2020-05-27T01:49:27 -heroes-bot- PROBLEM: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS CRITICAL: DB postgres total locks: 156 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-27T01:59:26 -heroes-bot- RECOVERY: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS OK: DB postgres total=32 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-27T02:30:03 *** okurz_ is now known as okurz 2020-05-27T04:43:27 -heroes-bot- PROBLEM: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS CRITICAL: DB postgres total locks: 64 * total waiting locks: 10 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-27T05:48:20 *** y8uz6ur9[m] is now known as vasfsz6399[m] 2020-05-27T05:48:21 *** vasfsz6399[m] is now known as vasfsz[m] 2020-05-27T05:58:50 *** vasfsz[m] is now known as M6399[m] 2020-05-27T05:58:52 *** M6399[m] is now known as M_discord_428273 2020-05-27T08:20:17 *** MauG_ is now known as m4u9 2020-05-27T09:19:27 etherpad is down 2020-05-27T09:19:38 https://etherpad.opensuse.org/ 2020-05-27T09:20:50 -heroes-bot- PROBLEM: HTTP etherpad on etherpad.infra.opensuse.org - connect to address 192.168.47.56 and port 9001: Connection refused ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=etherpad.infra.opensuse.org&service=HTTP%20etherpad 2020-05-27T09:23:06 hah. take this stupid bot! you will not replace my job! 2020-05-27T09:26:21 forums are missing the WYSIWYG editor. Anything changed ? 2020-05-27T09:44:40 henne: working on it 2020-05-27T09:44:48 henne: the etherpad, I mean 2020-05-27T09:45:05 👍️ 2020-05-27T09:45:28 the bot is something who know how to fix KI 2020-05-27T09:56:49 FYI: upgrading etherpad to 1.8.4 is WIP 2020-05-27T10:20:25 https://etherpad.opensuse.org/ is up and running again 2020-05-27T10:20:50 -heroes-bot- RECOVERY: HTTP etherpad on etherpad.infra.opensuse.org - HTTP OK: HTTP/1.1 200 OK - 9007 bytes in 0.010 second response time ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=etherpad.infra.opensuse.org&service=HTTP%20etherpad 2020-05-27T10:28:34 WYSIWYG editor is also back - weird issue. 2020-05-27T11:38:08 pjessen: did you get my email yesterday? 2020-05-27T11:39:39 kl_eisbaer: Gerald asked for the hardware wishlist in the last heroes meeting, maybe you can find some time to work on it? ;-) 2020-05-27T11:40:26 cboltz: maybe, maybe not. Depends on my other duties atm. Carving out of something is somehow .oO 2020-05-27T11:41:16 yeah, I can imagine that you aren't bored ;-) and that the carveout eats up quite some time 2020-05-27T11:41:43 FYI: we need to renumber all openSUSE machines in Provo and the 2620 IPv6 addresses in NUE as well. 2020-05-27T11:43:04 doesn't sound too problematic ;-) 2020-05-27T11:43:10 As ^^ was brought up to me with the note that this has to be finished next week or we will loose our servers, my "openSUSE priority" is currently not at hardware wishlists ;-) 2020-05-27T11:43:38 most critical thing in Provo is probably provo-mirror, the others are more boring / less used 2020-05-27T11:44:10 and: agreed, an IP change with a deadline of a few days is obviously a priority ;-) 2020-05-27T11:44:43 cboltz: feel free to request the needed reverse entries for the new IPv6 entries at MF-IT for me. They did not even manage to get this properly done in the past. Guess, what they do now... :-/ 2020-05-27T11:45:11 "Nobody needs to sent Emails via IPv6..." 2020-05-27T11:45:25 Oh well... 2020-05-27T11:45:29 I feel with you 2020-05-27T11:45:30 thanks 2020-05-27T11:46:00 20 years IPv6 - and if MF is not using it, nobody else has to... 2020-05-27T11:46:02 maybe use --force^WGerald to ask? 2020-05-27T11:46:42 atm I like to go "my way": pinging people in my network directly. This is sometimes faster and less problematic than pushing from the top 2020-05-27T11:47:04 BTW: is there a status about openid meanwhile? 2020-05-27T11:47:28 I might have another candidate for openid: https://moodle.opensuse.org/ :-) 2020-05-27T11:48:24 ...and yes: log-in is currently not possible there 2020-05-27T11:48:48 atm I'm reading about https://thisinterestsme.com/speeding-up-haproxy-ssl-with-multiple-cpu-processes/ 2020-05-27T11:49:03 and https://www.haproxy.com/blog/multithreading-in-haproxy/ 2020-05-27T11:49:12 I added two proxy rules for www.o.o on request of bmwiedemann1 - www.o.o/openid-ldap/ and /idp/ 2020-05-27T11:49:43 as I'm wondering, why we (still) have our haproxy using bind-process 2-8 for SSL, if we just have 2 CPUs ... 2020-05-27T11:50:00 the first result was a "somewhat success" as in "at least we have a different problem now" - no idea what the progress is 2020-05-27T11:50:43 ok, thanks for the info. So I will wait with this log-in thingie and think about the moodler course categories first ;-) 2020-05-27T11:51:55 * kl_eisbaer is offline for some hours. Taking care about kids ... 2020-05-27T11:52:01 for the haproxy process number - no idea (and it's beyond my haproxy knownledge) - if in doubt, ask darix ;-) 2020-05-27T11:52:29 https://suse.com/c/speeding-ssl-need-know-haproxy/ is probably related 2020-05-27T11:53:16 (and I don't see "number of CPUs" mentioned in it) 2020-05-27T11:53:32 ^^ the article is from 8 May 2017 ... 2020-05-27T11:53:42 we have haproxy 2.0 now ... 2020-05-27T11:54:21 still, our config and the example in the article are quite similar 2020-05-27T11:54:31 so maybe our config is also from 2017? ;-) 2020-05-27T11:55:24 cboltz: guess what was the base of the article ? ;-) 2020-05-27T11:55:56 I think I have an idea ;-) 2020-05-27T12:36:08 did some benchmarks with that ab2 tool: 393/s on https, 5173/s on http download.o.o 2020-05-27T13:36:52 bmwiedemann1: you know that download.o.o is not covered by haproxy? 2020-05-27T14:32:06 didnt know 2020-05-27T14:58:32 kl_eisbaer: mind if I have any objections to moodle's styling :P 2020-05-27T14:58:45 also probably status.o.o could use some help 2020-05-27T14:59:01 cboltz: sorry I didn't take care of the redirects yet 2020-05-27T15:01:34 lcp: I always wanted some minimal green styling for maintainer.zq1.de so that I'd feel better moving that under a .opensuse.org domain. 2020-05-27T15:02:37 but last time I asked our designers, they said "bootstrap" and I felt that too heavy for a single-page site 2020-05-27T15:03:17 well, it is still bootstrap, but since we host it on static.o.o, it's shared cache between all the sites 2020-05-27T15:03:19 or was it Bento? 2020-05-27T15:03:55 I will let you know when I have enough time to develop my own css theme, it's just way too much work to do this properly :P 2020-05-27T15:04:12 and obviously as a designer I have way too many options on this 2020-05-27T15:05:22 we do use bootstrap for a few small sites already, like https://search.opensuse.org 2020-05-27T15:08:12 bmwiedemann1: if you have the source somewhere, I could migrate it to bootstrap ;) 2020-05-27T15:08:54 I did that for quite a few things already 2020-05-27T15:27:04 lcp: https://github.com/bmwiedemann/susepkginfo/blob/master/opensusemaintainer#L138 2020-05-27T15:41:37 bmwiedemann1: tt2 called :P 2020-05-27T15:52:21 tt2? 2020-05-27T15:53:02 bmwiedemann1: I saw that I could login using openID against the new instance you setup using openQA on okurz-vm.qa.suse.de but the username is the complete URL. Any further plans regarding this? 2020-05-27T15:57:04 that happens if you don't map anything in oid provider in ipsilon 2020-05-27T15:57:14 okurz: first we need to find a new host+domain for the setup https://confluence.suse.com/display/enginfra/Subdomain+for+Community+Accounts 2020-05-27T15:57:57 oh, I see. good to know, thx 2020-05-27T16:02:25 lcp: how does the map work? with https://pagure.io/ipsilon/blob/master/f/ipsilon/providers/openidp.py#_60 ? 2020-05-27T16:03:24 actually, good question, I looked at fedora config and they don't map anything for oid, but do for oidc 2020-05-27T16:03:35 yet, I don't think there is a default mapping that works 2020-05-27T16:04:45 it could just get LDAP uid value? 2020-05-27T16:04:52 although no, this extension looks like it https://pagure.io/ipsilon/blob/master/f/ipsilon/providers/openid/extensions/ax.py 2020-05-27T16:05:15 those are not ldap values I believe, it maps info extension values earlier in the code to some internal stuff 2020-05-27T16:05:17 let me look 2020-05-27T16:05:45 yup, here https://pagure.io/ipsilon/blob/master/f/ipsilon/info/common.py#_21 2020-05-27T16:07:31 that is not about username but about all other user info 2020-05-27T16:07:54 yeah, ldap maps uid onto username tho 2020-05-27T16:08:18 however I don't believe username is mapped onto anything in oid 2020-05-27T16:09:11 worst case, the relying party could extract username from URL 2020-05-27T16:09:39 especially when we only support that one openid provider 2020-05-27T16:09:48 you generally don't rely on external software making the calls with idps 2020-05-27T16:10:12 "the calls" meaning "the decisions" 2020-05-27T16:21:13 but I thought, with openid the URL is the unique identifier 2020-05-27T17:23:03 it is, but you can have a preferred username, which is what usually gets set in the frontends 2020-05-27T17:23:43 urls everywhere would look weird to the users ;) 2020-05-27T17:25:39 *** M_discord_428273 is now known as M6399[m] 2020-05-27T17:25:40 *** M6399[m] is now known as M_discord_428273 2020-05-27T19:34:50 *** DrDro[m]6 is now known as DrDro[m]8 2020-05-27T19:34:51 *** DrDro[m]8 is now known as DrDro[m]10 2020-05-27T20:31:27 -heroes-bot- PROBLEM: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS CRITICAL: DB postgres total locks: 59 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-27T21:11:27 -heroes-bot- RECOVERY: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS OK: DB postgres total=42 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-27T21:25:32 JFYI: gitlab 13.0.1 is out and packaged