2017-10-09T02:37:43 *** okurz has quit IRC 2017-10-09T02:40:21 *** okurz has joined #opensuse-admin 2017-10-09T03:14:28 *** Son_Goku has quit IRC 2017-10-09T03:15:51 *** Son_Goku has joined #opensuse-admin 2017-10-09T06:40:19 *** Son_Goku has quit IRC 2017-10-09T07:40:58 *** mcaj has joined #opensuse-admin 2017-10-09T07:46:12 *** sven15 has joined #opensuse-admin 2017-10-09T07:47:22 *** asmorodskyi has joined #opensuse-admin 2017-10-09T07:52:18 *** marxin has quit IRC 2017-10-09T07:53:36 *** marxin has joined #opensuse-admin 2017-10-09T08:21:36 *** kollex has joined #opensuse-admin 2017-10-09T08:29:51 *** tigerfoot has joined #opensuse-admin 2017-10-09T09:04:35 *** matthias_bgg has joined #opensuse-admin 2017-10-09T09:27:50 *** kl_eisbaer has joined #opensuse-admin 2017-10-09T09:58:22 *** matthias_bgg has quit IRC 2017-10-09T09:59:36 *** matthias_bgg has joined #opensuse-admin 2017-10-09T10:11:16 *** Son_Goku has joined #opensuse-admin 2017-10-09T10:31:58 *** Son_Goku has quit IRC 2017-10-09T10:42:22 *** cboltz has joined #opensuse-admin 2017-10-09T10:42:22 *** cboltz has joined #opensuse-admin 2017-10-09T10:52:38 tampakrap: can you please tell me how I should reach gitlab.opensuse.org from now on? I'm currently unable to work on any salt stuff without having access to the gitlab machine :-/ 2017-10-09T10:54:46 kl_eisbaer: needs vpn, via web you reach it on https://gitlab.opensuse.org, via ssh root@mickey.infra.opensuse.org and via git 'git clone gitlab@gitab.infra.opensuse.org:infra/salt.git' (or you put gitlab.opensuse.org in your .ssh/config to point to gitlab.opensuse.org) 2017-10-09T11:01:06 hm: "host gitlab.opensuse.org" gives me Host gitlab.opensuse.org not found: 2(SERVFAIL) 2017-10-09T11:01:15 *** nicolasbock has joined #opensuse-admin 2017-10-09T11:01:20 are you on vpn? 2017-10-09T11:01:25 so either your documentation is wrong - or your DNS 2017-10-09T11:01:27 gitlab.opensuse.org points to proxy.infra.opensuse.org 2017-10-09T11:01:45 which internal DNS is providing gitlab.opensuse.org ? 2017-10-09T11:02:01 anna/elsa 2017-10-09T11:02:03 at least not the ones that I'm currently asking ... :-/ 2017-10-09T11:02:30 why can't we agree on using only gitlab.infra.opensuse.org ? 2017-10-09T11:02:55 I told the same to cboltz on friday 2017-10-09T11:03:02 ah - so I have to fix my DNS setup and use anna/elsa also for the public opensuse.org domain ? - sounds bad to me 2017-10-09T11:03:15 especially if anna and elsa will be down during the weekend 2017-10-09T11:03:16 no, only for gitlab.opensuse.org 2017-10-09T11:03:32 why do we need the gitlab.opensuse.org name at all ? 2017-10-09T11:03:38 I have in my dnsmasq to forward to anna/elsa gitlab.opensuse.org and infra.opensuse.org 2017-10-09T11:03:42 a dig +trace indicates that "gitlab.o.o in CNAME gitloab.infra.o.o" is served by nsprv1.novell.com 2017-10-09T11:03:44 why can't we agree on using only gitlab.infra.opensuse.org ? 2017-10-09T11:03:54 (and I could check this without having the heroes VPN active) 2017-10-09T11:04:11 cboltz: sure, but it is confusing 2017-10-09T11:04:22 internal services should be behind infra.o.o and we should make this a policy 2017-10-09T11:04:35 One single question before I go: Is anyone outside the heroes team using gitlab.opensuse.org ? 2017-10-09T11:04:46 if the answer is no: please remove the DNS entry 2017-10-09T11:04:56 if the answer is yes: provide the gitlab instance outside 2017-10-09T11:05:00 everyone that is using gitlab.o.o should have vpn 2017-10-09T11:05:14 so there is abolutely no need to confuse people, right? 2017-10-09T11:05:15 you need freeipa account to login to it as well either way 2017-10-09T11:05:23 agreed, I'll move it 2017-10-09T11:05:25 ... and then there was the question _why_ we have gitlab.o.o and our salt code non-public and if we want to change that ;-) 2017-10-09T11:05:32 thanks 2017-10-09T11:05:45 cboltz: because I don't like to have gitlab public. 2017-10-09T11:05:55 cboltz: if you have a problem with this, please talk with me 2017-10-09T11:05:58 --- 2017-10-09T11:06:01 after lunch ;-) 2017-10-09T11:06:17 it's just a question, not a problem ;-) 2017-10-09T11:13:17 *** nicolasbock_ has joined #opensuse-admin 2017-10-09T11:14:19 kl_eisbaer: we don't have *.infra.opensuse.org so the ssl certification is broken now 2017-10-09T11:15:39 *** Son_Goku has joined #opensuse-admin 2017-10-09T11:16:53 *** nicolasbock has quit IRC 2017-10-09T11:33:21 *** cboltz has quit IRC 2017-10-09T11:36:09 kl_eisbaer / cboltz: https://progress.opensuse.org/projects/opensuse-admin-wiki/wiki/Gitlab_general 2017-10-09T11:40:46 *** Son_Goku has quit IRC 2017-10-09T11:47:14 *** Son_Goku has joined #opensuse-admin 2017-10-09T11:49:53 tampakrap: ? we have freeipa for this ;-) 2017-10-09T11:50:10 tampakrap: ...and thanks for the doku! 2017-10-09T11:52:41 tampakrap: about the certificate - why don't you create one with freeipa ? 2017-10-09T11:55:10 good point yes 2017-10-09T11:55:15 tampakrap: => https://www.freeipa.org/page/PKI#Requesting_a_new_certificate 2017-10-09T11:55:34 as we need the cert only for infra.o.o, I would use the internal CA for it 2017-10-09T12:01:49 nice 2017-10-09T12:01:57 do we already have the nss cert db somewhere? 2017-10-09T12:28:36 *** mcaj has quit IRC 2017-10-09T12:41:20 *** kl_eisbaer1 has joined #opensuse-admin 2017-10-09T12:44:22 *** dddh_ has quit IRC 2017-10-09T13:16:29 *** kl_eisbaer1 has left #opensuse-admin 2017-10-09T13:20:48 *** kl_eisbaer1 has joined #opensuse-admin 2017-10-09T13:25:16 *** kl_eisbaer1 has left #opensuse-admin 2017-10-09T13:28:32 tampakrap: should on freeipa already 2017-10-09T13:44:19 *** kollex has left #opensuse-admin 2017-10-09T14:03:00 *** marxin has quit IRC 2017-10-09T14:04:59 *** marxin has joined #opensuse-admin 2017-10-09T14:06:32 *** mcaj has joined #opensuse-admin 2017-10-09T14:07:05 *** mcaj has joined #opensuse-admin 2017-10-09T14:10:52 *** Son_Goku has quit IRC 2017-10-09T15:10:47 *** matthias_bgg has quit IRC 2017-10-09T15:11:19 *** fvogt has joined #opensuse-admin 2017-10-09T15:16:46 *** mcaj has quit IRC 2017-10-09T15:16:59 *** sven15 has quit IRC 2017-10-09T15:41:11 *** cboltz has joined #opensuse-admin 2017-10-09T15:41:11 *** cboltz has joined #opensuse-admin 2017-10-09T15:45:53 *** malcolmlewis has quit IRC 2017-10-09T15:47:47 *** malcolmlewis has joined #opensuse-admin 2017-10-09T15:47:47 *** malcolmlewis has joined #opensuse-admin 2017-10-09T15:50:43 *** asmorodskyi has quit IRC 2017-10-09T15:51:39 *** kl_eisbaer has quit IRC 2017-10-09T17:33:55 *** sven15 has joined #opensuse-admin 2017-10-09T17:45:18 *** sven15 has quit IRC 2017-10-09T19:06:39 PROBLEM: NRPE on provo-mirror.opensuse.org - CHECK_NRPE STATE CRITICAL: Socket timeout after 10 seconds. ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=provo-mirror.opensuse.org&service=NRPE 2017-10-09T19:06:58 *** fvogt has quit IRC 2017-10-09T19:15:09 PROBLEM: NRPE on status2.opensuse.org - CHECK_NRPE STATE CRITICAL: Socket timeout after 10 seconds. ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=status2.opensuse.org&service=NRPE 2017-10-09T19:15:28 RECOVERY: NRPE on status2.opensuse.org - NRPE v3.1.1 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=status2.opensuse.org&service=NRPE 2017-10-09T19:16:29 RECOVERY: NRPE on provo-mirror.opensuse.org - NRPE v3.1.1 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=provo-mirror.opensuse.org&service=NRPE 2017-10-09T20:02:50 *** dddh_ has joined #opensuse-admin 2017-10-09T20:02:50 *** dddh_ has joined #opensuse-admin 2017-10-09T20:03:02 PROBLEM: Updates on narwal3.infra.opensuse.org - Updates CRITICAL : 1 security update(s): 3 package update(s): ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=narwal3.infra.opensuse.org&service=Updates 2017-10-09T20:40:05 PROBLEM: Updates on rpmlint.infra.opensuse.org - Updates CRITICAL : At least one of your Repositories might be out of date. Please run zypper refresh as root to update it. ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=rpmlint.infra.opensuse.org&service=Updates 2017-10-09T23:56:22 *** cboltz has quit IRC