[09:54:13] 10SRE-tools, 10SRE, 10User-jbond: Rootless cookbooks/spicerack - https://phabricator.wikimedia.org/T284302 (10Volans) [09:55:53] 10SRE-tools, 10SRE, 10User-jbond: Rootless cookbooks/spicerack - https://phabricator.wikimedia.org/T284302 (10Volans) I'm not totally sure about the `init_rootless()` part of the API, but we can refine it as we implement it depending on the use cases. [09:57:27] 10Puppet, 10SRE-OnFire, 10User-jbond: Create SRE checklist for puppet - https://phabricator.wikimedia.org/T284073 (10jbond) 05Open→03Stalled First draft of this has been sent to the shared gdoc, awaiting review [11:20:49] are we having our meeting today? [11:25:27] I don't think so as it's a bank holiday in Ireland [11:25:35] and I don't see it in the calendar [11:25:51] but if we need it I'm available [11:27:49] I'm seeing it in gcal, though? [11:28:15] ah right, sorry I thought was gone, I'm happy to coordinate if that helps [11:31:20] coordinate removing it from gcal? [11:31:24] :) [11:52:58] 10SRE-tools, 10DC-Ops: Tracking task for DCOps privileged commands - https://phabricator.wikimedia.org/T233685 (10MoritzMuehlenhoff) [12:47:05] so, do we wanna do the meeting anyway or not? [12:53:18] no strong preference [12:53:40] same [12:54:39] jbond, cdanis: preferences? (see ^^^) topr.anks is off too right? [12:54:51] I say let's skip and do async [12:54:55] I will update the pad [12:55:04] [sorry, just getting online] [12:55:10] [no worries [12:55:18] there is no pad yet :) [12:55:55] SGTM [12:56:38] +1 [12:57:30] * volans same [13:01:24] 10CFSSL-PKI, 10Packaging, 10User-jbond: Package Latest version go-cfssl - https://phabricator.wikimedia.org/T283840 (10jbond) rebuilding v1.6.0, needed to use the following to avoid `gbp:error: upstream/1.6.0 is not a valid treeish` ` $ gbp buildpackage --git-pristine-tar --git-pristine-tar-commit --git-ups... [13:08:33] 10netops: Increase Google IX sessions prefix-limit - https://phabricator.wikimedia.org/T284447 (10ayounsi) p:05Triage→03Medium [13:36:46] 10CFSSL-PKI, 10Packaging, 10User-jbond: Package Latest version go-cfssl - https://phabricator.wikimedia.org/T283840 (10jbond) > TestNewCertGeneratorHandlerFromSigner Dose not fail in 1.6.0 > expired (probably an issue with vm time) Looks like the expiry is possibly hard coded > TestLdap and TestCachedCRLSe... [16:28:45] 10Packaging, 10SRE, 10Release-Engineering-Team (Seen): Debian-glue doesn't check for the validity of the distribution in the changelog. - https://phabricator.wikimedia.org/T252619 (10hashar) The job uses dpkg-parsechangelog and sets `distribution` which is then used to set `DIST`. That is then passed to pbui... [16:42:00] 10SRE-tools, 10SRE, 10Release-Engineering-Team (Seen): Support running puppet Beaker on CI - https://phabricator.wikimedia.org/T253635 (10hashar) [18:16:17] 10netops, 10SRE, 10Traffic: Anycast: consistent ICMP packet too big routing - https://phabricator.wikimedia.org/T253732 (10ayounsi) Some notes from last week's IRC chat: * It would be useful to count the ICMP PTB messages we received (regardless of if they arrive on the correct server or not) so we know ** H... [19:44:35] 10Puppet, 10Analytics-Radar, 10observability, 10Services (watching), 10User-Elukey: Upgrade prometheus-jmx-exporter on all services using it - https://phabricator.wikimedia.org/T192948 (10Eevans)