News for hackers. Stuff that matters.
Re:GitLab Database Incident – Live Report by elementalest on Tuesday January 31, 2017 @08:48PM (#13537436)
>1. LVM snapshots are by default only taken once every 24 hours. YP happened to run one manually about 6 hours prior to the outage

>2. Regular backups seem to also only be taken once per 24 hours, though YP has not yet been able to figure out where they are stored. According to JN these don’t appear to be working, producing files only a few bytes in size.

>3. SH: It looks like pg_dump may be failing because PostgreSQL 9.2 binaries are being run instead of 9.6 binaries. This happens because omnibus only uses Pg 9.6 if data/PG_VERSION is set to 9.6, but on workers this file does not exist. As a result it defaults to 9.2, failing silently. No SQL dumps were made as a result. Fog gem may have cleaned out older backups.

>4. Disk snapshots in Azure are enabled for the NFS server, but not for the DB servers. The synchronisation process removes webhooks once it has synchronised data to staging. Unless we can pull these from a regular backup from the past 24 hours they will be lost The replication procedure is super fragile, prone to error, relies on a handful of random shell scripts, and is badly documented

>5. Our backups to S3 apparently don’t work either: the bucket is empty

>So in other words, out of 5 backup/replication techniques deployed none are working reliably or set up in the first place.

Sounds like it was only a matter of time before something like this happened. How could so many systems be not working and no one notice?

Re:GitLab Database Incident – Live Report by gizmo on Tuesday January 31, 2017 @09:31PM (#13537665)
What if I told you all of society is held together by duct tape? If you're surprised that startups cut corners you're in for a rude awakening. I'm frequently amazed anything works at all.
Re:GitLab Database Incident – Live Report by cnst on Tuesday January 31, 2017 @10:24PM (#13537941)
Startups only, you say?

Everything, everywhere, is held together by ducttape!

Re:GitLab Database Incident – Live Report by saosebastiao on Wednesday February 01, 2017 @02:38AM (#13539079)
True. I watched a 60 year old manufacturing plant shut down for 7 days once because someone saved an excel spreadsheet in the wrong format and it deleted a macro written more than a decade prior that held together all of their operations planning.
Re:GitLab Database Incident – Live Report by kirushik on Wednesday February 01, 2017 @04:55AM (#13539561)
At my current project we have components which are literally called `duct-tape` and `glue`.
Re:GitLab Database Incident – Live Report by StringEpsilon on Wednesday February 01, 2017 @10:02AM (#13541195)
Reminds me of this:

> Websites that are glorified shopping carts with maybe three dynamic pages are maintained by teams of people around the clock, because the truth is everything is breaking all the time, everywhere, for everyone. Right now someone who works for Facebook is getting tens of thousands of error messages and frantically trying to find the problem before the whole charade collapses. There's a team at a Google office that hasn't slept in three days. Somewhere there's a database programmer surrounded by empty Mountain Dew bottles whose husband thinks she's dead. And if these people stop, the world burns.

https://www.stilldrinking.org/programming-sucks

And if you think that paragraphs does not apply to your applications / company, ask yourself if that's really true. My company sends around incident statistics and there's always some shit that broke. Always.

Re:GitLab Database Incident – Live Report by hardwaresofton on Tuesday January 31, 2017 @11:36PM (#13538284)
The real question is what holds together duct tape?
Re:GitLab Database Incident – Live Report by devdas on Wednesday February 01, 2017 @06:55AM (#13539991)
Duct tape is like the force. It has a light side and a dark side, and it holds the universe together.
Re:GitLab Database Incident – Live Report by Vinkekatten on Wednesday February 01, 2017 @06:44AM (#13539933)
Good intentions and heartfelt prayer.
Re:GitLab Database Incident – Live Report by s_kilk on Wednesday February 01, 2017 @05:37AM (#13539690)
Duct tape is fractal
Re:GitLab Database Incident – Live Report by gvb on Tuesday January 31, 2017 @11:46PM (#13538329)
The dark side.
Re:GitLab Database Incident – Live Report by bsg75 on Wednesday February 01, 2017 @01:15AM (#13538717)
Bailing wire.
Re:GitLab Database Incident – Live Report by akamaozu on Wednesday February 01, 2017 @03:47AM (#13539337)
Serendipity
Re:GitLab Database Incident – Live Report by SZJX on Friday February 03, 2017 @09:50AM (#13560114)
I don't think a lot of things work at all. We who live in developed countries are the minority really. Most things are simply non-functional and downright ugly. Such complex systems the world has. And now apparently even the developed worlds are in for some troubles. The peace and progress in the last few decades just really isn't the norm in human history.

That said, one can't deny that there are indeed things that do work, and work very well, and people who make that happen, and one can always be amazed/inspired by those. There are good things as well as haphazard things. It's just that the latter generally outnumber the former in many settings. It doesn't necessarily imply a sweeping statement about everything though.

Re:GitLab Database Incident – Live Report by overcast on Tuesday January 31, 2017 @10:32PM (#13537990)
There's a big difference between holding together things with duct tape, and literally taking zero backups of it.
Re:GitLab Database Incident – Live Report by ChristianBundy on Tuesday January 31, 2017 @11:02PM (#13538126)
I'm not sure that there is.
Re:GitLab Database Incident – Live Report by tjalfi on Tuesday January 31, 2017 @10:51PM (#13538068)
It's called the Fundamental Failure-Mode Theorem - "Complex systems usually operate in an error mode". https://en.wikipedia.org/wiki/Systemantics has more rules from the book. It's worth the read.
Re:GitLab Database Incident – Live Report by x0x0 on Wednesday February 01, 2017 @02:37AM (#13539073)
if #2 is correct, holy shit did gitlab get lucky someone snapshotted 6 hours before.

Dear you: it's not a backup until you've (1) backed up, (2) pushed to external media / s3; (3) redownloaded and verified the checksum; (4) restored back into a throwaway; (5) verified whatever is supposed to be there is, in fact, there, and (6) alerted if anything went wrong. Lots of people say this, and it's because the people saying this, me included, learned the hard way. You can shortcut the really painful learning process by scripting the above.

Re:GitLab Database Incident – Live Report by orblivion on Wednesday February 01, 2017 @10:05AM (#13541205)
Do you have to download the entire backup or is a test backup using the same flow acceptable? I'm thinking about my personal backups, and I don't know if I have the time or space to try the full thing.
Re:GitLab Database Incident – Live Report by x0x0 on Wednesday February 01, 2017 @01:09PM (#13543247)
For plain files, pick your risk tolerance.

For DB backups, until you've actually loaded it back into the DB, recovered the tables, and tested a couple rows are bit identical to the source, it's a hope of a backup not a backup. Things like weird character set encodings can cause issues here.

Re:GitLab Database Incident – Live Report by detaro on Wednesday February 01, 2017 @12:02PM (#13542448)
No way to do a partial recovery?

If time and space for the full thing are an issue, it could be really important to get going after an incident to be able to recover the most important bits first.

Re:GitLab Database Incident – Live Report by shimon_e on Wednesday February 01, 2017 @08:06AM (#13540384)
Need to save this comment.
Re:GitLab Database Incident – Live Report by victor9000 on Tuesday January 31, 2017 @09:57PM (#13537795)
I'm guessing they all worked at some point in time, but they failed to set up any sort of monitoring to verify the state of their infrastructure over time.
Re:GitLab Database Incident – Live Report by onion2k on Wednesday February 01, 2017 @03:07AM (#13539187)
failing silently

I really wish all the applications I use had an option to never do that.

Re:GitLab Database Incident – Live Report by skarap on Wednesday February 01, 2017 @06:54AM (#13539985)
Systems failing one by one and nobody caring about them is not uncommon at all. See https://en.wikipedia.org/wiki/Bhopal_disaster (search for "safety devices" in the article).
Re:GitLab Database Incident – Live Report by krenoten on Tuesday January 31, 2017 @09:39PM (#13537696)
everything is broken, and we are usually late to notice due to the infrequency of happy-path divergence.