[19:06:57] !log lucaswerkmeister@tools-bastion-15 tools.wd-image-positions deployed d64c87fd74 (l10n updates: it) [19:06:59] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.wd-image-positions/SAL [19:07:36] !log lucaswerkmeister@tools-bastion-15 tools.ranker deployed 6c6d6a3b97 (l10n updates: id) [19:07:38] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.ranker/SAL [19:08:40] !log lucaswerkmeister@tools-bastion-15 tools.lexeme-forms deployed 40105a8e8b (l10n updates: it, vi) [19:08:41] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.lexeme-forms/SAL [19:22:05] only language codes containing the letter `i` are allowed to receive l10n updates today [21:29:16] o/ [21:29:27] I need help with https://phabricator.wikimedia.org/T413312 [21:29:50] ``` [21:29:51] ~ ❯ ssh wlmaz-bookworm.wlmaz.eqiad1.wikimedia.cloud [21:29:52] Connection closed by 185.15.56.16 port 22 [21:29:54] Connection closed by UNKNOWN port 65535 [21:29:55] ~ ❯ ssh -J nmw03@bastion.wmcloud.org nmw03@wlmaz-bookworm.wlmaz.eqiad1.wikimedia.cloud [21:29:57] Connection closed by 185.15.56.16 port 22 [21:29:58] Connection closed by UNKNOWN port 65535 [21:30:00] ~ ❯``` [21:30:25] tried creating and uploading new SSH key [21:34:30] since it’s a newly created host, can you see anything in the instance’s console / logs in horizon? [21:36:53] yes I can see it (re @lucaswerkmeister: since it’s a newly created host, can you see anything in the instance’s console / logs in horizon?) [21:36:58] Looking at your pastebin I doubt it's a ssh key problem, more like a "instance is dead" or "you have a typo in the instance name" problem [21:37:09] https://tools-static.wmflabs.org/bridgebot/d90a4285/file_76187.jpg [21:37:23] instance name is `wlmaz` [21:37:33] can you log in to the bastion directly? [21:37:40] hm, that’s not a ton of logs 🤔 (re @nemoralis: ) [21:38:17] (my impression from following this channel is that this type of problem semi-frequently results from puppet errors on the new instance, where it fails to set it up with your SSH public key. but I can’t check for that) [21:38:42] I don't know how to do that? `ssh nmw03@bastion.wmcloud.org` ? (re @wmtelegram_bot: can you log in to the bastion directly?) [21:39:05] yes [21:39:45] ``` [21:39:46] lucaswerkmeister: in that case I'd expect to see the bastion setting up port forwarding in the ssh verbose log [21:39:46] ~ ❯ ssh nmw03@bastion.wmcloud.org [21:39:48] Connection closed by 185.15.56.16 port 22``` [21:40:11] ah, I see what's wrong [21:40:32] * lucaswerkmeister is not good enough at deciphering ssh -v logs to see where it went wrong [21:40:51] openstack correctly sees you in the bastion project (https://openstack-browser.toolforge.org/user/nmw03), but that's not been synced to LDAP for whatever reason (https://ldap.toolforge.org/user/nmw03) [21:40:58] * taavi goes to fetch the correct yubikey [21:41:24] hmm [21:43:35] is this https://phabricator.wikimedia.org/T379550 [21:44:43] no, that's a slightly different failure case [21:45:53] I removed and re-added you from the project, try now? [21:46:37] bingo [21:46:54] thanks! I can ssh now [21:47:08] great [22:04:27] do I have to install and configure a nginx proxy for my website if it is hosted on CloudVPS? [22:06:09] some web server is probably required, yes (unless you’re running software that includes its own server) [22:06:45] it is an express app :p [22:07:04] then it has its own server, doesn’t it? [22:07:11] express / Node.js listens directly on some port AFAIK [22:07:44] I am asking because there is "Creating a web proxy" docs on wikitech. I thought maybe it handles the web server setup [22:08:38] you need to make express listen on a certain port, and on all interfaces (`0.0.0.0`) rather than just localhost; and then create a web proxy to that port in Horizon, as documented there [22:10:43] (and then that proxy will take care of HTTPS and your own app just has to speak plain HTTP without any certificates) [23:48:19] Eugrus here [23:48:21] I've requested a recovery mail for my Toolforge account, but it doesn't arrive.