2018-02-07T00:13:12 *** okurz[m] has quit IRC 2018-02-07T00:13:56 *** aboe[m] has quit IRC 2018-02-07T00:22:27 *** cboltz has quit IRC 2018-02-07T00:49:57 *** aboe[m] has joined #opensuse-admin 2018-02-07T01:13:12 *** Fraser_Bell has joined #opensuse-admin 2018-02-07T01:13:12 *** Fraser_Bell has joined #opensuse-admin 2018-02-07T01:14:45 *** Son_Goku has joined #opensuse-admin 2018-02-07T01:31:21 *** okurz[m] has joined #opensuse-admin 2018-02-07T02:08:58 *** Son_Goku has quit IRC 2018-02-07T02:19:26 *** Fraser_Bell has quit IRC 2018-02-07T02:46:55 *** Son_Goku has joined #opensuse-admin 2018-02-07T02:54:43 *** okurz[m] has quit IRC 2018-02-07T02:55:13 *** aboe[m] has quit IRC 2018-02-07T03:18:43 *** Son_Goku has quit IRC 2018-02-07T03:57:41 *** okurz has quit IRC 2018-02-07T03:58:03 *** okurz_ has joined #opensuse-admin 2018-02-07T03:58:10 *** okurz_ is now known as okurz 2018-02-07T04:32:11 *** nicolasbock has quit IRC 2018-02-07T05:18:38 *** tigerfoot has joined #opensuse-admin 2018-02-07T05:21:18 *** Aksem has quit IRC 2018-02-07T05:24:53 *** tampakrap has quit IRC 2018-02-07T05:33:26 *** tigerfoot has quit IRC 2018-02-07T06:18:17 *** aboe[m] has joined #opensuse-admin 2018-02-07T06:24:54 *** okurz[m] has joined #opensuse-admin 2018-02-07T08:27:38 *** asmorodskyi has joined #opensuse-admin 2018-02-07T08:38:47 *** matthias_bgg has joined #opensuse-admin 2018-02-07T08:57:50 *** sven15 has joined #opensuse-admin 2018-02-07T09:09:42 *** jdsn_ has quit IRC 2018-02-07T09:13:34 *** jdsn has joined #opensuse-admin 2018-02-07T09:49:01 *** mcaj has joined #opensuse-admin 2018-02-07T09:50:10 *** ldevulder has joined #opensuse-admin 2018-02-07T10:06:24 *** tampakrap has joined #opensuse-admin 2018-02-07T10:23:42 PROBLEM: Hosts syslog on monitor.infra.opensuse.org - CRITICAL: Found files older than 600 minutes /var/log/opensuse/hosts//wikisearch.log was last modified on Wed Feb 7 00:15:01 2018 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=monitor.infra.opensuse.org&service=Hosts%20syslog 2018-02-07T10:59:55 *** cboltz has joined #opensuse-admin 2018-02-07T11:00:03 *** cboltz has joined #opensuse-admin 2018-02-07T11:12:54 *** Son_Goku has joined #opensuse-admin 2018-02-07T11:40:46 cboltz, was there a meeting yesterday here? 2018-02-07T11:41:49 *** nicolasbock has joined #opensuse-admin 2018-02-07T11:45:06 yes 2018-02-07T11:46:04 meeting log: https://progress.opensuse.org/attachments/download/4084/2018-02-06-heroes-meeting.txt 2018-02-07T12:06:32 *** sven15 has quit IRC 2018-02-07T12:12:43 i still feel like a fish out of water in a different continent :) seems like everything to do is over there :) 2018-02-07T12:19:40 *** sven15 has joined #opensuse-admin 2018-02-07T12:19:51 most of the things we do goes through the internet, so it doesn't matter where you are 2018-02-07T12:20:46 the offsite meeting is obviously an exception - for meeting in Nuremberg, you have to be there ;-) 2018-02-07T12:20:57 i think what it is ; that when you talk about offsite stuff is when i feel like im left out 2018-02-07T12:21:01 right 2018-02-07T12:21:44 how often is that? 2018-02-07T12:21:56 about once per year 2018-02-07T12:22:03 that is it? 2018-02-07T12:22:15 hmmm 2018-02-07T12:23:07 being sick sucks, i hate what is going on with me, (i think mentioned that) 2018-02-07T12:24:46 i want to be included in this awfully bad 2018-02-07T12:25:40 do you use a raspberry pi? 2018-02-07T12:27:01 not myself 2018-02-07T12:27:26 but I helped a friend to setup one - he's now using it as home server for backup, some web development testing etc. 2018-02-07T12:30:33 https://opensource.com/article/18/2/block-ads-raspberry-pi 2018-02-07T12:31:52 yeah, I heard about pi-hole 2018-02-07T12:32:05 I do something similar with a local nameserver (unbound) directly on my laptop 2018-02-07T12:33:33 i tried setting this up last night, no ads, then took the ublock off, it seems to work 2018-02-07T12:34:14 seems like there is a lot that can be done with these 2018-02-07T12:35:37 i'm around today, but tomorrow and friday i have medical tests, then on tuesday i see the oncology doctor for a plan 2018-02-07T12:38:04 on top of this, i may have said, i have a cyst on my disc in my spine, that means a fusion in my lower back; but he wont touch it until the cancer thing is cleared up. this is going to take some time. are you sure you want me around ? :) it will be maybe 6 months. 2018-02-07T12:38:26 i am willing to try if so 2018-02-07T12:38:52 im just laying this out there so you know what is going on 2018-02-07T13:02:10 *** matthias_bgg has quit IRC 2018-02-07T13:39:11 *** matthias_bgg has joined #opensuse-admin 2018-02-07T14:07:10 *** Son_Goku has quit IRC 2018-02-07T14:32:26 *** sven15 has quit IRC 2018-02-07T14:50:28 *** Aksem has joined #opensuse-admin 2018-02-07T15:11:57 *** mcaj has quit IRC 2018-02-07T15:16:32 tampakrap: let's move the discussion for !179 here to speed it up a bit ;-) 2018-02-07T15:16:43 okay 2018-02-07T15:17:06 I'd still prefer to change the help text because the current help text doesn't really match the code behaviour 2018-02-07T15:17:22 what about shortening my proposal - drop the "but the CI ..." part 2018-02-07T15:17:43 (and independent of the answer, a comment in the code might indeed make sense) 2018-02-07T15:20:26 this script is intended to be used when running tests 2018-02-07T15:20:38 the environment there is 'base' 2018-02-07T15:20:57 this is a fact and a underlying detail that the user of prepare_test_env doesn't care 2018-02-07T15:21:28 default is not 'production', that's for production only, which is not the case when using the prepare_test_env script 2018-02-07T15:21:44 indeed, "default" is probably confusing 2018-02-07T15:21:46 what about 2018-02-07T15:22:08 change 'environment == production' conditions to 'environment == base' 2018-02-07T15:22:51 you type prepare_test_env.sh --help, would you care about those details? 2018-02-07T15:23:03 you can open the script to figure it out, read the comments and the code 2018-02-07T15:23:06 that's how I see it 2018-02-07T15:23:56 is SLE 12 SP3 similar to Leap? 2018-02-07T15:24:17 hmm, I wonder if going a different route would be more helpful / less confusing, maybe set a "testing" grain in the CI scripts? 2018-02-07T15:24:54 that way, we would have one "switch" instead of sed'ing around in the *.sls files 2018-02-07T15:26:00 yes that sounds better 2018-02-07T15:28:59 :-) 2018-02-07T15:29:39 echo "test_secrets: true" >> /etc/salt/grains 2018-02-07T15:30:21 {% if saltenv == 'production' or salt['grains.get']('test_secrets', '') == true %} 2018-02-07T15:30:31 how does it look like? 2018-02-07T15:31:49 much better :-) 2018-02-07T15:31:51 you can probably drop the saltenv == 'production' part 2018-02-07T15:32:00 I need it for production 2018-02-07T15:32:21 I don't want to add this grain in production 2018-02-07T15:32:40 then use a non-False default for grains.get 2018-02-07T15:32:46 and set it to False for testing 2018-02-07T15:33:16 why? 2018-02-07T15:33:17 {% if salt['grains.get']('test_secrets', True) %} 2018-02-07T15:33:41 this won't work in production 2018-02-07T15:34:02 sure? I'd expect that the True default should work 2018-02-07T15:34:04 ah 2018-02-07T15:34:06 yes I get you 2018-02-07T15:34:10 I don't like the name then 2018-02-07T15:34:13 include_secrets maybe 2018-02-07T15:35:01 if you also want to cover the IP in web_mirrors.sls, we should replace the "secrets" part of the name 2018-02-07T15:35:29 but I won't object to use_secrets and add another grain for other stuff like the IP 2018-02-07T15:35:45 for the IP I would prefer to use saltenv 2018-02-07T15:35:46 (actually having two different grains might be helpful in my local testing) 2018-02-07T15:35:59 I don't see a reason to change it actually 2018-02-07T15:36:31 ok, saltenv sounds fine for the IP 2018-02-07T15:38:12 looks like we finally found a good way to implement this :-) 2018-02-07T15:38:25 yep and much better than the initial one 2018-02-07T15:38:43 the seds could create confusion if we add secrets in web_mirrors one day 2018-02-07T15:39:10 the seds would _always_ create confusion ;-) 2018-02-07T15:47:48 cboltz: submitted 2018-02-07T15:48:15 give me a few minutes to review it, I'm just doing some paperwork I want to finish first 2018-02-07T15:58:42 *** deneb_alpha has joined #opensuse-admin 2018-02-07T15:58:42 *** deneb_alpha has joined #opensuse-admin 2018-02-07T16:06:33 tampakrap: the code looks good now :-) 2018-02-07T16:06:46 okay I want to test it first though 2018-02-07T16:06:52 which seems won't happen today 2018-02-07T16:07:03 the only nitpicking is that the commit message still mentions the old solution, so please update it 2018-02-07T16:07:22 I did update it 2018-02-07T16:08:07 ah, then only the merge request description is outdated 2018-02-07T16:08:15 ah yes 2018-02-07T16:32:05 *** asmorodskyi has quit IRC 2018-02-07T16:43:15 *** matthias_bgg has quit IRC 2018-02-07T17:15:57 *** deneb_alpha has quit IRC 2018-02-07T18:02:56 *** fvogt has joined #opensuse-admin 2018-02-07T18:25:13 *** dddh has quit IRC 2018-02-07T18:31:57 *** fvogt has quit IRC 2018-02-07T18:35:52 *** fvogt has joined #opensuse-admin 2018-02-07T18:47:49 *** dddh has joined #opensuse-admin 2018-02-07T18:47:49 *** dddh has joined #opensuse-admin 2018-02-07T19:00:04 *** Aksem has quit IRC 2018-02-07T19:48:17 *** a-865k has quit IRC 2018-02-07T20:01:08 *** a-865k has joined #opensuse-admin 2018-02-07T20:16:31 tampakrap: do you have some time for the uwsgi config on elections.o.o? 2018-02-07T20:21:05 no, but I can give you the config from another server 2018-02-07T20:21:50 we can also do it tomorrow or friday evening (or after carnival) 2018-02-07T20:22:40 https://build.freeko.org/package/show/home:tampakrap:puppet/python-puppetboard 2018-02-07T20:23:41 *** deneb_alpha has joined #opensuse-admin 2018-02-07T20:23:42 *** deneb_alpha has joined #opensuse-admin 2018-02-07T20:23:47 saturday I think I'll be free, the next two afternoons I'm busy as well 2018-02-07T20:25:29 I'm on 4 carnival parades starting saturday, and don't know yet if I'll have time in the evening, or if I end up at some party 2018-02-07T20:25:52 if we are both online on saturday, we can do it 2018-02-07T20:26:12 otherwise next week (wednesday or later) 2018-02-07T20:27:09 okay I'm stealing 20 mins from the movie, she'll understand 2018-02-07T20:27:27 it's a django app right? 2018-02-07T20:28:24 I have a tmux open 2018-02-07T20:28:38 ok, attached 2018-02-07T20:30:31 settings.py path is correct? 2018-02-07T20:30:45 http://paste.opensuse.org/6968064 contains my notes about what I did etc. 2018-02-07T20:32:47 there is no settings.py there 2018-02-07T20:33:40 hmm, it should be there in theory 2018-02-07T20:33:53 luckily I made a backup, so let me copy that back 2018-02-07T20:34:39 done 2018-02-07T20:35:16 note that it only works because of the symlink in /usr/..... 2018-02-07T20:35:49 also note that helios currently runs as user postgres (no, I'm not lucky about that) 2018-02-07T20:39:17 should I kill the currently running helios (running with manage.py) to free the port? 2018-02-07T20:40:05 PROBLEM: HAProxy on mufasa.infra.opensuse.org - HAPROXY CRITICAL - Active service riesling is DOWN on riesling proxy ! Active service narwal4 is DOWN on static proxy ! ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mufasa.infra.opensuse.org&service=HAProxy 2018-02-07T20:40:35 https://github.com/benadida/helios-server that's the one we use? 2018-02-07T20:40:55 good question, since I didn't do the setup 2018-02-07T20:41:12 but I know that there's also a repo on github.com/opensuse 2018-02-07T20:42:22 okay it provides a wsgi 2018-02-07T20:46:13 why it can't find server_ui? 2018-02-07T20:46:15 it's right there 2018-02-07T20:48:29 good question, should it be helios-server.server_ui in settings.py? (just guessing) 2018-02-07T20:50:59 no idea 2018-02-07T20:51:08 I'm reading the code trying to make sense out of it 2018-02-07T20:51:59 sounds similar to what I had to do when I worked on it... 2018-02-07T20:52:51 it's in the INSTALLED_APPS 2018-02-07T20:52:55 that should be sufficient 2018-02-07T20:53:20 FYI: the settings.py in /usr/lib/python.... is a symlink to the settings.py in /srv/... 2018-02-07T20:53:28 (another thing on my "not nice" list) 2018-02-07T20:54:16 the uwsgi.py should select the path of settings.py 2018-02-07T20:57:28 just an idea - what about module = wsgi:helios-server instead of just helios ? 2018-02-07T20:59:37 okay 2018-02-07T21:00:34 now it seems loaded 2018-02-07T21:02:15 you have a wrong path in the nginx config 2018-02-07T21:02:36 (missing the helios-server part) 2018-02-07T21:03:40 hmm... - upstream: "http://unix:/usr/lib/... 2018-02-07T21:03:46 http://unix: ??? 2018-02-07T21:05:53 okay we have progress 2018-02-07T21:06:09 yes, a new error message ;-) 2018-02-07T21:11:48 I'm pretty sure that this is a configuration issue 2018-02-07T21:11:54 not entirely sure though 2018-02-07T21:12:02 it fails to connecto to the db I think 2018-02-07T21:12:25 guess why I wrote 2018-02-07T21:12:27 [21:35:49] also note that helios currently runs as user postgres (no, I'm not lucky about that) 2018-02-07T21:12:58 that was because their deployment script doesn't support remote dbs 2018-02-07T21:13:09 it's not relevant any more though 2018-02-07T21:13:19 the service runs now as user helios in a socket 2018-02-07T21:13:23 and the db exists already 2018-02-07T21:13:32 but I think we haven't given enough configuration to access it 2018-02-07T21:15:00 sounds like a valid guess 2018-02-07T21:16:33 I won't object if you use salt to create the database user - we have to start somewhere ;-) 2018-02-07T21:17:39 the error changed, my guess was correct 2018-02-07T21:17:56 :-) 2018-02-07T21:25:58 assuming my guess of what you want to do is right - su - helios and then run psql ? 2018-02-07T21:26:12 (just a guess, I don't know much about postgresql) 2018-02-07T21:27:05 I want to make the password authentication work 2018-02-07T21:27:26 elections.o.o now says fe_sendauth: no password supplied 2018-02-07T21:28:26 which sounds right - you didn't add the password to settings.py IIRC 2018-02-07T21:34:38 error message -> google says https://stackoverflow.com/questions/18664074/getting-error-peer-authentication-failed-for-user-postgres-when-trying-to-ge 2018-02-07T21:34:58 so you probably need to change something in pg_hba.conf to "md5" 2018-02-07T21:34:58 it works from mickey 2018-02-07T21:35:28 that's non-local and therefore not too surprising 2018-02-07T21:35:49 okay it's stupid 2018-02-07T21:36:29 *** deneb_alpha has quit IRC 2018-02-07T21:37:31 we have a new error message on elections.o.o 2018-02-07T21:43:49 the tables where still owned by postgres role 2018-02-07T21:44:00 so I dumped the db and set the owner everywhere to helios 2018-02-07T21:44:04 and now hopefully restoring 2018-02-07T21:44:14 yes, I think I understood what you did 2018-02-07T21:44:14 but it's taking too long and it didn't ask for password 2018-02-07T21:44:17 so I doubt it 2018-02-07T21:44:21 remind me to stay with mysql ;-) 2018-02-07T21:47:19 looks better 2018-02-07T21:47:21 ready 2018-02-07T21:47:23 and even seems to work :-) 2018-02-07T21:47:38 take some notes please 2018-02-07T21:47:48 1) move the db to the cluster 2018-02-07T21:48:34 2) move wsgi.py and settings.py to the package and to /srv/www/vhosts/helios-server 2018-02-07T21:49:23 wsgi.py is already in the package, we'll need to replace it with a custom one if we want a custom path for settings.py as well 2018-02-07T21:49:32 that's it 2018-02-07T21:51:25 what needs to be changed in /srv/www/vhosts/helios-server/wsgi.py to use settings.py from the same directory? 2018-02-07T21:52:15 I am not sure, it needs to be somehow like the wsgi.py we have on puppetboard 2018-02-07T21:52:35 os.environ['PUPPETBOARD_SETTINGS'] = '/srv/www/vhosts/puppetboard/settings.py' 2018-02-07T21:52:36 from puppetboard.app import app as application 2018-02-07T21:53:39 *** fvogt has quit IRC 2018-02-07T21:56:01 from some grepping, it could be DJANGO_SETTINGS_MODULE 2018-02-07T21:56:08 wsgi.py:os.environ.setdefault("DJANGO_SETTINGS_MODULE", "settings") 2018-02-07T21:56:10 manage.py: os.environ.setdefault("DJANGO_SETTINGS_MODULE", "settings") 2018-02-07T21:59:22 yes that sounds right 2018-02-07T21:59:52 changing wsgi.py in /srv didn't change anything 2018-02-07T22:00:27 (I'd expect a database failure because /srv/.../settings.py it doesn't have the password etc. yet) 2018-02-07T22:02:41 changing the /usr/.../wsgi.py the same way causes a 500, so we at least now know that this one gets used... 2018-02-07T22:08:07 nice[tm] 2018-02-07T22:08:46 either we keep chdir = /usr/... in uwsgi.ini - which means /usr/... settgings.py 2018-02-07T22:08:56 or we change it to /srv and everything breaks :-/ 2018-02-07T22:09:35 any third option? 2018-02-07T22:30:51 let me try 2018-02-07T22:34:44 yeah it doesn't work, probably it has hardcoded paths in the code 2018-02-07T22:38:40 so let's leave it as it is, we can still package them like this 2018-02-07T22:39:22 what about symlinking settings.py to /etc/helios/ (or something like that) in the package? 2018-02-07T22:39:47 that would make more sense than packaging "our" settings.py including the database account details ;-) 2018-02-07T22:41:52 symlinks are fine, the custom settings.py can be done even without them though 2018-02-07T22:41:55 I'll do it now 2018-02-07T22:56:58 *** Fraser_Bell has joined #opensuse-admin 2018-02-07T22:56:58 *** Fraser_Bell has joined #opensuse-admin 2018-02-07T23:20:01 cboltz: wanna back up anything? 2018-02-07T23:20:11 I want to clean up python from the machine to test the package 2018-02-07T23:20:55 we might loose the openSUSE auth for election admins, but I have a backup on github.com/cboltz ;-) 2018-02-07T23:21:16 just make sure you don't destroy settings.py ;-) 2018-02-07T23:21:32 I will destroy everything, back them up somewhere please 2018-02-07T23:22:59 ok, I downloaded /srv/www/vhost/helios-server to my laptop 2018-02-07T23:23:33 and from site-packages/helios-server? 2018-02-07T23:25:32 I'd say I'll copy it to my homedir, but I get (on login) 2018-02-07T23:25:38 Could not chdir to home directory /home/cboltz: No such file or directory 2018-02-07T23:25:49 so somehow creating the homedir failed 2018-02-07T23:26:06 okay create it manually please, I'm not going to debug this now 2018-02-07T23:26:07 (doing it manually now, but it's probably a good idea to find out why it fails) 2018-02-07T23:26:19 ticket 2018-02-07T23:26:57 ok 2018-02-07T23:28:47 let me know when I can destroy the universe 2018-02-07T23:31:15 I made a backup of /usr/lib/python2.7/site-packages/helios-server/, /srv/www/vhosts/helios-server/ and /etc/ 2018-02-07T23:31:44 so I hopefully have everything we need backed up 2018-02-07T23:31:58 okay, I'm firing away then 2018-02-07T23:32:35 Hey! My planet just disappeared!!! LOL 2018-02-07T23:45:49 helios-server-uwsgi needs Mesa? reallly? 2018-02-07T23:50:12 *** Aksem has joined #opensuse-admin 2018-02-07T23:50:41 * cboltz wonders if @WSGI_DIR@ in uwsgi.ini should have been replaced at package build time 2018-02-07T23:52:21 correct, I'm rebuilding the package 2018-02-07T23:59:34 *** Aksem has quit IRC