Transition Technology: Ticket Query

#753: wiki.transitionnetwork.org displaying error

chris — Fri, 04 Jul 2014 08:23:52 GMT

This is rather weird, the site was working yesterday, now at https://wiki.transitionnetwork.org/ we have:

bar(), etc etc) which throw parse errors in # PHP 4. Setup.php and ObjectCache.php have structures invalid in PHP 5.0 and # 5.1, respectively. if ( !function_exists( 'version_compare' ) || version_compare( phpversion(), '5.3.2' ) < 0 ) { // We need to use dirname( __FILE__ ) here cause __DIR__ is PHP5.3+ require dirname( __FILE__ ) . '/includes/PHPVersionError.php'; wfPHPVersionError( 'index.php' ); } require __DIR__ . '/includes/WebStart.php'; $mediaWiki = new MediaWiki(); $mediaWiki->run();

#583: tmp files on parrot exceeded inode limit

ed — Mon, 02 Sep 2013 12:28:46 GMT

Users are attempting to purchase a DVD and the cart always zeros out even after attempts to update cart etc.

Laura suggests that this may be a server issue and to start with Chris:

The prob could v likely be on the hosting side, so be worth contacting Chris first (and mention can add to cart all okay when logged in, view cart and alter and get to billing page, so could be a session setting that's changed) -

Does the server have disk space left on /tmp. Session data is most likely written there. (sometimes this cart faff issue can happen because of that.)

Are the PHP Session settings correct/ have they changed recently? Chris can fix this if needing a tweakette in php.ini or other places in the underworld of those types of files.

DB could potentially need check/repair.

Another one is the shop element relies on cookies so if a user has set browser to not accept cookies may poss not work! (but think thats something not to think about here, as I tested as both logged in and logged out with cookies set to work on my browser, logged out got the 'cart empty' faff factor like other users will be getting.)

If Chris can't spot the bug (does sound server side and sessions related from a quick test here, haven't looked at the server logs, but if get a mo later will see if I can), poss good to chat and I can think some more on it, but first thoughts alert me mostly to server side, sometimes a roll back to php 5.2 clicks things back into place (but shouldn't be needed). Be good to see if there is a correlation with any server changes/tweaks happening around same timing that the cart stopped working. Keep me in the loop if it is a server fix-y thing as always interested to hear results on bug fixing on sites.

#487: robots.txt files for development sites

chris — Tue, 29 Jan 2013 13:24:35 GMT

All the sites other than www.transitionnetwork.org on wiki:PuffinServer should have a robots.txt file to exclude them from being crawled and indexed to prevent the development versions of sites being included in search results.

#580: php5-fpm starting when puffin boots

chris — Mon, 12 Aug 2013 16:03:06 GMT

When wiki:PuffinServer is booted /etc/init.d/php5-fpm is started and this causes errors with the site.

#528: patterns.transitionresearchnetwork.org DNS update

chris — Tue, 26 Mar 2013 09:58:13 GMT

Request from Ethan:

We've moved the site back to the production server. Would you be willing to set the CNAME for patterns.transitionresearchnetwork.org to patterns.transitionresearchnetwork.org.230.cldstr.com?

See also previous tickets ticket:482 and ticket:502

#502: patterns sub-domain for transitionresearchnetwork.org, was: Setting up specific pointer for URL

ed — Wed, 27 Feb 2013 07:10:03 GMT

Can we set this URL:
www.transitionresearchnetwork.org/research-guidelines
to point to this location:
https://cldstr.com/docs/configure-dns
While this URL:
www.transitionresearchnetwork.org/
Still points to the current location.
~~~~
Ed Mitchell: Transition Network Web manager
web: http://transitionnetwork.org
project blog: http://transitionnetwork.org/blogs/ed-mitchell
mobile: +44 (0)7807 141 828
office hours: Mon, Tues, Wed, Thurs
company no. 6135675  charity no. 1128675
Subscribe to Transition news: http://tinyurl.com/transitionregister
~~~~

#780: parrot

annesley — Wed, 27 Aug 2014 14:35:51 GMT

can't access parrot again also: it re-requests my password very quickly. what is the session timeout?

also: i cannot include my files. seems that the website is located under the /home/annesley directory. is this some sort of strange setup because the PHP cannot see that area. and i cannot cd to the root through SFTP...

#778: need access to Parrot

annesley — Wed, 27 Aug 2014 12:16:39 GMT

i need a publicly available WordPress demo install to play with. should this be on Parrot? what (sub)domain can i use?

#698: intransitionmovie.com returns 405 on submit

sam — Thu, 06 Mar 2014 11:45:39 GMT

http://www.intransitionmovie.com/screenings/share-your-screening/

vid Atcheson (david@…) sent a message using the contact form at https://www.transitionnetwork.org/contact.

I couldn't find any contact info at http://www.intransitionmovie.com/, but am hoping you can help. When I visit http://www.intransitionmovie.com/screenings/share-your-screening/index.html and put in my email address and hit Enter, I get:

Hi I checked this and it returns a 405 error for me too.

http://www.intransitionmovie.com/screenings/share-your-screening/

405 Not Allowed nginx/1.4.4

Hoping this can be fixed so we can let you know about our screening on April 8 at the Hawaii State Capitol auditorium.

Aloha,

David Atcheson, Transition Oahu

I'll do some initial investigation

#538: intransitionmovie.com checks and updates

chris — Tue, 30 Apr 2013 20:02:03 GMT

The http://www.intransitionmovie.com/ site has been migrated to wiki:ParrotServer, the DNS might not have yet updated for everybody.

Laura -- could you check that the site is working OK if you get a chance, especially the ecommerce elements?

There are some outstanding updates, WordPress is version 3.3.2 need updating to 3.5.1 and there are 12 plugins with updates available:

18 installed plugins:
 UA affiliates
 UA affiliates-woocommerce-light
 UA akismet
  A backupwordpress
 UI bad-behavior
 UA bwp-minify
  A contact-form-7
 UA event-o-matic
  A transposh-translation-filter-for-wordpress
 UA usernoise
  A woocommerce
 UA woocommerce-export-csv
  A woocommerce-currency-converter
 UA woocommerce-dynamic-pricing
  A woocommerce-delivery-notes
 UA woocommerce-shipping-table-rate
 UA wp-customer-reviews
 UI wp-super-cache
Legend: A = Active, I = Inactive, U = Update Available

I'm happy to do all these updates but I wouldn't know what exactly to check to see that the updates don't break anything -- would Laura be able to help with a quick check that updates haven't broken anything?

#773: download copy of current TN D6 website

annesley — Wed, 06 Aug 2014 09:58:14 GMT

hi, am trying to get a copy of the current TN.org D6 database and filesystem down to my laptop to develop against. i had pulled from GIT, backed up from Backup&Migrate and got everything working but there are things missing.

so i want to do a file copy. i started a tar operation but the tar size went over 1.3GB and i stopped it because it shouldn't be that big. as always BOA has restricted use of the "du" command so i can't really tell why the tar was so big. and i can't "df" to see if it's a problem

should i let it continue? why is it so big?

#762: cannot log in to Puffin

annesley — Sat, 19 Jul 2014 08:46:53 GMT

hi, i think i've locked myself out of puffin again. i successfully logged in and navigated to ~ and /. but it wouldn't let me access /data/disk/tn/static/transition-network-d6-s012 it asked for more authentication and then stopped responding.

thanks, a

#771: cannot access puffin over sftp again

annesley — Tue, 05 Aug 2014 09:24:10 GMT

not sure what happened this time. my connection to other servers is fine. i am using:

sftp://tn.ftp@puffin.transitionnetwork.org/static/transition-network-d6-32-s002-booker/

the password was accepted first time and i successfully navigated to /static

which worked until i tried to get to the transition-network-d6-32-s002-booker directory. now ssh fails also.

when i ssh in i get plenty of warnings and potential lock outs when i try various things. like trying to access /static.

#811: WordPress critical security release

chris — Thu, 20 Nov 2014 20:25:07 GMT

From the blog:

WordPress 4.0.1 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites immediately.

Sites that support automatic background updates will be updated to WordPress 4.0.1 within the next few hours. If you are still on WordPress 3.9.2, 3.8.4, or 3.7.4, you will be updated to 3.9.3, 3.8.5, or 3.7.5 to keep everything secure. (We don’t support older versions, so please update to 4.0.1 for the latest and greatest.)

WordPress versions 3.9.2 and earlier are affected by a critical cross-site scripting vulnerability, which could enable anonymous users to compromise a site.

#594: WordPress 3.6.1 Maintenance and Security Release

chris — Wed, 11 Sep 2013 22:05:01 GMT

The following is from http://wordpress.org/news/2013/09/wordpress-3-6-1/

WordPress 3.6.1 is also a security release for all previous WordPress versions and we strongly encourage you to update your sites immediately. It addresses three issues fixed by the WordPress security team:

Block unsafe PHP unserialization that could occur in limited situations and setups, which can lead to remote code execution. Reported by Tom Van Goethem.
Prevent a user with an Author role, using a specially crafted request, from being able to create a post “written by” another user. Reported by Anakorn Kyavatanakij.
Fix insufficient input validation that could result in redirecting or leading a user to another website. Reported by Dave Cummo, a Northrup Grumman subcontractor for the U.S. Centers for Disease Control and Prevention.
Additionally, we’ve adjusted security restrictions around file uploads to mitigate the potential for cross-site scripting.

#637: What is the wordcount for the /news and /blogs/rob-hopkins teasers?

ed — Thu, 28 Nov 2013 09:40:48 GMT

http://www.transitionnetwork.org/news http://www.transitionnetwork.org/blogs/rob-hopkins

what is the teaser length - ie the first paragraph of a news or blog item that is published in the listings views?

rob wants to know how many words he has for his introductions...

#668: Wagn transition_mod

chris — Sat, 11 Jan 2014 08:52:25 GMT

Email from Ethan via Tom:

I was doing some work on wagn mods today and I realized that I'd created a mod (as in "modification" or "module", whichever you like) for the transition site that probably never survived the move to the new server.

Looking at https://patterns.transitionresearchnetwork.org/Building_Resilience confirmed this for me. The confidence shows up as the words "2 stars" rather than actual star images. That's one thing the mod does. The other has to do with reducing visual redundancy (recurring names) in pattern summaries.

I've attached the mod file here. Unless you've gotten creative with your configuration, you should be able to stick this file in local/mods and restart the server and have that fixed. Let me know if any of this doesn't make sense.

#665: Wagn "Problem Loading Page" error

chris — Mon, 06 Jan 2014 14:02:00 GMT

Bug report from Tom:

I've encountered a problem when trying to set up new accounts: I get a 'Problem Loading Page' error when it tries to load http://localhost:3000/wagn/Invite_Success. This seems to be explained at http://wagn.org/Special_Urls_and_Ports - which I am hoping falls under your area of responsibility as I'm not sure how to do it myself,! But let me know if not...

#609: Videos not showing if added via video link

ed — Tue, 15 Oct 2013 08:33:43 GMT

e.g. of project profile: https://www.transitionnetwork.org/projects/new-forest-transition-school-community-energy-saving-project

none showing on video page: https://www.transitionnetwork.org/video

#562: Users being subscribed to widgets newsletter on registratoin

ed — Mon, 17 Jun 2013 15:11:22 GMT

Ed added new users to system via user-->add user. They are being automatically subscribed to the widget owners newsletter. Please investigate and stop this.

#575: User system is blocking everyone - needs fixing urgently

ed — Wed, 31 Jul 2013 14:39:11 GMT

Everyone who registers for the last two weeks is being blocked - check user list and see screengrab. Needs fixing promptly.

#608: User profile pictures are too big

ed — Mon, 14 Oct 2013 08:37:38 GMT

The user profile pictures on the user profile nodes are too big.

e.g. https://transitionnetwork.org/people/tina-clarke

Please investigate and restrain them into a suitable maximum size

NB: Ed is keeping a number of small UI-ish tickets back for Ben to do in a lump when we've built up enough so don't do anything yet.

#748: Urgent: Fiona having problems sending email

sam — Wed, 25 Jun 2014 12:42:27 GMT

Hi Chris, Fiona is having problems sending email. I have checked the quota in the web interface and she is not over her quota.

She initially sent this:

The message could not be sent because the server rejected the sender's email address. The sender's email address was 'fionaward@…'.

Subject 'Re: filming' Server Error: 550 Server Response: 550 Access denied - Invalid HELO name (See RFC2821 4.1.1.1) Server: 'mail.transitionnetwork.org' Windows Live Mail Error ID: 0x800CCC78 Protocol: SMTP Port: 26 Secure(SSL): No

Which looked to me like the email had been sent and rejected by the receiving server.

So I sent this to Fiona:

On 24 June 2014 16:11, Sam Rossiter <samintransition@…> wrote: Hi Fiona I'll take a look now. It could have been rejected for a number of reasons. There's no keywords in the email that might trigger a spam rejection? Or have you Cc'd a large number of people?

As a workaround until we get to the bottom of it is it something a collegue could forward? Or does it have to come from you?

Thanks

Sam

Fiona replied:

Hi Sam I don;t think it's that email, as there are 13 that won't send frm my outbox even if I remove this email - same problem with the next one! Thanks Fiona

---

Chris I'm not working until next Tuesday, so I was wondering if you could pick this up and liase with Fiona? fionawardttt [AT] googlemail.com

Thanks

Sam

#729: Upgrade to Piwik 2.2.2

chris — Fri, 23 May 2014 08:21:12 GMT

2.2.2 came out on 8th May, not sure why I missed this at the time, the change log is here: http://piwik.org/changelog/piwik-2-2-2/

The last upgrade was 2.2.1 ticket:726 and the upgrade notes are at wiki:PiwikServer#Updates

#726: Upgrade to Piwik 2.2.1

chris — Tue, 06 May 2014 11:14:05 GMT

Piwik 2.2.1 is a new minor release which brings more stability to the platform.

http://piwik.org/changelog/piwik-2-2-1/

#720: Upgrade to Piwik 2.2.0

chris — Thu, 17 Apr 2014 07:51:50 GMT

From the Changelog, http://piwik.org/changelog/piwik-2-2-0/

Piwik 2.2.0 is a major new release. This release is rated critical. Please update now.

We highly recommend that you upgrade your server to Piwik 2.2.0 today to benefit from design, performance and security improvements in this release.

Piwik 2.2 helps you focus on your data

All reports: display as much text as possible before the label becomes truncated (useful when you want to see more data at a glance without having to hover to view the full label)
Make Datatables more readable and flatter – we have removed some borders.
On the dashboard, the Data Tables and graph icons are now hidden by default and are now available by clicking on the widget footer.
New features

Event Tracking: track your custom events with Piwik. An event is defined by a Category, an Action, an optional Name and an optional Value. Event Tracking is a powerful feature which can be used for many purposes! http://piwik.org/docs/event-tracking/
Site Search reports are now available in Scheduled email reports and on Piwik Mobile
New Websites Groups (available on request) functionality now allows you to group a cluster of websites in the All Websites Dashboard.
Security fixes: we would like to warmly thank Security researchers Mateusz Goik and Vivek S. Jadhav for responsibly reporting two XSS security issues in Piwik which are now fixed in 2.2.0.
API breaking change for Plugins developers
Deprecated the function Schema::dropTables() and DbHelper::dropTables, for the new Db::dropTables()
Removed the code that was deprecated in 2.1.0. Learn more http://piwik.org/blog/2014/02/piwik-2-1-changes-plugin-developers/

#672: Upgrade to Piwik 2.0.3

chris — Mon, 13 Jan 2014 10:13:00 GMT

From the Piwik changelog:

Piwik 2.0.3 is a bug-fix release. To ensure the highest quality and reliability for your Piwik 2.0 setup, we have fixed all known major bugs, as well as made some small improvements.

...

We highly recommend that you upgrade your server to Piwik 2.0.3 today to benefit from the latest improvements.

#532: Upgrade to Mediawiki 1.19.5

chris — Mon, 15 Apr 2013 13:40:34 GMT

New version out tonight:

This is a notice that on Monday, April 15th between 20:00-21:00 UTC (1-2pm PDT) Wikimedia Foundation will release security updates for current and supported branches of the MediaWiki software. Downloads and patches will be available at that time, with the git repositories updated later that afternoon. CVSS scores are between 4.3 and 7.1, most users will want to update.

http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-April/000126.html

#736: Upgrade to MediaWiki 1.23.0

chris — Thu, 05 Jun 2014 09:43:50 GMT

From the announcements list:

I am happy to announce the availability of the first stable release of the new MediaWiki 1.23 release series.

MediaWiki 1.23 is a large release that contains many new features and bug fixes. This is a summary of the major changes of interest to users. You can consult the RELEASE-NOTES-1.23 file for the full list of changes in this version.

This is a Long Term Support release (LTS) and will be supported until May 2017.

Our thanks to everyone who helped to improve MediaWiki by testing the release candidates and submitting bug reports.

What's new?

MediaWiki 1.23 includes all changes released in the smaller 1.23wmfX software deployments to Wikimedia sites.
Skin autodiscovery deprecated

Skin autodiscovery, the legacy skin installation mechanism used by MediaWiki since very early versions (around 2004), has been officially deprecated and will be removed in MediaWiki 1.25.

MediaWiki 1.23 will emit warnings in production if a skin using the deprecated mechanism is found.
See Manual:Skin autodiscovery for more information and a migration guide for site admins and skin developers.
Notifications

With 1.23, MediaWiki starts to behave more like a modern website as regards notifications, to keep the editors of your wiki engaged and always up to date about what interests them. This used to require several custom settings.

(bug 45020) Make preferences "Add pages I create and files I upload to my watchlist" and "pages and files I edit" true by default.
(bug 45022) Make preference "Email me when a page or file on my watchlist is changed" true by default.
(bug 49719) Watch user page and user talk page by default.
This will allow your new users to immediately start benefiting from the watchlist and email notification features, without needing to first read all the docs to find out that they're as useful as they are.

Merged extensions

Merged into 1.23:

ExpandTemplates (bug 28264).
AssertEdit (bug 27841) - documented at API:Assert.
Interface

(bug 42026) Add option to only show page creations in Special:Contributions (and API).
Add new special page to list duplicate files, Special:ListDuplicatedFiles.
(bug 60333) Add new special page listing tracking categories (Special:TrackingCategories).
Editing

A new special page Special:Diff was added, allowing users to create internal links to revision comparison pages using syntax such as Special:Diff/12345, Special:Diff/12345/prev or Special:Diff/12345/98765.
Help pages

With 1.23, MediaWiki begins a process of consolidation of its help pages. Now, most are using the Translate extension and can be easily translated and updated in hundreds languages.

In the coming months, we'll focus on making more of the central help pages translatable and on linking them from the relevant MediaWiki interfaces for better discoverability. Please help: add your own translations; update existing pages and cover missing MediaWiki topics.

Traditionally, help pages have been scattered on countless wikis and poorly translated; most of those on mediawiki.org were migrated with the help of some Google Code-in students.

CSS refresh for Vector

Various Vector CSS properties have been converted to LESS variables.
The font size of #bodyContent/.mw-body-content has been increased to 0.875em.
The line-height of #bodyContent/.mw-body-content has been increased to 1.6.
The line-height of superscript (sup) and subscript (sub) are now set to 1.
The default color for content text (but not the headers) is now #252525; (dark grey).
All headers have updated sizes and margins.
H1 and H2 headers now use a serif font.
Body font is "sans-serif" as always.
For more information see Typography refresh.

Configuration

Add Config and GlobalConfig classes:

Allows configuration options to be fetched from context.
Only one implementation, GlobalConfig, is provided, which simply returns $GLOBALS[$name]. There can be more classes in the future, possibly a database-based one. For convinience the "wg" prefix is automatically added.
This adds the $wgConfigClass global variable which is used to determine which implementation of Config to use by default.
The ContextSource getConfig and setConfig methods were introduced.
Full release notes: https://git.wikimedia.org/blob/mediawiki%2Fcore.git/1.23.0/RELEASE-NOTES-1.23 https://www.mediawiki.org/wiki/Release_notes/1.23

Download: http://download.wikimedia.org/mediawiki/1.23/mediawiki-1.23.0.tar.gz

GPG signatures: http://download.wikimedia.org/mediawiki/1.23/mediawiki-1.23.0.tar.gz.sig

Public keys: https://www.mediawiki.org/keys/keys.html

I'd suggest we upgrade to this version and then perhaps stick with it, only doing security updates, until we need to move to another version due to it no longer being supported or because we need some new functionality.

#745: Upgrade to BOA-2.2.6 Stable Edition

chris — Mon, 23 Jun 2014 09:32:31 GMT

Email from wiki:PuffinServer:

There is new BOA-2.2.6 Stable Edition available.

Please review the changelog and upgrade as soon as possible to receive all security updates and new features.

Changelog: http://bit.ly/newboa

Reading through the change log there doesn't appear to be anything of note that directly effects us, the new php versions:

PHP 5.4.28
PHP 5.5.12

Don't as we are still on PHP Version 5.3.28.

I think it would be worth doing this update one evening this week just to keep upto date with BOA.

Previous updates: wiki:PuffinServer#Upgradetickets

#725: Upgrade to BOA-2.2.5

chris — Fri, 02 May 2014 08:49:22 GMT

Note this ticket was opened to upgrade to BOA-2.2.4 but when the upgrade was done BOA-2.2.5 was out so BOA-2.2.4 was skipped

From the Changelog at http://bit.ly/newboa

### Stable BOA-2.2.4 Release - Full Edition
### Date: Wed Apr 30 17:03:36 PDT 2014
### Includes Aegir 2.x-boa-custom version.
# Release Notes:
  This release includes several bug fixes along with five updated platforms,
  plus some hot-fixes applied to previous stable after its release. We have
  also added a fix for known problem is recent Drupal 7.27 [#2245331] hence
  the change from Drupal 7.27.1 to 7.27.2 in all D7 platforms.
# Important - Read This First! (for self-hosted BOA only)
  If you haven't run full barracuda+octopus upgrade to latest BOA Stable
  Edition yet, don't use any partial upgrade modes explained in docs/UPGRADE.txt
  Once new BOA Stable is released, you must run *full* upgrades with commands:
  $ barracuda up-stable
  $ octopus up-stable all both
  For silent, logged mode with e-mail message sent once the upgrade is
  complete, but no progress is displayed in the terminal window, you can run
  alternatively, starting with screen session to avoid incomplete upgrade
  if your SSH session will be closed for any reason before the upgrade
  will complete:
  $ screen
  $ barracuda up-stable log
  $ octopus up-stable all both log
  Note that the silent, non-interactive mode will automatically say Y/Yes
  to all prompts and is thus useful to run auto-upgrades scheduled in cron.
  If you have skipped some recent BOA releases, and you have new default config
  option: _PERMISSIONS_FIX=NO in your /root/.barracuda.cnf configuration file,
  plus, you are not sure if you follow best practices for managing permissions
  as recommended in our docs: https://omega8.cc/node/116 then we recommend
  that you change it to _PERMISSIONS_FIX=YES temporarily, or even permanently
  if your VPS is fast enough, and then run this powerful script as root:
  $ bash /var/xdrago/daily.sh
  Note that BOA 'legacy' mode is still at version 2.1.3
# Updated Octopus platforms:
  ### Drupal 7.27.2
  Commerce 1.25 ---------------- https://drupal.org/project/commerce_kickstart
  Commerce 2.14 ---------------- https://drupal.org/project/commerce_kickstart
  Commons 3.11 ----------------- https://drupal.org/project/commons
  Panopoly 1.5 ----------------- https://drupal.org/project/panopoly
  ### Pressflow 6.31.1
  Commons 2.17 ----------------- https://drupal.org/project/commons
  Note: Always read and follow upgrade procedure if explained in the distro
  release notes, like for Panopoly 1.5 at https://drupal.org/node/2255133
# New o_contrib modules:
  * print-6.x-1.19 (includes patch to auto-detect /usr/bin/wkhtmltopdf)
  * print-7.x-2.0  (includes patch to auto-detect /usr/bin/wkhtmltopdf)
# New features and enhancements in this release:
  * Support for session.gc_maxlifetime configurable via INI files.
  You can control session garbage collector (EOL) per site and per platform.
  The value (in seconds) of the session_gc_eol variable is used as
  session.gc_maxlifetime value and specifies the number of seconds after which
  data will be seen as 'garbage' and potentially cleaned up, resulting with
  $_SESSION variable discarded and affected authenticated users logged out.
  BOA default defined in the system level global.inc file is 86400 == 24h.
# Changes in this release:
  * Drush: Upgrade command line version 6 to mini-6-26-04-2014
  * Nginx: Use higher defaults for limit_conn to avoid error 503 (CloudFlare)
  * Nginx: Use more aggressive limits against spambots trying to rgstr accounts.
  * Redis: Integration module (the modern variant) upgrade to 7.x-2.x-o8-2.6-B
# System upgrades in this release:
  * Nginx 1.7.0
  * PHP 5.5.12
  * Redis 2.8.9
# Fixes in this release:
  * Add symlinks in the home directory if missing (every 5 minutes).
  * Add warning that Compass Tools install and upgrade may take a LONG time.
  * Always define _PHP_CN variable properly.
  * Do not delete symlinks to wrappers to avoid false LFD alarms.
  * Fix for 'Force backward compatible SERVER_SOFTWARE'.
  * Fix in websh for _IN_PATH logic to not break backend Drush tasks.
  * Fix the logic for wrappers update and symlinks.
  * Force MariaDB 5.5 re-install if installed version doesn't match latest.
  * Improve status messages to display when silent mode is used on upgrade.
  * Improve whitelisting in the websh wrapper.
  * Issue #2238805 - Command filtering - no word containing *drush* is allowed.
  * Issue #2241495 - wkhtmltopdf stopped working after upgrade.
  * Issue #2247997 - Update docs/REMOTE.txt with workaround for websh issue.
  * Issue #2250397 - Always follow (limited) redirects in cURL requests.
  * Issue #GH-304  - [rvm] use $_RUBY_VERSION as default.
  * Issue #GH-305  - Check disk usage before running install/upgrade.
  * Issue #GH-306  - Allow ruby 1.8 to remain installed.
  * Nginx: Allow to configure keywords for aggressive requests rate monitoring.
  * Nginx: Sync FastCGI timeouts with other Nginx and PHP-FPM defaults.
  * PHP: Add /opt/local/bin/php tmp symlink on barracuda/octopus upgrade.
  * PHP: Allow to set custom _PHP_FPM_TIMEOUT but not lower than 60 (in seconds)
  * PHP: Always respect _PHP_FPM_WORKERS variable if set to numeric value > 0
  * PHP: Better defaults for realpath_cache_ttl and realpath_cache_size.
  * PHP: Fix for CVE-2014-0185 privilege escalation in FPM (doesn't affect BOA)
  * PHP: pm.max_children was not properly updated on FPM version self-switch.
  * PHP: Sync incorrect default_socket_timeout with max_execution_time (180s).
  * PHP: Use 30s for pm.process_idle_timeout - it prevents too high RAM usage.
  * PHP: Variable _PROCESS_MAX_FPM is not used on the Satellite Instance level.
  * Postfix: Force re-install if broken permisions detected on upgrade.
  * Prevent duplicate cron invocations with more strict delays.
  * Shell: Proper fix for wildcard in the path (cd command only)
  * Standardize install and upgrade for Chive, SQL Buddy and CGP.
  * Sync Redis timeout with default FPM timeout (180s).
  * Sync SQL connect_timeout with default mysql.connect_timeout in PHP (60s).
  * Update the logic for multi-version PHP support in BOND.
  * Update the logic for multi-version PHP support in docs/REMOTE.txt

#721: Upgrade to BOA-2.2.3 Stable Edition

chris — Sat, 19 Apr 2014 05:58:00 GMT

wiki:PuffinServer has sent this email:

There is new BOA-2.2.3 Stable Edition available.

Please review the changelog and upgrade as soon as possible to receive all security updates and new features.

Changelog: http://bit.ly/newboa

The Changelog contains:

### Stable BOA-2.2.3 Release - Full Edition
### Date: Fri Apr 18 12:57:40 PDT 2014
### Includes Aegir 2.x-boa-custom version.
# Release Notes:
  This release includes several bug fixes and security upgrades both for the
  system services and Drupal core, along with three updated platforms and new
  features, including support for MariaDB 10.0 and Ubuntu 14.04 LTS Trusty.
# Important - Read This First! (for self-hosted BOA only)
  If you haven't run full barracuda+octopus upgrade to latest BOA Stable
  Edition yet, don't use any partial upgrade modes explained in docs/UPGRADE.txt
  Once new BOA Stable is released, you must run *full* upgrades with commands:
  $ barracuda up-stable
  $ octopus up-stable all both
  For silent, logged mode with e-mail message sent once the upgrade is
  complete, but no progress is displayed in the terminal window, you can run
  alternatively, starting with screen session to avoid incomplete upgrade
  if your SSH session will be closed for any reason before the upgrade
  will complete:
  $ screen
  $ barracuda up-stable log
  $ octopus up-stable all both log
  Note that the silent, non-interactive mode will automatically say Y/Yes
  to all prompts and is thus useful to run auto-upgrades scheduled in cron.
# Updated Octopus platforms:
  ### Drupal 7.27.1
  Guardr 1.3 ------------------- https://drupal.org/project/guardr
  Open Atrium 2.17 ------------- https://drupal.org/project/openatrium
  Recruiter 1.2 ---------------- https://drupal.org/project/recruiter
# New features and enhancements in this release:
  * Add docs/FAQ.txt
  * Add support for MariaDB 10.0 or 5.5 install via _DB_SERIES variable.
  * Add support for Ubuntu 14.04 LTS Trusty.
  * Improve auto-healing for multi-version PHP-FPM setup.
  * Improve docs/UPGRADE.txt
  * Improve health check for protected vhosts during live SSH-auth update.
# Changes in this release:
  * Issue #GH-299 - Force disable LESS developer mode on production sites.
  * Move custom scripts to /opt/local/bin/
  * Normalize localhost entry in /etc/hosts to avoid FQDN mapped to 127.0.0.1
  * PHP: Do not use separate FPM pool for cron if _PHP_FPM_DENY is empty.
# System upgrades in this release:
  * MariaDB 5.5.37
# Fixes in this release:
  * Add 'exit 0' line if missing.
  * Add /opt/local/bin to PATH by default.
  * Add symlinks for wrappers only temporarily.
  * Better gem uninstall options.
  * Compass: Multiple fixes for various expected gems versions install/upgrades.
  * Do not override lshell env_path in websh wrapper.
  * Do not use monitored bin path for custom scripts to avoid LFD false alarms.
  * Extra db GRANT for 127.0.0.1 not added when migrating site.
  * Improve auto-healing to create required directories in /var/run/ if missing.
  * Issue #2230269 - New Jetty 9 version overrides JETTY_PORT=8099 with 8080.
  * Issue #2235991 - Drush make needs better exceptions in websh wrapper.
  * Issue #2236475 - Clarify what the Legacy mode really means.
  * Issue #2238965 - Add missing path to switch_to_bash().
  * Issue #2241013 - Git commands should be whitelisted in websh wrapper.
  * Issue #2241495 - wkhtmltopdf stopped working after upgrade.
  * Issue #GH-301 - Update the list of restricted keywords for Octopus username.
  * Make sure that permissions on Chive Manager dir/files are correct.
  * Note: _SSL_FROM_SOURCES=YES is ignored and not needed on Wheezy and Precise.
  * Remove the line with header TABLE_NAME (sqlmagic).
  * Reset PATH to avoid RVM overrides after Compass Tools install/upgrade.
  * Shell: Allow to run 'drush cache-clear drush' in any directory.
  * The _PHP_MODERN_ONLY variable is no longer used.
  * Ubuntu 14.04 LTS Trusty requires MariaDB 10.0
  * Use hostname -b instead of deprecated hostname -v.

Note that we are already running the latest MariaDB, see ticket:692#comment:31

See also the last BOA upgrade ticket, BOA-2.2.2 ticket:707 and also ticket:670

#707: Upgrade to BOA-2.2.2

chris — Wed, 26 Mar 2014 19:25:52 GMT

I have created a new ticket for this as I have found having one ticket (see ticket:629) for all BOA upgrades makes it really hard to review past upgrades.

Upgrades from BOA-2.0.7 to BOA-2.1.1 did have their own tickets, see wiki:PuffinServer#Upgradetickets and unless there is a convincing reason not to have one ticket per upgrade I'd rather do it like this.

Jim has pointed out on the Ttech list that:

the v2.2.0 changelog is up as of a few days ago: http://drupalcode.org/project/barracuda.git/blob/HEAD:/CHANGELOG.txt

The Changelog starts:

Stable BOA-2.2.0 Release - Full Edition
Date: TBD
Includes Aegir 2.x-boa-custom version.
Release Notes:

There are many important changes and improvements in this release you should be aware of *before* running your BOA system upgrade.

Even if you are on a hosted BOA system with upgrades managed for you, it is very important to read at least this extensive release notes.

And if you are more curious, read also the big changelog further below, which covers only a small number of over 530 commits since BOA-2.1.3

I have yet to read the rest of the Changelog.

There is also a task to copy the proposed changes to the BOA configuration in ticket:629 over to this ticket.

Should people other than chris and ed be CC's for this ticket?

#612: Upgrade to BOA-2.1.1 Stable Edition

chris — Sun, 03 Nov 2013 11:11:24 GMT

I have been sent this email from wiki:PuffinServer:

There is new BOA-2.1.0 Stable Edition available.

Please review the changelog and upgrade as soon as possible to receive all security updates and new features.

Changelog: http://bit.ly/newboa

I could potentially do this upgrade tonight as it's a quite time for the server -- Jim, any reason not to apply this update tonight?

#691: Upgrade Wagn hosting for patterns site

chris — Fri, 21 Feb 2014 16:53:43 GMT

The http://patterns.transitionresearchnetwork.org/ site is running using a development set up and the webrick server falls over every now and then, so the plan is to upgrade to a production style setup.

References:

ticket:635 webrick server problems
wiki:TransitionResearchWagn documentation
ticket:561 the last install
http://wagn.org/installation

#535: Upgrade Puffin, Penguin and Parrot from Debian Squeeze to Wheezy

chris — Fri, 26 Apr 2013 18:49:16 GMT

Debian 7 is due out on 5th May 2013 and wiki:PuffinServer, wiki:PenguinServer and wiki:ParrotServer will need upgrading.

#556: Upgrade Piwik to version 1.12

chris — Thu, 30 May 2013 21:40:48 GMT

A new version of Piwik came out today with some interesting looking features:

#732: Upgrade Piwik to 2.3.0

chris — Tue, 27 May 2014 09:21:24 GMT

Piwik 2.3.0 is a new major release of Piwik!

http://piwik.org/changelog/piwik-2-3-0/

#664: Upgrade Piwik to 2.0.2

chris — Tue, 24 Dec 2013 14:35:06 GMT

This is a bugfix version which fixes 3 issues, see http://piwik.org/changelog/piwik-2-0-1/

Upgrade notes are here, wiki:PiwikServer#Updates

#706: Upgrade Mediawiki to 1.22.5 and install the new VisualEditor

chris — Wed, 26 Mar 2014 15:46:03 GMT

From MediaWiki-announce:

this is a notice that on Thursday, March 27th between 17:00-18:00 UTC (Thursday, March 27th, 9:00-10:00am PST) we will release security and maintenance updates for current and supported branches of the MediaWiki software. Downloads and patches will be available at that time.

#595: Upgrade Mediawiki to 1.19.8 from 1.19.7

chris — Wed, 11 Sep 2013 22:18:05 GMT

From https://git.wikimedia.org/blob/mediawiki%2Fcore.git/REL1_19/RELEASE-NOTES-1.19

MediaWiki 1.19.8

This is a security and maintenance release of the MediaWiki 1.19 branch.

Changes since 1.19.7

SECURITY: Sanitize ResourceLoader exception messages
SECURITY: Token-getting functions will fail when using jsonp callbacks.
SECURITY: Fix extension detection with 2 .'s
Allow a string other than '*' as condition for DatabaseBase::delete()
Purge upstream caches when deleting file assets.
jquery.tablesorter: Add missing dependency on jquery.mwExtension

#536: Upgrade Mediawiki to 1.19.6

chris — Mon, 29 Apr 2013 20:35:32 GMT

A new version of Mediawiki is due out tomorrow:

This is a notice that on Tuesday, April 30th between 20:00-21:00 UTC (1-2pm PDT) Wikimedia Foundation will release security updates for current and supported branches of the MediaWiki software. Downloads and patches will be available at that time, with the git repositories updated later that afternoon.

http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-April/000128.html

The upgrade should simply be a matter of following the steps taken last time, see ticket:532#comment:2

#620: Upgrade MediaWiki to 1.19.9

chris — Fri, 15 Nov 2013 14:57:58 GMT

See the announcement email:

I would like to announce the release of MediaWiki 1.21.3, 1.20.8 and
1.19.9. These releases fix 2 security related bugs that could affect users
of MediaWiki. Download links are given at the end of this email.
* Kevin Israel (Wikipedia user PleaseStand) identified and reported two
vectors for injecting Javascript in CSS that bypassed MediaWiki's blacklist
(CVE-2013-4567, CVE-2013-4568).
<https://bugzilla.wikimedia.org/show_bug.cgi?id=55332>
* Internal review while debugging a site issue discovered that MediaWiki
and the CentralNotice extension were incorrectly setting cache headers when
a user was autocreated, causing the user's session cookies to be cached,
and returned to other users (CVE-2013-4572).
<https://bugzilla.wikimedia.org/show_bug.cgi?id=53032>
Additionally, the following extensions have been updated to fix security
issues:
* CleanChanges: MediaWiki steward Teles reported that revision-deleted IP's
are not correctly hidden when this extension is used (CVE-2013-4569).
<https://bugzilla.wikimedia.org/show_bug.cgi?id=54294>
* ZeroRatedMobileAccess: Tomasz Chlebowski reported an XSS vulnerability
(CVE-2013-4573).
<https://bugzilla.wikimedia.org/show_bug.cgi?id=55991>
* CentralAuth: MediaWiki developer Platonides reported a login CSRF in
CentralAuth (CVE-2012-5394).
<https://bugzilla.wikimedia.org/show_bug.cgi?id=40747>
Full release notes for 1.21.3:
<https://www.mediawiki.org/wiki/Release_notes/1.21>
Full release notes for 1.20.8:
<https://www.mediawiki.org/wiki/Release_notes/1.20>
Full release notes for 1.19.9:
<https://www.mediawiki.org/wiki/Release_notes/1.19>
For information about how to upgrade, see
<https://www.mediawiki.org/wiki/Manual:Upgrading>

The steps followed for the last upgrade can be followed again, see ticket:595 and see also the documentation at wiki:PenguinServer#wiki.transitionnetwork.org

#699: Update Core & Plugins on transitionculture.org

sam — Mon, 10 Mar 2014 11:46:33 GMT

This site needs an update.

I'll do a database backup then update it.

#567: Update BOA for new Redis 2.6.14

chris — Tue, 02 Jul 2013 11:10:27 GMT

A suggestion from Jim:

BOA now includes Redis 2.6.14 <https://raw.github.com/antirez/redis/2.6/00-RELEASENOTES> if you do a 'barracda up-stable system'... What interests me about this is these lines from the changelog:

UPGRADE URGENCY: HIGH because of the following two issues:

Lua scripting + Replication + AOF in slaves problem (see Issue #1164).
AOF + expires possible race condition (see Issue #1079).

It's a long shot, but that could maybe be part of the issue we've seen recently.

I'm not sure if this is best done now or later tonight when the site is less busy?

#900: Unusal High Load on Puffin

chris — Sun, 31 Jan 2016 12:24:40 GMT

For the first time since the BOA cron jobs were commented out we have had some very high loads on PuffinServer, this is shown in the Munin graphs, I'll post some specific ones in comments to this ticket.

#845: Unneeded FTP server on PuffinServer

chris — Mon, 13 Apr 2015 11:03:12 GMT

The BOA stack installs and runs a FTP server, which we don't need as we use SSH/SFTP and it therefore causes a unneeded load, see ticket:692#comment:177 for an example.

#550: Transition Town Totnes migration

chris — Sun, 19 May 2013 14:59:44 GMT

It has been agreed to migrate Transition Town Totnes, http://transitiontowntotnes.org/ to wiki:ParrotServer and this ticket has been created to record this process and the time spent on it and the documentation of the migration.

There is also an issue regarding what, if anything, to do with the old Drupal site at http://archive.transitiontowntotnes.org/

#577: Transition Streets Wordpress Migration

chris — Tue, 06 Aug 2013 21:28:25 GMT

This is a ticket to document the migration of the Transition Totnes http://www.transitionstreets.org.uk/ wiki:WordPress site to wiki:ParrotServer.

#842: Trac fetchmail

chris — Thu, 02 Apr 2015 12:54:11 GMT

There is a new SSL/TLS certificate at mail.webarch.net so these steps need following: wiki:TransitionTrac#Fetchmail

#546: Trac documentation

chris — Wed, 08 May 2013 18:47:09 GMT

Better documentation of things like how to set billing times etc

#642: Trac "databasee is locked" errors in /var/log/messages

chris — Sat, 07 Dec 2013 13:46:43 GMT

I have just noticed these errors in /var/log/messages on wiki:PenguinServer:

Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor TimingEstimationAndBillingPage: OperattionalError: database is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor AdminModule: OperationalError: databasse is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor SearchModule: OperationalError: databaase is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor QueryModule: OperationalError: databasse is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor ReportModule: OperationalError: databaase is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor RoadmapModule: OperationalError: databbase is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor TicketModule: OperationalError: databaase is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor TimelineModule: OperationalError: dataabase is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor BrowserModule: OperationalError: databbase is locked
Dec  1 23:09:00 penguin <11>Trac[chrome] ERROR: Error with navigation contributor WikiModule: OperationalError: databaseeis locked

There are lots more of these, including some from this morning.

Trac still seems to be working OK so I don't know how significant they are.

#713: Ticket clearing

chris — Wed, 02 Apr 2014 09:30:31 GMT

There are 33 Open Maintenance Tickets this ticket is to record the time taken to close as many of them as possible.

#585: TTech Meeting 5th September 2013

chris — Thu, 05 Sep 2013 07:47:16 GMT

This ticket has been created for the TTech Skype meeting due to take place today.

#601: TTech Meeting 3rd October 2013

chris — Thu, 03 Oct 2013 09:03:42 GMT

This is a ticket for notes and times for the online meeting held on 3rd October 2013.

The ticket for the last meeting is ticket:585

#654: TIs appearing in 'TIs by list' view without a number

ed — Thu, 12 Dec 2013 12:43:12 GMT

Some TIs are appearing in the 'Initiatives by number' view - but don't have numbers:

https://www.transitionnetwork.org/initiatives/by-number

for Sam to invesitage and solve or put to techs in January

#568: TC blog: can't not send notifications

ed — Mon, 08 Jul 2013 10:20:16 GMT

I can't see how to do a node edit and *not* send a notification - here seen on the Transition Culture blog:

https://www.transitionnetwork.org/node/32863/edit

please advise - there's been some kerfuffle about the TC blog move so swift resolution much appreciated

#826: Switching MX records from United to Google

ed — Thu, 15 Jan 2015 17:15:41 GMT

TN are switching the MX records from United to Google on Friday 23/1/15.

Will this affect the website/Web Architects in any way that we need to plan for in advance? Scripts, web forms etc? Anything you can think of?

#614: Subscription option for Social Reporters CT

ed — Wed, 06 Nov 2013 16:49:49 GMT

We want a button on the Social Reporters section that enables users to easily subscribe to the Social Reporters' blog posts CT. Offers the option to all types of user:

Users may not be logged in
Users may not be registered

This is a bit like the sub button on Transition Culture section
I can't find it in TRAC but have this memory of enabling email-only subscriptions to not-registered-users from olden days - can you enlighten me about that? I'm not sure it's the answer - we probably want them to register so they can add comments - but this request has brought up that old function

#724: Subscription emails from Rob's blog not arriving.

sam — Tue, 29 Apr 2014 09:21:12 GMT

A user has got in touch to let us know he is not getting Rob's updates by email. He's still subscribed.

I just checked my mail and the last one I received was on the 11/4. I'll have a look and see if I can work it out.

#839: Stable BOA-2.4.1 Release

chris — Tue, 24 Mar 2015 10:44:41 GMT

BOA appears to have stopped sending email to notify that new versions are available, I just manually checked the Changelog and discovered that BOA-2.4.1 came out on 8th March 2015:

### Stable BOA-2.4.1 Release - Full Edition
### Date: Sun Mar  8 14:56:51 PDT 2015
### Milestone URL: https://github.com/omega8cc/boa/milestones/2.4.1
### Latest hotfix added on: Wed Mar 11 11:58:52 PDT 2015
  @=> Includes Aegir Hostmaster 2.x-head with improvements
  @=> Includes Aegir Provision 3.x-head with improvements
  @=> Includes Drush 7.0.0-alpha9 customized for BOA
# Release Notes:
  This new BOA release includes one new and 12 updated Aegir platforms,
  8 new features and enhancements, 15 new software versions, 10 other changes,
  plus over 38 bug fixes, with most notable features and changes listed below:
  @=> Add duobackboa with /root/.duobackboa.cnf file to run duplicate backups
  @=> Add SSL with TLS/SNI on server with one IP, multiple certificates support
  @=> Add support for Octopus batch migration - see docs/MIGRATE.txt for details
  @=> Allow to use _PHP_GEOS=YES with all PHP versions
# New Octopus platforms:
  OpenAid 2.0 ------------------ https://drupal.org/project/openaid
# Updated Octopus platforms:
  Commerce 1.33 ---------------- https://drupal.org/project/commerce_kickstart
  Commerce 2.21 ---------------- https://drupal.org/project/commerce_kickstart
  Commons 2.22 ----------------- https://drupal.org/project/commons
  Commons 3.22 ----------------- https://drupal.org/project/commons
  Drupal 8.0.0-b7 -------------- https://drupal.org/drupal-8.0
  Guardr 2.8 ------------------- https://drupal.org/project/guardr
  OpenAtrium 2.32 -------------- https://drupal.org/project/openatrium
  OpenChurch 2.1-b5 ------------ https://drupal.org/project/openchurch
  OpenOutreach 1.16 ------------ https://drupal.org/project/openoutreach
  OpenScholar 3.20.0 ----------- http://theopenscholar.org
  Panopoly 1.18 ---------------- https://drupal.org/project/panopoly
  Recruiter 1.5 ---------------- https://drupal.org/project/recruiter
# New features and enhancements:
  * Add compatibility with latest VS beng kernel
  * Add duobackboa with /root/.duobackboa.cnf file to run duplicate backups
  * Add support for multivalued fields in SOLR 4 - pull request #626
  * Add support for mysqladmin proc logging
  * Add support for Octopus batch migration - see docs/MIGRATE.txt for details
  * Add support for scout/mysql monitoring
  * CSF: Add popular ports 222 and 2222 to TCP_OUT by default
  * SSL with TLS/SNI on server with one IP, multiple certificates - fixes #465
# Changes:
  * Allow to run automated SQL conversion only weekly
  * Allow to use _PHP_GEOS=YES with all PHP versions
  * Do not send extra nocache cookie on GET requests
  * Drush mini-7-07-03-2015
  * Make barracuda wrapper available on initial install to avoid confusion
  * Nginx: Update for crawlers exceptions list
  * Redis Integration Module: Update to version mod-05-03-2015
  * Remove dependency on legacy Drush 4
  * Use latest Apache Solr Search 6.x-3.x config
  * Use latest Apache Solr Search 7.x-1.x config
# System upgrades:
  * Apache Solr 4.9.1
  * cURL 7.41.0 (if installed from sources)
  * Git 2.3.0 (if installed from sources)
  * Jetty 9.2.7.v20150116
  * MariaDB 10.0.17
  * MariaDB 5.5.42
  * MariaDB Galera Cluster 10.0.17
  * Nginx 1.7.10
  * OpenSSL 1.0.2 (if installed from sources)
  * PHP 5.4.38
  * PHP 5.5.22
  * PHP 5.6.6
  * PHP: ionCube loader 4.7.4
  * Pure-FTPd 1.0.37
  * Ruby 2.2.1
  * Use duplicity 0.7.01 and boto 2.36.0 - fixes #630
  * Vnstat 1.13
# Fixes:
  * [provision] False "load on system too heavy" messages - fixes #619
  * [provision] Issue #2350695 - Profile is registered twice, also as a module
  * [provision] Nginx: Remove webform keyword from regex locations - fixes #599
  * Add also manage_ltd_users to the list - fixes #616
  * Avoid installing New Relic with no valid license key provided - fixes #608
  * Do not add no longer used symlink
  * Do not create conflicting plain HTTP proxy for single IP mode - fixes #465
  * Do not delete backboa while duplicity is running
  * Do not replace any contrib in latest OA - fixes #2420131
  * Do not run D7 core hotfix on already fixed instances
  * Fix for legacy systems autoupdate logic
  * Fix for missing chattr -i on web user update
  * Fix for missing datestamp
  * Fix for too dangerous pdnsd auto-config logic
  * Fix pdnsd restarts procedures - fixes #610
  * Fix permissions for pdnsd if needed
  * Fix variable in autoupboa - pull request #629
  * Force php.ini update
  * Hotfix for cluster instances
  * Hotfix for OpenSSL/cURL versions out of sync
  * How to enable permanent redirect to HTTPS with single IP - #465
  * Issue #2425963 - Broken slider in Commerce Kickstart 2.21
  * Make sure that @hostmaster alias works after migration
  * Provide a patch for older civicrm versions to make them Drush 7 compatible
  * Randomize backups schedule to avoid issues with AWS limits
  * Reload nginx service automatically - #465
  * Remove conflicting pdnsd restarts to avoid race conditions - fixes #610
  * Remove deprecated sysctl options
  * Remove post-install leftovers if needed
  * Single PHP-version installation fails - fixes #598
  * Typo - fixes #539
  * Unable to connect to SOLR on latest head - fixes #623
  * Update installers as expected, also with _SKYNET_MODE=OFF - fixes #644
  * Update meta-installers for new stable
  * Update the upgrade procedure how-to - fixes ##616
  * Use civicrm-4.5.6 compatible with Drush 7
  * Use correct AWS Endpoint when us-east-1 Region is specified
  * Use correct open_basedir for lshell user - fixes #603
  * Use separate loops for symlinks and ghost cleanup
  * Workaround for EntityMalformedException in Open Outreach - fixes #229
  * Workaround for missing interface/lo.pdnsd on legacy systems
  * Workaround for SA-CONTRIB-2015-063 - Webform - Cross Site Scripting

I'll run the upgrade one evening this week.

#827: Stable BOA-2.4.0 Release

chris — Mon, 19 Jan 2015 20:11:09 GMT

No release date yet, but lots of detail in the Changelog:

https://github.com/omega8cc/boa/blob/master/CHANGELOG.txt

2.4.0 issues:

https://github.com/omega8cc/boa/milestones/2.4.0

#844: Stable BOA 2.4.2 Release

chris — Fri, 10 Apr 2015 10:34:56 GMT

Looks like all the tickets for BOA 2.4.2 have been closed and it is due to be released today:

https://github.com/omega8cc/boa/milestones

The Changelog has not yet been updated:

https://github.com/omega8cc/boa/blob/master/CHANGELOG.txt

For some unknown reason BOA no longer sends emails when a new version is out so the Changelog will need checking manually.

#677: Spike in MyISAM (search) database activity, Redis unable to cache such requests

chris — Wed, 15 Jan 2014 10:49:33 GMT

Since Sunday there has been a marked increase in MySQL activity and also a drop in Redis memory use, I suspect these things are related.

I'll post some Munin graphs below to illustrate this.

#579: Special email alert for Rob Hopkins blog posts on TN.org

ed — Mon, 12 Aug 2013 13:49:30 GMT

Can we create a specific email alert for new blog posts from Rob Hopkins' blog (/blogs/rob-hopkins)?
Can Ed do this?
See below:

Proposed new alert: ~

From: [Rob Hopkins at Transition Network <site@…>] Subject: New blog post from Rob Hopkins' Transition Culture To: [subscriber email] Reply to: [<site@…>]

Hello. I've written a new blog Transition Culture blog post

You can read it and leave comments here: [LINK]

[BLOG POST TITLE] [LINE BREAK - FULL CLEAR LINE] [BLOG POST TEASER] [LINE BREAK - FULL CLEAR LINE]

Best regards, Rob

-- [TN EMAIL SUBSCRIPTION AUTO-BLURB] This is an automatic message from Transition Network To manage your subscriptions, browse to http://www.transitionnetwork.org/user/285/notifications You can unsubscribe at http://www.transitionnetwork.org/notifications/unsubscribe/subscription/...

#656: Spam being sent out via Transition Culture

chris — Sat, 14 Dec 2013 14:48:21 GMT

I'm getting several of thee day day:

From: Mail Delivery System <Mailer-Daemon@parrot.webarch.net>
Date: Sat, 14 Dec 2013 13:21:02 +0000
To: tc@parrot.webarch.net
Subject: Mail delivery failed: returning message to sender
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
  inxzkysnf@gmail.com
    SMTP error from remote mail server after RCPT TO:<inxzkysnf@gmail.com>:
    host gmail-smtp-in.l.google.com [173.194.78.26]:
    550-5.1.1 The email account that you tried to reach does not exist. Please try
    550-5.1.1 double-checking the recipient's email address for typos or
    550-5.1.1 unnecessary spaces. Learn more at
    550 5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 l11si2175565wjw.16 - gsmtp
------ This is a copy of the message, including all the headers. ------
Return-path: <tc@parrot.webarch.net>
Received: from tc (uid=1011)
        by parrot.webarch.net with local (Exim 4.80)
        (envelope-from <tc@parrot.webarch.net>)
        id 1Vrp9L-0002BF-Kf
        for inxzkysnf@gmail.com; Sat, 14 Dec 2013 13:20:56 +0000
To: inxzkysnf@gmail.com
Subject: Thanks for your message
X-PHP-Originating-Script: 1011:lib_nonajax.php
From: robjhopkins@gmail.com
Reply-To: robjhopkins@gmail.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----MIME_BOUNDRY_main_message"
Message-Id: <E1Vrp9L-0002BF-Kf@parrot.webarch.net>
Date: Sat, 14 Dec 2013 13:20:55 +0000
This is a multi-part message in MIME format.
------MIME_BOUNDRY_main_message
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: quoted-printable
Dear timberland france,
Thank you for your message on the Transition Culture website - I will get back to you as soon as possible.
------MIME_BOUNDRY_main_message
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><BODY>
<div style=3D"font:normal 1em arial; margin-top:10px"><p><strong>Dear timberland france,</strong></p>
<p>Thank you for your message on the Transition Culture website - I will get back to you as soon as possible.
<div style=3D"width:80%; background:#f4faff ; color:#aaa; font-size:11px; padding:10px; margin-top:20px"><strong>This is an automatic
+confirmation message. 14 December, 2013.</strong></div></div></BODY></HTML>

It appears to be spam sent fro the Transition Culture WordPress site to a Gnmail user who doesn't exist.

It appears, from the email headers that this form is being used for the spamming /home/tc/sites/default/wp-content/plugins/contactforms/lib_nonajax.php.

This needs some more investigation.

#554: Site slow down and MySQL load increase

chris — Tue, 28 May 2013 18:11:51 GMT

Since the upgrade to MariaDB 5.5.31, done on ticket:218#comment:93 (and fixed on ticket:548#comment:32) there appears to have been been a noticeable slowdown in the time for pages to be generated, measuring with http://tools.pingdom.com/fpt/ the front page alone takes around 5 seconds to generate.

There is a clear increase in the amount of MySQL/MariaDB activity measured by Munin, see the attached graphs, the upgrade was done around midday on 24th May 2013. There has also been a increase in traffic according to the firewall graphs. The memory usage of redis has also dropped right down and the database memory usage has significantly increased.

It's not totally clear if the cause of this change in behaviour of the site is related to the MySQL/MariaDB upgrade or if there was a coincidental change in the traffic to the site at the same time. There is no noticeable change in the visitors recorded in the Piwik stats.

According to pingdom the front page of the site is now "slower than 77% of all tested websites" with a total load time of around 6 seconds, almost all of this is down to the wait of around 5 seconds for the index.php file. This can also be tested from parrot with Apache bench, sometimes cached pages are served up and these appear in an instance, if the front page is generated it takes around 5 seconds, see wiki:LoadTimes#a2013-05-28

#828: Site down due to massive load spike 2015-01-29

chris — Thu, 29 Jan 2015 17:09:07 GMT

Seems to be recovering now, this ticket is to try to find the cause.

#576: Site down

ed — Thu, 01 Aug 2013 09:42:44 GMT

Been down for 15 minutes by now I reckon

#755: Site administrator's file upload capacity: not responding to changes

ed — Tue, 08 Jul 2014 09:21:16 GMT

Rob Hopkins reached the limit for file uploads and could not upload any more images (not good for him as he writes posts with lots of pictures daily).

Sam raised the limit. This change in the limit does not seem to have affected Rob's situation - he still can't upload any images.

Looking at these settings: https://www.transitionnetwork.org/admin/settings/uploads

Rob should be able to upload more - he is a site editor and admin - but he can't.

Please investigate

#687: Set up cert expiry date checking for all SSL certs

chris — Mon, 03 Feb 2014 13:35:01 GMT

Last month the *.transitionnetwork.org cert expired before it was replaced with a new one and users therefore got warnings for around half a day, see ticket:685.

A script to check the expiry dates was set up on wiki:PuffinServer on ticket:685#comment:9 and this ticket is to document setting this up for wiki:PenguinServer and wiki:ParrotServer.

#557: Set up a re-direct

ed — Tue, 04 Jun 2013 15:21:18 GMT

Please can you set up two re-direct/pointers

from: "power.transitionnetwork.org" to: "http://www.transitionnetwork.org/power-just-doing-stuff"

AND

from: "http://www.thepowerofjustdoingstuff.org" (we own in gandi) to: "http://www.transitionnetwork.org/power-just-doing-stuff"

#739: Set up DEV and other drupal accounts for Annesley

ed — Wed, 11 Jun 2014 14:38:42 GMT

is this you chris? or a sam job? or paul?

#599: Server time drift

chris — Sun, 29 Sep 2013 21:57:59 GMT

The servers are not keeping good time at the moment.

#815: Security updates need to be applied for a couple of contributed modules:

paul — Tue, 16 Dec 2014 13:45:16 GMT

DBTNG Hierarchical Select

#920: SSL weirdness?

sam — Thu, 14 Jul 2016 20:20:19 GMT

Hi Chris

So Paul put the site into maintenance mode, took a database dump and then tried to re-enable live mode using the drush command.

It seems it came out of maintenance mode OK, but we're now getting this certificate error.

I have changed the Zone file on Gandi in the meantime, but this doesn't seem to be propagating.

Any ideas?

Thanks

Sam

#685: SSL certificate about to expire?

sam — Thu, 23 Jan 2014 12:31:06 GMT

Hi Chris this dropped into my inbox this morning.

Can you tell from the following if it's a certificate we still use? Does it need to be renewed?

Thanks

Sam

---

Hello,

This mail is to inform you that your certificate SSL Standard (*.transitionnetwork.org) expires today, on 2014-01-24 00:59.

Warning: for Pro and Business certificates, web browsers have increased security. It can now take up to several weeks, and so we strongly recommend that you perform the operation as soon as possible.

If you would like to keep your certificate, we recommend renewing it today. For this you must launch the renewal process from the following page: https://www.gandi.net/admin/ssl/renew/26873

If you do not want to keep your certificate, then no further action is necessary on your part. It will be automatically revoked by our services and rendered useless.

#795: SHA1 Deprecation: Regenerate all certs using SHA256

chris — Fri, 10 Oct 2014 20:37:49 GMT

SHA1 SSL certs and chains are now flagged at SSLLabs, see SHA1 Deprecation: What You Need to Know, however Gandi doesn't yet support SHA256, see SHAAAAAAAAAAAAA which links to this tweet, when they do support SHA256 all the keys, certs and chains will need updating.

#785: SA-CONTRIB-2014-086 - Custom BreadCrumbs - Cross Site Scripting (XSS)

paul — Thu, 11 Sep 2014 15:54:35 GMT

@Ed Would you check my choice of component; I was looking for maintenance? Should I assign this to me as I create the ticket?

View online: https://www.drupal.org/node/2336263

Advisory ID: DRUPAL-SA-CONTRIB-2014-086
Project: Custom Breadcrumbs [1] (third-party module)
Version: 6.x, 7.x
Date: 2014-September-10
Security risk: 16/25 ( Critical)

AC:None/A:User/CI:Some/II:Some/E:Theoretical/TD:All [2]

Vulnerability: Cross Site Scripting

Custom Breadcrumbs allows administrators to set up parametrized breadcrumb trails for different content types, views, panels, taxonomy vocabularies and terms, paths, and a simple API that allows contributed modules to enable custom breadcrumbs for module pages and theme templates.

User input is not properly sanitized in all use cases, opening a Cross Site Scripting (XSS) vulnerability.

The vulnerability is only present when the custom breadcrumb is configured with the special identifier so that some of the breadcrumb items are not links. Typical example is that the last breadcrumb element is showing the current page title but is not a link. The XSS vulnerability is not triggered if all items of the breadcrumb are links and special identifier is not used.

/A CVE identifier [3] will be requested, and added upon issuance, in

accordance with Drupal Security Team processes./

Custom Breadcrumbs 6.x-1.x versions prior to 6.x-1.6
Custom Breadcrumbs 6.x-2.x versions are NOT affected
Custom Breadcrumbs 7.x-2.x versions prior to 7.x-2.0-beta1

Drupal core is not affected. If you do not use the contributed Custom Breadcrumbs [4] module, there is nothing you need to do.

Install the latest version:

If you use the Custom Breadcrumbs module version 1.x for Drupal 6.x,

upgrade to Custom Breadcrumbs 6.x-1.6 [5].

If you use the Custom Breadcrumbs module version 2.x for Drupal 7.x,

upgrade to Custom Breadcrumbs 7.x-2.0-beta1 [6].

Also see the Custom Breadcrumbs [7] project page.

Markus Sipilä [8]

Markus Sipilä [9]
Colan Schwartz [10] the module maintainer

Greg Knaddison [11] of the Drupal Security Team

The Drupal security team can be reached at security at drupal.org or via the contact form at https://www.drupal.org/contact [12].

Learn more about the Drupal Security team and their policies [13], writing secure code for Drupal [14], and securing your site [15].

_ Security-news mailing list Security-news@… Unsubscribe at https://lists.drupal.org/mailman/listinfo/security-news

#670: Roll back performance customisations and use stock BOA settings where possible

jim — Sat, 11 Jan 2014 20:51:30 GMT

Issue Given so much has changed since the initial issues on the server, I now strongly recommend reverting all settings changes that do not add features back to stock BOA settings after the next BOA release.

These would include all MySQL, PHP, FPM, Redis and other settings that have been for performance reasons, or to combat the situation where there was hardware/IO issues with the underlying server. I'm most interested in FPM and MySQL settings.

The next version of BOA will include some improvements we need (see 629: Upgrades to BOA which should handle load on our server with a lot of CPU cores. With this in place we'll be able to revert more easily to stock settings.

Rationale I'm not talking about rolling back changes that provide us with features or mission-critical capabilities, just the changes to the subsystems I list above for performance reasons.

It's my belief that these enhancements no longer match the needs of the server since the changes to filesystem and underlying hardware fixes have been completed. They also represent an ongoing risk around updates, future planning -- plus it's possible they might mean Puffin's web services need more memory than it otherwise would, costing TN more than it should need to spend on hardware.

Proposed solution

Await the next version of BOA, and setup the enhanced load settings per the documentation.
Revert all other changes to conf files for MySQL, PHP, FPM, Redis that do not add a feature or are not mission-critical.
Review /root/.barracuda.cnf and turn off any overrides and customisations we don't now need as a result of 2).
Run the BOA BOND.sh script to do the tuning of the server appropriate to the memory requirements. This will tune for the current levels on first pass.
Review Munin and site performance. If we need to make any tweaks then we can do a minimal set as required -- keeping an eye on memory usage.
Once a few days have gone by I would hope that the overall memory use will be lower, OR with more cached data. At this point we can either re-run the barracuda installer with the _RESERVED_RAM set to 1-4 Gb, or simply reduce the memory available to Puffin.
Repeat from 4, using BOND.sh to optimise for the new memory footprint.

Clearly, it's possible no memory savings can be made, or just 1Gb or so is sensible. Either way, rolling back the changes made for a system that has changed immensely is worth attempting to compare current (tweaked) performance to the stock system. Since current settings are all documented and can be backed up, we should be able to test this with no risk and the ability to roll back as needed.

Next steps

Chris and Ed to give their thoughts.
Ed to green-light before we proceed in too much detail or take any action.
Chris and Jim to establish the changes and outcomes.
Chris, Jim and whoever to do the new optimisation process.

#831: Rob is having Image upload issues

ade — Tue, 17 Feb 2015 11:37:09 GMT

Hi Paul, Rob in Totnes is creating a blog post and is getting an error whilst trying to upload an image. Initially I thought it could have been a harddrive full issue, but we can see that we have drive room. Sam and I have had a quick look to see if anything obvious, but we are now stumbling a bit. We can replicate the issue by trying to upload an image to a blog post, but cannot see where to find an event log to see if any logs are being generated that may aid in a diagnosis. Could you have a look and let us know your thoughts please? Rob is currently waiting to post a blog so is quite urgent.

Many thanks Ade

#651: Report for tools content type

ed — Thu, 12 Dec 2013 11:33:22 GMT

For January: set up a report for tools content type:

downloadable in .xls
tool title
URL (must be a hyperlink generated in .csv)
node reference

No tools report exists yet - but lots of others here: https://www.transitionnetwork.org/admin/reports

#652: Report for resource content type

ed — Thu, 12 Dec 2013 11:34:49 GMT

For January: set up a report for tools content type:

downloadable in .xls
resource title
URL (must be a hyperlink generated in .csv)
node reference

you will be able to work from this report: https://www.transitionnetwork.org/admin/reports/resources

#653: Report for ingredients content type

ed — Thu, 12 Dec 2013 11:36:53 GMT

For January: set up a report for ingredients content type:

downloadable in .xls
ingredient title
URL (must be a hyperlink generated in .csv)
node reference

No ingredients report exists yet - but lots of others here: https://www.transitionnetwork.org/admin/reports

#495: Replace Google Analytics with Piwki

ed — Thu, 21 Feb 2013 10:20:25 GMT

Unless we see any issue, turn GA off on 01/03/13. Use Piwik instead.

#581: Remove 'add to newsletter' option for site editors/admins

ed — Mon, 26 Aug 2013 13:24:17 GMT

Please remove the option for site editors/admins to 'add this to the newsletter' (which would send it to the newsletter nodequeue). Please also for now make the newsletter nodequeue non-active.

It's been confusing for staff members, and was for the simmplemail service really, so we're going to trial using a google doc for staff to add their stories to the newsletter instead.

#545: Registration page: 502

ed — Wed, 08 May 2013 08:38:13 GMT

http://www.transitionnetwork.org/user/register

found a bunch of these yesterday - this one is still showing a 502...

#730: Redis Munin stats for puffin

chris — Fri, 23 May 2014 08:38:33 GMT

The Redis stats for wiki:PuffinServer are not being generated:

https://penguin.transitionnetwork.org/munin/transitionnetwork.org/puffin.transitionnetwork.org/index.html#redis

#878: Reconomy.org add subdomains

ade — Thu, 15 Oct 2015 11:35:03 GMT

Hi Chris,
I thought I had added this as a ticket, but does not seem to have come
through.
I have had a request to add the following to the reconomy.org website.
I notice that i do not have permission to do this myself via gandi.net so
could you please add for me.
many thanks
Ade
We're going to need to point the REfund API to a particular subdomain
of the reconomy.org domain in the next few weeks. This will also apply
to the frontend. Is there anyone I can email about this?
Here are the proposed subdomains:
funds.reconomy.org
api.funds.reconomy.org
Both subdomains should point to this IP: 178.62.93.215
--
Ade Stuart
Web Manager - Transition network
07595 331877
The Transition Network is a registered charity
address: 43 Fore St, Totnes, Devon, TQ9 5HN, UK
website: www.transitionnetwork.org
TN company no: 6135675 TN charity no: 1128675

#709: Reconomy sites appears to be sending out spam

chris — Fri, 28 Mar 2014 18:48:53 GMT

This failed email has just been returned:

From: Mail Delivery System <Mailer-Daemon@parrot.webarch.net>
Date: Fri, 28 Mar 2014 18:14:32 +0000
To: recon@parrot.webarch.net
Subject: Mail delivery failed: returning message to sender
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
  fionaward@transitionnetwork.org
    SMTP error from remote mail server after end of data:
    host mx1.spamfiltering.com [72.249.150.158]: 550 An address in this message (at sleepingteensex . com) is listed on
+sbl-multi.rbl.spamrl.com. Please organise removal and retry.
------ This is a copy of the message, including all the headers. ------
Return-path: <recon@parrot.webarch.net>
Received: from recon (uid=1006)
        by parrot.webarch.net with local (Exim 4.80)
        (envelope-from <recon@parrot.webarch.net>)
        id 1WTbIM-0001Sz-6R
        for fionaward@transitionnetwork.org; Fri, 28 Mar 2014 18:14:22 +0000
To: fionaward@transitionnetwork.org
Subject: roulette89
X-PHP-Originating-Script: 1006:class-phpmailer.php
Date: Fri, 28 Mar 2014 18:14:22 +0000
From: casino10 <fmzsb@www.reconomy.org>
Message-ID: <28cbb75557094e41d2f5e7e070dcd660@www.reconomy.org>
X-Priority: 3
X-Mailer: PHPMailer 5.2.4 (http://code.google.com/a/apache-extras.org/p/phpmailer/)
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
From: casino10 <fmzsb@www.reconomy.org>
Subject: roulette89
Message Body:
интернет казино игровые автоматы рулетка зарубежный <a href= http://pobedim11.sleepingteensex.com/item280.html >можно ли играть в
+игровые автоматы в интернете на деньги</a> игровые автоматы через интернет 3g еще <a href= http://pobedim11.sleepingteensex.com >Новый
+Игровой Автомат</a> казино интернет казань.
--
This mail is sent via contact form on REconomy http://www.reconomyproject.org

#728: Re-patch location module

sam — Tue, 20 May 2014 12:53:16 GMT

Bugger just realised that I didn't finish the pull request into the main branch: https://trac.transitionnetwork.org/trac/ticket/681

So the location module patch is not on the live site.

I have now done the patch correctly I think: https://github.com/transitionnetwork/transitionnetwork.org-d6.profile/pull/2

Shall I additionally add the patch to the live site using Drush as I did before?

Thanks

Sam

#602: RSS problems

ed — Thu, 03 Oct 2013 09:14:43 GMT

Blogs feed not working:

https://www.transitionnetwork.org/blogs/feed/

Rob's blog not working:

https://www.transitionnetwork.org/blogs/feed/rob-hopkins

Getting complaints from users who are getting multiple copies of each blog post. Can't check this as the feed is down, but I've got 2 or 3 complaints in my inbox.

#588: RSS feed caching

chris — Fri, 06 Sep 2013 09:43:57 GMT

At the meeting on 5th September ticket:585 one thing we discussed was that:

The biggest single source of bandwidth by URL is Rob's RSS feed, 34.5GB of data, 150k hits. This represents half the total site data transfer, the RSS files is 0.4MB but will hopefully be mostly served gzipped at 0.1MB.

This ticket is to follow up on that -- are the RSS feeds served directly by Nginx?

#633: RHS blocks changes for homepage

ed — Mon, 25 Nov 2013 15:27:15 GMT

Re-arrange/add/edit the RHS blocks to appear the order below

Why/how etc. : NO change
newsletter promo: NO change
POJDS book button: much smaller - can you set book image to lhs and buy button to rhs within block? might need a special .png to have both in it
Transition nearby button: NO change
New iT2 film promo button: needs a graphic
New TFP button: NEW: Trucie providing a graphic to fit in
Training button: NEW: Ed asking for training graphic to fit in
Social media promo button: NEW: needs some very modest SM logos to link to SM outposts FB and twitter

NB: Rob is only thinking of the homepage; Ed is not sure of the implications elsewhere on site... please advise on how/if this affects things elsewhere...

#718: REconomy site showing adverts randomly

ed — Thu, 10 Apr 2014 08:19:34 GMT

Load http://www.reconomy.org and the first time you get it, and other times at random and you get spam.

URGENT check please - on REconomy and all WP sites...

#539: REconomy site migration and updates

chris — Wed, 01 May 2013 10:01:00 GMT

This ticket is to keep track of the tasks undertaken and the time spent on the migration of the http://www.reconomy.org/ site to wiki:ParrotServer.

#823: Pwiki 2014 annual report

chris — Wed, 07 Jan 2015 12:19:55 GMT

Ed would like a some PDF reports of Transition Network site usage for 2014 from Piwik.

#674: Puffin locked up

chris — Tue, 14 Jan 2014 09:59:40 GMT

This is on the console, no response via web or ssh :

[4478428.894563]  [<ffffffff810f3634>] ? sys_readlinkat+0x25/0x8d
[4478428.894571]  [<ffffffff81011b42>] ? system_call_fastpath+0x16/0x1b
[4478428.894581] INFO: task cron:46009 blocked for more than 120 seconds.
[4478428.894587] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[4478428.894595] cron          D ffff8801fb270e20     0 46009   8829 0x00000080
[4478428.894606]  ffff8801fb270e20 0000000000000286 0000000000000001 00000001810423b0
[4478428.894617]  ffff88000bcf87c0 000000000000000b 000000000000f9e0 ffff8800cbb9dfd8
[4478428.894628]  00000000000157c0 00000000000157c0 ffff8801fa458000 ffff8801fa4582f8
[4478428.894640] Call Trace:
[4478428.894648]  [<ffffffff811976a6>] ? vsnprintf+0x40a/0x449
[4478428.894656]  [<ffffffff8130e5c3>] ? __mutex_lock_common+0x122/0x192
[4478428.894666]  [<ffffffff8130e6eb>] ? mutex_lock+0x1a/0x31
[4478428.894673]  [<ffffffff810f7eac>] ? do_lookup+0x80/0x15d
[4478428.894681]  [<ffffffff810f892c>] ? __link_path_walk+0x5a5/0x6f5
[4478428.894689]  [<ffffffff810f826a>] ? do_follow_link+0x1fa/0x317
[4478428.894697]  [<ffffffff810f86e0>] ? __link_path_walk+0x359/0x6f5
[4478428.894705]  [<ffffffff810f8caa>] ? path_walk+0x66/0xc9
[4478428.894713]  [<ffffffff810fa114>] ? do_path_lookup+0x20/0x77
[4478428.894721]  [<ffffffff810fa2a0>] ? do_filp_open+0xe5/0x94b
[4478428.894729]  [<ffffffff81012cdb>] ? xen_hypervisor_callback+0x1b/0x20
[4478428.894738]  [<ffffffff8130dda8>] ? thread_return+0x79/0xe0
[4478428.894746]  [<ffffffff811901fb>] ? _atomic_dec_and_lock+0x33/0x50
[4478428.894755]  [<ffffffff81103705>] ? alloc_fd+0x67/0x10c
[4478428.894763]  [<ffffffff810eeacf>] ? do_sys_open+0x55/0xfc
[4478428.894770]  [<ffffffff81011b42>] ? system_call_fastpath+0x16/0x1b
[4478669.197427] INFO: task vnstatd:1920 blocked for more than 120 seconds.
[4478669.197448] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[4478669.197458] vnstatd       D 0000000000000000     0  1920      1 0x00000000
[4478669.197469]  ffff8801ff18bf90 0000000000000282 ffff8801fa651e10 ffff880000009680
[4478669.197482]  0000000000000000 000000000000000a 000000000000f9e0 ffff8801fa651fd8
[4478669.197494]  00000000000157c0 00000000000157c0 ffff8801fe335bd0 ffff8801fe335ec8
[4478669.197505] Call Trace:
[4478669.197520]  [<ffffffff8130f6fa>] ? error_exit+0x2a/0x60
[4478669.197531]  [<ffffffff8101251d>] ? retint_restore_args+0x5/0x6
[4478669.197542]  [<ffffffff8130e5c3>] ? __mutex_lock_common+0x122/0x192
[4478669.197551]  [<ffffffff8130e6eb>] ? mutex_lock+0x1a/0x31
[4478669.197561]  [<ffffffff810f7eac>] ? do_lookup+0x80/0x15d
[4478669.197569]  [<ffffffff810f86aa>] ? __link_path_walk+0x323/0x6f5
[4478669.197577]  [<ffffffff810f8caa>] ? path_walk+0x66/0xc9
[4478669.197585]  [<ffffffff810fa114>] ? do_path_lookup+0x20/0x77
[4478669.197593]  [<ffffffff810fa2a0>] ? do_filp_open+0xe5/0x94b
[4478669.197602]  [<ffffffff8130f054>] ? _spin_lock_irqsave+0x15/0x34
[4478669.197612]  [<ffffffff81068fa6>] ? hrtimer_try_to_cancel+0x3a/0x43
[4478669.197622]  [<ffffffff8102de30>] ? pvclock_clocksource_read+0x3a/0x8b
[4478669.197631]  [<ffffffff81103705>] ? alloc_fd+0x67/0x10c
[4478669.197641]  [<ffffffff810eeacf>] ? do_sys_open+0x55/0xfc
[4478669.197649]  [<ffffffff81011b42>] ? system_call_fastpath+0x16/0x1b

Rebooting...

#862: Puffin locked

chris — Sat, 27 Jun 2015 15:31:27 GMT

PuffinServer is not responding, I got a Munin email alert, on the Xen console:

[2008077.910371] BUG: soft lockup - CPU#1 stuck for 61s! [munin-node [::f:25444]
[2008077.910371] Modules linked in: joydev sg st sd_mod crc_t10dif sr_mod scsi_mod ide_gd_mod ide_cd_mod ide_core cdrom xt_recent xt_tcpudp xt_connlimit nf_nat_ftp ipt_REDIRECT xt_conntrack iptable_mangle nf_conntrack_ftp ipt_REJECT ipt_LOG xt_limit xt_multiport iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables snd_pcm snd_timer snd soundcore snd_page_alloc evdev pcspkr ext4 crc16 jbd2 mbcache dm_mod xen_netfront xen_blkfront
[2008077.910371] CPU 1:
[2008077.910371] Modules linked in: joydev sg st sd_mod crc_t10dif sr_mod scsi_mod ide_gd_mod ide_cd_mod ide_core cdrom xt_recent xt_tcpudp xt_connlimit nf_nat_ftp ipt_REDIRECT xt_conntrack iptable_mangle nf_conntrack_ftp ipt_REJECT ipt_LOG xt_limit xt_multiport iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 iptable_filter ip_tables x_tables snd_pcm snd_timer snd soundcore snd_page_alloc evdev pcspkr ext4 crc16 jbd2 mbcache dm_mod xen_netfront xen_blkfront
[2008077.910371] Pid: 25444, comm: munin-node [::f Not tainted 2.6.32-5-xen-amd64 #1
[2008077.910371] RIP: e030:[<ffffffff8100922a>]  [<ffffffff8100922a>] hypercall_page+0x22a/0x1001
[2008077.910371] RSP: e02b:ffff8800988f7ba8  EFLAGS: 00000246
[2008077.910371] RAX: 0000000000040000 RBX: ffffea0006c2eb88 RCX: ffffffff8100922a
[2008077.910371] RDX: 00000000ffffff00 RSI: 0000000000000000 RDI: 0000000000000000
[2008077.910371] RBP: 0000000000000002 R08: 0000000000000002 R09: ffff8801ffc1dd00
[2008077.910371] R10: 0000000000000002 R11: 0000000000000246 R12: ffff88000000ad00
[2008077.910371] R13: ffff880000008000 R14: 0000000000000200 R15: 000000000000000e
[2008077.910371] FS:  00007fefd0bde700(0000) GS:ffff88000bb20000(0000) knlGS:0000000000000000
[2008077.910371] CS:  e033 DS: 0000 ES: 0000 CR0: 000000008005003b
[2008077.910371] CR2: 00007fefce124380 CR3: 0000000001001000 CR4: 0000000000000660
[2008077.910371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[2008077.910371] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[2008077.910371] Call Trace:
[2008077.910371]  [<ffffffff810baa62>] ? free_hot_cold_page+0x1a2/0x1af
[2008077.910371]  [<ffffffff8100e635>] ? xen_force_evtchn_callback+0x9/0xa
[2008077.910371]  [<ffffffff8100ecf2>] ? check_events+0x12/0x20
[2008077.910371]  [<ffffffff8100ecdf>] ? xen_restore_fl_direct_end+0x0/0x1
[2008077.910371]  [<ffffffff8130f142>] ? _spin_unlock_irqrestore+0xd/0xe
[2008077.910371]  [<ffffffff810bd9ca>] ? release_pages+0x16a/0x18d
[2008077.910371]  [<ffffffff8100c1a7>] ? xen_mc_flush+0x159/0x185
[2008077.910371]  [<ffffffff810da555>] ? free_pages_and_swap_cache+0x57/0x73
[2008077.910371]  [<ffffffff810cd5bf>] ? unmap_vmas+0x6cb/0x959
[2008077.910371]  [<ffffffff8100922a>] ? hypercall_page+0x22a/0x1001
[2008077.910371]  [<ffffffff8100922a>] ? hypercall_page+0x22a/0x1001
[2008077.910371]  [<ffffffff810d1bca>] ? exit_mmap+0xc4/0x148
[2008077.910371]  [<ffffffff8104cd95>] ? mmput+0x3c/0xdf
[2008077.910371]  [<ffffffff81050a2e>] ? exit_mm+0x102/0x10d
[2008077.910371]  [<ffffffff81052453>] ? do_exit+0x1f8/0x6c9
[2008077.910371]  [<ffffffff8105299a>] ? do_group_exit+0x76/0x9d
[2008077.910371]  [<ffffffff810529d3>] ? sys_exit_group+0x12/0x16
[2008077.910371]  [<ffffffff81011b42>] ? system_call_fastpath+0x16/0x1b
[2008381.335662] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:19:68:02:00:12:1e:13:6c:db:08:00 SRC=122.172.30.208 DST=81.95.52.103 LEN=60 TOS=0x08 PREC=0x20 TTL=55 ID=30880 DF PROTO=TCP SPT=60400 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0
[2008384.465057] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:19:68:02:00:12:1e:13:6c:db:08:00 SRC=122.172.30.208 DST=81.95.52.103 LEN=60 TOS=0x08 PREC=0x20 TTL=55 ID=30881 DF PROTO=TCP SPT=60400 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0
[2008390.255448] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:16:3e:19:68:02:00:12:1e:13:6c:db:08:00 SRC=122.172.30.208 DST=81.95.52.103 LEN=60 TOS=0x08 PREC=0x20 TTL=55 ID=30882 DF PROTO=TCP SPT=60400 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0

#543: Puffin Load Spike

chris — Fri, 03 May 2013 20:48:16 GMT

Puffin just had a massive load spike up to 65 and then it calmed down and it's up in the 70's again:

uptime
 21:46:43 up 91 days,  3:01,  4 users,  load average: 73.45, 30.76, 28.09

I'm trying to find the cause, it's making the TN site unresponsive.

#552: Puffin Downtime 23rd May 2013

chris — Thu, 23 May 2013 20:54:15 GMT

There was a massive load spike on wiki:PuffinServer this afternoon, the load average peaked at over 60 and at exactly the same time there was also one on the virtual server serving http://webarch.net/.

Pingdom reported:

www.transitionnetwork.org down since 23/05/2013 12:11:57
www.transitionnetwork.org is UP again at 23/05/2013 12:19:57, after 8m of downtime
www.transitionnetwork.org is down since 23/05/2013 12:26:57
www.transitionnetwork.org is UP again at 23/05/2013 12:58:57, after 32m of downtime

When I did managed to get back into the server php-fpm and nginx were not running and it took several attempt to get them to start up.

Attached is the munin graps of the load from today, munin didn't record the start of the spike but it did start recording it as it came down.

This ticket has been created to report the issue and also to record anything that might be found in the logs to explain what happened.

Transition Technology: Ticket Query

#753: wiki.transitionnetwork.org displaying error

#583: tmp files on parrot exceeded inode limit

#487: robots.txt files for development sites

#580: php5-fpm starting when puffin boots

#528: patterns.transitionresearchnetwork.org DNS update

#502: patterns sub-domain for transitionresearchnetwork.org, was: Setting up specific pointer for URL

#780: parrot

#778: need access to Parrot

#698: intransitionmovie.com returns 405 on submit

#538: intransitionmovie.com checks and updates

#773: download copy of current TN D6 website

#762: cannot log in to Puffin

#771: cannot access puffin over sftp again

#811: WordPress critical security release

#594: WordPress 3.6.1 Maintenance and Security Release

#637: What is the wordcount for the /news and /blogs/rob-hopkins teasers?

#668: Wagn transition_mod

#665: Wagn "Problem Loading Page" error

#609: Videos not showing if added via video link

#562: Users being subscribed to widgets newsletter on registratoin

#575: User system is blocking *everyone* - needs fixing urgently

#608: User profile pictures are too big

#748: Urgent: Fiona having problems sending email

#729: Upgrade to Piwik 2.2.2

#726: Upgrade to Piwik 2.2.1

#720: Upgrade to Piwik 2.2.0

Piwik 2.2 helps you focus on your data

New features

#672: Upgrade to Piwik 2.0.3

#532: Upgrade to Mediawiki 1.19.5

#736: Upgrade to MediaWiki 1.23.0

What's new?

Skin autodiscovery deprecated

Notifications

Merged extensions

Interface

Editing

Help pages

CSS refresh for Vector

Configuration

#745: Upgrade to BOA-2.2.6 Stable Edition

#725: Upgrade to BOA-2.2.5

#721: Upgrade to BOA-2.2.3 Stable Edition

#707: Upgrade to BOA-2.2.2

#612: Upgrade to BOA-2.1.1 Stable Edition

#691: Upgrade Wagn hosting for patterns site

#535: Upgrade Puffin, Penguin and Parrot from Debian Squeeze to Wheezy

#556: Upgrade Piwik to version 1.12

#732: Upgrade Piwik to 2.3.0

#664: Upgrade Piwik to 2.0.2

#706: Upgrade Mediawiki to 1.22.5 and install the new VisualEditor

#595: Upgrade Mediawiki to 1.19.8 from 1.19.7

MediaWiki 1.19.8

Changes since 1.19.7

#536: Upgrade Mediawiki to 1.19.6

#620: Upgrade MediaWiki to 1.19.9

#699: Update Core & Plugins on transitionculture.org

#567: Update BOA for new Redis 2.6.14

#900: Unusal High Load on Puffin

#845: Unneeded FTP server on PuffinServer

#550: Transition Town Totnes migration

#577: Transition Streets Wordpress Migration

#842: Trac fetchmail

#546: Trac documentation

#642: Trac "databasee is locked" errors in /var/log/messages

#713: Ticket clearing

#585: TTech Meeting 5th September 2013

#601: TTech Meeting 3rd October 2013

#654: TIs appearing in 'TIs by list' view without a number

#568: TC blog: can't *not* send notifications

#826: Switching MX records from United to Google

#614: Subscription option for Social Reporters CT

#724: Subscription emails from Rob's blog not arriving.

#839: Stable BOA-2.4.1 Release

#827: Stable BOA-2.4.0 Release

#844: Stable BOA 2.4.2 Release

#677: Spike in MyISAM (search) database activity, Redis unable to cache such requests

#579: Special email alert for Rob Hopkins blog posts on TN.org

#656: Spam being sent out via Transition Culture

#575: User system is blocking everyone - needs fixing urgently

#568: TC blog: can't not send notifications