2026-08-25T08:19:00  <matrix-o-o> <fbonazzi> hi, not sure who I need to reach out to, but the Telegram bridge for the #openSUSEway channel seems to be broken
2026-08-25T08:22:09  <matrix-o-o> <fbonazzi> I seem to recall LCP and acidsys helped set it up last year
2026-08-25T08:22:54  <acidsys> from what I know it's broken for other channels too
2026-08-25T08:23:35  <acidsys> last time I tried to update and repair it caused a huge mess
2026-08-25T08:25:09  <matrix-o-o> <fbonazzi> that's really unfortunate. I will need to advertise that in the channel, because I only follow the Telegram side
2026-08-25T08:25:54  <matrix-o-o> <fbonazzi> and acidsys while I'm at it, I have an unrelated question about the hosting of our security.opensuse.org blog
2026-08-25T08:26:32  <matrix-o-o> <fbonazzi> do you know what OS does the hosting now? is it still on 15.6?
2026-08-25T08:27:08  <matrix-o-o> <fbonazzi> we have a container setup for local builds and it still uses a 15.6 base. I want to make sure that we're using the same stack
2026-08-25T08:30:02  <matrix-o-o> <LCP> acidsys: yeah, that bridge is a bit of a nightmare
2026-08-25T08:30:08  <acidsys> bridge, it is unfortunate; I probably need to replace it with different software which I understand better, but not sure when. or someone else repairs this current setup :)
2026-08-25T08:30:11  <matrix-o-o> <LCP> I wish we could replace it
2026-08-25T08:30:28  <acidsys> blog/jekyll, is built on Leap 16
2026-08-25T08:30:57  <acidsys> LCP: we "could", no? :p
2026-08-25T08:31:18  <matrix-o-o> <LCP> I guess
2026-08-25T08:32:15  <matrix-o-o> <fbonazzi> blog: thank you, I suspected that. let me try to modernise our container
2026-08-25T08:33:07  <matrix-o-o> <fbonazzi> I tried to notify about the bridge situation in #opensuseway:opensuse.org (https://matrix.to/#/#opensuseway:opensuse.org) but I can't seem to pin a message. is it possible I don't have sufficient privileges?
2026-08-25T08:47:51  <matrix-o-o> <fbonazzi> is the blog hosting machine still running bundler 2.3.27?
2026-08-25T08:49:37  <matrix-o-o> <fbonazzi> switching the container to 16.0 does not work, I get this error:
2026-08-25T08:49:48  <matrix-o-o> <fbonazzi> > vendor/bundle/ruby/3.4.0/gems/jekyll-4.3.4/lib/jekyll.rb:28:in 'Kernel#require': cannot load such file -- csv (LoadError)
2026-08-25T08:50:27  <matrix-o-o> <fbonazzi> does it need a special setup on 16.0? can you share the list of necessary packages
2026-08-25T08:57:22  <acidsys> fbonazzi should be relatively basic: https://github.com/openSUSE/heroes-salt/blob/production/salt/profile/jekyll/master.sls#L11
2026-08-25T08:57:58  <acidsys> afaik csv is no longer in stdlib with 3.4
2026-08-25T08:59:40  <matrix-o-o> <fbonazzi> let me take a look. I don't really grok this stuff
2026-08-25T09:15:21  <matrix-o-o> <fbonazzi> acidsys: yeah but I can't even tell what is requiring it. is it just required by jekyll? I can't see it in the package list
2026-08-25T09:15:43  <matrix-o-o> <Lubos Kocman> I would not say it's about requiring it, this seems to be container solution from ubuntu/canonical
2026-08-25T09:15:59  <matrix-o-o> <Lubos Kocman> so for some reason lxd containers runtime doesn't seem to be on TW
2026-08-25T09:16:32  <acidsys> fbonazzi: it seems like jekyll requires it, and it's part of your Gemfile.lock, so it should be pulled in. maybe your bundler is looking in a differnt place
2026-08-25T09:17:12  <acidsys> if you share what you are trying to run it might be better to analyze
2026-08-25T09:17:17  <matrix-o-o> <fbonazzi> unless I'm looking in the wrong place I don't see it in the gemfile lock
2026-08-25T09:17:27  <acidsys> https://github.com/openSUSE/security-team-blog/blob/main/Gemfile.lock#L10
2026-08-25T09:18:23  <matrix-o-o> <fbonazzi> ah, it seems we never pulled the changes you merged in our mirror back into our actual repo
2026-08-25T09:18:49  <matrix-o-o> <fbonazzi> can I just regenerate the Gemfile.lock?
2026-08-25T09:22:04  <cboltz> maybe try the one from github first?
2026-08-25T09:25:05  <matrix-o-o> <fbonazzi> I can, but that's also generated with old bundler 2.3.27. I'm not sure if we need that or if we can default to new versions of everything
2026-08-25T09:25:58  <cboltz> as long as it works on Leap 16.0... ;-)
2026-08-25T09:27:38  <matrix-o-o> <fbonazzi> * ~I can, but that's also generated with old bundler 2.3.27. I'm not sure if we need that or if we can default to new versions of everything~
2026-08-25T09:33:42  <matrix-o-o> <fbonazzi> sorry for the mess, I was in some messed up local state inadvertently. it works now
2026-08-25T09:33:53  <matrix-o-o> <fbonazzi> we had of course pulled your commits in back then
2026-08-25T09:33:59  <matrix-o-o> <fbonazzi> but somehow my local copy was stale idk
2026-08-25T09:36:28  <matrix-o-o> <fbonazzi> so should I or can I update the Gemfile.lock? or do you do that?
2026-08-25T09:41:17  <cboltz> feel free to update it
2026-08-25T09:41:52  <cboltz> we'll complain if it breaks the deployment ;-)   (aka "too new for Leap 16 / ruby3.4)
2026-08-25T09:42:31  <matrix-o-o> <fbonazzi> I'm running this in a Leap 16 container for this exact purpose ;)
2026-08-25T09:42:59  <cboltz> :-)
2026-08-25T10:42:37  <matrix-o-o> <fbonazzi> one final request: can someone delete https://etherpad.opensuse.org/p/security-blog-dockerfile ? it is no longer needed
2026-08-25T11:05:52  <matrix-o-o> <Lubos Kocman> Hello Heroes, we'd like to do a survey about paste-o-o and prefered approach to handle the spam. https://survey.opensuse.org/?r=paste-o-o-spam cboltz acidsys would you be okay with such survey?
2026-08-25T11:12:34  <acidsys> ENOCONTEXT
2026-08-25T11:13:20  <matrix-o-o> <Lubos Kocman> acidsys: let me fix this for ya
2026-08-25T11:14:03  <acidsys> fbonazzi: unless something confidential was leaked, I prefer not hacking etherpad history
2026-08-25T11:14:55  <matrix-o-o> <Lubos Kocman> ends with Thank you for taking the survey and making openSUSE project a better place for everyone!
2026-08-25T11:15:02  <matrix-o-o> <Lubos Kocman> seems like I can't share preview with others
2026-08-25T11:15:15  <matrix-o-o> <Lubos Kocman> also I dislike the enforced centering in our template
2026-08-25T11:15:28  <acidsys> I don't understand, what do you want to ask there and whom?
2026-08-25T11:15:46  <acidsys> if someone wants to improve spam filtering, please submit a PR with code to paste-o-o
2026-08-25T11:16:05  <matrix-o-o> <Lubos Kocman> seems like most distros just disable index
2026-08-25T11:16:13  <matrix-o-o> <Lubos Kocman> so maybe combination of that too
2026-08-25T11:16:33  <acidsys> as a first step we could make "recent" inaccessible to anonymous users
2026-08-25T11:16:41  <matrix-o-o> <Lubos Kocman> is the idp login enforcement possible? susepaste supports key authentic ation
2026-08-25T11:16:44  <matrix-o-o> <Lubos Kocman> yes
2026-08-25T11:16:46  <matrix-o-o> <Lubos Kocman> I agree
2026-08-25T11:17:36  <matrix-o-o> <Lubos Kocman> sounds like topic for Thursday, but I have bit of concerns what would authentication enforcement cause (if possible)
2026-08-25T11:17:42  <matrix-o-o> <Lubos Kocman> like users defaulting to pastebin etc
2026-08-25T11:18:51  <acidsys> making pasting itself authenticated makes the service useless
2026-08-25T11:19:13  <acidsys> same with captcha etc
2026-08-25T11:20:12  <acidsys> fwiw spam classification was broken and appears to work again since 1-2 days ago (but don't know yet how good the detection is)
2026-08-25T11:20:22  <acidsys> based on what moderators mark as spam
2026-08-25T11:31:38  <matrix-o-o> <Lubos Kocman> I fully agree, but there was fundamental disagreement on meeting, which is why I wanted to ask users
2026-08-25T11:31:46  <matrix-o-o> <Lubos Kocman> for me it would be also a nogo, and I'd likely use other services
2026-08-25T11:32:35  <matrix-o-o> <Lubos Kocman> so now you understand why survey, but I can also leave it as a call of heroes, but it would be nice to have data imho.
2026-08-25T11:32:53  <matrix-o-o> <Lubos Kocman> disabling index is the easiest solution though, moderators would probably like to see more
2026-08-25T11:34:47  <cboltz> disabling public index is an idea - but with the robots.txt "deny /" it doesn't change much for spammers who want to impress search engines
2026-08-25T11:35:01  <cboltz> well, AI bots that ignore robots.txt might learn the spam ;-)
2026-08-25T11:36:07  <cboltz> a more important feature would be: if I create a filter rule, it should offer an "apply to all existing pastes" button (or even do this automatically)
2026-08-25T11:37:49  <acidsys> I was thinking that as well, sounds doable
2026-08-25T11:38:07  <acidsys> the other day I submitted a feature for regex filters which you might like
2026-08-25T11:47:25  <cboltz> yeah, I've seen the regex PR :-)
2026-08-25T12:56:52  <matrix-o-o> <Lubos Kocman> cboltz: alternatively the index could keep only like recent pastes 8h / 12h / 24h
2026-08-25T12:56:57  <matrix-o-o> <Lubos Kocman> but if you check other services, they simply disable index to hide spam posts (paste.centos.org, paste.org)
2026-08-25T12:56:59  <matrix-o-o> <Lubos Kocman> I think they're doing it for a reason
2026-08-25T12:57:17  <matrix-o-o> <Lubos Kocman> maybe combination of all of these?
2026-08-25T12:57:34  <matrix-o-o> <Lubos Kocman> I think the only case where full index stays is when we can't allow arbitrary pastes
2026-08-25T12:58:32  <cboltz> hiding the index doesn't hurt, but spammers probably don't care about this detail
2026-08-25T12:58:48  <matrix-o-o> <Lubos Kocman> yeah, but we'll not shovel it to eyes of users
2026-08-25T12:58:51  <matrix-o-o> <Lubos Kocman> but I agree it does not solve the problem
2026-08-25T12:59:33  <cboltz> different topic - may I remind you to the broken links on get.o.o? Or do you need more tickets for that? ;-)
2026-08-25T12:59:50  <matrix-o-o> <Lubos Kocman> cboltz: are we talking about sum files?
2026-08-25T13:00:12  <cboltz> yes, checksums and gpg signatures
2026-08-25T13:00:47  <cboltz> (but it can't hurt to check all links for Leap 16.x)
2026-08-25T13:00:51  <matrix-o-o> <malcolmlewis> along with multiple forum threads on the checksums etc...
2026-08-25T13:04:52  <matrix-o-o> <knurpht - Gertjan> We've already talked about paste.o.o in the Meeting. I am firmly against hosting and hiding stuff. Child Porn, Fishing attempts are illegal. I am pretty annoyed at the moment about the thought that hiding is a soluntion. Hosting mentioned stuff is illegal. A simple instruction on the wiki, or some output of "susepaste" should do and have authenticated pastes.
2026-08-25T13:06:07  <matrix-o-o> <knurpht - Gertjan> It is what it is, people accept having to authenticate for banking, git, facebook, whatever.
2026-08-25T13:06:59  <matrix-o-o> <Lubos Kocman> cboltz: on it. will check
2026-08-25T13:07:08  <matrix-o-o> <Lubos Kocman> I added new appliances anyway
2026-08-25T13:07:19  <cboltz> :-)
2026-08-25T13:12:33  <matrix-o-o> <Lubos Kocman> Anyway please let me know if you'd like to have feedback of users about paste. If we can't easily add idp wall for create, then I guess survey is pointless
2026-08-25T13:16:51  <acidsys> so "dmesg | susepaste" will take me to a website to log in, sure
2026-08-25T13:17:06  <acidsys> hope login works in w3m
2026-08-25T13:17:46  <matrix-o-o> <Lubos Kocman> you'd have to have ~/.susepaste with key = mAhSuPaSekr3tKeyzzz
2026-08-25T13:18:02  <matrix-o-o> <Lubos Kocman> acidsys I'm with you, I'm just trying to back Gertjan's idea
2026-08-25T13:18:04  <acidsys> why would I do that instead of just using one of the gazillion other paste services which don't require me to do that?
2026-08-25T13:18:13  <matrix-o-o> <Lubos Kocman> yes
2026-08-25T13:18:22  <matrix-o-o> <Lubos Kocman> Although Gertjan will not like us
2026-08-25T13:19:51  <matrix-o-o> <Lubos Kocman> I'd probably use pastebin too in such case on someone's server or if I'm debugging e.g. dead Wayland or so
2026-08-25T13:23:06  <matrix-o-o> <knurpht - Gertjan> acidsys: Hosting illegal content makes an organisation liable.
2026-08-25T13:24:35  <matrix-o-o> <malcolmlewis> To me it's a service for authenticated openSUSE users, I'm happy to log in and paste (I use a key as well)... however, determined folks will just create an account, like they do in the forum. But we have tools to identify.
2026-08-25T13:25:09  <matrix-o-o> <Lubos Kocman> I would agree about that from website, but not from cli in certain cases
2026-08-25T13:27:54  <matrix-o-o> <knurpht - Gertjan> malcolmlewis: Malcolm, it is *not*. Any spammer, nazi, Al Qaida idiot can paste.
2026-08-25T13:28:50  <matrix-o-o> <malcolmlewis> knurpht - Gertjan: I meant have to log in to paste 😉
2026-08-25T13:35:54  <matrix-o-o> <knurpht - Gertjan> malcolmlewis: From my homedir:
2026-08-25T13:36:44  <matrix-o-o> <Lubos Kocman> Yeah now imagine georg on 200 machines :slightly_smiling_face: (Though I suppose we have nfs mounted home)
2026-08-25T13:40:53  <matrix-o-o> <knurpht - Gertjan> And Georg could easily salt the .susepaste file to those machines, so?
2026-08-25T13:42:46  <matrix-o-o> <knurpht - Gertjan> Talk to SUSE Legal whether they appreciate stuff mentioned being hosted. I never bothered earlier because I was not aware. But when I did............
2026-08-25T13:45:06  <matrix-o-o> <knurpht - Gertjan> In the meantime I sent instructions to my local customers and they don't have any issues with the auth through .susepaste.
2026-08-25T13:50:06  <matrix-o-o> <knurpht - Gertjan> It takes a one time action, nothing more. Like with (almost) any of our premises.
2026-08-25T22:22:45  *** teepee_ is now known as teepee