2022-10-25T06:40:03  <hellcp> acidsys: dns isn't done in freeipa anymore
2022-10-25T06:40:31  <bmwiedemann[m]> It is on chip.infra.o.o with pdns
2022-10-25T06:41:31  <hellcp> I still need to migrate our freeipa instance
2022-10-25T06:42:05  <hellcp> the issue is that it has the potential to take out all access to the rest of the infra
2022-10-25T07:11:47  <acidsys> hellcp bmwiedemann[m] according to powerdns infra.opensuse.org is delegated to freeipa
2022-10-25T07:12:21  <acidsys> and I cannot find any *.infra names in the opensuse.org zone in powerdns
2022-10-25T08:13:54  *** teepee_ is now known as teepee
2022-10-25T08:43:47  <pjessen> acidsys: yep, and there is no separate infra.o.o zone either.
2022-10-25T08:55:26  <pjessen> acidsys: It looks like we have named running and anna and elsa.  anna slaves infra.o.o from chip.
2022-10-25T08:56:26  <pjessen> acidsys: and chip DOES have infra.opensuse.org, I don't know how I overlooked it
2022-10-25T08:58:05  <acidsys> interesting, so why does it have a record infra.opensuse.org NS freeipa.infra.opensuse.org
2022-10-25T08:58:12  <acidsys> in the opensuse.org zone
2022-10-25T08:58:58  <acidsys> and where did you find the infra.opensuse.org zone ? I use `pdnsutil list-all-zones`
2022-10-25T08:58:59  <pjessen> i dont understand that either
2022-10-25T08:59:30  <pjessen> list-all-zones does list it
2022-10-25T09:00:21  <acidsys> ah right, there it is indeed
2022-10-25T15:24:54  *** teepee_ is now known as teepee
2022-10-25T17:53:24  <acidsys> pjessen: mx3 hostname == mx3 ?
2022-10-25T17:59:48  <LCP0968[m]> I have a suspicion that if I don't set up jenkins it's just not gonna end up set up at all
2022-10-25T17:59:55  <LCP0968[m]> I should do it
2022-10-25T18:02:01  <acidsys> LCP0968[m]: if I can be of help with something .. happy to
2022-10-25T18:03:53  <LCP0968[m]> I have so many questions I don't know where to begin
2022-10-25T18:06:25  <acidsys> my Q is what do we want Jenkins for :D
2022-10-25T18:06:51  <LCP0968[m]> code.opensuse.org
2022-10-25T18:06:58  <LCP0968[m]> and to replace our gitlab entirely
2022-10-25T18:07:10  <LCP0968[m]> get rid of it completely, who needs it
2022-10-25T18:07:37  <acidsys> ahh nice
2022-10-25T18:07:59  <acidsys> is that why some repos are the same in both?
2022-10-25T18:08:03  <cboltz> I guess the first question is if there's a SUSE salt repo that has something to setup jenkins ;-)  I remember one was even mentioned on our jenkins VM, but didn't contain anything relevant. Are there other SUSE salt repos that might contain something? ;-)
2022-10-25T18:09:47  <acidsys> ah I remember you asked about one obscure repository there once .. hmm
2022-10-25T18:10:47  <cboltz> my guess is that it might have moved to another location since the note about it was added
2022-10-25T18:11:02  <acidsys> I guess bmwiedemann[m] would know
2022-10-25T18:12:41  <cboltz> different question: do you still need/want access for DNS management in FreeIPA, or are the zones you are looking for on chip?
2022-10-25T18:13:11  <acidsys> I guess they're on chip then, but can you explain that NS record pointing to freeipa.infra.o.o ? :p
2022-10-25T18:13:29  <cboltz> that's easy: historical reasons
2022-10-25T18:13:45  <cboltz> the zones were moved to chip, but nobody updated the NS record
2022-10-25T18:14:53  <acidsys> ok then I guess I am good
2022-10-25T18:15:01  <LCP0968[m]> I mean, actually, I am fairly sure openqa is broken because of that ns record when you are logged into the vpn
2022-10-25T18:15:27  <LCP0968[m]> which is amazing, that's like the only service that breaks when under vpn
2022-10-25T18:16:13  <LCP0968[m]> I have a good question, should we set up freeipa server on one of the openSUSE distros, since we do technically have a package now
2022-10-25T18:16:29  <LCP0968[m]> we could skip migration to centos entirely
2022-10-25T18:17:06  <acidsys> I'd love that
2022-10-25T18:17:12  <LCP0968[m]> not that I wanna migrate to anything before I have somebody in front of the server ready to unfuck what I did >:D
2022-10-25T18:17:43  <cboltz> it's always entertaining to tell people that parts of the openSUSE infrastructure run on Fedora ;-) so I'd loose a fun fact
2022-10-25T18:17:44  <LCP0968[m]> we should also have at least two freeipa servers, like we do now
2022-10-25T18:17:46  <cboltz> but I won't stop you
2022-10-25T18:17:50  <acidsys> LCP0968[m]: in front of == console ?
2022-10-25T18:18:18  <LCP0968[m]> that works, what matters is that when I touch freeipa, vpn breaks after some time
2022-10-25T18:18:32  <LCP0968[m]> so somebody needs to have access to a layer above
2022-10-25T18:18:53  <LCP0968[m]> preferably just restore freeipa to previous state or whatever
2022-10-25T18:20:27  <acidsys> cool I can help with that
2022-10-25T18:20:33  <LCP0968[m]> and I have done it before, so I clearly am not afraid of touching fire
2022-10-25T18:22:54  <LCP0968[m]> yeah, I will have a look at how we stand with freeipa again, since the fixes are fairly recent
2022-10-25T18:23:16  <LCP0968[m]> and I haven't participated in the latest batch
2022-10-25T18:24:29  <hellcp> https://build.opensuse.org/package/show/security:idm/freeipa#comment-1687343 I also need to do this
2022-10-25T18:25:21  <hellcp> do we still have the vm that was designated for freeipa on openSUSE?
2022-10-25T18:27:03  <hellcp> no, it was removed
2022-10-25T18:27:12  <hellcp> that's fine, though we may need a new vm then
2022-10-25T18:27:58  <acidsys> there is freeipa.infra.o.o fedora-freeipa.infra.o. and freeipa2.infra.o.o
2022-10-25T18:28:16  <hellcp> it was called identification.i.o.o
2022-10-25T18:28:33  <hellcp> fedora freeipa is clearly not it
2022-10-25T18:28:38  <acidsys> that's there as well :)
2022-10-25T18:28:47  <hellcp> freeipa is the old fedora freeipa
2022-10-25T18:28:48  <hellcp> and freeipa2 is centos
2022-10-25T18:29:15  <hellcp> we could use the authentification machine I guess, I do not remember what was installed there
2022-10-25T18:29:36  <hellcp> actually, funny story, I found a post from boosters from forever ago that mention using openid instead of ichain everywhere
2022-10-25T18:29:37  <hellcp> funny funny stuff
2022-10-25T18:29:43  <hellcp> that's going splendidly this far
2022-10-25T18:31:07  <acidsys> you mean identification machine with authentication ?
2022-10-25T18:31:49  <acidsys> in racktables it says centos 7 but that does not have to be anywhere near accurate .. I guess I could boot it without network to find out
2022-10-25T18:34:35  <hellcp> oh, maybe it was centos after all
2022-10-25T18:35:01  <hellcp> that is weird tho, what was the planned machine for openSUSE based auth then
2022-10-25T18:35:55  <hellcp> afaik fedora-centos was set up specifically for that, since we wouldn't have been able to use leap
2022-10-25T18:39:55  <acidsys> GRUB offers me Leap 15.4 :)
2022-10-25T18:41:03  <acidsys> but [DEPEND] Dependency failed for drac…additional cmdline parameters.
2022-10-25T18:41:41  <acidsys> guess if it's old best to reinstall anyways? otherwise I can try to fix it
2022-10-25T18:44:23  <acidsys> ah recovery mode works
2022-10-25T18:44:55  <hellcp> yeah, I don't really care enough about it
2022-10-25T18:45:09  <hellcp> it's not like anything of value was lost there
2022-10-25T18:45:58  <hellcp> could you set up 2 machines right away? I would set up one of them and then set up redundancy with the second one
2022-10-25T18:46:21  <hellcp> although, it's not really much of a rush considering the schedule up to this point
2022-10-25T18:47:33  <hellcp> I think lars offered to help with that migration in october or november during one of the last heroes meetings he was at, and look where we are now 😛
2022-10-25T18:47:57  <acidsys> 2 new ones or including this identification.i.o.o reinstall?
2022-10-25T18:48:12  <acidsys> because I would like to take a backup of the latter first .. not that anyone complains afterwards :D
2022-10-25T18:51:50  <hellcp> 1 new one after reinstall
2022-10-25T18:52:08  <hellcp> we don't need that much redundancy
2022-10-25T18:53:05  <hellcp> I will need to figure out which files to put into salt tbh
2022-10-25T18:53:05  <hellcp> freeipa is a bit complex
2022-10-25T18:53:10  <hellcp> maybe I could make a filesystem diff somehow
2022-10-25T18:54:51  <cboltz> not sure if it's still maintained, but http://machinery-project.org/ might be useful
2022-10-25T18:57:08  <pjessen> acidsys: yeah, i expect it'll be mx3 and mx4
2022-10-25T18:57:09  <acidsys> hellcp: if you don't mind to make a poo with the specs for it, I can do it
2022-10-25T18:58:12  <hellcp> hm, can you replicate the config for the existing one?
2022-10-25T18:58:19  <hellcp> I don't even remember what that one has
2022-10-25T18:58:26  <pjessen> I haven't been allocated any vms yet.
2022-10-25T18:58:36  <acidsys> sure just write use same specs as identification.i.o.o
2022-10-25T18:58:58  <hellcp> gotcha
2022-10-25T18:59:55  <acidsys> ehh
2022-10-25T19:03:40  <acidsys> where do we build the leap image?
2022-10-25T19:03:58  <acidsys> like the infra one
2022-10-25T19:04:00  <hellcp> it's in one of the infrastructure repos on build.o.o
2022-10-25T19:04:16  <acidsys> the newest I find is openSUSE:infrastructure:Images:openSUSE_Leap_15.3
2022-10-25T19:04:31  <hellcp> https://build.opensuse.org/project/show/openSUSE:infrastructure:Images:15.4
2022-10-25T19:04:34  <acidsys> ohh without openSUSE_Leap_ ..  thanks :)
2022-10-25T19:13:36  <acidsys> oh also pjessen ok, thanks for confirming
2022-10-25T19:18:34  <pjessen> acidsys: gern gesceh
2022-10-25T19:32:46  <hellcp> I need to set up redirects for the forums from old to new
2022-10-25T19:46:19  <cboltz> hellcp: for poo#119092 - are all the paths directories (or directory-like) so that the redirect can check (for example) for   /assets/   instead of just   /assets   ?
2022-10-25T19:48:10  <hellcp> fairly sure that's fine
2022-10-25T19:48:20  <hellcp> well, most of them
2022-10-25T19:48:43  <hellcp> I think for /new for example it won't work
2022-10-25T19:50:16  <hellcp> but as I think I said in that issue, worth testing all of that live
2022-10-25T20:09:32  <cboltz> hmm, the fact that forums.o.o is behind login2.o.o makes things more interesting[tm]
2022-10-25T20:09:46  <hellcp> yeah, I thought that would be a problem
2022-10-25T20:10:10  <cboltz> my "usual" haproxy config for directory-specific backends doesn't work - actually I'm not even sure if login2 routes the traffic through haproxy or directly to the forums
2022-10-25T20:10:18  <hellcp> I really hope we manage to get rid of login proxies at some point
2022-10-25T20:10:54  <hellcp> openidc everything
2022-10-25T20:11:04  <acidsys> or saml :)
2022-10-25T20:11:16  <hellcp> saml is pretty old by this point though
2022-10-25T20:11:34  <acidsys> but established
2022-10-25T20:11:37  <hellcp> I just wish our openidc was providing all the metadata we needed
2022-10-25T20:12:03  <acidsys> doesn't it have attributes mapping too?
2022-10-25T20:12:06  <hellcp> I mean, saml is provided by the same thing in our case, so
2022-10-25T20:12:07  <hellcp> it truly does not matter
2022-10-25T20:12:14  <acidsys> ye
2022-10-25T20:12:34  <hellcp> openidc is missing some metadata in the responses
2022-10-25T20:12:52  <acidsys> ah but is that a limitation of openid or our provider
2022-10-25T20:13:06  <hellcp> https://progress.opensuse.org/issues/112466#note-5
2022-10-25T20:13:21  <hellcp> it's something with our provider more than likely
2022-10-25T20:13:27  <cboltz> I don't hate the login proxy that much (actually it's quite easy to use) - but knowing if it routes traffic through haproxy would be nice ;-)  (acidsys: can you look up the config for forums.o.o on daffy1.i.o.o please?)
2022-10-25T20:13:28  <hellcp> because it should work >:D
2022-10-25T20:14:25  <hellcp> I don't really see the need to have this many essentially proxies in front of our services
2022-10-25T20:14:38  <hellcp> cas is simple though, for sure
2022-10-25T20:14:42  <cboltz> (in worst case we should be able to do proxying on the vbulletin machine ;-)
2022-10-25T20:14:59  <hellcp> well, at least it's not the connect machine
2022-10-25T20:15:08  <hellcp> which was using lighttpd
2022-10-25T20:15:18  <hellcp> I still have nightmares about configuring that one
2022-10-25T20:16:00  <cboltz> I guess there's more than one reason to have nightmares about connect ;-)
2022-10-25T20:16:08  <hellcp> at the very least we got rid of boosters for good though >:D
2022-10-25T20:16:44  <hellcp> though that redirect doesn't work anymore
2022-10-25T20:17:02  <hellcp> which is a shame, it would be good to point at the tsp machine
2022-10-25T20:17:24  <hellcp> I also need to update tsp software wise
2022-10-25T20:17:53  <hellcp> it's really old stuff
2022-10-25T20:17:54  <hellcp> and what I got hanged up when last trying were tests
2022-10-25T20:18:02  <hellcp> which were not working right
2022-10-25T20:18:11  <cboltz> the redirect sounds fixable - which redirect do you miss/want?
2022-10-25T20:18:37  <hellcp> the old travel support one
2022-10-25T20:18:38  <hellcp> that was on connect
2022-10-25T20:20:34  <hellcp> https://web.archive.org/web/20180424150108/https://connect.opensuse.org/travel-support/ apparently it was /travel-support/
2022-10-25T20:20:44  <hellcp> I really did not remember and had to look it up
2022-10-25T20:22:14  <cboltz> so you want a redirect connect.o.o/travel-support/ -> tsp.o.o? (Or is it too late for setting it up, since it's broken since like two years?)
2022-10-25T20:25:45  <acidsys> https://gitlab.infra.opensuse.org/infra/salt/-/merge_requests/585/diffs want to review, hellcp ?
2022-10-25T20:30:28  <cboltz> I'd prefer to keep the empty   partners:[]   and   weburls: []
2022-10-25T20:30:51  <cboltz> besides that, no objections from me - but I'm not hellcp ;-)
2022-10-25T20:31:08  <acidsys> more than happy to take on your feedback as well :)
2022-10-25T20:31:16  <hellcp> I have left my review 😛
2022-10-25T20:32:13  *** teepee_ is now known as teepee
2022-10-25T20:39:33  <acidsys> hellcp: thanks! I think most are related to the profile identification and not the machine though, or?
2022-10-25T20:39:43  <acidsys> the only part I want to remove is the postgres hba entries
2022-10-25T20:39:49  <acidsys> or will it need them again?
2022-10-25T20:40:19  <hellcp> ipsilon is deployed by SUSE IT on a machine we don't have access to
2022-10-25T20:40:42  <hellcp> that setup was meant to be a community one, but that never happened
2022-10-25T20:40:48  <acidsys> I know but how's it related?
2022-10-25T20:41:32  <hellcp> I guess I don't understand
2022-10-25T20:41:40  <hellcp> let me spend a minute trying to
2022-10-25T20:41:55  <acidsys> oh sorry, I was replying to your comment about removing files related to it
2022-10-25T20:42:11  <hellcp> yeah, I got that much
2022-10-25T20:42:20  <hellcp> but I don't know where postgres came into the picture
2022-10-25T20:42:43  <acidsys> also cboltz test_roles.py wants me to purge the  ipsilon role because it's not assigned in any other pillar/id/*.sls files.. what do you think?
2022-10-25T20:43:02  <acidsys> hellcp: oh because upon searching for possible files, I found the pg_hba entries in the repository :-)
2022-10-25T20:43:04  <hellcp> in any case, profile and machine were related, since it was never deployed, it should be fine to remove that config
2022-10-25T20:43:12  <acidsys> gotcha
2022-10-25T20:43:33  <cboltz> I'm not surprised that test_roles.py complains ;-)
2022-10-25T20:43:48  <acidsys> I had the same problem at work today and I did not understand the rationale behind this test
2022-10-25T20:44:11  <acidsys> is it to keep the repo from "idling" roles?
2022-10-25T20:44:24  <cboltz> yes
2022-10-25T20:44:38  <acidsys> great .. so many old leftovers, but in the salt pipeline we need to keep everything clean :P
2022-10-25T20:44:39  <cboltz> (also from typo-ed roles, but that's a side effect)
2022-10-25T20:46:17  <acidsys> so do we really want to erase this role.. it seems .. useful ..
2022-10-25T20:46:38  <hellcp> it will remain in the git history
2022-10-25T20:46:57  <hellcp> I wrote that role, I give you permission to erase my work >:D
2022-10-25T20:47:35  <acidsys> haha well fair enough
2022-10-25T20:47:42  <hellcp> that being said, maybe it has clues on how to set up theming in ipsilon
2022-10-25T20:47:51  <hellcp> that I could relay to bernhard
2022-10-25T20:49:11  <acidsys> I wanted to look into what he mentioned about the admin page not working afterwards
2022-10-25T20:49:23  <acidsys> but I stopped when he told me there is no test setup .. :]
2022-10-25T20:49:52  <hellcp> setting up ipsilon for development is fairly easy
2022-10-25T20:50:20  <acidsys> well installing the program itself is one thing .. but it's not really supposed to be how it is in many aspects
2022-10-25T20:50:34  <hellcp> actually, I think identification.i.o.o had ipsilon set up
2022-10-25T20:50:47  <hellcp> so you could have used that >:D
2022-10-25T20:50:53  <acidsys> hah ..
2022-10-25T20:51:15  <hellcp> this was all so long ago
2022-10-25T20:51:22  <hellcp> and 2020 was a long year
2022-10-25T20:52:12  <hellcp> but yeah, I think that profile has the correct setup to get the themes working
2022-10-25T20:52:18  <hellcp> I could point bernhard at that
2022-10-25T20:52:28  <hellcp> compare notes a bit
2022-10-25T20:52:59  * acidsys secretly wishes we would use a keycloak cluster backed with 389ds
2022-10-25T20:53:07  <hellcp> you know, the worst part about this is that I was also the person that implemented theming in ipsilon
2022-10-25T20:53:21  <hellcp> so I of all people should know how it all comes together
2022-10-25T20:53:27  <acidsys> oh really :D
2022-10-25T20:53:54  <hellcp> but I think fedora infra people may know even better than me
2022-10-25T20:54:12  <hellcp> because they have a working deployment with that code
2022-10-25T20:54:57  <hellcp> I sometimes am surprised how much work I have done in open source and how varied it all has been over the years
2022-10-25T20:54:59  <hellcp> it's almost as if I find it fun
2022-10-25T20:56:29  <acidsys> oh I thought they used something other than ipsilon.. this noggin<->freeipa thingie
2022-10-25T20:56:40  <acidsys> almost!
2022-10-25T20:56:56  <hellcp> they do
2022-10-25T20:57:08  <hellcp> they use all 3
2022-10-25T20:57:22  <acidsys> ah authentication rodeo
2022-10-25T20:57:42  <hellcp> noggin is self service, ipsilon is external auth and freeipa is the backend of it all
2022-10-25T20:58:06  <hellcp> that was the setup I wanted for openSUSE too
2022-10-25T20:58:49  <hellcp> but alas, we didn't get there, because a) certification b) it's hard to get people on board
2022-10-25T20:59:00  <acidsys> interesting
2022-10-25T20:59:07  <acidsys> which certification?
2022-10-25T20:59:15  <hellcp> but we did have an actual plan for migrating all of the tooling, whereas SUSE IT left all of the openid things hanging
2022-10-25T20:59:27  <acidsys> :(
2022-10-25T20:59:34  <hellcp> oh idk, SUSE IT was saying they got their community accounts cerified
2022-10-25T21:00:12  <hellcp> ipsilon was deployed to fix the issues with openid not being a thing in the system they deployed tho
2022-10-25T21:00:23  <acidsys> I guess something with CC compliance and univention
2022-10-25T21:00:31  <hellcp> yeah, presumably
2022-10-25T21:00:32  <SFaulken[m]> hellcp: This honestly doesn't surprise me, when it comes to openSUSE infra....
2022-10-25T21:00:45  <SFaulken[m]> it's always been sort of a mixed bag.
2022-10-25T21:01:00  <hellcp> well, if I was handling that I wouldn't have let that happen
2022-10-25T21:01:06  <SFaulken[m]> I've never directly been a SUSE customer, so I dunno if it's any better on that side of things or not.
2022-10-25T21:01:29  <hellcp> noggin is such a valuable resource for communities tbh
2022-10-25T21:01:43  <hellcp> the fact self service is half assed on the community accounts is a disgrace
2022-10-25T21:02:27  <hellcp> well, not just half assed, it's clearly designed to be a solution for companies with some HR people
2022-10-25T21:02:41  <SFaulken[m]> makes sense.
2022-10-25T21:03:06  <acidsys> univention calls their product for a reson "corporate server"
2022-10-25T21:03:11  <hellcp> noggin is a solution designed for open source communities, with solid self service
2022-10-25T21:03:28  <hellcp> and api that lets you find info you need about contributors to contact them if you need to
2022-10-25T21:03:53  <cboltz> you mean, like osc whois? ;-)
2022-10-25T21:04:18  <hellcp> osc whois doesn't apply to anybody that has not signed into obs
2022-10-25T21:04:25  <SFaulken[m]> openSUSE hasn't ever been great at that, in my experience.   There might be tools that work for it, but they're not exactly well documented, that I've found.
2022-10-25T21:04:26  <hellcp> which some of our forums contributors have not for example
2022-10-25T21:04:32  <hellcp> why would they, they are on the forums
2022-10-25T21:04:45  <SFaulken[m]> (granted, lots of other Open Source projects/distros aren't any better.)
2022-10-25T21:05:38  <hellcp> not to mention, I know quite a few people with outdated info in obs because they haven't logged in in quite a while, so their account wasn't updated by idp
2022-10-25T21:07:53  <acidsys> https://www.univention.com/blog-en/2020/05/register-your-own-account-new-self-service-for-suse-and-ucs/ "Our developers _quickly_ implemented the new feature" ;P
2022-10-25T21:07:56  <hellcp> having that kind of stuff integrated well with the idp makes the most sense
2022-10-25T21:08:21  <hellcp> it shows
2022-10-25T21:10:12  <hellcp> I shouldn't be that hard on them, but like come on, noggin was written as a way to migrate away from the aging fas2, and you do this kind of a thing for a customer?
2022-10-25T21:10:50  <hellcp> maybe SUSE's not paying enough? 😛
2022-10-25T21:10:52  <acidsys> I suppose it's partially them and partially the requirements given
2022-10-25T21:11:14  <acidsys> but unfortunately all before my time
2022-10-25T21:11:46  <hellcp> it was during my time and I am salty that we were not consulted a single time about our requirements
2022-10-25T21:12:11  <hellcp> and that there was basically no research done on what our requirements might be
2022-10-25T21:12:58  <acidsys> I feel your pain .. and it honestly reflects other anti-OSS approaches in the history
2022-10-25T21:13:12  <hellcp> the openid thing required looking at openqa for a second to figure out that was something that is needed, and it involved people that were hired at SUSE too, so you didn't even have to look outside of the company
2022-10-25T21:13:41  <hellcp> acidsys: something something jira?
2022-10-25T21:14:06  <acidsys> ouch don't stab me that hard, I was thinking of light things such as no LibreOffice presentation templates :D
2022-10-25T21:14:28  <hellcp> I mean, I can't expect much, SUSE is okta, microsoft 365 and adobe through and through
2022-10-25T21:15:06  <acidsys> yes. it annoys me a lot but I have to be honest - I still extremely value being there
2022-10-25T21:15:12  <acidsys> it's a bit of a love/hate relationship :)
2022-10-25T21:15:23  <SFaulken[m]> heh.  I'm gonna ask, and not in a way that means I expect anybody to have a direct answer, but is the interface on the openSUSE bugzilla ever going to get refreshed and or become less hideous?
2022-10-25T21:15:48  <hellcp> so the answer is yes and no
2022-10-25T21:16:02  * acidsys hides
2022-10-25T21:16:08  <hellcp> yes, bugzilla is being migrated as far as we know
2022-10-25T21:16:23  <hellcp> but no because bugzilla default theme is even uglier than the one we currently use
2022-10-25T21:16:23  <SFaulken[m]> It works, and I'm used to it at this point, but it isn't what I would call "good" or "user friendly"
2022-10-25T21:16:42  <SFaulken[m]> I would offer to help, but web developer, I ain't.
2022-10-25T21:16:51  <hellcp> bugzilla 6 would be amazing but it's not getting released anytime soon
2022-10-25T21:17:25  <hellcp> it's a huge step forward, that was kinda killed in its tracks by mozilla firing a lot of the bugzilla team that was doing that ux work
2022-10-25T21:17:34  <hellcp> you gotta love mozilla
2022-10-25T21:17:46  <SFaulken[m]> yeah, I figured.  Better for them to be tossing more developers at features in firefox that nobody asked for.
2022-10-25T21:18:08  <SFaulken[m]> they're not even bad features, I just don't know who wanted them in the first place.
2022-10-25T21:18:46  <hellcp> bugzilla team right now is trying their best to release a new version of bugzilla this year
2022-10-25T21:19:45  <hellcp> they do have a new website https://www.bugzilla.org/
2022-10-25T21:20:02  <hellcp> but yeah, development of this takes a lot of time, as expected
2022-10-25T21:20:23  <SFaulken[m]> well, their website doesn't make me want to gouge my eyes out.   So I consider that a plus.
2022-10-25T21:20:23  <bittin1049[m]> o:
2022-10-25T21:20:40  <hellcp> it looked a lot worse like a week ago
2022-10-25T21:20:57  <bittin1049[m]> think i seen the website a week ago then 😛
2022-10-25T21:21:03  <bittin1049[m]> then it was like Mozilla.org design from 1999
2022-10-25T21:21:12  <bittin1049[m]> looked a lot different now
2022-10-25T21:21:34  <hellcp> https://web.archive.org/web/20221005232015/https://www.bugzilla.org/
2022-10-25T21:21:35  <SFaulken[m]> my wife was actually shocked and horrified when she heard the project still used Bugzilla.
2022-10-25T21:21:50  <hellcp> bittin1049[m]: to be fair, it was 2006 or so
2022-10-25T21:22:11  <bittin1049[m]> fair enough
2022-10-25T21:22:42  <hellcp> the mozilla website from 1999 was beautiful
2022-10-25T21:23:10  <hellcp> https://web.archive.org/web/19990208014947/http://www.mozilla.org/
2022-10-25T21:23:25  <hellcp> it's one of my favourites personally
2022-10-25T21:23:33  <SFaulken[m]> Yeah, I remember that site, from back in the day.
2022-10-25T21:30:49  <hellcp> in any case, bugzilla 6 will likely look somewhat like mozilla bugzilla does look right now
2022-10-25T21:30:57  <hellcp> whenever it releases
2022-10-25T21:31:20  <hellcp> and hopefully it doesn't take a decade for SUSE to update to a new version
2022-10-25T21:31:52  <SFaulken[m]> heh
2022-10-25T21:32:44  <hellcp> and if SUSE asked me I would design them a nice theme for older bugzilla version, it shouldn't be too hard
2022-10-25T21:32:53  <hellcp> I mean, KDE did it
2022-10-25T21:33:11  <hellcp> https://bugs.kde.org/ doesn't look half bad
2022-10-25T21:33:24  <SFaulken[m]> Yeah, KDE's interface is pretty nice.
2022-10-25T21:33:32  <acidsys> bugzilla.mozilla.org is slick too IMO
2022-10-25T21:34:01  <hellcp> it is a well performed redesign
2022-10-25T21:34:29  <acidsys> sigh why does the poo wiki override my 1. 2. 3. with bullet points
2022-10-25T21:34:57  <SFaulken[m]> I think the current design probably adds to A) the lack of bug reports I get for the things I work with, and B) the quality of the bug reports I do get.
2022-10-25T21:36:33  <acidsys> probably also lack of interaction between community and developers
2022-10-25T21:37:00  <acidsys> there's not much incentive for a contributor to find bug reports interesting to contribute fixes to
2022-10-25T21:37:23  <SFaulken[m]> acidsys: some of that, yes, although alot of folks seem to feel like diving into a matrix or IRC channel, complaining about something, and then leaving counts as a bug report.
2022-10-25T21:38:10  <SFaulken[m]> again, not an openSUSE specific issue.
2022-10-25T21:38:26  <acidsys> ye that's a problem as well ..  I  always try to tell them to please report it properly..  that is, if I catch them before they /quit :P
2022-10-25T21:38:56  <acidsys> some follow through with it
2022-10-25T21:39:06  <acidsys> and others start a big rant about how I want their data with the registration
2022-10-25T21:39:15  <SFaulken[m]> I've come to find, as I've gotten older, most of the bugs I've found are completely PEBKAC on my part  =P
2022-10-25T21:39:27  <SFaulken[m]> acidsys: These ones I just ignore.
2022-10-25T21:39:53  <hellcp> I think there are ways to improve bug reporting in bugzilla
2022-10-25T21:41:17  <SFaulken[m]> the way ours is currently setup, even as a long time user, I do sometimes get real confused about what to file the bug against
2022-10-25T21:41:17  <hellcp> it is a bit of an overwhelming process
2022-10-25T21:41:17  <hellcp> oh yeah
2022-10-25T21:41:18  <hellcp> well, our bugzilla could use what rhbz has
2022-10-25T21:41:35  <hellcp> rhbz has a mapping of packages in fedora you can attach a bug into
2022-10-25T21:42:00  <hellcp> that way you can actually report directly against a package, which makes things easier
2022-10-25T21:42:00  <SFaulken[m]> that would be handy.
2022-10-25T21:42:03  <acidsys> it's really annoying I need to manually find the maintainer to assign to or wait for the (probably overloaded) screening team
2022-10-25T21:42:17  <SFaulken[m]> It's probably been 20 years since I filed a bug against RH/Fedora
2022-10-25T21:42:43  <acidsys> wow, such a trouble free OS! :p
2022-10-25T21:42:43  <hellcp> writing an integration for obs in bugzilla would not be difficult, and SUSE likely have the developers to do it
2022-10-25T21:43:12  <SFaulken[m]> acidsys: heh, not hardly, I just don't daily drive fedora much anymore  =P
2022-10-25T21:43:16  <hellcp> well, rhbz is being replaced by jira
2022-10-25T21:43:21  <hellcp> so report bugs there >:D
2022-10-25T21:43:27  <acidsys> they likely have the developers to write your IDP  self service built on top of free software too, but it neeeds someone to assign the resources to the respective teams
2022-10-25T21:43:39  <acidsys> SFaulken[m]: haha I figured, was just kidding
2022-10-25T21:44:11  <hellcp> acidsys: I don't want them to develop anything
2022-10-25T21:44:11  <SFaulken[m]> honestly, I've been running silverblue on my SP3 the last six months or so, and it's alot better than it was a decade ago.
2022-10-25T21:44:17  <acidsys> hellcp: yes.. feature requests already go via Jira
2022-10-25T21:44:18  <hellcp> just use the things
2022-10-25T21:44:20  <hellcp> they are out there
2022-10-25T21:44:33  <SFaulken[m]> (yeah, I know, silverblue and fedora workstation aren't identical  =P)
2022-10-25T21:44:38  <hellcp> acidsys: no, I mean rh uses jira now
2022-10-25T21:44:45  <acidsys> oh right
2022-10-25T21:45:19  <hellcp> it would be great if SUSE used bugzilla for features, I would love that >:D
2022-10-25T21:45:27  <acidsys> SFaulken[m]: I can't really associate with any of these terms .. I only know flavours of openSUSE and SLE :p
2022-10-25T21:45:42  <acidsys> hellcp: yea.. I wish :(
2022-10-25T21:46:05  <acidsys> it'll become even less I  fear
2022-10-25T21:46:20  <acidsys> the bare  minimum of BZ they need to keep for CC related tickets
2022-10-25T21:46:27  <SFaulken[m]> acidsys: silverblue ~= microOS Desktop, Workstation ~= Leap-ish, kinda?   openSUSE doesn't really have a direct analogue.
2022-10-25T21:46:45  <Eighth_Doctor> hellcp: Fedora still uses Red Hat Bugzilla
2022-10-25T21:46:50  <SFaulken[m]> more current than Leap, but not rolling like TW  =P
2022-10-25T21:46:51  <Eighth_Doctor> only RHEL changed to Jira
2022-10-25T21:46:53  <acidsys> ahh right I think I heard silverblue in some comparison to microOS once
2022-10-25T21:46:55  <Eighth_Doctor> and even not completely
2022-10-25T21:46:59  <Eighth_Doctor> * not completely yet
2022-10-25T21:47:16  <hellcp> Eighth_Doctor: I see
2022-10-25T21:47:38  <Eighth_Doctor> The problem is that now there are only two part-timers working on RHBZ
2022-10-25T21:47:48  <Eighth_Doctor> and Red Hat is on a weird kick to do less with less :/
2022-10-25T21:48:06  <Eighth_Doctor> Admittedly, SUSE is in the same boat
2022-10-25T21:48:54  <acidsys> are our CI workers so slow? half an hour to apply a highstate ..
2022-10-25T21:49:10  <acidsys> show*...
2022-10-25T21:49:48  <cboltz> they were much faster in the past, no idea what slows them down
2022-10-25T21:50:06  <cboltz> (and last I checked, only _one_ worker was used for all the jobs, which is also not helpful)
2022-10-25T21:50:34  <cboltz> so if you are somewhat familiar with gitlab and gitlab-runner, you are more than welcome to check what's going on
2022-10-25T21:50:39  <Eighth_Doctor> hellcp: The bigger issue is that the feature delta between BZ and RHBZ is still too high.
2022-10-25T21:51:19  <acidsys> cboltz: I'd be happy to, but I always feel like I'm infiltrating something asking for admin access to services :P
2022-10-25T21:52:34  <cboltz> if you use the admin access to improve the service(s), I guarantee that nobody will complain ;-)
2022-10-25T21:53:12  <acidsys> haha fair enough, shall I ask you or is bernhard the one with power ?
2022-10-25T21:53:18  <acidsys> in gitlab, I mean
2022-10-25T21:55:03  <cboltz> I have shell access (and regularly install the updated gitlab packages etc.)
2022-10-25T21:55:34  <cboltz> but in gitlab, I only have permissions for the salt-related repos
2022-10-25T21:56:03  <hellcp> <Eighth_Doctor> "The bigger issue is that the..." <- yeah, and I bet rh wouldn't spare a developer to try to upstream that stuff
2022-10-25T21:56:27  <hellcp> do any other repos exist in gitlab?
2022-10-25T21:57:20  <acidsys> cboltz: ah got it, will ask him for the gui part then
2022-10-25T21:59:43  <hellcp> cboltz: so I assume I should do proxying of discourse from forum.i.o.o?
2022-10-25T22:00:01  <hellcp> since I guess you were not successful in doing it through normal means
2022-10-25T22:01:34  <cboltz> right, what I tried in haproxy didn't work, so proxying it from forum.o.o is probably less painful than forcing someone to adjust daffy*.i.o.o aka login2.o.o
2022-10-25T22:02:48  <hellcp> follow up: how hard will it be to not proxy it under daffy when we move over to discourse?
2022-10-25T22:03:35  <cboltz> you mean when we completely switch over?
2022-10-25T22:03:40  <hellcp> yes
2022-10-25T22:04:02  <cboltz> that's a DNS change (forums.o.o -> CNAME proxy.o.o) and a boring haproxy config change
2022-10-25T22:04:36  <cboltz> well, actually using the IP of proxy.o.o because forums.o.o has a MX entry, but that's a technical detail
2022-10-25T22:04:41  <hellcp> that sounds easier, alrighy then
2022-10-25T22:04:53  <hellcp> break the forums I go
2022-10-25T22:05:48  <hellcp> oh no I was in this file before, my horrible config
2022-10-25T22:09:05  <hellcp> break the forums I did
2022-10-25T22:10:32  <Fraser_Bell> hellcp:  Break the forums is yer forte. :-P
2022-10-25T22:10:49  <Fraser_Bell> Hi, Christian (cboltz)
2022-10-25T22:11:38  <cboltz> hi
2022-10-25T22:13:03  <hellcp> welp, I clearly don't know what I'm doing
2022-10-25T22:14:05  * Fraser_Bell could help, in that case, hellcp, as I haven't had a clue what I'm doing in years.
2022-10-25T22:17:51  <hellcp> ProxyPass "/new" "http://discourse01.infra.opensuse.org/new"
2022-10-25T22:17:51  <hellcp> ProxyPassReverse "/new" "http://discourse01.infra.opensuse.org/new"
2022-10-25T22:17:59  <hellcp> this doesn't work at all
2022-10-25T22:19:11  <acidsys> this feels like it would make /new/new
2022-10-25T22:19:30  <hellcp> ah, maybe?
2022-10-25T22:20:01  <hellcp> removing the second new does not make a difference
2022-10-25T22:20:25  <hellcp> granted even if it was, discourse responds to every url with something
2022-10-25T22:20:43  <hellcp> 404 is something rather than apache error page
2022-10-25T22:20:58  <acidsys> sorry, my brain was in nginx mode
2022-10-25T22:21:02  <acidsys> what is the issue
2022-10-25T22:21:42  <SFaulken[m]> acidsys: it doesn't work, silly  =P
2022-10-25T22:22:01  <hellcp> I'm trying to proxy discourse01.i.o.o through forum.i.o.o machine
2022-10-25T22:22:30  <acidsys> and the service on discourse01 has its root at /new ?
2022-10-25T22:22:59  <hellcp> I don't want to proxy all of discourse
2022-10-25T22:23:02  <hellcp> only select urls
2022-10-25T22:23:40  <acidsys> but it seems to desire some /stylesheets and /assets and various paths
2022-10-25T22:24:09  <hellcp> I will add those once I know how to proxy other stuff
2022-10-25T22:24:20  <hellcp> I want to start with something
2022-10-25T22:24:31  <acidsys> ok so when I open http://discourse01.infra.opensuse.org/new/ it's broken already even without going through forum
2022-10-25T22:24:41  <cboltz> the error log says
2022-10-25T22:24:42  <cboltz> AH01144: No protocol handler was valid for the URL /new (scheme 'http'). If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule.
2022-10-25T22:24:50  <hellcp> yes, that's because of forced https
2022-10-25T22:25:23  <hellcp> do I need to specify the full url?
2022-10-25T22:25:29  <hellcp> or loadmodule
2022-10-25T22:25:43  <cboltz> give me a minute to try something ;-)
2022-10-25T22:26:43  <cboltz> progress, we now get a blank page for /new, and no error log entry
2022-10-25T22:26:54  <cboltz> FYI: I did   a2enmod mod_proxy_http   and   rcapache2 restart
2022-10-25T22:27:16  <hellcp> of course, I forgot a module
2022-10-25T22:27:40  <hellcp> to be completely fair, that page is not blank at all
2022-10-25T22:27:50  <hellcp> it just doesn't understand what is going on
2022-10-25T22:28:08  <hellcp> so it looks blank in confusion
2022-10-25T22:28:42  * Fraser_Bell is looking blank at this point.
2022-10-25T22:29:20  <cboltz> good point, it at least has a <title> and a favicon
2022-10-25T22:29:30  <hellcp> (I just mean that it can't load any of its assets)
2022-10-25T22:30:26  <cboltz> indeed, lots of 404s
2022-10-25T22:30:52  <cboltz> but that should be fixable with more ProxyPass lines
2022-10-25T22:32:35  <cboltz> acidsys: the CI is much faster if test_nginx and test_sudo don't run in parallel - cancel one of them, and restart it when the other has finished. Not nice, completely annoying - but at least it works and avoids hitting the 1h timeout
2022-10-25T22:34:34  <hellcp> https://forums.opensuse.org/new looks good, huh? >:D
2022-10-25T22:35:30  <acidsys> cboltz: alright, thanks for the tip
2022-10-25T22:36:55  <acidsys> hellcp: neat job so  far
2022-10-25T22:37:11  <hellcp> slowly but surely
2022-10-25T22:37:28  <cboltz> you don't generate your ProxyPass lines with a for loop? ;-)
2022-10-25T22:39:19  <acidsys> mod_macro .. :x
2022-10-25T22:40:19  <cboltz> the last time I've seen that used, I got headache before I understood what's going on ;-)
2022-10-25T22:40:34  <acidsys> hah
2022-10-25T22:40:50  <cboltz> {% for ... %} in the salt template is probably a better choice
2022-10-25T22:41:01  <acidsys> likely more efficient as well
2022-10-25T22:41:48  <hellcp> I am doing that, but I also took it a url at a time
2022-10-25T22:41:53  <hellcp> and it seems it's not all roses
2022-10-25T22:42:09  <hellcp> json files and images aren't proxied?
2022-10-25T22:43:25  <hellcp> oof, actually, images are an issue
2022-10-25T22:43:38  <hellcp> we don't need those anyway
2022-10-25T22:43:52  <hellcp> it looks like vb uses that path
2022-10-25T22:45:26  <cboltz> oh, if vb and discourse use the same path, that's "great"...
2022-10-25T22:49:11  <hellcp> I managed to log in
2022-10-25T22:49:15  <hellcp> that's progress
2022-10-25T22:58:09  <hellcp> https://forums.opensuse.org/categories ayyy
2022-10-25T22:59:08  <hellcp> the only issue now is login, since it depends on discourse.opensuse.org
2022-10-25T22:59:57  <Fraser_Bell> hellcp:  Just followed https://forums.opensuse.org/ and I am looking at discourse.
2022-10-25T23:00:14  <hellcp> huh
2022-10-25T23:01:12  <hellcp> if you did it from discourse itself, that's just js trickery
2022-10-25T23:02:12  <Fraser_Bell> No, I just did that by typing it in the URL line in Firefox.  Doesn't accept the openSUSE login, though, but there it is.
2022-10-25T23:03:27  <hellcp> that doesn't seem correct
2022-10-25T23:04:36  <Fraser_Bell> hellcp:  At top left, if I click "openSUSE Forums", I get:
2022-10-25T23:04:40  <Fraser_Bell> "Oops! That page doesn’t exist or is private."
2022-10-25T23:05:28  <Fraser_Bell> Okay, hellcp, going to start a fresh Firefox and type:  https://forums.opensuse.org/
2022-10-25T23:05:36  <hellcp> yeah, that's what it should say
2022-10-25T23:06:17  <Fraser_Bell> hellcp:  Okay, this time I am at the old forums.  Don't know why that happened the other time.
2022-10-25T23:06:30  <hellcp> me neither, concerning
2022-10-25T23:06:44  <acidsys> why does narwal4 have third party dns servers in /etc/resolv.conf ?
2022-10-25T23:07:20  <Fraser_Bell> hellcp:  Yes, concerning, especially since I did exactly the same thing twice, with different consequences.
2022-10-25T23:08:16  <hellcp> and I can't reproduce it
2022-10-25T23:10:26  <Fraser_Bell> hellcp:  Okay, confuses the heck out of me.  I closed Firefox (my cookies and history self-destruct) and opened again a few times, cannot reproduce it.
2022-10-25T23:10:44  <cboltz> acidsys: no idea, I can only _guess_ that maybe provo-ns wasn't ready or good enough when it was set up
2022-10-25T23:11:10  <acidsys> it must be not ready, because the internal 192.168.67.1 one does not resolve minnie
2022-10-25T23:11:30  <acidsys> which makes it rather useless
2022-10-25T23:12:19  <cboltz> 1.67.168.192.in-addr.arpa domain name pointer provo-proxy.infra.opensuse.org.
2022-10-25T23:12:27  <Fraser_Bell> hellcp: Sorry, that is if I type in https://forums.opensuse.org/categories
2022-10-25T23:12:43  <cboltz> (queried from my laptop, maybe I have a better DNS config than minnie? ;-)
2022-10-25T23:12:57  <acidsys> ye found that as well, but not sure what that is
2022-10-25T23:13:05  <acidsys> because I cannot access it with my account
2022-10-25T23:14:31  <acidsys> ah I understand  now  how provo "works"
2022-10-25T23:14:50  <acidsys> they apparently just put minnie in /etc/hosts for salt to work. great
2022-10-25T23:14:53  <hellcp> Fraser_Bell: yeah, that should be discourse
2022-10-25T23:15:50  <Fraser_Bell> hellcp:  From there, I can view the posts, still in discourse.
2022-10-25T23:16:44  <hellcp> yeah, that's intended
2022-10-25T23:17:08  <hellcp> it's basically trying to make the both forums coexist on the same domain rn
2022-10-25T23:17:19  <hellcp> makes migration a bit easier
2022-10-25T23:17:38  <Fraser_Bell> Okay.  Plus, though, cannot log in.  I think you are aware of that, though, from above.  Long as you know what is going on, sorry for the red herring.
2022-10-25T23:18:15  <hellcp> no worries
2022-10-25T23:18:38  <hellcp> acidsys: I assume you don't have access to the ipsilon admin panel?
2022-10-25T23:19:16  <acidsys> hellcp:  I do :)
2022-10-25T23:20:12  <hellcp> for discourse.opensuse.org openid client, would you change callback url to forums.opensuse.org/idkwhatthecallbackis?
2022-10-25T23:20:23  <hellcp> openidc, not openid
2022-10-25T23:20:49  <hellcp> (the idkwhatthecallbackis part should remain the same as it was previously, I just don't remember it)
2022-10-25T23:30:19  <acidsys> sad, I was about to make it literally idkwhatthecallbackis :)
2022-10-25T23:30:43  <Fraser_Bell> acidsys: :-P
2022-10-25T23:31:10  <acidsys> changed to https://forums.opensuse.org/auth/oidc/callback
2022-10-25T23:31:23  <acidsys> hellcp ^
2022-10-25T23:32:44  <acidsys> also, after hours of waiting the pipeline for your new vm is finally through, can you merge it so I can apply the state?