2020-08-13T13:11:21  <klein> I have a internal suse employee that needs access to the opensuse vpn, I will ask him to open a progress ticket and then it gets handled there? I don't like the idea of that depending on the internal SUSE ticketing system (and I also don't have time to look into that)
2020-08-13T13:11:41  <klein> he needs access to be able to work on S390 Tumbleweed builds with OpenQA or something like that
2020-08-13T16:16:29  <pjessen> who has access to the mirror in provo ?
2020-08-13T16:17:11  <cboltz> usually kl_eisbaer handles it, but I should also have access
2020-08-13T16:19:34  <pjessen> it looks like it is only rsycing a small subset of repositories, see issue #69334
2020-08-13T16:20:14  <pjessen> I cant really think of a good reason for that
2020-08-13T16:27:27  <cboltz> crontab has   # try to sync the full tree every week at Thursday
2020-08-13T16:27:37  <cboltz> there's a daily job for /distribution
2020-08-13T16:28:38  <pjessen> no problem with lots of rsync jobs queued up or something like that?
2020-08-13T16:28:44  <cboltz> tumbleweed and updates get synced more often
2020-08-13T16:29:17  <cboltz> ps aux shows two   rsyncd --daemon --config=/etc/rsyncd-push.conf   - but that's the only rsync activity I see currently
2020-08-13T16:29:40  <pjessen> push?
2020-08-13T16:30:17  <pjessen> repositories push ? I dont think we are doing any
2020-08-13T16:31:28  <pjessen> do you see any jobs for 'opensuse-full-really-everything-with-repositories' ?
2020-08-13T16:32:30  <cboltz> if I s/with/including/, then yes: opensuse-full-really-everything-including-repositories
2020-08-13T16:32:37  <cboltz> which of these is the correct name?
2020-08-13T16:33:02  <pjessen> ah, sorry, muscle memory - including is correct.
2020-08-13T16:33:09  <cboltz> ok, good
2020-08-13T16:33:49  <cboltz> I just started the sync script (aka weekly cronjob) manually - let's see how long it runs...
2020-08-13T16:34:05  <pjessen> could you send me the contents of  /etc/rsyncd-push.conf ?
2020-08-13T16:34:37  <pjessen> I see the rsync started.
2020-08-13T16:35:12  <cboltz> you should have mail, directly from provo-mirror ;-)
2020-08-13T16:36:45  <pjessen> got it
2020-08-13T16:42:37  <pjessen> okay, we are running push, but to provo-downloadcontent.opensuse.org
2020-08-13T16:44:03  <cboltz> that's just another IP on provo-mirror
2020-08-13T16:44:13  <pjessen> yup
2020-08-13T19:17:00  <bmwiedemann1> lcp: https://pagure.io/fork/bmwiedemann/ipsilon/diff/master..devel#_4__5 2 added lines made openidc work for another user.
2020-08-13T19:18:02  <lcp> oh, cool
2020-08-13T19:18:49  <lcp> so you can now log into openSUSE Matrix, eh?
2020-08-13T19:21:50  <bmwiedemann1> Error: mapping_error
2020-08-13T19:21:51  <bmwiedemann1> localpart is empty
2020-08-13T19:22:54  <lcp> welp, that means matrix still doesn't get profile stuff from ipsilon
2020-08-13T19:25:48  <lcp>  * welp, that means synapse still doesn't get profile stuff from ipsilon
2020-08-13T19:26:13  <lcp> it tries to construct localpart from preferred_username btw
2020-08-13T19:26:38  <lcp> without preferred_username, the localpart is empty
2020-08-13T19:30:04  <bmwiedemann1> for openid I did some mapping there
2020-08-13T19:32:27  <bmwiedemann1> added the same _username => nickname mapping in openidc but it did not help
2020-08-13T19:45:01  <bmwiedemann1> the new DB entries do not have any info on scopes - it is also missing in admin UI
2020-08-13T20:51:24  <cboltz> pjessen: just FYI - rsync on provo-mirror is still running, looks like /history was terribly outdated - currently /history/20200716 is syncing
2020-08-13T20:51:57  <cboltz> iotop shows ~6 M/s disk write, so I have a feeling that it will take a while ;-) to get everything up to date
2020-08-13T21:03:43  <lcp> uyuni guys want `lists.uyuni-project.org` for their mailing lists, so we will need to handle everything appropriate to that
2020-08-13T21:04:15  <lcp> I still need to ask obs guys, didn't get the chance
2020-08-13T21:09:56  <cboltz> whois uyuni-project.org   says that they use DNS*.REGISTRAR-SERVERS.COM as name server - that might make getting lists.uyuni-project.org added a bit interesting ;-)  (at least it's not something we can simply do in FreeIPA)
2020-08-13T21:13:42  <lcp> no, but the person that can manage it from their side said they will, so we just have to say what to do
2020-08-13T21:14:09  <cboltz> sounds good :-)
2020-08-13T21:14:20  <lcp> yup
2020-08-13T21:15:31  <lcp> I will add the domain, so I have that at least
2020-08-13T21:27:21  <cboltz> that's probably the easiest part ;-)
2020-08-13T21:57:36  <lcp> it is
2020-08-13T21:58:18  <cboltz> from the top of my head, other things we'll need is
2020-08-13T21:58:47  <cboltz> - DNS entry: A and AAAA with the IP of proxy.o.o (AFAIK we can't use CNAME when we need MX entries - correct me if I'm wrong)
2020-08-13T21:58:55  <cboltz> - MX DNS entries (mx*.o.o)
2020-08-13T21:59:01  <cboltz> - haproxy config
2020-08-13T21:59:26  <cboltz> - postfix config to ensure lists.uyuni-project.org mails get routed to mailman3
2020-08-13T21:59:27  <lcp> I was gonna write a ticket on progress to list what we need, first of all being testing opensuse-test@o.o on test@lists.opensuse.org
2020-08-13T21:59:54  <lcp> but I guess we could start with another domain entirely >:D
2020-08-13T22:00:48  <cboltz> that will probably already need the "annoying" DNS entries for lists.o.o and the routing (transport map) in postfix
2020-08-13T22:01:23  <lcp> is it really that annoying if all the mailing lists move to that?
2020-08-13T22:01:49  <cboltz> the annoying thing is that lists.o.o can't stay CNAME proxy.o.o
2020-08-13T22:02:22  <lcp> right
2020-08-13T22:02:25  <cboltz> so if we have to switch IPs or need to switch to proxy-prv.o.o for a planned downtime in Nuremberg, it won't automatically follow
2020-08-13T22:02:37  <cboltz> that's not terribly bad, but, well, annoying ;-)
2020-08-13T22:02:55  <lcp> is there really no way to do that automatically?
2020-08-13T22:04:01  <cboltz> at least I don't know one
2020-08-13T22:04:33  <cboltz> but then - luckily such "annoying" situations are very rare
2020-08-13T22:04:47  <lcp> it is also important to remember we need to alias the old addresses to the new lists, in postfix and in mailman
2020-08-13T22:05:09  <cboltz> right, and don't forget the +subscribe etc.
2020-08-13T22:05:33  <lcp> huh, I wonder if that will work
2020-08-13T22:06:39  <cboltz> it should ;-)
2020-08-13T22:07:08  <lcp> well, idk if it accepts different from address for +join emails in mailman yet
2020-08-13T22:09:36  <cboltz> ok, that part could indeed be a problem (I was thinking more about the postfix side), but - let's see/test ;-)
2020-08-13T22:09:50  <lcp> there is at the very least a config for that for the main mailing list address, which I already set for opensuse-test
2020-08-13T22:10:48  <cboltz> right - and I hope the fact that there is no config option for the join/unsubscribe/... address means that these adresses are somewhat flexible
2020-08-13T22:11:10  <lcp> yup
2020-08-13T22:11:23  <cboltz> (not sure if I ever tested that, but the alias files I remember from mailman2 look like they should be flexible enough)
2020-08-13T22:11:26  <lcp> unless nobody had that usecase yet >:D
2020-08-13T22:12:58  <cboltz> unlikely - I use mailman2 since years, and IIRC never had to report a bug. And *that* means something ;-)
2020-08-13T22:13:17  <cboltz> ask the people in #apparmor - they'll confirm that I break everything ;-)
2020-08-13T22:14:08  <lcp> right