[00:18:58] 07/17/2012 - 00:18:58 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [01:20:59] 07/17/2012 - 01:20:58 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [01:41:46] petan: some beta wikis have a robots.txt, others don't [01:42:02] is there any way we can make all of them exist, and have them all disallow everything? [01:42:17] there's no reason beta should be indexed [01:42:28] this would make the spam problem less of an issue [02:22:58] 07/17/2012 - 02:22:58 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [02:49:59] 07/17/2012 - 02:49:59 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [03:50:59] 07/17/2012 - 03:50:59 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [04:52:58] 07/17/2012 - 04:52:58 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [05:54:58] 07/17/2012 - 05:54:58 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [06:56:59] 07/17/2012 - 06:56:58 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [07:58:57] 07/17/2012 - 07:58:57 - User laner may have been modified in LDAP or locally, updating key in project(s): deployment-prep [08:02:56] !log deployment prep hopefully enabled SORBS based autoblocking https://gerrit.wikimedia.org/r/#/c/15768/ [08:02:56] deployment is not a valid project. [09:20:17] !log deployment-prep sync upload6 dirs again. root@deployment-nfs-memc:$ rsync -a --progress --inplace /mnt/export/upload6 /data/project/upload6 [09:20:19] Logged the message, Master [09:25:46] your previous log didn't work either [09:25:49] see above :P [09:26:23] !log deployment-prep Adding class role::applicationserver::jobrunner [09:26:24] Logged the message, Master [09:27:58] hashar: ^ [09:28:13] paravoid: labs-morebots told me it is logged!! [09:28:40] 11:02 < hashar> !log deployment prep hopefully enabled SORBS based autoblocking https://gerrit.wikimedia.org/r/#/c/15768/ [09:28:43] 11:02 <+labs-morebots> deployment is not a valid project. [09:28:48] ohh h that one :) [09:29:02] !log-deployment prep hopefully enabled SORBS based autoblocking https://gerrit.wikimedia.org/r/#/c/15768/ [09:29:09] grmblbl [09:29:13] !log deployment-prep hopefully enabled SORBS based autoblocking https://gerrit.wikimedia.org/r/#/c/15768/ [09:33:07] !deployment-prep [09:33:08] deployment-prep is a project to test mediawiki at beta.wmflabs.org before putting it to prod [09:33:15] !deployment [09:33:16] deployment-prep is a project to test mediawiki at beta.wmflabs.org before putting it to prod [09:33:19] yay [09:38:39] !wikiversity-sandbox [09:40:22] Jan_Luca you need to define it [09:40:30] !key is blah [09:40:30] Key was added [09:40:32] !key [09:40:32] blah [09:40:35] !key del [09:40:36] Successfully removed key [09:40:42] thank you [09:41:16] !wikiversity-sandbox is a project to test and develop new features for Wikiversity [09:41:16] You are not authorized to perform this, sorry [09:41:24] you don't have a cloak? [09:41:33] !wikiversity-sandbox is a project to test and develop new features for Wikiversity [09:41:33] Key was added [09:41:43] I have a cloak [09:41:52] aah [09:41:53] @trusted [09:41:54] I trust: petan!.*@wikimedia/Petrb (2admin), .*@wikimedia/.* (2trusted), .*@mediawiki/.* (2trusted), .*@wikimedia/Ryan-lane (2admin), .*@wikipedia/.* (2trusted), .*@nightshade.toolserver.org (2trusted), .*@wikimedia/Krinkle (2admin), .*@wikimedia/Thehelpfulone (2admin), [09:42:20] @trustadd .*@[Ww]ikimedia/.* trusted [09:42:20] Successfuly added .*@[Ww]ikimedia/.* [09:42:31] you have capital W in cloak [09:42:34] that was why [09:42:41] Thank you [09:42:49] !test is test [09:42:49] This key already exist - remove it, if you want to change it [09:42:55] !test2 is test [09:42:55] Key was added [09:43:00] !test2 del [09:43:00] Successfully removed test2 [12:08:29] somehow back, eating a snack :) [12:34:47] !test [12:34:47] $1 [13:25:47] I am fed up with that cluster [13:26:08] This request could not be forwarded to the origin server or to any parent caches. The most likely cause for this error is that: [13:26:11] yeahhhh [13:28:14] !log deployment-prep All apaches are dead :/ [13:28:16] Logged the message, Master [13:29:42] !log deployment-prep err: /Stage[main]/Mediawiki::Sync/Exec[mw-sync]: Failed to call refresh: Command exceeded timeout at /etc/puppet/manifests/mediawiki.pp:24 [13:29:44] Logged the message, Master [13:37:38] grazeaze [13:44:45] !log deployment-prep Imported all.conf apache conf from production [13:44:47] Logged the message, Master [13:45:00] !log deployment-prep Manually restarted apaches [13:45:01] Logged the message, Master [13:58:35] !g 13304 [13:58:35] https://gerrit.wikimedia.org/r/#q,13304,n,z [14:17:28] paravoid: back around ? :-] [14:17:35] yes [14:18:04] do you have time today to do the beta migration to /data/project ? [14:18:16] relevant change is https://gerrit.wikimedia.org/r/#/c/15545/ [14:40:29] squid is confusing me :) [14:40:31] 2012/07/17 14:40:12| The request GET http://sq.wikipedia.beta.wmflabs.org:80/wiki/FireWire is DENIED, because it matched 'blacklistedagents' [14:40:32] 2012/07/17 14:40:12| The reply for GET http://sq.wikipedia.beta.wmflabs.org:80/wiki/FireWire is ALLOWED, because it matched 'blacklistedagents' [14:45:21] !log deployment-prep Blacklisted user agents matchin /.*Googlebot.*/ [14:45:22] Logged the message, Master [17:19:04] I swear Ryan just appeared with an awesome looking cat... g+ says that's not his picture though #sadface [17:19:43] o.O [17:20:35] Hello kitty cats are awesome :D [17:23:40] ahhhhh [17:23:41] that [17:23:42] heh [17:23:47] it's my chat photo [17:23:50] and my facebook one [17:24:41] paravoid: morning [17:24:56] well, night, there technically :) [18:10:04] things transfer so much faster when gluster isn't being used. it's like night and day [18:12:07] paravoid: so, for the migrations I'm going to shut the instance down, rsync it across, modify database directly, then bring the instance up on the new hardware [18:21:35] !log deployment-prep hashar: rebooting squid glusterfs gone wild apparently [18:21:36] Logged the message, Master [18:36:35] so squid is dead [18:36:45] !log deployment-prep Squid is bugged as hell : 2012/07/17 18:36:13| Store rebuilding is -0.1% complete and looping [18:36:47] Logged the message, Master [18:38:39] !log deployment-prep removing swap files in /data/project/squid1 [18:38:40] Logged the message, Master [18:39:15] !log deployment-prep installed `tree` on deployment-squid [18:39:16] Logged the message, Master [18:39:25] <^demon> If the squid are dead can we fry them up? [18:39:30] <^demon> Maybe with a spicy mustard sauce? [18:39:31] I wish :-] [18:39:38] I guess I will just migrate to use varnish [18:39:44] if I figure out how to set it up as a load balancer [18:40:05] !log deployment-prep -squid bah doing rm -fR /data/project/squid1/* [18:40:06] Logged the message, Master [18:40:09] I am fed up with beta [18:43:12] I am wondering if I could deleted a directory by just mv LARGEDIR /dev/null [18:45:01] hm [18:45:04] gluster fucked up, eh? [18:45:11] we really need to get off of gluster [18:45:20] in this case it is squid which is f***d [18:45:22] * Damianz stabs google [18:45:31] well, is it squid that's broken because of gluster? [18:45:36] if you reload the configuration while it is rebuilding something, that something get corrupted [18:45:38] or the instance was broken during a migration? [18:45:42] hashar: Setup multiple backends and a director :) [18:45:47] I did some changes then "service squid reload" [18:45:49] several time [18:45:52] that screwed it up [18:45:52] that's very likely a problem with gluster [18:45:53] for sure [18:46:14] Damianz: if you have any idea how to configure that using our puppet class, I am all listening to you :-] [18:46:19] andrewbogott: made any progress on ceph? :) [18:46:34] hashar: There's a varnish puppet class? [18:46:50] to replace project storage we'll need to be able to have share permissions like gluster [18:46:53] Damianz: we have some yes in operations/puppet.git look for manifests/varnish.pp IIRC [18:46:56] I'm not totally sure that ceph has that [18:47:00] or if it's easy to configure [18:47:02] Damianz: we have a parameterized class varnish::instance [18:47:17] Ryan_Lane: I got you a change in OpenStackManager https://gerrit.wikimedia.org/r/#/c/15775/ :D [18:47:17] Hmm I wonder how hard it is to pupetize directors... not that big on puppet [18:47:40] Damianz: I am pretty sure we handle directors. Just have to read the conf and understand it I guess :) [18:47:50] I'll take a look [18:47:54] Ryan_Lane: Only teeny, tiny bits of progress, but partly because I keep pushing it to the end of my list. [18:48:00] Just breaking java [18:48:02] * Ryan_Lane nods [18:48:34] andrewbogott: at some point in time soon we'll be using that hardware for upgrade testing of openstack [18:48:47] thinking of that, I really need to update openstack manager for keystone [18:49:16] hashar: heh, it's not used anywhere, though :D [18:49:31] hahaha. reedy made the same comment [18:49:32] Hmm maybe I can create a box to figure our puppet out on [18:49:51] Ryan_Lane: it need to be applied to a ton of place, I did not feel like I wanted to do that this afternoon [18:50:08] hashar: you could've done one of them for proof ;) [18:50:10] * Ryan_Lane nods [18:50:24] indeed [18:50:27] the proof of concept was https://gerrit.wikimedia.org/r/#/c/7083/ [18:50:40] I thought we could use an easy method to build that [18:50:53] damn I have too many projects in parralel [18:51:08] me too [18:51:09] I got an experimental eval.php with command completion [18:51:18] I'm making the new deployment system [18:51:20] and an apache configuration parser :D [18:51:25] but I really need to update openstackmanager [18:51:40] AJAXify it !!! ;-D [18:51:48] that would be a great project for an intern [18:51:48] that will come later [18:51:56] I very much want to ajaxify it [18:52:13] I need to update for keystone and the openstack api first, though [18:52:21] * hashar sends Reedy to APIize OpenStackManager [18:54:37] I really wish someone wrote a php library for nova :( [18:54:51] !log deployment-prep squid resumed. The swap files got corrupted somehow, needed to delete them entirely to start again. Squud storing again. [18:54:53] Logged the message, Master [18:55:07] Ryan_Lane: isn't it what you have wrote ? [18:55:15] no. I'm using the ec2 api [18:55:21] with amazon's client library [18:55:40] are they sharing the same api or something ? [18:55:44] I am a cloud noob [18:55:45] now I'm going to need to write the client library for nova [18:55:50] they have a native api [18:55:56] and they also implement amazon's ec2 api [18:56:00] Hmm how long does it take to build an instance? [18:56:08] Damianz: generally about 5 minutes [18:56:21] ok, I'll make one when I get home then :D [18:56:23] don't they have libraries already? [18:56:27] not for php [18:56:38] because no one is writing a web interface in php [18:56:46] oh, wait. right. damn. ;) [18:57:00] someone from analytics (can't remember who) told me about Facebook thrift which seems to be a good way to write REST service [18:57:03] Write it in python? :D [18:57:10] heh [18:57:12] Thrift is a complicated beast [18:57:13] you basically describe your API and it generates all the libs for you (php / c / java ...) [18:57:26] rest is easy, thankfully [18:57:49] I just need to make my client implementation abstract and subclass for ec2/nova [18:59:03] stupid squid [19:00:15] fuck it. I'll work on the nova api stuff today [19:00:19] I need that for keystone anyway [19:00:24] yeahhhh [19:00:43] http://www.apache.org/dyn/closer.cgi?path=/thrift/0.8.0/thrift-0.8.0.tar.gz [19:00:53] I can't migrate instances till I finish some rsyncs anyway [19:01:07] I'm not going to use a library for simple rest calls ;) [19:01:27] deployment-prep has lots of nrpe issues still :( [19:01:28] I'll just add a rest call method, then implement the client calls in each function [19:02:54] tip about robots.txt , specify a user-agent :-) [19:03:28] hashar: btw, can you make all beta sites disallow all robots? [19:03:35] right now not all sites have a robots.txt [19:04:28] !log deployment-prep updated robots.txt to specify a user-agent. Will definitely prevents Google from killing beta :) [19:04:30] Logged the message, Master [19:04:39] hmm [19:07:50] Ryan_Lane: In your puppet groups thing - are variables global to every class or do you have to assin it to the class somewhere, it doesn't seem to have the later option but the former makes little sense [19:08:08] I'm not sure what you mean [19:08:12] Ooooh... or do I have to make a group for each set? [19:08:14] which puppet groups thing? [19:08:20] yeah [19:08:34] oh [19:08:35] Like is group == class not group == something you extend on the node [19:08:43] ohhhhhhhh [19:08:45] a group is just a grouping in the interface [19:08:50] it has nothing to do with puppet [19:08:50] robots.txt is an alias to /w/robots.php !! [19:09:01] hmm [19:09:11] <^demon> hashar: Magic :) [19:09:18] Damianz: the variables and classes are defined in the node [19:09:25] ^demon: really? :-D [19:09:27] <^demon> Cuz it combines site-wide robots.txt with site-specific mediawiki:robots.txt [19:09:30] <^demon> wmf fun hack :) [19:09:33] indeed [19:09:36] it's a great hack [19:09:45] at least now I know where it is :-] [19:09:50] and can rewrite it for 'beta' [19:09:55] So... if I make a group, with the vars I need, then configure the node that will end up in the node in puppet... well via some enc magic anyway [19:10:14] It's bad that I understand the puppet file more than your interface to it ;) [19:10:15] Damianz: the classes and variables go into ldap [19:10:27] Damianz: puppet uses ldap as an external node [19:10:33] external node classifier [19:10:53] Yeah [19:11:59] Say class x has variables z, t & e - if I make class x , variables z, t & e then want to add class u with no options do I create u in a seperate group? If not the interface seems to add the vars to the second class [19:12:06] If that makes sense at all [19:15:21] <^demon> Ryan_Lane: Did you get to the gerrit manifest thing last week? If not that's totally cool. [19:15:30] nope [19:15:43] I'll get to it this week [19:16:01] I'm still kind of in a mental fog from travel [19:16:04] Ryan_Lane: about cluster, could some of issue be fixed by the gluster team ? [19:16:07] <^demon> Oh sweet. There's no impending rush since 2.5 is still under "maybe we should branch now" discussion :) [19:16:10] they could get some instances on our labs :-] [19:16:17] hashar: well, we need to upgrade gluster [19:16:30] <^demon> Ryan_Lane: I hear that. I got back Sunday with my voice lost, a twisted knee, and both feet horribly swollen from running around all week. [19:16:38] rough [19:17:14] ^demon: That sounds like a strang saturday night [19:17:21] strange* [19:17:25] <^demon> Saturday was fun :p [19:17:31] I'm trying to abstract the nova/ec2 apis and my mind simply isn't working [19:17:46] <^demon> Friday is what nearly killed me ;-) [19:17:50] lol [19:18:09] hmm seems like home time, might as well shuffle to the other room [19:18:25] <^demon> Ryan_Lane: I got through e-mails, trying to be more productive but it's hard. [19:20:47] !log deployment-prep updated AFTv5: f97811f..d3bd97f [19:20:48] Logged the message, Master [19:22:51] Ryan_Lane: Any idea why I would be able to run a remote ssh command on the command line without a password prompt, but when a ceph script does the same, it prompts me? [19:23:02] Ryan_Lane: Specifically, http://pastebin.com/FT2unqJi [19:23:19] I think this is not a ceph thing so much as ssh doing some clever security thing. [19:23:20] you likely have a forwarded agent [19:23:26] and it's likely launching a shell [19:23:32] which kills off your agent [19:23:48] OK, yes, I have a forwarded agent. [19:24:03] So if I want to do passphrase-free ssh between virt1001, virt1002 and virt1003, what do you recommend? [19:24:31] does mkcephfs do anything other than install config files? [19:25:01] it may be easier to just implement this in puppet [19:25:17] People in #ceph are strongly discouraging me from trying to just run the individual commands on each system. [19:25:32] I'd kinda like to see this work at least once 'by hand' before trying to automate things. [19:25:58] At the moment the issue isn't with mkcephfs (which works fine.) [19:26:07] The issue is getting the agents to talk to each other, subsequently. [19:26:23] I think. Right now I'm just trying to start them. [19:26:30] !log deployment-prep upgrading MediaWiki core 80fbb70..ef3132f [19:26:31] Logged the message, Master [19:26:52] ahhh [19:26:58] I also need to get wikibugs tested / updated [19:26:59] grmblblb [19:27:14] Ryan_Lane: I'm pretty impressed that you immediately appeared in #ceph when I mentioned it even though it's on a different server [19:27:25] heh [19:27:29] I was already in the channel ;) [19:27:30] Ah, guess you were there already [19:32:01] !log deployment-prep running git bisect of core 80fbb70..ef3132f [19:32:03] Logged the message, Master [19:33:21] 07/17/2012 - 19:33:21 - Creating a home directory for jaideraf at /export/keys/jaideraf [19:34:22] 07/17/2012 - 19:34:22 - Updating keys for jaideraf at /export/keys/jaideraf [19:38:59] !log deployment-prep beta broken by PAGEID magic word introduced with 0a7cf03 / I11d42ca7 {{gerrit|9858}} [19:39:01] Logged the message, Master [19:45:07] !log deployment-prep rebuilding l10n cache: mwscript rebuildLocalisationCache.php --wiki=aawiki --threads=2 [19:45:08] Logged the message, Master [19:51:20] !log deployment-prep 369 languages rebuilt out of 369 [19:51:21] Logged the message, Master [19:55:24] andrewbogott: based on the info in #ceph, it may be good to take the storage hit and split out two disks into a raid 1 [19:55:31] with the rest in a raid 10 [19:57:10] Ryan_Lane: Oh, the issue is writing data and journal to the same physical disk, rather than to the same volume? [19:57:18] yep [19:57:21] 07/17/2012 - 19:57:21 - Creating a home directory for avicennasis at /export/keys/avicennasis [19:57:24] makes sense then. [19:58:20] 07/17/2012 - 19:58:20 - Updating keys for avicennasis at /export/keys/avicennasis [20:06:06] Ryan_Lane: OK, I now have (at last!) a working cephfs mount. Anything you want to try, or want me to look for, before I melt this down and switch to a more reasonable drive config? [20:06:26] And/or: is there a disk performance benchmark you recommend? Or should I write my own? [20:09:04] andrewbogott: hm. performance tests aren't really my expertise [20:09:13] andrewbogott: we need to test especially for random access [20:09:14] iops [20:09:32] since that's the general io profile for virtualization [20:09:38] That's asher's bag, right? [20:09:48] yep [20:09:59] I know he and notpeter wanted to do some ceph testing [20:10:05] so maybe they'd be willing to help out [20:10:44] Isn't Asher's handle 'Asher'? [20:11:17] <^demon> binasher [20:12:15] ah! Hm… he isn't here either. [20:13:31] yeah, not online :( [20:13:39] Ryan_Lane: The other question is, what are we comparing our benchmarks to? Should I set up an equivalent gluster cluster to compare, or is NFS a candidate still, or... [20:13:45] I was hoping he'd be here to do the gerrit db move [20:13:57] gluster would be a good comparison [20:14:20] also vs local disks [20:14:47] ok. [20:14:50] I don't consider NFS a viable option [20:15:04] ok. I gotta get lunch [20:16:40] always the waiting with sveta. [20:16:43] heh [20:31:13] j^: helllooo :-] [20:32:53] j^: so you get to work on TimedMediaHandler ? :) [20:40:10] deployment-prep is meant to be a replication of the production cluster (somehow) [20:40:28] we thought about deploying new wikis with specific configuration, but nothing done so far [20:40:50] oh the transcoding [20:41:25] not at all [20:41:33] too complicated to set up for my little brain :/ [20:41:50] I tried to do that while I was in SF back in May and eventually failes [20:41:52] failed [20:42:09] * hashar IRC connection is lagged [20:45:00] I think we have a swift cluster in labs [20:45:07] probably don't want to use it though [20:45:14] so would need to set one up in deployment-prep [20:45:29] http://wikitech.wikimedia.org/view/Swift/Setup_New_Swift_Cluster_%28labs%29 [20:45:37] ah here is ben :) [20:45:46] have at it! [20:45:58] though Ithink it's ok to use the existing one if you prefer. [20:46:06] entirely up to you. [20:46:21] something j^ and you should discuss I guess [20:46:36] it would probably be better to use the existing one indeed [20:46:45] that will give maplebed some real traffic :-] [20:46:53] and let us forget about swift :-] [20:47:26] the job runner I would need to have https://gerrit.wikimedia.org/r/#/c/11610/ deployed [20:47:47] * maplebed runs away again [20:48:28] lets open bugzilla / rt request [20:48:49] j^: we have ton of bugs tracked in bugzilla. The main entry is https://bugzilla.wikimedia.org/showdependencytree.cgi?id=37079&hide_resolved=1 [20:48:58] feel free to add a tracking bug for TMH on beta [20:49:19] wgJobTypesExcludedFromDefaultQueue should exclude the transcoding job indeed [20:49:29] it had a few bugs I fixed few weeks ago [20:49:47] I think I got it deployed in our mediawiki config ( operations/mediawiki-config.git ) [20:50:04] CommonSettings.php [20:50:04] 2402:$wgJobTypesExcludedFromDefaultQueue[] = 'webVideoTranscode'; [20:50:06] indeed :) [20:50:38] great! [20:51:13] MediaWiki core had a bug that caused some infinite loop [20:51:14] https://bugzilla.wikimedia.org/show_bug.cgi?id=37072 [20:51:17] that is fixed though [20:54:23] oh really? [20:54:25] hmm [20:54:35] I know the video thumbnails are made by the main apaches [20:54:40] (which are basically doing anything [20:54:56] if transcoding happens, I have no idea which box / process do them :( [20:57:48] yup that one got corrupted two week ago [20:57:53] I am setting up to use varnish [20:58:16] j^ hashar transcoding was happening, then we broke it when we made beta commons env not a hack [20:58:22] something I have worked friday and today. Will hopefully have upload working again this week [20:58:27] mark is helping me on that :) [20:58:41] (well to be correct: mark is reviewing / giving instructions :D ) [20:59:15] chrismcmahon: maybe I should have started an entirely new cluster instead of hacking the existing :( [20:59:34] https://bugzilla.wikimedia.org/show_bug.cgi?id=38455 - wikimedia-job-runner should be able to run a specific job type [20:59:50] hashar: it wouldn't have helped :-) this one is getting really good [21:00:08] well it is getting closer and closer to the production cluster!! [21:02:45] conf call again [21:08:04] hashar are you taking !b 38449 or I should [21:08:20] !b 38449 [21:08:20] https://bugzilla.wikimedia.org/38449 [21:08:39] petan: go ahead! :-) [21:08:46] make sure to make the change in CommonSettings-wmflabs.php [21:08:54] right [21:09:01] and have it through Gerrit :-] [21:09:18] I have updated AFTv5 extension an hour ago [21:09:21] as well as Core [21:09:23] (see SAL) [21:09:24] ok [21:09:44] so it is about figuring out the $wgArticleFeedback* settings that are needed to enabled it on all page [21:10:19] Reedy / Aaron will be able to merge your change to operations/mediawiki-config.git [21:10:25] then just git pull and hopefully it will work [21:10:39] note that we still have ton of local hacks in /home/wikipedia/common :-( [21:10:44] like the .dblist files [21:10:52] or the extension-something file [21:10:53] ;:( [21:11:03] are you able to login to deployment-bastion? [21:11:08] nop [21:11:11] never managed to [21:11:15] ok I will delete it then [21:11:16] I use -dbdump [21:11:19] yup [21:12:38] conf call for real then I will head to bed. see you later [21:12:50] !log deployment-prep petrb: updating ArticleFeedbackv5 extension [21:12:52] Logged the message, Master [21:13:22] hm... upto date [21:13:51] yup did it an hour or so ago [21:13:56] as well as core :-] [21:14:09] rest of extension are not updated though [21:14:31] ok [21:20:22] 07/17/2012 - 21:20:22 - Creating a home directory for spage at /export/keys/spage [21:21:21] 07/17/2012 - 21:21:21 - Updating keys for spage at /export/keys/spage [21:26:25] why does production have /mnt/upload6 ? [21:26:26] Is it equivalent to labs /mnt/upload ? [21:26:38] hashar [21:26:51] that extension is already installed, wondering what is needed to do [21:26:55] !log deployment-prep installed python-imaging and wamerican on deployment-dbdump [21:26:56] /mnt/upload on labs is a symlink [21:26:57] Logged the message, Master [21:26:59] Chris says: enable for all pages [21:27:04] upload6 is the sixth generation of an upload mount [21:27:10] does he mean all namespaces? [21:27:21] what we did is we had /mnt/upload then created /mnt/upload1 and so on [21:27:32] Platonides: so just /mnt/upload6 just like in production :D [21:27:47] I am going to have that migrated to use /data/project tomorrow hopefully [21:27:50] hashar, I see a real /mnt/upload and no /mnt/upload6 on deployment-prep [21:27:58] bah maybe I mixed it up [21:28:00] cant remember [21:28:01] r [21:28:20] or maybe it's different in the apaches [21:28:29] deployment-nfs-memc:/mnt/upload on /mnt/upload type nfs (rw,addr=10.4.0.58) [21:28:35] I'm looking at dbdumps [21:28:48] and is there a /mnt/upload on production? [21:28:56] hashar@deployment-apache33:~$ mount | grep upload [21:28:57] deployment-nfs-memc:/mnt/export/upload on /mnt/upload6 type nfs (rw,bg,soft,udp,rsize=8192,wsize=8192,intr,nfsvers=3,addr=10.4.0.58) [21:29:04] so yeah /mnt/upload6 on apaches [21:29:13] I don't think prod as /mnt/upload, would need to check [21:29:46] so it's dbdump being different here [21:29:57] https://gerrit.wikimedia.org/r/#/c/15545/ would use data/project https://gerrit.wikimedia.org/r/gitweb?p=operations/puppet.git;a=commitdiff;h=576504f0327910018e180f527151f9741d766378;hp=da5f63dd3c48f0d94c118932c03b366def8444ff [21:30:35] back to conf call [21:30:38] I'm trying to make the captcha to show up on wmflabs [21:30:50] that would be great! [21:31:29] I just need to figure out why it's not displaying :P [21:31:37] Platonides we really want to replace dbdump with proper bastion host [21:31:44] were do we have deployment-prep logs? [21:31:46] *where [21:31:54] petan, that would be good [21:31:59] dbdump was temporary instance I created when project was in cradle [21:32:12] I used it to import db dump's :) [21:32:23] :) [21:33:05] sigh, why can't I access deployment-feed ? [21:33:06] logs are in /home/wikipedia/logs [21:33:12] I don't know [21:33:15] what error you get [21:33:21] you should be able [21:33:23] Permission denied (publickey) [21:33:29] but we have random problems with this [21:33:40] Ryan_Lane can you take a look on that? [21:33:53] Ryan_Lane there are several instances random people can't access [21:34:10] or mutante [21:34:59] 07/17/2012 - 21:34:59 - User asher may have been modified in LDAP or locally, updating key in project(s): testlabs,gluster,mobile,bastion,deployment-prep,queue [21:35:21] 07/17/2012 - 21:35:20 - Updating keys for asher at /export/keys/asher [21:35:26] @search beta [21:35:26] Results (Found 1): deployment-prep, [21:35:39] hm... [21:35:43] I was having issues where it takes 'forever' to ssh from batsion to an instance [21:35:45] I really want to link the doc page [21:35:56] Damianz that's problem on bots-2 [21:35:58] 07/17/2012 - 21:35:58 - User asher may have been modified in LDAP or locally, updating key in project(s): testlabs,gluster,mobile,bastion,deployment-prep,queue [21:36:20] 07/17/2012 - 21:36:20 - Updating keys for asher at /export/keys/asher [21:36:25] That was to bots-apache1 but probably the same issue lol [21:36:37] bots in general needs an awesome scheduler, bunch more instances etc [21:37:17] !deployment-beta-docs-1 is https://labsconsole.wikimedia.org/wiki/Deployment/Overview some part of documentation that needs to be categorized and linked :) [21:37:17] You are not authorized to perform this, sorry [21:37:21] meh [21:37:45] I should have add petan.* to global admin list [21:37:48] XD [21:37:51] lol [21:37:57] doesn't reployment-prep directly read the files from /usr/local/apache/common-local/wmf-config/* ? [21:37:59] !deployment-beta-docs-1 is https://labsconsole.wikimedia.org/wiki/Deployment/Overview some part of documentation that needs to be categorized and linked :) [21:38:00] Key was added [21:38:27] Platonides that's a nfs I think [21:38:30] or it used to be [21:39:08] Platonides: should be [21:39:20] yes, it seems to [21:39:21] Platonides: I usually just do my modification on deployment-dbdump:/home/wikipedia/common [21:39:26] NFS needs to die :) [21:39:28] I really am called "S Page" but gerrit has me with Full Name "Spage". I can't see a UI to edit this, should I request a new labs/gerrit access? [21:39:42] Is your username spage? [21:40:04] spage there are two items, login name and real name [21:40:12] Damianz, yes, that's me, that's fine as a username. [21:40:14] login name require account to be recreated AFAIK [21:40:19] all aplicable $wmgEnableCaptcha instances set it to true [21:40:25] yet it is loaded as false :S [21:41:09] Gerrit is so slow :$ [21:41:16] spage: A few others have this problem as well, with our nicknames being displayed instead of our real names [21:41:47] I welcome anyone more knowledgable about this stuff than me to edit https://labsconsole.wikimedia.org/wiki/Help:Access with more info [21:41:50] My fullname matches my wikiname as expected but it doesn't do spaces... gerrit is too slow to see if it thinks you have spaces [21:42:42] <3 simple nicks [21:42:52] my nick = my name [21:42:54] on wiki [21:43:14] I'd love to use 'Damian' everywhere but some other bugger stole it first :P [21:43:21] hehe [21:43:23] ok I am off for now [21:43:29] it somehow cleaned itself [21:43:36] I wanted to register Peter when I was registering on wikipedia but it was taken as well [21:43:38] the captcha seems to be working [21:44:02] Platonides: great! make sure to have your changes submitted / merged in Gerrit :- [21:44:09] Platonides: APC? (not sure if we use it) [21:44:15] hasharCall, it is awaiting merge [21:44:37] Platonides: sam / aaronschulz could hopefully merge it [21:44:55] chttps://gerrit.wikimedia.org/r/15839 [21:45:14] Is that actually called a 'low line', I thought it was an underscore. [21:45:14] \O/ [21:45:16] Looking at Gerrit most owners are username, but a few are e.g. "Daniel Friesen". Maybe I shouldn't worry. [21:45:18] (ssmollett) [21:45:18] quite a trivial patch :D [21:45:27] Platonides: would need to generate the captcha files though [21:45:34] I generated them [21:45:36] \O/ [21:45:43] so get someone to merge the change then apply [21:45:46] /mnt/upload6/private/captcha [21:45:48] if not done, I will tomorrow [21:46:01] have a good night! [21:46:06] see http://en.wikipedia.beta.wmflabs.org/w/index.php?title=Special:UserLogin&type=signup&returnto=Main+Page [21:48:29] Platonides: merging :) [21:48:33] From the start labs wikinames were supposed to be the same as user.name which is supposed to be a realname [21:49:21] grmblbl [21:51:53] problems merging? it should work straight ... [21:53:05] Platonides: set your umask to 0002 [21:53:13] in your profile should have something like: umask 0002 [21:55:06] Platonides: ok your change is in :) [21:55:24] Platonides: no announce it to everyone on the bug report and in labs-l :-] [21:55:29] I am off for real see you [21:58:11] oh, right... [21:58:25] not that anyone would need to change those files, but... [22:02:58] Namtnad: eh? [22:03:31] labs wiki names can be anything anyone wants, as long as it's a valid mediawiki username [22:03:43] though I block some names with a blacklist [22:04:18] Ryan_Lane: But it's the same value you use for user.name? [22:04:27] oh [22:04:29] in git [22:04:33] yes, correct [22:04:55] And user.name is 'supposed' to be a real name [22:05:10] right. only if people want to use their real name, though [22:05:14] many people don't [22:05:27] especially in our community [22:05:55] Sure... but if I caught the discussion earlier on correctly there are now people who wanted to use their realname in user.name but now have a nickname they didn't want to use showing up. [22:06:05] yep [22:06:12] and we can't really do renames right now [22:06:45] We really should have made sure the registration pages drilled that factor in. [22:06:59] the sign up specifically says it [22:07:26] people that are more likely to have this issue are people who had svn accounts previously [22:07:32] It might now, but I remember seeing forms that made it easily missable. [22:07:41] <^demon> And people who were guinea pigs early in the process ;-) [22:07:45] indeed [22:07:55] !account-request [22:07:58] hm [22:08:00] @account [22:08:06] <^demon> I am gerrit user #2 ;-) [22:08:06] @search account [22:08:06] Results (Found 4): credentials, account, account-questions, accountreq, [22:08:13] !account-questions [22:08:13] I need the following info from you: 1. Your preferred wiki user name. This will also be your git username, so if you'd prefer this to be your real name, then provide your real name. 2. Your preferred email address. 3. Your SVN account name, or your preferred shell account name, if you do not have SVN access. [22:08:27] that's basically the original message [22:08:30] it's pretty clear there [22:09:45] once we can rename people in gerrit, we can rename them everywhere [22:10:14] Ryan_Lane: Originally we had an account request page on-wiki [22:10:30] no. we didn't :) [22:10:44] I'd know since I'm the one who set all this stuff up. heh [22:11:18] this is the current web page, and before that it was "ask ryan on irc": http://www.mediawiki.org/wiki/Developer_access [22:11:58] developer access really isn't a great name for that page [22:12:07] it should likely be developer and labs access [22:13:33] Platonides: a catpcha in beta? [22:13:49] does this exact same captcha exist in production? [22:13:54] Ryan_Lane: And awhile ago taht developer access page used this request form: http://www.mediawiki.org/w/index.php?title=Template:Developer_access_request_preload&oldid=516900 [22:14:20] * Ryan_Lane nods [22:14:22] http://www.mediawiki.org/wiki/Talk:Developer_access [22:14:44] either way, not much purpose in worrying about it [22:15:18] it has good text now, and eventually we'll be able to do renames [22:15:42] Ryan_Lane, it's the same one [22:15:59] the only difference may be the chosen font or fint-size [22:16:07] ah ok [22:16:09] great [22:16:10] thanks [22:16:29] I got fed up of people arguing about disabling account creation [22:16:45] when the captcha was just waiting to be set [22:17:51] it's a matter of impatience, mostly [22:18:17] things take a while to properly set up, and stewards are amazingly impatient people :D [22:18:26] $ ssh drenfro@extension-review-testing.pmtpa.wmflabs [22:18:29] Permission denied (publickey). [22:18:51] daniel_renfro: did you add your key to labsconsoel? [22:18:54] ^ I'm on bastion, but can't log into my instance -- fixes? [22:18:58] 07/17/2012 - 22:18:58 - User drenfro may have been modified in LDAP or locally, updating key in project(s): bastion,extensions-review [22:19:01] when did you create the instance? [22:19:03] heh [22:19:20] 07/17/2012 - 22:19:20 - Updating keys for drenfro at /export/keys/drenfro [22:19:21] it takes about 5 minutes for an instance to actually finish building [22:19:29] ^^ now you can log in [22:19:31] probably [22:19:34] I agree nobody did work into placing the captcha [22:19:36] ah! let's try it... [22:19:44] but the bug efforts were misguided [22:19:47] it takes about a minute for the keys to update [22:19:50] Platonides: indeed [22:19:57] I had no plans on disabling account creation [22:20:25] No go -- same error. I've added my public key for my laptop and for my bastion acct, just in case. [22:21:02] daniel_renfro: when did you create the instance? [22:21:40] during Wikimania, maybe the July 13 [22:21:59] (yeah, 7/13) [22:22:39] it failed to build for some reason [22:22:45] you'll need to delete/recreate it [22:23:00] that's the first fail I've seen in a while [22:23:09] it looks like the apt repo was down at the time [22:23:21] fair enough, I'll try it again. [22:23:28] you may want to change the name slightly [22:23:36] otherwise it'll be cached in dns for a while [22:23:51] yeah, plus I have second thoughts about that name [22:23:56] heh [22:23:57] it's too long to type [22:23:58] it's long :) [22:33:57] 07/17/2012 - 22:33:57 - User drenfro may have been modified in LDAP or locally, updating key in project(s): bastion,extensions-review [22:34:19] 07/17/2012 - 22:34:19 - Updating keys for drenfro at /export/keys/drenfro [22:36:56] success! [22:48:10] daniel_renfro: are you trying to sudo? [22:48:20] daniel_renfro: the sudo policy likely needs to be added [22:48:24] by default it's empty [22:48:30] !sudo [22:48:31] You have sudo in any project that you are a member of, excluding global projects (like bastion). Your sudo password is your labsconsole wiki password. [22:48:35] hm [22:48:36] sudo make me tea [22:48:37] @search sudo [22:48:37] Results (Found 1): sudo, [22:48:40] bleh [22:48:51] yes [22:49:09] !sudo-policies is https://labsconsole.wikimedia.org/wiki/Help:Sudo_Policies [22:49:09] Key was added [22:49:16] Oh btw, search... can we make semantic stuff faster? List instance page is rather sluggish sometimes :( [22:49:24] !sudo-policy alias sudo-policies [22:49:24] Created new alias for this key [22:49:41] Damianz: which instance page? [22:49:47] list instances, or manage instances? [22:50:02] none of the "manage" stuff is SMW [22:50:16] it does lookups in openstack, ldap, and the database [22:50:21] making it faster is difficult [22:50:21] thanks [22:50:30] limit the number of projects in your listing using the filter [22:50:30] List [22:50:33] oh [22:50:35] that's slow? [22:50:37] odd [22:50:51] it's fast for me [22:51:12] that said, it also seems broken [22:51:17] I was on like a 80mb/s connection earlier and it still took like 4..5 seconds to load, though maybe just mediawiki+not full page caching is slower than I expect. [22:51:19] next/previous don't seem to work [22:51:27] could be [22:51:34] 4-5 secs seems excessive [22:51:38] Does seem pretty snappy now tbf [22:51:38] it's loading for me in under 1 second [22:52:11] Weird... I'm on a slower connection now and it's faster. damn the internet [22:56:11] to get Apache/MySQL/PHP/Mediawiki I can use puppet? correct? [22:56:34] yeap [22:56:40] err yep* [22:56:56] wait.. how the hell do you spell that [22:57:01] s/.*/yes/ [22:59:00] these names are somewhat cryptic to me (mysql::conf ?) These are "roles", yes? [23:00:21] please excuse my temporary ignorance, I'm used to manual sysadmin. [23:02:45] that relates to the classes defined in puppet, for example mysql::conf -> https://gerrit.wikimedia.org/r/gitweb?p=operations/puppet.git;a=blob_plain;f=manifests/mysql.pp;hb=HEAD (see a conf class that inherits a parent mysql class) [23:11:10] thanks Damianz -- this makes more sense [23:11:14] dinner time!