| *** Bakey has quit IRC | 00:03 | |
| openstackgerrit | Merged openstack/ansible-role-ara master: Refactoring ara role https://review.openstack.org/526786 | 01:01 |
|---|---|---|
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: WIP: Zuul jobs experiments https://review.openstack.org/557933 | 01:03 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Reload systemctl and restart ara on service unit file https://review.openstack.org/564081 | 01:14 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Reload systemctl and restart ara on service unit file https://review.openstack.org/564081 | 01:29 |
| dmsimard | hiroki: so I've made a bit of progress.. ^ I know it doesn't sound related but ideally I'd like to reproduce what you're after as an "extension" to the role (i.e, for CI purposes) | 01:31 |
| dmsimard | It's natural that different people have different taste in software | 01:31 |
| dmsimard | some run with nginx, some with apache, some with uwsgi, some with mod_wsgi.. some just run a systemd unit file for the embedded server, etc. | 01:32 |
| dmsimard | I feel like if there's anyone here who would be prone to actually ansibilize the setup of ara, it'd be the people in here so feel free to contribute :D | 01:33 |
| *** bcoca has quit IRC | 02:14 | |
| _KaszpiR_ | hiroki you still did not set up ara under specific path? (http://example.com:port/ara) ? | 05:04 |
| hiroki | dmsimard: is there anything I can do to help ? | 05:12 |
| hiroki | _KaszpiR_: We did, but it's a very ugly workaround. Let me get you a snippet of our hacky configuration | 05:12 |
| hiroki | https://ptpb.pw/AOowIoKZub0v_8hogJAQBkxRgcbd | 05:13 |
| hiroki | So we're basically redirecting /ara to /ara/ and then reverseproxy /ara/ to /reports and a whole bunch of other redirects that start at the root, which is going to end in trouble someday. Surely ARA is not the only application that expects /static for instance, or /about ;) | 05:14 |
| _KaszpiR_ | wny not nginx? | 05:14 |
| hiroki | It sorta works. For instance, when there are no playbooks loaded in the sqlite database, ARA return's a URL that breaks the reverse proxying. So this workaround also requires at least 1 playbook run in order to preview properly | 05:15 |
| hiroki | Because ARA runs on every single host as an autonomous entity for the playbooks ran on that specific host. Surely we're not going to go for NGINX on every individual host (hundreds, as it's in our baseline). We've chosen hiawatha as it takes a few MB of RAM and the only thing we really need is a reverse proxy to services hosted on localhost | 05:16 |
| hiroki | Seems a bit overkill and asking for trouble to put NGINX everywhere ;) | 05:16 |
| _KaszpiR_ | with nginx you should be able to get it working with something as simple as below snippet (notice it's for gitlab, so location and port needs to be updated) https://ptpb.pw/pQqN | 05:17 |
| _KaszpiR_ | we're running nginx with 5mb of memory :D | 05:17 |
| hiroki | Additional reason not to go for general purpose web servers: we actually use NGINX as legitimate webservers to host actual websites. Packages used in the baseline should not conflict with potentially required packages in the services layer on top as that will create nasty and unnecessary dependencies | 05:18 |
| hiroki | _KaszpiR_: we tried NGINX, we tried Apache as well. They all suffer from the same problem | 05:19 |
| _KaszpiR_ | well, i'd say introducting another web server if you have already one is making thing more complex | 05:19 |
| _KaszpiR_ | it's just a matter of config | 05:19 |
| _KaszpiR_ | also I've got jenkins set up in similiar way (and other nasty services like jira etc) | 05:19 |
| _KaszpiR_ | I'll try to procy ara probably in this week | 05:20 |
| _KaszpiR_ | *proxy with nginx | 05:20 |
| hiroki | Yeah most services have no issue working this way. With ARA we couldn't get it working with any web server as ARA returns a different URL then the reverse proxy anticipates on | 05:20 |
| _KaszpiR_ | ah | 05:20 |
| _KaszpiR_ | well, blame devs ;D | 05:20 |
| hiroki | We tried the UWSGI configuration with Apache, and we tried it with the internal ARA webserver (werkzeug) with NGINX, Apache, and Hiawatha. All the same results | 05:21 |
| _KaszpiR_ | what version of ara do you use? | 05:21 |
| hiroki | How about working with the devs, no one needs to blame others | 05:21 |
| hiroki | The latest | 05:21 |
| hiroki | 0.14.6 | 05:21 |
| _KaszpiR_ | ok, thx for info | 05:21 |
| hiroki | We also tried Python 3 instead of Python 2, same same | 05:21 |
| hiroki | I usually come to the devs as a last resort, FYI. ;) | 05:22 |
| hiroki | I'm suspecting the issue arises from how Werkzeug / Flask applications deal with routing internally. I've read a few things that a Python module 'ProxyFix' should be able to deal / resolve with it. But in general reverse proxying Flask applications within a subfolder is troublesome, or so it seems | 05:23 |
| _KaszpiR_ | ah I think ara has the same issue as owncloud/nextcloud - it will require extra rewrite rules to make it work properly | 05:25 |
| hiroki | Tried it, didn't work, but feel free to share any ideas, i'm eager to try anything we haven't tried out yet :) | 05:28 |
| *** Brainspackle has quit IRC | 06:02 | |
| grumpyowl | dmsimard: thanks! | 06:12 |
| *** gvincent has joined #ara | 07:09 | |
| *** hwoarang has quit IRC | 07:45 | |
| *** hwoarang_ has joined #ara | 07:45 | |
| *** Brainspackle has joined #ara | 07:50 | |
| *** hwoarang_ has quit IRC | 07:54 | |
| *** hwoarang has joined #ara | 07:54 | |
| grumpyowl | :q | 09:14 |
| *** rvgate has joined #ara | 09:44 | |
| *** zxiiro has quit IRC | 10:31 | |
| *** zxiiro has joined #ara | 10:32 | |
| *** jrist has quit IRC | 12:23 | |
| *** ara-slack2 has quit IRC | 12:23 | |
| *** _KaszpiR_ has quit IRC | 12:23 | |
| *** jrist has joined #ara | 12:26 | |
| *** ara-slack2 has joined #ara | 12:26 | |
| *** _KaszpiR_ has joined #ara | 12:26 | |
| dmsimard | hiroki: do you have a role to configure Hiawatha ? | 12:38 |
| hiroki | dmsimard: What do you mean exactly with role ? | 12:38 |
| dmsimard | An Ansible role :p | 12:39 |
| dmsimard | Like I was mentioning yesterday, I'd like to have "community support" for they deployment use case within the ARA role ( https://github.com/openstack/ansible-role-ara ) | 12:40 |
| hiroki | Ah ! Yes, but not sure if it's readable, and we use a tarred gzip archive with the binary contents of Hiawatha due to the unavailability of the package on CentOS (we're creating SPEC files to build our Hiawatha as we speak, so not available as of right right now). Not sure you want to unpack binaries from strangers.. | 12:40 |
| dmsimard | Is it available on another platform ? Fedora ? Ubuntu ? | 12:41 |
| hiroki | Should be on Debian, so I guess Ubuntu as well, i'll get you the URL's | 12:41 |
| hiroki | There is a Anku CentOS repo that has Hiawatha BTW. :http://anku.ecualinux.com/ | 12:42 |
| *** jcl has joined #ara | 12:42 | |
| dmsimard | hiroki: I have a few packages on Fedora -- if you already have a spec we could suggest it as a Fedora package so we can include it in EPEL afterwards :) | 12:43 |
| dmsimard | Hiawatha isn't packaged in Fedora or EPEL right now | 12:43 |
| dmsimard | ARA is packaged in Fedora but I need to update it though. | 12:43 |
| hiroki | I can provide the SPEC perhaps next monday as I anticipate our packager is finished with it by then | 12:43 |
| hiroki | Sounds good, should be great if it ends up in EPEL :) | 12:44 |
| dmsimard | hiroki: well, I mean I can help you with that and the process but I don't necessarily have the bandwidth to do everything :p | 12:44 |
| dmsimard | hiroki: in the meantime, I haven't found hiawatha in Ubuntu's base repositories either | 12:45 |
| hiroki | My only request for you is ARA on a subdomain, we can actually take care of the rest | 12:45 |
| dmsimard | https://pkgs.org/download/hiawatha | 12:45 |
| hiroki | I thought I saw that online, i'm looking as well. Found only the mirror on mirror.tuxhelp.org | 12:45 |
| dmsimard | yeah but I was looking to try and reproduce your issue so we can actually fixed it | 12:45 |
| dmsimard | can I use apache for reproducing and you can work from there ? | 12:45 |
| hiroki | Yes definitely, and NGINX as well | 12:46 |
| hiroki | So you don't actually need Hiawatha. The download page of Hiawatha actually lists a few unofficial packages to download Hiawatha from: https://www.hiawatha-webserver.org/download | 12:46 |
| dmsimard | you said you were reverse proxying to the embedded server or uwsgi ? does it matter ? | 12:46 |
| hiroki | We tried both, neither worked. Extra detail, we run our Hiawatha instance off of port 444, just in case Werkzeug tries to do something smart with non-default ports | 12:47 |
| dmsimard | doubt it | 12:47 |
| hiroki | We run it off of the embedded server though, as Hiawatha only supports FastCGI and no direct UWSGI integration | 12:47 |
| dmsimard | sure, I'll try that. | 12:48 |
| hiroki | https://ptpb.pw/AFYBhx7ymaCAWq0LsJdL4XgskF2o/bash | 12:48 |
| hiroki | That's our Hiawatha virtual host configuration, it's pretty basic reverse proxying | 12:48 |
| openstackgerrit | Merged openstack/ara-plugins master: Bootstrap ara-plugins https://review.openstack.org/564063 | 12:48 |
| dmsimard | nhicher: do you want to review https://review.openstack.org/#/c/564081/ ? :D | 12:49 |
| hiroki | The '1' in the first ReverseProxy entry on line #67 indicates that it will strip off the first 'directory' of the URL. So in this case it'll strip /ara | 12:49 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Reload systemctl and restart ara on service unit file https://review.openstack.org/564081 | 12:50 |
| hiroki | This is our systemd service unit file BTW. As I can see it's a pendign activity: https://ptpb.pw/AFhZd2SRO0TOXhaJTD-f5JOEt4zE | 12:50 |
| *** bcoca has joined #ara | 12:55 | |
| *** bcoca has joined #ara | 12:55 | |
| nhicher | hi dmsimard, yes I will do a review =) | 13:06 |
| *** rvgate has quit IRC | 13:51 | |
| *** tbielawa has joined #ara | 14:02 | |
| openstackgerrit | Sorin Sbarnea proposed openstack/ara master: Allow ARA module to be run https://review.openstack.org/563561 | 14:02 |
| *** grumpyowl has quit IRC | 14:11 | |
| *** grumpyowl has joined #ara | 14:13 | |
| *** grumpyowl has quit IRC | 14:19 | |
| *** jcl has quit IRC | 14:56 | |
| *** jrist has quit IRC | 15:01 | |
| *** ara-slack2 has quit IRC | 15:01 | |
| *** _KaszpiR_ has quit IRC | 15:01 | |
| *** sshnaidm|off has quit IRC | 15:01 | |
| *** gvincent has quit IRC | 15:01 | |
| *** ChanServ has quit IRC | 15:01 | |
| *** gvincent has joined #ara | 15:01 | |
| *** ChanServ has joined #ara | 15:01 | |
| *** barjavel.freenode.net sets mode: +o ChanServ | 15:01 | |
| *** jrist has joined #ara | 15:02 | |
| *** ara-slack2 has joined #ara | 15:02 | |
| *** _KaszpiR_ has joined #ara | 15:02 | |
| *** ara-slack has joined #ara | 15:03 | |
| *** ara-slack2 has quit IRC | 15:03 | |
| *** sshnaidm|off has joined #ara | 15:04 | |
| *** ara-slack has quit IRC | 15:04 | |
| *** ara-slack has joined #ara | 15:04 | |
| *** ChanServ sets mode: +v ara-slack | 15:04 | |
| *** weshay has quit IRC | 15:04 | |
| *** jlozadad[m] has quit IRC | 15:05 | |
| *** weshay has joined #ara | 15:06 | |
| *** tbielawa has quit IRC | 15:33 | |
| *** tbielawa has joined #ara | 15:34 | |
| *** tbielawa is now known as tbielawa|brb | 15:45 | |
| *** tbielawa|brb is now known as tbielawa | 16:03 | |
| *** BlessJah_ has joined #ara | 16:06 | |
| *** jmccrory_ has joined #ara | 16:09 | |
| *** BlessJah has quit IRC | 16:10 | |
| *** jmccrory has quit IRC | 16:10 | |
| *** jmccrory_ is now known as jmccrory | 16:11 | |
| *** jlozadad[m] has joined #ara | 16:18 | |
| openstackgerrit | Merged openstack/ansible-role-ara master: Reload systemctl and restart ara on service unit file https://review.openstack.org/564081 | 16:36 |
| dmsimard | ssbarnea: I'm not very excited at __main__, it's something new that we're not testing right now and that we'll have to maintain. I've looked at a few different projects and I didn't see something like that. Do we really need it ? | 16:39 |
| dmsimard | Also, did you see my comments on https://review.openstack.org/#/c/563712/ ? | 16:40 |
| dmsimard | I'd like to land patches that are in flight so I can cut a release | 16:40 |
| ssbarnea | https://github.com/tox-dev/tox/blob/master/tox/__main__.py | 16:40 |
| ssbarnea | https://github.com/PyCQA/pylint/blob/master/pylint/__main__.py | 16:40 |
| dmsimard | ssbarnea: interesting, I guess I haven't been looking at those projects :p | 16:41 |
| ssbarnea | also adding this file would not break anything, is just another way of calling it. | 16:41 |
| ssbarnea | very useful one for people that are affected by virtuanenv issues. | 16:42 |
| ssbarnea | i doubt it can hurt | 16:42 |
| dmsimard | ssbarnea: ok, let's land it then. Added a comment in https://review.openstack.org/#/c/563561/, after that I'll merge it | 16:42 |
| ssbarnea | also, more important: it does not duplicate code. | 16:42 |
| openstackgerrit | Sorin Sbarnea proposed openstack/ara master: Allow ARA module to be run https://review.openstack.org/563561 | 16:44 |
| *** tbielawa is now known as tbielawa|lunch | 17:00 | |
| dmsimard | hiroki: still around ? | 17:31 |
| *** jlozadad_ has joined #ara | 18:03 | |
| *** tbielawa|lunch is now known as tbielawa | 18:09 | |
| *** myoung is now known as myoung|dr | 19:03 | |
| dmsimard | hiroki: I got your thing working, I think. I'll clean things up and send a patch,. | 19:30 |
| *** gvincent has quit IRC | 19:44 | |
| *** tbielawa is now known as tbielawa|brb | 20:23 | |
| *** BlessJah_ is now known as BlessJah | 20:35 | |
| *** myoung|dr is now known as myoung | 20:41 | |
| openstackgerrit | David Moreau Simard proposed openstack/ara master: Add support for custom context/application root https://review.openstack.org/484378 | 20:50 |
| openstackgerrit | David Moreau Simard proposed openstack/ara master: Add support for custom context/application root https://review.openstack.org/484378 | 20:52 |
| dmsimard | hiroki: ^ I suspect that this breaks something that I haven't tested yet but the implementation shouldn't meaningfully change if you want to try it out before I land it | 20:53 |
| dmsimard | hiroki: example how to install ara with that patch: http://paste.openstack.org/raw/719956/ | 20:54 |
| openstackgerrit | David Moreau Simard proposed openstack/ara master: Add support for custom context/application root https://review.openstack.org/484378 | 20:55 |
| *** spiette has quit IRC | 20:57 | |
| *** tbielawa|brb is now known as tbielawa | 20:59 | |
| *** tbielawa has quit IRC | 20:59 | |
| *** openstackgerrit has quit IRC | 21:20 | |
| *** openstackgerrit has joined #ara | 22:52 | |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Refactor installation, configuration and web server implementation https://review.openstack.org/564362 | 22:52 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Add logrotate configuration https://review.openstack.org/564363 | 22:52 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: We don't need to check if selinux is enforcing https://review.openstack.org/564364 | 22:52 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Add support for nginx with reverse proxy to embedded server https://review.openstack.org/564365 | 22:52 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Install packages as a list instead of per item https://review.openstack.org/564367 | 22:56 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Add logrotate configuration https://review.openstack.org/564363 | 23:09 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: We don't need to check if selinux is enforcing https://review.openstack.org/564364 | 23:09 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Add support for nginx with reverse proxy to embedded server https://review.openstack.org/564365 | 23:09 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Install packages as a list instead of per item https://review.openstack.org/564367 | 23:09 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Add support for nginx with reverse proxy to embedded server https://review.openstack.org/564365 | 23:21 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Install packages as a list instead of per item https://review.openstack.org/564367 | 23:21 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Provide a hook for overriding configuration https://review.openstack.org/564369 | 23:21 |
| *** JohnnyOSA has quit IRC | 23:21 | |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Add support for nginx with reverse proxy to embedded server https://review.openstack.org/564365 | 23:29 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Install packages as a list instead of per item https://review.openstack.org/564367 | 23:29 |
| openstackgerrit | David Moreau Simard proposed openstack/ansible-role-ara master: Provide a hook for overriding configuration https://review.openstack.org/564369 | 23:29 |
| *** JohnnyOSA has joined #ara | 23:48 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!