| [10:10:48] | * memtkmcc has quit (Quit: Leaving.) |
| [10:13:20] | * tommycox has quit (Remote host closed the connection) |
| [10:14:02] | * tommycox has joined #aegir |
| [10:33:00] | * tommycox has quit (Remote host closed the connection) |
| [10:47:59] | * jerryitt has quit (Quit: Connection closed for inactivity) |
| [10:48:30] | * tommycox has joined #aegir |
| [10:50:49] | * theMusician has joined #aegir |
| [10:55:43] | * theMusician has quit (Read error: Connection reset by peer) |
| [10:58:47] | * tommycox_ has joined #aegir |
| [10:59:07] | * theMusician has joined #aegir |
| [11:01:04] | * tommycox has quit (Ping timeout: 255 seconds) |
| [11:06:04] | * theMusician has quit (Read error: Connection reset by peer) |
| [11:06:17] | * theMusician has joined #aegir |
| [11:10:05] | * tommycox has joined #aegir |
| [11:10:06] | * tommycox_ has quit (Ping timeout: 250 seconds) |
| [11:12:17] | * tommycox_ has joined #aegir |
| [11:14:52] | * tommycox has quit (Ping timeout: 250 seconds) |
| [11:17:02] | * tommycox has joined #aegir |
| [11:17:28] | * tommycox_ has quit (Ping timeout: 250 seconds) |
| [11:23:13] | <gusaus> | hefring, tell ergonlog1c: Could you respond back to whoever may be sending annoying DMs from OpenCollective Slack room when you get a moment - thanks! :) |
| [11:23:13] | <hefring> | gusaus: I'll pass that on when ergonlog1c is around. |
| [11:23:33] | <gusaus> | :) |
| [11:24:24] | * gusaus has quit (Quit: gusaus) |
| [11:32:27] | * tommycox has quit (Remote host closed the connection) |
| [11:33:45] | * theMusician has quit (Quit: theMusician) |
| [11:37:18] | * tommycox has joined #aegir |
| [11:37:45] | * theMusician has joined #aegir |
| [11:39:31] | * theMusician has quit (Client Quit) |
| [11:45:48] | * theMusician has joined #aegir |
| [11:46:29] | * theMusician has quit (Client Quit) |
| [11:49:17] | * tommycox_ has joined #aegir |
| [11:51:17] | * tommyco__ has joined #aegir |
| [11:51:42] | * tommycox has quit (Ping timeout: 250 seconds) |
| [11:53:52] | * tommycox_ has quit (Ping timeout: 250 seconds) |
| [11:54:32] | * tommycox has joined #aegir |
| [11:56:28] | * tommyco__ has quit (Ping timeout: 250 seconds) |
| [11:59:37] | * tommycox_ has joined #aegir |
| [12:01:40] | * tommycox has quit (Ping timeout: 250 seconds) |
| [12:01:42] | * tommyco__ has joined #aegir |
| [12:04:16] | * tommycox_ has quit (Ping timeout: 250 seconds) |
| [12:22:02] | * tommyco__ has quit (Ping timeout: 250 seconds) |
| [13:13:22] | * tommycox has joined #aegir |
| [13:44:25] | * tommycox_ has joined #aegir |
| [13:46:32] | * tommycox has quit (Ping timeout: 250 seconds) |
| [14:08:38] | * tommycox_ has quit (Ping timeout: 250 seconds) |
| [14:11:39] | * tommycox has joined #aegir |
| [14:37:57] | * tommycox has quit (Read error: Connection reset by peer) |
| [14:37:58] | * tommycox_ has joined #aegir |
| [14:51:06] | * tommycox_ has quit (Ping timeout: 250 seconds) |
| [14:52:45] | * tommycox has joined #aegir |
| [15:24:06] | * boshtian has joined #aegir |
| [15:26:12] | * tommycox has quit (Ping timeout: 250 seconds) |
| [15:32:51] | * tommycox has joined #aegir |
| [15:56:56] | * boshtian has quit (Ping timeout: 244 seconds) |
| [15:57:21] | * tommycox has quit (Remote host closed the connection) |
| [16:41:26] | * tommycox has joined #aegir |
| [16:43:06] | * realityloop has joined #aegir |
| [16:45:19] | * realityloop has quit (Client Quit) |
| [16:49:50] | * tommycox has quit (Ping timeout: 250 seconds) |
| [16:59:57] | * boshtian has joined #aegir |
| [17:38:48] | * ybabel has quit (Read error: Connection reset by peer) |
| [17:39:27] | * ybabel has joined #aegir |
| [18:15:26] | * stijnvbrande has joined #aegir |
| [18:16:04] | * ybabel has quit (Ping timeout: 244 seconds) |
| [18:19:19] | * ybabel has joined #aegir |
| [18:30:34] | * ybabel has quit (Read error: Connection reset by peer) |
| [18:31:08] | * ybabel has joined #aegir |
| [18:47:47] | * tommycox has joined #aegir |
| [18:53:16] | * tommycox has quit (Ping timeout: 244 seconds) |
| [20:32:42] | * gandhiano has joined #aegir |
| [20:50:25] | * tommycox has joined #aegir |
| [20:55:34] | * tommycox has quit (Ping timeout: 244 seconds) |
| [21:17:16] | * gandhiano has quit (Ping timeout: 264 seconds) |
| [21:51:58] | * tommycox has joined #aegir |
| [21:57:04] | * tommycox has quit (Ping timeout: 250 seconds) |
| [22:39:32] | * zombiebeard has joined #aegir |
| [22:53:20] | * tommycox has joined #aegir |
| [22:58:05] | * shaneonabike has joined #aegir |
| [22:58:35] | * tommycox has quit (Ping timeout: 250 seconds) |
| [23:01:10] | * memtkmcc has joined #aegir |
| [23:04:21] | <memtkmcc> | hefring, tell helmo: good luck with https://github.com/aegir-project/dockerfiles — prepare to get sued by Docker Inc. for using their name in front of the project name: https://twitter.com/MacYET/status/775535642793086976 |
| [23:04:21] | <hefring> | memtkmcc: I'll pass that on when helmo is around. |
| [23:05:16] | <memtkmcc> | morons |
| [23:12:31] | <helmo> | memtkmcc: :( pretty lame ... Maybe we should call the repo 'manifest-files-for-that-whale-companies-container-format' :) |
| [23:12:31] | <hefring> | helmo: 8 min 10 sec ago <memtkmcc> tell helmo: good luck with https://github.com/aegir-project/dockerfiles — prepare to get sued by Docker Inc. for using their name in front of the project name: https://twitter.com/MacYET/status/775535642793086976 |
| [23:14:23] | <helmo> | memtkmcc: I saw you were busy these paset few days :) ... Can I add you to the Aegir core team? |
| [23:15:09] | <memtkmcc> | helmo: I think d0cker-files could make them furious ;) |
| [23:16:50] | <memtkmcc> | helmo: am I qualified already? not sure... but happy to join and help! |
| [23:20:25] | * gandhiano has joined #aegir |
| [23:51:53] | * tommycox has joined #aegir |
| [23:57:06] | * tommycox has quit (Ping timeout: 250 seconds) |
| [00:23:13] | <colan> | memtkmcc: excellent! |
| [00:25:07] | <colan> | memtkmcc: yes, we were discussing it, and we're all for it.. |
| [00:25:32] | <memtkmcc> | colan: oh, thank you! |
| [00:25:53] | <colan> | memtkmcc: your efforts to unfork boa are greatly appreciated. |
| [00:29:03] | <memtkmcc> | colan: I'm trying my best.. it was never our intention to fork anything, but some issues just screamed for improvements for our users, and we have also run these weird hybrids like running hostmaster 2.x with provision 3.x, etc. |
| [00:31:08] | * colan nods |
| [00:38:58] | <bgm> | ergonlog1c: OK if I update letsencrypt.sh on https://github.com/aegir-project/letsencrypt.sh ? |
| [00:40:34] | <memtkmcc> | bgm: note that letsencrypt.sh changed some defaults and it will no longer work if you will use latest version from upstream |
| [00:41:48] | <bgm> | memtkmcc: hmm ok, thanks for the heads up, will test. currently hosting_https is broken though, because of the old 'LICENSE' url |
| [00:41:52] | <memtkmcc> | bgm: we had to revert some changes: https://github.com/omega8cc/letsencrypt.sh/commits/master |
| [00:42:29] | <memtkmcc> | yeah, but you may want to revert also: https://github.com/omega8cc/letsencrypt.sh/commit/008e664a1d9a7da2df8b94... |
| [00:43:53] | <bgm> | can't those settings be overriden in the config file? |
| [00:44:16] | <bgm> | (although not sure if hosting_https probably generates the config file yet?) |
| [00:46:13] | * joestewart has quit (Remote host closed the connection) |
| [00:46:21] | * joestewart_ is now known as joestewart |
| [00:46:22] | <memtkmcc> | bgm: they can, but in hosting_le we are using mere presence of the config file as a sign that it is running in a demo mode, because it the only thing we use the config file for (the staging URL) |
| [00:47:44] | <bgm> | hmm ok |
| [00:48:08] | <bgm> | to be honest, I have a few issues with hosting_https, but I keep procrastinating because I can't really use it in prod yet |
| [00:48:17] | <memtkmcc> | also, there are other changes which don't make sense to me: https://github.com/omega8cc/letsencrypt.sh/commit/d5b285868e35992027599d... |
| [00:48:31] | <bgm> | so trying some sort of hybrid where I can at least use letsencrypt.sh with aegir's file system model, but not enable hosting_https itself |
| [00:49:10] | <bgm> | memtkmcc: renaming config.sh -> config ? |
| [00:49:19] | <memtkmcc> | bgm: we are using hosting_le in production for now |
| [00:49:35] | <memtkmcc> | yeah, extension-less config file, wtf? |
| [00:49:57] | <bgm> | it's pretty standard, imho, in the bash world. ex: /etc/default/* in Debian |
| [00:51:03] | <bgm> | I think the best long-term solution will be to use some PHP library that implements ACME |
| [00:51:15] | <bgm> | (if a stable one emerges at some point) |
| [00:51:56] | <anarchat> | why not just reuse one of the zillion commandline tools? |
| [00:52:03] | <anarchat> | there are already way too many implementations |
| [00:52:18] | <anarchat> | you need to deal with renewals and all that stuff |
| [00:52:41] | <bgm> | there are also tons of php libraries implementing it :) |
| [00:52:46] | <bgm> | and it makes a better interface |
| [00:53:09] | <memtkmcc> | bgm: I don't like it, it makes distinction between directories and files lost with no benefit, although .sh extension was a bad choice, too |
| [00:53:14] | * tommycox has joined #aegir |
| [00:57:01] | <bgm> | memtkmcc: I think that's a criticism of bash, and I would tend to agree :) |
| [00:58:06] | <memtkmcc> | yeah |
| [00:58:31] | <memtkmcc> | anarchat: it is the simplest single-script command line tool, as far as I know |
| [00:58:37] | * tommycox has quit (Ping timeout: 250 seconds) |
| [01:00:43] | * boshtian has quit (Ping timeout: 265 seconds) |
| [01:04:36] | * gandhiano has quit (Ping timeout: 244 seconds) |
| [01:07:36] | <anarchat> | i am just worried that people start implementing things like renewals in aegir |
| [01:07:44] | <anarchat> | instead of just shipping that to the commandline tools |
| [01:09:26] | * memtkmcc has quit (Read error: Connection reset by peer) |
| [01:09:43] | * memtkmcc has joined #aegir |
| [01:09:49] | * FatherShawn has quit (Ping timeout: 265 seconds) |
| [01:12:14] | * mlhess has quit (Ping timeout: 265 seconds) |
| [01:13:41] | * FatherShawn has joined #aegir |
| [01:13:50] | * mlhess has joined #aegir |
| [01:22:08] | * gandhiano has joined #aegir |
| [01:47:45] | * gandhiano has quit (Ping timeout: 276 seconds) |
| [01:53:08] | * tommycox has joined #aegir |
| [02:05:52] | * mstenta has quit (Quit: Leaving) |
| [02:30:03] | * theMusician has joined #aegir |
| [02:41:24] | * tommycox has quit (Remote host closed the connection) |
| [02:44:12] | * theMusician has quit (Quit: theMusician) |
| [02:44:20] | * tommycox has joined #aegir |
| [02:45:49] | <ergonlog1c> | Sorry all... now that my son is getting better, I'm now sick. I should be back in the saddle tomorrow. |
| [02:45:49] | <hefring> | ergonlog1c: 15 hours 22 min ago <gusaus> tell ergonlog1c: Could you respond back to whoever may be sending annoying DMs from OpenCollective Slack room when you get a moment - thanks! :) |
| [02:49:19] | <ergonlog1c> | bgm: iirc we'd forked letsencrypt.sh, and git sub-moduled it into hosting_https... Of course, feel free to fix it, if it's now broken. |
| [02:50:48] | <ergonlog1c> | memtkmcc: welcome aboard! We'll set you up with the proper accesses and such soon :) |
| [02:51:08] | * theMusician has joined #aegir |
| [02:52:11] | * theMusician has quit (Client Quit) |
| [02:57:21] | <shaneonabike> | yahooo let's encrypt with aegir!! |
| [02:57:21] | <hefring> | shaneonabike: 3 weeks 3 days ago <ergonlogic> tell shaneonabike Make sure to run 'apt update', especially after adding a backports repo |
| [02:58:53] | <ergonlog1c> | anarchat: LE reneweals in hosting_https just call the script, atm. But the renewal process is pretty much the same as for a new cert w/ LE. Was there something specific you were concerned about? |
| [02:59:33] | <ergonlog1c> | i.e. LE "renewal" is really just "replace with a new cert" |
| [03:03:04] | * theMusician has joined #aegir |
| [03:12:02] | <anarchat> | ergonlog1c: my concern is that renewals need to be automated, and that is better inforced outside of aegir |
| [03:13:36] | <ergonlog1c> | at this point, the plan is (iirc) to implements a queue that will check for renewal status, and either highlight that on the site, or renew automatically, if supported (as with LE) |
| [03:18:18] | <anarchat> | yeah well, that's what i mean :p |
| [03:18:47] | <anarchat> | that seems over-engineered to me |
| [03:19:02] | <anarchat> | but then again, you want to deal with the old CA cartel, so you will need to implement per CA APIs anyways |
| [03:19:07] | <anarchat> | so i understand :) |
| [03:19:24] | <ergonlog1c> | well, not really... |
| [03:19:26] | <anarchat> | it's just that for LE, it's so much simpler: the API is already implemented out there, with system support |
| [03:19:41] | <ergonlog1c> | I suspect LE will become the standard |
| [03:19:51] | <ergonlog1c> | which'll mean renewals are a breeze |
| [03:20:13] | <ergonlog1c> | in the case of CAs, the plan is to allow pasting the cert into the site form, and that's about it |
| [03:20:46] | <ergonlog1c> | as far as I'd intended to put into hosting_https anyway |
| [03:21:13] | <anarchat> | okay well, i would recommend you do not implement renewals in aegir |
| [03:21:28] | <anarchat> | just drop whatever config file is needed or run whatever command to get the cert created |
| [03:21:28] | <ergonlog1c> | we'd presumably make it extensible, so that if anyone wanted to support auto-generation and -renewals from a specific CA's API, they could... |
| [03:21:37] | <anarchat> | then let the builtin cronjobs do their thing and restart apache and all |
| [03:21:51] | <ergonlog1c> | yeah, that's what we're doing |
| [03:22:06] | <anarchat> | oh |
| [03:22:26] | <ergonlog1c> | we're letting the letsencrypt.sh script handle it |
| [03:22:33] | <ergonlog1c> | for example |
| [03:23:20] | <ergonlog1c> | there's talk of implementing the ACME protocol directly |
| [03:23:41] | <ergonlog1c> | which might still be a good idea, tbh |
| [03:24:01] | <ergonlog1c> | since the scripts are of questionable quality, from the ones we've looked at |
| [03:24:57] | <ergonlog1c> | and a good ACME lib, if one ever became available, would presumably still handle the same stuff, just with a (hopefully) more stable API |
| [03:25:40] | * anarchat nods |
| [03:27:53] | * shaneonabike has left #aegir ("PART #drupal-commerce :PING 1473787673") |
| [03:29:33] | * zombiebeard has quit (Quit: zombiebeard) |
| [03:43:21] | * gusaus has joined #aegir |
| [03:44:25] | <gusaus> | so what’s the latest w/ Aegir coop :) |
| [03:57:40] | * theMusician has quit (Quit: theMusician) |
| [04:04:28] | * theMusician has joined #aegir |
| [04:57:05] | * stijnvbrande has quit (Quit: Connection closed for inactivity) |
| [05:01:47] | * theMusician has quit (Quit: theMusician) |
| [05:16:46] | * tommycox has quit (*.net *.split) |
| [05:16:46] | * bgm has quit (*.net *.split) |
| [05:16:47] | * drakythe has quit (*.net *.split) |
| [05:16:52] | * kvanderw has quit (*.net *.split) |
| [05:16:52] | * drupol has quit (*.net *.split) |
| [05:16:56] | * Fuzzy76 has quit (*.net *.split) |
| [05:16:58] | * mlhess has quit (*.net *.split) |
| [05:16:58] | * viashimo has quit (*.net *.split) |
| [05:16:59] | * elijah has quit (*.net *.split) |
| [05:16:59] | * ergonlog1c has quit (*.net *.split) |
| [05:17:00] | * dsnopek has quit (*.net *.split) |
| [05:17:01] | * colan has quit (*.net *.split) |
| [05:17:01] | * gboudrias has quit (*.net *.split) |
| [05:17:02] | * memtkmcc has quit (*.net *.split) |
| [05:17:05] | * Lowell has quit (*.net *.split) |
| [05:17:06] | * anarchat has quit (*.net *.split) |
| [05:17:06] | * cmoates has quit (*.net *.split) |
| [05:17:06] | * gusaus has quit (*.net *.split) |
| [05:17:07] | * ybabel has quit (*.net *.split) |
| [05:17:08] | * azend|vps has quit (*.net *.split) |
| [05:17:11] | * joestewart has quit (*.net *.split) |
| [05:17:12] | * anto has quit (*.net *.split) |
| [05:17:12] | * cdracars has quit (*.net *.split) |
| [05:17:14] | * helmo has quit (*.net *.split) |
| [05:17:15] | * FatherShawn has quit (*.net *.split) |
| [05:17:17] | * Einherjer has quit (*.net *.split) |
| [05:17:20] | * spyd has quit (*.net *.split) |
| [05:17:21] | * jonpugh has quit (*.net *.split) |
| [05:17:24] | * drastik-jw_ has quit (*.net *.split) |
| [05:23:23] | * azend|vps has joined #aegir |
| [05:23:24] | * gusaus has joined #aegir |
| [05:23:24] | * Fuzzy76 has joined #aegir |
| [05:23:24] | * FatherShawn has joined #aegir |
| [05:23:24] | * Einherjer has joined #aegir |
| [05:23:24] | * gboudrias has joined #aegir |
| [05:23:24] | * colan has joined #aegir |
| [05:23:24] | * dsnopek has joined #aegir |
| [05:23:24] | * ergonlog1c has joined #aegir |
| [05:23:24] | * viashimo has joined #aegir |
| [05:23:24] | * mlhess has joined #aegir |
| [05:23:24] | * cmoates has joined #aegir |
| [05:23:24] | * anarchat has joined #aegir |
| [05:23:24] | * kvanderw has joined #aegir |
| [05:23:24] | * joestewart has joined #aegir |
| [05:23:24] | * anto has joined #aegir |
| [05:23:24] | * cdracars has joined #aegir |
| [05:23:24] | * tommycox has joined #aegir |
| [05:23:24] | * bgm has joined #aegir |
| [05:23:24] | * drakythe has joined #aegir |
| [05:23:30] | * spyd has joined #aegir |
| [05:23:30] | * drastik-jw_ has joined #aegir |
| [05:23:35] | * helmo has joined #aegir |
| [05:23:36] | * memtkmcc has joined #aegir |
| [05:26:26] | * ybabel has joined #aegir |
| [05:32:26] | * jonpugh has joined #aegir |
| [05:35:15] | * ybabel has quit (Quit: ybabel) |
| [05:58:54] | * memtkmcc has quit (Ping timeout: 260 seconds) |
| [06:00:12] | * drupol has joined #aegir |
| [06:00:56] | * elijah has joined #aegir |
| [06:03:10] | * Lowell has joined #aegir |
| [06:56:30] | * tommycox has quit () |
| [07:03:12] | * TommyCox has joined #aegir |
| [07:04:30] | * TommyCox has quit (Remote host closed the connection) |
| [07:05:02] | * TommyCox has joined #aegir |
| [07:07:37] | * memtkmcc has joined #aegir |
| [07:09:33] | * TommyCox has quit (Ping timeout: 250 seconds) |
| [07:10:13] | <memtkmcc> | ergonlog1c: thanks! |
| [07:12:32] | * TommyCox has joined #aegir |
| [07:21:44] | * helmo has quit (*.net *.split) |
| [07:22:01] | * helmo has joined #aegir |
| [07:22:52] | <memtkmcc> | ergonlog1c: in BOA we care only about LE implementation now, so for auto-renewals we just run site Verify task weekly, for SSL enabled sites, from an external script, which runs daily from cron, like this: https://gist.github.com/omega8cc/50e0e7f006afe0dd6678a72c34363550 |
| [07:23:41] | <memtkmcc> | which could be implemented as queue in Aegir, perhaps |
| [07:24:27] | <memtkmcc> | wow: renamed project to dehydrated and main script to dehydrated.sh — https://github.com/lukas2511/dehydrated/commit/64e35463cbbfc35ad1bf8537b... |
| [07:25:25] | <memtkmcc> | hmm… https://github.com/lukas2511/dehydrated/commit/b95b15cad6dc7c736021b45fb... |
| [07:26:24] | <memtkmcc> | first Docker, now Let's Encrypt |
| [07:30:46] | * elijah has quit (Ping timeout: 265 seconds) |
| [07:38:40] | * elijah has joined #aegir |
| [07:57:01] | * TommyCox has quit (Remote host closed the connection) |
| [08:01:49] | * theMusician has joined #aegir |
| [08:18:08] | * TommyCox has joined #aegir |
| [08:19:38] | * memtkmcc has quit (Quit: Leaving.) |
| [08:25:33] | * memtkmcc has joined #aegir |
| [08:26:45] | * TommyCox has quit (Ping timeout: 265 seconds) |
| [08:27:20] | * TommyCox has joined #aegir |
| [08:30:07] | * TommyCox has quit (Remote host closed the connection) |
| [08:51:57] | * TommyCox has joined #aegir |
| [09:05:57] | * TommyCox has quit (Remote host closed the connection) |
| [09:17:03] | * theMusician has quit (Quit: theMusician) |
| [09:42:56] | * TommyCox has joined #aegir |
| [09:47:23] | * theMusician has joined #aegir |
