[00:01:46] there is also a maximum of keys it will try. it's possible to have so many keys in the agent that it never gets to the working one before giving up. default it's 6 [00:02:15] the solution there is still writing .ssh/config, not multiple agents [00:02:46] probably https://en.wikipedia.org/wiki/Defense_in_depth_(computing) [00:03:12] safer than relying on everyone writing good config [00:05:57] right, the real defense against that is just setting IdentityFile (re @wmtelegram_bot: the solution there is still writing .ssh/config, not multiple agents) [00:06:28] right, that’s why i mentioned that forwarding isn’t really a good reason to have multiple agents if you’re not gonna forward! lol (re @wmtelegram_bot: "forwarded" is maybe the wrong word there. If you have N keys in your agent by default ssh will try all of them in serie...) [00:08:50] I am fairly sure the broad intent is to isolate a production access ssh key so that it is never presented to a non-production environment. Words are sometimes hard though. [00:13:07] one thing I know. you can not rely on everyone having a correct config. source: dozens of support tickets to debug issues with shell access [11:22:53] has anyone managed to get webdriverio (wdio) running in Wikimedia GitLab CI by any chance? [11:23:12] the only GitLab repo with wdio I found in codesearch is https://gitlab.wikimedia.org/repos/data-engineering/mpic/-/tree/main/frontend, which AFAICT doesn’t run wdio in GitLab CI [11:38:31] ok, looks like the answer is mainly “use the -test-browser image” (https://gitlab.wikimedia.org/repos/m3api/tmp-m3api-oauth2/-/commit/ddd2696f32)… [11:38:35] …and “install the right chromedriver version” (https://gitlab.wikimedia.org/repos/m3api/tmp-m3api-oauth2/-/commit/fc62918602) [11:38:53] (it’s not properly working yet but the rest is probably not general wdio issues anymore) [12:07:39] (now it’s properly working \o/ just needed to update the test for beta’s wmflabs→wmcloud move) [14:03:07] Hello everyone. [14:03:07] https://hashtags.wmcloud.org [14:03:08] Wikimedia Hashtags tool is down? [16:57:53] is it possible to edit a tool's public html (in www/static) via sftp? main barrier is that you cannot use 'become' in sftp [16:58:01] (on toolforge) [18:10:30] !log damian-scripts@tools-bastion-13 tools.cluebotng-review reviewer deployed @ refs/tags/v0.2.3 [18:10:32] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.cluebotng-review/SAL [18:36:59] !log damian-scripts@tools-bastion-13 tools.cluebotng-review reviewer deployed @ refs/tags/v0.2.4 [18:37:02] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.cluebotng-review/SAL [19:44:25] !log damian-scripts@tools-bastion-13 tools.cluebotng-review reviewer deployed @ refs/tags/v0.2.5 [19:44:28] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.cluebotng-review/SAL