2018-01-22T00:01:16 *** plinnell has joined #opensuse-admin 2018-01-22T00:01:16 *** plinnell has joined #opensuse-admin 2018-01-22T00:08:04 *** Son_Goku has joined #opensuse-admin 2018-01-22T00:08:11 cboltz: I spent hours in order to figure out we are hitting this https://github.com/saltstack/salt/issues/39172 2018-01-22T00:08:32 when an empty file is produced, salt-call exits with return code 2 2018-01-22T00:10:06 nice[tm] 2018-01-22T00:11:03 the mysql and the web_* roles are returning 2 2018-01-22T00:27:25 *** cboltz has quit IRC 2018-01-22T02:53:58 *** Fraser_Bell has joined #opensuse-admin 2018-01-22T02:53:58 *** Fraser_Bell has joined #opensuse-admin 2018-01-22T03:43:27 *** okurz has quit IRC 2018-01-22T03:44:30 *** okurz has joined #opensuse-admin 2018-01-22T04:06:03 *** plinnell has quit IRC 2018-01-22T04:16:21 *** Son_Goku has quit IRC 2018-01-22T04:28:27 *** Fraser_Bell has quit IRC 2018-01-22T04:34:04 *** plinnell has joined #opensuse-admin 2018-01-22T04:34:04 *** plinnell has joined #opensuse-admin 2018-01-22T06:01:48 *** dddh_ has joined #opensuse-admin 2018-01-22T06:01:48 *** dddh_ has joined #opensuse-admin 2018-01-22T06:02:19 *** dddh has quit IRC 2018-01-22T06:17:40 *** paka has quit IRC 2018-01-22T06:21:38 *** paka has joined #opensuse-admin 2018-01-22T07:02:03 *** ldevulder has joined #opensuse-admin 2018-01-22T07:08:59 *** ldevulder has quit IRC 2018-01-22T07:09:30 *** ldevulder has joined #opensuse-admin 2018-01-22T07:30:12 *** tigerfoot has quit IRC 2018-01-22T07:44:23 *** asmorodskyi has joined #opensuse-admin 2018-01-22T08:20:52 *** tigerfoot has joined #opensuse-admin 2018-01-22T08:26:42 *** lnussel has joined #opensuse-admin 2018-01-22T08:43:04 *** sven15 has joined #opensuse-admin 2018-01-22T08:45:20 *** mcaj has joined #opensuse-admin 2018-01-22T08:47:45 *** sven15 has quit IRC 2018-01-22T08:55:22 *** sven15 has joined #opensuse-admin 2018-01-22T09:28:20 *** matthias_bgg has joined #opensuse-admin 2018-01-22T09:28:44 *** dddh_ has quit IRC 2018-01-22T09:29:07 *** dddh_ has joined #opensuse-admin 2018-01-22T09:32:01 *** matthias_bgg has quit IRC 2018-01-22T09:33:39 *** matthias_bgg has joined #opensuse-admin 2018-01-22T09:58:13 *** ldevulder has quit IRC 2018-01-22T10:18:52 *** kollex has joined #opensuse-admin 2018-01-22T11:12:36 *** Son_Goku has joined #opensuse-admin 2018-01-22T11:14:21 *** cboltz has joined #opensuse-admin 2018-01-22T11:14:21 *** cboltz has joined #opensuse-admin 2018-01-22T11:23:13 *** ldevulder has joined #opensuse-admin 2018-01-22T11:36:54 *** ldevulder has quit IRC 2018-01-22T11:45:37 *** dddh_ is now known as dddh 2018-01-22T13:39:18 tampakrap: looking at the "Vm add remove" wiki page, I wonder if you added too many steps 2018-01-22T13:39:43 *** root has joined #opensuse-admin 2018-01-22T13:39:46 IIRC writing the /etc/salt/* files is done by initialize_setup.sh and/or prepopulated in the image 2018-01-22T13:40:07 *** root is now known as Guest82720 2018-01-22T13:40:58 ah yes, I'll fix it 2018-01-22T13:55:50 hi guys 2018-01-22T13:56:56 hi katnip 2018-01-22T13:57:02 cboltz: I removed them 2018-01-22T14:15:32 *** Son_Goku has quit IRC 2018-01-22T14:18:02 cboltz: !165 fine? I have followup :) 2018-01-22T14:30:52 nearly - printing 'FAILED' if a test fails would be nice, just in case it fails silently 2018-01-22T14:31:06 besides this, it looks good 2018-01-22T14:31:18 okay 2018-01-22T14:33:05 check it again please 2018-01-22T14:35:22 I just clicked "Merge when pipeline succeeds" 2018-01-22T14:36:11 *** ldevulder has joined #opensuse-admin 2018-01-22T14:40:44 *** kollex has left #opensuse-admin 2018-01-22T14:41:05 thanks, !166 is in 2018-01-22T14:41:11 *** ldevulder has quit IRC 2018-01-22T14:41:29 *** ldevulder has joined #opensuse-admin 2018-01-22T14:54:54 *** ldevulder has quit IRC 2018-01-22T14:55:16 *** ldevulder has joined #opensuse-admin 2018-01-22T15:07:58 *** asmorodskyi has quit IRC 2018-01-22T15:16:36 *** ldevulder has quit IRC 2018-01-22T15:28:20 *** Guest82720 has quit IRC 2018-01-22T15:37:20 *** asmorodskyi has joined #opensuse-admin 2018-01-22T15:37:38 *** asmorodskyi has quit IRC 2018-01-22T15:40:35 *** okurz[m] has quit IRC 2018-01-22T15:40:42 *** lnussel has quit IRC 2018-01-22T15:40:58 *** lnussel has joined #opensuse-admin 2018-01-22T15:44:22 *** okurz[m] has joined #opensuse-admin 2018-01-22T15:45:16 *** dddh has quit IRC 2018-01-22T15:55:30 *** matthias_bgg has quit IRC 2018-01-22T16:01:00 *** Son_Goku has joined #opensuse-admin 2018-01-22T16:05:21 *** Son_Goku has quit IRC 2018-01-22T16:08:21 *** Son_Goku has joined #opensuse-admin 2018-01-22T16:20:27 *** Son_Goku has quit IRC 2018-01-22T16:20:44 *** Son_Goku has joined #opensuse-admin 2018-01-22T16:37:29 cboltz: any idea how to bypass this? https://gitlab.infra.opensuse.org/tampakrap/salt/-/jobs/2360 2018-01-22T16:41:51 *** Son_Goku has quit IRC 2018-01-22T16:43:27 if I run nginx -t (without -q) 2018-01-22T16:43:51 # nginx -t 2018-01-22T16:43:53 nginx: the configuration file /etc/nginx/nginx.conf syntax is ok 2018-01-22T16:43:55 nginx: [emerg] bind() to 192.168.47.35:80 failed (99: Cannot assign requested address) 2018-01-22T16:43:57 nginx: configuration file /etc/nginx/nginx.conf test failed 2018-01-22T16:44:08 so we could check if the first line says syntax is ok, otherwise print the message 2018-01-22T16:44:11 sounds reasonable? 2018-01-22T16:47:27 that, or replace the IP with 127.0.0.1 - similar to how you handle the SSL certs 2018-01-22T16:47:52 yeah that's better 2018-01-22T16:50:20 *** sven15 has quit IRC 2018-01-22T17:45:15 *** tigerfoot has quit IRC 2018-01-22T17:50:59 *** fvogt has joined #opensuse-admin 2018-01-22T18:39:52 *** fvogt has quit IRC 2018-01-22T18:53:06 cboltz: !168 ready for review 2018-01-22T18:59:56 looks good, I'll give it +0.6 like for every nginx config 2018-01-22T19:00:20 there's one detail I don't like too much, but that's probably something for a follow-up: 2018-01-22T19:00:37 you hardcoded some IPs in set_real_ip_from 2018-01-22T19:01:09 that's for follow-up stuff yes 2018-01-22T19:01:19 all of the configs are a big mess, we need to unify them 2018-01-22T19:01:43 it would be perfect if we have those IPs switched based on the physical location or the cluster name 2018-01-22T19:02:09 this thing is already set on the http section of the nginx.conf, I need to check if it is sufficient to drop them completely from the vhosts.d/* configs 2018-01-22T19:03:02 it would be perfect to set them based on location and from salt-mine 2018-01-22T19:07:55 for 169 - do you need to rebase it to fix the tests? 2018-01-22T19:08:31 PROBLEM: HTTP rsync.o.o on widehat.opensuse.org - CRITICAL - Socket timeout after 10 seconds ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=widehat.opensuse.org&service=HTTP%20rsync.o.o 2018-01-22T19:14:56 yes, I'm on it 2018-01-22T19:24:16 ready, tests passed 2018-01-22T19:28:21 RECOVERY: HTTP rsync.o.o on widehat.opensuse.org - HTTP OK: HTTP/1.1 200 OK - 1217 bytes in 0.005 second response time ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=widehat.opensuse.org&service=HTTP%20rsync.o.o 2018-01-22T19:34:23 ok, marked with +0.6 2018-01-22T19:34:29 *** fvogt has joined #opensuse-admin 2018-01-22T19:35:04 cboltz: sec, I'll add a second commit to include keyserver2 2018-01-22T19:43:08 http://nginx.org/en/docs/http/ngx_http_realip_module.html 2018-01-22T19:43:17 it says that set_real_ip_from can be in http 2018-01-22T19:43:28 so I can remove it from the server blocks 2018-01-22T20:07:08 two hosts left in nuremberg: nuka (weblate/l10n.o.o) and pontifex2 (downloadcontent.o.o) to saltify their nginx 2018-01-22T20:07:31 plus two still wip: the upcoming elections and the replacement of connect.o.o 2018-01-22T20:10:18 *** tigerfoot has joined #opensuse-admin 2018-01-22T20:11:30 !170 has location support and removes duplicate options 2018-01-22T20:14:45 *** dddh has joined #opensuse-admin 2018-01-22T20:16:31 looking at 170 - what are the two remaining IPs in web_progress? 2018-01-22T20:18:41 the login proxy 2018-01-22T20:19:31 should that go into the common part instead of being host-specific? 2018-01-22T20:19:57 even if a machine doesn't use the login proxy, it shouldn't hurt to whitelist it 2018-01-22T20:20:14 also, it needs to be location-specific 2018-01-22T20:20:22 good point 2018-01-22T20:21:07 and I'm pretty sure the 172.* address is not needed 2018-01-22T20:21:21 as the redmine.i.o.o vm doesn't have such an IP 2018-01-22T20:21:44 any idea what the 172.* address is? 2018-01-22T20:21:52 (wild guess: the previous login proxy?) 2018-01-22T20:22:01 # host 172.16.42.3 2018-01-22T20:22:03 3.42.16.172.in-addr.arpa domain name pointer daffy.login.infra.opensuse.org. 2018-01-22T20:22:28 it is in use, but I'm not sure what's the purpose of it 2018-01-22T20:22:31 I'll ask darix 2018-01-22T20:23:48 there is an 172.* address on anna as well 2018-01-22T20:40:03 PROBLEM: HAProxy on mufasa.infra.opensuse.org - HAPROXY CRITICAL - Active service riesling is DOWN on riesling proxy ! Active service narwal4 is DOWN on static proxy ! ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mufasa.infra.opensuse.org&service=HAProxy 2018-01-22T20:52:11 cboltz: it is a login network 2018-01-22T20:52:16 *** ldevulder has joined #opensuse-admin 2018-01-22T20:52:32 so not really needed for redmine 2018-01-22T21:04:37 sure? 2018-01-22T21:05:11 waiting from confirmation from darix 2018-01-22T21:05:20 the access logs on riesling have this in the X-Forwarded-For: "(null), 1.2.3.4, 172.16.42.3" (I replaced the real external IP with 1.2.3.4) 2018-01-22T21:06:10 no idea what causes the "(null)", I only know that it caused trouble with helios ;-) so getting this fixed would be nice 2018-01-22T22:07:36 *** ldevulder has quit IRC 2018-01-22T22:15:34 *** fvogt has quit IRC 2018-01-22T23:05:07 *** Son_Goku has joined #opensuse-admin 2018-01-22T23:14:20 *** Son_Goku has quit IRC 2018-01-22T23:54:14 *** Son_Goku has joined #opensuse-admin