Wednesday, 2020-05-27

fungiare we also removing the jvb service from meetpad01 so the other services don't have to compete for resources?00:04
clarkbfungi: no00:04
clarkbfungi: when we looked at it during the openstack release celebration the jvb is basically the only resource consumer00:04
ianwfungi: did you look into what the afs mount path should be for buster wheels?00:04
clarkbI think it will be ok to run it alongside the other services, but if it isn't then we can split things up further and deploy a smaller meetpad00:04
clarkbthough thats all likely post ptg I think00:05
*** diablo_rojo has quit IRC00:05
clarkbhrm cacti hasn't managed to pull data from meetpad00:08
clarkbI've restarted snmpd on meetpad just to rule that out but haven't seen any change over what I think has been a couple collection periods00:08
clarkbmaybe I do need to wait a bit longer, but I've also checked the firewall rules and it looks happy there too00:08
fungiianw: i hadn't gotten that far yet, nope, sorry00:16
ianwthat's ok, it's going to be "debian-10-x86_64"00:19
fungilooks right00:20
openstackgerritIan Wienand proposed openstack/project-config master: Match Debian in AFS slug generation  https://review.opendev.org/73100900:20
ianwfungi: after something like ^00:20
ianwfungi: cna you confirm you can see everything in /afs/openstack.org/mirror/wheel now?00:22
fungichecking00:24
ianwhrm i get forbidden on https://mirror.iad.rax.opendev.org/wheel/ubuntu-20.04-x86_64/ ... acl's should be right00:27
fungiianw: yeah, looks good for 730323, want to do the ones for 730342 as well (going with "a64" as the suffix)?00:27
markmcclainfungi/clarkb: sorry... toddlers pull me away for a bit. I'll check to see if there was an out of band manual upload00:27
ianwfungi: yeah i can ... have to think about the slug and the mount point there again too00:28
fungimarkmcclain: looks like some manual step has been performed by the openstack-arista account for every release from april to now, which coincides with the upload post_failure results00:28
ianwi think ansible arch is "aarch64"00:28
fungiianw: yeah, but we need the volume names to fit in 22 bytes00:28
fungi(see discussion in 730342)00:29
clarkbianw: fungi shorten to arm?00:29
fungiwe could, i guess00:30
fungiwe could also shorten wheel to whl... there are a number of possibilities00:30
ianwfungi: i'm thinking a64 (as opposed to x64) is probably best for consistency00:34
clarkb++00:35
ianwi get that it's confusing, but every choice is at this point, i don't really feel like renaming all the extant ones00:35
ianwas you say, we mount it at a more descriptive name00:35
ianwok, i need a cup of tea but will do that :)00:36
*** Meiyan has joined #opendev00:56
openstackgerritMerged openstack/project-config master: Update pip output parsing to fix wheel mirror builds  https://review.opendev.org/73093301:03
openstackgerritMerged openstack/project-config master: Update neutron stable grafana dashboards  https://review.opendev.org/72929101:04
markmcclainfungi: Thanks for helping dig into this. Found out there was an out-of-date internal doc that steering our internal teammates to add the conflicting manual upload.01:39
fungimarkmcclain: glad we could sort that. if you get a chance to tag another release without doing that step it might be good to double-check the plumbing is still working01:40
fungibut at least the error makes more sense now01:41
*** factor has quit IRC01:56
ianwfungi: ok, a little cross-eyed and lots of fs checkvolumes later but i think http://mirror.iad.rax.opendev.org/wheel/ has the volumes required02:53
*** ysandeep|away is now known as ysandeep03:38
openstackgerritIan Wienand proposed openstack/project-config master: AFS grafana : add wheel volumes  https://review.opendev.org/73107204:25
openstackgerritIan Wienand proposed openstack/project-config master: build and publish wheels for aarch64 architecture  https://review.opendev.org/73034204:31
openstackgerritMerged openstack/diskimage-builder master: dib-lint: use yamllint to parse YAML files  https://review.opendev.org/73069004:48
openstackgerritMerged openstack/diskimage-builder master: package-installs : allow a list of parameters  https://review.opendev.org/73069104:48
openstackgerritMerged openstack/diskimage-builder master: Revert "Revert "ubuntu-minimal : only install 16.04 HWE kernel on xenial""  https://review.opendev.org/73069204:50
openstackgerritMerged opendev/system-config master: Use ipv4 in server launch inventory output  https://review.opendev.org/73014905:13
*** ykarel|away is now known as ykarel05:44
*** DSpider has joined #opendev05:44
*** hashar has joined #opendev05:57
*** dpawlik has joined #opendev06:05
*** dpawlik has quit IRC06:12
*** dpawlik has joined #opendev06:12
*** sgw has quit IRC06:50
openstackgerritAnand Shanmugam proposed openstack/project-config master: Remove py27 and pypi publish job from cloudpulse  https://review.opendev.org/73108907:17
openstackgerritAnand Shanmugam proposed openstack/project-config master: Remove py27 and pypi publish job from cloudpulse  https://review.opendev.org/73108907:19
*** tosky has joined #opendev07:26
*** slaweq has joined #opendev07:32
*** bolg has joined #opendev07:56
*** bolg has quit IRC07:59
*** mlavalle has quit IRC08:00
*** mlavalle has joined #opendev08:00
*** bolg has joined #opendev08:00
*** moppy has quit IRC08:01
*** moppy has joined #opendev08:01
*** mnaser_ has joined #opendev08:13
*** mugsie_ has joined #opendev08:14
*** mnaser has quit IRC08:20
*** melwitt has quit IRC08:20
*** mugsie has quit IRC08:20
*** cmurphy has quit IRC08:20
*** mnaser_ is now known as mnaser08:20
*** rpittau|afk is now known as rpittau08:22
*** _mlavalle_1 has joined #opendev08:22
*** slaweq has quit IRC08:22
*** mlavalle has quit IRC08:24
*** tkajinam has quit IRC08:27
hrwclarkb, fungi, ianw: thanks!08:27
*** dtantsur|afk is now known as dtantsur08:32
openstackgerritAnand Shanmugam proposed openstack/project-config master: Remove gate/check jobs for cloudpulse and cloudpulseclient  https://review.opendev.org/73108908:41
*** ysandeep is now known as ysandeep|lunch08:46
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add ensure-dnf-copr  https://review.opendev.org/73074308:47
*** slaweq has joined #opendev08:51
*** slaweq has quit IRC08:56
*** slaweq has joined #opendev09:20
openstackgerritMerged opendev/irc-meetings master: Add Secure Default policies popup team meeting  https://review.opendev.org/73093509:25
*** sshnaidm|afk is now known as sshnaidm09:26
*** ykarel is now known as ykarel|lunch09:35
*** ysandeep|lunch is now known as ysandeep09:39
*** lpetrut has joined #opendev10:02
*** rpittau is now known as rpittau|bbl10:07
*** slaweq has quit IRC10:25
*** roman_g has joined #opendev10:34
*** ykarel|lunch is now known as ykarel10:36
*** hashar has quit IRC11:16
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757811:21
*** sshnaidm is now known as sshnaidm|afk11:25
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757811:27
*** Meiyan has quit IRC11:29
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757811:34
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: upload-artifactory: documentation fix  https://review.opendev.org/73117011:36
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: fetch-subunit-output: stop using system os-testr  https://review.opendev.org/73048211:43
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: ensure-haskell-stack: Make sure dnf copr is installed  https://review.opendev.org/73117311:46
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757811:50
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267911:57
*** ykarel is now known as ykarel|afk11:59
*** rpittau|bbl is now known as rpittau12:06
*** elod_ has joined #opendev12:08
*** elod has quit IRC12:09
*** elod_ is now known as elod12:12
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757812:17
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: tox: envlist bugfixes  https://review.opendev.org/73038112:32
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: siblings: python2.7 configparser has no __getitem__  https://review.opendev.org/73118712:37
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: siblings: python2.7 ConfigParser has no __getitem__  https://review.opendev.org/73118712:38
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: siblings: python2.7 ConfigParser has no __getitem__  https://review.opendev.org/73118712:39
*** ykarel|afk is now known as ykarel12:41
*** sshnaidm|afk is now known as sshnaidm12:45
*** cmurphy has joined #opendev13:00
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: siblings: python2.7 ConfigParser has no __getitem__  https://review.opendev.org/73118713:04
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Constrain soupsieve to <2 for python2.7  https://review.opendev.org/73119513:04
*** sgw has joined #opendev13:05
*** lpetrut has quit IRC13:18
openstackgerritMonty Taylor proposed opendev/system-config master: Move base roles into a base subdir  https://review.opendev.org/73093713:41
openstackgerritMonty Taylor proposed opendev/system-config master: Split out a base playbook for the zuul service  https://review.opendev.org/73099913:41
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099113:41
mordredcorvus: I had a thought in the middle of the night that the hostvar split idea wouldn't work right for $reason - but I don't remember what that reason was13:41
corvusmordred: were you awake or asleep when you had the thought? :)13:42
mordredcorvus: yes13:42
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Constrain soupsieve to <2 for python2.7  https://review.opendev.org/73119513:43
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: siblings: python2.7 ConfigParser has no __getitem__  https://review.opendev.org/73118713:43
*** slaweq has joined #opendev13:43
mordredcorvus: also - I think one of the followup thoughts I had was maybe valid - which is that "base" might be still a bit off - and we might want to split the roles up in to "seriously this just wants to apply everywhere buthas nothing to do with services" like user accounts - and keep that stuff as base and remove the dependencies on it - and then there's probably only one or two roles in base that have13:45
mordredpotential service-impact, like iptables - and we could focus on getting those into something so that they run at the right time13:45
corvusmordred: oh yeah that's a good point13:48
corvusi think that could help a lot13:48
mordredcorvus: in fact - looking through base, I think literally iptables is the only thing where it's important that we run it before a service13:49
mordredeverything else is just general operational stuff13:49
corvusyeah, i'm feeling good about this13:50
mordredcorvus: so - I think that means we might just want to add iptables to each service playbook13:51
mordredno need to have a separate playbook for that13:51
corvus++13:52
*** slaweq has quit IRC13:56
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757814:12
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Fix py27 tox  https://review.opendev.org/73118714:13
openstackgerritMonty Taylor proposed opendev/system-config master: Clean up base playbook  https://review.opendev.org/73098514:22
openstackgerritMonty Taylor proposed opendev/system-config master: Move base roles into a base subdir  https://review.opendev.org/73093714:22
openstackgerritMonty Taylor proposed opendev/system-config master: Run iptables in service playbooks instead of base  https://review.opendev.org/73099914:22
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099114:22
openstackgerritMonty Taylor proposed opendev/system-config master: Move rackspace repo management to the repos role  https://review.opendev.org/73122414:22
mordredcorvus: ok. I think that might actually not be terrible ^^14:22
mordredcorvus: ALSO - I realized that since we always run install-ansible - we could probably move all of the roles from playbooks/roles to just roles/14:22
mordredcorvus: or we could just add /home/zuul/src/opendev.org/opendev/system-config/roles to the roles path in ansible.cfg - but I think structurally things a little bit different than they were when we started this14:24
corvusmordred: we put them in playbook/roles because we didn't want them to be "public" roles14:25
corvus(ie, zuul roles)14:25
mordredcorvus: oh! I just had another realization (slightly based on that) ...14:27
mordredcorvus: we could just run the install-ansible role in playbooks/zuul/run-production-playbook.yaml and ditch the additional install-ansible job14:28
openstackgerritMerged openstack/project-config master: Match Debian in AFS slug generation  https://review.opendev.org/73100914:29
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757814:35
mordredAJaeger: zomg. are you tacking that beast? ^^ awesome!14:36
AJaegermordred: see my message on #zuul14:36
AJaegermordred: if you would have described it as beast earlier, I might not have started ;)14:37
AJaegermordred: and no promise to finish ;) But moving it forward a bit14:38
mordredAJaeger: awesome. not a beast - a very cuddly bunny!!!14:38
*** hashar has joined #opendev14:38
AJaegertoo late ;)14:38
openstackgerritMerged openstack/project-config master: build and publish wheels for more distributions (x86-64)  https://review.opendev.org/73032314:46
openstackgerritMerged openstack/project-config master: build and publish wheels for aarch64 architecture  https://review.opendev.org/73034214:46
hrw;)14:47
hrwmorning14:47
*** slaweq has joined #opendev14:47
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Fix py27 tox  https://review.opendev.org/73118714:49
jrosserdoes python2 get installed into the ubuntu focal CI images?14:52
openstackgerritMatt McEuen proposed openstack/project-config master: Project creation request: airship/charts  https://review.opendev.org/73123614:55
fungijrosser: as far as i know we don't install python2.7 packages by default in our bionic or focal images, but i'll check an image build log to confirm... why do you ask?14:55
jrosseri have a suspicion that the answer is yes, but theres a chance it could be my mistake putting it there14:55
jrosseri see a bunch of python2 things here https://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_c0a/723597/9/check/openstack-ansible-deploy-aio_metal-ubuntu-focal/c0a2e23/logs/ubuntu-apt-list-installed-host-08-15-05.txt14:56
fungijrosser: actually it seems to get pulled in as a dependency of something else we're installing in the images... see 2020-05-25 20:33:05.553 in https://nb01.opendev.org/ubuntu-focal-0000009828.log14:57
openstackgerritMerged zuul/zuul-jobs master: Remove unused tox_envlist in fetch-subunit-output  https://review.opendev.org/72934814:58
fungijrosser: it must be a direct or indirect dependency of one of these: git util-linux iputils-ping python3-dev curl lvm2 gnupg2 strace dnsutils cron wget isc-dhcp-client e2fsprogs ifupdown net-tools unbound adduser acpid build-essential uuid-runtime apt-transport-https haveged linux-image-generic ca-certificates openssh-client iptables-persistent python3-venv python-dev tcpdump parted openssh-server locales14:58
fungiiproute2 rsyslog cloud-utils initramfs-tools at traceroute coreutils rsync14:58
fungimy bet is python-dev is at fault14:58
jrosserfungi: ah interesting, for focal there are a bunch of interesting/unfortunate side effects14:58
mordredfungi: yeah - python-dev would do it14:59
jrosserif ansible decides that py2 is the interpreter of choice, all sorts of bad times happen with missing python-apt, and so on14:59
mordredI think we can blank it out in our infra-package-needs - we're doing that for centos815:00
fungihttps://opendev.org/openstack/project-config/src/branch/master/nodepool/elements/infra-package-needs/package-installs.yaml#L815:01
openstackgerritMonty Taylor proposed openstack/project-config master: Don't install python-dev on focal  https://review.opendev.org/73123715:01
mordredfungi, jrosser ^^ maybe like that15:01
fungihttps://opendev.org/openstack/project-config/src/branch/master/nodepool/elements/infra-package-needs/pkg-map#L11-L1415:01
fungiadding there15:02
mordred++15:02
jrosserout of interest would you expect it to be present on bionic as well?15:02
fungijrosser: yep, for the same reason15:03
fungijrosser: though dropping it from bionic will likely be a harder proposition15:03
jrosserindeed15:03
fungipeople have been relying on those images for over two years, so there are likely lots of jobs assuming python2.7 will be present on them15:03
mordredyeah - and it will have been there for longer, so people will likely have managed it already15:03
mordredyeah15:03
fungialso, 731237 may not be sufficient on its own, if any of the other packages in there also depend on python2.7 on focal15:04
jrosserfor bionic there are suitable versions of things like python-apt and python2-lxc from the bionic repo, so it can be worked around15:04
jrosserbut thats not the case for focal15:04
jrosserpython-apt is particularly annoying as there is only a very old version installable with pip15:05
*** priteau has joined #opendev15:07
clarkbwhy is ansible using python2 instead of 3 if both are present?15:08
clarkbthat also seems like an ansible bug15:08
*** melwitt has joined #opendev15:09
clarkb(we should efinitely fix focal, but maybe we should file a bug with ansible to prefer 3 if present?)15:09
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Fix py27 tox  https://review.opendev.org/73118715:09
mordredclarkb: it's a behavior change that will happen in a forthcoming release15:10
mordredclarkb: ansible currently will emit a warning about it15:10
clarkbmordred: thats completely unexpected "auto" behavior15:10
hrwthanks for merging wheel jobs15:10
clarkbI Guess that is even more reason to not rely on the version of python ansible is using if you care about python versions15:11
mordredclarkb: ah - it might just be on 16.0415:11
fricklerfungi: mordred: I verified that none of the other pkgs will pull in py2 on focal15:11
mordredclarkb: [DEPRECATION WARNING]: Distribution Ubuntu 16.04 on host afs01.ord.openstack.org should use /usr/bin/python3, but is using /usr/bin/python for15:11
mordred backward compatibility with prior Ansible releases. A future Ansible release will default to using the discovered platform python for this15:11
mordredhost. See https://docs.ansible.com/ansible/2.9/reference_appendices/interpreter_discovery.html for more information. This feature will be15:11
mordredremoved in version 2.12. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.15:11
fungifrickler: awesome, i went through the build log checking the same, python-xml is no longer present on focal so looks like we don't install it15:12
mordredclarkb: that's the warning we get about this currently15:12
clarkbmordred: oh wow the reason is "auto" isn't actually the default. auto_legacy is15:12
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Fix py27 tox  https://review.opendev.org/73118715:12
clarkbso if we had nodepool force "auto" over "auto_legacy" we'd get the correct behavior?15:12
mordredclarkb: yeah - I think they did that to allow people some time to transition15:12
mordredclarkb: I think so, yes15:12
mordredclarkb: and I think that's a good idea - but I thought we _did_ set auto already15:13
*** Open10K8S has quit IRC15:16
*** Open10K8S has joined #opendev15:16
mordredfungi, frickler: the project-config-dib job seems unhappy - I seem to remember a patch from ianw recently to dib about adding yamllint - perhaps that for some reason isn't gettign yamllint installed for us?15:21
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757815:22
openstackgerritMonty Taylor proposed openstack/project-config master: Don't install python-dev on focal  https://review.opendev.org/73123715:25
mordredfungi, frickler, clarkb: ^^ that should fix the job for project-config as well now15:25
mordredianw: when you're up - yamllint is now needed by dib-lint, but is only in test-requirements.txt of dib, so external use of yamllint by people will now break15:26
*** ykarel is now known as ykarel|away15:27
clarkbmordred: beacuse we are running dib lint and that deps on yamllint?15:27
openstackgerritMonty Taylor proposed openstack/diskimage-builder master: Add dependency on yamllint  https://review.opendev.org/73124515:28
mordredclarkb: yup. that ^^ should fix it dib-side15:28
mordredI'm starting to feel like dib-lint should be split into its own package15:28
openstackgerritMerged zuul/zuul-jobs master: Fix py27 tox  https://review.opendev.org/73118715:28
mordredas this is now 2 linters that you have to install to build images15:29
clarkbmordred: ya but what is the cost of that15:29
clarkbits there ina virtualenv or a docker image and its not doing anything if you don't use it15:29
clarkbif we're worried about disk space we should stop using docker15:30
mordredI believe we had an issue a little whiel ago where dib was pulling in flake8 and that was conflicting somewhere15:30
mordredI'm not worried about disk space15:30
mordredI'm worried about suitability of dependencies and conflicts at times where you don't expect it15:30
jrosserfungi: for the focal python thing, python-is-python3 may be needed15:30
clarkbmordred: I think that conflict was a bug itself, not necessarily beacuse we have deps15:31
clarkband that specific issue was addressed?15:31
clarkbjrosser: you're saying that removing python2 and `python` isn't sufficient for some reason?15:31
mordredclarkb: https://review.opendev.org/#/c/712778/ it was this15:32
jrosserhttps://packages.ubuntu.com/focal/python-is-python315:32
clarkbmordred: ya we were installing hacking without using hacking15:32
clarkbjrosser: right I'm asking why `python3` isn't sufficient I guess15:32
mordredclarkb: yeah. well - that was because nodepool depends on dib and dib depended on hacking which caused hacking to be installed in nodepool unexpectedly. flake8 and yamllint aren't as invasive, but still, as a person installing a tool to build diskimages, I don't know that I expect it to install linting tools. it's obviously not a hill I'm going to die on - but I think it's inappropriate15:33
clarkbjrosser: mordred's change https://review.opendev.org/#/c/731237/2/nodepool/elements/infra-package-needs/pkg-map should remove python2 and `python`15:33
jrosserok15:34
fungijrosser: i strongly recommend against the python-is-python3 package, it violates guidance from the python community on how you should identify your python and python3 interpreters15:34
fungi(basically there are two programming languages, one called "python" and one called "python3" and their interpreters are named accordingly)15:35
clarkbalso I think we need to push more for "be specific about the python you want if it matters to you"15:35
clarkbwe've run into this with tox15:35
clarkbwe're now running into this with ansible apparently15:35
clarkbits unlikely we'll be able to make everyone happy all the time purely through defaults15:35
fungiyes, ideally people would use `python2` to disambiguate, but historically `python` means python<3 (unless you're using arch)15:36
clarkbfungi: well in this case I mean use `python3` if you need python3 too :)15:36
clarkb(it applies in both directions)15:36
fungiabsolutely15:37
fungiyou should definitely call `python3` if you don't want to run 2.715:38
AJaegerfungi, want toe merge https://review.opendev.org/#/c/731072/ to update grafana for the new wheels, please?15:38
*** priteau has quit IRC15:42
clarkbI'm trying to debug meetpad cacti before booting a new jvb, just so that we have additioanl data as we test and bring that up15:44
clarkbthe poller is timing out takling to meetpad's snmpd15:44
clarkbany idea where we configure snmp connection details for cacti?15:44
clarkb(I'd like to snmpwalk directly and debug from there)15:44
openstackgerritMerged zuul/zuul-jobs master: fetch-tox-output: empty envlist should behave like tox -e ALL  https://review.opendev.org/73033415:46
fungifirst, you're sure the firewall is allowing snmp/udp (or tcp if we're using v3 over tcp)?15:47
fungii think we just rely on firewall rules rather than setting secret community strings15:47
clarkbfungi: yes I checked the firewall yseterday and udp port 161 is allowed from cacti server15:47
clarkbfungi: ya I thought so too but snmpwalk insists on a value for that15:48
clarkbmaybe I give it an empty string15:48
fungiso probably the default of "public"15:48
fungialso i think you need to use v2a if you don't want to have to set username and password15:48
corvusv2c ?15:48
fungier, yep, v2c sorry15:48
fungianyway, point being v3 no longer relies on community strings as an acl15:49
fungiso if you're trying to use v3 that could explain why snmpwalk wants un/pw15:49
clarkbya I've forced v2c then it wanted a community string15:50
clarkbgive it an empty community string seems to timeout. Using 'public' doesn't15:50
corvuspublic is correct15:51
openstackgerritMerged zuul/zuul-jobs master: ensure-haskell-stack: Make sure dnf copr is installed  https://review.opendev.org/73117315:51
corvusclarkb: http://cacti.openstack.org/cacti/host.php?action=edit&id=62915:51
openstackgerritMerged openstack/project-config master: AFS grafana : add wheel volumes  https://review.opendev.org/73107215:51
*** factor has joined #opendev15:51
*** _mlavalle_1 has quit IRC15:53
clarkbcorvus: I need to login there and am having a hard time finding where we've stashed those credentials15:55
corvusclarkb: usual place15:55
corvuscacti admin15:55
clarkbgotcha so the configs are all in the databse I guess15:59
clarkband they look correct16:00
corvusyeah, i don't know why the php code is having trouble with it when snmpwalk isn't16:00
clarkbon the meetpad side I see snmpd recording connections from ipv6 cacti02 address16:01
clarkbbut its not saying much more there16:01
clarkbif I do an snmpwalk over ipv4 the meetpad side logging looks similar16:02
clarkbwhat if packets from meetpad to cacti over ipv6 are bitbucketing16:02
* clarkb does some connection testing16:03
clarkbI think that may be it16:03
clarkbwget http://cacti.openstack.org from meetpad is failing to connect16:03
clarkband since snmp is all udp we don't get the connection errors, we just see packets poof and then timeout16:04
*** mlavalle has joined #opendev16:04
clarkbalright knowing that maybe I should jsut boot a jvb01 and not worry about it for now16:06
openstackgerritMonty Taylor proposed opendev/system-config master: Move base roles into a base subdir  https://review.opendev.org/73093716:06
openstackgerritMonty Taylor proposed opendev/system-config master: Move rackspace repo management to the repos role  https://review.opendev.org/73122416:06
openstackgerritMonty Taylor proposed opendev/system-config master: Run iptables in service playbooks instead of base  https://review.opendev.org/73099916:06
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099116:06
openstackgerritMonty Taylor proposed opendev/system-config master: Override bridge hostvars directly  https://review.opendev.org/73125816:06
clarkbwget eventually falls back to ipv4 and it works16:06
mordredcorvus: 731258 should show us whether the "just override hostvars" thing will work16:06
fungiclarkb: yeah, sounds like one of the (many) ipv6 connectivity issues we see between specific instances in rackspace16:06
corvusmordred: cool, i'm working through the stack now16:06
clarkbI could put meetpad's current ipv4 address into cacti via the admin console if we want16:07
mordredcorvus: cool - I think I just fixed all of the test errors16:07
fungiclarkb: cacti seems to be impacted more than other servers, but thinking about it that's probably just because it's one of the only systems we have which needs to connect to most other systems16:07
clarkbwe'd have to remember to update that should the server move16:07
clarkbfungi: that and it doesn't seem to failover to ipv4 like just about everything else does16:07
corvusoh, maybe the php stuff doesn't failover but the cli does16:08
clarkbcorvus: ya thats what I'm starting to think is happening16:08
fungiinteresting16:08
corvushuh, though according to http://cacti.openstack.org/cacti/settings.php it looks a lot like we should be using net-snmp and not embedded php16:09
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757816:10
*** LuckyClover has joined #opendev16:13
clarkbjvb01 is now launching16:14
clarkbwe can also try a reboot of meetpad and/or cacti to see if that unsticks ipv6 routing?16:15
clarkbcacti -> meetpad is working, we see those packets arrive on meetpad. But meetpad -> cacti doesn't appear to16:15
*** rpittau is now known as rpittau|afk16:19
openstackgerritMerged zuul/zuul-jobs master: tox: envlist bugfixes  https://review.opendev.org/73038116:20
corvusmordred: comment on 73099916:22
*** dtantsur is now known as dtantsur|afk16:26
*** hashar has quit IRC16:28
corvusmordred: and i think i don't understand the last 2 changes: what makes the fake-private hostvars gain precedence over the public hostvars?  aren't the public hostvars still in a playbook-adjacent inventory directory?16:31
openstackgerritClark Boylan proposed opendev/system-config master: Add a jvb01 server  https://review.opendev.org/73126816:32
mordredcorvus: no, they aren't - they're moved to the inventory directory16:33
mordredcorvus: I'm not sure the fake-private _will_ have precedence - but I'm pretty sure inventories are processed in order, so making them have precedence should just be a matter of reordering them int he config file if they don't16:33
corvusmordred: ooh i see sorry16:33
openstackgerritClark Boylan proposed opendev/zone-opendev.org master: Add jvb01 to dns  https://review.opendev.org/73126916:34
corvusmordred: should inventory/service be added to ansible.cfg?16:34
clarkbinfra-root I think ^ those two jvb changes can land in any order as we don't need to set up LE certs or anything for jvb aiui16:35
clarkbthe server is up though and ready for ansibling I think16:35
fungiclarkb: the other times we've seen one of those v6 connectivity failures go away have been after host migrations16:35
mordredcorvus: we copy them into /etc/ansible/hosts/{base,service} in the install-ansible role16:35
fungiclarkb: so a reboot probably won't do much (but can't hurt)16:35
mordredcorvus: BUT - we could also not do that and just change the ansible.cfg to point to ~zuul/src/opendev.org/opendev/system-config/inventory/{base,service} - I'm torn on which is better16:36
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757816:36
*** hashar has joined #opendev16:36
corvusmordred: /etc/ansible/hosts is our private git repo; it does feel a bit weird to do that....16:36
corvusmordred: i know we have some non-git-tracked files in there now, but this would be a lot more...16:37
clarkboh infra-root I've got to add the secret data to hiera for jvb01.16:38
clarkbdoing that now16:38
corvusmordred: i think it's something we could get used to, but it may be easier to think about if it were in the config file?  i am also torn16:38
corvusclarkb: what do we need that's new?16:39
mordredcorvus: yeah - same. should I rework it to not copy and instead just point the config?16:40
clarkbcorvus: we need to put the meetpad_jvb_password in the jvb group vars16:40
clarkbcorvus: I've done that if you want to git log -1 -p in ansible hosts on bridge16:40
mordredcorvus: pointing config might be more similar to the current behavior of whatever the vars are in the system-config repo being the ones that apply16:41
corvusmordred: 1 sec16:47
*** ysandeep is now known as ysandeep|away16:49
corvusmordred: so our current sitaution is public > private because public is playbook adjacent.  730991 makes public/base > public/service > private (because of the order in ansible.cfg: /etc/ansible/hosts/base, /etc/ansible/hosts/service, /etc/ansible/hosts).  the alternative would be to do the same thing but without copying the files (so system-config/.../base, system-config/.../service, /etc/ansible/hosts)16:52
clarkbI've got to manage kids schooling for the next little bit but those two changes abvoe should be safe to land when reviewed16:52
corvusmordred: is that correct?16:52
mordredcorvus: yeah- I thnik that is correct16:53
mordredcorvus: we could also keep the public > private via ordering - and have our system-config jobs add an additional set of vars that are public overrides16:54
mordredif we don't want to invert the precedence16:54
mordred(but I think private > public is still likely fine yeah?)16:54
corvusmordred: yeah, i was just starting to think about that too, that's not a bad idea16:54
mordredcorvus: nod16:54
corvusmordred: public > private does have the advantage of we can't accidentally override public stuff by sticking something in hiera16:55
corvuser, in private hostvars :)16:55
corvusmordred: i'm not sure i'm too worried about it tho16:55
mordredme either16:57
mordredI think copy vs not-copying is the bigger question16:57
corvusmordred: i think i like not-copying.  it's 55%/45% for me :)17:00
*** LuckyClover has quit IRC17:04
corvusconfig-core: i'd like to draw your attention to this zuul change: https://review.opendev.org/71853117:12
corvusif we merge that as written, people may have the option of per-branch change queues; if we want to disallow that, we'll need to define the queues in a config project first.17:13
corvusan earlier patchset made it so that could only be set in a config-project, but it wasn't clear that was the most consistent choice, so the current ps makes it settable by individual projects but overridable by a config-project.17:14
clarkbcorvus: if we set nothing we retain the existing behavior?17:15
clarkbI think I'm ok with that if so17:15
corvusi see that as a small-to-moderate risk; i think we can set the flag to falso on the openstack integrated queue and probably generally be okay.17:15
clarkbthen we can educate projects in what choice may be appropriate for them if they start setting the toggle17:15
corvusclarkb: correct -- and i don't think we expect to change that default.17:15
corvusnote also that i expect this to apply to the upcoming bi-directional dependency work too17:16
clarkbthis being new config object we can set in trusted config to enforce behavior?17:17
clarkbI expect that one we may wantto enforce17:17
corvusclarkb: yes, same mechanism / defaults / etc17:17
corvusso there won't be a way to force it globally, just on an individual queue level.  but we can force the settings on the queues we care about.17:18
corvusif that's a non-starter for opendev, now would be a good time to find out :)17:19
clarkbI dont think its a non starter, but I do think projects inside and out of opemdev should have a hard think about changing the defaults17:19
corvusthe documentation does mention the reasoning and potential pitfalls17:20
clarkbthe branch thing is important if you intend to do any upgrade testing between branches. The mutual dependency issue is important to avoid for continuous deployment and bisectability. Neitherof those will be important to every git repo so having zuul make them configurable is good. But we want to do our best to avoid making those attractive toggles for people that just want to merge code and undermine zuul's17:21
clarkbpurpose17:21
clarkbfrom opendev's perspective I think that means education more than anything else17:22
corvusyeah.  i guess if we back ourselves into a corner and find that we need to set a tenant-level override, we can still do that in the future, and fairly easily.  i think the harder thing to do would be to make the queue object into a config-project only object (like pipeline) as in tobiash's last patch.  once it's out there at the untrusted level, it'll be hard to move.  but if you assume all the actors are17:24
corvusreasonable, i think having it in untrusted feels like the right choice.17:24
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Try using vexxhost CA region  https://review.opendev.org/73128317:25
mnaserconfig-core: ^ if possible, we'd like to move out from sjc1 to mtl1 (to newer hardware too for capacity reasons)17:26
fungiit does seem like something which can be decided by each project. but with my tact sig hat on i would press openstack to stick with our prior conventions (no per-branch queues, no bi-directional dependencies)17:26
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757817:26
fungimnaser: thanks for the heads up, taking a look now17:26
openstackgerritMerged openstack/project-config master: Remove check/gate jobs for x/packstack  https://review.opendev.org/73081317:27
clarkbfungi: ya I think openstack shouldnt change frkm the defaults. But other opendev users might17:27
jrosserwhen would i see a focal CI image incorporating the python2 change?17:27
fungimnaser: is ymq1 the same as mtl1?17:27
mnaserfungi: yeah17:27
fungithanks17:27
clarkbC/C++ api changes can be rough with out some sort of override or mutual deps17:28
openstackgerritMerged openstack/project-config master: Remove gate/check jobs for cloudpulse and cloudpulseclient  https://review.opendev.org/73108917:30
corvusclarkb: some people may go to space today17:31
corvusapparently they are driving to their rocket now17:31
clarkbcorvus: yup. weatherus looking spotty but uf they launch it will be in about 3 hours aiui17:32
fungimnaser: out of curiosity, where does the ymq abbreviation come from? (mtl is fairly obvious at least)17:33
fungii'm guessing it's not an iata airport code, looks like the only ones in the montreal area are ymx and yul17:33
corvusfungi: https://en.wikipedia.org/wiki/List_of_airports_by_IATA_airport_code:_Y#cite_note-IATA-117:34
fungimnaser: nevermind, looks like that's a regional iata code covering all of montreal17:34
mnaserfungi: yep :)17:35
fungiyep, that seems to confirm, thanks!17:35
mnaserYUL is "the" airport though, YMX was supposed to be the "big awesome future airport" that has kinda just become a cargo hub17:35
fungiyeah, i remember you showing me aerial photos of that one while we were at ocw17:37
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757817:42
openstackgerritColleen Murphy proposed openstack/diskimage-builder master: Pre-install xz package in opensuse chroot  https://review.opendev.org/73099217:45
*** hashar has quit IRC17:53
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757817:53
clarkbmordred: corvus have a quick moment for the jvb server add in https://review.opendev.org/#/q/topic:jvb01+status:open17:57
*** dpawlik has quit IRC17:59
openstackgerritMerged openstack/project-config master: Try using vexxhost CA region  https://review.opendev.org/73128318:03
clarkbjrosser: it takes about an hour to build the image then $time to upload it18:05
clarkbjrosser: that happens automatically every 24 hours but we can trigger it sooner if the change has landed18:05
clarkb(I odn't think it has merged yet)18:06
jrosserclarkb: ok, thankyou18:06
openstackgerritMerged opendev/zone-opendev.org master: Add jvb01 to dns  https://review.opendev.org/73126918:07
*** roman_g has quit IRC18:19
*** roman_g has joined #opendev18:20
*** roman_g has quit IRC18:20
openstackgerritMerged opendev/system-config master: Add a jvb01 server  https://review.opendev.org/73126818:21
*** roman_g has joined #opendev18:21
clarkbas a heads up I've had to accept the ssh host key for jvb01 as root on bridge18:26
clarkbI thought launch was going to do that for me, but I guess it doesn't?18:26
clarkbthe job for meetpad hasn't run yet so hopefully when it gets there it will be good to go18:27
corvusclarkb: yeah, i think we expect it to accept, so it's worth looking into18:38
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add the namespace in wait-for-pods role  https://review.opendev.org/73129218:38
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: WIP: Add CentOS-8 support  https://review.opendev.org/73129318:38
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267918:41
clarkbbase failed18:44
clarkbit failed because of host key verification to jvb0118:45
clarkbso that must've run before I managed to accept the keys18:45
clarkbmordred: corvus what is the correct way for me to rerun those jobs?18:45
clarkbis it zuul enqueue (or enqueue-ref)?18:46
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: WIP: Add CentOS-8 support  https://review.opendev.org/73129318:51
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add the namespace in wait-for-pods role  https://review.opendev.org/73129218:51
clarkbinfra-root does this look correct `zuul enqueue --pipeline deploy --change 731268,1 --trigger gerrit --tenant openstack --project opendev/system-config`18:54
fungiclarkb: yep18:56
clarkbthanks I'll run that now since I've addressed the host key thing18:56
zbrclarkb: https://review.opendev.org/#/c/729974/ please.18:58
clarkbzbr: why does that stop using raw strings?18:58
clarkboh wait its the othe rway around18:59
clarkbI'm not sure thats correct18:59
zbrone thing for sure '\ ' is invalid in newer python18:59
clarkbzbr: it works for me, however I expected them to differ in behavior but they don't19:00
clarkbprint('\ ') is valid python319:00
zbris an invalid escape sequence19:00
clarkbit works fine if you do ^ on python3.8.219:00
zbrtry with py38 or py39 and see what happens19:00
clarkbbut it seems to be equivalent to r'\ '19:01
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add updates mirror  https://review.opendev.org/73130519:01
clarkbprobably because its not a proper escape sequence the \ becomes a literal19:01
clarkband r'\ ' forces it to be literal19:02
zbrpy38 throws SyntaxWarning on it19:02
fungienv PYTHONWARNINGS=default::DeprecationWarning python3 -c 'print("\ ")'19:02
fungiit's hidden if deprecation warnings aren't on19:02
zbrwhy are we having this conversation? there is at least one way to write it without any warnings.19:03
clarkbfungi: aha thanks19:03
clarkbzbr: becaus it literally works without issue for me19:03
clarkbzbr: and its a potentially functional not linting change19:04
fungizbr: i was trying to explain how to reproduce the warning19:04
clarkband I want to undersatnd what it is made19:04
zbri usually setup warns: errors,... where I can.19:04
zbrahh. sure.19:04
clarkbwe have conversations about changes we make to ensure they do what we expect them to19:04
zbrbasically python becomes more strict, which is good.19:04
clarkbthis is an important piece of code ote nsure that gerrit groups get created properly. I want to make sure I understand it19:04
zbryep, that is a sensitive line :D19:05
clarkbmy understanding is that python3.8 is fine with it as is, but there is a deprecation warning if yo uturn them on so a future python version may make that an error. The code should be equivalent because '\ ' with the warning is treated as r'\ ' not ' '19:06
fungiand yes, currently '\ ' and r'\ ' are treated the same, but eventually it's assumed their behaviors may need to diverge (hopefully after some period of not working at all)19:06
clarkband all my testing between python2.7 and 3.8 shows they are equivalent19:06
clarkbwe should update it to ensure we get what we want in python3.new19:06
fungiagreed19:07
clarkband its understanding ^ that was missed for me as python3.8 and 2.7 say nothing about it19:07
fungiit got marked as deprecated syntax in 3.619:07
fungibut python doesn't show deprecation warnings by default19:08
zbrhttps://review.opendev.org/#/c/729328/ also has similar changes.19:08
fungii add setenv = PYTHONWARNINGS=default::DeprecationWarning to the default [testenv] in tox.ini for my personal projects because i appreciate the verbosity and early deprecation warnings on those19:09
fungiotherwise you won't see them until they go from deprecated to broken19:09
zbrideally we should do PYTHONWARNINGS=errors -- on those projects where we can afford it.19:10
clarkbit might be worth updating the test case we've got for new groups to ensure we are managing a group with a space in the name properly19:11
clarkbbut I've approved the change as is19:11
*** sshnaidm is now known as sshnaidm|afk19:12
zbrthe new flake8 added some very useful tests, already helped me uncover some real bugs.19:13
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: WIP: Add CentOS-8 support  https://review.opendev.org/73129319:21
mordredI like it when flake8 uncovers actual bugs19:23
mordredit's pleasing19:23
openstackgerritMerged opendev/gerritlib master: Fixed linting issues  https://review.opendev.org/72997419:23
clarkbansible is talking to jvb01 now in base19:27
mordredclarkb, fungi: corvus and I were having a discussion earlier about https://review.opendev.org/#/c/730991/ (which is the patch to move hostvars around) - before I do the next patchset, I'd like your input19:28
mordredwe have 2 options - copy the hostvars from system-config into /etc/ansible/hosts/{subdir} - or configure ansible.cfg to point to ~zuul/src/opendev.org/opendev/system-config/inventory/{subdir}19:29
mordredcorvus leans 55%/45% in favor of not copying - I think I'm similar19:30
clarkbcurrently we point at ~zuul right?19:30
mordredcurrently we use what's in ~zuul because of physical adjacency to the playbooks19:30
clarkbthe upside to not copying is we keep the private data git manageable without copied in noise right?19:30
clarkbwe can always git ignore those paths though I guess19:30
mordredclarkb: yes, that's right19:31
mordredwe can - but having them there does potentially seem weird19:31
clarkbya I think I prefer not copying in order to keep the git repo "clean"19:31
corvusyeah, i'd expect we'd git ignore; but there would be a cognitive overhead to knowing that19:31
corvus'git grep' is going to trip me up there :)19:31
mordredyeah. :)19:31
mordredok - I think that's enough leaning in a direction for me to work on the next iteration of the patch19:32
*** hashar has joined #opendev19:41
corvusclarkb: looks like docker isn't installed on jvb01; i guess something still went wrong there?19:45
clarkbcorvus: only base has run so far19:46
clarkbcorvus: waiting for the meetpad playbook to run whihc should pull in docker19:46
clarkbbasically we got psat where we failed previously19:46
corvusah k, so just slow :)19:46
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Encrease vexxhost CA region presence  https://review.opendev.org/73131419:53
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: WIP: Sync with configure-mirrors  https://review.opendev.org/73129319:59
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add updates mirror  https://review.opendev.org/73130520:01
clarkbcorvus: it should be installing docker any moment now20:07
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: WIP: Sync with configure-mirrors  https://review.opendev.org/73129320:08
*** olaph has joined #opendev20:09
openstackgerritMonty Taylor proposed opendev/system-config master: Run iptables in service playbooks instead of base  https://review.opendev.org/73099920:11
clarkbjvb is up20:12
clarkbtrying to see if it has connected to meetpad yet20:13
clarkbthere is an established connection between them on port 5222 so I think the answer is yes20:13
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: WIP: Sync with configure-mirrors  https://review.opendev.org/73129320:13
clarkbanyone in a spot to do a test call? I'm in front of my tv looking at a rocket launch countdown20:13
corvusclarkb: yeah, just a minute20:15
openstackgerritMerged openstack/project-config master: Encrease vexxhost CA region presence  https://review.opendev.org/73131420:15
corvusclarkb: meetpad.opendev.org/meetpad-test ?20:17
corvusthey are not going to space today :(20:17
clarkbarg ya launch abort started20:17
clarkbcorvus: ya I'll get on that meetpad in a couple minutes. Need to move to other machine with mic and get off couch20:17
fungii should see if i can figure out meetpad on my workstation, since i managed to get it working from my netbook20:20
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add namespace in the collect-k8s-logs role  https://review.opendev.org/73131920:21
fungihuh, i just noticed my powered usb3 hub has headphone and mic jacks too20:21
clarkbgood news everyone20:35
clarkbit seems to work20:35
clarkbwhat that means is if we need to scale meetpad up during the ptg we can add a jvb02.opendev.org - jvb99.opendev.org (and potentially more if necessary) and once the meetpad service playbook runs on those newer hsots they should join up and start sharing load20:36
clarkbcorvus and I were able to confirm via the jicofo logs on meetpad01 that we had multiple conference rooms and one was on meetpad01 jvb and the other on jvb01 jvb20:36
clarkblook for participant added strings for that20:36
clarkbthe next thing to address there may be the cacti problems so that we can monitor load and demand better20:37
clarkbinfra-root any thoughts on configuring cacti to use the ipv4 address for meetpad01 via the admin ui?20:37
corvusclarkb: that sounds like a not-terrible option all things considered20:39
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099120:43
openstackgerritMonty Taylor proposed opendev/system-config master: Override bridge hostvars directly  https://review.opendev.org/73125820:43
mordredclarkb: ++20:43
clarkbok I'll do that now20:43
mordredcorvus: configuring it to point rather than copy I think turned out to not be very ugly20:43
clarkbcurrently its set to the host fqdn which we can set it back to at some point if ipv6 is happier20:43
clarkbwe have cacti data for meetpad now21:10
*** hashar has quit IRC21:14
clarkbinfra-root https://review.opendev.org/#/c/730862/ I'd be curious to know what others think about that change. It will switch us to using https for apt fetches and pip talking to our pypi mirrors. I think that is a good thing since verification outside of that is basically not a thing for us right now21:17
mordredclarkb: I thnik it's a good idea - we're pretty confident that it's going to work properly right?21:20
clarkbmordred: I think so. We tested the apt/yum/emerge side in zuul-jobs functional testing, then used base-test to ensure zuul-jobs unittests worked with https (so thats apt + pypi coverage)21:21
clarkbprobably the biggest gap is with zypper and yum/dnf but they do https a lot more than apt has I think21:21
clarkb(and they were all tested in zuul-jobs functional jobs intsalling emacs so should work)21:21
mordredclarkb: yah - apt has had the signed repos and mirror farms for forever so ssl adoption has been much slower21:23
openstackgerritMonty Taylor proposed opendev/system-config master: Clean up base playbook  https://review.opendev.org/73098521:28
openstackgerritMonty Taylor proposed opendev/system-config master: Move base roles into a base subdir  https://review.opendev.org/73093721:28
openstackgerritMonty Taylor proposed opendev/system-config master: Move rackspace repo management to the repos role  https://review.opendev.org/73122421:28
openstackgerritMonty Taylor proposed opendev/system-config master: Run iptables in service playbooks instead of base  https://review.opendev.org/73099921:28
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099121:28
openstackgerritMonty Taylor proposed opendev/system-config master: Override bridge hostvars directly  https://review.opendev.org/73125821:28
*** slaweq has quit IRC21:50
*** slaweq has joined #opendev21:52
*** icarusfactor has joined #opendev22:08
openstackgerritNate Johnston proposed openstack/project-config master: Retire the Congress project  https://review.opendev.org/72174222:09
*** factor has quit IRC22:10
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136522:21
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136522:22
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: WIP: shake-build: add shake build system job  https://review.opendev.org/73136522:34
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: WIP: shake-build: add shake build system job  https://review.opendev.org/73136522:46
*** tkajinam has joined #opendev22:52
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136523:04
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136523:14
*** tosky has quit IRC23:30
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136523:40
openstackgerritMatthew Thode proposed openstack/diskimage-builder master: use stage3 instead of stage4 for gentoo builds  https://review.opendev.org/71717723:50

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!