[08:11:49] <wikibugs>	 (03CR) 10AikoChou: events: add code to generate predicted_classification events (031 comment) [machinelearning/liftwing/inference-services] - 10https://gerrit.wikimedia.org/r/907923 (https://phabricator.wikimedia.org/T331401) (owner: 10AikoChou)
[09:41:44] <wikibugs>	 (03CR) 10Elukey: [C: 03+1] "Let's proceed as it is for the moment, we can always change it if needed. Thanks!" [machinelearning/liftwing/inference-services] - 10https://gerrit.wikimedia.org/r/907923 (https://phabricator.wikimedia.org/T331401) (owner: 10AikoChou)
[10:28:42] <elukey>	 isaranto: o/ I am going to investigate later but it is weird that uvicorn uses port 80 on ores-legacy, IIUC it doesn't run as root, not sure why it is able to bind on that priviledged port..
[10:28:56] <elukey>	 we should probably move to 8080, but it weird that it works
[10:29:06] <elukey>	 going afk for lunch, ttl!
[10:30:18] <isaranto>	 ok, I can change it to 8080 then
[10:32:04] <klausman>	 elukey: maybe it has CAP_NET_ADMIN or similar.
[10:40:04] <klausman>	 `cap_net_bind_service=+ep` on a binary will allow it to bind to ports <1024
[10:40:40] <klausman>	 `getcap /usr/bin/whatever` should tell you if that's what going on
[10:51:58] * isaranto goes for lunch
[11:11:27] <wikibugs>	 (03CR) 10AikoChou: [C: 03+2] events: add code to generate predicted_classification events [machinelearning/liftwing/inference-services] - 10https://gerrit.wikimedia.org/r/907923 (https://phabricator.wikimedia.org/T331401) (owner: 10AikoChou)
[11:34:26] <wikibugs>	 (03Merged) 10jenkins-bot: events: add code to generate predicted_classification events [machinelearning/liftwing/inference-services] - 10https://gerrit.wikimedia.org/r/907923 (https://phabricator.wikimedia.org/T331401) (owner: 10AikoChou)
[12:50:46] <wikibugs>	 10Machine-Learning-Team, 10Add-Link, 10Growth-Team, 10User-notice: Deploy "add a link" to 17th round of wikis - https://phabricator.wikimedia.org/T308143 (10kevinbazira) Model evaluation has been completed and below are the backtesting results: | | Precision@0.5 | Recall@0.5 |tiwiki | 0.54 | 0.50 |tkwiki |...
[13:27:57] <elukey>	 klausman: yeah it is weird though, the pod should be explicitly granted the CAP_NET_ADMIN in that case
[13:29:11] <klausman>	 The otehr way I could see is with an SUID helper binary
[13:29:20] <klausman>	 But then we would know it's in there
[13:47:49] <wikibugs>	 (03PS1) 10Ilias Sarantopoulos: ores-legacy: switch app port to 8080 [machinelearning/liftwing/inference-services] - 10https://gerrit.wikimedia.org/r/914786 (https://phabricator.wikimedia.org/T330414)
[14:29:46] <elukey>	 sl
[14:29:48] <elukey>	 err sorry
[14:30:02] <elukey>	 so suid is not set, and I don't see CAP_NET_ADMIN allowed
[14:31:20] <elukey>	 and uvicorn runs as `somebody` (65533)
[14:45:03] <elukey>	 ah also interesting - the envoy proxy from the "mesh" module doesn't support (yet) POSTs
[14:45:06] <elukey>	 lovely
[14:45:13] <elukey>	 going afk for a bit folks, ttl!
[15:53:14] <elukey>	 going afk folks!
[15:53:19] <elukey>	 have a nice rest of the day
[15:53:24] <isaranto>	 o/
[16:01:05] <klausman>	 *new(int)/me heading out now, too \o
[16:23:23] <isaranto>	 logging off as well! o/
[22:31:58] <wikibugs>	 10Machine-Learning-Team, 10ORES, 10Advanced-Search, 10All-and-every-Wikisource, and 65 others: Remove unnecessary targets definitions - https://phabricator.wikimedia.org/T328497 (10Jdlrobson)