[Wikidata-bugs] [Maniphest] T316103: Migrate WDQS to Java 11
MoritzMuehlenhoff created this task. MoritzMuehlenhoff added projects: SRE, Wikidata-Query-Service. Restricted Application added a subscriber: Aklapper. TASK DESCRIPTION For Buster and later Java is being provided in a component/jdk8 for applications relying on Java 8. We don't want to maintain these forward ports indefinitely, so let's check whether WDQS is compatible with Java 11 and switch to it. (And ideally https://phabricator.wikimedia.org/T264181 is implemented first, since it will make the eventual 8->11 switch as simple as changing one or two lines in Hiera) TASK DETAIL https://phabricator.wikimedia.org/T316103 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: Aklapper, MoritzMuehlenhoff, Raineydaz, AWesterinen, joanna_borun, MPhamWMF, Devnull, Muchiri124, CBogen, Di3sel1975, RhinosF1, Legado_Shulgin, ReaperDawn, Namenlos314, Davinaclare77, Techguru.pc, Gq86, Lucas_Werkmeister_WMDE, Hfbn0, EBjune, merbst, Zppix, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, faidon, Jay8g, fgiunchedi ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T308659: Validate lemma length in Special:NewLexeme(Alpha) and label/description/aliases length in Special:NewProperty
MoritzMuehlenhoff added a comment. This appeared in the CVE feed as https://www.cve.org/CVERecord?id=CVE-2022-34750 TASK DETAIL https://phabricator.wikimedia.org/T308659 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Lucas_Werkmeister_WMDE, MoritzMuehlenhoff Cc: MoritzMuehlenhoff, Zabe, sbassett, Erdinc_Ciftci_WMDE, Michael, ItamarWMDE, guergana.tzatchkova, noarave, karapayneWMDE, Manuel, Lydia_Pintscher, Aklapper, Lucas_Werkmeister_WMDE, Hellket777, Astuthiodit_1, 786, Biggs657, Invadibot, Devnull, Universal_Omega, maantietaja, Juan90264, Alter-paule, Beast1978, Un1tY, Akuckartz, Hook696, Kent7301, joker88john, CDanis, DannyS712, CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, Mahir256, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Bodhisattwa, Neuronton, Scott_WUaS, Wong128hk, Luke081515, Wikidata-bugs, aude, Bawolff, Grunny, csteipp, Mbch331, Jay8g, Krenair, Legoktm ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T308659: Validate lemma length in Special:NewLexeme(Alpha) and label/description/aliases length in Special:NewProperty (CVE-2022-34750)
MoritzMuehlenhoff renamed this task from "Validate lemma length in Special:NewLexeme(Alpha) and label/description/aliases length in Special:NewProperty" to "Validate lemma length in Special:NewLexeme(Alpha) and label/description/aliases length in Special:NewProperty (CVE-2022-34750)". TASK DETAIL https://phabricator.wikimedia.org/T308659 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Lucas_Werkmeister_WMDE, MoritzMuehlenhoff Cc: MoritzMuehlenhoff, Zabe, sbassett, Erdinc_Ciftci_WMDE, Michael, ItamarWMDE, guergana.tzatchkova, noarave, karapayneWMDE, Manuel, Lydia_Pintscher, Aklapper, Lucas_Werkmeister_WMDE, Hellket777, Astuthiodit_1, 786, Biggs657, Invadibot, Devnull, Universal_Omega, maantietaja, Juan90264, Alter-paule, Beast1978, Un1tY, Akuckartz, Hook696, Kent7301, joker88john, CDanis, DannyS712, CucyNoiD, Nandana, Gaboe420, Giuliamocci, Cpaulf30, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, Mahir256, QZanden, LawExplorer, Lewizho99, Maathavan, _jensen, rosalieper, Bodhisattwa, Neuronton, Scott_WUaS, Wong128hk, Luke081515, Wikidata-bugs, aude, Bawolff, Grunny, csteipp, Mbch331, Jay8g, Krenair, Legoktm ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T294693: XSS on page information Wikibase central description (CVE-2021-45473)
MoritzMuehlenhoff renamed this task from "XSS on page information Wikibase central description" to "XSS on page information Wikibase central description (CVE-2021-45473)". TASK DETAIL https://phabricator.wikimedia.org/T294693 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Urbanecm, MoritzMuehlenhoff Cc: Zabe, gerritbot, Reedy, Mohammed_Sadat_WMDE, Rosalie_WMDE, Lea_WMDE, dang, Deniz_WMDE, rosalieper, Samantha_Alipio_WMDE, toan, sbassett, Tarrow, Tgr, Jakob_WMDE, WMDE-leszek, Michael, noarave, Mstyles, ItamarWMDE, Lucas_Werkmeister_WMDE, Addshore, Urbanecm, Aklapper, Dylsss, Invadibot, Devnull, maantietaja, Y.ssk, Akuckartz, Dsharpe, DannyS712, Nandana, lucamauri, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, LawExplorer, _jensen, Scott_WUaS, Wong128hk, Luke081515, Wikidata-bugs, aude, Bawolff, Lydia_Pintscher, Grunny, He7d3r, csteipp, Mbch331, Jay8g, Krenair, Legoktm, chasemp ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T297570: XSS in Wikibase using formatter URL (CVE-2021-45472)
MoritzMuehlenhoff renamed this task from "XSS in Wikibase using formatter URL" to "XSS in Wikibase using formatter URL (CVE-2021-45472)". TASK DETAIL https://phabricator.wikimedia.org/T297570 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Lucas_Werkmeister_WMDE, MoritzMuehlenhoff Cc: Zabe, Bugreporter, hashar, Jakob_WMDE, noarave, toan, Rosalie_WMDE, karapayneWMDE, Silvan_WMDE, sbassett, WMDE-leszek, Michael, Lucas_Werkmeister_WMDE, Addshore, Aklapper, Dylsss, Invadibot, Devnull, maantietaja, Y.ssk, Akuckartz, DannyS712, Nandana, lucamauri, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, Bawolff, Lydia_Pintscher, He7d3r, Mbch331, Legoktm ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T296578: Globally blocked IPs can edit EntitySchema items (CVE-2021-45471)
MoritzMuehlenhoff renamed this task from "Globally blocked IPs can edit EntitySchema items" to "Globally blocked IPs can edit EntitySchema items (CVE-2021-45471)". TASK DETAIL https://phabricator.wikimedia.org/T296578 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: Zabe, Rosalie_WMDE, Addshore, toan, sbassett, karapayneWMDE, Manuel, Lydia_Pintscher, Urbanecm, Lucas_Werkmeister_WMDE, Michael, Aklapper, Dylsss, Invadibot, Devnull, maantietaja, SCIdude, Akuckartz, pdehaye, Dsharpe, FriedrickMILBarbarossa, DannyS712, Nandana, Tks4Fish, Jony, Lahi, Gq86, Andrawaag, GoranSMilovanovic, SPoore, QZanden, EBjune, YULdigitalpreservation, LawExplorer, Salgo60, JJMC89, _jensen, rosalieper, Tegel, RuyP, JEumerus, Scott_WUaS, Taketa, Matiia, Einsbor, Wong128hk, Luke081515, MisterSynergy, Bsadowski1, Mardetanha, abian, Barras, Wikidata-bugs, Snowolf, Savh, aude, Pmlineditor, Bawolff, NahidSultan, DerHexer, Shanmugamp7, Trijnstel, Melos, Grunny, Stryn, csteipp, Mbch331, Jay8g, Glaisher, Krenair, Legoktm, chasemp ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T294961: Resolve kernel hang on wcqs* instances
MoritzMuehlenhoff added a comment. In T294961#7534879 <https://phabricator.wikimedia.org/T294961#7534879>, @EBernhardson wrote: > Another round of import tests completed, nothing fell over. Calling this done for now. We still to add profile::base::linux419 to the WCQS roles, otherwise with the next reimage they'd get installed with Linux 4.9 again. TASK DETAIL https://phabricator.wikimedia.org/T294961 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: Legoktm, Dzahn, MoritzMuehlenhoff, RKemper, Aklapper, Gehel, CBogen, ttaylor, Zache, Fuzheado, So9q, GFontenelle_WMF, EBernhardson, joanna_borun, Invadibot, MPhamWMF, Devnull, maantietaja, lmata, Muchiri124, Akuckartz, RhinosF1, Legado_Shulgin, ReaperDawn, Nandana, Namenlos314, Davinaclare77, Techguru.pc, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Hfbn0, QZanden, EBjune, merbst, LawExplorer, Zppix, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, faidon, Addshore, Mbch331, Jay8g, fgiunchedi ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T294961: Resolve kernel hang on wcqs* instances
MoritzMuehlenhoff added a comment. In T294961#7479399 <https://phabricator.wikimedia.org/T294961#7479399>, @EBernhardson wrote: > Without having better information, i would guess we are triggering a deadlock somewhere in the kernel related to disk writes? But no particular locking is mentioned in the traces so perhaps not. As it affected all 6 instances it seems fairly reproducable, although perhaps we should try and take the application out of the picture and try to reproduce with some simple tools to generate disk writes? This might be fairly tedious, the error took more than a day to trigger and the only idea I have for reproducing externally is to generate random write loads of similar size. > > @MoritzMuehlenhoff as someone who deals with the kernel often, any suggestions for where to investigate? It looks to be deadlocking somewhere deep in the I/O layer, there are some sysctls and kernel settings that we could fine-tune, but given that this only happens after a full day run, that'll be a slow going process. I see two next steps that we should try: 1. Looking at Netbox these were purchased in March, but that doesn't necessarily mean that the system firmware is up-to-date. Often these are delivered with the firmware version once the specific server model was originally shipped. We could ask DC ops to upgrade one of the servers to the latest versions and re-test. 2. These are Buster systems, but we can try the 5.10 kernel available from Debian backports (installable with "apt-get install linux-image-5.10.0-0.bpo.9"). We have a handful of services which also the kernel on buster already (e.g. the Hadoop and stat* hosts with the AMD GPUs). TASK DETAIL https://phabricator.wikimedia.org/T294961 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: MoritzMuehlenhoff, RKemper, Aklapper, Gehel, CBogen, ttaylor, Zache, Fuzheado, So9q, GFontenelle_WMF, EBernhardson, joanna_borun, Invadibot, MPhamWMF, Devnull, maantietaja, lmata, Muchiri124, Akuckartz, RhinosF1, Legado_Shulgin, ReaperDawn, Nandana, Namenlos314, Davinaclare77, Techguru.pc, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Hfbn0, QZanden, EBjune, merbst, LawExplorer, Zppix, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, faidon, Addshore, Mbch331, Jay8g, fgiunchedi ___ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
[Wikidata-bugs] [Maniphest] T274751: Upgrade firmware on wdqs1009
MoritzMuehlenhoff triaged this task as "Medium" priority. TASK DETAIL https://phabricator.wikimedia.org/T274751 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: Gehel, MoritzMuehlenhoff, Ramtin0071, MPhamWMF, Devnull, lmata, Muchiri124, CBogen, Akuckartz, Legado_Shulgin, Nandana, Namenlos314, Davinaclare77, Qtn1293, Techguru.pc, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, EBjune, merbst, LawExplorer, Zppix, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, Wong128hk, Cmjohnson, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, Southparkfan, faidon, Addshore, Mbch331, Rxy, Jay8g, fgiunchedi ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] T213089: Upgrade memcached cluster to Debian Buster
MoritzMuehlenhoff renamed this task from "Upgrade memcached cluster to Debian Stretch/Buster" to "Upgrade memcached cluster to Debian Buster". TASK DETAIL https://phabricator.wikimedia.org/T213089 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: Ladsgroup, Krenair, elukey, jijiki, faidon, Paladox, Aklapper, Krinkle, aaron, Joe, MoritzMuehlenhoff, Devnull, lmata, wkandek, JMeybohm, Muchiri124, Alter-paule, Beast1978, Un1tY, Akuckartz, Hook696, WDoranWMF, Kent7301, holger.knust, EvanProdromou, joker88john, Legado_Shulgin, CucyNoiD, Nandana, Gaboe420, Jony, Giuliamocci, Davinaclare77, Qtn1293, Cpaulf30, Techguru.pc, Lahi, Gq86, Af420, Bsandipan, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, LawExplorer, Vali.matei, Lewizho99, Zppix, Maathavan, _jensen, rosalieper, Agabi10, Scott_WUaS, Pchelolo, Wong128hk, Wikidata-bugs, aude, Mbch331, Rxy, Jay8g, fgiunchedi, Dzahn ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] T264181: Migrate WDQS to profile::java
MoritzMuehlenhoff created this task. MoritzMuehlenhoff added projects: Operations, Wikidata-Query-Service. Restricted Application added a project: Wikidata. TASK DESCRIPTION In T253553 <https://phabricator.wikimedia.org/T253553> profile::java was created, which streamlines the installation and configuration of Java (picking the correct packages/repos depending on the target release, opting in to the hardened java.security config, passing Java opts centrally and more). WDQS should also switch to it. TASK DETAIL https://phabricator.wikimedia.org/T264181 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: Aklapper, MoritzMuehlenhoff, lmata, CBogen, Akuckartz, darthmon_wmde, Legado_Shulgin, Nandana, Namenlos314, Davinaclare77, Qtn1293, Techguru.pc, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, EBjune, merbst, LawExplorer, Zppix, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, faidon, Mbch331, Rxy, Jay8g, fgiunchedi ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Closed] T217261: Beta site api.phps gets 404
MoritzMuehlenhoff closed this task as "Resolved". MoritzMuehlenhoff claimed this task. MoritzMuehlenhoff added a comment. Restricted Application added a project: User-Ryasmeen. Fixed, I reverted the packages for now, I'll need to revisit this in mw-vagrant or so. TASK DETAIL https://phabricator.wikimedia.org/T217261 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: Krenair, MoritzMuehlenhoff, kostajh, greg, Ryasmeen, Ramsey-WMF, Aklapper, Addshore, Nandana, Lahi, Gq86, Bsandipan, GoranSMilovanovic, QZanden, LawExplorer, _jensen, Luke081515, Wikidata-bugs, aude, Mbch331, Rxy, Jay8g ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Triaged] T205542: Add cumin aliases for each wdqs clusters
MoritzMuehlenhoff triaged this task as "Normal" priority. TASK DETAILhttps://phabricator.wikimedia.org/T205542EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: Aklapper, Mathew.onipe, Gehel, AndyTan, Davinaclare77, Qtn1293, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, EBjune, merbst, LawExplorer, Zppix, Jonas, Xmlizer, Wong128hk, jkroll, Smalyshev, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, faidon, Mbch331, Jay8g, fgiunchedi___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Assigned] T204364: Rate limit wdqs logs
MoritzMuehlenhoff assigned this task to Gehel. TASK DETAILhttps://phabricator.wikimedia.org/T204364EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Gehel, MoritzMuehlenhoffCc: gerritbot, Smalyshev, fgiunchedi, Gehel, Aklapper, NebulousIris, AndyTan, Gaboe420, Versusxo, Majesticalreaper22, Giuliamocci, Davinaclare77, Adrian1985, Qtn1293, Cpaulf30, Lahi, Gq86, Baloch007, Darkminds3113, Bsandipan, Lordiis, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Adik2382, Th3d3v1ls, Hfbn0, Ramalepe, Liugev6, QZanden, EBjune, merbst, LawExplorer, Lewizho99, Zppix, Maathavan, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, faidon, Mbch331, Jay8g, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Triaged] T198049: Investigate possible outage on wikidata on 25th June - 04:13AM UTC - 05:27AM UTC
MoritzMuehlenhoff triaged this task as "Normal" priority. TASK DETAILhttps://phabricator.wikimedia.org/T198049EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: jcrespo, hoo, Lydia_Pintscher, daniel, Ladsgroup, Marostegui, AndyTan, Davinaclare77, Qtn1293, Lahi, Gq86, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, LawExplorer, Zppix, Wong128hk, Wikidata-bugs, aude, faidon, Mbch331, Jay8g, fgiunchedi___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Triaged] T195797: Stas needs root access on WDQS test cluster
MoritzMuehlenhoff triaged this task as "Normal" priority. TASK DETAILhttps://phabricator.wikimedia.org/T195797EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: gerritbot, Gehel, Aklapper, Smalyshev, Versusxo, Majesticalreaper22, Giuliamocci, Davinaclare77, Adrian1985, Qtn1293, Cpaulf30, Lahi, Gq86, Baloch007, Darkminds3113, Bsandipan, Lordiis, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Adik2382, Th3d3v1ls, Hfbn0, Ramalepe, Liugev6, QZanden, EBjune, merbst, LawExplorer, Avner, Lewizho99, Zppix, Maathavan, Jonas, FloNight, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, RobH, MarcoAurelio, aude, Tobias1984, Manybubbles, mark, JanZerebecki, faidon, Mbch331, Rxy, Jay8g, Krenair, fgiunchedi___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T184434: prometheus-blazegraph-exporter failing to start after reboot
MoritzMuehlenhoff added a comment. That's a bug in the systemd unit of prometheus-blazegraph-exporter, it needs to start after Blazegraph, but the current version doesn't declare that, so systemd tries to start it when multi-user.target is reached. I can fix it some time this week.TASK DETAILhttps://phabricator.wikimedia.org/T184434EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, Aklapper, Muehlenhoff, Gehel, Qtn1293, Lahi, Gq86, Darkminds3113, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, EBjune, merbst, LawExplorer, Avner, Zppix, Jonas, FloNight, Xmlizer, jkroll, Smalyshev, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, faidon, Mbch331, Jay8g, fgiunchedi___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Changed Subscribers] T178271: Allow Kirk and Martijn (JClarity) access to our WDQS production servers
MoritzMuehlenhoff added subscribers: RStallman-legalteam, MoritzMuehlenhoff.MoritzMuehlenhoff added a comment. I'm adding @RStallman-legalteam for preparing the NDAs for Martijn and Kirk.TASK DETAILhttps://phabricator.wikimedia.org/T178271EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: EBjune, MoritzMuehlenhoffCc: MoritzMuehlenhoff, RStallman-legalteam, Karianna, debt, EBjune, Gehel, Aklapper, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, merbst, Avner, Zppix, Jdrewniak, Jonas, FloNight, Xmlizer, jkroll, Smalyshev, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, mark, JanZerebecki, faidon, Mbch331, Rxy, Jay8g, Krenair, fgiunchedi___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Closed] T170039: Pages display Lua error in mw.wikibase.entity.lua
MoritzMuehlenhoff closed this task as "Resolved".MoritzMuehlenhoff claimed this task.MoritzMuehlenhoff added a comment. In T170039#3550054, @Vachovec1 wrote: I recommend to close this bug as resolved (or should we wait until @Johan sends the messages?). Yeah, let's close this. Notifying people for cleanups is orthogonal.TASK DETAILhttps://phabricator.wikimedia.org/T170039EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: Johan, MoritzMuehlenhoff, ksmith, 4shadoww, Dvorapa, Mr.Ibrahem, Ladsgroup, eranroz, IKhitron, Kipod, zhuyifei1999, PokestarFan, hoo, Anomie, gerritbot, thiemowmde, Salgo60, AnotherLadsgroup, RolandUnger, Larske, Arbnos, daniel, putnik, Framawiki, Zebulon84, Thibaut120094, TerraCodes, Jay8g, Liuxinyu970226, aude, Vachovec1, Zdzislaw, ValterVB, Agabi10, Ankry, Jarekt, Lydia_Pintscher, matej_suchanek, JohnBlackburne, Aklapper, Johnuniq, Cosine02, Lordiis, GoranSMilovanovic, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, QZanden, Lewizho99, JJMC89, Maathavan, SundanceRaphael, Izno, Luke081515, Nirmos, Cwek, Wikidata-bugs, Dinoguy1000, jayvdb, MrStradivarius, Arlolra, TheDJ, Jackmcbarn, Mbch331___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T170039: Pages display Lua error in mw.wikibase.entity.lua
MoritzMuehlenhoff added a comment. Sound good, we can close this bug end of the week if nothing further gets reported.TASK DETAILhttps://phabricator.wikimedia.org/T170039EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, ksmith, 4shadoww, Dvorapa, Mr.Ibrahem, Ladsgroup, eranroz, IKhitron, Kipod, zhuyifei1999, PokestarFan, hoo, Anomie, gerritbot, thiemowmde, Salgo60, AnotherLadsgroup, RolandUnger, Larske, Arbnos, daniel, putnik, Framawiki, Zebulon84, Thibaut120094, TerraCodes, Jay8g, Liuxinyu970226, aude, Vachovec1, Zdzislaw, ValterVB, Agabi10, Ankry, Jarekt, Lydia_Pintscher, matej_suchanek, JohnBlackburne, Aklapper, Johnuniq, Cosine02, Lordiis, GoranSMilovanovic, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, QZanden, Lewizho99, JJMC89, Maathavan, SundanceRaphael, Johan, Izno, Luke081515, Nirmos, Cwek, Wikidata-bugs, Dinoguy1000, jayvdb, MrStradivarius, Arlolra, TheDJ, Jackmcbarn, Mbch331___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Unblock] T166348: Scribunto_LuaSandboxInterpreter::callFunction: LuaSandboxFunction::call returned false
MoritzMuehlenhoff closed subtask T171166: Build and push a new hhvm-luasandbox package as "Resolved". TASK DETAILhttps://phabricator.wikimedia.org/T166348EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: PokestarFan, Liuxinyu970226, hoo, MoritzMuehlenhoff, greg, demon, thcipriani, TerraCodes, Jay8g, tstarling, mmodell, gerritbot, Anomie, Aklapper, Legoktm, Lordiis, GoranSMilovanovic, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, QZanden, Lewizho99, Maathavan, SundanceRaphael, Izno, Wikidata-bugs, aude, Dinoguy1000, jayvdb, MrStradivarius, Jackmcbarn, Mbch331, Krenair___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T170039: Pages display Lua error in mw.wikibase.entity.lua
MoritzMuehlenhoff added a comment. HHVM-Luasandbox has been upgraded to 2.0.13 in production. Please have a look whether the problem persists.TASK DETAILhttps://phabricator.wikimedia.org/T170039EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, ksmith, 4shadoww, Dvorapa, Mr.Ibrahem, Ladsgroup, eranroz, IKhitron, Kipod, zhuyifei1999, PokestarFan, hoo, Anomie, gerritbot, thiemowmde, Salgo60, AnotherLadsgroup, RolandUnger, Larske, Arbnos, daniel, putnik, Framawiki, Zebulon84, Thibaut120094, TerraCodes, Jay8g, Liuxinyu970226, aude, Vachovec1, Zdzislaw, ValterVB, Agabi10, Ankry, Jarekt, Lydia_Pintscher, matej_suchanek, JohnBlackburne, Aklapper, Johnuniq, Cosine02, Lordiis, GoranSMilovanovic, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, QZanden, Lewizho99, JJMC89, Maathavan, SundanceRaphael, Johan, Izno, Luke081515, Nirmos, Cwek, Wikidata-bugs, Dinoguy1000, jayvdb, MrStradivarius, Arlolra, TheDJ, Jackmcbarn, Mbch331___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T166348: Scribunto_LuaSandboxInterpreter::callFunction: LuaSandboxFunction::call returned false
MoritzMuehlenhoff added a comment. HHVM-Luasandbox has been upgraded to 2.0.13 in production, let's see whether this fixes the bug.TASK DETAILhttps://phabricator.wikimedia.org/T166348EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: PokestarFan, Liuxinyu970226, hoo, MoritzMuehlenhoff, greg, demon, thcipriani, TerraCodes, Jay8g, tstarling, mmodell, gerritbot, Anomie, Aklapper, Legoktm, Lordiis, GoranSMilovanovic, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, QZanden, Lewizho99, Maathavan, SundanceRaphael, Izno, Wikidata-bugs, aude, Dinoguy1000, jayvdb, MrStradivarius, Jackmcbarn, Mbch331, Krenair___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T162245: Enable GC for HHVM CLI (at least for dump runners)
MoritzMuehlenhoff added a comment. We're now using 3.18 in production (except snapshot* and video scalers hosts, which are still on trusty)TASK DETAILhttps://phabricator.wikimedia.org/T162245EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, elukey, gerritbot, daniel, ArielGlenn, Joe, Aklapper, hoo, GoranSMilovanovic, Adik2382, Th3d3v1ls, Hfbn0, Ramalepe, Liugev6, QZanden, Marostegui, Litanwei, Lewizho99, Zppix, Maathavan, Izno, Wikidata-bugs, aude, Svick, faidon, Mbch331, Jay8g, fgiunchedi, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T165074: CI tests failing with segfault
MoritzMuehlenhoff added a comment. @Ladsgroup I'm not sure how that Travis setup is configured, but if you make it install HHVM 3.18.2+dfsg-1+wmf3, that should be fixed.TASK DETAILhttps://phabricator.wikimedia.org/T165074EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: hashar, MoritzMuehlenhoffCc: gerritbot, ArielGlenn, Stashbot, TerraCodes, Jay8g, Anomie, Ladsgroup, Mattflaschen-WMF, Paladox, greg, MoritzMuehlenhoff, Lucas_Werkmeister_WMDE, Jdforrester-WMF, hashar, daniel, Aklapper, Reedy, GoranSMilovanovic, Adik2382, Th3d3v1ls, Hfbn0, Ramalepe, Liugev6, QZanden, Litanwei, Lewizho99, Zppix, Maathavan, Izno, thcipriani, Wikidata-bugs, aude, faidon, Mbch331, fgiunchedi, Joe, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T165074: CI tests failing with segfault
MoritzMuehlenhoff added a comment. (Tested in mediawiki-vagrant)TASK DETAILhttps://phabricator.wikimedia.org/T165074EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: hashar, MoritzMuehlenhoffCc: gerritbot, ArielGlenn, Stashbot, TerraCodes, Jay8g, Anomie, Ladsgroup, Mattflaschen-WMF, Paladox, greg, MoritzMuehlenhoff, Lucas_Werkmeister_WMDE, Jdforrester-WMF, hashar, daniel, Aklapper, Reedy, GoranSMilovanovic, Adik2382, Th3d3v1ls, Hfbn0, Ramalepe, Liugev6, QZanden, Litanwei, Lewizho99, Zppix, Maathavan, Izno, thcipriani, Wikidata-bugs, aude, faidon, Mbch331, fgiunchedi, Joe, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T165074: CI tests failing with segfault
MoritzMuehlenhoff added a comment. I've built new HHVM packages with a patch as proposed by upstream in https://github.com/facebook/hhvm/issues/7779, that avoids the segfault and makes the phpunit tests pass with 3.18 again. I'll upload the new packages later on, after that we can revert the HHVM 3.12 hack again.TASK DETAILhttps://phabricator.wikimedia.org/T165074EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: hashar, MoritzMuehlenhoffCc: gerritbot, ArielGlenn, Stashbot, TerraCodes, Jay8g, Anomie, Ladsgroup, Mattflaschen-WMF, Paladox, greg, MoritzMuehlenhoff, Lucas_Werkmeister_WMDE, Jdforrester-WMF, hashar, daniel, Aklapper, Reedy, GoranSMilovanovic, Adik2382, Th3d3v1ls, Hfbn0, Ramalepe, Liugev6, QZanden, Litanwei, Lewizho99, Zppix, Maathavan, Izno, thcipriani, Wikidata-bugs, aude, faidon, Mbch331, fgiunchedi, Joe, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T165074: CI tests failing with segfault
MoritzMuehlenhoff added a comment. The new HHVM version has been extensively tested on five canary servers in production for 5-6 week now. As per Reedy's backtrace from above it has in fact identified the crash we already knew https://phabricator.wikimedia.org/T162586 (reported upstream at https://github.com/facebook/hhvm/issues/7779 but so far there wasn't a better reproducer than "expose 3 days of Wikimedia production traffic" for it :-) So the test suite has proven to be really useful. Going forward from here, we should extend CI to also cover the "experimental" component from our repo (at least for partial CI runs). That would have identified that much quicker.TASK DETAILhttps://phabricator.wikimedia.org/T165074EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: hashar, MoritzMuehlenhoffCc: Stashbot, TerraCodes, Jay8g, Anomie, Ladsgroup, Mattflaschen-WMF, Paladox, greg, MoritzMuehlenhoff, Lucas_Werkmeister_WMDE, Jdforrester-WMF, hashar, daniel, Aklapper, Reedy, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, Litanwei, Zppix, Izno, thcipriani, Wikidata-bugs, aude, faidon, Mbch331, fgiunchedi, Joe, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Updated] T145819: Jobs invoking SiteConfiguration::getConfig cause HHVM to fail updating the bytecode cache due to being filesize limited to 512MBytes
MoritzMuehlenhoff removed projects: MW-1.28-release (WMF-deploy-2016-09-20_(1.28.0-wmf.20)), HHVM. TASK DETAILhttps://phabricator.wikimedia.org/T145819EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: thcipriani, Anomie, aaron, MZMcBride, Tobi_WMDE_SW, FastLizard4, JJMC89, zeljkofilipin, Lydia_Pintscher, daniel, aude, Addshore, Aklapper, greg, Legoktm, demon, gerritbot, Stashbot, hashar, QZanden, Salgo60, D3r1ck01, Izno, MGChecker, Luke081515, Wikidata-bugs, ArielGlenn, Mbch331, Jay8g, mmodell___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T162245: Enable GC for HHVM CLI (at least for dump runners)
MoritzMuehlenhoff added a comment. Note that also requires a migration of the snapshot hosts to jessie (which was blocked so far by a bug in bz2 stream handling, which is fixed in 3.18 as well)TASK DETAILhttps://phabricator.wikimedia.org/T162245EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, elukey, gerritbot, daniel, ArielGlenn, Joe, Aklapper, hoo, Adik2382, Th3d3v1ls, Hfbn0, Ramalepe, Liugev6, QZanden, Salgo60, Lewizho99, Zppix, Maathavan, D3r1ck01, Izno, Wikidata-bugs, aude, Svick, faidon, Mbch331, Jay8g, fgiunchedi, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Triaged] T162245: Enable GC for HHVM CLI (at least for dump runners)
MoritzMuehlenhoff triaged this task as "Normal" priority. TASK DETAILhttps://phabricator.wikimedia.org/T162245EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: daniel, ArielGlenn, Joe, Aklapper, hoo, Th3d3v1ls, Hfbn0, QZanden, Salgo60, Zppix, D3r1ck01, Izno, Wikidata-bugs, aude, Svick, faidon, Mbch331, Jay8g, fgiunchedi, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Updated] T161695: Wikidata dump maintenance scripts cause HHVM to leak memory heavily
MoritzMuehlenhoff added a project: HHVM. TASK DETAILhttps://phabricator.wikimedia.org/T161695EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: ArielGlenn, Lydia_Pintscher, Aklapper, hoo, QZanden, D3r1ck01, Izno, Wikidata-bugs, aude, Svick, Mbch331, Joe, jeremyb___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Closed] T160924: Add goransm to ldap/wmde group
MoritzMuehlenhoff closed this task as "Resolved".MoritzMuehlenhoff added a comment. @GoranSMilovanovic : I've added you to the wmde group.TASK DETAILhttps://phabricator.wikimedia.org/T160924EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, Abraham, Tobi_WMDE_SW, GoranSMilovanovic, Addshore, Aklapper, Th3d3v1ls, Hfbn0, QZanden, Zppix, elukey, D3r1ck01, Izno, Wikidata-bugs, aude, faidon, Jdforrester-WMF, Mbch331, Jay8g, Krenair, fgiunchedi, demon, greg___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T160924: Add goransm to ldap/wmde group
MoritzMuehlenhoff added a comment. (Generally when onboarding someone new, feel free to simply add the LDAP group requests to the ticket requesting shell access)TASK DETAILhttps://phabricator.wikimedia.org/T160924EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, Abraham, Tobi_WMDE_SW, GoranSMilovanovic, Addshore, Aklapper, Th3d3v1ls, Hfbn0, QZanden, Zppix, elukey, D3r1ck01, Izno, Wikidata-bugs, aude, faidon, Jdforrester-WMF, Mbch331, Jay8g, Krenair, fgiunchedi, demon, greg___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Claimed] T160924: Add goransm to ldap/wmde group
MoritzMuehlenhoff claimed this task.MoritzMuehlenhoff added a comment. I'll do that once the NDA is on fileTASK DETAILhttps://phabricator.wikimedia.org/T160924EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: MoritzMuehlenhoff, Abraham, Tobi_WMDE_SW, GoranSMilovanovic, Addshore, Aklapper, Th3d3v1ls, Hfbn0, QZanden, Zppix, elukey, D3r1ck01, Izno, Wikidata-bugs, aude, faidon, Jdforrester-WMF, Mbch331, Jay8g, Krenair, fgiunchedi, demon, greg___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Triaged] T137238: Tune WDQS caching headers
MoritzMuehlenhoff triaged this task as "Normal" priority. TASK DETAILhttps://phabricator.wikimedia.org/T137238EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: MoritzMuehlenhoffCc: gerritbot, Smalyshev, Aklapper, Zppix, Jonas, Gehel, BBlack, Avner, Lewizho99, Maathavan, debt, D3r1ck01, FloNight, Xmlizer, Izno, jkroll, Wikidata-bugs, Jdouglas, aude, Deskana, Manybubbles, Mbch331, Jay8g___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T132387: wdqs1002 does not reboot, stops at "Scanning for devices"
MoritzMuehlenhoff added a comment. The reboot was for the upgrade to Linux 4.4 TASK DETAIL https://phabricator.wikimedia.org/T132387 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: MoritzMuehlenhoff, RobH, Smalyshev, Gehel, Joe, Volans, Aklapper, Avner, debt, TerraCodes, Mschon, D3r1ck01, FloNight, Izno, Cmjohnson, jkroll, Wikidata-bugs, Jdouglas, aude, Deskana, Manybubbles, Mbch331, Jay8g, fgiunchedi ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T132387: wdqs1002 does not reboot, stops at "Scanning for devices"
MoritzMuehlenhoff added a comment. It's really strange that it initiated a PXE install, both wdqs* servers were rebooted w/o problems for the keyctl security bug (and no additional BIOS config were needed). TASK DETAIL https://phabricator.wikimedia.org/T132387 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MoritzMuehlenhoff Cc: MoritzMuehlenhoff, RobH, Smalyshev, Gehel, Joe, Volans, Aklapper, Avner, debt, TerraCodes, Mschon, D3r1ck01, FloNight, Izno, Cmjohnson, jkroll, Wikidata-bugs, Jdouglas, aude, Deskana, Manybubbles, Mbch331, Jay8g, fgiunchedi ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Changed Subscribers] T105638: RFC: Streamlining Composer usage
MoritzMuehlenhoff added a subscriber: MoritzMuehlenhoff. TASK DETAIL https://phabricator.wikimedia.org/T105638 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: JanZerebecki, MoritzMuehlenhoff Cc: MoritzMuehlenhoff, dduvall, Tgr, mobrovac, GWicke, Addshore, Qgil, Spage, greg, tstarling, aude, hoo, daniel, zeljkofilipin, thcipriani, mmodell, bd808, csteipp, Legoktm, Krinkle, hashar, JanZerebecki, Aklapper, Lynhg, Wikidata-bugs, Malyacko, jayvdb, Mbch331, Jay8g, Ltrlg, Krenair ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T90115: BlazeGraph Security Review
MoritzMuehlenhoff added a comment. I don't have any concerns/objections about setting this up, I mostly wanted to know the status of the various countermeasures mentioned in this task. > What kind of measures do you propose? systemd supports various features to restrict running processes, e.g. for restricting filesystem access or through disallowing potentially harmful syscalls using seccomp-bpf. This doesn't need to be present in the initial deployment, but it would be good to add in a followup step. TASK DETAIL https://phabricator.wikimedia.org/T90115 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: csteipp, MoritzMuehlenhoff Cc: ksmith, JanZerebecki, Bene, MoritzMuehlenhoff, GWicke, Thompsonbry.systap, Smalyshev, Joe, Liuxinyu970226, csteipp, Beebs.systap, Haasepeter, Aklapper, Manybubbles, jkroll, Wikidata-bugs, Jdouglas, aude, Krenair, Malyacko ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T90115: BlazeGraph Security Review
MoritzMuehlenhoff added a comment. In https://phabricator.wikimedia.org/T90115#1512306, @csteipp wrote: > @Joe / @MoritzMuehlenhoff, ping again on this-- are you guys comfortable that > we can detect/contain Blazegraph if it gets exploited? Various countermeasures are mentioned, have they been implemented for the planned test deployment? - Limit memory usage of queries - Limit maximum duration of queries - Parsing the AST of the query to filter malicious queries It also seems useful to limit the number of parallel queries per IP. We'll be able to detect attacks against availability by our usual monitoring (availability would be my biggest concern for this scenario, I doubt there are many/other installations with a setup like this) We can implement a number of countermeasures to contain an attacker leveraging code injection inside BlazeGraph or through the JVM with the privileges of the BlazeGraph process. We need to make sure that Linux kernel updates on the BlazeGraph servers are possible without major impact/downtime to be able to quickly deploy fixes for Linux vulnerabilitiies allowing privilege escalation. TASK DETAIL https://phabricator.wikimedia.org/T90115 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: csteipp, MoritzMuehlenhoff Cc: ksmith, JanZerebecki, Bene, MoritzMuehlenhoff, GWicke, Thompsonbry.systap, Smalyshev, Joe, Liuxinyu970226, csteipp, Beebs.systap, Haasepeter, Aklapper, Manybubbles, jkroll, Wikidata-bugs, Jdouglas, aude, Krenair, Malyacko, P.Copp ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
[Wikidata-bugs] [Maniphest] [Commented On] T90115: BlazeGraph Security Review
MoritzMuehlenhoff added a comment. @Beebs.systap: For the Blazegraph security announcements, please add mor...@wikimedia.org to the distribution list if you push out security releases etc, there's no specific ops-security mailing at this point (and the general purpose ops lists reach quite a few people). @csteipp: I still have it on my TODO list to reorg the security groups in Phabricator (and associated mail exploders) a bit, I'll send you a separate mail later. TASK DETAIL https://phabricator.wikimedia.org/T90115 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: csteipp, MoritzMuehlenhoff Cc: MoritzMuehlenhoff, GWicke, Thompsonbry.systap, Smalyshev, Joe, Liuxinyu970226, csteipp, Beebs.systap, Haasepeter, Aklapper, Manybubbles, jkroll, Wikidata-bugs, Jdouglas, aude, daniel, JanZerebecki, Krenair ___ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
