[00:04:51] I don't know if it's special at all. [00:05:07] It just provides some additional security since ops aren't forwarding their keys to a system that has wide access. [00:05:14] * andrewbogott guesses at the rational [00:05:27] *rationale [00:07:07] Of course I still don't have access to it ^^ [00:07:16] Nor does anyone outside of ops who has shell [00:07:21] (and I even have root) [00:07:38] I poked Ryan about this a couple of times, I'll poke him again after he gets back from the OpenStack summit [00:08:00] <^demon|busy> It's for root users. [00:08:06] <^demon|busy> It's based on ldap/ops group, iirc. [00:11:20] MaxSem: I have started to update renderd.conf.erb to support multiple renderd instances [00:17:44] ^demon|busy: I am a root user ;) [00:18:37] <^demon|busy> I know. But I don't think you're in ldap/ops. [00:18:43] <^demon|busy> (Which also grants puppet repo access) [00:18:50] Right [00:18:51] No, I'm not [00:19:05] I may well be the only root that's not in it [00:19:26] (which is fine, I shouldn't have +2 in puppet) [00:20:58] <^demon|busy> +2 for everybody :) [00:36:32] "+2 for you! +2 for you! And +2 for you!" [07:58:17] . [07:58:17] !ping [07:58:17] pong [07:59:08] @requests [07:59:08] There are no shell requests waiting [12:29:23] [bz] (NEW - created by: Chris McMahon, priority: Unprioritized - normal) [Bug 47339] beta cluster: wrong MessagesEn.php file? - https://bugzilla.wikimedia.org/show_bug.cgi?id=47339 [13:05:20] [bz] (NEW - created by: Željko Filipin, priority: Unprioritized - normal) [Bug 47360] at en.wikipedia.beta.wmflabs.org Special:UserLogin opens after logging in instead of Main_Page - https://bugzilla.wikimedia.org/show_bug.cgi?id=47360 [13:12:36] !log deployment-prep update mobile cache (varnish-t3) to latest puppet manifests. [13:12:40] Logged the message, Master [14:09:21] paravoid: I have contacted debian-gis to try and see if it is possible to get mod_tile / renderd packaged for inclusion in debian ( http://lists.debian.org/debian-gis/2013/04/msg00003.html ) [14:22:38] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 0 minutes) [14:36:17] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 13 minutes) [14:49:43] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 27 minutes) [15:01:58] Hey Coren, can I ask you to do a native speaker check on two or three things where Lydia commented in the documented? [15:02:32] today I learned: Coren also speak german [15:02:50] :) [15:03:09] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 40 minutes) [15:03:42] hashar: I'll leave translation to French to the crowd. :) [15:16:40] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 54 minutes) [15:30:14] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 67 minutes) [15:43:46] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 81 minutes) [15:45:43] Coren: hey, glad you feel a bit better [15:47:51] is it possible to use api to check user permissions even if one doesn't have account on wiki [15:53:34] petan, what like https://wikitech.wikimedia.org/w/api.php?action=query&list=allusers&aufrom=Alex_Monk&auprop=rights ? [15:53:52] &aulimit=1 [15:54:28] mm [15:54:47] Or maybe you want groups instead? auprop=groups [15:54:58] See the help doc at api.php [15:55:07] k [15:55:27] right now if you grant user permissions and don't remove him from queue, the bot will still alert this channel [15:55:38] which is correct because queue should be empty anyway [15:55:41] but... [15:55:45] not ideal [15:56:17] @requests [15:56:17] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 93 minutes) [15:57:21] Warning: There are 1 users waiting for shell, displaying last 1: Mateng (waiting 94 minutes) [15:59:05] You could also do https://wikitech.wikimedia.org/w/api.php?action=query&list=users&ususers=Petrb|Alex_Monk&usprop=groups [15:59:25] If you want to be able to test a list all in one request [15:59:44] (might be worth merging list=users and list=allusers at some point) [16:02:06] !wmbot_api is https://wikitech.wikimedia.org/w/api.php?action=query&list=users&ususers=Petrb|Alex_Monk&usprop=groups [16:02:06] Key was added [16:02:20] notepad :D [17:09:43] can somebody please help me with putty? [17:10:47] Pyfisch: let's try [17:11:13] giftpflanze: you speak german right? [17:11:18] right ^^ [17:11:34] :-) sehr gut [17:12:32] also ich bin neu bei labs und möchte dort einen bot laufen lassen. es klappt bisher aber noch nicht einmal das einloggen in bastion [17:12:56] wie hast du es denn bis jetzt versucht? [17:14:08] so habe ich es bisher versucht: https://wikitech.wikimedia.org/wiki/Help:Putty#Connecting_to_your_instance [17:14:43] bei mir kommt dann allerdings eine kommandozeile nachdem ich "open" gedrückt habe und "login as:" [17:15:11] mh [17:17:20] und, hast du deinen labs-benutzernamen eingegeben? [17:18:43] ja, dann kommt aber disconnected [17:18:50] mhm [17:19:24] und "no supported authentication methods avaible (server sent:public key) [17:19:49] den schlüssel gibt es? [17:20:54] der öffentliche schlüssel ist im wikitech wiki hochgeladen, falls du das meinst [17:21:04] ich meine lokal [17:21:31] ja. [17:26:49] hast du auch https://wikitech.wikimedia.org/wiki/User:Wikinaut/Help:Access_to_instances_with_PuTTY_and_WinSCP probiert? [17:28:21] nein [17:28:55] aber oben steht "You have to make manually make your first connection from bastion to your instance" [17:29:37] bin mal kurz weg [17:30:54] ist doch alles blöd [17:49:33] MaxSem: Do you want me to work on / help with the puppet scripts for the multi tileserver setup? Or is it faster if you just do it? [17:53:07] morning apmon [17:53:31] I'm going to install Ceph in labs now [17:54:17] then pg, then tileservers [17:55:15] apmon, do you think how much work is needed to make it function in a multi-tileserver config? [17:55:54] I'm trying to concentrate on OSM these days, but distractions are multiple [17:56:31] not much. It should be just a bit in renderd.conf [17:56:37] I have started with it in maps-tileserver3 [17:57:25] You basically need to specify a list of IPs / hostnames that should act as rendering slaves. And then generate a list in renderd.conf accordingly [17:57:52] I thought we decided to render on the same machines as apaches [17:58:32] The central rendering queue needs to know the other rendering daemons though to pass requests on to them [17:58:51] ah [17:59:11] and as any rendering daemon can become the central rendering queue on failover, they all need to know about each other [17:59:42] ok, let's see what I can do [17:59:54] aiee, Ruby templates!:) [18:00:05] :-) [18:00:29] There might be better ways of doing this, that is up to the puppet experts... ;-) [18:01:07] So perhaps it is easier if you do it and then just ask me, if anything is unclear on how to set things up. [18:01:16] sure [18:02:52] Btw, to get mod_tile / renderd to use rados you need to set the tile_dir to rados://pool_name/path/to/ceph.conf instead of a file path [18:03:22] [bz] (RESOLVED - created by: Antoine "hashar" Musso, priority: Normal - enhancement) [Bug 44041] [OPS] adapt varnish mobile puppet class on beta - https://bugzilla.wikimedia.org/show_bug.cgi?id=44041 [18:16:27] Damianz, review SVP? https://gerrit.wikimedia.org/r/#/c/59860/ <- somewhat related to a patch of yours from a while back. [18:20:18] * petan|fu hugs Isarra [18:20:55] apmon, so other renderers should just be set with [renderd*] sections? do any values other than port and iphostname matter? [18:21:19] number of threads [18:21:22] * Isarra hugs petan|fu. [18:21:32] as it will send that number or requests at a time to the slave [18:21:51] Now what was that for? [18:22:11] you can also get renderd to use the other parameters by passing a --slave x in when starting renderd [18:22:38] Isarra I just thought you need it [18:22:57] :) [18:22:59] but I think in that case it can no longer act as central queue [18:23:25] need to go now, but will be back in a bit [18:31:19] petan|fu: Aye... thanks. >.< [18:32:02] you no happy for getting hugged :/ [18:32:09] shame on you [19:00:27] Ryan_Lane: I have a problem with security groups [19:00:51] Jan_Luca: what's the problem? [19:00:53] Althrough I add a rule for my service I can not access it form another instance [19:01:20] The definition is: 3306 3306 tcp 10.4.0.0/21 [19:01:34] Jan_Luca some instances have different subnet [19:01:40] I think [19:01:46] no [19:01:49] all one subnet [19:01:52] ok then no [19:02:04] but weren't u out of private [19:02:11] :o [19:02:19] Jan_Luca: what are the two instances? [19:02:19] in mail [19:02:25] petan|fu: we changed from a /24 to a /21 [19:02:34] which is what the email said ;) [19:02:38] ah [19:02:40] ages ago [19:02:45] Ryan_Lane: wikiversity-sandbox-frontend and wikiversity-sandbox-db1 [19:02:53] wait [19:02:59] these are in the same project? [19:03:07] if that's the case this isn't a security group issue [19:03:30] security groups only affect things between projects and from the outside world [19:03:39] inside of a project all communication is allowed [19:03:52] are you trying to make mysql available? [19:04:16] Ryan_Lane: They are in the same project and yes, I try to make mysql/mariadb available [19:04:29] did you make sure mysql is listening on 0.0.0.0? [19:04:35] by default it does not [19:05:25] Ryan_Lane: Oh, I thought, this would be standard [19:05:36] Yes, you are right [19:05:50] netstat shows me that it is listening on 127.0.0.1 [19:05:59] that'll do it :) [19:06:05] Jan_Luca, I fixed the security group bug from yesterday… are you having better luck now? [19:06:18] um… *service groups [19:07:07] andrewbogott: No, I cannot delete service groups and the groups are shown in the project filter, too... [19:07:29] Jan_Luca, is that happening right now, today? [19:07:48] andrewbogott: I tested it a minute ago [19:08:03] what project? [19:08:22] (I"m looking at my project filter, I don't see 'local-' in it. [19:08:24] ) [19:09:29] andrewbogott: Mhh, with wikiversity-sandbox I have no problems now [19:09:46] but "centralauth" does not work [19:10:02] its groups are shown in the list and cannot be deleted [19:10:18] Yes, groups that were created yesterday while the bug was present are 'stuck' [19:10:23] I will delete them manually. [19:11:48] Jan_Luca, I already removed those in the sandbox project. Are you aware of others (outside of centralauth)? [19:12:29] andrewbogott: I have no sysadmin rights outside of wikiversity-sandbox and centralauth [19:12:40] cool. I will clean up centralauth [19:12:45] and the groups of tools are not shown [19:14:29] OK, cleaned up. [19:14:37] what about the groups of tools? [19:14:47] andrewbogott: lol, fail [19:15:15] Damianz, it took months to notice. *shrug* [19:15:16] andrewbogott: I meaned, I have no problems with the groups of project where I'm only member like tools [19:15:26] I did wonder why that box was wrong a while back [19:15:55] Damianz: I simply never looked at that page. So I've always wondered, why do people keep telling me they're not in bastion when they clearly are? [19:16:34] petan|fu: Could you explain me why bind-address = 0.0.0.0 does not work? [19:16:34] It would be lovely to kill that page and pull everything from the api - would kill performance though [19:17:08] Damianz: Or the page could be updated via a push from Openstack when it notices changes. [19:17:14] Jan_Luca eh... what do you expect from it [19:17:17] and which service [19:17:32] andrewbogott: Well... we kinda modify users outside of openstack iirc [19:17:48] petan|fu: Ryan said that mysql does not listen on all address by default [19:17:51] Though yeah really openstack api for everything and use hooks for external serice stuff [19:17:56] Also that change looks goooood [19:17:57] so I wanted to change it to 0.0.0. [19:18:01] *0 [19:18:04] ah true [19:18:11] Jan_Luca just comment it out [19:18:25] it is set to 0.0.0.0 by default or localhost not sure now [19:18:40] but by DEFAULT it listens on all if [19:18:53] just the default config has it blocked [19:19:05] also not sure if this is the case of mariadb [19:19:21] you can always check the config of bsql01 [19:19:24] it's readable by all [19:20:14] petan|fu: thanks [19:21:02] I found my fault: I had two my.cnf: /etc/my.cnf and /etc/mysql/my.cnf [19:21:13] and I looked in the wrong one [19:21:49] ah [19:26:32] Item 10 of Labs Terms of Use (http://www.mediawiki.org/wiki/Wikimedia_Labs/Terms_of_use) states: "Use of Wikimedia logos is prohibited inside of Labs projects." Does this prohibit the use of WMF project logos, like the Wikipedia logo, Wikivoyage logo, etc? [19:27:06] o.O [19:27:39] 0.o [19:28:34] what is mw-jenkinsbot here for :o [19:28:37] does it work? [19:29:41] andrewbogott: Item 10 of Labs Terms of Use (http://www.mediawiki.org/wiki/Wikimedia_Labs/Terms_of_use) states: "Use of Wikimedia logos is prohibited inside of Labs projects." Does this prohibit the use of WMF project logos, like the Wikipedia logo, Wikivoyage logo, etc? [19:29:52] rogerhc we saw... but nobody knows [19:30:01] ok [19:30:10] oh u pingeg andrewbogott [19:30:12] nvm then [19:30:25] btw AFAIK he's no lawyer [19:31:03] well, that page is editable. So maybe I will just remove item 10 and see if anyone cares... [19:31:35] heh [19:31:44] rogerhc: I'm not sure. I'd advise you to send an email to the labs list about that, and mock up a custom logo in the meantime. [19:31:47] that's rogue way of dealing with law [19:32:05] rogerhc don't remove it pls without actually being clear on that [19:33:22] I'll send an email to labs-l [19:34:40] rogerhc: It makes sense to avoid using official logos in any case… if you have a mini version of a site running in labs, we wouldn't want users to confuse it for the real project. [19:35:50] I see the logic in that. However, the beta labs sites use the respective project logos, like Wikipedia and Wikivoyage [19:36:07] rogerhc: please don't edit the terms of use page [19:36:10] Yeah… probably it shouldn't... [19:36:16] Seems a contradiction of the ToU [19:36:36] rogerhc: Luis Villa and the WMF legal department will be responsive on this - please do send a note to the labs list and cc lvilla@wikimedia.org [19:36:55] ok [19:37:58] sumanah should that page be protected? [19:38:13] petan|fu: I think that question should also be in the email to labs-l & legl [19:38:14] legal [19:38:28] rogerhc can you add it? :D [19:38:44] btw I think it should be at wikitech [19:38:50] not mediawiki [19:40:47] rogerhc: There's a bug for that [19:41:03] * Damianz makes no comment about the bots usage of the labs logo [19:41:58] what's the bug # [19:44:44] 123I have no idea [19:47:46] * Damianz tickles hashar who loves beta and goes to find pizza [19:48:08] I think that bug has been resolved as it was for en - basically the logo was just removed iirc.... but that should apply to all [19:53:00] * Coren waves. [20:11:30] * Coren wonders whereabouts Ryan is. [20:11:35] @notify Ryan_Lane [20:11:36] I will notify you, when I see Ryan_Lane around here [20:14:01] Damianz: are you still babysitting the nagios instance ? ;D [20:14:12] yeah [20:14:25] brb pizza [20:14:33] Damianz: do you have a bug about the puppet freshness passive checks wich is never updated? [20:14:36] oops [20:18:01] hashar btw how u like nagios pretending to speak french XD [20:18:06] hehe [20:18:31] petan|fu: what do you mean ? [20:18:48] in chrome it say that nagios is in french [20:18:54] that it can translate it for you [20:19:04] because of borked header of html [20:19:04] I don't know why it is [20:19:07] some bug [20:19:29] I thought you are only potential hacker speaking french who could do that :D [20:20:11] hashar: Nope, but you've just reminded me I need to fix that [20:20:23] * petan|fu pats Damianz [20:20:36] there might a bug already can't remember [20:21:17] * Damianz meows [20:21:22] Isarra did you get your scholarship [20:21:26] for hackaton [20:21:46] if no I tihnk me and addshore gonna have no huggle users there to make guinea pigs of :D [20:22:05] well though there is no much to test [20:22:22] * addshore really should work out if he can go to hackathon [20:22:25] petan|fu: I don't know. I only tried signing up a couple of days ago - how long should it take to get rejected? [20:22:27] I still don't know if I should keep working on huggle 3 as now, or rewrite it to GTK or wxt or wx or QT [20:22:36] I don't think I can now :( Gotta move house that weekend [20:22:43] But man, having a working huggle would be nice. [20:22:49] Damianz: I have a house party that weekend ;p [20:22:50] Isarra tbh I don't know... I got rejected only once, that was with long distance before the event [20:22:55] I had to drop windows on my last main computer because it was too unstable. [20:23:07] Damianz addshore are u kidding me [20:23:12] ur not coming or what [20:23:21] My birthday is that weekend. [20:23:24] OMG [20:23:31] shall we all just have a party there then? :P [20:23:39] Next year can we arrange the date? :P [20:23:42] when I think of that my cats might want to be taken for a walk that weekend [20:23:48] there was a poll re the date [20:23:50] maybe I can't go as well [20:23:53] we circulated it, a lot [20:23:58] Also write huggle in java! /me hides [20:24:03] sumanah: I never saw it ;p [20:24:09] * addshore slaps Damianz [20:24:10] sumanah: You know I never see that until after [20:24:15] Damianz: addshore: where do you get your tech news? [20:24:21] * petan|fu kicks Damianz [20:24:23] the internets [20:24:34] the javaz [20:24:34] your news about MediaWiki-related stuff and Wikimedia tech stuff? [20:24:34] sumanah: it grows on eggplants and I pick it :P [20:24:39] more specific, please. I can't fix this unless you tell me your sources [20:24:58] sumanah: a little bit of everywhere ;p [20:25:03] addshore I think you got it on facebook from me [20:25:10] I've probably got an email but not read it tbh [20:25:12] petan|fu: yes [20:25:22] damn u guys [20:25:22] facebook told me when and where :P [20:25:36] what am I gonna do there without u [20:25:41] Talking of email - does anyone else have labs email missing? [20:25:48] petan|fu: hookers and whisky [20:25:54] heh [20:26:02] amsterdam... meh [20:26:04] that is famous [20:26:05] where is there a list of people that are going? :P [20:26:13] addshore: have you looked at the wiki page? [20:26:14] addshore on wiki [20:26:20] sumanah: what wiki page? :P [20:26:23] addshore and facebook [20:26:34] addshore you wanted to ping me not sumana :D [20:26:46] i wanted to ping you both :P [20:26:58] http://lists.wikimedia.org/pipermail/wikitech-announce/ is going to be more of a source for this stuff going forward ... we circulated info on Twitter & Identi.ca, toolserver mailing list, onwiki on various wikis, wikimedia-l, wikitech-l of course [20:27:06] https://www.mediawiki.org/wiki/Amsterdam_Hackathon_2013 is the relevant wiki page [20:27:35] eww twitter [20:27:48] sumanah next year you should add facebook ^^ [20:27:52] mhhm i should have at least 1 email from it somewhere :P [20:28:37] It's also possible to apply for a scholarship, if you register by 20 Apri (looks like I have 2 days) [20:29:05] petan|fu: I'm not on Facebook, but we'll suggest it to next year's organizers [20:29:15] ok [20:29:24] sumanah I am sure wikipedia is on facebook [20:29:29] and wikimedia [20:29:38] yes. [20:29:40] I think StevenW is maintaining these pages [20:29:47] socialmedia@ is the alias for that team [20:30:03] ah [20:30:03] cool [20:30:15] for me it is team that sent me a t-shirt :D [20:30:16] * addshore finds and thinks he will love https://github.com/guaka/phpfrontforpywikibot [20:30:49] https://www.mediawiki.org/wiki/Talk:Amsterdam_Hackathon_2013#Suggestion_to_next_year.27s_organizers:_publicize_date_poll_via_Facebook_.26_wikitech-announce_26377 posted petan|fu [20:31:07] I have admin rights on the Wikipedia FB page, but I'm not officially a maintainer. ;) [20:31:28] The address sumanah pointed to will get you better results than emailing me. [20:31:30] addshore: Eggplants, you say? [20:31:39] yes, eggplants :P [20:32:02] ok [20:32:50] You know, for things like hackathons that I can't afford to go to, I always assume they don't apply to me so I just ignore them. [20:33:14] :/ [20:33:18] That's probably not the best approach, but I also doubt I'm the only one. [20:33:40] anyone have any idea how much it costs to get from the UK to amsterdam? :) [20:33:42] It's easy to feel insignificant and worthless surrounded by large and loud people. >.< [20:34:01] None whatsoever. [20:34:04] Yes. Known problem. I try to overcome it via lots of personal invitations. Sometimes it works. [20:35:10] Aye, it does at that. [20:35:11] This is true of approximately all opportunities that are more selective than a fast-food restaurant. Some people reflexively self-select out [20:35:18] But the thing is too big for you to get to everyone... >.< [20:35:21] addshore: Depends on where in the UK. EasyJet flights can be less than 100 pounds return [20:35:49] hmmm, [20:36:15] * addshore personally invites Isarra and tells them to come [20:36:35] Tell whoever does the scholarships. :P [20:37:32] Isarra how expensive is it actually for u :o when I think of it, last year it was like few euros for everything [20:37:42] but I have no idea how far it is for you [20:38:08] addshore so are u coming :D [20:38:27] It's far. [20:38:36] addshore it is very cheap especially if you are working on huggle people have some special prices for planes [20:39:35] 830Km, i could drive :P [20:39:47] hehe I am still considering taking a car there [20:39:55] cuz it's quite close to me [20:39:59] like 300km or that [20:40:06] or maybe not lol [20:40:24] but that would set some limits for my ability to drink [20:40:34] what do the scholarships get one? [20:40:47] *provide somebody with? [20:40:53] addshore: you would get money for travel, and you would get your accommodation covered [20:41:01] possibly booked on your behalf [20:41:02] I think it's a similar distance to Amsterdam for me as to Hong Kong. [20:41:03] lol I take it back [20:41:14] it's not 300km but like 900 :D [20:41:18] sumanah: Wheres that form? :P [20:41:23] my geography in't best [20:41:37] petan|fu: HAH im closer than you >.< [20:41:58] addshore: it is the registration form. https://docs.google.com/a/wikimedia.nl/spreadsheet/viewform?formkey=dFg2SmRRbkpxNmxCcFNFdlduVlJuTUE6MQ#gid=0 [20:42:03] Affiliation..? [20:42:15] Crap, I filled out that form while drunk. [20:42:22] :O [20:42:27] I hope I didn't put anything too incriminating on it. [20:42:38] I think next year hackaton should be somewhere in antarctica so that it's fair for everyone [20:43:00] laptops wouldn't overheat [20:43:10] that's good for me [20:43:13] :P [20:43:23] anyone care to enlighten me in regards to Affiliation on the form? [20:43:29] You need a better laptop. [20:43:39] Isarra you are telling me? :D [20:43:46] !log wikiversity-sandbox MariaDB on wikiversity-sandbox-db1 was installed, move Moodle to the new db server [20:43:48] Logged the message, Master [20:43:49] I am not really so rich heh [20:43:49] I think I put wikimedia, though I dunno what it was supposed to mean. [20:43:59] I hope I didn't put 'Cabal' or something. [20:44:09] Wikidata admin cabal ;p [20:44:24] cabal is actually getting vip room in hostel [20:46:00] urgh page 2 of 5 [20:46:30] Coren -- are you feeling better and/or working today? [20:46:30] Damianz can't u move your house like different wekk [20:46:31] week [20:46:49] Don't think so right now [20:46:50] it's a shorter form when you aren't asking for any money help, I believe [20:47:13] andrewbogott: A bit of both. At least I stopped uneating. [20:47:29] Ugh… I hope your recovery is swift. [20:47:32] petan|fu: what day are you turning up on? [20:48:37] Coren: I discovered yesterday that I can start the logbot after I do a 'sudo su - local-morebots' but if I do 'sudo -u local-morebots jstart' it behaves differently... [20:48:47] qstat shows it as… 'eqw', I think? [20:48:47] Uneating? [20:48:51] addshore I am taking vacation from friday so I guess I will be there like eh thursday night or friday morning [20:49:14] andrewbogott: it died [20:49:51] addshore: Sure, but… what's the difference? Something subtle with file permissions I presume. [20:49:51] andrewbogott: If you want to use sudo, you have to also -i, otherwise it keeps /your/ environment and home rather than the tool's [20:50:21] So, "sudo -u local-morebots -i qstart " <- like that? [20:50:23] 'sudo -iu local-morebots jstart' would work [20:50:44] Yeah, separate would also work. :-) [20:50:49] Ok, that's simple enough. [20:50:52] :o [20:50:54] becom? [20:50:56] become [20:51:07] that is alias for it [20:51:16] petan: That's just hiding exactly 'sudo -iu local-$1' :-) [20:53:21] ah [20:53:29] well so I was almost right [20:53:37] Oops, I toggled my shell rights off and on for a test and now I'm not a member of any projects anymore :( [20:54:52] andrewbogott: heh. yep [20:54:54] soooooo...... [20:55:09] I guess we know that that feature works! [20:55:11] http://www.mediawiki.org/wiki/Wikimedia_Labs/Account_creation_improvement_project#Current_account_creation_process [20:55:14] andrewbogott: That's.. what removing shell right does. If that was what you wanted to test, then your test is a success. :-) [20:55:29] Coren: Yep, I agree! I was testing something else but I'm not bitter that it worked as designed. [20:55:45] Bugs 44166, 44167, 44173: Rather than just giving bastion access, shell should give access to any projects listed as "Open-to-all projects" [20:56:06] andrewbogott: What projects do you need back? [20:56:20] Coren: I can re-add myself, it's fine. [20:56:58] it would be better if shell was a group and all instances required that group [20:57:02] andrewbogott: Ah, right, as long as you didn't remove your other rights. :-) [20:57:11] then it would only be necessary to remove the user from that one group [21:00:36] Ryan_Lane, we don't currently have a concept of 'open-to-all' do we? [21:00:46] bastion is about it [21:03:58] the biggest reason I want that change is to be able to disable shell for a user temporarily without removing all of their projects [21:04:12] Ryan_Lane -- as things are currently implemented, how does shell group membership differ from bastion project membership? [21:04:20] Is the shell group rougly reduntant atm? [21:04:28] when a user is added to shell, it adds them to bastion [21:04:32] shell only exists in mediawiki [21:04:39] we'd need to make shell an ldap group, then sync it [21:04:42] ok... [21:05:17] and we'd need to be able to modify regular ldap groups from the rights interface [21:05:17] One of those bugs says "After doing so we should restrict ssh access on all [21:05:18] instances in all projects to the "shell" group." [21:05:25] yep [21:05:34] it'll be an ldap group, then [21:05:39] so the instances would know about it [21:05:50] That seems unnecessary. Can't we have a shell group and then have 'open to all' projects allow access from anyone with shell membership? [21:05:53] if a user isn't in shell, they get rejected, even if they are in the project group [21:06:05] Then other projects can just work based on the existing membership system. [21:06:34] the idea is that we don't want to remove all of a user's projects when disabling them [21:07:02] if we require the shell group we only need to remove them from that one group and then they are disabled everywhere [21:07:05] OK, so… for 'open to all' projects, shell membership is sufficient. Or other projects it's necessary but insufficient. [21:07:10] yep [21:07:25] …I don't think I know how to implement those two things as distinct from one another. [21:07:46] access.conf would handle the limiting [21:08:13] this is just an idea right now. I need to verify it'll actually work before we implement anything :) [21:08:30] petan|fu: Page 4 of 5 [21:08:30] and I think I'll likely be the one to add the feature [21:08:39] It seems totally straightforward, I'm just not sure about the acess.conf magic. [21:08:40] it's going to require changes to LdapAuthentication [21:08:49] * Ryan_Lane nods [21:09:21] You wouldn't necessarily have to change LdapAuthentication… we do different combinations of all these things already in OSM [21:10:09] well, this would be to sync and modify ldap groups with mediawiki [21:11:10] it may not be totally necessary to do that, but it makes things a little easier [21:12:12] Yeah, could yank out some hooks. [21:15:38] andrewbogott: Could you add me to the bastion project? My username is Jelte. [21:15:54] Jelte, you are probably already a member, but I will check. [21:16:56] Jelte: Yep, you're in already. [21:20:43] Coren, is there still snow on the ground in your neck of the woods? [21:21:10] andrewbogott: Still, although it's melting fast. [21:21:12] andrewbogott: thanks for checking [21:21:41] Coren: That makes me feel slightly better. [21:21:59] The joys of Shadenfreude. :-) [21:22:11] addshore it took me 2 minutes to fill in that form? [21:22:24] i have extra bits to write :/ [21:22:30] poor you [21:22:31] :D [21:22:54] fill it with random pieces of huggle source code [21:22:59] that will be self explanatory [21:23:55] xD [21:24:07] Coren: It's snowed 6 out of the last 8 days here. [21:24:16] haha, the sourcesode isnt very self explanatory xD [21:24:30] andrewbogott: You have my most profound sympathies. [21:33:31] andrewbogott: Waitaminit. "Here"? I thought you worked out of SFO? [21:34:01] Coren: Mpls [21:34:59] Coren, I'm migratory -- I fly south for the winter. I came back to Minnesota a month ago because I was promised it would be springtime. [21:35:09] Which it was for a week or so. [21:35:14] andrewbogott: Lies! All lies! :-) [21:35:39] We got a bit of your storm last weekend; ~6 inches of snow. Got replaced by rain since though. [21:35:56] It's not just me, the state is full of angry people and confused looking robins and baby animals. [21:36:35] @requests [21:36:36] There are no shell requests waiting [21:37:13] btw addshore [21:37:18] ? [21:37:26] I released my irc client written in c# :D [21:37:36] xD [21:37:38] though I have no idea if installer works [21:37:42] link? [21:38:01] http://pidgeonclient.org/wiki/Download [21:38:08] this version has a little gui bug [21:38:17] when you first start it, layout is borked [21:38:25] depends on resolution [21:39:01] but it remember layout so once you fix it it's ok :P [21:39:15] I also written special bouncer for it, which is still alpha [21:39:25] that allows you to have similar functions like quassel [21:39:30] and some more [21:39:46] where can I file bugs? ;p [21:39:52] mwahahhaa [21:39:54] http://pidgeonclient.org/bugzilla [21:39:57] ;p [21:40:07] your going to regret this ;p [21:40:14] which bug you found [21:40:45] none yet, but I will (on a side note finished filling out the hackathon form) [21:40:56] hah [21:41:05] it contains lot of bugs [21:41:14] best is always pull latest version and build it :D [21:41:41] btq petan|fu I am migrating my DB again ;p [21:41:45] you can even write c# plugins :D [21:41:49] where [21:41:51] u migrate it? [21:42:17] to a different table ;p [21:42:24] 1.1 million rows of 10million done ;p [21:42:45] this table should just use less resources [21:43:06] oh [21:43:11] running now? [21:43:19] the bot isnt, but the migrate is [21:43:44] I'll probably start the bot when I wake up tomorow then the db has a few more rows (maybe 2.5 million) [21:43:54] ok [21:44:06] petan|fu: pm :) [21:44:16] where [21:44:20] I didn't get any [22:14:34] oh, it's great when being able to tell people that what they want to do is already done :) [22:15:06] they asked on wikivoyage about setting up a labs clone of it and all i had to do was link http://en.wikivoyage.beta.wmflabs.org/wiki/Main_Page [22:22:50] * Damianz paths mutante [22:25:46] Coren:Have you installed the perl modules? [22:26:10] UA31_: I'm writing the puppet classes now. Sorry it took a while, I was sick yesterday. [22:29:53] ok [23:22:23] [bz] (RESOLVED - created by: Chris McMahon, priority: Unprioritized - normal) [Bug 47339] beta cluster: wrong MessagesEn.php file? - https://bugzilla.wikimedia.org/show_bug.cgi?id=47339 [23:38:24] Ryan_Lane: Hate to bug you so late in the day, but it looks like orgchart.pmtpa.wmflabs lost its /data/project mountpoint [23:44:20] marktraceur: seems puppet hadn't run in ages [23:44:24] Oh dear. [23:44:56] I fixed that (by killing the hung dpkg process) [23:45:04] then killed the gluster process [23:45:07] and restarted autofs [23:45:16] Awesome. [23:47:46] Looks like there's still some mongodb crap failing, but I'll figure it out. Ta. [23:50:31] Hrm [23:50:32] http://comments.gmane.org/gmane.comp.db.mongodb.user/473 [23:50:35] Not encouraging [23:52:00] Also huzzah backups. [23:55:16] All right!