Operations grimoire/DevCentral - Revision history

Dereckson: /* Login support */ +2FA

2025-11-09T12:55:53Z

@@ Line 91: / Line 91: @@
 === Login support ===
 To get the list of accounts and the way to authenticate (e.g. Google, GitHub), you can execute this query:
@@ Line 103: / Line 104: @@
      \u devcentral_user
      SELECT accountType accountDomain, accountID, e.username, email, accountURI FROM user_externalaccount e, user u WHERE e.userPHID = u.phid AND u.userName = "";

Dereckson: /* Login support */

2025-11-06T19:22:39Z

← Older revision		Revision as of 19:22, 6 November 2025
Line 97:		Line 97:
	\u devcentral_user		\u devcentral_user
	SELECT u.userName, e.accountType FROM user u, user_externalaccount e WHERE e.userPHID = u.phid ORDER BY u.userName ASC;		SELECT u.userName, e.accountType FROM user u, user_externalaccount e WHERE e.userPHID = u.phid ORDER BY u.userName ASC;

			Or for one user, with more details (per GRPD policy, strictly only usable for support):

			$ bin/storage shell
			\u devcentral_user
			SELECT accountType accountDomain, accountID, e.username, email, accountURI FROM user_externalaccount e, user u WHERE e.userPHID = u.phid AND u.userName = "";

Dereckson: /* A recent SSH key change doesn't allow VCS access */

2025-10-24T21:33:49Z

A recent SSH key change doesn't allow VCS access

← Older revision		Revision as of 21:33, 24 October 2025
Line 88:		Line 88:
	</syntaxhighlight>		</syntaxhighlight>

	~~Cache~~ issue has been fixed 2025-10-24: cache is correctly invalidated when a new key is added.		[https://agora.nasqueron.org/index.php?title=Operations_grimoire/DevCentral&oldid=1205#A_recent_SSH_key_change_doesn't_allow_VCS_access Former cache issue] has been fixed 2025-10-24: cache is correctly invalidated when a new key is added.

	=== Login support ===		=== Login support ===

Dereckson: /* A recent SSH key change doesn't allow VCS access */

2025-10-24T21:32:50Z

A recent SSH key change doesn't allow VCS access

← Older revision		Revision as of 21:32, 24 October 2025
Line 88:		Line 88:
	</syntaxhighlight>		</syntaxhighlight>

	~~If the key isn't there, purge the ''general'' cache:~~		Cache issue has been fixed 2025-10-24: cache is correctly invalidated when a new key is added.

	~~<syntaxhighlight lang="console">~~
	~~$ bin/cache purge~~ --~~caches general~~
	~~</syntaxhighlight>~~

	~~It's not needed to restart phd or php-fpm (and it won't affect anything if you do, that's not an OPCache service, but an user data~~ cache).

	=== Login support ===		=== Login support ===

Dereckson: /* Login support */

2024-09-05T17:29:46Z

← Older revision		Revision as of 17:29, 5 September 2024
Line 100:		Line 100:
	To get the list of accounts and the way to authenticate (e.g. Google, GitHub), you can execute this query:		To get the list of accounts and the way to authenticate (e.g. Google, GitHub), you can execute this query:

	bin/storage shell		$ bin/storage shell
	\u devcentral_user		\u devcentral_user
	SELECT u.userName, e.accountType FROM user u, user_externalaccount e WHERE e.userPHID = u.phid ORDER BY u.userName ASC;		SELECT u.userName, e.accountType FROM user u, user_externalaccount e WHERE e.userPHID = u.phid ORDER BY u.userName ASC;

Dereckson: /* Login support */

2024-09-05T17:29:36Z

← Older revision		Revision as of 17:29, 5 September 2024
Line 98:		Line 98:
	=== Login support ===		=== Login support ===

	To get the list of accounts and the way to authenticate (e.g. Google, GitHub):		To get the list of accounts and the way to authenticate (e.g. Google, GitHub), you can execute this query:

			bin/storage shell
			\u devcentral_user
	SELECT u.userName, e.accountType FROM user u, user_externalaccount e WHERE e.userPHID = u.phid ORDER BY u.userName ASC;		SELECT u.userName, e.accountType FROM user u, user_externalaccount e WHERE e.userPHID = u.phid ORDER BY u.userName ASC;

Dereckson: /* Troubleshoot */

2024-09-05T17:28:55Z

Troubleshoot

← Older revision		Revision as of 17:28, 5 September 2024
Line 48:		Line 48:
	If you aren't administrator, ask an admin to check (a yellow balloon popup appears with instructions where there is something to do).		If you aren't administrator, ask an admin to check (a yellow balloon popup appears with instructions where there is something to do).

	== Troubleshoot ==		== Troubleshoot ==
	=== SSH servers aren't running ===		=== SSH servers aren't running ===
	We need two instances of sshd (none with default configuration file):		We need two instances of sshd (none with default configuration file):
Line 95:		Line 95:

	It's not needed to restart phd or php-fpm (and it won't affect anything if you do, that's not an OPCache service, but an user data cache).		It's not needed to restart phd or php-fpm (and it won't affect anything if you do, that's not an OPCache service, but an user data cache).

			=== Login support ===

			To get the list of accounts and the way to authenticate (e.g. Google, GitHub):

			SELECT u.userName, e.accountType FROM user u, user_externalaccount e WHERE e.userPHID = u.phid ORDER BY u.userName ASC;

Dereckson: /* A recent SSH key change doesn't allow VCS access */ Update ssh-auth path

2023-05-13T20:01:57Z

A recent SSH key change doesn't allow VCS access: Update ssh-auth path

← Older revision		Revision as of 20:01, 13 May 2023
Line 85:		Line 85:
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	$ docker exec -it devcentral bash		$ docker exec -it devcentral bash
	$ scripts/ssh-auth \| grep <username>		$ scripts/ssh/ssh-auth.php \| grep <username>
	</syntaxhighlight>		</syntaxhighlight>

Dereckson: /* A recent SSH key change doesn't allow VCS access */ Keys are put in the "general" cache

2023-04-16T21:31:28Z

A recent SSH key change doesn't allow VCS access: Keys are put in the "general" cache

← Older revision		Revision as of 21:31, 16 April 2023
Line 88:		Line 88:
	</syntaxhighlight>		</syntaxhighlight>

	If the key isn't there, purge the cache:		If the key isn't there, purge the ''general'' cache:

	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	$ bin/cache purge --~~all~~		$ bin/cache purge --caches general
	</syntaxhighlight>		</syntaxhighlight>

	~~If we know the right option (could be general or user), it would be a good idea to use it to be avoid to destroy everything and slow down the site.~~

	It's not needed to restart phd or php-fpm (and it won't affect anything if you do, that's not an OPCache service, but an user data cache).		It's not needed to restart phd or php-fpm (and it won't affect anything if you do, that's not an OPCache service, but an user data cache).

Dereckson: syntaxhighlight instead of source tag

2022-02-20T12:18:18Z

syntaxhighlight instead of source tag

← Older revision		Revision as of 12:18, 20 February 2022
Line 19:		Line 19:

	First, upgrade the source code, pulling master for libphutil and rebasing production against origin/master for phabricator:		First, upgrade the source code, pulling master for libphutil and rebasing production against origin/master for phabricator:
	<~~source~~ lang="console">		<syntaxhighlight lang="console">
	$ cd /opt/arcanist		$ cd /opt/arcanist
	$ git pull		$ git pull
Line 25:		Line 25:
	$ git fetch		$ git fetch
	$ git rebase origin/master		$ git rebase origin/master
	</~~source~~>		</syntaxhighlight>

	If there is any issue, solve the merge conflict for the production branch. Don't panic, all is compiled through opcache, you can safely and calmly solve it without impacting the website.		If there is any issue, solve the merge conflict for the production branch. Don't panic, all is compiled through opcache, you can safely and calmly solve it without impacting the website.
Line 31:		Line 31:
	Now stop the services, apply database migrations and restart services:		Now stop the services, apply database migrations and restart services:

	<~~source~~ lang="console">		<syntaxhighlight lang="console">
	$ bin/phd status		$ bin/phd status
	$ bin/phd stop		$ bin/phd stop
Line 42:		Line 42:
	$ sv restart phd		$ sv restart phd
	ok: run: phd: (pid 8415) 0s		ok: run: phd: (pid 8415) 0s
	</~~source~~>		</syntaxhighlight>

	Check https://devcentral.nasqueron.org/ for installation issues.		Check https://devcentral.nasqueron.org/ for installation issues.
Line 55:		Line 55:

	=== devcentral.nasqueron.org port 5022: Connection refused ===		=== devcentral.nasqueron.org port 5022: Connection refused ===
	<~~code~~>		<syntaxhighlight lang="console">
	$ git push		$ git push
	ssh: connect to host devcentral.nasqueron.org port 5022: Connection refused		ssh: connect to host devcentral.nasqueron.org port 5022: Connection refused
	fatal: Could not read from remote repository.		fatal: Could not read from remote repository.
	</~~code~~>		</syntaxhighlight>

	That requires two things:		That requires two things:
Line 83:		Line 83:
	To troubleshoot that, ask user to use `ssh -p 5022 vcs@devcentral.nasqueron.org`. If a permission denied is returned and keys are the same locally and on devcentral, check on the container:		To troubleshoot that, ask user to use `ssh -p 5022 vcs@devcentral.nasqueron.org`. If a permission denied is returned and keys are the same locally and on devcentral, check on the container:

	<~~source~~ lang="console">		<syntaxhighlight lang="console">
	$ docker exec -it devcentral bash		$ docker exec -it devcentral bash
	$ scripts/ssh-auth \| grep <username>		$ scripts/ssh-auth \| grep <username>
	</~~source~~>		</syntaxhighlight>

	If the key isn't there, purge the cache:		If the key isn't there, purge the cache:

	<~~source~~ lang="console">		<syntaxhighlight lang="console">
	$ bin/cache purge --all		$ bin/cache purge --all
	</~~source~~>		</syntaxhighlight>

	If we know the right option (could be general or user), it would be a good idea to use it to be avoid to destroy everything and slow down the site.		If we know the right option (could be general or user), it would be a good idea to use it to be avoid to destroy everything and slow down the site.

	It's not needed to restart phd or php-fpm (and it won't affect anything if you do, that's not an OPCache service, but an user data cache).		It's not needed to restart phd or php-fpm (and it won't affect anything if you do, that's not an OPCache service, but an user data cache).