monkey: I can’t drag more out of my brain this Friday, I had a bit of a play with the genre drop downs. Not perfectly happy but something to look at: https://www.figma.com/file/YRbCOtFHBez8XmMdCKbGta…
2022-11-11 31501, 2022
MRiddickW joined the channel
2022-11-11 31525, 2022
MRiddickW has quit
2022-11-11 31554, 2022
chancey joined the channel
2022-11-11 31510, 2022
BrainzGit
[musicbrainz-android] 14akshaaatt merged pull request #156 (03master…dependabot/gradle/androidx.compose.material3-material3-1.1.0-alpha02): Bump material3 from 1.1.0-alpha01 to 1.1.0-alpha02 https://github.com/metabrainz/musicbrainz-android…
2022-11-11 31517, 2022
BrainzGit
[musicbrainz-android] 14akshaaatt merged pull request #155 (03master…dependabot/gradle/compose_version-1.3.1): Bump compose_version from 1.3.0 to 1.3.1 https://github.com/metabrainz/musicbrainz-android…
it seems to indicate keydb cannot answer, so that the traffic coming out is dropped
2022-11-11 31506, 2022
atj
I'll stop the container on rex
2022-11-11 31527, 2022
zas
we can tcpdump and check what passes or not
2022-11-11 31527, 2022
zas
traffic from int to int interface should be implicitly allowed by shorewall (can you check it is?)
2022-11-11 31545, 2022
zas
but here we have a docker to int traffic
2022-11-11 31537, 2022
atj
when you stop the instance rex, the error message on rudi changes from timeout to connection refused
2022-11-11 31552, 2022
zas
btw, making keydb container listening only on 10.2.2.30 seems ok to me, as it should only be used by haproxy and consul health checks (which should both use this IP to connect)
2022-11-11 31504, 2022
zas
atj: yes, ignore for now, let's focus on rudi instance
2022-11-11 31523, 2022
zas
it has to pass health check and let us connect from the host itself
2022-11-11 31524, 2022
zas
I suggest we restrict listening to 10.2.2.30:13062, can you make changes for that on rudi?
2022-11-11 31524, 2022
atj
OK, sure. I'm in bed at the moment, need to get up and have breakfast before I get into this ;)
yes, keydb works (from container, or on docker IP)
2022-11-11 31511, 2022
zas
tcp check from 10.2.2.x (consul) works too
2022-11-11 31528, 2022
zas
but connection from localhost using redis-cli doesn't
2022-11-11 31553, 2022
atj
so the TCP handshake is working
2022-11-11 31518, 2022
atj
shouldn't docker-proxy be runnning?
2022-11-11 31529, 2022
zas
atj: dunno, that's internal docker stuff, can you start a test container as you said (running a dummy service)? currently we only have keydb as container in non-host mode
2022-11-11 31508, 2022
atj
nc in a test container doesn't work
2022-11-11 31546, 2022
zas
so that rules out keydb as being the source of the issue, docker + firewall, we are missing something. With the nc container, can you connect with source IP being on 10.2.2.x network (using -s option)?
2022-11-11 31515, 2022
atj
sorry, connection dropped and killed all my sessions
2022-11-11 31533, 2022
atj
zas: internet connection keeps dropping, hopefully it's because they're doing some diagnostics to investigate my fault
bitmap: I noticed the weird stuff in https://tickets.metabrainz.org/browse/MBS-12705 when testing your latest PR - not a blocking issue, but a few choices seem odd to me, so maybe we can talk about them (possibly with aerozol too)
2022-11-11 31552, 2022
BrainzBot
MBS-12705: Beta: Make UI for repeatable attributes less confusing
2022-11-11 31502, 2022
zas
atj: if packets are dropped, they should appear in iptables counters right? which rules have >0 drops?
2022-11-11 31520, 2022
atj
zas: OK, I understand why I think
2022-11-11 31546, 2022
atj
userland-proxy is set to false in docker daemon.json
zas: I've pushed a couple of commits to the PR branch. I've got some work I need to get on with for a few hours, you ok to deploy the haproxy updates?
2022-11-11 31506, 2022
zas
yup, I'll do after lunch
2022-11-11 31501, 2022
monkey
chinmay: Thanks for the advance notice about the whole "wrapping test side effects with act(…)" thing ! I'm hitting this problem in the react 18 update PR, except there's a million of those warnings… At least I know a bit more about where that's coming from now.
2022-11-11 31548, 2022
chinmay
monkey: hahaha I saw that test log!
2022-11-11 31506, 2022
monkey
Makes me want to cry
2022-11-11 31511, 2022
chinmay
All the best xD
2022-11-11 31542, 2022
zas
atj: haproxy changes deployed, redis-cli -h 10.2.3.254 works
2022-11-11 31553, 2022
atj
yay
2022-11-11 31522, 2022
zas
one thing: I think we should make rudi's keydb backup on rex, and rex's keydb backup on rudi, currently rudi's backup on both
2022-11-11 31519, 2022
zas
what do you think?
2022-11-11 31545, 2022
atj
yeah, that seems sensible
2022-11-11 31547, 2022
zas
also, I don't think we need to sync with kiki/herb instances: web services on rudi/rex are different anyway
