#metabrainz

/

      • akshat
        Great 👍
      • 2021-11-01 30519, 2021

      • outsidecontext
        ok, let me read up about this. I will set this up later then and test the builds. I'll write you on the results. But thanks a lot for setting this up, I love it. That there was no full CI deployment for this porject already bothered me
      • 2021-11-01 30552, 2021

      • akshat
        Anything for the MeB team!💯
      • 2021-11-01 30527, 2021

      • outsidecontext
        !m akshat
      • 2021-11-01 30527, 2021

      • BrainzBot
        You're doing good work, akshat!
      • 2021-11-01 30539, 2021

      • Freso
        alastairp: Do the 👀 on https://github.com/metabrainz/listenbrainz-server… mean that you’re going to look at it, that you have looked at it, or… something else? :p
      • 2021-11-01 30512, 2021

      • lucifer
        ruaok: 👍
      • 2021-11-01 30554, 2021

      • Freso
        (FWIW, I have a few listens submitted with the current code: https://api.listenbrainz.org/1/user/Freso/listens - only local files though, so the `music_service` part hasn’t been tested in action (yet).)
      • 2021-11-01 30533, 2021

      • zas
        I deployed serviceregistrator on serge & zappa, it replaces registrator. I'll continue deployment over the week, I'm careful because this stuff is quite critical in our infra.
      • 2021-11-01 30539, 2021

      • Sophist-UK joined the channel
      • 2021-11-01 30558, 2021

      • Sophist_UK has quit
      • 2021-11-01 30533, 2021

      • alastairp
        Freso: it means that I will look at your stuff at the same time as I finish this PR
      • 2021-11-01 30550, 2021

      • Freso
        alastairp: Alright. Thanks. :)
      • 2021-11-01 30550, 2021

      • yyoung[m]
        Hi Freso , I've been quite busy recently and there're some problems with my development environment, so nothing to review for last week :)
      • 2021-11-01 30540, 2021

      • Freso
        yyoung[m]: 👍 You’re not under any obligation to give a review btw (anymore), so if you’re not on my list at https://wiki.musicbrainz.org/User:Freso/MetaBrain… and you don’t mail anything to me, you won’t be called on for the reviews. :)
      • 2021-11-01 30541, 2021

      • yyoung[m]
        OK
      • 2021-11-01 30516, 2021

      • outsidecontext
        akshat: the deployment does not work yet :( Complains about "The Android App Bundle was not signed.", but I don't see any error to the signing itself. It's supposed to work, as far as I can tell the secrets are setup correctly. Any ideas? https://github.com/phw/PicardBarcodeScanner/runs/…
      • 2021-11-01 30509, 2021

      • BrainzGit joined the channel
      • 2021-11-01 30527, 2021

      • zas
        switching to herb, for maint
      • 2021-11-01 30522, 2021

      • zas
        hmmm, something went wrong
      • 2021-11-01 30510, 2021

      • lucifer
        uh yeah, all websites inaccessible. any way we can help?
      • 2021-11-01 30505, 2021

      • zas
        well, not sure what's happening, since sometimes it works
      • 2021-11-01 30528, 2021

      • zas
        I think we had similar issue in the past, it was related to hetzner floating IP
      • 2021-11-01 30536, 2021

      • lucifer
        currently unable to ssh to herb.
      • 2021-11-01 30546, 2021

      • zas
        yes, rebooting right now
      • 2021-11-01 30556, 2021

      • zas
        I'll switch to it when it will come back
      • 2021-11-01 30556, 2021

      • lucifer
        👍
      • 2021-11-01 30507, 2021

      • zas
        I think that's an issue at IP or TCP level, nginx doesn't output any error, config is ok
      • 2021-11-01 30544, 2021

      • zas
        switching to herb
      • 2021-11-01 30559, 2021

      • zas
        help welcome if someone can identify the actual issue
      • 2021-11-01 30537, 2021

      • zas
        rebooting kiki
      • 2021-11-01 30528, 2021

      • ruaok
        zas: want a second set of eyes?
      • 2021-11-01 30558, 2021

      • Sophist_UK joined the channel
      • 2021-11-01 30558, 2021

      • Sophist_UK has quit
      • 2021-11-01 30558, 2021

      • Sophist_UK joined the channel
      • 2021-11-01 30541, 2021

      • Sophist-UK has quit
      • 2021-11-01 30500, 2021

      • zas
        yes, definitively
      • 2021-11-01 30514, 2021

      • zas
        I'm switching back to kiki
      • 2021-11-01 30501, 2021

      • zas
        something broke, but everything looks ok, but that's related to IP failover
      • 2021-11-01 30529, 2021

      • Sophist_UK has quit
      • 2021-11-01 30530, 2021

      • Sophist-UK joined the channel
      • 2021-11-01 30530, 2021

      • Sophist-UK has quit
      • 2021-11-01 30530, 2021

      • Sophist-UK joined the channel
      • 2021-11-01 30516, 2021

      • ruaok
        ok, where do you want me to start looking?
      • 2021-11-01 30524, 2021

      • zas
        weird, I can ssh to kiki, but ping doesn't work...
      • 2021-11-01 30508, 2021

      • zas
        I guess that's a network level issue, so you can start to look at everything related to network
      • 2021-11-01 30559, 2021

      • lucifer
        openresty on kiki has several consul errors in logs.
      • 2021-11-01 30550, 2021

      • lucifer
        on herb, it has warnings related to dependencies. not sure if its just noise.
      • 2021-11-01 30530, 2021

      • ruaok
        MB backend response times peaked as well. which is odd.
      • 2021-11-01 30506, 2021

      • akshat
        Hi outsidecontext ! Let me take a look at it
      • 2021-11-01 30507, 2021

      • lucifer
        other sites are plain inaccessible.
      • 2021-11-01 30529, 2021

      • ruaok
        confirmed can ping herb, but not kiki. ssh to kiki works fine
      • 2021-11-01 30556, 2021

      • zas
        and that's definitively very weird
      • 2021-11-01 30516, 2021

      • ruaok
        consul seems to be the using a bit of CPU -- more than anything else. that suggests something is miss there.
      • 2021-11-01 30534, 2021

      • ruaok
        not that anythings IS using much CPU.
      • 2021-11-01 30549, 2021

      • lucifer
        firewall?
      • 2021-11-01 30557, 2021

      • outsidecontext
        akshat: something does not seem to be correct with the signing config. I think it doesn't use the values from keystore.properties at all
      • 2021-11-01 30548, 2021

      • ruaok
        outbound DNS borked?
      • 2021-11-01 30554, 2021

      • ruaok
      • 2021-11-01 30500, 2021

      • ruaok
        from gitzconsul
      • 2021-11-01 30509, 2021

      • ruaok
        zas: I cannot ping anything from kiki to the outside, which crashes DNS. I'm guessing the consul issues are because of this.
      • 2021-11-01 30537, 2021

      • ruaok
        zas: herb does not have that problem. should we switch to herb?
      • 2021-11-01 30551, 2021

      • zas
        I tried already, twice, but let's do again
      • 2021-11-01 30504, 2021

      • zas
        I'll turn off kiki, because if it does have network issues, it might keep config that conflicts with herb
      • 2021-11-01 30527, 2021

      • ruaok
        kik's outbound traffic rules differ from herb's
      • 2021-11-01 30510, 2021

      • akshat
        outside could you try and update line 49 of releaseBeta.yml to app/keystore.jks
      • 2021-11-01 30520, 2021

      • akshat
        outsidecontext: ^
      • 2021-11-01 30525, 2021

      • zas
        ruaok: which ones?
      • 2021-11-01 30527, 2021

      • ruaok
        loading one of our pages not longer dies immediately
      • 2021-11-01 30508, 2021

      • zas
        wtf is this shit
      • 2021-11-01 30519, 2021

      • ruaok
      • 2021-11-01 30554, 2021

      • outsidecontext
        akshat: just did that. I think I chancged this in a previous attempt to fix the signing, but I now see that was wrong. But also fixed updating the keystore.properties, that was generated wrongly. Let's see
      • 2021-11-01 30510, 2021

      • akshat
        Great!
      • 2021-11-01 30526, 2021

      • zas
        ah yes, that's me, I noticed some packets were blocked on lo, which shouldn't happen, but I guess that not the actual problem
      • 2021-11-01 30543, 2021

      • zas
        ruaok: I'll stop kiki
      • 2021-11-01 30548, 2021

      • outsidecontext
        akshat: same :(
      • 2021-11-01 30555, 2021

      • ruaok
        zas: do it
      • 2021-11-01 30516, 2021

      • akshat
        Hahahah I've dealt with this all throughout the weekend😂
      • 2021-11-01 30541, 2021

      • ruaok
      • 2021-11-01 30556, 2021

      • ruaok
        that message scrolls non-stop on openresty
      • 2021-11-01 30548, 2021

      • CatQuest
        hey, was this related to an upgade or something or did it jsut randomly start conking out?
      • 2021-11-01 30507, 2021

      • akshat
        outsidecontext: before you throw me outta the window,
      • 2021-11-01 30512, 2021

      • ruaok
        random. still woerking to solve it.
      • 2021-11-01 30513, 2021

      • akshat
        I have the fix for us!
      • 2021-11-01 30516, 2021

      • lucifer
        if dependencies refer to like our site containers, should we take some nodes down and try bring up one or two to test
      • 2021-11-01 30525, 2021

      • CatQuest
        that is concerning, keep op the good work
      • 2021-11-01 30559, 2021

      • akshat
        `signingConfig signingConfigs.config` add this outsidecontext
      • 2021-11-01 30508, 2021

      • zas
        ruaok: I don't think that's related, those warnings are there since ages
      • 2021-11-01 30521, 2021

      • akshat
        Below the versionName in build.hradlw
      • 2021-11-01 30526, 2021

      • akshat
        Gradle*
      • 2021-11-01 30529, 2021

      • ruaok
        what are the chances that the new registrator/gitzconsul is causing this?
      • 2021-11-01 30542, 2021

      • lucifer
        ping ok, but sites still inaccesible
      • 2021-11-01 30543, 2021

      • zas
        none
      • 2021-11-01 30522, 2021

      • ruaok
        ok, I'm poking at random things and finding things that you know about.
      • 2021-11-01 30542, 2021

      • ruaok
        how about we take a deep breath and then talk lucifer and I through the currently known bits of info>
      • 2021-11-01 30500, 2021

      • ruaok
        what do you know? what do you suspect?
      • 2021-11-01 30520, 2021

      • zas
        well, nginx conf is ok, failover IP is on herb, and we can ping/ssh
      • 2021-11-01 30551, 2021

      • zas
        ping musicbrainz.org does work, and resolves to proper IP
      • 2021-11-01 30536, 2021

      • zas
        we get traffic in
      • 2021-11-01 30549, 2021

      • zas
        check nginx logs
      • 2021-11-01 30539, 2021

      • ruaok tweets about our issues
      • 2021-11-01 30549, 2021

      • zas
        I tried a request we just got in, it didnt work in my browser
      • 2021-11-01 30521, 2021

      • zas
        ah, https is broken, http seems ok, wtf
      • 2021-11-01 30515, 2021

      • CatQuest
        hm probably not useful at all but the TLS handshake towards musicbrainz.org from community (logging in to community) is reeealy slow, but worked
      • 2021-11-01 30520, 2021

      • ruaok
        yes, indeed. http://coverartarchive.org loads fine.
      • 2021-11-01 30556, 2021

      • zas
        so, why all https (LE and hard certs) broke suddenly?
      • 2021-11-01 30557, 2021

      • ruaok
        zas: could it be an LS certs vs other certs issue?
      • 2021-11-01 30505, 2021

      • ruaok
        ah, both.
      • 2021-11-01 30514, 2021

      • zas
        yes, musibrainz uses hard certs
      • 2021-11-01 30518, 2021

      • lucifer
        its not broken but working really slow. curl took some time to downlaod the page
      • 2021-11-01 30541, 2021

      • ruaok
        LE's twitter page doesn't suggest any issues on their side.
      • 2021-11-01 30521, 2021

      • zas
        so likely a dns issue
      • 2021-11-01 30510, 2021

      • ruaok
        on gandi's side?
      • 2021-11-01 30544, 2021

      • zas
        I was thinking on openresty side
      • 2021-11-01 30555, 2021

      • zas
        if it fails to resolve properly, it can cause https issues
      • 2021-11-01 30547, 2021

      • ruaok
        the stats pages on google cloud load fine. perhaps a bit slow, but fine.
      • 2021-11-01 30510, 2021

      • lucifer
        sentry loads fine too but that's probably because its not isnide gateways
      • 2021-11-01 30529, 2021

      • SothoTalKer_ joined the channel
      • 2021-11-01 30542, 2021

      • SothoTalKer has quit
      • 2021-11-01 30543, 2021

      • SothoTalKer_ is now known as SothoTalKer
      • 2021-11-01 30544, 2021

      • zas
        but why did it started to fail suddenly
      • 2021-11-01 30517, 2021

      • ruaok
        upstream DNS issue?
      • 2021-11-01 30522, 2021

      • ruaok
        i.e. hetzner?
      • 2021-11-01 30541, 2021

      • ruaok
        the beer swilling bavarians are on holiday today.
      • 2021-11-01 30548, 2021

      • ruaok
        extra beer going around
      • 2021-11-01 30502, 2021

      • ruaok
      • 2021-11-01 30517, 2021

      • outsidecontext
      • 2021-11-01 30541, 2021

      • akshat
        Drum rolls
      • 2021-11-01 30551, 2021

      • akshat
        Awesome!
      • 2021-11-01 30547, 2021

      • akshat
        Now outsidecontext if we wanna directly upload without saving it as a draft, we can make the changes to the yml file accordingly
      • 2021-11-01 30508, 2021

      • ruaok
        ok, zas, since we know https is affected, lets' talk us through what could be wrong.
      • 2021-11-01 30523, 2021

      • ruaok
        are the certs in the right place?
      • 2021-11-01 30505, 2021

      • zas
        wait, why is load on herb so hight
      • 2021-11-01 30522, 2021

      • ruaok
        CPU is saturated.
      • 2021-11-01 30510, 2021

      • outsidecontext
        akshat: we should do this for beta, maybe keep prod as draft for now
      • 2021-11-01 30512, 2021

      • zas
        certs are at the right place
      • 2021-11-01 30538, 2021

      • akshat
        Great, sounds good to me outsidecontext !
      • 2021-11-01 30548, 2021

      • ruaok
        I can ping hetzners DNS from inside the openresty container
      • 2021-11-01 30502, 2021

      • outsidecontext
        akshat: does this also update play store texts, or would that be a separate fastlane command?
      • 2021-11-01 30518, 2021

      • akshat
        Yes it does update at one go!
      • 2021-11-01 30527, 2021

      • akshat
        You can write the release notes and everything
      • 2021-11-01 30534, 2021

      • akshat
        And push it to upload directly
      • 2021-11-01 30546, 2021

      • ruaok
        could something be causing our containers like openresty to continually restart?
      • 2021-11-01 30551, 2021

      • akshat
        For that we need to first fetch the metadata using another action of fastlane
      • 2021-11-01 30551, 2021

      • outsidecontext
        Cool, that's great
      • 2021-11-01 30554, 2021

      • ruaok
        or services inside openresty?
      • 2021-11-01 30520, 2021

      • zas
        I check
      • 2021-11-01 30528, 2021

      • akshat
        outsidecontext: let's continue this after the meeting 😃
      • 2021-11-01 30535, 2021

      • ruaok
        PIDs of nginx seem stable, not likely.
      • 2021-11-01 30558, 2021

      • lucifer
        can we restart openresty with debug or trace logging?