This is just another small reminder that, because the servers which host tiles.wmflabs.org and wma.wmflabs.org (wikiminiatlas) and overpass-wiki run on a version of the OS (Ubuntu Trusty) that is no longer supported (and hasn't been available for new instances since november 2017).
These services need maintainers and support by community members in order to keep them alive after dec 18th (after which wmflabs will phase out those versions) and before the EOL of early 2019 of the OS. Unfortunately it seems no one is stepping up so far to convert these machines.
This issue is tracked at https://phabricator.wikimedia.org/T204506 As I was curious, I looked around on the tile server a bit and used what I could find to update https://wikitech.wikimedia.org/wiki/OSM_Tileserver#Technology_stack This is all the information that I could gather, but i'm FAR from sure if that is complete information and if I would break anything with a rebuild basing myself on that info, so any information on missing elements etc. would be appreciated. I've not gotten around to looking at wikiminiatlas.
If the services are not rebuild then likely they will just disappear at some point for all layer variants. This includes the mapnik, black and white, hill shading, hike bike layers. As I have no idea how many users of these services there are, it is hard to say what the effect of that would be.
DJ
On Wed, 2018-12-12 at 14:39 +0100, Derk-Jan Hartman wrote:
This is just another small reminder that, because the servers which host tiles.wmflabs.org and wma.wmflabs.org (wikiminiatlas) and overpass-wiki run on a version of the OS (Ubuntu Trusty) that is no longer supported (and hasn't been available for new instances since november 2017).
These services need maintainers and support by community members in order to keep them alive after dec 18th (after which wmflabs will phase out those versions) and before the EOL of early 2019 of the OS. Unfortunately it seems no one is stepping up so far to convert these machines.
Quick grep for "MediaWiki:Wikiminiatlas" in gadgets across sites lists 209 matches. (A good number might be wrapped in 'if' clauses though or could be false positives.) https://phabricator.wikimedia.org/P7911
Problem might welcome a heads-up on technical village pumps to reach a broader audience (and reduce surprise if this wasn't working anymore)?
andre
Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech News even ?
DJ
On Wed, Dec 12, 2018 at 6:45 PM Andre Klapper aklapper@wikimedia.org wrote:
On Wed, 2018-12-12 at 14:39 +0100, Derk-Jan Hartman wrote:
This is just another small reminder that, because the servers which host tiles.wmflabs.org and wma.wmflabs.org (wikiminiatlas) and overpass-wiki run on a version of the OS (Ubuntu Trusty) that is no longer supported
(and
hasn't been available for new instances since november 2017).
These services need maintainers and support by community members in order to keep them alive after dec 18th (after which wmflabs will phase out
those
versions) and before the EOL of early 2019 of the OS. Unfortunately it seems no one is stepping up so far to convert these machines.
Quick grep for "MediaWiki:Wikiminiatlas" in gadgets across sites lists 209 matches. (A good number might be wrapped in 'if' clauses though or could be false positives.) https://phabricator.wikimedia.org/P7911
Problem might welcome a heads-up on technical village pumps to reach a broader audience (and reduce surprise if this wasn't working anymore)?
andre
Andre Klapper | Bugwrangler / Developer Advocate https://blogs.gnome.org/aklapper/
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < d.j.hartman+wmf_ml@gmail.com> wrote:
Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech News even ?
"Hey folks, this might not work in the future" could be reason enough to include it in Tech News, yes.
//Johan Jönsson --
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < d.j.hartman+wmf_ml@gmail.com> wrote:
Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech News even ?
"Hey folks, this might not work in the future" could be reason enough to include it in Tech News, yes.
Included in https://meta.wikimedia.org/wiki/Tech/News/2018/51 which is going out to the wikis on Monday.
//Johan Jönsson --
I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < d.j.hartman+wmf_ml@gmail.com> wrote:
Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech News even ?
"Hey folks, this might not work in the future" could be reason enough to include it in Tech News, yes.
Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is going out to the wikis on Monday.
//Johan Jönsson
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
You'll basically need to create a wikitech account (if you don't already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you. Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski < alexander@vassilevski.com> wrote:
I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < d.j.hartman+wmf_ml@gmail.com> wrote:
Yeah might be wise to at least reach out to en.wp and de.wp. Or
maybe Tech
News even ?
"Hey folks, this might not work in the future" could be reason enough
to
include it in Tech News, yes.
Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is going out to the wikis on Monday.
//Johan Jönsson
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
I have a wikitech account, checked through the userlist and wrote mails to the admins who listed their mails and assuming I get access I'll use puppet. I'll update the conversation if I get word back from them.
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:33, Alex Monk krenair@gmail.com wrote:
You'll basically need to create a wikitech account (if you don't already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you. Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski alexander@vassilevski.com wrote:
I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < [d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)> wrote:
Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech News even ?
"Hey folks, this might not work in the future" could be reason enough to include it in Tech News, yes.
Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is going out to the wikis on Monday.
//Johan Jönsson
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
I created a task in phab to be added to NDA ldap, so I can sign the NDA and get shell access: https://phabricator.wikimedia.org/T211996 One of the subtasks (from https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_a... ) on this is to get
[ ] At least one comment of support from a Wikimedia Foundation employee, explaining why it is a good idea to accept your request [ ] A comment of approval from one Wikimedia Foundation manager (usually the manager of an employee supporting you). [ ] (Have someone with access double-check which mediawiki.org account that the manager's Phabricator account is linked to, where the SUL account was created, and how it was created on that wiki.)
Can someone do this? If you need to see some qualifications I can try to get some code of mine to you from some old puppet stuff I've done and I can show you my github, where you can see some of my code. If I'm making a rookie mistake here and this type of access is not needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me there too, I check it from time to time. alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:33, Alex Monk krenair@gmail.com wrote:
You'll basically need to create a wikitech account (if you don't already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you. Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski alexander@vassilevski.com wrote:
I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < [d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)> wrote:
Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech News even ?
"Hey folks, this might not work in the future" could be reason enough to include it in Tech News, yes.
Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is going out to the wikis on Monday.
//Johan Jönsson
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
That is the process for getting shell access on production [e.g. servees directly running Wikipedia]. Which is rather different (and much harder) than getting access to an abandoned tool.
-- brian
On Friday, December 14, 2018, Alexander Vassilevski < alexander@vassilevski.com> wrote:
I created a task in phab to be added to NDA ldap, so I can sign the NDA
and get shell access:
https://phabricator.wikimedia.org/T211996 One of the subtasks (from
https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_a... ) on this is to get
[ ] At least one comment of support from a Wikimedia Foundation employee,
explaining why it is a good idea to accept your request
[ ] A comment of approval from one Wikimedia Foundation manager (usually
the manager of an employee supporting you).
[ ] (Have someone with access double-check which mediawiki.org account
that the manager's Phabricator account is linked to, where the SUL account was created, and how it was created on that wiki.)
Can someone do this? If you need to see some qualifications I can try to
get some code of mine to you from some old puppet stuff I've done and I can show you my github, where you can see some of my code.
If I'm making a rookie mistake here and this type of access is not
needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me there too, I check it from time to time.
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:33, Alex Monk krenair@gmail.com wrote:
You'll basically need to create a wikitech account (if you don't already
have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you.
Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski <
alexander@vassilevski.com> wrote:
I have some free time this December and I could manually create the new
vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the
infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson <
jjonsson@wikimedia.org> wrote:
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < [d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)>
wrote:
Yeah might be wise to at least reach out to en.wp and de.wp. Or
maybe Tech
News even ?
"Hey folks, this might not work in the future" could be reason
enough to
include it in Tech News, yes.
Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is going out to the wikis on Monday.
//Johan Jönsson
---------------------------------------------------------------------------------------------------------------------------
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
OK. Thanks for letting me know that. It looks like I've been declined but at least I'm getting some idea on how things work around here...
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Friday, 14 December 2018 10:35, Brian Wolff bawolff@gmail.com wrote:
That is the process for getting shell access on production [e.g. servees directly running Wikipedia]. Which is rather different (and much harder) than getting access to an abandoned tool.
-- brian
On Friday, December 14, 2018, Alexander Vassilevski alexander@vassilevski.com wrote:
I created a task in phab to be added to NDA ldap, so I can sign the NDA and get shell access: https://phabricator.wikimedia.org/T211996 One of the subtasks (from https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_a... ) on this is to get
[ ] At least one comment of support from a Wikimedia Foundation employee, explaining why it is a good idea to accept your request [ ] A comment of approval from one Wikimedia Foundation manager (usually the manager of an employee supporting you). [ ] (Have someone with access double-check which mediawiki.org account that the manager's Phabricator account is linked to, where the SUL account was created, and how it was created on that wiki.)
Can someone do this? If you need to see some qualifications I can try to get some code of mine to you from some old puppet stuff I've done and I can show you my github, where you can see some of my code. If I'm making a rookie mistake here and this type of access is not needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me there too, I check it from time to time. alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:33, Alex Monk krenair@gmail.com wrote:
You'll basically need to create a wikitech account (if you don't already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you. Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski alexander@vassilevski.com wrote:
I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < [[d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)](mailto:[d.j.hartman%2Bwmf_ml@gmail.com](mailto:d.j.hartman%252Bwmf_ml@gmail.com))> wrote:
> Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech > News even ?
"Hey folks, this might not work in the future" could be reason enough to include it in Tech News, yes.
Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is going out to the wikis on Monday.
//Johan Jönsson
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Hi Alexander,
I haven't forgotten about your request... Please don't take this the wrong way, but lately there has been quite a LOT of malicious activity at several Wikimedia systems and your account is brand new.. I can't find any history of your activity with the projects or any other projects in any public form... Especially in light of the recent event-stream compromise for instance ( https://medium.com/intrinsic/compromised-npm-package-event-stream-d47d086055...), I think it is wise of us to be extra careful and take some more time to make sure your enthusiasm is exactly what it is pure enthousiasme to become part of this. But at this time that makes me uncomfortable to give you access to this set of servers as one of them is actually rather critical and could allow a person to do a lot of potential harm to Wikimedians. It is sad that we have to consider these kinds of things nowadays. I'm considering how we should approach this and how I can gain enough confidence to help you along.
DJ
On Fri, Dec 14, 2018 at 7:50 PM Alexander Vassilevski < alexander@vassilevski.com> wrote:
OK. Thanks for letting me know that. It looks like I've been declined but at least I'm getting some idea on how things work around here...
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Friday, 14 December 2018 10:35, Brian Wolff bawolff@gmail.com wrote:
That is the process for getting shell access on production [e.g. servees
directly running Wikipedia]. Which is rather different (and much harder) than getting access to an abandoned tool.
-- brian
On Friday, December 14, 2018, Alexander Vassilevski <
alexander@vassilevski.com> wrote:
I created a task in phab to be added to NDA ldap, so I can sign the NDA
and get shell access:
https://phabricator.wikimedia.org/T211996 One of the subtasks (from
https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_a... ) on this is to get
[ ] At least one comment of support from a Wikimedia Foundation
employee, explaining why it is a good idea to accept your request
[ ] A comment of approval from one Wikimedia Foundation manager
(usually the manager of an employee supporting you).
[ ] (Have someone with access double-check which mediawiki.org account
that the manager's Phabricator account is linked to, where the SUL account was created, and how it was created on that wiki.)
Can someone do this? If you need to see some qualifications I can try
to get some code of mine to you from some old puppet stuff I've done and I can show you my github, where you can see some of my code.
If I'm making a rookie mistake here and this type of access is not
needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me there too, I check it from time to time.
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:33, Alex Monk krenair@gmail.com
wrote:
You'll basically need to create a wikitech account (if you don't
already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you.
Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski <
alexander@vassilevski.com> wrote:
I have some free time this December and I could manually create the
new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the
infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson <
jjonsson@wikimedia.org> wrote:
On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org wrote:
> On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < > [[d.j.hartman+wmf_ml@gmail.com](mailto:
d.j.hartman%2Bwmf_ml@gmail.com)](mailto:[d.j.hartman%2Bwmf_ml@gmail.com ](mailto:d.j.hartman%252Bwmf_ml@gmail.com))> wrote:
> > > Yeah might be wise to at least reach out to en.wp and de.wp. Or
maybe Tech
> > News even ? > > "Hey folks, this might not work in the future" could be reason
enough to
> include it in Tech News, yes.
Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which
is
going out to the wikis on Monday.
//Johan Jönsson
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Fair enough about the security issues. I wouldn't trust me either if I knew nothing about me, lol. That said, if there are some less critical things that you can get me access to that are also important to wikimedia let me know, so that I can still contribute in some technically significant way.
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Monday, 17 December 2018 12:16, Derk-Jan Hartman d.j.hartman+wmf_ml@gmail.com wrote:
Hi Alexander,
I haven't forgotten about your request... Please don't take this the wrong way, but lately there has been quite a LOT of malicious activity at several Wikimedia systems and your account is brand new.. I can't find any history of your activity with the projects or any other projects in any public form... Especially in light of the recent event-stream compromise for instance (https://medium.com/intrinsic/compromised-npm-package-event-stream-d47d086055...), I think it is wise of us to be extra careful and take some more time to make sure your enthusiasm is exactly what it is pure enthousiasme to become part of this. But at this time that makes me uncomfortable to give you access to this set of servers as one of them is actually rather critical and could allow a person to do a lot of potential harm to Wikimedians. It is sad that we have to consider these kinds of things nowadays. I'm considering how we should approach this and how I can gain enough confidence to help you along.
DJ
On Fri, Dec 14, 2018 at 7:50 PM Alexander Vassilevski alexander@vassilevski.com wrote:
OK. Thanks for letting me know that. It looks like I've been declined but at least I'm getting some idea on how things work around here...
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Friday, 14 December 2018 10:35, Brian Wolff bawolff@gmail.com wrote:
That is the process for getting shell access on production [e.g. servees directly running Wikipedia]. Which is rather different (and much harder) than getting access to an abandoned tool.
-- brian
On Friday, December 14, 2018, Alexander Vassilevski alexander@vassilevski.com wrote:
I created a task in phab to be added to NDA ldap, so I can sign the NDA and get shell access: https://phabricator.wikimedia.org/T211996 One of the subtasks (from https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_a... ) on this is to get
[ ] At least one comment of support from a Wikimedia Foundation employee, explaining why it is a good idea to accept your request [ ] A comment of approval from one Wikimedia Foundation manager (usually the manager of an employee supporting you). [ ] (Have someone with access double-check which mediawiki.org account that the manager's Phabricator account is linked to, where the SUL account was created, and how it was created on that wiki.)
Can someone do this? If you need to see some qualifications I can try to get some code of mine to you from some old puppet stuff I've done and I can show you my github, where you can see some of my code. If I'm making a rookie mistake here and this type of access is not needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me there too, I check it from time to time. alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:33, Alex Monk krenair@gmail.com wrote:
You'll basically need to create a wikitech account (if you don't already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you. Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski alexander@vassilevski.com wrote:
I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson jjonsson@wikimedia.org wrote:
> On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org > wrote: > > > On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < > > [[d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)](mailto:[d.j.hartman%2Bwmf_ml@gmail.com](mailto:d.j.hartman%252Bwmf_ml@gmail.com))> wrote: > > > > > Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech > > > News even ? > > > > "Hey folks, this might not work in the future" could be reason enough to > > include it in Tech News, yes. > > Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is > going out to the wikis on Monday. > > //Johan Jönsson > > --------------------------------------------------------------------------------------------------------------------------- > > Wikitech-l mailing list > Wikitech-l@lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Hi DJ,
Out of curiosity, what all would be involved in the OS change?
The bike layers could be a nontrivial loss for some folks.
If no regular WMF staff are available for the OS changes and ongoing maintenance, and if the use of bike lanes (or other features) is significant in the opinion of the community, then I think that WMF contractor time should be an option for the changes and maintenance, although I would like to know how much that would cost before supporting that option, along with how strongly bike lanes (and other features supported by these servers) are wanted by the community. If the community has no strong feelings regarding the loss of these features and the contactor time would cost $30,000 in the first year then maybe the loss of these features is acceptable, but if there is significant community desire to maintain these features and the contractor time would cost $1,000 in the first year then I would probably support spending the money for contractor time for at least one year of additional service while WMF tries to recruit volunteers for future years. In the context of a $100 million annual budget, I am fairly confident that WMF could find $1,000 for an additional year of service.
On Wed, Dec 12, 2018, 5:39 AM Derk-Jan Hartman d.j.hartman+wmf_ml@gmail.com wrote:
This is just another small reminder that, because the servers which host tiles.wmflabs.org and wma.wmflabs.org (wikiminiatlas) and overpass-wiki run on a version of the OS (Ubuntu Trusty) that is no longer supported (and hasn't been available for new instances since november 2017).
These services need maintainers and support by community members in order to keep them alive after dec 18th (after which wmflabs will phase out those versions) and before the EOL of early 2019 of the OS. Unfortunately it seems no one is stepping up so far to convert these machines.
This issue is tracked at https://phabricator.wikimedia.org/T204506 As I was curious, I looked around on the tile server a bit and used what I could find to update https://wikitech.wikimedia.org/wiki/OSM_Tileserver#Technology_stack This is all the information that I could gather, but i'm FAR from sure if that is complete information and if I would break anything with a rebuild basing myself on that info, so any information on missing elements etc. would be appreciated. I've not gotten around to looking at wikiminiatlas.
If the services are not rebuild then likely they will just disappear at some point for all layer variants. This includes the mapnik, black and white, hill shading, hike bike layers. As I have no idea how many users of these services there are, it is hard to say what the effect of that would be.
DJ _______________________________________________ Maps-l mailing list Maps-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/maps-l
I don't think WMF should be hiring contractors purely for the purpose of supporting individual tools which are not in production.
On Thu, 13 Dec 2018 at 15:46, Pine W wiki.pine@gmail.com wrote:
Hi DJ,
Out of curiosity, what all would be involved in the OS change?
The bike layers could be a nontrivial loss for some folks.
If no regular WMF staff are available for the OS changes and ongoing maintenance, and if the use of bike lanes (or other features) is significant in the opinion of the community, then I think that WMF contractor time should be an option for the changes and maintenance, although I would like to know how much that would cost before supporting that option, along with how strongly bike lanes (and other features supported by these servers) are wanted by the community. If the community has no strong feelings regarding the loss of these features and the contactor time would cost $30,000 in the first year then maybe the loss of these features is acceptable, but if there is significant community desire to maintain these features and the contractor time would cost $1,000 in the first year then I would probably support spending the money for contractor time for at least one year of additional service while WMF tries to recruit volunteers for future years. In the context of a $100 million annual budget, I am fairly confident that WMF could find $1,000 for an additional year of service.
On Wed, Dec 12, 2018, 5:39 AM Derk-Jan Hartman < d.j.hartman+wmf_ml@gmail.com> wrote:
This is just another small reminder that, because the servers which host tiles.wmflabs.org and wma.wmflabs.org (wikiminiatlas) and overpass-wiki run on a version of the OS (Ubuntu Trusty) that is no longer supported (and hasn't been available for new instances since november 2017).
These services need maintainers and support by community members in order to keep them alive after dec 18th (after which wmflabs will phase out
those
versions) and before the EOL of early 2019 of the OS. Unfortunately it seems no one is stepping up so far to convert these machines.
This issue is tracked at https://phabricator.wikimedia.org/T204506 As I was curious, I looked around on the tile server a bit and used what
I
could find to update https://wikitech.wikimedia.org/wiki/OSM_Tileserver#Technology_stack This is all the information that I could gather, but i'm FAR from sure if that is complete information and if I would break anything with a rebuild basing myself on that info, so any information on missing elements etc. would be appreciated. I've not gotten around to looking at wikiminiatlas.
If the services are not rebuild then likely they will just disappear at some point for all layer variants. This includes the mapnik, black and white, hill shading, hike bike layers. As I have no idea how many users
of
these services there are, it is hard to say what the effect of that would be.
DJ _______________________________________________ Maps-l mailing list Maps-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/maps-l
--
Pine ( https://meta.wikimedia.org/wiki/User:Pine ) _______________________________________________ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
On Thu, 2018-12-13 at 07:46 -0800, Pine W wrote:
Out of curiosity, what all would be involved in the OS change?
See https://wikitech.wikimedia.org/wiki/News/Trusty_deprecation
Cheers, andre
This is not a complete image. As there are no maintainers responding, it requires deconstructing and analysing what is there now for this specific tool, reworking that into a new system, testing that new system and then switching from old to new.
DJ
On Thu, Dec 13, 2018 at 5:49 PM Andre Klapper aklapper@wikimedia.org wrote:
On Thu, 2018-12-13 at 07:46 -0800, Pine W wrote:
Out of curiosity, what all would be involved in the OS change?
See https://wikitech.wikimedia.org/wiki/News/Trusty_deprecation
Cheers, andre -- Andre Klapper | Bugwrangler / Developer Advocate https://blogs.gnome.org/aklapper/
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Small update on this.
Over the past 3 months, I have slowly familiarised myself with the tiles.wmflabs.org and I have now migrated rendering and serving of these tiles to a new server. I still need to do some work on the following things:
1: tile expiration 2: puppet deployment 3: log collection/rotation 4: renderd logging 5: renderd socket getting stuck ?
wma.wmflabs.org is still not saved however.
DJ
On Wed, Dec 12, 2018 at 2:39 PM Derk-Jan Hartman < d.j.hartman+wmf_ml@gmail.com> wrote:
This is just another small reminder that, because the servers which host tiles.wmflabs.org and wma.wmflabs.org (wikiminiatlas) and overpass-wiki run on a version of the OS (Ubuntu Trusty) that is no longer supported (and hasn't been available for new instances since november 2017).
These services need maintainers and support by community members in order to keep them alive after dec 18th (after which wmflabs will phase out those versions) and before the EOL of early 2019 of the OS. Unfortunately it seems no one is stepping up so far to convert these machines.
This issue is tracked at https://phabricator.wikimedia.org/T204506 As I was curious, I looked around on the tile server a bit and used what I could find to update https://wikitech.wikimedia.org/wiki/OSM_Tileserver#Technology_stack This is all the information that I could gather, but i'm FAR from sure if that is complete information and if I would break anything with a rebuild basing myself on that info, so any information on missing elements etc. would be appreciated. I've not gotten around to looking at wikiminiatlas.
If the services are not rebuild then likely they will just disappear at some point for all layer variants. This includes the mapnik, black and white, hill shading, hike bike layers. As I have no idea how many users of these services there are, it is hard to say what the effect of that would be.
DJ
wikitech-l@lists.wikimedia.org