[00:30:56] (03PS1) 10Legoktm: Allow bad headers like "Bug: T###" [labs/tools/forrestbot] - 10https://gerrit.wikimedia.org/r/233185 [00:31:15] (03CR) 10Legoktm: [C: 032 V: 032] Allow bad headers like "Bug: T###" [labs/tools/forrestbot] - 10https://gerrit.wikimedia.org/r/233185 (owner: 10Legoktm) [01:04:40] 6Labs, 3Labs-Sprint-107, 3Labs-Sprint-108, 3Labs-Sprint-109: Evaluate kubernetes for use on Tool Labs - https://phabricator.wikimedia.org/T107993#1564677 (10scfc) I understand that's your idea, but I don't understand why it's necessary. I think a `proxylistener`-like service is much easier reviewed for se... [08:22:16] 10Tool-Labs-tools-Erwin's-tools: "Fatal Error: Database query failed" for Related Changes tool - MySQL down? - https://phabricator.wikimedia.org/T104688#1564843 (10Nemo_bis) > Now it's working again; don't know if @Erwin (Erwin) or others did something about it. Yes, I fixed it with T107618. [09:14:24] hi there, my tool has been denied access to mysql for a few weeks now, but it used to work before. did I miss a password rotation or something? [09:14:51] the replica.my.cnf on my user account is still valid though. [12:21:47] 6Labs, 7Tracking: New Labs project requests (tracking) - https://phabricator.wikimedia.org/T76375#1565032 (10Nemo_bis) [12:30:06] ggp: what error is it giving? [12:31:56] Betacommand: $ sql enwiki_p 'select 1;' -> ERROR 1045 (28000): Access denied for user 'XXXXX'@'10.68.17.228' (using password: YES) [12:33:15] ggp: can you try that with dewiki, and trwiki ? [12:34:35] Betacommand: same thing: ERROR 1045 (28000): Access denied for user 'XXXXX'@'10.68.17.228' (using password: YES) [12:35:05] ggp: what account are you doing this as? [12:35:29] Betacommand: tools.citationhunt [12:37:47] ggp: what username is listed in the XXXX ? [12:38:43] Betacommand: s52481 [12:39:11] ggp: I would file a phab ticket, looks like something got messed up [12:39:21] cc coren [12:40:02] Betacommand: sure, how do I do that? I don't actually know what phab is :) [12:40:48] ah, phabricator.wikimedia.org I'll guess [12:43:21] yep [12:43:25] !bug [12:43:25] https://bugzilla.wikimedia.org/buglist.cgi?quicksearch= [12:43:32] !ticket [12:43:38] !phab [12:44:11] ggp: the bugzilla link will take you to the right place [12:44:33] Betacommand: got it, thank you! [12:45:04] 6Labs, 10Tool-Labs: tools.citationhunt can't access databases - https://phabricator.wikimedia.org/T109972#1565044 (10Surlycyborg) 3NEW [13:13:17] 6Labs, 10Tool-Labs, 7Database: tools.citationhunt can't access databases - https://phabricator.wikimedia.org/T109972#1565128 (10valhallasw) [16:28:03] Coren, poke [16:30:21] Cyberpower678: he's been idle since Monday it seems [16:30:45] JohnFLewis, better fix that. [16:30:55] * Cyberpower678 loads a startup process into Coren. [16:31:05] what do you need from him anyway? [16:31:16] JohnFLewis, resources [16:31:58] Cyberpower678: what type? :) need to clarify [16:32:12] A new exec node for cyberbot [16:32:31] Coren said he can likely get me what I need when the new hardware arrives. [16:32:40] YuviPanda: ^^ something you can glance at at least [16:33:00] So I'm here to ask about the status of the new hardware labs is supposed to get. [16:33:19] didn't you get your own project to move things off of tools? [16:33:42] That's xTools. This is for Cyberbot which is doing dandy on tools. [16:33:47] either way, unfortunatley I can't help much, no idea what Coren had in mind. He'll be back beginning of next week only. [16:34:02] That's alright. [16:34:15] got a response at least :) [16:34:16] I'm also waiting to hear from Ocaasi. [16:34:28] :) [16:34:45] It would seem certain people at WMF have taken an interest in Cyberbot II 5. :D [16:39:26] JohnFLewis, YuviPanda: Ocaasi approached me on behalf of WMF, and is essentially let me use the WMF name to get things moving over at archive.org. :p [16:40:03] Cyberbot II 5? Isn't that 7? :p [16:40:49] I meant the BRFA request. [16:40:56] :p [16:56:53] Cyberpower678: is there a task for that? [16:57:05] for a new exec node? [17:09:09] (03PS1) 10Jean-Frédéric: Use compat2core on update_database.py [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233216 [17:41:59] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Use compat2core on update_database.py [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233216 (owner: 10Jean-Frédéric) [18:27:23] I'm getting Permission denied (publickey,hostbased) at my tool labs login [18:27:30] what do I need to do [18:27:33] ? [18:28:33] what command are you running to get that? [18:28:46] have you successfully logged in before or are you trying for the first time? [18:29:25] I think I put the wrong password before [18:29:31] password? [18:29:36] what password where? [18:30:00] I log using ubuntu terminal [18:30:04] ssh lbertolotti@login.tools.wmflabs.org [18:32:13] what is your public key on your machine? [18:36:07] you mean the one at my tool labs account? [18:37:57] lbertolotti, I want to know if the key you're trying to use matches the one on your labs account [18:38:21] I know which key labs is expecting, I don't know what one you're attempting to use [18:40:45] (03PS1) 10Jean-Frédéric: Fix identification of templates from configuration [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233221 [18:41:28] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Fix identification of templates from configuration [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233221 (owner: 10Jean-Frédéric) [18:43:59] I found a copy of my old ez_setup.py [18:44:09] Is it worth anything? [18:46:14] oh, that's something else [18:46:24] I was using with pywikibot [18:47:56] So, do I need to give you my public key? [18:48:28] lbertolotti: you need to add it to https://wikitech.wikimedia.org/wiki/Special:Preferences#mw-prefsection-openstack [18:49:08] see https://www.mediawiki.org/wiki/Gerrit/Tutorial#Set_Up_SSH_Keys_in_Gerrit for generating an ssh key [18:52:46] (03PS1) 10Jean-Frédéric: Remove unexpected parameter from templatesWithParams [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233223 [18:52:59] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Remove unexpected parameter from templatesWithParams [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233223 (owner: 10Jean-Frédéric) [19:09:26] Good day [19:09:29] I'm back [19:09:38] as I was saying [19:09:44] I already have a public key [19:09:53] lbertolotti: ok, good. Did you add it on wikitech? [19:09:59] y [19:12:28] lucas@lucas-K55VD:~$ ssh lbertolotti@login.tools.wmflabs.org Permission denied (publickey,hostbased) [19:13:38] lbertolotti: I see no login attempts for lbertolotti on that host, strangely enough. [19:13:45] If you run ssh -v -v lbertolotti@login.tools.wmflabs.org [19:14:04] what do you get for 'Server host key:'? [19:14:42] in addition, you should get a set of debug2: key: '...' lines. Please check your correct key is listed there. [19:15:00] ECDSA 80:37:58:71:84:99:54:e7:17:dd:c4:be:54:48:41:57 [19:15:33] yep, that looks correct. Hm. [19:16:03] ah! yes, I see what's happening [19:16:27] "reverse mapping checking getaddrinfo for [...] [ip address] failed - POSSIBLE BREAK-IN ATTEMPT!" [19:17:29] which means the reverse dns for your ip (bacc5978.virtua.com.br) doesn't actually resolve to your ip address [19:18:43] so I think that's probably misconfiguration on our side [19:20:13] so, what do I do? [19:23:05] Is there any way of solving this? [19:23:36] 6Labs, 10Tool-Labs: sshd rDNS check prevents users from logging in - https://phabricator.wikimedia.org/T109989#1565838 (10valhallasw) 3NEW [19:23:49] lbertolotti: I need to check with others whether we can disable this security feature [19:24:09] lbertolotti: you might in parallel also want to complain to your internet provider, as they misconfigured their DNS [19:24:14] ok, I'm waiting here [19:24:30] lbertolotti: I don't think we will be able to resolve this today. [19:24:41] ok [19:24:49] it seems odd to set a rdns that doesn't resolve to any ip [19:24:59] the people who would know whether this is OK or not are mostly off on their weekend, but hopefully they'll be able to chime in tomorrow [19:25:44] "complain to your internet provider", I already did that [19:25:47] They don't care [19:26:32] can you switch providers? [19:26:38] valhallasw`cloud, are you sure it's that setting? [19:27:31] Platonides: not 100%, but fairly certain, yes. In the log file, I get [19:27:33] Aug 23 19:14:00 tools-bastion-01 sshd[31416]: reverse mapping checking getaddrinfo for baccYYYY.virtua.com.br [186.204.89.XXX] failed - POSSIBLE BREAK-IN ATTEMPT! [19:27:33] Aug 23 19:14:00 tools-bastion-01 sshd[31416]: Connection closed by 186.204.89.XXX [preauth] [19:27:59] I thought UseDNS specified whether they should be logged or not [19:28:17] and that it produces those loudly warnings [19:28:27] but not that it blocked access per se [19:28:34] yeah, you're right, further googling suggests it's just a warning [19:28:36] hum. [19:28:53] lbertolotti: could you post the full output of ssh -v -v login.tools.wmflabs.org somewhere? [19:29:17] I don't think we have a from= rule looking at it [19:29:28] where do you want it me to put it? [19:29:49] lbertolotti: https://tools.wmflabs.org/paste [19:30:19] 6Labs, 10Tool-Labs: Permission issues and/or failure to load Ruby environment on trusty - https://phabricator.wikimedia.org/T106170#1565849 (10MusikAnimal) @scfc thanks! You are correct it wasn't the same error, but similar in nature, I guess is what I meant. I would get permission errors about various files t... [19:31:10] done [19:32:25] it doesn't seem you are trying to log in with public key [19:32:44] load it to your agent, or provide it with -i [19:33:04] alternatively, you could also configure the file in ssh_Config [19:33:27] lbertolotti: normally, your private key would be in ~/.ssh/id_rsa (or _dsa, etc), but those files don't seem to exist [19:34:20] maybe I need to recreate them [19:34:39] do you have the key file? [19:34:52] I was trying to find it [19:34:53] it may be that you simply saved it at another folder [19:35:50] yes, or maybe I lost it [19:36:59] well, we can't look into your machine :D [19:37:09] you can create a new one if you wish [19:37:16] probably it's better [19:38:16] I was looking here [19:38:16] https://wikitech.wikimedia.org/wiki/Help:Tool_Labs [19:43:06] so now what? [19:43:08] ssh-keygen -t rsa ? [20:03:43] lbertolotti: yes, that should work [20:04:03] sorry, I'm off to bed now. [20:04:46] 6Labs, 10Tool-Labs: sshd rDNS check prevents users from logging in - https://phabricator.wikimedia.org/T109989#1565885 (10valhallasw) 5Open>3Invalid a:3valhallasw This was a red herring in the end -- it was just an issue with pub/private keys. [20:19:14] 10Tool-Labs-tools-Erwin's-tools: "Fatal Error: Database query failed" for Related Changes tool - MySQL down? - https://phabricator.wikimedia.org/T104688#1565897 (10Supernino) @Nemo_bis Thanks, however it's down again T109591 [20:30:03] very well [20:30:17] it seems I have a private and a public key now [20:30:32] but I still get Permission denied (publickey,hostbased). [21:03:17] SELECT command denied to user 's51932'@'10.68.17.191' for table 'revision' [21:03:19] Is this normal? [22:01:34] SPF|Cloud: did you forget a _p in database name? [22:02:01] hm, I see (yes, I did...) [22:02:25] But why do those databases (without the _p) exist then? Is there a technical reason for that? [22:11:15] SPF|Cloud, I assume those are the actual underlying tables with sensitive data [22:20:20] Seems sane to me Krenair. I never really knew why I'd use _p (the actual tables wirh private data was one of my expectations), but this makes it clear. I'll see what happens when I add the _p tomorrow - thank you! [22:33:56] (03PS1) 10Jean-Frédéric: Ues compat2core on populate_image_table [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233329 [22:34:10] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Ues compat2core on populate_image_table [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233329 (owner: 10Jean-Frédéric) [22:40:18] (03PS1) 10Jean-Frédéric: Fix database connection charset spelling [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233330 [22:40:41] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Fix database connection charset spelling [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233330 (owner: 10Jean-Frédéric) [23:02:54] (03PS1) 10Jean-Frédéric: Convert database_statistics.py to core using compat2core [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233332 [23:03:12] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Convert database_statistics.py to core using compat2core [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233332 (owner: 10Jean-Frédéric) [23:28:12] Change on 12www.mediawiki.org a page Developer access was modified, changed by 118.71.173.190 link https://www.mediawiki.org/w/index.php?diff=1859182 edit summary: [-1541] Sua loi chinh ta [23:28:15] (03PS1) 10Jean-Frédéric: General update to unused_monument_images.py (pep8, core, ^M) [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233333 [23:28:33] Change on 12www.mediawiki.org a page Developer access was modified, changed by Eurodyne link https://www.mediawiki.org/w/index.php?diff=1859183 edit summary: [+1541] Reverted 1 edit by [[Special:Contributions/118.71.173.190|118.71.173.190]] ([[User talk:118.71.173.190|talk]]) to last revision by MaxSem. ([[m:Twinkle|TW]]) [23:30:39] (03CR) 10Jean-Frédéric: [C: 032 V: 032] General update to unused_monument_images.py (pep8, core, ^M) [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233333 (owner: 10Jean-Frédéric) [23:40:31] (03PS1) 10Jean-Frédéric: Convert missing_commonscat_links.py to core using compat2core [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233335 [23:41:19] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Convert missing_commonscat_links.py to core using compat2core [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233335 (owner: 10Jean-Frédéric) [23:43:58] (03PS1) 10Jean-Frédéric: Fix syntax error caused by compat2core [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233336 [23:44:11] (03CR) 10Jean-Frédéric: [C: 032 V: 032] Fix syntax error caused by compat2core [labs/tools/heritage] - 10https://gerrit.wikimedia.org/r/233336 (owner: 10Jean-Frédéric)