[02:01:15] <Hoi>	 Is possible to mount /mnt/nfs/labstore-secondary-tools-project to my Cloud VPS instance? I want to sync some files. 
[07:04:00] <Hoi>	 Could someone take a look at T340901? I have been troubled by the issue for more than one year.
[07:04:02] <stashbot>	 T340901: Uploading large files to Commons almost always failed  - https://phabricator.wikimedia.org/T340901
[07:57:21] <Reedy>	 >Uploading from my local box, a third-party Cloud server, Toolforge, or WMCS Cloud VPS yields the same result in general.
[07:57:24] <Reedy>	 It's not a cloud issue then
[08:49:25] <Hoi>	 I see. I am heading to #wikimedia-tech for luck.
[12:06:25] <wikibugs>	 !log tools.wikibugs Updated channels.yaml to: 2f9a2737781db7d796cca923fa1d186ac40d3a5e Add wmde-wikidata-tech to #wikidata-feed
[12:06:28] <stashbot>	 Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.wikibugs/SAL
[14:58:26] <wm-bb>	 <lucaswerkmeister> I have a Cloud VPS / Horizon question that may or may not make sense, bear with me
[14:58:33] <wm-bb>	 <lucaswerkmeister> are security groups cumulative or do they replace one another?
[14:58:55] <wm-bb>	 <lucaswerkmeister> if I have one instance with two security groups, each of which has a number of “ALLOW IPv4 …” rules
[14:59:16] <wm-bb>	 <lucaswerkmeister> is any traffic covered by rules from either group going to be allowed?
[14:59:30] <wm-bb>	 <lucaswerkmeister> or do only rules from the first listed group apply?
[15:00:13] <wm-bb>	 <lucaswerkmeister> (more specifically, I’m wondering about deployment-memc09 – the default group has “ALLOW IPv4 6379/tcp from 172.16.0.0/21”, but maybe the cache group overrides that and that’s what causes T340908?)
[15:09:50] <taavi>	 rules from all of the groups will be applied
[15:11:38] <wm-bb>	 <lucaswerkmeister> ok thanks
[15:11:44] <wm-bb>	 <lucaswerkmeister> then I’m out of ideas why the traffic isn’t getting through :/
[15:12:26] <wm-bb>	 <lucaswerkmeister> (I noticed that other ports from the default list – e.g. 22 – also didn’t seem to be working)
[15:23:31] <wm-bb>	 <lucaswerkmeister> does “ALLOW IPv4 to 0.0.0.0/0” mean “deny all traffic” by any chance?
[15:24:38] <taavi>	 no, that means "allow all outbound ipv4 traffic"
[15:24:57] <wm-bb>	 <lucaswerkmeister> ah. I missed that to/from difference ^^
[15:33:49] <wm-bb>	 <lucaswerkmeister> hah, I couldn’t change the security groups anyways even if I knew what I was doing, I’m only a reader but not a member of deployment-prep :D