probably should be using mid or strong: profile::etcd::tlsproxy role::mediawiki::webserver role::swift::proxy [13:49:03] In Paris! (tired) [13:49:16] XioNoX: almost in BCN then :) [13:49:35] flying to BCN Thursday morning [13:49:40] 7am flight, aouch [13:49:45] ouch! [13:49:58] XioNoX: let's meet for lunch on Thursday? [13:50:05] are people going to hangout in BCN or head straight to the Venue/Hotel? [13:50:27] vgutierrez: also what's the best barber of BCN? [13:50:34] (important questions) [13:50:37] :) [13:51:20] I'm pretty happy with mine, near my apartment, but I don't think he knows how to speak English [13:51:28] I can ask to my expat friends [13:52:12] bblack: when are you landing in BCN? [13:57:48] there is a wikipage with all the travel details, but I keep losing it [13:58:17] I remember he lands on Thursday kinda soon-ish [13:58:40] so if he is up to it we could have a Traffic lunch :D [13:59:38] XioNoX: welcome back to Europe! [13:59:53] thanks, I missed it! [14:03:37] yeah I think I land fairly early thursday, and there's ~3 other employees on the same plane with me [14:03:52] I was planning to stay a bit in BCN and head to cugat later in the afternoon/evening. [14:04:15] (so I can enjoy a few hours in a real city, and get some tourist shopping for kids done) [14:06:55] nice [14:14:19] vgutierrez: https://office.wikimedia.org/wiki/Travel/Hackathon_2018/Arrival/Departure_Manifests [14:22:24] 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#4207782 (10Ottomata) @bblack would you mind if I assigned this to someone on your team? [14:22:58] 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#4207783 (10BBlack) a:05Ottomata>03Vgutierrez Done :) [14:23:33] hahahah [14:23:44] XioNoX: http://www.barberia.es/BarberoNew/home/index.jsp?selid=eng [14:23:54] XioNoX: after asking to some friends they've come with this one [14:24:52] this guy looks intense [14:25:41] thanks, will give it a try [14:25:57] don't forget to call / send an email and get an appointment [14:33:00] bald barbers remind me of skinny cooks [14:33:06] I wouldn't trust him [14:36:12] booked [14:36:24] XioNoX: great [14:36:37] haha, I think it's different though :) [14:36:53] 11am thursday, then lunch nearby? [14:38:19] yeah I have trust issues with barbers. I don't think I could ever let someone else use a straight razor on me. What if they sneeze? :P [14:38:36] XioNoX: let me check... [14:39:14] I love trying barbers when I travel [14:42:35] XioNoX: meat + awesome beer sounds good? [14:42:55] vgutierrez: hum, I only like mediocre beer [14:43:08] hahahah [14:43:21] XioNoX: lunch @ biercab then. it's 7 minutes walking from your barber [14:43:34] perfect! [14:44:04] it's only the third place in the world to drink beer according to ratebeer.com.. O:) [14:45:02] wow, awesome [14:48:58] what time is "lunch" in BCN? like 3pm? :) [14:50:36] well... standard spanish time would be somthing around 2.30-3pm yes [14:50:42] sounds about right, at least in VLC most places are deserted before 13.30 [14:50:51] if not closed [14:50:54] BCN being a big city you could have lunch at 1pm or even before [14:51:16] I'm used to have lunch at 1pm here in BCN [14:51:42] for expats it's even harder to adapt to our dinner time [14:53:09] heheh indeed, my wife is from Canada and still shocked there's parents with kids around for dinner well past 23 [14:53:25] yup.. pretty crazy [14:53:45] I'm used to something strange for spanish standards... lunch at 13, dinner at 21 [14:55:12] heheh I do sth similar, pretty convenient when eating out to beat peak times [14:56:35] yup.. usually here at 13:00 you can pick the table you like, at 14:00 you have a nice queue :) [15:00:13] "nice queue" sounds like manhattan at ... all times [15:00:40] I can't stand lines for things [15:00:43] With the jetlag lunch is at 9pm so far for me [15:01:14] it's so... artificial. basic supply and demand: if there's lines for things, you should be expanding / scaling up or have more competitors around that are decent, etc... [15:01:31] I don't understand people waiting in line hours for brunch [15:01:34] XioNoX: nice time for dinner then :P [15:02:08] when I see a line situation that's pervasive and persistent (e.g. all the restaurants in an area), I figure there's something else at work. One way or another, the people like the lines. e.g. they've grown to assume if there's no line, it's not worth going there, so they're creating an artificial pressure to maintain the situation. [15:02:18] and I just can't stand that idea :P [15:03:15] (it happens here too, and really bugs me. I change where/when I eat out just to avoid it) [15:17:58] <_joe_> bblack: I remember waiting 25 minutes in a queue in SF for grabbing a damn sandwich and thinking "queueing for hour for food... where are we, Soviet Russia?" [15:18:04] <_joe_> *hours [15:18:52] well it probably wasn't just any food! [15:19:56] it was SF, so it was probably Farm-to-Table, made only from ingredients sourced within 200 feet, prepared by a team of 472 executive chefs flown in from around the world, and officially certified by every possible authority on naturalness of foods and being free of absolutely anything anyone could object to. [15:20:35] <_joe_> so a kale sandwich [15:21:39] a certified gluten-free, sugar-free, pesticide-free, peanut-free, organic, free-range kale sandwich grown locally and humanely. [15:21:48] (they use special scissors to reduce the kale plant's pain) [15:22:50] <_joe_> ahahah [15:23:33] <_joe_> this is so going to moriel for next year's quotes collection [15:24:00] hahhaa [15:25:21] see also: https://www.youtube.com/watch?v=ErRHJlE4PGI [15:30:50] people see a line, they think "oh, so many people waiting for it, must be good", they get in line just because of FOMO (fear of missing out).. i think [15:33:24] and.. eating Kale is dangerous!! https://www.thedailymeal.com/healthy-eating/eating-raw-kale-actually-really-bad-you [16:04:00] 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#4208208 (10Vgutierrez) Right now the TLS server allows the client to pick up the curve to use, since j8u121 (8u171-b11-1~deb9u1 is deployed on k... [16:07:03] 10Traffic, 10Operations: Identify bots using AES128-SHA maintainers running on toolforge - https://phabricator.wikimedia.org/T194380#4208219 (10MaxBioHazard) >so you should be able to keep using it. Did you mean that we can change nothing in our bots, its compilation settings, and when you disable AES128 our... [16:10:20] 10Traffic, 10Operations: Enable Service in Asia Cache DC - https://phabricator.wikimedia.org/T156026#4208223 (10BBlack) 05Open>03Resolved a:03BBlack Closing this (a bit late), as service has been online for a while now. Trailing remaining tasks re: Zero and/or further network engineering aren't really a... [16:11:21] 10Traffic, 10Operations: Enable Service in Asia Cache DC - https://phabricator.wikimedia.org/T156026#4208229 (10BBlack) [16:11:27] 10Traffic, 10Operations, 10Patch-For-Review, 10Performance-Team (Radar): Define turn-up process and scope for eqsin service to regional countries - https://phabricator.wikimedia.org/T189252#4208227 (10BBlack) 05Open>03Resolved Closing this as well, we're through the basic turn-up process. Trailing wor... [16:11:30] 10Traffic, 10Operations: Identify bots using AES128-SHA maintainers running on toolforge - https://phabricator.wikimedia.org/T194380#4208230 (10Vgutierrez) >>! In T194380#4208219, @MaxBioHazard wrote: >>so you should be able to keep using it. > > Did you mean that we can change nothing in our bots, its compil... [16:23:54] 10Traffic, 10Operations: Identify bots using AES128-SHA maintainers running on toolforge - https://phabricator.wikimedia.org/T194380#4208278 (10MaxBioHazard) I should execute this string on Toolforge console? [16:28:15] 10Traffic, 10Operations: Identify bots using AES128-SHA maintainers running on toolforge - https://phabricator.wikimedia.org/T194380#4208305 (10Vgutierrez) >>! In T194380#4208278, @MaxBioHazard wrote: > I should execute this string on Toolforge console? And recompile mono after this? If I'm reading the mono i... [16:32:32] 10Traffic, 10Operations: Identify bots using AES128-SHA maintainers running on toolforge - https://phabricator.wikimedia.org/T194380#4208314 (10MaxBioHazard) My bots are launched from cron. I hope, execute this string once would be enough. [16:37:56] 10Traffic, 10Operations: Identify bots using AES128-SHA maintainers running on toolforge - https://phabricator.wikimedia.org/T194380#4208339 (10Reedy) It won't be, just single line it `MONO_TLS_PROVIDER=btls mono bot.exe` [18:25:08] 10Traffic, 10Operations: Identify bots using AES128-SHA maintainers running on toolforge - https://phabricator.wikimedia.org/T194380#4208556 (10Vgutierrez) @MaxBioHazard please let us know when you make the change to check on our side that everything looks good :) [19:27:59] 10Wikimedia-Apache-configuration, 10Zero: Please enable reading files for wikipedia-zero users - https://phabricator.wikimedia.org/T194792#4208773 (10Zoranzoki21) [20:11:36] 10Traffic, 10Analytics-Cluster, 10Analytics-Kanban, 10Operations, and 2 others: TLS security review of the Kafka stack - https://phabricator.wikimedia.org/T182993#4208839 (10Ottomata) So, something like ^? [20:47:42] 10Wikimedia-Apache-configuration, 10Zero: Please enable reading files for wikipedia-zero users - https://phabricator.wikimedia.org/T194792#4208953 (10Zoranzoki21) 05Open>03Invalid I installed Opera browser with built-in VPN and Phabricator work ok without limitations which I have as user of telenor.