[01:36:47] [bz] (8NEW - created by: 2Yuvi Panda, priority: 4Unprioritized - 6normal) [Bug 51990] Allow one tool to add another tool to its group - https://bugzilla.wikimedia.org/show_bug.cgi?id=51990 [02:03:10] YuviPanda: sorry ;) [03:26:23] When did Cron Daemon starts to send mail again? [03:28:00] zhuyifei1999: It always did, but the mail was stuck in the queue for a while. [03:29:39] Coren: it haven't sent any for a long time. But at Wed Jul 24 01:00, suddenly a mail appeared. [05:27:25] Hi all [05:27:42] I have 2 Qs [07:04:38] [bz] (8VERIFIED - created by: 2Chris McMahon, priority: 4Unprioritized - 6major) [Bug 47015] beta cluster: Special:SpecialPages internal error - https://bugzilla.wikimedia.org/show_bug.cgi?id=47015 [07:09:25] [bz] (8RESOLVED - created by: 2Peter Bena, priority: 4Normal - 6normal) [Bug 51936] Set up a server for query relaying - https://bugzilla.wikimedia.org/show_bug.cgi?id=51936 [07:09:42] [bz] (8RESOLVED - created by: 2Peter Bena, priority: 4Low - 6normal) [Bug 51935] wm-bot to tools - https://bugzilla.wikimedia.org/show_bug.cgi?id=51935 [07:11:42] !log tools petrb: created /var/log/glusterfs/bricks/ to stop rotatelogs from complaining about it being missing [07:11:44] Logged the message, Master [07:14:54] @seenrx trigon [07:14:55] petan: I have never seen trigon [07:17:00] Hi petan [07:17:04] Elph: what language is your bot written in [07:17:13] you need to use some mysql lib [07:17:23] yes [07:17:53] i use mysql [07:18:56] ok so what exactly you need to know [07:20:03] when i run my codes after some minutes or seconds code stoped [07:21:35] some error? [07:22:25] give me less than a minute to copy/paste the error here for you [07:22:25] petan: MOTD on deployment cluster: 'Usefull stuff:' should be 'useful' (one 'l') [07:22:38] ok :o [07:22:56] Traceback (most recent call last): [07:22:58] File "catswithoutlanglinks.py", line 39, in [07:22:59] passwd = config.db_password) [07:23:01] File "/usr/lib/python2.7/dist-packages/MySQLdb/__init__.py", line 81, in Connect [07:23:02] return Connection(*args, **kwargs) [07:23:04] File "/usr/lib/python2.7/dist-packages/MySQLdb/connections.py", line 187, in __init__ [07:23:05] super(Connection, self).__init__(*args, **kwargs2) [07:23:07] _mysql_exceptions.OperationalError: (2003, "Can't connect to MySQL server on 'arwiki-p.db.toolserver.org' (110)") [07:23:09] You have new mail in /var/mail/elph [07:23:16] pastebin [07:23:40] Elph: you have invalid hostname [07:23:44] arwiki-p.db.toolserver.org [07:23:57] oh my god [07:24:07] what's the correct ? [07:24:29] arwiki.labsdb [07:24:41] thanks [07:24:44] yw [07:24:49] 2th Q [07:25:07] What's means "You have new mail in /var/mail/elph" [07:25:23] that means you have a new mail... type mutt to read your mails [07:25:51] thanks again [07:35:38] Elph talk in here pls [07:35:48] you need to provide a correct password [07:35:51] passwd = config.db_password) [07:35:52] File "/usr/lib/python2.7/dist-packages/MySQLdb/__init__.py", line 81, in Connect [07:35:54] return Connection(*args, **kwargs) [07:35:55] File "/usr/lib/python2.7/dist-packages/MySQLdb/connections.py", line 187, in __init__ [07:35:57] super(Connection, self).__init__(*args, **kwargs2) [07:35:59] _mysql_exceptions.OperationalError: (1045, "Access denied for user 'elph'@'10.4.0.220' (using password: YES)") [07:36:29] in change "arwiki-p.db.toolserver.org" but i face the error again [07:39:53] !paste [07:39:53] http://tools.wmflabs.org/paste/ [07:39:58] this is a better thing to paste [07:40:20] the error is that you have invalid password [08:15:17] petan: i promise I'll bee off bots-bsql01 today :> [08:15:28] no problem :D [08:15:31] there are still many others [08:15:33] so long as http://ganglia.wmflabs.org/latest/?c=tools&h=tools-db holds up ;p [08:15:54] I can't remove it until they all move off [08:16:01] who else is there? :> [08:16:05] Damianz [08:16:12] ahh, cluebot? :P [08:16:15] probably many others too [08:16:23] I would need to check the sessions [08:17:31] :o [08:21:23] petan: care to help me work out why the webservers cant use / access replica.my.cnf ? :> [08:21:40] addshore: sure [08:21:55] what should the default permissings be? :) [08:21:56] I /think/ because they just don't have rights to read its content [08:22:05] well I don't know this, Coren might [08:22:16] for some reason if it doesn't have www-data [08:22:20] it doesn't work :( [08:22:24] but it doesn't make sense [08:23:03] should it be 600 or might 660 work? ;p [08:23:13] or even 640 [08:23:35] depends [08:23:46] if group is www-data it should be 5400 [08:23:49] * 640 [08:23:52] lol typo [08:23:54] xD [08:24:07] mhhm, goup is the service group [08:24:12] if you are going to trust that nfs works properly, then just 600 [08:24:28] but who knows if thats default, that may have been me 'take'ing it [08:24:33] you definitely shouldn't change group to www-data unless you want anyone to be able to read it ;) [08:24:49] [bz] (8ASSIGNED - created by: 2Niklas Laxström, priority: 4High - 6major) [Bug 48203] Purging does not work on deployment-prep / beta labs - https://bugzilla.wikimedia.org/show_bug.cgi?id=48203 [08:24:50] you know what you can try... copy replica to public_html [08:25:03] mhmhm [08:25:05] cp replica* public*/.my.cnf [08:25:15] would that really help though? :P [08:25:17] idk [08:25:19] *checks permissiong of public [08:25:22] apaches are weird [08:25:33] mhhm, doesnt look like it should change anything [08:25:50] but you must be able to do it as Im sure everyone doesnt have the user and password hardcoded ;p [08:27:09] *goes to see if he can find an example or docs ;p* [09:04:39] [bz] (8PATCH_TO_REVIEW - created by: 2Antoine "hashar" Musso, priority: 4Low - 6enhancement) [Bug 41285] [OPS] foreachwiki on beta use all.dblist instead of all-wmflabs.dblist - https://bugzilla.wikimedia.org/show_bug.cgi?id=41285 [09:34:25] [bz] (8NEW - created by: 2Krinkle, priority: 4Normal - 6enhancement) [Bug 49350] Tool Labs: Change logo - https://bugzilla.wikimedia.org/show_bug.cgi?id=49350 [09:34:56] [bz] (8REOPENED - created by: 2MZMcBride, priority: 4Normal - 6normal) [Bug 36885] wmflabs.org does not resolve - https://bugzilla.wikimedia.org/show_bug.cgi?id=36885 [11:19:02] !shell [11:19:02] http://bit.ly/10eZZoa [11:19:37] Coren, can you please fulfill the shell requests? [11:20:25] petan, ^ [11:21:31] Can any shell admin please fulfill the shell requests? [11:21:55] Cyberpower678: doing [11:22:03] YuviPanda, thanks. [11:22:28] is MBQ someone known? [11:22:35] I don't want to grant shell only for it to turn out to be spam [11:22:51] YuviPanda, no I want WTT [11:22:58] Cyberpower678: already done for WTT [11:23:11] Thank you. [11:23:47] Cyberpower678: yw [11:24:05] YuviPanda, can you also grant tool access? [11:24:15] Cyberpower678: sadly no [11:24:15] ok. [11:24:17] that's only petan, Coren and scfe_de [11:24:25] (and ryan lane, etc) [11:24:42] YuviPanda, ok [11:24:55] Where can you request tool access? [11:25:37] there's a URL, unsure where it is... [11:25:53] !tools [11:25:54] Cyberpower678: http://tools.wmflabs.org/ has 'request access' [11:25:54] There are multiple keys, refine your input: tools-admin, tools-bug, tools-help, tools-request, tools-web, [11:26:14] !tools-requests [11:26:57] !tools-request [11:26:57] https://wikitech.wikimedia.org/wiki/Special:FormEdit/Tools_Access_Request [11:34:58] hi [11:35:24] Cyberpower678 what u need [11:35:45] to give worm that turned tools access. [11:35:53] ok [11:39:22] granted [11:46:10] Thanks. [11:46:16] We're going to work on a new tool together. [12:01:59] YuviPanda: can you mark the request as completed when you finish it? [12:02:08] petan: whoops, forgot. will do [12:02:11] did you already do that? [12:02:11] ok [12:02:13] if not i'll do it now [12:02:14] no [12:02:16] ok [12:03:06] petan, where did that nova thingy go where I can create a new project in tools? [12:03:13] Cyberpower678: does cyberbot report on irc? [12:03:16] done now [12:03:22] Cyberpower678?? [12:03:27] what you talk about [12:03:27] T13|sleeps, no. Why? [12:04:14] There used to be this thing. I forget what it's called. You can see all of the projects you are a member of and add and remove members to it. [12:04:27] petan, ^ [12:06:10] !log tools petrb: test [12:06:12] Logged the message, Master [12:06:35] Just curious if it was also an irc bot in a channel that would allow people to list candidates, see stats of a candidate, etc. [12:06:55] T13|sleeps, interesting proposal. [12:07:15] I think I can conjure up something for IRC. [12:07:58] Cyberpower678 Special:NovaProject [12:08:34] Cyberpower678 what you talk about which candidates? [12:08:57] petan, ?? [12:09:06] (14:06:35) Just curious if it was also an irc bot in a channel that would allow people to list candidates, see stats of a candidate, etc. [12:09:07] (14:06:55) T13|sleeps, interesting proposal. [12:09:32] Calling up RfX candidates on IRC. [12:09:39] aha [12:13:34] hi, I want to set up a nightly distributor in labs. something like this: http://toolserver.org/~pywikipedia/nightly/ [12:13:38] can someone help me [12:13:42] Would only need to be in one channel. Although, it could have a couple lists of tasks to join, leave a full RfX report, and part private channels once or twice a day. [12:15:03] petan: ^ [12:15:11] T13|sleeps, I'm currently backlogged in technical work right now. [12:15:23] Amir1: what you need to help with [12:15:25] T13|sleeps, it'll have to wait a bit. [12:15:35] how i can set it up [12:15:52] Amir1: you cron a job that make a build and publish it [12:16:34] petan: good but a question how i can get some comments about last revision [12:16:51] for example on that page wrote: [12:16:54] r11780 | siebrand | 2013-07-22 15:55:28 +0000 (Mon, 22 Jul 2013) | 1 line [12:16:55] Localisation updates from http://translatewiki.net. [12:17:05] No rush Cyberpower678, and depending on the language you pick, id be happy to help you with it.. [12:17:23] T13|sleeps, always PHP. :p [12:18:20] Php irc bot? [12:18:26] Interesting... [12:18:58] Amir1: probably using git [12:19:23] petan, No Nova credentials found for your account. [12:19:24] I want to use git [12:19:34] What does that mean? [12:19:36] Cyberpower678: relog [12:19:45] petan: is it possible to set a cron in service groups? [12:19:47] relog what? [12:19:51] Amir1: yes [12:19:57] Cyberpower678 wiki [12:20:13] How do I log a wiki? [12:20:19] Cyberpower678 logout login [12:20:25] oh. [12:20:31] ok [12:20:36] you meant relogin. :p [12:20:43] kind of :P [12:21:02] let me check I'll come here if i'll have any questions [12:21:03] thanks [12:21:06] ok [12:21:16] 0: [12:43:10] can someone clear elasticsearch2.pmtpa.wmflabs out of dns? it seems to be stuck after I deleted it. [12:43:48] can't do sorry :( [12:44:18] thanks though! [12:44:32] I think if you delete something and then try to recreate it quickly it gets stuck [12:44:46] it gets removed from the interface but it isn't truely gone [12:50:03] Coren: you helped me with my stuck DNS last time. When you get this, could you pretty please unstick elasticsearch2.pmtpa.wmflabs? I think machines get stuck when you delete them and recreate them "quickly". [13:02:33] manybubbles: That wasn't me; I think it was Ryan. [13:02:57] I don't think he left notes about what the problem is and how to fix it. [13:29:05] Coren: It was Ryan! Sorry, I still get irc handles smashed together sometimes. The problem was that it was "stuck" in DNS.... [13:36:06] [bz] (8RESOLVED - created by: 2Chris McMahon, priority: 4High - 6major) [Bug 51988] login broken on beta labs - https://bugzilla.wikimedia.org/show_bug.cgi?id=51988 [14:24:46] are the diff sizes stored in the DB (I'm talking about those diffs shown in user contribs page) [14:37:03] OrenBochman: No, but you get rev_len so the diff size is the difference. [14:47:54] Coren, YuviPanda, can you talk me through the groups-in-groups bug? What will it accomplish to add one service user to a different service group? [14:48:12] andrewbogott: let one tool access files of the other tool. When you want to share config [14:48:15] or similar things [14:48:19] and want to be selective [14:48:22] and not put them all in /shared/ [14:48:25] readable by everyone [14:48:28] It will allow "meta" tools that share configs. Think "toolkit" [14:48:44] Ah, ok, so we're trying to provide access to tools running as the service group. [14:48:51] * Coren nods. [14:48:52] Not users who are members of the group [14:48:58] yup [14:49:00] That is what I was missing! [14:49:07] Exactly. No transitive stuff there, it really is the /tool/. :-) [14:50:01] Hierachical grouping of tools with member trasnclusion would be amusing, but I doubt there's a serious use case for it that's worth the implementation nightmare. :-) [14:50:22] OK -- I'll get back to work on the gui code. It's a bit hairy since service users are totally different object types from normal users. [14:50:37] Coren, glad to hear it, that idea was making my head spin. [14:51:36] :) [14:51:57] andrewbogott: Ryan closed that bug with a summary of 'this will totally destroy all security!', but I've no idea what he means [14:52:02] and he might have also gotten the wrong idea? [14:52:06] oh, hm. [14:52:15] I think he was thinking of users, than tools [14:52:33] can you link me to the bug? [14:52:57] moment [14:53:16] https://bugzilla.wikimedia.org/show_bug.cgi?id=51990 [14:53:22] andrewbogott: he said 'sanity', not security [14:53:22] my bad [14:53:34] (or my sleep deprived hallucination) :) [14:53:54] Coren: you able to lend a hand? scripts that work on the TS dont work on labs [14:54:20] Betacommand: Sure. Most of the time it's minor details. Point me at where you have issues. [15:16:48] [bz] (8NEW - created by: 2Krinkle, priority: 4Normal - 6enhancement) [Bug 49350] Tool Labs: Change logo - https://bugzilla.wikimedia.org/show_bug.cgi?id=49350 [15:26:44] [bz] (8NEW - created by: 2Liangent, priority: 4Unprioritized - 6normal) [Bug 52033] liangent-py tool is missing in the tool list - https://bugzilla.wikimedia.org/show_bug.cgi?id=52033 [15:27:22] Coren: and… once the user has requested that a service user be added to a service group, what should actually happen? I can add the service user as a member in ldap, but I note that user local-sgroup is not currently a member of group local-sgroup [15:29:44] andrewbogott: Just adding as a member is fine. The service group users aren't members of their groups because it's their primary group. [15:29:58] (I.e.: it's be pointless to also have it as additional member) [15:31:14] Hm… ok. I guess I don't fully understand how permissons get translated from ldap into actual system settings. [15:43:02] [bz] (8PATCH_TO_REVIEW - created by: 2Antoine "hashar" Musso, priority: 4Low - 6enhancement) [Bug 41285] [OPS] foreachwiki on beta use all.dblist instead of all-wmflabs.dblist - https://bugzilla.wikimedia.org/show_bug.cgi?id=41285 [16:25:29] Coren 10x [16:27:18] Coren, YuviPanda, https://gerrit.wikimedia.org/r/#/c/75897/ [16:29:42] andrewbogott: (+2'ed, not merging until you feel you are ready) [16:30:37] I think gerrit took the initiative on merging :) It's not live on wikitech though -- probably good to give Ryan a chance to veto. [16:30:51] OrenBochman: "10x"? [16:31:19] Dafu? I very specifically didn't submit. [16:32:32] petan: I made cron as you said but I'm not sure It's working [16:32:39] how can i check that [16:32:49] Coren: thanks for the diff tip from before [16:32:49] or is there any log? [16:35:18] Coren: dude. [16:35:30] I marked that bug as resolved wontfix [16:35:56] ... hm, so you have, noting while I was about to mark it resolved fixed. [16:36:02] Why in blazes? [16:36:25] we're just asking for problems if we allow this [16:36:33] ... I don't see it. How so? [16:37:00] it makes the interface more complex, it makes the internal logic more complex, it makes the docs more complex [16:37:11] it makes support more complex [16:37:34] take, for instance [16:37:35] or become [16:37:46] group permissions [16:37:47] ... I still don't see how. Granted, it's a more "advanced" feature, but hardly world-rocking. [16:38:11] None of those things are affected. [16:38:23] a user can become a tool user [16:38:29] Sorry, Ryan_Lane, I reponed because I thought you were vetoing "all members of project A in project B" since that's roughly what the bug title was at the time. [16:38:31] then that user will write to folders [16:38:55] it'll have group permissions of something and it'll be wrong [16:38:58] then people will want to take it [16:39:04] Ryan_Lane: No it won't. [16:39:06] but it'll be in the wrong service group [16:39:19] Wait, what do you think this does, in practice? [16:39:31] it allows a tool user to be a member of another tool [16:39:36] No it doesn't. [16:39:45] Wait, yes. [16:39:47] It does. [16:39:51] exactyl [16:39:52] But that's all it does. [16:40:04] that adds the entire group of people in tool A into tool B [16:40:26] which means that people in tool B can effectively be in tool B without tool B people knowing about it [16:40:32] err [16:40:38] switch the last B with an A [16:40:57] it's a form of recursive groups [16:41:05] not a fan [16:41:19] I don't see how it does. For one, the only plausible use case of this is tools sharing maintainers in the first place. [16:41:35] For toolkit-like tools. [16:41:44] then they should use a single account and put all their tools under it [16:42:05] or they should make their configs and data public read [16:42:17] I really don't see where you feel the problem is. Perhaps if you gave me an example? [16:42:36] I become tool A [16:42:48] I write some stuff into /tmp meant for tool B [16:42:53] but I don't use the correct group [16:43:03] now tool A needs it [16:43:09] tool A can't tak [16:43:11] *take [16:43:23] tool A can't take stuff in /tmp period. [16:43:37] You can only take stuff in a directory you own. [16:43:57] you know what I mean ;) [16:44:09] The point of allowing too A permission to tool B is exactly so that it can read and/or write to tool A's home. [16:44:24] I.e.: the opposite scenario than the one you said wouldn't work. [16:44:37] And then, the group would necessarily be correct because of SGID. [16:45:04] AzaToth: your labs username? [16:45:19] does anyone actually need this feature right now? [16:45:44] I could use it [16:45:44] I've had it requested by three maintainers of large sets of tools (who are, clearly, the most obvious users) [16:45:50] to share redis 'secret' keys [16:45:52] now I've to copy paste [16:46:37] guys how can check a cron is working or not [16:47:11] Amir1: There really isn't a way except checking for side effects unless your cron entry has output (in which case it'd be mailed to you) [16:47:42] there is outputs [16:47:49] I'm not sure It's mailing to me [16:48:10] what's my mail in Wikitech [16:48:29] everytime I login It says "you have mail" but I don't where it is [16:48:39] Ryan_Lane: I would expect that most "tools" that include other tools in their permissions are in fact toolkits that do not do anything on their own but are used by other tools (including credentials, etc). I know that's MZM's use case at least. [16:48:40] Amir1: can you check in wikitech.wikimedia.org preferences? [16:48:50] let me check [16:48:52] sumanah: Wrong mail. :-) [16:49:01] Oh. [16:49:03] * Ryan_Lane grumbles [16:49:09] Amir1: Unless you set up a .forward, your mail remains local. You can use 'mailx' to read it from the console. [16:49:33] sumanah: hi [16:49:36] not a fan of the complexity of this change, but I see the use case [16:49:36] how you're doing? [16:49:40] YuviPanda: azatoth [16:49:44] AzaToth: adding [16:50:11] username is shell login name right here? [16:50:17] I think so [16:50:39] Hi Amir1 - I'm okay! And you? [16:50:45] Congrats on your pywikipedia work. [16:50:54] good [16:51:01] AzaToth: done [16:51:01] Ryan_Lane, should I add a warning or interstitial that says "checking this box means you trust everyone in this project, and everyone in projects in this project, etc."? [16:51:05] you heard that [16:51:06] thank you [16:51:13] andrewbogott: yes [16:51:14] please [16:51:26] a warning is fine [16:51:35] interstitials are painful [16:51:37] YuviPanda: have never used role accounts before, so I assume I would need some pointers [16:51:44] andrewbogott: Yeah, big scary warning would help scare away people who aren't sure that's what they want. [16:51:46] !tools-doc [16:51:49] hmm [16:52:02] I'm currently seting this up [16:52:02] http://tools.wmflabs.org/pywikipedia/ [16:52:40] for nightly distribution but I'm not sure corn of this service group is working properly [16:52:44] *cron [16:53:11] Amir1: Your mailbox should contain the output of the cron runs. [16:53:15] * sumanah goes to get lunch [16:53:25] Coren: how i can set up a forward mail? [16:53:46] Amir1: Just but an email address, alone on a line, in a file named '.forward' in your home. [16:53:56] Amir1: Any new mail will be sent to that address. [16:54:00] ok [16:54:30] AzaToth: are you logged in to tools-login? [16:54:31] * Coren checks that this is part of kma500's documentation plan. [16:55:27] figured it out [16:55:35] had to logout and in again for become to work [16:55:56] YuviPanda: I notice the lack of timestamps in the err file ヾ [16:56:53] AzaToth: err, look at ~/logs/lolrrit-wm [16:56:55] .log [16:56:58] has timestamps [16:57:07] AzaToth: and yeah, .err is generated by SGE. no timestamps [16:57:26] sge? [16:57:27] .err is just the stderr of the job sent untouched. [16:57:31] k [16:57:51] A useful trick is to start the scripts to send to the grid with something like "date >&2" [16:57:59] So that it sends a timestamp to stderr. [16:58:14] But that makes your .err grow even if there are no errors. So YMMV [16:58:24] nice one, Coren. [16:58:43] (Still useful when debugging though) [17:03:33] dang, htmlform never does what I'm expecting. https://wikitech-test.wmflabs.org/w/index.php?title=Special:NovaServiceGroup&action=addmember&projectname=sg&servicegroupname=local-corn&returnto=Special%3ANovaProject [17:03:43] YuviPanda: perhaps set debug: true, showErrors: true [17:03:59] AzaToth: for node irc? [17:04:18] Coren: The one tool that I have that uses an auth system I've mostly deprecated, BTW. [17:04:22] Ryan_Lane, Coren, sufficient? ^ [17:04:30] watcher is now replaced by the info action in core. \o/ [17:04:41] YuviPanda: yea [17:04:54] AzaToth: hmm, add it and restart tool? [17:04:56] :D [17:05:02] Elsie: Yeay! [17:05:05] might get spammy, but for now it could be relevant [17:05:29] AzaToth: yeah. but then we've to wait for a disconnect [17:05:32] live hacks are okay :) [17:06:08] Coren: https://en.wikipedia.org/w/index.php?title=Main_Page&action=info#mw-pageinfo-watchers [17:06:17] It's even got row highlighting now. [17:06:19] So fancy. [17:06:38] Elsie: Plus with got OAuth and OpenID coming Real Soon Now™ which will cover most other use cases. [17:07:28] I think there is problem in my cron [17:07:30] http://paste.ubuntu.com/5911814/ [17:08:01] my project is "pywikipedia" not "pywikibot" [17:08:11] If you want I can copy my cron too [17:08:29] Amir1: Also, the file seems to be named 'run_sync' not 'run_syn' :-) [17:08:34] (PS1) AzaToth: adding gitreview [labs/tools/grrrit] - https://gerrit.wikimedia.org/r/75908 [17:08:54] Coren: this is my cron http://paste.ubuntu.com/5911825/ [17:09:12] sorry It's not my cron [17:09:16]