[00:35:25] 10GitLab (Project Migration), 10Release-Engineering-Team: Create new GitLab project group: - https://phabricator.wikimedia.org/T302258 (10Testonamonaco) [01:25:27] 10GitLab (Project Migration), 10Release-Engineering-Team: Create new GitLab project group: - https://phabricator.wikimedia.org/T302258 (10AntiCompositeNumber) 05Open→03Invalid [06:12:21] 10Release-Engineering-Team (Done by Feb 23🔥), 10Release, 10Train Deployments: 1.38.0-wmf.23 deployment blockers - https://phabricator.wikimedia.org/T300199 (10Legoktm) [06:12:50] 10Release-Engineering-Team (Done by Feb 23🔥), 10Release, 10Train Deployments: 1.38.0-wmf.23 deployment blockers - https://phabricator.wikimedia.org/T300199 (10Legoktm) I added T210075 as a train blocker because https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikimediaMessages/+/763699 needs to be merge... [08:54:01] (03PS1) 10Hashar: dockerfiles: fix control package name for rake-ruby2.5 [integration/config] - 10https://gerrit.wikimedia.org/r/764717 [12:21:57] 10Release-Engineering-Team (Deployment Training Requests): Deployment training request for Hannah Okwelum - https://phabricator.wikimedia.org/T302275 (10Hokwelum) [12:25:08] 10Release-Engineering-Team (Deployment Training Requests): Deployment training request for Hannah Okwelum - https://phabricator.wikimedia.org/T302275 (10Hokwelum) [12:25:57] 10Release-Engineering-Team (Deployment Training Requests): Deployment training request for Hannah Okwelum - https://phabricator.wikimedia.org/T302275 (10Hokwelum) [12:27:30] (03CR) 10Hashar: [C: 03+2] dockerfiles: fix control package name for rake-ruby2.5 [integration/config] - 10https://gerrit.wikimedia.org/r/764717 (owner: 10Hashar) [12:27:33] 10Release-Engineering-Team (Deployment Training Requests): Deployment training request for Hannah Okwelum - https://phabricator.wikimedia.org/T302275 (10ArielGlenn) Hey Tyler and other folks, this is our co-dumps-maintainer in training, so to speak, so I'm getting her trained in all the things. She'll probably c... [12:28:07] (03PS3) 10Hashar: utils/shellchecker: install shellcheck from pypi [integration/config] - 10https://gerrit.wikimedia.org/r/756087 [12:29:05] (03CR) 10Hashar: [C: 03+2] utils/shellchecker: install shellcheck from pypi [integration/config] - 10https://gerrit.wikimedia.org/r/756087 (owner: 10Hashar) [12:29:20] (03Merged) 10jenkins-bot: dockerfiles: fix control package name for rake-ruby2.5 [integration/config] - 10https://gerrit.wikimedia.org/r/764717 (owner: 10Hashar) [12:30:51] (03Merged) 10jenkins-bot: utils/shellchecker: install shellcheck from pypi [integration/config] - 10https://gerrit.wikimedia.org/r/756087 (owner: 10Hashar) [12:32:21] (03PS4) 10Hashar: Run shellcheck against shell files [integration/config] - 10https://gerrit.wikimedia.org/r/756088 [12:34:03] (03CR) 10jerkins-bot: [V: 04-1] Run shellcheck against shell files [integration/config] - 10https://gerrit.wikimedia.org/r/756088 (owner: 10Hashar) [13:28:42] !log deployment-prep: Create database for incubatorwiki (T210492) [13:28:45] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [13:28:45] T210492: Create a Wikimedia Incubator test wiki on the Beta Cluster - https://phabricator.wikimedia.org/T210492 [13:39:12] hey folks. is there an easy way to put something into the deployments calendar that is beyond the end of the current date range? [13:39:27] i.e. i'd like to schedule something for march 8th; current calendar ends at march 5th [13:40:53] 10Release-Engineering-Team (Done by Feb 23🔥), 10Release, 10Train Deployments: 1.38.0-wmf.23 deployment blockers - https://phabricator.wikimedia.org/T300199 (10matmarex) [13:49:43] kormat: not that I can think of [13:49:58] Easiest is probably to get someone to generate the calendar [13:50:03] If it's not been fully automated [13:53:39] i think i'll just set myself a reminder for next monday to add it :) [13:59:37] 10Beta-Cluster-Infrastructure, 10MediaWiki-extensions-WikimediaIncubator, 10Patch-For-Review: Create a Wikimedia Incubator test wiki on the Beta Cluster - https://phabricator.wikimedia.org/T210492 (10jhsoby) 05Open→03Resolved a:03jhsoby Thank you very much, @Urbanecm! [14:03:06] RhinosF1: thanks btw :) [14:03:32] np [14:03:40] sorry my answer was useless [14:31:28] hashar: Hurrah! Farewell node10, we don't miss you at all. [14:32:07] kormat, RhinosF1: The calendar generation is mostly automated at this point, sadly. [14:32:26] James_F: why does deployment-docker-wikifunctions01 need a floating ip? [14:32:37] taavi: Did you not see my reply the last time? [14:32:47] no? [14:32:59] taavi: It's going to be used by CI for full end-to-end testing. [14:33:02] James_F: did you see my Q about stylelint config [14:33:07] RhinosF1: No? [14:34:05] James_F: can't those be exposed via web proxies instead of using precious public ip space? [14:34:07] James_F: latest release is still complaining about postcss-less [14:34:32] taavi: Theoretically. [14:34:33] Project beta-scap-sync-world build #40313: 04FAILURE in 1.3 sec: https://integration.wikimedia.org/ci/job/beta-scap-sync-world/40313/ [14:34:41] James_F: https://github.com/miraheze/ManageWiki/runs/5273261747?check_suite_focus=true [14:34:46] RhinosF1: Huh. Despite the dependency? [14:35:08] James_F: that's what the build says [14:35:28] RhinosF1: "The build"? [14:35:41] James_F: https://github.com/miraheze/ManageWiki/runs/5273261747?check_suite_focus=true is the log [14:37:08] Ah, your npm is partially ignoring the package-lock because it's built on npm 6 or earlier rather than npm 7. Does it still happen if you use modern npm and replace package-lock.json? [14:37:55] the failed scap build is me. should be fixed momentarily. [14:38:39] James_F: the npm version is whatever is in ubuntu-latest [14:38:41] Yippee, build fixed! [14:38:42] Project beta-scap-sync-world build #40314: 09FIXED in 1 min 0 sec: https://integration.wikimedia.org/ci/job/beta-scap-sync-world/40314/ [14:39:59] RhinosF1: Yeah, that's likely your problem. :-( [14:40:39] Possibly not though. [14:40:58] Sorry, I don't have time to debug your code right now. :-( [14:41:07] James_F: they are core tests [14:41:22] we don't even run our own tests beyond lints [14:42:07] It's your CI stack, not ours, though? [14:42:37] I'm saying that the problem is in https://github.com/miraheze/ManageWiki/blob/master/package-lock.json which is definitely yours not ours. :-) [14:44:44] * RhinosF1 sees if his npm version locally is any less outdated [14:45:14] The one running in CI is fine. [14:45:47] It's the one running locally for whomever last manually updated that file that's the issue. [14:45:55] the bot should do it [14:46:14] updating my own npm version first [14:46:26] No, I think the GitHub bot very carefully doesn't make breaking changes like updating from package-lock 1 to package-lock 2. [14:46:59] i gonna try regenerate package-lock from my pc [14:47:06] when node & npm update [14:47:13] * James_F nods. [14:48:11] somehow my node version is that old it doesn't supportt npm 8 [14:48:15] which is :( [14:48:27] You don't need npm 8, but npm 7 would be good. [14:48:39] (node 16 + npm 7 is the recommendation I'd make right now in general.) [14:49:41] i had node 15 [14:50:31] Ah, right, yeah, that'd be node 15 + npm 6. [14:53:20] bot is rebasing with new lock file [15:01:23] RhinosF1: Did that work for it? If not, I'll need to debug further. [15:02:03] James_F: rerunning with node 16 [15:02:07] Ack. [15:02:14] ci had node 14 by default [15:02:20] but npm 7 [15:02:27] That should be fine though. [15:02:34] It's the npm version that matters for this. [15:02:46] stylelint-config-wikimedia supports node 12+ [15:04:43] James_F: https://github.com/miraheze/ManageWiki/runs/5290090729?check_suite_focus=true says no [15:04:48] still node 14 [15:04:57] because it's geting node from docker [15:05:02] How odd. [15:05:09] not the server [15:05:32] Yes, but it's no longer re-writing the package-lock file every time you run CI. [15:06:42] yes true [15:07:57] OK, well, we've eliminated the most plausible source of oddness. [15:08:32] Perhaps it's caused by stylelint-config-idiomatic-order somehow? That's new to me. [15:08:50] Lucas_WMDE suggested that [15:08:57] Ah, yes, that depends on stylelint-order which depends on postcss. [15:09:11] https://www.irccloud.com/pastebin/NP2iBFSi/ [15:09:11] to me it looks like the problem is that the postcss-less dependency is nested below stylelint-config-wikimedia [15:09:11] So it's possible you have a version mis-match now that it's on stylelint 8? [15:09:16] where I’m guessing stylelint won’t find it [15:09:27] the dependency only works if it’s actually hoisted to the root level, I think [15:09:37] No? That's not how npm works. [15:09:51] ? [15:10:05] npm is meant to install the full tree. [15:10:09] That's its job. [15:10:10] yes [15:10:18] But if you have two packages demanding different versions then it gets into difficulties. [15:10:29] but node doesn’t go looking for packages in arbitrary subdirectories, does it? [15:10:45] It's meant to flatten the check-out for this precise purpose. [15:10:49] if stylelint requires postcss-less, but postcss-less is only in stylelint-config-wikimedia/node_modules, then from the stylelint point of view it won’t be found [15:10:53] well it’s not flattened here https://github.com/miraheze/ManageWiki/blob/e4d4b47c8c0752bef17b4393de9dfc4b9980ea91/package-lock.json#L3308-L3319 [15:10:55] RhinosF1: What happens if you drop stylelint-config-idiomatic-order? [15:10:58] npm *may* flatten it [15:11:10] but stylelint-config-wikimedia seems to *rely* on it being flattened [15:11:15] stylelint *dropped* postcss-less. [15:11:19] Because they hate us. [15:11:22] so I suspect a peerDependency, and putting postcss-less in each project’s dependencies, would be more correct [15:11:29] That's why we're depending on it in the first place. [15:11:49] But putting it as a peerDependency and adding it to ~1000 package.json files is a completely ridiculous solution. [15:12:01] Does npm have an !!important directive? [15:12:46] stylelint doesn't depend on postcss-less any more as of version 8. So what's asking for it? Presumably stylelint-config-idiomatic-order somehow? [15:12:50] James_F: Error: Could not find "stylelint-config-idiomatic-order". Do you need a `configBasedir`? [15:13:20] RhinosF1: Yeah, you'll need to remove your incantation of it as well as your load of it. [15:13:34] https://github.com/miraheze/ManageWiki/blob/a8b15909337d02fbad5891e58cd2bd51cffebbe0/.stylelintrc.json#L3 [15:13:34] James_F: npm i doesn't do that? [15:13:47] RhinosF1: npm doesn't re-configure stylelint files for you, no. [15:13:53] RhinosF1: If it did you'd be much more upset. [15:13:55] i see [15:13:57] i fix [15:14:15] James_F: nope [15:14:22] (Also we have a task for stylelint-config to add stylelint-config-idiomatic-order or similar.) [15:14:25] Meh. [15:14:35] RhinosF1: What does `npm ls postcss-less` spit out? [15:14:57] https://www.irccloud.com/pastebin/YyXJeVHu/ [15:15:06] James_F: ^ [15:15:37] And yet something else is demanding it? [15:16:52] James_F: DM'd require-stack [15:17:01] * RhinosF1 too lazy to take his name out of it all [15:17:05] I'm happy to add it as an explicit peerDependency instead/as well if that fixes this. [15:19:34] James_F: moving it to peerDependency does seem to work [15:19:48] RhinosF1: Moving 'it' to whose peerDep? [15:20:04] James_F: in package.json [15:21:33] In your extension? [15:21:38] James_F: yes [15:21:40] Yeah, but we shouldn't need you to do that. [15:22:27] James_F: I hacked it into stylelint-config-wikimedia's and it worked [15:22:41] by removing from mine, adding in node_modules [15:23:06] RhinosF1: If you depend on https://github.com/wikimedia/stylelint-config-wikimedia/tree/postcss-peerdep does it work? [15:23:57] (a.k.a. depend on `"stylelint-config-wikimedia": "git+https://github.com/wikimedia/stylelint-config-wikimedia#15f84af48027e95930c40d87711cd6dcb18d6bbc",`.) [15:25:02] James_F: yep, without idomatic-order still [15:25:08] should I try add that back? [15:25:26] RhinosF1: Yeah, it might just work. [15:26:47] James_F: yeah works [15:27:00] Excellent. [15:27:06] OK, I'll get that landed and released. [15:27:09] idomattic-order has 4 security issues but that another story [15:27:18] ok, ping me you do and i kick the bot [15:27:23] Cool. [15:29:33] RhinosF1: And sorry for the confusion. Thanks to Lucas_WMDE for the pointer to fix. [15:29:39] np [15:29:46] np, glad that the peerDependency seems to help [15:29:58] arguing with CI is what I get for spending a day trying to land all the open PRs [15:30:55] I think I pushed over a thousand commits yesterday [15:31:02] Ha. [15:31:05] mostly prepping the master branch [15:31:06] Well, hurrah? [15:31:18] to be ready for when you make my cry by cutting 1.38 [15:31:34] Hey hey. I'm not cutting it any more. [15:31:48] I'm just some helper. [15:31:53] i believe 6 months ago I moaned at you for git existing [15:31:59] * James_F coughs. [15:32:01] Yes. :-) [15:32:16] i'm slowly automating myself [15:32:31] but sadly git isn't smart enough [15:33:10] * RhinosF1 guarantees he files an issue that some extension is missing the branch because they not in gerrit [15:35:18] Well, yes, if people aren't on Wikimedia gerrit they're not going to get branched by us. [15:36:10] And they never as quick as me to cut the branch [15:36:17] I say me, now a python script [15:36:57] I will miss moaning at you this year for how bad of state my local clone is and the million conflicts that happen however prepared I try and be [15:39:44] I dunno, have a little faith. We can find new and exciting ways to break things. [15:40:39] I'm sure I will [15:40:53] Wait until we eventually start having a lagged mediawiki master on beta [15:49:26] (03PS5) 10Hashar: Run shellcheck against shell files [integration/config] - 10https://gerrit.wikimedia.org/r/756088 [15:49:28] (03PS1) 10Hashar: dockerfiles: disable shellcheck for cassandra311 entrypoint [integration/config] - 10https://gerrit.wikimedia.org/r/764808 [15:49:30] (03PS1) 10Hashar: dockerfiles: fix export and execution on same line [integration/config] - 10https://gerrit.wikimedia.org/r/764809 [15:49:32] (03PS1) 10Hashar: dockerfiles: ignore a shellcheck source warning [integration/config] - 10https://gerrit.wikimedia.org/r/764810 [15:49:34] (03PS1) 10Hashar: dockerfiles: drop verbatim \n in echo commands [integration/config] - 10https://gerrit.wikimedia.org/r/764811 [15:50:28] RhinosF1: Published. [15:50:35] v0.12.2 [15:51:20] Running bot [15:51:36] (03CR) 10jerkins-bot: [V: 04-1] dockerfiles: disable shellcheck for cassandra311 entrypoint [integration/config] - 10https://gerrit.wikimedia.org/r/764808 (owner: 10Hashar) [15:51:40] (03CR) 10jerkins-bot: [V: 04-1] dockerfiles: fix export and execution on same line [integration/config] - 10https://gerrit.wikimedia.org/r/764809 (owner: 10Hashar) [15:51:45] (03CR) 10jerkins-bot: [V: 04-1] dockerfiles: ignore a shellcheck source warning [integration/config] - 10https://gerrit.wikimedia.org/r/764810 (owner: 10Hashar) [15:51:56] (03CR) 10jerkins-bot: [V: 04-1] dockerfiles: drop verbatim \n in echo commands [integration/config] - 10https://gerrit.wikimedia.org/r/764811 (owner: 10Hashar) [15:53:12] (03PS2) 10Hashar: dockerfiles: disable shellcheck for cassandra311 entrypoint [integration/config] - 10https://gerrit.wikimedia.org/r/764808 [15:53:14] (03PS2) 10Hashar: dockerfiles: fix export and execution on same line [integration/config] - 10https://gerrit.wikimedia.org/r/764809 [15:53:16] (03PS2) 10Hashar: dockerfiles: ignore a shellcheck source warning [integration/config] - 10https://gerrit.wikimedia.org/r/764810 [15:53:18] (03PS2) 10Hashar: dockerfiles: drop verbatim \n in echo commands [integration/config] - 10https://gerrit.wikimedia.org/r/764811 [15:53:20] (03PS1) 10Hashar: dockerfiles: pass shellcheck on operations-puppet [integration/config] - 10https://gerrit.wikimedia.org/r/764814 [15:53:22] (03PS1) 10Hashar: dockerfiles: double quotes in bash scripts [integration/config] - 10https://gerrit.wikimedia.org/r/764815 [15:54:14] James_F: locally fine but now https://github.com/miraheze/ManageWiki/runs/5290841227?check_suite_focus=true [15:55:21] * James_F sighs. [15:55:57] (03PS6) 10Hashar: Run shellcheck against shell files [integration/config] - 10https://gerrit.wikimedia.org/r/756088 [15:55:59] (03PS1) 10Hashar: Fix shellcheck for castor snippets [integration/config] - 10https://gerrit.wikimedia.org/r/764817 [15:56:01] (03PS1) 10Hashar: dockerfiles: simplify sonar-project.properties generation [integration/config] - 10https://gerrit.wikimedia.org/r/764818 [15:56:03] (03PS1) 10Hashar: dockerfiles: shellcheck: separated glob from grep options [integration/config] - 10https://gerrit.wikimedia.org/r/764819 [15:56:05] (03PS1) 10Hashar: dockerfiles: php-compile fix ambiguous env assignment [integration/config] - 10https://gerrit.wikimedia.org/r/764820 [16:15:57] (03CR) 10Krinkle: dockerfiles: Add php-excimer to quibble (031 comment) [integration/config] - 10https://gerrit.wikimedia.org/r/748312 (https://phabricator.wikimedia.org/T225730) (owner: 10Ladsgroup) [16:41:52] !log zabe@deployment-mwmaint02:~$ foreachwiki migrateUserGroup.php oversight suppress # T112147 [16:41:55] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [16:41:55] T112147: Rename the oversight group on WMF projects to the MediaWiki standard (whatever that is) - https://phabricator.wikimedia.org/T112147 [17:17:14] (03CR) 10Ladsgroup: dockerfiles: Add php-excimer to quibble (031 comment) [integration/config] - 10https://gerrit.wikimedia.org/r/748312 (https://phabricator.wikimedia.org/T225730) (owner: 10Ladsgroup) [18:49:48] (03PS1) 10Ahmon Dancy: build-mv-image: Detect when base image changes [tools/release] - 10https://gerrit.wikimedia.org/r/764869 [18:51:11] (03PS2) 10Ahmon Dancy: build-mv-image: Detect when base image changes [tools/release] - 10https://gerrit.wikimedia.org/r/764869 [18:51:57] (03PS1) 10Ahmon Dancy: Add MV_BASE_PACKAGES build arg for the multiversion-base image [tools/release] - 10https://gerrit.wikimedia.org/r/764870 [19:25:25] 10Release-Engineering-Team (Done by Feb 23🔥), 10MediaWiki Train Development Environment: Train-dev: Update to helm 3 - https://phabricator.wikimedia.org/T301266 (10jeena) 05In progress→03Resolved [19:28:38] (03PS3) 10Ahmon Dancy: build-mv-image: Detect when base image changes [tools/release] - 10https://gerrit.wikimedia.org/r/764869 [19:30:09] (03PS4) 10Ahmon Dancy: build-mv-image: Detect when base image changes [tools/release] - 10https://gerrit.wikimedia.org/r/764869 [19:31:22] 10GitLab (Project Migration), 10Release-Engineering-Team (Done by Feb 23🔥): Create new GitLab project group for Wikimedia Italia - https://phabricator.wikimedia.org/T301791 (10valerio.bozzolan) [19:31:51] (03PS2) 10Ahmon Dancy: Add MV_BASE_PACKAGES build arg for the multiversion-base image [tools/release] - 10https://gerrit.wikimedia.org/r/764870 [19:32:28] 10GitLab (Project Migration), 10Release-Engineering-Team (Done by Feb 23🔥): Create new GitLab project group for Wikimedia Italia - https://phabricator.wikimedia.org/T301791 (10valerio.bozzolan) [19:35:45] (03CR) 10Ahmon Dancy: [C: 03+2] build-mv-image: Detect when base image changes [tools/release] - 10https://gerrit.wikimedia.org/r/764869 (owner: 10Ahmon Dancy) [19:36:23] (03Merged) 10jenkins-bot: build-mv-image: Detect when base image changes [tools/release] - 10https://gerrit.wikimedia.org/r/764869 (owner: 10Ahmon Dancy) [19:43:32] (03CR) 10Ahmon Dancy: [C: 03+2] Add MV_BASE_PACKAGES build arg for the multiversion-base image [tools/release] - 10https://gerrit.wikimedia.org/r/764870 (owner: 10Ahmon Dancy) [19:44:08] (03Merged) 10jenkins-bot: Add MV_BASE_PACKAGES build arg for the multiversion-base image [tools/release] - 10https://gerrit.wikimedia.org/r/764870 (owner: 10Ahmon Dancy) [19:44:53] 10Continuous-Integration-Infrastructure, 10Jenkins, 10MediaWiki-Core-Tests, 10MediaWiki-ResourceLoader, and 3 others: Add tests to check that all modules using require have required module files listed in `packageFiles` - https://phabricator.wikimedia.org/T301924 (10Krinkle) [19:47:24] 10Continuous-Integration-Infrastructure, 10Jenkins, 10MediaWiki-Core-Tests, 10MediaWiki-ResourceLoader, and 3 others: Add tests to check that all modules using require have required module files listed in `packageFiles` - https://phabricator.wikimedia.org/T301924 (10Krinkle) [19:49:19] 10Continuous-Integration-Infrastructure, 10Jenkins, 10MediaWiki-Core-Tests, 10MediaWiki-ResourceLoader, and 3 others: Add tests to check that all modules using require have required module files listed in `packageFiles` - https://phabricator.wikimedia.org/T301924 (10Krinkle) I imagine this would take the s... [20:13:33] 10Continuous-Integration-Infrastructure, 10Jenkins, 10MediaWiki-Core-Tests, 10MediaWiki-ResourceLoader, and 3 others: Add tests to check that all modules using require have required module files listed in `packageFiles` - https://phabricator.wikimedia.org/T301924 (10Krinkle) p:05Triage→03Medium [20:22:02] 10Beta-Cluster-Infrastructure, 10Elasticsearch, 10Discovery-Search (Current work): Upgrade deployment-prep Elastic cluster to Debian Buster or newer - https://phabricator.wikimedia.org/T298252 (10Gehel) [20:22:06] 10Beta-Cluster-Infrastructure, 10Release-Engineering-Team (Radar), 10Discovery, 10Discovery-Search (Current work): Deploy new bullseye elastic cluster nodes on deployment-prep - https://phabricator.wikimedia.org/T299797 (10Gehel) [20:29:55] 10Release-Engineering-Team (Done by Feb 23🔥), 10Patch-For-Review, 10Release, 10Train Deployments: 1.38.0-wmf.23 deployment blockers - https://phabricator.wikimedia.org/T300199 (10dduvall) [20:39:27] does anyone happen to know why in Phabricator repository settings, I can see the the "URIs" for a given repo and whether they are ReadWrite and Hidden/Visible but I can't toggle those values? I do have acl*repository-admins only that let me create a new repo. Should I not be able to also change those default URIs for it? [20:40:49] 10Project-Admins: Create sub-project 'itWikiCon 2022' under itWikiCon - https://phabricator.wikimedia.org/T302345 (10valerio.bozzolan) [20:42:23] (03CR) 10Hashar: [C: 03+2] "it is a noop." [integration/config] - 10https://gerrit.wikimedia.org/r/764808 (owner: 10Hashar) [20:43:05] mutante: which repo? [20:44:16] (03Merged) 10jenkins-bot: dockerfiles: disable shellcheck for cassandra311 entrypoint [integration/config] - 10https://gerrit.wikimedia.org/r/764808 (owner: 10Hashar) [20:45:09] 10Project-Admins: Create sub-project 'itWikiCon 2022' under itWikiCon - https://phabricator.wikimedia.org/T302345 (10Dzahn) Here you go: https://phabricator.wikimedia.org/tag/itwikicon-2022/ [20:45:34] 10Project-Admins: Create sub-project 'itWikiCon 2022' under itWikiCon - https://phabricator.wikimedia.org/T302345 (10Dzahn) I did use the "-" to match the previous tag, and used the same "timeline" icon. [20:45:43] taavi: test project https://phabricator.wikimedia.org/diffusion/PUSH/manage/uris/ [20:46:13] for example if I wanted to hide the ssh:// and http:// URIs and only have https:// URIs visible [20:46:27] and/or make http readonly [20:47:08] hmm, very weird, this is what I get: https://ttm.sh/iYl.png but you seem to be in repo-admins [20:47:12] what error are you getting? [20:47:25] (click on the uri, then edit uri from the sidebar) [20:48:39] taavi: eh.. glad I asked, problem is the user :) [20:48:45] 10Project-Admins: Create sub-project 'itWikiCon 2022' under itWikiCon - https://phabricator.wikimedia.org/T302345 (10Peachey88) I've adjusted the colour to match guidelines https://www.mediawiki.org/wiki/Phabricator/Project_management#Types_of_Projects > Sprint is used for projects of a team being worked on in... [20:49:22] (03PS3) 10Hashar: dockerfiles: ignore a shellcheck source warning [integration/config] - 10https://gerrit.wikimedia.org/r/764810 [20:49:24] (03PS3) 10Hashar: dockerfiles: fix shellcheck in mediawiki-phan-testrun [integration/config] - 10https://gerrit.wikimedia.org/r/764809 [20:50:07] "use default behaviour" is not the one I wanted :) [20:50:48] what I will really want is to ..change the default for everything [20:51:00] thanks for looking! [20:56:25] (03PS3) 10Hashar: dockerfiles: drop verbatim \n in echo commands [integration/config] - 10https://gerrit.wikimedia.org/r/764811 [20:58:42] (03CR) 10jerkins-bot: [V: 04-1] dockerfiles: drop verbatim \n in echo commands [integration/config] - 10https://gerrit.wikimedia.org/r/764811 (owner: 10Hashar) [20:59:33] 10Project-Admins: Create sub-project 'itWikiCon 2022' under itWikiCon - https://phabricator.wikimedia.org/T302345 (10valerio.bozzolan) sgtm [21:00:52] 10Phabricator, 10Project-Admins, 10serviceops-radar: Create sub-project 'itWikiCon 2022' under itWikiCon - https://phabricator.wikimedia.org/T302345 (10Dzahn) 05Open→03Resolved p:05Triage→03Medium a:03Dzahn [21:00:57] (03PS1) 10Ahmon Dancy: multiversion-base: Add way to inject an additional CA cert [tools/release] - 10https://gerrit.wikimedia.org/r/764896 [21:01:23] (03PS4) 10Hashar: dockerfiles: drop verbatim \n in echo commands [integration/config] - 10https://gerrit.wikimedia.org/r/764811 [21:01:25] (03PS2) 10Hashar: dockerfiles: pass shellcheck on operations-puppet [integration/config] - 10https://gerrit.wikimedia.org/r/764814 [21:01:48] (03CR) 10Ahmon Dancy: [C: 03+2] multiversion-base: Add way to inject an additional CA cert [tools/release] - 10https://gerrit.wikimedia.org/r/764896 (owner: 10Ahmon Dancy) [21:02:04] (03CR) 10Hashar: [C: 03+2] "That is a noop :)" [integration/config] - 10https://gerrit.wikimedia.org/r/764810 (owner: 10Hashar) [21:02:29] (03Merged) 10jenkins-bot: multiversion-base: Add way to inject an additional CA cert [tools/release] - 10https://gerrit.wikimedia.org/r/764896 (owner: 10Ahmon Dancy) [21:03:50] (03Merged) 10jenkins-bot: dockerfiles: ignore a shellcheck source warning [integration/config] - 10https://gerrit.wikimedia.org/r/764810 (owner: 10Hashar) [21:10:58] what was "talk-to-engineering-productivity (archived)" on Slack replaced with? [21:11:15] a different Slack channel? or back to IRC [21:16:31] since engineering productivity doesn't exist any more, i guess there's not really an equivalent. this is still the official place to talk to releng. [21:17:02] alright, thx [21:31:24] brennen: so.. per last gitlab IC meeting.. I was looking at "push over https" to a phab repo [21:32:17] any luck? [21:32:36] brennen: yes, I was able to push to a new repo that I made. via https [21:32:49] after that I checked the releng repo [21:32:55] and I think it's all just ACL related [21:33:08] so someone in that ACL trying it would be nice [21:33:32] so first part is you are in https://phabricator.wikimedia.org/project/members/1615/ [21:34:26] and then the setting on the repo is "Publishing Disabled" [21:34:56] hmm, yeah [21:34:58] BUT the URI for https is there and allows read/write [21:35:32] so .. if you go to your user settings, authentication and set a "VCS password" [21:35:51] that would first ask you for 2fa [21:36:01] ah, the VCS password part is the bit i was missing, i'll do that and try the clone from https... [21:36:04] and then let you set a random password, separate from your user pass [21:36:26] then the next thing I would want to do is disable all the other URIs [21:36:37] so no ssh:// and no http:? [21:37:10] in my test repo called "PUSH" I did just that [21:37:16] makes sense [21:37:17] and then git clone .. add some file... git push [21:37:24] and it asked me for user and pass [21:37:30] entered VCS pass.. and worked [21:38:03] i have of course triggered the "wait patiently" dialog because i had to dig around for my yubikey [21:38:13] I had the same problem the other day [21:38:26] until I realized I had 3 different phab accounts in my Authy :) [21:38:33] from disabling-enabling in the past [21:38:51] let me disable the non-https URIs for that repo [21:38:53] meanwhile [21:39:23] well, I am not allowed. only acl*releng can [21:39:29] even though I am admin [21:42:15] mutante: confirming i was just able to push a typo fix commit using vcs password [21:42:31] brennen: :) yay! thank you. can you try one more thing, please [21:42:53] if you go to "manage repo" [21:43:00] and then URIs on the left [21:43:20] see how it has http, https and ssh and 3 URIs each [21:43:32] yeah [21:43:41] then if you click a URL.. on the right side there is "Edit URI" [21:44:03] could you set it to "No I/O at all" and "hidden" [21:44:08] for http:// and ssh:// [21:44:13] and only keep the https:// [21:44:29] maybe then try one last time [21:47:40] ok, so currently i have only the https URIs read/write, and only one of them displayed. i'll try another commit to make sure this still works. [21:47:51] yep, cool. I can already see the changes [21:48:02] mutante: do you need some phab repo changes? I have access [21:48:06] i wonder if we can automate applying these settings to other repos. [21:48:09] the "use the number instead of the name" thing is probably also not really needed [21:48:40] hauskatze: thank you, I have been added to acl*repository-admins recently, which let me create new repos, but does not mean I can edit this existing repo [21:49:06] which repo? [21:49:09] hauskatze: the reason for this is that I want to shut down ssh:// cloning/pushing to/from phab [21:49:22] some have custom permissions and acl*repoadmins is not enough unfortunately [21:49:46] hauskatze: yea, that's it and why I came here, but brennen has acl*releng therefore he can do it, and is already doing it [21:50:10] great [21:51:33] limited to the 2 named https URIs; tested push again, looks good [21:52:08] brennen: thank you very much! I think now I just need to document that on wikitech [21:52:15] then I can use that to tell more repo users [21:52:26] and then disable ssh:// for all of them [21:52:30] and finally..shutdown git-ssh [21:52:34] at some point in the future [21:52:37] excellent. [21:53:03] btw, newer repos dont have those 2 versions [21:53:11] that is somehow backwards compat [21:53:16] but .. it's ok :) [21:54:02] did you guys know we could also have Subversion AND Mercurial repos in Phabricator ?:o [21:54:34] ha, yeah, i think i knew that from a t.wentyafterfour rant somewhere along the way. [21:54:49] yup, phab supports both [21:54:54] never used them though [21:55:15] the "source" URI does not exist for a new repo [21:55:20] only the "diffusion" URI [21:55:58] ah, guess i'll switch which one is visible [21:55:59] I will keep only the "non-number" and "diffusion" ones [21:56:03] if in doubt [21:56:14] ah, yes please [21:56:19] 10Release-Engineering-Team (Done by Feb 23🔥), 10Patch-For-Review, 10Release, 10Train Deployments: 1.38.0-wmf.23 deployment blockers - https://phabricator.wikimedia.org/T300199 (10matmarex) >>! In T300199#7726345, @Jdlrobson wrote: > The train deployer this week, may get reports of issues relating to the Sp... [22:04:50] 10Release-Engineering-Team (Radar), 10MW-on-K8s, 10SRE, 10serviceops, and 2 others: The restricted/mediawiki-webserver image should include skins and resources - https://phabricator.wikimedia.org/T285232 (10dduvall) a:05dduvall→03None [22:13:14] 10GitLab (Project Migration), 10Release-Engineering-Team (Next), 10User-dduvall: Migrate Blubber project to GitLab - https://phabricator.wikimedia.org/T301168 (10dduvall) [22:13:45] 10Release-Engineering-Team (Next), 10Release Pipeline (Blubber), 10User-dduvall: Implement buildkit frontend support in blubber for use on GitLab runners - https://phabricator.wikimedia.org/T301169 (10dduvall) [22:15:26] 10Release-Engineering-Team (Done by Feb 23🔥), 10Scap, 10User-dduvall: Add rollback mechanism to `scap prep auto` - https://phabricator.wikimedia.org/T301417 (10dduvall) [22:22:45] mutante> did you guys know we could also have Subversion p858snake: https://phabricator.wikimedia.org/T86655 :p [22:26:39] https://phabricator.wikimedia.org/T86655#1402303 [22:59:58] 10Release-Engineering-Team (Done by Feb 23🔥), 10Patch-For-Review, 10Release, 10Train Deployments: 1.38.0-wmf.23 deployment blockers - https://phabricator.wikimedia.org/T300199 (10ppelberg) [23:03:28] it's kind of impressive that phab lets you configure individual URIs in such a fine-grained way. [23:03:30] fiddly, but impressive. [23:09:28] (03PS1) 10Jeena Huneidi: Scap backport: legacy deployment [tools/scap] - 10https://gerrit.wikimedia.org/r/764910 (https://phabricator.wikimedia.org/T294466) [23:12:33] (03CR) 10jerkins-bot: [V: 04-1] Scap backport: legacy deployment [tools/scap] - 10https://gerrit.wikimedia.org/r/764910 (https://phabricator.wikimedia.org/T294466) (owner: 10Jeena Huneidi) [23:15:11] heh, yep, agreed [23:20:44] * thcipriani catches up on backscroll [23:21:07] glad you got the https-only private-repo push/pull figured out on phab <3 [23:25:49] :) yep. and happy about that, it's just that it _also_ made me realize there are all those other active repos to go through. Will have to write docs and send a templated mail or something. [23:59:45] it does look like the api supports changing URIs: https://secure.phabricator.com/book/phabricator/article/diffusion_api/ [23:59:59] https://secure.phabricator.com/book/phabricator/article/diffusion_api/#configure-uris