[07:51:37] I need help [07:51:37] Hi Ahmed__, just ask! There is no need to ask if you can ask [07:52:58] When I want to login to winscp there are an error messege [07:57:57] any body can help? [08:01:58] hello? [13:33:35] down: http://ganglia.wmflabs.org/latest/?c=tools&h=tools-webproxy&m=load_one&r=hour&s=by%20name&hc=4&mc=2 [13:36:31] :P https://bugzilla.wikimedia.org/show_bug.cgi?id=56158 [13:37:26] interesting pattern [13:41:12] giftpflanze: too many "gift" :P [13:41:20] now vergiftet :P [13:41:27] hä? [13:42:04] egal . . . [13:57:54] my new instance seems ready but the console output just shows a normal login prompt [13:58:11] the doc says that there would be shown a puppet run [14:13:06] do i need to have a repository to puppetize? [14:15:39] giftpflanze: Pretty much everything happens in the production repo. It's a bit tedious, you'll need ops review. [14:15:47] But, create a new module there in order to isolate your work. [14:16:34] mh, that's for production only and not for my own labs project? [14:17:31] At the moment all labs instances are puppetized using the production repo [14:17:45] ah, ok [14:18:18] is there a way to go without repositorizing? [14:18:42] Well, if your puppet changes aren't checked in anywhere then you're back to having an instance that you can't reproduce if it fails. [14:18:51] For development purposes you'll want something like this: https://wikitech.wikimedia.org/wiki/Help:Self-hosted_puppetmaster [14:19:15] so, i could save it locally? [14:19:46] I need help [14:19:46] Hi Ahmed__, just ask! There is no need to ask if you can ask [14:21:00] giftpflanze: yes, the self-hosted puppet setup allows you to work on the puppet manifests and then apply them locally. [14:21:17] But, again, saving your manifests on the same machine that is puppetized doesn't provide much benefit in terms of stability or reproducibility [14:21:27] when i login into winscp there an error messege! [14:22:01] Ahmed__: what [14:22:08] error message [14:22:17] yes [14:22:46] what does it say? [14:24:11] It said "disconnected : no supported authentication methods available server sent:pup;ic key" [14:24:23] puplic [14:26:43] Ahmed__: provided your public key to winscp? [14:27:42] no , i put private key [14:28:16] petan ^^ [14:30:54] Ahmed__: I don't know what's wrong. petan: ^^^ [14:31:31] How can i explain it for you ? [14:35:53] it said "server refused our key, authentication faild" [14:36:25] anyone know why mysql would stop working in an instance without having changed anything? [14:36:44] Ahmed__: the key match? [14:37:24] you need the puplic key ? [14:38:27] who forgot to feed the server hamsters? [14:38:42] Ahmed__: no [14:39:00] excuse me, I'm new in toolserver [14:39:10] petan: coren webservers are timing out\ [14:39:49] Bah. The general web servers need to be phased out. Shared apaches are too vulnerable to tools going boinkers. [14:39:56] Betacommand: down: http://ganglia.wmflabs.org/latest/?c=tools&h=tools-webproxy&m=load_one&r=hour&s=by%20name&hc=4&mc=2 [14:40:29] Ahmed__: ask Coren [14:40:36] Coren: ^^^^^ [14:40:37] Actually, I'm not getting /any/ timeouts now. [14:41:30] Coren: http://tools.wmflabs.org/betacommand-dev not loading [14:41:34] zhuyifei1999: don't trust the ganglia data; there's something broken about the instrumentation [14:41:57] but I get timeouts too [14:42:18] so who can fix that? [14:42:26] even in http://tools.wmflabs.org/ rood directory [14:42:32] *root [14:42:52] zhuyifei1999: I don't get timeouts there, though betacommand-dev /is/ not responding to me. Looking into it. [14:43:27] Aha. I think I see where the booboo lies. [14:43:36] Coren: what? [14:43:51] https is working fine, which is why I see no issues. [14:44:02] http has a problem. [14:46:01] That's kinda odd, really, one would expect the opposite to hold. [14:46:25] But yeah, use https for the moment, I'm looking into why it stalls without SSL [14:54:22] Coren: how can i install the tcl8.6 package that you made for tool labs on my project? [14:54:51] Coren: I told you that you had to feed the servers [14:55:01] The .deb can be found in /data/project/.system/deb [14:55:06] giftpflanze: ^^ [14:55:11] ty [14:58:45] That's completely insane. Why is http taking so long and https working perfectly fine? [15:00:10] * Coren resists the temptation to just unconditionally redirect http to https. :-) [15:01:07] * zhuyifei1999 thinks that this may not be a very good idea [15:01:11] Actually, I can't think of a good reason not to. [15:01:25] Coren: I can [15:01:30] Oh? [15:01:44] It breaks stuff [15:01:52] What "stuff"? [15:02:03] bots [15:02:05] ofc [15:02:12] 90% of my tools [15:02:37] ... why would your tools be broken depending on whether they are accessed through http or https? [15:03:04] The tool can't even see the difference, it's always proxied with http. [15:03:10] I have http hard coded [15:04:02] and https bitches about non-secure elements [15:04:22] and/or doesnt load them [15:04:46] Hm. Well, there's an obvious lesson in that: "don't hard code transport in URIs" :-) [15:05:00] But I'd rather find the issue anyways. [15:06:05] Coren: or the more logical response to the server team, dont fuck with the sever settings as it will break about 100x more things than you expect [15:07:18] !log dwl dpkg -i [tools-login:/data/project/.system/deb/all/tcl8.6_8.6.0-1_amd64.deb] [15:07:19] Hm, actually, you should really stop hardcoding URIs because the WMF as a rule is moving to https-only; I'm not going to do it now to tool labs, but it's inevitable eventually. [15:07:20] Logged the message, Master [15:08:54] Coren: the https default broke a LOT of tools to the point where the disable preference is often utilized [15:10:18] It's probably not worth debating the matter now since, to me, any tool that broke because it got redirected to https was broken; the switch of default simply surfaced the existing bug. [15:11:03] Any http client that does not follow redirects or support SSL is, by definition, broken. [15:11:46] And the entire debate is academic anyways - I'm not going to redirect automatically on tool labs for the forseeable future. [15:13:21] And now whatever seems to affect http on tools.wmflabs.org... isn't. So my attempts at tracking down the issue are in vain for the moment. [15:43:40] this morning i was able to use mysql, then a few hours later i'm getting ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) [15:43:44] any ideas why? [15:55:53] I +1 Betacommand here, https suck. My bot doesn't work since it was enforced for logins on enwp. It just doesn't load and dotnetwiki bot framework doesn't like it either [15:56:08] https is evil [15:56:21] just as people because of whom it had to be implemented [15:56:57] i use it since years, haven't noticed anything :p [15:57:13] *for actually [15:58:06] unencrypted connection is much more simple to implement programmaticaly [15:58:28] i use curl, it doesn't matter [16:44:37] Elph! [16:54:56] petan: you also run into issues with verifying the cert used by wikipedia/labs in that particular framework (I know pywiki had to patch for that in httplib) [17:01:38] I need help [17:01:38] Hi ASammour, just ask! There is no need to ask if you can ask [17:02:56] When i login to winscp , an error messege show [17:03:54] any body can help? [17:06:54] "disconnected: no supported authentication methods avilable (server sent:puplickey)" [17:09:00] help! [17:12:12] ASammour: Have you tried the instructions at https://wikitech.wikimedia.org/wiki/Help:Access_to_ToolLabs_instances_with_PuTTY_and_WinSCP ? [17:22:00] yes typically [18:11:46] Hi all [18:12:33] i need help [18:12:33] Hi ahmed90, just ask! There is no need to ask if you can ask [18:13:05] i can not creat my account in wikitech [18:13:11] why? [18:14:16] no one there? [18:14:24] Krenair: hey. did you push in your echo change? [18:14:36] Krenair: if there's still messages that need to be created, I can do so :) [18:14:54] ahmed90: ? [18:15:08] i can not creat my account in wikitech [18:15:10] ahmed90: hi, you'll want to request a labs account [18:15:15] and then use that to login on wikitech [18:15:17] yes [18:15:40] where can request that? [18:16:31] ahmed90: https://wikitech.wikimedia.org/wiki/Help:Getting_Started [18:17:11] Account creation error [18:17:13] There was either an authentication database error or you are not allowed to update your external account. [18:17:19] ahmed90: https://wikitech.wikimedia.org/w/index.php?title=Special:UserLogin&type=signup [18:17:28] oh [18:17:59] Ryan_Lane: eh ^ ? [18:18:40] ahmed90: what are you using for your shell account name? [18:19:02] ahmed [18:19:46] <^d> I can't ssh to bastion.wmflabs [18:20:02] <^d> Getting key denied. [18:20:19] <^d> I've confirmed my key in wikitech is in my ssh-agent. [18:21:17] ^d: try now? [18:21:42] <^d> Same deal [18:21:43] ^d: wrong username [18:21:58] Ryan_Lane, no [18:22:08] @ Ryan_Lane : What about me? :) [18:22:15] <^d> Ryan_Lane: Hm? Should be demon. [18:22:20] ^d: chad [18:22:37] ahmed90: can you try now? I'm watching the logs [18:22:41] <^d> I was only wanting to change my cn, not sn. [18:22:57] ^d: you're attempting to log in via ssh as chad [18:22:58] Ryan_Lane, https://gerrit.wikimedia.org/r/91906 [18:23:04] there's no such user [18:23:13] <^d> Ok, right, misunderstood. [18:23:16] ^d: your uidname is still demon [18:23:26] Krenair: thanks :) [18:23:26] <^d> Haven't changed my local ssh config, hmm :\ [18:23:34] Ryan_Lane, stuff still needs to be created [18:24:31] ^d: ssh -vvv to see which config it reads [18:24:50] <^d> Hmm, for some reason *.wmflabs used to match everything properly. [18:24:55] <^d> Had to tweak to *.wmflabs.* [18:25:13] ^d: *.wmflabs doesn't match bastion.wmflabs.org ;) [18:25:20] it only matches private dns [18:26:38] <^d> Ah, I hadn't actually ssh'd to bastion in awhile. It worked when I would ssh to an instance directly (and hit the proxycommands) [18:26:46] <^d> But didn't work if I wanted bastion itself. [18:26:50] <^d> All sorted. [18:27:34] yeah [18:27:35] cool [18:27:49] Krenair: no worries. what still needs to be added? [18:28:25] each of the email-subject-message and email-body-batch-message values should be a valid message with qqq docs etc. [18:29:08] Ryan_Lane, actually looks like they're mostly done, just need qqq... and testing of course [18:29:25] cool. I can do that :) [18:29:30] thanks for the help! [18:30:48] Ryan_Lane: Is there a spot where I can stash the changes I made to the wikitech config for posterity? It doesn't seem to be in git anywhere and nobody seems to know whether there is a good place to stuff it to. [18:31:03] https://wikitech.wikimedia.org/wiki/Shell_Request/Ahmed90 [18:31:33] please see this request [18:31:34] Coren: which changes did you make to wikitech? [18:31:48] Ryan_Lane: Added a namespace (and allowed SMW props in it) [18:31:53] which namespace? [18:31:56] Ops: [18:32:01] eh? why? [18:32:33] ahmed90: done [18:32:39] The place to stuff opsen projects for Ken. "Project:" would have been horribly catastrophic and everyone agreed that "Tasks:" would have been horrid this morning. [18:32:52] thx [18:32:52] why does it need to be a separate namespace at all? [18:32:55] namespaces *suck* [18:33:31] Mostly to allow searches only in that junk. [18:34:23] Also to avoid silly name clashes when we have project names that sound like bits of infrastructure -- which seems likely to me. [18:34:38] project names and infrastructure are generally the same thing [18:35:04] in fact, it would often be nice for the project documentation to be a subpage of the infrastructure [18:35:23] hell, it could all be subpages under Ops_projects [18:35:49] That makes page names ridiculously verbose compared to "ops:" [18:35:49] almost every single time I've used a namespace I've regretted it [18:36:10] But search is my primary concern. [18:36:33] I think this'll probably make search less useful [18:36:44] wikipedia does fairly well without namespaces ;) [18:36:55] so does mediawiki.org [18:36:56] Ryan_Lane: Wikipedia uses namespaces a /lot/ [18:37:35] anyway, we don't have wikitech's config git managed [18:37:38] it's been a todo for ages [18:37:47] * Ryan_Lane hates namespaces [18:37:51] agrees to Ryan, subpages are easier Ops/ https://www.mediawiki.org/wiki/Help:Subpages [18:38:02] I really don't like ops as a namespace, either [18:38:03] with [18:38:10] But I don't get "search less useful"; if you include both namespaces the results are the same than if everything was piled up in one namespace, but you /can/ pick one or the other. [18:38:24] Coren: you have to explain to people that it's a different namespace [18:38:44] ... do you seriously expect that this is an issue with opsen? [18:38:59] who says just ops will be searching for this? [18:39:07] isn't the idea of this to be "transparent"? :D [18:39:32] is it going to be in the default search namespace? [18:40:09] ^d: it is possible to define subpage searches with cirrussearch? [18:40:40] <^d> define? [18:40:56] s/define/do/ [18:41:52] !putty | ahmed90 [18:41:52] ahmed90: official site: http://www.chiark.greenend.org.uk/~sgtatham/putty/ | how to tunnel - http://oldsite.precedence.co.uk/nc/putty.html [18:41:56] ugh [18:42:03] that's not what I was aiming for [18:42:06] @search putty [18:42:06] Results (Found 1): putty, [18:42:09] -_- [18:42:11] ^d: search just on a page and its subpages [18:42:34] ahmed90: https://wikitech.wikimedia.org/wiki/Help:Putty [18:42:41] !labs-putty is https://wikitech.wikimedia.org/wiki/Help:Putty [18:42:42] Key was added [18:43:13] Nobody; but then they'll find things anyways because unless they go out of their way to turn that namespace off in search. [18:43:34] <^d> mutante: We can do prefix matching :) [18:44:06] That statement came out wrong out of rewriting. [18:44:41] ^d: cool, there we go then [18:44:42] Coren: [18:45:41] * Coren goes for tea. [18:49:33] ahmed90: still having issues/ [18:49:44] ahmed90: did you add an ssh key to your wikitech preferences? [18:49:50] yes [18:49:57] i added it [18:50:06] what are you trying to ssh to? [18:50:27] still " server unexpectedly ....." [18:51:07] i can't login to putty [18:51:20] ahmed90: what hostname are you trying to use [18:51:27] in putty [18:51:28] tools-login.wmflabs.org [18:52:01] Coren: is https://bugzilla.wikimedia.org/56180 difficult to resolve? [18:53:10] ahmed90: i think you have to become a member of ToolLabs , it's a project within labs [18:53:32] Ryan_Lane: can't we auto-grant shell requests? [18:53:43] YuviPanda: no? [18:53:48] Ryan_Lane: why? [18:53:50] anti-spam? [18:53:52] yes [18:54:05] hmm [18:54:06] ok [18:54:08] so what does he need, membership in tool labs? [18:54:14] or should he user anotehr bastion [18:54:15] @ mutante how i can do it? [18:54:18] ahmed90: you need to be a member of tool labs [18:54:38] ahmed90: https://wikitech.wikimedia.org/wiki/Special:FormEdit/Tools_Access_Request [18:54:50] thx [18:54:57] i trying now [18:56:20] https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/Access_Request/Ahmed90 [18:58:46] pleas some on see my request :) [19:00:21] who runs cluebot III ? [19:00:42] I know its on labs [19:01:53] @ Betacommand : pleas see https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/Access_Request/Ahmed90 [19:02:36] ahmed90: added! [19:02:42] thx [19:02:49] yw [19:04:01] ahmed90: I have no access to add you [19:09:12] Ryan_Lane: did you get any success to use gifts for both state and pillars? [19:12:16] gitfs? [19:12:20] I haven't tried it [19:14:40] to use a remote git repo and that the master read from them for both pillar and states [19:14:52] i see gifts, git, gitfs_remotes [19:15:07] and many different way to configure. No combination worked so far :/ [19:16:23] why remote? [19:16:30] you should have it locally checked out [19:17:00] remote would likely be really slow [19:20:39] this morning i was able to use mysql in gwtoolset.pmtpa.wmflabs. about 3 hours later i could not [19:20:45] getting the error ERROR 2002 (HY000): Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) [19:20:53] anyone know how to correct that? [20:27:13] $ phpunit [20:27:14] PHP Warning: require_once(PHP/CodeCoverage/Filter.php): failed to open stream: No such file or directory in /usr/bin/phpunit on line 38 [20:27:14] PHP Fatal error: require_once(): Failed opening required 'PHP/CodeCoverage/Filter.php' (include_path='.:/usr/share/php:/usr/share/pear') in /usr/bin/phpunit on line 38 [20:30:11] Elph! [20:32:18] Come in private [20:57:43] Elph [21:39:34] Ryan_Lane: andrewbogott Coren are any of you going to talk about any of the labs stuff at FOSDEM? [21:39:51] YuviPanda: I didn't submit yet [21:40:02] Ryan_Lane: yeah, there's like a month left [21:40:03] I talked about labs two years ago and had an audience of 600 [21:40:04] but planning to? [21:40:10] woo! [21:40:17] actually that sounds scary [21:40:19] I didn't submit, but it would be a nice thing to do. [21:40:43] YuviPanda: I had already given a few keynotes by that time, so it wasn't too scary [21:40:47] right [21:40:56] I think I'd want to make a talk on "Tool writers can make anything better" [21:41:16] I talked at PyCon in 2010, but that was only like 200 people [21:41:22] I.e.: stimulating the dev community around whatever you are doing by exposing APIs, providing infrastructure, etc. [21:41:46] With Tool Labs and the MW projects as case study. [21:41:49] Coren: hmm, I might give a related talk about how "Code as configuration" lets volunteers volunteer for sysdamin stuff as well [21:41:59] but don't think that'll be very long, or very interesting [21:42:19] I dunno whether there'd be budget for it though. [21:42:25] YuviPanda: you could give a talk about your proxy [21:42:39] Coren: assume there's always budget if you have a talk [21:42:48] Ryan_Lane: hmm, that, yeah. [21:42:55] reminds me I need to get v2 done [21:43:05] if you get accepted to give a talk somewhere and wikimedia isn't willing to pay for you to go, they've lost their minds [21:43:18] especially somewhere like fosdem [21:43:50] heh, true [21:44:10] I could talk about apps too [21:44:38] the cloud room would be appropriate for your proxy [21:45:33] * andrewbogott is ambivalent about Belgium in the winter :) [21:45:50] …although all the Wine project people will be there I think [21:46:05] belgium in the winter is a little painful [21:46:09] still fun though [21:46:13] best beer selection ever [21:46:23] also, fosdem is just great [21:46:35] hm. maybe I could give a talk about my deployment system [21:47:02] I'd need to find an appropriate room for that [21:47:12] maybe that could actually be a main room talk [21:47:51] I can just wear like, 4 jackets [21:47:55] (I didn't get accepted last year for a relatively ambitious main room talk) [22:32:21] hi