Support. Plus transcluded the soundtrack etc updates.
bitmap
then we decided to not use swarm mode, so I was testing the containers with just `docker run` using host networking
reosarevok
Oh. Whoops.
Leftmost
Nothing from me this week.
bitmap
that seems to be working great so far
zas is around
I'm still doing tests and fixing configuration but I haven't had any more networking issues at least
cedric
bitmap: ALTER DATABASE musicbrainz_db SET search_path TO musicbrainz,public;
zas
bitmap: are you using net=host everywhere now ?
bitmap
I looked at the phusion/baseimage image zas linked and was testing it in place of alpine
zas: yes
since alpine doesn't use glibc and locale support is weird, that might be better to use in production
Freso
cedric: We're currently in meeting mode - it would be great if you can wait until after the meeting (~50 minutes at most - watch out for the </BANG>) for further debugging help. :) ( https://musicbrainz.org/doc/MetaBrainz_Meeting )
bitmap
that's all from me last week, fin
Freso
bitmap: Pick the next to go. :)
bitmap picks zas
zas
yes, alpine is very light, but i think it is better to use more complete images for now, decreasing weights of our containers will come later (optimization)
i didnt a lot of research about issues we had with swarm
cedric
freso: apologies, I didn't need any help anymore, just gave the solution to set permanently the search_path for the database, I leave you to it.
bitmap
cedric: right, you can set it on the database too, that should work
Freso
cedric: No worries. :)
zas
ruaok poke panda (who is working on docker) and panda presented me Andreas i will ask them more things soon
i'm in contact with both now
ruaok
\ø/
zas
Andreas is working on swarm
ruaok
that was worth it. I'll buy him beer in 3 weeks. :)
zas
for now, we stick to simple docker, we still have a lot of things to do, and bothering with swarm limitations is too much of time now
we'll move to swarm later
i was confirmed one thing: docker compose is there to stay
apart that, i reviewed docker & ufw mess, and ended to disable docker iptables stuff, so it doesnt change things and create security holes as it was doing...
it means we need to manually add rules to open ports to the world
local network (10.2.2.x) is fully open
so no need to add anything for local services
i also fixed ntp on kiki which was failing after a reboot
i deployed yet another bunch of security updates on servers
i'm working on openresty container, moved to phusion for it, and now figuring out how to add upstreams using consul template
the template "language" is a bit ... unclear to me ;)
i also set up a local proxy for docker registry, so it caches downloaded images, speeding up deployments
this part was awfully tedious, mostly because of the lack of good documentation (and change to registry v2, most docs are outdated)
but it works now
fin.
ruaok?
ruaok
k
last week was paying people, balancing accounts, that sort of guff.
some metabrainz stuff, biz dev catch up.
and learning about docker swarm mode, realizing it isn't up to snuff.
so, now I need to undo what I've done there and go back to plain vanilla docker.
hopefully I can get the search servers up an running before i skip for the weekend.
I'm out friday and monday for sure.
tuesday and wed my presence on IRC depends on mobile coverage on the canal du midi. :)
fin.
zas
ahah ;)
Freso
reosarevok is still up, but I think that's about it.
ruaok
oh yeah, zas, I'm coming to france.
not really your neck of the woods, but still.
Freso: anyone else left?
Freso
ruaok: reosarevok :
reosarevok
So what I said earlier pretty much
Freso
* :)
reosarevok
22:07 <reosarevok> Support. Plus transcluded the soundtrack etc updates.
chirlu
I worked with yvanz to convert the rest of the URL validation rules to the new (and better) format.
Freso
:)
!m yvanz & chirlu
BrainzBot
You're doing good work, yvanz & chirlu!
chirlu
It’s not 100% ready yet because I think it might be to strict in some regards, but I haven’t really wrapped my head around it yet.
fin
Freso
reosarevok: That was a fin from you too, right?
Anyone else?
reosarevok
Yup
Freso
Alright then.
chirlu: canonical URLs for VIAF!
TOPIC: MetaBrainz Community and Development channel | MusicBrainz non-development: #musicbrainz | MeB meeting agenda: canonical URLs for VIAF (chirlu), HTTPS for YouTube, Amazon, RateYourMusic and SHS (chirlu)
reosarevok
Sorry, my kendo ends just when the meeting starts so it's messy
chirlu
So, this is about how we store VIAF URLs.
Generally, for URLs, we tend to use the “final” form, i.e. we want to avoid redirects.
Freso
Oh, snap, I was supposed to mail VIAF about this. :|
However, VIAF itself gives an official permalink form on each page, which is http://viaf.org/viaf/2709213 in that example.
(Note: http, not https; trailing slash vs. not.)
Freso
I'd say we stick with what VIAF themselves declare as the official URL.
chirlu
I’d tend to that, too. The question then is whether we still want to use a different URL for the actual linking.
Freso
Right. I'd be happy to inject an 's' into the schema. :)
chirlu
Like is the case with Amazon, where we add a partner ID for linking only.
So that we would still store the official permalink, but avoid people being redirected.
Freso
+1
chirlu
This came up in connection with the whole s/http/https/ thing, obviously. :)
Freso is generally a fan of injecting HTTPS as much/often as possible :)
If we agree on this, I’d make a pull request (should be easy enough).
bitmap
I don't have any strong opinion but that sounds fine
ruaok nods
mihaitish joined the channel
Freso
Seems like that motion has been carried.
Thank you chirlu :)
chirlu: HTTPS for YouTube, Amazon, RateYourMusic and SHS!
TOPIC: MetaBrainz Community and Development channel | MusicBrainz non-development: #musicbrainz | MeB meeting agenda: HTTPS for YouTube, Amazon, RateYourMusic and SHS (chirlu)
+1 to HTTPS'ing all the things ;)
chirlu
So this is the more standard case. YT and Amazon redirect everything to HTTPS now. RYC and SHS are available under both at the moment; SHS forces HTTPS for logged-in users and intends to go HTTPS-only (like MB ;-) ).
Convert to HTTPS as with Discogs, Wikidata etc. previously?
Freso
+1
bitmap
+1 to HTTPS for the same reasons as before
Freso
Unless someone speaks up, I'd say this motion has also been carried.
ruaok
dah
TOPIC: MetaBrainz Community and Development channel | MusicBrainz non-development: #musicbrainz | MeB meeting agenda: (empty)
zas
+1
Freso
chirlu: Will you put in the PRs?
chirlu
Yes.
Freso
❤️
!m chirlu
BrainzBot
You're doing good work, chirlu!
Freso
Alright then.
If no one else has anything to add, let's call it a night. :)
ruaok
I'm looking forward to a more fun post docker phase.
Freso
I think everyone is.
Well, post-moving-to-NewHost-phase actually.
Anyway…
</BANG>
Thank you for your time everyone! :)
chirlu
Post-moving-and-ironing-out-issues. ;-)
TOPIC: MetaBrainz Community and Development channel | MusicBrainz non-development: #musicbrainz | MeB meeting agenda: reviews