2019-02-05 #opensuse-admin [20:01:30] looking at the clock - who's here for the meeting? [20:01:46] hi all [20:01:48] o/ [20:01:56] me will join. [20:02:03] 2 am here [20:02:10] :) [20:02:40] hi Estu! [20:02:42] welcome tuanpembual [20:03:12] so let's start the meeting and hope that tampakrap will also wake up ;-) [20:03:23] Hi all, me and @tuanpembual are from Indonesia :) [20:03:37] hi! [20:03:50] hello sorry I am here, missed the notifications :) [20:03:52] Lately, I have been trying to pickup all the stuff I left more then a couple of months ago so consider me as a voiceless witness. [20:03:55] bmwiedemann2: let me check [20:04:11] tampakrap: after meeting [20:04:52] the topics are at https://progress.opensuse.org/issues/44732 but we can of course add more topics if needed [20:05:20] let's start with the usual questions and answers from the community [20:05:28] does someone have a question? ;-) [20:06:57] Im here, but I might going to and from. [20:08:02] looks like nobody dares to ask us a question ;-) [20:08:35] let's continue with the status reports [20:08:35] tampakrap: found it. had a virbr1 with 192.168.253.x addr :-) [20:09:09] I submitted a merge request to replace the current static.opensuse.org machines with fully salted ones [20:09:48] I'm waiting for someone (tampakrap?) to review them and to give me some fresh VMs [20:09:58] ah yes sorry I forgot [20:10:18] no worries, I was busy with FOSDEM anyway ;-) [20:10:22] my workload is very high recently and this one totally slipped from my radar [20:10:44] if I don't do it till wednesday next week, ping me again please [20:11:03] I will *eg* [20:11:21] that's it from me, who wants to continue? [20:11:21] any good/bad/whatever feedback from the election officials about the voting system? [20:12:02] they opened the ballots, so I'll assume that everything works :-) [20:12:20] good job! [20:12:33] I'm not an official, but I used it and managed to cast a vote. Some parts are a bit confusing with multiple user-names for login and anonymity [20:13:10] something that I sent also to the list, my team got approval for an automation engineer and part of the time will be spent also for the opensuse infrastructure [20:13:15] https://jobs.suse.com/job/nuremberg/infrastructure-automation-engineer/3486/10737131 [20:13:27] yay! [20:13:32] feel free to ping me if you are interested and would like to know more details [20:13:49] bmwiedemann2: right, it's unusual not to use our "normal" openSUSE login - but it comes with two advantages: [20:14:13] - you don't "accidently" login there when logging in for *.o.o, which IMHO is a security feature for the elections [20:14:14] tampakrap, looks interesting, any remote (90%-100%) option? [20:14:43] - I didn't find out if using the openSUSE login for voters is possible without spending an insane amount of time [20:15:02] @tampakrap: o/ nice jobs, but not very confidence :( [20:15:15] IonutVan_: for what I know it is Nuremberg only. I'll ask my manager again and will let you know if there is a home office option [20:15:26] cboltz: there is this login-proxy concept. and we have an openID provider with the openSUSE creds [20:15:40] tampakrap, ok, thanks a lot [20:15:57] bmwiedemann2: I know, and the election officials use the login proxy to login [20:16:22] but I didn't find out how to also use it for voters [20:16:52] (when uploading the list of voters, helios automatically creates a local account for every voter automatically) [20:17:41] if you want to look at this for next year, I won't stop you ;-) but IMHO we have other areas where spending time is more useful ;-) [20:18:24] cboltz: will you be able to migrate the dbs of the wikis to galera? [20:18:39] I wanted to do it but I failed, and I don't see it happening soon from my side [20:18:46] it's on my TODO list, but I can't provide a fixed date [20:18:59] sure, thanks [20:19:10] I'll probably combine it with updating to a newer MediaWiki version, which is also on my TODO list ;-) [20:19:16] what about icc? any volunteers to revive the service? [20:19:50] what/how exactly is it broken? [20:20:06] https://www.opensuse.org/openid/provider works [20:21:46] I have no idea [20:22:05] who did setup and manage that service in the past? [20:22:11] let me check [20:23:49] Kai-Uwe Behrmann [20:24:18] I don't know him [20:25:31] I also don't know him, but connect says his username is bekun, and has a mail address etc. [20:25:51] looks like I should write him a mail later ;-) [20:26:03] sure, thanks [20:26:32] but either way the offer stands, especially for the new guys who wanted to help with something [20:27:41] right, nobody should have a monopoly on fixing "his/her server" ;-) [20:27:46] another urgent issue we have is the redmine update for progress.o.o, also looking for volunteers [20:28:26] IIRC someone already looked at this a while ago, and did a test setup with a reduced number of plugins [20:28:52] do you know the status of that? [20:29:13] there wasn't any setup [20:29:30] the volunteer who offered to help got busy so he dropped the task [20:29:56] ah, ok [20:30:12] so - do we have a new volunteer around? ;-) [20:31:26] * cboltz wonders why everybody hides [20:31:37] they can think about it [20:31:38] cboltz, what is icc? [20:32:31] IonutVan_: icc.opensuse.org provides color profiles for people who want to have exactly the same color on their screen, printer etc. [20:32:57] "Sorry, the page you are looking for is currently down for maintenance." [20:33:08] right, that's exactly our problem ;-) [20:33:31] it's very useful app, and uses mongodb, so it could be a good candidate even for putting it on kubernetes :) [20:33:41] :) [20:33:55] cboltz, if is not really urgent, I can have a look at it :) [20:34:01] IonutVan_: watch the video of my oSC18 talk if you want to know what that "Sorry, ..." message means ;-) [20:34:11] but of course I need more info about that service [20:34:14] what about the opensuse conference 19? who's planning to go? [20:34:21] and maybe give talks? [20:34:24] urgent is relative - it's down since a month, so a few more days won't hurt [20:35:01] I'll be at oSC of course, but didn't come up with a topic that would be better than my talk from last year [20:35:12] tampakrap: I'll be there. Submitted 2 sessions on reproducible builds [20:35:49] anythings I can help? [20:36:39] cboltz, ok, I can take the task an see what I can do [20:37:11] :-) [20:37:22] tuanpembual: I'm sure we have more than enough tasks you could do - do you have any special interest for a specific service, technology, ...? [20:38:05] i am working with k8s [20:38:27] maybe will start from this related [20:39:44] tampakrap, I never worked (install, backup, update ...) with redmine, but I can have a look for that task as well. If will not succeed we will not have any progress.o.o :D [20:40:32] tuanpembual: since I still have to learn this container stuff - tampakrap: do you have a few tasks for tuanpembual? [20:40:51] I have worked with redmine, maybe I can try. [20:41:01] IonutVan_: the task is to setup the instance using latest leap and latest redmine on a new VM, and then test the plugins [20:41:25] as soon as everything is confirmed to be working, we switch over the latest db dump and we're good to go [20:41:48] ^ I think I can start with this [20:41:57] so whatever experiment you do won't affect the production instance [20:42:04] need list plugins we use. [20:42:09] is it already in salt? [20:42:21] tuanpembual: great, I'll send them to you [20:42:35] bmwiedemann2: the VM yes, the service no [20:42:47] thanks tampakrap [20:43:25] https://github.com/saltstack-formulas/redmine-formula could help [20:44:23] no SUSE support yet though [20:44:47] * tuanpembual will start learn salt, [20:45:35] anything else broken? [20:46:20] https://progress.opensuse.org/issues/45614 still lists the disk space on boosters and osc-collab [20:46:51] boosters runs what? [20:47:18] pillar/id says connect.o.o [20:47:26] tuanpembual: osc-collab is also another good candidate for new host [20:47:50] and it has no db at all, which makes it a very good candidate for k8s [20:48:29] tuanpembual, so, you will take that task, right? [20:48:45] cboltz: do we still need connect? [20:48:54] sure, any document I can read tampakrap ? [20:49:12] if it is needed only for the mail aliases, we can put the export somewhere else [20:49:23] tampakrap: we need something[tm] to manage our members - and unless we have a replacement, I'm afraid we still need it [20:49:27] IonutVan_: redmine? yes, I will try this weeks [20:50:13] tuanpembual, and osc-collab, as well? [20:50:34] okey, I get both :) [20:50:49] but will ask many questions [20:50:59] :' [20:51:04] tuanpembual: better take one only, finish it and then go to the other if nobody jumps in [20:51:30] cboltz, is there a ticket for icc? please assign it to me, as I said I can have a look [20:51:44] noted tampakrap. I start with redmine [20:51:57] IonutVan_: it's part of https://progress.opensuse.org/issues/45614 [20:52:00] I have to run now, but I will read the logs [20:52:04] if you want a separate ticket, just open one ;-) [20:52:44] cboltz, ok, thanks, and there is also osc-collab :) [20:52:57] that's also in that ticket ;-) [20:53:07] exactly :) [20:53:25] have to run, see you later [20:53:40] see you [20:53:42] cya [20:53:50] tampakrap: is it possible to keep the mail aliases for "Members Emeritus"? [20:54:18] wait a min, I'm looking at boosters [20:54:24] the board would like to have it that way so that inactive members are still reachable with their @o.o address [20:54:47] tampakrap: for redmine, is there have created ticket? or create new one? [20:55:23] I don't see anything taking too much space in boosters [20:55:42] the only that could possibly be improved is /tmp which is 5G [20:56:23] sounds like a good candidate ;-) [20:56:37] I don't understand your question [20:56:54] ok, I'll try to ask in another way: [20:56:58] afaik there is a cronjob that exports the names and mail aliases in a text file [20:57:12] which is read by the mail server to actually create them [20:57:39] so my proposal is to ditch connect and just keep that text file [20:58:05] currently only _active_ members have a mail alias, and if you become inactive (not doing anything, and ignoring the "still here?" bot mails), you'll be moved to the "Members Emeritus" group (= former, now inactive members) [20:58:16] with that move, you also loose your @opensuse.org alias [20:58:27] tampakrap: If you mean connect.o.o. I definitely support that move: Ditch it. [20:58:41] the board would like to have that changed, so that the alias keeps working also for inactive members [20:59:07] GDPR? [20:59:28] two text files? [21:00:07] Some inactive mail aliases might be based on personal names. [21:00:35] right, and if someone asks us to remove the alias, we can of course do that [21:01:12] but in most cases I'd guess that people prefer that a mail address they possibly gave out to other people stays working [21:02:15] I'm not a lawyer. But if there is no reason for storing the data you are not allowed to store it anymore. Just my 2 cent. [21:03:42] there's a difference between "I don't want to be an openSUSE Member anymore" (for example because someone doesn't have time to contribute anymore) [21:03:53] and "please delete my data" [21:04:06] Ask your lawyer. [21:04:09] exactly [21:04:17] uh, ask our lawyer. [21:04:53] ok, I'll take this to the board meeting ;-) [21:05:05] cboltz: I agree with the difference: but, should ask anyway. [21:06:13] f.e.: I might not have time to contribute, but want my info kept alive in case I can come back to contributing in the future. [21:06:36] right, that's (IMHO) exactly the point of Members Emeritus [21:07:20] The other point is, even if I am too busy to contribute in the future, I would still like to point out that I *was* a contributor at one time. [21:07:37] yes [21:08:02] and you probably want to keep your @opensuse.org address because your friends use it to send you mail [21:08:23] It boils down to: Inform the user when he/she changes status. [21:08:43] yes, that's the obvious part ;-) [21:09:00] Yes, indeed: But, mostly the mailing lists. Does not mean I do not want to quit the mailing lists even if I have no time to contribute. [21:09:15] and we should also ask the current Members Emeritus if they want to have their alias back (which would be the direct consequence of this change) [21:09:29] Does not mean I want to quit lists ^^^ [21:10:32] ... just one other point, though, IMO, we should be carefull because an @opensuse.org mail address can make someone look like they are speaking officially for openSUSE. [21:11:42] right, but IIRC we didn't have such a problem since I'm in the board - at least we didn't hear about it ;-) [21:12:40] Correct, and I doubt we would run into that, except in cases where someone is kicked out of Membership for breaking our Guidelines. Not that I have ever heard of that happening... [21:13:22] Just saying, someone should keep a watch out? [21:14:07] if something like that happens, report it to board@ [21:14:24] luckily our members know how to behave ;-) [21:14:50] Thanks. BTW: I would join Heroes and work on the Connect.o.o replacements, if I had any idea what I was doing. But, not till elections are over. [21:15:15] :-) [21:15:40] the important part of connect.o.o is handling the membership and maybe being a "phonebook" for openSUSE [21:16:17] the other parts (groups, polls etc.) are more or less useless and can easily be dropped [21:16:34] Any docs on what "handling the membership" means? [21:16:34] so basically you could call the replacement a "membership database" [21:16:39] so when someone requests to delete his data what is actually to be deleted? [21:17:51] that's a good question, but I'm afraid I don't have an easy answer (I never had to handle such a request, and don't know the connect.o.o internals) [21:17:57] cboltz: I like where it shows me info about the Member, including what they are doing for us. [21:18:25] Stiopa: the ldap account plus any profile/account on our webapps [21:19:25] Fraser_Bell: I also like the https://connect.opensuse.org/pg/profile/$USERNAME pages so if you work on a replacement and keep them, I'll be more than happy ;-) [21:20:16] Yes. There should indeed be a replacement, just not at connect.o.o., perhaps better in our Wiki? [21:20:59] that would also be an option [21:21:22] ... must be clearly linked in the Membership list, though, so that if requested, info CAN be deleted. Must protect ourselves. [21:22:44] right, but that's not too different to the User:$USERNAME wiki pages we already have [21:22:52] My presence has been pretty much necromantic lately, so I am trying to figure out what is better if someone decides to pick up the stuff I left: to know clearly, yes clearly, that somebody is no longer active or to have that misty feeling that he/she still can be contacted. [21:23:04] ... a "restricted" Wiki where only authorized personnel and the individual themself can edit the page. [21:23:22] ^^ Wiki page ^^^ [21:23:56] actually we already have that - IIRC we have an extension that ensures you can't edit someone else's User:$USERNAME page [21:24:00] Stiopa: Play Misty for Me? [21:24:03] (except if you are a wiki admin) [21:24:10] Stiopa: asking for removing your data and (asking for) revoking your membership are not the same [21:24:23] Yes. [21:24:33] that is correct. [21:24:45] cboltz: Thanks. [21:25:15] clear, thanks [21:26:46] cboltz: BTW, those profile pages also come in very handy when, as Global Admin, I need to decide if I should ban or temporarily ban someone on the Forums, or if I should cut some extra slack. [21:27:14] indeed, connect isn't as useless as it sometimes looks ;-) [21:27:19] ^^^ Global MODERATOR ^^^ [21:28:17] oh, I'm quite sure someone will happily upgrade you if you promise to do the work ;-) [21:28:21] If a real good contributor, I cut slack with a PM. [21:28:44] or another, or another, PM [21:28:53] Fraser_Bell, you want me "to make your day", hah? [21:29:08] ROTFL [21:30:22] cboltz: Wait until after the Elections, please, I am now down to 20 pounds soaking wet and read, bleary eyes!!!! [21:30:35] red, bleary ^^^ [21:31:20] ;-) [21:32:26] guys, I gotta go, have run out of time. I hope there was nothing urgent wrt mailing lists or mirroring? [21:33:19] not that I know of - enjoy the evening ;-) [21:33:33] Good evening, pjessen [21:33:37] i'm not aware of any either [21:33:50] same [21:33:56] good. see you later. [21:34:04] does someone else have anything to discuss, or should we move towards the end of the meeting? [21:34:20] * Fraser_Bell nothing. [21:34:32] dunno, what else is broken? :P [21:34:48] tampakrap: My bank account? [21:35:10] ;-) [21:35:32] I'm afraid I don't have a fix for that ;-) [21:35:53] looks like we can finish the meeting [21:35:55] Well, know, I was expecting tamapkrap to fix it. :-D [21:36:09] know ^^^ no [21:36:31] * Fraser_Bell has never made so many dagnabbed typos!!! [21:37:01] thanks everybody for being here - I'm especially happy to see some new faces and helping hands :-) [21:37:09] thank you! [21:37:09] :-) [21:38:04] Bye all. [21:39:50] thanks all. [21:42:36] bye