| *** avass has quit IRC | 00:12 | |
| ianw | ok, resolves correctly for me now | 00:14 |
|---|---|---|
| ianw | with citycloud out of system-config i've removed those entries from emergency | 00:26 |
| openstackgerrit | Yang JianFeng proposed openstack/diskimage-builder master: Centos image support specify minor version https://review.opendev.org/728734 | 01:21 |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: Add tool to export Rackspace DNS domains to bind format https://review.opendev.org/728739 | 02:54 |
| *** ykarel|away is now known as ykarel | 03:58 | |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: [wip] generate ssl check list directly from letsencrypt variables https://review.opendev.org/728743 | 04:45 |
| AJaeger | ianw: can we merge https://review.opendev.org/#/c/728345/ now? Then I'll +2A ("site-variables: remove opendev.org mirror switch") | 04:45 |
| ianw | AJaeger: yes I think so, all mirrors should be opendev.org now! | 04:59 |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: [wip] generate ssl check list directly from letsencrypt variables https://review.opendev.org/728743 | 05:07 |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: [wip] generate ssl check list directly from letsencrypt variables https://review.opendev.org/728743 | 05:33 |
| *** dpawlik has joined #opendev | 05:53 | |
| openstackgerrit | Ian Wienand proposed opendev/system-config master: [wip] generate ssl check list directly from letsencrypt variables https://review.opendev.org/728743 | 05:56 |
| *** dpawlik has quit IRC | 05:57 | |
| *** dpawlik has joined #opendev | 06:13 | |
| AJaeger | ianw: approved now - and thanks for getting this done! | 06:16 |
| openstackgerrit | Merged openstack/project-config master: site-variables: remove opendev.org mirror switch https://review.opendev.org/728345 | 06:28 |
| *** DSpider has joined #opendev | 06:36 | |
| *** hashar has joined #opendev | 06:50 | |
| *** slaweq has joined #opendev | 06:53 | |
| *** larainema has joined #opendev | 07:01 | |
| openstackgerrit | Merged zuul/zuul-jobs master: tox: update lint regex to not require column https://review.opendev.org/725030 | 07:12 |
| *** iurygregory has joined #opendev | 07:17 | |
| *** tosky has joined #opendev | 07:22 | |
| *** rpittau|afk is now known as rpittau | 07:29 | |
| frickler | infra-root: please have a look at https://review.opendev.org/615197 in order to bring docs and reality into sync regarding cloud access on bridge | 07:40 |
| *** moppy has quit IRC | 08:01 | |
| openstackgerrit | Merged opendev/system-config master: Remove vexxhost openstack.org mirrors https://review.opendev.org/728311 | 08:01 |
| openstackgerrit | Merged opendev/system-config master: Remove limestone openstack.org mirror https://review.opendev.org/728319 | 08:01 |
| *** moppy has joined #opendev | 08:01 | |
| openstackgerrit | Yang JianFeng proposed openstack/diskimage-builder master: Centos element support specify minor version https://review.opendev.org/728734 | 08:18 |
| *** sshnaidm|off has joined #opendev | 08:47 | |
| *** sshnaidm|off is now known as sshnaidm | 08:47 | |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 08:54 |
| *** ykarel is now known as ykarel|lunch | 08:54 | |
| *** ysandeep is now known as ysandeep|lunch | 08:56 | |
| openstackgerrit | Yang JianFeng proposed openstack/diskimage-builder master: Centos element support specify minor version https://review.opendev.org/728734 | 09:09 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 09:17 |
| *** ysandeep|lunch is now known as ysandeep | 09:51 | |
| *** hashar is now known as hasharAway | 09:54 | |
| *** rpittau is now known as rpittau|bbl | 10:06 | |
| *** tkajinam has quit IRC | 10:15 | |
| *** ykarel|lunch is now known as ykarel | 10:43 | |
| *** hrw has joined #opendev | 11:01 | |
| hrw | morning | 11:01 |
| *** jaicaa has quit IRC | 11:01 | |
| hrw | can someone tell me what I should change in https://review.opendev.org/#/c/728798/ (openstack/requirements) to have 'debian-buster-arm64' nodeset available? 'ubuntu-bionic-arm64' was present without changes | 11:02 |
| *** jaicaa has joined #opendev | 11:02 | |
| AJaeger | hrw, nodes != nodesets, we have predefined ones at https://opendev.org/opendev/base-jobs/src/branch/master/zuul.d/nodesets.yaml#L14 . So, adding the desired one is one option | 11:05 |
| hrw | AJaeger: ok. so I should go to base-jobs and adds all aarch64 ones there. | 11:08 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 11:09 |
| openstackgerrit | Marcin Juszkiewicz proposed opendev/base-jobs master: add arm64 nodesets for CentOS 8 and Debian https://review.opendev.org/728810 | 11:11 |
| hrw | thx AJaeger | 11:12 |
| hrw | arhg. I hate moments when all tests are py3 but zuul uses py2 to run ansible | 11:21 |
| hrw | 2020-05-18 11:19:35.092068 | debian-buster-arm64 | "msg": "Failed to import the required Python library (setuptools) on debian-buster-arm64-linaro-us-0016633853's Python /usr/bin/python. Please read module documentation and install in the appropriate location" | 11:21 |
| *** jaicaa has quit IRC | 11:22 | |
| *** jaicaa has joined #opendev | 11:22 | |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 11:23 |
| hrw | requirements uses zuul-jobs directly | 11:24 |
| hrw | ok, time to check how we solved that shit in kolla ;( | 11:24 |
| hrw | heh. we do not use tox anymore. | 11:25 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 11:36 |
| *** ysandeep is now known as ysandeep|afk | 11:53 | |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 12:00 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 12:11 |
| *** rpittau|bbl is now known as rpittau | 12:12 | |
| openstackgerrit | Thierry Carrez proposed openstack/project-config master: Add base replication jobs for oslo-metrics https://review.opendev.org/728820 | 12:16 |
| *** hasharAway is now known as hashar | 12:17 | |
| openstackgerrit | Andreas Jaeger proposed zuul/zuul-jobs master: Revert "tox: update lint regex to not require column" https://review.opendev.org/728822 | 12:23 |
| openstackgerrit | Simon Westphahl proposed openstack/diskimage-builder master: Wait for blockdev to exist before calling mkfs https://review.opendev.org/728823 | 12:32 |
| openstackgerrit | Simon Westphahl proposed openstack/diskimage-builder master: Use kpartx option to update partition mappings https://review.opendev.org/728824 | 12:32 |
| *** ysandeep|afk is now known as ysandeep | 12:36 | |
| openstackgerrit | Merged zuul/zuul-jobs master: Revert "tox: update lint regex to not require column" https://review.opendev.org/728822 | 12:52 |
| hrw | ianw: I think that it is time when ubuntu-focal-arm64 will be needed ;( | 12:53 |
| hrw | ianw: checking how d-i-b goes with it | 12:54 |
| mordred | frickler: responded to that patch | 13:06 |
| *** ykarel is now known as ykarel|afk | 13:06 | |
| *** jhesketh has quit IRC | 13:15 | |
| openstackgerrit | Simon Westphahl proposed openstack/diskimage-builder master: Wait for blockdev to exist before calling mkfs https://review.opendev.org/728823 | 13:16 |
| openstackgerrit | Simon Westphahl proposed openstack/diskimage-builder master: Use kpartx option to update partition mappings https://review.opendev.org/728824 | 13:16 |
| *** jhesketh has joined #opendev | 13:22 | |
| *** hashar is now known as hasharAway | 13:24 | |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder master: Drop support for python2 https://review.opendev.org/728889 | 13:27 |
| openstackgerrit | Jens Harbott (frickler) proposed opendev/system-config master: Add users to the docker group https://review.opendev.org/728893 | 13:31 |
| frickler | mordred: ah, thx. ^^ | 13:31 |
| mordred | frickler: I'm curious what happens if we add a user to a non-existent group with the ansible user: module | 13:32 |
| mordred | frickler: but I think we should find out with that patch | 13:32 |
| frickler | mordred: well, we could also make this logic very complicated. or maybe have docker use the "sudo" group on bridge instead of "docker"? | 13:34 |
| mordred | frickler: I'd _personally_ prefer if we had admins in the docker group - I think being able to run docker commands is nice, but maybe someone disagrees | 13:35 |
| mordred | frickler: we could also potentially just add a docker group unconditionally - or also could just install docker everywhere | 13:36 |
| * mordred isn't sure what the right answer is - but agrees with frickler's desire | 13:36 | |
| *** jhesketh has quit IRC | 13:41 | |
| openstackgerrit | Simon Westphahl proposed openstack/diskimage-builder master: Wait for blockdev to exist before calling mkfs https://review.opendev.org/728823 | 13:41 |
| openstackgerrit | Simon Westphahl proposed openstack/diskimage-builder master: Use kpartx option to update partition mappings https://review.opendev.org/728824 | 13:41 |
| corvus | mordred: istr clarkb has a 'sudo for docker' preference. mostly because docker==root | 13:41 |
| mordred | corvus: nod | 13:42 |
| *** hasharAway is now known as hashar | 13:54 | |
| openstackgerrit | Monty Taylor proposed opendev/system-config master: Stop cloning a bunch of puppet modules we don't use https://review.opendev.org/720892 | 13:58 |
| fungi | i miss the old "wheel" group | 14:04 |
| fungi | lost to the annals of history now i suppose (except on *bsd systems) | 14:04 |
| mordred | fungi: I never really understood the wheel group - but I never really bsd'd | 14:05 |
| openstackgerrit | Ghanshyam Mann proposed openstack/project-config master: Retire Tricircle projects: finish infra todo https://review.opendev.org/728902 | 14:06 |
| openstackgerrit | Ghanshyam Mann proposed openstack/project-config master: Retire Tricircle project: end project gating https://review.opendev.org/728903 | 14:12 |
| fungi | mordred: it was traditionally the group used to limit who could run `su` | 14:14 |
| fungi | and similar command restrictions | 14:15 |
| mordred | fungi: yah - it just never made sense to me as name | 14:17 |
| mordred | fungi: but I always figured I just wasn't in the bsd in-crowd so I never really worried about it too much | 14:17 |
| fungi | ahh, the jargon file entry says it was a reference to a sysadmin as a "big wheel" on the system | 14:18 |
| *** ykarel|afk is now known as ykarel | 14:18 | |
| fungi | http://www.catb.org/jargon/html/W/wheel.html | 14:19 |
| hrw | what do I have to do to have ubuntu-focal-arm64 node? dib can build focal for x86 as such node exists but I am unable to build whatever arm64 image with dib locally | 14:24 |
| clarkb | hrw: I imagine the first step is debugging why arm64 focal builds fail? | 14:25 |
| clarkb | hrw: and re python versions I believe ansible is supposed to figure that out, but you can also override it at a job level | 14:26 |
| hrw | clarkb: sure, just focal/buster/bionic fail for me ;( | 14:26 |
| frickler | mordred: so adding the user to a nonexisting group fails as expected. a) create the docker group in the users role like we do for sudo, b) move the logic into service-bridge.yaml after the install-docker role, what do you think? | 14:26 |
| hrw | long time since I used dib | 14:26 |
| *** mlavalle has joined #opendev | 14:26 | |
| clarkb | hrw: you can set ansible_python_interpreter as a job hostvar to control that on a per node basis | 14:26 |
| hrw | k | 14:26 |
| clarkb | I think if your workload is sensitive to the ansible python version then setting it directly is the most correct thing to do | 14:27 |
| clarkb | hrw: how are you running dib and how does it fail? | 14:27 |
| clarkb | if I had to guess you need to set the gpt partitioning stuff | 14:28 |
| clarkb | https://opendev.org/openstack/project-config/src/branch/master/nodepool/nb03.openstack.org.yaml#L63 is the element to include to do that | 14:28 |
| mordred | frickler: well - we should probably get consensus with clarkb first - corvus mentioned that clarkb has opinions about not doing this | 14:28 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Revert "Revert "tox: update lint regex to not require column"" https://review.opendev.org/728912 | 14:28 |
| hrw | clarkb: thanks | 14:28 |
| clarkb | mordred: frickler: fwiw we had to use sudo before for openstack cli commands due to file permissions on clouds.yaml | 14:29 |
| clarkb | I don't think that is a regression | 14:29 |
| hrw | retrying now | 14:29 |
| clarkb | mordred: frickler: but also this is my major gripe with docker | 14:30 |
| clarkb | using it implies every user is root, then when you replace non root tools with it you get into weird spots | 14:30 |
| clarkb | dox was a really early example of this | 14:30 |
| clarkb | I personally prefer forcing people to sudo as it serves as a reminder that every tiem I run these commands I'm doing so with much power | 14:30 |
| frickler | clarkb: the idea is to be able to run things without sudo, see https://review.opendev.org/#/c/615197/4 . maybe your argumentation implies running OSC in a container is the wrong solution. or maybe we need podman or some other root-less container solution? | 14:33 |
| clarkb | frickler: I think OSC is a bad example beacuse we've always needed root to run it due to permissions on the clouds.yaml configs | 14:33 |
| clarkb | I guess your other change is modifying that too | 14:34 |
| mordred | clarkb: yeah - but this started with frickler fixing that | 14:34 |
| frickler | clarkb: our docs claim differently, so I don't think that this is the guiding principle behind that | 14:34 |
| mordred | so - we COULD just put a sudo in the /usr/local/bin script | 14:34 |
| mordred | for the openstack command | 14:34 |
| clarkb | no I don't think its a guiding principle but I read the earlier discussion that using docker for osc is a regression re sudo | 14:34 |
| frickler | see the changed doc file in the first change | 14:34 |
| mordred | to make running osc commands easy | 14:34 |
| clarkb | I was responding to the impression people felt it was a regression (and as far as I can tell it isn't), but I think I misinterpreted the motivation here | 14:35 |
| mordred | yeah - I think the whole thing here is "how can we make it possible to run osc commands as not-root" - and there are a few different things to juggle to make that possible | 14:36 |
| mordred | what do we think about putting sudo in the wrapper script? | 14:36 |
| openstackgerrit | Monty Taylor proposed opendev/system-config master: Stop cloning a bunch of puppet modules we don't use https://review.opendev.org/720892 | 14:36 |
| clarkb | mordred: I'd be more comfortable with that. Though I think what it gives us isn't a whole lot (logging is the bgi thing probably) | 14:37 |
| openstackgerrit | Monty Taylor proposed opendev/system-config master: Put sudo into openstack wrapper script https://review.opendev.org/728916 | 14:37 |
| mordred | clarkb: what do you mean re: logging? | 14:37 |
| clarkb | mordred: sudo logs | 14:38 |
| mordred | nod | 14:38 |
| hrw | https://review.opendev.org/#/c/728810/ - can someone check and vote? adding debian and centos8 arm64 nodesets | 14:40 |
| clarkb | I "grew up" in an admin group that expected root activity to be very intentional. Whether using sudo or su'ing the point was that you knew you were acting with more privs. In general I like that approach and that is why I worry about making docker easy mode root | 14:40 |
| clarkb | osc remains a special case tehre because talking to cloud apis directly like that is itself another type of escalation | 14:41 |
| clarkb | (eg people know to be careful when talking to the apis using osc) | 14:41 |
| hrw | clarkb: "DIB_ELEMENTS=block-device-efi disk-image-create -a arm64 -o test-dib.img -u vm debian" ends with https://pastebin.com/0akw00Zu (2>&1|tee) | 14:41 |
| clarkb | hrw: you shouldn't prefix the command with your elements, they are a list on the command itself | 14:42 |
| hrw | clarkb: ok | 14:42 |
| hrw | speaking of sudo/docker... imho on system with multiple admins sudo should be the only way. at least there are logs who sudoed... | 14:42 |
| clarkb | hrw: from your paste I Think configuring the target disk failed beacuse DIB_ELEMENTS may haev overridden the debian which creates the initial disk state? in any case try it with them all listed -u vm debian block-device-efi and see where that gets you | 14:45 |
| openstackgerrit | Ghanshyam Mann proposed openstack/project-config master: Retire Tricircle projects: finish infra todo https://review.opendev.org/728902 | 14:45 |
| hrw | clarkb: ok | 14:45 |
| hrw | clarkb: I thought that block-device-efi was default for aarch64 ;d | 14:46 |
| openstackgerrit | Ghanshyam Mann proposed openstack/project-config master: Retire Tricircle projects: finish infra todo https://review.opendev.org/728902 | 14:46 |
| clarkb | hrw: quick grep doesn't show it auto selecting though there are warnings if you potentially choose the wrong one for the platform (also my grep may just be missing whatever selection mechanism is actually used) | 14:47 |
| hrw | sure | 14:47 |
| clarkb | hrw: we explicitly list it in our elements lists so I figure start there | 14:47 |
| hrw | clarkb: will dig. | 14:47 |
| clarkb | infra-root (and particularly fungi) https://review.opendev.org/#/c/728650/ is a change to remove the jitsi watermark logo from our meetpad server. fungi noticed that rendering of tehtperad text can get weird when that watermark shows up | 14:48 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Add python3-devel to bindep https://review.opendev.org/728708 | 14:49 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-coverage-output: do not synchronize owner https://review.opendev.org/727717 | 15:05 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-javascript-content-tarball: do not synchronize owner https://review.opendev.org/727718 | 15:05 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-javascript-output: do not synchronize owner https://review.opendev.org/727719 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-javascript-tarball: do not synchronize owner https://review.opendev.org/727720 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-markdownlint: do not synchronize owner https://review.opendev.org/727721 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-phoronix-results: do not synchronize owner https://review.opendev.org/727722 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-puppet-module-output: do not synchronize owner https://review.opendev.org/727723 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-python-sdist-output: do not synchronize owner https://review.opendev.org/727724 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-sphinx-output: do not synchronize owner https://review.opendev.org/727725 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-sphinx-tarball: do not synchronize owner https://review.opendev.org/727726 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-tox-output: do not synchronize owner https://review.opendev.org/727727 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-translation-output: do not synchronize owner https://review.opendev.org/727728 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: fetch-subunit-output: do not synchronize owner https://review.opendev.org/727729 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: prepare-workspace: do not synchronize owner https://review.opendev.org/727730 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: publish-artifacts-to-fileserver: do not synchronize owner https://review.opendev.org/727731 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: upload-logs: do not synchronize owner https://review.opendev.org/727732 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: tarball-post.yaml: do not synchronize owner https://review.opendev.org/727735 | 15:06 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Add linting rule to enforce no-same-owner policy https://review.opendev.org/727642 | 15:06 |
| openstackgerrit | Ghanshyam Mann proposed opendev/irc-meetings master: Remove the Tricircle team meeting https://review.opendev.org/728922 | 15:11 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Deprecate default tox_envlist: venv https://review.opendev.org/726830 | 15:12 |
| *** ysandeep is now known as ysandeep|afk | 15:26 | |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 15:27 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Deprecate default tox_envlist: venv https://review.opendev.org/726830 | 15:27 |
| clarkb | AJaeger: looks like logstash queues are holding up since the last round of cleaning | 15:30 |
| AJaeger | \o/ | 15:31 |
| *** dpawlik has quit IRC | 15:31 | |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-coverage-output: do not synchronize owner https://review.opendev.org/727717 | 15:32 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-javascript-content-tarball: do not synchronize owner https://review.opendev.org/727718 | 15:47 |
| *** ykarel is now known as ykarel|away | 15:49 | |
| openstackgerrit | James E. Blair proposed opendev/system-config master: Run Zuul, Nodepool, and Zookeeper as the "container" user https://review.opendev.org/726958 | 15:57 |
| corvus | mordred: our openstack.yaml inventory file has public_v4 and public_v6 set; i'm guessing that's an opendev-local convention? | 16:00 |
| hrw | clarkb: 2020-05-18 16:00:36.505 | Build completed successfully | 16:00 |
| hrw | clarkb: turned out that I had some system issue... solved by rebooting | 16:00 |
| openstackgerrit | Monty Taylor proposed zuul/zuul-jobs master: Remove --verbose from js_build_command https://review.opendev.org/728930 | 16:01 |
| clarkb | corvus: I think that was carried over from the script generated inventory | 16:01 |
| mordred | corvus, AJaeger: ^^ see https://zuul.opendev.org/t/zuul/build/822327bc250345da80b1574d29198718 | 16:02 |
| mordred | clarkb, corvus: yes - those are values that sdk provided in the dynamic inventory | 16:02 |
| mordred | so are opendev convention | 16:02 |
| corvus | mordred: ok; that's a difference from the zuul-provided inventory, so we'll have to mutate it a bit to match | 16:03 |
| corvus | mordred: what am i looking at with AJaeger? | 16:03 |
| corvus | mordred: oh, i see, nm | 16:03 |
| *** rpittau is now known as rpittau|afk | 16:06 | |
| openstackgerrit | Clark Boylan proposed openstack/project-config master: Use infra-root-keys-2020-05-13 in nodepool https://review.opendev.org/727867 | 16:06 |
| clarkb | infra-root ^ that needed a rebase due to merge conflicts. I' | 16:06 |
| clarkb | *I've since checked the key is present in all of the clouds so should be good to go now | 16:07 |
| clarkb | that will complete the test node ssh key rotation | 16:07 |
| openstackgerrit | Marcin Juszkiewicz proposed openstack/project-config master: Add Ubuntu Focal for AArch64 https://review.opendev.org/728933 | 16:09 |
| openstackgerrit | Marcin Juszkiewicz proposed openstack/project-config master: grafana: add CentOS 8 and missing AArch64 entries https://review.opendev.org/728934 | 16:11 |
| hrw | I hope that first one is properly done. ubuntu-focal-arm64 image builds fine locally. | 16:12 |
| hrw | second patch is kind of 'I had file opened, noticed some missing entries so added them' | 16:12 |
| hrw | openstack/requirements will use ubuntu-focal-arm64 nodes ones they will be available | 16:13 |
| openstackgerrit | Merged zuul/zuul-jobs master: Ensure output dirs are empty https://review.opendev.org/727135 | 16:13 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-javascript-output: do not synchronize owner https://review.opendev.org/727719 | 16:13 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-javascript-tarball: do not synchronize owner https://review.opendev.org/727720 | 16:13 |
| clarkb | hrw: that first one is close. I think you are meant to run the script you updated (create-nodepool-dib.sh) as well to update teh grafana configs (there will eb at least one additional file to git add) | 16:13 |
| hrw | as it is the only way to be sure that their CI job can pass on arm64 | 16:14 |
| openstackgerrit | Marcin Juszkiewicz proposed openstack/project-config master: grafana: add CentOS 8 and missing AArch64 entries https://review.opendev.org/728934 | 16:15 |
| hrw | so I ran it | 16:15 |
| hrw | clarkb: never played with those graphs | 16:16 |
| hrw | ok, will be back in ~2h | 16:17 |
| hrw | it was another day of firefighting ;D | 16:18 |
| openstackgerrit | Merged zuul/zuul-jobs master: Remove --verbose from js_build_command https://review.opendev.org/728930 | 16:21 |
| *** redrobot has joined #opendev | 16:23 | |
| *** cmorpheus is now known as cmurphy | 16:28 | |
| clarkb | fungi: have a quick moment for https://review.opendev.org/#/c/727867/ ? | 16:30 |
| fungi | yeah, saw it scroll by very quickly. busy mornnig | 16:31 |
| fungi | morning | 16:31 |
| *** ysandeep|afk is now known as ysandeep | 16:33 | |
| openstackgerrit | Merged opendev/system-config master: Disable jitsi watermark in jitsi conferences https://review.opendev.org/728650 | 16:34 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-markdownlint: do not synchronize owner https://review.opendev.org/727721 | 16:34 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-phoronix-results: do not synchronize owner https://review.opendev.org/727722 | 16:34 |
| openstackgerrit | Merged openstack/project-config master: Use infra-root-keys-2020-05-13 in nodepool https://review.opendev.org/727867 | 16:47 |
| *** ysandeep is now known as ysandeep|away | 17:02 | |
| openstackgerrit | James E. Blair proposed zuul/zuul-jobs master: Allow mapping additional hostvars in write-inventory https://review.opendev.org/728952 | 17:03 |
| openstackgerrit | James E. Blair proposed opendev/system-config master: Add iptables_extra_allowed_groups https://review.opendev.org/726475 | 17:04 |
| *** mlavalle has quit IRC | 17:08 | |
| *** mlavalle has joined #opendev | 17:09 | |
| clarkb | infra-root I've started to draft an advisory board volunteering thread here https://etherpad.opendev.org/p/XRyf4UliAKI9nRGstsP4 I'd like to make sure that the plan there makes sense before sending it more broadly. cc mnaser as you initially suggested the advisory board | 17:12 |
| fungi | well, he suggested including resource donating providers on the advisory council, we had previously already planned to include project representatives | 17:15 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-puppet-module-output: do not synchronize owner https://review.opendev.org/727723 | 17:28 |
| clarkb | meetpad continues to be happy after that config update and the logo is gone now | 17:28 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-python-sdist-output: do not synchronize owner https://review.opendev.org/727724 | 17:29 |
| clarkb | and I've just confirmed being able to ssh into a nodepool test node with the new ssh keys | 17:30 |
| *** hashar has quit IRC | 17:44 | |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-sphinx-output: do not synchronize owner https://review.opendev.org/727725 | 17:46 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-sphinx-tarball: do not synchronize owner https://review.opendev.org/727726 | 18:00 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-tox-output: do not synchronize owner https://review.opendev.org/727727 | 18:00 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-translation-output: do not synchronize owner https://review.opendev.org/727728 | 18:00 |
| openstackgerrit | Merged zuul/zuul-jobs master: fetch-subunit-output: do not synchronize owner https://review.opendev.org/727729 | 18:00 |
| openstackgerrit | Merged zuul/zuul-jobs master: prepare-workspace: do not synchronize owner https://review.opendev.org/727730 | 18:00 |
| openstackgerrit | Merged zuul/zuul-jobs master: publish-artifacts-to-fileserver: do not synchronize owner https://review.opendev.org/727731 | 18:00 |
| openstackgerrit | Merged zuul/zuul-jobs master: upload-logs: do not synchronize owner https://review.opendev.org/727732 | 18:00 |
| openstackgerrit | Merged zuul/zuul-jobs master: tarball-post.yaml: do not synchronize owner https://review.opendev.org/727735 | 18:00 |
| *** hashar has joined #opendev | 18:04 | |
| *** hashar is now known as hasharAway | 18:09 | |
| clarkb | infra-root I've approved https://review.opendev.org/#/c/728350/4 which cleans up puppetized mirrors as ianw has managed to go through and swap out our mirrors to the ansibled versions as well as under opendev.org domain | 18:15 |
| clarkb | I'll keep an eye on it, but if you notice mirror weirdness let me know and I'm able to debug | 18:15 |
| clarkb | semi related to ^ is https://review.opendev.org/#/c/727873/ which will rotate apache workers on ansibled mirrors | 18:16 |
| clarkb | if anyone has a moement to review that second change that would be great (thank you corvus for the initial review) | 18:16 |
| clarkb | then as a followon to all that I think we can start to consider what using https on our mirrors should look like | 18:16 |
| clarkb | on bionic and newer I believe apt can just use https but not on xenial. Can yum/dnf happily https? we'll also want to update our proxies for docker and pypi and stuff | 18:17 |
| clarkb | anyway one step at a time :) | 18:17 |
| fungi | also debian-buster and newer, i believe | 18:18 |
| hrw | morning | 18:19 |
| hrw | fungi: exactly. | 18:19 |
| hrw | apt-transport-https package is transitional since buster | 18:19 |
| openstackgerrit | Marcin Juszkiewicz proposed openstack/project-config master: Add Ubuntu Focal for AArch64 https://review.opendev.org/728933 | 18:35 |
| openstackgerrit | Marcin Juszkiewicz proposed openstack/project-config master: grafana: add CentOS 8 and missing AArch64 entries https://review.opendev.org/728934 | 18:35 |
| hrw | merge conflicts sorted out | 18:35 |
| *** panda is now known as panda|off | 18:40 | |
| openstackgerrit | Clark Boylan proposed opendev/system-config master: Enable ssl on all mirror vhosts https://review.opendev.org/728986 | 18:46 |
| clarkb | started on the vhost updates to do more ssl on mirrors there ^ | 18:46 |
| fungi | looking at the git notes display support in gitea, it seems to still be hard-coded to only look at refs/notes/commits while gerrit uses refs/notes/review instead for including review metadata with commits... i wonder if it would make sense for us to replicate refs/notes/review in gerrit to refs/notes/commits in gitea rather than trying to make gitea's notes handler more configurable | 18:47 |
| fungi | thoughts? | 18:47 |
| mordred | fungi: hrm. interesting idea | 18:48 |
| mordred | fungi: no reason we couldn't do that | 18:48 |
| clarkb | that wouldn't help people trying to fetch the gerrit notes locally unless we replicated to both locations | 18:48 |
| mordred | clarkb: good point | 18:48 |
| mordred | fungi: fwiw - modules/git/notes.go in the go-gitea/gitea repo is what's reading refs/notes/commits. I'm guessing turning that string into a per-repo config value wouldn't be the most impossible task | 18:50 |
| fungi | they could fetch refs/notes/commits from gitea if that's their origin | 18:50 |
| openstackgerrit | Merged opendev/system-config master: Remove puppet mirror support https://review.opendev.org/728350 | 18:50 |
| clarkb | fungi: right but how would they know to do that since the other ref is documented for gerrit repos | 18:51 |
| fungi | mordred: yeah, i was mulling back over the old pull request for that, which got me thinking about alternative solutions to get back the review notes display we had in cgit | 18:51 |
| mordred | (in a world of infinite time, I think it would be super cool to teach gitea about nodedb and to be able to show the in-repo code review info in their pull request view) | 18:51 |
| fungi | though cgit simply displayed all notes from the refs/notes tree | 18:51 |
| mordred | I'd be fine replicating to refs/notes/commits and adding a piece of documentation | 18:51 |
| clarkb | fungi: I actually think something like what cgit did would be best | 18:51 |
| clarkb | fungi: maybe with an expandable block in the commit ui | 18:52 |
| clarkb | (because other tools can write to other notes locations too) | 18:52 |
| clarkb | but that is also likely the most amount of gitea hacking | 18:52 |
| fungi | i mean, a simpler hack on our side would be to just patch the NotesRef const to refs/notes/review but that seems... unclean | 18:54 |
| fungi | and assumes gerrit's notes are the only ones we'd only ever want displayed (but maybe that's true) | 18:55 |
| clarkb | its likely true today :) | 18:56 |
| fungi | as for the reverse, were we ever able to work out a solution for doing something like 654034 (is that waiting for us to upgrade maybe)> | 18:59 |
| fungi | ? | 18:59 |
| clarkb | fungi: I expect it likely needs testing. iirc the gitweb -> cgit transition was super fun | 19:00 |
| clarkb | that said I bet if we pointed to git.openstack.org it would mostly just work since we already have the rewrites there | 19:01 |
| openstackgerrit | Merged opendev/system-config master: Set connection limits on mirror apache workers https://review.opendev.org/727873 | 19:18 |
| openstackgerrit | Clark Boylan proposed opendev/system-config master: WIP add support for multiple jvbs behind meetpad https://review.opendev.org/729008 | 19:30 |
| clarkb | I'm sure ^ is nowhere close to functioanl but gives the rough shape of what is necessary to scale up jvbs I think | 19:31 |
| clarkb | I'm hoping the test job there will give more clues as to what all is broken (firewall is for sure I think) | 19:32 |
| openstackgerrit | James E. Blair proposed zuul/zuul-jobs master: Allow mapping additional hostvars in write-inventory https://review.opendev.org/728952 | 19:34 |
| openstackgerrit | James E. Blair proposed zuul/zuul-jobs master: Update flake8 ignore rules to match Zuul https://review.opendev.org/729010 | 19:34 |
| *** hasharAway is now known as hashar | 19:39 | |
| openstackgerrit | James E. Blair proposed opendev/system-config master: Add iptables_extra_allowed_groups https://review.opendev.org/726475 | 19:41 |
| openstackgerrit | Gage Hugo proposed opendev/irc-meetings master: Update OSH meeting chair and agenda link https://review.opendev.org/729017 | 19:52 |
| *** avass has joined #opendev | 19:54 | |
| fungi | etherpad is up to 1.8.4 now, and includes this workaround for one known source of "hung" pads: https://github.com/ether/etherpad-lite/commit/51e40dd | 20:12 |
| fungi | and fixes some regressions from 1.8.3, which in turn has a few niceties of its own: | 20:14 |
| fungi | https://github.com/ether/etherpad-lite/releases/tag/1.8.3 | 20:15 |
| fungi | improved stability of import/export functionality | 20:15 |
| fungi | better database support (especially MySQL) | 20:15 |
| fungi | but also: | 20:16 |
| fungi | the visuals and CSS structure of the page was updated. Plugins may need a CSS rehaul | 20:16 |
| fungi | we should probably make sure the headings/style plugin still works | 20:16 |
| clarkb | fungi: if you push up a change to bump the etherpad version in docker-compose as well as make the test fail somehow we can hold the node and test with it that way | 20:23 |
| clarkb | and based on that we can decide if this is a pre or post ptg activity? | 20:23 |
| openstackgerrit | Jeremy Stanley proposed opendev/system-config master: Upgrade Etherpad to 1.8.4 https://review.opendev.org/729029 | 20:24 |
| fungi | like that? ^ | 20:24 |
| clarkb | ya though unless etherpad completely breaks in that scenario we won't be able to hold the node | 20:24 |
| fungi | ahh, make the test fail... let's see if i can make a failure as a child patch of that | 20:24 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 20:25 |
| clarkb | (also a fresh deploy from 1.8.4 doesn't test the upgrade path but we can do that in a followon) | 20:25 |
| clarkb | basically if our plugins work then next step would be testing the upgrade I think | 20:25 |
| openstackgerrit | Albin Vass proposed zuul/zuul-jobs master: Don't require tox_envlist https://review.opendev.org/726829 | 20:26 |
| openstackgerrit | James E. Blair proposed opendev/system-config master: Run Zuul as the zuuld user https://review.opendev.org/726958 | 20:42 |
| *** yuri has quit IRC | 20:46 | |
| mordred | corvus: re: manual help rolling out there ^^ - it _should_ be less bad given the nummeric user exists already so we won't have to chown everything right? | 20:55 |
| corvus | mordred: yeah, though the name is different so i don't know if it will succeed... | 20:56 |
| corvus | mordred: also, i accidentially overwrote it with a new version.... | 20:56 |
| corvus | i meant to make a new change with 'zuuld' as an alternative | 20:57 |
| mordred | corvus: I was wondering about that | 20:57 |
| corvus | mostly because the more i worked on it, the more i didn't like the 'container' name... | 20:57 |
| mordred | yeah. I also didn't like the container name | 20:57 |
| mordred | but I didn't have any better suggestions | 20:57 |
| mordred | I think zuuld is potentially better | 20:57 |
| corvus | switching zuul->zuuld or similar was something we talked about, but our main concern was whether the executor would get confused... i looked, and i think we'd be okay | 20:58 |
| corvus | and also, fwiw, if we want to colocate these in the future, i think we can using subuid -- the max uid limit in linux is quite high, so even if we eat 65k uids for each container, i think we'd still be fine. | 20:59 |
| corvus | but still, i don't think we have to care about that today | 20:59 |
| corvus | mordred: this change in zuul-jobs is needed for the iptables work related to this: https://review.opendev.org/728952 | 21:01 |
| corvus | i'm pretty sure https://review.opendev.org/726475 shows it working -- it just failed installing docker-ce (??) | 21:02 |
| corvus | imagine it's just a consequence of not using the mirrors in the system-config-run jobs | 21:02 |
| *** slaweq has quit IRC | 21:05 | |
| openstackgerrit | Merged openstack/project-config master: Retire Tricircle project: end project gating https://review.opendev.org/728903 | 21:15 |
| *** slaweq has joined #opendev | 21:28 | |
| *** hashar has quit IRC | 21:30 | |
| openstackgerrit | Clark Boylan proposed opendev/system-config master: WIP add support for multiple jvbs behind meetpad https://review.opendev.org/729008 | 21:30 |
| *** sshnaidm is now known as sshnaidm|afk | 22:00 | |
| openstackgerrit | Clark Boylan proposed opendev/system-config master: WIP add support for multiple jvbs behind meetpad https://review.opendev.org/729008 | 22:16 |
| ianw | clarkb: thanks for reviews; couple of cleanup items i'll go through in https://etherpad.opendev.org/p/openstack.org-mirror-be-gone | 22:32 |
| clarkb | ianw: https://review.opendev.org/#/c/728986/ is sort of related too if you want to take a look (turn on more ssl on our mirror vhosts) | 22:32 |
| clarkb | ianw: I think we can start to update our mirror configs written by base job stuff to prefer https where https is valid for the clients | 22:35 |
| clarkb | but before we do that having all the ssl vhosts set up would be a good idea | 22:35 |
| clarkb | ianw: feel free to point me at more things I can do to help | 22:38 |
| ianw | it took me quite a while to figure out why "openstack" on bridge couldn't find a file on the disk that was clearly there; until i realised it was a docker wrapper :) | 22:49 |
| *** slaweq has quit IRC | 22:51 | |
| *** tkajinam has joined #opendev | 22:53 | |
| openstackgerrit | Clark Boylan proposed opendev/system-config master: WIP add support for multiple jvbs behind meetpad https://review.opendev.org/729008 | 22:56 |
| clarkb | heh I somehow missed adding the server I actually wanted to test on :/ | 22:56 |
| *** slaweq has joined #opendev | 22:58 | |
| openstackgerrit | Merged openstack/project-config master: Add Ubuntu Focal for AArch64 https://review.opendev.org/728933 | 23:05 |
| *** DSpider has quit IRC | 23:08 | |
| openstackgerrit | Merged openstack/project-config master: grafana: add CentOS 8 and missing AArch64 entries https://review.opendev.org/728934 | 23:10 |
| *** tosky has quit IRC | 23:39 | |
| *** amotoki has quit IRC | 23:53 | |
| *** amotoki has joined #opendev | 23:53 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!