Tuesday, 2019-07-30

ianwanother thread, that looks stuck during reconfiguration -> http://paste.openstack.org/show/755089/00:02
clarkbthat isn't ringing any bells for me, but I'm known to forget things00:02
ianwyep my comment in https://review.opendev.org/#/c/665014/100:03
*** betherly has joined #openstack-infra00:04
ianw# ls /proc/3426/task/ | wc -l00:04
ianw26200:04
ianwat that time we suspected the failure of the control plane uploads00:05
*** dchen has joined #openstack-infra00:05
ianwit seems to have leveled out there, but i wonder if that's because it's basically deadlocked itself00:06
clarkbor cpu contention makes it slow down00:07
clarkbdo we want to watch 01 and see if it is happy now?00:07
clarkband if so we can also restart 02?00:07
donnydI see some images coming in now00:07
ianwclarkb: yeah, but a lot of the threads seem to be waiting now on the GIL.  so i wonder if it has stopped itself from spawning new threads through contention00:07
clarkbianw: that would not surprise me00:08
ianwi feel like it must be that the zypper command has hung, but why that leads to nodepool death is an open question :/00:08
*** betherly has quit IRC00:09
openstackgerritMerged zuul/zuul master: Add log browsing to build page  https://review.opendev.org/67190600:10
*** threestrands has joined #openstack-infra00:10
ianwso i have gone in and run "cat /proc/23186/fd/1" and that zypper process resumed and ran00:12
clarkbit was waiting for something to read stdout?00:12
ianwyeah, i would say.  i'm doing the same on the other one.  let's see if nodepool comes alive when that one clears too...00:13
fungigitea07 and 08 git cg finished00:15
donnydmy fans came in tonight for the nvme drives, so I am good to hook. However boot from volume needs to be set in nodepool.00:15
clarkbdonnyd: oh are we making that change too?00:16
donnydI would like to give it a whirl. I am hoping cinder will remain stable enough00:17
donnydI am not using ceph though, so no need to change to raw images00:17
clarkbdonnyd: we need to apply https://opendev.org/openstack/project-config/src/branch/master/nodepool/nl03.openstack.org.yaml#L266-L267 to all of the image entries at https://opendev.org/openstack/project-config/src/branch/master/nodepool/nl02.openstack.org.yaml#L261-L32500:17
clarkbdonnyd: would you like to propose that change?00:17
donnydyea I can take care of it00:18
ianwclarkb: ok, we also have from jul 25 a stuck process00:18
ianw  File "/opt/dib_tmp/dib_build.GicrW4FK/hooks/extra-data.d/50-create-repo-list", line 41, in get_project_list00:18
ianw    for f in yaml.load(urlopen(url)):00:18
ianwit goes on to be stuck in libssl somewhere ... now that could have been gitea instability given the date00:18
clarkbthat would've been ya that00:18
donnydso does it only need to be changed in nl02?00:19
fungisounds likely00:19
fungidonnyd: yes, our nodepool launchers are pegged to specific providers00:19
donnydthanks00:20
*** pkopec has quit IRC00:20
fungi(our nodepool image builders are not technically, but are architecture-specific)00:20
clarkbdonnyd: and you'll probably update the flavor too?00:21
clarkbto a flavor without disk assigned to it?00:21
*** diablo_rojo has joined #openstack-infra00:21
donnydok, I can do that as well00:21
donnydis that so nova won't worry about local disk space when launching?00:21
openstackgerritMerged zuul/zuul master: Move artifacts to their own section  https://review.opendev.org/67237900:21
clarkbyes00:22
ianwafter manually clearing blocked stdout on a few zypper processes, and killing some of those hung cache-url process, it's actually gone on building more images now00:22
clarkbotherwise I think it may still allocate a local disk00:22
ianwbut there's still hundreads of threads.  i'll just do a reboot at this point, i don't know if there's much more to glean00:23
donnydclarkb: I am pretty sure you are correct00:23
clarkbianw: wfm00:23
*** betherly has joined #openstack-infra00:25
*** gyee has quit IRC00:28
*** betherly has quit IRC00:30
ianwhrm, nb02 still appears down after reboot, which is not ideal00:31
openstackgerritDonny Davis proposed openstack/project-config master: set FN to boot from volume for Cinder NVME backend  https://review.opendev.org/67337800:32
*** yamamoto has joined #openstack-infra00:32
openstackgerritMerged zuul/zuul master: Remember tab location on build page  https://review.opendev.org/67283600:34
ianw#status log nb02 rebooted after stuck processes sent nodepool-builder into deadlock00:41
openstackstatusianw: finished logging00:41
ianwi had to externally reboot it, console was filled with dracut messages about "/dev/log"00:42
*** betherly has joined #openstack-infra00:46
donnydwill nodepool take care of the security group rules?00:50
ianwdonnyd: i think that's something the cloud launcher roles would work out00:51
*** betherly has quit IRC00:51
donnydok00:53
openstackgerritMerged zuul/zuul master: Use base 1 line number anchors in log view  https://review.opendev.org/67283700:54
ianwprometheanfire: do we need a dib release to get gentoo building with that new directory stuff?00:55
donnydit also looks like only one image was loaded, but I am also going to assume since it was just rebooted it will be a while00:55
*** ricolin_ has joined #openstack-infra00:58
*** gregoryo has joined #openstack-infra00:59
*** panda has quit IRC01:06
fungidonnyd: our cloud launcher roles basically set an empty allow-all security group, and then iptables is configured on the node images to block inbound connections other than a handful of common service ports (and allow all egress connections)01:06
fungiclarkb has proposed switching that around last week01:06
donnydI just couldn't remember if I set them or cloud-launcher did01:07
donnydi just checked the v6 networking for external access in the openstackzuul project, looks to be good to go01:07
*** panda has joined #openstack-infra01:08
fungiyeah, they didn't get set until saturday when i was fiddling with cloud launcher to get the keys uploaded01:08
fungisince it's all the same batch of ansible tasks01:08
openstackgerritMerged opendev/system-config master: Put gitea07 and gitea08 back into service  https://review.opendev.org/67337301:11
openstackgerritMerged zuul/zuul master: Add severity filtering to logs  https://review.opendev.org/67283901:14
*** igordc has quit IRC01:15
*** betherly has joined #openstack-infra01:18
*** betherly has quit IRC01:22
openstackgerritMerged zuul/zuul master: Colorize log severity  https://review.opendev.org/67310301:29
openstackgerritMerged zuul/zuul master: Add raw links to log manifest  https://review.opendev.org/67310401:46
prometheanfireianw: I think builds should still be working systemd is still on the old profile01:47
ianwok, keep an eye, the builds were stuck on nb02 but per above likely as not gitea issues from days ago01:51
prometheanfirekk01:51
openstackgerritMerged zuul/zuul master: Rename view to logfile  https://review.opendev.org/67310502:03
*** yikun has joined #openstack-infra02:04
*** diablo_rojo has quit IRC02:06
*** ekultails has quit IRC02:15
*** tdasilva has quit IRC02:33
*** tdasilva has joined #openstack-infra02:33
openstackgerritMerged openstack/diskimage-builder master: update version of open-iscsi that is installed on musl  https://review.opendev.org/67215202:37
*** hongbin has joined #openstack-infra02:53
*** auristor has quit IRC02:58
*** auristor has joined #openstack-infra03:01
*** tdasilva has quit IRC03:03
*** tdasilva has joined #openstack-infra03:03
*** auristor has quit IRC03:05
*** auristor has joined #openstack-infra03:08
*** auristor has quit IRC03:20
*** auristor has joined #openstack-infra03:25
*** threestrands has quit IRC03:30
*** threestrands has joined #openstack-infra03:30
*** auristor has quit IRC03:31
*** threestrands has quit IRC03:31
*** hongbin has quit IRC03:34
*** psachin has joined #openstack-infra03:36
*** auristor has joined #openstack-infra03:45
*** ykarel has joined #openstack-infra03:57
*** ramishra has joined #openstack-infra04:00
*** tdasilva has quit IRC04:04
*** jaosorior has quit IRC04:05
*** tdasilva has joined #openstack-infra04:05
*** apetrich has quit IRC04:20
*** udesale has joined #openstack-infra04:23
*** gary_perkins has quit IRC04:32
*** gary_perkins has joined #openstack-infra04:33
*** whoami-rajat has joined #openstack-infra04:40
*** ykarel is now known as ykarel|afk04:40
*** ykarel|afk has quit IRC04:45
*** jaosorior has joined #openstack-infra05:04
*** tdasilva has quit IRC05:06
*** tdasilva has joined #openstack-infra05:06
*** ykarel|afk has joined #openstack-infra05:13
*** ykarel|afk is now known as ykarel05:13
*** ricolin__ has joined #openstack-infra05:21
*** ricolin_ has quit IRC05:24
*** cloudnull has quit IRC05:25
*** d34dh0r53 has quit IRC05:25
*** bgmccollum has quit IRC05:25
*** yamamoto has quit IRC05:26
*** yamamoto has joined #openstack-infra05:27
*** jamesmcarthur_ has quit IRC05:28
*** rascasoft has quit IRC05:30
*** kopecmartin|off is now known as kopecmartin05:48
*** shachar has quit IRC06:05
*** shachar has joined #openstack-infra06:05
*** tdasilva has quit IRC06:07
*** bgmccollum has joined #openstack-infra06:07
*** tdasilva has joined #openstack-infra06:07
*** cloudnull has joined #openstack-infra06:17
*** d34dh0r53 has joined #openstack-infra06:17
*** dpawlik has joined #openstack-infra06:33
*** dpawlik has quit IRC06:38
*** dpawlik has joined #openstack-infra06:43
openstackgerritTobias Henkel proposed zuul/zuul master: Add support for smart reconfigurations  https://review.opendev.org/65211406:49
openstackgerritTobias Henkel proposed zuul/zuul master: Add --check-config option to zuul scheduler  https://review.opendev.org/54216006:49
*** ginopc has joined #openstack-infra06:51
*** slaweq has joined #openstack-infra06:53
*** rpittau|afk is now known as rpittau06:58
*** yoctozepto has quit IRC07:00
*** jaosorior has quit IRC07:01
*** rcernin has quit IRC07:02
*** tdasilva has quit IRC07:08
*** pgaxatte has joined #openstack-infra07:08
*** tdasilva has joined #openstack-infra07:09
*** tesseract has joined #openstack-infra07:11
*** Goneri has joined #openstack-infra07:20
*** xek has joined #openstack-infra07:20
openstackgerritMerged openstack/diskimage-builder master: fix comments / spelling errors in gentoo element  https://review.opendev.org/67329507:22
*** tosky has joined #openstack-infra07:24
*** jpena|off is now known as jpena07:24
*** pkopec has joined #openstack-infra07:28
*** aedc has joined #openstack-infra07:31
*** ykarel is now known as ykarel|lunch07:42
*** ricolin__ is now known as ricolin07:44
*** Goneri has quit IRC07:56
*** roman_g has joined #openstack-infra07:57
*** ralonsoh has joined #openstack-infra07:58
*** dtantsur|afk is now known as dtantsur08:07
*** priteau has joined #openstack-infra08:08
*** lucasagomes has joined #openstack-infra08:09
*** yoctozepto has joined #openstack-infra08:09
*** tdasilva has quit IRC08:10
*** tdasilva has joined #openstack-infra08:10
*** happyhemant has joined #openstack-infra08:12
*** aedc has quit IRC08:13
*** dchen has quit IRC08:16
*** lpetrut has joined #openstack-infra08:18
*** derekh has joined #openstack-infra08:27
*** gregoryo has quit IRC08:29
*** roman_g has quit IRC08:43
*** e0ne has joined #openstack-infra08:45
*** jaosorior has joined #openstack-infra08:45
*** ykarel|lunch is now known as ykarel|08:46
*** ykarel| is now known as ykarel08:46
openstackgerritMatthieu Huin proposed zuul/zuul master: Zuul CLI: allow access via REST  https://review.opendev.org/63631508:46
*** tdasilva_ has joined #openstack-infra08:46
*** tdasilva has quit IRC08:50
*** apetrich has joined #openstack-infra08:59
*** Goneri has joined #openstack-infra09:02
*** tkajinam has quit IRC09:03
*** SotK has quit IRC09:06
*** SotK has joined #openstack-infra09:08
*** dpawlik has quit IRC09:45
*** dpawlik has joined #openstack-infra09:51
*** dansmith has quit IRC09:52
*** bradm has quit IRC09:54
*** ianw has quit IRC09:55
*** dpawlik has quit IRC09:57
*** dansmith has joined #openstack-infra09:58
*** ianw has joined #openstack-infra09:59
*** betherly has joined #openstack-infra10:01
*** xinranwang has joined #openstack-infra10:08
*** gfidente has joined #openstack-infra10:13
*** ociuhandu has joined #openstack-infra10:17
*** ociuhandu_ has joined #openstack-infra10:25
*** ociuhandu has quit IRC10:25
*** dpawlik has joined #openstack-infra10:29
*** bhavikdbavishi has joined #openstack-infra10:31
*** yamamoto has quit IRC10:32
*** udesale has quit IRC10:38
*** Lucas_Gray has joined #openstack-infra10:44
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: WIP: Allow ensure-tox to upgrade tox version  https://review.opendev.org/67276010:44
*** bhavikdbavishi has quit IRC11:01
*** tdasilva_ is now known as tdasilva11:04
*** yamamoto has joined #openstack-infra11:12
*** yamamoto has quit IRC11:18
*** yamamoto has joined #openstack-infra11:19
*** Lucas_Gray has quit IRC11:19
*** ociuhandu_ has quit IRC11:34
*** jpena is now known as jpena|lunch11:35
*** ociuhandu has joined #openstack-infra11:35
*** ramishra has quit IRC11:35
*** Lucas_Gray has joined #openstack-infra11:36
*** ramishra has joined #openstack-infra11:46
*** jamesmcarthur has joined #openstack-infra11:50
*** dpawlik has quit IRC11:52
*** yamamoto has quit IRC11:57
*** jamesmcarthur has quit IRC12:03
*** jaosorior has quit IRC12:07
*** yamamoto has joined #openstack-infra12:12
*** ociuhandu has quit IRC12:14
*** jcoufal has joined #openstack-infra12:14
*** dpawlik has joined #openstack-infra12:16
*** yamamoto has quit IRC12:17
*** eharney has joined #openstack-infra12:23
*** psachin has quit IRC12:25
*** ykarel is now known as ykarel|afk12:32
*** ricolin has quit IRC12:35
*** yamamoto has joined #openstack-infra12:37
*** ykarel|afk has quit IRC12:38
*** jpena|lunch is now known as jpena12:42
*** jamesmcarthur has joined #openstack-infra12:44
*** xinranwang has quit IRC12:47
*** ociuhandu has joined #openstack-infra12:50
*** jamesmcarthur has quit IRC12:51
jpenahi! I just noticed the centos AFS mirror has not been updated since 6 days ago (http://grafana.openstack.org/d/ACtl1JSmz/afs?orgId=1&fullscreen&panelId=14). Is it expected or an issue?12:51
*** jaosorior has joined #openstack-infra12:54
*** ykarel|afk has joined #openstack-infra13:00
*** ykarel|afk is now known as ykarel13:00
*** joeguo has quit IRC13:01
*** jamesmcarthur has joined #openstack-infra13:01
*** iurygregory has quit IRC13:02
*** jamesmcarthur has quit IRC13:02
*** jamesmcarthur has joined #openstack-infra13:03
*** jcoufal has quit IRC13:04
*** sthussey has joined #openstack-infra13:11
*** mriedem has joined #openstack-infra13:13
*** n-saito has quit IRC13:15
*** aedc has joined #openstack-infra13:16
*** aaronsheffield has joined #openstack-infra13:21
fricklerjpena: this seems to be an issue with quotas: rsync: close failed on "/afs/.openstack.org/mirror/centos/7/updates/x86_64/Packages/.java-11-openjdk-jmods-11.0.4.11-0.el7_6.i686.rpm.tI3lf0": Disk quota exceeded (122)13:22
donnydtoday I think we are just waiting on https://review.opendev.org/#/c/673378/ to be merged. The parts I was waiting on came in yesterday13:22
*** goldyfruit has joined #openstack-infra13:24
fricklerinfra-root: the above quota issue seems to also block other rsyncs like opensuse, which doesn't seem to have been executed for a couple of days13:25
*** jcoufal has joined #openstack-infra13:26
*** iurygregory has joined #openstack-infra13:29
*** smrcascao9 has joined #openstack-infra13:31
smrcascao9hi guys13:31
smrcascao9do you can recomend me some framework or way to test my cluster openstack ?13:31
fungismrcascao9: you're probably looking for https://refstack.openstack.org/13:33
*** yamamoto has quit IRC13:33
fungismrcascao9: if you're looking for something more rigorous than interoperability testing (you haven't said), then you may consider asking in the #openstack-qa channel13:34
fungithey maintain a variety of tools for holistically testing changes to openstack13:34
smrcascao9hi fungi thanks for your response13:34
smrcascao9i m looking for same ways to test my infra13:34
smrcascao9i m using openstack with openshift13:35
smrcascao9and i need have some way to test them13:35
openstackgerritMerged openstack/project-config master: set FN to boot from volume for Cinder NVME backend  https://review.opendev.org/67337813:36
*** yamamoto has joined #openstack-infra13:36
*** yamamoto has quit IRC13:36
*** yamamoto has joined #openstack-infra13:37
fungismrcascao9: you've accidentally found the irc channel where we collaborate on maintaining the developer infrastructure for the openstack community. this is not a channel about building an infrastructure with openstack13:39
*** aedc has quit IRC13:40
fungiwe maintain revision control systems, mailing lists, irc bots, wikis, continuous integration services, code review systems and that sort of stuff13:41
smrcascao9thanks for all fungi and sorry my mistake :)13:41
fungismrcascao9: see https://wiki.openstack.org/wiki/IRC for a list of openstack irc channels and their uses13:41
*** yamamoto has quit IRC13:42
efriedcorvus: I think I figured out what gertty was doing with all those sync tasks yesterday...13:47
efriedI happened to have some old, stale repos cloned under what gertty thought was my git root. And now, the last-mod stamps on them are current. Which means gertty saw them and, I guess, refreshed them, even the ones I'm not "subscribed to".13:48
donnydsmrcascao9: maybe also give #openstack-mentoring a spin13:49
*** tdasilva has quit IRC13:49
fungiooh, great idea donnyd13:49
donnyd:)13:49
fungiefried: gertty will also fetch changes in projects you're not subscribed to if you open them directly or follow a depends-on or similar url from another change you're viewing13:50
donnydSo I am measuring the fdowload speeds for glance, and they are borderline painful. 40G network, tons of cores, and nvme local storage.. glance should be able to do more than 98Mb/s in download speeds13:50
fungiefried: that's where a bunch of my "extra" repos end up coming from13:50
efriedfungi: Noted, but these were repos under a directory I hadn't touched since... before I installed this computer. (they were copied over from a former disk image)13:51
fungidonnyd: ouch. is that how fast nova is fetching images to warm its cache?13:51
fungiefried: yeah, i find that strange too13:51
donnydcinder is the backend because I boot from volume. Setup cinder image-cache so I don't have to pay for that slow speed on every instance13:52
*** yikun has quit IRC13:52
donnydI have load tested up to 30 simultaneous instance launches without the image cached... just to make sure it will work well.. the first instance takes a bit from the slow glance speeds13:53
donnydbut the ones after boot up quickly like they do in ceph13:53
donnydefried: yea, I can't really figure out why the speeds are so slow on essentially an http server and local files13:54
*** factor has joined #openstack-infra13:54
*** tdasilva has joined #openstack-infra13:54
donnydI am testing it with a swift backend to see if its any faster tonight13:54
fungiwhere does glance currently store its images? local disk?13:55
fungiit does seem like there could be some optimization opportunity if glance was storing images in cinder and then cinder was serving those images as the basis for boot volumes13:55
donnydyea13:56
fungii have no idea if anything like that is implemented as a feature though13:56
donnydI am a little tight on space in cinder, so I can't really do that. Have to use a different server... but with local nvme, I can easily outperform a 10G link... and start getting into 40G territory.. the performance I am getting is a lot like 1G territory13:57
fungijumbo frames on that broadcast domain?13:58
fungigranted, even normal ethernet frame sizes should be capable of more than you're seeing13:58
donnydNo13:59
donnydI only use jumbo for iscsi, i don't want to deal with mtu games13:59
donnydwe would be talking maybe an extra 50Mb/s with jumbos anyways13:59
donnydyea, I would surely think so13:59
fungiyou ought to at least be able to do close to 1gbps with a single flow at normal mtu sizes13:59
donnydThat is what I am thinking14:00
fungigranted if you want to push beyond 1gbps you either need larger frames or additional flows14:00
fungibut you're still an order of magnitude from there, sounds like14:00
donnydsingle threaded read on local disk14:01
fungihas some link gone back in time and autonegotiated 100mbps like it's the 90s all over again?14:01
donnydRun status group 0 (all jobs):14:01
donnyd   READ: bw=2558MiB/s (2683MB/s), 2558MiB/s-2558MiB/s (2683MB/s-2683MB/s), io=4096MiB (4295MB), run=1601-1601msec14:01
donnydLOL14:01
donnydso its surely not a local disk read issue14:01
donnydeven tiny little 4k blocks i see 4x more in performance14:02
donnyd   READ: bw=405MiB/s (425MB/s), 405MiB/s-405MiB/s (425MB/s-425MB/s), io=4096MiB (4295MB), run=10104-10104msec14:02
*** rpittau is now known as rpittau|afk14:02
fungiand you're sure the transfers are only managing 100 megabits per second, not 100 megabytes per second?14:02
donnydSo there will be a bit more tinkering to get glance tuned up and running well14:03
fungithe latter isn't too far off from the theoretical limit of normal frame sizes through a single flow14:03
*** e0ne has quit IRC14:04
fungiso if it was 100 megabytes per second i'd say you were in the ballpark of what to expect14:04
donnydwell the other http servers I have on my network have no issues with getting at least half of wireline for 10G14:04
fungi(unless glance parallelizes transfers)14:04
donnydwhich is a lot more like 500Mb/s14:04
efriedfungi: How does a guy expand/see inline comments in gertty?14:06
donnydsingle thread network performance from cinder volume server to glance14:06
donnyd[  5]   0.00-1.00   sec  1.48 GBytes  12.7 Gbits/sec   88   1.21 MBytes14:06
donnyd[  5]   1.00-2.00   sec  2.45 GBytes  21.0 Gbits/sec    0   1.50 MBytes14:06
donnyd[  5]   2.00-3.00   sec  2.54 GBytes  21.8 Gbits/sec   17   1.47 MBytes14:06
donnyd[  5]   3.00-4.00   sec  1.41 GBytes  12.1 Gbits/sec   13   1.50 MBytes14:06
donnyd[  5]   4.00-5.00   sec  2.88 GBytes  24.8 Gbits/sec   71   1.14 MBytes14:06
donnyd[  5]   5.00-6.00   sec  3.09 GBytes  26.5 Gbits/sec  128    851 KBytes14:06
donnyd[  5]   6.00-7.00   sec  3.20 GBytes  27.5 Gbits/sec    2   1.68 MBytes14:06
donnyd[  5]   7.00-8.00   sec  2.74 GBytes  23.6 Gbits/sec   95   1.34 MBytes14:06
donnyd[  5]   8.00-9.00   sec  3.04 GBytes  26.2 Gbits/sec  108   1.25 MBytes14:06
donnyd[  5]   9.00-10.00  sec  3.04 GBytes  26.1 Gbits/sec   60   1.33 MBytes14:06
donnyd- - - - - - - - - - - - - - - - - - - - - - - - -14:06
donnyd[ ID] Interval           Transfer     Bitrate         Retr14:06
donnyd2019-07-30 10:06:18.643 2346 INFO cinder.image.image_utils [req-fa0cacd1-f9ba-4da2-be18-b2396a05d397 4970ad73e2554071a348e168b3e8ebe4 44651bdb0d7a4d28adecd7653d39a38c - - -] Image download 6567.94 MB at 101.05 MB/s14:07
donnyd2019-07-30 10:07:00.724 2346 INFO cinder.image.image_utils [req-fa0cacd1-f9ba-4da2-be18-b2396a05d397 4970ad73e2554071a348e168b3e8ebe4 44651bdb0d7a4d28adecd7653d39a38c - - -] Converted 16118.62 MB image at 405.34 MB/s14:07
fungiefried: same way a girl does... they just show up expanded by default when looking at the diff i think? granted i have unified diff turned on rather than side-by-side so i don't know if that influences it14:08
* fungi didn't realize gertty was gender aware, but will double-check the source code ;)14:09
efriedfungi: I have whatever the default diff is, and I'm not seeing them in the diff. /me checks again...14:09
efriedyeah, apparently so.14:09
AJaegerfungi: tell us once you find the magic config option ;)14:10
efriedoh, I'm looking at the latest PS, but the comment I was looking for is in an earlier PS.14:10
fungiefried: you might be looking at an old revision of a change if it hasn't synced yet. ctrl-r in the change view will prioritize syncing that change14:11
fungiefried: oh, if you want to see inline comments for an earlier patchset, you can either select the diff option for that specific patchset in the change view, or you can hit the p key (by default if you haven't remapped it) in the diff view to select start and end patchsets for the diff14:12
efriedfungi: When I made the earlier PS show up in the diff, the comment appeared.14:12
efriednot sure how to save my reply though14:17
fungiefried: if you hit enter on a line you can just start typing and when you exit it will be saved with your review (when you use the reply button on the change view or whatever)14:18
*** ykarel is now known as ykarel|away14:19
efriedfungi: "exit" like Esc?14:19
fungiesc or whatever you've bound to exit the diff view, yes14:19
efriedgertty semes to be remembering my comment, but when I did a reply on the review, it didn't get pushed.14:19
*** yamamoto has joined #openstack-infra14:19
fungiwas the comment associated with a different patchset than the current patchset?14:19
efriedthe comment was on a non-latest patch set, which I'm assuming... yes14:19
fungiyou need to reply to that patchset then14:20
fungisame as in the gerrit webui, i believe14:20
fungidonnyd: definitely looks like something with glance is suboptimal, i agree. it it going through apache mod_wsgi?14:21
efriedfungi: no, in webui your change gets saved regardless. If you're on PS4 and you save a PS3 comment, it shows up tagged with 'PS3'14:21
efriedbut it always saves14:21
fungidonnyd: not that i have the first clue how to tune that14:21
efriedtrying to figure out how to "be" on an earlier ps from the change set view...14:21
fungieither select the diff button for the patchset you want to comment on or use 'p' to set that patchset as the current one (right column) in the diff view14:22
donnydfungi: Its not right now, but I am surely going to test all the options to see what gives the best performance14:22
fungiefried: you probably need to expand that patchset in the change view to see the buttons for it (move your cursor line over it and press return). and then use the review button for that patchset (exposed the same way) to save comments for it14:23
fungiefried: where it says "Patch Set 2 abcdefsomehash..." or whatever in the change view14:24
fungihighlight that line and hit enter and you get its file list and buttons like < Review >  < Diff >  < Local Checkout >  < Local Cherry-Pick >14:25
fungiefried: it's set up basically like the "old change screen" in gerrit 2.8 and before, but if you never used older versions of gerrit it may not be as intuitive i guess14:25
fungi(the "new" change screen we have in the 2.13 webui is terrible in my opinion)14:26
efriedfungi: Okay, at least one of my attempts therein seems to have worked.14:26
*** michael-beaver has joined #openstack-infra14:27
*** sreejithp has joined #openstack-infra14:27
efriedI never used "old", and I have no complaints about "new". What wasn't intuitive here was that, when I punched Review, nothing showed up in the box. As in the web UI, it would be nice if my inline comments were displayed (read-only) so I know they're getting committed.14:27
efriedand also as in the webui, it would be nice if all my inline comments were pushed, regardless of which ps I left them on and which ps I'm technically "responding" to.14:28
*** yamamoto has quit IRC14:28
efriedI guess I should start storyboarding these things...14:29
*** Lucas_Gray has quit IRC14:29
*** Lucas_Gray has joined #openstack-infra14:32
*** Lucas_Gray has quit IRC14:32
smcginnisdonnyd: It looks like the single threadedness comes down to the way the glanceclient downloads and uploads images.14:33
*** e0ne has joined #openstack-infra14:33
smcginnisdonnyd: It ends up using the requests library to make those calls, and they are single calls per image from what I could glean.14:33
*** dpawlik has quit IRC14:34
smcginnisI don't believe there is anything built in to requests to try to multithread a download.14:34
AJaegerinfra-root, tc-as-a-service repo was imported but never used, cores not even setup. I'm in contact of one of the authors and they say it's dead. I'll go through the usual retirement process - but could you add me to https://review.opendev.org/#/admin/groups/1769,members , please? The list is currently empty.14:35
mordredAJaeger: done14:36
AJaegerthanks, mordred14:36
fungihe's faster than i am14:36
clarkbtc-as-a-service, that is what fungi does for us right?14:36
*** bobh has joined #openstack-infra14:36
mordredsmcginnis: we multithread image uploads in sdk - if the upload is going to swift14:37
AJaeger;)14:37
mordredif there is a way to upload chunks in paralell that would be supported by glance server-side, we've got the things in place to make use of it sdk-sie14:37
mordredside14:38
elodhi infra team! I have a question regarding excluding a job: in murano (stable/ocata), the following job runs on my patch: https://opendev.org/openstack/openstack-zuul-jobs/src/branch/master/zuul.d/jobs.yaml#L688 . However there isn't any install-guide in ocata branch of murano. Is there a way to exclude this job? Somehow in .zuul.yaml of the branch/project?14:38
smcginnismordred: Is that using the glance client, or was this part of the direct implementation in the SDK?14:38
mordredsmcginnis: direct. we don't use any *client libs14:39
*** factor has quit IRC14:39
*** factor has joined #openstack-infra14:39
smcginnismordred: But yeah, I don't think there is any support on the glance side to do chunked based uploads that would allow splitting up an image and pushing in parallel.14:39
mordredyeah. that would be the first bit14:39
*** Lucas_Gray has joined #openstack-infra14:39
*** pgaxatte has quit IRC14:39
mordredhowever - should someone implement that, we'd happily consume it :)14:39
smcginnisI'm kind of suprised no one has pushed that yet.14:40
mordredit is one of the (very few) nice parts about the "upload to swift then have glance import from swift" workflow14:40
donnydwsgi is the same result14:41
mordredthe rest of that workflow blows - but the "upload to swift" part works real well because of the parallel chunk uploading14:41
donnydmaybe a swift backend will do parallel downloading too14:41
clarkbelod: can you link to an example job (that gives us information on where it is defined for that project)14:42
elodclarkb: this is the job: https://opendev.org/openstack/openstack-zuul-jobs/src/branch/master/zuul.d/jobs.yaml#L68814:42
clarkbsorry can you link to the logs of an example build of that job?14:43
openstackgerritAndreas Jaeger proposed openstack/project-config master: Start retiring tc-as-a-service  https://review.opendev.org/67354314:43
AJaegerand here'S step one for retiring the repo ^14:43
elodclarkb: and this is the project's zuul.yaml: https://review.opendev.org/#/c/668181/1/.zuul.yaml14:43
clarkbthe inventory of the job (whcih we log) contains details on why zuul decided to run that job. From that we can figure out the best way to exclude it14:43
*** icarusfactor has joined #openstack-infra14:43
elodclarkb: and the logs: http://logs.openstack.org/81/668181/1/check/build-openstack-install-guide/c90482a/14:44
AJaegerelod: do you have isntall-guide on any branch? It'S in project-config set up for your repo...14:44
elodAJaeger: in pike there was, but after a while it was refactored as I saw14:44
clarkbit does not come from publish-openstack-docs-pti14:45
AJaegerelod: so, one way: Remove the job completely - and neither publish on pike or ocata anymore...14:45
AJaegerclarkb:  install-guide-jobs in project-config14:45
clarkbhttp://logs.openstack.org/81/668181/1/check/build-openstack-install-guide/c90482a/zuul-info/inventory.yaml is the log file I'm looking for14:45
clarkbAJaeger: thanks14:45
*** factor has quit IRC14:46
*** jcoufal has quit IRC14:46
AJaegerI assume nobody will touch it in pike either, so removing the template is the quickest approach. But if you want to run it on pike, it needs a bit more work...14:46
AJaegerSorry, need to step out for a bit...14:46
clarkbsmcginnis: elod fyi https://opendev.org/openstack/openstack-zuul-jobs/src/branch/master/zuul.d/project-templates.yaml#L77-L103 that is what publish-openstack-docs-pti gets you14:47
clarkbelod: as AJaeger points out it comes from https://opendev.org/openstack/project-config/src/branch/master/zuul.d/projects.yaml#L280114:47
clarkbelod: you can remove that line as AJaeger suggests assuming you don't need it for pike. If you do want it for pike you'll need to remove the template then add the jobs back with a branch match for only pike. You can do that in the pipeline definition I just linked too14:48
*** icarusfactor has quit IRC14:50
*** icarusfactor has joined #openstack-infra14:50
clarkbdonnyd: looks like most of our images have been uploaded to fn at this point (debian buster and opensuse 423 seem to have failed?)14:50
elodclarkb: thanks, looking14:50
donnydclarkb: if they are trying in the last 30 minutes or so I am moving to wsgi to see if performance is any better14:51
*** bhavikdbavishi has joined #openstack-infra14:52
*** dklyle has quit IRC14:52
clarkbdonnyd: Ithink they are failing because we are failing to build newer images for those image types14:52
clarkbI'll have to look at build logs when meetings are complete14:53
*** dklyle has joined #openstack-infra14:53
*** takamatsu has joined #openstack-infra14:54
*** e0ne has quit IRC14:54
*** icarusfactor has quit IRC14:55
*** factor has joined #openstack-infra14:56
*** bhavikdbavishi has quit IRC14:56
*** bdodd has joined #openstack-infra14:58
clarkb2019-07-30 15:00:41.879 | E: Failed to fetch http://mirror.dfw.rax.openstack.org/debian/dists/buster-backports/main/binary-amd64/Packages  404  Not Found [IP: 2001:4800:7817:103:be76:4eff:fe04:652a 80]15:01
clarkbI'm guessing backports did not exist when we set that up but now does exist?15:02
clarkbbut also there was notes of rsyncs failing due to disk space?15:02
*** e0ne has joined #openstack-infra15:04
clarkbI think we are configured to pull backports for buster but they don't exist on our mirror. Will need to dig more after meetings15:04
*** hamzy has quit IRC15:12
*** bhavikdbavishi has joined #openstack-infra15:14
*** ricolin has joined #openstack-infra15:14
clarkbfungi: http://cacti.openstack.org/cacti/graph_view.php you can see the git gc :)15:28
*** chandankumar is now known as raukadah15:29
*** eernst has joined #openstack-infra15:29
*** Goneri has quit IRC15:30
*** kopecmartin is now known as kopecmartin|off15:30
openstackgerritMatthieu Huin proposed zuul/zuul master: Add Authorization Rules configuration  https://review.opendev.org/63985515:32
openstackgerritMatthieu Huin proposed zuul/zuul master: Web: plug the authorization engine  https://review.opendev.org/64088415:32
openstackgerritMatthieu Huin proposed zuul/zuul master: Zuul Web: add /api/user/authorizations endpoint  https://review.opendev.org/64109915:32
openstackgerritMatthieu Huin proposed zuul/zuul master: authentication config: add optional token_expiry  https://review.opendev.org/64240815:32
AJaegerconfig-core, could you review https://review.opendev.org/673543 , please?15:32
*** mriedem has quit IRC15:33
AJaegerthanks, mnaser and clarkb !15:34
openstackgerritAndreas Jaeger proposed openstack/project-config master: Finish retiring tc-as-a-service  https://review.opendev.org/67356315:35
*** mriedem has joined #openstack-infra15:35
donnydclarkb: I am going to open up the tap a little and watch what it does. the glance thing is what it is. I will work towards a faster fix, but for now it's not going to be too much different from the other providers15:35
AJaegerconfig-core, a simple job rename for grafana, please review https://review.opendev.org/67229015:36
fungidonnyd: yeah, we're used to seeing a brief spike in boot times immediately after images are uploaded15:36
clarkbdonnyd: ok15:36
clarkbdonnyd: our popular iamges are all in fn now so you should have plenty of workload happy to run there15:36
snierodzAJaeger: we've put up a few patches since the 'Depends-On' link error and we are getting closer to fixing the gate but we're currently running into a MYSQL error in our functional tests. Link:http://logs.openstack.org/25/672725/12/check/neutron-classifier-functional-dsvm/1ca6378/job-output.txt.gz#_2019-07-30_13_08_37_89074215:37
*** ykarel|away has quit IRC15:38
snierodzThe issue is to do with mysql being preinstalled and its failling to install and update the password as a result15:38
snierodzWould you have any tips in resolving this type of error?15:39
*** whoami-rajat has quit IRC15:39
AJaegersnierodz: better ask the QA team on #openstack-qa, I have no direct idea15:39
snierodzAJaeger: no worries, thanks15:40
donnyduggg... so something is wrong with the networking... because when nodepool launches an instance its only getting a v6 address15:40
*** ekultails has joined #openstack-infra15:42
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Fix typo in download-artifact  https://review.opendev.org/67356615:46
openstackgerritMerged openstack/project-config master: Start retiring tc-as-a-service  https://review.opendev.org/67354315:47
donnydAny ideas on why it would be ?15:47
donnydhttps://www.irccloud.com/pastebin/fx4LwDB2/15:47
clarkbdonnyd: is there a default ipv4 subnet/network?15:48
donnydSo when i launch an instance on my end using the network flag, it grabs ip addresses from both... but when nodepool does it, its only getting v615:48
clarkband by default I think neutron uses the only one that is present otherwise you have to specifiy15:48
clarkbmordred: ^ may also know since that likely involves openstacksdk and client config15:48
donnydits a dual stack network just like before15:48
mordredis nodepool configured with the network flag too?15:50
openstackgerritMerged zuul/zuul master: Spec: Add a Kubernetes Operator for Zuul  https://review.opendev.org/65918015:50
clarkbmordred: it shouldn't be15:50
clarkbshould rely on the defaults of pick the only network available I think15:51
mordredif there are more than one available network that a vm can attach to and no other config or distinguishing features, sdk will pick the first one15:51
openstackgerritMerged zuul/zuul-jobs master: Update testing section  https://review.opendev.org/67282015:51
mordredoh - that is - v6_test should be the network, right?15:51
mordredand that's the one it's using and it's getting the v6 address?15:51
mordredwhen you say "nodepool is only getting the v6" ... what does that mean?15:52
*** gyee has joined #openstack-infra15:52
clarkbmordred: https://www.irccloud.com/pastebin/fx4LwDB2/ the instances do not get ipv4 addresses from neutron, only ipv6 addresses15:52
clarkbthey should get a global routable ipv6 addr and a private 10 net ipv4 addr that is NATed when talking to github15:53
clarkbmordred: the v6_test instance got both15:53
mordredoh - I'm reading that paste better now15:53
mordredit's the openstackzuul network that is providing both v4 and v6?15:53
clarkblooks like it yes15:54
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: WIP: Allow ensure-tox to upgrade tox version  https://review.opendev.org/67276015:54
mordredok. then that's weird - there shouldn't be much sdk can do related to that operation. it's going to do create_server(network='openstackzuul') *handwave* - and if openstackzuul is configured to give both addresses that's what will happen15:54
clarkbdonnyd: is the ipv4 ip range/dhcp pool big neough to hand out more than the one addr?15:55
fungidonnyd: when you say "when i launch an instance on my end using the network flag" are you using openstackclient/openstacksdk? or something else?15:55
donnydosc15:55
mordredis it possible that the v6_test instance was created by a different user on this project and that user had a different set of permissions, and that possibly the subnet on the network isn't usable by the nodepool user?15:55
donnydopenstack server create --image fedora-30 --flavor 8cpu-8GBram-80GBdisk --key-name precision --network openstackzuul v6_test15:55
mordredclarkb: that too15:55
donnydthat is possible15:56
* mordred LOVES that a server boot requests a network, but the qualities a user cares about are the subnet objects, which cannot be selected at boot15:56
mordredLOVES that15:57
clarkbmordred: that is because neutron decided to go with a literal network abstraction15:57
clarkb#status log Increased AFS quota for /afs/.openstack.org/mirror/ubuntu and /afs/.openstack.org/mirror/centos by 50GB each.15:57
openstackstatusclarkb: finished logging15:57
clarkbthe RO/backup volumes don't reflect that increase yet but I think they will after their next vos release15:57
clarkbI'm going to get bike ride out of the way now, but then will be back to dig into fn networking and debian buster mirroring as necessary when I return15:58
clarkbfungi: ^ you might have ideas on the buster backports mirroring? we seem to have plenty of quota for it15:58
clarkband we don't exclude it from what I see15:58
*** e0ne has quit IRC15:59
*** dtantsur is now known as dtantsur|afk16:00
donnydmordred: I think you nailed it16:00
donnydopenstack subnet list16:00
donnyd+--------------------------------------+------------------+--------------------------------------+-------------------------+16:00
donnyd| ID                                   | Name             | Network                              | Subnet                  |16:00
donnyd+--------------------------------------+------------------+--------------------------------------+-------------------------+16:00
donnyd| d4950399-ead2-430a-a140-bb00aa994439 | openstackzuul_v6 | 3b5f94f2-8fd7-4626-b90e-c602ccbf9320 | 2001:470:e045:8000::/64 |16:00
donnyd+--------------------------------------+------------------+--------------------------------------+-------------------------+16:00
donnydchanged myself to a regular member and i cannot see the subnet16:00
donnydeasy fix16:00
donnydthanks16:00
openstackgerritMerged zuul/zuul-jobs master: Fix typo in download-artifact  https://review.opendev.org/67356616:01
openstackgerritElod Illes proposed openstack/project-config master: Remove old install-guide-jobs from murano  https://review.opendev.org/67357416:01
donnydhttps://www.irccloud.com/pastebin/wJfy78EV/16:03
mordred\o/16:03
donnydYea, now it should be good to go. Thank you mordred :)16:03
mordreddonnyd: I think this means I know too much about the api structure16:03
fungiclarkb: i think there is no actual backports suite for buster yet? i'll double-check16:04
donnydwhat i don't understand is the v6 network was created the exact same way at the v4 netwokr16:04
donnydI have my finger crossed that performance is as good in testing as it is in real life16:06
donnydiops per instance are up 4X16:06
elodclarkb AJaeger : can you please review my patch? I looked at the files you showed me and... Is my thinking correct, that I can safely remove install-guide-jobs for murano? https://review.opendev.org/67357416:06
donnydunder load before 10K.. now 50k(ish)16:06
*** whoami-rajat has joined #openstack-infra16:07
AJaegerelod: LGTM16:07
donnydwhat does the "ready nodes" metric represent in grafana?16:08
Shrewsdonnyd: nodes that are booted and ready to be assigned to a node request from zuul16:08
donnydIC16:08
fungiclarkb: looks like buster-backports does have contents on debian's mirrors now. i'll take a closer look at the log16:09
elodAJaeger: thanks!16:09
*** panda has quit IRC16:09
*** lpetrut has quit IRC16:11
*** panda has joined #openstack-infra16:13
*** Lucas_Gray has quit IRC16:14
fungiclarkb: looks to be a missing/incorrect key reprepro is trying to check for a signature from:16:18
fungiERROR: Condition '2B90D010' not fullfilled for '/afs/.openstack.org/mirror/debian/lists/debian_buster_Release.gpg'.16:18
openstackgerritMerged zuul/zuul master: Zuul CLI: allow access via REST  https://review.opendev.org/63631516:18
fungiError: Not enough signatures found for remote repository debian (http://ftp.us.debian.org/debian buster)!16:18
*** ykarel|away has joined #openstack-infra16:19
openstackgerritJeff Liu proposed zuul/zuul-jobs master: Add auth config to kubelet user for buildset registries  https://review.opendev.org/67335116:19
*** lucasagomes has quit IRC16:20
*** lseki has joined #openstack-infra16:21
*** sparkycollier has quit IRC16:23
*** evgenyl has quit IRC16:24
AJaegerconfig-core, https://review.opendev.org/673563 finishes retiring of tc-as-a-service. Could I get review-as-a-service, please?16:24
AJaegerbbl16:24
*** JpMaxMan has quit IRC16:24
*** tdasilva_ has joined #openstack-infra16:24
*** sparkycollier has joined #openstack-infra16:25
*** ginopc has quit IRC16:26
*** JpMaxMan has joined #openstack-infra16:26
*** evgenyl has joined #openstack-infra16:26
*** tdasilva has quit IRC16:27
*** rajinir has quit IRC16:28
*** rajinir has joined #openstack-infra16:30
fungiclarkb: i think i found where to solve it, just trying to figure out what keys we should be including there16:30
*** factor has quit IRC16:31
*** factor has joined #openstack-infra16:31
*** trident has quit IRC16:32
*** igordc has joined #openstack-infra16:33
*** gfidente has quit IRC16:33
*** Goneri has joined #openstack-infra16:33
*** JpMaxMan has quit IRC16:33
*** evgenyl has quit IRC16:34
*** pcrews has quit IRC16:35
*** evgenyl has joined #openstack-infra16:36
*** rajinir has quit IRC16:36
*** JpMaxMan has joined #openstack-infra16:37
*** trident has joined #openstack-infra16:37
*** rajinir has joined #openstack-infra16:38
*** jpena is now known as jpena|off16:38
*** sgw has quit IRC16:42
*** JpMaxMan_ has joined #openstack-infra16:46
*** ociuhandu has quit IRC16:46
*** ociuhandu has joined #openstack-infra16:47
*** JpMaxMan has quit IRC16:47
*** JpMaxMan_ is now known as JpMaxMan16:47
*** sparkycollier_ has joined #openstack-infra16:47
*** sparkycollier has quit IRC16:47
*** sparkycollier_ is now known as sparkycollier16:47
*** jcoufal has joined #openstack-infra16:48
*** Goneri has quit IRC16:50
donnydfungi: or clarkb Can I add a second interface to the mirror node. It would seem something doesn't work correctly with routing traffic on the v6 side16:52
*** jcoufal_ has joined #openstack-infra16:53
*** goldyfruit has quit IRC16:53
donnydhttp://logs.openstack.org/53/673553/2/check/openstack-tox-py27/eb478d4/job-output.txt#_2019-07-30_15_58_50_93446416:54
*** bhavikdbavishi has quit IRC16:54
donnydbrb16:54
*** jcoufal has quit IRC16:56
*** bhavikdbavishi has joined #openstack-infra16:56
*** sshnaidm is now known as sshnaidm|afk16:58
*** jamesmcarthur has quit IRC17:00
*** derekh has quit IRC17:01
*** Goneri has joined #openstack-infra17:03
*** markvoelker has quit IRC17:03
*** bhavikdbavishi has quit IRC17:07
*** bhavikdbavishi has joined #openstack-infra17:07
*** ociuhandu has quit IRC17:07
*** ricolin has quit IRC17:11
*** bhavikdbavishi has quit IRC17:17
*** bhavikdbavishi has joined #openstack-infra17:18
*** jcoufal_ has quit IRC17:22
*** ralonsoh has quit IRC17:23
openstackgerritJeremy Stanley proposed opendev/system-config master: Add archive signing key for Debian 10/buster  https://review.opendev.org/67358417:25
fungiclarkb: ^17:25
clarkbdonnyd: that should be ok and udev may even auto config ure it17:25
clarkbfungi: thanks17:25
*** jamesmcarthur has joined #openstack-infra17:26
clarkbfungi: why switch from Release and Release.gpg to InRelease?17:29
clarkbBoth should work, just curious if something important changed there17:30
mordredclarkb, fungi: if you're bored, could I get reviews on https://review.opendev.org/#/c/672273/ https://review.opendev.org/#/c/673141 and https://review.opendev.org/#/c/673142 ?17:30
fungiclarkb: https://lists.debian.org/debian-devel/2019/07/msg00153.html17:33
clarkbgotcha way of the future and all that17:34
clarkbmordred: I'm not sure bored is the right word but I'll take a look17:34
*** tesseract has quit IRC17:34
clarkbcentos read only quota has updated17:35
clarkband it appears to be using more that it had before so I'm guessing that implies a successful update and vos release17:35
clarkbfrickler: ^ thank you for catching that17:35
fungiclarkb: to be fair, the timeline proposed by jak was a bit aggressive, but best we switch now rather than be caught by it in the future (we can extend this to the ubuntu repos as well if we see it work out fine)17:36
*** bhavikdbavishi1 has joined #openstack-infra17:36
*** bhavikdbavishi has quit IRC17:37
*** bhavikdbavishi1 is now known as bhavikdbavishi17:37
mordred++17:37
openstackgerritMerged openstack/project-config master: Remove old install-guide-jobs from murano  https://review.opendev.org/67357417:38
*** armax has quit IRC17:40
*** bhavikdbavishi has quit IRC17:41
openstackgerritJeremy Stanley proposed opendev/system-config master: Add archive signing key for Debian 10/buster  https://review.opendev.org/67358417:41
fungiclarkb: mordred: ^ i was wrong, too soon to switch to inrelease files17:41
fungii should have double-checked that the stretch archives included them but they did not17:42
mordredfungi: do17:42
fungiso there's the same change with the old style detached signatures still used17:42
clarkbmordred: dockerfile change +A'd17:43
*** tosky has quit IRC17:43
*** bhavikdbavishi has joined #openstack-infra17:43
mordredclarkb: \o/17:43
clarkber changes I got all 317:44
mordredyeah. thanks! I'm sure you enjoyed those as much as I enjoyed writing them17:44
*** georgk has quit IRC17:55
*** fdegir has quit IRC17:55
*** fdegir has joined #openstack-infra17:56
*** georgk has joined #openstack-infra17:56
openstackgerritClark Boylan proposed zuul/zuul master: Cleanup extra /'s in manifest render view  https://review.opendev.org/67360518:01
*** priteau has quit IRC18:02
*** jcoufal has joined #openstack-infra18:07
*** jcoufal has quit IRC18:07
*** jcoufal has joined #openstack-infra18:07
donnydclarkb it would seem not18:10
*** hamzy has joined #openstack-infra18:11
clarkbdonnyd: seems I can't hit the mirror via ipv4?18:17
donnydShould be back up in a few18:17
donnydjust tinkering with the network to get it working correct on both18:18
*** armax has joined #openstack-infra18:18
donnydlooks like its good on v6, just getting the v4 part sorted18:18
*** ykarel|away has quit IRC18:22
donnydok, should be good to go now on both18:27
*** yamamoto has joined #openstack-infra18:27
openstackgerritMerged opendev/system-config master: Build gerrit images for 2.16 and 3.0 as well  https://review.opendev.org/67227318:29
*** yamamoto has quit IRC18:31
*** harlowja has quit IRC18:33
*** jamesmcarthur has quit IRC18:35
clarkbubuntu RO mirror path now reflects the higher quota18:48
clarkbdonnyd: I'm still getting no route to host via ssh -418:48
donnydyea is still acing wierd18:51
*** bobh has quit IRC18:56
donnydcan you ssh in via the v6 address and check to see what is going on in the instance19:00
clarkbI've got to run the weekly meeting now, but can do that after19:01
donnydok cool19:01
*** diablo_rojo has joined #openstack-infra19:11
smcginnisgitea down?19:13
fungii hope not?19:14
fungichecking19:14
fungihttps://opendev.org/ loads for me19:14
*** eharney has quit IRC19:15
fungihttps://opendev.org/opendev/system-config/ loading for me too19:15
donnydfungi: mordred figured out why were we only getting a v6 address this weekend from the mirror19:16
fungidonnyd: i saw!19:17
fungithat guy has a weird v6th sense19:17
fungismcginnis: was it temporary? or what specifically are you seeing?19:17
*** mriedem has quit IRC19:20
smcginnisfungi: Must have been temporary. I tried to pull up https://opendev.org/openstack/cinder and got a 500 error page.19:21
smcginnisIronically at the same point in the meeting folks were talking about how much more stable things should be now. :)19:22
fungiyeah, after the meeting i can scour the logs. we've been seeing some rootfs timeouts (independent of the fixes we've put in place) which could be at issue19:26
smcginnisLooks happy enough now. Though I've been noticing a lot of slowness.19:27
fungialso the haproxy currently only does a layer 4 tcp port check of the backends, we could step that up19:27
clarkbsmcginnis: we've tracked down the slowness to gitea scanning repos to find when files and dirs were last updated but not caching that data. We made a call for volunteers on the openstack-discuss list when sean mooney pointed it out as we've been focused on reliability over performance currently19:28
fungiassuming the slowness you observe is in browsing file lists of large repositories19:28
smcginnisclarkb: Is the call for volunteers to debug the issue in the gitea source?19:29
clarkbsmcginnis: yes19:29
clarkbcorvus: and I posted a bunch of details on how you can get started doing that if interested (to the same thread)19:30
*** mriedem has joined #openstack-infra19:32
smcginnisIf I find some time that I can devote to that, I'll take a look. Unfortunately pretty low on my priority list at the moment though.19:32
fungiif you happen to know anyone who's interested in hacking on it, please don't hesitate to hook us up19:33
*** bobh has joined #openstack-infra19:36
smcginnis+119:36
*** bhavikdbavishi has quit IRC19:39
openstackgerritMerged opendev/system-config master: Add archive signing key for Debian 10/buster  https://review.opendev.org/67358419:42
*** bobh has quit IRC19:42
*** joeguo has joined #openstack-infra19:42
fungii'll check the mirror-builder once that ^ gets applied and see if the issues with buster-backports are fixed19:43
*** whoami-rajat has quit IRC19:57
clarkbdonnyd: http://paste.openstack.org/show/755135/ ipv4 address seems configured and the routes don't look wrong to me19:57
clarkbhowever you have the actual details to double check for us19:57
donnydthat should be a private address19:58
clarkbI think fungi was trying to direct attach the ip?19:58
clarkbthis was the whole conversation with mordred right? where you don't have to do a private addr to fip and can just direct attach the fip addr?19:58
clarkbfungi: mordred ^ you may want to look at that too19:58
donnydI can got back to that, just need someone to add in the other interface. For whatever reason the bgp-dragent doesn't want to... it won't let me dual stack on the wan side19:59
donnydI can do both19:59
donnydAnd we this weekend had just set up direct attach to the wan side, so no fip19:59
donnydWhich I am happy to do if someone can just make sure the interfaces in the vm are straight20:00
fungiclarkb: yeah, for whatever reason the launch script (via openstacksdk) was unable to magically determine that it should request a fip, so direct attaching on the provider network was easier for bootstrapping purposes20:00
clarkbI'm happy either way, but not sure how to resolve it either direction from where we currently are?20:00
donnydI will detach the private v4 network,  attach a new interface that is directly connected to wan. I just need you to make sure that the two interfaces come up20:01
clarkbsi it not possible to do it with one interface?20:01
clarkb(two will work but we may want to rebuild in that case)20:02
donnydWell that would seem to be the issue with this setup20:03
*** jcoufal has quit IRC20:04
clarkbfwiw the floating IPs did totally work fine the first time around20:04
donnydBefore I was just lying to neutron and essentially redirecting traffic on the edge. well this is the proper way to do ipv6, but not exactly perfect for dual stack20:04
clarkbdonnyd: the proper way is with two interfaces? vexxhost instances have a single itnerface that is dual stack20:04
clarkb(I mean both ways work not sure one is better than the other)20:04
*** diablo_rojo has quit IRC20:06
clarkbdonnyd: fungi: so floating IP attachemnts were not working on launch when tried previously. We then updated to use direct attached public IPs, but then the cloud was updated to make that not work anymore? So the correct way is to use a floating IP again?20:06
clarkbif I'm caught up and that is accurate should we just launch node a new mirror and make sure the floating ip and all of that is configured proeprly for us by the cloud and ansible/sdk20:07
clarkbmordred: ^ you might want to weigh in too20:07
fungifor the record, here's what the interface and routing looks like on a vexxhost mirror http://paste.openstack.org/show/755136/20:07
fungifun that we have a docker0 interface on that mirror20:09
fungimust be left over from the great dockering20:09
donnydwell fips should work fine now20:13
donnydits was a permissions thing before20:14
*** hamzy has quit IRC20:14
clarkbcool in that case my vote is lets just build a new one and make sure that things are configured properly from start to finish and just use FIPs20:14
donnydok20:15
*** ramishra has quit IRC20:15
donnydworks for me20:15
*** xek has quit IRC20:15
*** e0ne has joined #openstack-infra20:16
clarkbcool I'm going to figureo ut lunch but then I can work on that20:16
donnydWhen you launch the mirror, do not boot from volume. That instance will hit a dedicated node, so it won't pick up it's dedicated storage if you boot from volume20:18
donnydenjoy your foods20:18
fungigonna go run a quick grocery errand and be back as soon as i can20:18
clarkbdonnyd: noted20:18
clarkbdonnyd: do I need to call it something specific to get the special dedicated node? or are all instances from that project/user sent to the one hypervisor?20:19
donnydno, that flavor lands on a node that has the proper resources for it20:19
donnydAnd I also disable all the other hypervisors for good measure20:19
donnydIf this cloud did something else, i wouldn't worry about it.. but it doesn't, so i want to see how fast we can make it go... and if any of this makes a measurable impact20:20
*** dpawlik has joined #openstack-infra20:25
clarkbgotcha20:25
openstackgerritJames E. Blair proposed zuul/zuul master: js: correct action names  https://review.opendev.org/67368020:28
*** dpawlik has quit IRC20:35
*** pabelanger has quit IRC20:37
*** mhu has quit IRC20:38
*** sgw has joined #openstack-infra20:39
*** e0ne has quit IRC20:41
*** bobh has joined #openstack-infra20:42
*** e0ne has joined #openstack-infra20:42
*** tdasilva_ has quit IRC20:46
openstackgerritJeff Liu proposed zuul/zuul-operator master: use opendev image building system for zuul-operator test  https://review.opendev.org/67302020:46
*** eharney has joined #openstack-infra20:46
*** tdasilva_ has joined #openstack-infra20:46
ianwclarkb: i just realised i logged the status into the wrong channel last night, but i had a poke at elasticsearch.  there were hung puppet processes taking up 100% cpu (since 2018)20:47
*** hamzy has joined #openstack-infra20:47
ianwand then a whole bunch of shards were stuck in INITALIZING state and had been for days.  so i shutdown and rebooted the nodes one by one, to try and redistribute them, but it didn't work20:48
openstackgerritJeff Liu proposed zuul/zuul-jobs master: Add auth config to kubelet user for buildset registries  https://review.opendev.org/67335120:48
*** bobh has quit IRC20:48
ianwso i ended up setting the replications to 0, then setting it back20:49
ianwanyway, the cluster is now green status (was yellow with all the unallocated shards) and i feel like log searching is much more performant20:49
*** igordc has quit IRC20:50
clarkbianw oh interesting20:52
clarkbianw did you set the replicasback?20:52
ianwclarkb: yep to 220:52
clarkbI think we may inly need 1 replica?20:52
clarkbor wasit 1-> 2?20:53
ianwyeah, it had two replicas ... which i didn't think wasn't strictly necessary, but i wondered if logstash was doing that or something20:53
clarkbbasically we should have two copies of the data not 320:53
clarkbit allows us to do rolling restarts20:53
clarkbbut other than that isnt super useful for our data20:54
openstackgerritJames E. Blair proposed zuul/zuul master: js: don't transform json logfiles  https://review.opendev.org/67368820:54
ianwclarkb: actually no sorry, i set it back to 1, but i think it was at 220:54
ianwclarkb: http://paste.openstack.org/show/755139/20:55
clarkbthat paste lgtm. I woudl expect two copies (one replica)20:56
clarkbnew fn mirror is launching now21:00
ianwclarkb: yeah, before i started it was like -> http://paste.openstack.org/show/755140/21:00
clarkbopenstack.exceptions.SDKException: Error in creating the server (no further information available)21:00
clarkbhuh so the replicas weren't getting made weird21:01
clarkbdonnyd: ^ that exception mean anything to you? maybe I need to delete the old mirror to have enough space for the new one?21:01
ianwclarkb: i dunno, there were messages in some about getting locks and stuff, but then timeouts ... googling it was a hot mess of non answers21:02
ianwor, "we fixed that, please upgrade" :)21:02
clarkbya {'message': 'No valid host was found. ', 'code': 500, 'created': '2019-07-30T21:00:20Z'} says server show so I bet I have to delete the existing mirror21:02
clarkbianw: ya doing what you did was likely the best thing21:02
clarkbbasically tell it to try again21:02
clarkbfungi: donnyd is fn serving jobs now? if so I'll need to disable it before I delete the mirror and try again21:03
ianwclarkb: anyway, that only started because i was pulling stats to see the osc timing :)21:03
clarkbianw: oh neat. I was wondering if anyone would look at that more closely21:03
donnydit is not21:04
clarkbok I'm going to delete the current mirror then, then launch a new one21:05
*** bobh has joined #openstack-infra21:05
donnydhave to delete the old one first21:05
*** bobh has quit IRC21:05
clarkbya deleted both servers (the active and the ERROR'd nodes)21:06
clarkbdonnyd: now: openstack.exceptions.BadRequestException: BadRequestException: 400: Client Error for url: https://openstack.fortnebula.com:13696/v2.0/floatingips.json, Bad floatingip request: Network 3a137b0c-f5da-4ed8-b44d-912a2557aed7 does not contain any IPv4 subnet.21:07
donnydone sec21:07
donnydIm a non admin in that project and i can see the subnet21:09
donnydhttps://www.irccloud.com/pastebin/Im6bZb0P/21:09
clarkbthat is a different network uuid21:10
clarkblet me show some networking info from our side21:10
donnydthose are the subnets21:10
clarkbdonnyd: the third column21:10
donnydhttps://www.irccloud.com/pastebin/CHDSbDs0/21:10
donnydOh, yea.. .you want to use the openstackci network21:10
clarkbgotcha ok21:10
clarkbnow running with --network openstackci21:12
donnydand i think the fip we want is already resevered, so i may need to drop it if the automation doesn't grab it up21:12
donnydits allocated to the project is what i mean21:12
clarkbdonnyd: we can also just update the dns records (I have to use a different server name anyway)21:12
clarkbopenstack.exceptions.BadRequestException: BadRequestException: 400: Client Error for url: https://openstack.fortnebula.com:13696/v2.0/floatingips.json, Bad floatingip request: Network 3a137b0c-f5da-4ed8-b44d-912a2557aed7 does not contain any IPv4 subnet. I still get that21:13
clarkbmordred: ^ this seems like an sdk bug21:13
clarkbif I've told it to use a network that isn't that network why is it trying to use that network?21:13
clarkbIf I list/show the server I see that it is on the openstackci network21:14
clarkbso why does it try to use public_v6 with the fip?21:14
donnydmaybe because it sees that as external as well21:15
donnydlet me try removing the fip allocation so the automation will try itself21:15
clarkbok21:15
donnydhrm... look like the fip was still associated with the old instance21:16
donnydok, its done. try #321:16
donnyd:)21:16
clarkbrerunning now21:16
clarkbafter I delete the server21:16
*** e0ne has quit IRC21:16
clarkbdonnyd: same error21:18
clarkband I don't see an FIPs under floating ip list so I think it is trying to create an fip on that network despite me saying use the other network21:18
donnydwell there is an external v4 and external v6 network21:18
donnydso it must be favoring the v6 network21:18
clarkbearlier monty had said it just picks the first network it sees if you don't specify a network21:19
clarkband public_v6 is listed first for me, but I am also specifying a network21:19
clarkblet me try using the network uuid instead of the name21:19
donnydok21:21
clarkbsame thing. Ok now i have to read code and figure out why it is ignoring my specific network request21:21
*** pkopec has quit IRC21:23
*** gyee has quit IRC21:23
clarkb_add_auto_ip() doesn't accept network information at all21:23
clarkbmordred: ^ what is the correct way to deal with this then?21:23
clarkbcreate_floating_ip() which _add_auto_ip() calls does accept a network parameter21:24
clarkbok its defniitely doing the find first network pattern21:28
donnydI can fix it on my end21:30
donnydi can just make the v6 network look shared instead of external21:30
clarkbdonnyd: or hide it from our tenant?21:31
*** sreejithp has quit IRC21:31
donnydyea, i can do that21:31
clarkbopenstackci-fortnebula can see public_v6 and public_v4 but openstackzuul-fortnebula only see public_v621:31
clarkbI think for both maybe we want to set it up so they only see openstackci network?21:31
clarkb(or do the test nodes need to use a different network?)21:31
donnydwell there has to be the public_v4 network, that is where FIP's come from21:32
clarkbah21:32
donnydbut, the public v6 network does not need to show up as external in that tenant21:32
clarkbI also think that sdk should pass in the network it was told to use in this case21:33
clarkboh I get it now though21:33
clarkbits looking for the network to allocate ipv4 fips out of so it wants to find public_v421:33
clarkbthe real bug is sdk should filter out any networks without an ipv4 subnet21:34
donnydright, we want to to see only one external network21:34
donnydor just connect it after the fact21:34
clarkbwell in theory it is all suppsoed to work in one go21:34
clarkbmordred: ^ I know that will require sdk to look up subnet info, but may be worthwhile to make this work better21:35
ianwoh, looks like iad opendev.org mirror just paniced21:35
corvusDownload error on http://mirror.iad.rax.opendev.org/pypi/simple/pbr/: timed out -- Some packages may not be found!21:35
corvusyeah i just got that in a job21:36
clarkbdonnyd: let me know when you think public_v6 is hidden properly21:36
clarkband I'll give it another go21:36
donnydok21:36
corvusianw: you handling iad?21:37
donnydclarkb: so the v6 network will be made available after (i think we already did this one this way once21:40
donnydSo it will get a v6 ip address, it just won't be routable until after provisioning21:40
ianwcorvus: yep, back up now21:40
donnydok, should be good to go now21:40
ianwwe can probably take it out of rotation, we have a ton of logs from the last few days now for the offline volume issue21:41
ianwwe'll need to really investigate this fscache issue now i think21:41
ianwi'll stop the audit logging on the afs servers, take it out and send some updates in a bit21:41
clarkbdonnyd: will it not be ipv6 via the 16937b20-df93-44e0-bbd8-df452d52111d subnet? this is the openstackci_v6_subnet21:42
clarkbdonnyd: I'm giving launch a try21:42
clarkbdonnyd: fungi mordred fyi https://storyboard.openstack.org/#!/story/200631021:42
donnydyea, it will get a v6 ip21:42
clarkbthat is the sdk bug21:42
*** gyee has joined #openstack-infra21:42
donnydbut that IP address won't route traffic until provisioning is finished21:43
donnydwell i mean won't have a public route21:43
clarkbI see21:43
donnydso we won't have to change anything in the router, but bgp won't advertise the route for the v6 network that the mirror sits on until after provisioning has cleared21:44
clarkbseems to be working now. it is trying to ssh to that ipv4 address21:45
fungiokay, back now, catching up21:45
clarkbhopefully the next time we have to do this the sdk bug above will be fixed and it will just work (tm)21:45
clarkboh bah it failed to build because ipv6 pings failed. But we have a switch to turn that off so I'll rerun it and it should actually work this time21:46
donnydLMK what else i need to do21:47
clarkbdonnyd: I think you are good, we have checks in our launch scripts that ping ipv6 addrs because we've had trouble where ipv6 never works for some hosts in some clouds21:48
clarkbin this case we expect it to not work so I've just passed the flag that says don't check ipv6 even though you have an addr21:48
clarkband it should work this time21:48
clarkbansible is running the base playbook now21:49
donnydWell from the work that was happening earlier, all the signs looked good on my end.. so i am hoping we get to move on from this today to bigger and better things21:49
donnydthe new control plane is working much better than the old one21:49
clarkbfatal: [mirror01.regionone.fortnebula.opendev.org]: UNREACHABLE! => {"changed": false, "msg": "SSH Error: data could not be sent to remote host \"2001:470:e045:2:f816:3eff:feac:7c78\". Make sure this host can be reached over ssh", "unreachable": true}21:50
clarkbI thinkt here is a bug in our flag to ignore ipv621:50
donnydok, i can make v6 work21:51
clarkbno I see the bug21:51
clarkbI'll fix it, I think we are still good21:51
donnydi have about 6 more ways to shave the v6 yak21:52
*** slaweq has quit IRC21:53
ianwfungi: speaking of which, as i think one of the the ipv6 experts, i'd love your thoughts if a person has a /56 from their isp, but wants a VM on their laptop to have ipv6 capabilities BUT also handle being plugged and unplugged from the docking station from wired to wifi transparently21:54
ianwwith ipv4 and nat it just works.  with ipv6 it just doesn't work :/21:55
donnydwith ipv6 you just don't nat21:56
donnydyou route21:56
donnydwhat part of ipv6 doesn't work switching from network to network?21:57
openstackgerritClark Boylan proposed opendev/system-config master: Use public_ipv4 addr when ignoring ipv6  https://review.opendev.org/67370121:58
donnydi run bgp everywhere i want to not hate myself when working with v621:58
clarkbhrm I thought taht was the fix but public_ipv4 doesn't exist?21:59
donnydpublic_v421:59
*** bobh has joined #openstack-infra21:59
*** bobh has quit IRC21:59
clarkbah ok zuul calls it public_ipv421:59
donnydoh i thought you were talking about the network name22:00
*** diablo_rojo has joined #openstack-infra22:00
openstackgerritClark Boylan proposed opendev/system-config master: Use public_v4 addr when ignoring ipv6  https://review.opendev.org/67370122:01
clarkbdonnyd: well sdk docs say it is the name of the var I want too :)22:01
donnydcan't beat that with a stick22:03
clarkband ansible is working now22:03
donnydcan you ping me when its good to go, and i will hook up the v6 side to bgp and we will be off to the races22:04
clarkbwill do22:04
donnydneed to get some foods.. be back later22:04
fungiianw: sounds like you need to be running a router announcement daemon from your gateway there. i would start by carving that /56 cidr up into /64 networks22:04
fungiand then give your router an internal address in one or more of the /64 networks22:05
donnydyes, ipv6 traffic is routed22:06
donnydand advertised22:06
donnydrouting protocols make life easier, but aren't strictly required.. the old control plane for FN had no dynamic routing22:07
fungidepending on the operating system the advertisement daemon could have a variety of names. on my (openbsd) gateways i run rtadvd and tell it what prefix to announce22:07
donnydoh openbsd will surely support what you are looking to do22:08
ianwfungi / donnyd: so i do that (well i have one /64 doing RA).  but i can't add the wifi card to a bridge at all22:08
fungiyeah, openbsd was merely an example. i have no idea what ianw is running on his routers22:08
donnydso your VM's sit behind something?22:09
*** jamesmcarthur has joined #openstack-infra22:09
donnydLibvirt?22:09
donnydor virtualbox?22:09
ianwdonnyd: yep, just my "work vm" which i'm using libvirt/qemu/kvm for22:09
donnydoh, well doesn't libvirt support ipv6 networks?22:10
ianwnot that i could figure out in the same way as "pull your laptop out of the docking station and things just keep working" which is where i'd like to be :)22:10
donnydthings should just keep working22:11
donnydlibvirts network in this case would route instead of nat22:11
donnydand you can surely break a /64 down into multiple networks internally22:11
donnydI am going to find out22:12
openstackgerritClark Boylan proposed opendev/zone-opendev.org master: Networking got weird in fn so we rebuilt the mirror  https://review.opendev.org/67370322:12
clarkbfungi: donnyd ^ ok I think it is done and happy. That is the dns update. Working on the ansible inventory update now22:12
donnydok cool. Thanks for your efforts today ( and every day)22:13
donnydianw: so your use case is you have a single /64 from your provider and you need to do nat like things in an instance on your machine22:13
donnydand fungi you have a /56, so you can break down publically routable ipv6 networks and hand them to your vm's22:14
donnydjust trying to make sure i know what you are both looking for22:14
fungioh. i don't have a /56, ianw does22:15
donnydDo you want the vms to be inbound accessible (globally routable)?22:15
ianwdonnyd: i have a /56, but just one /64 configured ATM.  i want the vm in my laptop to have a global ipv6 address, and work transparently if it's plugged into the docking station via wired ethernet, and via wifi when not22:15
openstackgerritClark Boylan proposed opendev/system-config master: Replace the fn mirror again  https://review.opendev.org/67370422:15
*** panda has quit IRC22:15
clarkbfungi: donnyd ^ and that should update the inventory and have ansible configure the host22:15
donnydare your wifi and lan on different interfaces (L@)22:15
clarkbdonnyd: I think you are good to do the ipv6 change if you need to22:15
donnydare your wifi and lan on different interfaces (L2)22:15
* fungi has no local ipv6 problems other than having no local broadband providers who know wth they're doing so he has to gre a /48 from a tunnel broker22:16
clarkbianw: fungi also https://review.opendev.org/#/c/673701/ was necessary to launch node that host22:16
donnydfungi: HE?22:16
clarkbcare to review that one too?22:16
fungidonnyd: yep22:16
donnydWorks great for me... I have a ridiculously expensive business connection.. and i gets none of the v6 love from my provider either22:17
ianwdonnyd: yep, the docking station has the wired ethernet and the wifi is, well, the wifi card.22:17
clarkbmy home isp just got bought by another isp22:18
clarkbI'm hoping that if they make any improvements native ipv6 is one of them22:18
*** panda has joined #openstack-infra22:18
donnydianw: And they both connect to a switch I assume? your WAP has to be connected somewhere. Is it on the same L2 as your hard wires22:18
ianwdonnyd: yep, just a standard setup like that22:19
*** diablo_rojo has quit IRC22:19
ianwin .au we now have the "national broadband network" where NBN co provides the wires, and you choose a retail ISP ... I chose the one that provides ipv622:20
donnydSo in the network world there should be no difference between interfaces.. You can just set a static ipv6 address on your virb0 and then point routes to it22:20
ianwbut i can't add the wifi card to a bridge22:20
donnydhttps://usercontent.irccloud-cdn.com/file/6n0aep36/Screenshot%20from%202019-07-30%2018-21-55.png22:22
donnydworks from here, so I can assume it's working everywhere22:22
clarkbdonnyd: my test works too22:23
donnydso we just need to wait for DNS to populate and i can turn the nodepool back up to 1122:23
clarkbinfra-root https://review.opendev.org/#/q/topic:fn-mirror-replacement reviews very much appreciated to get fn back in business22:24
clarkbdonnyd: we need dns updated then ansible to run with the inventory updates (that is what will configure afs, apache, lets encrypt and so on)22:24
clarkbthe chagnes are in that link I just pasted22:24
donnydI C22:25
donnydI see what you are saying ianw22:25
*** ekultails has quit IRC22:25
*** eharney has quit IRC22:26
donnydon v4 nat happens at virb0 to whatever and in v6 the info would need to be know in advance.. so in other words your edge router needs to know how to get to virb0 whether you are on lan or wifi.... I wonder if this is something keepalived could handle22:27
donnydkeepalived should be able to handle your static ipv6 address, and just prefer to be on lan when connected... then you can advertise a single route from your edge to that keepalived maintained ip22:28
donnydi will have to do some tinkering and get back to you22:28
*** yamamoto has joined #openstack-infra22:29
*** yamamoto has quit IRC22:33
donnydianw: laptop distro?22:35
*** jamesmcarthur has quit IRC22:39
*** armax has quit IRC22:41
*** mriedem has quit IRC22:45
openstackgerritJames E. Blair proposed zuul/zuul master: Attempt to report CORS and related errors  https://review.opendev.org/67370722:47
corvusfungi: based on https://github.com/merklecounty/rget/issues/1 and https://github.com/merklecounty/rget/blob/master/rgetwellknown/wellknown.go#L118 i think i understand the githubbiness of rget22:50
corvusi think the main thing is the conversion of a given file URL to a hostname22:51
openstackgerritClark Boylan proposed zuul/zuul master: Cleanup extra /'s in manifest render view  https://review.opendev.org/67360522:51
corvusit sort of looks like they wanted a canonical string for a file, which of course can't have "/" in it, but also can't have too many "." in it because letsencrypt has a limitation of 10 domain name components22:52
corvusthis is how github releases are translated: https://github.com/merklecounty/rget/blob/master/rgetwellknown/wellknown.go#L7222:53
clarkbcorvus: ya they are converting urls to cert names22:53
ianwdonnyd: fedora22:53
corvusso that ends up being "some_tag_without_dots.reponame.orgname.github.com"22:53
corvusi think their proposal is that there should be a .well-known/$filename which describes how a site should perform that translation22:54
mnaserare we currently in a state where we can add new projects right now?22:54
*** bobh has joined #openstack-infra22:54
* mnaser wanted to add something to the vexxhost namespace on opendev22:54
clarkbmnaser: yes22:55
mnasersweet, thanks22:55
clarkbmnaser: all backends are replaced now so we are clear to add projects again22:55
corvusso i guess tarballs.opendev.org would have ".well-known/rget.txt" which has some content equivalent to those regexes, and maybe outputs something like "some_tag_without_dots.nova.openstack.openstack.org"22:55
clarkbcorvus: hrm do they enforce dns name limitations too?22:56
corvusthat irks me a bit; it seems that it would be much nicer to not require a file like that, and instead be able to translate any filename into a certname22:56
corvusclarkb: whatcha mean?22:56
corvusclarkb: oh, sorry, my examples all should have used '-' not '_'22:56
clarkbcorvus: 63 characters max between dots and 255 total in the full name22:56
*** tkajinam has joined #openstack-infra22:57
clarkbbut ya also character limitations too22:57
clarkbI guess this is the downside to not using a blockchain22:57
corvusclarkb: i bet so since there are certs involved22:57
clarkbhave to operate within the parameters of the certificate transparency report22:57
fungiit's not entirely clear to me why they can't sign some data that hashes the url and checksum together instead, but i'm no expert in the field22:57
openstackgerritMerged opendev/zone-opendev.org master: Networking got weird in fn so we rebuilt the mirror  https://review.opendev.org/67370322:57
openstackgerritMohammed Naser proposed openstack/project-config master: projects: add vexxhost/openstack-monitoring  https://review.opendev.org/67370822:57
mnaser^ if possible :)22:57
clarkbfungi: because they are tracking it via the certificate transparency project22:58
clarkbfungi: so you have to have unique identifiers that can go into there22:58
fungiand yeah, i guess it all boils down to needing to turn it all into a "domain" so as to fit in an x.509 cn field22:58
clarkbyup22:58
*** eernst has quit IRC22:59
corvusso why can't you just take the path portion of the url and convert the entire thing into a single field?  so https://tarballs.openstack.org/nova/nova-123.tgz becomes nova-nova-123-tgz.tarballs.openstack.org ?23:00
corvusis the concern that multiple paths might produce the same output there?23:00
clarkbcorvus: you'd have to split it with a . every 63 characters, but I think that should be ok?23:00
corvusnova/nova-123.tgz and also nova-nova-123.tgz23:00
clarkboh23:00
*** rcernin has joined #openstack-infra23:01
*** rfolco|ruck has quit IRC23:02
corvusbut is that so bad?  i mean, that's not likely to happen by accident.  perhaps something malicious could be done with that?23:04
clarkbI think the worst case is that you have a confusing set of records that you might have to sort through. I guess someone validating one and not the other path would get an invalid checksum result23:04
corvusspeaking of that... if the .well-known file is on the same site, then that sort of suggests that someone could update the rules for how to reduce a name at any time....  that could very likely lead to the same set of problems.23:05
clarkbthat is a good point23:06
*** eernst has joined #openstack-infra23:08
mnaserhttps://review.opendev.org/#/c/673708/ would love another +2 if possible :>23:10
*** yamamoto has joined #openstack-infra23:11
*** slaweq has joined #openstack-infra23:11
*** eernst has quit IRC23:12
fungiyeah, i do feel like hosting the translation rules on the same site as the files being referenced reintroduces some of the problem rget is trying to solve23:13
*** stevebaker is now known as stevebaker223:13
fungii initially envisioned losslessly encoding the full url to each artifact, but that's not going to be possible for embedding into a x.509 cert cn23:14
fungiunless the url can itself be turned into a checksum23:14
fungisha2-256 the url, break it up with . at the right intervals23:14
fungiclient hashes the url and looks up the resulting cert?23:15
fungiit's technically not lossless, but it's as good as23:15
corvusooh that's nice...23:15
*** slaweq has quit IRC23:15
*** michael-beaver has quit IRC23:15
fungithere's probably some subtle reason that won't work which i'm just not clever enough to imagine at this time of night23:16
openstackgerritMerged opendev/system-config master: Use public_v4 addr when ignoring ipv6  https://review.opendev.org/67370123:19
fungicould be further shortened by reducing from base16 encoding to base32 (not base64 because dns names are case insensitive)23:19
corvusfungi, clarkb: i was about to write this reply to the github issue: http://paste.openstack.org/raw/755144/23:19
*** lseki has quit IRC23:20
corvusshould i leave it at that (for now), or append a further suggestion of using sha2-256 on the url?  or would you like to do that, fungi?23:20
fungii'm happy to follow up with the full url checksum suggestion23:21
fungiwhat you have there lgtm23:21
corvuscool, i'll hit the button on that then23:21
clarkbya that reads fine to me23:21
fungimnaser: no initial repo content you want to import, just start with only a .gitreview file?23:23
mnaserfungi: yep!23:23
fungithen in it goes!23:23
corvushttps://github.com/merklecounty/rget/issues/1 updated23:23
corvusfungi, clarkb: btw, i did try submitting a url, and some git commits showed up in the database as a result: https://github.com/merklecounty/records/commits/master23:25
corvusthe most recent 2 commits are for my submission23:25
corvuslooking at the source code for "rget server" i'm not actually sure how it made it that far23:26
corvusoh you know what23:26
corvusi'd wager a nickel that they're running a slightly older version without this patch: https://github.com/merklecounty/rget/commit/b25e6525911db033b096b023c743a43a672a800223:27
openstackgerritMerged ttygroup/gertty master: Only search files from the most recent revision  https://review.opendev.org/67337023:28
openstackgerritMerged ttygroup/gertty master: Correct file search implementation  https://review.opendev.org/67337123:28
donnydSo we are just waiting for the next ansible run and FN is back in business23:29
openstackgerritMerged opendev/system-config master: Replace the fn mirror again  https://review.opendev.org/67370423:32
*** n-saito has joined #openstack-infra23:34
openstackgerritMerged openstack/project-config master: projects: add vexxhost/openstack-monitoring  https://review.opendev.org/67370823:37
openstackgerritIan Wienand proposed openstack/project-config master: Revert "Enable IAD opendev.org mirror"  https://review.opendev.org/67371023:38
clarkbianw: ^ I approved that as it seems like the sooner that is in the better, but wanted to let you know in case you were only staging that23:39
ianwclarkb: nup, that's good.  what i'll do now is maybe write some scripts to do long recursive parallel wgets and see if we can trigger this oops in a more repeatable fashion23:40
ianwit seems unlikely we'll get anywhere until we have something fairly reproducible23:41
clarkbI have accepted mirror01.regionone.fortnebula.opendev.org's host key on bridge23:41
clarkbansible should run against that and get us an afs in the near future23:41
*** betherly has quit IRC23:41
clarkbianw: ^ maybe you want to watch that and see if it needs a reboot due to unmounted openafs volumes?23:41
clarkbI'm about to go pay attention to my television for a bit23:41
fungiit gets lonely sometimes23:41
ianwclarkb: ok, will check in on it23:41
clarkbfungi: civic duty23:42
ianwwould there be interest in splitting the run_all logs up now that they're separate playbooks into more managable log files?23:42
ianwone for each playbook?  easier to check on things like this, but you do loose a bit of global view23:42
clarkbianw: personally I think I would prefer it if we can clean up the logs so that we reduce the warnings and such23:42
clarkbthen if that results in still unreadable logs maybe consider splitting at that point?23:43
ianwyeah there's a lot of ***'s23:43
ianwwhich i don't think are all necessary.  i feel like we had a patch for that, in the ansible timing plugin thing maybe23:43
fungiclarkb: yup, i know that of which ye speak23:44
*** armax has joined #openstack-infra23:44
ianwhttps://github.com/ansible/ansible/pull/45265 ... i should maybe get back to that, although last time it went into the "changes required" black hole23:45
*** dchen has joined #openstack-infra23:56
*** rh-jelabarre has quit IRC23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!