Friday, 2022-09-02

opendevreviewMerged opendev/base-jobs master: Update fedora-latest to Fedora 36  https://review.opendev.org/c/opendev/base-jobs/+/85433101:24
opendevreviewMerged opendev/base-jobs master: Add Rocky Linux 9 nodeset  https://review.opendev.org/c/opendev/base-jobs/+/85433201:24
opendevreviewMerged opendev/infra-manual master: Stop recommending PyPI project name squatting  https://review.opendev.org/c/opendev/infra-manual/+/85258401:30
opendevreviewMerged opendev/git-review master: Clarify that test rebases are not kept  https://review.opendev.org/c/opendev/git-review/+/85005401:39
*** rlandy is now known as rlandy|out02:47
*** rcastillo|rover_ is now known as rcastillo03:56
*** chandankumar is now known as chkumar|ruck05:02
*** ysandeep|out is now known as ysandeep05:22
opendevreviewIan Wienand proposed openstack/diskimage-builder master: Start running dib-lint again  https://review.opendev.org/c/openstack/diskimage-builder/+/85558906:18
*** arxcruz is now known as arxcruz|rover07:12
opendevreviewMerged openstack/diskimage-builder master: Add subscription-manager repo names for RHEL-9  https://review.opendev.org/c/openstack/diskimage-builder/+/85173407:35
*** jpena|off is now known as jpena07:36
opendevreviewRafal Lewandowski proposed openstack/diskimage-builder master: changed release check logic in lvm element  https://review.opendev.org/c/openstack/diskimage-builder/+/85561608:06
opendevreviewRafal Lewandowski proposed openstack/diskimage-builder master: changed release check logic in lvm element enabling lvm for all ubuntu releases except for trusty Change-Id: I77184990270be74afa6542fd16b8e05bd1a27e04  https://review.opendev.org/c/openstack/diskimage-builder/+/85561608:14
opendevreviewRafal Lewandowski proposed openstack/diskimage-builder master: changed release check logic in lvm element  https://review.opendev.org/c/openstack/diskimage-builder/+/85561608:14
*** ysandeep is now known as ysandeep|afk09:49
*** rlandy|out is now known as rlandy10:37
opendevreviewRafal Lewandowski proposed openstack/diskimage-builder master: changed release check logic in lvm element  https://review.opendev.org/c/openstack/diskimage-builder/+/85456610:40
*** ysandeep|afk is now known as ysandeep11:08
opendevreviewRafal Lewandowski proposed openstack/diskimage-builder master: - added elrepo element  https://review.opendev.org/c/openstack/diskimage-builder/+/85381711:49
chkumar|ruckHello #opendev, can we get this review https://review.opendev.org/c/openstack/tripleo-quickstart/+/855587/ force merge to clear tripleo gates12:27
chkumar|ruckwe have got the vote from slagle on the patch12:30
chkumar|ruckon this patch https://zuul.opendev.org/t/openstack/status#855587, tripleo-ci-centos-9-undercloud-containers - https://zuul.opendev.org/t/openstack/stream/52ffc5d44ebd456e94bbbab7b740a1c0?logfile=console.log is stuck from long time12:31
chkumar|ruckif we update it then it going to take more than 6+ hr to kand12:31
chkumar|ruck*land12:31
chkumar|ruckthat's why we need to force merge it12:31
opendevreviewRafal Lewandowski proposed openstack/diskimage-builder master: added elrepo element  https://review.opendev.org/c/openstack/diskimage-builder/+/85381712:38
fungichkumar|ruck: how about i move it to the front of the gate queue so it's the next change to merge?12:52
chkumar|ruckfungi: just updated the patch12:53
chkumar|ruckfungi: sounds good12:53
fungiall the other changes in the gate will get their testing restarted behind it either way12:53
fungichkumar|ruck: it'll need cr+2,w+1 votes added12:57
chkumar|ruckfungi: getting the votes12:57
*** dasm|off is now known as dasm13:00
opendevreviewRafal Lewandowski proposed openstack/diskimage-builder master: added elrepo element  https://review.opendev.org/c/openstack/diskimage-builder/+/85381713:09
fungichkumar|ruck: i have to step away for a few minutes, but let me know once the latest revision has approval votes and i'll enqueue/promote it in the gate13:10
chkumar|ruckfungi: done, thank you :-)13:14
*** jpena is now known as jpena|off14:07
*** ysandeep is now known as ysandeep|out14:34
clarkbok looks like that promotion happened15:08
*** dviroel is now known as dviroel|lunch15:13
fungiyeah15:15
fungii'm heading out to the biergarten for lunch, but once i'm back i'll be available for meetpad upgrade testing15:16
fungiprobably back by 16:30 utc, 17:00 at the latest15:17
clarkbfungi: sounds good. Should I approve the change in about 45 minuets?15:17
fungiyeah, that should be plenty safe since it'll probably take a while deploying anyway15:17
clarkbok I'll do that15:17
fungianyway, headed out, bbiaw15:17
clarkbenjoy the bier garten15:17
fungithanks!15:17
clarkbtumbleweed must've udpated gcc as I now have a bunch of packages to upgrade15:21
clarkbapproving the jitsi meet udpate now16:12
*** johnthetubaguy[m] is now known as johnthetubaguy16:14
opendevreviewClark Boylan proposed opendev/project-config-example master: Update deprecated zuul syntax  https://review.opendev.org/c/opendev/project-config-example/+/85568416:19
opendevreviewClark Boylan proposed openstack/project-config master: Update deprecated merge-failure zuul syntax  https://review.opendev.org/c/openstack/project-config/+/85568616:21
opendevreviewClark Boylan proposed opendev/system-config master: Update example zuul config to remove deprecated syntax  https://review.opendev.org/c/opendev/system-config/+/85568716:23
clarkbcorvus: ^ fyi opendev cleanups for the merge-failure removal16:24
clarkb855686 is the only oen that represents a real breaking issue. The others are docs updates16:24
fungiokay, back and catching up16:35
clarkbthe jitsi meet change should merge in a few minutes right around when the hourly deploys finish16:40
clarkbprobably in 20-30 minutes we should plan to do testing16:40
*** dviroel|lunch is now known as dviroel16:41
opendevreviewMerged opendev/system-config master: Update Jitsi configs to latest upstream samples  https://review.opendev.org/c/opendev/system-config/+/85538816:42
fungiawesome, thanks for approving!16:44
corvusclarkb: lgtm -- those are all safe to merge now16:48
clarkbfungi: https://meetpad.opendev.org/isitbroken16:49
clarkbI was able to pull that up and the etehrpad is there16:49
clarkbI'm not muted but I think it may mute me when someone else joins16:49
fungithat was quick. i'll make sure i delete all my cookies/permissions before i test16:51
opendevreviewJeremy Stanley proposed opendev/system-config master: Move our jitsi-meet interface config to defaults  https://review.opendev.org/c/opendev/system-config/+/85569317:30
opendevreviewJeremy Stanley proposed opendev/system-config master: Move our jitsi-meet interface config to defaults  https://review.opendev.org/c/opendev/system-config/+/85569317:32
clarkbfungi: if you get a chance https://review.opendev.org/q/topic:merge-failure-cleanup is straightfowrard updates for zuul deprecations that will be removed soon17:54
fungioh, yeah thanks i saw you mention that while i was out17:55
clarkbalso once we're happy with jitsi meet we can land the gravatar change to gitea if we think that is safe enough (it should be and easy to revert if necessary too)18:13
fungioh, yep now's a great time for that as well. shall i approve it now, or wait?18:14
clarkbI'm happy either way. I think the main thing would be if we have two broken things at the asme time we'd have to pick one to fix. But gitea is proibably higher priority so no confusion over what to focus on18:15
fungii went ahead and approved it18:16
clarkbthanks18:18
clarkbIt is possible that we would need to manually restart the services for that gitea change too now that I think of it18:19
clarkbThe process for that is a bit involved and has me thinking maybe we should split it out into a separate playbook/task file18:19
fungioh, yeah since it only touches a config template18:19
clarkbwe have to start the web service before starting the sshd otherwise replication doesn't work properly18:19
fungii don't suppose there's a minor image update we could push through too?18:20
clarkbfungi: not that I'm aware of. I can just manually do it. It isn't too bad just have to remember to follow the process in he larger role18:20
fungisounds fine18:20
opendevreviewMerged opendev/system-config master: Update example zuul config to remove deprecated syntax  https://review.opendev.org/c/opendev/system-config/+/85568718:21
opendevreviewMerged openstack/project-config master: Update deprecated merge-failure zuul syntax  https://review.opendev.org/c/openstack/project-config/+/85568618:22
opendevreviewMerged opendev/project-config-example master: Update deprecated zuul syntax  https://review.opendev.org/c/opendev/project-config-example/+/85568418:24
clarkbfungi: we may also need to manually restart meetpad containers.18:48
fungioh, yes that too18:49
clarkbI'm still trying to download all my tumbleweed updates. I think when they update gcc and rebuild the world it creates quite the thundering herd of installs trying to fetch all the packages18:50
fungithat's not surprising18:50
opendevreviewMerged opendev/system-config master: Disable Gravatar in Gitea  https://review.opendev.org/c/opendev/system-config/+/85467819:16
opendevreviewMerged opendev/system-config master: Move our jitsi-meet interface config to defaults  https://review.opendev.org/c/opendev/system-config/+/85569319:16
clarkbThose will deploy in that order once the hourly jobs are done19:22
clarkbfungi: I need to eat lunch but then can help test things afterwards19:22
clarkband do restarts as necessary19:22
fungisame, i'm popping out in a sec to pick up takeout, but won't be long19:37
clarkbconfirming that gitea appears to need a manual restart19:57
clarkbI'll wait for the job to complete before doing that just to be sure I don't interact with the deploy job unexpecedly19:57
clarkbgitea01 has been restarted. Seems fine so I'll do the others in sequence20:04
clarkband all done. I don't see gravatar requests in my browser20:11
clarkbAnd the service seems to function otherwise20:11
clarkbThe meetpad deploy got stuck behind the next hourly run :/20:11
fungiback now and gitea lgtm20:15
clarkbmeetpad should update shortly20:42
fungii'm ready to restart it. just the containers on meetpad.o.o i guess, or should i do the jvb servers too?20:45
fungiready to restart it once deployment completes of course, i mean20:45
clarkbI think those chagnes only affect meetpad since it is only the webd stuff?20:46
clarkbfungi: looks like it may have restarted itself20:47
fungioh marvellous20:51
*** dviroel is now known as dviroel|out20:56
*** dasm is now known as dasm|off21:32
opendevreviewJeremy Stanley proposed opendev/system-config master: Pass PUBLIC_URL to jitsi-meet jvb containers  https://review.opendev.org/c/opendev/system-config/+/85570021:35
clarkbhttps://github.com/jitsi/jitsi-videobridge/blob/master/doc/web-sockets.md21:51
clarkbhttps://jitsi.github.io/handbook/docs/devops-guide/faq/21:59
fungihttps://jitsi.github.io/handbook/docs/devops-guide/turn/ "One-to-one calls should avoid going through the JVB for optimal performance and for optimal resource usage. This is why we've added the peer-to-peer mode where the two participants connect directly to each other. Unfortunately, a direct connection is not always possible between the participants. In those cases you can use a TURN server22:19
fungito relay the traffic (n.b. the JVB does much more than just relay the traffic, so this is not the same as using the JVB to "relay" the traffic)."22:19
clarkbinfra-root fungi's jitsi meet config updates exposed that our extra JVB servers have likely not been working for some time (and possibly no video was working at all on meetpad for some time). The reason for this is JVB uses "colibri websockets" to negotiate video transfer (maybe nto the video itself but the details?) and we weren't configuring this properly for the extra jvb servers22:41
clarkb855700 above fixes fungi's config updates to work with jvb on the meetpad server itself but not jvb01 and jvb02. For this reason we've put jvb0X in the emergency file and manaully shut down their services22:42
clarkbTo make them work we need to issue them ssl certs (likely via LE), then update their configs so that they listen on port 9090 with an https server. Then we update the meet.conf nginx config for meetpad.o.o to proxy to the jvb backends over port 9090 appropriately22:42
clarkbAnd likely we want firewall rules to restrict all this 9090 communication to within the cluster (since we aren't sure what sort of control that exposes if opened to the internet)22:43
clarkbWe don't need to go through this with the all in one meetpad.o.o server bceause the existing configs work for http (not https) connectivity to the localhost jvb22:43
clarkbAnyway a very long way of saying our extra JVBs need some work, but meetpad.o.o is currently functional based on our testing as an all in one server.22:44
clarkbThis also illustrates that we probably don't need two jvbs since one all in one server has been getting us by22:45
clarkbWe'll likely update things to support this colibri websocket stuff but then shrink to a single jvb at the same time22:45
fungiideally before the ptg, and then if we need to re-add more jvb servers we can do that quickly and easily22:46
opendevreviewMerged opendev/system-config master: Pass PUBLIC_URL to jitsi-meet jvb containers  https://review.opendev.org/c/opendev/system-config/+/85570023:31
clarkbthat change has deployed but it did not restart jitsi meet services. I'm going to manually restart them and then test23:49
clarkband it seems to work between my desktop and laptop with video happening too23:51
clarkbI think we're all set with the all in one install. Next week we can look into fixing the separate jvbs23:52
fungicool, thanks for testing and for all the help!23:58

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!