that's the easiest way to show grants, generally, hehe
2015-10-15 28805, 2015
legoktm
uh no, let me try that
2015-10-15 28841, 2015
darwin
I think, basically, that PROCESS is a global priv.
2015-10-15 28853, 2015
darwin
and you have granted ALL on the db, but you need global PROCESS.
2015-10-15 28803, 2015
darwin
like REPLICATION CLIENT etc.
2015-10-15 28845, 2015
legoktm
so.... pt-show-grants is also failing with permission errors :P
2015-10-15 28816, 2015
darwin
do you have a user with SUPER?
2015-10-15 28818, 2015
darwin
if so, use that?
2015-10-15 28836, 2015
legoktm
umm, I'm not sure.
2015-10-15 28849, 2015
darwin
ok, well, what set of users do you have?
2015-10-15 28852, 2015
darwin
do you have root on the machine?
2015-10-15 28808, 2015
legoktm
the mediawiki user, and yes, I have root
2015-10-15 28843, 2015
legoktm
(I'm not really a mysql sysadmin-y person, just enough to get by mostly)
2015-10-15 28813, 2015
darwin
what linux OS?
2015-10-15 28807, 2015
legoktm
precise
2015-10-15 28849, 2015
darwin
ok, so if you have root, and it's debian-ish
2015-10-15 28855, 2015
darwin
you can cat /etc/mysql/debian..cnf
2015-10-15 28858, 2015
darwin
you can cat /etc/mysql/debian.cnf
2015-10-15 28807, 2015
darwin
and get the password of the debian-sys-maint user
2015-10-15 28809, 2015
darwin
which has SUPER
2015-10-15 28819, 2015
darwin
you can then use that SUPER credential to pt-show-grants
2015-10-15 28835, 2015
darwin
debian-sys-maint also probably has WITH GRANT OPTION
2015-10-15 28853, 2015
darwin
so you can probably use it to GRANT the user that you want to grant PROCESS, that perm
2015-10-15 28856, 2015
darwin
however
2015-10-15 28804, 2015
darwin
I honestly suggest against GRANTING the perms needed to pt-osc
2015-10-15 28809, 2015
darwin
to the mediawiki mysql user.
2015-10-15 28820, 2015
darwin
you should create a pt-osc user that is used only for that purpose, with CREATE USER
2015-10-15 28834, 2015
darwin
if it's not debian-ish, more complex...
2015-10-15 28821, 2015
legoktm
ok, yeah, pt-show-grants -F /etc/mysql/debian.cnf works
2015-10-15 28808, 2015
legoktm
makes sense, I'll wait for ruaok to come online before changing any of the permissions
2015-10-15 28854, 2015
legoktm
darwin: do you know if there's a full list of permissions that are needed for pt-osc for doing alter tables? is it just PROCESS?
2015-10-15 28843, 2015
darwin
there's a list of things, it needs to be able to insert, update, and create triggers...
2015-10-15 28850, 2015
darwin
I am not sure if create trigger is PROCESS
2015-10-15 28802, 2015
darwin
wow, -F is an alias for --defaults-file?
2015-10-15 28816, 2015
legoktm
yep :)
2015-10-15 28819, 2015
darwin
fml, how many keystrokes have I wasted with --defaults-file=
2015-10-15 28830, 2015
darwin
I wonder if that applies to mysql too...
2015-10-15 28836, 2015
legoktm
heh
2015-10-15 28849, 2015
darwin
you realize I can't type the word "myself" right?
2015-10-15 28804, 2015
darwin
I end up typing "mysqlf" at best
2015-10-15 28813, 2015
legoktm
xD
2015-10-15 28818, 2015
ariscop joined the channel
2015-10-15 28839, 2015
JesseW has quit
2015-10-15 28841, 2015
D4RK-PH0ENiX has quit
2015-10-15 28809, 2015
D4RK-PH0ENiX joined the channel
2015-10-15 28856, 2015
Gentlecat joined the channel
2015-10-15 28800, 2015
D4RK-PH0ENiX has quit
2015-10-15 28813, 2015
D4RK-PH0ENiX joined the channel
2015-10-15 28856, 2015
UmkaDK joined the channel
2015-10-15 28807, 2015
Lotheric has quit
2015-10-15 28823, 2015
Lotheric joined the channel
2015-10-15 28836, 2015
ruaok joined the channel
2015-10-15 28814, 2015
Lotheric has quit
2015-10-15 28821, 2015
ruaok
zas: morning. I finally read your jira notes.
2015-10-15 28847, 2015
zas
Good morning, ruaok
2015-10-15 28854, 2015
ruaok
moin. :)
2015-10-15 28820, 2015
zas
yes, i started to look at this JIRA update, it will not be an easy one i think
2015-10-15 28822, 2015
ruaok
one thing I did try at one point: export all JIRA data to an XML file and import it into Jira Cloud.
2015-10-15 28853, 2015
ruaok
it failed, but with a minor fix to the XML file (removing a space from a user name) it imported fine.
2015-10-15 28803, 2015
ruaok
that might be a thing to try.
2015-10-15 28813, 2015
ruaok
if it works, good. if not, go the long route
2015-10-15 28821, 2015
zas
i'll give it a try for sure
2015-10-15 28830, 2015
zas
we start from a quite old version
2015-10-15 28842, 2015
zas
and i guess we target the latest one
2015-10-15 28831, 2015
ruaok
and if we have to do the long process, I would actually run that on a local machine with a copy of the data.
2015-10-15 28839, 2015
zas
yes, sure
2015-10-15 28843, 2015
ruaok
to see how long the process takes and if it works.
2015-10-15 28856, 2015
ruaok
if it does, then we know how long a down time we need to take
2015-10-15 28825, 2015
zas
according to docs, we can do 4.0.1->4.4.5, and then use the fallback method
2015-10-15 28835, 2015
zas
which is safer and limits downtime
2015-10-15 28837, 2015
zas
since it is a big step in versions i think it is safer to have intermediate stages
2015-10-15 28828, 2015
jesus2099 joined the channel
2015-10-15 28831, 2015
zas
should we move JIRA on a new server in the process ?
2015-10-15 28859, 2015
zas
while we are at it, having a fresh new system wouldn't hurt
2015-10-15 28859, 2015
zas
btw, i'm looking into ansible (as a chef alternative), as suggested by luks (again), and it seems to me it is a much better way to go for us and the current infrastructure. We don't need to rewrite cookbooks at first since they are deployed using chef-solo, we can just run chef-solo from ansible (evil!). Then we can rewrite the cookbooks (not that many in fact) to ansible yaml over the time.
2015-10-15 28828, 2015
JonnyJD_ joined the channel
2015-10-15 28807, 2015
zas
Ansible has 2 huge plus points over chef for me: i understood how it works in minutes (this one is a major plus), and it is agentless (nothing needed on target hosts but ssh)
2015-10-15 28801, 2015
zas
it does everything Chef does, but without the need of having heavy things everywhere (chef server & chef client are fat, chef-solo needs to be installed on each target host, where ansible requires only ansible on the management node, and ssh on target hosts)
2015-10-15 28838, 2015
ruaok
ohhh, if there is a way for us to migrate to ansible, that would be good.