2024-07-08T06:55:56  <matrix-o-o> <Karthik (కార్తీక్)> there is a lot of spam abuse on progress.opensuse.org
2024-07-08T06:56:03  <matrix-o-o> <Karthik (కార్తీక్)> just closed a few
2024-07-08T07:00:18  <matrix-o-o> <Karthik (కార్తీక్)> +spam issues now
2024-07-08T08:40:49  <acidsys> Karthik: best to delete not close (obvious) spam issues
2024-07-08T08:40:56  <acidsys> they clutter the activity quite a lot :(
2024-07-08T08:41:28  <acidsys> until some time ago I would delete them on a daily basis but I eventually gave up
2024-07-08T09:18:26  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: issues can be submitted by emails? what exactly does lead to spam ?
2024-07-08T09:18:43  <acidsys> Karthik: yes via admin@opensuse.org
2024-07-08T09:20:30  *** teepee_ is now known as teepee
2024-07-08T09:20:36  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: why isn't the feature disabled then ?
2024-07-08T09:21:55  <acidsys> because admin@o.o is the canonical way for people to report issues
2024-07-08T09:22:15  <acidsys> not everyone can or wants to log in to progress.o.o
2024-07-08T09:22:34  <matrix-o-o> <Lubos Kocman> just looged in
2024-07-08T09:22:49  <matrix-o-o> <Lubos Kocman> ;) just to make you happy
2024-07-08T09:23:10  <acidsys> you always manage to fill me with joy, Lubos
2024-07-08T09:23:12  <matrix-o-o> <Lubos Kocman> In most cases I agree, the game changer is when I want to create public ticket
2024-07-08T09:23:21  <matrix-o-o> <Lubos Kocman> then I usually go towards progress-o-o
2024-07-08T09:23:46  <acidsys> right. for tickets made via email one of us marks it as public after checking there's no private data
2024-07-08T10:00:38  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: pls check ur dm
2024-07-08T10:01:07  <acidsys> I don't think I receive DMs from Matrix
2024-07-08T10:01:32  <acidsys> let me open element for you
2024-07-08T10:04:16  <acidsys> Karthik: the OpenVPN server is at `ssh -J thor.infra.opensuse.org odin.infra.opensuse.org`, but you won't have access to read /var/log/vpn_logins with your current groups
2024-07-08T10:04:58  <acidsys> I can make you a copy of the current vpn_logins directory so you can develop on any machine
2024-07-08T10:05:25  <acidsys> fetching the group members from kanidm works anywhere with the kanidm client installed
2024-07-08T10:05:29  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: yeah, for the test & dry run purposes
2024-07-08T10:08:14  <acidsys> odin:/tmp/vpn_logins_07-08-2024.tgz
2024-07-08T10:09:02  <matrix-o-o> <Karthik (కార్తీక్)> thank you!
2024-07-08T10:09:08  <acidsys> :)
2024-07-08T10:09:51  <matrix-o-o> <Karthik (కార్తీక్)> btw is there a message retention policy for the matrix instance ?
2024-07-08T10:11:44  <acidsys> LCP? ^
2024-07-08T10:12:52  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: i mean https://github.com/element-hq/synapse/blob/develop/docs/message_retention_policies.md for the suse's matrix instance
2024-07-08T10:15:59  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: odin ssh port is 22, right ?
2024-07-08T10:19:31  <acidsys> Karthik: yes all management ssh is at 22
2024-07-08T10:21:08  <acidsys> I just realized this was missing https://gitlab.infra.opensuse.org/infra/ssh_config/-/commit/50fe5a0234ed9ff4039d915fd8c2bdfafa6b027e
2024-07-08T10:22:19  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: acidsys: that was my next question 😄
2024-07-08T10:23:02  <matrix-o-o> <Karthik (కార్తీక్)> unable to ssh to odin
2024-07-08T10:23:46  <acidsys> what's the issue?
2024-07-08T10:25:37  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: Just doesn't connect. Here's the log https://paste.opensuse.org/pastes/a44d9ec7cb67
2024-07-08T10:25:44  <matrix-o-o> <Karthik (కార్తీక్)> am i missing something ?
2024-07-08T10:26:14  <acidsys> you need to either pass the jump server using -J or configure it using ssh_config: https://gitlab.infra.opensuse.org/infra/ssh_config
2024-07-08T10:26:26  <acidsys> the network odin is in is not directly reachable from the VPN network
2024-07-08T10:30:36  <matrix-o-o> <LCP> Karthik (కార్తీక్): no
2024-07-08T10:31:27  <matrix-o-o> <Karthik (కార్తీక్)> LCP: doesn't it spike up the db storage
2024-07-08T10:36:07  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: thor prompts for pwd in my case
2024-07-08T10:38:42  <acidsys> oh we don't support passphrase authentication, I think we lack KbdInteractiveAuthentication=no to avoid the misleading prompt
2024-07-08T10:39:08  <acidsys> that being said, your key is there
2024-07-08T10:39:20  <acidsys> are you sure you are using this key? maybe try `-i <path to private key>` ?
2024-07-08T10:40:00  <acidsys> https://paste.opensuse.org/pastes/8514fd758dfe
2024-07-08T10:41:01  <matrix-o-o> <Karthik (కార్తీక్)> ❯ ssh -i .ssh/id_suse -J kskarthik@thor.infra.opensuse.org kskarthik@odin.infra.opensuse.org
2024-07-08T10:41:03  <matrix-o-o> (kskarthik@thor.infra.opensuse.org) Password:
2024-07-08T10:41:09  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: ^
2024-07-08T10:41:17  <matrix-o-o> <LCP> Karthik (కార్తీక్): it does
2024-07-08T10:42:30  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: yes, this is the valid key
2024-07-08T10:44:08  <acidsys> Karthik: what about just thor.infra.opensuse.org?
2024-07-08T10:45:20  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: works, surpirisingly!
2024-07-08T10:47:36  <acidsys> I only find some "PAM: User not known to the underlying authentication module for illegal user sk" but maybe that was just different user attempt
2024-07-08T10:50:16  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: sk is my laptop's username btw, It was an incorrect attempt
2024-07-08T10:50:31  <acidsys> ok I assumed as much
2024-07-08T10:51:04  <acidsys> not sure atm why it would work directly but not for jumping. as a workaround you could ssh `-A` to thor and then ssh to odin.i.o.o from there. but it exposes your agent to the jump host so I don't like recommending it
2024-07-08T10:52:02  <acidsys> let's look into it together in the evening. need to do more work work now. for now, I copied the file to thor:/tmp/vpn_logins_07-08-2024.tgz :)
2024-07-08T10:53:23  <matrix-o-o> <Karthik (కార్తీక్)> acidsys: ok, thank you, again!
2024-07-08T10:54:22  <acidsys> sure
2024-07-08T17:20:59  <acidsys> hey Karthik, I'm here now, when you want to try the ssh jump again
2024-07-08T17:29:30  <acidsys> cboltz: I don't think having me attempt subscribing using your email address is useful, as without you accepting the subscription it would not tell us whether the system automatically removed the subscription in the "old" account.
2024-07-08T17:33:45  <cboltz> ok, then let me subscribe to the test list with a separate mail address (which I'll bundle with my account in mailman), and for which I can accept the subscription - does that sound more useful?
2024-07-08T17:34:19  <acidsys> with two different accounts, yes
2024-07-08T17:34:59  <cboltz> it will be under my cboltz openSUSE account - but it will still mean moving the address to a different (your) account
2024-07-08T17:35:13  <acidsys> ok
2024-07-08T17:38:10  <cboltz> see PM