2018-02-08T00:22:56 cboltz: settings.py is wrong, why is it working? 2018-02-08T00:23:12 *** Fraser_Bell has left #opensuse-admin 2018-02-08T00:23:13 good question :-/ 2018-02-08T00:23:24 ah, now it's broken :-) 2018-02-08T00:23:25 false alarm 2018-02-08T00:23:31 I needed to restart 2018-02-08T00:23:41 we don't need the password due to the pg_hba.conf rules 2018-02-08T00:23:45 so all fine 2018-02-08T00:24:22 the procedure is: 1) install the package 2) adjust settings.py 3) optionally adjust uwsgi.ini 4) start helios-server-uwsgi 5) configure and start nginx 2018-02-08T00:24:34 the uwsgi.ini we use is the default 2018-02-08T00:24:49 the settings.py you can put it in salt and restart helios-server-uwsgi every time it changes 2018-02-08T00:25:17 nginx you can also put in salt, and that's it 2018-02-08T00:25:44 we move the database to the cluster when you're done 2018-02-08T00:25:58 you also need to start (taken from my notes, so probably s/postgres/helios) sudo -u postgres python manage.py celeryd 2018-02-08T00:26:26 celeryd processes the voter list, sends mail notifications etc. 2018-02-08T00:26:35 so it might be worth a service file 2018-02-08T00:27:58 sure 2018-02-08T00:28:46 but not via manage.py please 2018-02-08T00:29:27 that's what I found in the documentation, but I'm open for suggestions how to do it better ;-) 2018-02-08T00:30:34 manage.py is supposed to be a dev only tool 2018-02-08T00:30:41 we should probably even remove it from the package 2018-02-08T00:31:07 we need to solve the initial deployment though if we want to be correct 2018-02-08T00:31:49 right, reset.sh includes some manage.py commands to initialize the database 2018-02-08T00:32:02 so I'd vote for keeping it in the package 2018-02-08T00:32:06 http://docs.celeryproject.org/en/latest/userguide/daemonizing.html 2018-02-08T00:35:23 the django-celery pip page might also be useful 2018-02-08T00:35:24 https://pypi.python.org/pypi/django-celery 2018-02-08T00:38:38 looks like I have something to do in the next days ;-) 2018-02-08T00:39:26 thanks for your help! 2018-02-08T00:40:42 you're welcome 2018-02-08T00:40:57 planning to ask for an opensuse theme btw? 2018-02-08T00:42:15 good idea, but it's not the most important thing ;-) 2018-02-08T00:42:46 I'd say we should salt it first and maybe replace the helios logo with a geeko 2018-02-08T00:42:58 when this is done, I'll check how hard the theming would be 2018-02-08T00:43:22 but I'd prefer not to load JS from various places in the voting system ;-) 2018-02-08T00:45:39 making a website beautiful is quite important to be honestly 2018-02-08T00:46:01 you don't have to do it yourself though, send a mail or a news item to the community to ask for a volunteer 2018-02-08T00:46:13 no objection, but keeping it secure is even more important ;-) 2018-02-08T00:46:16 *** Son_Goku has joined #opensuse-admin 2018-02-08T00:46:34 and yes, I already had "ask for a volunteer" in mind to avoid having to do it myself ;-) 2018-02-08T00:53:50 *** cboltz has quit IRC 2018-02-08T02:10:34 *** nicolasbock has quit IRC 2018-02-08T02:47:06 *** cthugha has joined #opensuse-admin 2018-02-08T02:50:16 *** ldevulder has quit IRC 2018-02-08T02:57:56 *** Son_Goku has quit IRC 2018-02-08T03:34:45 *** Son_Goku has joined #opensuse-admin 2018-02-08T03:46:51 *** plinnell has quit IRC 2018-02-08T03:48:43 *** plinnell has joined #opensuse-admin 2018-02-08T03:48:43 *** plinnell has joined #opensuse-admin 2018-02-08T03:55:29 *** okurz has quit IRC 2018-02-08T03:56:22 *** okurz has joined #opensuse-admin 2018-02-08T04:48:59 *** Son_Goku has quit IRC 2018-02-08T05:56:33 *** Son_Goku has joined #opensuse-admin 2018-02-08T06:05:08 *** Son_Goku has quit IRC 2018-02-08T06:43:41 *** Son_Goku has joined #opensuse-admin 2018-02-08T06:52:19 *** Son_Goku has quit IRC 2018-02-08T06:53:28 *** Son_Goku has joined #opensuse-admin 2018-02-08T07:03:20 *** Son_Goku has quit IRC 2018-02-08T07:15:22 *** Son_Goku has joined #opensuse-admin 2018-02-08T07:25:50 *** Son_Goku has quit IRC 2018-02-08T08:12:24 *** cthugha is now known as ldevulder 2018-02-08T08:16:22 *** matthias_bgg has joined #opensuse-admin 2018-02-08T08:30:43 *** mcaj has joined #opensuse-admin 2018-02-08T08:33:59 *** asmorodskyi has joined #opensuse-admin 2018-02-08T08:37:11 *** dddh has quit IRC 2018-02-08T08:37:35 *** dddh has joined #opensuse-admin 2018-02-08T08:37:35 *** dddh has joined #opensuse-admin 2018-02-08T08:42:32 *** cboltz has joined #opensuse-admin 2018-02-08T09:07:18 *** Son_Goku has joined #opensuse-admin 2018-02-08T09:35:04 *** sven15 has joined #opensuse-admin 2018-02-08T09:37:50 *** Aksem has joined #opensuse-admin 2018-02-08T10:03:43 *** kollex has joined #opensuse-admin 2018-02-08T10:15:29 *** katnip has left #opensuse-admin 2018-02-08T10:23:41 PROBLEM: Hosts syslog on monitor.infra.opensuse.org - CRITICAL: Found files older than 600 minutes /var/log/opensuse/hosts//wikisearch.log was last modified on Wed Feb 7 00:15:01 2018 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=monitor.infra.opensuse.org&service=Hosts%20syslog 2018-02-08T10:27:19 *** ancorgs has quit IRC 2018-02-08T10:28:06 *** ancorgs has joined #opensuse-admin 2018-02-08T11:09:36 cboltz: your opinion on something please 2018-02-08T11:10:12 I will need to create a script that loops over the encrypted_pillar_recipients, adds them to the local keyring and ultimately trusts the keys 2018-02-08T11:10:47 do you think it's better to have a new script or to abuse bin/encrypt_pillar.sh and add a new flag there? 2018-02-08T11:12:07 the only line we could share is probably 2018-02-08T11:12:10 RECIPIENTS=$(egrep '^\s*0x' encrypted_pillar_recipients | while read i; do echo "-r $i"; done | xargs) 2018-02-08T11:12:40 only the egrep part 2018-02-08T11:12:48 the while block will be different 2018-02-08T11:14:01 indeed 2018-02-08T11:14:38 I'd tend to add a new script, even if setting up the keyring is probably a very small script 2018-02-08T11:15:11 I also think that's better yes 2018-02-08T11:15:31 (personally, I won't even need that script because I have keyserver-options auto-key-retrieve in my gpg.conf ;-) 2018-02-08T11:16:00 sure you do 2018-02-08T11:16:43 before encrypting you'll need to make sure you have all the keys added 2018-02-08T11:17:14 what will the script do? I'd guess 2018-02-08T11:17:15 the saltmaster keys are the ones that you definitely won't have by default 2018-02-08T11:17:22 gpg --import $( egrep '^\s*0x' encrypted_pillar_recipients ) 2018-02-08T11:17:24 is enough 2018-02-08T11:17:47 it's not 2018-02-08T11:17:57 you need to trust ultimately the keys 2018-02-08T11:18:45 we'll also need a second key to reencrypt all the secrets, in case we add/remove a recipient 2018-02-08T11:22:17 *** cboltz has quit IRC 2018-02-08T11:22:40 *** cboltz has joined #opensuse-admin 2018-02-08T11:50:08 *** nicolasbock has joined #opensuse-admin 2018-02-08T12:10:11 *** Son_Goku has quit IRC 2018-02-08T12:17:02 *** Son_Goku has joined #opensuse-admin 2018-02-08T12:32:36 *** Son_Goku has quit IRC 2018-02-08T12:36:42 *** Son_Goku has joined #opensuse-admin 2018-02-08T13:06:54 *** Aksem has joined #opensuse-admin 2018-02-08T13:33:33 *** Son_Goku has quit IRC 2018-02-08T14:40:19 *** lektrik has joined #opensuse-admin 2018-02-08T14:44:14 *** Aksem has quit IRC 2018-02-08T14:53:30 *** 7IZAABMDM has joined #opensuse-admin 2018-02-08T14:58:22 *** 7IZAABMDM has quit IRC 2018-02-08T15:31:38 *** kollex has left #opensuse-admin 2018-02-08T16:16:22 *** asmorodskyi has quit IRC 2018-02-08T16:22:46 *** mcaj has quit IRC 2018-02-08T17:04:43 *** sven15 has quit IRC 2018-02-08T17:23:18 *** cthugha has joined #opensuse-admin 2018-02-08T17:25:10 *** ldevulder has quit IRC 2018-02-08T17:36:31 *** matthias_bgg has quit IRC 2018-02-08T17:43:00 *** tampakrap has quit IRC 2018-02-08T17:44:48 *** tampakrap has joined #opensuse-admin 2018-02-08T17:45:06 *** fvogt has joined #opensuse-admin 2018-02-08T18:15:24 *** BManojlovic has quit IRC 2018-02-08T18:18:14 *** BManojlovic has joined #opensuse-admin 2018-02-08T18:18:14 *** BManojlovic has joined #opensuse-admin 2018-02-08T18:18:52 *** BManojlovic has joined #opensuse-admin 2018-02-08T20:15:07 *** fvogt has quit IRC 2018-02-08T20:16:05 *** fvogt has joined #opensuse-admin 2018-02-08T20:18:59 *** fvogt has quit IRC 2018-02-08T20:20:07 *** fvogt has joined #opensuse-admin 2018-02-08T21:57:02 *** fvogt has quit IRC 2018-02-08T23:02:21 *** Son_Goku has joined #opensuse-admin 2018-02-08T23:11:10 *** lektrik has quit IRC