[09:05:26] _joe_: what would be the procedure in this case? is it safe to remove the package? who maintains it? what's the procedure to fix an expired key? should the owner of the package fix it? etc [09:09:41] taavi: I would probably raise a phab task asking the question, mailman is kinda unowned afaik, but lads.g has kinda inherited it after the MM3 migration [09:16:31] <_joe_> dpogorzelski: sorry I got distracted by the summit! [09:18:39] <_joe_> dpogorzelski: I would say the thing you can do now is to force using it by adding a !, comment out the section of the file (but that might be more complicated), and ofc open a task about the issue [09:19:27] <_joe_> oh and ofc the other alternative is to find the yarn repo and update the key, but that's not on you to do [09:26:00] cheers :) just wasn't sure if overriding via ! was ok :) [09:30:32] <_joe_> I don't think it's ok to leave it like that long-term, but it shouldn't block you [09:30:47] <_joe_> that's one of my main grievances with reprepro, anything broken blocks everyone [09:31:07] <_joe_> with reprepro used in a multitenant way as we do, specifically [09:31:46] <_joe_> so what I'd do is: open the task, create a patch adding the ! under that task, then we'll find who is responsible for upgrading that key [09:33:09] <_joe_> git blame seems to point at btullis :) [09:36:48] Uh oh. Feel free to remove the thirdparty/yarn repo for now. We use it for building datahub, I believe. [09:37:21] But we can do without it until I need to build it again, then I can fix. [09:37:41] kk [09:48:55] https://gerrit.wikimedia.org/r/c/operations/puppet/+/1234291 [12:28:34] ^ +1ed [14:23:41] <_joe_> Firefishy: hi :) [14:24:46] Hey ;-) I am the OpenStreetMap sysadmin who has created all the noise about the annoying bot war we're fighting. [14:25:06] scraper bot from residential proxies. [14:25:23] <_joe_> yeah we know something about it :D [14:25:26] <_joe_> sadly [14:25:30] <_joe_> cdanis: ^^ [14:26:38] 'something' seems like an understatement :/ [14:26:38] May I ask, how are you fighting it? I'm desperately trying to avoid having to deploy anubis [14:34:48] <_joe_> Firefishy: yeah not anubis please :D