2020-10-13T06:56:08  *** ldevulder_ is now known as ldevulder
2020-10-13T07:43:02  <klein> cboltz: thanks to gschlotter
2020-10-13T07:43:11  <klein> we now have the 2 new VMs you requested
2020-10-13T07:44:14  <klein> internal range (infra) network ending in: 47.83 == discourse01.infra.opensuse.org, 47.84 pagure01.infra.opensuse.org
2020-10-13T07:44:41  <klein> we didn't created any DNS, and, the networking on the machines also need to be setup (they are reachable via heroes VPN)
2020-10-13T07:45:20  <klein> we added your (cboltz) ssh key to the root user, so, salt and everything can be set up... sorry we have no time to do this work
2020-10-13T07:46:04  <klein> please keep the name and IPs of those machines, as they were added this way in the internal SUSE RackTables system (for infra documentation)
2020-10-13T07:47:27  <klein> the extra volumes are in /dev/vdb, not mounted yet, so you are free to do that the way you like (as in "you" the person setting up the software/service)
2020-10-13T07:47:30  <klein> ;-)
2020-10-13T07:53:53  <klein> anyway, details are here: https://progress.opensuse.org/issues/70405
2020-10-13T08:08:17  <robin_listas> lcp: I was just reading the messages from this past night, and I saw you have problems with some mbox files. I may miss part of the context, but I downloaded "opensuse-2000-11.mbox.gz" and I have no problem opening it with an editor (after gunzip). I use mcedit, which understands mbox syntax. I can open it with alpine and see that email from "Alex Daniloff" with no issue. I interpret what I see as a corruption of t
2020-10-13T08:08:17  <robin_listas> aybe if I understand what you are trying to do, I can do part of the processing?
2020-10-13T08:09:03  <lcp> robin_listas: yeah, hyperkitty interprets some things wrong
2020-10-13T08:09:35  <lcp> it's just a few minor things to fix, since the processing was wrong before
2020-10-13T08:31:27  <robin_listas> Ok, if you want to off-load something like manually editing such files, tell me ;-)
2020-10-13T08:31:53  <lcp> eh, this far the only errors happen on large mailing lists, and there are only a few of those
2020-10-13T08:32:18  <lcp> opensuse-de list is too large for the VM too, so it aborts before finishing, I will have to split it in half
2020-10-13T12:00:15  <darix> btw: if you run with my discourse package, you can also install discourse-apparmor
2020-10-13T12:46:51  *** ldevulder_ is now known as ldevulder
2020-10-13T15:26:42  *** ldevulder_ is now known as ldevulder
2020-10-13T18:13:48  <lcp> cboltz: lists.uyuni-project.org have dns setup done, proxy and postfix need to be set up to route everything properly
2020-10-13T18:14:01  <lcp> that's https://progress.opensuse.org/issues/73267
2020-10-13T18:14:18  <cboltz> I've seen the ticket ;-)
2020-10-13T18:14:23  <lcp> and as a sidenote, that url with require ssl certificate setup too
2020-10-13T18:14:44  <lcp> huh, you are fast
2020-10-13T18:14:47  <cboltz> I'm currently in an AppArmor meeting, and will have a look at haproxy later
2020-10-13T18:15:06  <lcp> thanks!
2020-10-13T18:15:28  <lcp> with mailing lists imports I'm currently at opensuse-xfce
2020-10-13T18:15:34  <lcp> and 500 lines of errors
2020-10-13T18:17:09  <cboltz> ssl might be interesting[tm] for the "external" domain - I have no idea if it's possible to mix DNS auth (*.o.o) with http auth (lists.uyuni-project.org) in one certificate
2020-10-13T18:19:10  <lcp> no idea tbh, I haven't really played around with the cert server or letsencrypt
2020-10-13T18:59:30  <cboltz> haproxy done
2020-10-13T19:00:04  <darix> cboltz: you can not
2020-10-13T19:00:12  <darix> as it is not a per cert setting in dehydrated
2020-10-13T19:01:35  <cboltz> so - any idea how we can handle the certificate for lists.uyuni-project.org in haproxy?
2020-10-13T19:13:14  <darix> do the certs locally on the VM with dehydrated
2020-10-13T19:13:45  <cboltz> well, lists.uyuni* gets served via haproxy
2020-10-13T19:18:43  <cboltz> and this is where my haproxy knownledge ends, so someone who knows haproxy (especially SNI configuration for it) will need to do it, or at least point me into the right direction ;-)
2020-10-13T19:22:34  <darix> the SNI part is sipmle
2020-10-13T19:22:39  <darix> the "create cert part for it" is not
2020-10-13T19:31:57  <cboltz> darix: 100% correct _and_ useless answers are copyrighted by MS support, so please try something else ;-)
2020-10-13T20:00:35  <klein> cboltz: did you saw that I did the virtual machines?
2020-10-13T20:00:39  <klein> s/I/Gerhard
2020-10-13T20:07:56  <cboltz> yes, thanks!
2020-10-13T20:08:09  <cboltz> I already added the DNS entries and lcp's ssh key
2020-10-13T20:08:56  <cboltz> different question: do you know if we need to adjust something on ns*.o.o when adding new zones in freeipa?
2020-10-13T20:09:23  <cboltz> I added opensuse.me and opensuse.mu, but the public ns*.o.o only say   WARNING: recursion requested but not available
2020-10-13T20:10:11  <cboltz> (chip.i.o.o says the same, while dig'ing @freeipa.i.o.o works as expected)
2020-10-13T20:14:02  <darix> klein: https://twitter.com/davedarko/status/1316044660347994113
2020-10-13T20:14:28  <darix> cboltz: if you want to put the uyuni domain onto the opensuse dns
2020-10-13T20:14:35  <darix> someone needs to change the NS records at the registry
2020-10-13T20:15:36  <cboltz> I'm talking about opensuse.me and opensuse.mu, which both already have ns[123].opensuse.org in their whois records
2020-10-13T20:15:47  <darix> well then
2020-10-13T20:15:52  <darix> nothing should be needed
2020-10-13T20:15:58  <darix> well maybe
2020-10-13T20:16:08  <darix> might need a sqlite entry on chip
2020-10-13T20:16:24  <darix> althought I thought chip is in super mode which should accept all domains
2020-10-13T20:16:35  <darix> do you have a NS entry in freeipa that points to chip?
2020-10-13T20:17:04  <cboltz> yes, chip + ns[1-3]
2020-10-13T20:18:13  <darix> so is chip complaining about the zone?
2020-10-13T20:18:35  <cboltz> dig opensuse.me @chip.infra.opensuse.org   says
2020-10-13T20:18:37  <cboltz> ;; WARNING: recursion requested but not available
2020-10-13T20:18:46  <cboltz> (and obviously doesn't answer the query)
2020-10-13T20:19:01  <darix> dig opensuse.me @chip.infra.opensuse.org +norec
2020-10-13T20:19:11  <darix> if i recall correctly
2020-10-13T20:19:27  <cboltz> ;opensuse.me.                   IN      A
2020-10-13T20:19:42  <darix> so no A entries defined for the zone?
2020-10-13T20:19:47  <darix> dig -t SOA opensuse.me @chip.infra.opensuse.org +norec
2020-10-13T20:20:52  <cboltz> ;opensuseu.me.                  IN      SOA
2020-10-13T20:21:09  <darix> hmm
2020-10-13T20:21:20  <cboltz> I have a feeling that chip says "not my job" ;-)
2020-10-13T20:21:29  <darix> well
2020-10-13T20:22:58  <darix> i can not get to chip
2020-10-13T20:23:41  <darix> there is a sqlite DB
2020-10-13T20:23:55  <darix> see /etc/pdns/pdns.conf
2020-10-13T20:24:03  <darix> in doubt you have to add the zone there
2020-10-13T20:24:14  <darix> the sqlite3 history probably still has that query
2020-10-13T20:26:22  <darix> my recommendation would be to migrate all dns editing to pdns on chip with https://github.com/ngoduykhanh/PowerDNS-Admin
2020-10-13T20:26:32  <cboltz> there's a   domains   table with some domains - is that what you mean?
2020-10-13T20:27:37  <darix> is there an insert query in the history?
2020-10-13T20:29:25  <cboltz> I found an insert for   domainmetadata   but it's about a filter-internal-ns.lua
2020-10-13T20:29:33  <darix> you will need that too
2020-10-13T20:29:43  <cboltz> and an update for   domains    to change the master
2020-10-13T22:42:59  <lcp> cboltz: the import fails with `A string literal cannot contain NUL (0x00) characters.` on attachments apparently
2020-10-13T22:44:24  <cboltz> sounds interesting[tm]
2020-10-13T22:44:43  <lcp> yeah, it is
2020-10-13T22:45:32  <cboltz> if you need help, ping me tomorrow (I'm too tired and will mv $0 /dev/bed in a few minutes)
2020-10-13T22:46:28  <lcp> sure, I will probably do that
2020-10-13T22:46:42  <lcp> I will fix as much as I can, and leave the rest to discuss