2020-12-04T03:52:18  *** okurz_ is now known as okurz
2020-12-04T08:20:11  *** ldevulder_ is now known as ldevulder
2020-12-04T17:29:04  <henne> pjessen: you know this? https://wiki.list.org/DEV/DMARC
2020-12-04T17:29:17  <henne> regarding the subject tags...
2020-12-04T17:30:00  <henne> using `munge_from` certainly looks like worth an experiment
2020-12-04T17:40:08  <cboltz> henne: that would mean all mails get something like   From: Christian Boltz via factory <factory@lists.opensuse.org>   and need a Reply-To added to preserve the original From:
2020-12-04T17:40:22  <henne> jupp
2020-12-04T17:40:32  <cboltz> I'm subscribed to a ML that does that, and saying that I don't like it is a very diplomatic understatement ;-)
2020-12-04T17:40:47  <henne> enlighten me
2020-12-04T17:40:50  <henne> why? :)
2020-12-04T17:42:05  <cboltz> the main reason is that I have to look at the headers to find out the original sender mail address (Reply-To is not part of the headers displayed by default)
2020-12-04T17:42:56  <cboltz> and that's very "useful" especially on a list of (mostly) postmasters, where the sender address/domain is valueable information
2020-12-04T18:03:10  <henne> you think this is as relevant on our lists?
2020-12-04T18:34:40  <cboltz> maybe not as much as on a list full of postmasters ;-)
2020-12-04T18:35:26  <cboltz> but I still have a strong preference on seeing the original From: everywhere
2020-12-04T20:39:08  <okurz> hi, anyone can help me to get access to progress.infra.opensuse.org? I had access to the old instance (last year), but not the current instance
2020-12-04T20:44:14  <cboltz> I added you to the progress-admins group, so sudo should work for you now
2020-12-04T20:44:42  <okurz> cboltz: that's nice but I can't login over ssh
2020-12-04T20:44:56  <okurz> Am I expected to have a user account or use root?
2020-12-04T20:45:13  <cboltz> user
2020-12-04T20:45:20  <cboltz> I just restarted sssd, please try again
2020-12-04T20:46:08  <okurz> hm, nope. sorry, it's too long ago. maybe not even the IP I have is right. 192.168.47.8 ?
2020-12-04T20:46:49  <cboltz> that's the right IP
2020-12-04T20:47:54  <okurz> could you crosscheck my ssh public key maybe?
2020-12-04T20:50:10  <cboltz> fetch_freeipa_ldap_sshpubkey.sh okurz   gives me    ssh-ed25519 AAAAC3....ZvuB okurz@linux-28d6.suse
2020-12-04T20:50:21  <okurz> that's good, thx
2020-12-04T20:50:31  <okurz> where else should I be able to login?
2020-12-04T20:50:59  <cboltz> as user okurz: in (nearly) all VMs in the heroes network
2020-12-04T20:52:07  <okurz> like anna and elsa, right? same problem for all "kex_exchange_identification: Connection closed by remote host", denied or blocked by ssh
2020-12-04T20:53:17  <okurz> hm, freeipa tells me that the password is expired …
2020-12-04T20:53:40  <cboltz> that matters only when you want to login to freeipa
2020-12-04T20:53:49  <cboltz> but not for ssh or the VPN ;-)
2020-12-04T20:54:20  <okurz> yeah, that's what I expected, still I will handle that first so that I can check freeIPA again :)
2020-12-04T20:54:56  <cboltz> the ssh error you mentioned is interesting[tm], and it seems you don't leave a trace in /v/l/messages on progress.i.o.o
2020-12-04T20:55:18  <okurz> could that be fail2ban or something?
2020-12-04T20:56:16  <cboltz> no, we only have that for servers with a public ssh port
2020-12-04T20:56:28  <okurz> makes sense
2020-12-04T21:00:38  <cboltz> does a   ssh -vvv   print something helpful?
2020-12-04T21:00:52  <cboltz> Maybe pastebin the output so that I can compare it with the expected one
2020-12-04T21:02:26  <okurz> I tried that in before but this brought me to an idea. I tried out a proxy command for `*.opensuse.org` and when doing that I already thought that could be a bad idea when I want to access infra.opensuse.org again :D Crosschecking …
2020-12-04T21:03:49  <cboltz> options from ~/.ssh/config will be mentioned in -vvv ;-)  (not the exact options, but the fact that they exist)
2020-12-04T21:04:10  <okurz> yeah, that's where I found the proxy command which is likely the culprit
2020-12-04T21:05:26  <okurz> first I want to finally implement proper DNS forwarding with dnsmasq
2020-12-04T21:06:14  <cboltz> I assme you know the VPN page in the progress.o.o wiki?
2020-12-04T21:06:30  <okurz> yes, thx
2020-12-04T21:08:47  <okurz> everything works now, including sudo (with password) on redmine.i.o.o, awesome, thx a lot cboltz
2020-12-04T21:09:01  <cboltz> you are welcome ;-)
2020-12-04T21:09:26  <cboltz> just curious - what do you want to do on the progress.i.o.o server?
2020-12-04T21:09:59  <okurz> I wanted to check if I see any significant load increase when I query the API a bit more heavily
2020-12-04T21:10:26  <cboltz> sounds boring
2020-12-04T21:10:33  <cboltz> but then - depends on your definition of "a bit" ;-)
2020-12-04T21:11:25  <okurz> hm, could be something like 500 requests to a list of issues within 1m
2020-12-04T21:13:17  <cboltz> oh, nice ;-)
2020-12-04T21:15:19  <okurz> if you are more interested what I am currently working on is whenever any openQA job fails trigger a script that reads all tickets from progress.opensuse.org that have a special regex stored in the subject line and try to match the openQA job log content against that regex. If it matches, regard the reason for the job failure a "known issue" as recorded in the ticket and label the openQA job with the ticket. If no match was
2020-12-04T21:15:20  <okurz> found then trigger "investigation jobs" for crosschecking, i.e. retrigger + trigger "last good" with old git state of tests and old state of product, e.g. previous stable Tumbleweed snapshot
2020-12-04T21:20:45  <cboltz> sounds good