Talk:SAC Meeting 2017-12-07

New Website status report
Regina in middle of install ldap plugin for wordpress. LDAP plugin installed. Went with https://wordpress.org/plugins/wpdirauth/ was able to convert a sample of existing logins to LDAP and had some folks try Vicky Vergara, Jody Garnett, Even Rouault, Sandro Santilli.

Going to write a script to map matching local accounts to LDAP.

Also fixed hard-coded links, made relative that Jody found - using SQL update on some tables.

sysadmin contract
Board decided on December 7th 2017 meeting that the contract can be signed, Helena Mitasova (current vice-president) will take care of it but needs the document to be signed. I (strk) asked Alex and Martin about that, waiting for a reply

Transcript
20:00:20	jgarnett:	good day! 20:00:31	robe2:	okay everyone ready to meet 20:00:35	jgarnett:	I have a few moments to say hi :)   20:00:45	robe2:	by the way jgarnett I'm doing ldap install now    20:00:55	robe2:	didn't like the first ldap plugin I tried now up to my second.    20:01:15	jgarnett:	excellent! I confirmed I can edit, and wanted to check with you before inviting people to do so ...    20:01:22	robe2:	Okay I'll start with wordpress status    20:01:47	jgarnett:	excellent :) 20:02:00	robe2:	I should have LDAP configured today which at that point you should be able to log in with your old get interactive assigned account or your new 20:02:13	robe2:	I'm setting to auto create accounts if account does not exist on first login 20:02:22	robe2:	I'll keep you posted when its ready to test 20:02:45		* strk wears the burocrat hat 20:02:46	robe2:	as far as hard-coded get interactive, it's easy enough I can fix those if that is all you see wrong Jody 20:03:05	strk:	we should start meetings with roll call, elect chair and scribe 20:03:15	jgarnett:	my update is easier, marketing committee is done checking that the content/functionality is ready and "signed off" on all the line items we can. 20:03:18	robe2:	strk you have a useless burocrat comment to make 20:03:28		* robe2 thinks all burocrats are useless 20:03:31	jgarnett:	This leaves SAC with 3 or 4 line items to sign off on before contract is paid. 20:03:33		* strk takes the hat off 20:04:11	robe2:	here is the line items - https://lists.osgeo.org/pipermail/sac/2017-November/008923.html 20:04:12	sigabrt:	Title: [SAC] Fwd: component 2 review (at lists.osgeo.org) 20:04:39	robe2:	so I should be done today with item 3.3.2.19 20:04:39	jgarnett:	that mail missed one: 20:04:56	jgarnett:	3.3.2.1 General theme components <-- this was waiting on transfer of wordpress assets to some git repo? May be done already ... 20:05:19	robe2:	jgarnett I don't think Jeffrey got me that document he promised about general setup he did 20:05:31	robe2:	though I've been half asleep so I could have missed it   20:05:48	jgarnett:	We can wait to confirm, if you can send a reminder email. 20:05:59	robe2:	I think that's the only thing left to make me feel confident that SAC can handle the remaining items 20:06:11	robe2:	Okay will send that to him 20:07:31	jgarnett:	that may be all we have to discuss today 20:07:51	jgarnett:	unless you have guidence about inviting people to edit again 20:10:03	jgarnett:	it went quiet are we in an IRC bubble again? 20:10:25	robe2:	jgarnett after I install -- was thinking a couple of us can test e.g. you, me, cvvergara 20:10:54	robe2:	then we can decide if we want to remap existing accounts to ldap or just have people resign - and how we want to map osgeo orgs to wp permissions 20:11:37	jgarnett:	okay, thanks for the clarification. Will hold off sending email invite. 20:12:26	strk:	so second agenda item ? 20:12:42		* strk belives in burocracy 20:12:54	strk:	isn't all coding about creating burocracies 20:13:40	robe2:	second agenda item - sys contract 20:13:50	robe2:	looks like Alex isn't here to fill us in on that 20:13:54	strk:	neither Alex nor Martin are here 20:14:02	strk:	but I know I mailed president@osgeo 20:14:17	robe2:	okay can you put that on discuss tab 20:14:19	strk:	she said today board meeting approved signing 20:14:56	robe2:	I'll fill in the discuss tab for wordpress after I have ldap login working and feel content with the plugin I installed (I may need to go thru several) 20:15:26	robe2:	next Drone / Gitea status 20:15:57	robe2:	I have test gitea on winnie installed, ldap working great. Haven't experimented with restore of git.osgeo.org backup as you suggested strk :(   20:16:15	robe2:	anything to report on your end strk for gitea/drone we are all set with git version right?    20:16:25	robe2:	that it supports our antiquated git    20:17:18	strk:	I'm not sure that discussion tab is appropriate for the outcomes, anyway, filled mine    20:17:41	strk:	Gitea status: 1.3.0 is out, I'm not positive but chances are it already supports our ancient git    20:18:04	strk:	it's to be tested that it works with current Drone setup    20:18:37	robe2:	strk since I have gitea 1.3.0 installed on ianna, any easy way for me to tell. She's probably got newer git since she's a debian 9    20:19:00	strk:	I can tell from sources, one sec    20:19:52	strk:	vendor/code.gitea.io/git/git.go: GitVersionRequired = "1.7.2" # <-- that's the required version, with tag 1.3.0 of Gitea    20:20:07	robe2:	and what are we running? 20:20:15	strk:	1.7.>2 20:20:23	robe2:	okay good 20:20:24	strk:	we're fine 20:20:31	robe2:	so it's just the drone thing we are not sure of   20:20:43	strk:	yes 20:20:59	strk:	do you have a repo there ? 20:22:19	robe2:	strk I have a dumb repo 20:22:52	robe2:	I was going to ask what is the easiest way to get postgis there to test with. Or do I have to do a git checkout and commit remote or something 20:23:08	robe2:	I didn't see a menu option anywhere to copy a repo from remote 20:23:22	robe2:	so assumed it wasn't supported 20:23:48		* robe2 questions may be really stupid cause git still mystifies here 20:24:07	robe2:	test 20:24:14	robe2:	here / her 20:24:25	robe2:	sorry thought I lost my connection for a bit 20:24:47	markusN:	hi, sorry for late (kids time...) 20:25:01	robe2:	anyway strk if you want to add a repo to test be my guest or install a lower drone on ianna 20:25:08	strk:	robe2: easiest way is to mirror it   20:25:18	strk:	when you create the repo, it does support mirroring 20:25:25	strk:	then you can switch to normal 20:25:27	strk:	hi markusN 20:25:38	strk:	robe2: then you can try https://git.osgeo.org/gogs/sac/drone-server-config.git 20:25:48	markusN:	hi strk robe2 and the others 20:25:55	strk:	branch drone-0.5, tweak the configuration to point at your Gitea url and something like that 20:25:55		* markusN catches up on log 20:26:12	robe2:	you mean create the repo via gitea or just regular git local? 20:26:17	strk:	via gitea 20:26:35	strk:	you'll need to edit dronerc in that repo 20:26:38	robe2:	okay I'll see if I can figure that out from docs and maybe provide a patch if I can't   20:27:12	strk:	changing DRONE_GOGS_URL and DRONE_DATABASE_DATASOURCE 20:27:13	robe2:	hi markusN 20:27:21	strk:	oh wait... that config is meant to be used with a manually built drone binary 20:27:38	strk:	that's because we didn't have Docker on the osgeo target machine 20:27:46	strk:	now building a drone executable might not be so easy 20:27:52	strk:	but you can copy the one on the osgeo machine 20:28:01	strk:	it's just a single file anyway 20:28:12	strk:	(but needs to run on linux, not windows) 20:28:14	robe2:	strk so should I use the docker approach on ianna as I tried a while ago and screwed up   20:28:30	robe2:	strk yah it's all running on linux 20:28:32	strk:	don't use docker, copy the binary from drone.osgeo.org 20:28:56	robe2:	sorry I misspoke earlier about winnie (I forgot ianna is proxying thru her and she's not doing the work) 20:29:11	strk:	I could actually start another drone on a different port 20:29:25	robe2:	okay will do - what server is drone.osgeo.org running on   20:29:34	strk:	just ssh drone.osgeo.org :)    20:29:41	robe2:	okay    20:29:43	strk:	anyway, should be written on the wiki    20:30:03	strk:	https://wiki.osgeo.org/wiki/Drone    20:30:04	sigabrt:	Title: Drone - OSGeo (at wiki.osgeo.org)    20:30:11	robe2:	osgeo6 it says    20:30:48	robe2:	okay I'm in I'll experiment later after have wordpress ldap thing all done    20:31:28	robe2:	next topic gitlab    20:31:46	robe2:	guess we can skip since bjorn not here and he needs the new hardware anyway    20:32:13	strk:	that's always been the main reason for Gogs/Gitea to win the race    20:32:37	robe2:	next topic my favorite new hardware    20:32:56	robe2:	but guess we can skip that since Alex isn't here to fill us in and assume it requires our budget approval    20:33:22	robe2:	next topic geoforall dns - GeoForAll DNS 20:33:22	strk:	do we want to buy the service of setting up translate.osgeo.or ? 20:33:31	strk:	it's not on the agenda, but I have a quote 20:33:45	robe2:	strk is this using weblate? 20:33:45	strk:	well actually the quotes are public 20:33:49	strk:	yes, weblate 20:34:03	robe2:	just add to agenda 20:34:26	strk:	this one or next ? 20:34:35	robe2:	and the quote details to discuss -- I'm going to link all the sections to discuss sections when I am done with meeting 20:34:46	robe2:	this one and also next 20:37:01	robe2_:	sorry lost my connection 20:37:02	strk:	added under Road Ahead 20:38:16	robe2_:	as I was saying before I lost connection -- the priorties I see are -- get new website up (wordpress), ssl for all foss4g and other sites, new gitea/drone, the translate, gitlab etc 20:38:28	robe2_:	of course things can run in parallel 20:38:57	robe2_:	like I forgot the new osgeo hardware which a lot of these things probably will hinge on -- gitlab, (migrating wordpress) etc.   20:39:47	strk:	top priority is supported ssl for current services, as people are getting warnings and refusals from browsers to visit OSGeo 20:40:19	robe2_:	okay GeoForAll DNS anyone knows about that -- think last we left, we need someone with registrar access to orchestrate the move 20:40:22	strk:	and we're delegating that to contractor, so higher priority is gettign that work started 20:40:29	markusN:	yes, that's indeed imporant with the ssl 20:40:35	robe2_:	I'm not even sure who the contact person is on the GeoForALL side currently 20:40:40	strk:	absence of Martin and Alex from this meeting makes me nervous, and it's already 3 weeks or so   20:40:47	strk:	since the motion passed, we're too slow 20:41:32	robe2_:	strk well it is kinda holiday seasonny 20:41:46	markusN:	(not in Germany) 20:41:53	robe2_:	but I did expect at least one of them to be at this meeting 20:42:06	strk:	germans never party 20:42:16	robe2_:	I thought germans always party 20:42:30	markusN:	indeed 20:42:35	robe2_:	I heard germans spend 25% of their life on vacation. Or have I been misinformed 20:42:50	markusN:	...that explains the absence: party during work time 20:43:22	markusN:	I can try to ping Martin 20:43:37	robe2_:	strk did you ever hear back about increasing budget for contract 20:43:46	strk:	nope 20:44:11	strk:	I saw we have an agenda item about that, still in time to raise that up ? 20:44:11	robe2_:	I never know how much we can ask for. 20:44:20	strk:	when in dubt, ask more 20:44:24	cvvergara:	sorry I am late 20:44:45	strk:	I mean, we spent 30k for a wordpress template ? 20:44:48	robe2_:	Might make sense to find out budgets of all projects and ask some to contribute. Heck PostGIS has never used any funding we could probably pass off our non-existent use to SAC 20:45:12	robe2_:	strk to be fair it wasn't just the template 20:45:26	strk:	yeah I'm oversimplifying, sorry 20:45:27	robe2_:	there is a lot of content work and stuff orchestrated 20:45:57	robe2_:	cvvergara np I already volunteered you to test wordpress after I have ldap working :)   20:45:58	markusN:	We should just put a request to the board... like also projects do    20:46:09	strk:	but I've the feeling we'll need SAC work for keeping www.osgeo.org/osgeo_userid cgi-bin and the like ? (we need to start using an alias about that)    20:46:13	cvvergara:	ok, I can help on test    20:46:31	robe2_:	markusN yah I think that's a great idea. Ask for the sky and settle.    20:46:35	strk:	markusN: for the budget ? all comms have been asked to present a budget, and we did, it's documented on the wiki    20:46:55	robe2_:	strk yah I really want to move osgeo_userid to some other domain like you said maybe somethng like identity    20:47:09	strk:	https://wiki.osgeo.org/wiki/OSGeo_Budget_2018    20:47:10	sigabrt:	Title: OSGeo Budget 2018 - OSGeo (at wiki.osgeo.org)    20:48:32	strk:	uhm, detailed page has 20k, while summary page has 15k 20:48:42	strk:	I've no idea which one was sent to board for discussio 20:49:03	robe2_:	strk regarding ssls I think a lot of the foss4g are now in one place 20:49:04	strk:	ah, I'm wrong, it's 20k for 2018 draft 20:49:26	robe2_:	I'm going to followup with guido about moving 2017.foss4g.org back to osgeo so we can ssl it. 20:49:49	robe2_:	we can use letsencrypt for everything. Hey it's good enough for postgresql.org, it's good enough for us :)   20:49:58	strk:	of course it is    20:50:22	robe2_:	so then of urgency would be the 2018 one. I think there current might just be static and they wanted one for registration    20:51:03	robe2_:	strk and I did set letsencrypt to auto renew on the wordpress via cronjob I'll monitor but command worked fine running    20:51:32	strk:	it should create a log file, cronjob may be frequent, but it'll only do something upon expiration (3 months?)    20:51:46	robe2_:	strk yah we need Alex to up that. I'm thinking it might be a good idea to have 2 contracts running at same time (but make them a bit longer) so we have overlap    20:51:48	strk:	so you will really only know after that time    20:51:51	markusN:	I use letsencrypt for my stuff for long and it works perfectly. So let's try    20:52:03	robe2_:	don't feel comfortable with having just martin 20:52:06	strk:	it's already in use for git.osgeo.org 20:52:10	strk:	and drone.osgeo.org 20:52:29	robe2_:	and postgis.net and debbie.postgis.net and winnie.postgis.net :)   20:52:48	robe2_:	but we don't have it as default on postgis.net (because of unsecure images we are currently linked to)    20:53:43	robe2_:	okay I think that's it for meeting stuff - I'll try to itemize the easy knockoff ssls we can do and just do them if I can    20:54:11	robe2_:	others like geoforall, foss4g2018, foss4g2017 may need registrar authority transfer    20:54:38	robe2_:	anything else anyone wants to discuss or should we adjourn?    20:54:52	cvvergara:	I have nothing to say :( 20:55:11	strk:	maybe we should try another timing, of it's easier for Alex and Martin ? 20:56:03	markusN:	could be... an hour later or two 20:56:12	robe2_:	strk they are the ones that picked this time :)   20:56:19	robe2_:	it was the most convenient for them    20:56:37	robe2_:	but sure we can revisit the time    20:57:02	robe2_:	okay meeting adjorned then