Monday, 2020-11-02

*** tosky has quit IRC00:57
*** ykarel|away has joined #opendev04:22
*** ykarel|away is now known as ykarel04:30
*** d34dh0r53 has joined #opendev04:33
*** ysandeep|away is now known as ysandeep|ruck05:16
*** manpreet has joined #opendev06:06
*** marios has joined #opendev06:08
*** sshnaidm|off is now known as sshnaidm|rover06:49
openstackgerritRico Lin proposed opendev/system-config master: Change openstack-tw owner  https://review.opendev.org/76077007:05
*** manpreet has left #opendev07:06
*** slaweq has joined #opendev07:53
*** ykarel_ has joined #opendev08:06
*** ykarel has quit IRC08:09
*** fressi has joined #opendev08:09
*** ysandeep|ruck is now known as ysandeep|lunch08:22
*** lpetrut has joined #opendev08:29
*** andrewbonney has joined #opendev08:30
*** ykarel_ is now known as ykarel08:31
*** tosky has joined #opendev08:45
*** rpittau|afk is now known as rpittau09:22
*** AJaeger has joined #opendev09:39
AJaegerzbr: could you check https://review.opendev.org/760746, please? ansible-lint fails with a strange error.09:39
*** ysandeep|lunch is now known as ysandeep|ruck09:39
*** AJaeger has quit IRC09:45
zbrlooking09:49
zbrweird seems unrelated, let me guess version of ansible is not inside supported range or worse setup is broken due to 2.9 ->2.10 upgrade.09:50
zbras you probably know, pip cannot upgrade ansible, it breaks it.09:51
zbryou need to remove it manually before installing 2.1009:51
zbrthe "great" divide between 2.9 and 2.1009:51
zbrthat is how it usually behaves when you endup with a broken ansible09:51
zbrand yes, I see ansible 2.7 being installed, which is not supported.09:52
zbrlinter requires at least 2.909:52
zbri will make a PR to assure that09:53
*** DSpider has joined #opendev09:56
*** whoami-rajat__ has joined #opendev10:25
*** auristor has quit IRC10:30
*** hjensas|PTO is now known as hjensas10:38
openstackgerritSlawek Kaplonski proposed opendev/irc-meetings master: Move Neutron CI meeting to Thursday  https://review.opendev.org/76082310:39
*** odyssey4me|PTO is now known as odyssey4me10:43
sshnaidm|roverfrickler, hi, was there any response from docker.io about rate limit for openstack?11:55
*** hashar has joined #opendev12:00
*** ysandeep|ruck is now known as ysandeep|afk12:07
zbrsshnaidm|rover: IMHO, adding tokens can easily buy us time as auth tokes will always have bigger limits than anonymous.12:16
zbri already did this on few projects, to avoid being hit12:16
openstackgerritSlawek Kaplonski proposed opendev/irc-meetings master: Remove neutron QoS subteam meeting.  https://review.opendev.org/76090212:22
*** iurygregory is now known as iurygregory|afk12:31
*** auristor has joined #opendev12:34
*** ysandeep|afk is now known as ysandeep|ruck12:38
openstackgerritMichal Pryc proposed zuul/zuul-jobs master: Allow bindep role to read from more then one bindep file  https://review.opendev.org/75986813:15
openstackgerritMichal Pryc proposed zuul/zuul-jobs master: Allow bindep role to read from more then one bindep file  https://review.opendev.org/75986813:15
openstackgerritMichal Pryc proposed zuul/zuul-jobs master: Allow bindep role to read from more then one bindep file  https://review.opendev.org/75986813:17
openstackgerritzbr proposed zuul/zuul-jobs master: More E208 fixes  https://review.opendev.org/76091813:35
openstackgerritMerged zuul/zuul-jobs master: More E208 mode fixes  https://review.opendev.org/74849813:50
*** dmsimard has quit IRC13:51
*** dmsimard has joined #opendev13:51
fungisshnaidm|rover: zbr: also an easy workaround until we have something better in place is to unconfigure the proxies in jobs and have test nodes connect directly to dockerhub instead, since the requests will get spread across many more ip addresses that way13:52
sshnaidm|roverfungi, not for tripleo, we need more than 100 containers for job I think, also each ip will be blocked for 6 hours, and reusing IPs can be problematic13:53
sshnaidm|roverfungi, we came with a different solution - to build containers, but still worth to know if we can pull some of them..13:54
fungiyeah, we do get restricted to a pool of addresses in some providers, so those same addresses will come up multiple times for different builds13:54
fungiwe talked briefly last week about the possibility to run zuul-registry instances on our mirror servers in each provider as a proper caching registry proxy, and setting it up to make authenticated requests. apparently the pull-through feature for it which was ripped out early on would need to be restored, but it would in theory allow us to significantly reduce the number of requests, particularly manifest14:01
fungirequests as i understand it, we make to dockerhub14:01
fungiand also if those systems are making authenticated requests then we'll be able to take advantage of different (pro bono open source or paid) limits for the account14:02
*** dmsimard has quit IRC14:03
*** dmsimard has joined #opendev14:03
*** sboyron has joined #opendev14:11
openstackgerritMichal Pryc proposed zuul/zuul-jobs master: Allow bindep role to read from more then one bindep file  https://review.opendev.org/75986814:13
*** rchurch has quit IRC14:36
*** rchurch has joined #opendev14:39
*** iurygregory|afk is now known as iurygregory14:41
openstackgerritMerged opendev/irc-meetings master: Remove neutron QoS subteam meeting.  https://review.opendev.org/76090215:17
*** hashar has quit IRC15:27
*** fressi has quit IRC15:35
*** AJaeger has joined #opendev15:36
*** lpetrut has quit IRC15:38
*** AJaeger has quit IRC15:42
clarkbfungi: frickler also got a response from docker on that open source project/ci inquiry15:45
clarkbI've not yet read up on it though15:46
fungi"For the approved, non-commercial, open source namespaces, Docker will suspend data pull rate restrictions, with no egress restrictions applying to any Docker users pulling images from those namespaces"15:48
fungiyeah, so sounds like the people publishing the images need to get their namespaces approved as unrestricted access open source content15:48
fungialso there's this bit of fun... "While the publisher retains the Open Source project status, the Publisher agrees to: 1. Become a Docker public reference for press releases, blogs, webinars, etc; 2. Create joint blogs, webinars and other marketing content; 3. Create explicit links to their Docker Hub repos, with no 'wrapping' or hiding sources of their images; 4. Document that Docker Engine or Docker Desktop15:50
fungiare required to run their whitelisted images; 5. Give Docker full attribution"15:51
fungiso basically they'll allow unfettered access to download open source images so long as the publishers of those images agree to become a marketing vehicle for docker inc.15:51
clarkb#4 seems particularly problematic?15:52
clarkbmaybe we run that by jbryce and see what he thinks? Getting that status for our open sourcep rojects would be great, but not sure what the trade off entails there15:52
fungialso it doesn't directly solve our current problem because it's not unrestricted access for our client ip address to all namespaces on dockerhub, it's a means for the people who publish to namespaces on dockerhub to allow unrestricted downloads by any client15:54
fungiso we'd need to get all (or at least most) of the publishers for the images we consume in our jobs to agree to apply for that status and agree those terms15:54
fungier, agree to those terms15:54
clarkbfungi: correct, but for many of our uses I bet that would be sufficient15:54
clarkblike zuul images are debian + python + zuul15:55
clarkbgranted we don't know if debian and python would agree to those terms ...15:55
fungisure, and i agree #4 reads like you're not allowed to imply that non-dockerinc clients are a supported means of consuming your images15:55
fungiyou basically have to endorse only their official tools15:56
clarkbI pushed changes up to disable using the region caches too fwiw15:58
clarkbnot sure if we want to try landing them yet15:58
clarkbstill trying to catch up on a variety of things15:58
openstackgerritNicolas Hicher proposed openstack/diskimage-builder master: yum-minimal: Add centos-stream-repos package for centos-8-stream  https://review.opendev.org/76095116:02
*** iurygregory has quit IRC16:12
openstackgerritMichal Pryc proposed zuul/zuul-jobs master: Allow bindep role to read from more then one bindep file  https://review.opendev.org/75986816:17
*** hashar has joined #opendev16:19
*** iurygregory has joined #opendev16:22
*** ykarel is now known as ykarel|away16:39
*** ysandeep|ruck is now known as ysandeep|away16:39
*** ykarel|away has quit IRC16:57
*** rpittau is now known as rpittau|afk17:08
*** marios is now known as marios|out17:22
*** tosky has quit IRC17:28
*** marios|out has quit IRC17:42
*** kindwindfall__ has quit IRC17:49
*** sshnaidm|rover is now known as sshnaidm|afk17:57
*** andrewbonney has quit IRC18:16
openstackgerritzbr proposed zuul/zuul-jobs master: More E208 fixes  https://review.opendev.org/76091818:38
*** d34dh0r53 has quit IRC18:45
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: multi-node-bridge: update include to include_tasks  https://review.opendev.org/73066219:09
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add option to install kubernetes with kind  https://review.opendev.org/74093519:16
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add nimble roles and job  https://review.opendev.org/74786519:37
*** d34dh0r53 has joined #opendev19:52
openstackgerritMerged zuul/zuul-jobs master: emit-job-header: Print username in node information  https://review.opendev.org/76069220:04
*** persia has quit IRC20:08
*** persia has joined #opendev20:09
openstackgerritMerged zuul/zuul-jobs master: More E208 fixes  https://review.opendev.org/76091820:17
*** tosky has joined #opendev20:27
*** hamalq has joined #opendev20:31
*** farda has joined #opendev20:46
*** farda has quit IRC20:59
*** farda has joined #opendev21:00
*** farda has quit IRC21:07
*** sboyron has quit IRC21:29
openstackgerritMerged zuul/zuul-jobs master: Allow bindep role to read from more then one bindep file  https://review.opendev.org/75986822:37
*** slaweq has quit IRC23:03
*** gnuoy has quit IRC23:05
*** hashar has quit IRC23:20
*** DSpider has quit IRC23:59

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!