[00:04:28] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Cupco link https://www.mediawiki.org/w/index.php?diff=588126 edit summary: /* +me  */ new section
[00:16:42] <legoktm>	 question: so is there any mysql server i can create tables on for my bot? i dont need access to the replicated ones, just a mysql server to store tables on
[01:14:22] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Jeremyb link https://www.mediawiki.org/w/index.php?diff=588143 edit summary: rm stray <h2>, move /* User:miken32 */ to the right place in order (chronologically)
[01:27:19] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Jeremyb link https://www.mediawiki.org/w/index.php?diff=588144 edit summary: all done
[01:29:11] <jeremyb>	 legoktm: where doers your bot run?
[01:29:26] <legoktm>	 the bots project?
[01:29:45] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Jeremyb link https://www.mediawiki.org/w/index.php?diff=588145 edit summary: /* User:Cupco */ fix link
[01:30:04] <jeremyb>	 does*
[01:30:18] <jeremyb>	 legoktm: so then probably on a server in the bots project!
[01:30:41] <jeremyb>	 legoktm: you could ask petan where there's one running already
[01:30:46] <legoktm>	 ok
[01:31:27] <legoktm>	 do you know what times petan would normally be online?
[01:31:39] <jeremyb>	 he's UTC+2 atm so probably not now. (3:31am)
[01:32:31] <Damianz>	 +2? I thought he was +1, damn being an hour behind
[01:33:09] <jeremyb>	 Damianz: well he is +1 part of the year...
[01:33:14] <jeremyb>	 just not this part
[01:33:17] <Damianz>	 silly timezones
[01:33:19] <legoktm>	 alright ill ask him when he does come online
[01:33:31] <jeremyb>	 he's on now. just not active
[01:34:21] <legoktm>	 is he not in this channel?
[01:34:30] <Damianz>	 not atm
[01:34:34] <legoktm>	 ok
[01:35:00] <Damianz>	 he'll be around in like 5hours or so
[01:35:16] <legoktm>	 ok hopefully i will be here in 5 hours
[02:35:15] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Hazard-SJ link https://www.mediawiki.org/w/index.php?diff=588153 edit summary: 
[02:38:48] <Damianz>	 hmm
[02:39:06] <Damianz>	 I kinda feel like some stuff on mediawiki.org should be under labsconsole because we're still splitting the community in half
[02:45:56] <jeremyb>	 legoktm: oh, huh. he wasn't here. maybe i imagined him!
[02:46:28] <legoktm>	 ok :P
[02:46:59] <legoktm>	 question, when i login i get the message:
[02:47:00] <legoktm>	 New release 'precise' available.
[02:47:00] <legoktm>	 Run 'do-release-upgrade' to upgrade to it.
[02:47:09] <legoktm>	 I should not be upgrading right?
[02:47:22] <legoktm>	 or is that upto the descretion of petan?
[02:47:41] <Damianz>	 not really
[02:47:57] <Damianz>	 it apparently uses a large chunk of disk space so we should just roll new instances.
[02:48:44] <legoktm>	 i think all the "bots" instances are lucid
[02:49:12] <Damianz>	 I think 1 is precise
[02:51:15] <legoktm>	 oh "bots-apache1" is precise
[02:51:24] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Jeremyb link https://www.mediawiki.org/w/index.php?diff=588160 edit summary: /* User:Hazard-SJ */ done
[02:51:29] <legoktm>	 but that sounds like a webserver
[02:51:49] <Damianz>	 I installed that last night so it will be
[02:57:36] <legoktm>	 do you know what its supposed to be used for?
[02:57:58] <Damianz>	 what? bots-apache1?
[02:58:17] <legoktm>	 yeah
[02:58:21] <Damianz>	 web stuff
[02:58:27] <Damianz>	 bots.wmflabs.org/~<username>/
[02:58:47] <Damianz>	 relates to /data/project/public_html/<username>/
[02:58:56] <legoktm>	 ok
[03:30:58] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Hazard-SJ link https://www.mediawiki.org/w/index.php?diff=588170 edit summary: /* User:Hazard-SJ */ thanks
[09:15:50] <labs-home-wm>	 09/28/2012 - 09:15:49 - User dan-nl may have been modified in LDAP or locally, updating key in project(s): glam
[09:16:01] <labs-home-wm>	 09/28/2012 - 09:16:01 - Updating keys for dan-nl at /export/keys/dan-nl
[10:34:40] <hashar>	 !log integration applying 25236/2 to integration-jenkins (switch zuul from 'dev' branch to 'master' one)
[10:34:41] <labs-morebots>	 Logged the message, Master
[12:00:55] <Silke_WMDE>	 !log wikidata-dev wikidata-dev-3: Modified /etc/apache2/sites-available/wikidata-dev-repo.wikimedia.de to solve bug Bug 40389 - Set up and test the pretty URLs for Wikidata 
[12:00:56] <labs-morebots>	 Logged the message, Master
[13:22:33] <^demon>	 hashar: I'm building a gerrit package with your patch and going to deploy it to labs.
[13:23:09] <hashar>	 ^demon: yeahhhh \O/
[13:23:20] <hashar>	 ^demon: using 2.5 aren't you ?
[13:23:29] <Hydriz>	 Platonides: Do you by chance know where Wikimedia's squid config files are located?
[13:23:37] <^demon>	 I'm being naughty and just using master :p
[13:23:40] <hashar>	 Hydriz: they are not public AFAIK.
[13:23:40] <^demon>	 So 2.6 snapshot :p
[13:23:47] <Hydriz>	 damn...
[13:23:49] <^demon>	 If this works, we might just skip the 2.5 series.
[13:23:59] <hashar>	 Hydriz: and I am pretty sure we are phasing out squid in favor of varnish
[13:24:04] <Hydriz>	 He said something about it finally going public in the Toolserver-l discussion
[13:24:18] <Hydriz>	 hashar: I see...
[13:24:32] <hashar>	 ^demon: might want to tag that something like 2.5-wmf-1 or something
[13:24:37] <^demon>	 hashar: For all practical purposes, master == stable-2.5 right now...they haven't diverged much.
[13:24:38] <Hydriz>	 Will see if I can configure (figure) things out
[13:25:09] <hashar>	 ^demon: why don't they release it anyway?  Are there any blocking issues ?
[13:25:30] <^demon>	 I haven't a clue.
[13:25:37] <^demon>	 I pestered about an rc1 like a week ago
[13:25:46] <^demon>	 Our snapshot release is "2.6wmf1-6cf6de76"
[13:26:55] <hashar>	 ^demon: where is our repo ? :-[
[13:27:03] <^demon>	 On my disk right now.
[13:27:06] <hashar>	 ahh
[13:27:07] <^demon>	 I'll push it to gerrit later.
[13:27:20] <hashar>	 so I will end up with remotes for upstream, openstack and wmf :-D
[13:27:25] <hashar>	 I love git
[13:27:31] <hashar>	 brb fresh air
[13:27:57] <^demon>	 also, your patch won't compile.
[13:28:03] <^demon>	 Building without, now.
[13:28:11] <^demon>	 Fun, maybe I'll debug that today
[13:29:26] <Nirvanchik>	 hello, Labs doesn't have replication db yet, does it have Wikipedia dumps (regularly updated) instead?
[13:30:08] <Nirvanchik>	 *db replication
[13:32:17] <Hydriz>	 Nirvanchik: Yes
[13:32:41] <Hydriz>	 Please see https://labsconsole.wikimedia.org/wiki/Help:Shared_storage
[13:35:21] <Nirvanchik>	 Hydriz: thanks
[13:35:28] <Hydriz>	 np
[13:36:10] <Hydriz>	 Nirvanchik: If you have shell access, I would be thankful if you could check if you can access /public/datasets
[13:37:05] <^demon>	 Hehe, debugged that already.
[13:37:45] <Hydriz>	 god, squid.conf has more comments than configurations
[13:39:17] <Nirvanchik>	 Hydriz: I'm not in Labs yet, but I logged this to check that then.
[13:39:33] <Hydriz>	 lol
[13:42:46] <Nirvanchik>	 I think Labs is worth to join. Having this TS not working.
[13:44:38] <Hydriz>	 Nirvanchik: I would just hope that the Toolserver can stay online, I use it together with Labs...
[13:47:22] <Nirvanchik>	 Hydriz: I (my bot) use an online tool which uses s6. s6 is broken. so I have to wait when they fix this, or develop new tool... And I can't wait anymore. so...
[13:48:25] <Hydriz>	 But Labs ain't going to help, is it?
[13:50:54] <Nirvanchik>	 Hydriz: in 2013 it will have db replication - so I(or tool master) can transfer the tool to Labs. Before that I can make another solution and Labs can provide me with storage, sql-database and php 24/7 (I would prefer tomcat though)
[13:51:32] <Hydriz>	 That will probably go under the webtools project soon anyways
[13:53:30] <Nirvanchik>	 so, "projects" in Labs' are quite big entities, aren't they?
[13:54:00] <Hydriz>	 not really
[13:54:34] <Hydriz>	 its true we can easily create a clone of the Toolserver in just one project...
[13:54:35] <Nirvanchik>	 what about my bot. can I move it to Labs and what project this will be? I have no idea... I'm tired to run it from my home pc.
[13:54:50] <Hydriz>	 What bot is it, and what does it do?
[13:55:24] <Nirvanchik>	 updates new pages lists in russian wiki (at portals, projects)
[13:55:49] <Hydriz>	 and it calls the database I presume?
[13:56:08] <Nirvanchik>	 it calls CalScan tool, which calls database
[13:56:50] <Hydriz>	 sigh, if you need the database, then you can't do anything at Labs
[13:57:20] <Nirvanchik>	 instead of this, I can collect category tree from dumps and scan new pages from 'New pages' list directly from Wikipedia.
[13:57:25] <Hydriz>	 unless you want to import the whole ruwiki database from the database dumps...
[13:57:44] <Hydriz>	 If you know how... thats the thing :P
[13:57:51] <Nirvanchik>	 :)
[13:58:26] <Nirvanchik>	 oh. this is more effort than just take that stuff already prepared from CatScan tool
[13:58:46] <Nirvanchik>	 Labs has Java 6
[13:59:05] <Nirvanchik>	 why they wouldnt' choose 7... strange
[13:59:16] <Hydriz>	 lolwut
[13:59:24] <Hydriz>	 how would you know Labs has Java 6?
[13:59:38] <^demon>	 Each instance could install the java it needs.
[13:59:42] <Hydriz>	 and btw you can install Java 7 if you want
[13:59:45] <Hydriz>	 yeah
[13:59:46] <^demon>	 I need java6 for example to compile gerrit
[13:59:48] <Nirvanchik>	 oh... hm... actually, every project has custom virt. machine so
[13:59:56] <Nirvanchik>	 yes
[14:00:06] <Nirvanchik>	 that's good
[14:00:39] <Hydriz>	 Just a word of advice for Toolserver users coming into Labs: Forget everything you know of the Toolserver and start anew :P
[14:01:04] <Nirvanchik>	 Hydriz: :)
[14:01:21] <giftpflanze>	 it's not that difficult
[14:01:27] <wm-bot>	 Change on 12mediawiki a page Wikimedia Labs/Toolserver features wanted in Tool Labs was modified, changed by Nemo bis link https://www.mediawiki.org/w/index.php?diff=588298 edit summary: +question by bryan
[14:01:34] <Hydriz>	 I am working on redesigning all our help pages on Labs so that the transition would be smoother
[14:01:57] <Hydriz>	 but probably I can put it up somewhere in (mid-)October
[14:02:56] <Nirvanchik>	 yes "Toolserver_features_wanted_in_Tool_Labs" this page confused me with Java 6)))) this is just "wanted features"
[14:03:46] <Nirvanchik>	 or some other page...
[14:04:37] <Damianz>	 Tool Labs and Labs aren't the same either :)
[14:04:41] <Nirvanchik>	 Hydriz: good. we need some kind of "How to start" and "FAQ"
[14:04:56] <Hydriz>	 Heh
[14:05:04] <giftpflanze>	 tool labs is mostly not even there
[14:05:25] <Damianz>	 Tool labs hasn't really been started, still building labs stuff
[14:06:09] <Nirvanchik>	 Damianz: that's disappointing :(
[14:06:14] <Hydriz>	 yeah
[14:06:38] <Hydriz>	 Damianz: I presume you were the one that recreated bots-apache1?
[14:06:42] <Damianz>	 Well, we have lots to do, tool labs being a small part which depends on some overall stuff
[14:06:46] <Damianz>	 Hydriz: Yes
[14:06:50] <Damianz>	 it got exploited, again
[14:06:57] <Hydriz>	 heh, robots.txt is gone
[14:07:00] <Damianz>	 Might be missing some libs because we need to puppetize it
[14:07:17] <Hydriz>	 Yeah, I added robots.txt for fun haha
[14:07:17] <dan-nl>	 ey all, anyone available that might be able to help with ssh into bastion? ... getting a "Connection closed by 208.80.153.207" at the end of the ssh -vv
[14:07:26] <Damianz>	 I might get around to updating the docs with 'things not to do' today... who knows, it's like 3pm already
[14:07:55] <Hydriz>	 dan-nl: Explain
[14:08:38] <Hydriz>	 I am able to log in to bastion nicely
[14:08:55] <dan-nl>	 Hydriz: i try to ssh into bastion so that i can access an instance i want to work with ... everything looks ok, but then i get the Connection closed message ... here's the ssh line ... ssh dan-nl@bastion.wmflabs.org -Avvvi ~/.ssh/wikilabs/id_rsa
[14:09:35] <Hydriz>	 common errors: Public key not uploaded to Special:NovaKey?
[14:10:06] <dan-nl>	 it's there
[14:10:39] <Hydriz>	 oh lol, what does -Avvvi do? :P
[14:11:05] <dan-nl>	 Hydriz: the vvv is a verbose debug output
[14:11:15] <Hydriz>	 hmm...
[14:11:30] <dan-nl>	 Hydriz: the i lets me point to the identity file i want to use and ... A forwards the identity
[14:11:46] <Hydriz>	 I would actually suggest putting the configuration suggested in Help:Access into ~/.ssh/config
[14:11:57] <Hydriz>	 then point the Identity file accordingly
[14:12:07] <Hydriz>	 then try again
[14:12:44] <Hydriz>	 oh wait
[14:12:51] <Hydriz>	 dan-nl: What is your login username?
[14:12:55] <dan-nl>	 the config file suggest are for the procycommand
[14:12:56] <Hydriz>	 wait no
[14:13:06] <Hydriz>	 I presume your username is dan-nl...
[14:13:11] <dan-nl>	 yes
[14:13:18] <Hydriz>	 sorry, totally dumb question :P
[14:13:26] <Hydriz>	 Give me a little minute...
[14:13:35] <dan-nl>	 no worries ... sure
[14:14:34] * Hydriz  had his debugger working now

[14:14:47] <Hydriz>	 Problem: You were not in the bastion project...
[14:15:05] <Hydriz>	 Solution: I added you to the bastion project now.
[14:15:12] <Hydriz>	 Comments: You can try logging in now.
[14:15:46] <labs-home-wm>	 09/28/2012 - 14:15:46 - Created a home directory for dan-nl in project(s): bastion
[14:16:37] <dan-nl>	 Hydriz: hmm ... still not working ... does this mean anything to you? debug1: Server accepts key: pkalg ssh-rsa blen 277
[14:16:52] * Hydriz  has crashed

[14:16:55] <Hydriz>	 :P
[14:17:24] <Hydriz>	 hmm, try removing the vvv option first?
[14:17:43] <Hydriz>	 doesn't help in the connection, but at least the output is perhaps simpler
[14:18:34] <dan-nl>	 k, tried just this ... ssh dan-nl@bastion.wmflabs.org -A ... but still get the Connection closed by 208.80.153.207 ... is there a blacklist my ip may have gotten added to?
[14:19:31] <Hydriz>	 Hmm, I would suggest that you delete and reupload the same public key to initiate a purge of your keys
[14:20:15] <dan-nl>	 Hydriz: k, i'll try it out and see what happens ... will check back in a bit later ... thanks for this at least
[14:20:47] <labs-home-wm>	 09/28/2012 - 14:20:47 - User dan-nl may have been modified in LDAP or locally, updating key in project(s): bastion
[14:21:11] <blackjack48>	 Hi, I'd like to create a new project on Labs... how do I get started?
[14:21:13] <Hydriz>	 okay, it should work
[14:21:24] <Damianz>	 You might be cached
[14:21:40] <Damianz>	 nslcd is a bitch
[14:21:40] <Hydriz>	 blackjack48: I would suggest emailing Labs-l now, since the people in charge ain't online right now
[14:21:57] <Hydriz>	 dan-nl: It should work now
[14:23:04] <blackjack48>	 ok thanks
[14:25:43] <labs-home-wm>	 09/28/2012 - 14:25:43 - User dan-nl may have been modified in LDAP or locally, updating key in project(s): bastion,glam
[14:25:53] <labs-home-wm>	 09/28/2012 - 14:25:53 - Updating keys for dan-nl at /export/keys/dan-nl
[14:27:18] <dan-nl>	 Hydriz: still not working ... is there possibly an issue with Dan-nl vs dan-nl ?
[14:27:30] <Hydriz>	 eh?
[14:27:43] <Hydriz>	 use small letters
[14:27:54] <dan-nl>	 ja, that's what i usually do ...
[14:28:43] <dan-nl>	 i can ssh to other servers i use ... just not to bastion.wmflabs.org
[14:29:12] <Hydriz>	 heh
[14:29:20] <dan-nl>	 followed the instructions here https://labsconsole.wikimedia.org/wiki/Help:Access#Using_agent_forwarding
[14:29:25] <Hydriz>	 doesn't look like its on Labs's side
[14:29:49] <Hydriz>	 lolwut
[14:29:49] <dan-nl>	 k
[14:30:07] <Hydriz>	 Agent forwarding seems quite troublesome...
[14:30:27] <Damianz>	 He doesn't need forwarding to access bastion, just access everything else
[14:30:46] <Damianz>	 It's possible nslcd has cached him as not existiing that needs the service re-starting/waiting for the cache timeout
[14:30:51] <Damianz>	 That might have been fixed but AFAIK it hasn't
[14:31:30] <Hydriz>	 proves I ain't the best helper around haha
[14:31:55] <dan-nl>	 ja, don't have ssh >= 5.4 so i couldn't try out the proxycommand
[14:32:07] <dan-nl>	 ah, no worries, thanks for trying ... will try again later
[14:32:33] <Damianz>	 We really need a 'common issues' page on the wiki
[14:32:41] <Damianz>	 Keep finding other things to do instead of writing docs though
[14:35:46] <Hydriz>	 Damianz: Me?
[14:36:02] <Damianz>	 Hydriz: You what?
[14:36:19] <Hydriz>	 "Keep finding other things to do instead of writing docs though"
[14:36:36] <dan-nl>	 i've been documenting as i go
[14:37:06] <dan-nl>	 got through the basic getting started, setting up an instance, and now trying to log into the instance
[14:37:13] <Damianz>	 Nah me
[14:37:23] <Damianz>	 I have a few bits I want to add/restructure
[14:37:30] <dan-nl>	 ah
[14:43:50] <^demon>	 hashar: Ouch, we definitely can't use 2.6. Getting a NullPointerException on login :p
[14:44:24] <dan-nl>	 Hydriz: finally got in ... must have taken a bit of time for the cache to clear :)
[14:44:40] <Hydriz>	 heh, grats :P
[14:45:14] <Damianz>	 ^demon: I'm sure in the next 3years 2.6 will get stable :P
[14:48:11] <^demon>	 Hmm, must've been one-off.
[14:48:12] <^demon>	 Works now
[14:48:35] <^demon>	 Eh, still borked.
[14:48:36] <^demon>	 w/e.
[14:49:10] <Damianz>	 java -DPLEASE_DONT_BREAK=1
[14:49:16] <hashar>	 maybe try out latest stable-2.5+ the patch
[14:55:35] <^demon>	 I did something wrong. All-Projects is missing and I'm not admin.
[14:55:41] <^demon>	 I should roll back to 2.5 and clean it up.
[15:05:04] <Hydriz>	 right, enough of editing labsconsole for today...
[15:05:27] <Hydriz>	 And for project owners out there: PLEASE add some description of your projects! Thanks! :)
[15:09:08] <hashar>	 Hydriz: thanks for maintaining the wiki :-]
[15:09:17] <Hydriz>	 np
[15:09:29] <Hydriz>	 I would probably request for that admin bit to fix the sidebar
[15:09:47] <Hydriz>	 Help:Contents deserve more publicity
[15:10:37] <Hydriz>	 hashar: Now I deeply regret screwing up on deployment-prep a few months ago, I don't have any squid configuration files to reference to :(
[15:10:52] <hashar>	 Hydriz: what do you need squid confs for ? 
[15:11:04] <Hydriz>	 the incubator-squid instance
[15:11:16] <hashar>	 the beta screw up was not really your fault :-]  The local files were in a mess already anyway.
[15:11:28] <hashar>	 k so what is incubator-squid going to do ? 
[15:11:38] <Hydriz>	 a squid server?
[15:11:45] <hashar>	 to serve several wikis behind it ? 
[15:11:45] <Damianz>	 Hydriz: I'd really like to re-write the frontpage and make it more 'hey here's what to do next' over 'random info no one cares about'.
[15:11:58] <Damianz>	 And then link into help from there, because the menu item sucks ass.
[15:12:10] <Hydriz>	 hashar: yeah, not a lot, but a good start
[15:12:40] <Hydriz>	 Damianz: Just put "[[Help:Contents|READ THE DOCS]]" in MediaWiki:Sitenotice
[15:12:56] <Damianz>	 :P
[15:13:02] <Damianz>	 s/READ THE DOCS/RFTM/
[15:13:36] * Hydriz  scratches his head on what RFTM means

[15:13:55] <Damianz>	 read the fucking manual
[15:14:00] <Hydriz>	 lol
[15:14:19] <Hydriz>	 so its a spelling mistake, *glares* :P
[15:14:44] <Damianz>	 Hey, leave my dyslexic typing out of it
[15:14:49] <hashar>	 I am out anywa,y need to test the Wiki loves monument app
[15:15:27] <Hydriz>	 heh
[15:15:31] <Damianz>	 Wiki's loves monuments?
[15:15:41] <hashar>	 http://www.wikilovesmonuments.org
[15:15:54] <Hydriz>	 some competition in Commons
[15:15:58] <hashar>	 a contest to takes photos of monuments around the world
[15:15:59] <Hydriz>	 afaik
[15:16:14] <hashar>	 it even got an Android app to easily find monuments in your surrounding.
[15:16:26] <hashar>	 I am out! see you monday :-]
[15:16:33] <Damianz>	 See that sounded vaugly interesting until you told me what it actually was :P
[15:16:36] <Damianz>	 Have a fun weekend!
[15:16:57] * Damianz  thinks he doesn't take pictures of anything interesting enough to appear on commons

[15:17:12] <Hydriz>	 Screenshots maybe?
[15:17:27] <gribeco>	 hi; I recently got an account to start bot instances, I think at this point I need to be added to bastion+bots, and to get shell access
[15:17:35] <Hydriz>	 Take those useless screenshots that take up to 5MB and mass upload
[15:17:52] <Hydriz>	 gribeco: Welcome to the Labs family! :)
[15:18:01] <gribeco>	 Hydriz: thanks =)
[15:18:10] <Hydriz>	 yes, you need to request shell access first
[15:18:18] <Hydriz>	 if your account was created this month
[15:18:30] <Damianz>	 heh
[15:18:41] <Damianz>	 Totally should just upload some RAW images to commons
[15:18:50] <gribeco>	 created 9/9
[15:18:52] <Damianz>	 I don't have 2 32gb sdhc cards for nothing
[15:19:02] <Hydriz>	 hmm, 9th September...
[15:19:28] <Hydriz>	 Damianz: Use the generateImages.php script in MediaWiki or something
[15:19:51] <Hydriz>	 not sure what it is, but its in tests/
[15:20:01] <Hydriz>	 gribeco: sorry, you don't need to request
[15:20:58] <Hydriz>	 gribeco: I think we should trust you, so I will add you to the bastion project now, but adding you to the bots project is hard, because there are some workflow to follow (I think)
[15:21:23] <gribeco>	 do I need to be added to the project to create an instance?
[15:21:37] <Hydriz>	 do you need to create an instance at all?
[15:21:56] <Hydriz>	 in the bots project, we don't really create instances, we already have 4 default instances that all of us share
[15:22:03] <gribeco>	 I think so -- the point is to have 1-2 VMs to run my anti-vandalism bot
[15:22:14] <gribeco>	 (frwiki and ptwiki)
[15:22:15] <Hydriz>	 but unless if you really need, Damianz is here to help :)
[15:22:24] * Damianz  yawn

[15:22:26] <Hydriz>	 how much memory does it usually consume?
[15:22:32] <Damianz>	 Damianz is the only one with his own 2 instances in bots :P
[15:22:50] * Hydriz  splashes cold water on Damianz's face, offering a towel in the other hand

[15:23:01] <gribeco>	 average is probably 100MB, peak can be above 1GB
[15:23:11] <Hydriz>	 Hmm
[15:23:18] <gribeco>	 I run my own VM, and it can get overloaded
[15:23:24] <Damianz>	 wtf are you doing that requires a GB of ram!?
[15:23:28] <gribeco>	 (and some RCs are not processed when that happens)
[15:23:39] <Hydriz>	 lol Damianz: interwiki.py takes us 1.6G
[15:23:50] <Damianz>	 interwiki is a pos though
[15:24:07] <Hydriz>	 lol
[15:24:12] <gribeco>	 Damianz: running lots of processes analyzing diffs, each with a mysql connection
[15:24:39] <Hydriz>	 Damianz: Willing to fulfil this?
[15:24:56] <Damianz>	 http://ganglia.wmflabs.org/latest/graph_all_periods.php?h=bots-cb&m=load_one&r=hour&s=by%20name&hc=4&mc=2&st=1348845877&g=mem_report&z=large&c=bots
[15:25:01] <Damianz>	 Does anti vandle on en wiki
[15:25:05] <Damianz>	 vandal*
[15:25:17] <Damianz>	 Sure, but I'll have to login and I want to go to lunch first.
[15:25:41] <gribeco>	 ok
[15:25:48] <labs-home-wm>	 09/28/2012 - 15:25:48 - Created a home directory for gribeco in project(s): bastion
[15:26:00] <Damianz>	 what's the bot called?
[15:26:04] <gribeco>	 salebot
[15:27:18] <Damianz>	 https://labsconsole.wikimedia.org/wiki/Nova_Resource:I-00000457
[15:27:24] * Damianz  -> lunch

[15:27:39] <Hydriz>	 gribeco: Now its me :)
[15:27:52] <Hydriz>	 I am trying to figure out the steps for adding new users to the bots project
[15:28:07] <Damianz>	 https://labsconsole.wikimedia.org/wiki/Special:NovaProject
[15:28:09] <Damianz>	 add member
[15:28:09] <Hydriz>	 because we have user directories for everyone at http://bots.wmflabs.org/~<user>
[15:28:23] <Damianz>	 they're not auto created
[15:28:28] <Damianz>	 going to write a script to create them later
[15:28:34] <Hydriz>	 yeah, need that script
[15:28:38] <Hydriz>	 I am not sure how petrb does it
[15:28:41] <Damianz>	 it's like 20lines of python
[15:28:57] <Damianz>	 mkdir /data/project/public_html/<username> chown <username>.www-data /data/project/public_html/<username>
[15:29:00] <Damianz>	 basically
[15:29:12] <Damianz>	 It use to be on nfs but I killed nfs with fire and moved to project storage the other day.
[15:29:25] <Damianz>	 hi andrew
[15:30:24] <Hydriz>	 okay, thanks :)
[15:30:47] <labs-home-wm>	 09/28/2012 - 15:30:47 - User gribeco may have been modified in LDAP or locally, updating key in project(s): bastion
[15:31:50] <Hydriz>	 opps, need sudo for this I think
[15:33:08] <Hydriz>	 right, its done nice
[15:34:49] <Hydriz>	 !log bots Added Gribeco to the project. Created a public_html directory for him as well.
[15:34:51] <labs-morebots>	 Logged the message, Master
[15:35:25] <Hydriz>	 !log bots New instance bots-salebot created dedicated for Gribeco to run Salebot (an antivandal bot) for frwiki and ptwiki.
[15:35:26] <labs-morebots>	 Logged the message, Master
[15:35:45] <labs-home-wm>	 09/28/2012 - 15:35:45 - User gribeco may have been modified in LDAP or locally, updating key in project(s): bots
[15:35:49] <Hydriz>	 grr not sysadmin, can't see the console output
[15:36:59] <Hydriz>	 right! Gribeco: You are ready. Please upload your public key to Special:NovaKey, add the relevant configuration stated in Help:Access and ssh into bots-salebot.pmtpa.wmflabs.
[15:37:08] <gribeco>	 thanks!
[15:38:05] <Hydriz>	 gribeco: Just a minute while I initialise the instance for you...
[15:38:24] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Njw link https://www.mediawiki.org/w/index.php?diff=588332 edit summary: 
[15:41:07] <Hydriz>	 gribeco: You can kind of start using the instance now, I am just fixing issues with the public_html folder
[15:41:18] <gribeco>	 thanks
[15:59:50] <Hydriz>	 hmm, the public_html directory seems to be automatic, since there is a directory for novaadmin...
[16:06:14] <Damianz>	 !log bots Added script to bots-apache1's crontab to auto create member dirs in /data/project/public_html
[16:06:15] <labs-morebots>	 Logged the message, Master
[16:06:18] <Damianz>	 Hydriz: Shhh ;)
[16:06:27] <Hydriz>	 zzz
[16:06:30] <Damianz>	 https://github.com/DamianZaremba/labs-bots-vhost-builder/blob/master/update.py crappy but will do
[16:06:50] <Damianz>	 !log bots Said script is https://github.com/DamianZaremba/labs-bots-vhost-builder/blob/master/update.py
[16:06:58] <Damianz>	 oh it doesn't like urls
[16:07:04] <Damianz>	 !log bots Said script is github.com/DamianZaremba/labs-bots-vhost-builder/blob/master/update.py
[16:07:05] <labs-morebots>	 Logged the message, Master
[16:07:14] <Hydriz>	 lolwut, you could have gist it...
[16:07:25] <Hydriz>	 no pun intended, but I meant gist.github.com
[16:07:55] <Damianz>	 >.>
[16:07:58] <Damianz>	 I could have but meh
[16:08:08] <Damianz>	 I dislike the gist interface for editing stuff
[16:08:10] <Damianz>	 lacks issues etc
[16:08:14] <Hydriz>	 heh
[16:08:25] <Damianz>	 I have too much crap in gists 
[16:08:33] * Hydriz  pushes the job of updating the wiki to Damianz

[16:08:45] <Damianz>	 wiki is generally wrong for bots
[16:08:52] <Hydriz>	 yeah, agree
[16:08:57] <Damianz>	 really going for lunch first though, it's like 5pm
[16:09:30] <Hydriz>	 lol?!
[16:09:42] <Damianz>	 Ideally for bots-apache1 we'd screw off per user dirs
[16:09:57] <Hydriz>	 as in?
[16:10:24] <Hydriz>	 I was thinking if it would be great that a symlink can be created for public_html in the /home directory
[16:10:26] <Damianz>	 have some sort of allow vhost to be created thing (maybe in labsconsole using salt as the backend!) which dumps like report.cluebot.org into /data/project/public_html/report.cluebot.org and make a group which members can be added to.
[16:10:37] <Damianz>	 We kinda suck at web collaboration
[16:10:44] <Damianz>	 though I do like per user stuff for some things 
[16:11:05] <Damianz>	 It would be easy to add a symlink into their homedir when we move to gluster
[16:11:13] <Hydriz>	 ahem, labs is for collaboration, not for per-user stuff --quote Ryan Lane on that :P
[16:11:29] <Hydriz>	 yeah, would be good
[16:11:45] <Damianz>	 need to re-jigg bots project dir a little really
[16:11:56] <Damianz>	 like 1 backup folder with subfolders for each thign rather than random folders
[16:12:02] <Damianz>	 at least we have mysql dumps now though
[16:12:19] <giftpflanze>	 this will be great when everyone can administrate everyone else's bots :D
[16:12:39] * Hydriz  stops Damianz from talking and makes him eat lunch

[16:12:56] <Hydriz>	 and add to the fact that I got to sleep now, night people
[16:13:03] <Damianz>	 7.6G    backups/25-09-2012_15-57-45-i-000000af.pmtpa.wmflabs.sql < no wonder bots-sql2 is slow
[16:13:16] <Damianz>	 nn hydriz
[16:13:23] <Damianz>	 giftpflanze: They sorta-can now 
[16:13:28] <Hydriz>	 READ THE DOCS! :P
[16:13:36] <Damianz>	 Except people run them in their homedirs
[16:13:38] <Damianz>	 Which is bad
[16:13:47] <Damianz>	 But we didn't have /data/project back then
[16:14:14] <giftpflanze>	 oh, should i move there?
[16:15:09] <Alchimista>	 on labs everyone has access to everyones bots? o.O
[16:15:15] <Damianz>	 Ideally, the rough idea is people develop in there in a collaborative way and eventually we'll have a production cluster to deploy packaged and puppetized stuff onto.
[16:15:24] <Damianz>	 Alchimista: Same on every other project
[16:15:42] <Damianz>	 All members have sudo access on all instances unless the policy is changed
[16:15:49] <Damianz>	 In bots for example not everyone can sudo on sql instances
[16:16:10] <Damianz>	 But yes, in general I can sudo su - to root then su <username> - and restart you bots
[16:16:20] <Damianz>	 Though ideally they have init files so I don't have to go mess in your homedir
[16:16:30] <Alchimista>	 so if i had a bot on labs, everyone can run it on the bot account, and change the code, or simply can read the code?
[16:16:51] <Alchimista>	 *could
[16:16:58] <Damianz>	 Change
[16:17:03] <Damianz>	 They would have the same access as you
[16:17:06] <Damianz>	 which is the idea
[16:17:21] <Damianz>	 Labs is for developing stuff collaboratively
[16:17:29] <giftpflanze>	 and running
[16:17:33] <Damianz>	 not running
[16:17:38] <giftpflanze>	 no?
[16:17:40] <Damianz>	 We will eventually have a 'production' cluster for running bots/tools
[16:17:44] <giftpflanze>	 ah
[16:17:55] <Damianz>	 currently everything is semi-production, so we run stuff but it's still on the dev side of things
[16:18:12] <giftpflanze>	 will the access be the same??
[16:18:16] <giftpflanze>	 -?
[16:18:17] <Damianz>	 The 'production' setup will have restricted access
[16:18:21] <giftpflanze>	 ah
[16:18:28] <Damianz>	 So the idea is you package/puppetize stuff and deploy it there.
[16:18:43] <Damianz>	 Which is why we have a 'private' repo for things like passwords/tokens.
[16:18:52] <Alchimista>	 seems strange to me. at least on production is it possible to *hide* some folders?
[16:18:57] <giftpflanze>	 how does this work???
[16:19:00] <Alchimista>	 ah, Damianz already responded
[16:19:04] <giftpflanze>	 shitty keyboard …
[16:20:03] <Alchimista>	 so everyone can change code in dev side, but in production, it would be just the project admins, right?
[16:20:37] <giftpflanze>	 and the owner
[16:20:43] <Damianz>	 It would be root's
[16:20:59] <Damianz>	 the idea is nothing is changed in production, the workflow is develop and push not adhoc change
[16:21:10] <Damianz>	 this is why we still have lots of work to do
[16:21:29] <giftpflanze>	 sounds like a huge difference to ts
[16:22:08] <Damianz>	 yes
[16:22:11] <Alchimista>	 giftpflanze: that's why i'm tryng to know more about, seems much diferent
[16:22:30] <giftpflanze>	 but it will still be possible to do it the old way
[16:22:32] <giftpflanze>	 as now
[16:22:57] <giftpflanze>	 Damianz: how does the private repo work?
[16:23:34] <Alchimista>	 for me, as long has it may be possible to have *hidden* folders, and that in production the code can't be changed for everyone, seems fine
[16:25:44] <Damianz>	 There's a repo called labs/private that stores passwords and stuff, like on the production puppet. It's not really widly used currently due to some access issues in gerrit relating to ldap groups.
[16:26:16] <Damianz>	 Alchimista: Define hidden? If you mean not viewable/editable by everyone in a project then yes
[16:26:19] <Damianz>	 Ryan*
[16:26:20] <Damianz>	 gah
[16:26:23] <Damianz>	 Hi Ryam
[16:27:50] <Alchimista>	 Damianz: yap, not viewable and editable. for those private stuff, plus, i like to keep on my repo some problematic code, instable scripts, or not working at all :P
[16:28:43] <Ryan_Lane>	 Damianz: howdy
[16:29:04] <Damianz>	 Alchimista: Yeah, that would be in 'stage 2' so to say. You'd package/tag the code to release onto 'production'
[16:29:10] <Ryan_Lane>	 Alchimista: why does it need to be private?
[16:29:17] <Ryan_Lane>	 is it passwords, etc/
[16:29:37] <Damianz>	 Ryan_Lane: In relation to dev vs 'prod' tools/bots setup and how it differes from the ts currently/the general idea
[16:29:55] <Ryan_Lane>	 I don't think I understand
[16:30:14] <Ryan_Lane>	 back in a bit....
[16:31:03] <Damianz>	 gribeco: your instance build ages ago btw
[16:31:10] * Damianz  bbiab

[16:39:19] <Jan_Luca>	 Is someone there that can create a project?
[16:41:09] <andrewbogott>	 Jan_Luca:  I can -- what's it for, and what would you like it to be called?
[16:41:24] <andrewbogott>	 And, do you already have labs/gerrit/bastion accounts
[16:41:30] <Alchimista>	 Ryan_Lane: For passwords Damianz already said that it would have a specific folder. 
[16:42:26] <Jan_Luca>	 I want to create a project "centralauth" to create a CentralAuth-installation for reviewing and developing CentralAuth because not every MW-dev have such a installation
[16:43:05] <Jan_Luca>	 Yes I have a labs-account already (I'm an admin of another project already)
[16:43:12] <Jan_Luca>	 The account name is "jan"
[16:49:05] <giftpflanze>	 is there a possibility to run bots right now without giving out the password to other sudoers?
[16:49:55] <giftpflanze>	 which is violating the policy as i'm told
[16:54:02] <andrewbogott>	 Jan_Luca:  OK, just a moment...
[16:55:44] <labs-home-wm>	 09/28/2012 - 16:55:44 - Creating a project directory for centralauth
[16:55:45] <labs-home-wm>	 09/28/2012 - 16:55:45 - Created a home directory for andrew in project(s): centralauth
[16:57:11] <andrewbogott>	 Jan_Luca:  There you have it!
[17:00:33] <Jan_Luca>	 andrewbogott: Can I get a public ip, too
[17:00:49] <labs-home-wm>	 09/28/2012 - 17:00:49 - User andrew may have been modified in LDAP or locally, updating key in project(s): centralauth
[17:01:26] <Jan_Luca>	 And can you add me to the project as admin?
[17:03:04] <andrewbogott>	 Jan_Luca:  Hm, I tried to.  What's your username on labsconsole?
[17:03:11] <Jan_Luca>	 jan
[17:04:11] <Jan_Luca>	 jan (shell user) or Jan (name shown in labsconsole)
[17:05:00] <andrewbogott>	 Oh!   You're the 'jan' of wikiversity-sandbox!  I was looking for you the other day...
[17:05:35] <Jan_Luca>	 Yes I tried your puppet for MW
[17:05:44] <labs-home-wm>	 09/28/2012 - 17:05:44 - Created a home directory for jan in project(s): centralauth
[17:05:54] <andrewbogott>	 I migrated the wikiversity-sandbox instances to different IPs, and one of the DNS names was lost:  sandbox.wikiversity.wmflabs.org
[17:06:01] <andrewbogott>	 And for some reason I was unable to reassign it.
[17:06:10] <andrewbogott>	 I'm not sure if that's a problem or not, but wanted to let you know, at least...
[17:06:45] <andrewbogott>	 (btw, centralauth has an IP quota now, so you should be able to assign the address when you're ready.)
[17:06:59] <Jan_Luca>	 Thank you very much
[17:07:32] <blackjack48>	 andrewbogott: I posted on the mailing list earlier (I'm Aaron). Could I please get a labs space at watchlist-groups ?
[17:08:00] <andrewbogott>	 blackjack48:  Sure.  Do you already have a labs and bastion account?
[17:10:46] <labs-home-wm>	 09/28/2012 - 17:10:46 - User jan may have been modified in LDAP or locally, updating key in project(s): centralauth
[17:11:28] <Ryan_Lane>	 andrewbogott: there's some bug in labsconsole with regard to project creation right now
[17:11:34] <Ryan_Lane>	 I haven't been able to track it down
[17:11:47] <andrewbogott>	 Ryan_Lane:  You mean, with security groups?
[17:11:49] <Ryan_Lane>	 andrewbogott: but, it doesn't add your user to the project
[17:11:53] <andrewbogott>	 Otherwise I think it's working OK.
[17:12:02] <Ryan_Lane>	 it does add to sysadmin and netadmin
[17:12:06] <andrewbogott>	 Oh, I figured the problem was that I gave it a fictional username :)
[17:12:08] <Ryan_Lane>	 but not the project itself (which is weird)
[17:12:27] <Ryan_Lane>	 because of that the security groups don't get created
[17:12:27] <blackjack48>	 andrewbogott: apologies, I got disconnected...
[17:12:36] <andrewbogott>	 blackjack48:  Do you already have a labs and bastion account?
[17:12:42] <Ryan_Lane>	 andrewbogott: so, the security groups need to manually be created
[17:12:56] <blackjack48>	 andrewbogott: I think I have labs account but I'm not sure about bastion...
[17:13:04] <andrewbogott>	 Jan_Luca:  Did you catch that?  You'll need to manually create your 'default' security group before creating an instance.  Or else you won't be able to access anything.
[17:13:12] <andrewbogott>	 blackjack48:  Username?
[17:13:31] <andrewbogott>	 Jan_Luca:  (If that's too cryptic then I can create it for you in a few minutes.)
[17:13:32] <blackjack48>	 "Aaron Pramana"
[17:13:49] <blackjack48>	 andrewbogott: "Aaron Pramana"
[17:13:58] <blackjack48>	 (still getting used to IRC)
[17:14:21] <Jan_Luca>	 andrewbogott: I can copy the settings from wikiversity-sandbox
[17:14:32] <andrewbogott>	 Jan_Luca:  Yep, that'll work.
[17:15:44] <labs-home-wm>	 09/28/2012 - 17:15:44 - Creating a project directory for watchlist-groups
[17:15:50] <Jan_Luca>	 I can see any problem: There is a default-security-group for the project with the correct settings
[17:16:54] <qgil_>	 Hi, I'm new to https://labsconsole.wikimedia.org/ - a prominent link in the homepage to https://labsconsole.wikimedia.org/wiki/Help:Getting_Started would be useful
[17:17:09] <qgil_>	 (I would do it myself but there is no Register link visible either)  :)
[17:18:25] <andrewbogott>	 Jan_Luca:  OK then :)  The creation problem may be intermittent.
[17:18:39] <Jan_Luca>	 !log centralauth Created frontend-instance
[17:18:40] <labs-morebots>	 Logged the message, Master
[17:19:09] <andrewbogott>	 blackjack48:  Your project is created, and ssh access should work for you.  Do you need further guidance?
[17:19:54] <andrewbogott>	 qgil_:  Labs is a 'beta' at the moment, which means you need someone else to create an account for you.  Hence no 'register' link.
[17:20:04] <blackjack48>	 andrewbogott: Not so far... I'll ask IRC if I do. Thanks!
[17:20:12] <andrewbogott>	 np
[17:20:19] <qgil_>	 andrewbogott, yes I understood that after finding the Getting Started page  ;)
[17:20:34] <andrewbogott>	 fair point
[17:20:46] <labs-home-wm>	 09/28/2012 - 17:20:46 - Created a home directory for andrew in project(s): watchlist-groups
[17:23:35] <Jan_Luca>	 andrewbogott: About sandbox.wikiversity.wmflabs.org: It would be nice to get this host name back? Any idea what went wrong on my or your side?
[17:24:09] <andrewbogott>	 Jan_Luca:  It's quite possible that it was just a DNS caching thing.  Try adding it now and see what happens?
[17:24:44] <andrewbogott>	 If it still doesn't work then we will probably need Ryan_Lane to debug; I don't know much about how OSM DNS works at the moment.
[17:25:45] <labs-home-wm>	 09/28/2012 - 17:25:45 - User andrew may have been modified in LDAP or locally, updating key in project(s): watchlist-groups
[17:27:15] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Qgil link https://www.mediawiki.org/w/index.php?diff=588363 edit summary: 
[17:27:40] <Jan_Luca>	 It does not seems to work: Failed to add sandbox entry for IP address 208.80.153.129. 
[17:28:00] <Ryan_Lane>	 andrewbogott: this was in regards to delete/create of an instance?
[17:28:04] <Ryan_Lane>	 or something else?
[17:28:08] <Ryan_Lane>	 public dns?
[17:28:40] <Damianz>	 Alchimista: repo not folder
[17:28:43] <Ryan_Lane>	 if someone tried to resolve the address before it existed, then it's in the negative cache, which propogates through the entire chain of resolvers
[17:28:44] <andrewbogott>	 public dns.  I migrated that host to a new IP, and have since been unable to reassign that DNS name.
[17:28:50] <Ryan_Lane>	 ah
[17:28:51] <andrewbogott>	 It didn't happen with any other records.
[17:28:52] <Ryan_Lane>	 yeah
[17:28:54] <Ryan_Lane>	 positive cache
[17:28:55] <Ryan_Lane>	 so....
[17:28:56] <Damianz>	 giftpflanze: yes, write some code that takes the user/pass and creates a cookie jar. let the bot use the cookie jar
[17:29:05] <Ryan_Lane>	 did you wipe the record on dobson?
[17:29:06] <giftpflanze>	 oh my
[17:29:10] <Damianz>	 horrible but will work without exposing the password (possible access temp though)
[17:29:19] <Ryan_Lane>	 what's the hostname?
[17:29:21] <Damianz>	 Hi again Ryan
[17:29:25] <andrewbogott>	 Ryan_Lane:  For DNS stuff all I used was the labs gui.
[17:29:29] * Ryan_Lane  nods

[17:29:36] <Ryan_Lane>	 when you change IPs you need to wipe DNS cache too
[17:29:39] <giftpflanze>	 that would be my objection
[17:29:49] <andrewbogott>	 um… Lan_Luca:  What's the instance name that we want assigned to sandbox?
[17:29:52] <Ryan_Lane>	 then people also need to wait for the cache to expire throughout the DNS chain too
[17:29:54] <andrewbogott>	 Jan_Luca that is
[17:29:58] <Ryan_Lane>	 what's the public DNS name?
[17:30:00] <Ryan_Lane>	 I'll wipe it
[17:30:03] <Ryan_Lane>	 and show you how
[17:30:20] <Ryan_Lane>	 http://sandbox.wikiversity.wmflabs.org/http://sandbox.wikiversity.wmflabs.org/
[17:30:23] <Damianz>	 Ryan_Lane: Is there any way you can shorten the cache on nscld on bastion? seems to be a little lengthy and locks people out for like half an hour if they don't get bastion access with shell
[17:30:24] <Jan_Luca>	 The instance-ID is i-0000033a
[17:30:32] <Damianz>	 (though I'd look to hook adding shell == bastion access)
[17:30:34] <Ryan_Lane>	 Damianz: ah. right
[17:30:36] <Damianz>	 s/look/love/
[17:30:41] <Ryan_Lane>	 Damianz: can you push a gerrit change in for that?
[17:30:50] <Damianz>	 mk
[17:30:55] <Jan_Luca>	 the DNS-name should be "sandbox.wikiversity.wmflabs.org"
[17:30:58] <Damianz>	 I'll take a look after I finish eating
[17:30:58] <Ryan_Lane>	 ah ok
[17:31:04] <Ryan_Lane>	 it's not cached on dobson
[17:31:21] <Ryan_Lane>	 I'm not seeing a record at all
[17:31:40] <Ryan_Lane>	 it's not in dns
[17:31:46] <Ryan_Lane>	 which project is this?
[17:31:51] <andrewbogott>	 wikiversity
[17:31:58] <Ryan_Lane>	 ok. gimme a sec
[17:32:03] <Jan_Luca>	 The error message when I try to add it with labs GUI is "Failed to add sandbox entry for IP address 208.80.153.129. "
[17:32:09] <Damianz>	 andrewbogott: You do python with ldap stuff, right?
[17:32:10] <Ryan_Lane>	 andrewbogott: btw, on dobson, the commad is: http://sandbox.wikiversity.wmflabs.org/
[17:32:11] <Ryan_Lane>	 err
[17:32:19] <Jan_Luca>	 Ryan_Lane: wikiversity-sandbox
[17:32:26] <Ryan_Lane>	 andrewbogott: rec_control wipe-cache sandbox.wikiversity.wmflabs.org
[17:32:43] <andrewbogott>	 Damianz:  Python but not so much ldap.  What are you thinking about?
[17:32:55] <andrewbogott>	 Ryan_Lane:  And that all lives on Dobson?
[17:33:05] <Ryan_Lane>	 well, it's our primary DNS
[17:33:11] <Ryan_Lane>	 so, things get cached there
[17:33:54] <Damianz>	 Just wondered if you could take a quick glance at a script I wrote up to create people's apache dirs on bots since they live in project storage and are a bit of a pain to create for users. I think it shouldn't blow up but I'm not 100% sure if my regex idea is ok or if it /really/ needs another ldap search to grab the true attributes.
[17:34:06] <Ryan_Lane>	 I see this hostname: wikiversity-sandbox.wmflabs.org
[17:34:19] <qgil_>	 I just gave https://labsconsole.wikimedia.org/ a bit of Google +1 love. Searching for Wikimedia Labs from scratch was less simple than expected. 
[17:34:33] <Ryan_Lane>	 hm. I can't add sandbox.wikiversity.wmflabs.org
[17:34:35] <Damianz>	 https://github.com/DamianZaremba/labs-bots-vhost-builder/blob/master/update.py is the script if you're not busy (nothing urgent if you are).
[17:34:50] <Jan_Luca>	 There should be a community vote which DNS name should be used
[17:34:57] <andrewbogott>	 qgil_:  Thanks.  I didn't ignore your comment about putting a link to help front and center… will make a note.
[17:35:15] <Ryan_Lane>	 lemme figure out why I can't add sandbox.wikiversity.wmflabs.org
[17:35:20] <Ryan_Lane>	 I hate my DNS code so much
[17:35:33] <andrewbogott>	 Yep, the problem is unique to that exact name.  I added the other two, no problem.
[17:35:46] <labs-home-wm>	 09/28/2012 - 17:35:46 - Created a home directory for laner in project(s): wikiversity-sandbox
[17:35:59] <Jan_Luca>	 For building the project I use sandbox.wikiversity.wmflabs.org
[17:36:30] <Ryan_Lane>	 I don't see any reason it shouldn't work
[17:36:44] <Ryan_Lane>	 lemme look at logs
[17:37:23] <andrewbogott>	 Ryan_Lane:  This is exactly why I declared you to be the man for this job :)
[17:37:56] <Ryan_Lane>	 heh
[17:38:02] <Ryan_Lane>	 we really need to switch out the DNS code
[17:38:04] <Ryan_Lane>	 badly
[17:38:10] <Damianz>	 Bleh
[17:38:18] <Damianz>	 What's the development instance for openstack/osm called?
[17:39:25] <andrewbogott>	 Damianz:  I've been using nova-precise1
[17:39:36] <Damianz>	 That's it :)
[17:40:13] <andrewbogott>	 Damianz:  If I have any cruft left in puppet or the OSM git repo you can clean up.  Everything that I care about is checked in.
[17:40:19] <Ryan_Lane>	 ah. I see why
[17:40:25] <Ryan_Lane>	 do we need these other ones?
[17:40:33] <Ryan_Lane>	 this is a bug in the dns code
[17:40:43] <Jan_Luca>	 at moment: No
[17:40:43] <andrewbogott>	 Oh, is three just too many?
[17:40:43] <Ryan_Lane>	 do we need the other host names?
[17:40:45] <labs-home-wm>	 09/28/2012 - 17:40:45 - User laner may have been modified in LDAP or locally, updating key in project(s): wikiversity-sandbox
[17:40:47] <Damianz>	 andrewbogott: I have a seperate clone under /d so I don't break your stuff :)
[17:40:47] <Ryan_Lane>	 well, no
[17:40:50] <Ryan_Lane>	 it's the naming of the entry
[17:40:59] <Ryan_Lane>	 it thinks the hostname already exists
[17:41:39] <giftpflanze>	 why are there different user directories on bots-[1,4]?
[17:41:41] <andrewbogott>	 exists where?
[17:42:01] <Ryan_Lane>	 in ldap
[17:42:14] <Ryan_Lane>	 ugh and deleting them didn't fix it
[17:42:17] <Ryan_Lane>	 I need to do it manually
[17:42:21] <Ryan_Lane>	 shitty, shitty dns code
[17:44:21] <Ryan_Lane>	 ok. it's added, but it's likely in negative cache
[17:44:29] <Damianz>	 giftpflanze: Different?
[17:44:30] <Ryan_Lane>	 so, it may not work for a while. likely an hour
[17:44:37] <Damianz>	 If you mean in /home it depends who's logged in.
[17:44:48] <giftpflanze>	 oh
[17:45:03] <Damianz>	 It's automounted over nfs on login
[17:45:04] <giftpflanze>	 nice
[17:45:11] <Jan_Luca>	 Ryan_Lane: This is no problem. Thank you for you help!!!
[17:45:24] <Ryan_Lane>	 Jan_Luca: yw
[17:45:34] <Ryan_Lane>	 I can't wait to switch our dns code
[17:45:38] <giftpflanze>	 how does it work for cron?
[17:45:54] <Damianz>	 cron runs as the user so essentially the same
[17:46:00] <Damianz>	 Ryan_Lane: Well folsem is out ;)
[17:46:08] <Ryan_Lane>	 Damianz: we have it merged in essex
[17:46:12] <Ryan_Lane>	 we just need to switch to using it
[17:46:15] <giftpflanze>	 so it's always logged in/mounted
[17:46:15] <Damianz>	 oh nice
[17:46:41] <Damianz>	 Err, don't think so... 
[17:47:08] <Damianz>	 Ryan_Lane probably knows better, but I believe it essentially mounts and unmounts on a cron job run as the user is authed and then it dies or such.
[17:47:11] * Damianz  shrugs, I hate nfs

[17:47:39] <Ryan_Lane>	 our current home directories aren't really usable for anything useful
[17:47:45] <Ryan_Lane>	 until we switch them over to gluster
[17:47:48] <giftpflanze>	 o.o
[17:47:55] <Ryan_Lane>	 but it works fine with cron
[17:48:02] <Damianz>	 urgh, someone snuck a jalapeno into my subway
[17:48:05] <Ryan_Lane>	 use project storage, not homedirs
[17:48:20] <Ryan_Lane>	 project strorage is available across all instances in a project
[17:48:25] <Ryan_Lane>	 and it's quota'd at 300GB
[17:48:28] <Ryan_Lane>	 and can be increased
[17:48:37] <Ryan_Lane>	 the home directories are currently very limited
[17:48:51] <Damianz>	 Even at 7gb a day being added to bots we should be fine at a 300GB quota heh
[17:49:07] <Jan_Luca>	 Ryan_Lane, andrewbogott: Thank you for your help. Bye!
[17:49:09] <Damianz>	 I should actually move my bots stuff over which is currently on bots nfs.
[17:49:44] <Damianz>	 Ryan_Lane: Are user dbs scheduled for mid next year now?
[17:50:09] <Ryan_Lane>	 early next year
[17:50:13] <Ryan_Lane>	 why do you ask?
[17:50:26] <Ryan_Lane>	 hopefully earlier than that
[17:50:30] <Damianz>	 Thinking we might have to reshuffle bots-sql2 a little
[17:50:54] <JasonDC>	 Ryan_Lane, mind me asking how difficult it would be to have labs have a database replica of the English Wikipedia?
[17:50:58] <Damianz>	 It's rather laggy and currently has a dump of like 7gb, sql1 has nearly nothing on it but 2 has a few bots that love connections and data.
[17:51:00] <Ryan_Lane>	 Damianz: oh, you mean user dbs?
[17:51:03] <Ryan_Lane>	 or replicated ones?
[17:51:07] <Damianz>	 user
[17:51:12] <Ryan_Lane>	 user will be later, yeah
[17:51:29] <Ryan_Lane>	 JasonDC: we'll have replicated databases in a few months time
[17:51:34] <Ryan_Lane>	 it's on the roadmap
[17:52:02] <Damianz>	 I assume having the sql vm dump into project storage daily and keep 7 days of history isn't an issue io wise? heh
[17:52:07] <giftpflanze>	 will you be able to create (temporary) tables on the replicated db?
[17:56:46] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Quentinv57 link https://www.mediawiki.org/w/index.php?diff=588372 edit summary: 
[17:59:11] * Damianz  looks at Ryan

[17:59:20] <Ryan_Lane>	 right now the plan is no for that
[17:59:48] <Ryan_Lane>	 we're looking at ways that we can allow joins, through some kind of federated database, or something else
[18:00:03] <Ryan_Lane>	 but the user databases will be separate from the replicated ones
[18:02:41] * Damianz  un-looks at Ryan now he understands why he was directed to

[18:05:10] <giftpflanze>	 hm, ok
[18:06:50] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Quentinv57 link https://www.mediawiki.org/w/index.php?diff=588379 edit summary: /* User:Quentinv57 */ +
[18:10:36] <^demon|lunch>	 Ooh, I think rc1 might be imminent.
[18:10:45] <^demon>	 rc1 release notes got merged.
[18:12:01] <Ryan_Lane>	 \o/
[18:12:26] <Damianz>	 :o
[18:12:48] <Damianz>	 Ah that's how you impliment groups on mediawiki
[18:12:56] <Ryan_Lane>	 how?
[18:16:06] <Damianz>	 $wgGroupPermissions['shell']['loginviashell'] (I was confused as to how the interface said 'shell' and all the code said 'loginviashell').
[18:17:48] <^demon>	 Key on $wgGroupPermissions is the group. Array keys in that are permissions.
[18:18:00] <^demon>	 $wgGroupPermissions[$group][$perm]
[18:19:38] <Ryan_Lane>	 ah, yeah
[18:19:48] <Ryan_Lane>	 that's how we're handling it
[18:24:31] <Thehelpfulone>	 Ryan_Lane, who do I ask to create a new project?
[18:24:41] <Thehelpfulone>	 ah... just missed him
[18:25:22] <Damianz>	 andrewbogott can if he's still here
[18:25:26] <Damianz>	 or email the list
[18:25:54] <andrewbogott>	 Thehelpfulone:  Project name?
[18:26:04] <andrewbogott>	 And, you have a labs account already, right?
[18:30:46] <Thehelpfulone>	 yes
[18:31:05] <Thehelpfulone>	 and it's going to be a replacement for UTRS - http://toolserver.org/~unblock/ so UTRS should be good?
[18:31:47] <Damianz>	 So full
[18:31:50] <andrewbogott>	 ok.  Stay tuned...
[18:33:49] <Thehelpfulone>	 sure
[18:35:45] <labs-home-wm>	 09/28/2012 - 18:35:45 - Creating a project directory for utrs
[18:35:45] <labs-home-wm>	 09/28/2012 - 18:35:45 - Created a home directory for thehelpfulone in project(s): utrs
[18:36:21] <Thehelpfulone>	 thanks
[18:40:49] <labs-home-wm>	 09/28/2012 - 18:40:49 - User thehelpfulone may have been modified in LDAP or locally, updating key in project(s): utrs
[18:43:49] <Damianz>	 bleh ryan ran off again
[18:48:03] <^demon>	 He's back, get him!
[18:49:49] <Damianz>	 LOL
[18:49:54] * Thehelpfulone  trouts Ryan_Lane 

[18:50:08] <Thehelpfulone>	 you made andrewbogott do some work creating a new project, what is this madness!
[18:50:33] <Damianz>	 Ryan_Lane: If the shell group impliments who has shell access, if you remove shell from anyone should that therefore remove their access or are you more a one shot deal?
[18:51:34] <Ryan_Lane>	 Thehelpfulone: heh. what's wrong with that
[18:51:50] <Ryan_Lane>	 Damianz: hm. that's now how it works right now
[18:51:58] <Ryan_Lane>	 it probably should
[18:52:07] <Ryan_Lane>	 I need to re-work how limited shell access works
[18:52:33] <Damianz>	 well I'm writing some hook stuff atm, so can easily make it do that at a wiki level by just removing them. But for temp disabling that sucks and moving the group to ldap and ahving instances check would be better imo
[18:53:22] <Thehelpfulone>	 Ryan_Lane, when a new project is created, what are the rules of default security group? 
[18:53:36] <Damianz>	 ping and ssh from project
[18:53:39] <Thehelpfulone>	 I just had one created but it doesn't have any - I think I remember you saying that there should be some 
[18:53:54] <Damianz>	 there should be, you'll have issues if there isn't
[18:54:32] <Thehelpfulone>	 thehelpfulone@bastion1:~$ ssh utrs
[18:54:33] <Thehelpfulone>	 ssh: Could not resolve hostname utrs: Name or service not known
[18:54:49] <Thehelpfulone>	 oh wait, I need to create an instance first :P
[18:55:49] <labs-home-wm>	 09/28/2012 - 18:55:49 - Created a home directory for deltaquad in project(s): utrs
[18:56:22] <giftpflanze>	 is there something like the user@toolserver.org email address on labs?
[18:58:57] <Thehelpfulone>	 hmm, good question - do you know about that Ryan_Lane?
[18:59:10] <Damianz>	 'no'
[18:59:30] <giftpflanze>	 will there be?
[19:00:37] <Thehelpfulone>	 giftpflanze, what do you typically use that email address for, as a forwarder or an actual email address?
[19:00:48] <labs-home-wm>	 09/28/2012 - 19:00:48 - User deltaquad may have been modified in LDAP or locally, updating key in project(s): utrs
[19:01:18] <giftpflanze>	 on ts it is actually always forwarded, but limited for use related to tools, bots, etc.
[19:01:33] <^demon>	 Ryan_Lane: So yesterday while you were gone, I did the first of the gerrit2 cleanups. <https://gerrit.wikimedia.org/r/#/c/25508/> lets us use a systemaccount{ gerritslave } instead :)
[19:02:31] <Thehelpfulone>	 yeah I mean on UTRS we use it to send emails for password reset features as an example
[19:04:15] <giftpflanze>	 oh, i deliver emails to mentors of de:aau
[19:20:07] <wm-bot>	 Change on 12mediawiki a page Developer access was modified, changed by Isarra link https://www.mediawiki.org/w/index.php?diff=588424 edit summary: 
[19:32:40] <cupco>	 hello I would like to make a script in the Bots project to search for new enwiki editors who have used "<ref" at least twice and list them for experienced editors to offer encouragement as was recently suggested (more generally) in a research paper. One of the doc pages says I have to ask petan (who is not here) for an account
[19:32:54] <cupco>	 ...but https://labsconsole.wikimedia.org/wiki/Nova_Resource:Bots suggests that any Bots project admin can add me
[19:33:24] <cupco>	 my labs login is cupco but I have no Nova or SSH yet
[19:34:04] <cupco>	 it will be a script for now but may turn into an automated bot later if I can not get people to participate
[19:34:20] <legoktm>	 have you done everything listed at https://labsconsole.wikimedia.org/wiki/Access#Initial_log_in_and_password_change
[19:35:06] <cupco>	 ah, no I have not because the procedure was somewhat different than that so I stopped reading it. Thanks.
[19:35:27] <cupco>	 the initial login forced a password change. I will set up a SSH key now
[19:38:38] <legoktm>	 cupco: you need to make sure that your labsconsole login password is as strong or stronger than your SSH key so you may need to reset it again
[19:44:08] <cupco>	 "error: The requested URL returned error: 403 while accessing https://gerrit.wikimedia.org/r/p/test/mediawiki/extensions/examples.git/info/refs "
[19:46:57] <legoktm>	 did you add your ssh key to gerrit?
[19:48:07] <cupco>	 thanks, missed that...
[19:48:49] <legoktm>	 i have to go now, ill be on again in like 30 minutes, but someone else here should be able to help you
[19:50:51] <cupco>	 okay I added the ssh key to gerrit and get the same clone error
[19:52:52] <cupco>	 are gerrit ids case-sensitive? Should I be "Cupco" instead of "cupco"?
[19:53:23] <cupco>	 that doesn't help; still get error: 403 while accessing https://gerrit.wikimedia.org/r/p/test/mediawiki/extensions/examples.git/info/refs 
[19:58:44] <awight>	 Hi opsen, I'd like to create two labs projects, "Fundraising-awight" and "Nonlinear"
[19:59:51] * Damianz  pokes andrewbogott

[20:01:04] <Damianz>	 If anyone likes php feel free to review https://gerrit.wikimedia.org/r/25700
[20:01:13] <Damianz>	 seems to work but I'm sure there's an issue with it somewhere
[20:04:29] <Damianz>	 awight: I'd just drop an email to the mailing list, the few people that can create projects aren't here at the moment
[20:04:41] <Damianz>	 Include your wiki/shell name
[20:04:42] <awight>	 Damianz: ah, thanks for the tip!
[20:07:41] <andrewbogott>	 awight:  Do you have a labs account already?  And, if so, what's your username?
[20:08:29] <Damianz>	 Oh andrew is here :P
[20:09:47] * andrewbogott  confese to having an erratic telepresence

[20:09:53] <andrewbogott>	 *confesses
[20:10:06] <awight>	 andrewbogott: yep, thank you. "adamw"
[20:10:55] <labs-home-wm>	 09/28/2012 - 20:10:55 - Creating a home directory for cupco at /export/keys/cupco
[20:11:52] <wm-bot>	 Change on 12mediawiki a page Wikimedia Labs/Toolserver features wanted in Tool Labs was modified, changed by Giftpflanze link https://www.mediawiki.org/w/index.php?diff=588437 edit summary: +email
[20:15:34] <wm-bot>	 Change on 12mediawiki a page Wikimedia Labs/Toolserver features wanted in Tool Labs was modified, changed by Nemo bis link https://www.mediawiki.org/w/index.php?diff=588438 edit summary: +l10n
[20:15:44] <labs-home-wm>	 09/28/2012 - 20:15:44 - Creating a project directory for nonlinear
[20:15:45] <labs-home-wm>	 09/28/2012 - 20:15:44 - Creating a project directory for fundraising-awight
[20:15:45] <labs-home-wm>	 09/28/2012 - 20:15:45 - Created a home directory for andrew in project(s): fundraising-awight
[20:15:54] <labs-home-wm>	 09/28/2012 - 20:15:54 - Updating keys for cupco at /export/keys/cupco
[20:16:36] <andrewbogott>	 awight:  OK, I think you're all set.  Do you have any questions right away?
[20:16:51] <Damianz>	 do they have default sec rules?
[20:16:59] <awight>	 andrewbogott: nope, maybe after I look around.
[20:17:07] <andrewbogott>	 Damianz:  Yeah, I added them by hand.
[20:17:11] <Damianz>	 :)
[20:17:13] <Damianz>	 Just checking
[20:17:29] <andrewbogott>	 awight:  OK.  Your project names are all lowercase because starting with a Capital Letter seems to be forbidden
[20:18:06] <giftpflanze>	 for tool labs will there be public repository hosting?
[20:18:14] <Damianz>	 gerrit
[20:18:29] <awight>	 ;) i actually took my cue from 'List projects' but apparently something is running ucfirst
[20:18:37] <giftpflanze>	 is it well-documented?
[20:18:59] <Damianz>	 kinda-of
[20:19:06] <andrewbogott>	 awight:  Yeah, I suspect that that validation is both new and overly strict.
[20:19:22] <andrewbogott>	 awight:  Before you create instances you'll probably want to think about firewall rules.  There's a brief summary here:  https://labsconsole.wikimedia.org/wiki/Help:Security_Groups
[20:19:24] <awight>	 rats. i still cannot create an instance?
[20:19:30] <awight>	 ah thanks
[20:19:55] <andrewbogott>	 Also you may need to log out and in again, people seem to've been having trouble with that lately.
[20:20:00] <Damianz>	 http://www.mediawiki.org/wiki/Gerrit contains info on the wikimedia gerrit install, on which you can request repos for stuff via ^deamon
[20:20:16] <Damianz>	 'Please note that Gerrit doesn't work well with Internet Explorer, and using a different browser is recommended.' does anything work *well* with ie?!
[20:20:38] <giftpflanze>	 nah, burn it with fire ;)
[20:20:47] <jerith>	 Damianz: microsoft.com, I'd guess. :-P
[20:20:48] <labs-home-wm>	 09/28/2012 - 20:20:48 - User adamw may have been modified in LDAP or locally, updating key in project(s): nonlinear,fundraising-awight
[20:21:13] <Damianz>	 I wouldn't be surprised if their devs hate ie too
[20:21:22] <awight>	 andrewbogott: okay looking good, I can add instances
[20:23:21] <andrewbogott>	 awight:  cool.  The thing with security groups is:  You can change the settings /in/ a security group after an instance is running, but you cannot change which security groups an instance belongs to once it's running.  That trips people up somewhat often (where 'people' includes me).
[20:24:03] <awight>	 yeah, EC2 has the same feature...
[20:24:26] <Damianz>	 Which sorta make sense.. if you create a security group per instance type but is REALLY ANNOYING if you forget :)
[20:25:31] <andrewbogott>	 Yeah, I'm in the habit of warning people because it's sad to have to trash and rebuild an instance just because of a firewall rule.
[20:25:48] <labs-home-wm>	 09/28/2012 - 20:25:48 - User adamw may have been modified in LDAP or locally, updating key in project(s): bastion
[20:25:54] <andrewbogott>	 And, the more I remind people, the less likely I am to forget and make the mistake myself.
[20:26:23] <Damianz>	 I had to try like 4 times the other day betwean puppet being fail, forgetting security groups and ryan breaking virt5
[20:28:07] <legoktm>	 question: if i wanted to move/write a few of my toolserver tools over to labs, i would put them in /data/projects/public_html/legoktm right?
[20:29:02] <Damianz>	 yes
[20:29:20] <Damianz>	 that would be accessible on bots.wmflabs.org/~legoktm
[20:29:33] <legoktm>	 so is there no tools.wmflabs.org?
[20:29:41] <legoktm>	 or are they supposed to be on bots
[20:29:56] <andrewbogott>	 Damianz:  It won't necessarily be loaded by an apache though, will it?  I presume that when he says public_html...
[20:29:58] <Damianz>	 Well bots is for bots, there's not currently tools though that could be an idea
[20:30:23] <Damianz>	 andrewbogott: I thought he was talking about bots, which in that setup is moduserdir'd on bots.wmflabs.org to that dir
[20:30:26] <giftpflanze>	 wasn't there a project for that?
[20:30:30] <andrewbogott>	 Ah, ok.
[20:30:38] * Damianz  stabs gerrit for making his commit line broken

[20:30:51] <labs-home-wm>	 09/28/2012 - 20:30:50 - Created a home directory for ynhockey in project(s): wlmjudging
[20:30:53] <Damianz>	 Someone talked about making a tools project, I think it got created but no idea if it has any instances
[20:31:02] <labs-home-wm>	 09/28/2012 - 20:31:02 - Creating a home directory for ynhockey at /export/keys/ynhockey
[20:31:09] <Damianz>	 Wouldn't be hard to do, it's like a 10min install and you can re-use my crappy script
[20:32:44] <cupco>	 I need to know this too. I want to make an API script which doesn't edit but acts like a read-only bot, displaying html and emailing stuff to people who sign up for it. Is that a bot or a tool?
[20:32:47] <Damianz>	 https://labsconsole.wikimedia.org/wiki/Nova_Resource:Webtools
[20:33:07] <Damianz>	 It has no instances currently
[20:33:08] <giftpflanze>	 what do you mean with displaying html
[20:33:24] <Damianz>	 Talk to Platonides about it
[20:33:39] <legoktm>	 Damianz: who do you talk to about creating a new instance for that then?
[20:33:40] <cupco>	 I want to make a page where people can visit to see a list of all the new enwiki editors who have added "<ref" twice
[20:33:42] <Damianz>	 If he wants something setting up I'd be happy to replicate along the lines of what bots has
[20:33:54] <Damianz>	 Which needs puppetizing and could be a generic labs role
[20:34:15] <legoktm>	 er who do i* talk to
[20:34:23] <awight>	 andrewbogott: I've added an ssh key to Special:NovaKey, how long does it take to propagate to my instance?
[20:34:26] <Damianz>	 legoktm: Platonides
[20:34:31] <legoktm>	 ok
[20:34:36] <giftpflanze>	 sounds like both, but more like a tool
[20:34:48] <legoktm>	 Platonides: Could you create an instance for the Webtools project please?
[20:34:49] <andrewbogott>	 awight:  I think you'll get a bot message in this channel when it's ready.  Shouldn't take but a few minutes.
[20:35:16] <awight>	 great!  the management console is awesome.
[20:35:18] <cupco>	 do Bots instances not have web servers?
[20:35:40] <giftpflanze>	 bots has a web server
[20:35:46] <labs-home-wm>	 09/28/2012 - 20:35:46 - User adamw may have been modified in LDAP or locally, updating key in project(s): nonlinear,fundraising-awight
[20:35:50] <giftpflanze>	 which makes webtools somewhat redundant
[20:35:50] <Damianz>	 bots has bots-apache1, if you but stuff in /data/project/public_html/<username> which is accessible by you you can use bots.wmflabs.org/~username
[20:35:58] <labs-home-wm>	 09/28/2012 - 20:35:57 - Updating keys for ynhockey at /export/keys/ynhockey
[20:35:58] <labs-home-wm>	 09/28/2012 - 20:35:57 - Updating keys for adamw at /export/keys/adamw
[20:36:02] <Damianz>	 Well bots is really for *bots*.
[20:36:14] <giftpflanze>	 it would be better to separate that, though
[20:36:15] <Damianz>	 Some bots have related web tools, but there is also just webtools.
[20:36:17] <legoktm>	 Damianz: does the public_html/ have cgi support?
[20:36:18] <cupco>	 I think I should ask for bots, because if people don't sign up I will ask for bot approval and make it an automated thing if approved
[20:36:32] <Damianz>	 legoktm: I don't think so, though it wouldn't be hard to add.
[20:36:49] <legoktm>	 Alright, who can I talk to about that?
[20:36:58] <Damianz>	 for bots? or webtools?
[20:37:04] <legoktm>	 bots preferably
[20:37:20] <Damianz>	 I can probably sort bots.
[20:37:28] <cupco>	 my goal is to get real human editors to sign up for the weekly email of new editors who have added "<ref" twice or more, but I'm pretty sure I could get bot approval if nobody signs up
[20:37:54] <Damianz>	 Personally I'd prefer 'webtools' to support a more vhost based system that is mapped back to users because ~/<username> rather sucks and is very personal not collaberative.
[20:37:57] <cupco>	 ...or if the people who do sign up don't end up encouraging the newbies
[20:38:36] <giftpflanze>	 indeed
[20:39:29] <cupco>	 anyway while my shell request is pending I will keep refining my API script here at home
[20:40:17] <Damianz>	 legoktm: Ok, cgi-bin should in theory work
[20:41:44] <legoktm>	 http://bots.wmflabs.org/~legoktm/cgi-bin/test.py doesnt seem to be working
[20:42:23] <Damianz>	 1sec
[20:44:21] <Damianz>	 Added the handler for .py, it had .pl and .cgi only before. Also made your script executable.
[20:44:48] <legoktm>	 ah forgot about that
[20:44:49] <legoktm>	 thanks
[20:45:04] <legoktm>	 works, thank you!
[20:45:30] <Damianz>	 You should be able to user .htaccess stuff to specify extensions.
[20:45:45] <labs-home-wm>	 09/28/2012 - 20:45:45 - User ynhockey may have been modified in LDAP or locally, updating key in project(s): wlmjudging
[20:45:48] <Damianz>	 We need to work on 'what not to install/run' and some general security guidelines though.
[20:45:53] <labs-home-wm>	 09/28/2012 - 20:45:53 - Updating keys for ynhockey at /export/keys/ynhockey
[20:46:40] <legoktm>	 I'm not too familiar with how .htaccess works…but I'll look into it if something doesnt work
[20:47:30] <Damianz>	 Well you'd add something like 'AddHandler cgi-script .myext' in .htaccess and that would apply. It's global now though.
[20:47:43] <Damianz>	 Sometimes I wish there was a <<cgi everything here ever>> option
[20:49:02] <legoktm>	 Final question for now (i think), there would be no privacy-policy/other issue if I used TUSC to authenticate users until labs has its own authentication process right?
[20:49:37] <Damianz>	 As long as you display the labs disclaimer that would be ok
[20:49:54] <Damianz>	 https://www.mediawiki.org/wiki/Wikimedia_Labs/Agreement_to_disclosure_of_personally_identifiable_information
[20:50:43] <legoktm>	 ok sounds good
[20:56:54] <Damianz>	 'Spammers are stupid. Are you a spammer? ' heh captca
[21:02:45] <Damianz>	 Hi Ryan, if you could look at https://gerrit.wikimedia.org/r/#/c/25700/ and tell me if where I've put the code sucks at somepoint that would be awesome.
[21:06:45] <Ryan_Lane>	 yeah, i saw this come in and it's awesome :)
[21:06:51] <Damianz>	 :)
[21:07:00] <Ryan_Lane>	 I think it's probably OK to remove people from all projects, btw
[21:07:01] <Damianz>	 it seems to work, which is surprising
[21:07:11] <Ryan_Lane>	 and realistically, it's needed to stop being from sshing in
[21:07:25] <Damianz>	 Yeah, it's really the only way without changing the way it works
[21:07:43] <Damianz>	 Shouldn't be that hard... I wonder if there's a function to get user projects, though I could just query ldap
[21:07:52] <Damianz>	 Will come back with an update in a while then
[21:07:56] <Ryan_Lane>	 I'd put the hook into the user class, since it applies to users
[21:08:28] <Ryan_Lane>	 hm
[21:08:30] <Ryan_Lane>	 or does it....
[21:08:34] <Damianz>	 The main reason I didn't was because the user class requires a logged in user as far as I can tell
[21:08:39] <Ryan_Lane>	 ah
[21:08:40] <Ryan_Lane>	 right
[21:08:45] <Ryan_Lane>	 well, it can be static
[21:08:57] <Damianz>	 true, it's called static anyway
[21:09:00] <Damianz>	 Probably best to move it
[21:09:33] <Ryan_Lane>	 should probably change the name too
[21:09:38] <Ryan_Lane>	 manageShellAccess?
[21:09:43] <Damianz>	 I was going to do something cool like loop over each group and check if they have loginviashell access, but it seems I can just call the user check as the hook runs after the change.
[21:10:12] * Ryan_Lane  nods

[21:10:34] <Ryan_Lane>	 you can get a list of projects for a user
[21:11:19] <Ryan_Lane>	 user->getProjects
[21:11:31] <Ryan_Lane>	 the user class doesn't require login
[21:11:46] <Ryan_Lane>	 you can get an instance, and it'll pull the info from LDAP
[21:11:52] <Ryan_Lane>	 then you can do $user->getProjects()
[21:11:59] <Damianz>	 Awesome
[21:12:00] <Ryan_Lane>	 then iterate over the projects and delete the user from it
[21:12:11] <Damianz>	 I was struggling to tell where used the admin and what required a authed user for ldap stuff
[21:12:23] <Ryan_Lane>	 so, there's a weird check you need to do when creating a user
[21:12:32] <Ryan_Lane>	 see ChainAuth
[21:12:36] <Ryan_Lane>	 in the user class
[21:12:52] <Ryan_Lane>	 hm
[21:12:57] <Ryan_Lane>	 maybe not?
[21:13:05] <Ryan_Lane>	 I thin it needs the wiki user name
[21:13:09] <Ryan_Lane>	 yeah, it does
[21:13:37] <Ryan_Lane>	 ah
[21:13:45] <Ryan_Lane>	 to delete a member from a project you need to pass the right username
[21:14:03] <Ryan_Lane>	 so, you get a user using the wiki user name
[21:14:09] <Damianz>	 mName is the mw username?
[21:14:12] <Ryan_Lane>	 and either use the uid or username based on the config option
[21:15:09] <Ryan_Lane>	 oh
[21:15:11] <JasonDC>	 Ryan_Lane, can you add user Ynhockey to the Bastion project
[21:15:13] <Ryan_Lane>	 $this->userLDAP = new OpenStackNovaUser();
[21:15:20] <Ryan_Lane>	 just call it with no arg
[21:15:28] <Ryan_Lane>	 it'll create itself properly
[21:15:46] <Damianz>	 kk, 1sec let me see if this works
[21:16:13] <Ryan_Lane>	 JasonDC: done
[21:16:21] <JasonDC>	 thanks
[21:16:27] <Ryan_Lane>	 yw
[21:16:53] <Ryan_Lane>	 I should really make a function that gives back a proper name based on the config option
[21:17:16] <Ryan_Lane>	 so that the if isn't needed when using it elsewhere
[21:17:27] <Damianz>	 Tbf I feel like some of the code could be cleaner because it's hard to tell which object you're dealing with at a glance.
[21:17:38] <Ryan_Lane>	 what do you mean?
[21:19:26] <Damianz>	 Well you're dealing with the mw user, ldap user and openstack user most of the time together. In a couple of places there isn't abstraction back to the user class as far as I can tell
[21:19:49] * Damianz  notes it would help if he could spell his username

[21:20:04] <Ryan_Lane>	 well, userNova is the nova controller, in the user's context
[21:20:28] <Ryan_Lane>	 userLDAP is the ldap user
[21:20:44] <labs-home-wm>	 09/28/2012 - 21:20:44 - Created a home directory for ynhockey in project(s): bastion
[21:22:38] <Ryan_Lane>	 so, there's only two user classes. mw's and the ldap one
[21:22:43] <Ryan_Lane>	 I rarely use the MW one
[21:24:26] <Damianz>	 I think I got this
[21:25:49] <labs-home-wm>	 09/28/2012 - 21:25:48 - User ynhockey may have been modified in LDAP or locally, updating key in project(s): bastion
[21:27:12] <Ryan_Lane>	 cool
[21:27:28] <Ryan_Lane>	 we can refactor if the code is confusing
[21:27:38] <Ryan_Lane>	 I think it's a matter of getting used to how things work, though
[21:28:31] <Ynhockey>	 i'm trying to connect with SSH but after entering the passphrase it throws me out: Server unexpectedly closed network connection
[21:28:50] <Ynhockey>	 is this a possible auth error or actually a server problem?
[21:29:01] <Ynhockey>	 i'm connecting to: bastion.wmflabs.org
[21:29:27] <Damianz>	 Yeah, I'm not that up on mediawiki either so it's like wondering around in the dark with doc
[21:29:30] <Damianz>	 s
[21:30:53] <Damianz>	 That code works on the dev env removing/adding myself from the group and looks vaugly ok logic wise to me.
[21:31:04] <Damianz>	 https://gerrit.wikimedia.org/r/#/c/25700/3
[21:31:15] <Damianz>	 Though gerrit probably just spammed emails and I've not got my inbox open heh
[21:31:35] <Damianz>	 Ynhockey: It doesn't allow password access
[21:31:43] <Damianz>	 You need to add your key on the wiki and use key auth
[21:31:53] <Damianz>	 If you've never used key auth before I'll find the help page that explains it
[21:32:15] <giftpflanze>	 bot tells that he has
[21:33:48] <Ynhockey>	 no passphrase
[21:34:00] <Ynhockey>	 like when you enter with your key
[21:34:02] <Ryan_Lane>	 Ynhockey: you have to use ssh keys
[21:34:06] <Ynhockey>	 you need to enter your private key's passphrase
[21:34:19] <Ynhockey>	 i tried without a password and it booted me out even earlier
[21:34:23] <Ynhockey>	 *passphrase
[21:35:15] <Ryan_Lane>	 ah
[21:35:16] <Ryan_Lane>	 sec
[21:35:27] <Ryan_Lane>	 Ynhockey: try now
[21:35:31] <Ryan_Lane>	 stupid nscd cache
[21:35:46] <labs-home-wm>	 09/28/2012 - 21:35:46 - Created a home directory for cupco in project(s): bastion
[21:36:05] <Ynhockey>	 oh, wonderful, it works
[21:36:08] <Ynhockey>	 thanks :)
[21:36:09] <Ryan_Lane>	 great :)
[21:36:09] <sumanah>	 hi blackjack48 
[21:36:09] <Ryan_Lane>	 yw
[21:36:22] <Ynhockey>	 but what was said here about username/password auth... you should consider it anyway ;)
[21:36:40] <Ryan_Lane>	 definitely don't want that
[21:36:43] <Ynhockey>	 the process as it stands now to get a working account is too complicated for most people to bother
[21:36:50] <Ynhockey>	 and i'm a developer and manage linux server
[21:36:53] <sumanah>	 Ynhockey: my sympathies
[21:36:54] <Ynhockey>	 *servers
[21:37:00] <Ryan_Lane>	 passwords are very insecure for ssh
[21:37:16] <Ynhockey>	 well as i understand it, you want to make this public
[21:37:22] <Ynhockey>	 so i can see your point
[21:37:38] <Ryan_Lane>	 ok. gotta go
[21:37:39] <Ryan_Lane>	 back in a while
[21:37:49] <Ynhockey>	 although for a toolserver-like environment, if you don't trust someone to pass their password securely then you shouldn't be giving them an account in the first place
[21:38:03] <Ynhockey>	 sumanah: maybe we'll talk about it in hong kong if i make it :)
[21:38:19] <Ynhockey>	 (not necessarily about username/password auth, but about simplifying the process)
[21:38:34] <giftpflanze>	 at the ts, it's the same process
[21:38:41] <Ynhockey>	 yeah
[21:38:45] <Ynhockey>	 and it's just as bad
[21:38:46] <sumanah>	 Ynhockey: Hong Kong is so many months away! It would be great to start the discussion sooner, on the labs-l mailing list.
[21:38:48] <giftpflanze>	 ^^
[21:38:57] <Ynhockey>	 :)
[21:39:18] <sumanah>	 however of course it will also be good to discuss labs next summer
[21:39:30] <sumanah>	 I fully expect we will BASK in what a useful platform it is
[21:39:37] <sumanah>	 like lizards on a nice warm rock
[21:40:48] <labs-home-wm>	 09/28/2012 - 21:40:47 - User cupco may have been modified in LDAP or locally, updating key in project(s): bastion
[21:43:47] <Damianz>	 I don't think password auth is the issue
[21:43:57] <Damianz>	 Lack of documentation and workflow for new users is
[21:44:06] <Damianz>	 Along with building a community to provide help and management
[21:44:32] <Damianz>	 Little annoying things that can be fixed technically (like not getting ssh access, after a ssh request is approved) we can work on fixing
[21:45:32] <legoktm>	 The documentation for new users isn't very good…its spread out over quite a few places. Most of the people here end up having the same questions I had when I first came here
[21:46:06] <giftpflanze>	 we need a faq ^^
[21:46:42] <legoktm>	 I wouldnt mind working on one, I'm just a bit busy this week
[21:48:17] <Damianz>	 We need to move some stuff from mediawiki.org to labsconsole, rewrite the frontpage and workflow of getting into the docs.
[21:48:29] <Damianz>	 I've been meaning to give some bits a shot but sadly keep getting busy
[21:55:51] <sumanah>	 giftpflanze: legoktm -- more help with docs is ALWAYS a great thing to do -- even a barebones list of bullet points is something to start
[21:56:07] <sumanah>	 I know dan-nl has been working on that
[21:56:29] <sumanah>	 putting stuff on https://labsconsole.wikimedia.org/wiki/Help:Getting_Started or its talkpage would be a good quick thing to do
[21:56:42] <sumanah>	 legoktm: https://labsconsole.wikimedia.org/wiki/Help:Getting_Started is better than it was, for sure
[21:56:59] <sumanah>	 legoktm: if you can list out the main questions you think new people have, I'll start a FAQ real quick
[21:57:10] <legoktm>	 I did not know that page even existed...
[21:57:15] <Damianz>	 I remember when there wasn't *any* docs
[21:57:25] <giftpflanze>	 it is so cluttered that i haven't the slightest idea
[21:57:28] <sumanah>	 legoktm: are you on the labs-l mailing list?
[21:57:38] <legoktm>	 No, I probably should be
[21:57:45] <sumanah>	 giftpflanze: what specifically is too cluttered?
[21:57:51] <giftpflanze>	 the docs ;)
[21:57:59] <Damianz>	 I'd like to change 'getting started' and split it into 'no idea', 'kinda know what I'm doing' 'just give me the overview, I know shit'
[21:58:03] <sumanah>	 legoktm: yes, yes, you really should join; we mentioned https://labsconsole.wikimedia.org/wiki/Help:Getting_Started on that list this week
[21:58:12] <Damianz>	 And cross link it from the home page, the link in the sidebar is impossible to find
[21:58:51] <legoktm>	 Just signed up
[21:58:52] <Damianz>	 Since people who use linux stop reading if you start talking about how keys works and people who write php get annoyed when you assume they know how to login to a linux box over ssh.
[21:59:46] <sumanah>	 giftpflanze: I didn't understand: when you said "I haven't the slightest idea" I actually didn't know what you "didn't have the slightest idea" about. How to get started? what frequent questions people have? something else?
[22:00:07] <sumanah>	 asking these questions is the only way for me to get info to make useful docs with!
[22:00:14] <giftpflanze>	 i have no overview over the documentation
[22:00:22] <sumanah>	 giftpflanze: ok. How about https://labsconsole.wikimedia.org/wiki/Help:Getting_Started ?
[22:00:30] <sumanah>	 is it a useful overview?
[22:00:44] <sumanah>	 or https://labsconsole.wikimedia.org/wiki/Help:Contents ?
[22:01:12] <Damianz>	 sumanah: A FAQ/common issues and how to fix them might be an idea
[22:01:14] <sumanah>	 also, Damianz, can you please give user:Sumanah the ability to edit the mainpage of labsconsole ?
[22:01:18] <Damianz>	 if anyone actually read it
[22:01:38] <legoktm>	 sumanah: The Getting Started page answers most of the questions on how to sign up/login to labs
[22:01:43] <Damianz>	 sumanah: You'll need andrewbogott or Ryan to do that, I don't have access to edit it atm since we changed it.
[22:02:02] <andrewbogott>	 I turn out to not be able to edit the wiki either… today at leat.
[22:02:16] <Damianz>	 heh
[22:02:23] <andrewbogott>	 Hm, although maybe I have the power to grant the power...
[22:02:23] <Damianz>	 petan can edit it
[22:02:27] <Damianz>	 it's restricted to a gropu
[22:02:59] <legoktm>	 Most of my questions are more related to which instance to log into, what software is installed, what can i install, who to talk to about installing, where to store files (/data/projects/), where to put webtools, if there is CGI (which Damianz turned on for me today)
[22:03:11] <legoktm>	 if/where are there mysql servers for usage
[22:03:28] <andrewbogott>	 sumanah, did that do it?  If you log out and in can you edit labsconsole?
[22:03:45] <sumanah>	 YES thanks
[22:04:07] <legoktm>	 Also for toolserver users, if there are any quotas, memory limits
[22:04:13] <Damianz>	 Btw andrewbogott, did you see https://gerrit.wikimedia.org/r/#/c/25700/
[22:04:59] <Damianz>	 legoktm: Partly the issue there is /projects/ have seperate documentation
[22:05:12] <Damianz>	 But I think an *overview* how how things are seperated by 'projects' would be an idea
[22:05:26] <sumanah>	 Damianz: When you say "project" do you mean Labs projects or some other thing?
[22:05:27] <Damianz>	 Because if you're use to the TS setup then it's very different
[22:05:33] <Damianz>	 sumanah: yes
[22:05:34] <sumanah>	 (the word "project" is overloaded)
[22:05:39] <Damianz>	 exactly
[22:05:43] <legoktm>	 True, but since most users are joining the bots group it probably needs better documentation
[22:05:50] <Damianz>	 it does
[22:05:54] <andrewbogott>	 Damianz:  I'm unsure about the removal part.  We might institute temporary bans, in which case we'd lose the history of which project someone belonged to, right?
[22:06:06] <mutante>	 http://puppetlabs.com/blog/module-of-the-week-martasd-mediawiki/
[22:06:07] <legoktm>	 Damianz: Yes the switch from toolserver to labs is very different
[22:06:27] <mutante>	 Deploy, configure, and manage multiple instances of MediaWiki.
[22:06:56] <Damianz>	 andrewbogott: I was half and half on that, first rev was just removing them from bastion (which kinda does the job, but not fully). Ryan said removing all would be ok, I agree history is an issue if we re-enable stuff. I'd hope disabling it is only caused by something serious.
[22:07:23] <Damianz>	 I suppose banning someone seriously would be removing their keys, changing the email and killing the pass though
[22:07:43] <Damianz>	 mutante: Cool
[22:08:19] <Damianz>	 legoktm: We can't really change the docs to be bots specific, but we need to improve project documentation as well as general docs. Bots has some stuff, but half of it is out of date.
[22:08:48] <giftpflanze>	 perhaps a migrating from toolserver guide
[22:08:57] <Damianz>	 andrewbogott: thinking about it, I might make a config option and we can go from there
[22:09:01] <legoktm>	 Damianz: yeah I understand, I meant more creating/improving the docs for the bots project
[22:10:21] <sumanah>	 ok, so, let's sprint, right now
[22:10:23] <sumanah>	 I have 15 minutes
[22:11:20] <legoktm>	 sprint?
[22:11:34] <sumanah>	 legoktm: right now, instead of talking about docs, let's make some docs
[22:11:38] <legoktm>	 oh ok
[22:11:39] <legoktm>	 sure
[22:11:45] <sumanah>	 http://piratepad.net/xbV4R2SCbB
[22:12:43] <sumanah>	 If you just paste some phrases in there, of stuff we should cover, I'll find links, turn things into wiki markup, etc etc
[22:12:49] <legoktm>	 ok
[22:13:12] <mutante>	 Damianz: oh there are even more on Puppet Forge http://forge.puppetlabs.com/modules?q=mediawiki&commit=Go
[22:13:21] <mutante>	 (they said they have like 500 modules by now)
[22:13:33] <Damianz>	 Ok, added a config options. Hopefully Ryan can review it later.
[22:13:58] <sumanah>	 mutante: that's interesting, can you send a link to that to mediawiki-l, if you are on that list?
[22:14:00] <sumanah>	 ( http://puppetlabs.com/blog/module-of-the-week-martasd-mediawiki/ )
[22:15:22] <mutante>	 sumanah: alright, yeah
[22:16:31] <sumanah>	 legoktm: http://lists.wikimedia.org/pipermail/labs-l/2012-July/000312.html and the mail just before it might be useful as material
[22:17:16] <sumanah>	 ssmollett: andrewbogott: http://piratepad.net/xbV4R2SCbB please remove any inaccuracies?
[22:17:45] <Damianz>	 mutante: sweet
[22:18:14] <andrewbogott>	 sumanah:  I think that ssmollet is an IRC ghost; she went back to work @ Google
[22:18:30] <sumanah>	 andrewbogott: oh she's not with us even part-time?
[22:18:34] <sumanah>	 anymore? :(
[22:18:39] <andrewbogott>	 Don't think so.
[22:19:47] <Damianz>	 aww
[22:31:14] <Damianz>	 Clearly typing too much
[22:32:24] <mutante>	 sumanah: mail is out
[22:32:45] <sumanah>	 thank you mutante 
[22:32:52] <sumanah>	 I figure those 3rdparty admins are interested
[22:33:15] <sumanah>	 ok, so, Damianz, andrewbogott, legoktm et al., the 15 minutes are up
[22:33:36] <sumanah>	 do you want me to take this away so you can go back to other things, or do you want to work for another 15 min?
[22:33:39] <Damianz>	 sumanah: I'll stop spamming you then :P
[22:33:54] <Damianz>	 I'm going to bed soon, I have an exam first thing
[22:34:25] <Damianz>	 though 1 last thing
[22:34:31] <legoktm>	 I've added all the questions I have so it looks pretty good to me
[22:34:49] <andrewbogott>	 It needs tidying but I'm happy to let you do the tidying at a later date if you're willing :)
[22:35:10] <Damianz>	 that should do for now
[22:35:57] <Damianz>	 Now that can survive in piratepad for the next year and ther ewill be 6 of us that knows it exists :D
[22:36:33] <legoktm>	 :P
[22:38:29] <giftpflanze>	 ^^
[22:38:51] <sumanah>	 no, no, Damianz - if everyone else is done, I'll now transfer it to the wiki
[22:39:34] <giftpflanze>	 it should be bots specific
[22:39:36] <sumanah>	 Damianz: I know you and I are communicating across a vast cultural divide in which I am amazingly earnest and you are so ironic that you come out the other side into some kind of meta-earnest irony or something
[22:39:55] <giftpflanze>	 there's still too much general stuff (e.g. sudo)
[22:40:01] <sumanah>	 I learned my lesson with a year and a half working with Reedy :)
[22:40:12] <sumanah>	 giftpflanze: ok. what's missing that's bot-specific?
[22:40:18] <sumanah>	 we can add bullet points for those and flesh them out later
[22:40:35] <giftpflanze>	 it's not missing, it's the opposite, i have to take it away
[22:40:59] <sumanah>	 giftpflanze: ok, so, someone should ensure those bits are in the right place in the general documentation before removing them from this HOWTO
[22:41:08] <sumanah>	 can you do that?
[22:41:13] <giftpflanze>	 let me see
[22:42:25] <sumanah>	 useful places to put them: https://labsconsole.wikimedia.org/wiki/Nova_Resource:Bots https://labsconsole.wikimedia.org/wiki/Help:Getting_Started   https://labsconsole.wikimedia.org/wiki/Help:Development_recommendations_for_easily_moving_to_production https://labsconsole.wikimedia.org/wiki/Help:Security
[22:42:37] <sumanah>	 I'll be back in 5 min, grabbing pizza
[22:42:56] <giftpflanze>	 i'll just leave it there
[22:43:06] <Damianz>	 sumanah: Nothing wrong with irony :)
[22:43:42] <Damianz>	 You know my facebook about doesn't say 'mainly an ass' for nothing.
[22:47:07] <giftpflanze>	 sumanah: when you take it to the wiki be sure it remains as coloured as it is ;)
[22:54:17] <giftpflanze>	 would it be useful to keep a complete list of who is running what on what instance, and what special software (e.g. programming languages) are installed there?
[23:01:25] <Damianz>	 https://labsconsole.wikimedia.org/w/index.php?title=Nova_Resource:I-00000459&diff=next&oldid=7077 < really andrewbogott?
[23:02:20] <Damianz>	 giftpflanze: For projects like bots that would be useful, the problem is we're not standard about it. The idea is it's a dev environment so things are installed adhoc, longer term that would be 'documented' in puppet
[23:03:40] <andrewbogott>	 Damianz:  I hope that it isn't automatically adding one more blank line on every update :/
[23:03:42] <sumanah>	 giftpflanze: I think that, since any instance is running within a particular project, the project doc page would be where that sort of inventory should live
[23:03:47] <sumanah>	 it'll vary by project
[23:03:57] * sumanah  is going back & forth between this & a party in her kitchen

[23:04:35] <giftpflanze>	 this was only meant for the instances of bots
[23:04:42] <sumanah>	 oh
[23:06:07] <giftpflanze>	 but the setup will change anyway so it may not be that reasonable any more
[23:06:37] <sumanah>	 Right now, I'm gonna put this in my userspace on labsconsole and email a link to Ryan so he can edit it
[23:07:11] <sumanah>	 thanks for working on this everyone
[23:08:31] <wm-bot>	 Change on 12mediawiki a page OAuth/status was modified, changed by RobLa-WMF link https://www.mediawiki.org/w/index.php?diff=588473 edit summary: new status update
[23:09:33] <Damianz>	 ^ :(
[23:09:55] <legoktm>	 :(
[23:10:20] <legoktm>	 Any reason?
[23:10:22] <Damianz>	 We miss you csteipp ;)
[23:11:48] <sumanah>	 legoktm: Damianz - I don't know why that happened, but if you ask a question on the talk page you might get an answer.... I guess it depends on what fires the team might need to fight? https://www.mediawiki.org/wiki/Wikimedia_Platform_Engineering
[23:13:25] <Damianz>	 From what I've heard csteipp's just been busy, would really like to get openid into a state it can be used on labs as well as openid on the cluster =\ Might comment on the mailing list/project page later. Heading out shortly.
[23:14:04] * Damianz  wonders if paravoid is stil around. He's been idle for like 70hours maybe he snuck a holiday heh

[23:14:42] <sumanah>	 bye all, need to go to this party
[23:14:57] <Damianz>	 have fun
[23:15:04] <sumanah>	 thanks! good weekend to you all
[23:23:04] <csteipp>	 Damianz: Sadly, vulnerabilities in the live site and spam tools are taking priority. 
[23:24:14] <Damianz>	 Very much sadly. While other stuff is more important it slowly creaps up the list and might eventually get there :)
[23:26:34] <Damianz>	 http://seclists.org/nmap-dev/2012/q3/1050 that's freaking awesome