Directory icon indicating copy to clipboard operation
Directory copied to clipboard

Question: how often observatory ratings are refreshed?

Open gdmn opened this issue 2 years ago • 2 comments

I'm asking because I've improved the score of my instance (https://paste.devsite.pl/), but on the Instance Directory page it's still the old value.

gdmn avatar Oct 05 '23 11:10 gdmn

Once a day, as per our FAQ, but this does sound similar to another case where only some sites observatory rating didn't get updated while other sites were: https://github.com/PrivateBin/Directory/issues/31#issuecomment-1473170825

I'll investigate, try restarting the service, if necessary, and report back here. I wonder where this is being cached?

For future record, at this time the directory shows the instance having a B rating, while on the observatory the result is A+ (score of 105 of 100).

elrido avatar Oct 06 '23 03:10 elrido

It is now up to date.

Some notes on the findings so far:

  • took a snapshot of ratings before doing anything: SELECT url, scans.rating, scans.percent FROM instances JOIN scans ON instances.id = scans.instance_id ORDER BY url; - confirmed that the rating was stored as B / 83
  • confirmed that the cronjobs do run daily, output gets logged, last update of a observatory rating found on September 17th
  • manually queried the instance from the VM the directory runs on (outside of the container image, the container doesn't contain a shell or CLI tools): wget https://http-observatory.security.mozilla.org/api/v1/analyze?host=paste.devsite.pl -> got the expected A+ / 105 score returned
  • ran the cronjob manually, ran in 20s
  • re-ran the SQL query, compared the diff -> 4 instances got updated ratings

A restart of the service wasn't necessary - the cronjobs launch independent instances of the same binary, so there should not be any caches shared with the service. The one thing out of the order is that I ran the job at a different time than usual and that I ran the wget before I triggered the cronjob. It might be some kind of rate limiting of Mozilla's CDN? I'll have to keep an eye on this.

elrido avatar Oct 08 '23 18:10 elrido