[00:14:20] 10GitLab, 10Security-Team, 10Wikimedia-Site-requests, 10Security: Allow Javascript files from Wikimedia GitLab to be loaded as scripts in Wikimedia wikis - https://phabricator.wikimedia.org/T321458 (10Reedy) Noting this isn't something we currently allow from Gerrit (or any of it's code viewing UIs) nor di... [00:24:56] 10GitLab, 10Security-Team, 10Wikimedia-Site-requests, 10Security: Allow Javascript files from Wikimedia GitLab to be loaded as scripts in Wikimedia wikis - https://phabricator.wikimedia.org/T321458 (10Bawolff) I wonder if a better approach would be to have an extension just for scripts that bundles them up... [08:26:16] (03CR) 10Hashar: [C: 03+2] "I got that one deployed ( T321278#8332314 ) but forgot to +2 it" [integration/config] - 10https://gerrit.wikimedia.org/r/844974 (https://phabricator.wikimedia.org/T321278) (owner: 10Hashar) [08:26:55] 10Continuous-Integration-Infrastructure, 10Patch-For-Review: Enable AllowEncodedSlashes in mediawiki-quibble-apitests-vendor-php74-docker - https://phabricator.wikimedia.org/T321278 (10hashar) @abi_ thank you for the verification! [08:28:39] (03Merged) 10jenkins-bot: jjb: update Quibble jobs to add `AllowEncodedSlashes On` [integration/config] - 10https://gerrit.wikimedia.org/r/844974 (https://phabricator.wikimedia.org/T321278) (owner: 10Hashar) [08:37:38] (03PS1) 10Hashar: jjb: regroupe mw coverage jobs in a job group [integration/config] - 10https://gerrit.wikimedia.org/r/848189 [09:03:08] (03CR) 10Hashar: "It is indeed a noop, that is a few more edits we will have to do when updating the releng/quibble* images." [integration/config] - 10https://gerrit.wikimedia.org/r/848189 (owner: 10Hashar) [09:03:25] (03PS2) 10Hashar: jjb: regroup mw coverage jobs in a job group [integration/config] - 10https://gerrit.wikimedia.org/r/848189 [09:03:40] (03CR) 10Hashar: [C: 03+2] "Amended commit message "regroupe" > "regroup"" [integration/config] - 10https://gerrit.wikimedia.org/r/848189 (owner: 10Hashar) [09:08:41] (03Merged) 10jenkins-bot: jjb: regroup mw coverage jobs in a job group [integration/config] - 10https://gerrit.wikimedia.org/r/848189 (owner: 10Hashar) [09:15:17] (03PS1) 10Hashar: jjb: group jobs using releng/quibble-buster-php74-bundle [integration/config] - 10https://gerrit.wikimedia.org/r/848219 [09:18:06] (03CR) 10Hashar: [C: 03+2] jjb: group jobs using releng/quibble-buster-php74-bundle [integration/config] - 10https://gerrit.wikimedia.org/r/848219 (owner: 10Hashar) [09:19:57] (03Merged) 10jenkins-bot: jjb: group jobs using releng/quibble-buster-php74-bundle [integration/config] - 10https://gerrit.wikimedia.org/r/848219 (owner: 10Hashar) [10:22:45] 10Phabricator, 10Release-Engineering-Team (Bonus Level 🕹ī¸), 10DBA, 10serviceops-collab, 10Patch-For-Review: sort out mysql privileges for phab1004/phab2002 - https://phabricator.wikimedia.org/T315713 (10Marostegui) I just came back from holidays. I will work on this this week. Thanks for the detailed rep... [10:49:06] PROBLEM - Check systemd state on doc1002 is CRITICAL: CRITICAL - degraded: The following units failed: rsync-doc-doc2001.codfw.wmnet.service https://wikitech.wikimedia.org/wiki/Monitoring/check_systemd_state [11:21:13] 10GitLab (Project Migration), 10Projects-Cleanup: Drop (or just set as read-only) Gerrit repositories related to Wikimedia CH (they migrated to GitLab) - https://phabricator.wikimedia.org/T319534 (10hashar) [11:31:14] RECOVERY - Check systemd state on doc1002 is OK: OK - running: The system is fully operational https://wikitech.wikimedia.org/wiki/Monitoring/check_systemd_state [12:08:07] 10Release-Engineering-Team (Deployment Training Requests): Deployment training request for Sergio Gimeno - https://phabricator.wikimedia.org/T320722 (10ArielGlenn) Note that I am out of the office on Oct 24th, so any trainings that might be scheduled then will need to be handled by someone else. [13:29:26] (03PS10) 10Hashar: scap: automatize plugins handling [software/gerrit] (deploy/wmf/stable-3.4) - 10https://gerrit.wikimedia.org/r/831093 (https://phabricator.wikimedia.org/T317412) [13:39:19] (03PS1) 10Hoo man: Add my new email [integration/config] - 10https://gerrit.wikimedia.org/r/848341 [13:40:16] (03PS11) 10Hashar: scap: automatize plugins handling [software/gerrit] (deploy/wmf/stable-3.4) - 10https://gerrit.wikimedia.org/r/831093 (https://phabricator.wikimedia.org/T317412) [13:44:06] 10Release-Engineering-Team (Deployment Training Requests): Deployment training request for Sergio Gimeno - https://phabricator.wikimedia.org/T320722 (10Ladsgroup) I can also help in the training if you're ooo [13:49:25] 10Gerrit: Create a code coverage plugin for polygerrit - https://phabricator.wikimedia.org/T183760 (10hashar) [13:49:27] 10Gerrit, 10Code-Health, 10Test-Coverage, 10Upstream: Display per-line test coverage during code review - https://phabricator.wikimedia.org/T220938 (10hashar) [13:50:14] 10Gerrit: Create a code coverage plugin for polygerrit - https://phabricator.wikimedia.org/T183760 (10hashar) [16:33:22] 10GitLab (Project Migration), 10Striker, 10Tools, 10Developer-Advocacy (Jul-Sep 2022), and 3 others: Replace Diffusion integration with Gitlab integration in Striker (toolsadmin) - https://phabricator.wikimedia.org/T296893 (10bd808) [16:33:43] 10GitLab (Project Migration), 10Striker, 10Tools, 10Developer-Advocacy (Jul-Sep 2022), and 3 others: Replace Diffusion integration with Gitlab integration in Striker (toolsadmin) - https://phabricator.wikimedia.org/T296893 (10bd808) 05In progress→03Resolved [17:01:25] dcaro: merged the gitlab-runner change [17:02:14] so in like 30 min toolforge docker-registry should be allowed from all [17:02:38] unless we want to run puppet via cloud cumin to speed it up [17:09:16] 10Phabricator (Upstream), 10Release-Engineering-Team, 10Upstream, 10User-brennen: Uploaded files via the drag-and-drop are defaulting to private-access - https://phabricator.wikimedia.org/T310833 (10brennen) [17:22:10] 10Phabricator, 10Release-Engineering-Team (Bonus Level 🕹ī¸), 10DBA, 10serviceops-collab, 10Patch-For-Review: sort out mysql privileges for phab1004/phab2002 - https://phabricator.wikimedia.org/T315713 (10Dzahn) Thank you, Manuel. Take your time to get back from holiday:) Yes, I agree they are very messy.... [17:32:32] 10GitLab, 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾): Add buildkitd to cloud runners - https://phabricator.wikimedia.org/T321334 (10dduvall) Merged https://gitlab.wikimedia.org/repos/releng/gitlab-cloud-runner/-/merge_requests/9 BuildKit is now available on cloud runners and addressable via k8s s... [17:35:42] 10Phabricator (Upstream), 10Release-Engineering-Team, 10Upstream, 10User-brennen: Uploaded files via the drag-and-drop are defaulting to private-access - https://phabricator.wikimedia.org/T310833 (10RHo) Hi, adding a related scenario where an image is defaulting to Private access is when it is Copy+Pasted... [17:38:17] 10GitLab, 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾): Add buildkitd to cloud runners - https://phabricator.wikimedia.org/T321334 (10dduvall) 05In progress→03Resolved [17:38:34] (03PS2) 10Jforrester: Zuul: Add new e-mail for Hoo man to allow list [integration/config] - 10https://gerrit.wikimedia.org/r/848341 (owner: 10Hoo man) [17:38:46] (03CR) 10Jforrester: [C: 03+2] Zuul: Add new e-mail for Hoo man to allow list [integration/config] - 10https://gerrit.wikimedia.org/r/848341 (owner: 10Hoo man) [17:42:07] (03Merged) 10jenkins-bot: Zuul: Add new e-mail for Hoo man to allow list [integration/config] - 10https://gerrit.wikimedia.org/r/848341 (owner: 10Hoo man) [17:42:19] !log Zuul: Add new e-mail for Hoo man to allow list [17:42:20] Logged the message at https://wikitech.wikimedia.org/wiki/Release_Engineering/SAL [17:50:46] Hmm, I'm getting `GPG error: http://security.debian.org/debian-security bullseye-security InRelease: At least one invalid signature was encountered.` etc. when building locally. Did we just change the certs or something? [17:53:13] James_F: did it expire? apt-key list | grep expired ? (apt-key is deprecated..sigh) [17:53:25] * James_F looks. [17:53:43] `E: gnupg, gnupg2 and gnupg1 do not seem to be installed, but one of them is required for this operation` [17:53:45] * James_F sighs. [17:53:48] Circular fun. [17:54:24] eh..ok.. GPG error without GPG [17:54:59] " Manage keyring files in trusted.gpg.d instead " eh.... ok.... [17:55:12] Ah, recent change? [17:55:44] my local bullseye system told me that when I used apt-key [17:55:50] that I should not use it anymore [17:56:03] Ack. [17:57:16] James_F: are you using docker locally? [17:57:24] mutante: Yes. [17:57:39] I had this same issue and none of the previous responses saying to prune images or containers worked. The reason was that my Docker Build Cache was taking up the bulk of the space. Running the below command fixed the issue: [17:57:43] docker system prune [17:57:45] You can then check to see if it worked by running: [17:57:45] docker system df [17:57:45] Error triggered from running `docker-pkg build` on a a prospective CI image. [17:58:08] found this stackoverflow stuff specifically the key error and docker [17:58:09] from https://stackoverflow.com/questions/62473932/atleast-one-invalid-signature-was-encountered [17:58:25] not what I expected ..but.. interesting at least [17:58:32] they are deleting their caches [17:58:33] I'll try that. [17:58:40] Yeah, docker's caching can be surprising. [17:59:04] `Total reclaimed space: 14.48GB` [17:59:05] Fun. [18:00:06] OK, that worked, thanks mutante! I now get the expected error about missing upstream packages instead. [18:00:47] (Maybe we should build them at Wikimedia if we can't rely on Sury.) [18:01:11] :) nice [18:05:16] (03PS7) 10Jforrester: [WIP] dockerfiles: Provide PHP 8.2 CI test images [integration/config] - 10https://gerrit.wikimedia.org/r/818239 (https://phabricator.wikimedia.org/T314093) [18:06:39] gerrit upstream - editor performance improvements are coming: https://gerrit-review.googlesource.com/c/plugins/codemirror-editor/+/313743 [20:06:32] (03PS1) 10Jforrester: Zuul: Follow-up bc734cc44a: Don't double-specify 'experimental' [integration/config] - 10https://gerrit.wikimedia.org/r/848505 [20:06:52] (03CR) 10Jforrester: [C: 03+2] Zuul: Follow-up bc734cc44a: Don't double-specify 'experimental' [integration/config] - 10https://gerrit.wikimedia.org/r/848505 (owner: 10Jforrester) [20:08:37] (03Merged) 10jenkins-bot: Zuul: Follow-up bc734cc44a: Don't double-specify 'experimental' [integration/config] - 10https://gerrit.wikimedia.org/r/848505 (owner: 10Jforrester) [20:43:32] (03PS1) 10BryanDavis: zuul: Remove obsolete labs/striker/{deploy,staticfiles,wheels} config [integration/config] - 10https://gerrit.wikimedia.org/r/848514 (https://phabricator.wikimedia.org/T317378) [21:00:46] 10Phabricator, 10Security-Team, 10Striker, 10cloud-services-team (Kanban): Unable to mirror repository from git.legoktm.com into diffusion - https://phabricator.wikimedia.org/T143969 (10bd808) @Legoktm this request obviously stalled out quite some time ago. I'm wondering if it is time to close as WONTFIX o... [21:15:28] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10Projects-Cleanup, 10User-dduvall: Create Blubber repo on GitLab, archive Gerrit repo - https://phabricator.wikimedia.org/T307533 (10dduvall) [21:15:44] 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10Projects-Cleanup, 10Release Pipeline (Blubber): Archive the Blubber gerrit repo - https://phabricator.wikimedia.org/T317820 (10dduvall) 05In progress→03Resolved a:03dduvall >>! In T317820#8333057, @hashar wrote: > Usually we remove the reposito... [21:22:54] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10User-dduvall: Update Blubber documentation, codesearch, and other references for new GitLab location - https://phabricator.wikimedia.org/T307535 (10dduvall) 05In progress→03Resolved Merged https://gitlab.wikimedia.or... [21:23:01] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10Projects-Cleanup, 10User-dduvall: Create Blubber repo on GitLab, archive Gerrit repo - https://phabricator.wikimedia.org/T307533 (10dduvall) [21:23:35] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10User-dduvall: Migrate Blubber project to GitLab - https://phabricator.wikimedia.org/T301168 (10dduvall) [21:23:41] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10User-brennen, 10User-dduvall: Write a GitLab "Migrating a Project" runbook / manual based on Blubber migration - https://phabricator.wikimedia.org/T307538 (10dduvall) [21:24:08] 10GitLab (Project Migration), 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10User-dduvall: Migrate Blubber project to GitLab - https://phabricator.wikimedia.org/T301168 (10dduvall) 05Stalled→03Resolved a:03dduvall [22:10:01] 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10Projects-Cleanup, 10Release Pipeline (Blubber): Archive the Blubber gerrit repo - https://phabricator.wikimedia.org/T317820 (10bd808) >>! In T317820#8333057, @hashar wrote: > For repositories hosted on our GitLab, I am not sure we need to replicate t... [22:15:11] 10Release-Engineering-Team (GitLab II: Wrath of Kahn 👾), 10Projects-Cleanup, 10Release Pipeline (Blubber): Archive the Blubber gerrit repo - https://phabricator.wikimedia.org/T317820 (10brennen) It's also likely to be true that people care about seeing their contributions mirrored to GitHub for reputational... [22:40:24] (03PS1) 10Zoranzoki21: Zuul: Add Owen from Miraheze to the CI allowlist [integration/config] - 10https://gerrit.wikimedia.org/r/848549 [22:40:44] (03PS2) 10Zoranzoki21: Zuul: Add Owen from Miraheze to the CI allowlist [integration/config] - 10https://gerrit.wikimedia.org/r/848549 [22:48:13] 10Phabricator (Upstream), 10Upstream: Textarea populated with your last message? - https://phabricator.wikimedia.org/T42 (10Kizule) [23:29:25] (03PS1) 10Tim Starling: Only run PHP 8.1+ tests on the EventSimulator extension [integration/config] - 10https://gerrit.wikimedia.org/r/848553 [23:30:13] (03CR) 10Tim Starling: "I don't really know if this will work." [integration/config] - 10https://gerrit.wikimedia.org/r/848553 (owner: 10Tim Starling) [23:33:49] (03PS1) 10Subramanya Sastry: Use sup.reference instead of sup.mw-ref (courtesy T265930) [integration/visualdiff] - 10https://gerrit.wikimedia.org/r/848554 [23:37:51] (03CR) 10Subramanya Sastry: "Let's wait till I change core css styles and we deploy it." [integration/visualdiff] - 10https://gerrit.wikimedia.org/r/848554 (owner: 10Subramanya Sastry)