Talk:SAC Meeting 2017-12-07
Jump to navigation
Jump to search
New Website status report
Regina in middle of install ldap plugin for wordpress. LDAP plugin installed. Went with https://wordpress.org/plugins/wpdirauth/ was able to convert a sample of existing logins to LDAP and had some folks try Vicky Vergara, Jody Garnett, Even Rouault, Sandro Santilli.
Going to write a script to map matching local accounts to LDAP.
Also fixed hard-coded links, made relative that Jody found - using SQL update on some tables.
sysadmin contract
Board decided on December 7th 2017 meeting that the contract can be signed, Helena Mitasova (current vice-president) will take care of it but needs the document to be signed. I (strk) asked Alex and Martin about that, waiting for a reply
Transcript
20:00:20 jgarnett: good day! 20:00:31 robe2: okay everyone ready to meet 20:00:35 jgarnett: I have a few moments to say hi :) 20:00:45 robe2: by the way jgarnett I'm doing ldap install now 20:00:55 robe2: didn't like the first ldap plugin I tried now up to my second. 20:01:15 jgarnett: excellent! I confirmed I can edit, and wanted to check with you before inviting people to do so ... 20:01:22 robe2: Okay I'll start with wordpress status 20:01:47 jgarnett: excellent :) 20:02:00 robe2: I should have LDAP configured today which at that point you should be able to log in with your old get interactive assigned account or your new 20:02:13 robe2: I'm setting to auto create accounts if account does not exist on first login 20:02:22 robe2: I'll keep you posted when its ready to test 20:02:45 * strk wears the burocrat hat 20:02:46 robe2: as far as hard-coded get interactive, it's easy enough I can fix those if that is all you see wrong Jody 20:03:05 strk: we should start meetings with roll call, elect chair and scribe 20:03:15 jgarnett: my update is easier, marketing committee is done checking that the content/functionality is ready and "signed off" on all the line items we can. 20:03:18 robe2: strk you have a useless burocrat comment to make 20:03:28 * robe2 thinks all burocrats are useless 20:03:31 jgarnett: This leaves SAC with 3 or 4 line items to sign off on before contract is paid. 20:03:33 * strk takes the hat off 20:04:11 robe2: here is the line items - https://lists.osgeo.org/pipermail/sac/2017-November/008923.html 20:04:12 sigabrt: Title: [SAC] Fwd: component 2 review (at lists.osgeo.org) 20:04:39 robe2: so I should be done today with item 3.3.2.19 20:04:39 jgarnett: that mail missed one: 20:04:56 jgarnett: 3.3.2.1 General theme components <-- this was waiting on transfer of wordpress assets to some git repo? May be done already ... 20:05:19 robe2: jgarnett I don't think Jeffrey got me that document he promised about general setup he did 20:05:31 robe2: though I've been half asleep so I could have missed it 20:05:48 jgarnett: We can wait to confirm, if you can send a reminder email. 20:05:59 robe2: I think that's the only thing left to make me feel confident that SAC can handle the remaining items 20:06:11 robe2: Okay will send that to him 20:07:31 jgarnett: that may be all we have to discuss today 20:07:51 jgarnett: unless you have guidence about inviting people to edit again 20:10:03 jgarnett: it went quiet are we in an IRC bubble again? 20:10:25 robe2: jgarnett after I install -- was thinking a couple of us can test e.g. you, me , cvvergara 20:10:54 robe2: then we can decide if we want to remap existing accounts to ldap or just have people resign - and how we want to map osgeo orgs to wp permissions 20:11:37 jgarnett: okay, thanks for the clarification. Will hold off sending email invite. 20:12:26 strk: so second agenda item ? 20:12:42 * strk belives in burocracy 20:12:54 strk: isn't all coding about creating burocracies 20:13:40 robe2: second agenda item - sys contract 20:13:50 robe2: looks like Alex isn't here to fill us in on that 20:13:54 strk: neither Alex nor Martin are here 20:14:02 strk: but I know I mailed president@osgeo 20:14:17 robe2: okay can you put that on discuss tab 20:14:19 strk: she said today board meeting approved signing 20:14:56 robe2: I'll fill in the discuss tab for wordpress after I have ldap login working and feel content with the plugin I installed (I may need to go thru several) 20:15:26 robe2: next Drone / Gitea status 20:15:57 robe2: I have test gitea on winnie installed, ldap working great. Haven't experimented with restore of git.osgeo.org backup as you suggested strk :( 20:16:15 robe2: anything to report on your end strk for gitea/drone we are all set with git version right? 20:16:25 robe2: that it supports our antiquated git 20:17:18 strk: I'm not sure that discussion tab is appropriate for the outcomes, anyway, filled mine 20:17:41 strk: Gitea status: 1.3.0 is out, I'm not positive but chances are it already supports our ancient git 20:18:04 strk: it's to be tested that it works with current Drone setup 20:18:37 robe2: strk since I have gitea 1.3.0 installed on ianna, any easy way for me to tell. She's probably got newer git since she's a debian 9 20:19:00 strk: I can tell from sources, one sec 20:19:52 strk: vendor/code.gitea.io/git/git.go: GitVersionRequired = "1.7.2" # <-- that's the required version, with tag 1.3.0 of Gitea 20:20:07 robe2: and what are we running? 20:20:15 strk: 1.7.>2 20:20:23 robe2: okay good 20:20:24 strk: we're fine 20:20:31 robe2: so it's just the drone thing we are not sure of 20:20:43 strk: yes 20:20:59 strk: do you have a repo there ? 20:22:19 robe2: strk I have a dumb repo 20:22:52 robe2: I was going to ask what is the easiest way to get postgis there to test with. Or do I have to do a git checkout and commit remote or something 20:23:08 robe2: I didn't see a menu option anywhere to copy a repo from remote 20:23:22 robe2: so assumed it wasn't supported 20:23:48 * robe2 questions may be really stupid cause git still mystifies here 20:24:07 robe2: test 20:24:14 robe2: here / her 20:24:25 robe2: sorry thought I lost my connection for a bit 20:24:47 markusN: hi, sorry for late (kids time...) 20:25:01 robe2: anyway strk if you want to add a repo to test be my guest or install a lower drone on ianna 20:25:08 strk: robe2: easiest way is to mirror it 20:25:18 strk: when you create the repo, it does support mirroring 20:25:25 strk: then you can switch to normal 20:25:27 strk: hi markusN 20:25:38 strk: robe2: then you can try https://git.osgeo.org/gogs/sac/drone-server-config.git 20:25:48 markusN: hi strk robe2 and the others 20:25:55 strk: branch drone-0.5, tweak the configuration to point at your Gitea url and something like that 20:25:55 * markusN catches up on log 20:26:12 robe2: you mean create the repo via gitea or just regular git local? 20:26:17 strk: via gitea 20:26:35 strk: you'll need to edit dronerc in that repo 20:26:38 robe2: okay I'll see if I can figure that out from docs and maybe provide a patch if I can't 20:27:12 strk: changing DRONE_GOGS_URL and DRONE_DATABASE_DATASOURCE 20:27:13 robe2: hi markusN 20:27:21 strk: oh wait... that config is meant to be used with a manually built drone binary 20:27:38 strk: that's because we didn't have Docker on the osgeo target machine 20:27:46 strk: now building a drone executable might not be so easy 20:27:52 strk: but you can copy the one on the osgeo machine 20:28:01 strk: it's just a single file anyway 20:28:12 strk: (but needs to run on linux, not windows) 20:28:14 robe2: strk so should I use the docker approach on ianna as I tried a while ago and screwed up 20:28:30 robe2: strk yah it's all running on linux 20:28:32 strk: don't use docker, copy the binary from drone.osgeo.org 20:28:56 robe2: sorry I misspoke earlier about winnie (I forgot ianna is proxying thru her and she's not doing the work) 20:29:11 strk: I could actually start another drone on a different port 20:29:25 robe2: okay will do - what server is drone.osgeo.org running on 20:29:34 strk: just ssh drone.osgeo.org :) 20:29:41 robe2: okay 20:29:43 strk: anyway, should be written on the wiki 20:30:03 strk: https://wiki.osgeo.org/wiki/Drone 20:30:04 sigabrt: Title: Drone - OSGeo (at wiki.osgeo.org) 20:30:11 robe2: osgeo6 it says 20:30:48 robe2: okay I'm in I'll experiment later after have wordpress ldap thing all done 20:31:28 robe2: next topic gitlab 20:31:46 robe2: guess we can skip since bjorn not here and he needs the new hardware anyway 20:32:13 strk: that's always been the main reason for Gogs/Gitea to win the race 20:32:37 robe2: next topic my favorite new hardware 20:32:56 robe2: but guess we can skip that since Alex isn't here to fill us in and assume it requires our budget approval 20:33:22 robe2: next topic geoforall dns - GeoForAll DNS 20:33:22 strk: do we want to buy the service of setting up translate.osgeo.or ? 20:33:31 strk: it's not on the agenda, but I have a quote 20:33:45 robe2: strk is this using weblate? 20:33:45 strk: well actually the quotes are public 20:33:49 strk: yes, weblate 20:34:03 robe2: just add to agenda 20:34:26 strk: this one or next ? 20:34:35 robe2: and the quote details to discuss -- I'm going to link all the sections to discuss sections when I am done with meeting 20:34:46 robe2: this one and also next 20:37:01 robe2_: sorry lost my connection 20:37:02 strk: added under Road Ahead 20:38:16 robe2_: as I was saying before I lost connection -- the priorties I see are -- get new website up (wordpress), ssl for all foss4g and other sites, new gitea/drone, the translate, gitlab etc 20:38:28 robe2_: of course things can run in parallel 20:38:57 robe2_: like I forgot the new osgeo hardware which a lot of these things probably will hinge on -- gitlab, (migrating wordpress) etc. 20:39:47 strk: top priority is supported ssl for current services, as people are getting warnings and refusals from browsers to visit OSGeo 20:40:19 robe2_: okay GeoForAll DNS anyone knows about that -- think last we left, we need someone with registrar access to orchestrate the move 20:40:22 strk: and we're delegating that to contractor, so higher priority is gettign that work started 20:40:29 markusN: yes, that's indeed imporant with the ssl 20:40:35 robe2_: I'm not even sure who the contact person is on the GeoForALL side currently 20:40:40 strk: absence of Martin and Alex from this meeting makes me nervous, and it's already 3 weeks or so 20:40:47 strk: since the motion passed, we're too slow 20:41:32 robe2_: strk well it is kinda holiday seasonny 20:41:46 markusN: (not in Germany) 20:41:53 robe2_: but I did expect at least one of them to be at this meeting 20:42:06 strk: germans never party 20:42:16 robe2_: I thought germans always party 20:42:30 markusN: indeed 20:42:35 robe2_: I heard germans spend 25% of their life on vacation. Or have I been misinformed 20:42:50 markusN: ...that explains the absence: party during work time 20:43:22 markusN: I can try to ping Martin 20:43:37 robe2_: strk did you ever hear back about increasing budget for contract 20:43:46 strk: nope 20:44:11 strk: I saw we have an agenda item about that, still in time to raise that up ? 20:44:11 robe2_: I never know how much we can ask for. 20:44:20 strk: when in dubt, ask more 20:44:24 cvvergara: sorry I am late 20:44:45 strk: I mean, we spent 30k for a wordpress template ? 20:44:48 robe2_: Might make sense to find out budgets of all projects and ask some to contribute. Heck PostGIS has never used any funding we could probably pass off our non-existent use to SAC 20:45:12 robe2_: strk to be fair it wasn't just the template 20:45:26 strk: yeah I'm oversimplifying, sorry 20:45:27 robe2_: there is a lot of content work and stuff orchestrated 20:45:57 robe2_: cvvergara np I already volunteered you to test wordpress after I have ldap working :) 20:45:58 markusN: We should just put a request to the board... like also projects do 20:46:09 strk: but I've the feeling we'll need SAC work for keeping www.osgeo.org/osgeo_userid cgi-bin and the like ? (we need to start using an alias about that) 20:46:13 cvvergara: ok, I can help on test 20:46:31 robe2_: markusN yah I think that's a great idea. Ask for the sky and settle. 20:46:35 strk: markusN: for the budget ? all comms have been asked to present a budget, and we did, it's documented on the wiki 20:46:55 robe2_: strk yah I really want to move osgeo_userid to some other domain like you said maybe somethng like identity 20:47:09 strk: https://wiki.osgeo.org/wiki/OSGeo_Budget_2018 20:47:10 sigabrt: Title: OSGeo Budget 2018 - OSGeo (at wiki.osgeo.org) 20:48:32 strk: uhm, detailed page has 20k, while summary page has 15k 20:48:42 strk: I've no idea which one was sent to board for discussio 20:49:03 robe2_: strk regarding ssls I think a lot of the foss4g are now in one place 20:49:04 strk: ah, I'm wrong, it's 20k for 2018 draft 20:49:26 robe2_: I'm going to followup with guido about moving 2017.foss4g.org back to osgeo so we can ssl it. 20:49:49 robe2_: we can use letsencrypt for everything. Hey it's good enough for postgresql.org, it's good enough for us :) 20:49:58 strk: of course it is 20:50:22 robe2_: so then of urgency would be the 2018 one. I think there current might just be static and they wanted one for registration 20:51:03 robe2_: strk and I did set letsencrypt to auto renew on the wordpress via cronjob I'll monitor but command worked fine running 20:51:32 strk: it should create a log file, cronjob may be frequent, but it'll only do something upon expiration (3 months?) 20:51:46 robe2_: strk yah we need Alex to up that. I'm thinking it might be a good idea to have 2 contracts running at same time (but make them a bit longer) so we have overlap 20:51:48 strk: so you will really only know after that time 20:51:51 markusN: I use letsencrypt for my stuff for long and it works perfectly. So let's try 20:52:03 robe2_: don't feel comfortable with having just martin 20:52:06 strk: it's already in use for git.osgeo.org 20:52:10 strk: and drone.osgeo.org 20:52:29 robe2_: and postgis.net and debbie.postgis.net and winnie.postgis.net :) 20:52:48 robe2_: but we don't have it as default on postgis.net (because of unsecure images we are currently linked to) 20:53:43 robe2_: okay I think that's it for meeting stuff - I'll try to itemize the easy knockoff ssls we can do and just do them if I can 20:54:11 robe2_: others like geoforall, foss4g2018, foss4g2017 may need registrar authority transfer 20:54:38 robe2_: anything else anyone wants to discuss or should we adjourn? 20:54:52 cvvergara: I have nothing to say :( 20:55:11 strk: maybe we should try another timing, of it's easier for Alex and Martin ? 20:56:03 markusN: could be... an hour later or two 20:56:12 robe2_: strk they are the ones that picked this time :) 20:56:19 robe2_: it was the most convenient for them 20:56:37 robe2_: but sure we can revisit the time 20:57:02 robe2_: okay meeting adjorned then