Page MenuHomePhabricator

sudo rights removed, WDQ VM offline
Closed, ResolvedPublic

Description

So my sudo rights on i-0000073a.pmtpa.wmflabs and i-00000106.eqiad.wmflabs have apparently been removed. That means the machines can't run my Wikidata Query tool on port 80 anymore. There are a lot of other tools depending on WDQ.

Once that is fixed, a second request: port the external IP and proxy name from pmtpa to eqiad please:

The old VM (i-0000073a.pmtpa.wmflabs) has a "floating IP address" of 208.80.153.172, under which it is accessible on the web. It is also reachable under the proxy http://wikidata-wdq-mm.instance-proxy.wmflabs.org/

Please change both the "floating IP" and the proxy to point to the eqiad VM (i-00000106.eqiad.wmflabs)? After that, the old VM should be ready to retire (though I'd like to pound the new one for a few minutes first to make sure).


Version: unspecified
Severity: normal

Details

Reference
bz63152

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 3:06 AM
bzimport set Reference to bz63152.
bzimport added a subscriber: Unknown Object (MLST).

@Magnus i am having the same problem with sudo at the moment, as are others so it's a general labs problem.

ops are aware and I assume it will be fixed soonish.

regarding the ip address and proxy, i might be able to look tomorrow

sudo issue is fixed now. Downgrading bug importance.

(In reply to Magnus Manske from comment #0)

It is also
reachable under the proxy http://wikidata-wdq-mm.instance-proxy.wmflabs.org/

Had the same issue with my instance, you can add proxies manually now, it's on the left side bar. https://wikitech.wikimedia.org/wiki/Special:NovaProxy Apparently the instance-proxy is being deprecated

The proxy address would be http://wikidata-wdq-mm.wmflabs.org (or any custom name, it's quite neat)

Hope this helps

Thanks Tim! I created

http://wdq.wmflabs.org/

which works just fine. I'll leave the bug open though, maybe someone can redirect the previous URLs without too much trouble.

it looks like the IP is specific to the tampa data center.

per Tim, appears the inatance-proxy system is going away

https://wikitech.wikimedia.org/wiki/Labs_Eqiad_Migration/Howto#Web_access_in_eqiad

We might be able to ask about the IP, although I am not sure if the same IP range / addresses will be available

I'm just concerned that people may have bookmarked the IP or proxy URL, or have tools depending on them. Otherwise, good riddance :-)

Magnus claimed this task.