Wednesday, 2021-05-05

ianwif ^ works we might as well see if we can get rid of 3.7 images i'd say, and try to just keep latest 200:00
clarkbI think we may have a few external users of those images (at least vexxhost) may want to run that plan by them as well00:00
clarkbI think that should work for us though00:00
*** mlavalle has quit IRC00:07
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962200:18
openstackgerritIan Wienand proposed opendev/system-config master: Cleanup ssl_cert_check puppet components  https://review.opendev.org/c/opendev/system-config/+/78965200:21
openstackgerritIan Wienand proposed opendev/system-config master: Cleanup ssl_cert_check puppet components  https://review.opendev.org/c/opendev/system-config/+/78965200:22
openstackgerritMerged opendev/system-config master: Deprovision Limesurvey config management and docs  https://review.opendev.org/c/opendev/system-config/+/78906000:37
*** tkajinam has joined #opendev01:13
openstackgerritYuehuiLei proposed openstack/diskimage-builder master: setup.cfg: Replace dashes with underscores  https://review.opendev.org/c/openstack/diskimage-builder/+/78968802:12
*** ykarel has joined #opendev04:20
*** fressi has joined #opendev04:44
*** vishalmanchanda has joined #opendev04:51
*** marios has joined #opendev05:36
*** dhellmann has quit IRC06:10
*** ralonsoh has joined #opendev06:11
*** whoami-rajat has joined #opendev06:18
*** d34dh0r53 has quit IRC06:18
*** d34dh0r53 has joined #opendev06:20
*** slaweq has joined #opendev06:26
*** sboyron has joined #opendev06:49
*** avass has joined #opendev06:51
*** fressi has joined #opendev06:54
*** rpittau|afk is now known as rpittau07:12
*** hashar has joined #opendev07:19
*** andrewbonney has joined #opendev07:22
*** sboyron has quit IRC07:28
*** tosky has joined #opendev07:30
*** sboyron has joined #opendev07:56
*** jpena|off is now known as jpena07:57
*** amoralej|off is now known as amoralej08:14
*** ysandeep is now known as ysandeep|lunch08:28
*** hemanth_n has joined #opendev08:42
*** dtantsur|afk is now known as dtantsur09:21
*** ykarel has quit IRC09:22
*** ykarel has joined #opendev09:22
*** osmanlicilegi has quit IRC09:50
openstackgerritLuigi Toscano proposed openstack/project-config master: gerritbot: fix the regex for the validations channels  https://review.opendev.org/c/openstack/project-config/+/78977410:05
*** DSpider has joined #opendev10:08
*** ysandeep|lunch is now known as ysandeep10:10
*** osmanlicilegi has joined #opendev10:16
openstackgerritLuigi Toscano proposed openstack/project-config master: gerritbot: fix the regex for the validations channels  https://review.opendev.org/c/openstack/project-config/+/78977410:29
*** hashar has quit IRC10:32
*** sshnaidm|afk is now known as sshnaidm10:34
*** tosky has quit IRC10:38
*** tosky has joined #opendev10:38
*** tosky_ has joined #opendev10:45
*** tosky has quit IRC10:47
*** tosky_ is now known as tosky10:49
openstackgerritLuigi Toscano proposed openstack/project-config master: gerritbot: fix the regex for the validations channels  https://review.opendev.org/c/openstack/project-config/+/78977410:58
*** jpena is now known as jpena|lunch11:26
marioselod: o/ gentle reminder please add to your list of release things to review thank you for your time https://review.opendev.org/c/openstack/releases/+/789558 fyi /for your convenience11:38
marioshttps://review.opendev.org/c/openstack/releases/+/789558/1#message-588b5a3573c955ac717d0be8716b9a154d82108211:38
marioselod: thank you ^^11:38
*** artom has quit IRC11:40
*** amoralej is now known as amoralej|lunch12:14
fungimarios: there's also a #openstack-release channel, if that helps12:23
mariosthanks fungi :)12:25
*** hashar has joined #opendev12:25
mariosfungi: i'll go harrass there in due course if current harrass didn't work :) thanks12:25
*** marios is now known as marios|call12:25
*** jpena|lunch is now known as jpena12:30
*** marios|call is now known as marios12:34
*** ricksanchez has joined #opendev12:50
*** ricksanchez has quit IRC13:00
*** amoralej|lunch is now known as amoralej13:09
*** fbo has quit IRC13:20
*** akahat|ruck has quit IRC13:21
*** dpawlik has quit IRC13:22
*** kopecmartin has quit IRC13:23
*** hashar has quit IRC13:25
*** hashar has joined #opendev13:25
*** akahat has joined #opendev13:33
*** kopecmartin has joined #opendev13:33
*** fbo has joined #opendev13:36
*** artom has joined #opendev13:41
*** hemanth_n has quit IRC13:56
*** dhellmann has joined #opendev14:02
*** fbo has quit IRC14:03
TheJuliaQuick question, does anyone know who would be authorative for docs.openstack.org administration?14:09
fungiTheJulia: in what sense?14:09
fungiwhat needs to be administrated? the term is kinda vague14:10
TheJuliaWell, a question was raised if we could get some robots.txt entries added so old releases are not indexed14:10
TheJuliabasically, super old releases are always the first index result14:10
TheJuliaand we want to try and peel some of that back14:10
TheJuliaAnd still have the docs available.14:10
fungihttps://docs.openstack.org/robots.txt exists so i guess we need to figure out if that's installed by openstack-manuals or something else14:11
* TheJulia clones the repo14:12
fungiTheJulia: https://opendev.org/openstack/openstack-manuals/src/branch/master/www/static/robots.txt14:13
fungiyep, that's it14:14
fungiTheJulia: so as far as who's authoritative over that, i suppose the tech writing sig14:14
TheJuliaawesome, thanks14:14
fungiyw!14:14
*** dpawlik5 has joined #opendev14:27
*** dpawlik5 is now known as dpawlik14:32
*** avass has quit IRC14:32
elodmarios: sorry, had some other errands/meeting... let's continue on #openstack-release :)14:52
fungiinfra-root: i announced the survey.openstack.org service retirement to openstack-discuss rather than service-announce, similar to firehose.openstack.org, as i expect that's the only community which really tried it14:58
fungialso it was, arguably, never officially an opendev service just a holdover from openstack-infra14:58
clarkb++14:58
fungisince 789383 merged i'm going to work on gerrit global config cleanup shortly14:59
marioselod: no problem in your own time thank you15:04
*** avass has joined #opendev15:10
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962215:11
clarkbI don't understand why ^ isn't working so I've added some debug output. If that doesn't help I'll probably need to hold some nodes15:11
*** mlavalle has joined #opendev15:21
*** ysandeep is now known as ysandeep|away15:27
*** ykarel has quit IRC15:28
openstackgerritMarcin Juszkiewicz proposed opendev/system-config master: reprepro: mirror Ubuntu UCA Xena  https://review.opendev.org/c/opendev/system-config/+/78990515:45
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962215:45
*** rpittau is now known as rpittau|afk15:52
*** hashar has quit IRC15:54
fungi#status log Removed OpenStack Release Manager permissions from global Gerrit config as reflected in https://review.opendev.org/78938316:05
openstackstatusfungi: finished logging16:05
fungiinfra-root: this is the diff, for reference... http://paste.openstack.org/show/804977/16:05
fungii notice we still have some old entries in there for zuul refs, permission for the zuul account to push tags, et cetera16:06
fungimight not be a bad idea to take a close look at the all-projects config and see what we can safely trim out16:06
clarkb++16:07
fungii also set the api-projects project to hidden status, since we don't actually carry any configuration defining it and no projects currently inherit from it16:10
funginot really sure what the best thing to do with that cruft is16:10
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962216:12
clarkbthe most recent error on ^ was weird, I didn't get a stdout_lines from a command task's registered output16:12
clarkbOn the off chance that my debugging output from before is the source of that problem I have cleaned up the now unnecessary debugging output, but that is really weird16:13
*** hashar has joined #opendev16:22
fungispeaking of service updates and configuration management, what was the plan for the future of our zuul database? mysql container on the scheduler? separate db cluster servers?16:27
fungii happen to be looking in our rackspace trove instance list right now figuring out what's safe to delete while i'm there cleaning up the limesurvey db16:28
clarkbfungi: that is a good question and one I hadn't considered as part of the zuul cluster upgrade but probably makes sense to give it some thought16:29
fungipretty sure the ara db can do, we never got around to setting up persistent ara for the bastion before we switched to zuul jobs right?16:29
clarkbfungi: any idea what sort of sizing needs it has right now?16:29
fungier, can go16:29
clarkbyes I don't think the ara db was ever really used (but maybe double check bridge?)16:29
fungiclarkb: the current "zuul-v3" trove instance has 4gb ram (which mysql helpfully preallocates) but i don't think it's really using a ton of that because cpu consumption seems to be down around 10% for the past week. filesystem is 50gb but only 15gb in use16:31
fungiif we're planning to do redundant schedulers though, we probably should have a redundant database for them as well16:33
fungiwe still have a trove instance for ipsilon, we deleted the poc server for that ages ago though right?16:33
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962216:35
clarkbfungi: re ipsilon I think that is a question for corvus, but yes I think so16:35
clarkbfungi: that is a good point. If we split up schedulers but then put a new spof on them that isn't so great16:35
clarkbfungi: in that case I think we can keep the existing db until we remove the scheduler spof and address the db at that point?16:36
fungiyeah, i'd probably do those as separate steps, and that sequence seems good16:36
*** hemanth_n has joined #opendev16:37
fungii'm backing up the limesurvey trove instance before i delete it, just in case someone has survey results they desperately needed to get out of it16:37
*** dtantsur is now known as dtantsur|afk16:38
*** marios is now known as marios|out16:40
*** DSpider has quit IRC16:43
*** jpena is now known as jpena|off16:46
*** marios|out has quit IRC16:47
*** osmanlicilegi has quit IRC16:54
clarkbok I think I see my issue with ansible. Apparently you can't register the same var name if doing an if else case because you'll register the skipped value16:57
clarkbmaybe I should rewrite it into a block16:57
corvusfungi: yes you can delete the ipsilon db16:59
corvuskeeping the existing db around until we feel like running a pxc cluster sounds good; downtime on that is pretty small.  it may be small enough to always be acceptable to us.17:00
*** osmanlicilegi has joined #opendev17:01
*** hemanth_n has quit IRC17:01
fungithanks corvus!17:01
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962217:03
fungiclarkb: think today is a good day to merge 788584?17:19
clarkbfungi: sure17:21
clarkbI think the mailman change has just passed for the first time \o/17:25
fungii've approved 788584 just now17:25
clarkbI have a few todos I want to look at, but I'll also work on getting the actual lists config into that change17:26
clarkbThen maybe we induce a failure and can inspect the host to make sure it looks how we expect it?17:26
fungionce it's in, that's every openstack/ namespace project except meta-config and project-config covered by the meta-config inheritance17:26
fungiwhich will also enable a few -eol tagged branches on some retired openstack projects to be deleted, as there are actually some of those17:27
*** andrewbonney has quit IRC17:31
fungibrowsing the limesurvey db, it looks like it was only ever used to create two surveys, on 2018-07-03 and 2019-02-1217:35
fungiand a total of 11 users, most of whom were us17:36
*** ralonsoh has quit IRC17:36
fungianyway i stuck a mysqldump of its db in my homedir on bridge too for now, named limesurvey_backup_2021-05-05.sql.gz17:37
openstackgerritMerged openstack/project-config master: Move projects under meta-config acl (19)  https://review.opendev.org/c/openstack/project-config/+/78858417:38
*** amoralej is now known as amoralej|off17:43
clarkbsounds good17:47
fungi#status Deleted server instance survey01.openstack.org, database instance limesurvey, and dns records for survey.openstack.org and survey01.openstack.org18:01
openstackstatusfungi: unknown command18:01
fungii also cleaned up the old unused ara and ipsilon databases18:01
fungi#status log Deleted server instance survey01.openstack.org, database instance limesurvey, and related DNS records for survey.openstack.org and survey01.openstack.org18:03
openstackstatusfungi: finished logging18:03
*** hashar has quit IRC18:06
*** hashar has joined #opendev18:07
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962218:10
*** knikolla has joined #opendev18:10
clarkbI think that change is ready for review now18:10
clarkbthough I did just update the testing a bit18:10
clarkbI've also got one ansible behavior around command argv that I want to test18:10
*** ricksanchez has joined #opendev18:17
fungistepping out for a few to pick up dinner, should be back in ~3018:19
*** amoralej|off is now known as amoralej18:32
*** amoralej is now known as amoralej|off18:33
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962218:39
clarkbsome local testing foudn a small issue that ^ should address18:39
clarkbthe ternary filter doesn't handle the case where a var is undefined so need to filter through default() first18:39
clarkbI'm also open to ideas for how we might be able to break it down into more digestable pieces. I sort of went all in here because it made the testing more straightforward18:41
*** Jeffrey4l has quit IRC18:44
*** vishalmanchanda has quit IRC18:46
*** Jeffrey4l has joined #opendev18:47
clarkbfungi: can you check my responses on https://review.opendev.org/c/opendev/system-config/+/789594 and see that they make sense18:49
fungiwill do, gonna take a few minutes an eat first since nothing seems on fire18:50
clarkbyup no rush18:50
*** hashar has quit IRC19:02
clarkbanyone know what happens if you newlist a list that already exists? (I think that may be the biggest potential for problems in my ansible mailman change if I somehow don't get the checks right and it tries that and that does something undesirable)19:03
*** ricksanchez has quit IRC19:15
*** fressi has left #opendev19:29
openstackgerritMerged openstack/project-config master: Add Debian bullseye wheel cache publish jobs  https://review.opendev.org/c/openstack/project-config/+/78363319:39
openstackgerritMerged opendev/system-config master: Add support for Xenial ESM repos to our base roles  https://review.opendev.org/c/opendev/system-config/+/78959419:54
*** slaweq has quit IRC20:10
*** ricksanchez has joined #opendev20:28
*** ricksanchez has quit IRC20:31
*** ricksanchez has joined #opendev20:32
*** ricksanchez has quit IRC20:39
*** sboyron has quit IRC20:42
clarkbhas anyone had a chance to look at the ansible mailman stuff yet? I know the diff line count is huge and scary but the bulk of that is simply copying the html template files for openstack :)21:05
fungii have not yet but can focus on that next21:27
fungidid you manage to figure out whether list creation is idempotent/noop?21:28
clarkbI haven't, but I think I'll push a followup change that induces a failure and hold the nodes then we can directly inspect the results of this too to compare as well21:28
clarkb(and I can test a newlist rerun there)21:28
openstackgerritClark Boylan proposed opendev/system-config master: DNM forcing a failure in lists playbook for inspection  https://review.opendev.org/c/opendev/system-config/+/78994521:30
clarkbfungi: ^ that should do it and I've put a hold in place for the system-config-run-lists job against that change21:32
*** ricksanchez has joined #opendev21:37
*** ricksanchez has quit IRC21:52
clarkbcool that held node has already helped me find one bug (/etc/mailman/sites is all one line instead of a site per line)21:55
clarkbrunning newlist against a listname that already exists exits 1 and reports 'List already exists: service-announce'21:58
clarkbfungi: apache2 is having cgi problems on the held node too which makes me wonder if we'remissing some sort of cgi lib/package something22:09
clarkbAH01257: unable to connect to cgi daemon after multiple tries: /usr/lib/cgi-bin/mailman/listinfo22:09
clarkbinternet says that can be a socket file perms thing22:11
clarkbconfirmed that chowning /var/run/apache2 to www-data fixes this on the test node. however prod doesn't do this so I'm confused22:16
clarkbanyone know what I might be missing there?22:16
clarkbok I think it may just be a bootstrapping problem on a new host. It seems that if I restart apache2 even without the chown its happy22:24
clarkbI'll work on some fixes, clean up this hold, then make another for what I push up22:25
openstackgerritClark Boylan proposed opendev/system-config master: Ansible mailman configs  https://review.opendev.org/c/opendev/system-config/+/78962222:27
openstackgerritClark Boylan proposed opendev/system-config master: DNM forcing a failure in lists playbook for inspection  https://review.opendev.org/c/opendev/system-config/+/78994522:27
clarkbnew hold is up. We want to confirm apache2 is happy and that /etc/mailman/sites is one line per site. I don't think the order in that file matters and it will change due to my updates22:28
clarkbI poked around at a few other things and didn't see anything obviously broken22:29
*** ricksanchez has joined #opendev22:44
clarkbok the job hasn't failed yet but ssh'ing in things look good. The cgid socket is there, telling /etc/hosts the test node is lists.opendev.org loads mailman web stuff. And the /etc/mailman/sites file is a site per line now22:46
clarkbone thing i notice is that private lists show up on the test node. I think this is because the steps to configure a list as private happen after the lists are created by the list admins. And since this change is only creating lists this shouldn't be a problem with prod22:47
clarkbso ya I think we're good to have people review the change and investigate the held nodes (and compare them to prod)22:49
*** tosky has quit IRC23:03
clarkbI've done some self review and left notes for other reviewers. Feel free to mark it up :)23:12
clarkbfungi: the two gpg related changes you've got up have plenty of +2s now. Is there any reason to not approve both of them?23:28
*** ricksanchez has quit IRC23:28
funginah, feel free to approve23:54
clarkbfungi: do you want to monitor the key change? I guess unlikely that any releases will happen now so we can land that23:57
clarkbI've approved both23:57

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!